# Flog Txt Version 1 # Analyzer Version: 2.3.2 # Analyzer Build Date: Nov 22 2018 14:27:27 # Log Creation Date: 27.11.2018 19:48:22.911 Process: id = "1" image_name = "eqbnr.exe" filename = "c:\\users\\ciihmnxmn6ps\\desktop\\eqbnr.exe" page_root = "0x30553000" os_pid = "0x300" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x0" cmd_line = "\"C:\\Users\\CIiHmnxMn6Ps\\Desktop\\eqBNr.exe\" " cur_dir = "C:\\Users\\CIiHmnxMn6Ps\\Desktop\\" os_username = "LHNIWSJ\\CIiHmnxMn6Ps" os_groups = "LHNIWSJ\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00014ee5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 1 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 2 start_va = 0x6640540000 end_va = 0x664055ffff entry_point = 0x0 region_type = private name = "private_0x0000006640540000" filename = "" Region: id = 3 start_va = 0x6640560000 end_va = 0x6640573fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000006640560000" filename = "" Region: id = 4 start_va = 0x6640580000 end_va = 0x664067ffff entry_point = 0x0 region_type = private name = "private_0x0000006640580000" filename = "" Region: id = 5 start_va = 0x6640680000 end_va = 0x6640683fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000006640680000" filename = "" Region: id = 6 start_va = 0x6640690000 end_va = 0x6640690fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000006640690000" filename = "" Region: id = 7 start_va = 0x66406a0000 end_va = 0x66406a1fff entry_point = 0x0 region_type = private name = "private_0x00000066406a0000" filename = "" Region: id = 8 start_va = 0x7ff7af2f0000 end_va = 0x7ff7af312fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff7af2f0000" filename = "" Region: id = 9 start_va = 0x7ff7af31c000 end_va = 0x7ff7af31cfff entry_point = 0x0 region_type = private name = "private_0x00007ff7af31c000" filename = "" Region: id = 10 start_va = 0x7ff7af31e000 end_va = 0x7ff7af31ffff entry_point = 0x0 region_type = private name = "private_0x00007ff7af31e000" filename = "" Region: id = 11 start_va = 0x7ff7afc80000 end_va = 0x7ff7afcb4fff entry_point = 0x7ff7afc80000 region_type = mapped_file name = "eqbnr.exe" filename = "\\Users\\CIiHmnxMn6Ps\\Desktop\\eqBNr.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\eqbnr.exe") Region: id = 12 start_va = 0x7ff8ee380000 end_va = 0x7ff8ee541fff entry_point = 0x7ff8ee380000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 152 start_va = 0x66407f0000 end_va = 0x66408effff entry_point = 0x0 region_type = private name = "private_0x00000066407f0000" filename = "" Region: id = 153 start_va = 0x7ff8eb870000 end_va = 0x7ff8eba4cfff entry_point = 0x7ff8eb870000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 154 start_va = 0x7ff8ee2d0000 end_va = 0x7ff8ee37cfff entry_point = 0x7ff8ee2d0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 155 start_va = 0x6640540000 end_va = 0x664054ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000006640540000" filename = "" Region: id = 156 start_va = 0x66406b0000 end_va = 0x664076dfff entry_point = 0x66406b0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 157 start_va = 0x7ff7af1f0000 end_va = 0x7ff7af2effff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff7af1f0000" filename = "" Region: id = 158 start_va = 0x7ff8e9500000 end_va = 0x7ff8e9577fff entry_point = 0x7ff8e9500000 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\System32\\apphelp.dll" (normalized: "c:\\windows\\system32\\apphelp.dll") Region: id = 159 start_va = 0x6640550000 end_va = 0x6640556fff entry_point = 0x0 region_type = private name = "private_0x0000006640550000" filename = "" Region: id = 160 start_va = 0x66408f0000 end_va = 0x66409effff entry_point = 0x0 region_type = private name = "private_0x00000066408f0000" filename = "" Region: id = 161 start_va = 0x7ff7af31a000 end_va = 0x7ff7af31bfff entry_point = 0x0 region_type = private name = "private_0x00007ff7af31a000" filename = "" Region: id = 162 start_va = 0x7ff8ea790000 end_va = 0x7ff8ea79afff entry_point = 0x7ff8ea790000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 163 start_va = 0x7ff8eac00000 end_va = 0x7ff8eac6afff entry_point = 0x7ff8eac00000 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 164 start_va = 0x7ff8eadd0000 end_va = 0x7ff8eae19fff entry_point = 0x7ff8eadd0000 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 165 start_va = 0x7ff8eae20000 end_va = 0x7ff8eae2efff entry_point = 0x7ff8eae20000 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 166 start_va = 0x7ff8eae30000 end_va = 0x7ff8eae42fff entry_point = 0x7ff8eae30000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 167 start_va = 0x7ff8eb180000 end_va = 0x7ff8eb7a7fff entry_point = 0x7ff8eb180000 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\System32\\windows.storage.dll" (normalized: "c:\\windows\\system32\\windows.storage.dll") Region: id = 168 start_va = 0x7ff8eb7b0000 end_va = 0x7ff8eb862fff entry_point = 0x7ff8eb7b0000 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\System32\\SHCore.dll" (normalized: "c:\\windows\\system32\\shcore.dll") Region: id = 169 start_va = 0x7ff8ebdc0000 end_va = 0x7ff8ebf0dfff entry_point = 0x7ff8ebdc0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 170 start_va = 0x7ff8ec240000 end_va = 0x7ff8ec29afff entry_point = 0x7ff8ec240000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 171 start_va = 0x7ff8ec450000 end_va = 0x7ff8ec575fff entry_point = 0x7ff8ec450000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 172 start_va = 0x7ff8ec580000 end_va = 0x7ff8edaa4fff entry_point = 0x7ff8ec580000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 173 start_va = 0x7ff8edbc0000 end_va = 0x7ff8edd44fff entry_point = 0x7ff8edbc0000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 174 start_va = 0x7ff8edd60000 end_va = 0x7ff8edfdbfff entry_point = 0x7ff8edd60000 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 175 start_va = 0x7ff8edfe0000 end_va = 0x7ff8ee030fff entry_point = 0x7ff8edfe0000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 176 start_va = 0x7ff8ee0b0000 end_va = 0x7ff8ee14cfff entry_point = 0x7ff8ee0b0000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 177 start_va = 0x7ff8ee190000 end_va = 0x7ff8ee235fff entry_point = 0x7ff8ee190000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 178 start_va = 0x6640770000 end_va = 0x6640776fff entry_point = 0x0 region_type = private name = "private_0x0000006640770000" filename = "" Region: id = 179 start_va = 0x66407e0000 end_va = 0x66407effff entry_point = 0x0 region_type = private name = "private_0x00000066407e0000" filename = "" Region: id = 180 start_va = 0x66409f0000 end_va = 0x6640b77fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000066409f0000" filename = "" Region: id = 181 start_va = 0x7ff8ec0c0000 end_va = 0x7ff8ec21bfff entry_point = 0x7ff8ec0c0000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 182 start_va = 0x7ff8ee150000 end_va = 0x7ff8ee185fff entry_point = 0x7ff8ee150000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 183 start_va = 0x6640780000 end_va = 0x6640780fff entry_point = 0x0 region_type = private name = "private_0x0000006640780000" filename = "" Region: id = 184 start_va = 0x6640790000 end_va = 0x6640790fff entry_point = 0x0 region_type = private name = "private_0x0000006640790000" filename = "" Region: id = 185 start_va = 0x6640b80000 end_va = 0x6640d00fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000006640b80000" filename = "" Region: id = 186 start_va = 0x6640d10000 end_va = 0x664210ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000006640d10000" filename = "" Region: id = 187 start_va = 0x6642110000 end_va = 0x6642446fff entry_point = 0x6642110000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 188 start_va = 0x66407a0000 end_va = 0x66407a0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000066407a0000" filename = "" Region: id = 189 start_va = 0x6642450000 end_va = 0x6642525fff entry_point = 0x6642450000 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 190 start_va = 0x7ff8e9680000 end_va = 0x7ff8e9715fff entry_point = 0x7ff8e9680000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 191 start_va = 0x66407b0000 end_va = 0x66407bffff entry_point = 0x0 region_type = private name = "private_0x00000066407b0000" filename = "" Region: id = 192 start_va = 0x7ff8ec300000 end_va = 0x7ff8ec440fff entry_point = 0x7ff8ec300000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 193 start_va = 0x6642450000 end_va = 0x664250cfff entry_point = 0x6642450000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 194 start_va = 0x7ff8e79b0000 end_va = 0x7ff8e7b32fff entry_point = 0x7ff8e79b0000 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 195 start_va = 0x7ff8ebb30000 end_va = 0x7ff8ebbedfff entry_point = 0x7ff8ebb30000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 196 start_va = 0x66407c0000 end_va = 0x66407c0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000066407c0000" filename = "" Region: id = 197 start_va = 0x7ff8edb10000 end_va = 0x7ff8edbb4fff entry_point = 0x7ff8edb10000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 198 start_va = 0x66407d0000 end_va = 0x66407d0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000066407d0000" filename = "" Region: id = 199 start_va = 0x6642450000 end_va = 0x6642453fff entry_point = 0x6642450000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 200 start_va = 0x6642460000 end_va = 0x66424a2fff entry_point = 0x6642460000 region_type = mapped_file name = "{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000f.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x000000000000000f.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000f.db") Region: id = 201 start_va = 0x66424b0000 end_va = 0x66424b3fff entry_point = 0x66424b0000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 202 start_va = 0x66424c0000 end_va = 0x664254afff entry_point = 0x66424c0000 region_type = mapped_file name = "{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db") Region: id = 203 start_va = 0x6642550000 end_va = 0x6642560fff entry_point = 0x6642550000 region_type = mapped_file name = "propsys.dll.mui" filename = "\\Windows\\System32\\en-US\\propsys.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\propsys.dll.mui") Region: id = 204 start_va = 0x6642570000 end_va = 0x6642573fff entry_point = 0x6642570000 region_type = mapped_file name = "cversions.1.db" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db") Region: id = 205 start_va = 0x6642580000 end_va = 0x6642592fff entry_point = 0x6642580000 region_type = mapped_file name = "{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001c.db" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001c.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001c.db") Region: id = 206 start_va = 0x66425a0000 end_va = 0x66425a0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000066425a0000" filename = "" Region: id = 207 start_va = 0x66425b0000 end_va = 0x66426affff entry_point = 0x0 region_type = private name = "private_0x00000066425b0000" filename = "" Region: id = 208 start_va = 0x7ff7af318000 end_va = 0x7ff7af319fff entry_point = 0x0 region_type = private name = "private_0x00007ff7af318000" filename = "" Region: id = 209 start_va = 0x7ff8eaf60000 end_va = 0x7ff8eafa3fff entry_point = 0x7ff8eaf60000 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 210 start_va = 0x7ff8ea620000 end_va = 0x7ff8ea636fff entry_point = 0x7ff8ea620000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 211 start_va = 0x66426b0000 end_va = 0x66427affff entry_point = 0x0 region_type = private name = "private_0x00000066426b0000" filename = "" Region: id = 212 start_va = 0x7ff7af316000 end_va = 0x7ff7af317fff entry_point = 0x0 region_type = private name = "private_0x00007ff7af316000" filename = "" Region: id = 213 start_va = 0x7ff8eabd0000 end_va = 0x7ff8eabf7fff entry_point = 0x7ff8eabd0000 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 214 start_va = 0x7ff8ea270000 end_va = 0x7ff8ea2a2fff entry_point = 0x7ff8ea270000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 215 start_va = 0x66427b0000 end_va = 0x66428affff entry_point = 0x0 region_type = private name = "private_0x00000066427b0000" filename = "" Region: id = 216 start_va = 0x66428b0000 end_va = 0x66429affff entry_point = 0x0 region_type = private name = "private_0x00000066428b0000" filename = "" Region: id = 217 start_va = 0x66429b0000 end_va = 0x6642aaffff entry_point = 0x0 region_type = private name = "private_0x00000066429b0000" filename = "" Region: id = 218 start_va = 0x7ff7af1ec000 end_va = 0x7ff7af1edfff entry_point = 0x0 region_type = private name = "private_0x00007ff7af1ec000" filename = "" Region: id = 219 start_va = 0x7ff7af1ee000 end_va = 0x7ff7af1effff entry_point = 0x0 region_type = private name = "private_0x00007ff7af1ee000" filename = "" Region: id = 220 start_va = 0x7ff7af314000 end_va = 0x7ff7af315fff entry_point = 0x0 region_type = private name = "private_0x00007ff7af314000" filename = "" Region: id = 221 start_va = 0x7ff8e0a60000 end_va = 0x7ff8e0bf6fff entry_point = 0x7ff8e0a60000 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\System32\\urlmon.dll" (normalized: "c:\\windows\\system32\\urlmon.dll") Region: id = 222 start_va = 0x7ff8e3c30000 end_va = 0x7ff8e3fa5fff entry_point = 0x7ff8e3c30000 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" (normalized: "c:\\windows\\system32\\iertutil.dll") Region: id = 223 start_va = 0x7ff8ea9d0000 end_va = 0x7ff8ea9fbfff entry_point = 0x7ff8ea9d0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 224 start_va = 0x6642570000 end_va = 0x6642570fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000006642570000" filename = "" Region: id = 238 start_va = 0x66407c0000 end_va = 0x66407cffff entry_point = 0x0 region_type = private name = "private_0x00000066407c0000" filename = "" Region: id = 239 start_va = 0x6642ab0000 end_va = 0x6642ac5fff entry_point = 0x0 region_type = private name = "private_0x0000006642ab0000" filename = "" Region: id = 240 start_va = 0x66407c0000 end_va = 0x66407c7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000066407c0000" filename = "" Region: id = 241 start_va = 0x66407c0000 end_va = 0x66407c7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000066407c0000" filename = "" Region: id = 242 start_va = 0x66407c0000 end_va = 0x66407c7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000066407c0000" filename = "" Region: id = 243 start_va = 0x66407c0000 end_va = 0x66407c7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000066407c0000" filename = "" Region: id = 244 start_va = 0x66407c0000 end_va = 0x66407c7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000066407c0000" filename = "" Region: id = 245 start_va = 0x66407c0000 end_va = 0x66407c7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000066407c0000" filename = "" Region: id = 246 start_va = 0x66407c0000 end_va = 0x66407c7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000066407c0000" filename = "" Region: id = 247 start_va = 0x66407c0000 end_va = 0x66407c7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000066407c0000" filename = "" Region: id = 248 start_va = 0x66407c0000 end_va = 0x66407c7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000066407c0000" filename = "" Region: id = 249 start_va = 0x66407c0000 end_va = 0x66407c7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000066407c0000" filename = "" Region: id = 250 start_va = 0x66407c0000 end_va = 0x66407c7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000066407c0000" filename = "" Region: id = 251 start_va = 0x66407c0000 end_va = 0x66407c7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000066407c0000" filename = "" Region: id = 252 start_va = 0x66407c0000 end_va = 0x66407c7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000066407c0000" filename = "" Region: id = 253 start_va = 0x66407c0000 end_va = 0x66407c7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000066407c0000" filename = "" Region: id = 254 start_va = 0x66407c0000 end_va = 0x66407c7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000066407c0000" filename = "" Region: id = 255 start_va = 0x66407c0000 end_va = 0x66407c7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000066407c0000" filename = "" Region: id = 256 start_va = 0x66407c0000 end_va = 0x66407c7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000066407c0000" filename = "" Region: id = 257 start_va = 0x66407c0000 end_va = 0x66407c7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000066407c0000" filename = "" Region: id = 258 start_va = 0x66407c0000 end_va = 0x66407c7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000066407c0000" filename = "" Region: id = 259 start_va = 0x66407c0000 end_va = 0x66407c7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000066407c0000" filename = "" Region: id = 260 start_va = 0x66407c0000 end_va = 0x66407c7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000066407c0000" filename = "" Region: id = 261 start_va = 0x66407c0000 end_va = 0x66407c7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000066407c0000" filename = "" Region: id = 262 start_va = 0x66407c0000 end_va = 0x66407c7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000066407c0000" filename = "" Region: id = 263 start_va = 0x66407c0000 end_va = 0x66407c7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000066407c0000" filename = "" Region: id = 264 start_va = 0x66407c0000 end_va = 0x66407c7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000066407c0000" filename = "" Region: id = 265 start_va = 0x66407c0000 end_va = 0x66407c7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000066407c0000" filename = "" Region: id = 266 start_va = 0x66407c0000 end_va = 0x66407c7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000066407c0000" filename = "" Region: id = 267 start_va = 0x66407c0000 end_va = 0x66407c7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000066407c0000" filename = "" Region: id = 268 start_va = 0x66407c0000 end_va = 0x66407c7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000066407c0000" filename = "" Region: id = 274 start_va = 0x66407c0000 end_va = 0x66407c7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000066407c0000" filename = "" Region: id = 275 start_va = 0x66407c0000 end_va = 0x66407c7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000066407c0000" filename = "" Region: id = 276 start_va = 0x66407c0000 end_va = 0x66407c7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000066407c0000" filename = "" Region: id = 277 start_va = 0x66407c0000 end_va = 0x66407c7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000066407c0000" filename = "" Region: id = 288 start_va = 0x66407c0000 end_va = 0x66407c7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000066407c0000" filename = "" Region: id = 289 start_va = 0x66407c0000 end_va = 0x66407c7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000066407c0000" filename = "" Region: id = 290 start_va = 0x66407c0000 end_va = 0x66407c7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000066407c0000" filename = "" Region: id = 291 start_va = 0x66407c0000 end_va = 0x66407c7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000066407c0000" filename = "" Region: id = 292 start_va = 0x66407c0000 end_va = 0x66407c7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000066407c0000" filename = "" Region: id = 293 start_va = 0x66407c0000 end_va = 0x66407c7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000066407c0000" filename = "" Region: id = 294 start_va = 0x66407c0000 end_va = 0x66407c7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000066407c0000" filename = "" Region: id = 295 start_va = 0x66407c0000 end_va = 0x66407c7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000066407c0000" filename = "" Region: id = 296 start_va = 0x66407c0000 end_va = 0x66407c7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000066407c0000" filename = "" Region: id = 297 start_va = 0x66407c0000 end_va = 0x66407c7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000066407c0000" filename = "" Region: id = 298 start_va = 0x66407c0000 end_va = 0x66407c7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000066407c0000" filename = "" Region: id = 299 start_va = 0x66407c0000 end_va = 0x66407c7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000066407c0000" filename = "" Region: id = 300 start_va = 0x66407c0000 end_va = 0x66407c7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000066407c0000" filename = "" Region: id = 301 start_va = 0x66407c0000 end_va = 0x66407c7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000066407c0000" filename = "" Region: id = 302 start_va = 0x66407c0000 end_va = 0x66407c7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000066407c0000" filename = "" Region: id = 303 start_va = 0x66407c0000 end_va = 0x66407c7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000066407c0000" filename = "" Region: id = 304 start_va = 0x66407c0000 end_va = 0x66407c7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000066407c0000" filename = "" Region: id = 305 start_va = 0x66407c0000 end_va = 0x66407c7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000066407c0000" filename = "" Region: id = 306 start_va = 0x66407c0000 end_va = 0x66407c7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000066407c0000" filename = "" Region: id = 307 start_va = 0x66407c0000 end_va = 0x66407c7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000066407c0000" filename = "" Region: id = 308 start_va = 0x66407c0000 end_va = 0x66407c7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000066407c0000" filename = "" Region: id = 309 start_va = 0x66407c0000 end_va = 0x66407c7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000066407c0000" filename = "" Region: id = 310 start_va = 0x66407c0000 end_va = 0x66407c7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000066407c0000" filename = "" Region: id = 311 start_va = 0x66407c0000 end_va = 0x66407c7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000066407c0000" filename = "" Region: id = 312 start_va = 0x66407c0000 end_va = 0x66407c7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000066407c0000" filename = "" Thread: id = 1 os_tid = 0x630 [0059.701] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x7ff8eb870000 [0059.702] GetProcAddress (hModule=0x7ff8eb870000, lpProcName="InitializeCriticalSectionEx") returned 0x7ff8eb8c3900 [0059.702] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x7ff8eb870000 [0059.702] GetProcAddress (hModule=0x7ff8eb870000, lpProcName="FlsAlloc") returned 0x7ff8eb8d4580 [0059.702] GetProcAddress (hModule=0x7ff8eb870000, lpProcName="FlsSetValue") returned 0x7ff8eb8c2900 [0059.702] LoadLibraryExW (lpLibFileName="advapi32", hFile=0x0, dwFlags=0x800) returned 0x7ff8ee190000 [0059.702] GetProcAddress (hModule=0x7ff8ee190000, lpProcName="EventRegister") returned 0x7ff8ee3b8ff0 [0059.703] EtwEventRegister (in: ProviderId=0x7ff7afca4058, EnableCallback=0x7ff7afc8107c, CallbackContext=0x7ff7afca4030, RegHandle=0x7ff7afca4050 | out: RegHandle=0x7ff7afca4050) returned 0x0 [0059.703] GetProcAddress (hModule=0x7ff8ee190000, lpProcName="EventSetInformation") returned 0x7ff8ee38e180 [0059.703] EtwEventSetInformation (RegHandle=0x30006640804f80, InformationClass=0x2, EventInformation=0x7ff7afca1cc0, InformationLength=0x2b) returned 0x0 [0059.704] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x7ff8eb870000 [0059.704] GetProcAddress (hModule=0x7ff8eb870000, lpProcName="InitializeCriticalSectionEx") returned 0x7ff8eb8c3900 [0059.704] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x7ff8eb870000 [0059.704] GetProcAddress (hModule=0x7ff8eb870000, lpProcName="FlsAlloc") returned 0x7ff8eb8d4580 [0059.704] GetLastError () returned 0x36b7 [0059.704] GetProcAddress (hModule=0x7ff8eb870000, lpProcName="FlsGetValue") returned 0x7ff8eb8b8e40 [0059.704] GetProcAddress (hModule=0x7ff8eb870000, lpProcName="FlsSetValue") returned 0x7ff8eb8c2900 [0059.705] SetLastError (dwErrCode=0x36b7) [0059.706] GetStartupInfoW (in: lpStartupInfo=0x664067f990 | out: lpStartupInfo=0x664067f990*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\eqBNr.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) [0059.706] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0059.706] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0059.706] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0059.706] GetCommandLineA () returned="\"C:\\Users\\CIiHmnxMn6Ps\\Desktop\\eqBNr.exe\" " [0059.706] GetCommandLineW () returned="\"C:\\Users\\CIiHmnxMn6Ps\\Desktop\\eqBNr.exe\" " [0059.706] GetLastError () returned 0x36b7 [0059.706] SetLastError (dwErrCode=0x36b7) [0059.706] GetLastError () returned 0x36b7 [0059.706] SetLastError (dwErrCode=0x36b7) [0059.706] GetACP () returned 0x4e4 [0059.706] IsValidCodePage (CodePage=0x4e4) returned 1 [0059.706] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x664067f960 | out: lpCPInfo=0x664067f960) returned 1 [0059.706] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x664067f200 | out: lpCPInfo=0x664067f200) returned 1 [0059.706] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x664067f220, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0059.707] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x664067f220, cbMultiByte=256, lpWideCharStr=0x664067ef50, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ䁧f") returned 256 [0059.707] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ䁧f", cchSrc=256, lpCharType=0x664067f520 | out: lpCharType=0x664067f520) returned 1 [0059.707] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x664067f220, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0059.707] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x664067f220, cbMultiByte=256, lpWideCharStr=0x664067eef0, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ") returned 256 [0059.707] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x800) returned 0x7ff8eb870000 [0059.707] GetProcAddress (hModule=0x7ff8eb870000, lpProcName="LCMapStringEx") returned 0x7ff8eb88a930 [0059.707] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0059.707] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ", cchSrc=256, lpDestStr=0x664067ece0, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ쳌") returned 256 [0059.707] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ쳌", cchWideChar=256, lpMultiByteStr=0x664067f320, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿÐõg@f", lpUsedDefaultChar=0x0) returned 256 [0059.707] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x664067f220, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0059.707] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x664067f220, cbMultiByte=256, lpWideCharStr=0x664067eef0, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ") returned 256 [0059.707] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0059.707] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ", cchSrc=256, lpDestStr=0x664067ece0, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸ쳌") returned 256 [0059.707] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸ쳌", cchWideChar=256, lpMultiByteStr=0x664067f420, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9fH\x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02h\x02(\x02(\x02(\x02(\x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x81\x03\x81\x03\x81\x03\x81\x03\x81\x03\x81\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x82\x03\x82\x03\x82\x03\x82\x03\x82\x03\x82\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x10\x02\x10\x02\x10\x02\x10\x02 \x02", lpUsedDefaultChar=0x0) returned 256 [0059.708] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x7ff7afcab390, nSize=0x104 | out: lpFilename="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\eqBNr.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\eqbnr.exe")) returned 0x27 [0059.708] RtlInitializeSListHead (in: ListHead=0x7ff7afcab1a0 | out: ListHead=0x7ff7afcab1a0) [0059.708] GetLastError () returned 0x0 [0059.708] SetLastError (dwErrCode=0x0) [0059.708] GetEnvironmentStringsW () returned 0x6640807fb0* [0059.708] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1292, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1292 [0059.708] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1292, lpMultiByteStr=0x66408089d0, cbMultiByte=1292, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1292 [0059.708] FreeEnvironmentStringsW (penv=0x6640807fb0) returned 1 [0059.709] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x7ff7afc88bc4) returned 0x0 [0059.709] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x664067f870, nSize=0x104 | out: lpFilename="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\eqBNr.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\eqbnr.exe")) returned 0x27 [0059.709] GetStartupInfoW (in: lpStartupInfo=0x664067fa20 | out: lpStartupInfo=0x664067fa20*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\eqBNr.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) [0059.736] Sleep (dwMilliseconds=0x1388) [0064.757] GetCommandLineW () returned="\"C:\\Users\\CIiHmnxMn6Ps\\Desktop\\eqBNr.exe\" " [0064.757] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\CIiHmnxMn6Ps\\Desktop\\eqBNr.exe\" ", pNumArgs=0x66405be218 | out: pNumArgs=0x66405be218) returned 0x66407f69a0*="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\eqBNr.exe" [0064.757] DeleteFileW (lpFileName=0x0) returned 0 [0064.757] LocalFree (hMem=0x66407f69a0) returned 0x0 [0064.757] GetVersionExW (in: lpVersionInformation=0x66405be220*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x66405be220*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x2, dwBuildNumber=0x23f0, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0064.758] GetWindowsDirectoryW (in: lpBuffer=0x66405bd970, uSize=0x64 | out: lpBuffer="C:\\Windows") returned 0xa [0064.758] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x7ff8ee2d0000 [0064.759] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="IsWow64Process") returned 0x7ff8ee2ee960 [0064.759] GetCurrentProcess () returned 0xffffffffffffffff [0064.759] IsWow64Process (in: hProcess=0xffffffffffffffff, Wow64Process=0x66405bd910 | out: Wow64Process=0x66405bd910) returned 1 [0064.759] FreeLibrary (hLibModule=0x7ff8ee2d0000) returned 1 [0064.759] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x66405bdf40, nSize=0x140 | out: lpFilename="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\eqBNr.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\eqbnr.exe")) returned 0x27 [0064.759] ShellExecuteW (hwnd=0x0, lpOperation=0x0, lpFile="C:\\Windows\\System32\\cmd.exe", lpParameters="/C REG ADD \"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run\" /v \"svchos\" /t REG_SZ /d \"C:\\Users\\CIiHmnxMn6Ps\\Desktop\\eqBNr.exe\" /f", lpDirectory=0x0, nShowCmd=0) returned 0x2a [0070.162] SetLastError (dwErrCode=0x0) [0070.162] GetCurrentThread () returned 0xfffffffffffffffe [0070.162] OpenThreadToken (in: ThreadHandle=0xfffffffffffffffe, DesiredAccess=0x28, OpenAsSelf=0, TokenHandle=0x66405be210 | out: TokenHandle=0x66405be210*=0x0) returned 0 [0070.162] GetLastError () returned 0x3f0 [0070.162] ImpersonateSelf (ImpersonationLevel=0x2) returned 1 [0070.163] GetCurrentThread () returned 0xfffffffffffffffe [0070.163] OpenThreadToken (in: ThreadHandle=0xfffffffffffffffe, DesiredAccess=0x28, OpenAsSelf=0, TokenHandle=0x66405be210 | out: TokenHandle=0x66405be210*=0x2a0) returned 1 [0070.163] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x66405be1c0 | out: lpLuid=0x66405be1c0*(LowPart=0x14, HighPart=0)) returned 1 [0070.165] AdjustTokenPrivileges (in: TokenHandle=0x2a0, DisableAllPrivileges=0, NewState=0x66405be1c8*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0070.165] GetLastError () returned 0x0 [0070.166] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2cc [0070.172] Process32FirstW (in: hSnapshot=0x2cc, lppe=0x66405bdf70 | out: lppe=0x66405bdf70*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0070.173] Process32NextW (in: hSnapshot=0x2cc, lppe=0x66405bdf70 | out: lppe=0x66405bdf70*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x68, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0070.174] SetLastError (dwErrCode=0x0) [0070.174] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0070.174] CloseHandle (hObject=0x0) returned 0 [0070.174] Process32NextW (in: hSnapshot=0x2cc, lppe=0x66405bdf70 | out: lppe=0x66405bdf70*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x10c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0070.175] SetLastError (dwErrCode=0x0) [0070.175] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x10c) returned 0x0 [0070.175] CloseHandle (hObject=0x0) returned 0 [0070.175] Process32NextW (in: hSnapshot=0x2cc, lppe=0x66405bdf70 | out: lppe=0x66405bdf70*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x158, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x150, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0070.176] SetLastError (dwErrCode=0x0) [0070.176] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x158) returned 0x0 [0070.176] CloseHandle (hObject=0x0) returned 0 [0070.176] Process32NextW (in: hSnapshot=0x2cc, lppe=0x66405bdf70 | out: lppe=0x66405bdf70*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x150, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0070.177] SetLastError (dwErrCode=0x0) [0070.177] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x198) returned 0x0 [0070.177] CloseHandle (hObject=0x0) returned 0 [0070.177] Process32NextW (in: hSnapshot=0x2cc, lppe=0x66405bdf70 | out: lppe=0x66405bdf70*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0070.178] SetLastError (dwErrCode=0x0) [0070.178] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x1a0) returned 0x0 [0070.178] CloseHandle (hObject=0x0) returned 0 [0070.178] Process32NextW (in: hSnapshot=0x2cc, lppe=0x66405bdf70 | out: lppe=0x66405bdf70*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x190, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0070.189] SetLastError (dwErrCode=0x0) [0070.189] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x1d0) returned 0x2c8 [0070.189] OpenProcessToken (in: ProcessHandle=0x2c8, DesiredAccess=0x20008, TokenHandle=0x66405bdf60 | out: TokenHandle=0x66405bdf60*=0x2c4) returned 1 [0070.189] GetTokenInformation (in: TokenHandle=0x2c4, TokenInformationClass=0x1, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x66405bdf50 | out: TokenInformation=0x0, ReturnLength=0x66405bdf50) returned 0 [0070.189] GetTokenInformation (in: TokenHandle=0x2c4, TokenInformationClass=0x1, TokenInformation=0x66408466d0, TokenInformationLength=0x1c, ReturnLength=0x66405bdf50 | out: TokenInformation=0x66408466d0, ReturnLength=0x66405bdf50) returned 1 [0070.189] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x66408466e0*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0x12), Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 0 [0070.190] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x66408466e0*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0x12), Name=0x664083d740, cchName=0x66405bdf58, ReferencedDomainName=0x6640846790, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name="SYSTEM", cchName=0x66405bdf58, ReferencedDomainName="NT AUTHORITY", cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 1 [0070.191] CloseHandle (hObject=0x2c8) returned 1 [0070.191] Process32NextW (in: hSnapshot=0x2cc, lppe=0x66405bdf70 | out: lppe=0x66405bdf70*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x198, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0070.192] SetLastError (dwErrCode=0x0) [0070.192] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x1e8) returned 0x0 [0070.192] CloseHandle (hObject=0x0) returned 0 [0070.192] Process32NextW (in: hSnapshot=0x2cc, lppe=0x66405bdf70 | out: lppe=0x66405bdf70*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x198, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0070.193] SetLastError (dwErrCode=0x0) [0070.193] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x1f0) returned 0x2c8 [0070.193] OpenProcessToken (in: ProcessHandle=0x2c8, DesiredAccess=0x20008, TokenHandle=0x66405bdf60 | out: TokenHandle=0x66405bdf60*=0x2c0) returned 1 [0070.193] GetTokenInformation (in: TokenHandle=0x2c0, TokenInformationClass=0x1, TokenInformation=0x66408466d0, TokenInformationLength=0x0, ReturnLength=0x66405bdf50 | out: TokenInformation=0x66408466d0, ReturnLength=0x66405bdf50) returned 0 [0070.193] GetTokenInformation (in: TokenHandle=0x2c0, TokenInformationClass=0x1, TokenInformation=0x6640846190, TokenInformationLength=0x1c, ReturnLength=0x66405bdf50 | out: TokenInformation=0x6640846190, ReturnLength=0x66405bdf50) returned 1 [0070.193] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x66408461a0*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0x12), Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 0 [0070.194] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x66408461a0*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0x12), Name=0x664083d7c0, cchName=0x66405bdf58, ReferencedDomainName=0x6640846130, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name="SYSTEM", cchName=0x66405bdf58, ReferencedDomainName="NT AUTHORITY", cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 1 [0070.195] CloseHandle (hObject=0x2c8) returned 1 [0070.195] Process32NextW (in: hSnapshot=0x2cc, lppe=0x66405bdf70 | out: lppe=0x66405bdf70*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x248, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0070.196] SetLastError (dwErrCode=0x0) [0070.196] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x248) returned 0x2c8 [0070.196] OpenProcessToken (in: ProcessHandle=0x2c8, DesiredAccess=0x20008, TokenHandle=0x66405bdf60 | out: TokenHandle=0x66405bdf60*=0x2c0) returned 0 [0070.196] CloseHandle (hObject=0x2c8) returned 1 [0070.196] Process32NextW (in: hSnapshot=0x2cc, lppe=0x66405bdf70 | out: lppe=0x66405bdf70*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0070.197] SetLastError (dwErrCode=0x0) [0070.197] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x268) returned 0x2c8 [0070.197] OpenProcessToken (in: ProcessHandle=0x2c8, DesiredAccess=0x20008, TokenHandle=0x66405bdf60 | out: TokenHandle=0x66405bdf60*=0x2c0) returned 0 [0070.197] CloseHandle (hObject=0x2c8) returned 1 [0070.198] Process32NextW (in: hSnapshot=0x2cc, lppe=0x66405bdf70 | out: lppe=0x66405bdf70*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0070.198] SetLastError (dwErrCode=0x0) [0070.198] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x2c8) returned 0x2c8 [0070.198] OpenProcessToken (in: ProcessHandle=0x2c8, DesiredAccess=0x20008, TokenHandle=0x66405bdf60 | out: TokenHandle=0x66405bdf60*=0x2c0) returned 0 [0070.198] CloseHandle (hObject=0x2c8) returned 1 [0070.199] Process32NextW (in: hSnapshot=0x2cc, lppe=0x66405bdf70 | out: lppe=0x66405bdf70*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x44, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0070.199] SetLastError (dwErrCode=0x0) [0070.199] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x330) returned 0x2c8 [0070.199] OpenProcessToken (in: ProcessHandle=0x2c8, DesiredAccess=0x20008, TokenHandle=0x66405bdf60 | out: TokenHandle=0x66405bdf60*=0x298) returned 1 [0070.199] GetTokenInformation (in: TokenHandle=0x298, TokenInformationClass=0x1, TokenInformation=0x6640846190, TokenInformationLength=0x0, ReturnLength=0x66405bdf50 | out: TokenInformation=0x6640846190, ReturnLength=0x66405bdf50) returned 0 [0070.200] GetTokenInformation (in: TokenHandle=0x298, TokenInformationClass=0x1, TokenInformation=0x6640846820, TokenInformationLength=0x1c, ReturnLength=0x66405bdf50 | out: TokenInformation=0x6640846820, ReturnLength=0x66405bdf50) returned 1 [0070.200] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x6640846830*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0x12), Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 0 [0070.200] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x6640846830*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0x12), Name=0x664083d240, cchName=0x66405bdf58, ReferencedDomainName=0x6640846610, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name="SYSTEM", cchName=0x66405bdf58, ReferencedDomainName="NT AUTHORITY", cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 1 [0070.201] CloseHandle (hObject=0x2c8) returned 1 [0070.201] Process32NextW (in: hSnapshot=0x2cc, lppe=0x66405bdf70 | out: lppe=0x66405bdf70*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0070.202] SetLastError (dwErrCode=0x0) [0070.202] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x338) returned 0x2c8 [0070.202] OpenProcessToken (in: ProcessHandle=0x2c8, DesiredAccess=0x20008, TokenHandle=0x66405bdf60 | out: TokenHandle=0x66405bdf60*=0x298) returned 0 [0070.202] CloseHandle (hObject=0x2c8) returned 1 [0070.202] Process32NextW (in: hSnapshot=0x2cc, lppe=0x66405bdf70 | out: lppe=0x66405bdf70*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0070.203] SetLastError (dwErrCode=0x0) [0070.203] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x360) returned 0x2c8 [0070.203] OpenProcessToken (in: ProcessHandle=0x2c8, DesiredAccess=0x20008, TokenHandle=0x66405bdf60 | out: TokenHandle=0x66405bdf60*=0x298) returned 0 [0070.203] CloseHandle (hObject=0x2c8) returned 1 [0070.203] Process32NextW (in: hSnapshot=0x2cc, lppe=0x66405bdf70 | out: lppe=0x66405bdf70*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0070.204] SetLastError (dwErrCode=0x0) [0070.204] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x368) returned 0x2c8 [0070.204] OpenProcessToken (in: ProcessHandle=0x2c8, DesiredAccess=0x20008, TokenHandle=0x66405bdf60 | out: TokenHandle=0x66405bdf60*=0x294) returned 1 [0070.204] GetTokenInformation (in: TokenHandle=0x294, TokenInformationClass=0x1, TokenInformation=0x6640846820, TokenInformationLength=0x0, ReturnLength=0x66405bdf50 | out: TokenInformation=0x6640846820, ReturnLength=0x66405bdf50) returned 0 [0070.204] GetTokenInformation (in: TokenHandle=0x294, TokenInformationClass=0x1, TokenInformation=0x6640846280, TokenInformationLength=0x1c, ReturnLength=0x66405bdf50 | out: TokenInformation=0x6640846280, ReturnLength=0x66405bdf50) returned 1 [0070.205] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x6640846290*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0x12), Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 0 [0070.209] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x6640846290*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0x12), Name=0x664083d440, cchName=0x66405bdf58, ReferencedDomainName=0x6640846550, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name="SYSTEM", cchName=0x66405bdf58, ReferencedDomainName="NT AUTHORITY", cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 1 [0070.210] CloseHandle (hObject=0x2c8) returned 1 [0070.210] Process32NextW (in: hSnapshot=0x2cc, lppe=0x66405bdf70 | out: lppe=0x66405bdf70*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0070.211] SetLastError (dwErrCode=0x0) [0070.211] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x3a0) returned 0x2c8 [0070.211] OpenProcessToken (in: ProcessHandle=0x2c8, DesiredAccess=0x20008, TokenHandle=0x66405bdf60 | out: TokenHandle=0x66405bdf60*=0x294) returned 0 [0070.211] CloseHandle (hObject=0x2c8) returned 1 [0070.211] Process32NextW (in: hSnapshot=0x2cc, lppe=0x66405bdf70 | out: lppe=0x66405bdf70*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0070.212] SetLastError (dwErrCode=0x0) [0070.212] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x2a0) returned 0x2c8 [0070.212] OpenProcessToken (in: ProcessHandle=0x2c8, DesiredAccess=0x20008, TokenHandle=0x66405bdf60 | out: TokenHandle=0x66405bdf60*=0x294) returned 0 [0070.212] CloseHandle (hObject=0x2c8) returned 1 [0070.212] Process32NextW (in: hSnapshot=0x2cc, lppe=0x66405bdf70 | out: lppe=0x66405bdf70*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0070.213] SetLastError (dwErrCode=0x0) [0070.213] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x230) returned 0x2c8 [0070.213] OpenProcessToken (in: ProcessHandle=0x2c8, DesiredAccess=0x20008, TokenHandle=0x66405bdf60 | out: TokenHandle=0x66405bdf60*=0x294) returned 0 [0070.213] CloseHandle (hObject=0x2c8) returned 1 [0070.213] Process32NextW (in: hSnapshot=0x2cc, lppe=0x66405bdf70 | out: lppe=0x66405bdf70*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x428, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0070.214] SetLastError (dwErrCode=0x0) [0070.214] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x428) returned 0x2c8 [0070.214] OpenProcessToken (in: ProcessHandle=0x2c8, DesiredAccess=0x20008, TokenHandle=0x66405bdf60 | out: TokenHandle=0x66405bdf60*=0x278) returned 1 [0070.214] GetTokenInformation (in: TokenHandle=0x278, TokenInformationClass=0x1, TokenInformation=0x6640846280, TokenInformationLength=0x0, ReturnLength=0x66405bdf50 | out: TokenInformation=0x6640846280, ReturnLength=0x66405bdf50) returned 0 [0070.214] GetTokenInformation (in: TokenHandle=0x278, TokenInformationClass=0x1, TokenInformation=0x6640846790, TokenInformationLength=0x1c, ReturnLength=0x66405bdf50 | out: TokenInformation=0x6640846790, ReturnLength=0x66405bdf50) returned 1 [0070.214] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x66408467a0*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0x12), Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 0 [0070.216] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x66408467a0*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0x12), Name=0x664083d3e0, cchName=0x66405bdf58, ReferencedDomainName=0x66408466d0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name="SYSTEM", cchName=0x66405bdf58, ReferencedDomainName="NT AUTHORITY", cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 1 [0070.217] CloseHandle (hObject=0x2c8) returned 1 [0070.217] Process32NextW (in: hSnapshot=0x2cc, lppe=0x66405bdf70 | out: lppe=0x66405bdf70*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0070.218] SetLastError (dwErrCode=0x0) [0070.218] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x444) returned 0x2c8 [0070.218] OpenProcessToken (in: ProcessHandle=0x2c8, DesiredAccess=0x20008, TokenHandle=0x66405bdf60 | out: TokenHandle=0x66405bdf60*=0x278) returned 0 [0070.218] CloseHandle (hObject=0x2c8) returned 1 [0070.218] Process32NextW (in: hSnapshot=0x2cc, lppe=0x66405bdf70 | out: lppe=0x66405bdf70*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0070.219] SetLastError (dwErrCode=0x0) [0070.219] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x4e8) returned 0x2c8 [0070.219] OpenProcessToken (in: ProcessHandle=0x2c8, DesiredAccess=0x20008, TokenHandle=0x66405bdf60 | out: TokenHandle=0x66405bdf60*=0x2b4) returned 1 [0070.219] GetTokenInformation (in: TokenHandle=0x2b4, TokenInformationClass=0x1, TokenInformation=0x6640846790, TokenInformationLength=0x0, ReturnLength=0x66405bdf50 | out: TokenInformation=0x6640846790, ReturnLength=0x66405bdf50) returned 0 [0070.219] GetTokenInformation (in: TokenHandle=0x2b4, TokenInformationClass=0x1, TokenInformation=0x6640846280, TokenInformationLength=0x1c, ReturnLength=0x66405bdf50 | out: TokenInformation=0x6640846280, ReturnLength=0x66405bdf50) returned 1 [0070.219] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x6640846290*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0x12), Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 0 [0070.220] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x6640846290*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0x12), Name=0x664083d440, cchName=0x66405bdf58, ReferencedDomainName=0x66408464c0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name="SYSTEM", cchName=0x66405bdf58, ReferencedDomainName="NT AUTHORITY", cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 1 [0070.221] CloseHandle (hObject=0x2c8) returned 1 [0070.221] Process32NextW (in: hSnapshot=0x2cc, lppe=0x66405bdf70 | out: lppe=0x66405bdf70*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x600, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0070.222] SetLastError (dwErrCode=0x0) [0070.222] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x600) returned 0x2c8 [0070.222] OpenProcessToken (in: ProcessHandle=0x2c8, DesiredAccess=0x20008, TokenHandle=0x66405bdf60 | out: TokenHandle=0x66405bdf60*=0x2b4) returned 0 [0070.222] CloseHandle (hObject=0x2c8) returned 1 [0070.222] Process32NextW (in: hSnapshot=0x2cc, lppe=0x66405bdf70 | out: lppe=0x66405bdf70*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x778, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x330, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0070.223] SetLastError (dwErrCode=0x0) [0070.223] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x778) returned 0x2c8 [0070.223] OpenProcessToken (in: ProcessHandle=0x2c8, DesiredAccess=0x20008, TokenHandle=0x66405bdf60 | out: TokenHandle=0x66405bdf60*=0x2b0) returned 1 [0070.223] GetTokenInformation (in: TokenHandle=0x2b0, TokenInformationClass=0x1, TokenInformation=0x6640846280, TokenInformationLength=0x0, ReturnLength=0x66405bdf50 | out: TokenInformation=0x6640846280, ReturnLength=0x66405bdf50) returned 0 [0070.223] GetTokenInformation (in: TokenHandle=0x2b0, TokenInformationClass=0x1, TokenInformation=0x664082f0c0, TokenInformationLength=0x2c, ReturnLength=0x66405bdf50 | out: TokenInformation=0x664082f0c0, ReturnLength=0x66405bdf50) returned 1 [0070.223] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x664082f0d0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 0 [0070.231] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x664082f0d0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x66408463a0, cchName=0x66405bdf58, ReferencedDomainName=0x664083d540, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name="CIiHmnxMn6Ps", cchName=0x66405bdf58, ReferencedDomainName="LHNIWSJ", cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 1 [0070.232] CloseHandle (hObject=0x2c8) returned 1 [0070.232] Process32NextW (in: hSnapshot=0x2cc, lppe=0x66405bdf70 | out: lppe=0x66405bdf70*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x330, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0070.233] SetLastError (dwErrCode=0x0) [0070.233] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x7ac) returned 0x2c8 [0070.233] OpenProcessToken (in: ProcessHandle=0x2c8, DesiredAccess=0x20008, TokenHandle=0x66405bdf60 | out: TokenHandle=0x66405bdf60*=0x2ac) returned 1 [0070.233] GetTokenInformation (in: TokenHandle=0x2ac, TokenInformationClass=0x1, TokenInformation=0x664082f0c0, TokenInformationLength=0x0, ReturnLength=0x66405bdf50 | out: TokenInformation=0x664082f0c0, ReturnLength=0x66405bdf50) returned 0 [0070.233] GetTokenInformation (in: TokenHandle=0x2ac, TokenInformationClass=0x1, TokenInformation=0x664082ef00, TokenInformationLength=0x2c, ReturnLength=0x66405bdf50 | out: TokenInformation=0x664082ef00, ReturnLength=0x66405bdf50) returned 1 [0070.233] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x664082ef10*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 0 [0070.257] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x664082ef10*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x66408464c0, cchName=0x66405bdf58, ReferencedDomainName=0x664083d6a0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name="CIiHmnxMn6Ps", cchName=0x66405bdf58, ReferencedDomainName="LHNIWSJ", cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 1 [0070.258] CloseHandle (hObject=0x2c8) returned 1 [0070.258] Process32NextW (in: hSnapshot=0x2cc, lppe=0x66405bdf70 | out: lppe=0x66405bdf70*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3e, th32ParentProcessID=0x4ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0070.259] SetLastError (dwErrCode=0x0) [0070.259] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x508) returned 0x2c8 [0070.259] OpenProcessToken (in: ProcessHandle=0x2c8, DesiredAccess=0x20008, TokenHandle=0x66405bdf60 | out: TokenHandle=0x66405bdf60*=0x2a8) returned 1 [0070.259] GetTokenInformation (in: TokenHandle=0x2a8, TokenInformationClass=0x1, TokenInformation=0x664082ef00, TokenInformationLength=0x0, ReturnLength=0x66405bdf50 | out: TokenInformation=0x664082ef00, ReturnLength=0x66405bdf50) returned 0 [0070.259] GetTokenInformation (in: TokenHandle=0x2a8, TokenInformationClass=0x1, TokenInformation=0x664082f0c0, TokenInformationLength=0x2c, ReturnLength=0x66405bdf50 | out: TokenInformation=0x664082f0c0, ReturnLength=0x66405bdf50) returned 1 [0070.259] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x664082f0d0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 0 [0070.260] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x664082f0d0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x66408460d0, cchName=0x66405bdf58, ReferencedDomainName=0x664083d3e0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name="CIiHmnxMn6Ps", cchName=0x66405bdf58, ReferencedDomainName="LHNIWSJ", cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 1 [0070.261] CloseHandle (hObject=0x2c8) returned 1 [0070.261] Process32NextW (in: hSnapshot=0x2cc, lppe=0x66405bdf70 | out: lppe=0x66405bdf70*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x248, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0070.262] SetLastError (dwErrCode=0x0) [0070.262] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x814) returned 0x2c8 [0070.263] OpenProcessToken (in: ProcessHandle=0x2c8, DesiredAccess=0x20008, TokenHandle=0x66405bdf60 | out: TokenHandle=0x66405bdf60*=0x2a4) returned 1 [0070.263] GetTokenInformation (in: TokenHandle=0x2a4, TokenInformationClass=0x1, TokenInformation=0x664082f0c0, TokenInformationLength=0x0, ReturnLength=0x66405bdf50 | out: TokenInformation=0x664082f0c0, ReturnLength=0x66405bdf50) returned 0 [0070.263] GetTokenInformation (in: TokenHandle=0x2a4, TokenInformationClass=0x1, TokenInformation=0x664082f640, TokenInformationLength=0x2c, ReturnLength=0x66405bdf50 | out: TokenInformation=0x664082f640, ReturnLength=0x66405bdf50) returned 1 [0070.263] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x664082f650*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 0 [0070.264] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x664082f650*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x6640846340, cchName=0x66405bdf58, ReferencedDomainName=0x664083d540, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name="CIiHmnxMn6Ps", cchName=0x66405bdf58, ReferencedDomainName="LHNIWSJ", cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 1 [0070.264] CloseHandle (hObject=0x2c8) returned 1 [0070.265] Process32NextW (in: hSnapshot=0x2cc, lppe=0x66405bdf70 | out: lppe=0x66405bdf70*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x248, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0070.265] SetLastError (dwErrCode=0x0) [0070.266] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x9a0) returned 0x2c8 [0070.266] OpenProcessToken (in: ProcessHandle=0x2c8, DesiredAccess=0x20008, TokenHandle=0x66405bdf60 | out: TokenHandle=0x66405bdf60*=0x2e4) returned 1 [0070.266] GetTokenInformation (in: TokenHandle=0x2e4, TokenInformationClass=0x1, TokenInformation=0x664082f640, TokenInformationLength=0x0, ReturnLength=0x66405bdf50 | out: TokenInformation=0x664082f640, ReturnLength=0x66405bdf50) returned 0 [0070.266] GetTokenInformation (in: TokenHandle=0x2e4, TokenInformationClass=0x1, TokenInformation=0x664082ec00, TokenInformationLength=0x2c, ReturnLength=0x66405bdf50 | out: TokenInformation=0x664082ec00, ReturnLength=0x66405bdf50) returned 1 [0070.266] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x664082ec10*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 0 [0070.301] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x664082ec10*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x66408465e0, cchName=0x66405bdf58, ReferencedDomainName=0x664083d4a0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name="CIiHmnxMn6Ps", cchName=0x66405bdf58, ReferencedDomainName="LHNIWSJ", cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 1 [0070.302] CloseHandle (hObject=0x2c8) returned 1 [0070.302] Process32NextW (in: hSnapshot=0x2cc, lppe=0x66405bdf70 | out: lppe=0x66405bdf70*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xb7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x248, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0070.303] SetLastError (dwErrCode=0x0) [0070.303] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0xb7c) returned 0x2c8 [0070.303] OpenProcessToken (in: ProcessHandle=0x2c8, DesiredAccess=0x20008, TokenHandle=0x66405bdf60 | out: TokenHandle=0x66405bdf60*=0x2e8) returned 1 [0070.303] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x1, TokenInformation=0x664082ec00, TokenInformationLength=0x0, ReturnLength=0x66405bdf50 | out: TokenInformation=0x664082ec00, ReturnLength=0x66405bdf50) returned 0 [0070.303] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x1, TokenInformation=0x664082f0c0, TokenInformationLength=0x2c, ReturnLength=0x66405bdf50 | out: TokenInformation=0x664082f0c0, ReturnLength=0x66405bdf50) returned 1 [0070.303] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x664082f0d0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 0 [0070.304] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x664082f0d0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x66408466d0, cchName=0x66405bdf58, ReferencedDomainName=0x664083d120, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name="CIiHmnxMn6Ps", cchName=0x66405bdf58, ReferencedDomainName="LHNIWSJ", cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 1 [0070.305] CloseHandle (hObject=0x2c8) returned 1 [0070.305] Process32NextW (in: hSnapshot=0x2cc, lppe=0x66405bdf70 | out: lppe=0x66405bdf70*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="uni likely.exe")) returned 1 [0070.306] SetLastError (dwErrCode=0x0) [0070.307] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x6a8) returned 0x2c8 [0070.307] OpenProcessToken (in: ProcessHandle=0x2c8, DesiredAccess=0x20008, TokenHandle=0x66405bdf60 | out: TokenHandle=0x66405bdf60*=0x280) returned 1 [0070.307] GetTokenInformation (in: TokenHandle=0x280, TokenInformationClass=0x1, TokenInformation=0x664082f0c0, TokenInformationLength=0x0, ReturnLength=0x66405bdf50 | out: TokenInformation=0x664082f0c0, ReturnLength=0x66405bdf50) returned 0 [0070.307] GetTokenInformation (in: TokenHandle=0x280, TokenInformationClass=0x1, TokenInformation=0x664082f680, TokenInformationLength=0x2c, ReturnLength=0x66405bdf50 | out: TokenInformation=0x664082f680, ReturnLength=0x66405bdf50) returned 1 [0070.307] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x664082f690*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 0 [0070.308] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x664082f690*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x6640846790, cchName=0x66405bdf58, ReferencedDomainName=0x664083d120, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name="CIiHmnxMn6Ps", cchName=0x66405bdf58, ReferencedDomainName="LHNIWSJ", cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 1 [0070.308] CloseHandle (hObject=0x2c8) returned 1 [0070.309] Process32NextW (in: hSnapshot=0x2cc, lppe=0x66405bdf70 | out: lppe=0x66405bdf70*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="turkey occasional lessons.exe")) returned 1 [0070.309] SetLastError (dwErrCode=0x0) [0070.310] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x6b8) returned 0x2c8 [0070.310] OpenProcessToken (in: ProcessHandle=0x2c8, DesiredAccess=0x20008, TokenHandle=0x66405bdf60 | out: TokenHandle=0x66405bdf60*=0x27c) returned 1 [0070.310] GetTokenInformation (in: TokenHandle=0x27c, TokenInformationClass=0x1, TokenInformation=0x664082f680, TokenInformationLength=0x0, ReturnLength=0x66405bdf50 | out: TokenInformation=0x664082f680, ReturnLength=0x66405bdf50) returned 0 [0070.310] GetTokenInformation (in: TokenHandle=0x27c, TokenInformationClass=0x1, TokenInformation=0x664082ecc0, TokenInformationLength=0x2c, ReturnLength=0x66405bdf50 | out: TokenInformation=0x664082ecc0, ReturnLength=0x66405bdf50) returned 1 [0070.310] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x664082ecd0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 0 [0070.311] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x664082ecd0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x66408460d0, cchName=0x66405bdf58, ReferencedDomainName=0x664083d6a0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name="CIiHmnxMn6Ps", cchName=0x66405bdf58, ReferencedDomainName="LHNIWSJ", cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 1 [0070.311] CloseHandle (hObject=0x2c8) returned 1 [0070.312] Process32NextW (in: hSnapshot=0x2cc, lppe=0x66405bdf70 | out: lppe=0x66405bdf70*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="drainage.exe")) returned 1 [0070.312] SetLastError (dwErrCode=0x0) [0070.312] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x5cc) returned 0x2c8 [0070.313] OpenProcessToken (in: ProcessHandle=0x2c8, DesiredAccess=0x20008, TokenHandle=0x66405bdf60 | out: TokenHandle=0x66405bdf60*=0x2dc) returned 1 [0070.313] GetTokenInformation (in: TokenHandle=0x2dc, TokenInformationClass=0x1, TokenInformation=0x664082ecc0, TokenInformationLength=0x0, ReturnLength=0x66405bdf50 | out: TokenInformation=0x664082ecc0, ReturnLength=0x66405bdf50) returned 0 [0070.313] GetTokenInformation (in: TokenHandle=0x2dc, TokenInformationClass=0x1, TokenInformation=0x664082ee80, TokenInformationLength=0x2c, ReturnLength=0x66405bdf50 | out: TokenInformation=0x664082ee80, ReturnLength=0x66405bdf50) returned 1 [0070.313] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x664082ee90*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 0 [0070.342] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x664082ee90*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x66408466d0, cchName=0x66405bdf58, ReferencedDomainName=0x664083d2e0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name="CIiHmnxMn6Ps", cchName=0x66405bdf58, ReferencedDomainName="LHNIWSJ", cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 1 [0070.342] CloseHandle (hObject=0x2c8) returned 1 [0070.342] Process32NextW (in: hSnapshot=0x2cc, lppe=0x66405bdf70 | out: lppe=0x66405bdf70*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="recommendation_shade_reply.exe")) returned 1 [0070.343] SetLastError (dwErrCode=0x0) [0070.343] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x4f4) returned 0x2c8 [0070.343] OpenProcessToken (in: ProcessHandle=0x2c8, DesiredAccess=0x20008, TokenHandle=0x66405bdf60 | out: TokenHandle=0x66405bdf60*=0x2bc) returned 1 [0070.343] GetTokenInformation (in: TokenHandle=0x2bc, TokenInformationClass=0x1, TokenInformation=0x664082ee80, TokenInformationLength=0x0, ReturnLength=0x66405bdf50 | out: TokenInformation=0x664082ee80, ReturnLength=0x66405bdf50) returned 0 [0070.343] GetTokenInformation (in: TokenHandle=0x2bc, TokenInformationClass=0x1, TokenInformation=0x664082f740, TokenInformationLength=0x2c, ReturnLength=0x66405bdf50 | out: TokenInformation=0x664082f740, ReturnLength=0x66405bdf50) returned 1 [0070.343] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x664082f750*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 0 [0070.344] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x664082f750*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x6640846160, cchName=0x66405bdf58, ReferencedDomainName=0x664083d540, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name="CIiHmnxMn6Ps", cchName=0x66405bdf58, ReferencedDomainName="LHNIWSJ", cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 1 [0070.345] CloseHandle (hObject=0x2c8) returned 1 [0070.345] Process32NextW (in: hSnapshot=0x2cc, lppe=0x66405bdf70 | out: lppe=0x66405bdf70*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbe8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="victims-language-conversations.exe")) returned 1 [0070.346] SetLastError (dwErrCode=0x0) [0070.346] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0xbe8) returned 0x2c8 [0070.346] OpenProcessToken (in: ProcessHandle=0x2c8, DesiredAccess=0x20008, TokenHandle=0x66405bdf60 | out: TokenHandle=0x66405bdf60*=0x2b8) returned 1 [0070.346] GetTokenInformation (in: TokenHandle=0x2b8, TokenInformationClass=0x1, TokenInformation=0x664082f740, TokenInformationLength=0x0, ReturnLength=0x66405bdf50 | out: TokenInformation=0x664082f740, ReturnLength=0x66405bdf50) returned 0 [0070.346] GetTokenInformation (in: TokenHandle=0x2b8, TokenInformationClass=0x1, TokenInformation=0x664082f340, TokenInformationLength=0x2c, ReturnLength=0x66405bdf50 | out: TokenInformation=0x664082f340, ReturnLength=0x66405bdf50) returned 1 [0070.346] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x664082f350*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 0 [0070.347] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x664082f350*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x66408466d0, cchName=0x66405bdf58, ReferencedDomainName=0x664083d560, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name="CIiHmnxMn6Ps", cchName=0x66405bdf58, ReferencedDomainName="LHNIWSJ", cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 1 [0070.348] CloseHandle (hObject=0x2c8) returned 1 [0070.348] Process32NextW (in: hSnapshot=0x2cc, lppe=0x66405bdf70 | out: lppe=0x66405bdf70*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x8d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="maui_observation.exe")) returned 1 [0070.349] SetLastError (dwErrCode=0x0) [0070.349] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x8d4) returned 0x2c8 [0070.349] OpenProcessToken (in: ProcessHandle=0x2c8, DesiredAccess=0x20008, TokenHandle=0x66405bdf60 | out: TokenHandle=0x66405bdf60*=0x284) returned 1 [0070.349] GetTokenInformation (in: TokenHandle=0x284, TokenInformationClass=0x1, TokenInformation=0x664082f340, TokenInformationLength=0x0, ReturnLength=0x66405bdf50 | out: TokenInformation=0x664082f340, ReturnLength=0x66405bdf50) returned 0 [0070.349] GetTokenInformation (in: TokenHandle=0x284, TokenInformationClass=0x1, TokenInformation=0x664082eb40, TokenInformationLength=0x2c, ReturnLength=0x66405bdf50 | out: TokenInformation=0x664082eb40, ReturnLength=0x66405bdf50) returned 1 [0070.349] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x664082eb50*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 0 [0070.350] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x664082eb50*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x6640846340, cchName=0x66405bdf58, ReferencedDomainName=0x664083d3e0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name="CIiHmnxMn6Ps", cchName=0x66405bdf58, ReferencedDomainName="LHNIWSJ", cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 1 [0070.351] CloseHandle (hObject=0x2c8) returned 1 [0070.351] Process32NextW (in: hSnapshot=0x2cc, lppe=0x66405bdf70 | out: lppe=0x66405bdf70*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="keyboardsrecallsp.exe")) returned 1 [0070.352] SetLastError (dwErrCode=0x0) [0070.352] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x1b8) returned 0x2c8 [0070.352] OpenProcessToken (in: ProcessHandle=0x2c8, DesiredAccess=0x20008, TokenHandle=0x66405bdf60 | out: TokenHandle=0x66405bdf60*=0x17c) returned 1 [0070.352] GetTokenInformation (in: TokenHandle=0x17c, TokenInformationClass=0x1, TokenInformation=0x664082eb40, TokenInformationLength=0x0, ReturnLength=0x66405bdf50 | out: TokenInformation=0x664082eb40, ReturnLength=0x66405bdf50) returned 0 [0070.352] GetTokenInformation (in: TokenHandle=0x17c, TokenInformationClass=0x1, TokenInformation=0x664082f0c0, TokenInformationLength=0x2c, ReturnLength=0x66405bdf50 | out: TokenInformation=0x664082f0c0, ReturnLength=0x66405bdf50) returned 1 [0070.352] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x664082f0d0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 0 [0070.371] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x664082f0d0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x66408464c0, cchName=0x66405bdf58, ReferencedDomainName=0x664083d620, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name="CIiHmnxMn6Ps", cchName=0x66405bdf58, ReferencedDomainName="LHNIWSJ", cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 1 [0070.372] CloseHandle (hObject=0x2c8) returned 1 [0070.372] Process32NextW (in: hSnapshot=0x2cc, lppe=0x66405bdf70 | out: lppe=0x66405bdf70*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x278, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="interactions_miles_validity.exe")) returned 1 [0070.376] SetLastError (dwErrCode=0x0) [0070.376] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x278) returned 0x2c8 [0070.377] OpenProcessToken (in: ProcessHandle=0x2c8, DesiredAccess=0x20008, TokenHandle=0x66405bdf60 | out: TokenHandle=0x66405bdf60*=0x178) returned 1 [0070.377] GetTokenInformation (in: TokenHandle=0x178, TokenInformationClass=0x1, TokenInformation=0x664082f0c0, TokenInformationLength=0x0, ReturnLength=0x66405bdf50 | out: TokenInformation=0x664082f0c0, ReturnLength=0x66405bdf50) returned 0 [0070.377] GetTokenInformation (in: TokenHandle=0x178, TokenInformationClass=0x1, TokenInformation=0x664082ebc0, TokenInformationLength=0x2c, ReturnLength=0x66405bdf50 | out: TokenInformation=0x664082ebc0, ReturnLength=0x66405bdf50) returned 1 [0070.377] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x664082ebd0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 0 [0070.378] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x664082ebd0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x6640846130, cchName=0x66405bdf58, ReferencedDomainName=0x664083d120, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name="CIiHmnxMn6Ps", cchName=0x66405bdf58, ReferencedDomainName="LHNIWSJ", cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 1 [0070.378] CloseHandle (hObject=0x2c8) returned 1 [0070.379] Process32NextW (in: hSnapshot=0x2cc, lppe=0x66405bdf70 | out: lppe=0x66405bdf70*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="incoming tracked holds.exe")) returned 1 [0070.379] SetLastError (dwErrCode=0x0) [0070.379] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x3a8) returned 0x2c8 [0070.380] OpenProcessToken (in: ProcessHandle=0x2c8, DesiredAccess=0x20008, TokenHandle=0x66405bdf60 | out: TokenHandle=0x66405bdf60*=0x210) returned 1 [0070.380] GetTokenInformation (in: TokenHandle=0x210, TokenInformationClass=0x1, TokenInformation=0x664082ebc0, TokenInformationLength=0x0, ReturnLength=0x66405bdf50 | out: TokenInformation=0x664082ebc0, ReturnLength=0x66405bdf50) returned 0 [0070.380] GetTokenInformation (in: TokenHandle=0x210, TokenInformationClass=0x1, TokenInformation=0x664082f0c0, TokenInformationLength=0x2c, ReturnLength=0x66405bdf50 | out: TokenInformation=0x664082f0c0, ReturnLength=0x66405bdf50) returned 1 [0070.380] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x664082f0d0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 0 [0070.381] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x664082f0d0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x6640846550, cchName=0x66405bdf58, ReferencedDomainName=0x664083d720, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name="CIiHmnxMn6Ps", cchName=0x66405bdf58, ReferencedDomainName="LHNIWSJ", cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 1 [0070.381] CloseHandle (hObject=0x2c8) returned 1 [0070.382] Process32NextW (in: hSnapshot=0x2cc, lppe=0x66405bdf70 | out: lppe=0x66405bdf70*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x504, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="tremendouskurtcreek.exe")) returned 1 [0070.382] SetLastError (dwErrCode=0x0) [0070.382] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x504) returned 0x2c8 [0070.383] OpenProcessToken (in: ProcessHandle=0x2c8, DesiredAccess=0x20008, TokenHandle=0x66405bdf60 | out: TokenHandle=0x66405bdf60*=0x20c) returned 1 [0070.383] GetTokenInformation (in: TokenHandle=0x20c, TokenInformationClass=0x1, TokenInformation=0x664082f0c0, TokenInformationLength=0x0, ReturnLength=0x66405bdf50 | out: TokenInformation=0x664082f0c0, ReturnLength=0x66405bdf50) returned 0 [0070.383] GetTokenInformation (in: TokenHandle=0x20c, TokenInformationClass=0x1, TokenInformation=0x664082f380, TokenInformationLength=0x2c, ReturnLength=0x66405bdf50 | out: TokenInformation=0x664082f380, ReturnLength=0x66405bdf50) returned 1 [0070.383] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x664082f390*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 0 [0070.384] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x664082f390*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x66408461c0, cchName=0x66405bdf58, ReferencedDomainName=0x664083d720, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name="CIiHmnxMn6Ps", cchName=0x66405bdf58, ReferencedDomainName="LHNIWSJ", cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 1 [0070.385] CloseHandle (hObject=0x2c8) returned 1 [0070.385] Process32NextW (in: hSnapshot=0x2cc, lppe=0x66405bdf70 | out: lppe=0x66405bdf70*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="output sufficient.exe")) returned 1 [0070.386] SetLastError (dwErrCode=0x0) [0070.386] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x134) returned 0x2c8 [0070.386] OpenProcessToken (in: ProcessHandle=0x2c8, DesiredAccess=0x20008, TokenHandle=0x66405bdf60 | out: TokenHandle=0x66405bdf60*=0x1f8) returned 1 [0070.386] GetTokenInformation (in: TokenHandle=0x1f8, TokenInformationClass=0x1, TokenInformation=0x664082f380, TokenInformationLength=0x0, ReturnLength=0x66405bdf50 | out: TokenInformation=0x664082f380, ReturnLength=0x66405bdf50) returned 0 [0070.386] GetTokenInformation (in: TokenHandle=0x1f8, TokenInformationClass=0x1, TokenInformation=0x664082f340, TokenInformationLength=0x2c, ReturnLength=0x66405bdf50 | out: TokenInformation=0x664082f340, ReturnLength=0x66405bdf50) returned 1 [0070.386] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x664082f350*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 0 [0070.544] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x664082f350*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x6640846280, cchName=0x66405bdf58, ReferencedDomainName=0x664083d460, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name="CIiHmnxMn6Ps", cchName=0x66405bdf58, ReferencedDomainName="LHNIWSJ", cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 1 [0070.545] CloseHandle (hObject=0x2c8) returned 1 [0070.545] Process32NextW (in: hSnapshot=0x2cc, lppe=0x66405bdf70 | out: lppe=0x66405bdf70*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x720, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="solomon.exe")) returned 1 [0070.546] SetLastError (dwErrCode=0x0) [0070.546] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x720) returned 0x2c8 [0070.546] OpenProcessToken (in: ProcessHandle=0x2c8, DesiredAccess=0x20008, TokenHandle=0x66405bdf60 | out: TokenHandle=0x66405bdf60*=0x214) returned 1 [0070.546] GetTokenInformation (in: TokenHandle=0x214, TokenInformationClass=0x1, TokenInformation=0x664082f340, TokenInformationLength=0x0, ReturnLength=0x66405bdf50 | out: TokenInformation=0x664082f340, ReturnLength=0x66405bdf50) returned 0 [0070.546] GetTokenInformation (in: TokenHandle=0x214, TokenInformationClass=0x1, TokenInformation=0x664082f340, TokenInformationLength=0x2c, ReturnLength=0x66405bdf50 | out: TokenInformation=0x664082f340, ReturnLength=0x66405bdf50) returned 1 [0070.547] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x664082f350*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 0 [0070.547] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x664082f350*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x66408463a0, cchName=0x66405bdf58, ReferencedDomainName=0x664083d2e0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name="CIiHmnxMn6Ps", cchName=0x66405bdf58, ReferencedDomainName="LHNIWSJ", cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 1 [0070.548] CloseHandle (hObject=0x2c8) returned 1 [0070.548] Process32NextW (in: hSnapshot=0x2cc, lppe=0x66405bdf70 | out: lppe=0x66405bdf70*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="comparing mad.exe")) returned 1 [0070.549] SetLastError (dwErrCode=0x0) [0070.549] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x644) returned 0x2c8 [0070.549] OpenProcessToken (in: ProcessHandle=0x2c8, DesiredAccess=0x20008, TokenHandle=0x66405bdf60 | out: TokenHandle=0x66405bdf60*=0x2ec) returned 1 [0070.549] GetTokenInformation (in: TokenHandle=0x2ec, TokenInformationClass=0x1, TokenInformation=0x664082f340, TokenInformationLength=0x0, ReturnLength=0x66405bdf50 | out: TokenInformation=0x664082f340, ReturnLength=0x66405bdf50) returned 0 [0070.549] GetTokenInformation (in: TokenHandle=0x2ec, TokenInformationClass=0x1, TokenInformation=0x664082ed00, TokenInformationLength=0x2c, ReturnLength=0x66405bdf50 | out: TokenInformation=0x664082ed00, ReturnLength=0x66405bdf50) returned 1 [0070.549] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x664082ed10*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 0 [0070.550] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x664082ed10*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x66408463a0, cchName=0x66405bdf58, ReferencedDomainName=0x664083d840, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name="CIiHmnxMn6Ps", cchName=0x66405bdf58, ReferencedDomainName="LHNIWSJ", cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 1 [0070.551] CloseHandle (hObject=0x2c8) returned 1 [0070.551] Process32NextW (in: hSnapshot=0x2cc, lppe=0x66405bdf70 | out: lppe=0x66405bdf70*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x8e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="solo.exe")) returned 1 [0070.552] SetLastError (dwErrCode=0x0) [0070.552] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x8e0) returned 0x2c8 [0070.552] OpenProcessToken (in: ProcessHandle=0x2c8, DesiredAccess=0x20008, TokenHandle=0x66405bdf60 | out: TokenHandle=0x66405bdf60*=0x2f4) returned 1 [0070.552] GetTokenInformation (in: TokenHandle=0x2f4, TokenInformationClass=0x1, TokenInformation=0x664082ed00, TokenInformationLength=0x0, ReturnLength=0x66405bdf50 | out: TokenInformation=0x664082ed00, ReturnLength=0x66405bdf50) returned 0 [0070.552] GetTokenInformation (in: TokenHandle=0x2f4, TokenInformationClass=0x1, TokenInformation=0x664082f640, TokenInformationLength=0x2c, ReturnLength=0x66405bdf50 | out: TokenInformation=0x664082f640, ReturnLength=0x66405bdf50) returned 1 [0070.552] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x664082f650*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 0 [0070.553] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x664082f650*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x66408462b0, cchName=0x66405bdf58, ReferencedDomainName=0x664083d700, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name="CIiHmnxMn6Ps", cchName=0x66405bdf58, ReferencedDomainName="LHNIWSJ", cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 1 [0070.554] CloseHandle (hObject=0x2c8) returned 1 [0070.554] Process32NextW (in: hSnapshot=0x2cc, lppe=0x66405bdf70 | out: lppe=0x66405bdf70*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="layer-resolutions-situations.exe")) returned 1 [0070.555] SetLastError (dwErrCode=0x0) [0070.555] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x6fc) returned 0x2c8 [0070.555] OpenProcessToken (in: ProcessHandle=0x2c8, DesiredAccess=0x20008, TokenHandle=0x66405bdf60 | out: TokenHandle=0x66405bdf60*=0x2f8) returned 1 [0070.555] GetTokenInformation (in: TokenHandle=0x2f8, TokenInformationClass=0x1, TokenInformation=0x664082f640, TokenInformationLength=0x0, ReturnLength=0x66405bdf50 | out: TokenInformation=0x664082f640, ReturnLength=0x66405bdf50) returned 0 [0070.555] GetTokenInformation (in: TokenHandle=0x2f8, TokenInformationClass=0x1, TokenInformation=0x664082ee80, TokenInformationLength=0x2c, ReturnLength=0x66405bdf50 | out: TokenInformation=0x664082ee80, ReturnLength=0x66405bdf50) returned 1 [0070.555] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x664082ee90*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 0 [0070.575] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x664082ee90*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x66408462b0, cchName=0x66405bdf58, ReferencedDomainName=0x664083d240, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name="CIiHmnxMn6Ps", cchName=0x66405bdf58, ReferencedDomainName="LHNIWSJ", cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 1 [0070.576] CloseHandle (hObject=0x2c8) returned 1 [0070.576] Process32NextW (in: hSnapshot=0x2cc, lppe=0x66405bdf70 | out: lppe=0x66405bdf70*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xb14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="ultram_counters.exe")) returned 1 [0070.577] SetLastError (dwErrCode=0x0) [0070.577] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0xb14) returned 0x2c8 [0070.577] OpenProcessToken (in: ProcessHandle=0x2c8, DesiredAccess=0x20008, TokenHandle=0x66405bdf60 | out: TokenHandle=0x66405bdf60*=0x2f0) returned 1 [0070.577] GetTokenInformation (in: TokenHandle=0x2f0, TokenInformationClass=0x1, TokenInformation=0x664082ee80, TokenInformationLength=0x0, ReturnLength=0x66405bdf50 | out: TokenInformation=0x664082ee80, ReturnLength=0x66405bdf50) returned 0 [0070.577] GetTokenInformation (in: TokenHandle=0x2f0, TokenInformationClass=0x1, TokenInformation=0x664082f0c0, TokenInformationLength=0x2c, ReturnLength=0x66405bdf50 | out: TokenInformation=0x664082f0c0, ReturnLength=0x66405bdf50) returned 1 [0070.577] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x664082f0d0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 0 [0070.578] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x664082f0d0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x6640846340, cchName=0x66405bdf58, ReferencedDomainName=0x664083d3e0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name="CIiHmnxMn6Ps", cchName=0x66405bdf58, ReferencedDomainName="LHNIWSJ", cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 1 [0070.578] CloseHandle (hObject=0x2c8) returned 1 [0070.578] Process32NextW (in: hSnapshot=0x2cc, lppe=0x66405bdf70 | out: lppe=0x66405bdf70*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="water readings.exe")) returned 1 [0070.579] SetLastError (dwErrCode=0x0) [0070.579] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x6b4) returned 0x2c8 [0070.579] OpenProcessToken (in: ProcessHandle=0x2c8, DesiredAccess=0x20008, TokenHandle=0x66405bdf60 | out: TokenHandle=0x66405bdf60*=0x304) returned 1 [0070.579] GetTokenInformation (in: TokenHandle=0x304, TokenInformationClass=0x1, TokenInformation=0x664082f0c0, TokenInformationLength=0x0, ReturnLength=0x66405bdf50 | out: TokenInformation=0x664082f0c0, ReturnLength=0x66405bdf50) returned 0 [0070.579] GetTokenInformation (in: TokenHandle=0x304, TokenInformationClass=0x1, TokenInformation=0x664082f380, TokenInformationLength=0x2c, ReturnLength=0x66405bdf50 | out: TokenInformation=0x664082f380, ReturnLength=0x66405bdf50) returned 1 [0070.579] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x664082f390*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 0 [0070.580] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x664082f390*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x6640846280, cchName=0x66405bdf58, ReferencedDomainName=0x664083d3e0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name="CIiHmnxMn6Ps", cchName=0x66405bdf58, ReferencedDomainName="LHNIWSJ", cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 1 [0070.581] CloseHandle (hObject=0x2c8) returned 1 [0070.581] Process32NextW (in: hSnapshot=0x2cc, lppe=0x66405bdf70 | out: lppe=0x66405bdf70*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x91c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="colin.exe")) returned 1 [0070.582] SetLastError (dwErrCode=0x0) [0070.582] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x91c) returned 0x2c8 [0070.582] OpenProcessToken (in: ProcessHandle=0x2c8, DesiredAccess=0x20008, TokenHandle=0x66405bdf60 | out: TokenHandle=0x66405bdf60*=0x308) returned 1 [0070.582] GetTokenInformation (in: TokenHandle=0x308, TokenInformationClass=0x1, TokenInformation=0x664082f380, TokenInformationLength=0x0, ReturnLength=0x66405bdf50 | out: TokenInformation=0x664082f380, ReturnLength=0x66405bdf50) returned 0 [0070.582] GetTokenInformation (in: TokenHandle=0x308, TokenInformationClass=0x1, TokenInformation=0x664082ec80, TokenInformationLength=0x2c, ReturnLength=0x66405bdf50 | out: TokenInformation=0x664082ec80, ReturnLength=0x66405bdf50) returned 1 [0070.582] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x664082ec90*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 0 [0070.583] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x664082ec90*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x66408464c0, cchName=0x66405bdf58, ReferencedDomainName=0x664083d3e0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name="CIiHmnxMn6Ps", cchName=0x66405bdf58, ReferencedDomainName="LHNIWSJ", cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 1 [0070.586] CloseHandle (hObject=0x2c8) returned 1 [0070.586] Process32NextW (in: hSnapshot=0x2cc, lppe=0x66405bdf70 | out: lppe=0x66405bdf70*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x248, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0070.587] SetLastError (dwErrCode=0x0) [0070.587] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0xa1c) returned 0x2c8 [0070.587] OpenProcessToken (in: ProcessHandle=0x2c8, DesiredAccess=0x20008, TokenHandle=0x66405bdf60 | out: TokenHandle=0x66405bdf60*=0x30c) returned 1 [0070.587] GetTokenInformation (in: TokenHandle=0x30c, TokenInformationClass=0x1, TokenInformation=0x664082ec80, TokenInformationLength=0x0, ReturnLength=0x66405bdf50 | out: TokenInformation=0x664082ec80, ReturnLength=0x66405bdf50) returned 0 [0070.587] GetTokenInformation (in: TokenHandle=0x30c, TokenInformationClass=0x1, TokenInformation=0x664082eb40, TokenInformationLength=0x2c, ReturnLength=0x66405bdf50 | out: TokenInformation=0x664082eb40, ReturnLength=0x66405bdf50) returned 1 [0070.587] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x664082eb50*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 0 [0070.588] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x664082eb50*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x6640846100, cchName=0x66405bdf58, ReferencedDomainName=0x664083d840, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name="CIiHmnxMn6Ps", cchName=0x66405bdf58, ReferencedDomainName="LHNIWSJ", cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 1 [0070.589] CloseHandle (hObject=0x2c8) returned 1 [0070.589] Process32NextW (in: hSnapshot=0x2cc, lppe=0x66405bdf70 | out: lppe=0x66405bdf70*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x8c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="father euro.exe")) returned 1 [0070.590] SetLastError (dwErrCode=0x0) [0070.590] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x8c8) returned 0x2c8 [0070.590] OpenProcessToken (in: ProcessHandle=0x2c8, DesiredAccess=0x20008, TokenHandle=0x66405bdf60 | out: TokenHandle=0x66405bdf60*=0x310) returned 1 [0070.590] GetTokenInformation (in: TokenHandle=0x310, TokenInformationClass=0x1, TokenInformation=0x664082eb40, TokenInformationLength=0x0, ReturnLength=0x66405bdf50 | out: TokenInformation=0x664082eb40, ReturnLength=0x66405bdf50) returned 0 [0070.590] GetTokenInformation (in: TokenHandle=0x310, TokenInformationClass=0x1, TokenInformation=0x664082f0c0, TokenInformationLength=0x2c, ReturnLength=0x66405bdf50 | out: TokenInformation=0x664082f0c0, ReturnLength=0x66405bdf50) returned 1 [0070.590] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x664082f0d0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 0 [0070.591] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x664082f0d0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x66408460d0, cchName=0x66405bdf58, ReferencedDomainName=0x664083d120, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name="CIiHmnxMn6Ps", cchName=0x66405bdf58, ReferencedDomainName="LHNIWSJ", cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 1 [0070.592] CloseHandle (hObject=0x2c8) returned 1 [0070.592] Process32NextW (in: hSnapshot=0x2cc, lppe=0x66405bdf70 | out: lppe=0x66405bdf70*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x98c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="cohen.exe")) returned 1 [0070.593] SetLastError (dwErrCode=0x0) [0070.593] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x98c) returned 0x2c8 [0070.593] OpenProcessToken (in: ProcessHandle=0x2c8, DesiredAccess=0x20008, TokenHandle=0x66405bdf60 | out: TokenHandle=0x66405bdf60*=0x314) returned 1 [0070.593] GetTokenInformation (in: TokenHandle=0x314, TokenInformationClass=0x1, TokenInformation=0x664082f0c0, TokenInformationLength=0x0, ReturnLength=0x66405bdf50 | out: TokenInformation=0x664082f0c0, ReturnLength=0x66405bdf50) returned 0 [0070.593] GetTokenInformation (in: TokenHandle=0x314, TokenInformationClass=0x1, TokenInformation=0x664082f0c0, TokenInformationLength=0x2c, ReturnLength=0x66405bdf50 | out: TokenInformation=0x664082f0c0, ReturnLength=0x66405bdf50) returned 1 [0070.593] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x664082f0d0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 0 [0070.594] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x664082f0d0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x66408460d0, cchName=0x66405bdf58, ReferencedDomainName=0x664083d160, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name="CIiHmnxMn6Ps", cchName=0x66405bdf58, ReferencedDomainName="LHNIWSJ", cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 1 [0070.595] CloseHandle (hObject=0x2c8) returned 1 [0070.595] Process32NextW (in: hSnapshot=0x2cc, lppe=0x66405bdf70 | out: lppe=0x66405bdf70*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xab0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x338, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0070.596] SetLastError (dwErrCode=0x0) [0070.596] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0xab0) returned 0x0 [0070.596] CloseHandle (hObject=0x0) returned 0 [0070.596] Process32NextW (in: hSnapshot=0x2cc, lppe=0x66405bdf70 | out: lppe=0x66405bdf70*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="eqBNr.exe")) returned 1 [0070.597] SetLastError (dwErrCode=0x0) [0070.597] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x300) returned 0x2c8 [0070.597] OpenProcessToken (in: ProcessHandle=0x2c8, DesiredAccess=0x20008, TokenHandle=0x66405bdf60 | out: TokenHandle=0x66405bdf60*=0x318) returned 1 [0070.597] GetTokenInformation (in: TokenHandle=0x318, TokenInformationClass=0x1, TokenInformation=0x664082f0c0, TokenInformationLength=0x0, ReturnLength=0x66405bdf50 | out: TokenInformation=0x664082f0c0, ReturnLength=0x66405bdf50) returned 0 [0070.597] GetTokenInformation (in: TokenHandle=0x318, TokenInformationClass=0x1, TokenInformation=0x664082ee80, TokenInformationLength=0x2c, ReturnLength=0x66405bdf50 | out: TokenInformation=0x664082ee80, ReturnLength=0x66405bdf50) returned 1 [0070.597] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x664082ee90*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 0 [0070.598] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x664082ee90*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x6640846340, cchName=0x66405bdf58, ReferencedDomainName=0x664083d7a0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name="CIiHmnxMn6Ps", cchName=0x66405bdf58, ReferencedDomainName="LHNIWSJ", cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 1 [0070.600] CloseHandle (hObject=0x2c8) returned 1 [0070.600] Process32NextW (in: hSnapshot=0x2cc, lppe=0x66405bdf70 | out: lppe=0x66405bdf70*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xc10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x248, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0070.601] SetLastError (dwErrCode=0x0) [0070.601] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0xc10) returned 0x2c8 [0070.601] OpenProcessToken (in: ProcessHandle=0x2c8, DesiredAccess=0x20008, TokenHandle=0x66405bdf60 | out: TokenHandle=0x66405bdf60*=0x31c) returned 1 [0070.601] GetTokenInformation (in: TokenHandle=0x31c, TokenInformationClass=0x1, TokenInformation=0x664082ee80, TokenInformationLength=0x0, ReturnLength=0x66405bdf50 | out: TokenInformation=0x664082ee80, ReturnLength=0x66405bdf50) returned 0 [0070.601] GetTokenInformation (in: TokenHandle=0x31c, TokenInformationClass=0x1, TokenInformation=0x664082f880, TokenInformationLength=0x2c, ReturnLength=0x66405bdf50 | out: TokenInformation=0x664082f880, ReturnLength=0x66405bdf50) returned 1 [0070.601] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x664082f890*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 0 [0070.602] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x664082f890*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x6640846190, cchName=0x66405bdf58, ReferencedDomainName=0x664083d7c0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name="CIiHmnxMn6Ps", cchName=0x66405bdf58, ReferencedDomainName="LHNIWSJ", cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 1 [0070.603] CloseHandle (hObject=0x2c8) returned 1 [0070.603] Process32NextW (in: hSnapshot=0x2cc, lppe=0x66405bdf70 | out: lppe=0x66405bdf70*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xc4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0070.604] SetLastError (dwErrCode=0x0) [0070.604] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0xc4c) returned 0x2c8 [0070.604] OpenProcessToken (in: ProcessHandle=0x2c8, DesiredAccess=0x20008, TokenHandle=0x66405bdf60 | out: TokenHandle=0x66405bdf60*=0x320) returned 1 [0070.604] GetTokenInformation (in: TokenHandle=0x320, TokenInformationClass=0x1, TokenInformation=0x664082f880, TokenInformationLength=0x0, ReturnLength=0x66405bdf50 | out: TokenInformation=0x664082f880, ReturnLength=0x66405bdf50) returned 0 [0070.604] GetTokenInformation (in: TokenHandle=0x320, TokenInformationClass=0x1, TokenInformation=0x664082f780, TokenInformationLength=0x2c, ReturnLength=0x66405bdf50 | out: TokenInformation=0x664082f780, ReturnLength=0x66405bdf50) returned 1 [0070.604] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x664082f790*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 0 [0070.605] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x664082f790*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x6640846160, cchName=0x66405bdf58, ReferencedDomainName=0x664083d780, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name="CIiHmnxMn6Ps", cchName=0x66405bdf58, ReferencedDomainName="LHNIWSJ", cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 1 [0070.606] CloseHandle (hObject=0x2c8) returned 1 [0070.606] Process32NextW (in: hSnapshot=0x2cc, lppe=0x66405bdf70 | out: lppe=0x66405bdf70*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xc68, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x368, pcPriClassBase=8, dwFlags=0x0, szExeFile="rundll32.exe")) returned 1 [0070.607] SetLastError (dwErrCode=0x0) [0070.607] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0xc68) returned 0x0 [0070.607] CloseHandle (hObject=0x0) returned 0 [0070.607] Process32NextW (in: hSnapshot=0x2cc, lppe=0x66405bdf70 | out: lppe=0x66405bdf70*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xc80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x300, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0070.608] SetLastError (dwErrCode=0x0) [0070.608] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0xc80) returned 0x2c8 [0070.608] OpenProcessToken (in: ProcessHandle=0x2c8, DesiredAccess=0x20008, TokenHandle=0x66405bdf60 | out: TokenHandle=0x66405bdf60*=0x324) returned 1 [0070.608] GetTokenInformation (in: TokenHandle=0x324, TokenInformationClass=0x1, TokenInformation=0x664082f780, TokenInformationLength=0x0, ReturnLength=0x66405bdf50 | out: TokenInformation=0x664082f780, ReturnLength=0x66405bdf50) returned 0 [0070.608] GetTokenInformation (in: TokenHandle=0x324, TokenInformationClass=0x1, TokenInformation=0x664082f280, TokenInformationLength=0x2c, ReturnLength=0x66405bdf50 | out: TokenInformation=0x664082f280, ReturnLength=0x66405bdf50) returned 1 [0070.608] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x664082f290*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name=0x0, cchName=0x66405bdf58, ReferencedDomainName=0x0, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 0 [0070.609] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x664082f290*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x6640846190, cchName=0x66405bdf58, ReferencedDomainName=0x664083d120, cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c | out: Name="CIiHmnxMn6Ps", cchName=0x66405bdf58, ReferencedDomainName="LHNIWSJ", cchReferencedDomainName=0x66405bdf54, peUse=0x66405bdf5c) returned 1 [0070.610] CloseHandle (hObject=0x2c8) returned 1 [0070.610] Process32NextW (in: hSnapshot=0x2cc, lppe=0x66405bdf70 | out: lppe=0x66405bdf70*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xc80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x300, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 0 [0070.611] CloseHandle (hObject=0x2cc) returned 1 [0070.611] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x664067f990, nSize=0x64 | out: lpFilename="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\eqBNr.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\eqbnr.exe")) returned 0x27 [0070.611] SetLastError (dwErrCode=0x0) [0070.611] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x778) returned 0x2cc [0070.611] GetModuleHandleA (lpModuleName=0x0) returned 0x7ff7afc80000 [0070.611] SetLastError (dwErrCode=0x0) [0070.611] VirtualAllocEx (hProcess=0x2cc, lpAddress=0x7ff7afc80000, dwSize=0x35000, flAllocationType=0x3000, flProtect=0x40) returned 0x7ff7afc80000 [0070.740] WriteProcessMemory (in: hProcess=0x2cc, lpBaseAddress=0x7ff7afc80000, lpBuffer=0x7ff7afc80000*, nSize=0x35000, lpNumberOfBytesWritten=0x66405be1c0 | out: lpBuffer=0x7ff7afc80000*, lpNumberOfBytesWritten=0x66405be1c0*=0x35000) returned 1 [0070.754] CreateRemoteThread (in: hProcess=0x2cc, lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7afc819a0, lpParameter=0x7ff7afc80000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c8 [0070.755] Sleep (dwMilliseconds=0x12c) [0071.125] SetLastError (dwErrCode=0x0) [0071.125] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x7ac) returned 0x328 [0071.125] GetModuleHandleA (lpModuleName=0x0) returned 0x7ff7afc80000 [0071.125] SetLastError (dwErrCode=0x0) [0071.125] VirtualAllocEx (hProcess=0x328, lpAddress=0x7ff7afc80000, dwSize=0x35000, flAllocationType=0x3000, flProtect=0x40) returned 0x7ff7afc80000 [0071.156] WriteProcessMemory (in: hProcess=0x328, lpBaseAddress=0x7ff7afc80000, lpBuffer=0x7ff7afc80000*, nSize=0x35000, lpNumberOfBytesWritten=0x66405be1c0 | out: lpBuffer=0x7ff7afc80000*, lpNumberOfBytesWritten=0x66405be1c0*=0x35000) returned 1 [0071.162] CreateRemoteThread (in: hProcess=0x328, lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7afc819a0, lpParameter=0x7ff7afc80000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x32c [0071.163] Sleep (dwMilliseconds=0x12c) [0071.525] SetLastError (dwErrCode=0x0) [0071.525] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x814) returned 0x330 [0071.526] GetModuleHandleA (lpModuleName=0x0) returned 0x7ff7afc80000 [0071.526] SetLastError (dwErrCode=0x0) [0071.526] VirtualAllocEx (hProcess=0x330, lpAddress=0x7ff7afc80000, dwSize=0x35000, flAllocationType=0x3000, flProtect=0x40) returned 0x7ff7afc80000 [0071.980] WriteProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ff7afc80000, lpBuffer=0x7ff7afc80000*, nSize=0x35000, lpNumberOfBytesWritten=0x66405be1c0 | out: lpBuffer=0x7ff7afc80000*, lpNumberOfBytesWritten=0x66405be1c0*=0x35000) returned 1 [0071.986] CreateRemoteThread (in: hProcess=0x330, lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7afc819a0, lpParameter=0x7ff7afc80000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x334 [0071.987] Sleep (dwMilliseconds=0x12c) [0072.315] SetLastError (dwErrCode=0x0) [0072.315] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x9a0) returned 0x338 [0072.315] GetModuleHandleA (lpModuleName=0x0) returned 0x7ff7afc80000 [0072.315] SetLastError (dwErrCode=0x0) [0072.315] VirtualAllocEx (hProcess=0x338, lpAddress=0x7ff7afc80000, dwSize=0x35000, flAllocationType=0x3000, flProtect=0x40) returned 0x7ff7afc80000 [0072.599] WriteProcessMemory (in: hProcess=0x338, lpBaseAddress=0x7ff7afc80000, lpBuffer=0x7ff7afc80000*, nSize=0x35000, lpNumberOfBytesWritten=0x66405be1c0 | out: lpBuffer=0x7ff7afc80000*, lpNumberOfBytesWritten=0x66405be1c0*=0x35000) returned 1 [0072.875] CreateRemoteThread (in: hProcess=0x338, lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7afc819a0, lpParameter=0x7ff7afc80000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x33c [0072.896] Sleep (dwMilliseconds=0x12c) [0073.279] SetLastError (dwErrCode=0x0) [0073.279] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0xb7c) returned 0x340 [0073.279] GetModuleHandleA (lpModuleName=0x0) returned 0x7ff7afc80000 [0073.279] SetLastError (dwErrCode=0x0) [0073.279] VirtualAllocEx (hProcess=0x340, lpAddress=0x7ff7afc80000, dwSize=0x35000, flAllocationType=0x3000, flProtect=0x40) returned 0x7ff7afc80000 [0073.591] WriteProcessMemory (in: hProcess=0x340, lpBaseAddress=0x7ff7afc80000, lpBuffer=0x7ff7afc80000*, nSize=0x35000, lpNumberOfBytesWritten=0x66405be1c0 | out: lpBuffer=0x7ff7afc80000*, lpNumberOfBytesWritten=0x66405be1c0*=0x35000) returned 1 [0073.602] CreateRemoteThread (in: hProcess=0x340, lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7afc819a0, lpParameter=0x7ff7afc80000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x344 [0073.604] Sleep (dwMilliseconds=0x12c) [0073.925] SetLastError (dwErrCode=0x0) [0073.925] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x6a8) returned 0x348 [0073.925] GetModuleHandleA (lpModuleName=0x0) returned 0x7ff7afc80000 [0073.925] SetLastError (dwErrCode=0x0) [0073.925] VirtualAllocEx (hProcess=0x348, lpAddress=0x7ff7afc80000, dwSize=0x35000, flAllocationType=0x3000, flProtect=0x40) returned 0x0 [0073.925] GetLastError () returned 0x1e7 [0073.925] CloseHandle (hObject=0x348) returned 1 [0073.925] Sleep (dwMilliseconds=0x12c) [0074.254] SetLastError (dwErrCode=0x0) [0074.254] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x6b8) returned 0x348 [0074.254] GetModuleHandleA (lpModuleName=0x0) returned 0x7ff7afc80000 [0074.257] SetLastError (dwErrCode=0x0) [0074.257] VirtualAllocEx (hProcess=0x348, lpAddress=0x7ff7afc80000, dwSize=0x35000, flAllocationType=0x3000, flProtect=0x40) returned 0x0 [0074.258] GetLastError () returned 0x1e7 [0074.258] CloseHandle (hObject=0x348) returned 1 [0074.258] Sleep (dwMilliseconds=0x12c) [0074.606] SetLastError (dwErrCode=0x0) [0074.607] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x5cc) returned 0x348 [0074.607] GetModuleHandleA (lpModuleName=0x0) returned 0x7ff7afc80000 [0074.607] SetLastError (dwErrCode=0x0) [0074.607] VirtualAllocEx (hProcess=0x348, lpAddress=0x7ff7afc80000, dwSize=0x35000, flAllocationType=0x3000, flProtect=0x40) returned 0x0 [0074.607] GetLastError () returned 0x1e7 [0074.607] CloseHandle (hObject=0x348) returned 1 [0074.607] Sleep (dwMilliseconds=0x12c) [0074.931] SetLastError (dwErrCode=0x0) [0074.931] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x4f4) returned 0x270 [0074.932] GetModuleHandleA (lpModuleName=0x0) returned 0x7ff7afc80000 [0074.932] SetLastError (dwErrCode=0x0) [0074.932] VirtualAllocEx (hProcess=0x270, lpAddress=0x7ff7afc80000, dwSize=0x35000, flAllocationType=0x3000, flProtect=0x40) returned 0x0 [0074.932] GetLastError () returned 0x1e7 [0074.932] CloseHandle (hObject=0x270) returned 1 [0074.932] Sleep (dwMilliseconds=0x12c) [0075.267] SetLastError (dwErrCode=0x0) [0075.267] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0xbe8) returned 0x270 [0075.267] GetModuleHandleA (lpModuleName=0x0) returned 0x7ff7afc80000 [0075.267] SetLastError (dwErrCode=0x0) [0075.267] VirtualAllocEx (hProcess=0x270, lpAddress=0x7ff7afc80000, dwSize=0x35000, flAllocationType=0x3000, flProtect=0x40) returned 0x0 [0075.267] GetLastError () returned 0x1e7 [0075.267] CloseHandle (hObject=0x270) returned 1 [0075.267] Sleep (dwMilliseconds=0x12c) [0075.589] SetLastError (dwErrCode=0x0) [0075.589] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x8d4) returned 0x270 [0075.589] GetModuleHandleA (lpModuleName=0x0) returned 0x7ff7afc80000 [0075.589] SetLastError (dwErrCode=0x0) [0075.589] VirtualAllocEx (hProcess=0x270, lpAddress=0x7ff7afc80000, dwSize=0x35000, flAllocationType=0x3000, flProtect=0x40) returned 0x0 [0075.590] GetLastError () returned 0x1e7 [0075.590] CloseHandle (hObject=0x270) returned 1 [0075.590] Sleep (dwMilliseconds=0x12c) [0075.919] SetLastError (dwErrCode=0x0) [0075.919] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x1b8) returned 0x270 [0075.919] GetModuleHandleA (lpModuleName=0x0) returned 0x7ff7afc80000 [0075.919] SetLastError (dwErrCode=0x0) [0075.919] VirtualAllocEx (hProcess=0x270, lpAddress=0x7ff7afc80000, dwSize=0x35000, flAllocationType=0x3000, flProtect=0x40) returned 0x0 [0075.919] GetLastError () returned 0x1e7 [0075.919] CloseHandle (hObject=0x270) returned 1 [0075.919] Sleep (dwMilliseconds=0x12c) [0076.224] SetLastError (dwErrCode=0x0) [0076.224] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x278) returned 0x270 [0076.224] GetModuleHandleA (lpModuleName=0x0) returned 0x7ff7afc80000 [0076.224] SetLastError (dwErrCode=0x0) [0076.224] VirtualAllocEx (hProcess=0x270, lpAddress=0x7ff7afc80000, dwSize=0x35000, flAllocationType=0x3000, flProtect=0x40) returned 0x0 [0076.225] GetLastError () returned 0x1e7 [0076.225] CloseHandle (hObject=0x270) returned 1 [0076.225] Sleep (dwMilliseconds=0x12c) [0076.538] SetLastError (dwErrCode=0x0) [0076.538] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x3a8) returned 0x270 [0076.538] GetModuleHandleA (lpModuleName=0x0) returned 0x7ff7afc80000 [0076.538] SetLastError (dwErrCode=0x0) [0076.538] VirtualAllocEx (hProcess=0x270, lpAddress=0x7ff7afc80000, dwSize=0x35000, flAllocationType=0x3000, flProtect=0x40) returned 0x0 [0076.538] GetLastError () returned 0x1e7 [0076.538] CloseHandle (hObject=0x270) returned 1 [0076.538] Sleep (dwMilliseconds=0x12c) [0076.849] SetLastError (dwErrCode=0x0) [0076.849] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x504) returned 0x270 [0076.849] GetModuleHandleA (lpModuleName=0x0) returned 0x7ff7afc80000 [0076.849] SetLastError (dwErrCode=0x0) [0076.849] VirtualAllocEx (hProcess=0x270, lpAddress=0x7ff7afc80000, dwSize=0x35000, flAllocationType=0x3000, flProtect=0x40) returned 0x0 [0076.849] GetLastError () returned 0x1e7 [0076.849] CloseHandle (hObject=0x270) returned 1 [0076.849] Sleep (dwMilliseconds=0x12c) [0077.167] SetLastError (dwErrCode=0x0) [0077.168] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x134) returned 0x270 [0077.168] GetModuleHandleA (lpModuleName=0x0) returned 0x7ff7afc80000 [0077.168] SetLastError (dwErrCode=0x0) [0077.168] VirtualAllocEx (hProcess=0x270, lpAddress=0x7ff7afc80000, dwSize=0x35000, flAllocationType=0x3000, flProtect=0x40) returned 0x0 [0077.168] GetLastError () returned 0x1e7 [0077.168] CloseHandle (hObject=0x270) returned 1 [0077.168] Sleep (dwMilliseconds=0x12c) [0077.590] SetLastError (dwErrCode=0x0) [0077.590] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x720) returned 0x270 [0077.590] GetModuleHandleA (lpModuleName=0x0) returned 0x7ff7afc80000 [0077.590] SetLastError (dwErrCode=0x0) [0077.590] VirtualAllocEx (hProcess=0x270, lpAddress=0x7ff7afc80000, dwSize=0x35000, flAllocationType=0x3000, flProtect=0x40) returned 0x0 [0077.591] GetLastError () returned 0x1e7 [0077.591] CloseHandle (hObject=0x270) returned 1 [0077.591] Sleep (dwMilliseconds=0x12c) [0077.896] SetLastError (dwErrCode=0x0) [0077.896] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x644) returned 0x270 [0077.896] GetModuleHandleA (lpModuleName=0x0) returned 0x7ff7afc80000 [0077.896] SetLastError (dwErrCode=0x0) [0077.896] VirtualAllocEx (hProcess=0x270, lpAddress=0x7ff7afc80000, dwSize=0x35000, flAllocationType=0x3000, flProtect=0x40) returned 0x0 [0077.896] GetLastError () returned 0x1e7 [0077.896] CloseHandle (hObject=0x270) returned 1 [0077.896] Sleep (dwMilliseconds=0x12c) [0078.208] SetLastError (dwErrCode=0x0) [0078.208] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x8e0) returned 0x270 [0078.208] GetModuleHandleA (lpModuleName=0x0) returned 0x7ff7afc80000 [0078.208] SetLastError (dwErrCode=0x0) [0078.208] VirtualAllocEx (hProcess=0x270, lpAddress=0x7ff7afc80000, dwSize=0x35000, flAllocationType=0x3000, flProtect=0x40) returned 0x0 [0078.209] GetLastError () returned 0x1e7 [0078.209] CloseHandle (hObject=0x270) returned 1 [0078.209] Sleep (dwMilliseconds=0x12c) [0078.523] SetLastError (dwErrCode=0x0) [0078.523] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x6fc) returned 0x270 [0078.523] GetModuleHandleA (lpModuleName=0x0) returned 0x7ff7afc80000 [0078.523] SetLastError (dwErrCode=0x0) [0078.523] VirtualAllocEx (hProcess=0x270, lpAddress=0x7ff7afc80000, dwSize=0x35000, flAllocationType=0x3000, flProtect=0x40) returned 0x0 [0078.523] GetLastError () returned 0x1e7 [0078.524] CloseHandle (hObject=0x270) returned 1 [0078.524] Sleep (dwMilliseconds=0x12c) [0078.843] SetLastError (dwErrCode=0x0) [0078.843] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0xb14) returned 0x270 [0078.843] GetModuleHandleA (lpModuleName=0x0) returned 0x7ff7afc80000 [0078.843] SetLastError (dwErrCode=0x0) [0078.843] VirtualAllocEx (hProcess=0x270, lpAddress=0x7ff7afc80000, dwSize=0x35000, flAllocationType=0x3000, flProtect=0x40) returned 0x0 [0078.843] GetLastError () returned 0x1e7 [0078.843] CloseHandle (hObject=0x270) returned 1 [0078.844] Sleep (dwMilliseconds=0x12c) [0079.160] SetLastError (dwErrCode=0x0) [0079.160] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x6b4) returned 0x270 [0079.161] GetModuleHandleA (lpModuleName=0x0) returned 0x7ff7afc80000 [0079.161] SetLastError (dwErrCode=0x0) [0079.161] VirtualAllocEx (hProcess=0x270, lpAddress=0x7ff7afc80000, dwSize=0x35000, flAllocationType=0x3000, flProtect=0x40) returned 0x0 [0079.161] GetLastError () returned 0x1e7 [0079.162] CloseHandle (hObject=0x270) returned 1 [0079.162] Sleep (dwMilliseconds=0x12c) [0079.470] SetLastError (dwErrCode=0x0) [0079.470] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x91c) returned 0x270 [0079.471] GetModuleHandleA (lpModuleName=0x0) returned 0x7ff7afc80000 [0079.471] SetLastError (dwErrCode=0x0) [0079.471] VirtualAllocEx (hProcess=0x270, lpAddress=0x7ff7afc80000, dwSize=0x35000, flAllocationType=0x3000, flProtect=0x40) returned 0x0 [0079.471] GetLastError () returned 0x1e7 [0079.471] CloseHandle (hObject=0x270) returned 1 [0079.471] Sleep (dwMilliseconds=0x12c) [0079.784] SetLastError (dwErrCode=0x0) [0079.784] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0xa1c) returned 0x270 [0079.785] GetModuleHandleA (lpModuleName=0x0) returned 0x7ff7afc80000 [0079.785] SetLastError (dwErrCode=0x0) [0079.785] VirtualAllocEx (hProcess=0x270, lpAddress=0x7ff7afc80000, dwSize=0x35000, flAllocationType=0x3000, flProtect=0x40) returned 0x7ff7afc80000 [0079.787] WriteProcessMemory (in: hProcess=0x270, lpBaseAddress=0x7ff7afc80000, lpBuffer=0x7ff7afc80000*, nSize=0x35000, lpNumberOfBytesWritten=0x66405be1c0 | out: lpBuffer=0x7ff7afc80000*, lpNumberOfBytesWritten=0x66405be1c0*=0x35000) returned 1 [0079.791] CreateRemoteThread (in: hProcess=0x270, lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7afc819a0, lpParameter=0x7ff7afc80000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x350 [0079.792] Sleep (dwMilliseconds=0x12c) [0080.095] SetLastError (dwErrCode=0x0) [0080.095] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x8c8) returned 0x354 [0080.095] GetModuleHandleA (lpModuleName=0x0) returned 0x7ff7afc80000 [0080.095] SetLastError (dwErrCode=0x0) [0080.095] VirtualAllocEx (hProcess=0x354, lpAddress=0x7ff7afc80000, dwSize=0x35000, flAllocationType=0x3000, flProtect=0x40) returned 0x0 [0080.096] GetLastError () returned 0x1e7 [0080.096] CloseHandle (hObject=0x354) returned 1 [0080.096] Sleep (dwMilliseconds=0x12c) [0080.417] SetLastError (dwErrCode=0x0) [0080.417] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x98c) returned 0x354 [0080.417] GetModuleHandleA (lpModuleName=0x0) returned 0x7ff7afc80000 [0080.417] SetLastError (dwErrCode=0x0) [0080.417] VirtualAllocEx (hProcess=0x354, lpAddress=0x7ff7afc80000, dwSize=0x35000, flAllocationType=0x3000, flProtect=0x40) returned 0x0 [0080.417] GetLastError () returned 0x1e7 [0080.417] CloseHandle (hObject=0x354) returned 1 [0080.417] Sleep (dwMilliseconds=0x12c) [0080.732] SetLastError (dwErrCode=0x0) [0080.732] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0xc10) returned 0x0 [0080.732] Sleep (dwMilliseconds=0x12c) [0081.048] SetLastError (dwErrCode=0x0) [0081.048] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0xc4c) returned 0x354 [0081.048] GetModuleHandleA (lpModuleName=0x0) returned 0x7ff7afc80000 [0081.048] SetLastError (dwErrCode=0x0) [0081.048] VirtualAllocEx (hProcess=0x354, lpAddress=0x7ff7afc80000, dwSize=0x35000, flAllocationType=0x3000, flProtect=0x40) returned 0x7ff7afc80000 [0081.061] WriteProcessMemory (in: hProcess=0x354, lpBaseAddress=0x7ff7afc80000, lpBuffer=0x7ff7afc80000*, nSize=0x35000, lpNumberOfBytesWritten=0x66405be1c0 | out: lpBuffer=0x7ff7afc80000*, lpNumberOfBytesWritten=0x66405be1c0*=0x35000) returned 1 [0081.067] CreateRemoteThread (in: hProcess=0x354, lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7afc819a0, lpParameter=0x7ff7afc80000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x358 [0081.068] Sleep (dwMilliseconds=0x12c) [0081.385] SetLastError (dwErrCode=0x0) [0081.385] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0xc80) returned 0x0 [0081.385] Sleep (dwMilliseconds=0x12c) [0081.690] Sleep (dwMilliseconds=0x1388) [0086.702] GetWindowsDirectoryW (in: lpBuffer=0x66405be160, uSize=0x32 | out: lpBuffer="C:\\Windows") returned 0xa [0086.702] SetLastError (dwErrCode=0x0) [0086.702] CreateFileW (lpFileName="C:\\users\\Public\\sys" (normalized: "c:\\users\\public\\sys"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.703] GetLastError () returned 0x20 [0086.703] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.703] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x664067f870, nSize=0x104 | out: lpFilename="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\eqBNr.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\eqbnr.exe")) returned 0x27 [0086.703] GetModuleHandleW (lpModuleName=0x0) returned 0x7ff7afc80000 [0086.703] GetModuleHandleW (lpModuleName=0x0) returned 0x7ff7afc80000 [0086.704] LoadLibraryExW (lpLibFileName="api-ms-win-appmodel-runtime-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x7ff8eae20000 [0086.704] GetProcAddress (hModule=0x7ff8eae20000, lpProcName="GetCurrentPackageId") returned 0x7ff8eae22310 [0086.704] GetCurrentPackageId () returned 0x3d54 [0086.704] GetModuleHandleExW (in: dwFlags=0x0, lpModuleName="mscoree.dll", phModule=0x664067fa48 | out: phModule=0x664067fa48) returned 0 [0086.704] ExitProcess (uExitCode=0x0) Thread: id = 2 os_tid = 0x5c0 Thread: id = 3 os_tid = 0xc3c Thread: id = 4 os_tid = 0xc44 Thread: id = 5 os_tid = 0xc5c Thread: id = 6 os_tid = 0xc60 Thread: id = 7 os_tid = 0xc64 Process: id = "2" image_name = "cmd.exe" filename = "c:\\windows\\system32\\cmd.exe" page_root = "0x2f4df000" os_pid = "0xc80" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x300" cmd_line = "\"C:\\Windows\\System32\\cmd.exe\" /C REG ADD \"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run\" /v \"svchos\" /t REG_SZ /d \"C:\\Users\\CIiHmnxMn6Ps\\Desktop\\eqBNr.exe\" /f" cur_dir = "C:\\Users\\CIiHmnxMn6Ps\\Desktop\\" os_username = "LHNIWSJ\\CIiHmnxMn6Ps" os_groups = "LHNIWSJ\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00014ee5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 225 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 226 start_va = 0x96f3030000 end_va = 0x96f304ffff entry_point = 0x0 region_type = private name = "private_0x00000096f3030000" filename = "" Region: id = 227 start_va = 0x96f3050000 end_va = 0x96f3063fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000096f3050000" filename = "" Region: id = 228 start_va = 0x96f3070000 end_va = 0x96f316ffff entry_point = 0x0 region_type = private name = "private_0x00000096f3070000" filename = "" Region: id = 229 start_va = 0x96f3170000 end_va = 0x96f3173fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000096f3170000" filename = "" Region: id = 230 start_va = 0x96f3180000 end_va = 0x96f3180fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000096f3180000" filename = "" Region: id = 231 start_va = 0x96f3190000 end_va = 0x96f3191fff entry_point = 0x0 region_type = private name = "private_0x00000096f3190000" filename = "" Region: id = 232 start_va = 0x7df5ff490000 end_va = 0x7ff5ff48ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ff490000" filename = "" Region: id = 233 start_va = 0x7ff786200000 end_va = 0x7ff786222fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff786200000" filename = "" Region: id = 234 start_va = 0x7ff78622a000 end_va = 0x7ff78622afff entry_point = 0x0 region_type = private name = "private_0x00007ff78622a000" filename = "" Region: id = 235 start_va = 0x7ff78622e000 end_va = 0x7ff78622ffff entry_point = 0x0 region_type = private name = "private_0x00007ff78622e000" filename = "" Region: id = 236 start_va = 0x7ff7863d0000 end_va = 0x7ff786428fff entry_point = 0x7ff7863d0000 region_type = mapped_file name = "cmd.exe" filename = "\\Windows\\System32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe") Region: id = 237 start_va = 0x7ff8ee380000 end_va = 0x7ff8ee541fff entry_point = 0x7ff8ee380000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 269 start_va = 0x96f3030000 end_va = 0x96f303ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000096f3030000" filename = "" Region: id = 270 start_va = 0x96f3220000 end_va = 0x96f331ffff entry_point = 0x0 region_type = private name = "private_0x00000096f3220000" filename = "" Region: id = 271 start_va = 0x7ff786100000 end_va = 0x7ff7861fffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff786100000" filename = "" Region: id = 272 start_va = 0x7ff8eb870000 end_va = 0x7ff8eba4cfff entry_point = 0x7ff8eb870000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 273 start_va = 0x7ff8ee2d0000 end_va = 0x7ff8ee37cfff entry_point = 0x7ff8ee2d0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 1046 start_va = 0x96f3040000 end_va = 0x96f3046fff entry_point = 0x0 region_type = private name = "private_0x00000096f3040000" filename = "" Region: id = 1047 start_va = 0x96f3320000 end_va = 0x96f33ddfff entry_point = 0x96f3320000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 1048 start_va = 0x96f33e0000 end_va = 0x96f34dffff entry_point = 0x0 region_type = private name = "private_0x00000096f33e0000" filename = "" Region: id = 1049 start_va = 0x96f3630000 end_va = 0x96f363ffff entry_point = 0x0 region_type = private name = "private_0x00000096f3630000" filename = "" Region: id = 1050 start_va = 0x7ff78622c000 end_va = 0x7ff78622dfff entry_point = 0x0 region_type = private name = "private_0x00007ff78622c000" filename = "" Region: id = 1051 start_va = 0x7ff8ee0b0000 end_va = 0x7ff8ee14cfff entry_point = 0x7ff8ee0b0000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 1052 start_va = 0x96f31a0000 end_va = 0x96f31a6fff entry_point = 0x0 region_type = private name = "private_0x00000096f31a0000" filename = "" Region: id = 1053 start_va = 0x96f3640000 end_va = 0x96f3976fff entry_point = 0x96f3640000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Thread: id = 8 os_tid = 0xc84 [0072.848] GetModuleHandleW (lpModuleName=0x0) returned 0x7ff7863d0000 [0072.848] __set_app_type (_Type=0x1) [0072.848] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x7ff7863e44a0) returned 0x0 [0072.848] __getmainargs (in: _Argc=0x7ff7863ff0e8, _Argv=0x7ff7863ff0f0, _Env=0x7ff7863ff0f8, _DoWildCard=0, _StartInfo=0x7ff7863ff104 | out: _Argc=0x7ff7863ff0e8, _Argv=0x7ff7863ff0f0, _Env=0x7ff7863ff0f8) returned 0 [0072.849] GetCurrentThreadId () returned 0xc84 [0072.849] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0xc84) returned 0x6c [0072.849] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x7ff8ee2d0000 [0072.849] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="SetThreadUILanguage") returned 0x7ff8ee2ed550 [0072.849] SetThreadUILanguage (LangId=0x0) returned 0x409 [0072.876] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0072.876] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x96f316fa78 | out: phkResult=0x96f316fa78*=0x0) returned 0x2 [0072.876] VirtualQuery (in: lpAddress=0x96f316fa64, lpBuffer=0x96f316f9e0, dwLength=0x30 | out: lpBuffer=0x96f316f9e0*(BaseAddress=0x96f316f000, AllocationBase=0x96f3070000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0xffffd000)) returned 0x30 [0072.876] VirtualQuery (in: lpAddress=0x96f3070000, lpBuffer=0x96f316f9e0, dwLength=0x30 | out: lpBuffer=0x96f316f9e0*(BaseAddress=0x96f3070000, AllocationBase=0x96f3070000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0xffffd000)) returned 0x30 [0072.876] VirtualQuery (in: lpAddress=0x96f3071000, lpBuffer=0x96f316f9e0, dwLength=0x30 | out: lpBuffer=0x96f316f9e0*(BaseAddress=0x96f3071000, AllocationBase=0x96f3070000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x3000, State=0x1000, Protect=0x104, Type=0x20000, __alignment2=0xffffd000)) returned 0x30 [0072.877] VirtualQuery (in: lpAddress=0x96f3074000, lpBuffer=0x96f316f9e0, dwLength=0x30 | out: lpBuffer=0x96f316f9e0*(BaseAddress=0x96f3074000, AllocationBase=0x96f3070000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0xfc000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0xffffd000)) returned 0x30 [0072.877] VirtualQuery (in: lpAddress=0x96f3170000, lpBuffer=0x96f316f9e0, dwLength=0x30 | out: lpBuffer=0x96f316f9e0*(BaseAddress=0x96f3170000, AllocationBase=0x96f3170000, AllocationProtect=0x2, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x2, Type=0x40000, __alignment2=0xffffd000)) returned 0x30 [0072.877] GetConsoleOutputCP () returned 0x1b5 [0072.896] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff786408640 | out: lpCPInfo=0x7ff786408640) returned 1 [0072.897] SetConsoleCtrlHandler (HandlerRoutine=0x7ff7863f15d0, Add=1) returned 1 [0072.897] _get_osfhandle (_FileHandle=1) returned 0x24 [0072.897] SetConsoleMode (hConsoleHandle=0x24, dwMode=0x0) returned 1 [0072.902] _get_osfhandle (_FileHandle=1) returned 0x24 [0072.902] GetConsoleMode (in: hConsoleHandle=0x24, lpMode=0x7ff7864085ec | out: lpMode=0x7ff7864085ec) returned 1 [0072.912] _get_osfhandle (_FileHandle=1) returned 0x24 [0072.912] SetConsoleMode (hConsoleHandle=0x24, dwMode=0x3) returned 1 [0072.919] _get_osfhandle (_FileHandle=0) returned 0x20 [0072.919] GetConsoleMode (in: hConsoleHandle=0x20, lpMode=0x7ff7864085e8 | out: lpMode=0x7ff7864085e8) returned 1 [0072.929] _get_osfhandle (_FileHandle=0) returned 0x20 [0072.929] SetConsoleMode (hConsoleHandle=0x20, dwMode=0x1e7) returned 1 [0072.940] GetEnvironmentStringsW () returned 0x96f32256f0* [0072.940] FreeEnvironmentStringsA (penv="A") returned 1 [0072.940] GetEnvironmentStringsW () returned 0x96f32256f0* [0072.941] FreeEnvironmentStringsA (penv="A") returned 1 [0072.941] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x96f316e928 | out: phkResult=0x96f316e928*=0x78) returned 0x0 [0072.941] RegQueryValueExW (in: hKey=0x78, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x96f316e920, lpData=0x96f316e940, lpcbData=0x96f316e924*=0x1000 | out: lpType=0x96f316e920*=0x0, lpData=0x96f316e940*=0x1, lpcbData=0x96f316e924*=0x1000) returned 0x2 [0072.941] RegQueryValueExW (in: hKey=0x78, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x96f316e920, lpData=0x96f316e940, lpcbData=0x96f316e924*=0x1000 | out: lpType=0x96f316e920*=0x4, lpData=0x96f316e940*=0x1, lpcbData=0x96f316e924*=0x4) returned 0x0 [0072.941] RegQueryValueExW (in: hKey=0x78, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x96f316e920, lpData=0x96f316e940, lpcbData=0x96f316e924*=0x1000 | out: lpType=0x96f316e920*=0x0, lpData=0x96f316e940*=0x1, lpcbData=0x96f316e924*=0x1000) returned 0x2 [0072.941] RegQueryValueExW (in: hKey=0x78, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x96f316e920, lpData=0x96f316e940, lpcbData=0x96f316e924*=0x1000 | out: lpType=0x96f316e920*=0x4, lpData=0x96f316e940*=0x0, lpcbData=0x96f316e924*=0x4) returned 0x0 [0072.941] RegQueryValueExW (in: hKey=0x78, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x96f316e920, lpData=0x96f316e940, lpcbData=0x96f316e924*=0x1000 | out: lpType=0x96f316e920*=0x4, lpData=0x96f316e940*=0x40, lpcbData=0x96f316e924*=0x4) returned 0x0 [0072.941] RegQueryValueExW (in: hKey=0x78, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x96f316e920, lpData=0x96f316e940, lpcbData=0x96f316e924*=0x1000 | out: lpType=0x96f316e920*=0x4, lpData=0x96f316e940*=0x40, lpcbData=0x96f316e924*=0x4) returned 0x0 [0072.941] RegQueryValueExW (in: hKey=0x78, lpValueName="AutoRun", lpReserved=0x0, lpType=0x96f316e920, lpData=0x96f316e940, lpcbData=0x96f316e924*=0x1000 | out: lpType=0x96f316e920*=0x0, lpData=0x96f316e940*=0x40, lpcbData=0x96f316e924*=0x1000) returned 0x2 [0072.941] RegCloseKey (hKey=0x78) returned 0x0 [0072.941] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x96f316e928 | out: phkResult=0x96f316e928*=0x78) returned 0x0 [0072.941] RegQueryValueExW (in: hKey=0x78, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x96f316e920, lpData=0x96f316e940, lpcbData=0x96f316e924*=0x1000 | out: lpType=0x96f316e920*=0x0, lpData=0x96f316e940*=0x40, lpcbData=0x96f316e924*=0x1000) returned 0x2 [0072.941] RegQueryValueExW (in: hKey=0x78, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x96f316e920, lpData=0x96f316e940, lpcbData=0x96f316e924*=0x1000 | out: lpType=0x96f316e920*=0x4, lpData=0x96f316e940*=0x1, lpcbData=0x96f316e924*=0x4) returned 0x0 [0072.941] RegQueryValueExW (in: hKey=0x78, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x96f316e920, lpData=0x96f316e940, lpcbData=0x96f316e924*=0x1000 | out: lpType=0x96f316e920*=0x0, lpData=0x96f316e940*=0x1, lpcbData=0x96f316e924*=0x1000) returned 0x2 [0072.941] RegQueryValueExW (in: hKey=0x78, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x96f316e920, lpData=0x96f316e940, lpcbData=0x96f316e924*=0x1000 | out: lpType=0x96f316e920*=0x4, lpData=0x96f316e940*=0x0, lpcbData=0x96f316e924*=0x4) returned 0x0 [0072.941] RegQueryValueExW (in: hKey=0x78, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x96f316e920, lpData=0x96f316e940, lpcbData=0x96f316e924*=0x1000 | out: lpType=0x96f316e920*=0x4, lpData=0x96f316e940*=0x9, lpcbData=0x96f316e924*=0x4) returned 0x0 [0072.941] RegQueryValueExW (in: hKey=0x78, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x96f316e920, lpData=0x96f316e940, lpcbData=0x96f316e924*=0x1000 | out: lpType=0x96f316e920*=0x4, lpData=0x96f316e940*=0x9, lpcbData=0x96f316e924*=0x4) returned 0x0 [0072.941] RegQueryValueExW (in: hKey=0x78, lpValueName="AutoRun", lpReserved=0x0, lpType=0x96f316e920, lpData=0x96f316e940, lpcbData=0x96f316e924*=0x1000 | out: lpType=0x96f316e920*=0x0, lpData=0x96f316e940*=0x9, lpcbData=0x96f316e924*=0x1000) returned 0x2 [0072.941] RegCloseKey (hKey=0x78) returned 0x0 [0072.941] time (in: timer=0x0 | out: timer=0x0) returned 0x5bfd9fcf [0072.941] srand (_Seed=0x5bfd9fcf) [0072.941] GetCommandLineW () returned="\"C:\\Windows\\System32\\cmd.exe\" /C REG ADD \"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run\" /v \"svchos\" /t REG_SZ /d \"C:\\Users\\CIiHmnxMn6Ps\\Desktop\\eqBNr.exe\" /f" [0072.941] GetCommandLineW () returned="\"C:\\Windows\\System32\\cmd.exe\" /C REG ADD \"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run\" /v \"svchos\" /t REG_SZ /d \"C:\\Users\\CIiHmnxMn6Ps\\Desktop\\eqBNr.exe\" /f" [0072.942] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x7ff786410920 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 0x1d [0072.942] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x96f3225730, nSize=0x104 | out: lpFilename="C:\\Windows\\System32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe")) returned 0x1b [0072.942] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x7ff786408680, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x87 [0072.942] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x7ff786408680, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0072.942] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x7ff786408680, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0072.942] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0072.942] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0072.942] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0072.942] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0072.942] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0072.942] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0072.942] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0072.942] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0072.942] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0072.942] GetEnvironmentStringsW () returned 0x96f3225940* [0072.942] FreeEnvironmentStringsA (penv="A") returned 1 [0072.942] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x7ff786408680, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0072.942] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x7ff786408680, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0072.942] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0072.942] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0072.943] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0072.943] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0072.943] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0072.943] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0072.943] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0072.943] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0072.943] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x96f316f730 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 0x1d [0072.943] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop", nBufferLength=0x104, lpBuffer=0x96f316f730, lpFilePart=0x96f316f710 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpFilePart=0x96f316f710*="Desktop") returned 0x1d [0072.943] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop")) returned 0x11 [0072.943] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x96f316f440 | out: lpFindFileData=0x96f316f440) returned 0x96f3228a30 [0072.943] FindClose (in: hFindFile=0x96f3228a30 | out: hFindFile=0x96f3228a30) returned 1 [0072.943] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps", lpFindFileData=0x96f316f440 | out: lpFindFileData=0x96f316f440) returned 0x96f3220720 [0072.944] FindClose (in: hFindFile=0x96f3220720 | out: hFindFile=0x96f3220720) returned 1 [0072.944] _wcsnicmp (_String1="CIIHMN~1", _String2="CIiHmnxMn6Ps", _MaxCount=0xc) returned 6 [0072.944] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpFindFileData=0x96f316f440 | out: lpFindFileData=0x96f316f440) returned 0x96f3220720 [0072.944] FindClose (in: hFindFile=0x96f3220720 | out: hFindFile=0x96f3220720) returned 1 [0072.944] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop")) returned 0x11 [0072.944] SetCurrentDirectoryW (lpPathName="C:\\Users\\CIiHmnxMn6Ps\\Desktop" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop")) returned 1 [0072.944] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1 [0072.944] GetEnvironmentStringsW () returned 0x96f3227550* [0072.944] FreeEnvironmentStringsA (penv="=") returned 1 [0072.944] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x7ff786410920 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 0x1d [0072.945] GetConsoleOutputCP () returned 0x1b5 [0072.958] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff786408640 | out: lpCPInfo=0x7ff786408640) returned 1 [0072.958] GetUserDefaultLCID () returned 0x409 [0072.958] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x7ff78640c680, cchData=8 | out: lpLCData=":") returned 2 [0072.958] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x96f316f860, cchData=128 | out: lpLCData="0") returned 2 [0072.958] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x96f316f860, cchData=128 | out: lpLCData="0") returned 2 [0072.958] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x96f316f860, cchData=128 | out: lpLCData="1") returned 2 [0072.958] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x7ff78640c690, cchData=8 | out: lpLCData="/") returned 2 [0072.958] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x7ff78640c6e0, cchData=32 | out: lpLCData="Mon") returned 4 [0072.958] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x7ff78640c720, cchData=32 | out: lpLCData="Tue") returned 4 [0072.958] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x7ff78640c760, cchData=32 | out: lpLCData="Wed") returned 4 [0072.958] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x7ff78640c7a0, cchData=32 | out: lpLCData="Thu") returned 4 [0072.958] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x7ff78640c7e0, cchData=32 | out: lpLCData="Fri") returned 4 [0072.958] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x7ff78640c820, cchData=32 | out: lpLCData="Sat") returned 4 [0072.959] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x7ff78640c860, cchData=32 | out: lpLCData="Sun") returned 4 [0072.959] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x7ff78640c6a0, cchData=8 | out: lpLCData=".") returned 2 [0072.959] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x7ff78640c6c0, cchData=8 | out: lpLCData=",") returned 2 [0072.959] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0072.960] GetConsoleTitleW (in: lpConsoleTitle=0x96f32263c0, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\System32\\cmd.exe") returned 0x1b [0072.970] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x7ff8ee2d0000 [0072.970] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="CopyFileExW") returned 0x7ff8ee2f25e0 [0072.970] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="IsDebuggerPresent") returned 0x7ff8ee2f1f90 [0072.970] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="SetConsoleInputExeNameW") returned 0x7ff8eb8c3a10 [0072.971] _wcsicmp (_String1="REG", _String2=")") returned 73 [0072.971] _wcsicmp (_String1="FOR", _String2="REG") returned -12 [0072.971] _wcsicmp (_String1="FOR/?", _String2="REG") returned -12 [0072.971] _wcsicmp (_String1="IF", _String2="REG") returned -9 [0072.971] _wcsicmp (_String1="IF/?", _String2="REG") returned -9 [0072.971] _wcsicmp (_String1="REM", _String2="REG") returned 6 [0072.971] _wcsicmp (_String1="REM/?", _String2="REG") returned 6 [0072.974] GetConsoleTitleW (in: lpConsoleTitle=0x96f316f750, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\System32\\cmd.exe") returned 0x1b [0072.975] _wcsicmp (_String1="REG", _String2="DIR") returned 14 [0072.975] _wcsicmp (_String1="REG", _String2="ERASE") returned 13 [0072.975] _wcsicmp (_String1="REG", _String2="DEL") returned 14 [0072.975] _wcsicmp (_String1="REG", _String2="TYPE") returned -2 [0072.975] _wcsicmp (_String1="REG", _String2="COPY") returned 15 [0072.975] _wcsicmp (_String1="REG", _String2="CD") returned 15 [0072.975] _wcsicmp (_String1="REG", _String2="CHDIR") returned 15 [0072.975] _wcsicmp (_String1="REG", _String2="RENAME") returned -7 [0072.975] _wcsicmp (_String1="REG", _String2="REN") returned -7 [0072.975] _wcsicmp (_String1="REG", _String2="ECHO") returned 13 [0072.975] _wcsicmp (_String1="REG", _String2="SET") returned -1 [0072.975] _wcsicmp (_String1="REG", _String2="PAUSE") returned 2 [0072.975] _wcsicmp (_String1="REG", _String2="DATE") returned 14 [0072.975] _wcsicmp (_String1="REG", _String2="TIME") returned -2 [0072.975] _wcsicmp (_String1="REG", _String2="PROMPT") returned 2 [0072.975] _wcsicmp (_String1="REG", _String2="MD") returned 5 [0072.975] _wcsicmp (_String1="REG", _String2="MKDIR") returned 5 [0072.975] _wcsicmp (_String1="REG", _String2="RD") returned 1 [0072.975] _wcsicmp (_String1="REG", _String2="RMDIR") returned -8 [0072.976] _wcsicmp (_String1="REG", _String2="PATH") returned 2 [0072.976] _wcsicmp (_String1="REG", _String2="GOTO") returned 11 [0072.976] _wcsicmp (_String1="REG", _String2="SHIFT") returned -1 [0072.976] _wcsicmp (_String1="REG", _String2="CLS") returned 15 [0072.976] _wcsicmp (_String1="REG", _String2="CALL") returned 15 [0072.976] _wcsicmp (_String1="REG", _String2="VERIFY") returned -4 [0072.976] _wcsicmp (_String1="REG", _String2="VER") returned -4 [0072.976] _wcsicmp (_String1="REG", _String2="VOL") returned -4 [0072.976] _wcsicmp (_String1="REG", _String2="EXIT") returned 13 [0072.976] _wcsicmp (_String1="REG", _String2="SETLOCAL") returned -1 [0072.976] _wcsicmp (_String1="REG", _String2="ENDLOCAL") returned 13 [0072.976] _wcsicmp (_String1="REG", _String2="TITLE") returned -2 [0072.976] _wcsicmp (_String1="REG", _String2="START") returned -1 [0072.976] _wcsicmp (_String1="REG", _String2="DPATH") returned 14 [0072.976] _wcsicmp (_String1="REG", _String2="KEYS") returned 7 [0072.976] _wcsicmp (_String1="REG", _String2="MOVE") returned 5 [0072.976] _wcsicmp (_String1="REG", _String2="PUSHD") returned 2 [0072.976] _wcsicmp (_String1="REG", _String2="POPD") returned 2 [0072.976] _wcsicmp (_String1="REG", _String2="ASSOC") returned 17 [0072.976] _wcsicmp (_String1="REG", _String2="FTYPE") returned 12 [0072.976] _wcsicmp (_String1="REG", _String2="BREAK") returned 16 [0072.976] _wcsicmp (_String1="REG", _String2="COLOR") returned 15 [0072.976] _wcsicmp (_String1="REG", _String2="MKLINK") returned 5 [0072.976] _wcsicmp (_String1="REG", _String2="DIR") returned 14 [0072.976] _wcsicmp (_String1="REG", _String2="ERASE") returned 13 [0072.976] _wcsicmp (_String1="REG", _String2="DEL") returned 14 [0072.976] _wcsicmp (_String1="REG", _String2="TYPE") returned -2 [0072.976] _wcsicmp (_String1="REG", _String2="COPY") returned 15 [0072.976] _wcsicmp (_String1="REG", _String2="CD") returned 15 [0072.976] _wcsicmp (_String1="REG", _String2="CHDIR") returned 15 [0072.976] _wcsicmp (_String1="REG", _String2="RENAME") returned -7 [0072.976] _wcsicmp (_String1="REG", _String2="REN") returned -7 [0072.976] _wcsicmp (_String1="REG", _String2="ECHO") returned 13 [0072.976] _wcsicmp (_String1="REG", _String2="SET") returned -1 [0072.976] _wcsicmp (_String1="REG", _String2="PAUSE") returned 2 [0072.976] _wcsicmp (_String1="REG", _String2="DATE") returned 14 [0072.976] _wcsicmp (_String1="REG", _String2="TIME") returned -2 [0072.977] _wcsicmp (_String1="REG", _String2="PROMPT") returned 2 [0072.977] _wcsicmp (_String1="REG", _String2="MD") returned 5 [0072.977] _wcsicmp (_String1="REG", _String2="MKDIR") returned 5 [0072.977] _wcsicmp (_String1="REG", _String2="RD") returned 1 [0072.977] _wcsicmp (_String1="REG", _String2="RMDIR") returned -8 [0072.977] _wcsicmp (_String1="REG", _String2="PATH") returned 2 [0072.977] _wcsicmp (_String1="REG", _String2="GOTO") returned 11 [0072.977] _wcsicmp (_String1="REG", _String2="SHIFT") returned -1 [0072.977] _wcsicmp (_String1="REG", _String2="CLS") returned 15 [0072.977] _wcsicmp (_String1="REG", _String2="CALL") returned 15 [0072.977] _wcsicmp (_String1="REG", _String2="VERIFY") returned -4 [0072.977] _wcsicmp (_String1="REG", _String2="VER") returned -4 [0072.977] _wcsicmp (_String1="REG", _String2="VOL") returned -4 [0072.977] _wcsicmp (_String1="REG", _String2="EXIT") returned 13 [0072.977] _wcsicmp (_String1="REG", _String2="SETLOCAL") returned -1 [0072.977] _wcsicmp (_String1="REG", _String2="ENDLOCAL") returned 13 [0072.977] _wcsicmp (_String1="REG", _String2="TITLE") returned -2 [0072.977] _wcsicmp (_String1="REG", _String2="START") returned -1 [0072.977] _wcsicmp (_String1="REG", _String2="DPATH") returned 14 [0072.977] _wcsicmp (_String1="REG", _String2="KEYS") returned 7 [0072.977] _wcsicmp (_String1="REG", _String2="MOVE") returned 5 [0072.977] _wcsicmp (_String1="REG", _String2="PUSHD") returned 2 [0072.977] _wcsicmp (_String1="REG", _String2="POPD") returned 2 [0072.977] _wcsicmp (_String1="REG", _String2="ASSOC") returned 17 [0072.977] _wcsicmp (_String1="REG", _String2="FTYPE") returned 12 [0072.977] _wcsicmp (_String1="REG", _String2="BREAK") returned 16 [0072.977] _wcsicmp (_String1="REG", _String2="COLOR") returned 15 [0072.977] _wcsicmp (_String1="REG", _String2="MKLINK") returned 5 [0072.977] _wcsicmp (_String1="REG", _String2="FOR") returned 12 [0072.977] _wcsicmp (_String1="REG", _String2="IF") returned 9 [0072.977] _wcsicmp (_String1="REG", _String2="REM") returned -6 [0072.978] _wcsnicmp (_String1="REG", _String2="cmd ", _MaxCount=0x4) returned 15 [0072.978] SetErrorMode (uMode=0x0) returned 0x0 [0072.978] SetErrorMode (uMode=0x1) returned 0x0 [0072.978] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x96f3227560, lpFilePart=0x96f316eff0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpFilePart=0x96f316eff0*="Desktop") returned 0x1d [0072.978] SetErrorMode (uMode=0x0) returned 0x1 [0072.979] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x7ff786408680, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x87 [0072.979] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0072.987] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x7ff786408680, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0072.989] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0072.989] FindFirstFileExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\REG.*", fInfoLevelId=0x1, lpFindFileData=0x96f316ed70, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x96f316ed70) returned 0xffffffffffffffff [0072.989] GetLastError () returned 0x2 [0072.989] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0072.989] FindFirstFileExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\REG.*", fInfoLevelId=0x1, lpFindFileData=0x96f316ed70, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x96f316ed70) returned 0xffffffffffffffff [0072.992] GetLastError () returned 0x2 [0072.992] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0072.992] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\REG.*", fInfoLevelId=0x1, lpFindFileData=0x96f316ed70, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x96f316ed70) returned 0x96f3221220 [0072.992] FindClose (in: hFindFile=0x96f3221220 | out: hFindFile=0x96f3221220) returned 1 [0072.993] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\reg.COM", fInfoLevelId=0x1, lpFindFileData=0x96f316ed70, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x96f316ed70) returned 0xffffffffffffffff [0072.993] GetLastError () returned 0x2 [0072.993] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\reg.EXE", fInfoLevelId=0x1, lpFindFileData=0x96f316ed70, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x96f316ed70) returned 0x96f3221220 [0072.993] FindClose (in: hFindFile=0x96f3221220 | out: hFindFile=0x96f3221220) returned 1 [0072.993] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3 [0072.993] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2 [0072.993] GetConsoleTitleW (in: lpConsoleTitle=0x96f316f2d0, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\System32\\cmd.exe") returned 0x1b [0072.996] InitializeProcThreadAttributeList (in: lpAttributeList=0x96f316f1f0, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x96f316f0f0 | out: lpAttributeList=0x96f316f1f0, lpSize=0x96f316f0f0) returned 1 [0072.996] UpdateProcThreadAttribute (in: lpAttributeList=0x96f316f1f0, dwFlags=0x0, Attribute=0x60001, lpValue=0x96f316f0dc, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x96f316f1f0, lpPreviousValue=0x0) returned 1 [0072.996] GetStartupInfoW (in: lpStartupInfo=0x96f316f180 | out: lpStartupInfo=0x96f316f180*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\System32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0072.996] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38 [0072.996] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2 [0072.996] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2 [0072.996] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0072.996] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0072.996] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0072.996] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3 [0072.996] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3 [0072.996] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5 [0072.996] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5 [0072.996] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9 [0072.996] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9 [0072.996] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11 [0072.996] _wcsnicmp (_String1="COPYCMD", _String2="OneDriv", _MaxCount=0x7) returned -12 [0072.996] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12 [0072.996] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13 [0072.997] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13 [0072.997] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0072.997] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0072.997] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0072.997] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0072.997] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0072.997] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0072.997] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0072.997] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0072.997] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13 [0072.997] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13 [0072.997] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13 [0072.997] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16 [0072.997] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16 [0072.997] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17 [0072.997] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17 [0072.997] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0072.997] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0072.997] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18 [0072.997] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18 [0072.997] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20 [0072.997] lstrcmpW (lpString1="\\reg.exe", lpString2="\\XCOPY.EXE") returned -1 [0073.000] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\reg.exe", lpCommandLine="REG ADD \"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run\" /v \"svchos\" /t REG_SZ /d \"C:\\Users\\CIiHmnxMn6Ps\\Desktop\\eqBNr.exe\" /f", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpStartupInfo=0x96f316f110*(cb=0x70, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="REG ADD \"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run\" /v \"svchos\" /t REG_SZ /d \"C:\\Users\\CIiHmnxMn6Ps\\Desktop\\eqBNr.exe\" /f", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x96f316f0f8 | out: lpCommandLine="REG ADD \"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run\" /v \"svchos\" /t REG_SZ /d \"C:\\Users\\CIiHmnxMn6Ps\\Desktop\\eqBNr.exe\" /f", lpProcessInformation=0x96f316f0f8*(hProcess=0x8c, hThread=0x88, dwProcessId=0xd08, dwThreadId=0xd0c)) returned 1 [0073.157] CloseHandle (hObject=0x88) returned 1 [0073.157] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0073.157] GetEnvironmentStringsW () returned 0x96f3227e90* [0073.158] FreeEnvironmentStringsA (penv="=") returned 1 [0073.158] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0 [0073.833] GetExitCodeProcess (in: hProcess=0x8c, lpExitCode=0x96f316f078 | out: lpExitCode=0x96f316f078*=0x0) returned 1 [0073.834] CloseHandle (hObject=0x8c) returned 1 [0073.834] _vsnwprintf (in: _Buffer=0x96f316f238, _BufferCount=0x13, _Format="%08X", _ArgList=0x96f316f088 | out: _Buffer="00000000") returned 8 [0073.834] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000000") returned 1 [0073.834] GetEnvironmentStringsW () returned 0x96f322a6e0* [0073.834] FreeEnvironmentStringsA (penv="=") returned 1 [0073.834] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1 [0073.834] GetEnvironmentStringsW () returned 0x96f322a6e0* [0073.834] FreeEnvironmentStringsA (penv="=") returned 1 [0073.835] DeleteProcThreadAttributeList (in: lpAttributeList=0x96f316f1f0 | out: lpAttributeList=0x96f316f1f0) [0073.835] _get_osfhandle (_FileHandle=1) returned 0x24 [0073.835] SetConsoleMode (hConsoleHandle=0x24, dwMode=0x3) returned 1 [0073.876] _get_osfhandle (_FileHandle=1) returned 0x24 [0073.876] GetConsoleMode (in: hConsoleHandle=0x24, lpMode=0x7ff7864085ec | out: lpMode=0x7ff7864085ec) returned 1 [0073.891] _get_osfhandle (_FileHandle=0) returned 0x20 [0073.891] GetConsoleMode (in: hConsoleHandle=0x20, lpMode=0x7ff7864085e8 | out: lpMode=0x7ff7864085e8) returned 1 [0073.905] SetConsoleInputExeNameW () returned 0x1 [0073.905] GetConsoleOutputCP () returned 0x1b5 [0073.926] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff786408640 | out: lpCPInfo=0x7ff786408640) returned 1 [0073.926] SetThreadUILanguage (LangId=0x0) returned 0x409 [0073.934] exit (_Code=0) Thread: id = 84 os_tid = 0xd00 Process: id = "3" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x2f416000" os_pid = "0xc98" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "2" os_parent_pid = "0xc80" cmd_line = "\\??\\C:\\Windows\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\Windows" os_username = "LHNIWSJ\\CIiHmnxMn6Ps" os_groups = "LHNIWSJ\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00014ee5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 278 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 279 start_va = 0x84ba030000 end_va = 0x84ba04ffff entry_point = 0x0 region_type = private name = "private_0x00000084ba030000" filename = "" Region: id = 280 start_va = 0x84ba050000 end_va = 0x84ba063fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000084ba050000" filename = "" Region: id = 281 start_va = 0x84ba070000 end_va = 0x84ba0affff entry_point = 0x0 region_type = private name = "private_0x00000084ba070000" filename = "" Region: id = 282 start_va = 0x7df5ffc70000 end_va = 0x7ff5ffc6ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ffc70000" filename = "" Region: id = 283 start_va = 0x7ff71e170000 end_va = 0x7ff71e192fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff71e170000" filename = "" Region: id = 284 start_va = 0x7ff71e194000 end_va = 0x7ff71e194fff entry_point = 0x0 region_type = private name = "private_0x00007ff71e194000" filename = "" Region: id = 285 start_va = 0x7ff71e19e000 end_va = 0x7ff71e19ffff entry_point = 0x0 region_type = private name = "private_0x00007ff71e19e000" filename = "" Region: id = 286 start_va = 0x7ff71ef00000 end_va = 0x7ff71ef10fff entry_point = 0x7ff71ef00000 region_type = mapped_file name = "conhost.exe" filename = "\\Windows\\System32\\conhost.exe" (normalized: "c:\\windows\\system32\\conhost.exe") Region: id = 287 start_va = 0x7ff8ee380000 end_va = 0x7ff8ee541fff entry_point = 0x7ff8ee380000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 753 start_va = 0x84ba030000 end_va = 0x84ba03ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000084ba030000" filename = "" Region: id = 754 start_va = 0x84ba100000 end_va = 0x84ba1fffff entry_point = 0x0 region_type = private name = "private_0x00000084ba100000" filename = "" Region: id = 755 start_va = 0x7ff71e070000 end_va = 0x7ff71e16ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff71e070000" filename = "" Region: id = 756 start_va = 0x7ff8eb870000 end_va = 0x7ff8eba4cfff entry_point = 0x7ff8eb870000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 757 start_va = 0x7ff8ee2d0000 end_va = 0x7ff8ee37cfff entry_point = 0x7ff8ee2d0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 758 start_va = 0x84ba040000 end_va = 0x84ba046fff entry_point = 0x0 region_type = private name = "private_0x00000084ba040000" filename = "" Region: id = 759 start_va = 0x84ba0b0000 end_va = 0x84ba0effff entry_point = 0x0 region_type = private name = "private_0x00000084ba0b0000" filename = "" Region: id = 760 start_va = 0x84ba200000 end_va = 0x84ba2bdfff entry_point = 0x84ba200000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 761 start_va = 0x84ba420000 end_va = 0x84ba42ffff entry_point = 0x0 region_type = private name = "private_0x00000084ba420000" filename = "" Region: id = 762 start_va = 0x7ff71e19c000 end_va = 0x7ff71e19dfff entry_point = 0x0 region_type = private name = "private_0x00007ff71e19c000" filename = "" Region: id = 763 start_va = 0x7ff8ee0b0000 end_va = 0x7ff8ee14cfff entry_point = 0x7ff8ee0b0000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 772 start_va = 0x84ba0f0000 end_va = 0x84ba0f0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000084ba0f0000" filename = "" Region: id = 773 start_va = 0x84ba2c0000 end_va = 0x84ba2c6fff entry_point = 0x0 region_type = private name = "private_0x00000084ba2c0000" filename = "" Region: id = 774 start_va = 0x84ba2d0000 end_va = 0x84ba2d0fff entry_point = 0x0 region_type = private name = "private_0x00000084ba2d0000" filename = "" Region: id = 775 start_va = 0x84ba2e0000 end_va = 0x84ba2e0fff entry_point = 0x0 region_type = private name = "private_0x00000084ba2e0000" filename = "" Region: id = 776 start_va = 0x84ba430000 end_va = 0x84ba5b7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000084ba430000" filename = "" Region: id = 777 start_va = 0x84ba5c0000 end_va = 0x84ba740fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000084ba5c0000" filename = "" Region: id = 778 start_va = 0x84ba750000 end_va = 0x84bbb4ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000084ba750000" filename = "" Region: id = 779 start_va = 0x7ff8da7b0000 end_va = 0x7ff8da802fff entry_point = 0x7ff8da7b0000 region_type = mapped_file name = "conhostv2.dll" filename = "\\Windows\\System32\\ConhostV2.dll" (normalized: "c:\\windows\\system32\\conhostv2.dll") Region: id = 780 start_va = 0x7ff8e79b0000 end_va = 0x7ff8e7b32fff entry_point = 0x7ff8e79b0000 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 781 start_va = 0x7ff8ebb30000 end_va = 0x7ff8ebbedfff entry_point = 0x7ff8ebb30000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 782 start_va = 0x7ff8ebdc0000 end_va = 0x7ff8ebf0dfff entry_point = 0x7ff8ebdc0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 783 start_va = 0x7ff8ec0c0000 end_va = 0x7ff8ec21bfff entry_point = 0x7ff8ec0c0000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 784 start_va = 0x7ff8ec240000 end_va = 0x7ff8ec29afff entry_point = 0x7ff8ec240000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 785 start_va = 0x7ff8ec300000 end_va = 0x7ff8ec440fff entry_point = 0x7ff8ec300000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 786 start_va = 0x7ff8ec450000 end_va = 0x7ff8ec575fff entry_point = 0x7ff8ec450000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 787 start_va = 0x7ff8edbc0000 end_va = 0x7ff8edd44fff entry_point = 0x7ff8edbc0000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 788 start_va = 0x7ff8edd60000 end_va = 0x7ff8edfdbfff entry_point = 0x7ff8edd60000 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 789 start_va = 0x7ff8ee150000 end_va = 0x7ff8ee185fff entry_point = 0x7ff8ee150000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 790 start_va = 0x84ba2f0000 end_va = 0x84ba32ffff entry_point = 0x0 region_type = private name = "private_0x00000084ba2f0000" filename = "" Region: id = 791 start_va = 0x84ba390000 end_va = 0x84ba39ffff entry_point = 0x0 region_type = private name = "private_0x00000084ba390000" filename = "" Region: id = 792 start_va = 0x7ff71e19a000 end_va = 0x7ff71e19bfff entry_point = 0x0 region_type = private name = "private_0x00007ff71e19a000" filename = "" Region: id = 793 start_va = 0x7ff8eadd0000 end_va = 0x7ff8eae19fff entry_point = 0x7ff8eadd0000 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 794 start_va = 0x7ff8eae20000 end_va = 0x7ff8eae2efff entry_point = 0x7ff8eae20000 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 795 start_va = 0x7ff8eae30000 end_va = 0x7ff8eae42fff entry_point = 0x7ff8eae30000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 796 start_va = 0x7ff8eb180000 end_va = 0x7ff8eb7a7fff entry_point = 0x7ff8eb180000 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\System32\\windows.storage.dll" (normalized: "c:\\windows\\system32\\windows.storage.dll") Region: id = 797 start_va = 0x7ff8eb7b0000 end_va = 0x7ff8eb862fff entry_point = 0x7ff8eb7b0000 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\System32\\SHCore.dll" (normalized: "c:\\windows\\system32\\shcore.dll") Region: id = 798 start_va = 0x7ff8ec580000 end_va = 0x7ff8edaa4fff entry_point = 0x7ff8ec580000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 799 start_va = 0x7ff8edfe0000 end_va = 0x7ff8ee030fff entry_point = 0x7ff8edfe0000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 800 start_va = 0x7ff8ee190000 end_va = 0x7ff8ee235fff entry_point = 0x7ff8ee190000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 1028 start_va = 0x84bbb50000 end_va = 0x84bbc58fff entry_point = 0x0 region_type = private name = "private_0x00000084bbb50000" filename = "" Region: id = 1029 start_va = 0x84bbcf0000 end_va = 0x84bbcfffff entry_point = 0x0 region_type = private name = "private_0x00000084bbcf0000" filename = "" Region: id = 1030 start_va = 0x84bbd00000 end_va = 0x84bc036fff entry_point = 0x84bbd00000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 1031 start_va = 0x84bc040000 end_va = 0x84bc254fff entry_point = 0x0 region_type = private name = "private_0x00000084bc040000" filename = "" Region: id = 1032 start_va = 0x84bc260000 end_va = 0x84bc470fff entry_point = 0x0 region_type = private name = "private_0x00000084bc260000" filename = "" Region: id = 1033 start_va = 0x84bc480000 end_va = 0x84bc69ffff entry_point = 0x0 region_type = private name = "private_0x00000084bc480000" filename = "" Region: id = 1034 start_va = 0x84bc6a0000 end_va = 0x84bc7b1fff entry_point = 0x0 region_type = private name = "private_0x00000084bc6a0000" filename = "" Region: id = 1035 start_va = 0x7ff8e9680000 end_va = 0x7ff8e9715fff entry_point = 0x7ff8e9680000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 1036 start_va = 0x84ba330000 end_va = 0x84ba333fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000084ba330000" filename = "" Region: id = 1037 start_va = 0x84bc7c0000 end_va = 0x84bc877fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000084bc7c0000" filename = "" Region: id = 1038 start_va = 0x7ff8e8fb0000 end_va = 0x7ff8e8fd1fff entry_point = 0x7ff8e8fb0000 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\System32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll") Region: id = 1039 start_va = 0x7ff8e8ad0000 end_va = 0x7ff8e8ae2fff entry_point = 0x7ff8e8ad0000 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll") Region: id = 1040 start_va = 0x7ff8ea820000 end_va = 0x7ff8ea877fff entry_point = 0x7ff8ea820000 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll") Region: id = 1041 start_va = 0x84ba340000 end_va = 0x84ba346fff entry_point = 0x0 region_type = private name = "private_0x00000084ba340000" filename = "" Region: id = 1042 start_va = 0x84ba350000 end_va = 0x84ba354fff entry_point = 0x84ba350000 region_type = mapped_file name = "user32.dll.mui" filename = "\\Windows\\System32\\en-US\\user32.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\user32.dll.mui") Region: id = 1043 start_va = 0x84ba360000 end_va = 0x84ba360fff entry_point = 0x84ba360000 region_type = mapped_file name = "conhostv2.dll.mui" filename = "\\Windows\\System32\\en-US\\ConhostV2.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\conhostv2.dll.mui") Region: id = 1044 start_va = 0x84ba370000 end_va = 0x84ba371fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000084ba370000" filename = "" Region: id = 1045 start_va = 0x7ff8e57b0000 end_va = 0x7ff8e5a23fff entry_point = 0x7ff8e57b0000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\WinSxS\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43\\comctl32.dll") Thread: id = 9 os_tid = 0xc9c Thread: id = 46 os_tid = 0xcdc Thread: id = 49 os_tid = 0xce8 Thread: id = 50 os_tid = 0xcf0 Process: id = "4" image_name = "sihost.exe" filename = "c:\\windows\\system32\\sihost.exe" page_root = "0xa830000" os_pid = "0x778" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "injection" parent_id = "1" os_parent_pid = "0x300" cmd_line = "sihost.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "LHNIWSJ\\CIiHmnxMn6Ps" os_groups = "LHNIWSJ\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00014ee5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 313 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 314 start_va = 0xd7077e0000 end_va = 0xd7077effff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d7077e0000" filename = "" Region: id = 315 start_va = 0xd7077f0000 end_va = 0xd7077f6fff entry_point = 0x0 region_type = private name = "private_0x000000d7077f0000" filename = "" Region: id = 316 start_va = 0xd707800000 end_va = 0xd707813fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d707800000" filename = "" Region: id = 317 start_va = 0xd707820000 end_va = 0xd70789ffff entry_point = 0x0 region_type = private name = "private_0x000000d707820000" filename = "" Region: id = 318 start_va = 0xd7078a0000 end_va = 0xd7078a3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d7078a0000" filename = "" Region: id = 319 start_va = 0xd7078b0000 end_va = 0xd7078b1fff entry_point = 0x0 region_type = private name = "private_0x000000d7078b0000" filename = "" Region: id = 320 start_va = 0xd7078c0000 end_va = 0xd7078c6fff entry_point = 0x0 region_type = private name = "private_0x000000d7078c0000" filename = "" Region: id = 321 start_va = 0xd7078d0000 end_va = 0xd7078d0fff entry_point = 0x0 region_type = private name = "private_0x000000d7078d0000" filename = "" Region: id = 322 start_va = 0xd7078e0000 end_va = 0xd7078e0fff entry_point = 0x0 region_type = private name = "private_0x000000d7078e0000" filename = "" Region: id = 323 start_va = 0xd7078f0000 end_va = 0xd7078f0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d7078f0000" filename = "" Region: id = 324 start_va = 0xd707900000 end_va = 0xd707900fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d707900000" filename = "" Region: id = 325 start_va = 0xd707910000 end_va = 0xd707a0ffff entry_point = 0x0 region_type = private name = "private_0x000000d707910000" filename = "" Region: id = 326 start_va = 0xd707a10000 end_va = 0xd707acdfff entry_point = 0xd707a10000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 327 start_va = 0xd707b50000 end_va = 0xd707b79fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d707b50000" filename = "" Region: id = 328 start_va = 0xd707ba0000 end_va = 0xd707baffff entry_point = 0x0 region_type = private name = "private_0x000000d707ba0000" filename = "" Region: id = 329 start_va = 0xd707bb0000 end_va = 0xd707d37fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d707bb0000" filename = "" Region: id = 330 start_va = 0xd707d40000 end_va = 0xd707ec0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d707d40000" filename = "" Region: id = 331 start_va = 0xd707ed0000 end_va = 0xd7092cffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d707ed0000" filename = "" Region: id = 332 start_va = 0xd7092d0000 end_va = 0xd7093cffff entry_point = 0x0 region_type = private name = "private_0x000000d7092d0000" filename = "" Region: id = 333 start_va = 0xd7093d0000 end_va = 0xd709706fff entry_point = 0xd7093d0000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 334 start_va = 0xd709710000 end_va = 0xd70978ffff entry_point = 0x0 region_type = private name = "private_0x000000d709710000" filename = "" Region: id = 335 start_va = 0xd709790000 end_va = 0xd70980ffff entry_point = 0x0 region_type = private name = "private_0x000000d709790000" filename = "" Region: id = 336 start_va = 0xd709810000 end_va = 0xd70988ffff entry_point = 0x0 region_type = private name = "private_0x000000d709810000" filename = "" Region: id = 337 start_va = 0xd709890000 end_va = 0xd70990ffff entry_point = 0x0 region_type = private name = "private_0x000000d709890000" filename = "" Region: id = 338 start_va = 0xd709910000 end_va = 0xd70998ffff entry_point = 0x0 region_type = private name = "private_0x000000d709910000" filename = "" Region: id = 339 start_va = 0xd709990000 end_va = 0xd709a0ffff entry_point = 0x0 region_type = private name = "private_0x000000d709990000" filename = "" Region: id = 340 start_va = 0xd709a70000 end_va = 0xd709a7ffff entry_point = 0x0 region_type = private name = "private_0x000000d709a70000" filename = "" Region: id = 341 start_va = 0xd709a80000 end_va = 0xd709b7ffff entry_point = 0x0 region_type = private name = "private_0x000000d709a80000" filename = "" Region: id = 342 start_va = 0xd709b80000 end_va = 0xd70a37ffff entry_point = 0x0 region_type = private name = "private_0x000000d709b80000" filename = "" Region: id = 343 start_va = 0xd70a400000 end_va = 0xd70a47ffff entry_point = 0x0 region_type = private name = "private_0x000000d70a400000" filename = "" Region: id = 344 start_va = 0xd70a480000 end_va = 0xd70a4fffff entry_point = 0x0 region_type = private name = "private_0x000000d70a480000" filename = "" Region: id = 345 start_va = 0xd70a500000 end_va = 0xd70a57ffff entry_point = 0x0 region_type = private name = "private_0x000000d70a500000" filename = "" Region: id = 346 start_va = 0xd70a580000 end_va = 0xd70a65efff entry_point = 0xd70a580000 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui") Region: id = 347 start_va = 0xd70a6e0000 end_va = 0xd70a75ffff entry_point = 0x0 region_type = private name = "private_0x000000d70a6e0000" filename = "" Region: id = 348 start_va = 0xd70a760000 end_va = 0xd70a7dffff entry_point = 0x0 region_type = private name = "private_0x000000d70a760000" filename = "" Region: id = 349 start_va = 0xd70a7e0000 end_va = 0xd70a85ffff entry_point = 0x0 region_type = private name = "private_0x000000d70a7e0000" filename = "" Region: id = 350 start_va = 0xd70a860000 end_va = 0xd70a95ffff entry_point = 0x0 region_type = private name = "private_0x000000d70a860000" filename = "" Region: id = 351 start_va = 0xd70a960000 end_va = 0xd70a9dffff entry_point = 0x0 region_type = private name = "private_0x000000d70a960000" filename = "" Region: id = 352 start_va = 0x7df5ffcf0000 end_va = 0x7ff5ffceffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ffcf0000" filename = "" Region: id = 353 start_va = 0x7ff6f2f4a000 end_va = 0x7ff6f2f4bfff entry_point = 0x0 region_type = private name = "private_0x00007ff6f2f4a000" filename = "" Region: id = 354 start_va = 0x7ff6f2f4c000 end_va = 0x7ff6f2f4dfff entry_point = 0x0 region_type = private name = "private_0x00007ff6f2f4c000" filename = "" Region: id = 355 start_va = 0x7ff6f2f4e000 end_va = 0x7ff6f2f4ffff entry_point = 0x0 region_type = private name = "private_0x00007ff6f2f4e000" filename = "" Region: id = 356 start_va = 0x7ff6f2f50000 end_va = 0x7ff6f2f51fff entry_point = 0x0 region_type = private name = "private_0x00007ff6f2f50000" filename = "" Region: id = 357 start_va = 0x7ff6f2f54000 end_va = 0x7ff6f2f55fff entry_point = 0x0 region_type = private name = "private_0x00007ff6f2f54000" filename = "" Region: id = 358 start_va = 0x7ff6f2f56000 end_va = 0x7ff6f2f57fff entry_point = 0x0 region_type = private name = "private_0x00007ff6f2f56000" filename = "" Region: id = 359 start_va = 0x7ff6f2f58000 end_va = 0x7ff6f2f59fff entry_point = 0x0 region_type = private name = "private_0x00007ff6f2f58000" filename = "" Region: id = 360 start_va = 0x7ff6f2f5c000 end_va = 0x7ff6f2f5dfff entry_point = 0x0 region_type = private name = "private_0x00007ff6f2f5c000" filename = "" Region: id = 361 start_va = 0x7ff6f2f5e000 end_va = 0x7ff6f2f5ffff entry_point = 0x0 region_type = private name = "private_0x00007ff6f2f5e000" filename = "" Region: id = 362 start_va = 0x7ff6f2f60000 end_va = 0x7ff6f305ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff6f2f60000" filename = "" Region: id = 363 start_va = 0x7ff6f3060000 end_va = 0x7ff6f3082fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff6f3060000" filename = "" Region: id = 364 start_va = 0x7ff6f3083000 end_va = 0x7ff6f3084fff entry_point = 0x0 region_type = private name = "private_0x00007ff6f3083000" filename = "" Region: id = 365 start_va = 0x7ff6f3085000 end_va = 0x7ff6f3086fff entry_point = 0x0 region_type = private name = "private_0x00007ff6f3085000" filename = "" Region: id = 366 start_va = 0x7ff6f3087000 end_va = 0x7ff6f3088fff entry_point = 0x0 region_type = private name = "private_0x00007ff6f3087000" filename = "" Region: id = 367 start_va = 0x7ff6f3089000 end_va = 0x7ff6f308afff entry_point = 0x0 region_type = private name = "private_0x00007ff6f3089000" filename = "" Region: id = 368 start_va = 0x7ff6f308d000 end_va = 0x7ff6f308efff entry_point = 0x0 region_type = private name = "private_0x00007ff6f308d000" filename = "" Region: id = 369 start_va = 0x7ff6f308f000 end_va = 0x7ff6f308ffff entry_point = 0x0 region_type = private name = "private_0x00007ff6f308f000" filename = "" Region: id = 370 start_va = 0x7ff6f3d00000 end_va = 0x7ff6f3d15fff entry_point = 0x7ff6f3d00000 region_type = mapped_file name = "sihost.exe" filename = "\\Windows\\System32\\sihost.exe" (normalized: "c:\\windows\\system32\\sihost.exe") Region: id = 371 start_va = 0x7ff7afc80000 end_va = 0x7ff7afcb4fff entry_point = 0x0 region_type = private name = "private_0x00007ff7afc80000" filename = "" Region: id = 372 start_va = 0x7ff8dc6e0000 end_va = 0x7ff8dc778fff entry_point = 0x7ff8dc6e0000 region_type = mapped_file name = "staterepository.core.dll" filename = "\\Windows\\System32\\StateRepository.Core.dll" (normalized: "c:\\windows\\system32\\staterepository.core.dll") Region: id = 373 start_va = 0x7ff8dc780000 end_va = 0x7ff8dca11fff entry_point = 0x7ff8dc780000 region_type = mapped_file name = "windows.staterepository.dll" filename = "\\Windows\\System32\\Windows.StateRepository.dll" (normalized: "c:\\windows\\system32\\windows.staterepository.dll") Region: id = 374 start_va = 0x7ff8deea0000 end_va = 0x7ff8deeabfff entry_point = 0x7ff8deea0000 region_type = mapped_file name = "licensemanagerapi.dll" filename = "\\Windows\\System32\\LicenseManagerApi.dll" (normalized: "c:\\windows\\system32\\licensemanagerapi.dll") Region: id = 375 start_va = 0x7ff8deeb0000 end_va = 0x7ff8df0bcfff entry_point = 0x7ff8deeb0000 region_type = mapped_file name = "twinui.appcore.dll" filename = "\\Windows\\System32\\twinui.appcore.dll" (normalized: "c:\\windows\\system32\\twinui.appcore.dll") Region: id = 376 start_va = 0x7ff8df190000 end_va = 0x7ff8df1a4fff entry_point = 0x7ff8df190000 region_type = mapped_file name = "execmodelproxy.dll" filename = "\\Windows\\System32\\execmodelproxy.dll" (normalized: "c:\\windows\\system32\\execmodelproxy.dll") Region: id = 377 start_va = 0x7ff8df220000 end_va = 0x7ff8df2c4fff entry_point = 0x7ff8df220000 region_type = mapped_file name = "sharehost.dll" filename = "\\Windows\\System32\\ShareHost.dll" (normalized: "c:\\windows\\system32\\sharehost.dll") Region: id = 378 start_va = 0x7ff8df2d0000 end_va = 0x7ff8df2e0fff entry_point = 0x7ff8df2d0000 region_type = mapped_file name = "ondemandbrokerclient.dll" filename = "\\Windows\\System32\\OnDemandBrokerClient.dll" (normalized: "c:\\windows\\system32\\ondemandbrokerclient.dll") Region: id = 379 start_va = 0x7ff8df2f0000 end_va = 0x7ff8df39bfff entry_point = 0x7ff8df2f0000 region_type = mapped_file name = "appcontracts.dll" filename = "\\Windows\\System32\\AppContracts.dll" (normalized: "c:\\windows\\system32\\appcontracts.dll") Region: id = 380 start_va = 0x7ff8df3a0000 end_va = 0x7ff8df3acfff entry_point = 0x7ff8df3a0000 region_type = mapped_file name = "notificationplatformcomponent.dll" filename = "\\Windows\\System32\\notificationplatformcomponent.dll" (normalized: "c:\\windows\\system32\\notificationplatformcomponent.dll") Region: id = 381 start_va = 0x7ff8df3b0000 end_va = 0x7ff8df3f2fff entry_point = 0x7ff8df3b0000 region_type = mapped_file name = "execmodelclient.dll" filename = "\\Windows\\System32\\ExecModelClient.dll" (normalized: "c:\\windows\\system32\\execmodelclient.dll") Region: id = 382 start_va = 0x7ff8df410000 end_va = 0x7ff8df418fff entry_point = 0x7ff8df410000 region_type = mapped_file name = "wpportinglibrary.dll" filename = "\\Windows\\System32\\WpPortingLibrary.dll" (normalized: "c:\\windows\\system32\\wpportinglibrary.dll") Region: id = 383 start_va = 0x7ff8df420000 end_va = 0x7ff8df4f7fff entry_point = 0x7ff8df420000 region_type = mapped_file name = "modernexecserver.dll" filename = "\\Windows\\System32\\modernexecserver.dll" (normalized: "c:\\windows\\system32\\modernexecserver.dll") Region: id = 384 start_va = 0x7ff8df500000 end_va = 0x7ff8df521fff entry_point = 0x7ff8df500000 region_type = mapped_file name = "appointmentactivation.dll" filename = "\\Windows\\System32\\AppointmentActivation.dll" (normalized: "c:\\windows\\system32\\appointmentactivation.dll") Region: id = 385 start_va = 0x7ff8df530000 end_va = 0x7ff8df58dfff entry_point = 0x7ff8df530000 region_type = mapped_file name = "activationmanager.dll" filename = "\\Windows\\System32\\ActivationManager.dll" (normalized: "c:\\windows\\system32\\activationmanager.dll") Region: id = 386 start_va = 0x7ff8df590000 end_va = 0x7ff8df5befff entry_point = 0x7ff8df590000 region_type = mapped_file name = "edputil.dll" filename = "\\Windows\\System32\\edputil.dll" (normalized: "c:\\windows\\system32\\edputil.dll") Region: id = 387 start_va = 0x7ff8df640000 end_va = 0x7ff8dfaa9fff entry_point = 0x7ff8df640000 region_type = mapped_file name = "actxprxy.dll" filename = "\\Windows\\System32\\actxprxy.dll" (normalized: "c:\\windows\\system32\\actxprxy.dll") Region: id = 388 start_va = 0x7ff8dfab0000 end_va = 0x7ff8dfd10fff entry_point = 0x7ff8dfab0000 region_type = mapped_file name = "coreuicomponents.dll" filename = "\\Windows\\System32\\CoreUIComponents.dll" (normalized: "c:\\windows\\system32\\coreuicomponents.dll") Region: id = 389 start_va = 0x7ff8e1050000 end_va = 0x7ff8e1060fff entry_point = 0x7ff8e1050000 region_type = mapped_file name = "userdatatypehelperutil.dll" filename = "\\Windows\\System32\\UserDataTypeHelperUtil.dll" (normalized: "c:\\windows\\system32\\userdatatypehelperutil.dll") Region: id = 390 start_va = 0x7ff8e1650000 end_va = 0x7ff8e165bfff entry_point = 0x7ff8e1650000 region_type = mapped_file name = "dsclient.dll" filename = "\\Windows\\System32\\dsclient.dll" (normalized: "c:\\windows\\system32\\dsclient.dll") Region: id = 391 start_va = 0x7ff8e1660000 end_va = 0x7ff8e168ffff entry_point = 0x7ff8e1660000 region_type = mapped_file name = "clipboardserver.dll" filename = "\\Windows\\System32\\ClipboardServer.dll" (normalized: "c:\\windows\\system32\\clipboardserver.dll") Region: id = 392 start_va = 0x7ff8e16c0000 end_va = 0x7ff8e16d1fff entry_point = 0x7ff8e16c0000 region_type = mapped_file name = "windows.shell.servicehostbuilder.dll" filename = "\\Windows\\System32\\Windows.Shell.ServiceHostBuilder.dll" (normalized: "c:\\windows\\system32\\windows.shell.servicehostbuilder.dll") Region: id = 393 start_va = 0x7ff8e16e0000 end_va = 0x7ff8e16f6fff entry_point = 0x7ff8e16e0000 region_type = mapped_file name = "desktopshellext.dll" filename = "\\Windows\\System32\\DesktopShellExt.dll" (normalized: "c:\\windows\\system32\\desktopshellext.dll") Region: id = 394 start_va = 0x7ff8e3c30000 end_va = 0x7ff8e3fa5fff entry_point = 0x7ff8e3c30000 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" (normalized: "c:\\windows\\system32\\iertutil.dll") Region: id = 395 start_va = 0x7ff8e60a0000 end_va = 0x7ff8e6131fff entry_point = 0x7ff8e60a0000 region_type = mapped_file name = "msvcp110_win.dll" filename = "\\Windows\\System32\\msvcp110_win.dll" (normalized: "c:\\windows\\system32\\msvcp110_win.dll") Region: id = 396 start_va = 0x7ff8e6140000 end_va = 0x7ff8e6178fff entry_point = 0x7ff8e6140000 region_type = mapped_file name = "policymanager.dll" filename = "\\Windows\\System32\\policymanager.dll" (normalized: "c:\\windows\\system32\\policymanager.dll") Region: id = 397 start_va = 0x7ff8e6330000 end_va = 0x7ff8e6365fff entry_point = 0x7ff8e6330000 region_type = mapped_file name = "xmllite.dll" filename = "\\Windows\\System32\\xmllite.dll" (normalized: "c:\\windows\\system32\\xmllite.dll") Region: id = 398 start_va = 0x7ff8e7430000 end_va = 0x7ff8e7560fff entry_point = 0x7ff8e7430000 region_type = mapped_file name = "wintypes.dll" filename = "\\Windows\\System32\\WinTypes.dll" (normalized: "c:\\windows\\system32\\wintypes.dll") Region: id = 399 start_va = 0x7ff8e7570000 end_va = 0x7ff8e75adfff entry_point = 0x7ff8e7570000 region_type = mapped_file name = "usermgrproxy.dll" filename = "\\Windows\\System32\\UserMgrProxy.dll" (normalized: "c:\\windows\\system32\\usermgrproxy.dll") Region: id = 400 start_va = 0x7ff8e79b0000 end_va = 0x7ff8e7b32fff entry_point = 0x7ff8e79b0000 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 401 start_va = 0x7ff8e7b40000 end_va = 0x7ff8e7bb1fff entry_point = 0x7ff8e7b40000 region_type = mapped_file name = "mmdevapi.dll" filename = "\\Windows\\System32\\MMDevAPI.dll" (normalized: "c:\\windows\\system32\\mmdevapi.dll") Region: id = 402 start_va = 0x7ff8e7d10000 end_va = 0x7ff8e7d1ffff entry_point = 0x7ff8e7d10000 region_type = mapped_file name = "usermgrcli.dll" filename = "\\Windows\\System32\\usermgrcli.dll" (normalized: "c:\\windows\\system32\\usermgrcli.dll") Region: id = 403 start_va = 0x7ff8e8fb0000 end_va = 0x7ff8e8fd1fff entry_point = 0x7ff8e8fb0000 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\System32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll") Region: id = 404 start_va = 0x7ff8e9060000 end_va = 0x7ff8e9127fff entry_point = 0x7ff8e9060000 region_type = mapped_file name = "coremessaging.dll" filename = "\\Windows\\System32\\CoreMessaging.dll" (normalized: "c:\\windows\\system32\\coremessaging.dll") Region: id = 405 start_va = 0x7ff8e9680000 end_va = 0x7ff8e9715fff entry_point = 0x7ff8e9680000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 406 start_va = 0x7ff8e9720000 end_va = 0x7ff8e9746fff entry_point = 0x7ff8e9720000 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 407 start_va = 0x7ff8e9860000 end_va = 0x7ff8e994dfff entry_point = 0x7ff8e9860000 region_type = mapped_file name = "twinapi.appcore.dll" filename = "\\Windows\\System32\\twinapi.appcore.dll" (normalized: "c:\\windows\\system32\\twinapi.appcore.dll") Region: id = 408 start_va = 0x7ff8e99e0000 end_va = 0x7ff8e9a07fff entry_point = 0x7ff8e99e0000 region_type = mapped_file name = "rmclient.dll" filename = "\\Windows\\System32\\rmclient.dll" (normalized: "c:\\windows\\system32\\rmclient.dll") Region: id = 409 start_va = 0x7ff8ea000000 end_va = 0x7ff8ea00bfff entry_point = 0x7ff8ea000000 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\System32\\netutils.dll" (normalized: "c:\\windows\\system32\\netutils.dll") Region: id = 410 start_va = 0x7ff8ea0f0000 end_va = 0x7ff8ea121fff entry_point = 0x7ff8ea0f0000 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll") Region: id = 411 start_va = 0x7ff8ea270000 end_va = 0x7ff8ea2a2fff entry_point = 0x7ff8ea270000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 412 start_va = 0x7ff8ea360000 end_va = 0x7ff8ea37efff entry_point = 0x7ff8ea360000 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 413 start_va = 0x7ff8ea620000 end_va = 0x7ff8ea636fff entry_point = 0x7ff8ea620000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 414 start_va = 0x7ff8ea790000 end_va = 0x7ff8ea79afff entry_point = 0x7ff8ea790000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 415 start_va = 0x7ff8ea9d0000 end_va = 0x7ff8ea9fbfff entry_point = 0x7ff8ea9d0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 416 start_va = 0x7ff8eabd0000 end_va = 0x7ff8eabf7fff entry_point = 0x7ff8eabd0000 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 417 start_va = 0x7ff8eac00000 end_va = 0x7ff8eac6afff entry_point = 0x7ff8eac00000 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 418 start_va = 0x7ff8eadb0000 end_va = 0x7ff8eadc0fff entry_point = 0x7ff8eadb0000 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 419 start_va = 0x7ff8eadd0000 end_va = 0x7ff8eae19fff entry_point = 0x7ff8eadd0000 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 420 start_va = 0x7ff8eae20000 end_va = 0x7ff8eae2efff entry_point = 0x7ff8eae20000 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 421 start_va = 0x7ff8eae30000 end_va = 0x7ff8eae42fff entry_point = 0x7ff8eae30000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 422 start_va = 0x7ff8eaf60000 end_va = 0x7ff8eafa3fff entry_point = 0x7ff8eaf60000 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 423 start_va = 0x7ff8eafb0000 end_va = 0x7ff8eb170fff entry_point = 0x7ff8eafb0000 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 424 start_va = 0x7ff8eb180000 end_va = 0x7ff8eb7a7fff entry_point = 0x7ff8eb180000 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\System32\\windows.storage.dll" (normalized: "c:\\windows\\system32\\windows.storage.dll") Region: id = 425 start_va = 0x7ff8eb7b0000 end_va = 0x7ff8eb862fff entry_point = 0x7ff8eb7b0000 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\System32\\SHCore.dll" (normalized: "c:\\windows\\system32\\shcore.dll") Region: id = 426 start_va = 0x7ff8eb870000 end_va = 0x7ff8eba4cfff entry_point = 0x7ff8eb870000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 427 start_va = 0x7ff8ebb30000 end_va = 0x7ff8ebbedfff entry_point = 0x7ff8ebb30000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 428 start_va = 0x7ff8ebdc0000 end_va = 0x7ff8ebf0dfff entry_point = 0x7ff8ebdc0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 429 start_va = 0x7ff8ec0c0000 end_va = 0x7ff8ec21bfff entry_point = 0x7ff8ec0c0000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 430 start_va = 0x7ff8ec240000 end_va = 0x7ff8ec29afff entry_point = 0x7ff8ec240000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 431 start_va = 0x7ff8ec300000 end_va = 0x7ff8ec440fff entry_point = 0x7ff8ec300000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 432 start_va = 0x7ff8ec450000 end_va = 0x7ff8ec575fff entry_point = 0x7ff8ec450000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 433 start_va = 0x7ff8edb10000 end_va = 0x7ff8edbb4fff entry_point = 0x7ff8edb10000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 434 start_va = 0x7ff8edbc0000 end_va = 0x7ff8edd44fff entry_point = 0x7ff8edbc0000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 435 start_va = 0x7ff8edd60000 end_va = 0x7ff8edfdbfff entry_point = 0x7ff8edd60000 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 436 start_va = 0x7ff8edfe0000 end_va = 0x7ff8ee030fff entry_point = 0x7ff8edfe0000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 437 start_va = 0x7ff8ee0b0000 end_va = 0x7ff8ee14cfff entry_point = 0x7ff8ee0b0000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 438 start_va = 0x7ff8ee150000 end_va = 0x7ff8ee185fff entry_point = 0x7ff8ee150000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 439 start_va = 0x7ff8ee190000 end_va = 0x7ff8ee235fff entry_point = 0x7ff8ee190000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 440 start_va = 0x7ff8ee2d0000 end_va = 0x7ff8ee37cfff entry_point = 0x7ff8ee2d0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 441 start_va = 0x7ff8ee380000 end_va = 0x7ff8ee541fff entry_point = 0x7ff8ee380000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 442 start_va = 0xd707ad0000 end_va = 0xd707b4ffff entry_point = 0x0 region_type = private name = "private_0x000000d707ad0000" filename = "" Region: id = 443 start_va = 0x7ff6f308b000 end_va = 0x7ff6f308cfff entry_point = 0x0 region_type = private name = "private_0x00007ff6f308b000" filename = "" Region: id = 444 start_va = 0x7ff8e9fe0000 end_va = 0x7ff8e9ffbfff entry_point = 0x7ff8e9fe0000 region_type = mapped_file name = "mpr.dll" filename = "\\Windows\\System32\\mpr.dll" (normalized: "c:\\windows\\system32\\mpr.dll") Region: id = 643 start_va = 0x7ff8ec580000 end_va = 0x7ff8edaa4fff entry_point = 0x7ff8ec580000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 644 start_va = 0x7ff8e8480000 end_va = 0x7ff8e84b7fff entry_point = 0x7ff8e8480000 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 645 start_va = 0x7ff8ee250000 end_va = 0x7ff8ee257fff entry_point = 0x7ff8ee250000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 646 start_va = 0xd70a380000 end_va = 0xd70a3fffff entry_point = 0x0 region_type = private name = "private_0x000000d70a380000" filename = "" Region: id = 647 start_va = 0x7ff6f2f5a000 end_va = 0x7ff6f2f5bfff entry_point = 0x0 region_type = private name = "private_0x00007ff6f2f5a000" filename = "" Region: id = 648 start_va = 0x7ff8e8460000 end_va = 0x7ff8e846afff entry_point = 0x7ff8e8460000 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll") Region: id = 1468 start_va = 0xd707b80000 end_va = 0xd707b80fff entry_point = 0x0 region_type = private name = "private_0x000000d707b80000" filename = "" Region: id = 1469 start_va = 0xd70a660000 end_va = 0xd70a6dffff entry_point = 0x0 region_type = private name = "private_0x000000d70a660000" filename = "" Region: id = 1470 start_va = 0xd70a9e0000 end_va = 0xd70aa5ffff entry_point = 0x0 region_type = private name = "private_0x000000d70a9e0000" filename = "" Region: id = 1471 start_va = 0x7ff6f2f48000 end_va = 0x7ff6f2f49fff entry_point = 0x0 region_type = private name = "private_0x00007ff6f2f48000" filename = "" Region: id = 1472 start_va = 0x7ff6f2f52000 end_va = 0x7ff6f2f53fff entry_point = 0x0 region_type = private name = "private_0x00007ff6f2f52000" filename = "" Region: id = 1473 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1474 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1475 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1476 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1477 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1478 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1479 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1480 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1481 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1482 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1483 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1484 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1485 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1486 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1487 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1488 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1489 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1490 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1491 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1492 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1493 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1494 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1495 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1496 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1497 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1498 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1499 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1500 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1501 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1502 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1503 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1504 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1505 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1506 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1507 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1508 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1509 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1510 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1511 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1512 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1513 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1514 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1515 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1516 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1517 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1518 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1519 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1520 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1521 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1522 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1523 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1524 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1525 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1526 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1527 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1528 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1529 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1530 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1531 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1532 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1533 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1534 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1535 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1536 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1537 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1538 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1539 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1540 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1541 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1542 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1543 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1544 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1545 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1546 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1547 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1548 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1549 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1550 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1551 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1552 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1553 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1554 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1555 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1556 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1557 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1558 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1559 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1560 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1561 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1562 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1563 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1564 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1565 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1566 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1567 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1568 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1569 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1570 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1571 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1572 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1573 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1574 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1575 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1576 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1577 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1578 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1579 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1580 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1581 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1582 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1583 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1584 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1585 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1586 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1587 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1588 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1589 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1590 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1591 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1592 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1593 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1594 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1595 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1596 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1597 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1598 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1599 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1600 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1601 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1602 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1603 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1604 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1605 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1606 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1607 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1608 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1609 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1610 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1611 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1612 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1613 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1614 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1615 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1616 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1617 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1618 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1619 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1620 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1621 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1622 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1623 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1624 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1625 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1626 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1627 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1628 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1629 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1630 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1631 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1632 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1633 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1634 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1635 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1636 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1637 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1638 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1639 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1640 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1641 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1642 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1643 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1644 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1645 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1646 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1647 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1648 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1649 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1650 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1651 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1652 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1653 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1654 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1655 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1656 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1657 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1658 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1659 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1660 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1661 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1662 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1663 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1664 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1665 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1666 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1667 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1668 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1669 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1670 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1671 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1672 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1673 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1674 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1675 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1676 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1677 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1678 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1679 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1680 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1681 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1682 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1683 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1684 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1685 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1686 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1687 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1688 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1689 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1690 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1691 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1692 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1693 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1694 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1695 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1696 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1697 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1698 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1699 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1700 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1701 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1702 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1703 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1704 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1705 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1706 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1707 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1708 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1709 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1710 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1711 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1712 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1713 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1714 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1715 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1716 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1717 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1718 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1719 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1720 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1721 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1722 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1723 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1724 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1725 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1726 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1727 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1728 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1729 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1730 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1731 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1732 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1733 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1734 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1735 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1736 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1737 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1738 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1739 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1740 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1741 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1742 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1743 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1744 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1745 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1746 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1747 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1748 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1749 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1750 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1751 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1752 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1753 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1754 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1755 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1756 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1757 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1758 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1759 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1760 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1761 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1762 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1763 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1764 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1765 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1766 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1767 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1768 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1769 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1770 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1771 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1772 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1773 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1774 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1775 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1776 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1777 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1778 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1779 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1780 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1781 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1782 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1783 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1784 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1785 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1786 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1787 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1788 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1789 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1790 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1791 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1792 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1793 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1794 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1795 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1796 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1797 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1798 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1799 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1800 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1801 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1802 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1803 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1804 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1805 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1806 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1807 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1808 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1809 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1810 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1811 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1812 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1813 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1814 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1815 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1816 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1817 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1818 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1819 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1820 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1821 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1822 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1823 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1824 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1825 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1826 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1827 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1828 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1829 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1830 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1831 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1832 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1833 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1834 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1835 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1836 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1837 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1838 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1839 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1840 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1841 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1842 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1843 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1844 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1845 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1846 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1847 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1848 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1849 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1850 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1851 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1852 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1853 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1854 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1855 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1856 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1857 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1858 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1859 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1860 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1861 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1862 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1863 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1864 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1865 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1866 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1867 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1868 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1869 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1870 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1871 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1872 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1873 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1874 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1875 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1876 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1877 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1878 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1879 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1880 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1881 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1882 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1883 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1884 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1885 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1886 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1887 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1888 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1889 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1890 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1891 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1892 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1893 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1894 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1895 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1896 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1897 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1898 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1899 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1900 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1901 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1902 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1903 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1904 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1905 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1906 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1907 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1908 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1909 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1910 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1911 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1912 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1913 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1914 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1915 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1916 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1917 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1918 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1919 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1920 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1921 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1922 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1923 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1924 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1925 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1926 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1927 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1928 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1929 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1930 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1931 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1932 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1933 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1934 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1935 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1936 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1937 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1938 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1939 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1940 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1941 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1942 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1943 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1944 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1945 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1946 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1947 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1948 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1949 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1950 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1951 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1952 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1953 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1954 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1955 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1956 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1957 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1958 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1959 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1960 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1961 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1962 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1963 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1964 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1965 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1966 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1967 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1968 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1969 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1970 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1971 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1972 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1973 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1974 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1975 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1976 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1977 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1978 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1979 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1980 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1981 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1982 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1983 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1984 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1985 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1986 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1987 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1988 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1989 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1990 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1991 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1992 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1993 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1994 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1995 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1996 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1997 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1998 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 1999 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2000 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2001 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2002 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2003 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2004 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2005 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2006 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2007 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2008 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2009 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2010 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2011 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2012 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2013 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2014 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2015 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2016 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2017 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2018 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2019 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2020 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2021 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2022 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2023 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2024 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2025 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2026 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2027 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2028 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2029 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2030 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2031 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2032 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2033 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2034 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2035 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2036 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2037 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2038 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2039 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2040 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2041 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2042 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2043 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2044 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2045 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2046 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2047 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2048 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2049 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2050 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2051 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2052 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2053 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2054 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2055 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2056 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2057 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2058 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2059 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2060 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2061 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2062 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2063 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2064 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2065 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2066 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2067 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2068 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2069 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2084 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2085 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2086 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2087 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2088 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2089 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2090 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2091 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2092 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2093 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2094 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2095 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2096 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2097 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2098 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2099 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2100 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2101 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2102 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2103 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2104 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2105 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2106 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2107 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2108 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2109 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2110 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2111 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2112 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2113 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2114 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2115 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2116 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2117 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2118 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2119 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2120 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2121 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2122 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2123 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2124 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2125 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2126 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2127 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2128 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2129 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2130 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2131 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2132 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2133 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2134 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2135 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2136 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2137 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2138 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2139 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2140 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2141 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2142 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2143 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2144 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2145 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2146 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2147 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2148 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2149 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2150 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2151 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2152 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2153 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2154 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2155 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2156 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2157 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2158 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2159 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2160 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2161 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2162 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2163 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2164 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2165 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2166 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2167 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2168 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2169 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2170 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2171 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2172 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2173 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2174 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2175 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2176 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2177 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2178 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2179 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2180 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2181 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2182 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2183 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2184 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2185 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2186 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2187 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2188 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2189 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2190 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2191 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2192 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2193 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2194 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2195 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2196 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2197 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2198 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2199 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2200 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2201 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2202 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2203 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2204 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2205 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2206 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2207 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2208 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2209 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2210 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2211 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2212 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2213 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2214 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2215 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2216 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2217 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2218 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2219 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2220 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2221 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2222 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2223 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2224 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2225 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2226 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2227 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2228 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2229 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2230 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2231 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2232 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2233 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2234 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2235 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2236 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2237 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2238 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2239 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2240 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2241 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2242 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2243 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2244 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2245 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2246 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2247 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2248 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2249 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2250 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2251 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2252 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2253 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2254 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2255 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2256 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2257 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2258 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2259 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2260 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2261 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2262 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2263 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2264 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2265 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2266 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2267 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2268 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2269 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2270 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2271 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2272 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2273 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2274 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2275 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2276 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2277 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2278 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2279 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2280 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2281 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2282 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2283 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2284 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2285 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2286 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2287 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2288 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2289 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2290 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2291 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2292 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2293 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2294 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2295 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2296 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2297 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2298 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2299 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2300 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2301 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2302 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2303 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2304 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2305 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2306 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2307 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2308 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2309 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2310 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2311 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2312 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2313 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2314 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2315 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2316 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2317 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2318 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2319 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2320 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2321 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2322 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2323 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2324 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2325 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2326 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2327 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2328 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2329 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2330 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2331 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2332 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2333 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2334 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2335 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2336 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2337 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2338 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2339 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2340 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2341 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2342 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2343 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2344 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2345 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2346 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2347 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2348 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2349 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2350 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2351 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2352 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2353 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2354 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2355 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2356 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2357 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2358 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2359 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2360 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2361 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2362 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2363 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2364 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2365 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2366 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2367 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2368 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2369 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2370 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2371 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2372 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2373 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2374 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2375 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2376 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2377 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2378 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2379 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2380 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2381 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2382 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2383 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2384 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2385 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2386 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2387 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2388 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2389 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2390 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2391 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2392 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2393 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2394 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2395 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2396 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2397 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2398 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2399 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2400 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2401 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2402 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2403 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2404 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2405 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2406 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2407 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2408 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2409 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2410 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2411 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2412 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2413 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2414 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2415 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2416 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2417 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2418 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2419 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2420 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2421 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2422 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2423 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2424 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2425 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2426 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2427 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2428 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2429 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2430 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2431 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2432 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2433 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2434 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2435 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2436 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2437 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2438 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2439 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2440 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2441 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2442 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2443 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2444 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2445 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2446 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2447 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2448 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2449 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2450 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2451 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2452 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2453 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2454 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2455 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2456 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2457 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2458 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2459 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2460 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2461 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2462 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2463 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2464 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2465 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2466 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2467 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2468 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2469 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2470 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2471 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2472 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2473 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2474 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2475 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2476 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2477 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2478 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2479 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2480 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2481 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2482 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2483 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2484 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2485 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2486 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2487 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2488 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2554 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2555 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2556 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2557 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2558 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2559 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2560 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2561 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2562 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2563 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2564 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2565 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2566 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2567 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2568 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2569 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2570 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2571 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2572 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2573 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2574 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2575 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2576 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2577 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2578 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2579 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2580 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2581 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2582 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2583 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2584 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2585 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2586 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2587 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2588 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2589 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2590 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2591 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2592 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2593 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2594 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2595 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2596 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2597 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2598 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2599 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2600 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2601 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2602 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2603 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2604 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2605 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2606 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2607 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2608 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2609 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2610 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2611 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2612 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2613 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2614 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2615 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2616 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2617 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2618 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2619 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2620 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2621 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2622 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2623 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2624 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2625 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2626 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2627 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2628 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2629 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2630 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2631 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2632 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2633 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2634 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2635 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2636 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2637 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2638 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2639 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2640 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2641 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2642 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2643 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2644 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2645 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2646 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2647 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2648 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2649 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2650 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2651 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2652 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2653 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2654 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2655 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2656 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2657 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2658 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2659 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2660 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2661 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2662 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2663 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2664 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2665 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2666 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2667 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2668 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2669 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2670 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2671 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2672 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2673 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2674 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2675 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2676 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2677 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2678 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2679 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2680 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2681 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2682 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2683 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2684 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2685 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2686 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2687 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2688 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2689 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2690 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2691 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2692 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2693 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2694 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2695 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2696 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2697 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2698 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2699 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2700 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2701 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2702 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2703 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2704 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2705 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2706 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2707 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2708 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2709 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2710 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2711 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2712 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2713 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2714 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2715 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2716 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2717 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2718 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2719 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2720 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2721 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2722 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2723 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2724 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2725 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2726 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2727 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2728 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2729 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2730 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2731 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2732 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2733 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2734 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2735 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2736 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2737 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2738 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2739 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2740 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2741 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2742 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2743 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2744 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2745 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2746 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2747 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2748 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2749 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2750 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2751 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2752 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2753 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2754 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2755 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2756 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2757 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2758 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2759 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2760 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2761 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2762 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2763 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2764 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2765 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2766 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2767 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2768 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2769 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2770 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2771 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2772 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2773 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2774 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2775 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2776 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2777 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2778 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2779 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2780 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2781 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2782 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2783 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2784 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2785 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2786 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2787 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2788 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2789 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2790 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2791 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2792 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2793 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2794 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2795 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2796 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2797 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2798 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2799 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2800 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2801 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2802 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2803 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2804 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2805 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2806 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2807 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2808 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2809 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2810 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2811 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2812 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2813 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2814 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2815 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2816 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2817 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2818 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2819 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2820 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2821 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2822 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2823 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2824 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2825 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2826 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2827 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2828 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2829 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2830 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2831 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2832 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2833 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2834 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2835 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2836 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2837 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2838 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2839 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2840 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2841 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2842 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2843 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2844 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2845 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2846 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2847 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2848 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2849 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2850 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2851 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2852 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2853 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2854 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2855 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2856 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2857 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2858 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2859 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2860 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2861 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2862 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2863 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2864 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2865 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2866 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2867 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2868 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2869 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2870 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2871 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2872 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2873 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2874 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2875 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2876 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2877 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2878 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2879 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2880 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2881 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2882 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2883 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2884 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2885 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2886 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2887 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2888 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2889 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2890 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2891 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2892 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2893 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2894 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2895 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2896 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2897 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2898 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2899 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2900 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2901 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2902 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2903 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2904 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2905 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2906 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2907 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2908 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2909 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2910 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2911 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2912 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2913 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2914 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2915 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2916 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2917 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2918 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2919 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2920 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2921 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2922 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2923 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2924 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2925 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2926 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2927 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2928 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2929 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2930 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2931 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2932 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2933 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2934 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2935 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2936 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2937 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2938 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2939 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2940 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2941 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2942 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2943 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2944 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2945 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2946 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2947 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2948 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2949 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2950 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2951 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2952 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2953 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2954 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2955 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2956 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2957 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2958 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2959 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2960 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2961 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2962 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2963 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2964 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2965 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2966 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2967 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2968 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2969 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2970 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2971 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2972 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2973 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2974 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2975 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2976 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2977 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2978 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2979 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2980 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2981 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2982 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2983 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2984 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2985 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2986 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2987 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2988 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2989 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2990 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2991 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2992 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2993 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2994 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2995 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2996 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2997 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2998 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 2999 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3000 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3001 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3002 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3003 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3004 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3005 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3006 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3007 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3008 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3009 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3010 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3011 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3012 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3013 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3014 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3015 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3016 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3017 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3018 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3019 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3020 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3021 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3022 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3023 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3024 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3025 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3026 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3027 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3028 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3029 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3030 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3031 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3032 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3033 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3034 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3035 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3036 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3037 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3038 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3039 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3040 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3041 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3042 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3043 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3044 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3045 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3046 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3047 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3048 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3049 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3050 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3051 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3052 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3053 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3054 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3055 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3056 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3057 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3058 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3059 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3060 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3061 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3062 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3063 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3064 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3065 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3066 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3067 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3068 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3069 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3070 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3071 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3072 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3073 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3074 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3075 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3076 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3077 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3078 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3079 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3080 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3081 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3082 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3083 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3084 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3085 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3086 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3087 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3088 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3089 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3090 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3091 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3092 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3093 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3094 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3095 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3096 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3097 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3098 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3099 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3100 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3101 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3102 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3103 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3104 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3105 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3106 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3107 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3108 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3109 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3110 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3111 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3112 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3113 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3114 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3115 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3116 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3117 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3118 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3119 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3120 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3121 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3122 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3123 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3124 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3125 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3126 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3127 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3128 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3129 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3130 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3131 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3132 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3133 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3134 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3135 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3136 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3137 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3138 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3139 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3140 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3141 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3142 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3143 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3144 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3145 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3146 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3147 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3148 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3149 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3150 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3151 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3152 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3153 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3154 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3155 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3156 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3157 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3158 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3159 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3160 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3161 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3162 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3163 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3164 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3165 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3166 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3167 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3168 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3169 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3170 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3171 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3172 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3173 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3174 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3175 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3176 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3177 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3178 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3179 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3180 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3181 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3182 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3183 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3184 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3185 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3186 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3187 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3188 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3189 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3190 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3191 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3192 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3193 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3194 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3195 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3196 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3197 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3198 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3199 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3200 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3201 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3202 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3203 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3204 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3205 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3206 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3207 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3208 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3209 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3210 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3211 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3212 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3213 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3214 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3215 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3216 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3217 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3218 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3219 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3220 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3221 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3222 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3223 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3224 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3225 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3226 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3227 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3228 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3229 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3230 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3231 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3232 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3233 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3234 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3235 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3236 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3237 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3238 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3239 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3240 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3241 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3242 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3243 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3244 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3245 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3246 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3247 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3248 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3249 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3250 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3251 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3252 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3253 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3254 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3255 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3256 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3257 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3258 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3259 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3260 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3261 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3262 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3263 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3264 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3265 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3266 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3267 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3268 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3269 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3270 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3271 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3272 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3273 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3274 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3275 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3276 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3277 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3278 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3279 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3280 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3281 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3282 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3283 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3284 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3285 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3286 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3287 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3288 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3289 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3290 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3291 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3292 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3293 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3294 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3295 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3296 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3297 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3298 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3299 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3300 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3301 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3302 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3303 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3304 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3305 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3306 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3307 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3308 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3309 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3310 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3311 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3312 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3313 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3314 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3315 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3316 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3317 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3318 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3319 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3320 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3321 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3322 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3323 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3324 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3325 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3326 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3327 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3328 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3329 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3330 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3331 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3332 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3333 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3334 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3335 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3336 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3337 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3338 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3339 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3340 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3341 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3342 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3343 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3344 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3345 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3346 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3347 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3348 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3349 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3350 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3351 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3352 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3353 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3354 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3355 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3356 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3357 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3358 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3359 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3360 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3361 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3362 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3363 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3364 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3365 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3366 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3367 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3368 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3369 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3370 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3371 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3372 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3373 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3374 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3375 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3376 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3377 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3378 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3379 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3380 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3381 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3382 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3383 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3384 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3385 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3386 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3387 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3388 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3389 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3390 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3391 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3392 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3393 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3394 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3395 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3396 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3397 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3398 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3399 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3400 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3401 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3402 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3403 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3404 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3405 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3406 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3407 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3408 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3409 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3410 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3411 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3412 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3413 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3414 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3415 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3416 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3417 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3418 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3419 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3420 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3421 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3422 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3423 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3424 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3425 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3426 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3427 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3428 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3429 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3430 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3431 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3432 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3433 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3434 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3435 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3436 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3437 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3438 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3439 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3440 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3441 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3442 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3443 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3444 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3445 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3446 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3447 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3448 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3449 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3450 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3451 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3452 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3453 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3454 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3455 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3456 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3457 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3458 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3459 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3460 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3461 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3462 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3463 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3464 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3465 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3466 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3467 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3468 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3469 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3470 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3471 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3472 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3473 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3474 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3475 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3476 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3477 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3478 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3479 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3480 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3481 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3482 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3483 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3484 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3485 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3486 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3487 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3488 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3489 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3490 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3491 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3492 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3493 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3494 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3495 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3496 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3497 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3498 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3499 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3500 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3501 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3502 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3503 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3504 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3505 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3506 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3507 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3508 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3509 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3510 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3511 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3512 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3513 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3514 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3515 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3516 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3517 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3518 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3519 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3520 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3521 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3522 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3523 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3524 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3525 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3526 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3527 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3528 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3529 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3530 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3531 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3532 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3533 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3534 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3535 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3536 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3537 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3538 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3539 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3540 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3541 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3542 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3543 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3544 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3545 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3546 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3547 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3548 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3549 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3550 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3551 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3552 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3553 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3554 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3555 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3556 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3557 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3558 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3559 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3560 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3561 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3562 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3563 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3564 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3565 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3566 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3567 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3568 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3569 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3570 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3571 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3572 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3573 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3574 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3575 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3576 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3577 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3578 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3579 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3580 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3581 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3582 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3583 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3584 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3585 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3586 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3587 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3588 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3589 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3590 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3591 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3592 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3593 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3594 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3595 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3596 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3597 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3598 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3599 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3600 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3601 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3602 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3603 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3604 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3605 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3606 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3607 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3608 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3609 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3610 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3611 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3612 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3613 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3614 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3615 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3616 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3617 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3618 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3619 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3620 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3621 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3622 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3623 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3624 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3625 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3626 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3627 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3628 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3629 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3630 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3631 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3632 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3633 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3634 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3635 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3636 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3637 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3638 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3639 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3640 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3641 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3642 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3643 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3644 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3645 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3646 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3647 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3648 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3649 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3650 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3651 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3652 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3653 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3654 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3655 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3656 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3657 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3658 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3659 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3660 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3661 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3662 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3663 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3664 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3665 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3666 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3667 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3668 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3669 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3670 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3671 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3672 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3673 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3674 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3675 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3676 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3677 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3678 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3679 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3680 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3681 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3682 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3683 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3684 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3685 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3686 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3687 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3688 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3689 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3690 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3691 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3692 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3693 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3694 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3695 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3696 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3697 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3698 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3699 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3700 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3701 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3702 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3703 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3704 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3705 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3706 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3707 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3708 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3709 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3710 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3711 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3712 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3713 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3714 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3715 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3716 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3717 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3718 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3719 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3720 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3721 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3722 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3723 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3724 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3725 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3726 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3727 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3728 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3729 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3730 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3731 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3732 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3733 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3734 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3735 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3736 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3737 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3738 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3739 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3740 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3741 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3742 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3743 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3744 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3745 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3746 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3747 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3748 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3749 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3750 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3751 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3752 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3753 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3754 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3755 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3756 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3757 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3758 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3759 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3760 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3761 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3762 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3763 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3764 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3765 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3766 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3767 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3768 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3769 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3770 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3771 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3772 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3773 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3774 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3775 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3776 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3777 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3778 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3779 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3780 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3781 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3782 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3783 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3784 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3785 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3786 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3787 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3788 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3789 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3790 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3791 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3792 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3793 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3794 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3795 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3796 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3797 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3798 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3799 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3800 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3801 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3802 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3803 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3804 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3805 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3806 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3807 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3808 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3809 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3810 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3811 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3812 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3813 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3814 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3815 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3816 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3817 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3818 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3819 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3820 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3821 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3822 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3823 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3824 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3825 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3826 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3827 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3828 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3829 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3830 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3831 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3832 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3833 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3834 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3835 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3836 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3837 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3838 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3839 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3840 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3841 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3842 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3843 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3844 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3845 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3846 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3847 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3848 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3849 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3850 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3851 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3852 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3853 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3854 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3855 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3856 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3857 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3858 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3859 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3860 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3861 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3862 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3863 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3864 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3865 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3866 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3867 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3868 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3869 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3870 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3871 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3872 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3873 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3874 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3875 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3876 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3877 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3878 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3879 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3880 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3881 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3882 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3883 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3884 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3885 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3886 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3887 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3888 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3889 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3890 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3891 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3892 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3893 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3894 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3895 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3896 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3897 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3898 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3899 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3900 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3901 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3902 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3903 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3904 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3905 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3906 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3907 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3908 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3909 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3910 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3911 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3912 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3913 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3914 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3915 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3916 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3917 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3918 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3919 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3920 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3921 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3922 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3923 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3924 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3925 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3926 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3927 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3928 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3929 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3930 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3931 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3932 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3933 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3934 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3935 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3936 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3937 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3938 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3939 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3940 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3941 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3942 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3943 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3944 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3945 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3946 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3947 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3948 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3949 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3950 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3951 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3952 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3953 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3954 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3955 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3956 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3957 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3958 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3959 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3960 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3961 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3962 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3963 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3964 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3965 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3966 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3967 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3968 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3969 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3970 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3971 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3972 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3973 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3974 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3975 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3976 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3977 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3978 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3979 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3980 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3981 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3982 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3983 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3984 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3985 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3986 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3987 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3988 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3989 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3990 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3991 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3992 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3993 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3994 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3995 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3996 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3997 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3998 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 3999 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4000 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4001 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4002 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4003 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4004 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4005 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4006 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4007 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4008 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4009 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4010 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4011 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4012 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4013 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4014 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4015 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4016 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4017 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4018 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4019 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4020 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4021 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4022 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4023 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4024 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4025 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4026 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4027 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4028 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4029 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4030 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4031 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4032 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4033 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4034 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4035 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4036 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4037 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4038 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4039 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4040 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4041 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4042 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4043 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4044 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4045 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4046 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4047 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4048 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4049 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4050 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4051 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4052 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4053 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4054 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4055 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4056 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4057 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4058 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4059 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4060 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4061 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4062 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4063 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4064 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4065 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4066 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4067 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4068 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4069 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4070 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4071 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4072 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4073 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4074 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4075 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4076 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4077 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4078 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4079 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4080 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4081 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4082 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4083 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4084 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4085 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4086 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4087 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4088 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4089 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4090 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4091 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4092 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4093 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4094 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4095 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4096 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4097 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4098 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4099 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4100 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4101 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4102 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4103 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4104 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4105 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4106 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4107 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4108 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4109 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4110 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4111 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4112 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4113 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4114 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4115 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4116 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4117 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4118 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4119 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4120 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4121 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4122 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4123 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4124 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4125 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4126 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4127 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4128 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4129 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4130 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4131 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4132 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4133 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4134 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4135 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4136 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4137 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4138 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4139 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4140 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4141 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4142 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4143 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4144 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4145 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4146 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4147 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4148 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4149 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4150 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4151 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4152 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4153 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4154 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4155 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4156 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4157 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4158 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4159 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4160 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4161 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4162 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4163 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4164 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4165 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4166 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4167 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4168 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4169 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4170 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4171 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4172 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4173 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4174 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4175 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4176 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4177 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4178 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4179 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4180 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4181 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4182 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4183 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4184 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4185 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4186 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4187 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4188 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4189 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4190 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4191 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4192 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4193 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4194 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4195 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4196 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4197 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4198 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4199 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4200 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4201 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4202 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4203 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4204 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4205 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4206 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4207 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4208 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4209 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4210 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4211 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4212 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4213 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4214 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4215 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4216 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4217 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4218 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4219 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4220 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4221 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4222 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4223 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4224 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4225 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4226 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4227 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4228 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4229 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4230 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4231 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4232 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4233 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4234 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4235 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4236 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4237 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4238 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4239 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4240 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4241 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4242 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4243 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4244 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4245 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4246 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4247 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4248 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4249 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4250 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4251 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4252 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4253 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4254 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4255 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4256 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4257 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4258 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4259 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4260 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4261 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4262 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4263 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4264 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4265 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4266 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4267 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4268 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4269 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4270 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4271 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4272 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4273 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4274 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4275 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4276 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4277 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4278 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4279 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4280 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4281 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4282 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4283 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4284 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4285 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4286 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4287 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4288 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4289 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4290 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4291 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4292 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4293 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4294 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4295 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4296 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4297 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4298 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4299 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4300 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4301 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4302 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4303 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4304 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4305 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4306 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4307 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4308 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4309 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4310 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4311 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4312 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4313 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4314 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4315 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4316 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4317 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4318 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4319 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4320 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4321 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4322 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4323 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4324 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4325 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4326 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4327 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4328 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4329 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4330 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4331 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4332 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4333 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4334 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4335 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4336 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4337 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4338 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4339 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4340 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4341 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4342 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4343 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4344 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4345 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4346 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4347 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4348 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4349 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4350 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4351 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4352 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4353 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4354 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4355 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4356 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4357 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4358 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4359 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4360 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4361 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4362 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4363 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4364 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4365 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4366 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4367 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4368 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4369 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4370 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4371 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4372 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4373 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4374 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4375 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4376 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4377 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4378 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4379 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4380 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4381 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4382 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4383 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4384 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4385 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4386 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4387 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4388 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4389 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4390 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4391 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4392 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4393 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4394 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4395 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4396 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4397 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4398 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4399 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4400 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4401 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4402 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4403 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4404 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4405 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4406 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4407 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4408 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4409 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4410 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4411 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4412 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4413 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4414 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4415 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4416 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4417 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4418 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4419 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4420 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4421 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4422 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4423 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4424 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4425 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4426 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4427 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4428 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4429 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4430 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4431 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4432 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4433 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4434 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4435 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4436 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4437 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4438 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4439 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4440 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4441 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4442 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4443 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4444 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4445 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4446 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4447 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4448 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4449 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4450 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4451 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4452 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4453 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4454 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4455 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4456 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4457 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4458 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4459 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4460 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4461 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4462 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4463 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4464 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4465 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4466 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4467 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4468 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4469 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4470 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4471 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4472 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4473 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4474 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4475 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4476 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4477 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4478 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4479 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4480 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4481 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4482 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4483 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4484 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4485 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4486 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4487 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4488 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4489 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4490 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4491 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4492 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4493 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4494 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4495 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4496 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4497 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4498 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4499 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4500 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4501 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4502 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4503 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4504 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4505 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4506 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4507 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4508 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4509 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4510 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4511 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4512 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4513 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4514 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4515 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4516 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4517 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4518 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4519 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4520 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4521 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4522 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4523 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4524 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4525 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4526 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4527 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4528 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4529 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4530 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4531 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4532 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4533 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4534 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4535 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4536 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4537 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4538 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4539 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4540 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4541 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4542 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4543 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4544 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4545 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4546 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4547 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4548 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4549 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4550 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4551 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4552 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4553 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4554 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4555 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4556 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4557 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4558 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4559 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4560 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4561 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4562 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4563 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4564 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4565 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4566 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4567 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4568 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4569 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4570 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4571 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4572 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4573 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4574 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4575 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4576 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4577 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4578 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4579 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4580 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4581 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4582 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4583 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4584 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4585 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4586 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4587 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4588 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4589 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4590 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4591 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4592 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4593 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4594 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4595 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4596 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4597 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4598 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4599 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4600 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4601 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4602 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4603 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4604 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4605 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4606 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4607 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4608 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4609 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4610 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4611 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4612 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4613 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4614 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4615 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4616 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4617 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4618 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4619 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4620 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4621 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4622 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4623 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4624 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4625 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4626 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4627 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4628 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4629 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4630 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4631 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4632 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4633 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4634 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4635 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4636 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4637 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4638 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4639 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4640 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4641 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4642 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4643 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4644 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4645 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4646 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4647 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4648 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4649 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4650 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4651 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4652 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4653 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4654 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4655 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4656 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4657 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4658 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4659 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4660 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4661 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4662 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4663 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4664 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4665 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4666 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4667 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4668 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4669 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4670 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4671 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4672 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4673 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4674 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4675 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4676 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4677 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4678 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4679 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4680 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4681 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4682 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4683 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4684 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4685 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4686 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4687 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4688 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4689 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4690 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4691 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4692 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4693 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4694 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4695 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4696 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4697 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4698 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4699 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4700 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4701 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4702 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4703 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4704 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4705 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4706 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4707 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4708 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4709 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4710 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4711 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4712 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4713 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4714 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4715 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4716 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4717 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4718 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4719 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4720 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4721 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4722 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4723 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4724 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4725 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4726 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4727 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4728 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4729 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4730 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4731 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4732 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4733 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4734 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4735 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4736 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4737 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4738 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4739 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4740 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4741 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4742 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4743 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4744 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4745 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4746 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4747 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4748 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4749 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4750 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4751 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4752 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4753 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4754 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4755 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4756 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4757 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4758 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4759 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4760 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4761 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4762 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4763 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4764 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4765 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4766 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4767 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4768 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4769 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4770 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4771 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4772 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4773 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4774 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4775 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4776 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4777 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4778 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4779 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4780 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4781 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4782 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4783 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4784 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4785 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4786 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4787 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4788 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4789 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4790 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4791 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4792 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4793 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4794 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4795 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4796 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4797 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4798 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4799 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4800 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4801 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4802 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4803 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4804 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4805 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4806 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4807 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4808 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4809 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4810 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4811 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4812 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4813 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4814 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4815 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4816 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4817 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4818 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4819 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4820 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4821 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4822 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4823 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4824 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4825 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4826 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4827 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4828 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4829 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4830 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4831 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4832 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4833 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4834 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4835 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4836 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4837 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4838 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4839 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4840 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4841 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4842 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4843 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4844 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4845 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4846 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4847 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4848 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4849 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4850 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4851 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4852 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4853 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4854 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4855 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4856 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4857 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4858 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4859 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4860 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4861 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4862 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4863 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4864 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4865 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4866 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4867 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4868 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4869 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4870 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4871 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4872 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4873 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4874 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4875 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4876 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4877 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4878 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4879 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4880 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4881 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4882 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4883 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4884 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4885 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4886 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4887 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4888 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4889 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4890 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4891 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4892 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4893 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4894 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4895 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4896 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4897 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4898 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4899 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4900 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4901 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4902 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4903 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4904 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4905 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4906 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4907 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4908 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4909 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4910 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4911 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4912 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4913 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4914 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4915 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4916 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4917 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4918 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4919 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4920 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4921 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4922 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4923 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4924 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4925 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4926 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4927 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4928 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4929 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4930 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4931 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4932 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4933 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4934 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4935 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4936 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4937 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4938 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4939 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4940 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4941 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4942 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4943 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4944 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4945 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4946 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4947 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4948 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4949 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4950 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4951 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4952 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4953 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4954 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4955 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4956 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4957 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4958 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4959 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4960 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4961 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4962 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4963 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4964 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4965 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4966 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4967 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4968 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4969 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4970 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4971 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4972 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4973 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4974 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4975 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4976 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4977 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4978 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4979 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4980 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4981 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4982 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4983 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4984 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4985 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4986 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4987 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4988 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4989 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4990 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4991 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4992 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4993 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4994 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4995 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4996 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4997 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4998 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 4999 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5000 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5001 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5002 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5003 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5004 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5005 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5006 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5007 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5008 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5009 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5010 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5011 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5012 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5013 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5014 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5015 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5016 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5017 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5018 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5019 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5020 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5021 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5022 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5023 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5024 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5025 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5026 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5027 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5028 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5029 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5030 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5031 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5032 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5033 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5034 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5035 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5036 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5037 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5038 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5039 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5040 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5041 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5042 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5043 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5044 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5045 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5046 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5047 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5048 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5049 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5050 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5051 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5052 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5053 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5054 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5055 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5056 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5057 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5058 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5059 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5060 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5061 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5062 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5063 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5064 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5065 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5066 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5067 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5068 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5069 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5070 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5071 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5072 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5073 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5074 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5075 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5076 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5077 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5078 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5079 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5080 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5081 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5082 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5083 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5084 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5085 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5086 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5087 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5088 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5089 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5090 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5091 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5092 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5093 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5094 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5095 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5096 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5097 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5098 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5099 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5100 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5101 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5102 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5103 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5104 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5105 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5106 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5107 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5108 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5109 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5110 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5111 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5112 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5113 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5114 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5115 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5116 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5117 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5118 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5119 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5120 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5121 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5122 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5123 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5124 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5125 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5126 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5127 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5128 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5129 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5130 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5131 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5132 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5133 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5134 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5135 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5136 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5137 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5138 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5139 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5140 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5141 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5142 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5143 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5144 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5145 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5146 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5147 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5148 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5149 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5150 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5151 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5152 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5153 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5154 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5155 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5156 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5157 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5158 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5159 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5160 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5161 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5162 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5163 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5164 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5165 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5166 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5167 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5168 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5169 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5170 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5171 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5172 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5173 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5174 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5175 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5176 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5177 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5178 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5179 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5180 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5181 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5182 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5183 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5184 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5185 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5186 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5187 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5188 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5189 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5190 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5191 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5192 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5193 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5194 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5195 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5196 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5197 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5198 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5199 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5200 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5201 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5202 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5203 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5204 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5205 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5206 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5207 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5208 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5209 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5210 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5211 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5212 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5213 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5214 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5215 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5216 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5217 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5218 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5219 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5220 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5221 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5222 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5223 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5224 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5225 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5226 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5227 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5228 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5229 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5230 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5231 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5232 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5233 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5234 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5235 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5236 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5237 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5238 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5239 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5240 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5241 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5242 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5243 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5244 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5245 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5246 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5247 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5248 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5249 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5250 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5251 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5252 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5253 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5254 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5255 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5256 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5257 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5258 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5259 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5260 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5261 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5262 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5263 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5264 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5265 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5266 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5267 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5268 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5269 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5270 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5271 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5272 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5273 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5274 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5275 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5276 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5277 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5278 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5279 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5280 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5281 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5282 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5283 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5284 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5285 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5286 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5287 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5288 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5289 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5290 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5291 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5292 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5293 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5294 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5295 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5296 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5297 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5298 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5299 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5300 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5301 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5302 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5303 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5304 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5305 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5306 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5307 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5308 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5309 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5310 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5311 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5312 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5313 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5314 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5315 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5316 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5317 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5318 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5319 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5320 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5321 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5322 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5323 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5324 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5325 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5326 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5327 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5328 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5329 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5330 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5331 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5332 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5333 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5334 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5335 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5336 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5337 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5338 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5339 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5340 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5341 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5342 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5343 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5344 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5345 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5346 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5347 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5348 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5349 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5350 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5351 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5352 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5353 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5354 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5355 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5356 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5357 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5358 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5359 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5360 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5361 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5362 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5363 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5364 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5365 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5366 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5367 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5371 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5372 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5373 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5374 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5375 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5376 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5377 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5378 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5379 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5380 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5381 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5382 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5383 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5384 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5385 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5386 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5387 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5388 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5389 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5390 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5391 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5392 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5393 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5394 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5402 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5406 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5413 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5414 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5415 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5416 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5417 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5418 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5419 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5420 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5421 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5422 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5423 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5424 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5425 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5426 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5427 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5428 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5429 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5430 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5431 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5432 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5433 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5434 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5435 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5436 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5437 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5438 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5439 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5440 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5441 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5442 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5443 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5444 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5445 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5446 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5447 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5448 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5449 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5450 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5451 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5452 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5453 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5454 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5455 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5456 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5457 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5458 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5459 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5460 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5461 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5462 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5463 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5464 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5465 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5466 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5467 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5468 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5469 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5470 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5471 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5472 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5473 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5474 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5475 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5476 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5477 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5478 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5479 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5480 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5481 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5482 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5483 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5484 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5485 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5486 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5487 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5488 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5489 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5490 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5491 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5492 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5493 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5494 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5495 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5496 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5497 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5498 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5499 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5500 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5501 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5502 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5503 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5504 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5505 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5506 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5507 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5508 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5509 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5510 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5511 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5512 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5513 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5514 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5515 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5516 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5517 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5518 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5519 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5520 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5521 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5522 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5523 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5524 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5525 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5526 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5527 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5528 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5529 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5530 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5531 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5532 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5533 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5534 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5535 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5536 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5537 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5538 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5539 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5540 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5541 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5542 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5543 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5544 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5545 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5546 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5547 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5548 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5549 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5550 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5551 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5552 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5553 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5554 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5555 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5556 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5557 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5558 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5559 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5560 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5561 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5562 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5563 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5564 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5565 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5566 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5567 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5568 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5569 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5570 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5571 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5572 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5573 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5574 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5575 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5576 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5577 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5578 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5579 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5580 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5581 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5582 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5583 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5584 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5585 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5586 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5587 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5588 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5589 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5590 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5591 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5592 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5593 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5594 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5595 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5596 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5597 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5598 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5599 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5600 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5601 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5602 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5603 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5604 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5605 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5606 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5607 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5608 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5609 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5610 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5611 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5612 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5613 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5614 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5615 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5616 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5617 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5618 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5619 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5620 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5621 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5622 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5623 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5624 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5625 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5626 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5627 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5628 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5629 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5630 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5631 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5632 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5633 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5634 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5635 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5636 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5637 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5638 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5639 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5640 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5641 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5642 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5643 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5644 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5645 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5646 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5647 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5648 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5649 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5650 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5651 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5652 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5653 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5654 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5655 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5656 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5657 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5658 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5659 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5660 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5661 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5662 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5663 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5664 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5665 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5666 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5667 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5668 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5669 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5670 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5671 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5672 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5673 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5674 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5675 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5676 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5677 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5678 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5679 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5680 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5681 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5682 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5683 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5684 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5685 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5686 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5687 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5688 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5689 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5690 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5691 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5692 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5693 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5694 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5695 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5696 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5697 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5698 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5699 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5700 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5701 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5702 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5703 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5704 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5705 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5706 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5707 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5708 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5709 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5710 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5711 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5712 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5713 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5714 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5715 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5716 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5717 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5718 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5719 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5720 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5721 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5722 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5723 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5724 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5725 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5726 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5727 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5728 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5729 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5730 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5731 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5732 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5733 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5734 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5735 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5736 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5737 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5738 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5739 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5740 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5741 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5742 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5743 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5744 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5745 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5746 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5747 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5748 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5749 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5750 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5751 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5752 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5753 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5754 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5755 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5756 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5757 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5758 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5759 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5760 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5761 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5762 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5763 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5764 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5765 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5766 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5767 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5768 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5769 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5770 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5771 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5772 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5773 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5774 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5775 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5776 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5777 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5778 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5779 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5780 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5781 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5782 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5783 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5784 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5785 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5786 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5787 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5788 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5789 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5790 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5791 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5792 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5793 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5794 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5795 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5796 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5797 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5798 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5799 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5800 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5801 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5802 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5803 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5804 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5805 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5806 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5807 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5808 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5809 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5810 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5822 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5823 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5824 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5825 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5826 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5827 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5828 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5829 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5830 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5831 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5832 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5833 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5834 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5835 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5836 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5837 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5838 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5839 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5840 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5841 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5842 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5843 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5844 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5845 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5846 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5847 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5848 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5849 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5850 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5851 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5852 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5853 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5854 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5855 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5856 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5857 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5858 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5859 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5860 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5861 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5862 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5863 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5864 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5865 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5866 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5867 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5868 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5869 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5870 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5871 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5872 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5873 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5874 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5875 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5876 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5877 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5878 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5879 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5880 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5881 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5882 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5883 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5884 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5885 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5886 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5887 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5888 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5889 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5890 start_va = 0xd70a760000 end_va = 0xd70a7dffff entry_point = 0x0 region_type = private name = "private_0x000000d70a760000" filename = "" Region: id = 5891 start_va = 0x7ff6f2f4e000 end_va = 0x7ff6f2f4ffff entry_point = 0x0 region_type = private name = "private_0x00007ff6f2f4e000" filename = "" Region: id = 5892 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5893 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5894 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5895 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5896 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5897 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5898 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5899 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5900 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5901 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5902 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5903 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5904 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5905 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5906 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5907 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5908 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5909 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5910 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5911 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5912 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5913 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5914 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5915 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5916 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5917 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5918 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5919 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5920 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5921 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5922 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5923 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5924 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5925 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5926 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5927 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5928 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5929 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5930 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5931 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5932 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5933 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5934 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5935 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5936 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5937 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5938 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5939 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5940 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5941 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5942 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5943 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5944 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5945 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5946 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5947 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5948 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5949 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5950 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5951 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5952 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5953 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5954 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5955 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5956 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5957 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5958 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5959 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5960 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5961 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5962 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5963 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5964 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5965 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5966 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5967 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5968 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5969 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5970 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5971 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5972 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5973 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5974 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5975 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5976 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5977 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5978 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5979 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5980 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5981 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5982 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5983 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5984 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5985 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5986 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5987 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5988 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5989 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5990 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5991 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5992 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5993 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5994 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5995 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5996 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5997 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5998 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 5999 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6000 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6001 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6002 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6003 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6004 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6005 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6006 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6007 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6008 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6009 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6010 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6011 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6012 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6013 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6014 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6015 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6016 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6017 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6018 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6019 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6020 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6021 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6022 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6023 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6024 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6025 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6026 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6027 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6028 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6029 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6030 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6031 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6032 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6033 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6034 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6035 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6036 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6037 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6038 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6039 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6040 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6041 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6042 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6043 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6044 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6045 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6046 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6047 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6048 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6049 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6050 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6051 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6052 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6053 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6054 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6055 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6056 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6057 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6058 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6059 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6060 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6061 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6062 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6063 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6064 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6065 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6066 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6067 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6068 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6069 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6070 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6071 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6072 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6073 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6074 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6075 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6076 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6077 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6078 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6079 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6080 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6081 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6082 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6083 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6084 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6085 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6086 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6087 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6088 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6089 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6090 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6091 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6092 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6093 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6094 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6095 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6096 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6097 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6098 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6099 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6100 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6101 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6102 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6103 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6104 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6105 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6106 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6107 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6108 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6109 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6110 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6111 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6112 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6113 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6114 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6115 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6116 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6117 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6118 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6119 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6120 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6121 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6122 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6123 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6124 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6125 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6126 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6127 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6128 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6129 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6130 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6131 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6132 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6133 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6134 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6135 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6136 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6137 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6138 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6139 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6140 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6141 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6142 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6143 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6144 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6145 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6146 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6147 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6148 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6149 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6150 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6151 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6152 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6153 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6154 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6155 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6156 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6157 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6158 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6159 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6160 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6161 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6162 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6163 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6164 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6165 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6166 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6167 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6168 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6169 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6170 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6171 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6172 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6173 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6174 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6175 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6176 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6177 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6178 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6179 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6180 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6181 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6182 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6183 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6184 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6185 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6186 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6187 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6188 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6189 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6190 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6191 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6192 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6193 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6194 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6195 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6196 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6197 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6198 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6199 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6200 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6201 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6202 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6203 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6204 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6205 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6206 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6207 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6208 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6209 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6210 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6211 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6212 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6213 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6214 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6215 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6216 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6217 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6218 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6219 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6220 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6221 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6222 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6223 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6224 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6225 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6226 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6227 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6228 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6229 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6230 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6231 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6232 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6233 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6234 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6235 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6236 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6237 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6238 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6239 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6240 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6241 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6242 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6243 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6244 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6245 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6246 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6247 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6248 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6249 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6250 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6251 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6252 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6253 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6254 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6255 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6256 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6257 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6258 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6259 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6260 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6261 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6262 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6263 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6264 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6265 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6266 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6267 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6268 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6269 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6270 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6271 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6272 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6273 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6274 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6275 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6276 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6277 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6278 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6279 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6280 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6281 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6282 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6283 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6284 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6285 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6286 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6287 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6288 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6289 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6290 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6291 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6292 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6293 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6294 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6295 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6296 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6297 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6298 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6299 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6300 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6301 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6302 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6303 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6304 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6305 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6306 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6307 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6308 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6309 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6310 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6311 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6312 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6313 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6314 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6315 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6316 start_va = 0xd70aa60000 end_va = 0xd70ab54fff entry_point = 0x0 region_type = private name = "private_0x000000d70aa60000" filename = "" Region: id = 6317 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6318 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6319 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6320 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6321 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6322 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6323 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6324 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6325 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6326 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6327 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6328 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6329 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6330 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6331 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6332 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6333 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6334 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6335 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6336 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6337 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6338 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6339 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6340 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6341 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6342 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6343 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6344 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6345 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6346 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6347 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6348 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6349 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6350 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6351 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6352 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6353 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6354 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6355 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6356 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6357 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6358 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6359 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6360 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6361 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6362 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6363 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6364 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6365 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6366 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6367 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6368 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6369 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6370 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6371 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6372 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6373 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6374 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6375 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6376 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6377 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6378 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6379 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6380 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6381 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6382 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6383 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6384 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6385 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6386 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6387 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6388 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6389 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6390 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6391 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6392 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6393 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6394 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6395 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6396 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6397 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6398 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6399 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6400 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6401 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6402 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6403 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6404 start_va = 0xd70aa60000 end_va = 0xd70ab54fff entry_point = 0x0 region_type = private name = "private_0x000000d70aa60000" filename = "" Region: id = 6405 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6406 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6407 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6408 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6409 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6410 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6411 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6412 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6413 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6414 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6415 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6416 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6417 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6418 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6419 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6420 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6421 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6422 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6423 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6424 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6425 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6426 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6427 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6428 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6429 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6430 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6431 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6432 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6433 start_va = 0xd70aa60000 end_va = 0xd70ab54fff entry_point = 0x0 region_type = private name = "private_0x000000d70aa60000" filename = "" Region: id = 6434 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6435 start_va = 0xd70aa60000 end_va = 0xd70ab54fff entry_point = 0x0 region_type = private name = "private_0x000000d70aa60000" filename = "" Region: id = 6436 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6437 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6438 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6439 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6440 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6441 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6442 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6443 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6444 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6445 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6446 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6447 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6448 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6449 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6450 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6451 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6452 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6453 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6454 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6455 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6456 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6457 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6458 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6459 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6460 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6461 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6462 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6463 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6464 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6465 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6466 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6467 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6468 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6469 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6470 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6471 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6472 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6473 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6474 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6475 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6476 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6477 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6478 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6479 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6480 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6481 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6482 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6483 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6484 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6485 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6486 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6487 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6488 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6489 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6490 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6491 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6492 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6493 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6494 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6495 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6496 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6497 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6498 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6499 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6500 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6501 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6502 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6503 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6504 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6505 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6506 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6507 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6508 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6509 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6510 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6511 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6512 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6513 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6514 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6515 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6516 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6517 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6518 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6519 start_va = 0xd70aa60000 end_va = 0xd70ab54fff entry_point = 0x0 region_type = private name = "private_0x000000d70aa60000" filename = "" Region: id = 6520 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6521 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6522 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6523 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6524 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6525 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6526 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6527 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6528 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6529 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6530 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6531 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6532 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6533 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6534 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6535 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6536 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6537 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6538 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6539 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6540 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6541 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6542 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6543 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6544 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6545 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6546 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6547 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6548 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6549 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6550 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6551 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6552 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6553 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6554 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6555 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6556 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6557 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6558 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6559 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6560 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6561 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6562 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6563 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6564 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6565 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6566 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6567 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6568 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6569 start_va = 0xd70aa60000 end_va = 0xd70ab54fff entry_point = 0x0 region_type = private name = "private_0x000000d70aa60000" filename = "" Region: id = 6570 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6571 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6572 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6573 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6574 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6575 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6576 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6577 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6578 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6579 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6580 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6581 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6582 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6583 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6584 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6585 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6586 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6587 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6588 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6589 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6590 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6591 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6592 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6593 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6594 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6595 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6596 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6597 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6598 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6599 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6600 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6601 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6602 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6603 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6604 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6605 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6606 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6607 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6608 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6609 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6610 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6611 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6612 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6613 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6614 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6615 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6616 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6617 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6618 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6619 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6620 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6621 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6622 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6623 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6624 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6625 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6626 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6627 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6628 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6629 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6630 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6631 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6632 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6633 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6634 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6635 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6636 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6637 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6638 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6639 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6640 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6641 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6642 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6643 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6644 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6645 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6646 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6647 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6648 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6649 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6650 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6651 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6652 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6653 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6654 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6655 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6656 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6657 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6658 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6659 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6660 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6661 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6662 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6663 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6664 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6665 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6666 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6667 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6668 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6669 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6670 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6671 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6672 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6673 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6674 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6675 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6676 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6677 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6678 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6679 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6680 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6681 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6682 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6683 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6684 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6685 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6686 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6687 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6688 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6689 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6690 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6691 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6692 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6693 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6694 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6695 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6696 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6697 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6698 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6699 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6700 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6701 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6702 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6703 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6704 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6705 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6706 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6707 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6708 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6709 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6710 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6711 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6712 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6713 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6714 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6715 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6716 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6717 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6718 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6719 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6720 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6721 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6722 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6723 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6724 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6725 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6726 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6727 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6728 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6729 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6730 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6731 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6732 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6733 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6734 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6735 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6736 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6737 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6738 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6739 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6740 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6741 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6742 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6743 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6744 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6745 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6746 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6747 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6748 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6749 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6750 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6751 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6752 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6753 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6754 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6755 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6756 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6757 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6758 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6759 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6760 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6761 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6762 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6763 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6764 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6765 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6766 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6767 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6768 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6769 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6770 start_va = 0xd70aa60000 end_va = 0xd70ab54fff entry_point = 0x0 region_type = private name = "private_0x000000d70aa60000" filename = "" Region: id = 6771 start_va = 0xd70aa60000 end_va = 0xd70ab54fff entry_point = 0x0 region_type = private name = "private_0x000000d70aa60000" filename = "" Region: id = 6772 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6773 start_va = 0xd70aa60000 end_va = 0xd70ab54fff entry_point = 0x0 region_type = private name = "private_0x000000d70aa60000" filename = "" Region: id = 6774 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6775 start_va = 0xd70aa60000 end_va = 0xd70ab54fff entry_point = 0x0 region_type = private name = "private_0x000000d70aa60000" filename = "" Region: id = 6776 start_va = 0xd707b90000 end_va = 0xd707b92fff entry_point = 0x0 region_type = private name = "private_0x000000d707b90000" filename = "" Region: id = 6777 start_va = 0xd70aa60000 end_va = 0xd70ab54fff entry_point = 0x0 region_type = private name = "private_0x000000d70aa60000" filename = "" Thread: id = 10 os_tid = 0xba8 Thread: id = 11 os_tid = 0x8a8 Thread: id = 12 os_tid = 0x850 Thread: id = 13 os_tid = 0x2bc Thread: id = 14 os_tid = 0x44c Thread: id = 15 os_tid = 0x410 Thread: id = 16 os_tid = 0x7fc Thread: id = 17 os_tid = 0x7f0 Thread: id = 18 os_tid = 0x7ec Thread: id = 19 os_tid = 0x7e4 Thread: id = 20 os_tid = 0x79c Thread: id = 21 os_tid = 0x798 Thread: id = 22 os_tid = 0x794 Thread: id = 23 os_tid = 0x77c Thread: id = 24 os_tid = 0xcb8 [0071.031] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x7ff8ee2d0000 [0071.031] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="LoadLibraryA") returned 0x7ff8ee2f2080 [0071.031] LoadLibraryA (lpLibFileName="mpr.dll") returned 0x7ff8e9fe0000 [0071.164] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x7ff8ee190000 [0071.165] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x7ff8ec300000 [0071.165] LoadLibraryA (lpLibFileName="Shell32.dll") returned 0x7ff8ec580000 [0071.172] LoadLibraryA (lpLibFileName="Iphlpapi.dll") returned 0x7ff8e8480000 [0071.857] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GetLastError") returned 0x7ff8ee2e6060 [0071.857] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="VirtualFree") returned 0x7ff8ee2ebc10 [0071.857] GetProcAddress (hModule=0x7ff8ee190000, lpProcName="CryptExportKey") returned 0x7ff8ee1a7b50 [0071.857] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="DeleteFileW") returned 0x7ff8ee2f57a0 [0071.858] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GetDriveTypeW") returned 0x7ff8ee2f58f0 [0071.858] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GetCommandLineW") returned 0x7ff8ee2f0150 [0071.858] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GetStartupInfoW") returned 0x7ff8ee2eed80 [0071.858] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="FindNextFileW") returned 0x7ff8ee2f5880 [0071.858] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="VirtualAlloc") returned 0x7ff8ee2ebaf0 [0071.858] GetProcAddress (hModule=0x7ff8ee190000, lpProcName="GetUserNameA") returned 0x7ff8ee1bec40 [0071.858] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="ExitProcess") returned 0x7ff8ee2eef50 [0071.859] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="Wow64RevertWow64FsRedirection") returned 0x7ff8ee3136a0 [0071.859] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="CreateProcessA") returned 0x7ff8ee2ed5b0 [0071.859] GetProcAddress (hModule=0x7ff8e8480000, lpProcName="GetIpNetTable") returned 0x7ff8e849f0b0 [0071.859] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GetVersionExW") returned 0x7ff8ee2eaa30 [0071.859] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x7ff8ee313690 [0071.860] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GetSystemDefaultLangID") returned 0x7ff8ee2f2ba0 [0071.860] GetProcAddress (hModule=0x7ff8ee190000, lpProcName="GetUserNameW") returned 0x7ff8ee1ada40 [0071.860] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="ReadFile") returned 0x7ff8ee2f5a90 [0071.860] GetProcAddress (hModule=0x7ff8ee190000, lpProcName="RegQueryValueExA") returned 0x7ff8ee1a7dd0 [0071.860] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="CloseHandle") returned 0x7ff8ee2f5510 [0071.861] GetProcAddress (hModule=0x7ff8ee190000, lpProcName="RegSetValueExW") returned 0x7ff8ee1a7850 [0071.861] GetProcAddress (hModule=0x7ff8ee190000, lpProcName="RegCloseKey") returned 0x7ff8ee1a72e0 [0071.861] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="CopyFileA") returned 0x7ff8ee30e430 [0071.861] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="SetFileAttributesW") returned 0x7ff8ee2f5b00 [0071.862] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="WinExec") returned 0x7ff8ee311e60 [0071.862] GetProcAddress (hModule=0x7ff8ee190000, lpProcName="CryptDeriveKey") returned 0x7ff8ee1c07a0 [0071.862] GetProcAddress (hModule=0x7ff8ee190000, lpProcName="CryptGenKey") returned 0x7ff8ee1acab0 [0071.862] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="Sleep") returned 0x7ff8ee2e8f00 [0071.862] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GetCurrentProcess") returned 0x7ff8ee2e6580 [0071.863] GetProcAddress (hModule=0x7ff8ec580000, lpProcName="ShellExecuteW") returned 0x7ff8ec6cabc0 [0071.863] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GetFileSize") returned 0x7ff8ee2f5950 [0071.863] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GlobalAlloc") returned 0x7ff8ee2eb810 [0071.864] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="FindClose") returned 0x7ff8ee2f57c0 [0071.864] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="WaitForMultipleObjects") returned 0x7ff8ee2f56e0 [0071.864] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GetModuleFileNameA") returned 0x7ff8ee2f0c70 [0071.864] GetProcAddress (hModule=0x7ff8ec580000, lpProcName="ShellExecuteA") returned 0x7ff8ec787de0 [0071.864] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GetModuleHandleA") returned 0x7ff8ee2ee6d0 [0071.865] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GetModuleFileNameW") returned 0x7ff8ee2eeca0 [0071.865] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="CreateFileA") returned 0x7ff8ee2f5760 [0071.865] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GetFileSizeEx") returned 0x7ff8ee2f5960 [0071.865] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="WriteFile") returned 0x7ff8ee2f5b80 [0071.866] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GetLogicalDrives") returned 0x7ff8ee2e66d0 [0071.866] GetProcAddress (hModule=0x7ff8e9fe0000, lpProcName="WNetEnumResourceW") returned 0x7ff8e9fe27d0 [0071.866] GetProcAddress (hModule=0x7ff8ee190000, lpProcName="RegOpenKeyExW") returned 0x7ff8ee1a6cb0 [0071.866] GetProcAddress (hModule=0x7ff8e9fe0000, lpProcName="WNetCloseEnum") returned 0x7ff8e9fe2e20 [0071.866] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GetWindowsDirectoryW") returned 0x7ff8ee2f2940 [0071.866] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="SetFileAttributesA") returned 0x7ff8ee2f5af0 [0071.867] GetProcAddress (hModule=0x7ff8ee190000, lpProcName="RegOpenKeyExA") returned 0x7ff8ee1a7d70 [0071.867] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="SetFilePointer") returned 0x7ff8ee2f5b20 [0071.867] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GetTickCount") returned 0x7ff8ee2e60a0 [0071.867] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GetFileAttributesW") returned 0x7ff8ee2f5930 [0071.867] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="FindFirstFileW") returned 0x7ff8ee2f5840 [0071.867] GetProcAddress (hModule=0x7ff8ee190000, lpProcName="CryptAcquireContextW") returned 0x7ff8ee1a89e0 [0071.867] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="MoveFileExW") returned 0x7ff8ee2f3010 [0071.868] GetProcAddress (hModule=0x7ff8e9fe0000, lpProcName="WNetOpenEnumW") returned 0x7ff8e9fe2f20 [0071.868] GetProcAddress (hModule=0x7ff8ec300000, lpProcName="CoInitialize") returned 0x7ff8ec313870 [0071.868] GetProcAddress (hModule=0x7ff8ee190000, lpProcName="CryptDecrypt") returned 0x7ff8ee1a9140 [0071.868] GetProcAddress (hModule=0x7ff8ee190000, lpProcName="CryptImportKey") returned 0x7ff8ee1a7b40 [0071.869] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="SetFilePointerEx") returned 0x7ff8ee2f5b30 [0071.869] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="CopyFileW") returned 0x7ff8ee2f5d70 [0071.869] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="FreeLibrary") returned 0x7ff8ee2eeb90 [0071.869] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="CreateProcessW") returned 0x7ff8ee2edee0 [0071.869] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="CreateDirectoryW") returned 0x7ff8ee2f5740 [0071.869] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="CreateThread") returned 0x7ff8ee2ebc20 [0071.869] GetProcAddress (hModule=0x7ff8ee190000, lpProcName="CryptDestroyKey") returned 0x7ff8ee1a86b0 [0071.870] GetProcAddress (hModule=0x7ff8ec300000, lpProcName="CoCreateInstance") returned 0x7ff8edde7000 [0071.870] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="CreateFileW") returned 0x7ff8ee2f5770 [0071.870] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GetFileAttributesA") returned 0x7ff8ee2f5900 [0071.870] GetProcAddress (hModule=0x7ff8ee190000, lpProcName="CryptEncrypt") returned 0x7ff8ee1ad7e0 [0071.870] GetProcAddress (hModule=0x7ff8ee190000, lpProcName="RegDeleteValueW") returned 0x7ff8ee1a90b0 [0071.870] GetVersionExW (in: lpVersionInformation=0xd707b4f7c0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0xd707b4f7c0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x2800, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0071.870] GetWindowsDirectoryW (in: lpBuffer=0xd707b4f870, uSize=0x32 | out: lpBuffer="C:\\Windows") returned 0xa [0071.871] SetLastError (dwErrCode=0x0) [0071.871] CreateFileW (lpFileName="C:\\users\\Public\\sys" (normalized: "c:\\users\\public\\sys"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0xffffffffffffffff [0071.871] GetLastError () returned 0x2 [0071.871] CreateFileW (lpFileName="C:\\users\\Public\\sys" (normalized: "c:\\users\\public\\sys"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0x4e8 [0071.872] Sleep (dwMilliseconds=0x1388) [0076.880] GetVersionExW (in: lpVersionInformation=0xd707b4eed0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0xd707b4eed0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x2800, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0076.880] GetWindowsDirectoryW (in: lpBuffer=0x7ff7afcabdc0, uSize=0x64 | out: lpBuffer="C:\\Windows") returned 0xa [0076.880] GetWindowsDirectoryW (in: lpBuffer=0x7ff7afcace50, uSize=0x140 | out: lpBuffer="C:\\Windows") returned 0xa [0076.880] CreateFileW (lpFileName="C:\\users\\Public\\PUBLIC" (normalized: "c:\\users\\public\\public"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x714 [0076.881] WriteFile (in: hFile=0x714, lpBuffer=0x7ff7afca93d0*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0xd707b4eb20, lpOverlapped=0x0 | out: lpBuffer=0x7ff7afca93d0*, lpNumberOfBytesWritten=0xd707b4eb20*=0x114, lpOverlapped=0x0) returned 1 [0076.882] CloseHandle (hObject=0x714) returned 1 [0076.887] CreateFileW (lpFileName="C:\\users\\Public\\UNIQUE_ID_DO_NOT_REMOVE" (normalized: "c:\\users\\public\\unique_id_do_not_remove"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x714 [0076.887] WriteFile (in: hFile=0x714, lpBuffer=0x7ff7afca8e20*, nNumberOfBytesToWrite=0x5a4, lpNumberOfBytesWritten=0xd707b4eb20, lpOverlapped=0x0 | out: lpBuffer=0x7ff7afca8e20*, lpNumberOfBytesWritten=0xd707b4eb20*=0x5a4, lpOverlapped=0x0) returned 1 [0076.889] CloseHandle (hObject=0x714) returned 1 [0076.895] CreateFileW (lpFileName="C:\\users\\Public\\PUBLIC" (normalized: "c:\\users\\public\\public"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x714 [0076.895] CloseHandle (hObject=0x714) returned 1 [0076.900] CryptAcquireContextW (in: phProv=0x7ff7afcace20, szContainer="AES_unique_", szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0x10 | out: phProv=0x7ff7afcace20*=0x0) returned 0 [0076.911] CryptAcquireContextW (in: phProv=0x7ff7afcace20, szContainer="AES_unique_", szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0x20 | out: phProv=0x7ff7afcace20*=0x0) returned 0 [0076.913] CryptAcquireContextW (in: phProv=0x7ff7afcace20, szContainer="AES_unique_", szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0x28 | out: phProv=0x7ff7afcace20*=0xd7079ce2d0) returned 1 [0076.918] CreateFileW (lpFileName="C:\\users\\Public\\PUBLIC" (normalized: "c:\\users\\public\\public"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x714 [0076.918] GetFileSize (in: hFile=0x714, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x114 [0076.918] VirtualAlloc (lpAddress=0x0, dwSize=0x114, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b80000 [0076.918] ReadFile (in: hFile=0x714, lpBuffer=0xd707b80000, nNumberOfBytesToRead=0x114, lpNumberOfBytesRead=0xd707b4f010, lpOverlapped=0x0 | out: lpBuffer=0xd707b80000*, lpNumberOfBytesRead=0xd707b4f010*=0x114, lpOverlapped=0x0) returned 1 [0076.918] CryptImportKey (in: hProv=0xd7079ce2d0, pbData=0xd707b80000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x1, phKey=0x7ff7afcaf848 | out: phKey=0x7ff7afcaf848*=0xd7079a7710) returned 1 [0076.919] Sleep (dwMilliseconds=0x3e8) [0077.927] GetLogicalDrives () returned 0x4 [0077.927] GetDriveTypeW (lpRootPathName="C:") returned 0x3 [0077.927] FindFirstFileW (in: lpFileName="C:\\*.*", lpFindFileData=0xd707b4e8b0 | out: lpFindFileData=0xd707b4e8b0) returned 0xd707976b50 [0077.927] FindNextFileW (in: hFindFile=0xd707976b50, lpFindFileData=0xd707b4e8b0 | out: lpFindFileData=0xd707b4e8b0) returned 1 [0077.927] SetLastError (dwErrCode=0x0) [0077.927] CreateFileW (lpFileName="C:\\RyukReadMe.txt" (normalized: "c:\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0077.927] GetLastError () returned 0x5 [0077.927] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e860, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e860, lpOverlapped=0x0) returned 0 [0077.927] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0077.927] FindFirstFileW (in: lpFileName="C:\\Boot\\*.*", lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 0xd707977450 [0077.927] FindNextFileW (in: hFindFile=0xd707977450, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 1 [0077.928] FindNextFileW (in: hFindFile=0xd707977450, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 1 [0077.928] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0077.928] SetFileAttributesW (lpFileName="C:\\Boot\\BCD", dwFileAttributes=0x80) returned 0 [0077.929] CreateFileW (lpFileName="C:\\Boot\\BCD" (normalized: "c:\\boot\\bcd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0077.929] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0077.929] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0077.929] FindNextFileW (in: hFindFile=0xd707977450, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 1 [0077.929] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0077.929] SetFileAttributesW (lpFileName="C:\\Boot\\BCD.LOG", dwFileAttributes=0x80) returned 0 [0077.930] CreateFileW (lpFileName="C:\\Boot\\BCD.LOG" (normalized: "c:\\boot\\bcd.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0077.930] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0077.930] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0077.930] FindNextFileW (in: hFindFile=0xd707977450, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 1 [0077.930] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0077.930] SetFileAttributesW (lpFileName="C:\\Boot\\BCD.LOG1", dwFileAttributes=0x80) returned 0 [0077.931] CreateFileW (lpFileName="C:\\Boot\\BCD.LOG1" (normalized: "c:\\boot\\bcd.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0077.931] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0077.931] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0077.931] FindNextFileW (in: hFindFile=0xd707977450, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 1 [0077.931] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0077.931] SetFileAttributesW (lpFileName="C:\\Boot\\BCD.LOG2", dwFileAttributes=0x80) returned 0 [0077.932] CreateFileW (lpFileName="C:\\Boot\\BCD.LOG2" (normalized: "c:\\boot\\bcd.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0077.932] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0077.932] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0077.932] FindNextFileW (in: hFindFile=0xd707977450, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 1 [0077.932] SetLastError (dwErrCode=0x0) [0077.932] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0077.932] GetLastError () returned 0x5 [0077.932] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0077.932] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0077.932] FindFirstFileW (in: lpFileName="C:\\Boot\\bg-BG\\*.*", lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0xd707976bb0 [0077.933] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0077.933] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0077.933] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0 [0077.933] FindClose (in: hFindFile=0xd707976bb0 | out: hFindFile=0xd707976bb0) returned 1 [0077.933] SetLastError (dwErrCode=0x0) [0077.933] CreateFileW (lpFileName="C:\\Boot\\bg-BG\\RyukReadMe.txt" (normalized: "c:\\boot\\bg-bg\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0077.933] GetLastError () returned 0x5 [0077.933] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0077.933] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0077.933] FindNextFileW (in: hFindFile=0xd707977450, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 1 [0077.933] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0077.934] SetFileAttributesW (lpFileName="C:\\Boot\\BOOTSTAT.DAT", dwFileAttributes=0x80) returned 0 [0077.934] CreateFileW (lpFileName="C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0077.935] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0077.935] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0077.935] FindNextFileW (in: hFindFile=0xd707977450, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 1 [0077.935] FindNextFileW (in: hFindFile=0xd707977450, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 1 [0077.935] SetLastError (dwErrCode=0x0) [0077.935] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0077.935] GetLastError () returned 0x5 [0077.935] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0077.935] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0077.935] FindFirstFileW (in: lpFileName="C:\\Boot\\cs-CZ\\*.*", lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0xd707977510 [0077.936] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0077.936] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0077.936] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0077.936] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0 [0077.936] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0077.936] SetLastError (dwErrCode=0x0) [0077.936] CreateFileW (lpFileName="C:\\Boot\\cs-CZ\\RyukReadMe.txt" (normalized: "c:\\boot\\cs-cz\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0077.936] GetLastError () returned 0x5 [0077.936] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0077.936] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0077.936] FindNextFileW (in: hFindFile=0xd707977450, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 1 [0077.936] SetLastError (dwErrCode=0x0) [0077.936] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0077.936] GetLastError () returned 0x5 [0077.936] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0077.936] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0077.937] FindFirstFileW (in: lpFileName="C:\\Boot\\da-DK\\*.*", lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0xd707976bb0 [0077.937] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0077.937] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0077.937] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0077.937] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0 [0077.937] FindClose (in: hFindFile=0xd707976bb0 | out: hFindFile=0xd707976bb0) returned 1 [0077.937] SetLastError (dwErrCode=0x0) [0077.937] CreateFileW (lpFileName="C:\\Boot\\da-DK\\RyukReadMe.txt" (normalized: "c:\\boot\\da-dk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0077.937] GetLastError () returned 0x5 [0077.937] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0077.937] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0077.937] FindNextFileW (in: hFindFile=0xd707977450, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 1 [0077.937] SetLastError (dwErrCode=0x0) [0077.937] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0077.937] GetLastError () returned 0x5 [0077.937] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0077.937] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0077.938] FindFirstFileW (in: lpFileName="C:\\Boot\\de-DE\\*.*", lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0xd707976d30 [0077.938] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0077.938] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0077.938] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0077.938] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0 [0077.938] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0077.938] SetLastError (dwErrCode=0x0) [0077.938] CreateFileW (lpFileName="C:\\Boot\\de-DE\\RyukReadMe.txt" (normalized: "c:\\boot\\de-de\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0077.938] GetLastError () returned 0x5 [0077.938] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0077.938] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0077.939] FindNextFileW (in: hFindFile=0xd707977450, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 1 [0077.939] SetLastError (dwErrCode=0x0) [0077.939] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0077.939] GetLastError () returned 0x5 [0077.939] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0077.939] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0077.939] FindFirstFileW (in: lpFileName="C:\\Boot\\el-GR\\*.*", lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0xd707977510 [0077.944] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0077.944] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0077.944] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0077.944] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0 [0077.944] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0077.944] SetLastError (dwErrCode=0x0) [0077.944] CreateFileW (lpFileName="C:\\Boot\\el-GR\\RyukReadMe.txt" (normalized: "c:\\boot\\el-gr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0077.944] GetLastError () returned 0x5 [0077.944] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0077.945] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0077.945] FindNextFileW (in: hFindFile=0xd707977450, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 1 [0077.945] SetLastError (dwErrCode=0x0) [0077.945] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0077.945] GetLastError () returned 0x5 [0077.945] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0077.945] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0077.945] FindFirstFileW (in: lpFileName="C:\\Boot\\en-GB\\*.*", lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0xd707976eb0 [0077.946] FindNextFileW (in: hFindFile=0xd707976eb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0077.946] FindNextFileW (in: hFindFile=0xd707976eb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0077.946] FindNextFileW (in: hFindFile=0xd707976eb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0 [0077.946] FindClose (in: hFindFile=0xd707976eb0 | out: hFindFile=0xd707976eb0) returned 1 [0077.946] SetLastError (dwErrCode=0x0) [0077.946] CreateFileW (lpFileName="C:\\Boot\\en-GB\\RyukReadMe.txt" (normalized: "c:\\boot\\en-gb\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0077.946] GetLastError () returned 0x5 [0077.946] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0077.946] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0077.946] FindNextFileW (in: hFindFile=0xd707977450, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 1 [0077.946] SetLastError (dwErrCode=0x0) [0077.947] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0077.947] GetLastError () returned 0x5 [0077.947] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0077.947] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0077.947] FindFirstFileW (in: lpFileName="C:\\Boot\\en-US\\*.*", lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0xd707976bb0 [0077.947] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0077.947] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0077.947] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0077.947] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0 [0077.947] FindClose (in: hFindFile=0xd707976bb0 | out: hFindFile=0xd707976bb0) returned 1 [0077.947] SetLastError (dwErrCode=0x0) [0077.947] CreateFileW (lpFileName="C:\\Boot\\en-US\\RyukReadMe.txt" (normalized: "c:\\boot\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0077.948] GetLastError () returned 0x5 [0077.948] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0077.948] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0077.948] FindNextFileW (in: hFindFile=0xd707977450, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 1 [0077.948] SetLastError (dwErrCode=0x0) [0077.948] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0077.948] GetLastError () returned 0x5 [0077.948] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0077.948] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0077.948] FindFirstFileW (in: lpFileName="C:\\Boot\\es-ES\\*.*", lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0xd707976bb0 [0077.949] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0077.949] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0077.949] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0077.949] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0 [0077.949] FindClose (in: hFindFile=0xd707976bb0 | out: hFindFile=0xd707976bb0) returned 1 [0077.949] SetLastError (dwErrCode=0x0) [0077.949] CreateFileW (lpFileName="C:\\Boot\\es-ES\\RyukReadMe.txt" (normalized: "c:\\boot\\es-es\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0077.949] GetLastError () returned 0x5 [0077.949] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0077.950] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0077.950] FindNextFileW (in: hFindFile=0xd707977450, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 1 [0077.950] SetLastError (dwErrCode=0x0) [0077.950] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0077.950] GetLastError () returned 0x5 [0077.950] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0077.950] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0077.950] FindFirstFileW (in: lpFileName="C:\\Boot\\es-MX\\*.*", lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0xd707976bb0 [0077.951] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0077.951] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0077.951] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0 [0077.951] FindClose (in: hFindFile=0xd707976bb0 | out: hFindFile=0xd707976bb0) returned 1 [0077.951] SetLastError (dwErrCode=0x0) [0077.951] CreateFileW (lpFileName="C:\\Boot\\es-MX\\RyukReadMe.txt" (normalized: "c:\\boot\\es-mx\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0077.951] GetLastError () returned 0x5 [0077.951] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0077.951] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0077.951] FindNextFileW (in: hFindFile=0xd707977450, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 1 [0077.951] SetLastError (dwErrCode=0x0) [0077.951] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0077.952] GetLastError () returned 0x5 [0077.952] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0077.952] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0077.952] FindFirstFileW (in: lpFileName="C:\\Boot\\et-EE\\*.*", lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0xd707977510 [0077.952] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0077.952] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0077.952] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0 [0077.952] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0077.963] SetLastError (dwErrCode=0x0) [0077.963] CreateFileW (lpFileName="C:\\Boot\\et-EE\\RyukReadMe.txt" (normalized: "c:\\boot\\et-ee\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0077.963] GetLastError () returned 0x5 [0077.963] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0077.963] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0077.963] FindNextFileW (in: hFindFile=0xd707977450, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 1 [0077.963] SetLastError (dwErrCode=0x0) [0077.963] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0077.963] GetLastError () returned 0x5 [0077.963] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0077.964] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0077.964] FindFirstFileW (in: lpFileName="C:\\Boot\\fi-FI\\*.*", lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0xd707977510 [0077.964] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0077.964] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0077.964] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0077.964] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0 [0077.964] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0077.965] SetLastError (dwErrCode=0x0) [0077.965] CreateFileW (lpFileName="C:\\Boot\\fi-FI\\RyukReadMe.txt" (normalized: "c:\\boot\\fi-fi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0077.965] GetLastError () returned 0x5 [0077.965] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0077.965] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0077.965] FindNextFileW (in: hFindFile=0xd707977450, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 1 [0077.965] SetLastError (dwErrCode=0x0) [0077.965] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0077.965] GetLastError () returned 0x5 [0077.965] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0077.965] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0077.965] FindFirstFileW (in: lpFileName="C:\\Boot\\Fonts\\*.*", lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0xd707976bb0 [0077.967] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0077.967] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0077.967] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0077.967] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\chs_boot.ttf", dwFileAttributes=0x80) returned 0 [0077.968] CreateFileW (lpFileName="C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0077.968] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0077.968] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0077.968] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0077.968] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0077.969] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\cht_boot.ttf", dwFileAttributes=0x80) returned 0 [0077.969] CreateFileW (lpFileName="C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0077.969] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0077.969] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0077.969] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0077.969] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0077.969] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\jpn_boot.ttf", dwFileAttributes=0x80) returned 0 [0077.970] CreateFileW (lpFileName="C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0077.970] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0077.970] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0077.970] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0077.970] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0077.971] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\kor_boot.ttf", dwFileAttributes=0x80) returned 0 [0077.971] CreateFileW (lpFileName="C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0077.971] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0077.971] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0077.971] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0077.971] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0077.972] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\malgunn_boot.ttf", dwFileAttributes=0x80) returned 0 [0077.973] CreateFileW (lpFileName="C:\\Boot\\Fonts\\malgunn_boot.ttf" (normalized: "c:\\boot\\fonts\\malgunn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0077.973] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0077.973] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0077.976] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0077.976] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0077.976] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\malgun_boot.ttf", dwFileAttributes=0x80) returned 0 [0077.977] CreateFileW (lpFileName="C:\\Boot\\Fonts\\malgun_boot.ttf" (normalized: "c:\\boot\\fonts\\malgun_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0077.977] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0077.977] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0077.977] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0077.977] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0077.978] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\meiryon_boot.ttf", dwFileAttributes=0x80) returned 0 [0077.978] CreateFileW (lpFileName="C:\\Boot\\Fonts\\meiryon_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryon_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0077.978] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0077.978] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0077.978] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0077.978] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0077.978] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\meiryo_boot.ttf", dwFileAttributes=0x80) returned 0 [0077.979] CreateFileW (lpFileName="C:\\Boot\\Fonts\\meiryo_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryo_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0077.979] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0077.979] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0077.979] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0077.980] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0077.980] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\msjhn_boot.ttf", dwFileAttributes=0x80) returned 0 [0077.980] CreateFileW (lpFileName="C:\\Boot\\Fonts\\msjhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msjhn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0077.980] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0077.980] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0077.980] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0077.980] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0077.981] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\msjh_boot.ttf", dwFileAttributes=0x80) returned 0 [0077.981] CreateFileW (lpFileName="C:\\Boot\\Fonts\\msjh_boot.ttf" (normalized: "c:\\boot\\fonts\\msjh_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0077.981] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0077.981] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0077.981] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0077.981] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0077.981] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\msyhn_boot.ttf", dwFileAttributes=0x80) returned 0 [0077.982] CreateFileW (lpFileName="C:\\Boot\\Fonts\\msyhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msyhn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0077.982] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0077.982] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0077.982] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0077.982] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0077.982] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\msyh_boot.ttf", dwFileAttributes=0x80) returned 0 [0077.983] CreateFileW (lpFileName="C:\\Boot\\Fonts\\msyh_boot.ttf" (normalized: "c:\\boot\\fonts\\msyh_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0077.983] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0077.983] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0077.983] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0077.984] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0077.984] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\segmono_boot.ttf", dwFileAttributes=0x80) returned 0 [0077.984] CreateFileW (lpFileName="C:\\Boot\\Fonts\\segmono_boot.ttf" (normalized: "c:\\boot\\fonts\\segmono_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0077.984] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0077.984] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0077.984] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0077.985] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0077.985] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\segoen_slboot.ttf", dwFileAttributes=0x80) returned 0 [0077.985] CreateFileW (lpFileName="C:\\Boot\\Fonts\\segoen_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoen_slboot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0077.985] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0077.985] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0077.985] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0077.985] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0077.986] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\segoe_slboot.ttf", dwFileAttributes=0x80) returned 0 [0077.986] CreateFileW (lpFileName="C:\\Boot\\Fonts\\segoe_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoe_slboot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0077.986] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0077.986] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0077.986] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0077.986] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0077.986] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\wgl4_boot.ttf", dwFileAttributes=0x80) returned 0 [0077.987] CreateFileW (lpFileName="C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0077.988] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0077.988] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0077.988] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0 [0077.988] FindClose (in: hFindFile=0xd707976bb0 | out: hFindFile=0xd707976bb0) returned 1 [0077.989] SetLastError (dwErrCode=0x0) [0077.989] CreateFileW (lpFileName="C:\\Boot\\Fonts\\RyukReadMe.txt" (normalized: "c:\\boot\\fonts\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0077.991] GetLastError () returned 0x5 [0077.992] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0077.992] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0077.992] FindNextFileW (in: hFindFile=0xd707977450, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 1 [0077.992] SetLastError (dwErrCode=0x0) [0077.992] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0077.992] GetLastError () returned 0x5 [0077.992] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0077.992] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0077.992] FindFirstFileW (in: lpFileName="C:\\Boot\\fr-CA\\*.*", lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0xd707977510 [0077.992] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0077.992] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0077.992] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0 [0077.992] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0077.992] SetLastError (dwErrCode=0x0) [0077.992] CreateFileW (lpFileName="C:\\Boot\\fr-CA\\RyukReadMe.txt" (normalized: "c:\\boot\\fr-ca\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0077.992] GetLastError () returned 0x5 [0077.992] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0077.993] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0077.993] FindNextFileW (in: hFindFile=0xd707977450, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 1 [0077.993] SetLastError (dwErrCode=0x0) [0077.993] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0077.993] GetLastError () returned 0x5 [0077.993] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0077.993] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0077.993] FindFirstFileW (in: lpFileName="C:\\Boot\\fr-FR\\*.*", lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0xd707977510 [0077.994] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0077.994] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0077.994] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0077.994] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0 [0077.994] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0077.994] SetLastError (dwErrCode=0x0) [0077.994] CreateFileW (lpFileName="C:\\Boot\\fr-FR\\RyukReadMe.txt" (normalized: "c:\\boot\\fr-fr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0077.994] GetLastError () returned 0x5 [0077.994] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0077.994] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0077.995] FindNextFileW (in: hFindFile=0xd707977450, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 1 [0077.995] SetLastError (dwErrCode=0x0) [0077.995] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0077.995] GetLastError () returned 0x5 [0077.995] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0077.995] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0077.995] FindFirstFileW (in: lpFileName="C:\\Boot\\hr-HR\\*.*", lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0xd707976bb0 [0077.995] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0077.995] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0077.996] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0 [0077.996] FindClose (in: hFindFile=0xd707976bb0 | out: hFindFile=0xd707976bb0) returned 1 [0077.996] SetLastError (dwErrCode=0x0) [0077.996] CreateFileW (lpFileName="C:\\Boot\\hr-HR\\RyukReadMe.txt" (normalized: "c:\\boot\\hr-hr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0077.996] GetLastError () returned 0x5 [0077.996] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0077.996] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0077.996] FindNextFileW (in: hFindFile=0xd707977450, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 1 [0077.996] SetLastError (dwErrCode=0x0) [0077.996] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0077.996] GetLastError () returned 0x5 [0077.996] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0077.996] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0077.996] FindFirstFileW (in: lpFileName="C:\\Boot\\hu-HU\\*.*", lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0xd707976d30 [0077.996] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0077.996] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0077.996] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0077.996] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0 [0077.996] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0077.997] SetLastError (dwErrCode=0x0) [0077.997] CreateFileW (lpFileName="C:\\Boot\\hu-HU\\RyukReadMe.txt" (normalized: "c:\\boot\\hu-hu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0077.997] GetLastError () returned 0x5 [0077.997] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0077.997] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0077.997] FindNextFileW (in: hFindFile=0xd707977450, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 1 [0077.997] SetLastError (dwErrCode=0x0) [0077.997] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0077.997] GetLastError () returned 0x5 [0077.997] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0077.997] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0077.997] FindFirstFileW (in: lpFileName="C:\\Boot\\it-IT\\*.*", lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0xd707977510 [0077.998] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0077.998] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0077.998] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0077.998] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0 [0077.998] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0077.998] SetLastError (dwErrCode=0x0) [0077.998] CreateFileW (lpFileName="C:\\Boot\\it-IT\\RyukReadMe.txt" (normalized: "c:\\boot\\it-it\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0077.998] GetLastError () returned 0x5 [0077.998] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0077.998] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0077.998] FindNextFileW (in: hFindFile=0xd707977450, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 1 [0077.998] SetLastError (dwErrCode=0x0) [0077.998] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0077.998] GetLastError () returned 0x5 [0077.998] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0077.998] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0077.999] FindFirstFileW (in: lpFileName="C:\\Boot\\ja-JP\\*.*", lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0xd707977510 [0077.999] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0077.999] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0077.999] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0077.999] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0 [0077.999] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0077.999] SetLastError (dwErrCode=0x0) [0077.999] CreateFileW (lpFileName="C:\\Boot\\ja-JP\\RyukReadMe.txt" (normalized: "c:\\boot\\ja-jp\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0077.999] GetLastError () returned 0x5 [0077.999] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0078.000] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.000] FindNextFileW (in: hFindFile=0xd707977450, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 1 [0078.000] SetLastError (dwErrCode=0x0) [0078.000] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.000] GetLastError () returned 0x5 [0078.000] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0078.000] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.000] FindFirstFileW (in: lpFileName="C:\\Boot\\ko-KR\\*.*", lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0xd707976d30 [0078.000] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.000] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.000] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.000] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0 [0078.000] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0078.000] SetLastError (dwErrCode=0x0) [0078.000] CreateFileW (lpFileName="C:\\Boot\\ko-KR\\RyukReadMe.txt" (normalized: "c:\\boot\\ko-kr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.000] GetLastError () returned 0x5 [0078.000] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0078.000] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.001] FindNextFileW (in: hFindFile=0xd707977450, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 1 [0078.001] SetLastError (dwErrCode=0x0) [0078.001] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.001] GetLastError () returned 0x5 [0078.001] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0078.001] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.001] FindFirstFileW (in: lpFileName="C:\\Boot\\lt-LT\\*.*", lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0xd707977510 [0078.001] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.001] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.001] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0 [0078.001] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0078.002] SetLastError (dwErrCode=0x0) [0078.002] CreateFileW (lpFileName="C:\\Boot\\lt-LT\\RyukReadMe.txt" (normalized: "c:\\boot\\lt-lt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.002] GetLastError () returned 0x5 [0078.002] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0078.002] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.002] FindNextFileW (in: hFindFile=0xd707977450, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 1 [0078.002] SetLastError (dwErrCode=0x0) [0078.002] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.002] GetLastError () returned 0x5 [0078.002] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0078.002] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.002] FindFirstFileW (in: lpFileName="C:\\Boot\\lv-LV\\*.*", lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0xd707976d30 [0078.003] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.003] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.003] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0 [0078.003] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0078.003] SetLastError (dwErrCode=0x0) [0078.003] CreateFileW (lpFileName="C:\\Boot\\lv-LV\\RyukReadMe.txt" (normalized: "c:\\boot\\lv-lv\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.003] GetLastError () returned 0x5 [0078.003] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0078.003] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.003] FindNextFileW (in: hFindFile=0xd707977450, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 1 [0078.003] FindNextFileW (in: hFindFile=0xd707977450, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 1 [0078.003] SetLastError (dwErrCode=0x0) [0078.003] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.003] GetLastError () returned 0x5 [0078.003] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0078.003] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.003] FindFirstFileW (in: lpFileName="C:\\Boot\\nb-NO\\*.*", lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0xd707976d30 [0078.004] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.004] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.004] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.004] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0 [0078.004] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0078.004] SetLastError (dwErrCode=0x0) [0078.004] CreateFileW (lpFileName="C:\\Boot\\nb-NO\\RyukReadMe.txt" (normalized: "c:\\boot\\nb-no\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.004] GetLastError () returned 0x5 [0078.004] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0078.004] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.004] FindNextFileW (in: hFindFile=0xd707977450, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 1 [0078.004] SetLastError (dwErrCode=0x0) [0078.004] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.004] GetLastError () returned 0x5 [0078.004] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0078.004] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.004] FindFirstFileW (in: lpFileName="C:\\Boot\\nl-NL\\*.*", lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0xd707977510 [0078.009] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.009] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.009] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.009] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0 [0078.009] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0078.009] SetLastError (dwErrCode=0x0) [0078.009] CreateFileW (lpFileName="C:\\Boot\\nl-NL\\RyukReadMe.txt" (normalized: "c:\\boot\\nl-nl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.009] GetLastError () returned 0x5 [0078.010] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0078.010] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.010] FindNextFileW (in: hFindFile=0xd707977450, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 1 [0078.010] SetLastError (dwErrCode=0x0) [0078.010] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.010] GetLastError () returned 0x5 [0078.010] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0078.010] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.010] FindFirstFileW (in: lpFileName="C:\\Boot\\pl-PL\\*.*", lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0xd707976bb0 [0078.011] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.011] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.011] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.011] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0 [0078.011] FindClose (in: hFindFile=0xd707976bb0 | out: hFindFile=0xd707976bb0) returned 1 [0078.011] SetLastError (dwErrCode=0x0) [0078.011] CreateFileW (lpFileName="C:\\Boot\\pl-PL\\RyukReadMe.txt" (normalized: "c:\\boot\\pl-pl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.011] GetLastError () returned 0x5 [0078.011] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0078.011] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.011] FindNextFileW (in: hFindFile=0xd707977450, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 1 [0078.011] SetLastError (dwErrCode=0x0) [0078.011] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.012] GetLastError () returned 0x5 [0078.012] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0078.012] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.012] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-BR\\*.*", lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0xd707977510 [0078.012] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.013] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.013] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.013] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0 [0078.013] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0078.013] SetLastError (dwErrCode=0x0) [0078.013] CreateFileW (lpFileName="C:\\Boot\\pt-BR\\RyukReadMe.txt" (normalized: "c:\\boot\\pt-br\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.013] GetLastError () returned 0x5 [0078.013] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0078.013] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.013] FindNextFileW (in: hFindFile=0xd707977450, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 1 [0078.013] SetLastError (dwErrCode=0x0) [0078.013] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.013] GetLastError () returned 0x5 [0078.013] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0078.013] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.013] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-PT\\*.*", lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0xd707977510 [0078.014] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.014] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.014] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.014] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0 [0078.014] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0078.014] SetLastError (dwErrCode=0x0) [0078.014] CreateFileW (lpFileName="C:\\Boot\\pt-PT\\RyukReadMe.txt" (normalized: "c:\\boot\\pt-pt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.014] GetLastError () returned 0x5 [0078.014] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0078.014] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.014] FindNextFileW (in: hFindFile=0xd707977450, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 1 [0078.014] SetLastError (dwErrCode=0x0) [0078.014] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.014] GetLastError () returned 0x5 [0078.015] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0078.015] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.015] FindFirstFileW (in: lpFileName="C:\\Boot\\qps-ploc\\*.*", lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0xd707977510 [0078.015] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.015] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.015] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.015] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0 [0078.015] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0078.016] SetLastError (dwErrCode=0x0) [0078.016] CreateFileW (lpFileName="C:\\Boot\\qps-ploc\\RyukReadMe.txt" (normalized: "c:\\boot\\qps-ploc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.016] GetLastError () returned 0x5 [0078.016] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0078.016] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.016] FindNextFileW (in: hFindFile=0xd707977450, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 1 [0078.016] SetLastError (dwErrCode=0x0) [0078.016] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.016] GetLastError () returned 0x5 [0078.016] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0078.016] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.016] FindFirstFileW (in: lpFileName="C:\\Boot\\Resources\\*.*", lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0xd707977510 [0078.016] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.016] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.017] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.017] SetLastError (dwErrCode=0x0) [0078.017] CreateFileW (lpFileName="C:\\Boot\\Resources\\RyukReadMe.txt" (normalized: "c:\\boot\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.017] GetLastError () returned 0x5 [0078.017] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0078.017] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.017] FindFirstFileW (in: lpFileName="C:\\Boot\\Resources\\en-US\\*.*", lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0xd707976e50 [0078.017] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.017] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.017] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0 [0078.017] FindClose (in: hFindFile=0xd707976e50 | out: hFindFile=0xd707976e50) returned 1 [0078.017] SetLastError (dwErrCode=0x0) [0078.017] CreateFileW (lpFileName="C:\\Boot\\Resources\\en-US\\RyukReadMe.txt" (normalized: "c:\\boot\\resources\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.018] GetLastError () returned 0x5 [0078.018] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0078.018] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.018] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0 [0078.018] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0078.018] SetLastError (dwErrCode=0x0) [0078.018] CreateFileW (lpFileName="C:\\Boot\\Resources\\RyukReadMe.txt" (normalized: "c:\\boot\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.018] GetLastError () returned 0x5 [0078.018] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0078.018] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.018] FindNextFileW (in: hFindFile=0xd707977450, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 1 [0078.018] SetLastError (dwErrCode=0x0) [0078.018] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.018] GetLastError () returned 0x5 [0078.018] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0078.018] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.018] FindFirstFileW (in: lpFileName="C:\\Boot\\ro-RO\\*.*", lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0xd707977510 [0078.019] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.019] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.019] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0 [0078.019] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0078.019] SetLastError (dwErrCode=0x0) [0078.019] CreateFileW (lpFileName="C:\\Boot\\ro-RO\\RyukReadMe.txt" (normalized: "c:\\boot\\ro-ro\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.020] GetLastError () returned 0x5 [0078.020] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0078.020] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.020] FindNextFileW (in: hFindFile=0xd707977450, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 1 [0078.020] SetLastError (dwErrCode=0x0) [0078.020] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.020] GetLastError () returned 0x5 [0078.020] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0078.020] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.020] FindFirstFileW (in: lpFileName="C:\\Boot\\ru-RU\\*.*", lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0xd707976bb0 [0078.021] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.021] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.021] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.021] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0 [0078.021] FindClose (in: hFindFile=0xd707976bb0 | out: hFindFile=0xd707976bb0) returned 1 [0078.021] SetLastError (dwErrCode=0x0) [0078.021] CreateFileW (lpFileName="C:\\Boot\\ru-RU\\RyukReadMe.txt" (normalized: "c:\\boot\\ru-ru\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.021] GetLastError () returned 0x5 [0078.021] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0078.021] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.021] FindNextFileW (in: hFindFile=0xd707977450, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 1 [0078.021] SetLastError (dwErrCode=0x0) [0078.021] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.022] GetLastError () returned 0x5 [0078.022] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0078.022] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.022] FindFirstFileW (in: lpFileName="C:\\Boot\\sk-SK\\*.*", lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0xd707977510 [0078.022] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.022] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.022] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0 [0078.022] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0078.023] SetLastError (dwErrCode=0x0) [0078.023] CreateFileW (lpFileName="C:\\Boot\\sk-SK\\RyukReadMe.txt" (normalized: "c:\\boot\\sk-sk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.023] GetLastError () returned 0x5 [0078.023] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0078.023] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.023] FindNextFileW (in: hFindFile=0xd707977450, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 1 [0078.023] SetLastError (dwErrCode=0x0) [0078.023] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.023] GetLastError () returned 0x5 [0078.023] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0078.023] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.023] FindFirstFileW (in: lpFileName="C:\\Boot\\sl-SI\\*.*", lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0xd707976bb0 [0078.024] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.024] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.024] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0 [0078.024] FindClose (in: hFindFile=0xd707976bb0 | out: hFindFile=0xd707976bb0) returned 1 [0078.024] SetLastError (dwErrCode=0x0) [0078.024] CreateFileW (lpFileName="C:\\Boot\\sl-SI\\RyukReadMe.txt" (normalized: "c:\\boot\\sl-si\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.025] GetLastError () returned 0x5 [0078.025] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0078.025] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.025] FindNextFileW (in: hFindFile=0xd707977450, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 1 [0078.025] SetLastError (dwErrCode=0x0) [0078.025] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.025] GetLastError () returned 0x5 [0078.025] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0078.025] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.025] FindFirstFileW (in: lpFileName="C:\\Boot\\sr-Latn-CS\\*.*", lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0xd707977510 [0078.025] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.025] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.025] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.025] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0 [0078.025] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0078.025] SetLastError (dwErrCode=0x0) [0078.025] CreateFileW (lpFileName="C:\\Boot\\sr-Latn-CS\\RyukReadMe.txt" (normalized: "c:\\boot\\sr-latn-cs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.026] GetLastError () returned 0x5 [0078.026] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0078.026] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.026] FindNextFileW (in: hFindFile=0xd707977450, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 1 [0078.026] SetLastError (dwErrCode=0x0) [0078.026] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.026] GetLastError () returned 0x5 [0078.026] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0078.026] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.026] FindFirstFileW (in: lpFileName="C:\\Boot\\sr-Latn-RS\\*.*", lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0xd707976bb0 [0078.027] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.027] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.027] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0 [0078.027] FindClose (in: hFindFile=0xd707976bb0 | out: hFindFile=0xd707976bb0) returned 1 [0078.027] SetLastError (dwErrCode=0x0) [0078.027] CreateFileW (lpFileName="C:\\Boot\\sr-Latn-RS\\RyukReadMe.txt" (normalized: "c:\\boot\\sr-latn-rs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.027] GetLastError () returned 0x5 [0078.027] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0078.027] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.027] FindNextFileW (in: hFindFile=0xd707977450, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 1 [0078.027] SetLastError (dwErrCode=0x0) [0078.028] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.028] GetLastError () returned 0x5 [0078.028] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0078.028] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.028] FindFirstFileW (in: lpFileName="C:\\Boot\\sv-SE\\*.*", lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0xd707976bb0 [0078.028] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.028] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.028] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.028] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0 [0078.028] FindClose (in: hFindFile=0xd707976bb0 | out: hFindFile=0xd707976bb0) returned 1 [0078.028] SetLastError (dwErrCode=0x0) [0078.028] CreateFileW (lpFileName="C:\\Boot\\sv-SE\\RyukReadMe.txt" (normalized: "c:\\boot\\sv-se\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.028] GetLastError () returned 0x5 [0078.028] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0078.029] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.029] FindNextFileW (in: hFindFile=0xd707977450, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 1 [0078.029] SetLastError (dwErrCode=0x0) [0078.029] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.029] GetLastError () returned 0x5 [0078.029] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0078.029] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.029] FindFirstFileW (in: lpFileName="C:\\Boot\\tr-TR\\*.*", lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0xd707976bb0 [0078.030] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.030] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.030] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.030] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0 [0078.030] FindClose (in: hFindFile=0xd707976bb0 | out: hFindFile=0xd707976bb0) returned 1 [0078.030] SetLastError (dwErrCode=0x0) [0078.030] CreateFileW (lpFileName="C:\\Boot\\tr-TR\\RyukReadMe.txt" (normalized: "c:\\boot\\tr-tr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.030] GetLastError () returned 0x5 [0078.030] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0078.030] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.030] FindNextFileW (in: hFindFile=0xd707977450, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 1 [0078.030] SetLastError (dwErrCode=0x0) [0078.030] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.030] GetLastError () returned 0x5 [0078.030] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0078.030] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.030] FindFirstFileW (in: lpFileName="C:\\Boot\\uk-UA\\*.*", lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0xd707976bb0 [0078.031] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.031] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.031] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0 [0078.031] FindClose (in: hFindFile=0xd707976bb0 | out: hFindFile=0xd707976bb0) returned 1 [0078.031] SetLastError (dwErrCode=0x0) [0078.031] CreateFileW (lpFileName="C:\\Boot\\uk-UA\\RyukReadMe.txt" (normalized: "c:\\boot\\uk-ua\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.031] GetLastError () returned 0x5 [0078.031] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0078.031] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.031] FindNextFileW (in: hFindFile=0xd707977450, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 1 [0078.031] SetLastError (dwErrCode=0x0) [0078.032] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.032] GetLastError () returned 0x5 [0078.032] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0078.032] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.032] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-CN\\*.*", lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0xd707976bb0 [0078.032] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.032] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.032] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.032] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0 [0078.032] FindClose (in: hFindFile=0xd707976bb0 | out: hFindFile=0xd707976bb0) returned 1 [0078.032] SetLastError (dwErrCode=0x0) [0078.032] CreateFileW (lpFileName="C:\\Boot\\zh-CN\\RyukReadMe.txt" (normalized: "c:\\boot\\zh-cn\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.032] GetLastError () returned 0x5 [0078.032] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0078.032] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.032] FindNextFileW (in: hFindFile=0xd707977450, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 1 [0078.032] SetLastError (dwErrCode=0x0) [0078.032] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.033] GetLastError () returned 0x5 [0078.033] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0078.033] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.033] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-HK\\*.*", lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0xd707977510 [0078.033] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.033] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.033] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.033] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0 [0078.033] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0078.033] SetLastError (dwErrCode=0x0) [0078.033] CreateFileW (lpFileName="C:\\Boot\\zh-HK\\RyukReadMe.txt" (normalized: "c:\\boot\\zh-hk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.034] GetLastError () returned 0x5 [0078.034] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0078.034] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.034] FindNextFileW (in: hFindFile=0xd707977450, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 1 [0078.034] SetLastError (dwErrCode=0x0) [0078.034] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.034] GetLastError () returned 0x5 [0078.034] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0078.034] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.034] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-TW\\*.*", lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0xd707976bb0 [0078.035] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.035] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.035] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.035] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0 [0078.035] FindClose (in: hFindFile=0xd707976bb0 | out: hFindFile=0xd707976bb0) returned 1 [0078.035] SetLastError (dwErrCode=0x0) [0078.035] CreateFileW (lpFileName="C:\\Boot\\zh-TW\\RyukReadMe.txt" (normalized: "c:\\boot\\zh-tw\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.035] GetLastError () returned 0x5 [0078.035] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0078.035] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.035] FindNextFileW (in: hFindFile=0xd707977450, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 0 [0078.035] FindClose (in: hFindFile=0xd707977450 | out: hFindFile=0xd707977450) returned 1 [0078.035] SetLastError (dwErrCode=0x0) [0078.035] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.035] GetLastError () returned 0x5 [0078.035] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e860, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e860, lpOverlapped=0x0) returned 0 [0078.035] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.035] FindNextFileW (in: hFindFile=0xd707976b50, lpFindFileData=0xd707b4e8b0 | out: lpFindFileData=0xd707b4e8b0) returned 1 [0078.036] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.036] SetFileAttributesW (lpFileName="C:\\bootmgr", dwFileAttributes=0x80) returned 0 [0078.037] CreateFileW (lpFileName="C:\\bootmgr" (normalized: "c:\\bootmgr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.037] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.038] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.038] FindNextFileW (in: hFindFile=0xd707976b50, lpFindFileData=0xd707b4e8b0 | out: lpFindFileData=0xd707b4e8b0) returned 1 [0078.038] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.038] SetFileAttributesW (lpFileName="C:\\BOOTNXT", dwFileAttributes=0x80) returned 0 [0078.038] CreateFileW (lpFileName="C:\\BOOTNXT" (normalized: "c:\\bootnxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.038] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.038] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.039] FindNextFileW (in: hFindFile=0xd707976b50, lpFindFileData=0xd707b4e8b0 | out: lpFindFileData=0xd707b4e8b0) returned 1 [0078.039] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.039] SetFileAttributesW (lpFileName="C:\\BOOTSECT.BAK", dwFileAttributes=0x80) returned 0 [0078.040] CreateFileW (lpFileName="C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.040] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.040] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.040] FindNextFileW (in: hFindFile=0xd707976b50, lpFindFileData=0xd707b4e8b0 | out: lpFindFileData=0xd707b4e8b0) returned 1 [0078.040] SetLastError (dwErrCode=0x0) [0078.040] CreateFileW (lpFileName="C:\\RyukReadMe.txt" (normalized: "c:\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.040] GetLastError () returned 0x5 [0078.040] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e860, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e860, lpOverlapped=0x0) returned 0 [0078.040] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.040] FindFirstFileW (in: lpFileName="C:\\Config.Msi\\*.*", lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 0xffffffffffffffff [0078.040] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0078.040] SetLastError (dwErrCode=0x0) [0078.040] CreateFileW (lpFileName="C:\\Config.Msi\\RyukReadMe.txt" (normalized: "c:\\config.msi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.041] GetLastError () returned 0x5 [0078.041] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e860, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e860, lpOverlapped=0x0) returned 0 [0078.041] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.041] FindNextFileW (in: hFindFile=0xd707976b50, lpFindFileData=0xd707b4e8b0 | out: lpFindFileData=0xd707b4e8b0) returned 1 [0078.041] SetLastError (dwErrCode=0x0) [0078.041] CreateFileW (lpFileName="C:\\RyukReadMe.txt" (normalized: "c:\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.041] GetLastError () returned 0x5 [0078.041] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e860, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e860, lpOverlapped=0x0) returned 0 [0078.041] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.041] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\*.*", lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 0xffffffffffffffff [0078.041] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0078.041] SetLastError (dwErrCode=0x0) [0078.041] CreateFileW (lpFileName="C:\\Documents and Settings\\RyukReadMe.txt" (normalized: "c:\\documents and settings\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.042] GetLastError () returned 0x5 [0078.042] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e860, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e860, lpOverlapped=0x0) returned 0 [0078.042] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.042] FindNextFileW (in: hFindFile=0xd707976b50, lpFindFileData=0xd707b4e8b0 | out: lpFindFileData=0xd707b4e8b0) returned 1 [0078.042] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.042] SetFileAttributesW (lpFileName="C:\\hiberfil.sys", dwFileAttributes=0x80) returned 0 [0078.042] CreateFileW (lpFileName="C:\\hiberfil.sys" (normalized: "c:\\hiberfil.sys"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.042] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.042] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.043] FindNextFileW (in: hFindFile=0xd707976b50, lpFindFileData=0xd707b4e8b0 | out: lpFindFileData=0xd707b4e8b0) returned 1 [0078.043] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.043] SetFileAttributesW (lpFileName="C:\\pagefile.sys", dwFileAttributes=0x80) returned 0 [0078.043] CreateFileW (lpFileName="C:\\pagefile.sys" (normalized: "c:\\pagefile.sys"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.043] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.043] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.043] FindNextFileW (in: hFindFile=0xd707976b50, lpFindFileData=0xd707b4e8b0 | out: lpFindFileData=0xd707b4e8b0) returned 1 [0078.043] SetLastError (dwErrCode=0x0) [0078.043] CreateFileW (lpFileName="C:\\RyukReadMe.txt" (normalized: "c:\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.044] GetLastError () returned 0x5 [0078.044] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e860, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e860, lpOverlapped=0x0) returned 0 [0078.044] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.044] FindFirstFileW (in: lpFileName="C:\\PerfLogs\\*.*", lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 0xffffffffffffffff [0078.044] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0078.044] SetLastError (dwErrCode=0x0) [0078.044] CreateFileW (lpFileName="C:\\PerfLogs\\RyukReadMe.txt" (normalized: "c:\\perflogs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.044] GetLastError () returned 0x5 [0078.044] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e860, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e860, lpOverlapped=0x0) returned 0 [0078.044] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.044] FindNextFileW (in: hFindFile=0xd707976b50, lpFindFileData=0xd707b4e8b0 | out: lpFindFileData=0xd707b4e8b0) returned 1 [0078.044] SetLastError (dwErrCode=0x0) [0078.044] CreateFileW (lpFileName="C:\\RyukReadMe.txt" (normalized: "c:\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.044] GetLastError () returned 0x5 [0078.044] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e860, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e860, lpOverlapped=0x0) returned 0 [0078.044] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.044] FindFirstFileW (in: lpFileName="C:\\Program Files\\*.*", lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 0xd707977450 [0078.045] FindNextFileW (in: hFindFile=0xd707977450, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 1 [0078.045] FindNextFileW (in: hFindFile=0xd707977450, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 1 [0078.045] SetLastError (dwErrCode=0x0) [0078.045] CreateFileW (lpFileName="C:\\Program Files\\RyukReadMe.txt" (normalized: "c:\\program files\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.045] GetLastError () returned 0x5 [0078.045] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0078.045] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.045] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\*.*", lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0xd707977510 [0078.045] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.045] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.045] SetLastError (dwErrCode=0x0) [0078.045] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.045] GetLastError () returned 0x5 [0078.045] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0078.045] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.045] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\*.*", lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0xd707976bb0 [0078.045] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.046] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.046] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.046] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB", dwFileAttributes=0x80) returned 0 [0078.046] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.047] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.047] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.047] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0 [0078.047] FindClose (in: hFindFile=0xd707976bb0 | out: hFindFile=0xd707976bb0) returned 1 [0078.047] SetLastError (dwErrCode=0x0) [0078.047] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\designer\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.047] GetLastError () returned 0x5 [0078.047] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0078.047] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.047] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.047] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.047] SetLastError (dwErrCode=0x0) [0078.047] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.048] GetLastError () returned 0x5 [0078.048] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0078.048] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.048] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\*.*", lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0xd707976bb0 [0078.048] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.048] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.048] SetLastError (dwErrCode=0x0) [0078.048] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.048] GetLastError () returned 0x5 [0078.048] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0078.048] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.048] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd707976d30 [0078.048] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.050] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.050] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.050] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.050] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.050] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.050] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.050] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.050] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.050] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.050] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.050] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.050] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.050] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.050] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.050] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.051] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.051] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.051] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.051] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.051] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.051] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.051] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.051] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.051] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.051] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.051] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.051] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.051] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.052] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVClient.man", dwFileAttributes=0x80) returned 0 [0078.053] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVClient.man" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvclient.man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.053] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.053] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.053] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.053] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.054] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVClientIsv.man", dwFileAttributes=0x80) returned 0 [0078.054] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVClientIsv.man" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvclientisv.man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.054] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.054] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.054] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.054] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.054] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.054] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.054] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.054] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.055] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.055] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.055] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.055] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.055] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.055] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.055] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.055] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.055] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.055] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.055] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.055] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml", dwFileAttributes=0x80) returned 0 [0078.055] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rheartbeatconfig.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.056] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.056] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.056] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.056] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.056] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.056] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.056] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.056] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.056] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.056] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.056] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.056] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.056] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.056] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.056] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.056] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.056] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.056] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.056] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.057] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.057] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.057] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.057] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.057] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.057] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.057] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.057] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.057] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.057] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.057] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.057] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.057] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.057] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.057] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.057] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.057] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.057] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.057] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.057] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.057] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.057] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.057] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.057] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.057] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.057] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.057] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ClientCapabilities.json", dwFileAttributes=0x80) returned 0 [0078.058] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ClientCapabilities.json" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\clientcapabilities.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.058] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.059] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.059] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.059] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.059] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ClientEventLogMessages.man", dwFileAttributes=0x80) returned 0 [0078.059] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ClientEventLogMessages.man" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\clienteventlogmessages.man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.060] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.060] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.060] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.060] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.060] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.060] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.060] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.060] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\FrequentOfficeUpdateSchedule.xml", dwFileAttributes=0x80) returned 0 [0078.061] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\FrequentOfficeUpdateSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\frequentofficeupdateschedule.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.061] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.061] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.061] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.061] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.062] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash", dwFileAttributes=0x80) returned 0 [0078.062] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i640.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.062] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.062] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.062] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.062] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.063] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash", dwFileAttributes=0x80) returned 0 [0078.063] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i641033.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.063] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.063] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.063] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.063] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.063] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.063] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.063] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.063] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.063] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.063] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.063] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.063] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.063] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.063] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.064] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml", dwFileAttributes=0x80) returned 0 [0078.064] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeupdateschedule.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.064] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.064] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.064] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.064] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.065] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml", dwFileAttributes=0x80) returned 0 [0078.065] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\servicewatcherschedule.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.065] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.065] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.066] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.066] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.066] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\SharedPerformance.man", dwFileAttributes=0x80) returned 0 [0078.066] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\SharedPerformance.man" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\sharedperformance.man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.066] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.066] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.067] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.067] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.067] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.067] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\SubsystemController.man", dwFileAttributes=0x80) returned 0 [0078.068] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\SubsystemController.man" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\subsystemcontroller.man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.068] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.068] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.068] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.068] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.068] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.068] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0078.068] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0078.068] SetLastError (dwErrCode=0x0) [0078.068] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.069] GetLastError () returned 0x5 [0078.069] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0078.069] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.069] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.069] SetLastError (dwErrCode=0x0) [0078.069] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.069] GetLastError () returned 0x5 [0078.069] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0078.069] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.069] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079a0810 [0078.072] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.073] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.073] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.073] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml", dwFileAttributes=0x80) returned 0 [0078.074] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.074] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.074] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.074] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.074] SetLastError (dwErrCode=0x0) [0078.074] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.074] GetLastError () returned 0x5 [0078.074] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.074] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.074] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0450 [0078.075] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.075] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.075] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0078.075] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0078.075] SetLastError (dwErrCode=0x0) [0078.075] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.075] GetLastError () returned 0x5 [0078.075] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.075] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.075] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.075] SetLastError (dwErrCode=0x0) [0078.075] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.075] GetLastError () returned 0x5 [0078.075] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.075] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.075] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a08d0 [0078.075] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.076] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.076] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0078.076] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0078.076] SetLastError (dwErrCode=0x0) [0078.076] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.076] GetLastError () returned 0x5 [0078.076] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.076] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.076] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.076] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.076] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml", dwFileAttributes=0x80) returned 0 [0078.076] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.077] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.077] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.077] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.077] SetLastError (dwErrCode=0x0) [0078.077] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.077] GetLastError () returned 0x5 [0078.077] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.077] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.077] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0e10 [0078.077] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.077] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.077] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0078.077] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0078.078] SetLastError (dwErrCode=0x0) [0078.078] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.078] GetLastError () returned 0x5 [0078.078] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.078] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.078] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.078] SetLastError (dwErrCode=0x0) [0078.078] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.078] GetLastError () returned 0x5 [0078.078] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.078] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.078] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0450 [0078.079] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.079] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.079] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0078.079] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0078.079] SetLastError (dwErrCode=0x0) [0078.079] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.079] GetLastError () returned 0x5 [0078.079] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.079] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.079] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.079] SetLastError (dwErrCode=0x0) [0078.079] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.079] GetLastError () returned 0x5 [0078.080] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.080] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.080] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a08d0 [0078.080] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.080] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.080] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0078.080] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0078.080] SetLastError (dwErrCode=0x0) [0078.080] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.080] GetLastError () returned 0x5 [0078.080] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.080] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.080] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.080] SetLastError (dwErrCode=0x0) [0078.080] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.080] GetLastError () returned 0x5 [0078.080] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.081] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.081] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a08d0 [0078.081] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.081] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.081] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0078.081] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0078.081] SetLastError (dwErrCode=0x0) [0078.081] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.081] GetLastError () returned 0x5 [0078.081] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.081] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.081] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.081] SetLastError (dwErrCode=0x0) [0078.081] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.081] GetLastError () returned 0x5 [0078.081] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.081] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.081] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0e10 [0078.082] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.082] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.082] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0078.082] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0078.082] SetLastError (dwErrCode=0x0) [0078.082] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-gb\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.082] GetLastError () returned 0x5 [0078.082] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.082] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.082] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.082] SetLastError (dwErrCode=0x0) [0078.082] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.082] GetLastError () returned 0x5 [0078.082] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.082] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.082] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0e10 [0078.085] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.085] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.085] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.085] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi", dwFileAttributes=0x80) returned 0 [0078.085] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.086] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.086] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.086] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.086] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.086] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi", dwFileAttributes=0x80) returned 0 [0078.086] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.087] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.087] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.087] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.087] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.087] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi", dwFileAttributes=0x80) returned 0 [0078.088] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.089] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.089] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.089] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.089] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.089] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi", dwFileAttributes=0x80) returned 0 [0078.090] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.090] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.090] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.090] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.090] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.091] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi", dwFileAttributes=0x80) returned 0 [0078.091] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\correct.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.092] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.092] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.092] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.092] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.092] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi", dwFileAttributes=0x80) returned 0 [0078.093] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\delete.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.093] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.093] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.093] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.093] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.093] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.093] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.093] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.093] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.094] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.094] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi", dwFileAttributes=0x80) returned 0 [0078.095] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\join.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.095] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.095] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.095] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.095] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.095] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.095] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.095] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.096] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.096] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.096] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi", dwFileAttributes=0x80) returned 0 [0078.098] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\split.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.099] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.099] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.099] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.099] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.099] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.099] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.099] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.099] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0078.099] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0078.100] SetLastError (dwErrCode=0x0) [0078.100] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.102] GetLastError () returned 0x5 [0078.102] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.102] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.102] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.102] SetLastError (dwErrCode=0x0) [0078.102] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.103] GetLastError () returned 0x5 [0078.103] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.103] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.103] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0e10 [0078.103] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.103] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.103] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0078.103] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0078.103] SetLastError (dwErrCode=0x0) [0078.103] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.103] GetLastError () returned 0x5 [0078.103] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.103] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.103] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.103] SetLastError (dwErrCode=0x0) [0078.103] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.104] GetLastError () returned 0x5 [0078.104] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.104] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.104] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0e10 [0078.104] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.104] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.104] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0078.104] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0078.104] SetLastError (dwErrCode=0x0) [0078.104] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-mx\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.104] GetLastError () returned 0x5 [0078.104] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.104] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.104] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.104] SetLastError (dwErrCode=0x0) [0078.104] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.105] GetLastError () returned 0x5 [0078.105] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.105] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.105] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0e10 [0078.105] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.105] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.105] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0078.105] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0078.105] SetLastError (dwErrCode=0x0) [0078.105] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.105] GetLastError () returned 0x5 [0078.105] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.105] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.105] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.105] SetLastError (dwErrCode=0x0) [0078.105] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.105] GetLastError () returned 0x5 [0078.105] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.105] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.106] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0e10 [0078.106] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.106] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.106] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0078.106] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0078.106] SetLastError (dwErrCode=0x0) [0078.106] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fi-fi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.107] GetLastError () returned 0x5 [0078.107] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.107] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.107] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.107] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.107] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi", dwFileAttributes=0x80) returned 0 [0078.108] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.108] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.108] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.108] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.108] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.108] SetLastError (dwErrCode=0x0) [0078.108] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.108] GetLastError () returned 0x5 [0078.108] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.108] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.109] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0e10 [0078.109] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.109] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.109] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0078.109] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0078.109] SetLastError (dwErrCode=0x0) [0078.109] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-ca\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.109] GetLastError () returned 0x5 [0078.109] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.109] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.109] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.109] SetLastError (dwErrCode=0x0) [0078.109] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.109] GetLastError () returned 0x5 [0078.109] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.109] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.109] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0450 [0078.110] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.110] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.110] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0078.110] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0078.110] SetLastError (dwErrCode=0x0) [0078.110] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-fr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.110] GetLastError () returned 0x5 [0078.110] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.110] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.110] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.110] SetLastError (dwErrCode=0x0) [0078.110] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.111] GetLastError () returned 0x5 [0078.111] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.111] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.111] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0450 [0078.112] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.112] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.112] SetLastError (dwErrCode=0x0) [0078.112] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.113] GetLastError () returned 0x5 [0078.113] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0078.113] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.113] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a08d0 [0078.114] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0078.114] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0078.114] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.114] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml", dwFileAttributes=0x80) returned 0 [0078.115] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.116] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.116] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.116] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0078.116] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0078.116] SetLastError (dwErrCode=0x0) [0078.116] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.117] GetLastError () returned 0x5 [0078.117] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0078.117] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.117] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.117] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.117] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml", dwFileAttributes=0x80) returned 0 [0078.118] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.118] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.119] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.119] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.119] SetLastError (dwErrCode=0x0) [0078.119] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.119] GetLastError () returned 0x5 [0078.119] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0078.119] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.119] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0e10 [0078.119] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0078.119] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0078.120] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.120] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml", dwFileAttributes=0x80) returned 0 [0078.120] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.120] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.120] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.121] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0078.121] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0078.121] SetLastError (dwErrCode=0x0) [0078.121] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.121] GetLastError () returned 0x5 [0078.121] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0078.121] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.121] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.121] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.122] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert.xml", dwFileAttributes=0x80) returned 0 [0078.123] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.123] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.123] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.123] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.123] SetLastError (dwErrCode=0x0) [0078.123] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.124] GetLastError () returned 0x5 [0078.124] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0078.124] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.124] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0ed0 [0078.124] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0078.124] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0078.124] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml", dwFileAttributes=0x80) returned 0 [0078.125] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.125] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.125] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.125] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0078.125] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.126] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml", dwFileAttributes=0x80) returned 0 [0078.126] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.126] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.126] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.127] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0078.127] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml", dwFileAttributes=0x80) returned 0 [0078.127] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.127] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.128] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.128] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0078.128] FindClose (in: hFindFile=0xd7079a0ed0 | out: hFindFile=0xd7079a0ed0) returned 1 [0078.128] SetLastError (dwErrCode=0x0) [0078.128] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.128] GetLastError () returned 0x5 [0078.128] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0078.128] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.128] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.128] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.129] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml", dwFileAttributes=0x80) returned 0 [0078.129] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.130] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.130] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.131] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.131] SetLastError (dwErrCode=0x0) [0078.131] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.131] GetLastError () returned 0x5 [0078.131] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0078.131] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.131] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0ed0 [0078.133] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0078.133] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0078.133] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml", dwFileAttributes=0x80) returned 0 [0078.134] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.134] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.135] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.135] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0078.135] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml", dwFileAttributes=0x80) returned 0 [0078.136] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\basealtgr_rtl.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.136] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.136] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.136] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0078.136] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml", dwFileAttributes=0x80) returned 0 [0078.137] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.138] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.138] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.138] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0078.138] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.138] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml", dwFileAttributes=0x80) returned 0 [0078.139] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.139] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.139] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.139] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0078.139] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.140] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml", dwFileAttributes=0x80) returned 0 [0078.140] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.140] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.140] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.140] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0078.140] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.141] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml", dwFileAttributes=0x80) returned 0 [0078.141] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.141] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.141] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.142] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0078.142] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.142] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml", dwFileAttributes=0x80) returned 0 [0078.143] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.143] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.143] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.143] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0078.143] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml", dwFileAttributes=0x80) returned 0 [0078.144] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.144] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.144] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.145] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0078.145] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.145] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml", dwFileAttributes=0x80) returned 0 [0078.146] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.147] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.147] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.147] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0078.147] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.147] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml", dwFileAttributes=0x80) returned 0 [0078.148] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.148] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.148] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.149] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0078.149] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.149] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml", dwFileAttributes=0x80) returned 0 [0078.149] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.150] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.150] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.150] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0078.150] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml", dwFileAttributes=0x80) returned 0 [0078.151] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.151] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.151] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.151] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0078.151] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml", dwFileAttributes=0x80) returned 0 [0078.152] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.152] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.152] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.152] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0078.152] FindClose (in: hFindFile=0xd7079a0ed0 | out: hFindFile=0xd7079a0ed0) returned 1 [0078.153] SetLastError (dwErrCode=0x0) [0078.153] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.156] GetLastError () returned 0x5 [0078.156] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0078.157] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.157] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.157] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main.xml", dwFileAttributes=0x80) returned 0 [0078.157] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.158] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.158] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.158] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.158] SetLastError (dwErrCode=0x0) [0078.158] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.158] GetLastError () returned 0x5 [0078.158] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0078.158] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.158] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0930 [0078.159] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0078.159] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0078.159] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.160] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml", dwFileAttributes=0x80) returned 0 [0078.160] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.160] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.160] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.161] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0078.161] FindClose (in: hFindFile=0xd7079a0930 | out: hFindFile=0xd7079a0930) returned 1 [0078.161] SetLastError (dwErrCode=0x0) [0078.161] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.161] GetLastError () returned 0x5 [0078.161] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0078.162] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.162] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.162] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml", dwFileAttributes=0x80) returned 0 [0078.164] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.164] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.164] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.165] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.165] SetLastError (dwErrCode=0x0) [0078.165] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.165] GetLastError () returned 0x5 [0078.165] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0078.165] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.165] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a08d0 [0078.165] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0078.165] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0078.165] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.166] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml", dwFileAttributes=0x80) returned 0 [0078.166] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.166] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.166] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.166] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0078.166] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0078.167] SetLastError (dwErrCode=0x0) [0078.167] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.167] GetLastError () returned 0x5 [0078.167] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0078.167] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.167] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.167] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml", dwFileAttributes=0x80) returned 0 [0078.168] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.168] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.168] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.168] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.168] SetLastError (dwErrCode=0x0) [0078.168] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.168] GetLastError () returned 0x5 [0078.169] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0078.169] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.169] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a08d0 [0078.169] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0078.169] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0078.169] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.169] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml", dwFileAttributes=0x80) returned 0 [0078.170] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.170] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.170] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.170] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0078.170] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0078.170] SetLastError (dwErrCode=0x0) [0078.170] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.171] GetLastError () returned 0x5 [0078.171] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0078.171] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.171] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.171] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.171] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml", dwFileAttributes=0x80) returned 0 [0078.171] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.172] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.172] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.172] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.172] SetLastError (dwErrCode=0x0) [0078.172] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.172] GetLastError () returned 0x5 [0078.172] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0078.172] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.172] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0e10 [0078.173] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0078.173] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0078.173] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.173] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml", dwFileAttributes=0x80) returned 0 [0078.173] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.174] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.174] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.174] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0078.174] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0078.178] SetLastError (dwErrCode=0x0) [0078.178] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.179] GetLastError () returned 0x5 [0078.179] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0078.179] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.179] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.179] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.179] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml", dwFileAttributes=0x80) returned 0 [0078.179] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.180] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.180] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.180] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.180] SetLastError (dwErrCode=0x0) [0078.180] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.180] GetLastError () returned 0x5 [0078.180] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0078.180] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.181] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a08d0 [0078.181] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0078.181] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0078.181] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml", dwFileAttributes=0x80) returned 0 [0078.182] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.182] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.182] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.183] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0078.183] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0078.183] SetLastError (dwErrCode=0x0) [0078.183] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.183] GetLastError () returned 0x5 [0078.183] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0078.183] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.183] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.183] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.184] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml", dwFileAttributes=0x80) returned 0 [0078.184] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.184] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.184] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.185] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.185] SetLastError (dwErrCode=0x0) [0078.185] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.185] GetLastError () returned 0x5 [0078.185] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0078.185] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.185] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a08d0 [0078.185] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0078.185] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0078.185] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.186] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml", dwFileAttributes=0x80) returned 0 [0078.186] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.186] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.186] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.187] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0078.187] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml", dwFileAttributes=0x80) returned 0 [0078.187] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.187] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.187] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.188] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0078.188] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.188] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml", dwFileAttributes=0x80) returned 0 [0078.189] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.189] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.189] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.190] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0078.190] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0078.190] SetLastError (dwErrCode=0x0) [0078.190] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.190] GetLastError () returned 0x5 [0078.190] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0078.190] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.190] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.190] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.191] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml", dwFileAttributes=0x80) returned 0 [0078.191] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.192] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.192] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.193] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0078.193] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0078.193] SetLastError (dwErrCode=0x0) [0078.193] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.193] GetLastError () returned 0x5 [0078.193] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.193] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.193] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.194] SetLastError (dwErrCode=0x0) [0078.194] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.194] GetLastError () returned 0x5 [0078.194] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.194] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.194] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0450 [0078.194] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.194] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.194] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0078.194] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0078.194] SetLastError (dwErrCode=0x0) [0078.194] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\he-il\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.195] GetLastError () returned 0x5 [0078.195] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.195] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.195] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.195] SetLastError (dwErrCode=0x0) [0078.195] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.195] GetLastError () returned 0x5 [0078.195] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.195] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.195] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0450 [0078.195] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.195] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.195] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0078.195] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0078.195] SetLastError (dwErrCode=0x0) [0078.196] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hr-hr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.196] GetLastError () returned 0x5 [0078.196] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.196] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.196] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.196] SetLastError (dwErrCode=0x0) [0078.196] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.196] GetLastError () returned 0x5 [0078.196] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.196] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.196] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0450 [0078.198] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.198] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.198] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0078.198] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0078.198] SetLastError (dwErrCode=0x0) [0078.198] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hu-hu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.199] GetLastError () returned 0x5 [0078.199] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.199] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.199] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.199] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.199] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrcommonlm.dat", dwFileAttributes=0x80) returned 0 [0078.199] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrcommonlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcommonlm.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.200] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.200] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.200] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.200] SetLastError (dwErrCode=0x0) [0078.200] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.200] GetLastError () returned 0x5 [0078.200] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.200] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.200] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\HWRCustomization\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0450 [0078.200] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.200] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0078.201] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0078.201] SetLastError (dwErrCode=0x0) [0078.201] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\HWRCustomization\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcustomization\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.201] GetLastError () returned 0x5 [0078.201] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.201] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.201] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.201] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.201] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrenclm.dat", dwFileAttributes=0x80) returned 0 [0078.202] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrenclm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrenclm.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.203] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.203] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.203] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.203] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.203] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrlatinlm.dat", dwFileAttributes=0x80) returned 0 [0078.204] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrlatinlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrlatinlm.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.204] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.204] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.204] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.204] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.205] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat", dwFileAttributes=0x80) returned 0 [0078.205] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusalm.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.206] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.206] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.206] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.206] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.206] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat", dwFileAttributes=0x80) returned 0 [0078.209] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusash.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.209] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.209] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.210] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.210] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.210] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.210] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.210] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.210] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsar.xml", dwFileAttributes=0x80) returned 0 [0078.211] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsar.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsar.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.211] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.211] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.212] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.212] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.212] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml", dwFileAttributes=0x80) returned 0 [0078.212] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscat.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.213] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.213] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.213] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.213] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.213] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml", dwFileAttributes=0x80) returned 0 [0078.214] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipschs.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.214] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.214] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.214] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.214] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.215] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml", dwFileAttributes=0x80) returned 0 [0078.215] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscht.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.215] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.215] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.216] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.216] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.216] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml", dwFileAttributes=0x80) returned 0 [0078.216] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscsy.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.216] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.216] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.217] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.217] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.217] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml", dwFileAttributes=0x80) returned 0 [0078.217] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdan.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.218] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.218] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.218] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.218] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.218] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml", dwFileAttributes=0x80) returned 0 [0078.219] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdeu.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.219] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.219] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.219] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.219] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.220] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsel.xml", dwFileAttributes=0x80) returned 0 [0078.221] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsel.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsel.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.221] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.221] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.221] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.221] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.222] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsen.xml", dwFileAttributes=0x80) returned 0 [0078.222] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsen.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsen.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.222] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.222] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.222] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.222] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.223] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsesp.xml", dwFileAttributes=0x80) returned 0 [0078.223] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsesp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsesp.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.224] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.224] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.224] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.224] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.224] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.224] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfin.xml", dwFileAttributes=0x80) returned 0 [0078.225] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfin.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfin.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.225] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.226] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.226] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.226] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.226] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfra.xml", dwFileAttributes=0x80) returned 0 [0078.227] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfra.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfra.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.227] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.227] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.227] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.227] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.228] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshe.xml", dwFileAttributes=0x80) returned 0 [0078.228] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshe.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshe.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.228] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.228] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.228] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.228] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.229] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshi.xml", dwFileAttributes=0x80) returned 0 [0078.229] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshi.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.229] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.229] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.230] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.230] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.230] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshrv.xml", dwFileAttributes=0x80) returned 0 [0078.231] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshrv.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshrv.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.232] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.232] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.232] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.232] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.232] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsid.xml", dwFileAttributes=0x80) returned 0 [0078.233] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsid.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsid.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.233] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.233] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.233] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.233] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.234] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsita.xml", dwFileAttributes=0x80) returned 0 [0078.234] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsita.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsita.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.234] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.234] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.235] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.235] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.235] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml", dwFileAttributes=0x80) returned 0 [0078.235] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsjpn.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.236] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.236] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.236] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.236] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.237] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml", dwFileAttributes=0x80) returned 0 [0078.238] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipskor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.238] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.238] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.238] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.238] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.238] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.239] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml", dwFileAttributes=0x80) returned 0 [0078.239] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnld.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.240] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.240] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.240] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.240] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.241] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml", dwFileAttributes=0x80) returned 0 [0078.241] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.241] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.241] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.242] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.242] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.242] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml", dwFileAttributes=0x80) returned 0 [0078.242] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplk.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.243] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.243] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.243] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.243] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.243] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.243] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml", dwFileAttributes=0x80) returned 0 [0078.245] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptb.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.245] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.245] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.245] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.245] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.246] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptg.xml", dwFileAttributes=0x80) returned 0 [0078.246] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptg.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptg.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.246] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.246] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.247] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.247] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.247] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrom.xml", dwFileAttributes=0x80) returned 0 [0078.247] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrom.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrom.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.247] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.247] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.248] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.248] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.248] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrus.xml", dwFileAttributes=0x80) returned 0 [0078.249] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrus.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrus.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.249] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.249] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.250] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.250] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.250] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrb.xml", dwFileAttributes=0x80) returned 0 [0078.250] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrb.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.250] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.250] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.251] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.251] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.251] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrl.xml", dwFileAttributes=0x80) returned 0 [0078.251] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrl.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.252] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.252] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.252] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.252] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.252] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssve.xml", dwFileAttributes=0x80) returned 0 [0078.253] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssve.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssve.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.253] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.253] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.253] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.253] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.254] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipstr.xml", dwFileAttributes=0x80) returned 0 [0078.254] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipstr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipstr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.254] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.254] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.254] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.254] SetLastError (dwErrCode=0x0) [0078.254] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.255] GetLastError () returned 0x5 [0078.255] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.255] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.255] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0ed0 [0078.255] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.256] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.256] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0078.256] FindClose (in: hFindFile=0xd7079a0ed0 | out: hFindFile=0xd7079a0ed0) returned 1 [0078.256] SetLastError (dwErrCode=0x0) [0078.256] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\it-it\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.256] GetLastError () returned 0x5 [0078.256] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.256] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.256] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.256] SetLastError (dwErrCode=0x0) [0078.256] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.256] GetLastError () returned 0x5 [0078.256] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.256] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.256] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0450 [0078.256] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.257] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.257] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0078.257] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0078.257] SetLastError (dwErrCode=0x0) [0078.257] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ja-jp\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.257] GetLastError () returned 0x5 [0078.257] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.257] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.257] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.257] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.257] SetLastError (dwErrCode=0x0) [0078.257] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.257] GetLastError () returned 0x5 [0078.257] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.257] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.257] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0450 [0078.259] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.259] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.259] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0078.259] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0078.259] SetLastError (dwErrCode=0x0) [0078.259] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ko-kr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.259] GetLastError () returned 0x5 [0078.259] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.259] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.259] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.259] SetLastError (dwErrCode=0x0) [0078.260] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.260] GetLastError () returned 0x5 [0078.260] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.260] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.260] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a08d0 [0078.260] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.260] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.260] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.261] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\chstic.dgml", dwFileAttributes=0x80) returned 0 [0078.261] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\chstic.dgml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\languagemodel\\chstic.dgml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.261] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.262] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.262] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0078.262] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0078.262] SetLastError (dwErrCode=0x0) [0078.262] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\languagemodel\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.262] GetLastError () returned 0x5 [0078.262] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.262] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.262] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.262] SetLastError (dwErrCode=0x0) [0078.262] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.262] GetLastError () returned 0x5 [0078.262] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.263] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.263] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0e10 [0078.263] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.263] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.263] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0078.263] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0078.263] SetLastError (dwErrCode=0x0) [0078.263] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lt-lt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.263] GetLastError () returned 0x5 [0078.263] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.263] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.263] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.263] SetLastError (dwErrCode=0x0) [0078.263] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.263] GetLastError () returned 0x5 [0078.263] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.264] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.264] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0e10 [0078.264] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.264] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.264] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0078.264] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0078.264] SetLastError (dwErrCode=0x0) [0078.264] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lv-lv\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.264] GetLastError () returned 0x5 [0078.264] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.264] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.264] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.264] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.264] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.264] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.264] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.264] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.264] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.264] SetLastError (dwErrCode=0x0) [0078.264] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.265] GetLastError () returned 0x5 [0078.265] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.265] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.265] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a08d0 [0078.267] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.267] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.267] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0078.267] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0078.267] SetLastError (dwErrCode=0x0) [0078.267] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nb-no\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.267] GetLastError () returned 0x5 [0078.267] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.267] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.267] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.267] SetLastError (dwErrCode=0x0) [0078.267] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.268] GetLastError () returned 0x5 [0078.268] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.268] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.268] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0450 [0078.268] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.268] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.268] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0078.268] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0078.268] SetLastError (dwErrCode=0x0) [0078.268] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nl-nl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.268] GetLastError () returned 0x5 [0078.268] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.268] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.268] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.268] SetLastError (dwErrCode=0x0) [0078.268] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.269] GetLastError () returned 0x5 [0078.269] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.269] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.269] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a08d0 [0078.269] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.269] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.269] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0078.269] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0078.269] SetLastError (dwErrCode=0x0) [0078.269] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pl-pl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.269] GetLastError () returned 0x5 [0078.269] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.269] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.269] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.269] SetLastError (dwErrCode=0x0) [0078.269] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.270] GetLastError () returned 0x5 [0078.270] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.270] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.270] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0450 [0078.270] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.270] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.270] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0078.270] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0078.270] SetLastError (dwErrCode=0x0) [0078.270] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-br\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.270] GetLastError () returned 0x5 [0078.270] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.271] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.271] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.271] SetLastError (dwErrCode=0x0) [0078.271] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.271] GetLastError () returned 0x5 [0078.271] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.271] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.271] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a08d0 [0078.272] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.272] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.272] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0078.272] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0078.272] SetLastError (dwErrCode=0x0) [0078.272] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-pt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.272] GetLastError () returned 0x5 [0078.272] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.272] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.272] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.272] SetLastError (dwErrCode=0x0) [0078.272] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.272] GetLastError () returned 0x5 [0078.272] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.272] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.272] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0450 [0078.272] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.273] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.273] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0078.273] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0078.273] SetLastError (dwErrCode=0x0) [0078.273] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ro-ro\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.273] GetLastError () returned 0x5 [0078.273] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.273] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.273] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.273] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.273] SetLastError (dwErrCode=0x0) [0078.273] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.273] GetLastError () returned 0x5 [0078.273] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.273] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.273] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a08d0 [0078.273] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.273] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.273] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0078.273] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0078.274] SetLastError (dwErrCode=0x0) [0078.274] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ru-ru\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.274] GetLastError () returned 0x5 [0078.274] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.274] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.274] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.274] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.274] SetLastError (dwErrCode=0x0) [0078.274] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.274] GetLastError () returned 0x5 [0078.274] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.274] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.274] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a08d0 [0078.274] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.274] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.274] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0078.274] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0078.274] SetLastError (dwErrCode=0x0) [0078.274] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sk-sk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.275] GetLastError () returned 0x5 [0078.275] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.275] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.275] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.275] SetLastError (dwErrCode=0x0) [0078.275] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.275] GetLastError () returned 0x5 [0078.275] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.275] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.275] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0e10 [0078.276] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.276] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.276] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0078.276] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0078.276] SetLastError (dwErrCode=0x0) [0078.276] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sl-si\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.276] GetLastError () returned 0x5 [0078.276] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.276] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.276] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.276] SetLastError (dwErrCode=0x0) [0078.276] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.276] GetLastError () returned 0x5 [0078.276] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.276] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.276] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-CS\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0e10 [0078.277] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.277] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.277] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0078.277] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0078.277] SetLastError (dwErrCode=0x0) [0078.277] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-CS\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-cs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.277] GetLastError () returned 0x5 [0078.277] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.277] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.277] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.277] SetLastError (dwErrCode=0x0) [0078.277] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.277] GetLastError () returned 0x5 [0078.277] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.277] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.277] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a08d0 [0078.278] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.278] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.278] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0078.278] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0078.278] SetLastError (dwErrCode=0x0) [0078.278] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-rs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.278] GetLastError () returned 0x5 [0078.278] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.278] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.278] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.278] SetLastError (dwErrCode=0x0) [0078.278] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.278] GetLastError () returned 0x5 [0078.278] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.278] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.278] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a08d0 [0078.279] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.279] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.279] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0078.279] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0078.279] SetLastError (dwErrCode=0x0) [0078.279] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sv-se\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.279] GetLastError () returned 0x5 [0078.279] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.279] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.279] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.279] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.279] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.279] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.279] SetLastError (dwErrCode=0x0) [0078.279] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.279] GetLastError () returned 0x5 [0078.279] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.279] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.279] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0450 [0078.280] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.280] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.280] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0078.280] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0078.280] SetLastError (dwErrCode=0x0) [0078.280] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\th-th\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.280] GetLastError () returned 0x5 [0078.280] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.280] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.281] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.281] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.281] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.281] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.281] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.281] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.281] SetLastError (dwErrCode=0x0) [0078.281] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.281] GetLastError () returned 0x5 [0078.281] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.281] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.281] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0450 [0078.281] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.281] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.281] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0078.281] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0078.281] SetLastError (dwErrCode=0x0) [0078.281] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tr-tr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.282] GetLastError () returned 0x5 [0078.282] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.282] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.282] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.282] SetLastError (dwErrCode=0x0) [0078.282] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.282] GetLastError () returned 0x5 [0078.282] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.282] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.282] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0e10 [0078.282] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.282] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.282] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0078.283] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0078.283] SetLastError (dwErrCode=0x0) [0078.283] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\uk-ua\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.283] GetLastError () returned 0x5 [0078.283] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.283] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.283] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.283] SetLastError (dwErrCode=0x0) [0078.283] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.283] GetLastError () returned 0x5 [0078.283] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.283] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.283] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a08d0 [0078.283] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.283] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.283] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0078.284] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0078.284] SetLastError (dwErrCode=0x0) [0078.284] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-cn\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.284] GetLastError () returned 0x5 [0078.284] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.284] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.284] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.284] SetLastError (dwErrCode=0x0) [0078.284] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.284] GetLastError () returned 0x5 [0078.284] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.284] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.284] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-HK\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a08d0 [0078.285] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.285] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.285] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0078.285] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0078.285] SetLastError (dwErrCode=0x0) [0078.285] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-HK\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-hk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.285] GetLastError () returned 0x5 [0078.285] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.285] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.285] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.285] SetLastError (dwErrCode=0x0) [0078.285] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.286] GetLastError () returned 0x5 [0078.286] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.286] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.286] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0450 [0078.286] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.286] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.286] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0078.286] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0078.286] SetLastError (dwErrCode=0x0) [0078.286] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-tw\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.287] GetLastError () returned 0x5 [0078.287] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.287] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.287] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0078.287] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0078.287] SetLastError (dwErrCode=0x0) [0078.287] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.287] GetLastError () returned 0x5 [0078.287] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0078.287] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.287] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.287] SetLastError (dwErrCode=0x0) [0078.287] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.287] GetLastError () returned 0x5 [0078.287] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0078.287] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.287] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079a0450 [0078.288] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.288] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.288] SetLastError (dwErrCode=0x0) [0078.288] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.288] GetLastError () returned 0x5 [0078.288] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.288] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.288] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0e10 [0078.288] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.288] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.288] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0078.288] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0078.288] SetLastError (dwErrCode=0x0) [0078.288] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.288] GetLastError () returned 0x5 [0078.288] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.288] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.289] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.289] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0078.289] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0078.289] SetLastError (dwErrCode=0x0) [0078.289] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.289] GetLastError () returned 0x5 [0078.289] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0078.289] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.289] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.289] SetLastError (dwErrCode=0x0) [0078.289] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.289] GetLastError () returned 0x5 [0078.289] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0078.289] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.289] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079a0450 [0078.290] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.290] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.290] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.290] SetLastError (dwErrCode=0x0) [0078.290] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.290] GetLastError () returned 0x5 [0078.290] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.290] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.290] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0e70 [0078.292] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.292] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.292] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.292] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.292] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms", dwFileAttributes=0x80) returned 0 [0078.293] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig-office.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.293] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.293] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.294] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.294] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0078.294] FindClose (in: hFindFile=0xd7079a0e70 | out: hFindFile=0xd7079a0e70) returned 1 [0078.294] SetLastError (dwErrCode=0x0) [0078.294] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.297] GetLastError () returned 0x5 [0078.297] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.297] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.297] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0078.297] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0078.297] SetLastError (dwErrCode=0x0) [0078.297] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.297] GetLastError () returned 0x5 [0078.297] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0078.297] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.298] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.298] SetLastError (dwErrCode=0x0) [0078.298] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.298] GetLastError () returned 0x5 [0078.298] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0078.298] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.298] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OfficeSoftwareProtectionPlatform\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079a0ed0 [0078.298] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.298] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0078.298] FindClose (in: hFindFile=0xd7079a0ed0 | out: hFindFile=0xd7079a0ed0) returned 1 [0078.298] SetLastError (dwErrCode=0x0) [0078.298] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OfficeSoftwareProtectionPlatform\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.298] GetLastError () returned 0x5 [0078.298] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0078.298] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.298] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.299] SetLastError (dwErrCode=0x0) [0078.299] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.299] GetLastError () returned 0x5 [0078.299] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0078.299] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.299] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079a0810 [0078.299] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.299] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.299] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0078.299] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0078.299] SetLastError (dwErrCode=0x0) [0078.299] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.299] GetLastError () returned 0x5 [0078.299] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0078.299] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.299] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.299] SetLastError (dwErrCode=0x0) [0078.299] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.300] GetLastError () returned 0x5 [0078.300] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0078.300] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.300] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079a0e10 [0078.302] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.302] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.302] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.htm", dwFileAttributes=0x80) returned 0 [0078.303] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.304] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.304] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.304] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.304] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.304] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg", dwFileAttributes=0x80) returned 0 [0078.305] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.305] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.305] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.305] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.305] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.306] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Blue_Gradient.jpg", dwFileAttributes=0x80) returned 0 [0078.306] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Blue_Gradient.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\blue_gradient.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.306] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.306] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.306] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.306] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.307] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Cave_Drawings.gif", dwFileAttributes=0x80) returned 0 [0078.307] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Cave_Drawings.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\cave_drawings.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.307] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.307] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.307] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.307] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.307] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Connectivity.gif", dwFileAttributes=0x80) returned 0 [0078.308] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Connectivity.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\connectivity.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.308] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.308] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.309] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.309] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.309] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.309] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Dotted_Lines.emf", dwFileAttributes=0x80) returned 0 [0078.310] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Dotted_Lines.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\dotted_lines.emf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.310] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.310] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.310] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.310] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.310] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm", dwFileAttributes=0x80) returned 0 [0078.311] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.311] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.311] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.311] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.311] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.311] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg", dwFileAttributes=0x80) returned 0 [0078.312] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.312] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.312] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.312] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.313] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.313] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Genko_1.emf", dwFileAttributes=0x80) returned 0 [0078.313] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Genko_1.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\genko_1.emf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.313] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.313] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.313] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.314] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.314] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Genko_2.emf", dwFileAttributes=0x80) returned 0 [0078.315] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Genko_2.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\genko_2.emf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.315] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.315] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.315] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.315] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.315] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Graph.emf", dwFileAttributes=0x80) returned 0 [0078.316] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Graph.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\graph.emf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.316] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.316] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.317] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.317] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.318] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm", dwFileAttributes=0x80) returned 0 [0078.318] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\green bubbles.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.318] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.318] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.318] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.318] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.319] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg", dwFileAttributes=0x80) returned 0 [0078.320] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\greenbubbles.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.320] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.320] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.321] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.321] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.321] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\grid_(cm).wmf", dwFileAttributes=0x80) returned 0 [0078.321] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\grid_(cm).wmf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\grid_(cm).wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.321] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.321] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.322] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.322] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.322] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\grid_(inch).wmf", dwFileAttributes=0x80) returned 0 [0078.323] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\grid_(inch).wmf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\grid_(inch).wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.323] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.323] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.323] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.323] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm", dwFileAttributes=0x80) returned 0 [0078.324] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\hand prints.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.324] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.324] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.324] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.324] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.324] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg", dwFileAttributes=0x80) returned 0 [0078.324] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.325] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.325] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.325] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.325] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.325] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Memo.emf", dwFileAttributes=0x80) returned 0 [0078.326] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Memo.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\memo.emf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.326] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.326] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.326] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.326] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.327] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Monet.jpg", dwFileAttributes=0x80) returned 0 [0078.327] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Monet.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\monet.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.327] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.327] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.327] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.327] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.328] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Month_Calendar.emf", dwFileAttributes=0x80) returned 0 [0078.328] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Month_Calendar.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\month_calendar.emf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.328] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.328] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.328] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.328] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.329] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Music.emf", dwFileAttributes=0x80) returned 0 [0078.329] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Music.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\music.emf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.329] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.329] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.329] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.329] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.330] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Notebook.jpg", dwFileAttributes=0x80) returned 0 [0078.330] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Notebook.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\notebook.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.330] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.330] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.330] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.331] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.331] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm", dwFileAttributes=0x80) returned 0 [0078.332] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orange circles.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.332] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.332] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.332] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.332] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.333] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg", dwFileAttributes=0x80) returned 0 [0078.333] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orangecircles.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.333] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.333] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.334] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.334] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.htm", dwFileAttributes=0x80) returned 0 [0078.334] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.334] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.334] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.335] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.335] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg", dwFileAttributes=0x80) returned 0 [0078.336] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.336] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.336] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.336] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.336] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.336] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Pine_Lumber.jpg", dwFileAttributes=0x80) returned 0 [0078.337] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Pine_Lumber.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\pine_lumber.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.337] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.337] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.337] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.337] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.337] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Pretty_Peacock.jpg", dwFileAttributes=0x80) returned 0 [0078.338] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Pretty_Peacock.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\pretty_peacock.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.338] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.338] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.338] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.338] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.339] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Psychedelic.jpg", dwFileAttributes=0x80) returned 0 [0078.339] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Psychedelic.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\psychedelic.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.340] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.340] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.340] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.340] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.340] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.htm", dwFileAttributes=0x80) returned 0 [0078.341] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.341] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.341] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.342] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.342] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.342] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg", dwFileAttributes=0x80) returned 0 [0078.342] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.343] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.343] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.343] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.343] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.343] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Sand_Paper.jpg", dwFileAttributes=0x80) returned 0 [0078.344] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Sand_Paper.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\sand_paper.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.344] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.344] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.344] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.344] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.344] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Seyes.emf", dwFileAttributes=0x80) returned 0 [0078.345] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Seyes.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\seyes.emf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.345] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.346] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.346] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.346] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.346] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Shades of Blue.htm", dwFileAttributes=0x80) returned 0 [0078.346] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Shades of Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shades of blue.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.347] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.347] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.347] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.347] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.347] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg", dwFileAttributes=0x80) returned 0 [0078.348] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shadesofblue.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.348] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.348] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.348] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.348] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.349] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Shorthand.emf", dwFileAttributes=0x80) returned 0 [0078.350] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Shorthand.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shorthand.emf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.350] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.350] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.350] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.350] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.351] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Small_News.jpg", dwFileAttributes=0x80) returned 0 [0078.351] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Small_News.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\small_news.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.351] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.351] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.351] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.351] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.352] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Soft Blue.htm", dwFileAttributes=0x80) returned 0 [0078.353] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Soft Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\soft blue.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.353] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.353] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.353] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.353] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.353] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg", dwFileAttributes=0x80) returned 0 [0078.354] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\softblue.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.355] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.355] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.355] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.355] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.355] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm", dwFileAttributes=0x80) returned 0 [0078.355] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.355] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.356] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.356] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.356] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.356] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg", dwFileAttributes=0x80) returned 0 [0078.356] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.356] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.356] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.357] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.357] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.357] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stucco.gif", dwFileAttributes=0x80) returned 0 [0078.357] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stucco.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stucco.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.357] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.357] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.357] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.357] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.358] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Tanspecks.jpg", dwFileAttributes=0x80) returned 0 [0078.358] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Tanspecks.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\tanspecks.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.359] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.359] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.359] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.359] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.359] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Tiki.gif", dwFileAttributes=0x80) returned 0 [0078.359] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Tiki.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\tiki.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.359] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.359] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.360] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.360] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.360] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\To_Do_List.emf", dwFileAttributes=0x80) returned 0 [0078.360] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\To_Do_List.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\to_do_list.emf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.360] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.360] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.360] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.360] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.361] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\White_Chocolate.jpg", dwFileAttributes=0x80) returned 0 [0078.361] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\White_Chocolate.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\white_chocolate.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.361] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.361] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.361] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.361] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.362] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Wrinkled_Paper.gif", dwFileAttributes=0x80) returned 0 [0078.362] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Wrinkled_Paper.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\wrinkled_paper.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.362] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.362] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.362] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0078.362] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0078.363] SetLastError (dwErrCode=0x0) [0078.363] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.366] GetLastError () returned 0x5 [0078.366] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0078.366] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.366] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.366] SetLastError (dwErrCode=0x0) [0078.366] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.366] GetLastError () returned 0x5 [0078.366] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0078.366] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.366] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079a0450 [0078.366] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.366] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.366] SetLastError (dwErrCode=0x0) [0078.366] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.367] GetLastError () returned 0x5 [0078.367] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.367] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.367] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\en-US\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0810 [0078.367] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.367] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0078.367] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0078.367] SetLastError (dwErrCode=0x0) [0078.367] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\en-US\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.367] GetLastError () returned 0x5 [0078.367] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.367] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.367] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0078.367] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0078.367] SetLastError (dwErrCode=0x0) [0078.367] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.367] GetLastError () returned 0x5 [0078.367] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0078.368] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.368] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.368] SetLastError (dwErrCode=0x0) [0078.368] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.368] GetLastError () returned 0x5 [0078.368] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0078.368] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.368] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079a0810 [0078.368] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.368] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.368] SetLastError (dwErrCode=0x0) [0078.368] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\triedit\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.368] GetLastError () returned 0x5 [0078.368] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.368] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.368] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\en-US\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0e10 [0078.368] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.369] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0078.369] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0078.369] SetLastError (dwErrCode=0x0) [0078.369] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\en-US\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\triedit\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.369] GetLastError () returned 0x5 [0078.369] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.369] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.369] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0078.369] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0078.369] SetLastError (dwErrCode=0x0) [0078.369] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\triedit\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.369] GetLastError () returned 0x5 [0078.369] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0078.369] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.369] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.369] SetLastError (dwErrCode=0x0) [0078.369] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.370] GetLastError () returned 0x5 [0078.370] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0078.370] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.370] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VC\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079a0450 [0078.370] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.370] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.370] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.370] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0078.370] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0078.370] SetLastError (dwErrCode=0x0) [0078.370] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VC\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.371] GetLastError () returned 0x5 [0078.371] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0078.371] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.371] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.371] SetLastError (dwErrCode=0x0) [0078.371] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.371] GetLastError () returned 0x5 [0078.371] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0078.371] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.371] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VGX\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079a0e10 [0078.371] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.371] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.371] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0078.371] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0078.371] SetLastError (dwErrCode=0x0) [0078.371] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VGX\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\vgx\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.371] GetLastError () returned 0x5 [0078.371] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0078.372] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.372] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.372] SetLastError (dwErrCode=0x0) [0078.372] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.372] GetLastError () returned 0x5 [0078.372] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0078.372] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.372] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079a0e10 [0078.372] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.372] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.372] SetLastError (dwErrCode=0x0) [0078.372] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.372] GetLastError () returned 0x5 [0078.372] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.372] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.372] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0810 [0078.373] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.374] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.374] SetLastError (dwErrCode=0x0) [0078.374] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.374] GetLastError () returned 0x5 [0078.374] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0078.374] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.374] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0e70 [0078.374] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0078.374] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0078.374] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0078.374] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0078.374] FindClose (in: hFindFile=0xd7079a0e70 | out: hFindFile=0xd7079a0e70) returned 1 [0078.374] SetLastError (dwErrCode=0x0) [0078.374] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.374] GetLastError () returned 0x5 [0078.374] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0078.374] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.374] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.375] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.375] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.375] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0078.375] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0078.375] SetLastError (dwErrCode=0x0) [0078.375] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.375] GetLastError () returned 0x5 [0078.375] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.375] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.375] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.375] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.375] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.375] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb", dwFileAttributes=0x80) returned 0 [0078.376] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee100.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.376] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.376] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.376] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.376] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.377] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb", dwFileAttributes=0x80) returned 0 [0078.377] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee90.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.377] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.377] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.377] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0078.377] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0078.377] SetLastError (dwErrCode=0x0) [0078.377] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.377] GetLastError () returned 0x5 [0078.377] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0078.378] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.378] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0 [0078.378] FindClose (in: hFindFile=0xd707976bb0 | out: hFindFile=0xd707976bb0) returned 1 [0078.378] SetLastError (dwErrCode=0x0) [0078.378] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.378] GetLastError () returned 0x5 [0078.378] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0078.378] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.378] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.378] SetLastError (dwErrCode=0x0) [0078.378] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.378] GetLastError () returned 0x5 [0078.378] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0078.378] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.378] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Services\\*.*", lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0xd7079a0450 [0078.378] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.378] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.378] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.379] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Services\\verisign.bmp", dwFileAttributes=0x80) returned 0 [0078.379] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.379] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.379] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.379] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0 [0078.379] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0078.379] SetLastError (dwErrCode=0x0) [0078.380] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Services\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\services\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.380] GetLastError () returned 0x5 [0078.380] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0078.380] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.380] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.380] SetLastError (dwErrCode=0x0) [0078.380] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.381] GetLastError () returned 0x5 [0078.381] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0078.381] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.381] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\*.*", lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0xd7079a08d0 [0078.381] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.381] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.381] SetLastError (dwErrCode=0x0) [0078.381] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\system\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.381] GetLastError () returned 0x5 [0078.381] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0078.381] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.381] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079a0450 [0078.383] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.383] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.383] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.383] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc", dwFileAttributes=0x80) returned 0 [0078.384] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adojavas.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.384] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.384] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.384] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.384] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.385] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\adovbs.inc", dwFileAttributes=0x80) returned 0 [0078.385] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\adovbs.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adovbs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.385] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.385] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.385] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.385] SetLastError (dwErrCode=0x0) [0078.385] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\system\\ado\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.385] GetLastError () returned 0x5 [0078.385] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.386] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.386] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\en-US\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0810 [0078.386] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.386] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.386] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0078.386] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0078.386] SetLastError (dwErrCode=0x0) [0078.386] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\en-US\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\system\\ado\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.386] GetLastError () returned 0x5 [0078.386] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.386] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.386] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.386] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.386] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.386] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.386] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb", dwFileAttributes=0x80) returned 0 [0078.387] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado20.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.387] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.387] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.388] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.388] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.388] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb", dwFileAttributes=0x80) returned 0 [0078.388] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado21.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.389] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.389] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.389] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.389] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.389] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado25.tlb", dwFileAttributes=0x80) returned 0 [0078.389] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado25.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado25.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.389] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.390] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.390] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.390] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.390] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb", dwFileAttributes=0x80) returned 0 [0078.390] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado26.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.390] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.390] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.391] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.391] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.391] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb", dwFileAttributes=0x80) returned 0 [0078.391] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado27.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.391] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.391] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.392] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.392] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.392] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb", dwFileAttributes=0x80) returned 0 [0078.392] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado28.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.392] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.392] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.392] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.392] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.393] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado60.tlb", dwFileAttributes=0x80) returned 0 [0078.394] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado60.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado60.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.394] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.394] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.394] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.394] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.394] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadomd28.tlb", dwFileAttributes=0x80) returned 0 [0078.394] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadomd28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd28.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.395] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.395] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.395] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.395] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.395] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msador28.tlb", dwFileAttributes=0x80) returned 0 [0078.395] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msador28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msador28.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.396] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.396] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.396] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.396] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.396] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.396] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadox28.tlb", dwFileAttributes=0x80) returned 0 [0078.397] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadox28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadox28.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.397] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.397] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.397] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.397] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0078.397] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0078.397] SetLastError (dwErrCode=0x0) [0078.398] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\system\\ado\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.398] GetLastError () returned 0x5 [0078.398] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0078.398] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.398] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.398] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.398] SetLastError (dwErrCode=0x0) [0078.398] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\system\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.398] GetLastError () returned 0x5 [0078.398] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0078.398] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.398] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\en-US\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079a0450 [0078.398] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.398] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.398] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0078.398] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0078.398] SetLastError (dwErrCode=0x0) [0078.399] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\en-US\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\system\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.399] GetLastError () returned 0x5 [0078.399] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0078.399] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.399] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.399] SetLastError (dwErrCode=0x0) [0078.399] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\system\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.399] GetLastError () returned 0x5 [0078.399] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0078.399] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.399] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079a0e10 [0078.400] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.400] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.400] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.401] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc", dwFileAttributes=0x80) returned 0 [0078.401] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcjavas.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.402] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.402] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.402] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.402] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.402] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc", dwFileAttributes=0x80) returned 0 [0078.402] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcvbs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.402] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.402] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.403] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.403] SetLastError (dwErrCode=0x0) [0078.403] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\system\\msadc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.403] GetLastError () returned 0x5 [0078.403] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.403] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.403] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0450 [0078.403] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.403] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.403] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.403] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.403] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.403] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.403] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0078.403] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0078.403] SetLastError (dwErrCode=0x0) [0078.403] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.404] GetLastError () returned 0x5 [0078.404] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.404] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.404] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.404] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.404] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.404] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.404] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.404] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.404] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.404] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.404] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.404] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.404] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.404] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0078.404] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0078.404] SetLastError (dwErrCode=0x0) [0078.404] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\system\\msadc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.404] GetLastError () returned 0x5 [0078.404] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0078.404] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.404] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.404] SetLastError (dwErrCode=0x0) [0078.404] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\system\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.405] GetLastError () returned 0x5 [0078.405] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0078.405] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.405] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079a0810 [0078.405] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.405] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.405] SetLastError (dwErrCode=0x0) [0078.405] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\system\\ole db\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.406] GetLastError () returned 0x5 [0078.406] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.406] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.406] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0450 [0078.406] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.406] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.406] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.406] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.406] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqloledb.rll.mui", dwFileAttributes=0x80) returned 0 [0078.407] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqloledb.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqloledb.rll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.407] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.407] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.407] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.407] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.408] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqlxmlx.rll.mui", dwFileAttributes=0x80) returned 0 [0078.408] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqlxmlx.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqlxmlx.rll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.408] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.408] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.409] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0078.409] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0078.409] SetLastError (dwErrCode=0x0) [0078.409] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.409] GetLastError () returned 0x5 [0078.409] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.409] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.409] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.409] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.409] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.409] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.409] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.409] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.409] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.409] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.409] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.409] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.410] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc", dwFileAttributes=0x80) returned 0 [0078.410] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbjvs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.410] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.410] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.410] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.410] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.410] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc", dwFileAttributes=0x80) returned 0 [0078.411] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbvbs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.412] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.412] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.412] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.412] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.412] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.412] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.rll", dwFileAttributes=0x80) returned 0 [0078.412] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.rll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.413] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.413] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.413] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.413] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.413] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.413] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.rll", dwFileAttributes=0x80) returned 0 [0078.413] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.rll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.413] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.414] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.414] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0078.414] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0078.414] SetLastError (dwErrCode=0x0) [0078.414] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\system\\ole db\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.414] GetLastError () returned 0x5 [0078.414] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0078.414] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.414] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.414] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.414] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0 [0078.414] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0078.414] SetLastError (dwErrCode=0x0) [0078.414] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\system\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.414] GetLastError () returned 0x5 [0078.414] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0078.415] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.415] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0 [0078.415] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0078.415] SetLastError (dwErrCode=0x0) [0078.415] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.415] GetLastError () returned 0x5 [0078.415] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0078.415] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.415] FindNextFileW (in: hFindFile=0xd707977450, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 1 [0078.415] FindNextFileW (in: hFindFile=0xd707977450, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 1 [0078.415] SetLastError (dwErrCode=0x0) [0078.415] CreateFileW (lpFileName="C:\\Program Files\\RyukReadMe.txt" (normalized: "c:\\program files\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.415] GetLastError () returned 0x5 [0078.415] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0078.415] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.415] FindFirstFileW (in: lpFileName="C:\\Program Files\\Internet Explorer\\*.*", lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0xd7079a0810 [0078.415] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.415] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.415] SetLastError (dwErrCode=0x0) [0078.416] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\RyukReadMe.txt" (normalized: "c:\\program files\\internet explorer\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.416] GetLastError () returned 0x5 [0078.416] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0078.416] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.416] FindFirstFileW (in: lpFileName="C:\\Program Files\\Internet Explorer\\en-US\\*.*", lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0xd7079a0e10 [0078.416] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.416] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.416] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.416] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.416] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0 [0078.416] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0078.416] SetLastError (dwErrCode=0x0) [0078.416] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\en-US\\RyukReadMe.txt" (normalized: "c:\\program files\\internet explorer\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.416] GetLastError () returned 0x5 [0078.416] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0078.416] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.416] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.416] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.416] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.416] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.416] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.417] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.417] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.417] SetLastError (dwErrCode=0x0) [0078.417] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\RyukReadMe.txt" (normalized: "c:\\program files\\internet explorer\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.417] GetLastError () returned 0x5 [0078.417] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0078.417] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.417] FindFirstFileW (in: lpFileName="C:\\Program Files\\Internet Explorer\\images\\*.*", lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0xd7079a0ed0 [0078.417] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.417] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.417] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.417] SetFileAttributesW (lpFileName="C:\\Program Files\\Internet Explorer\\images\\bing.ico", dwFileAttributes=0x80) returned 0 [0078.418] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\images\\bing.ico" (normalized: "c:\\program files\\internet explorer\\images\\bing.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.418] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.418] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.419] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0 [0078.419] FindClose (in: hFindFile=0xd7079a0ed0 | out: hFindFile=0xd7079a0ed0) returned 1 [0078.419] SetLastError (dwErrCode=0x0) [0078.419] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\images\\RyukReadMe.txt" (normalized: "c:\\program files\\internet explorer\\images\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.419] GetLastError () returned 0x5 [0078.419] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0078.419] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.419] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.419] SetLastError (dwErrCode=0x0) [0078.419] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\RyukReadMe.txt" (normalized: "c:\\program files\\internet explorer\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.419] GetLastError () returned 0x5 [0078.419] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0078.419] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.419] FindFirstFileW (in: lpFileName="C:\\Program Files\\Internet Explorer\\SIGNUP\\*.*", lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0xd7079a0e10 [0078.420] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.420] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.420] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.420] SetFileAttributesW (lpFileName="C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins", dwFileAttributes=0x80) returned 0 [0078.421] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins" (normalized: "c:\\program files\\internet explorer\\signup\\install.ins"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.421] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.421] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.421] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0 [0078.421] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0078.421] SetLastError (dwErrCode=0x0) [0078.421] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\SIGNUP\\RyukReadMe.txt" (normalized: "c:\\program files\\internet explorer\\signup\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.421] GetLastError () returned 0x5 [0078.421] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0078.421] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.421] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.422] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.422] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0 [0078.422] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0078.422] SetLastError (dwErrCode=0x0) [0078.422] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\RyukReadMe.txt" (normalized: "c:\\program files\\internet explorer\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.422] GetLastError () returned 0x5 [0078.422] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0078.422] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.422] FindNextFileW (in: hFindFile=0xd707977450, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 1 [0078.422] SetLastError (dwErrCode=0x0) [0078.422] CreateFileW (lpFileName="C:\\Program Files\\RyukReadMe.txt" (normalized: "c:\\program files\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.422] GetLastError () returned 0x5 [0078.422] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0078.422] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.422] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\*.*", lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0xd7079a0450 [0078.422] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.422] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.422] SetLastError (dwErrCode=0x0) [0078.422] CreateFileW (lpFileName="C:\\Program Files\\Java\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.423] GetLastError () returned 0x5 [0078.423] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0078.423] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.423] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\*.*", lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0xd7079a0810 [0078.423] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.423] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.423] SetLastError (dwErrCode=0x0) [0078.423] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.423] GetLastError () returned 0x5 [0078.423] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0078.423] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.423] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079a08d0 [0078.424] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.424] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.424] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.424] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.424] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.424] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.424] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.424] SetLastError (dwErrCode=0x0) [0078.424] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.425] GetLastError () returned 0x5 [0078.425] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.425] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.425] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\dtplugin\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0e10 [0078.425] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.425] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.425] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.425] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0078.425] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0078.425] SetLastError (dwErrCode=0x0) [0078.425] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\dtplugin\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\bin\\dtplugin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.426] GetLastError () returned 0x5 [0078.426] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.426] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.426] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.426] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.426] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.426] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.426] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.426] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.426] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.426] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.426] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.426] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.426] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.426] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.426] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.426] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.426] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.426] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.426] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.426] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.426] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.426] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.427] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\javacpl.cpl", dwFileAttributes=0x80) returned 0 [0078.427] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\javacpl.cpl" (normalized: "c:\\program files\\java\\jre1.8.0_131\\bin\\javacpl.cpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.427] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.427] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.427] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.428] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.428] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.428] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.428] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.428] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.428] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.428] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.428] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.429] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.429] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.429] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.429] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.429] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.429] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.429] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.429] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.429] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.429] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.429] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.429] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.429] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.429] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.429] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.429] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.429] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.429] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.429] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.429] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.429] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.429] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.429] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.429] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.429] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.429] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.429] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.429] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.429] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.429] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.429] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.429] SetLastError (dwErrCode=0x0) [0078.429] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.430] GetLastError () returned 0x5 [0078.430] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.430] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.430] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\plugin2\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0930 [0078.430] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.430] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.430] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.430] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0078.430] FindClose (in: hFindFile=0xd7079a0930 | out: hFindFile=0xd7079a0930) returned 1 [0078.434] SetLastError (dwErrCode=0x0) [0078.434] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\plugin2\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\bin\\plugin2\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.434] GetLastError () returned 0x5 [0078.434] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.434] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.434] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.434] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.434] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.434] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.435] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.435] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.435] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.435] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.435] SetLastError (dwErrCode=0x0) [0078.435] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.435] GetLastError () returned 0x5 [0078.435] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.435] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.435] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\server\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0e10 [0078.435] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.436] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.436] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.436] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\server\\classes.jsa", dwFileAttributes=0x80) returned 0 [0078.436] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\server\\classes.jsa" (normalized: "c:\\program files\\java\\jre1.8.0_131\\bin\\server\\classes.jsa"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.436] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.437] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.437] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.437] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.437] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.437] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\server\\Xusage.txt", dwFileAttributes=0x80) returned 0 [0078.438] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\server\\Xusage.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\bin\\server\\xusage.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.438] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.438] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.439] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0078.439] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0078.439] SetLastError (dwErrCode=0x0) [0078.439] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\server\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\bin\\server\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.439] GetLastError () returned 0x5 [0078.439] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.439] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.439] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.439] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.439] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.439] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.439] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.439] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.439] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.439] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.439] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.439] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.439] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.439] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.440] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.440] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.440] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.440] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0078.440] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0078.440] SetLastError (dwErrCode=0x0) [0078.440] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.440] GetLastError () returned 0x5 [0078.440] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0078.440] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.440] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.440] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.441] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\COPYRIGHT", dwFileAttributes=0x80) returned 0 [0078.441] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\COPYRIGHT" (normalized: "c:\\program files\\java\\jre1.8.0_131\\copyright"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.441] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.441] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.442] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.442] SetLastError (dwErrCode=0x0) [0078.442] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.442] GetLastError () returned 0x5 [0078.442] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0078.442] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.443] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079a08d0 [0078.445] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.446] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.446] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.446] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\accessibility.properties", dwFileAttributes=0x80) returned 0 [0078.447] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\accessibility.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\accessibility.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.447] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.447] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.447] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.447] SetLastError (dwErrCode=0x0) [0078.447] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.447] GetLastError () returned 0x5 [0078.447] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.447] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.448] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\amd64\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0e10 [0078.448] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.448] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.448] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.448] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\amd64\\jvm.cfg", dwFileAttributes=0x80) returned 0 [0078.448] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\amd64\\jvm.cfg" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\amd64\\jvm.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.448] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.448] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.449] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0078.449] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0078.449] SetLastError (dwErrCode=0x0) [0078.449] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\amd64\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\amd64\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.449] GetLastError () returned 0x5 [0078.449] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.449] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.449] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.449] SetLastError (dwErrCode=0x0) [0078.449] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.449] GetLastError () returned 0x5 [0078.449] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.449] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.449] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\applet\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0930 [0078.450] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.450] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0078.450] FindClose (in: hFindFile=0xd7079a0930 | out: hFindFile=0xd7079a0930) returned 1 [0078.450] SetLastError (dwErrCode=0x0) [0078.450] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\applet\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\applet\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.450] GetLastError () returned 0x5 [0078.450] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.450] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.450] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.450] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.451] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\calendars.properties", dwFileAttributes=0x80) returned 0 [0078.451] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\calendars.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\calendars.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.451] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.451] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.451] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.451] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.452] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\charsets.jar", dwFileAttributes=0x80) returned 0 [0078.452] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\charsets.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\charsets.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.452] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.452] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.452] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.452] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.452] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\classlist", dwFileAttributes=0x80) returned 0 [0078.453] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\classlist" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\classlist"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.453] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.453] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.453] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.453] SetLastError (dwErrCode=0x0) [0078.453] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.453] GetLastError () returned 0x5 [0078.453] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.453] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.453] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\cmm\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0e10 [0078.454] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.454] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.454] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.454] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\cmm\\CIEXYZ.pf", dwFileAttributes=0x80) returned 0 [0078.454] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\cmm\\CIEXYZ.pf" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\cmm\\ciexyz.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.455] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.455] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.455] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.455] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.455] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\cmm\\GRAY.pf", dwFileAttributes=0x80) returned 0 [0078.455] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\cmm\\GRAY.pf" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\cmm\\gray.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.456] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.456] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.456] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.456] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.456] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\cmm\\LINEAR_RGB.pf", dwFileAttributes=0x80) returned 0 [0078.456] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\cmm\\LINEAR_RGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\cmm\\linear_rgb.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.456] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.456] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.457] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.457] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.457] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\cmm\\PYCC.pf", dwFileAttributes=0x80) returned 0 [0078.457] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\cmm\\PYCC.pf" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\cmm\\pycc.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.457] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.457] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.458] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.458] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.458] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\cmm\\sRGB.pf", dwFileAttributes=0x80) returned 0 [0078.459] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\cmm\\sRGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\cmm\\srgb.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.459] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.459] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.459] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0078.459] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0078.459] SetLastError (dwErrCode=0x0) [0078.459] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\cmm\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\cmm\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.460] GetLastError () returned 0x5 [0078.460] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.460] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.460] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.460] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.460] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\content-types.properties", dwFileAttributes=0x80) returned 0 [0078.460] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\content-types.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\content-types.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.462] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.462] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.462] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.462] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.462] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\currency.data", dwFileAttributes=0x80) returned 0 [0078.463] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\currency.data" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\currency.data"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.463] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.463] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.463] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.463] SetLastError (dwErrCode=0x0) [0078.463] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.463] GetLastError () returned 0x5 [0078.463] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.463] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.463] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0930 [0078.464] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.464] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.464] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.465] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\ffjcext.zip", dwFileAttributes=0x80) returned 0 [0078.465] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\deploy\\ffjcext.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.466] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.466] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.466] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.466] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.466] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages.properties", dwFileAttributes=0x80) returned 0 [0078.466] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\deploy\\messages.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.466] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.466] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.467] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.467] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_de.properties", dwFileAttributes=0x80) returned 0 [0078.467] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_de.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\deploy\\messages_de.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.467] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.467] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.468] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.468] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.468] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_es.properties", dwFileAttributes=0x80) returned 0 [0078.468] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_es.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\deploy\\messages_es.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.468] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.468] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.468] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.468] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.469] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_fr.properties", dwFileAttributes=0x80) returned 0 [0078.469] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_fr.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\deploy\\messages_fr.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.469] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.470] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.470] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.470] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.470] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_it.properties", dwFileAttributes=0x80) returned 0 [0078.470] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_it.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\deploy\\messages_it.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.470] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.470] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.471] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.471] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.471] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_ja.properties", dwFileAttributes=0x80) returned 0 [0078.471] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_ja.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\deploy\\messages_ja.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.471] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.471] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.471] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.471] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.472] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_ko.properties", dwFileAttributes=0x80) returned 0 [0078.472] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_ko.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\deploy\\messages_ko.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.472] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.472] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.472] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.472] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.473] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_pt_BR.properties", dwFileAttributes=0x80) returned 0 [0078.474] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_pt_BR.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\deploy\\messages_pt_br.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.474] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.474] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.474] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.474] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.474] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_sv.properties", dwFileAttributes=0x80) returned 0 [0078.474] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_sv.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\deploy\\messages_sv.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.475] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.475] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.475] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.475] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.475] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_zh_CN.properties", dwFileAttributes=0x80) returned 0 [0078.475] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_zh_CN.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\deploy\\messages_zh_cn.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.475] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.476] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.476] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.476] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.476] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_zh_HK.properties", dwFileAttributes=0x80) returned 0 [0078.476] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_zh_HK.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\deploy\\messages_zh_hk.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.477] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.477] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.477] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.477] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.477] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_zh_TW.properties", dwFileAttributes=0x80) returned 0 [0078.478] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_zh_TW.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\deploy\\messages_zh_tw.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.478] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.478] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.479] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.479] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.479] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\splash.gif", dwFileAttributes=0x80) returned 0 [0078.479] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\splash.gif" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\deploy\\splash.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.479] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.479] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.480] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.480] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.480] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\splash@2x.gif", dwFileAttributes=0x80) returned 0 [0078.480] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\splash@2x.gif" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\deploy\\splash@2x.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.480] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.480] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.480] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.480] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\splash_11-lic.gif", dwFileAttributes=0x80) returned 0 [0078.481] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\splash_11-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\deploy\\splash_11-lic.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.481] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.481] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.481] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.482] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\splash_11@2x-lic.gif", dwFileAttributes=0x80) returned 0 [0078.483] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\splash_11@2x-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\deploy\\splash_11@2x-lic.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.483] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.483] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.483] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0078.483] FindClose (in: hFindFile=0xd7079a0930 | out: hFindFile=0xd7079a0930) returned 1 [0078.484] SetLastError (dwErrCode=0x0) [0078.484] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\deploy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.488] GetLastError () returned 0x5 [0078.488] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.488] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.488] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.488] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.489] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy.jar", dwFileAttributes=0x80) returned 0 [0078.490] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\deploy.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.490] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.490] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.490] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.490] SetLastError (dwErrCode=0x0) [0078.490] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.490] GetLastError () returned 0x5 [0078.490] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.490] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.490] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0930 [0078.492] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.492] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.492] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.492] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\access-bridge-64.jar", dwFileAttributes=0x80) returned 0 [0078.492] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\access-bridge-64.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ext\\access-bridge-64.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.493] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.493] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.493] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.493] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.493] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\cldrdata.jar", dwFileAttributes=0x80) returned 0 [0078.494] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\cldrdata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ext\\cldrdata.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.494] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.494] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.494] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.494] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.494] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\dnsns.jar", dwFileAttributes=0x80) returned 0 [0078.495] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ext\\dnsns.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.496] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.496] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.496] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.496] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.496] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\jaccess.jar", dwFileAttributes=0x80) returned 0 [0078.497] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ext\\jaccess.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.497] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.497] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.497] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.497] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\jfxrt.jar", dwFileAttributes=0x80) returned 0 [0078.498] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\jfxrt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ext\\jfxrt.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.498] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.498] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.498] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.498] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\localedata.jar", dwFileAttributes=0x80) returned 0 [0078.498] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\localedata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ext\\localedata.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.499] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.499] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.499] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.499] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\meta-index", dwFileAttributes=0x80) returned 0 [0078.499] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ext\\meta-index"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.500] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.500] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.500] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.500] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\nashorn.jar", dwFileAttributes=0x80) returned 0 [0078.501] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\nashorn.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ext\\nashorn.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.501] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.501] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.501] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.501] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.501] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\sunec.jar", dwFileAttributes=0x80) returned 0 [0078.502] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\sunec.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ext\\sunec.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.502] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.502] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.502] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.502] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\sunjce_provider.jar", dwFileAttributes=0x80) returned 0 [0078.503] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ext\\sunjce_provider.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.503] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.503] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.503] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.503] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.503] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\sunmscapi.jar", dwFileAttributes=0x80) returned 0 [0078.504] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ext\\sunmscapi.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.504] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.504] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.504] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.504] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\sunpkcs11.jar", dwFileAttributes=0x80) returned 0 [0078.506] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ext\\sunpkcs11.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.507] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.507] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.507] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.507] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\zipfs.jar", dwFileAttributes=0x80) returned 0 [0078.507] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ext\\zipfs.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.508] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.508] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.508] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0078.508] FindClose (in: hFindFile=0xd7079a0930 | out: hFindFile=0xd7079a0930) returned 1 [0078.508] SetLastError (dwErrCode=0x0) [0078.508] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ext\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.511] GetLastError () returned 0x5 [0078.511] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.511] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.511] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.511] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\flavormap.properties", dwFileAttributes=0x80) returned 0 [0078.512] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\flavormap.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\flavormap.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.512] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.512] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.512] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.512] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.513] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fontconfig.bfc", dwFileAttributes=0x80) returned 0 [0078.513] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fontconfig.bfc" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\fontconfig.bfc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.513] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.513] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.513] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.513] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.513] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fontconfig.properties.src", dwFileAttributes=0x80) returned 0 [0078.514] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fontconfig.properties.src" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\fontconfig.properties.src"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.514] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.514] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.515] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.515] SetLastError (dwErrCode=0x0) [0078.515] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.515] GetLastError () returned 0x5 [0078.515] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.515] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.515] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fonts\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd707977510 [0078.516] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.516] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.516] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.517] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fonts\\LucidaBrightDemiBold.ttf", dwFileAttributes=0x80) returned 0 [0078.517] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fonts\\LucidaBrightDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\fonts\\lucidabrightdemibold.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.517] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.517] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.517] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.517] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.518] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fonts\\LucidaBrightDemiItalic.ttf", dwFileAttributes=0x80) returned 0 [0078.518] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fonts\\LucidaBrightDemiItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\fonts\\lucidabrightdemiitalic.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.518] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.518] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.518] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.518] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.518] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fonts\\LucidaBrightItalic.ttf", dwFileAttributes=0x80) returned 0 [0078.519] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fonts\\LucidaBrightItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\fonts\\lucidabrightitalic.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.519] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.519] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.519] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.520] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fonts\\LucidaBrightRegular.ttf", dwFileAttributes=0x80) returned 0 [0078.520] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fonts\\LucidaBrightRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\fonts\\lucidabrightregular.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.520] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.520] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.521] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.521] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fonts\\LucidaSansDemiBold.ttf", dwFileAttributes=0x80) returned 0 [0078.521] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fonts\\LucidaSansDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\fonts\\lucidasansdemibold.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.521] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.521] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.521] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.521] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.522] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fonts\\LucidaSansRegular.ttf", dwFileAttributes=0x80) returned 0 [0078.522] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fonts\\LucidaSansRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\fonts\\lucidasansregular.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.522] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.522] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.522] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.522] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fonts\\LucidaTypewriterBold.ttf", dwFileAttributes=0x80) returned 0 [0078.524] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fonts\\LucidaTypewriterBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\fonts\\lucidatypewriterbold.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.524] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.524] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.524] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.524] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.525] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fonts\\LucidaTypewriterRegular.ttf", dwFileAttributes=0x80) returned 0 [0078.525] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fonts\\LucidaTypewriterRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\fonts\\lucidatypewriterregular.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.525] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.525] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.525] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0078.525] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0078.526] SetLastError (dwErrCode=0x0) [0078.526] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fonts\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\fonts\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.528] GetLastError () returned 0x5 [0078.528] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.528] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.529] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.529] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\hijrah-config-umalqura.properties", dwFileAttributes=0x80) returned 0 [0078.529] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\hijrah-config-umalqura.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\hijrah-config-umalqura.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.529] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.529] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.530] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.530] SetLastError (dwErrCode=0x0) [0078.530] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.530] GetLastError () returned 0x5 [0078.530] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.530] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.530] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd707976bb0 [0078.530] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.530] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.530] SetLastError (dwErrCode=0x0) [0078.530] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\images\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.530] GetLastError () returned 0x5 [0078.530] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0078.530] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.530] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd707976d30 [0078.532] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0078.532] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0078.532] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.532] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\cursors.properties", dwFileAttributes=0x80) returned 0 [0078.533] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\cursors.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\images\\cursors\\cursors.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.533] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.533] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.533] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0078.533] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\invalid32x32.gif", dwFileAttributes=0x80) returned 0 [0078.534] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\images\\cursors\\invalid32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.534] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.534] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.534] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0078.534] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.534] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\win32_CopyDrop32x32.gif", dwFileAttributes=0x80) returned 0 [0078.535] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\images\\cursors\\win32_copydrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.535] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.535] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.535] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0078.535] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif", dwFileAttributes=0x80) returned 0 [0078.536] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\images\\cursors\\win32_copynodrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.536] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.536] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.537] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0078.537] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.537] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\win32_LinkDrop32x32.gif", dwFileAttributes=0x80) returned 0 [0078.537] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\images\\cursors\\win32_linkdrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.537] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.537] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.538] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0078.538] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.538] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif", dwFileAttributes=0x80) returned 0 [0078.538] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\images\\cursors\\win32_linknodrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.538] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.538] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.539] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0078.539] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.539] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\win32_MoveDrop32x32.gif", dwFileAttributes=0x80) returned 0 [0078.539] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\images\\cursors\\win32_movedrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.539] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.539] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.539] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0078.539] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.540] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif", dwFileAttributes=0x80) returned 0 [0078.540] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\images\\cursors\\win32_movenodrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.541] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.541] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.541] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0078.541] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0078.542] SetLastError (dwErrCode=0x0) [0078.542] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\images\\cursors\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.544] GetLastError () returned 0x5 [0078.544] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0078.544] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.544] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0078.544] FindClose (in: hFindFile=0xd707976bb0 | out: hFindFile=0xd707976bb0) returned 1 [0078.544] SetLastError (dwErrCode=0x0) [0078.544] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\images\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.545] GetLastError () returned 0x5 [0078.545] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.545] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.545] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.545] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\javafx.properties", dwFileAttributes=0x80) returned 0 [0078.545] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\javafx.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\javafx.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.546] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.546] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.546] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.546] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.546] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\javaws.jar", dwFileAttributes=0x80) returned 0 [0078.546] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\javaws.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\javaws.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.546] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.547] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.547] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.547] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\jce.jar", dwFileAttributes=0x80) returned 0 [0078.547] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\jce.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\jce.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.547] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.547] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.548] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.548] SetLastError (dwErrCode=0x0) [0078.548] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.548] GetLastError () returned 0x5 [0078.548] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.548] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.548] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\jfr\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd707976bb0 [0078.548] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.548] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.548] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\jfr\\default.jfc", dwFileAttributes=0x80) returned 0 [0078.549] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\jfr\\default.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\jfr\\default.jfc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.549] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.549] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.550] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.550] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\jfr\\profile.jfc", dwFileAttributes=0x80) returned 0 [0078.550] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\jfr\\profile.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\jfr\\profile.jfc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.550] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.550] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.550] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0078.551] FindClose (in: hFindFile=0xd707976bb0 | out: hFindFile=0xd707976bb0) returned 1 [0078.551] SetLastError (dwErrCode=0x0) [0078.551] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\jfr\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\jfr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.551] GetLastError () returned 0x5 [0078.551] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.551] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.551] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.551] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.551] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\jfr.jar", dwFileAttributes=0x80) returned 0 [0078.552] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\jfr.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.552] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.552] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.552] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.552] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\jfxswt.jar", dwFileAttributes=0x80) returned 0 [0078.553] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\jfxswt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\jfxswt.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.553] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.553] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.553] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.553] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.553] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\jsse.jar", dwFileAttributes=0x80) returned 0 [0078.554] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\jsse.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.554] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.554] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.554] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.554] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\jvm.hprof.txt", dwFileAttributes=0x80) returned 0 [0078.555] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\jvm.hprof.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\jvm.hprof.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.556] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.556] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.556] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.556] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\logging.properties", dwFileAttributes=0x80) returned 0 [0078.556] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\logging.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\logging.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.557] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.557] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.557] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.557] SetLastError (dwErrCode=0x0) [0078.557] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.557] GetLastError () returned 0x5 [0078.557] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.557] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.557] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\management\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd707976e50 [0078.558] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.558] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.558] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\management\\jmxremote.access", dwFileAttributes=0x80) returned 0 [0078.559] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\management\\jmxremote.access" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\management\\jmxremote.access"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.559] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.559] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.559] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.559] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.560] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\management\\jmxremote.password.template", dwFileAttributes=0x80) returned 0 [0078.560] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\management\\jmxremote.password.template" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\management\\jmxremote.password.template"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.560] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.561] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.561] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.561] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\management\\management.properties", dwFileAttributes=0x80) returned 0 [0078.561] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\management\\management.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\management\\management.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.561] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.561] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.562] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.562] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.562] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\management\\snmp.acl.template", dwFileAttributes=0x80) returned 0 [0078.562] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\management\\snmp.acl.template" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\management\\snmp.acl.template"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.562] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.562] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.563] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0078.563] FindClose (in: hFindFile=0xd707976e50 | out: hFindFile=0xd707976e50) returned 1 [0078.563] SetLastError (dwErrCode=0x0) [0078.563] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\management\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\management\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.566] GetLastError () returned 0x5 [0078.566] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.566] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.566] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.566] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.566] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\management-agent.jar", dwFileAttributes=0x80) returned 0 [0078.567] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\management-agent.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\management-agent.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.567] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.567] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.568] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.568] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.568] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\meta-index", dwFileAttributes=0x80) returned 0 [0078.569] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\meta-index"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.570] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.570] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.570] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.570] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.570] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\net.properties", dwFileAttributes=0x80) returned 0 [0078.570] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\net.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\net.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.571] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.571] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.571] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.571] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\plugin.jar", dwFileAttributes=0x80) returned 0 [0078.571] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\plugin.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\plugin.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.571] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.572] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.572] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.572] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.572] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\psfont.properties.ja", dwFileAttributes=0x80) returned 0 [0078.572] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\psfont.properties.ja" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\psfont.properties.ja"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.572] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.573] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.573] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.573] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\psfontj2d.properties", dwFileAttributes=0x80) returned 0 [0078.573] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\psfontj2d.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\psfontj2d.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.573] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.573] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.574] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.574] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\resources.jar", dwFileAttributes=0x80) returned 0 [0078.575] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\resources.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\resources.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.575] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.575] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.575] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.575] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.576] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\rt.jar", dwFileAttributes=0x80) returned 0 [0078.576] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\rt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\rt.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.576] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.576] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.577] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.577] SetLastError (dwErrCode=0x0) [0078.577] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.577] GetLastError () returned 0x5 [0078.577] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.577] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.577] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd707976bb0 [0078.578] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.578] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.578] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.579] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\blacklist", dwFileAttributes=0x80) returned 0 [0078.579] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\blacklist" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\security\\blacklist"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.579] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.579] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.579] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.579] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\blacklisted.certs", dwFileAttributes=0x80) returned 0 [0078.580] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\blacklisted.certs" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\security\\blacklisted.certs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.580] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.580] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.580] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.580] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\cacerts", dwFileAttributes=0x80) returned 0 [0078.581] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\cacerts" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\security\\cacerts"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.581] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.581] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.582] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.582] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.582] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\java.policy", dwFileAttributes=0x80) returned 0 [0078.582] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\java.policy" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\security\\java.policy"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.582] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.582] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.583] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.583] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\java.security", dwFileAttributes=0x80) returned 0 [0078.583] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\java.security" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\security\\java.security"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.584] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.584] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.584] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.584] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\javaws.policy", dwFileAttributes=0x80) returned 0 [0078.585] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\javaws.policy" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\security\\javaws.policy"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.585] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.585] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.585] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.585] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.586] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\local_policy.jar", dwFileAttributes=0x80) returned 0 [0078.586] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\local_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\security\\local_policy.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.587] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.587] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.587] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.587] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\trusted.libraries", dwFileAttributes=0x80) returned 0 [0078.587] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\trusted.libraries" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\security\\trusted.libraries"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.587] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.587] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.588] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.588] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.588] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\US_export_policy.jar", dwFileAttributes=0x80) returned 0 [0078.588] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\US_export_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\security\\us_export_policy.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.588] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.588] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.589] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0078.589] FindClose (in: hFindFile=0xd707976bb0 | out: hFindFile=0xd707976bb0) returned 1 [0078.589] SetLastError (dwErrCode=0x0) [0078.589] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\security\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.592] GetLastError () returned 0x5 [0078.592] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.592] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.592] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.592] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\sound.properties", dwFileAttributes=0x80) returned 0 [0078.593] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\sound.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\sound.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.593] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.593] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.593] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.593] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.594] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\tzdb.dat", dwFileAttributes=0x80) returned 0 [0078.594] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\tzdb.dat" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\tzdb.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.594] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.594] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.594] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.594] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.595] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\tzmappings", dwFileAttributes=0x80) returned 0 [0078.595] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\tzmappings" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\tzmappings"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.595] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.595] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.595] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0078.595] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0078.595] SetLastError (dwErrCode=0x0) [0078.595] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.596] GetLastError () returned 0x5 [0078.596] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0078.596] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.596] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.596] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\LICENSE", dwFileAttributes=0x80) returned 0 [0078.597] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\LICENSE" (normalized: "c:\\program files\\java\\jre1.8.0_131\\license"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.597] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.597] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.597] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.597] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.598] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\README.txt", dwFileAttributes=0x80) returned 0 [0078.598] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\README.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\readme.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.598] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.598] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.599] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.599] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.599] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\release", dwFileAttributes=0x80) returned 0 [0078.600] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\release" (normalized: "c:\\program files\\java\\jre1.8.0_131\\release"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.600] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.600] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.600] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.600] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.600] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\THIRDPARTYLICENSEREADME-JAVAFX.txt", dwFileAttributes=0x80) returned 0 [0078.601] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\thirdpartylicensereadme-javafx.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.602] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.602] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.602] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.602] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.602] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\THIRDPARTYLICENSEREADME.txt", dwFileAttributes=0x80) returned 0 [0078.602] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\thirdpartylicensereadme.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.603] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.603] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.603] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.603] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.603] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\Welcome.html", dwFileAttributes=0x80) returned 0 [0078.603] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\Welcome.html" (normalized: "c:\\program files\\java\\jre1.8.0_131\\welcome.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.604] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.604] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.604] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0 [0078.604] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0078.604] SetLastError (dwErrCode=0x0) [0078.604] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.605] GetLastError () returned 0x5 [0078.605] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0078.605] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.605] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0 [0078.605] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0078.605] SetLastError (dwErrCode=0x0) [0078.605] CreateFileW (lpFileName="C:\\Program Files\\Java\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.605] GetLastError () returned 0x5 [0078.605] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0078.605] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.605] FindNextFileW (in: hFindFile=0xd707977450, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 1 [0078.605] SetLastError (dwErrCode=0x0) [0078.605] CreateFileW (lpFileName="C:\\Program Files\\RyukReadMe.txt" (normalized: "c:\\program files\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.605] GetLastError () returned 0x5 [0078.605] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0078.606] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.606] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\*.*", lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0xd707976eb0 [0078.606] FindNextFileW (in: hFindFile=0xd707976eb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.606] FindNextFileW (in: hFindFile=0xd707976eb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.606] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.606] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\AppXManifest.xml", dwFileAttributes=0x80) returned 0 [0078.606] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\AppXManifest.xml" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.607] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.607] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.607] FindNextFileW (in: hFindFile=0xd707976eb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.607] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml", dwFileAttributes=0x80) returned 0 [0078.607] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.608] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.608] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.608] FindNextFileW (in: hFindFile=0xd707976eb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.608] SetLastError (dwErrCode=0x0) [0078.608] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.608] GetLastError () returned 0x5 [0078.608] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0078.608] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.608] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\*.*", lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0xd707976bb0 [0078.608] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.608] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.608] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM", dwFileAttributes=0x80) returned 0 [0078.609] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.610] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.610] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.610] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.610] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS", dwFileAttributes=0x80) returned 0 [0078.611] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.611] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.611] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.612] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.612] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.612] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML", dwFileAttributes=0x80) returned 0 [0078.613] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.613] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.613] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.613] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0 [0078.613] FindClose (in: hFindFile=0xd707976bb0 | out: hFindFile=0xd707976bb0) returned 1 [0078.613] SetLastError (dwErrCode=0x0) [0078.613] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.613] GetLastError () returned 0x5 [0078.613] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0078.614] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.614] FindNextFileW (in: hFindFile=0xd707976eb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.614] SetLastError (dwErrCode=0x0) [0078.614] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.614] GetLastError () returned 0x5 [0078.614] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0078.614] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.614] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\*.*", lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0xd707976f10 [0078.617] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.620] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.620] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0078.622] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.622] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.622] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.623] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.623] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.623] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0078.623] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.623] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.623] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.623] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.623] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0078.625] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.626] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.626] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.626] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.626] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.626] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0078.627] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.627] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.627] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.627] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.627] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0078.628] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.628] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.628] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.628] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.628] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0078.629] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.629] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.629] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.630] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.630] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.630] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0078.631] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.631] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.631] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.632] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.632] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0078.632] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.632] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.632] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.633] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.633] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0078.633] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.633] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.634] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.634] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.634] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.634] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0078.635] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.635] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.635] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.635] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.635] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0078.636] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.636] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.636] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.636] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.636] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.637] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0078.637] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.637] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.637] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.637] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.637] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.638] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0078.638] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.638] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.639] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.639] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.639] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0078.640] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.640] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.640] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.640] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.640] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.641] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0078.641] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.641] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.641] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.642] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.642] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0078.642] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.642] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.642] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.643] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.643] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.643] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0078.643] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.643] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.643] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.643] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.643] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.644] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0078.644] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.644] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.644] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.644] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.644] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.645] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0078.645] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.645] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.645] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.646] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.646] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0078.646] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.646] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.646] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.647] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.647] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0078.647] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.647] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.647] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.648] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.648] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.648] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0078.649] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.649] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.649] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.649] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.649] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.649] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0078.649] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.650] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.650] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.650] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.650] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.650] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0078.651] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.651] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.651] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.652] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.652] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.652] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0078.652] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.652] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.652] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.652] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.652] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.653] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0078.653] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.653] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.653] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.653] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.653] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.654] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0078.654] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.654] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.654] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.654] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.654] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0078.655] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.655] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.655] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.655] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.655] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0078.656] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.656] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.657] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.657] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.657] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.657] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0078.657] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.657] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.657] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.658] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.658] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0078.659] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.659] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.659] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.659] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.659] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0078.659] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.660] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.660] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.660] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.660] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.660] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0078.660] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.661] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.661] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.661] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.661] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0078.662] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.662] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.662] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.662] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.662] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0078.663] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.663] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.663] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.663] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.663] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0078.664] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.664] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.664] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.664] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.664] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.665] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0078.665] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.665] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.665] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.665] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.665] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.665] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0078.666] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.666] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.666] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.666] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.666] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.16.xml", dwFileAttributes=0x80) returned 0 [0078.666] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.16.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.16.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.667] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.667] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.667] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.667] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0078.668] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.668] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.668] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.668] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.668] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.16.xml", dwFileAttributes=0x80) returned 0 [0078.669] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.16.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.16.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.669] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.669] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.669] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0 [0078.669] FindClose (in: hFindFile=0xd707976f10 | out: hFindFile=0xd707976f10) returned 1 [0078.670] SetLastError (dwErrCode=0x0) [0078.670] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.672] GetLastError () returned 0x5 [0078.672] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0078.672] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.672] FindNextFileW (in: hFindFile=0xd707976eb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.673] FindNextFileW (in: hFindFile=0xd707976eb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0078.673] SetLastError (dwErrCode=0x0) [0078.673] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.673] GetLastError () returned 0x5 [0078.673] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0078.673] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.673] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\*.*", lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0xd707976bb0 [0078.673] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.673] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.673] SetLastError (dwErrCode=0x0) [0078.673] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.673] GetLastError () returned 0x5 [0078.673] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0078.673] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.673] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd707976d30 [0078.674] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.675] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.675] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.675] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.675] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.675] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.675] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.675] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.675] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.675] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.675] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.675] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.675] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.675] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.675] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.675] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.675] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.675] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.675] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.675] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.675] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.675] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.675] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.676] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.676] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.676] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.676] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.676] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.676] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.676] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.676] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.676] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.676] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.676] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.676] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.676] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.676] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.676] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.676] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.676] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.676] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0078.676] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0078.677] SetLastError (dwErrCode=0x0) [0078.677] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\client\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.680] GetLastError () returned 0x5 [0078.680] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0078.680] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.680] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0078.680] SetLastError (dwErrCode=0x0) [0078.680] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.680] GetLastError () returned 0x5 [0078.680] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0078.680] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.680] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd707976d30 [0078.684] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.684] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0078.684] SetLastError (dwErrCode=0x0) [0078.684] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.684] GetLastError () returned 0x5 [0078.684] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0078.684] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.684] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd707977510 [0078.687] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.688] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.688] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.688] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF", dwFileAttributes=0x80) returned 0 [0078.689] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00004_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.689] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.689] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.689] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.689] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF", dwFileAttributes=0x80) returned 0 [0078.690] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00011_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.691] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.691] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.691] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.691] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF", dwFileAttributes=0x80) returned 0 [0078.691] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00021_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.691] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.691] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.692] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.692] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF", dwFileAttributes=0x80) returned 0 [0078.692] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00037_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.692] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.692] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.693] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.693] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.693] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF", dwFileAttributes=0x80) returned 0 [0078.693] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00038_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.694] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.694] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.694] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.694] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF", dwFileAttributes=0x80) returned 0 [0078.694] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.695] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.695] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.695] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.695] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF", dwFileAttributes=0x80) returned 0 [0078.695] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.695] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.695] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.696] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.696] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.696] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF", dwFileAttributes=0x80) returned 0 [0078.696] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.696] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.696] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.697] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.697] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF", dwFileAttributes=0x80) returned 0 [0078.698] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00090_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.698] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.698] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.698] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.698] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF", dwFileAttributes=0x80) returned 0 [0078.699] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00092_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.699] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.699] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.699] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.699] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF", dwFileAttributes=0x80) returned 0 [0078.700] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.700] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.700] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.700] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.700] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF", dwFileAttributes=0x80) returned 0 [0078.701] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00120_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.701] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.701] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.701] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.701] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF", dwFileAttributes=0x80) returned 0 [0078.702] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00126_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.702] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.702] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.702] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.702] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF", dwFileAttributes=0x80) returned 0 [0078.704] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.704] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.704] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.705] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.705] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.705] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF", dwFileAttributes=0x80) returned 0 [0078.706] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.706] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.706] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.706] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.706] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.706] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF", dwFileAttributes=0x80) returned 0 [0078.707] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00135_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.707] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.707] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.707] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.707] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.707] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF", dwFileAttributes=0x80) returned 0 [0078.708] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.708] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.708] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.708] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.709] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.709] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF", dwFileAttributes=0x80) returned 0 [0078.709] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.709] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.709] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.709] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.709] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.710] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF", dwFileAttributes=0x80) returned 0 [0078.710] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.710] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.710] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.710] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.710] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF", dwFileAttributes=0x80) returned 0 [0078.711] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.711] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.711] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.711] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.711] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF", dwFileAttributes=0x80) returned 0 [0078.712] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.712] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.712] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.712] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.712] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.712] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF", dwFileAttributes=0x80) returned 0 [0078.713] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00160_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.713] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.713] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.713] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.713] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF", dwFileAttributes=0x80) returned 0 [0078.714] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00161_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.714] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.714] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.714] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.714] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF", dwFileAttributes=0x80) returned 0 [0078.716] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00163_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.716] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.716] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.716] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.716] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.716] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF", dwFileAttributes=0x80) returned 0 [0078.717] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00164_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.717] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.717] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.717] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.717] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF", dwFileAttributes=0x80) returned 0 [0078.718] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00165_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.718] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.718] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.718] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.718] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF", dwFileAttributes=0x80) returned 0 [0078.719] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00167_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.719] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.719] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.719] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.719] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF", dwFileAttributes=0x80) returned 0 [0078.720] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00169_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.720] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.720] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.720] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.720] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF", dwFileAttributes=0x80) returned 0 [0078.721] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00170_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.722] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.722] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.722] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.722] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.722] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF", dwFileAttributes=0x80) returned 0 [0078.723] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00171_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.723] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.723] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.723] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.723] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.724] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF", dwFileAttributes=0x80) returned 0 [0078.724] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00172_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.724] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.724] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.725] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.725] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF", dwFileAttributes=0x80) returned 0 [0078.725] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00174_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.725] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.725] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.726] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.726] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF", dwFileAttributes=0x80) returned 0 [0078.726] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00175_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.726] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.726] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.727] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.730] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF", dwFileAttributes=0x80) returned 0 [0078.732] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00176_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.733] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.733] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.733] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.733] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF", dwFileAttributes=0x80) returned 0 [0078.733] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00010_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.734] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.734] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.734] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.734] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF", dwFileAttributes=0x80) returned 0 [0078.737] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00015_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.737] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.737] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.738] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.738] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.738] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF", dwFileAttributes=0x80) returned 0 [0078.739] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00790_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.739] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.739] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.739] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.739] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF", dwFileAttributes=0x80) returned 0 [0078.740] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00853_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.740] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.740] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.741] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.741] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF", dwFileAttributes=0x80) returned 0 [0078.742] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00914_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.742] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.742] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.742] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.742] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF", dwFileAttributes=0x80) returned 0 [0078.742] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00932_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.743] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.743] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.743] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.743] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.743] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF", dwFileAttributes=0x80) returned 0 [0078.743] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00965_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.744] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.744] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.744] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.744] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF", dwFileAttributes=0x80) returned 0 [0078.744] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01039_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.744] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.745] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.773] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.773] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF", dwFileAttributes=0x80) returned 0 [0078.774] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01044_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.774] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.774] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.775] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.775] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.775] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF", dwFileAttributes=0x80) returned 0 [0078.777] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01060_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.777] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.777] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.777] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.777] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.777] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF", dwFileAttributes=0x80) returned 0 [0078.778] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01084_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.778] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.778] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.778] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.778] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.778] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF", dwFileAttributes=0x80) returned 0 [0078.779] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01173_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.779] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.779] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.779] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.779] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.779] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF", dwFileAttributes=0x80) returned 0 [0078.780] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01174_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.780] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.780] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.780] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.780] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF", dwFileAttributes=0x80) returned 0 [0078.781] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01184_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.781] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.781] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.781] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.781] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF", dwFileAttributes=0x80) returned 0 [0078.782] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01216_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.782] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.782] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.782] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.782] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF", dwFileAttributes=0x80) returned 0 [0078.783] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01218_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.783] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.783] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.783] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.783] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF", dwFileAttributes=0x80) returned 0 [0078.784] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01251_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.784] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.784] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.784] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.784] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF", dwFileAttributes=0x80) returned 0 [0078.785] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01545_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.785] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.785] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.785] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.785] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.785] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF", dwFileAttributes=0x80) returned 0 [0078.786] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02122_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.786] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.786] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.786] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.786] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.786] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF", dwFileAttributes=0x80) returned 0 [0078.787] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02559_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.787] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.787] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.788] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.788] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF", dwFileAttributes=0x80) returned 0 [0078.789] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02724_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.789] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.789] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.789] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.789] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.789] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF", dwFileAttributes=0x80) returned 0 [0078.790] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an03500_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.790] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.790] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.790] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.790] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.790] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF", dwFileAttributes=0x80) returned 0 [0078.790] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04108_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.791] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.791] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.791] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.791] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.791] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF", dwFileAttributes=0x80) returned 0 [0078.792] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04117_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.793] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.793] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.793] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.793] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF", dwFileAttributes=0x80) returned 0 [0078.793] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04134_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.793] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.794] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.794] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.794] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.794] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF", dwFileAttributes=0x80) returned 0 [0078.794] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04174_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.794] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.794] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.795] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.795] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF", dwFileAttributes=0x80) returned 0 [0078.795] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04191_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.795] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.795] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.795] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.796] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF", dwFileAttributes=0x80) returned 0 [0078.796] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04195_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.796] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.796] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.796] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.796] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.797] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF", dwFileAttributes=0x80) returned 0 [0078.797] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04196_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.797] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.797] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.797] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.797] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.798] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF", dwFileAttributes=0x80) returned 0 [0078.798] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04206_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.799] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.799] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.799] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.799] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.799] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF", dwFileAttributes=0x80) returned 0 [0078.799] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04225_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.800] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.800] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.800] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.800] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.800] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF", dwFileAttributes=0x80) returned 0 [0078.800] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04235_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.801] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.801] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.801] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.801] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF", dwFileAttributes=0x80) returned 0 [0078.803] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04267_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.804] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.804] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.804] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.805] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF", dwFileAttributes=0x80) returned 0 [0078.806] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04269_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.806] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.806] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.806] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.806] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF", dwFileAttributes=0x80) returned 0 [0078.806] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04323_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.807] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.807] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.807] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.807] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.807] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF", dwFileAttributes=0x80) returned 0 [0078.808] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04326_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.808] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.808] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.808] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.808] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF", dwFileAttributes=0x80) returned 0 [0078.808] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04332_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.809] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.809] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.809] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.809] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.809] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF", dwFileAttributes=0x80) returned 0 [0078.809] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04355_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.810] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.810] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.810] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.810] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.810] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF", dwFileAttributes=0x80) returned 0 [0078.811] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04369_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.811] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.811] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.811] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.811] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.811] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF", dwFileAttributes=0x80) returned 0 [0078.812] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04384_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.812] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.812] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.812] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.812] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.813] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF", dwFileAttributes=0x80) returned 0 [0078.813] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04385_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.813] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.813] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.814] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.814] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID", dwFileAttributes=0x80) returned 0 [0078.814] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\baby_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.814] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.814] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.815] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.815] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF", dwFileAttributes=0x80) returned 0 [0078.815] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00116_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.815] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.815] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.816] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.816] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF", dwFileAttributes=0x80) returned 0 [0078.817] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00141_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.817] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.817] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.817] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.817] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF", dwFileAttributes=0x80) returned 0 [0078.818] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00146_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.818] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.818] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.818] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.818] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF", dwFileAttributes=0x80) returned 0 [0078.819] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00155_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.819] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.819] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.819] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.819] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.820] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF", dwFileAttributes=0x80) returned 0 [0078.820] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00160_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.820] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.820] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.820] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.820] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.820] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF", dwFileAttributes=0x80) returned 0 [0078.821] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00173_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.821] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.821] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.821] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.821] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF", dwFileAttributes=0x80) returned 0 [0078.822] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd05119_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.822] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.822] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.822] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.822] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.822] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF", dwFileAttributes=0x80) returned 0 [0078.823] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06102_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.823] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.823] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.824] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.824] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.824] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF", dwFileAttributes=0x80) returned 0 [0078.824] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06200_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.824] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.824] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.825] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.825] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.825] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF", dwFileAttributes=0x80) returned 0 [0078.825] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07761_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.825] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.825] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.826] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.826] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF", dwFileAttributes=0x80) returned 0 [0078.827] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07804_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.827] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.827] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.827] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.827] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.827] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF", dwFileAttributes=0x80) returned 0 [0078.827] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07831_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.828] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.828] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.828] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.828] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.828] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF", dwFileAttributes=0x80) returned 0 [0078.828] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08758_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.829] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.829] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.829] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.829] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF", dwFileAttributes=0x80) returned 0 [0078.829] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08773_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.829] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.830] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.830] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.830] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF", dwFileAttributes=0x80) returned 0 [0078.830] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08808_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.830] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.830] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.831] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.831] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF", dwFileAttributes=0x80) returned 0 [0078.831] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08868_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.831] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.831] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.832] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.832] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF", dwFileAttributes=0x80) returned 0 [0078.832] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09031_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.832] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.832] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.833] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.833] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF", dwFileAttributes=0x80) returned 0 [0078.833] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09194_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.834] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.834] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.834] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.834] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF", dwFileAttributes=0x80) returned 0 [0078.835] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09662_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.835] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.835] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.835] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.835] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF", dwFileAttributes=0x80) returned 0 [0078.836] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09664_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.836] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.836] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.836] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.836] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF", dwFileAttributes=0x80) returned 0 [0078.837] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10890_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.837] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.837] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.837] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.837] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF", dwFileAttributes=0x80) returned 0 [0078.838] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10972_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.838] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.840] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.840] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.840] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF", dwFileAttributes=0x80) returned 0 [0078.840] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19563_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.840] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.840] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.841] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.841] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF", dwFileAttributes=0x80) returned 0 [0078.841] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19582_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.842] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.842] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.842] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.842] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF", dwFileAttributes=0x80) returned 0 [0078.842] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19695_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.843] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.843] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.843] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.844] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF", dwFileAttributes=0x80) returned 0 [0078.845] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19827_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.845] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.845] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.845] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.845] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF", dwFileAttributes=0x80) returned 0 [0078.846] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19828_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.846] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.846] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.846] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.846] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF", dwFileAttributes=0x80) returned 0 [0078.848] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19986_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.848] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.848] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.848] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.848] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.849] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF", dwFileAttributes=0x80) returned 0 [0078.849] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19988_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.849] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.849] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.849] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.849] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.849] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF", dwFileAttributes=0x80) returned 0 [0078.850] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd20013_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.850] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.850] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.850] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.850] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.850] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF", dwFileAttributes=0x80) returned 0 [0078.851] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00008_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.851] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.851] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.851] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.852] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF", dwFileAttributes=0x80) returned 0 [0078.852] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00012_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.852] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.852] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.852] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.852] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF", dwFileAttributes=0x80) returned 0 [0078.853] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00045_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.853] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.853] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.853] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.853] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF", dwFileAttributes=0x80) returned 0 [0078.854] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00098_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.854] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.854] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.855] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.855] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF", dwFileAttributes=0x80) returned 0 [0078.855] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00105_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.855] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.855] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.855] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.855] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.856] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF", dwFileAttributes=0x80) returned 0 [0078.856] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00122_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.856] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.856] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.856] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.856] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF", dwFileAttributes=0x80) returned 0 [0078.857] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00130_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.857] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.857] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.857] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.857] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF", dwFileAttributes=0x80) returned 0 [0078.858] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00148_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.858] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.858] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.859] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.859] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.859] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF", dwFileAttributes=0x80) returned 0 [0078.860] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00152_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.860] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.860] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.860] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.860] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF", dwFileAttributes=0x80) returned 0 [0078.860] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00194_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.861] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.861] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.861] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.861] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.861] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF", dwFileAttributes=0x80) returned 0 [0078.861] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00195_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.862] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.862] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.862] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.862] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF", dwFileAttributes=0x80) returned 0 [0078.863] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00234_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.863] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.863] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.863] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.863] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.863] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF", dwFileAttributes=0x80) returned 0 [0078.864] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00242_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.864] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.864] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.864] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.864] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.864] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF", dwFileAttributes=0x80) returned 0 [0078.865] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00247_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.865] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.865] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.865] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.865] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.866] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF", dwFileAttributes=0x80) returned 0 [0078.866] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00248_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.866] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.866] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.867] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.867] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF", dwFileAttributes=0x80) returned 0 [0078.867] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00252_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.867] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.867] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.868] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.868] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.868] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF", dwFileAttributes=0x80) returned 0 [0078.868] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00254_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.868] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.868] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.869] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.869] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF", dwFileAttributes=0x80) returned 0 [0078.876] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00261_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.876] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.876] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.877] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.877] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF", dwFileAttributes=0x80) returned 0 [0078.877] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00262_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.877] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.877] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.878] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.878] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF", dwFileAttributes=0x80) returned 0 [0078.878] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00265_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.878] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.878] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.879] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.879] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF", dwFileAttributes=0x80) returned 0 [0078.879] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00267_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.880] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.880] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.880] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.880] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.880] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF", dwFileAttributes=0x80) returned 0 [0078.880] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00269_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.881] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.881] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.881] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.881] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.881] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF", dwFileAttributes=0x80) returned 0 [0078.882] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00270_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.882] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.882] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.882] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.882] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF", dwFileAttributes=0x80) returned 0 [0078.883] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00273_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.883] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.883] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.883] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.883] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF", dwFileAttributes=0x80) returned 0 [0078.884] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00274_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.884] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.884] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.885] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.885] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF", dwFileAttributes=0x80) returned 0 [0078.885] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00296_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.886] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.886] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.886] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.886] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF", dwFileAttributes=0x80) returned 0 [0078.886] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00390_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.887] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.887] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.887] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.887] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF", dwFileAttributes=0x80) returned 0 [0078.888] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00392_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.888] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.888] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.888] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.888] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.888] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF", dwFileAttributes=0x80) returned 0 [0078.889] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00524_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.889] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.889] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.890] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.890] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF", dwFileAttributes=0x80) returned 0 [0078.891] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00525_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.891] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.891] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.891] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.891] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF", dwFileAttributes=0x80) returned 0 [0078.892] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00526_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.892] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.892] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.892] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.892] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF", dwFileAttributes=0x80) returned 0 [0078.893] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00648_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.894] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.894] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.894] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.894] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF", dwFileAttributes=0x80) returned 0 [0078.894] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00921_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.894] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.894] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.895] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.895] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF", dwFileAttributes=0x80) returned 0 [0078.895] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00923_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.895] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.895] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.896] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.896] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF", dwFileAttributes=0x80) returned 0 [0078.896] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00932_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.896] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.896] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.896] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.896] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF", dwFileAttributes=0x80) returned 0 [0078.897] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00985_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.897] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.897] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.897] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.897] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF", dwFileAttributes=0x80) returned 0 [0078.898] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boat.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.898] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.898] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.899] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.899] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF", dwFileAttributes=0x80) returned 0 [0078.900] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boatinst.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.900] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.900] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.900] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.900] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF", dwFileAttributes=0x80) returned 0 [0078.901] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00076_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.903] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.903] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.903] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.903] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.903] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF", dwFileAttributes=0x80) returned 0 [0078.904] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00078_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.904] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.904] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.904] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.904] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.904] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF", dwFileAttributes=0x80) returned 0 [0078.905] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00092_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.905] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.905] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.905] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.905] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.906] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF", dwFileAttributes=0x80) returned 0 [0078.906] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00100_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.906] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.906] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.906] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.906] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.907] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF", dwFileAttributes=0x80) returned 0 [0078.907] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00135_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.907] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.907] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.907] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.907] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.907] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF", dwFileAttributes=0x80) returned 0 [0078.908] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00136_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.908] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.908] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.908] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.908] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.908] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF", dwFileAttributes=0x80) returned 0 [0078.909] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00145_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.909] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.909] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.909] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.909] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.909] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF", dwFileAttributes=0x80) returned 0 [0078.910] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00174_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.910] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.910] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.910] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.910] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.910] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF", dwFileAttributes=0x80) returned 0 [0078.910] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00184_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.911] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.911] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.911] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.911] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.911] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF", dwFileAttributes=0x80) returned 0 [0078.912] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00186_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.912] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.912] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.912] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.912] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.913] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF", dwFileAttributes=0x80) returned 0 [0078.913] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00200_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.913] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.914] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.914] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.914] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.914] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF", dwFileAttributes=0x80) returned 0 [0078.914] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00224_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.914] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.915] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.915] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.915] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.915] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF", dwFileAttributes=0x80) returned 0 [0078.915] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00438_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.916] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.916] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.916] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.916] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.916] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF", dwFileAttributes=0x80) returned 0 [0078.917] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00439_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.917] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.917] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.917] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.917] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.918] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF", dwFileAttributes=0x80) returned 0 [0078.918] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00440_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.918] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.918] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.918] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.918] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.919] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF", dwFileAttributes=0x80) returned 0 [0078.919] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00441_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.919] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.919] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.919] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.919] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.919] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF", dwFileAttributes=0x80) returned 0 [0078.920] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00442_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.920] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.920] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.920] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.920] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.920] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF", dwFileAttributes=0x80) returned 0 [0078.921] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00443_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.921] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.921] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.921] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.921] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.921] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF", dwFileAttributes=0x80) returned 0 [0078.921] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00444_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.922] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.922] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.922] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.922] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.922] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF", dwFileAttributes=0x80) returned 0 [0078.923] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00445_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.923] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.923] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.924] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.924] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.924] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF", dwFileAttributes=0x80) returned 0 [0078.924] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00453_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.925] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.925] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.925] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.925] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.925] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF", dwFileAttributes=0x80) returned 0 [0078.926] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01080_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.926] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.926] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.926] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.926] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.926] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF", dwFileAttributes=0x80) returned 0 [0078.927] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01603_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.927] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.927] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.928] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.928] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.928] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF", dwFileAttributes=0x80) returned 0 [0078.928] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01634_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.928] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.928] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.928] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.928] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.929] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF", dwFileAttributes=0x80) returned 0 [0078.929] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01635_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.929] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.929] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.929] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.930] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.931] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF", dwFileAttributes=0x80) returned 0 [0078.931] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01636_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.931] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.931] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.931] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.931] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.932] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF", dwFileAttributes=0x80) returned 0 [0078.932] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01637_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.932] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.932] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.933] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.933] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.933] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF", dwFileAttributes=0x80) returned 0 [0078.933] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01638_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.933] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.933] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.933] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.933] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.934] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF", dwFileAttributes=0x80) returned 0 [0078.934] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01639_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.934] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.934] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.934] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.934] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.935] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID", dwFileAttributes=0x80) returned 0 [0078.935] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\carbn_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.935] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.936] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.936] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.936] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.936] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF", dwFileAttributes=0x80) returned 0 [0078.937] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cg1606.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.937] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.937] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.937] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.937] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.937] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF", dwFileAttributes=0x80) returned 0 [0078.938] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic1.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.938] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.938] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.938] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.938] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.938] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF", dwFileAttributes=0x80) returned 0 [0078.938] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic2.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.939] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.939] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.939] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.939] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF", dwFileAttributes=0x80) returned 0 [0078.940] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\clip.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.940] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.940] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.940] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.940] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.941] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID", dwFileAttributes=0x80) returned 0 [0078.941] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cmnty_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.941] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.941] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.941] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.941] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.942] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF", dwFileAttributes=0x80) returned 0 [0078.942] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\crane.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.942] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.942] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.942] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.942] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.942] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF", dwFileAttributes=0x80) returned 0 [0078.943] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\craninst.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.943] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.943] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.943] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.943] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.943] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF", dwFileAttributes=0x80) returned 0 [0078.944] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cup.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.944] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.944] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.944] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.944] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.944] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF", dwFileAttributes=0x80) returned 0 [0078.944] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cupinst.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.945] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.945] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.945] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.945] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.945] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF", dwFileAttributes=0x80) returned 0 [0078.946] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00117_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.946] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.946] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.946] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.946] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.947] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF", dwFileAttributes=0x80) returned 0 [0078.947] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00121_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.947] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.947] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.948] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.948] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.948] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF", dwFileAttributes=0x80) returned 0 [0078.948] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00234_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.949] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.949] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.949] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.949] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF", dwFileAttributes=0x80) returned 0 [0078.950] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00255_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.951] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.951] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.951] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.951] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.951] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF", dwFileAttributes=0x80) returned 0 [0078.951] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00256_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.952] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.952] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.952] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.952] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.952] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF", dwFileAttributes=0x80) returned 0 [0078.952] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00261_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.952] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.952] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.953] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.953] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.953] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF", dwFileAttributes=0x80) returned 0 [0078.953] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00297_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.953] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.953] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.954] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.954] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.954] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF", dwFileAttributes=0x80) returned 0 [0078.954] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00372_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.954] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.954] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.954] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.955] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.955] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF", dwFileAttributes=0x80) returned 0 [0078.955] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00405_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.955] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.955] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.955] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.955] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.956] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF", dwFileAttributes=0x80) returned 0 [0078.956] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00407_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.956] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.956] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.956] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.956] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.957] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF", dwFileAttributes=0x80) returned 0 [0078.958] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00413_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.958] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.958] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.958] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.958] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.958] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF", dwFileAttributes=0x80) returned 0 [0078.959] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00414_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.959] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.959] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.960] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.960] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.960] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF", dwFileAttributes=0x80) returned 0 [0078.960] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00419_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.960] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.960] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.961] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.961] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.961] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF", dwFileAttributes=0x80) returned 0 [0078.961] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00437_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.961] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.961] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.961] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.961] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF", dwFileAttributes=0x80) returned 0 [0078.962] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00448_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.962] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.963] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.963] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.963] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.963] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF", dwFileAttributes=0x80) returned 0 [0078.963] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00449_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.964] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.964] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.964] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.964] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.964] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF", dwFileAttributes=0x80) returned 0 [0078.965] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00687_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.965] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.965] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.965] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.965] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF", dwFileAttributes=0x80) returned 0 [0078.966] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00705_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.966] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.966] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.966] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.966] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF", dwFileAttributes=0x80) returned 0 [0078.966] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01015_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.967] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.967] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.967] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.967] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.967] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF", dwFileAttributes=0x80) returned 0 [0078.967] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01039_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.968] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.968] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.968] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.969] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.969] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF", dwFileAttributes=0x80) returned 0 [0078.970] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01138_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.970] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.970] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.970] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.970] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF", dwFileAttributes=0x80) returned 0 [0078.971] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01139_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.971] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.971] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.971] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.971] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.971] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF", dwFileAttributes=0x80) returned 0 [0078.972] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01140_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.972] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.972] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.972] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.972] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF", dwFileAttributes=0x80) returned 0 [0078.973] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01143_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.973] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.973] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.974] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.974] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.974] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF", dwFileAttributes=0x80) returned 0 [0078.974] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01145_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.975] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.975] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.975] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.975] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF", dwFileAttributes=0x80) returned 0 [0078.975] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01146_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.976] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.976] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.976] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.976] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF", dwFileAttributes=0x80) returned 0 [0078.977] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01151_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.977] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.977] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.977] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.977] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF", dwFileAttributes=0x80) returned 0 [0078.978] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01152_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.978] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.978] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.978] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.978] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF", dwFileAttributes=0x80) returned 0 [0078.980] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01157_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.980] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.980] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.980] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.980] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.981] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF", dwFileAttributes=0x80) returned 0 [0078.981] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01160_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.981] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.981] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.982] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.982] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.982] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF", dwFileAttributes=0x80) returned 0 [0078.983] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01162_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.983] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.983] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.984] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.984] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.984] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF", dwFileAttributes=0x80) returned 0 [0078.985] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01163_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.985] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.985] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.985] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.985] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.986] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF", dwFileAttributes=0x80) returned 0 [0078.986] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01166_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.986] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.986] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.987] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.987] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF", dwFileAttributes=0x80) returned 0 [0078.987] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01167_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.987] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.987] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.988] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.988] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF", dwFileAttributes=0x80) returned 0 [0078.989] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01168_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.989] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.989] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.989] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.990] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF", dwFileAttributes=0x80) returned 0 [0078.990] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01169_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.990] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.990] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.991] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.991] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.991] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF", dwFileAttributes=0x80) returned 0 [0078.991] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01170_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.992] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.992] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.992] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.992] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF", dwFileAttributes=0x80) returned 0 [0078.993] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01171_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.996] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.996] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.997] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.997] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF", dwFileAttributes=0x80) returned 0 [0078.997] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01172_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.997] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.998] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.998] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.998] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.998] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF", dwFileAttributes=0x80) returned 0 [0078.998] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01173_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.999] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0078.999] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.999] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0078.999] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0078.999] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF", dwFileAttributes=0x80) returned 0 [0079.000] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01176_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0079.001] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0079.001] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0079.001] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0079.001] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0079.001] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF", dwFileAttributes=0x80) returned 0 [0079.002] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01178_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0079.002] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0079.002] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0079.002] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0079.002] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0079.003] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF", dwFileAttributes=0x80) returned 0 [0079.003] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01179_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0079.003] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0079.003] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0079.003] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0079.004] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0079.004] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF", dwFileAttributes=0x80) returned 0 [0079.005] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01180_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0079.005] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0079.005] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0079.005] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0079.005] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0079.006] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF", dwFileAttributes=0x80) returned 0 [0079.006] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01181_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0079.007] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0079.007] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0079.007] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0079.007] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0079.007] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF", dwFileAttributes=0x80) returned 0 [0079.007] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01182_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0079.008] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0079.008] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0079.008] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0079.008] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0079.008] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF", dwFileAttributes=0x80) returned 0 [0079.009] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01183_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0079.009] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0079.009] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0079.009] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0079.009] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0079.010] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF", dwFileAttributes=0x80) returned 0 [0079.010] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01186_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0079.010] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0079.010] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0079.011] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0079.011] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0079.011] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF", dwFileAttributes=0x80) returned 0 [0079.011] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01366_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0079.012] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0079.012] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0079.012] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0079.012] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0079.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF", dwFileAttributes=0x80) returned 0 [0079.013] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01434_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0079.013] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0079.013] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0079.013] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0079.013] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0079.014] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF", dwFileAttributes=0x80) returned 0 [0079.014] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01585_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0079.015] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0079.015] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0079.015] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0079.015] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0079.015] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF", dwFileAttributes=0x80) returned 0 [0079.016] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01586_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0079.017] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0079.017] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0079.017] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0079.017] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0079.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF", dwFileAttributes=0x80) returned 0 [0079.017] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01628_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0079.018] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0079.018] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0079.018] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0079.018] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0079.018] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF", dwFileAttributes=0x80) returned 0 [0079.019] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01629_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0079.019] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0079.019] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0079.019] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0079.020] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0079.020] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF", dwFileAttributes=0x80) returned 0 [0079.021] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01630_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0079.021] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0079.021] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0079.021] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0079.021] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0079.022] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF", dwFileAttributes=0x80) returned 0 [0079.022] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01631_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0079.022] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0079.022] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0079.022] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0079.022] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0079.023] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF", dwFileAttributes=0x80) returned 0 [0079.023] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01761_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0079.023] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0079.023] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0079.023] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0079.023] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0079.023] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF", dwFileAttributes=0x80) returned 0 [0079.024] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01772_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0079.024] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0079.024] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0079.024] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0079.024] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0079.024] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF", dwFileAttributes=0x80) returned 0 [0079.024] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01793_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0079.025] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0079.025] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0079.025] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0079.025] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0079.025] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID", dwFileAttributes=0x80) returned 0 [0079.025] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\east_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0079.026] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0079.026] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0079.026] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0079.027] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0079.027] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF", dwFileAttributes=0x80) returned 0 [0079.028] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00010_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0079.029] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0079.029] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0079.029] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0079.029] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0079.029] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF", dwFileAttributes=0x80) returned 0 [0079.030] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00019_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0079.030] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0079.030] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0079.030] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0079.030] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0079.031] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF", dwFileAttributes=0x80) returned 0 [0079.031] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00172_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0079.031] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0079.031] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0079.031] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0079.031] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0079.032] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF", dwFileAttributes=0x80) returned 0 [0079.032] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00184_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0079.032] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0079.033] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0079.033] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0079.033] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0079.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF", dwFileAttributes=0x80) returned 0 [0079.033] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00006_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0079.033] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0079.034] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0079.034] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0079.034] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0079.034] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF", dwFileAttributes=0x80) returned 0 [0079.035] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00202_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0079.035] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0079.035] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0079.035] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0080.353] SetLastError (dwErrCode=0x0) [0080.353] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.356] GetLastError () returned 0x5 [0080.356] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0080.356] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.357] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.357] SetLastError (dwErrCode=0x0) [0080.357] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.357] GetLastError () returned 0x5 [0080.357] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0080.357] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.357] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0810 [0080.357] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0080.357] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0080.357] SetLastError (dwErrCode=0x0) [0080.357] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.358] GetLastError () returned 0x5 [0080.358] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0080.358] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.358] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0450 [0080.359] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0080.359] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0080.359] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.360] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143743.GIF", dwFileAttributes=0x80) returned 0 [0080.363] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143743.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143743.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.364] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.364] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.364] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0080.364] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.364] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143744.GIF", dwFileAttributes=0x80) returned 0 [0080.365] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143744.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143744.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.365] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.365] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.366] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0080.366] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.366] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143745.GIF", dwFileAttributes=0x80) returned 0 [0080.366] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143745.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143745.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.366] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.367] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.367] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0080.367] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.367] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143746.GIF", dwFileAttributes=0x80) returned 0 [0080.368] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143746.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143746.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.368] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.368] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.368] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0080.368] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.369] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143748.GIF", dwFileAttributes=0x80) returned 0 [0080.369] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143748.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143748.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.369] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.369] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.370] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0080.370] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.370] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143749.GIF", dwFileAttributes=0x80) returned 0 [0080.371] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143749.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143749.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.371] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.371] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.372] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0080.372] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.372] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143750.GIF", dwFileAttributes=0x80) returned 0 [0080.372] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143750.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143750.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.373] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.373] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.373] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0080.373] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.373] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143752.GIF", dwFileAttributes=0x80) returned 0 [0080.374] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143752.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143752.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.374] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.374] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.374] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0080.374] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.375] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143753.GIF", dwFileAttributes=0x80) returned 0 [0080.375] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143753.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143753.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.375] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.375] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.375] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0080.375] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.376] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143754.GIF", dwFileAttributes=0x80) returned 0 [0080.377] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143754.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143754.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.377] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.377] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.378] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0080.378] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143758.GIF", dwFileAttributes=0x80) returned 0 [0080.379] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143758.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143758.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.379] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.379] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.379] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0080.379] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.380] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00516L.GIF", dwFileAttributes=0x80) returned 0 [0080.380] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00516L.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00516l.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.380] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.380] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.380] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0080.381] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.381] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00531L.GIF", dwFileAttributes=0x80) returned 0 [0080.381] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00531L.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00531l.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.381] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.382] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.382] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0080.382] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.382] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00673L.GIF", dwFileAttributes=0x80) returned 0 [0080.383] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00673L.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00673l.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.383] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.383] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.383] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0080.383] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.384] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00703L.GIF", dwFileAttributes=0x80) returned 0 [0080.384] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00703L.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00703l.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.384] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.384] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.384] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0080.385] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.385] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00760L.GIF", dwFileAttributes=0x80) returned 0 [0080.386] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00760L.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00760l.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.386] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.386] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.386] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0080.386] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.387] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00780L.GIF", dwFileAttributes=0x80) returned 0 [0080.387] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00780L.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00780l.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.387] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.387] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.388] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0080.388] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.388] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB01741L.GIF", dwFileAttributes=0x80) returned 0 [0080.389] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB01741L.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb01741l.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.389] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.389] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.390] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0080.390] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.390] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02039_.GIF", dwFileAttributes=0x80) returned 0 [0080.390] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02039_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02039_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.390] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.390] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.391] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0080.391] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.391] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02055_.GIF", dwFileAttributes=0x80) returned 0 [0080.391] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02055_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02055_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.392] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.392] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.392] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0080.392] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.393] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02073_.GIF", dwFileAttributes=0x80) returned 0 [0080.394] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02073_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02073_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.395] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.395] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.395] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0080.395] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02074_.GIF", dwFileAttributes=0x80) returned 0 [0080.396] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02074_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02074_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.396] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.396] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.396] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0080.396] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.397] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02077_.GIF", dwFileAttributes=0x80) returned 0 [0080.397] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02077_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02077_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.397] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.397] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.397] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0080.397] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.398] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02082_.GIF", dwFileAttributes=0x80) returned 0 [0080.398] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02082_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02082_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.398] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.398] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.398] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0080.398] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.399] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02085_.GIF", dwFileAttributes=0x80) returned 0 [0080.399] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02085_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02085_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.399] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.399] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.399] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0080.399] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.400] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02097_.GIF", dwFileAttributes=0x80) returned 0 [0080.400] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02097_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02097_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.401] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.401] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.401] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0080.401] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.401] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02106_.GIF", dwFileAttributes=0x80) returned 0 [0080.401] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02106_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02106_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.402] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.402] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.402] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0080.402] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.402] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02116_.GIF", dwFileAttributes=0x80) returned 0 [0080.403] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02116_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02116_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.403] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.403] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.403] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0080.403] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.403] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02134_.GIF", dwFileAttributes=0x80) returned 0 [0080.404] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02134_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02134_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.404] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.404] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.404] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0080.404] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.405] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02187_.GIF", dwFileAttributes=0x80) returned 0 [0080.405] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02187_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02187_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.406] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.406] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.406] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0080.406] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02198_.GIF", dwFileAttributes=0x80) returned 0 [0080.406] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02198_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02198_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.407] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.407] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.407] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0080.407] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.408] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02201_.GIF", dwFileAttributes=0x80) returned 0 [0080.408] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02201_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02201_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.408] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.408] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.408] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0080.408] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.409] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02214_.GIF", dwFileAttributes=0x80) returned 0 [0080.409] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02214_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02214_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.409] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.409] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.409] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0080.409] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.410] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02218_.GIF", dwFileAttributes=0x80) returned 0 [0080.410] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02218_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02218_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.410] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.410] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.410] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0080.410] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0080.411] SetLastError (dwErrCode=0x0) [0080.411] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.414] GetLastError () returned 0x5 [0080.414] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0080.415] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.415] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0080.415] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0080.415] SetLastError (dwErrCode=0x0) [0080.415] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.415] GetLastError () returned 0x5 [0080.415] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0080.415] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.415] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0080.415] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0080.415] SetLastError (dwErrCode=0x0) [0080.415] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.416] GetLastError () returned 0x5 [0080.416] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0080.416] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.416] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0080.416] SetLastError (dwErrCode=0x0) [0080.416] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.416] GetLastError () returned 0x5 [0080.416] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0080.416] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.416] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079a0e10 [0080.418] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.418] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.418] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.419] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Facet.thmx", dwFileAttributes=0x80) returned 0 [0080.419] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Facet.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\facet.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.419] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.419] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.419] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.419] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.420] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Gallery.thmx", dwFileAttributes=0x80) returned 0 [0080.421] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Gallery.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\gallery.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.421] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.421] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.421] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.422] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.422] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Integral.thmx", dwFileAttributes=0x80) returned 0 [0080.422] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Integral.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\integral.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.422] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.422] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.423] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.423] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.423] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Ion Boardroom.thmx", dwFileAttributes=0x80) returned 0 [0080.423] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Ion Boardroom.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\ion boardroom.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.423] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.423] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.424] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.424] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.424] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Ion.thmx", dwFileAttributes=0x80) returned 0 [0080.424] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Ion.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\ion.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.424] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.424] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.424] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.425] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.425] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Office Theme.thmx", dwFileAttributes=0x80) returned 0 [0080.425] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Office Theme.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\office theme.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.426] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.426] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.426] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.426] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.426] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Organic.thmx", dwFileAttributes=0x80) returned 0 [0080.427] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Organic.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\organic.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.427] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.427] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.427] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.427] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.427] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Retrospect.thmx", dwFileAttributes=0x80) returned 0 [0080.427] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Retrospect.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\retrospect.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.428] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.428] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.428] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.428] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.428] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Slice.thmx", dwFileAttributes=0x80) returned 0 [0080.429] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Slice.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\slice.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.429] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.429] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.429] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.430] SetLastError (dwErrCode=0x0) [0080.430] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.430] GetLastError () returned 0x5 [0080.430] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0080.430] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.431] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0ed0 [0080.432] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0080.432] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0080.432] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.432] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Aspect.xml", dwFileAttributes=0x80) returned 0 [0080.433] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Aspect.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\aspect.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.433] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.433] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.434] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0080.434] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.434] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue Green.xml", dwFileAttributes=0x80) returned 0 [0080.434] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue Green.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\blue green.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.434] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.434] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.435] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0080.435] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.435] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue II.xml", dwFileAttributes=0x80) returned 0 [0080.436] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue II.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\blue ii.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.436] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.436] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.436] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0080.436] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.436] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue Warm.xml", dwFileAttributes=0x80) returned 0 [0080.437] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue Warm.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\blue warm.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.437] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.437] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.437] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0080.437] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.437] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue.xml", dwFileAttributes=0x80) returned 0 [0080.437] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\blue.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.438] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.438] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.438] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0080.438] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.438] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Grayscale.xml", dwFileAttributes=0x80) returned 0 [0080.439] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Grayscale.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\grayscale.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.439] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.439] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.439] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0080.439] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.439] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Green Yellow.xml", dwFileAttributes=0x80) returned 0 [0080.440] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Green Yellow.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\green yellow.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.440] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.440] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.441] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0080.441] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.441] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Green.xml", dwFileAttributes=0x80) returned 0 [0080.441] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Green.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\green.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.441] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.441] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.442] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0080.442] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.442] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Marquee.xml", dwFileAttributes=0x80) returned 0 [0080.442] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Marquee.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\marquee.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.442] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.442] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.443] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0080.443] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.443] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Median.xml", dwFileAttributes=0x80) returned 0 [0080.443] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Median.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\median.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.443] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.443] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.443] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0080.443] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.444] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Office 2007 - 2010.xml", dwFileAttributes=0x80) returned 0 [0080.444] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Office 2007 - 2010.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\office 2007 - 2010.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.445] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.445] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.445] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0080.445] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.445] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Orange Red.xml", dwFileAttributes=0x80) returned 0 [0080.445] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Orange Red.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\orange red.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.446] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.446] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.446] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0080.446] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.446] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Orange.xml", dwFileAttributes=0x80) returned 0 [0080.446] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Orange.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\orange.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.447] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.447] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.447] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0080.447] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Paper.xml", dwFileAttributes=0x80) returned 0 [0080.447] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Paper.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\paper.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.448] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.448] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.448] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0080.448] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.448] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red Orange.xml", dwFileAttributes=0x80) returned 0 [0080.449] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red Orange.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\red orange.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.449] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.449] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.449] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0080.449] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red Violet.xml", dwFileAttributes=0x80) returned 0 [0080.450] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red Violet.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\red violet.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.450] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.450] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.450] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0080.451] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.451] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red.xml", dwFileAttributes=0x80) returned 0 [0080.451] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\red.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.451] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.451] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.451] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0080.451] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.452] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Slipstream.xml", dwFileAttributes=0x80) returned 0 [0080.452] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Slipstream.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\slipstream.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.452] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.453] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.453] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0080.453] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.453] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Violet II.xml", dwFileAttributes=0x80) returned 0 [0080.453] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Violet II.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\violet ii.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.453] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.454] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.454] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0080.454] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.455] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Violet.xml", dwFileAttributes=0x80) returned 0 [0080.455] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Violet.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\violet.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.455] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.455] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.455] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0080.455] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.456] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Yellow Orange.xml", dwFileAttributes=0x80) returned 0 [0080.456] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Yellow Orange.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\yellow orange.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.456] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.456] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.456] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0080.456] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.457] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Yellow.xml", dwFileAttributes=0x80) returned 0 [0080.457] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Yellow.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\yellow.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.457] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.457] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.457] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0080.457] FindClose (in: hFindFile=0xd7079a0ed0 | out: hFindFile=0xd7079a0ed0) returned 1 [0080.458] SetLastError (dwErrCode=0x0) [0080.458] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.460] GetLastError () returned 0x5 [0080.461] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0080.461] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.461] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.461] SetLastError (dwErrCode=0x0) [0080.461] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.461] GetLastError () returned 0x5 [0080.461] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0080.461] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.461] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0e70 [0080.463] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0080.463] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0080.463] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.463] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Banded Edge.eftx", dwFileAttributes=0x80) returned 0 [0080.464] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Banded Edge.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\banded edge.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.464] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.465] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.465] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0080.465] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.465] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Extreme Shadow.eftx", dwFileAttributes=0x80) returned 0 [0080.465] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Extreme Shadow.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\extreme shadow.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.466] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.466] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.466] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0080.466] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.466] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Frosted Glass.eftx", dwFileAttributes=0x80) returned 0 [0080.467] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Frosted Glass.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\frosted glass.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.467] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.467] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.467] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0080.467] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glossy.eftx", dwFileAttributes=0x80) returned 0 [0080.468] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glossy.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\glossy.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.469] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.469] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.469] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0080.469] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.470] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glow Edge.eftx", dwFileAttributes=0x80) returned 0 [0080.470] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glow Edge.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\glow edge.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.470] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.470] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.470] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0080.470] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.471] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Grunge Texture.eftx", dwFileAttributes=0x80) returned 0 [0080.472] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Grunge Texture.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\grunge texture.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.472] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.472] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.472] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0080.472] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.473] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Inset.eftx", dwFileAttributes=0x80) returned 0 [0080.473] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Inset.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\inset.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.473] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.473] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.474] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0080.474] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.474] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Milk Glass.eftx", dwFileAttributes=0x80) returned 0 [0080.475] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Milk Glass.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\milk glass.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.475] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.475] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.475] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0080.475] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.476] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Office 2007 - 2010.eftx", dwFileAttributes=0x80) returned 0 [0080.476] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Office 2007 - 2010.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\office 2007 - 2010.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.477] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.477] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.477] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0080.477] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.477] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Reflection.eftx", dwFileAttributes=0x80) returned 0 [0080.477] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Reflection.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\reflection.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.478] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.478] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.478] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0080.478] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.478] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Riblet.eftx", dwFileAttributes=0x80) returned 0 [0080.478] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Riblet.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\riblet.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.479] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.479] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.479] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0080.479] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.479] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Smokey Glass.eftx", dwFileAttributes=0x80) returned 0 [0080.479] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Smokey Glass.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\smokey glass.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.480] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.480] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.480] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0080.480] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.480] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Subtle Solids.eftx", dwFileAttributes=0x80) returned 0 [0080.481] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Subtle Solids.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\subtle solids.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.481] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.481] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.481] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0080.481] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Top Shadow.eftx", dwFileAttributes=0x80) returned 0 [0080.482] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Top Shadow.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\top shadow.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.482] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.482] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.482] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0080.482] FindClose (in: hFindFile=0xd7079a0e70 | out: hFindFile=0xd7079a0e70) returned 1 [0080.483] SetLastError (dwErrCode=0x0) [0080.483] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.487] GetLastError () returned 0x5 [0080.487] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0080.487] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.487] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.487] SetLastError (dwErrCode=0x0) [0080.487] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.488] GetLastError () returned 0x5 [0080.488] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0080.488] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.488] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0e70 [0080.490] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0080.490] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0080.490] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.491] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial Black-Arial.xml", dwFileAttributes=0x80) returned 0 [0080.491] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial Black-Arial.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\arial black-arial.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.491] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.491] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.492] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0080.492] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.492] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial-Times New Roman.xml", dwFileAttributes=0x80) returned 0 [0080.493] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial-Times New Roman.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\arial-times new roman.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.493] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.493] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.493] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0080.493] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.494] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial.xml", dwFileAttributes=0x80) returned 0 [0080.495] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\arial.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.495] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.495] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.495] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0080.495] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.495] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri Light-Constantia.xml", dwFileAttributes=0x80) returned 0 [0080.496] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri Light-Constantia.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\calibri light-constantia.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.496] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.496] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.496] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0080.496] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri-Cambria.xml", dwFileAttributes=0x80) returned 0 [0080.497] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri-Cambria.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\calibri-cambria.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.498] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.498] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.498] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0080.498] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri.xml", dwFileAttributes=0x80) returned 0 [0080.498] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\calibri.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.499] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.499] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.499] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0080.499] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Cambria.xml", dwFileAttributes=0x80) returned 0 [0080.500] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Cambria.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\cambria.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.500] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.500] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.500] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0080.500] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Candara.xml", dwFileAttributes=0x80) returned 0 [0080.501] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Candara.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\candara.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.501] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.501] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.501] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0080.501] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Gothic-Palatino Linotype.xml", dwFileAttributes=0x80) returned 0 [0080.502] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Gothic-Palatino Linotype.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\century gothic-palatino linotype.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.502] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.502] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.502] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0080.502] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.503] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Gothic.xml", dwFileAttributes=0x80) returned 0 [0080.503] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Gothic.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\century gothic.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.503] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.503] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.504] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0080.504] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Schoolbook.xml", dwFileAttributes=0x80) returned 0 [0080.504] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Schoolbook.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\century schoolbook.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.504] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.504] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.505] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0080.505] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Consolas-Verdana.xml", dwFileAttributes=0x80) returned 0 [0080.505] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Consolas-Verdana.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\consolas-verdana.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.505] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.505] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.506] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0080.506] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.506] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Constantia-Franklin Gothic Book.xml", dwFileAttributes=0x80) returned 0 [0080.507] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Constantia-Franklin Gothic Book.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\constantia-franklin gothic book.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.507] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.507] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.507] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0080.507] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.508] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Corbel.xml", dwFileAttributes=0x80) returned 0 [0080.508] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Corbel.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\corbel.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.508] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.508] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.508] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0080.508] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Franklin Gothic.xml", dwFileAttributes=0x80) returned 0 [0080.509] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Franklin Gothic.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\franklin gothic.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.510] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.510] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.510] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0080.510] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Garamond-TrebuchetMs.xml", dwFileAttributes=0x80) returned 0 [0080.511] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Garamond-TrebuchetMs.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\garamond-trebuchetms.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.511] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.511] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.511] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0080.511] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Garamond.xml", dwFileAttributes=0x80) returned 0 [0080.512] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Garamond.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\garamond.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.512] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.512] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.512] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0080.512] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.513] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Georgia.xml", dwFileAttributes=0x80) returned 0 [0080.513] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Georgia.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\georgia.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.513] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.513] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.514] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0080.514] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Gill Sans MT.xml", dwFileAttributes=0x80) returned 0 [0080.515] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Gill Sans MT.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\gill sans mt.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.515] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.515] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.515] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0080.515] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.515] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Office 2007 - 2010.xml", dwFileAttributes=0x80) returned 0 [0080.516] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Office 2007 - 2010.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\office 2007 - 2010.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.516] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.516] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.518] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0080.518] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.518] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Times New Roman-Arial.xml", dwFileAttributes=0x80) returned 0 [0080.518] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Times New Roman-Arial.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\times new roman-arial.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.519] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.519] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.519] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0080.519] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.519] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\TrebuchetMs.xml", dwFileAttributes=0x80) returned 0 [0080.520] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\TrebuchetMs.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\trebuchetms.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.520] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.520] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.520] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0080.520] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Tw Cen MT-Rockwell.xml", dwFileAttributes=0x80) returned 0 [0080.521] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Tw Cen MT-Rockwell.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\tw cen mt-rockwell.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.521] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.521] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.521] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0080.521] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.522] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Tw Cen MT.xml", dwFileAttributes=0x80) returned 0 [0080.523] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Tw Cen MT.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\tw cen mt.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.523] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.523] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.523] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0080.523] FindClose (in: hFindFile=0xd7079a0e70 | out: hFindFile=0xd7079a0e70) returned 1 [0080.524] SetLastError (dwErrCode=0x0) [0080.524] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.527] GetLastError () returned 0x5 [0080.527] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0080.527] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.527] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.527] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Wisp.thmx", dwFileAttributes=0x80) returned 0 [0080.528] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Wisp.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\wisp.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.528] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.528] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.528] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0080.529] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0080.529] SetLastError (dwErrCode=0x0) [0080.529] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.529] GetLastError () returned 0x5 [0080.529] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0080.529] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.529] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0080.529] SetLastError (dwErrCode=0x0) [0080.529] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.529] GetLastError () returned 0x5 [0080.529] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0080.529] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.529] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079a0e10 [0080.532] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.533] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.533] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.533] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.533] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.533] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.533] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.533] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.533] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.534] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.534] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.534] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.534] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.534] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.534] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.534] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.534] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.534] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.534] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.534] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.534] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.534] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.534] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.534] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.534] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.534] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.535] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.535] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.535] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.535] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.535] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.535] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.536] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\CommonSequencingProperties.xml", dwFileAttributes=0x80) returned 0 [0080.537] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\CommonSequencingProperties.xml" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\commonsequencingproperties.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.537] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.537] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.537] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.537] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.537] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.537] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.537] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.537] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.537] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.537] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.537] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.537] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.537] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.537] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.537] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.537] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.537] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.537] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.537] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0080.538] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0080.538] SetLastError (dwErrCode=0x0) [0080.538] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.542] GetLastError () returned 0x5 [0080.542] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0080.542] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.542] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0080.542] SetLastError (dwErrCode=0x0) [0080.542] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.542] GetLastError () returned 0x5 [0080.542] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0080.542] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.542] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079a08d0 [0080.544] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.544] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.544] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.544] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win10.mp4", dwFileAttributes=0x80) returned 0 [0080.544] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win10.mp4" (normalized: "c:\\program files\\microsoft office\\root\\fre\\startmenu_win10.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.545] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.545] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.545] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.545] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win10_RTL.mp4", dwFileAttributes=0x80) returned 0 [0080.545] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win10_RTL.mp4" (normalized: "c:\\program files\\microsoft office\\root\\fre\\startmenu_win10_rtl.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.546] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.546] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.546] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.546] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.546] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win7.wmv", dwFileAttributes=0x80) returned 0 [0080.547] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win7.wmv" (normalized: "c:\\program files\\microsoft office\\root\\fre\\startmenu_win7.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.547] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.547] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.547] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.547] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win7_RTL.wmv", dwFileAttributes=0x80) returned 0 [0080.548] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win7_RTL.wmv" (normalized: "c:\\program files\\microsoft office\\root\\fre\\startmenu_win7_rtl.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.548] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.548] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.549] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.549] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win8.mp4", dwFileAttributes=0x80) returned 0 [0080.549] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win8.mp4" (normalized: "c:\\program files\\microsoft office\\root\\fre\\startmenu_win8.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.549] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.549] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.550] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.550] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win8_RTL.mp4", dwFileAttributes=0x80) returned 0 [0080.550] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win8_RTL.mp4" (normalized: "c:\\program files\\microsoft office\\root\\fre\\startmenu_win8_rtl.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.550] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.550] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.551] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0080.551] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0080.551] SetLastError (dwErrCode=0x0) [0080.551] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\fre\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.554] GetLastError () returned 0x5 [0080.554] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0080.554] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.554] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0080.554] SetLastError (dwErrCode=0x0) [0080.554] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.554] GetLastError () returned 0x5 [0080.554] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0080.554] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.554] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079a0810 [0080.557] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.559] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.559] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RInt.16.msi", dwFileAttributes=0x80) returned 0 [0080.560] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RInt.16.msi" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rint.16.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.560] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.560] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.560] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.560] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.560] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RIntLoc.en-us.16.msi", dwFileAttributes=0x80) returned 0 [0080.561] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RIntLoc.en-us.16.msi" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rintloc.en-us.16.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.561] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.561] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.561] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.561] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.562] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0080.562] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.access.access.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.562] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.562] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.562] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.562] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.562] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.accessmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0080.563] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.accessmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.accessmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.563] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.563] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.563] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.563] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.accessmuiset.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0080.564] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.accessmuiset.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.accessmuiset.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.564] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.564] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.565] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.565] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.565] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0080.565] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.dcf.dcf.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.565] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.565] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.565] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.565] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.566] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.dcfmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0080.566] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.dcfmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.dcfmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.567] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.567] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.567] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.567] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.567] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0080.567] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.excel.excel.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.567] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.567] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.568] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.568] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.568] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.excelmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0080.568] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.excelmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.excelmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.568] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.568] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.568] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.569] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.569] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0080.569] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.groove.groove.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.569] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.569] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.569] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.569] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.570] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.groovemui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0080.570] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.groovemui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.groovemui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.570] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.570] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.570] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.570] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0080.571] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.lync.lync.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.571] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.571] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.571] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.571] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.lyncmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0080.572] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.lyncmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.lyncmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.572] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.572] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.572] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.572] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32mui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0080.573] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32mui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.office32mui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.573] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.573] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.573] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.573] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32ww.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0080.574] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32ww.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.office32ww.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.574] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.574] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.574] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.574] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.officemui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0080.575] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.officemui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.officemui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.575] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.575] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.575] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.575] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.576] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.officemuiset.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0080.576] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.officemuiset.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.officemuiset.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.577] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.577] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.577] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.577] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.577] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0080.577] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.onenote.onenote.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.577] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.577] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.578] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.578] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.onenotemui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0080.578] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.onenotemui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.onenotemui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.578] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.578] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.578] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.578] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.579] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0080.581] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.osm.osm.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.581] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.581] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.581] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.581] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.581] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0080.582] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.osmmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.582] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.582] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.582] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.582] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0080.583] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.osmux.osmux.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.583] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.584] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.584] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.584] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmuxmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0080.584] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmuxmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.osmuxmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.585] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.585] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.585] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.585] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.585] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0080.585] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.outlook.outlook.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.586] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.586] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.586] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.586] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.586] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.outlookmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0080.587] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.outlookmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.outlookmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.587] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.587] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.587] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.587] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0080.588] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.powerpivot.powerpivot.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.588] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.588] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.588] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.588] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.588] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0080.589] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.powerpoint.powerpoint.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.589] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.589] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.589] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.589] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.powerpointmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0080.589] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.powerpointmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.powerpointmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.590] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.590] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.590] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.590] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0080.590] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.project.project.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.590] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.590] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.591] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.591] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.591] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.projectmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0080.591] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.projectmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.projectmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.591] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.591] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.591] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.591] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0080.592] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.proof.culture.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.592] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.592] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.592] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.592] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.es-es.xml", dwFileAttributes=0x80) returned 0 [0080.593] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.es-es.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.proof.culture.msi.16.es-es.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.593] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.593] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.593] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.593] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml", dwFileAttributes=0x80) returned 0 [0080.594] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.proof.culture.msi.16.fr-fr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.594] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.594] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.594] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.594] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.proofing.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0080.596] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.proofing.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.proofing.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.597] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.597] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.597] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.597] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.597] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0080.597] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.publisher.publisher.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.598] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.598] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.598] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.598] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.598] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.publishermui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0080.598] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.publishermui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.publishermui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.598] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.598] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.599] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.599] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.599] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0080.599] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.shared.office.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.599] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.599] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.599] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.599] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.600] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0080.600] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.visio.visio.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.600] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.600] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.600] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.600] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.601] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.visiomui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0080.601] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.visiomui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.visiomui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.601] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.601] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.601] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.601] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.601] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0080.602] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.word.word.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.602] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.602] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.602] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.602] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.602] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.wordmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0080.603] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.wordmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.wordmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.603] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.603] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.603] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.603] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.603] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.603] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.603] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31927.msp", dwFileAttributes=0x80) returned 0 [0080.605] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31927.msp" (normalized: "c:\\program files\\microsoft office\\root\\integration\\qfe31927.msp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.605] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.605] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.605] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.605] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.605] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31928.msp", dwFileAttributes=0x80) returned 0 [0080.606] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31928.msp" (normalized: "c:\\program files\\microsoft office\\root\\integration\\qfe31928.msp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.606] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.606] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.606] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.606] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\SPPRedist.msi", dwFileAttributes=0x80) returned 0 [0080.607] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\SPPRedist.msi" (normalized: "c:\\program files\\microsoft office\\root\\integration\\sppredist.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.607] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.607] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.608] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0080.608] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0080.608] SetLastError (dwErrCode=0x0) [0080.608] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\integration\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.611] GetLastError () returned 0x5 [0080.611] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0080.611] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.611] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0080.611] SetLastError (dwErrCode=0x0) [0080.611] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.612] GetLastError () returned 0x5 [0080.612] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0080.612] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.612] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079a0ed0 [0080.612] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.612] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.612] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.613] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses\\c2rpridslicensefiles_auto.xml", dwFileAttributes=0x80) returned 0 [0080.613] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses\\c2rpridslicensefiles_auto.xml" (normalized: "c:\\program files\\microsoft office\\root\\licenses\\c2rpridslicensefiles_auto.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.613] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.613] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.613] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0080.614] FindClose (in: hFindFile=0xd7079a0ed0 | out: hFindFile=0xd7079a0ed0) returned 1 [0080.614] SetLastError (dwErrCode=0x0) [0080.614] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\licenses\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.614] GetLastError () returned 0x5 [0080.614] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0080.614] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.614] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0080.614] SetLastError (dwErrCode=0x0) [0080.614] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.614] GetLastError () returned 0x5 [0080.614] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0080.614] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.614] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079a0810 [0080.616] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.619] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.619] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019R_Grace-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.620] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019R_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\access2019r_grace-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.620] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.620] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.620] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.620] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.621] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019R_Grace-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.621] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019R_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\access2019r_grace-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.621] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.621] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.621] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.621] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019R_OEM_Perp-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.622] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019R_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\access2019r_oem_perp-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.622] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.622] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.622] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.622] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019R_OEM_Perp-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.623] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019R_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\access2019r_oem_perp-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.623] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.623] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.623] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.623] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.623] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019R_OEM_Perp-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.624] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019R_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\access2019r_oem_perp-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.624] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.624] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.624] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.624] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019R_OEM_Perp-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.625] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019R_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\access2019r_oem_perp-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.625] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.625] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.625] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.625] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019R_Retail-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.625] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019R_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\access2019r_retail-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.626] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.626] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.626] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.626] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.626] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019R_Retail-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.627] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019R_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\access2019r_retail-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.627] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.627] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.627] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.627] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019R_Retail-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.627] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019R_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\access2019r_retail-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.628] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.628] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.628] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.628] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019R_Retail-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.628] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019R_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\access2019r_retail-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.629] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.629] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.629] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.629] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019R_Trial-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.629] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019R_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\access2019r_trial-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.629] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.629] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.630] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.630] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.630] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019R_Trial-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.630] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019R_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\access2019r_trial-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.630] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.630] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.631] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.631] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.631] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019R_Trial-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.631] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019R_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\access2019r_trial-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.631] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.631] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.631] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.632] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019VL_KMS_Client_AE-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.632] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019VL_KMS_Client_AE-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\access2019vl_kms_client_ae-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.632] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.632] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.632] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.632] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019VL_KMS_Client_AE-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.633] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019VL_KMS_Client_AE-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\access2019vl_kms_client_ae-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.633] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.633] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.633] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.633] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.634] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019VL_KMS_Client_AE-ul.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.634] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019VL_KMS_Client_AE-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\access2019vl_kms_client_ae-ul.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.634] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.634] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.634] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.634] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019VL_MAK_AE-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.635] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019VL_MAK_AE-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\access2019vl_mak_ae-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.635] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.635] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.635] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.635] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019VL_MAK_AE-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.636] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019VL_MAK_AE-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\access2019vl_mak_ae-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.636] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.636] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.636] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.636] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019VL_MAK_AE-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.637] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019VL_MAK_AE-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\access2019vl_mak_ae-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.637] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.637] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.637] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.637] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.637] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019VL_MAK_AE-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.637] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019VL_MAK_AE-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\access2019vl_mak_ae-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.638] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.638] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.638] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.638] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.638] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessRuntime2019R_PrepidBypass-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.638] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessRuntime2019R_PrepidBypass-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessruntime2019r_prepidbypass-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.639] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.639] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.639] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.639] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessRuntime2019R_PrepidBypass-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.639] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessRuntime2019R_PrepidBypass-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessruntime2019r_prepidbypass-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.639] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.640] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.640] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.640] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.640] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessRuntimeR_PrepidBypass-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.640] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessRuntimeR_PrepidBypass-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessruntimer_prepidbypass-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.640] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.640] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.641] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.641] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.641] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessRuntimeR_PrepidBypass-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.642] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessRuntimeR_PrepidBypass-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessruntimer_prepidbypass-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.642] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.642] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.643] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.645] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.646] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_grace-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.646] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.646] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.646] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.646] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.647] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.647] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.647] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.647] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.647] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.648] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.648] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_oem_perp-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.648] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.648] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.648] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.648] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.649] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.649] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_oem_perp-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.649] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.649] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.649] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.649] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.650] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.650] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_oem_perp-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.650] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.650] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.650] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.650] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.651] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_oem_perp-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.651] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.651] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.651] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.651] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.652] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_retail-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.652] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.652] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.652] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.652] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.652] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.653] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_retail-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.653] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.653] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.653] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.653] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.653] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.654] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_retail-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.654] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.654] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.654] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.654] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.654] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.655] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_retail-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.655] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.655] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.655] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.655] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.655] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_trial-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.656] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.656] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.656] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.656] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.656] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_trial-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.657] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.657] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.657] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.657] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.658] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_trial-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.658] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.658] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.658] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.658] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.659] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_kms_client-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.659] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.659] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.659] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.659] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.660] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_kms_client-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.660] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.660] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.660] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.660] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.660] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.661] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_kms_client-ul.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.661] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.661] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.661] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.661] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.661] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_mak-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.662] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.662] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.662] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.662] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.662] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_mak-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.662] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.663] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.663] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.663] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.663] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.663] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_mak-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.663] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.663] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.664] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.664] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.664] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_mak-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.664] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.664] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.665] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.665] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.665] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\c2rpridslicensefiles_auto.xml", dwFileAttributes=0x80) returned 0 [0080.666] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\c2rpridslicensefiles_auto.xml" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\c2rpridslicensefiles_auto.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.666] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.666] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.666] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.666] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-bridge-office.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.667] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-bridge-office.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-bridge-office.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.667] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.667] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.667] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.667] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root-bridge-test.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.668] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root-bridge-test.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-root-bridge-test.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.668] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.668] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.668] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.668] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.669] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.669] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-root.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.669] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.669] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.669] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.669] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.670] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-stil.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.670] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-stil.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-stil.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.670] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.670] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.670] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.670] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.670] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.671] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.671] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.671] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.671] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.677] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.678] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-ul.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.678] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.678] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.678] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.678] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.679] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_grace-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.679] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.679] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.679] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.679] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.680] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.680] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.680] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.680] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.680] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.680] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.680] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_oem_perp-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.681] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.681] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.681] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.681] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.681] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_oem_perp-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.682] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.682] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.682] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.682] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.682] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.682] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_oem_perp-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.682] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.682] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.683] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.683] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.683] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.683] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_oem_perp-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.683] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.683] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.683] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.684] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.684] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.684] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_retail-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.684] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.684] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.684] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.684] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.685] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.685] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_retail-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.686] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.686] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.686] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.686] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.686] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.686] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_retail-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.686] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.687] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.687] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.687] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.687] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_retail-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.687] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.687] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.688] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.688] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.688] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.688] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_trial-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.689] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.689] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.689] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.689] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.689] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_trial-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.689] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.690] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.690] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.690] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.690] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_trial-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.690] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.690] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.691] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.691] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.691] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_kms_client-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.691] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.691] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.691] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.692] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.692] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_kms_client-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.692] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.692] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.692] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.692] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.693] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.693] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_kms_client-ul.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.693] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.693] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.693] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.693] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.693] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.694] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_mak-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.694] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.694] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.694] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.694] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.695] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_mak-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.695] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.695] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.695] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.695] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.696] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_mak-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.696] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.696] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.696] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.696] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.696] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.697] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_mak-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.697] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.697] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.697] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.697] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial365-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.698] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial365-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessdemor_bypasstrial365-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.698] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.698] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.698] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.698] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.698] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial365-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.698] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial365-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessdemor_bypasstrial365-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.699] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.699] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.699] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.699] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcDemoR_BypassTrial365-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.699] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcDemoR_BypassTrial365-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcdemor_bypasstrial365-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.699] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.700] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.700] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.700] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcDemoR_BypassTrial365-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.700] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcDemoR_BypassTrial365-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcdemor_bypasstrial365-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.700] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.700] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.701] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.701] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.701] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_grace-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.701] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.701] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.701] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.708] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.708] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.708] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.709] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.709] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.709] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.709] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.709] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.709] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_oem_perp-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.710] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.710] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.710] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.710] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.710] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.710] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_oem_perp-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.710] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.711] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.711] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.711] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.711] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_oem_perp-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.711] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.711] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.712] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.712] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.712] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.712] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_oem_perp-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.712] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.712] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.712] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.712] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.713] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_grace-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.713] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.713] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.713] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.713] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.714] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.714] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.714] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.714] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.714] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.714] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.714] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.715] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.715] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.715] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.715] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.715] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.716] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.716] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.716] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.716] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.716] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.716] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.716] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.717] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.717] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.717] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.717] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.717] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.717] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.717] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.717] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.718] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.718] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.718] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp2-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.718] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.718] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.719] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.719] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.719] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp2-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.720] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.720] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.720] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.720] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.720] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.721] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp2-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.721] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.721] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.721] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.721] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.722] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.722] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp2-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.722] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.722] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.723] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.723] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.723] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp3-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.724] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.724] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.724] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.724] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.725] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp3-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.725] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.725] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.725] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.725] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.726] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp3-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.726] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.726] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.726] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.726] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.727] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp3-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.727] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.727] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.727] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.727] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.727] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.727] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp4-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.728] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.728] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.728] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.728] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.728] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp4-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.729] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.729] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.729] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.729] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp4-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.729] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.729] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.730] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.730] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.730] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp4-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.730] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.730] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.731] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.731] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.731] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.731] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.731] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.732] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.737] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.738] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.738] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.738] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.738] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.738] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.738] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.739] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.739] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.739] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.739] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.739] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.740] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.740] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.740] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.740] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.740] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.741] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail2-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.741] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.741] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.741] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.741] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.741] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail2-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.742] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.742] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.742] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.742] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.742] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail2-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.743] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.743] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.743] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.743] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.743] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.743] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail2-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.743] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.743] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.744] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.744] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.744] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail3-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.744] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.744] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.745] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.745] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.745] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail3-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.745] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.745] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.745] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.746] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.746] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail3-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.746] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.746] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.746] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.746] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.747] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.747] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail3-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.747] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.747] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.747] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.747] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.748] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.748] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.748] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.748] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.748] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.748] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.749] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.749] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.749] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.749] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.749] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.750] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.750] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.750] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.750] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.750] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.779] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.780] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial2-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.780] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.780] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.780] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.780] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.781] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial2-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.781] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.781] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.781] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.781] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.782] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial2-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.782] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.782] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.782] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.782] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.783] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentdemor_bypasstrial180-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.783] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.783] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.783] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.783] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.784] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentdemor_bypasstrial180-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.784] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.784] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.784] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.784] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.785] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_grace-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.785] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.785] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.785] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.785] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.785] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.785] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.786] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.786] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.786] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.786] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.786] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.786] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_oem_perp-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.787] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.787] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.787] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.787] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.787] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.787] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_oem_perp-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.788] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.788] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.788] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.788] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.788] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_oem_perp-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.788] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.789] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.789] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.794] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.794] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.794] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_oem_perp-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.795] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.795] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.795] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.795] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.795] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_retail-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.796] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.796] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.796] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.796] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.796] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_retail-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.796] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.797] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.797] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.797] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.797] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.797] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_retail-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.798] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.798] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.798] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.798] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.798] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.798] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_retail-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.799] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.799] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.799] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.799] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.799] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.799] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.800] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.800] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.800] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.800] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.800] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.800] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.801] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.801] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.801] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.801] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.801] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.802] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.802] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.802] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.802] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.802] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.802] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial2-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.802] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.803] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.803] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.803] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.803] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial2-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.803] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.803] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.804] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.804] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.804] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.804] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial2-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.804] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.804] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.805] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.805] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentVNextR_Grace-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.805] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentVNextR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentvnextr_grace-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.805] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.805] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.805] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.806] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentVNextR_Grace-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.806] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentVNextR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentvnextr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.806] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.806] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.806] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.806] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.807] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentVNextR_Retail-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.807] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentVNextR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentvnextr_retail-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.807] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.807] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.807] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.807] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentVNextR_Retail-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.808] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentVNextR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentvnextr_retail-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.808] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.808] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.808] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.808] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentVNextR_Retail-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.809] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentVNextR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentvnextr_retail-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.809] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.809] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.809] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.809] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.810] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentVNextR_Retail-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.810] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentVNextR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentvnextr_retail-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.810] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.810] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.810] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.810] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.811] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentVNextR_Trial-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.811] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentVNextR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentvnextr_trial-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.811] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.811] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.812] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.812] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.812] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentVNextR_Trial-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.812] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentVNextR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentvnextr_trial-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.812] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.812] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.813] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.813] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.813] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentVNextR_Trial-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.813] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentVNextR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentvnextr_trial-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.814] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.814] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.814] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.814] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.815] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_bypasstrial180-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.815] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.815] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.815] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.815] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.816] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_bypasstrial180-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.816] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.816] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.816] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.816] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_ConsumerSub_Bypass30-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.817] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_ConsumerSub_Bypass30-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_consumersub_bypass30-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.817] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.817] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.817] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.817] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_ConsumerSub_Bypass30-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.818] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_ConsumerSub_Bypass30-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_consumersub_bypass30-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.818] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.818] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.818] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.823] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.824] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_EnterpriseSub_Bypass30-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.824] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_EnterpriseSub_Bypass30-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_enterprisesub_bypass30-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.824] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.824] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.824] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.824] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.825] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_EnterpriseSub_Bypass30-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.825] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_EnterpriseSub_Bypass30-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_enterprisesub_bypass30-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.825] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.825] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.825] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.825] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.826] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_grace-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.826] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.826] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.826] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.826] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.827] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_grace-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.827] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.827] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.827] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.827] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.827] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.828] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_kms_automation-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.828] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.828] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.828] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.828] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.828] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.829] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_kms_automation-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.829] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.829] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.830] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.830] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.830] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_kms_automation-ul.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.830] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.830] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.831] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.831] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_O16ConsumerPerp_Bypass30-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.831] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_O16ConsumerPerp_Bypass30-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_o16consumerperp_bypass30-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.831] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.831] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.832] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.832] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_O16ConsumerPerp_Bypass30-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.832] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_O16ConsumerPerp_Bypass30-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_o16consumerperp_bypass30-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.832] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.832] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.833] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.833] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_O16EnterpriseVL_Bypass30-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.833] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_O16EnterpriseVL_Bypass30-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_o16enterprisevl_bypass30-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.833] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.833] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.833] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.833] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_O16EnterpriseVL_Bypass30-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.834] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_O16EnterpriseVL_Bypass30-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_o16enterprisevl_bypass30-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.834] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.834] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.834] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.834] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_O17EnterpriseVL_Bypass30-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.835] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_O17EnterpriseVL_Bypass30-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_o17enterprisevl_bypass30-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.835] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.835] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.835] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.835] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_O17EnterpriseVL_Bypass30-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.836] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_O17EnterpriseVL_Bypass30-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_o17enterprisevl_bypass30-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.836] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.836] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.836] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.836] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.837] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_oem_perp-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.837] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.837] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.837] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.837] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.838] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_oem_perp-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.838] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.838] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.838] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.838] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.838] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_oem_perp-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.839] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.839] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.839] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.839] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.839] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_oem_perp-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.840] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.840] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.840] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.840] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.840] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_retail-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.840] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.841] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.841] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.841] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.841] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_retail-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.841] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.841] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.842] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.842] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.842] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_retail-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.842] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.842] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.842] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.843] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.843] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.843] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_retail-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.843] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.843] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.844] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.844] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.844] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.845] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.845] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.845] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.845] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.846] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.846] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.846] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.846] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.846] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.847] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.847] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.847] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.847] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.847] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.848] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription2-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.848] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.848] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.849] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.854] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.854] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription2-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.855] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.855] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.855] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.855] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.856] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription2-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.856] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.856] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.856] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.856] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.857] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.857] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.857] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.858] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.858] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.858] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.859] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.859] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.859] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.859] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.859] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.860] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.860] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.860] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.860] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.860] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.861] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.861] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest2-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.861] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.861] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.862] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.862] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.862] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest2-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.863] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.863] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.863] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.863] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.863] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.864] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest2-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.864] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.864] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.864] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.864] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.865] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.865] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.865] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.865] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.865] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.866] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.866] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.866] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.866] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.866] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.867] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.867] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.867] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.868] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.868] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.868] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.868] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.868] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.869] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial2-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.869] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.869] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.869] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.869] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.870] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.870] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial2-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.870] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.870] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.870] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.871] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.871] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.871] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial2-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.871] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.871] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.872] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.872] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.872] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_trial-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.872] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.873] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.873] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.873] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.873] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_trial-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.874] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.874] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.874] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.874] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.875] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_trial-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.875] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.875] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.875] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.875] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_ViewOnly_ZeroGrace-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.885] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_ViewOnly_ZeroGrace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_viewonly_zerograce-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.885] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.885] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.885] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.885] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_ViewOnly_ZeroGrace-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.886] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_ViewOnly_ZeroGrace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_viewonly_zerograce-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.886] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.886] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.887] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.887] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.887] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_kms_client-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.888] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.888] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.888] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.888] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.888] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.889] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_kms_client-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.889] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.889] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.889] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.889] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.890] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_kms_client-ul.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.890] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.890] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.891] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.891] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.892] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_mak-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.892] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.892] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.892] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.892] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.893] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_mak-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.893] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.893] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.894] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.894] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.894] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_mak-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.895] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.895] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.895] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.895] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.896] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_mak-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.896] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.896] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.896] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.901] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessDemoR_BypassTrial365-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.902] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessDemoR_BypassTrial365-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessdemor_bypasstrial365-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.903] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.903] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.903] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.903] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.903] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessDemoR_BypassTrial365-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.904] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessDemoR_BypassTrial365-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessdemor_bypasstrial365-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.904] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.904] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.904] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.904] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.905] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.905] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_grace-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.905] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.905] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.905] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.905] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.906] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.906] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.906] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.907] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.909] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.909] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.909] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.909] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subscription-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.910] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.910] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.910] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.910] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.910] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.911] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subscription-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.911] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.911] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.911] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.911] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.912] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.912] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subscription-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.912] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.912] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.913] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.913] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.913] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.913] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtest-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.913] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.914] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.914] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.914] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.914] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.914] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtest-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.915] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.915] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.915] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.915] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.915] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.916] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtest-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.916] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.916] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.916] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.916] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.917] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.917] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtrial-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.917] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.917] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.918] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.918] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.918] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.918] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtrial-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.919] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.919] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.919] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.919] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.919] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.920] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtrial-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.920] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.920] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.920] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.920] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.920] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365EduCloudEDUR_Grace-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.922] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365EduCloudEDUR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365educloudedur_grace-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.922] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.922] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.922] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.922] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.923] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365EduCloudEDUR_Grace-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.923] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365EduCloudEDUR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365educloudedur_grace-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.923] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.923] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.923] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.923] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.924] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365EduCloudEDUR_Subscription-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.924] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365EduCloudEDUR_Subscription-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365educloudedur_subscription-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.925] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.925] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.925] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.925] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.925] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365EduCloudEDUR_Subscription-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.925] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365EduCloudEDUR_Subscription-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365educloudedur_subscription-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.926] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.926] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.926] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.926] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.926] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365EduCloudEDUR_Subscription-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.926] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365EduCloudEDUR_Subscription-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365educloudedur_subscription-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.927] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.927] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.927] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.927] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.927] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365EduCloudEDUR_SubTrial-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.928] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365EduCloudEDUR_SubTrial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365educloudedur_subtrial-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.928] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.928] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.928] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.928] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.929] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365EduCloudEDUR_SubTrial-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.929] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365EduCloudEDUR_SubTrial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365educloudedur_subtrial-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.929] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.929] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.929] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.930] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.930] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365EduCloudEDUR_SubTrial-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.930] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365EduCloudEDUR_SubTrial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365educloudedur_subtrial-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.931] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.931] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.931] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.931] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.931] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial365-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.931] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial365-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremdemor_bypasstrial365-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.932] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.932] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.932] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.932] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.933] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial365-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.933] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial365-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremdemor_bypasstrial365-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.933] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.933] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.934] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.934] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.934] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.934] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_grace-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.935] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.935] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.935] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.943] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.943] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.944] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.944] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.944] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.944] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.944] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.945] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.945] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription1-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.945] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.945] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.945] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.945] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.946] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription1-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.946] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.946] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.946] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.946] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.947] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.947] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription1-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.947] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.947] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.947] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.947] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.948] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.948] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription2-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.948] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.948] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.948] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.948] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.949] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription2-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.949] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.949] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.949] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.949] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.950] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription2-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.950] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.950] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.950] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.950] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.950] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.951] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription3-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.951] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.951] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.951] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.951] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.951] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.951] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription3-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.952] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.952] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.952] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.952] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.952] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.952] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription3-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.953] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.953] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.953] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.953] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.953] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.953] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription4-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.954] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.954] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.954] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.954] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.954] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.955] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription4-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.955] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.955] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.955] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.955] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.955] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.956] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription4-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.956] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.956] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.956] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.956] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.956] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.956] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription5-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.957] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.957] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.957] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.957] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.957] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.957] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription5-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.958] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.958] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.958] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.958] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.958] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.958] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription5-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.959] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.959] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.959] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.959] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.959] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.959] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest1-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.960] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.960] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.960] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.960] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.960] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.961] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest1-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.961] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.961] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.961] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.961] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.962] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest1-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.962] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.962] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.962] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.962] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.963] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.963] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest2-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.963] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.963] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.964] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.964] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.964] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.964] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest2-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.964] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.964] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.964] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.964] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.965] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest2-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.965] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.965] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.965] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.965] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.966] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest3-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.966] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.966] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.966] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.966] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.967] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.967] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest3-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.967] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.967] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.967] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.974] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.974] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.975] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest3-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.975] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.975] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.975] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0080.975] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0080.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest4-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0080.976] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest4-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest4-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.976] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0080.976] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.976] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0081.603] SetLastError (dwErrCode=0x0) [0081.603] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.608] GetLastError () returned 0x5 [0081.608] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0081.608] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.608] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0081.608] SetLastError (dwErrCode=0x0) [0081.608] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.608] GetLastError () returned 0x5 [0081.608] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0081.608] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.608] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\loc\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079a08d0 [0081.609] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0081.609] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0081.609] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\loc\\AppXManifestLoc.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0081.612] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\loc\\AppXManifestLoc.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\loc\\appxmanifestloc.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.613] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.613] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.614] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0081.614] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0081.614] SetLastError (dwErrCode=0x0) [0081.614] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\loc\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\loc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.614] GetLastError () returned 0x5 [0081.614] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0081.614] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.614] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0081.614] SetLastError (dwErrCode=0x0) [0081.614] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.615] GetLastError () returned 0x5 [0081.615] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0081.615] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.615] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079a0e10 [0081.616] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0081.616] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0081.616] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0081.616] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0081.616] SetLastError (dwErrCode=0x0) [0081.616] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.617] GetLastError () returned 0x5 [0081.617] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0081.617] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.617] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0e70 [0081.619] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.621] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.621] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.621] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\accessmui.msi.16_accessmui.mcxml", dwFileAttributes=0x80) returned 0 [0081.622] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\accessmui.msi.16_accessmui.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\accessmui.msi.16_accessmui.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.622] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.622] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.623] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.623] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.623] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\accessmuiset.msi.16_accessmuiset.mcxml", dwFileAttributes=0x80) returned 0 [0081.624] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\accessmuiset.msi.16_accessmuiset.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\accessmuiset.msi.16_accessmuiset.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.624] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.624] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.624] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.624] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\branding.mcxml", dwFileAttributes=0x80) returned 0 [0081.625] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\branding.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\branding.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.626] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.626] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.626] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.626] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.626] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\dcfmui.msi.16_dcfmui.mcxml", dwFileAttributes=0x80) returned 0 [0081.627] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\dcfmui.msi.16_dcfmui.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\dcfmui.msi.16_dcfmui.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.627] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.627] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.627] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.627] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\excelmui.msi.16_excelmui.mcxml", dwFileAttributes=0x80) returned 0 [0081.628] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\excelmui.msi.16_excelmui.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\excelmui.msi.16_excelmui.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.628] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.628] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.629] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.629] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\groovemui.msi.16_groovemui.mcxml", dwFileAttributes=0x80) returned 0 [0081.629] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\groovemui.msi.16_groovemui.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\groovemui.msi.16_groovemui.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.629] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.630] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.630] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.630] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.630] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\lyncmui.msi.16_lyncmui.mcxml", dwFileAttributes=0x80) returned 0 [0081.630] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\lyncmui.msi.16_lyncmui.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\lyncmui.msi.16_lyncmui.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.631] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.631] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.631] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.631] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.631] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\office32mui.msi.16_office32mui.mcxml", dwFileAttributes=0x80) returned 0 [0081.632] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\office32mui.msi.16_office32mui.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\office32mui.msi.16_office32mui.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.632] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.632] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.633] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.633] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\officemui.msi.16_AppXManifestLoc.mcxml", dwFileAttributes=0x80) returned 0 [0081.634] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\officemui.msi.16_AppXManifestLoc.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\officemui.msi.16_appxmanifestloc.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.635] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.635] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.635] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.635] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\officemui.msi.16_officemui.mcxml", dwFileAttributes=0x80) returned 0 [0081.636] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\officemui.msi.16_officemui.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\officemui.msi.16_officemui.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.636] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.636] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.636] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.636] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.637] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\officemui.msi.16_PostCommon.Office.MUI.mcxml", dwFileAttributes=0x80) returned 0 [0081.637] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\officemui.msi.16_PostCommon.Office.MUI.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\officemui.msi.16_postcommon.office.mui.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.637] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.637] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.638] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.638] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.638] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\officemuiset.msi.16_officemuiset.mcxml", dwFileAttributes=0x80) returned 0 [0081.638] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\officemuiset.msi.16_officemuiset.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\officemuiset.msi.16_officemuiset.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.638] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.638] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.639] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.639] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\onenotemui.msi.16_onenotemui.mcxml", dwFileAttributes=0x80) returned 0 [0081.640] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\onenotemui.msi.16_onenotemui.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\onenotemui.msi.16_onenotemui.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.640] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.640] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.640] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.640] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.640] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\osmmui.msi.16_osmmui.mcxml", dwFileAttributes=0x80) returned 0 [0081.641] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\osmmui.msi.16_osmmui.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\osmmui.msi.16_osmmui.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.641] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.641] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.641] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.641] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\osmuxmui.msi.16_osmuxmui.mcxml", dwFileAttributes=0x80) returned 0 [0081.642] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\osmuxmui.msi.16_osmuxmui.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\osmuxmui.msi.16_osmuxmui.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.642] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.642] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.642] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.642] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\outlookmui.msi.16_outlookmui.mcxml", dwFileAttributes=0x80) returned 0 [0081.643] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\outlookmui.msi.16_outlookmui.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\outlookmui.msi.16_outlookmui.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.643] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.643] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.644] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.644] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.644] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\powerpointmui.msi.16_powerpointmui.mcxml", dwFileAttributes=0x80) returned 0 [0081.644] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\powerpointmui.msi.16_powerpointmui.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\powerpointmui.msi.16_powerpointmui.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.644] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.644] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.644] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.645] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.645] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\projectmui.msi.16_projectmui.mcxml", dwFileAttributes=0x80) returned 0 [0081.645] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\projectmui.msi.16_projectmui.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\projectmui.msi.16_projectmui.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.645] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.645] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.645] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.645] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\Proof.Culture.msi.16_proof.mcxml", dwFileAttributes=0x80) returned 0 [0081.646] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\Proof.Culture.msi.16_proof.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\proof.culture.msi.16_proof.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.646] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.646] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.646] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.646] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\proofing.msi.16_proofing.mcxml", dwFileAttributes=0x80) returned 0 [0081.647] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\proofing.msi.16_proofing.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\proofing.msi.16_proofing.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.647] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.647] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.647] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.647] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\publishermui.msi.16_publishermui.mcxml", dwFileAttributes=0x80) returned 0 [0081.648] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\publishermui.msi.16_publishermui.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\publishermui.msi.16_publishermui.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.648] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.648] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.648] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.648] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.648] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\visiomui.msi.16_visiomui.mcxml", dwFileAttributes=0x80) returned 0 [0081.649] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\visiomui.msi.16_visiomui.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\visiomui.msi.16_visiomui.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.649] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.649] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.649] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.649] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.649] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\wordmui.msi.16_wordmui.mcxml", dwFileAttributes=0x80) returned 0 [0081.650] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\wordmui.msi.16_wordmui.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\wordmui.msi.16_wordmui.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.650] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.650] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.651] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0081.651] FindClose (in: hFindFile=0xd7079a0e70 | out: hFindFile=0xd7079a0e70) returned 1 [0081.651] SetLastError (dwErrCode=0x0) [0081.651] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.654] GetLastError () returned 0x5 [0081.654] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0081.654] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.654] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0081.654] SetLastError (dwErrCode=0x0) [0081.654] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.655] GetLastError () returned 0x5 [0081.655] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0081.655] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.655] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\es-es\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0e70 [0081.655] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.655] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.655] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\es-es\\Proof.Culture.msi.16_proof.mcxml", dwFileAttributes=0x80) returned 0 [0081.656] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\es-es\\Proof.Culture.msi.16_proof.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\es-es\\proof.culture.msi.16_proof.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.656] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.656] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.656] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0081.656] FindClose (in: hFindFile=0xd7079a0e70 | out: hFindFile=0xd7079a0e70) returned 1 [0081.656] SetLastError (dwErrCode=0x0) [0081.656] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\es-es\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\es-es\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.656] GetLastError () returned 0x5 [0081.656] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0081.656] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.656] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0081.657] SetLastError (dwErrCode=0x0) [0081.657] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.657] GetLastError () returned 0x5 [0081.657] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0081.657] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.657] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\fr-fr\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0810 [0081.658] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.658] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.658] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\fr-fr\\Proof.Culture.msi.16_proof.mcxml", dwFileAttributes=0x80) returned 0 [0081.660] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\fr-fr\\Proof.Culture.msi.16_proof.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\fr-fr\\proof.culture.msi.16_proof.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.660] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.660] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.661] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0081.661] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0081.661] SetLastError (dwErrCode=0x0) [0081.661] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\fr-fr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\fr-fr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.661] GetLastError () returned 0x5 [0081.661] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0081.661] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.661] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0081.661] SetLastError (dwErrCode=0x0) [0081.661] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.661] GetLastError () returned 0x5 [0081.661] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0081.661] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.661] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a08d0 [0081.664] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.665] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.665] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.665] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Access.x-none.msi.16_mondoww.mcxml", dwFileAttributes=0x80) returned 0 [0081.666] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Access.x-none.msi.16_mondoww.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\access.x-none.msi.16_mondoww.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.666] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.666] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.667] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.667] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\AppLocalCRT.x-none.msi.16_AppLocalConditionalCRT.mcxml", dwFileAttributes=0x80) returned 0 [0081.668] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\AppLocalCRT.x-none.msi.16_AppLocalConditionalCRT.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\applocalcrt.x-none.msi.16_applocalconditionalcrt.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.668] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.668] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.668] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.668] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\AppLocalCRT32.x-none.msi.16_AppLocalConditionalCRTCrossBitness.mcxml", dwFileAttributes=0x80) returned 0 [0081.668] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\AppLocalCRT32.x-none.msi.16_AppLocalConditionalCRTCrossBitness.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\applocalcrt32.x-none.msi.16_applocalconditionalcrtcrossbitness.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.669] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.669] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.669] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.669] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.669] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\AppLocalUCRT.x-none.msi.16_AppLocalConditionalUCRT.mcxml", dwFileAttributes=0x80) returned 0 [0081.670] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\AppLocalUCRT.x-none.msi.16_AppLocalConditionalUCRT.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\applocalucrt.x-none.msi.16_applocalconditionalucrt.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.670] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.670] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.670] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.670] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.670] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\AppLocalUCRT32.x-none.msi.16_AppLocalConditionalUCRTCrossBitness.mcxml", dwFileAttributes=0x80) returned 0 [0081.671] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\AppLocalUCRT32.x-none.msi.16_AppLocalConditionalUCRTCrossBitness.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\applocalucrt32.x-none.msi.16_applocalconditionalucrtcrossbitness.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.671] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.671] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.672] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.672] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.672] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\DCF.x-none.msi.16_mondoww.mcxml", dwFileAttributes=0x80) returned 0 [0081.672] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\DCF.x-none.msi.16_mondoww.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\dcf.x-none.msi.16_mondoww.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.672] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.672] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.673] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.673] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Excel.x-none.msi.16_mondoww.mcxml", dwFileAttributes=0x80) returned 0 [0081.675] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Excel.x-none.msi.16_mondoww.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\excel.x-none.msi.16_mondoww.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.675] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.675] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.675] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.675] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Groove.x-none.msi.16_mondoww.mcxml", dwFileAttributes=0x80) returned 0 [0081.675] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Groove.x-none.msi.16_mondoww.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\groove.x-none.msi.16_mondoww.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.677] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.677] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.677] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.677] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Lync.x-none.msi.16_mondoww.mcxml", dwFileAttributes=0x80) returned 0 [0081.678] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Lync.x-none.msi.16_mondoww.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\lync.x-none.msi.16_mondoww.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.678] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.678] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.678] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.678] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Office.x-none.msi.16_authored.mcxml", dwFileAttributes=0x80) returned 0 [0081.678] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Office.x-none.msi.16_authored.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\office.x-none.msi.16_authored.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.679] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.679] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.679] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.679] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Office.x-none.msi.16_Common.mcxml", dwFileAttributes=0x80) returned 0 [0081.680] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Office.x-none.msi.16_Common.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\office.x-none.msi.16_common.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.680] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.680] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.680] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.680] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Office.x-none.msi.16_licensing.mcxml", dwFileAttributes=0x80) returned 0 [0081.681] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Office.x-none.msi.16_licensing.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\office.x-none.msi.16_licensing.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.681] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.681] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.681] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.681] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Office.x-none.msi.16_mondoww.mcxml", dwFileAttributes=0x80) returned 0 [0081.682] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Office.x-none.msi.16_mondoww.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\office.x-none.msi.16_mondoww.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.682] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.682] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.682] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.682] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.682] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Office.x-none.msi.16_postcommon.mcxml", dwFileAttributes=0x80) returned 0 [0081.683] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Office.x-none.msi.16_postcommon.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\office.x-none.msi.16_postcommon.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.683] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.683] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.683] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.683] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.683] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Office.x-none.msi.16_PostCommon.Office.x-none.mcxml", dwFileAttributes=0x80) returned 0 [0081.683] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Office.x-none.msi.16_PostCommon.Office.x-none.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\office.x-none.msi.16_postcommon.office.x-none.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.684] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.684] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.684] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.684] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.684] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\office32ww.msi.16_crossbitness.mcxml", dwFileAttributes=0x80) returned 0 [0081.684] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\office32ww.msi.16_crossbitness.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\office32ww.msi.16_crossbitness.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.684] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.685] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.685] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.685] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.685] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\office32ww.msi.16_office32ww.mcxml", dwFileAttributes=0x80) returned 0 [0081.686] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\office32ww.msi.16_office32ww.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\office32ww.msi.16_office32ww.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.686] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.686] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.686] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.686] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.686] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\OneNote.x-none.msi.16_mondoww.mcxml", dwFileAttributes=0x80) returned 0 [0081.687] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\OneNote.x-none.msi.16_mondoww.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\onenote.x-none.msi.16_mondoww.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.687] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.687] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.688] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.688] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.688] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\OneNote.x-none.msi.16_OneNote.mcxml", dwFileAttributes=0x80) returned 0 [0081.688] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\OneNote.x-none.msi.16_OneNote.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\onenote.x-none.msi.16_onenote.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.689] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.689] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.689] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.689] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\OSM.x-none.msi.16_mondoww.mcxml", dwFileAttributes=0x80) returned 0 [0081.689] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\OSM.x-none.msi.16_mondoww.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\osm.x-none.msi.16_mondoww.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.689] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.689] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.690] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.690] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\OSMUX.x-none.msi.16_mondoww.mcxml", dwFileAttributes=0x80) returned 0 [0081.691] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\OSMUX.x-none.msi.16_mondoww.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\osmux.x-none.msi.16_mondoww.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.691] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.691] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.691] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.691] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Outlook.x-none.msi.16_mondoww.mcxml", dwFileAttributes=0x80) returned 0 [0081.691] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Outlook.x-none.msi.16_mondoww.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\outlook.x-none.msi.16_mondoww.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.692] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.692] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.692] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.692] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Outlook.x-none.msi.16_PostCommon.Outlook.x-none.mcxml", dwFileAttributes=0x80) returned 0 [0081.692] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Outlook.x-none.msi.16_PostCommon.Outlook.x-none.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\outlook.x-none.msi.16_postcommon.outlook.x-none.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.693] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.693] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.693] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.693] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.693] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\PowerPivot.x-none.msi.16_mondoww.mcxml", dwFileAttributes=0x80) returned 0 [0081.693] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\PowerPivot.x-none.msi.16_mondoww.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\powerpivot.x-none.msi.16_mondoww.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.693] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.693] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.694] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.694] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\PowerPoint.x-none.msi.16_mondoww.mcxml", dwFileAttributes=0x80) returned 0 [0081.694] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\PowerPoint.x-none.msi.16_mondoww.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\powerpoint.x-none.msi.16_mondoww.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.694] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.694] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.694] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.694] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Project.x-none.msi.16_mondoww.mcxml", dwFileAttributes=0x80) returned 0 [0081.695] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Project.x-none.msi.16_mondoww.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\project.x-none.msi.16_mondoww.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.695] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.695] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.695] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.695] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.696] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Publisher.x-none.msi.16_mondoww.mcxml", dwFileAttributes=0x80) returned 0 [0081.696] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Publisher.x-none.msi.16_mondoww.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\publisher.x-none.msi.16_mondoww.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.696] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.696] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.697] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.697] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Visio.x-none.msi.16_mondoww.mcxml", dwFileAttributes=0x80) returned 0 [0081.697] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Visio.x-none.msi.16_mondoww.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\visio.x-none.msi.16_mondoww.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.697] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.697] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.698] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.698] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.698] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Visio.x-none.msi.16_PostCommon.Visio.x-none.mcxml", dwFileAttributes=0x80) returned 0 [0081.698] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Visio.x-none.msi.16_PostCommon.Visio.x-none.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\visio.x-none.msi.16_postcommon.visio.x-none.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.699] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.699] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.699] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.699] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Word.x-none.msi.16_mondoww.mcxml", dwFileAttributes=0x80) returned 0 [0081.699] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Word.x-none.msi.16_mondoww.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\word.x-none.msi.16_mondoww.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.699] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.699] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.700] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0081.700] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0081.700] SetLastError (dwErrCode=0x0) [0081.700] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.703] GetLastError () returned 0x5 [0081.704] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0081.704] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.704] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0081.704] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0081.704] SetLastError (dwErrCode=0x0) [0081.704] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.704] GetLastError () returned 0x5 [0081.704] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0081.704] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.704] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0081.704] SetLastError (dwErrCode=0x0) [0081.704] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.705] GetLastError () returned 0x5 [0081.705] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0081.705] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.705] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office15\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079a0e10 [0081.705] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0081.705] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0081.705] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0081.705] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.705] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office15\\pkeyconfig-office.xrm-ms", dwFileAttributes=0x80) returned 0 [0081.706] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office15\\pkeyconfig-office.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\office15\\pkeyconfig-office.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.706] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.706] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.707] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0081.707] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0081.707] SetLastError (dwErrCode=0x0) [0081.707] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office15\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office15\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.707] GetLastError () returned 0x5 [0081.707] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0081.707] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.707] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0081.707] SetLastError (dwErrCode=0x0) [0081.707] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.707] GetLastError () returned 0x5 [0081.707] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0081.707] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.707] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079a0e10 [0081.707] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0081.712] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0081.712] SetLastError (dwErrCode=0x0) [0081.712] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.713] GetLastError () returned 0x5 [0081.713] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0081.713] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.713] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0450 [0081.713] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.714] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.714] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.714] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ACCESS12.ACC", dwFileAttributes=0x80) returned 0 [0081.714] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ACCESS12.ACC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\access12.acc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.715] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.715] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.715] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.715] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\AccessRuntime2019_eula.txt", dwFileAttributes=0x80) returned 0 [0081.716] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\AccessRuntime2019_eula.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\accessruntime2019_eula.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.716] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.716] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.716] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.716] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.717] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\AccessRuntime_eula.txt", dwFileAttributes=0x80) returned 0 [0081.723] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\AccessRuntime_eula.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\accessruntime_eula.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.724] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.724] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.724] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.724] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.724] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ACCESS_WHATSNEW.XML", dwFileAttributes=0x80) returned 0 [0081.724] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ACCESS_WHATSNEW.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\access_whatsnew.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.725] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.725] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.725] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.725] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.725] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ACTIP10.HLP", dwFileAttributes=0x80) returned 0 [0081.725] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ACTIP10.HLP" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\actip10.hlp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.725] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.725] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.726] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.726] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.726] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\AEC.VSL", dwFileAttributes=0x80) returned 0 [0081.726] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\AEC.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\aec.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.726] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.726] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.727] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.727] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.727] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\AECUTILS.VSL", dwFileAttributes=0x80) returned 0 [0081.728] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\AECUTILS.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\aecutils.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.728] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.728] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.728] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.728] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ASSET.VRD", dwFileAttributes=0x80) returned 0 [0081.733] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ASSET.VRD" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\asset.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.733] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.733] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.733] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.733] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\BASIC.HTM", dwFileAttributes=0x80) returned 0 [0081.734] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\BASIC.HTM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\basic.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.734] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.734] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.734] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.734] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.734] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.734] SetLastError (dwErrCode=0x0) [0081.734] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.736] GetLastError () returned 0x5 [0081.736] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0081.736] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.736] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Bibliography\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0e70 [0081.737] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0081.737] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0081.737] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Bibliography\\BIBFORM.XML", dwFileAttributes=0x80) returned 0 [0081.738] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Bibliography\\BIBFORM.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\bibliography\\bibform.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.738] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.738] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.738] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0081.738] FindClose (in: hFindFile=0xd7079a0e70 | out: hFindFile=0xd7079a0e70) returned 1 [0081.738] SetLastError (dwErrCode=0x0) [0081.738] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Bibliography\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\bibliography\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.739] GetLastError () returned 0x5 [0081.739] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0081.739] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.739] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.739] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\BSTORM.VSL", dwFileAttributes=0x80) returned 0 [0081.740] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\BSTORM.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\bstorm.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.740] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.740] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.741] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.741] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\BW.CSS", dwFileAttributes=0x80) returned 0 [0081.741] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\BW.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\bw.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.742] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.742] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.743] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.743] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.743] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\CALEVENT.VRD", dwFileAttributes=0x80) returned 0 [0081.743] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\CALEVENT.VRD" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\calevent.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.744] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.744] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.744] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.744] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.744] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Client2019_eula.txt", dwFileAttributes=0x80) returned 0 [0081.745] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Client2019_eula.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\client2019_eula.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.746] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.746] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.746] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.746] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ClientARMRefer2019_eula.txt", dwFileAttributes=0x80) returned 0 [0081.747] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ClientARMRefer2019_eula.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\clientarmrefer2019_eula.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.747] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.747] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.748] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.748] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.748] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ClientARMRefer_eula.txt", dwFileAttributes=0x80) returned 0 [0081.749] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ClientARMRefer_eula.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\clientarmrefer_eula.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.750] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.750] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.750] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.750] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.778] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ClientLangPack2019_eula.txt", dwFileAttributes=0x80) returned 0 [0081.779] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ClientLangPack2019_eula.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\clientlangpack2019_eula.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.779] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.779] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.779] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.779] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ClientLangPack_eula.txt", dwFileAttributes=0x80) returned 0 [0081.780] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ClientLangPack_eula.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\clientlangpack_eula.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.780] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.780] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.780] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.780] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ClientOSub2019_eula.txt", dwFileAttributes=0x80) returned 0 [0081.781] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ClientOSub2019_eula.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\clientosub2019_eula.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.781] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.781] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.781] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.781] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ClientOSub_eula.txt", dwFileAttributes=0x80) returned 0 [0081.782] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ClientOSub_eula.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\clientosub_eula.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.782] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.782] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.782] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.782] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ClientPreview_eula.txt", dwFileAttributes=0x80) returned 0 [0081.783] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ClientPreview_eula.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\clientpreview_eula.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.783] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.783] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.783] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.783] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ClientSub2019_eula.txt", dwFileAttributes=0x80) returned 0 [0081.784] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ClientSub2019_eula.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\clientsub2019_eula.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.784] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.784] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.785] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.785] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.785] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ClientSub_eula.txt", dwFileAttributes=0x80) returned 0 [0081.785] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ClientSub_eula.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\clientsub_eula.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.785] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.785] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.785] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.785] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.786] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ClientVolumeLicense2019_eula.txt", dwFileAttributes=0x80) returned 0 [0081.786] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ClientVolumeLicense2019_eula.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\clientvolumelicense2019_eula.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.786] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.786] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.786] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.786] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.787] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ClientVolumeLicense_eula.txt", dwFileAttributes=0x80) returned 0 [0081.787] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ClientVolumeLicense_eula.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\clientvolumelicense_eula.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.787] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.787] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.787] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.788] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.789] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\client_eula.txt", dwFileAttributes=0x80) returned 0 [0081.789] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\client_eula.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\client_eula.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.789] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.789] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.789] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.789] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.789] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.789] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.790] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\COFFEE.CSS", dwFileAttributes=0x80) returned 0 [0081.790] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\COFFEE.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\coffee.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.790] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.790] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.790] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.790] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.791] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\CollectSignatures_Init.xsn", dwFileAttributes=0x80) returned 0 [0081.791] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\CollectSignatures_Init.xsn" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\collectsignatures_init.xsn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.791] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.791] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.791] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.791] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.791] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\CollectSignatures_Sign.xsn", dwFileAttributes=0x80) returned 0 [0081.792] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\CollectSignatures_Sign.xsn" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\collectsignatures_sign.xsn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.792] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.792] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.792] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.792] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.792] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\CT_ROOTS.XML", dwFileAttributes=0x80) returned 0 [0081.793] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\CT_ROOTS.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\ct_roots.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.793] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.793] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.793] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.793] SetLastError (dwErrCode=0x0) [0081.793] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.794] GetLastError () returned 0x5 [0081.794] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0081.794] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.794] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0810 [0081.795] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0081.795] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0081.795] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\+Connect to New Data Source.odc", dwFileAttributes=0x80) returned 0 [0081.796] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\+Connect to New Data Source.odc" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\dataservices\\+connect to new data source.odc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.796] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.796] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.796] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0081.796] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.797] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\+NewSQLServerConnection.odc", dwFileAttributes=0x80) returned 0 [0081.797] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\+NewSQLServerConnection.odc" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\dataservices\\+newsqlserverconnection.odc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.797] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.797] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.799] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0081.799] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0081.799] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.799] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\FOLDER.ICO", dwFileAttributes=0x80) returned 0 [0081.799] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\FOLDER.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\dataservices\\folder.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.799] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.799] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.800] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0081.800] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0081.800] SetLastError (dwErrCode=0x0) [0081.800] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\dataservices\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.803] GetLastError () returned 0x5 [0081.803] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0081.803] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.803] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.803] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DBENGR.VSL", dwFileAttributes=0x80) returned 0 [0081.804] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DBENGR.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\dbengr.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.804] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.804] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.804] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.804] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DBSAMPLE.MDB", dwFileAttributes=0x80) returned 0 [0081.805] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DBSAMPLE.MDB" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\dbsample.mdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.805] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.805] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.805] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.805] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DBWIZ.VSL", dwFileAttributes=0x80) returned 0 [0081.807] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DBWIZ.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\dbwiz.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.807] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.807] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.807] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.807] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.807] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DEFAULT.CSS", dwFileAttributes=0x80) returned 0 [0081.808] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DEFAULT.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\default.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.809] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.809] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.809] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.809] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.809] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DOORSCHD.VRD", dwFileAttributes=0x80) returned 0 [0081.810] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DOORSCHD.VRD" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\doorschd.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.810] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.810] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.810] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.810] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.811] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DRILLDWN.VSL", dwFileAttributes=0x80) returned 0 [0081.811] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DRILLDWN.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\drilldwn.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.811] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.811] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.811] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.811] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.811] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DWGCNV.VSL", dwFileAttributes=0x80) returned 0 [0081.812] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DWGCNV.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\dwgcnv.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.812] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.812] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.812] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.812] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.812] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.812] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.812] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EADOCUMENTAPPROVAL_REVIEW.XSN", dwFileAttributes=0x80) returned 0 [0081.813] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EADOCUMENTAPPROVAL_REVIEW.XSN" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\eadocumentapproval_review.xsn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.813] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.814] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.814] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.814] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.814] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.814] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.814] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EQPLIST.VRD", dwFileAttributes=0x80) returned 0 [0081.814] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EQPLIST.VRD" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\eqplist.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.814] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.815] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.815] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.815] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXCEL.HXS", dwFileAttributes=0x80) returned 0 [0081.815] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXCEL.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\excel.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.815] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.815] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.816] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.816] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXCEL_COL.HXC", dwFileAttributes=0x80) returned 0 [0081.816] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXCEL_COL.HXC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\excel_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.817] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.817] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.817] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.817] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXCEL_COL.HXT", dwFileAttributes=0x80) returned 0 [0081.818] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXCEL_COL.HXT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\excel_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.818] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.818] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.818] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.818] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXCEL_F_COL.HXK", dwFileAttributes=0x80) returned 0 [0081.819] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXCEL_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\excel_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.819] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.819] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.820] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.820] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.820] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXCEL_K_COL.HXK", dwFileAttributes=0x80) returned 0 [0081.820] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXCEL_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\excel_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.820] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.820] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.820] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.820] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXCEL_WHATSNEW.XML", dwFileAttributes=0x80) returned 0 [0081.821] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXCEL_WHATSNEW.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\excel_whatsnew.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.821] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.821] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.821] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.821] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.821] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.822] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXPTOOWS.XLA", dwFileAttributes=0x80) returned 0 [0081.822] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXPTOOWS.XLA" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\exptoows.xla"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.822] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.822] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.822] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.822] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.822] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\FACILITY.VSL", dwFileAttributes=0x80) returned 0 [0081.824] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\FACILITY.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\facility.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.824] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.824] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.824] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.824] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.824] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\FLOCH.VRD", dwFileAttributes=0x80) returned 0 [0081.825] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\FLOCH.VRD" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\floch.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.827] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.827] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.827] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.829] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\FOREST.CSS", dwFileAttributes=0x80) returned 0 [0081.830] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\FOREST.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\forest.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.830] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.830] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.831] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.831] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GANTT.CSS", dwFileAttributes=0x80) returned 0 [0081.831] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GANTT.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\gantt.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.831] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.831] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.832] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.832] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GANTT.VRD", dwFileAttributes=0x80) returned 0 [0081.832] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GANTT.VRD" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\gantt.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.832] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.832] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.832] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.832] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GANTT.VSL", dwFileAttributes=0x80) returned 0 [0081.833] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GANTT.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\gantt.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.834] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.834] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.834] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.834] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GR8GALRY.GRA", dwFileAttributes=0x80) returned 0 [0081.835] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GR8GALRY.GRA" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\gr8galry.gra"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.835] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.835] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.835] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.835] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GRAPH.HXS", dwFileAttributes=0x80) returned 0 [0081.836] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GRAPH.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\graph.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.837] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.837] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.838] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.838] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GRAPH_COL.HXC", dwFileAttributes=0x80) returned 0 [0081.838] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GRAPH_COL.HXC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\graph_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.838] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.838] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.839] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.839] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GRAPH_COL.HXT", dwFileAttributes=0x80) returned 0 [0081.839] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GRAPH_COL.HXT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\graph_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.840] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.840] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.840] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.840] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GRAPH_F_COL.HXK", dwFileAttributes=0x80) returned 0 [0081.841] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GRAPH_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\graph_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.841] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.841] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.841] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.841] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GRAPH_K_COL.HXK", dwFileAttributes=0x80) returned 0 [0081.842] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GRAPH_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\graph_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.842] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.842] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.842] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.842] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.842] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.842] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GROOVE.HXS", dwFileAttributes=0x80) returned 0 [0081.844] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GROOVE.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\groove.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.844] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.844] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.844] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.844] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.844] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GROOVE_COL.HXC", dwFileAttributes=0x80) returned 0 [0081.845] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GROOVE_COL.HXC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\groove_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.845] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.845] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.845] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.845] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.846] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GROOVE_COL.HXT", dwFileAttributes=0x80) returned 0 [0081.846] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GROOVE_COL.HXT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\groove_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.846] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.846] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.847] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.847] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GROOVE_F_COL.HXK", dwFileAttributes=0x80) returned 0 [0081.847] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GROOVE_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\groove_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.847] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.847] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.847] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.848] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GROOVE_K_COL.HXK", dwFileAttributes=0x80) returned 0 [0081.848] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GROOVE_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\groove_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.848] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.848] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.848] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.848] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.849] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\HVAC.VSL", dwFileAttributes=0x80) returned 0 [0081.849] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\HVAC.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\hvac.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.849] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.850] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.850] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.850] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.850] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\HVACDIFF.VRD", dwFileAttributes=0x80) returned 0 [0081.851] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\HVACDIFF.VRD" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\hvacdiff.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.851] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.851] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.852] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.852] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\HVACDUCT.VRD", dwFileAttributes=0x80) returned 0 [0081.852] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\HVACDUCT.VRD" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\hvacduct.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.852] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.852] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.852] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.852] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.852] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\INSTLIST.VRD", dwFileAttributes=0x80) returned 0 [0081.855] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\INSTLIST.VRD" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\instlist.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.856] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.856] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.856] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.856] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.856] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\INVENTRY.VRD", dwFileAttributes=0x80) returned 0 [0081.857] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\INVENTRY.VRD" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\inventry.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.857] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.857] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.857] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.857] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Invite or Link.one", dwFileAttributes=0x80) returned 0 [0081.858] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Invite or Link.one" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\invite or link.one"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.858] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.858] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.858] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.858] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\JADE.CSS", dwFileAttributes=0x80) returned 0 [0081.859] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\JADE.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\jade.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.859] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.859] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.859] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.859] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.859] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LGND.VSL", dwFileAttributes=0x80) returned 0 [0081.862] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LGND.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lgnd.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.862] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.862] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.863] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.863] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.863] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC.HXS", dwFileAttributes=0x80) returned 0 [0081.864] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lync.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.864] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.864] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.864] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.864] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.864] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LyncBasic_Eula.txt", dwFileAttributes=0x80) returned 0 [0081.866] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LyncBasic_Eula.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lyncbasic_eula.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.866] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.866] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.866] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.866] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.866] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LyncVDI_Eula.txt", dwFileAttributes=0x80) returned 0 [0081.868] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LyncVDI_Eula.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lyncvdi_eula.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.868] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.868] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.869] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.869] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_BASIC.HXS", dwFileAttributes=0x80) returned 0 [0081.869] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_BASIC.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lync_basic.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.870] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.870] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.870] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.870] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.870] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_BASIC_COL.HXC", dwFileAttributes=0x80) returned 0 [0081.870] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_BASIC_COL.HXC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lync_basic_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.871] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.871] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.871] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.871] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.871] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_BASIC_COL.HXT", dwFileAttributes=0x80) returned 0 [0081.872] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_BASIC_COL.HXT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lync_basic_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.872] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.872] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.873] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.873] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_BASIC_F_COL.HXK", dwFileAttributes=0x80) returned 0 [0081.873] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_BASIC_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lync_basic_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.874] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.874] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.874] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.874] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_BASIC_K_COL.HXK", dwFileAttributes=0x80) returned 0 [0081.875] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_BASIC_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lync_basic_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.875] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.875] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.875] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.875] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_COL.HXC", dwFileAttributes=0x80) returned 0 [0081.886] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_COL.HXC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lync_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.886] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.886] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.887] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.887] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_COL.HXT", dwFileAttributes=0x80) returned 0 [0081.887] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_COL.HXT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lync_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.888] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.888] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.888] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.888] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.888] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_F_COL.HXK", dwFileAttributes=0x80) returned 0 [0081.889] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lync_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.889] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.889] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.889] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.889] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_K_COL.HXK", dwFileAttributes=0x80) returned 0 [0081.890] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lync_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.890] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.890] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.890] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.890] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_ONLINE.HXS", dwFileAttributes=0x80) returned 0 [0081.892] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_ONLINE.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lync_online.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.892] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.892] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.892] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.892] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_ONLINE_COL.HXC", dwFileAttributes=0x80) returned 0 [0081.893] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_ONLINE_COL.HXC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lync_online_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.893] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.893] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.894] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.894] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_ONLINE_COL.HXT", dwFileAttributes=0x80) returned 0 [0081.894] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_ONLINE_COL.HXT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lync_online_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.894] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.894] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.895] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.895] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_ONLINE_F_COL.HXK", dwFileAttributes=0x80) returned 0 [0081.895] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_ONLINE_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lync_online_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.896] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.896] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.896] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.896] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_ONLINE_K_COL.HXK", dwFileAttributes=0x80) returned 0 [0081.897] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_ONLINE_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lync_online_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.897] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.897] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.897] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.897] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.897] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.897] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.897] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.897] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MOVE.VRD", dwFileAttributes=0x80) returned 0 [0081.898] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MOVE.VRD" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\move.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.898] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.898] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.898] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.898] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.898] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSACCESS.HXS", dwFileAttributes=0x80) returned 0 [0081.900] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSACCESS.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\msaccess.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.900] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.900] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.900] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.900] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSACCESS_COL.HXC", dwFileAttributes=0x80) returned 0 [0081.901] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSACCESS_COL.HXC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\msaccess_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.901] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.901] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.901] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.901] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSACCESS_COL.HXT", dwFileAttributes=0x80) returned 0 [0081.903] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSACCESS_COL.HXT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\msaccess_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.903] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.903] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.903] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.903] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.904] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSACCESS_F_COL.HXK", dwFileAttributes=0x80) returned 0 [0081.904] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSACCESS_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\msaccess_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.904] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.904] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.904] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.904] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.905] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSACCESS_K_COL.HXK", dwFileAttributes=0x80) returned 0 [0081.905] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSACCESS_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\msaccess_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.905] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.905] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.906] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.906] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.906] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.906] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSO.ACL", dwFileAttributes=0x80) returned 0 [0081.906] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSO.ACL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\mso.acl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.906] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.907] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.907] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.907] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.907] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.907] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.907] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSOUC.HXS", dwFileAttributes=0x80) returned 0 [0081.908] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSOUC.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\msouc.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.909] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.909] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.909] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.909] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.909] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSOUC_COL.HXC", dwFileAttributes=0x80) returned 0 [0081.910] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSOUC_COL.HXC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\msouc_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.911] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.911] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.911] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.911] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.911] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSOUC_COL.HXT", dwFileAttributes=0x80) returned 0 [0081.912] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSOUC_COL.HXT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\msouc_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.912] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.912] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.913] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.913] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.913] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSOUC_F_COL.HXK", dwFileAttributes=0x80) returned 0 [0081.913] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSOUC_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\msouc_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.914] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.914] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.914] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.914] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.914] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSOUC_K_COL.HXK", dwFileAttributes=0x80) returned 0 [0081.915] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSOUC_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\msouc_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.915] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.915] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.915] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.917] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.917] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSPUB.HXS", dwFileAttributes=0x80) returned 0 [0081.918] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSPUB.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\mspub.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.919] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.919] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.919] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.919] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.919] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSPUB.OPG", dwFileAttributes=0x80) returned 0 [0081.920] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSPUB.OPG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\mspub.opg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.920] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.920] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.920] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.920] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.921] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSPUB_COL.HXC", dwFileAttributes=0x80) returned 0 [0081.921] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSPUB_COL.HXC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\mspub_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.921] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.921] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.922] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.922] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.922] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSPUB_COL.HXT", dwFileAttributes=0x80) returned 0 [0081.922] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSPUB_COL.HXT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\mspub_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.924] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.924] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.925] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.925] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.925] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSPUB_F_COL.HXK", dwFileAttributes=0x80) returned 0 [0081.925] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSPUB_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\mspub_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.925] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.926] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.926] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.926] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.926] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSPUB_K_COL.HXK", dwFileAttributes=0x80) returned 0 [0081.926] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSPUB_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\mspub_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.927] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.927] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.927] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.927] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.927] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSQRY32.CHM", dwFileAttributes=0x80) returned 0 [0081.928] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSQRY32.CHM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\msqry32.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.928] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.928] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.928] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.928] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.928] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.929] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\NETWORK.CSS", dwFileAttributes=0x80) returned 0 [0081.929] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\NETWORK.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\network.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.929] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.929] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.929] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.929] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.930] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\NETWORK1.VRD", dwFileAttributes=0x80) returned 0 [0081.930] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\NETWORK1.VRD" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\network1.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.932] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.932] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.932] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.932] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.932] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\NETWORK2.VRD", dwFileAttributes=0x80) returned 0 [0081.933] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\NETWORK2.VRD" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\network2.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.933] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.933] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.933] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.933] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.934] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\NETWORK3.VRD", dwFileAttributes=0x80) returned 0 [0081.934] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\NETWORK3.VRD" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\network3.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.934] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.934] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.935] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.935] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.935] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.935] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OCCMPVRD.XML", dwFileAttributes=0x80) returned 0 [0081.935] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OCCMPVRD.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\occmpvrd.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.936] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.936] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.936] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.936] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.936] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.936] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OCMODVRD.XML", dwFileAttributes=0x80) returned 0 [0081.936] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OCMODVRD.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\ocmodvrd.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.937] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.937] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.937] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.937] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.937] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.937] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\officeinventoryagentfallback.xml", dwFileAttributes=0x80) returned 0 [0081.938] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\officeinventoryagentfallback.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\officeinventoryagentfallback.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.938] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.938] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.939] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.939] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\officeinventoryagentlogon.xml", dwFileAttributes=0x80) returned 0 [0081.939] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\officeinventoryagentlogon.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\officeinventoryagentlogon.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.939] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.940] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.940] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.940] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.940] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\offsym.ttf", dwFileAttributes=0x80) returned 0 [0081.942] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\offsym.ttf" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\offsym.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.942] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.942] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.943] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.943] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.943] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\offsymb.ttf", dwFileAttributes=0x80) returned 0 [0081.943] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\offsymb.ttf" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\offsymb.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.944] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.944] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.944] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.944] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.944] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\offsyml.ttf", dwFileAttributes=0x80) returned 0 [0081.944] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\offsyml.ttf" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\offsyml.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.945] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.945] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.945] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.945] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.945] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\offsymsb.ttf", dwFileAttributes=0x80) returned 0 [0081.946] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\offsymsb.ttf" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\offsymsb.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.947] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.947] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.948] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.948] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.948] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\offsymsl.ttf", dwFileAttributes=0x80) returned 0 [0081.949] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\offsymsl.ttf" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\offsymsl.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.949] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.949] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.949] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.949] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.950] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\offsymxl.ttf", dwFileAttributes=0x80) returned 0 [0081.950] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\offsymxl.ttf" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\offsymxl.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.950] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.950] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.951] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.951] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.951] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.951] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.951] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ONENOTE.HXS", dwFileAttributes=0x80) returned 0 [0081.952] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ONENOTE.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\onenote.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.952] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.952] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.952] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.952] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.953] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ONENOTE_COL.HXC", dwFileAttributes=0x80) returned 0 [0081.953] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ONENOTE_COL.HXC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\onenote_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.953] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.953] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.954] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.954] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.954] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ONENOTE_COL.HXT", dwFileAttributes=0x80) returned 0 [0081.956] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ONENOTE_COL.HXT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\onenote_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.956] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.956] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.956] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.956] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.957] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ONENOTE_F_COL.HXK", dwFileAttributes=0x80) returned 0 [0081.957] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ONENOTE_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\onenote_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.958] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.958] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.958] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.958] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.958] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ONENOTE_K_COL.HXK", dwFileAttributes=0x80) returned 0 [0081.959] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ONENOTE_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\onenote_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.959] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.959] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.959] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.961] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.961] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ONENOTE_WHATSNEW.XML", dwFileAttributes=0x80) returned 0 [0081.963] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ONENOTE_WHATSNEW.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\onenote_whatsnew.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.963] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.963] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.963] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.963] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.964] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ONGuide.onepkg", dwFileAttributes=0x80) returned 0 [0081.964] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ONGuide.onepkg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\onguide.onepkg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.964] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.964] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.964] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.965] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.965] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ORGCH.VRD", dwFileAttributes=0x80) returned 0 [0081.966] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ORGCH.VRD" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\orgch.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.967] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.967] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.968] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.968] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.968] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ORGCHART.CHM", dwFileAttributes=0x80) returned 0 [0081.968] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ORGCHART.CHM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\orgchart.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.969] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.969] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.969] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.969] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ORGCHART.VSL", dwFileAttributes=0x80) returned 0 [0081.971] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ORGCHART.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\orgchart.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.971] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.971] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.972] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.972] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.972] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.972] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ORGPOS.VRD", dwFileAttributes=0x80) returned 0 [0081.972] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ORGPOS.VRD" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\orgpos.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.973] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.973] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.973] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.973] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ORGWIZ.VSL", dwFileAttributes=0x80) returned 0 [0081.974] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ORGWIZ.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\orgwiz.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.974] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.974] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.975] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.975] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.975] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTFORM.DAT", dwFileAttributes=0x80) returned 0 [0081.975] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTFORM.DAT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\outform.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.975] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.975] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.976] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.976] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.976] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLOOK.HOL", dwFileAttributes=0x80) returned 0 [0081.976] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLOOK.HOL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\outlook.hol"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.977] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.977] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.977] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.977] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLOOK.HXS", dwFileAttributes=0x80) returned 0 [0081.981] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLOOK.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\outlook.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.982] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.982] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.982] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.982] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLOOK_COL.HXC", dwFileAttributes=0x80) returned 0 [0081.983] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLOOK_COL.HXC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\outlook_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.984] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.984] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.984] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.984] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.984] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLOOK_COL.HXT", dwFileAttributes=0x80) returned 0 [0081.985] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLOOK_COL.HXT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\outlook_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.987] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.987] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.987] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.987] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLOOK_F_COL.HXK", dwFileAttributes=0x80) returned 0 [0081.988] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLOOK_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\outlook_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.988] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.988] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.988] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.988] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.989] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLOOK_K_COL.HXK", dwFileAttributes=0x80) returned 0 [0081.989] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLOOK_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\outlook_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.989] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.989] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.989] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.989] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLOOK_WHATSNEW.XML", dwFileAttributes=0x80) returned 0 [0081.990] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLOOK_WHATSNEW.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\outlook_whatsnew.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.990] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.990] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.991] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.991] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.991] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLPERF.H", dwFileAttributes=0x80) returned 0 [0081.992] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLPERF.H" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\outlperf.h"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.992] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.992] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.992] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.992] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.992] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.992] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.993] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PASSPORT.CSS", dwFileAttributes=0x80) returned 0 [0081.994] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PASSPORT.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\passport.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.994] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.994] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.994] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.994] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.995] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PASTEL.CSS", dwFileAttributes=0x80) returned 0 [0081.995] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PASTEL.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pastel.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.995] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.995] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.995] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.995] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.996] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PE.VSL", dwFileAttributes=0x80) returned 0 [0081.997] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PE.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pe.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.997] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.997] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.997] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0081.997] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0081.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PIPELINE.VRD", dwFileAttributes=0x80) returned 0 [0081.998] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PIPELINE.VRD" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pipeline.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.999] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0081.999] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.000] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.000] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.000] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.000] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.000] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\POWERPNT.HXS", dwFileAttributes=0x80) returned 0 [0082.001] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\POWERPNT.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\powerpnt.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.001] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.001] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.002] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.002] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\POWERPNT_COL.HXC", dwFileAttributes=0x80) returned 0 [0082.002] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\POWERPNT_COL.HXC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\powerpnt_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.002] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.002] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.003] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.003] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.003] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\POWERPNT_COL.HXT", dwFileAttributes=0x80) returned 0 [0082.003] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\POWERPNT_COL.HXT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\powerpnt_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.004] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.004] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.004] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.004] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.004] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\POWERPNT_F_COL.HXK", dwFileAttributes=0x80) returned 0 [0082.005] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\POWERPNT_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\powerpnt_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.005] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.005] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.005] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.005] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.005] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\POWERPNT_K_COL.HXK", dwFileAttributes=0x80) returned 0 [0082.006] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\POWERPNT_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\powerpnt_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.006] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.006] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.006] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.006] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.006] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.007] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PPT_WHATSNEW.XML", dwFileAttributes=0x80) returned 0 [0082.007] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PPT_WHATSNEW.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\ppt_whatsnew.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.008] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.008] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.008] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.008] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.008] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PREVIEWTEMPLATE.POTX", dwFileAttributes=0x80) returned 0 [0082.009] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PREVIEWTEMPLATE.POTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\previewtemplate.potx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.009] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.009] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.009] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.009] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.010] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PREVIEWTEMPLATE2.POTX", dwFileAttributes=0x80) returned 0 [0082.010] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PREVIEWTEMPLATE2.POTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\previewtemplate2.potx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.010] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.010] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.010] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.010] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.011] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PRIMARY.CSS", dwFileAttributes=0x80) returned 0 [0082.011] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PRIMARY.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\primary.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.011] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.011] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.012] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.012] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROPRPT.VSL", dwFileAttributes=0x80) returned 0 [0082.013] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROPRPT.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\proprpt.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.013] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.013] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.013] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.013] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.014] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROPRPT.VSSX", dwFileAttributes=0x80) returned 0 [0082.015] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROPRPT.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\proprpt.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.016] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.016] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.017] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.017] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.017] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.DOC", dwFileAttributes=0x80) returned 0 [0082.018] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.DOC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\prottpln.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.018] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.018] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.018] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.018] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.018] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.PPT", dwFileAttributes=0x80) returned 0 [0082.019] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.PPT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\prottpln.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.019] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.019] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.019] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.019] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.020] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.XLS", dwFileAttributes=0x80) returned 0 [0082.020] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.XLS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\prottpln.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.020] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.020] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.020] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.020] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.021] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.DOC", dwFileAttributes=0x80) returned 0 [0082.021] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.DOC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\prottplv.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.021] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.021] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.022] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.022] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.022] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.PPT", dwFileAttributes=0x80) returned 0 [0082.022] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.PPT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\prottplv.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.022] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.022] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.023] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.023] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.023] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.XLS", dwFileAttributes=0x80) returned 0 [0082.023] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.XLS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\prottplv.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.024] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.024] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.024] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.024] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.024] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\prstevnt.VSL", dwFileAttributes=0x80) returned 0 [0082.024] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\prstevnt.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\prstevnt.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.024] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.025] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.025] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.025] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.025] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHKEY.DAT", dwFileAttributes=0x80) returned 0 [0082.025] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHKEY.DAT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\psrchkey.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.025] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.025] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.026] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.026] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.026] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHLEX.DAT", dwFileAttributes=0x80) returned 0 [0082.026] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHLEX.DAT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\psrchlex.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.026] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.026] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.026] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.026] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.027] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHLTS.DAT", dwFileAttributes=0x80) returned 0 [0082.027] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHLTS.DAT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\psrchlts.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.028] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.028] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.028] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.028] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.028] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHPHN.DAT", dwFileAttributes=0x80) returned 0 [0082.028] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHPHN.DAT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\psrchphn.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.029] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.029] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.029] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.029] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.029] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHSRN.DAT", dwFileAttributes=0x80) returned 0 [0082.029] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHSRN.DAT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\psrchsrn.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.030] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.030] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.030] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.030] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.030] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.030] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBCOLOR.SCM", dwFileAttributes=0x80) returned 0 [0082.031] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBCOLOR.SCM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubcolor.scm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.031] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.031] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.031] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.031] SetLastError (dwErrCode=0x0) [0082.031] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.031] GetLastError () returned 0x5 [0082.031] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0082.031] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.031] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0810 [0082.033] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.033] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.033] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.033] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME01.CSS", dwFileAttributes=0x80) returned 0 [0082.034] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME01.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme01.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.034] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.034] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.034] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.034] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.034] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME02.CSS", dwFileAttributes=0x80) returned 0 [0082.035] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME02.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme02.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.035] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.035] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.035] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.035] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.035] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME03.CSS", dwFileAttributes=0x80) returned 0 [0082.036] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME03.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme03.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.036] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.036] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.036] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.036] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.036] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME04.CSS", dwFileAttributes=0x80) returned 0 [0082.036] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME04.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme04.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.037] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.037] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.037] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.037] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.037] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME05.CSS", dwFileAttributes=0x80) returned 0 [0082.038] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME05.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme05.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.038] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.038] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.038] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.038] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.038] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME06.CSS", dwFileAttributes=0x80) returned 0 [0082.039] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME06.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme06.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.039] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.039] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.039] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.039] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.039] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME07.CSS", dwFileAttributes=0x80) returned 0 [0082.040] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME07.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme07.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.040] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.040] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.040] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.040] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.041] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME08.CSS", dwFileAttributes=0x80) returned 0 [0082.041] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME08.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme08.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.041] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.041] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.041] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.041] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.042] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME09.CSS", dwFileAttributes=0x80) returned 0 [0082.042] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME09.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme09.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.042] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.042] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.042] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.042] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.042] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME10.CSS", dwFileAttributes=0x80) returned 0 [0082.043] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME10.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme10.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.043] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.043] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.043] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.043] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.043] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME11.CSS", dwFileAttributes=0x80) returned 0 [0082.044] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME11.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme11.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.044] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.044] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.044] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.044] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.044] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME12.CSS", dwFileAttributes=0x80) returned 0 [0082.045] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME12.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme12.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.045] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.045] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.045] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.045] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.046] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME13.CSS", dwFileAttributes=0x80) returned 0 [0082.046] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME13.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme13.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.046] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.046] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.046] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.046] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.047] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME14.CSS", dwFileAttributes=0x80) returned 0 [0082.047] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME14.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme14.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.047] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.047] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.047] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.047] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.048] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME15.CSS", dwFileAttributes=0x80) returned 0 [0082.049] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME15.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme15.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.049] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.050] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.050] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.050] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.050] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME16.CSS", dwFileAttributes=0x80) returned 0 [0082.050] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME16.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme16.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.050] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.050] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.051] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.051] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.051] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME17.CSS", dwFileAttributes=0x80) returned 0 [0082.051] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME17.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme17.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.051] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.051] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.052] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.052] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.052] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME18.CSS", dwFileAttributes=0x80) returned 0 [0082.052] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME18.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme18.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.052] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.052] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.052] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.052] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.053] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME19.CSS", dwFileAttributes=0x80) returned 0 [0082.053] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME19.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme19.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.053] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.054] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.054] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.054] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.054] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME20.CSS", dwFileAttributes=0x80) returned 0 [0082.055] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME20.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme20.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.055] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.055] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.055] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.055] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.055] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME21.CSS", dwFileAttributes=0x80) returned 0 [0082.056] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME21.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme21.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.056] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.056] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.056] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.056] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.056] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME22.CSS", dwFileAttributes=0x80) returned 0 [0082.057] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME22.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme22.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.057] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.057] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.057] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.057] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.057] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME23.CSS", dwFileAttributes=0x80) returned 0 [0082.058] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME23.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme23.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.058] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.058] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.058] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.058] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.058] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME24.CSS", dwFileAttributes=0x80) returned 0 [0082.058] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME24.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme24.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.059] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.059] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.059] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.059] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.059] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME25.CSS", dwFileAttributes=0x80) returned 0 [0082.060] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME25.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme25.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.060] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.060] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.060] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.060] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.061] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME26.CSS", dwFileAttributes=0x80) returned 0 [0082.061] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME26.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme26.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.061] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.061] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.061] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.061] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.062] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME27.CSS", dwFileAttributes=0x80) returned 0 [0082.067] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME27.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme27.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.067] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.067] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.067] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.067] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.068] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME28.CSS", dwFileAttributes=0x80) returned 0 [0082.068] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME28.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme28.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.068] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.068] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.069] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.069] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.069] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME29.CSS", dwFileAttributes=0x80) returned 0 [0082.069] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME29.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme29.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.069] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.069] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.070] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.070] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.070] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME30.CSS", dwFileAttributes=0x80) returned 0 [0082.070] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME30.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme30.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.070] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.070] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.071] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.071] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.071] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME31.CSS", dwFileAttributes=0x80) returned 0 [0082.071] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME31.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme31.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.071] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.071] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.071] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.071] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.072] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME32.CSS", dwFileAttributes=0x80) returned 0 [0082.072] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME32.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme32.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.072] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.072] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.072] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.073] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.073] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME33.CSS", dwFileAttributes=0x80) returned 0 [0082.073] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME33.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme33.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.073] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.073] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.074] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.074] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.074] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME34.CSS", dwFileAttributes=0x80) returned 0 [0082.074] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME34.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme34.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.074] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.074] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.075] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.075] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.075] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME35.CSS", dwFileAttributes=0x80) returned 0 [0082.075] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME35.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme35.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.076] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.076] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.076] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.076] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.076] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME36.CSS", dwFileAttributes=0x80) returned 0 [0082.077] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME36.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme36.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.077] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.077] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.077] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.077] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.077] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME37.CSS", dwFileAttributes=0x80) returned 0 [0082.078] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME37.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme37.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.078] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.078] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.079] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.079] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.079] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME38.CSS", dwFileAttributes=0x80) returned 0 [0082.079] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME38.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme38.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.080] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.080] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.080] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.080] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.080] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME39.CSS", dwFileAttributes=0x80) returned 0 [0082.080] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME39.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme39.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.081] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.081] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.081] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.081] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.081] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME40.CSS", dwFileAttributes=0x80) returned 0 [0082.081] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME40.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme40.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.082] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.082] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.082] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.082] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.082] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME41.CSS", dwFileAttributes=0x80) returned 0 [0082.082] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME41.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme41.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.083] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.083] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.083] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.083] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.083] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME42.CSS", dwFileAttributes=0x80) returned 0 [0082.083] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME42.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme42.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.083] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.083] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.084] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.084] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.084] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME43.CSS", dwFileAttributes=0x80) returned 0 [0082.084] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME43.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme43.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.084] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.084] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.084] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.085] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.085] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME44.CSS", dwFileAttributes=0x80) returned 0 [0082.085] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME44.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme44.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.085] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.085] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.085] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.085] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.086] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME45.CSS", dwFileAttributes=0x80) returned 0 [0082.086] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME45.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme45.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.086] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.086] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.086] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.086] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.087] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME46.CSS", dwFileAttributes=0x80) returned 0 [0082.087] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME46.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme46.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.088] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.088] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.088] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.088] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.088] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME47.CSS", dwFileAttributes=0x80) returned 0 [0082.089] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME47.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme47.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.089] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.089] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.089] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.089] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.089] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME48.CSS", dwFileAttributes=0x80) returned 0 [0082.090] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME48.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme48.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.090] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.090] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.090] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.090] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.091] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME49.CSS", dwFileAttributes=0x80) returned 0 [0082.091] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME49.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme49.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.092] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.092] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.092] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.092] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.092] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME50.CSS", dwFileAttributes=0x80) returned 0 [0082.092] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME50.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme50.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.092] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.092] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.093] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.093] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.093] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME51.CSS", dwFileAttributes=0x80) returned 0 [0082.093] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME51.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme51.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.093] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.093] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.094] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.094] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.094] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME52.CSS", dwFileAttributes=0x80) returned 0 [0082.094] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME52.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme52.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.094] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.094] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.095] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.095] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.095] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME53.CSS", dwFileAttributes=0x80) returned 0 [0082.095] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME53.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme53.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.095] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.095] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.096] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.096] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.096] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME54.CSS", dwFileAttributes=0x80) returned 0 [0082.096] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME54.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme54.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.096] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.096] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.096] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.096] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.097] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME55.CSS", dwFileAttributes=0x80) returned 0 [0082.097] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME55.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme55.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.097] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.097] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.097] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0082.097] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0082.098] SetLastError (dwErrCode=0x0) [0082.098] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.101] GetLastError () returned 0x5 [0082.101] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0082.101] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.101] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.101] SetLastError (dwErrCode=0x0) [0082.101] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.101] GetLastError () returned 0x5 [0082.101] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0082.101] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.101] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0e70 [0082.103] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.103] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.103] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.103] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR10F.GIF", dwFileAttributes=0x80) returned 0 [0082.103] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR10F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir10f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.104] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.104] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.104] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.104] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR11F.GIF", dwFileAttributes=0x80) returned 0 [0082.104] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR11F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir11f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.105] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.105] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.105] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.105] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.105] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR12F.GIF", dwFileAttributes=0x80) returned 0 [0082.105] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR12F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir12f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.105] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.105] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.106] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.106] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR13F.GIF", dwFileAttributes=0x80) returned 0 [0082.107] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR13F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir13f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.107] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.107] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.107] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.107] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.107] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR14F.GIF", dwFileAttributes=0x80) returned 0 [0082.107] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR14F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir14f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.108] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.108] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.108] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.108] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR15F.GIF", dwFileAttributes=0x80) returned 0 [0082.109] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR15F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir15f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.109] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.109] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.109] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.109] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.109] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR16F.GIF", dwFileAttributes=0x80) returned 0 [0082.110] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR16F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir16f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.110] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.111] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.111] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.111] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.111] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR17F.GIF", dwFileAttributes=0x80) returned 0 [0082.111] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR17F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir17f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.111] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.111] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.112] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.112] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.112] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR18F.GIF", dwFileAttributes=0x80) returned 0 [0082.112] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR18F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir18f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.112] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.112] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.113] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.113] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.113] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR19F.GIF", dwFileAttributes=0x80) returned 0 [0082.114] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR19F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir19f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.114] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.114] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.115] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.115] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.115] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR1B.GIF", dwFileAttributes=0x80) returned 0 [0082.116] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR1B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir1b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.116] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.116] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.116] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.116] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.117] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR1F.GIF", dwFileAttributes=0x80) returned 0 [0082.117] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR1F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir1f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.117] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.117] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.117] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.117] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.118] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR20F.GIF", dwFileAttributes=0x80) returned 0 [0082.118] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR20F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir20f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.118] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.118] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.118] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.118] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.118] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR21F.GIF", dwFileAttributes=0x80) returned 0 [0082.119] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR21F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir21f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.119] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.119] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.119] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.119] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR22F.GIF", dwFileAttributes=0x80) returned 0 [0082.119] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR22F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir22f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.120] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.120] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.120] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.120] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.120] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR23F.GIF", dwFileAttributes=0x80) returned 0 [0082.120] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR23F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir23f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.120] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.121] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.121] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.121] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.121] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR24F.GIF", dwFileAttributes=0x80) returned 0 [0082.121] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR24F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir24f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.121] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.121] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.122] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.122] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.122] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR25F.GIF", dwFileAttributes=0x80) returned 0 [0082.122] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR25F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir25f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.122] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.122] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.122] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.122] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.123] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR26F.GIF", dwFileAttributes=0x80) returned 0 [0082.123] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR26F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir26f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.123] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.123] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.123] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.123] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.123] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR27F.GIF", dwFileAttributes=0x80) returned 0 [0082.124] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR27F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir27f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.124] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.124] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.124] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.124] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR28B.GIF", dwFileAttributes=0x80) returned 0 [0082.125] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR28B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir28b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.125] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.125] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.125] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.125] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR28F.GIF", dwFileAttributes=0x80) returned 0 [0082.125] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR28F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir28f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.126] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.126] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.126] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.126] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.126] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR29B.GIF", dwFileAttributes=0x80) returned 0 [0082.127] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR29B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir29b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.127] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.127] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.127] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.127] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.128] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR29F.GIF", dwFileAttributes=0x80) returned 0 [0082.128] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR29F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir29f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.128] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.128] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.129] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.129] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.129] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR2B.GIF", dwFileAttributes=0x80) returned 0 [0082.129] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR2B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir2b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.129] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.129] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.129] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.129] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR2F.GIF", dwFileAttributes=0x80) returned 0 [0082.130] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR2F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir2f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.130] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.130] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.130] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.130] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.131] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR30B.GIF", dwFileAttributes=0x80) returned 0 [0082.131] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR30B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir30b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.131] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.131] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.131] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.131] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.131] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR30F.GIF", dwFileAttributes=0x80) returned 0 [0082.132] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR30F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir30f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.132] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.132] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.132] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.132] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR31B.GIF", dwFileAttributes=0x80) returned 0 [0082.132] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR31B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir31b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.133] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.133] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.133] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.133] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.133] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR31F.GIF", dwFileAttributes=0x80) returned 0 [0082.134] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR31F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir31f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.134] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.134] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.134] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.134] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR32B.GIF", dwFileAttributes=0x80) returned 0 [0082.135] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR32B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir32b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.135] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.136] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.136] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.136] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR32F.GIF", dwFileAttributes=0x80) returned 0 [0082.136] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR32F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir32f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.136] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.136] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.137] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.138] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.138] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR33B.GIF", dwFileAttributes=0x80) returned 0 [0082.138] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR33B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir33b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.138] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.138] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.138] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.138] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.139] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR33F.GIF", dwFileAttributes=0x80) returned 0 [0082.139] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR33F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir33f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.139] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.139] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.139] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.139] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.140] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR34B.GIF", dwFileAttributes=0x80) returned 0 [0082.140] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR34B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir34b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.140] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.140] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.140] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.140] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.140] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR34F.GIF", dwFileAttributes=0x80) returned 0 [0082.141] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR34F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir34f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.141] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.141] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.141] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.141] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.142] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR35B.GIF", dwFileAttributes=0x80) returned 0 [0082.142] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR35B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir35b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.142] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.142] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.142] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.142] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.142] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR35F.GIF", dwFileAttributes=0x80) returned 0 [0082.143] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR35F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir35f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.143] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.143] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.143] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.143] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR36B.GIF", dwFileAttributes=0x80) returned 0 [0082.144] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR36B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir36b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.144] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.144] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.144] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.144] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR36F.GIF", dwFileAttributes=0x80) returned 0 [0082.145] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR36F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir36f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.145] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.145] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.145] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.145] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.146] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR37F.GIF", dwFileAttributes=0x80) returned 0 [0082.146] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR37F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir37f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.147] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.147] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.147] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.147] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.147] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR38F.GIF", dwFileAttributes=0x80) returned 0 [0082.147] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR38F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir38f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.147] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.147] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.148] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.148] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.148] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR39F.GIF", dwFileAttributes=0x80) returned 0 [0082.149] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR39F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir39f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.149] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.149] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.149] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.149] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.149] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR3B.GIF", dwFileAttributes=0x80) returned 0 [0082.150] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR3B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir3b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.150] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.150] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.150] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.150] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR3F.GIF", dwFileAttributes=0x80) returned 0 [0082.150] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR3F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir3f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.151] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.151] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.151] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.151] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.151] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR40F.GIF", dwFileAttributes=0x80) returned 0 [0082.151] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR40F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir40f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.151] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.151] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.152] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.152] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR41F.GIF", dwFileAttributes=0x80) returned 0 [0082.152] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR41F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir41f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.152] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.152] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.153] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.153] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR42F.GIF", dwFileAttributes=0x80) returned 0 [0082.153] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR42F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir42f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.153] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.153] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.153] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.153] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.154] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR43B.GIF", dwFileAttributes=0x80) returned 0 [0082.154] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR43B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir43b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.154] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.154] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.154] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.154] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.155] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR43F.GIF", dwFileAttributes=0x80) returned 0 [0082.155] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR43F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir43f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.155] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.155] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.156] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.156] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR44B.GIF", dwFileAttributes=0x80) returned 0 [0082.157] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR44B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir44b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.157] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.157] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.157] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.157] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR44F.GIF", dwFileAttributes=0x80) returned 0 [0082.158] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR44F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir44f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.158] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.158] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.158] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.158] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.158] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR45B.GIF", dwFileAttributes=0x80) returned 0 [0082.158] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR45B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir45b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.159] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.159] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.159] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.159] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR45F.GIF", dwFileAttributes=0x80) returned 0 [0082.159] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR45F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir45f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.160] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.160] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.160] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.160] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.160] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR46B.GIF", dwFileAttributes=0x80) returned 0 [0082.160] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR46B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir46b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.160] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.161] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.161] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.161] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR46F.GIF", dwFileAttributes=0x80) returned 0 [0082.161] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR46F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir46f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.161] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.161] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.162] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.162] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR47B.GIF", dwFileAttributes=0x80) returned 0 [0082.162] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR47B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir47b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.162] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.162] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.162] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.162] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR47F.GIF", dwFileAttributes=0x80) returned 0 [0082.163] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR47F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir47f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.163] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.163] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.163] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.163] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.164] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR48B.GIF", dwFileAttributes=0x80) returned 0 [0082.164] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR48B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir48b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.164] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.164] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.164] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.164] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR48F.GIF", dwFileAttributes=0x80) returned 0 [0082.165] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR48F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir48f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.166] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.166] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.166] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.166] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR49B.GIF", dwFileAttributes=0x80) returned 0 [0082.167] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR49B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir49b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.167] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.167] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.168] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.168] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR49F.GIF", dwFileAttributes=0x80) returned 0 [0082.168] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR49F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir49f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.168] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.168] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.168] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.169] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.169] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR4B.GIF", dwFileAttributes=0x80) returned 0 [0082.169] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR4B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir4b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.170] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.170] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.170] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.170] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR4F.GIF", dwFileAttributes=0x80) returned 0 [0082.170] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR4F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir4f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.170] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.171] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.171] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.171] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.171] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR50B.GIF", dwFileAttributes=0x80) returned 0 [0082.171] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR50B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir50b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.171] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.171] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.172] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.172] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.172] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR50F.GIF", dwFileAttributes=0x80) returned 0 [0082.172] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR50F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir50f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.172] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.172] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.173] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.174] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.175] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR51B.GIF", dwFileAttributes=0x80) returned 0 [0082.175] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR51B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir51b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.175] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.175] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.175] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.175] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.175] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR51F.GIF", dwFileAttributes=0x80) returned 0 [0082.176] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR51F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir51f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.176] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.176] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.176] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.176] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.176] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR5B.GIF", dwFileAttributes=0x80) returned 0 [0082.177] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR5B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir5b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.177] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.177] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.177] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.177] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.177] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR5F.GIF", dwFileAttributes=0x80) returned 0 [0082.178] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR5F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir5f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.179] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.179] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.179] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.179] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.180] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR6B.GIF", dwFileAttributes=0x80) returned 0 [0082.180] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR6B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir6b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.180] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.181] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.181] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.181] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.181] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR6F.GIF", dwFileAttributes=0x80) returned 0 [0082.181] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR6F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir6f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.181] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.181] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.182] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.182] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR7B.GIF", dwFileAttributes=0x80) returned 0 [0082.182] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR7B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir7b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.182] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.182] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.182] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.182] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.183] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR7F.GIF", dwFileAttributes=0x80) returned 0 [0082.183] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR7F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir7f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.183] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.183] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.183] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.183] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.184] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR8B.GIF", dwFileAttributes=0x80) returned 0 [0082.184] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR8B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir8b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.184] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.184] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.184] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.184] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.184] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR8F.GIF", dwFileAttributes=0x80) returned 0 [0082.185] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR8F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir8f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.185] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.185] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.185] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.185] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.185] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR9B.GIF", dwFileAttributes=0x80) returned 0 [0082.186] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR9B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir9b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.186] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.186] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.186] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.186] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.186] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR9F.GIF", dwFileAttributes=0x80) returned 0 [0082.186] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR9F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir9f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.187] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.187] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.187] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.187] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.187] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR00.GIF", dwFileAttributes=0x80) returned 0 [0082.188] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR00.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir00.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.188] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.188] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.189] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.189] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.189] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR10F.GIF", dwFileAttributes=0x80) returned 0 [0082.190] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR10F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir10f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.190] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.191] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.191] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.191] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.191] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR11F.GIF", dwFileAttributes=0x80) returned 0 [0082.191] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR11F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir11f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.191] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.192] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.192] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.192] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.192] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR12F.GIF", dwFileAttributes=0x80) returned 0 [0082.193] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR12F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir12f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.194] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.194] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.194] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.194] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.194] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR13F.GIF", dwFileAttributes=0x80) returned 0 [0082.194] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR13F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir13f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.195] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.195] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.195] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.195] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.195] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR14F.GIF", dwFileAttributes=0x80) returned 0 [0082.195] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR14F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir14f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.195] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.195] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.196] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.196] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.196] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR15F.GIF", dwFileAttributes=0x80) returned 0 [0082.196] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR15F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir15f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.196] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.196] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.197] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.197] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.197] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR16F.GIF", dwFileAttributes=0x80) returned 0 [0082.197] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR16F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir16f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.198] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.198] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.198] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.198] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.198] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR17F.GIF", dwFileAttributes=0x80) returned 0 [0082.198] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR17F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir17f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.199] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.199] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.199] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.199] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.199] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR18F.GIF", dwFileAttributes=0x80) returned 0 [0082.199] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR18F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir18f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.199] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.199] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.200] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.200] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.200] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR19F.GIF", dwFileAttributes=0x80) returned 0 [0082.201] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR19F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir19f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.201] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.201] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.201] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.201] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.201] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR1B.GIF", dwFileAttributes=0x80) returned 0 [0082.202] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR1B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir1b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.202] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.202] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.202] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.202] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.203] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR1F.GIF", dwFileAttributes=0x80) returned 0 [0082.203] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR1F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir1f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.203] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.203] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.203] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.203] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.203] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR20F.GIF", dwFileAttributes=0x80) returned 0 [0082.204] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR20F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir20f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.204] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.204] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.205] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.205] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.205] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR21F.GIF", dwFileAttributes=0x80) returned 0 [0082.205] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR21F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir21f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.205] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.205] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.206] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.206] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.206] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR22F.GIF", dwFileAttributes=0x80) returned 0 [0082.206] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR22F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir22f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.206] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.206] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.206] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.207] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.207] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR23F.GIF", dwFileAttributes=0x80) returned 0 [0082.207] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR23F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir23f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.207] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.207] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.207] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.207] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.208] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR24F.GIF", dwFileAttributes=0x80) returned 0 [0082.208] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR24F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir24f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.208] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.208] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.209] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.209] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.209] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR25F.GIF", dwFileAttributes=0x80) returned 0 [0082.209] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR25F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir25f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.210] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.210] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.210] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.210] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.210] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR26F.GIF", dwFileAttributes=0x80) returned 0 [0082.210] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR26F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir26f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.210] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.210] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.211] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.211] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.211] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR27F.GIF", dwFileAttributes=0x80) returned 0 [0082.212] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR27F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir27f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.212] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.212] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.212] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.213] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.213] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR28F.GIF", dwFileAttributes=0x80) returned 0 [0082.214] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR28F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir28f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.214] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.214] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.214] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.214] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.215] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR29F.GIF", dwFileAttributes=0x80) returned 0 [0082.215] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR29F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir29f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.215] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.215] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.215] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.215] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.215] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR2B.GIF", dwFileAttributes=0x80) returned 0 [0082.216] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR2B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir2b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.216] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.216] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.217] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.217] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.217] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR2F.GIF", dwFileAttributes=0x80) returned 0 [0082.217] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR2F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir2f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.217] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.217] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.217] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.217] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.218] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR30F.GIF", dwFileAttributes=0x80) returned 0 [0082.218] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR30F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir30f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.218] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.218] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.218] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.218] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.219] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR31F.GIF", dwFileAttributes=0x80) returned 0 [0082.219] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR31F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir31f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.219] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.219] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.219] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.219] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.220] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR32F.GIF", dwFileAttributes=0x80) returned 0 [0082.220] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR32F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir32f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.220] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.220] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.220] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.220] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.221] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR33F.GIF", dwFileAttributes=0x80) returned 0 [0082.221] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR33F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir33f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.221] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.221] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.221] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.221] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.221] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR34F.GIF", dwFileAttributes=0x80) returned 0 [0082.222] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR34F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir34f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.222] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.222] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.222] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.222] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.222] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR35F.GIF", dwFileAttributes=0x80) returned 0 [0082.223] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR35F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir35f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.223] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.223] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.224] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.224] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.224] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR36F.GIF", dwFileAttributes=0x80) returned 0 [0082.224] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR36F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir36f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.225] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.225] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.225] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.225] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.225] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR37F.GIF", dwFileAttributes=0x80) returned 0 [0082.225] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR37F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir37f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.226] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.226] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.226] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.226] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.226] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR38F.GIF", dwFileAttributes=0x80) returned 0 [0082.227] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR38F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir38f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.227] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.227] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.227] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.227] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.227] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR39F.GIF", dwFileAttributes=0x80) returned 0 [0082.227] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR39F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir39f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.228] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.228] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.228] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.228] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.228] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR3B.GIF", dwFileAttributes=0x80) returned 0 [0082.228] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR3B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir3b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.229] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.229] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.229] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.229] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.229] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR3F.GIF", dwFileAttributes=0x80) returned 0 [0082.229] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR3F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir3f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.229] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.229] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.230] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.230] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.230] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR40F.GIF", dwFileAttributes=0x80) returned 0 [0082.230] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR40F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir40f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.230] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.230] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.231] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.231] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.231] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR41F.GIF", dwFileAttributes=0x80) returned 0 [0082.231] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR41F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir41f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.231] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.231] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.231] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.232] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.232] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR42F.GIF", dwFileAttributes=0x80) returned 0 [0082.232] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR42F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir42f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.232] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.232] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.232] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.232] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.233] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR43B.GIF", dwFileAttributes=0x80) returned 0 [0082.233] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR43B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir43b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.234] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.234] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.234] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.234] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.234] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR43F.GIF", dwFileAttributes=0x80) returned 0 [0082.235] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR43F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir43f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.236] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.236] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.236] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.236] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.236] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR44B.GIF", dwFileAttributes=0x80) returned 0 [0082.236] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR44B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir44b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.237] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.237] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.237] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.237] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.237] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR44F.GIF", dwFileAttributes=0x80) returned 0 [0082.240] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR44F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir44f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.241] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.241] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.241] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.241] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.241] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR45B.GIF", dwFileAttributes=0x80) returned 0 [0082.242] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR45B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir45b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.242] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.242] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.242] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.242] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.242] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR45F.GIF", dwFileAttributes=0x80) returned 0 [0082.243] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR45F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir45f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.243] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.243] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.243] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.243] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.244] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR46B.GIF", dwFileAttributes=0x80) returned 0 [0082.244] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR46B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir46b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.244] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.244] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.244] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.244] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.245] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR46F.GIF", dwFileAttributes=0x80) returned 0 [0082.245] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR46F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir46f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.245] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.245] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.246] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.246] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.246] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR47B.GIF", dwFileAttributes=0x80) returned 0 [0082.246] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR47B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir47b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.247] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.247] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.247] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.247] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.247] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR47F.GIF", dwFileAttributes=0x80) returned 0 [0082.248] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR47F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir47f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.248] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.248] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.248] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.248] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.248] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR48B.GIF", dwFileAttributes=0x80) returned 0 [0082.249] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR48B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir48b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.249] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.249] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.249] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.249] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.250] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR48F.GIF", dwFileAttributes=0x80) returned 0 [0082.250] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR48F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir48f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.251] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.251] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.251] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.251] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.251] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR49B.GIF", dwFileAttributes=0x80) returned 0 [0082.251] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR49B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir49b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.252] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.252] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.252] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.252] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.252] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR49F.GIF", dwFileAttributes=0x80) returned 0 [0082.252] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR49F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir49f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.253] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.253] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.253] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.253] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.253] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR4B.GIF", dwFileAttributes=0x80) returned 0 [0082.253] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR4B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir4b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.253] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.253] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.254] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.254] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.254] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR4F.GIF", dwFileAttributes=0x80) returned 0 [0082.254] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR4F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir4f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.254] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.254] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.255] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.255] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.255] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR50B.GIF", dwFileAttributes=0x80) returned 0 [0082.255] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR50B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir50b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.255] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.255] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.255] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.255] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.256] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR50F.GIF", dwFileAttributes=0x80) returned 0 [0082.256] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR50F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir50f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.256] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.256] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.256] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.256] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.257] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR51B.GIF", dwFileAttributes=0x80) returned 0 [0082.257] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR51B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir51b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.257] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.257] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.257] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.257] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.258] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR51F.GIF", dwFileAttributes=0x80) returned 0 [0082.258] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR51F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir51f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.258] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.258] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.258] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.258] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.259] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR5B.GIF", dwFileAttributes=0x80) returned 0 [0082.259] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR5B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir5b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.260] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.260] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.260] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.260] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.260] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR5F.GIF", dwFileAttributes=0x80) returned 0 [0082.261] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR5F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir5f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.261] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.261] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.261] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.261] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.262] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR6B.GIF", dwFileAttributes=0x80) returned 0 [0082.262] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR6B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir6b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.262] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.262] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.262] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.262] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.262] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR6F.GIF", dwFileAttributes=0x80) returned 0 [0082.263] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR6F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir6f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.263] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.263] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.264] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.264] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.264] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR7B.GIF", dwFileAttributes=0x80) returned 0 [0082.264] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR7B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir7b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.265] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.265] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.265] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.265] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.265] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR7F.GIF", dwFileAttributes=0x80) returned 0 [0082.265] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR7F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir7f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.266] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.266] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.266] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.266] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.267] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR8B.GIF", dwFileAttributes=0x80) returned 0 [0082.267] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR8B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir8b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.267] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.267] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.267] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.268] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.268] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR8F.GIF", dwFileAttributes=0x80) returned 0 [0082.268] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR8F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir8f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.268] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.268] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.269] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.269] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.269] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR9B.GIF", dwFileAttributes=0x80) returned 0 [0082.269] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR9B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir9b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.269] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.270] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.270] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.270] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.270] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR9F.GIF", dwFileAttributes=0x80) returned 0 [0082.270] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR9F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir9f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.270] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.270] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.271] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0082.271] FindClose (in: hFindFile=0xd7079a0e70 | out: hFindFile=0xd7079a0e70) returned 1 [0082.272] SetLastError (dwErrCode=0x0) [0082.272] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.274] GetLastError () returned 0x5 [0082.274] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0082.274] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.274] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.274] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.274] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.275] SetLastError (dwErrCode=0x0) [0082.275] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.275] GetLastError () returned 0x5 [0082.275] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0082.275] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.275] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0810 [0082.280] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.280] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.280] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.281] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicelegant.dotx", dwFileAttributes=0x80) returned 0 [0082.282] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicelegant.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\basicelegant.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.282] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.282] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.282] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.283] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.283] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicsimple.dotx", dwFileAttributes=0x80) returned 0 [0082.283] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicsimple.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\basicsimple.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.283] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.283] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.284] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.284] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.284] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicstylish.dotx", dwFileAttributes=0x80) returned 0 [0082.284] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicstylish.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\basicstylish.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.284] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.284] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.285] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.285] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.285] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwcapitalized.dotx", dwFileAttributes=0x80) returned 0 [0082.286] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwcapitalized.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\bwcapitalized.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.286] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.286] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.286] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.287] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.287] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwclassic.dotx", dwFileAttributes=0x80) returned 0 [0082.287] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwclassic.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\bwclassic.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.288] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.288] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.288] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.288] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.288] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwnumbered.dotx", dwFileAttributes=0x80) returned 0 [0082.289] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwnumbered.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\bwnumbered.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.289] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.289] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.289] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.289] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.290] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\casual.dotx", dwFileAttributes=0x80) returned 0 [0082.290] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\casual.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\casual.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.290] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.290] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.291] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.291] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.291] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\centered.dotx", dwFileAttributes=0x80) returned 0 [0082.291] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\centered.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\centered.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.292] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.292] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.292] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.292] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.292] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\Classic.dotx", dwFileAttributes=0x80) returned 0 [0082.293] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\Classic.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\classic.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.293] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.293] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.293] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.293] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.294] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\Default.dotx", dwFileAttributes=0x80) returned 0 [0082.294] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\Default.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\default.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.294] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.294] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.295] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.295] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.295] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linesdistinctive.dotx", dwFileAttributes=0x80) returned 0 [0082.296] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linesdistinctive.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\linesdistinctive.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.296] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.296] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.297] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.297] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.297] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linessimple.dotx", dwFileAttributes=0x80) returned 0 [0082.298] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linessimple.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\linessimple.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.299] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.299] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.299] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.299] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.299] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linesstylish.dotx", dwFileAttributes=0x80) returned 0 [0082.299] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linesstylish.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\linesstylish.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.300] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.300] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.300] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.300] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.300] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.300] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\shaded.dotx", dwFileAttributes=0x80) returned 0 [0082.300] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\shaded.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\shaded.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.301] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.301] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.301] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.301] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.301] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\word2013.dotx", dwFileAttributes=0x80) returned 0 [0082.301] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\word2013.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\word2013.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.302] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.302] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.302] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.302] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.302] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\word2013bw.dotx", dwFileAttributes=0x80) returned 0 [0082.302] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\word2013bw.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\word2013bw.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.303] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.303] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.303] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0082.303] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0082.304] SetLastError (dwErrCode=0x0) [0082.304] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.306] GetLastError () returned 0x5 [0082.306] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0082.306] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.306] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.306] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.307] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ReviewRouting_Init.xsn", dwFileAttributes=0x80) returned 0 [0082.309] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ReviewRouting_Init.xsn" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\reviewrouting_init.xsn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.309] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.309] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.310] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.310] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.310] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ReviewRouting_Review.xsn", dwFileAttributes=0x80) returned 0 [0082.310] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ReviewRouting_Review.xsn" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\reviewrouting_review.xsn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.310] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.310] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.311] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.311] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.311] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ROSE.CSS", dwFileAttributes=0x80) returned 0 [0082.312] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ROSE.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\rose.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.312] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.312] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.312] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.312] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.313] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SAVASWEB.VSL", dwFileAttributes=0x80) returned 0 [0082.314] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SAVASWEB.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\savasweb.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.314] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.314] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.314] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.314] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.315] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SETLANG.HXS", dwFileAttributes=0x80) returned 0 [0082.316] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SETLANG.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\setlang.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.316] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.316] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.316] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.316] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.316] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SETLANG_COL.HXC", dwFileAttributes=0x80) returned 0 [0082.317] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SETLANG_COL.HXC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\setlang_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.317] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.317] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.318] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.322] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SETLANG_COL.HXT", dwFileAttributes=0x80) returned 0 [0082.323] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SETLANG_COL.HXT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\setlang_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.323] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.323] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.323] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.323] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.324] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SETLANG_F_COL.HXK", dwFileAttributes=0x80) returned 0 [0082.324] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SETLANG_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\setlang_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.324] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.324] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.324] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.324] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.325] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SETLANG_K_COL.HXK", dwFileAttributes=0x80) returned 0 [0082.325] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SETLANG_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\setlang_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.325] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.325] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.325] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.325] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.325] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.326] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SHAPNUM.VSL", dwFileAttributes=0x80) returned 0 [0082.326] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SHAPNUM.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\shapnum.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.326] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.327] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.327] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.327] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.327] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKY.CSS", dwFileAttributes=0x80) returned 0 [0082.328] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKY.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\sky.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.328] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.328] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.328] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.328] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.329] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB.HXS", dwFileAttributes=0x80) returned 0 [0082.330] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.330] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.330] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.330] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.330] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.330] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_BASIC.HXS", dwFileAttributes=0x80) returned 0 [0082.330] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_BASIC.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_basic.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.331] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.331] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.331] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.331] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.331] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_BASIC_COL.HXC", dwFileAttributes=0x80) returned 0 [0082.331] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_BASIC_COL.HXC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_basic_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.332] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.332] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.332] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.332] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.332] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_BASIC_COL.HXT", dwFileAttributes=0x80) returned 0 [0082.332] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_BASIC_COL.HXT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_basic_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.333] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.333] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.333] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.333] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.333] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_BASIC_F_COL.HXK", dwFileAttributes=0x80) returned 0 [0082.333] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_BASIC_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_basic_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.334] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.334] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.334] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.334] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_BASIC_K_COL.HXK", dwFileAttributes=0x80) returned 0 [0082.334] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_BASIC_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_basic_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.335] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.335] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.335] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.335] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_COL.HXC", dwFileAttributes=0x80) returned 0 [0082.336] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_COL.HXC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.336] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.336] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.336] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.336] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.336] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_COL.HXT", dwFileAttributes=0x80) returned 0 [0082.337] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_COL.HXT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.337] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.337] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.337] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.337] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.337] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_F_COL.HXK", dwFileAttributes=0x80) returned 0 [0082.337] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.338] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.338] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.338] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.338] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.338] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_K_COL.HXK", dwFileAttributes=0x80) returned 0 [0082.338] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.338] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.339] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.339] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.339] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.339] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINE.HXS", dwFileAttributes=0x80) returned 0 [0082.339] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINE.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_online.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.339] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.339] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.340] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.340] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.340] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINEG.HXS", dwFileAttributes=0x80) returned 0 [0082.340] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINEG.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_onlineg.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.340] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.340] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.341] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.341] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.341] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINEG_COL.HXC", dwFileAttributes=0x80) returned 0 [0082.341] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINEG_COL.HXC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_onlineg_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.341] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.341] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.341] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.341] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.342] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINEG_COL.HXT", dwFileAttributes=0x80) returned 0 [0082.342] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINEG_COL.HXT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_onlineg_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.342] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.342] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.342] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.342] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.343] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINEG_F_COL.HXK", dwFileAttributes=0x80) returned 0 [0082.343] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINEG_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_onlineg_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.343] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.343] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.343] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.343] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.343] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINEG_K_COL.HXK", dwFileAttributes=0x80) returned 0 [0082.344] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINEG_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_onlineg_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.344] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.344] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.344] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.344] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.345] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINE_COL.HXC", dwFileAttributes=0x80) returned 0 [0082.345] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINE_COL.HXC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_online_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.345] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.345] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.345] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.345] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.345] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINE_COL.HXT", dwFileAttributes=0x80) returned 0 [0082.346] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINE_COL.HXT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_online_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.346] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.346] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.346] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.346] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.346] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINE_F_COL.HXK", dwFileAttributes=0x80) returned 0 [0082.347] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINE_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_online_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.347] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.347] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.347] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.347] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.347] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINE_K_COL.HXK", dwFileAttributes=0x80) returned 0 [0082.347] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINE_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_online_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.348] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.348] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.348] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.348] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.348] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SkypeForBusinessBasic2019_eula.txt", dwFileAttributes=0x80) returned 0 [0082.349] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SkypeForBusinessBasic2019_eula.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypeforbusinessbasic2019_eula.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.349] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.349] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.349] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.349] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.350] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SkypeForBusinessVDI2019_eula.txt", dwFileAttributes=0x80) returned 0 [0082.350] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SkypeForBusinessVDI2019_eula.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypeforbusinessvdi2019_eula.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.350] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.350] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.350] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.350] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.350] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.351] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SMIGRATE.VSL", dwFileAttributes=0x80) returned 0 [0082.351] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SMIGRATE.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\smigrate.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.352] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.352] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.352] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.356] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.356] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.356] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SPACE.VRD", dwFileAttributes=0x80) returned 0 [0082.356] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SPACE.VRD" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\space.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.356] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.356] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.357] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.357] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.357] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SPRING.CSS", dwFileAttributes=0x80) returned 0 [0082.357] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SPRING.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\spring.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.357] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.357] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.358] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.358] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.358] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SPS.CSS", dwFileAttributes=0x80) returned 0 [0082.358] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SPS.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\sps.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.358] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.358] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.359] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.359] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.359] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SSPRINT.VSL", dwFileAttributes=0x80) returned 0 [0082.359] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SSPRINT.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\ssprint.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.360] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.360] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.360] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.360] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.361] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\STEEL.CSS", dwFileAttributes=0x80) returned 0 [0082.361] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\STEEL.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\steel.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.361] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.361] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.362] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.362] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.362] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\STSLIST.CHM", dwFileAttributes=0x80) returned 0 [0082.362] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\STSLIST.CHM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\stslist.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.362] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.362] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.363] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.363] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.363] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.363] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SUNNY.CSS", dwFileAttributes=0x80) returned 0 [0082.363] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SUNNY.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\sunny.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.363] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.363] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.364] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.364] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.364] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SUNSET.CSS", dwFileAttributes=0x80) returned 0 [0082.364] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SUNSET.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\sunset.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.364] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.364] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.364] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.365] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.365] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TelemetryDashboard.xltx", dwFileAttributes=0x80) returned 0 [0082.365] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TelemetryDashboard.xltx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\telemetrydashboard.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.365] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.365] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.365] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.365] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.366] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TelemetryLog.xltx", dwFileAttributes=0x80) returned 0 [0082.366] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TelemetryLog.xltx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\telemetrylog.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.366] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.366] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.366] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.366] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.367] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeAccess.nrr", dwFileAttributes=0x80) returned 0 [0082.367] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeAccess.nrr" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\tellmeaccess.nrr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.367] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.367] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.367] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.367] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.368] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeExcel.nrr", dwFileAttributes=0x80) returned 0 [0082.368] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeExcel.nrr" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\tellmeexcel.nrr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.368] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.368] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.368] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.368] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.369] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeOneNote.nrr", dwFileAttributes=0x80) returned 0 [0082.369] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeOneNote.nrr" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\tellmeonenote.nrr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.369] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.369] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.369] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.369] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.370] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeOutlook.nrr", dwFileAttributes=0x80) returned 0 [0082.370] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeOutlook.nrr" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\tellmeoutlook.nrr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.370] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.370] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.370] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.370] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.371] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeOutlookAddr.nrr", dwFileAttributes=0x80) returned 0 [0082.371] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeOutlookAddr.nrr" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\tellmeoutlookaddr.nrr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.371] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.371] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.371] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.371] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.372] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeOutlookAppt.nrr", dwFileAttributes=0x80) returned 0 [0082.372] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeOutlookAppt.nrr" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\tellmeoutlookappt.nrr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.372] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.372] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.372] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.372] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.373] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeOutlookMail.nrr", dwFileAttributes=0x80) returned 0 [0082.373] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeOutlookMail.nrr" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\tellmeoutlookmail.nrr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.373] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.373] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.373] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.373] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.373] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeOutlookMailRead.nrr", dwFileAttributes=0x80) returned 0 [0082.374] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeOutlookMailRead.nrr" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\tellmeoutlookmailread.nrr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.374] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.374] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.374] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.374] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.374] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeOutlookMeetingReqRead.nrr", dwFileAttributes=0x80) returned 0 [0082.374] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeOutlookMeetingReqRead.nrr" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\tellmeoutlookmeetingreqread.nrr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.375] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.375] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.375] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.375] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.375] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeOutlookMeetingReqSend.nrr", dwFileAttributes=0x80) returned 0 [0082.375] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeOutlookMeetingReqSend.nrr" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\tellmeoutlookmeetingreqsend.nrr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.376] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.376] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.377] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.377] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.377] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeOutlookTask.nrr", dwFileAttributes=0x80) returned 0 [0082.377] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeOutlookTask.nrr" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\tellmeoutlooktask.nrr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.377] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.377] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.377] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.377] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMePowerPoint.nrr", dwFileAttributes=0x80) returned 0 [0082.378] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMePowerPoint.nrr" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\tellmepowerpoint.nrr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.378] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.378] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.378] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.378] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.379] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeProject.nrr", dwFileAttributes=0x80) returned 0 [0082.379] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeProject.nrr" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\tellmeproject.nrr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.379] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.379] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.379] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.379] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.380] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeVisio.nrr", dwFileAttributes=0x80) returned 0 [0082.380] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeVisio.nrr" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\tellmevisio.nrr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.380] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.380] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.380] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.380] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.381] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeWord.nrr", dwFileAttributes=0x80) returned 0 [0082.381] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeWord.nrr" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\tellmeword.nrr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.381] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.381] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.381] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.381] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.382] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TERRCOTT.CSS", dwFileAttributes=0x80) returned 0 [0082.383] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TERRCOTT.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\terrcott.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.383] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.384] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.384] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.384] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.384] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TIMESOLN.VSL", dwFileAttributes=0x80) returned 0 [0082.384] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TIMESOLN.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\timesoln.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.384] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.385] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.385] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.385] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.385] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.389] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.389] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.389] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VALVE.VRD", dwFileAttributes=0x80) returned 0 [0082.389] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VALVE.VRD" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\valve.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.390] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.390] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.390] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.390] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.390] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.390] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISCOLOR.VSL", dwFileAttributes=0x80) returned 0 [0082.392] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISCOLOR.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\viscolor.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.392] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.392] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.392] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.392] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.392] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.392] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.393] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO.CSS", dwFileAttributes=0x80) returned 0 [0082.393] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.393] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.393] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.393] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.393] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO.HXS", dwFileAttributes=0x80) returned 0 [0082.394] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.395] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.395] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.395] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.395] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_COL.HXC", dwFileAttributes=0x80) returned 0 [0082.395] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_COL.HXC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.396] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.396] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.397] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.397] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.397] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_COL.HXT", dwFileAttributes=0x80) returned 0 [0082.397] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_COL.HXT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.397] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.397] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.398] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.398] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.398] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_F_COL.HXK", dwFileAttributes=0x80) returned 0 [0082.398] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.398] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.398] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.398] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.398] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.399] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_K_COL.HXK", dwFileAttributes=0x80) returned 0 [0082.399] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.399] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.399] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.399] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.399] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.400] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_PRM.HXS", dwFileAttributes=0x80) returned 0 [0082.400] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_PRM.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio_prm.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.401] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.401] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.402] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.402] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.402] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_PRM_COL.HXC", dwFileAttributes=0x80) returned 0 [0082.403] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_PRM_COL.HXC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio_prm_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.403] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.403] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.403] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.403] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.403] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_PRM_COL.HXT", dwFileAttributes=0x80) returned 0 [0082.404] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_PRM_COL.HXT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio_prm_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.404] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.404] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.404] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.404] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.404] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_PRM_F_COL.HXK", dwFileAttributes=0x80) returned 0 [0082.405] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_PRM_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio_prm_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.405] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.405] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.405] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.405] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.405] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_PRM_K_COL.HXK", dwFileAttributes=0x80) returned 0 [0082.405] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_PRM_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio_prm_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.406] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.406] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.406] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.406] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_STD.HXS", dwFileAttributes=0x80) returned 0 [0082.406] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_STD.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio_std.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.407] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.407] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.407] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.407] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.407] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_STD_COL.HXC", dwFileAttributes=0x80) returned 0 [0082.408] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_STD_COL.HXC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio_std_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.408] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.408] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.408] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.408] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.408] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_STD_COL.HXT", dwFileAttributes=0x80) returned 0 [0082.409] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_STD_COL.HXT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio_std_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.409] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.409] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.409] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.409] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.409] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_STD_F_COL.HXK", dwFileAttributes=0x80) returned 0 [0082.410] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_STD_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio_std_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.410] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.410] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.410] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.410] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.410] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_STD_K_COL.HXK", dwFileAttributes=0x80) returned 0 [0082.411] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_STD_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio_std_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.411] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.411] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.411] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.411] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.411] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_WHATSNEW.XML", dwFileAttributes=0x80) returned 0 [0082.413] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_WHATSNEW.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio_whatsnew.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.413] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.413] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.414] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.414] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.414] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISUTILS.VSL", dwFileAttributes=0x80) returned 0 [0082.415] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISUTILS.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visutils.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.415] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.415] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.415] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.415] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.416] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISWEB.VSL", dwFileAttributes=0x80) returned 0 [0082.417] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISWEB.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visweb.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.417] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.417] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.417] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.417] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.417] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.418] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WacLangPack2019Eula.txt", dwFileAttributes=0x80) returned 0 [0082.419] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WacLangPack2019Eula.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\waclangpack2019eula.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.419] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.419] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.419] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.419] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.419] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WacLangPackEula.txt", dwFileAttributes=0x80) returned 0 [0082.420] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WacLangPackEula.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\waclangpackeula.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.421] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.421] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.422] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.422] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.422] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.422] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WDCMPVRD.XML", dwFileAttributes=0x80) returned 0 [0082.423] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WDCMPVRD.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\wdcmpvrd.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.424] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.424] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.424] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.424] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.424] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.424] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ.HXS", dwFileAttributes=0x80) returned 0 [0082.425] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winproj.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.425] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.425] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.425] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.427] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.427] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_COL.HXC", dwFileAttributes=0x80) returned 0 [0082.427] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_COL.HXC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winproj_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.428] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.428] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.428] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.428] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.428] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_COL.HXT", dwFileAttributes=0x80) returned 0 [0082.428] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_COL.HXT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winproj_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.429] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.429] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.429] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.429] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.429] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_F_COL.HXK", dwFileAttributes=0x80) returned 0 [0082.429] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winproj_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.430] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.430] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.430] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.430] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.430] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_K_COL.HXK", dwFileAttributes=0x80) returned 0 [0082.431] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winproj_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.431] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.431] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.431] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.431] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.431] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_STD.HXS", dwFileAttributes=0x80) returned 0 [0082.432] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_STD.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winproj_std.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.432] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.432] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.432] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.432] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_STD_COL.HXC", dwFileAttributes=0x80) returned 0 [0082.433] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_STD_COL.HXC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winproj_std_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.433] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.433] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.433] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.433] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.434] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_STD_COL.HXT", dwFileAttributes=0x80) returned 0 [0082.434] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_STD_COL.HXT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winproj_std_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.434] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.434] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.435] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.435] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.435] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_STD_F_COL.HXK", dwFileAttributes=0x80) returned 0 [0082.435] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_STD_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winproj_std_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.435] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.435] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.436] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.436] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.436] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_STD_K_COL.HXK", dwFileAttributes=0x80) returned 0 [0082.436] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_STD_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winproj_std_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.436] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.436] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.437] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.437] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.437] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINSCHD.VRD", dwFileAttributes=0x80) returned 0 [0082.437] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINSCHD.VRD" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winschd.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.437] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.437] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.438] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.438] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.439] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINWORD.HXS", dwFileAttributes=0x80) returned 0 [0082.439] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINWORD.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winword.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.439] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.439] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.440] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.440] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.440] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINWORD_COL.HXC", dwFileAttributes=0x80) returned 0 [0082.440] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINWORD_COL.HXC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winword_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.440] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.441] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.441] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.441] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.441] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINWORD_COL.HXT", dwFileAttributes=0x80) returned 0 [0082.441] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINWORD_COL.HXT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winword_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.442] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.442] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.442] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.442] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.442] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINWORD_F_COL.HXK", dwFileAttributes=0x80) returned 0 [0082.443] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINWORD_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winword_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.443] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.443] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.443] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.443] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.444] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINWORD_K_COL.HXK", dwFileAttributes=0x80) returned 0 [0082.444] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINWORD_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winword_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.444] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.444] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.445] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.445] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.445] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WORD_WHATSNEW.XML", dwFileAttributes=0x80) returned 0 [0082.446] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WORD_WHATSNEW.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\word_whatsnew.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.446] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.446] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.447] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.447] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WORKFLOW.VSL", dwFileAttributes=0x80) returned 0 [0082.447] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WORKFLOW.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\workflow.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.448] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.448] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.448] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.448] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.448] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.448] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.448] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\XFUNC.VSL", dwFileAttributes=0x80) returned 0 [0082.451] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\XFUNC.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\xfunc.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.452] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.452] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.452] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.452] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.453] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Xlate_Complete.xsn", dwFileAttributes=0x80) returned 0 [0082.453] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Xlate_Complete.xsn" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\xlate_complete.xsn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.453] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.453] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.454] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.454] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.454] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Xlate_Init.xsn", dwFileAttributes=0x80) returned 0 [0082.455] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Xlate_Init.xsn" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\xlate_init.xsn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.455] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.455] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.455] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.455] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.455] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.455] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.456] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\XLMACRO.CHM", dwFileAttributes=0x80) returned 0 [0082.456] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\XLMACRO.CHM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\xlmacro.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.456] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.456] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.456] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.457] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0082.457] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0082.457] SetLastError (dwErrCode=0x0) [0082.457] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.457] GetLastError () returned 0x5 [0082.457] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0082.457] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.457] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0082.457] SetLastError (dwErrCode=0x0) [0082.457] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.457] GetLastError () returned 0x5 [0082.457] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0082.457] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.458] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1036\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0810 [0082.459] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.459] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.459] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.459] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1036\\MSO.ACL", dwFileAttributes=0x80) returned 0 [0082.459] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1036\\MSO.ACL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1036\\mso.acl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.459] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.460] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.460] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0082.460] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0082.460] SetLastError (dwErrCode=0x0) [0082.460] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1036\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1036\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.460] GetLastError () returned 0x5 [0082.460] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0082.460] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.460] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0082.460] SetLastError (dwErrCode=0x0) [0082.460] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.461] GetLastError () returned 0x5 [0082.461] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0082.461] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.461] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\3082\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0e70 [0082.461] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.461] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.461] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.461] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\3082\\MSO.ACL", dwFileAttributes=0x80) returned 0 [0082.462] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\3082\\MSO.ACL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\3082\\mso.acl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.462] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.463] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.463] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0082.463] FindClose (in: hFindFile=0xd7079a0e70 | out: hFindFile=0xd7079a0e70) returned 1 [0082.463] SetLastError (dwErrCode=0x0) [0082.463] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\3082\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\3082\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.463] GetLastError () returned 0x5 [0082.463] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0082.463] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.463] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0082.463] SetLastError (dwErrCode=0x0) [0082.463] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.464] GetLastError () returned 0x5 [0082.464] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0082.464] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.464] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0e70 [0082.465] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.465] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.465] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.466] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\CLNTWRAP.HTM", dwFileAttributes=0x80) returned 0 [0082.466] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\CLNTWRAP.HTM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accessweb\\clntwrap.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.466] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.466] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.467] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.467] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\RPT2HTM4.XSL", dwFileAttributes=0x80) returned 0 [0082.467] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\RPT2HTM4.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accessweb\\rpt2htm4.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.468] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.468] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.468] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.468] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.468] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\SERVWRAP.ASP", dwFileAttributes=0x80) returned 0 [0082.469] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\SERVWRAP.ASP" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accessweb\\servwrap.asp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.469] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.469] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.469] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0082.469] FindClose (in: hFindFile=0xd7079a0e70 | out: hFindFile=0xd7079a0e70) returned 1 [0082.470] SetLastError (dwErrCode=0x0) [0082.470] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accessweb\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.470] GetLastError () returned 0x5 [0082.470] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0082.470] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.470] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0082.470] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0082.470] SetLastError (dwErrCode=0x0) [0082.470] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.470] GetLastError () returned 0x5 [0082.470] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0082.470] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.471] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0e70 [0082.473] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.473] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.473] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.473] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZDAT12.ACCDU", dwFileAttributes=0x80) returned 0 [0082.475] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZDAT12.ACCDU" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwzdat12.accdu"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.475] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.475] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.476] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.476] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.476] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZLIB.ACCDE", dwFileAttributes=0x80) returned 0 [0082.476] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZLIB.ACCDE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwzlib.accde"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.477] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.477] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.478] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.478] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.478] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZMAIN.ACCDE", dwFileAttributes=0x80) returned 0 [0082.479] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZMAIN.ACCDE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwzmain.accde"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.479] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.479] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.479] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.479] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.479] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZTOOL.ACCDE", dwFileAttributes=0x80) returned 0 [0082.480] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZTOOL.ACCDE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwztool.accde"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.480] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.480] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.480] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.480] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZUSR12.ACCDU", dwFileAttributes=0x80) returned 0 [0082.482] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZUSR12.ACCDU" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwzusr12.accdu"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.482] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.482] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.482] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.482] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.483] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\UTILITY.ACCDA", dwFileAttributes=0x80) returned 0 [0082.483] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\UTILITY.ACCDA" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\utility.accda"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.484] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.484] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.484] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0082.484] FindClose (in: hFindFile=0xd7079a0e70 | out: hFindFile=0xd7079a0e70) returned 1 [0082.486] SetLastError (dwErrCode=0x0) [0082.486] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.489] GetLastError () returned 0x5 [0082.489] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0082.489] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.489] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0082.489] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0082.489] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0082.489] SetLastError (dwErrCode=0x0) [0082.489] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.490] GetLastError () returned 0x5 [0082.490] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0082.490] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.490] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0e70 [0082.492] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.492] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.492] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.492] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.492] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0082.493] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\FAXEXT.ECF", dwFileAttributes=0x80) returned 0 [0082.493] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\FAXEXT.ECF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\faxext.ecf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.493] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.493] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.493] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0082.493] SetLastError (dwErrCode=0x0) [0082.493] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.494] GetLastError () returned 0x5 [0082.494] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0082.494] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.494] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0450 [0082.498] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.498] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0082.498] SetLastError (dwErrCode=0x0) [0082.498] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.498] GetLastError () returned 0x5 [0082.498] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0082.498] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.498] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0ed0 [0082.502] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0082.502] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0082.502] SetLastError (dwErrCode=0x0) [0082.502] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.503] GetLastError () returned 0x5 [0082.503] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.503] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.503] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\af\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a0810 [0082.505] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.505] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.505] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.505] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.506] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.506] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.506] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0082.506] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0082.506] SetLastError (dwErrCode=0x0) [0082.506] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\af\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\af\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.510] GetLastError () returned 0x5 [0082.510] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.510] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.510] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0082.510] SetLastError (dwErrCode=0x0) [0082.510] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.510] GetLastError () returned 0x5 [0082.510] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.511] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.511] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\am\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a0810 [0082.512] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.512] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.512] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.512] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.512] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.512] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.512] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0082.512] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0082.513] SetLastError (dwErrCode=0x0) [0082.513] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\am\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\am\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.517] GetLastError () returned 0x5 [0082.517] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.517] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.517] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0082.517] SetLastError (dwErrCode=0x0) [0082.517] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.518] GetLastError () returned 0x5 [0082.518] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.518] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.518] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ar\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976d30 [0082.521] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.521] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.521] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.522] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.522] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.522] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.522] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.522] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.522] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.522] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.522] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0082.522] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0082.523] SetLastError (dwErrCode=0x0) [0082.523] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ar\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ar\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.526] GetLastError () returned 0x5 [0082.526] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.526] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.526] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0082.526] SetLastError (dwErrCode=0x0) [0082.526] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.526] GetLastError () returned 0x5 [0082.526] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.526] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.527] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\as\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976d30 [0082.528] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.528] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.528] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.528] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.528] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.528] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.528] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0082.528] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0082.529] SetLastError (dwErrCode=0x0) [0082.529] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\as\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\as\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.533] GetLastError () returned 0x5 [0082.533] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.533] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.533] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0082.533] SetLastError (dwErrCode=0x0) [0082.533] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.533] GetLastError () returned 0x5 [0082.534] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.534] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.534] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\az-Latn-AZ\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976d30 [0082.535] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.535] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.535] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.535] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.535] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.535] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.535] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0082.535] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0082.536] SetLastError (dwErrCode=0x0) [0082.536] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\az-Latn-AZ\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\az-latn-az\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.540] GetLastError () returned 0x5 [0082.540] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.540] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.540] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0082.540] SetLastError (dwErrCode=0x0) [0082.540] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.540] GetLastError () returned 0x5 [0082.540] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.540] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.540] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\be\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707977510 [0082.542] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.542] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.542] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.542] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.542] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.543] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.543] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0082.543] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0082.543] SetLastError (dwErrCode=0x0) [0082.543] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\be\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\be\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.547] GetLastError () returned 0x5 [0082.547] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.547] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.547] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0082.547] SetLastError (dwErrCode=0x0) [0082.547] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.548] GetLastError () returned 0x5 [0082.548] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.548] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.548] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bg\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976d30 [0082.551] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.551] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.551] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.551] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.551] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.551] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.551] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.551] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.551] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.551] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.551] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0082.551] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0082.552] SetLastError (dwErrCode=0x0) [0082.552] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bg\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\bg\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.555] GetLastError () returned 0x5 [0082.555] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.555] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.556] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0082.556] SetLastError (dwErrCode=0x0) [0082.556] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.556] GetLastError () returned 0x5 [0082.556] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.556] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.556] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bn-BD\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707977510 [0082.557] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.558] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.558] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.558] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.558] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.558] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.558] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0082.558] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0082.558] SetLastError (dwErrCode=0x0) [0082.559] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bn-BD\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\bn-bd\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.562] GetLastError () returned 0x5 [0082.562] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.562] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.562] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0082.562] SetLastError (dwErrCode=0x0) [0082.562] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.562] GetLastError () returned 0x5 [0082.562] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.562] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.562] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bn-IN\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707977510 [0082.564] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.564] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.564] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.564] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.564] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.564] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.564] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0082.564] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0082.565] SetLastError (dwErrCode=0x0) [0082.565] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bn-IN\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\bn-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.568] GetLastError () returned 0x5 [0082.569] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.569] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.569] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0082.569] SetLastError (dwErrCode=0x0) [0082.569] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.569] GetLastError () returned 0x5 [0082.569] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.569] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.569] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bs-Latn-BA\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976d30 [0082.571] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.571] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.571] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.571] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.571] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.571] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.571] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0082.571] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0082.572] SetLastError (dwErrCode=0x0) [0082.572] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bs-Latn-BA\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\bs-latn-ba\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.575] GetLastError () returned 0x5 [0082.575] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.575] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.575] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0082.575] SetLastError (dwErrCode=0x0) [0082.575] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.575] GetLastError () returned 0x5 [0082.575] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.575] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.575] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ca\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976d30 [0082.578] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.578] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.578] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.578] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.578] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.578] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.578] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.578] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.578] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.578] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.578] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0082.578] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0082.580] SetLastError (dwErrCode=0x0) [0082.580] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ca\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ca\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.583] GetLastError () returned 0x5 [0082.583] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.583] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.583] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0082.583] SetLastError (dwErrCode=0x0) [0082.584] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.584] GetLastError () returned 0x5 [0082.584] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.584] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.584] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ca-ES-valencia\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707977510 [0082.587] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.587] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.587] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.587] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.587] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.587] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.587] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0082.587] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0082.588] SetLastError (dwErrCode=0x0) [0082.588] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ca-ES-valencia\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ca-es-valencia\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.591] GetLastError () returned 0x5 [0082.591] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.592] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.592] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0082.592] SetLastError (dwErrCode=0x0) [0082.592] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.592] GetLastError () returned 0x5 [0082.592] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.592] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.592] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\cs\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976d30 [0082.595] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.595] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.595] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.595] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.595] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.595] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.595] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.595] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.595] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.595] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.595] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0082.595] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0082.596] SetLastError (dwErrCode=0x0) [0082.596] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\cs\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\cs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.599] GetLastError () returned 0x5 [0082.599] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.599] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.599] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0082.599] SetLastError (dwErrCode=0x0) [0082.600] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.600] GetLastError () returned 0x5 [0082.600] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.600] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.600] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\cy\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976d30 [0082.601] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.601] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.601] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.601] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.602] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.602] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.602] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0082.602] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0082.602] SetLastError (dwErrCode=0x0) [0082.602] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\cy\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\cy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.606] GetLastError () returned 0x5 [0082.606] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.606] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.606] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0082.606] SetLastError (dwErrCode=0x0) [0082.606] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.606] GetLastError () returned 0x5 [0082.606] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.606] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.606] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\da\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707977510 [0082.609] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.609] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.609] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.609] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.609] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.609] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.609] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.609] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.609] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.609] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.609] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0082.609] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0082.611] SetLastError (dwErrCode=0x0) [0082.611] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\da\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\da\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.614] GetLastError () returned 0x5 [0082.614] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.614] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.614] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0082.614] SetLastError (dwErrCode=0x0) [0082.614] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.614] GetLastError () returned 0x5 [0082.614] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.615] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.615] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\de\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976d30 [0082.617] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.617] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.617] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.617] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.617] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.617] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.617] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.617] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.617] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.617] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.617] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0082.617] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0082.618] SetLastError (dwErrCode=0x0) [0082.618] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\de\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\de\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.621] GetLastError () returned 0x5 [0082.621] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.621] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.621] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0082.621] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0082.621] SetLastError (dwErrCode=0x0) [0082.621] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.622] GetLastError () returned 0x5 [0082.622] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.622] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.622] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\el\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707977510 [0082.624] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.624] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.624] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.624] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.624] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.624] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.624] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.624] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.624] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.624] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.624] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0082.624] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0082.625] SetLastError (dwErrCode=0x0) [0082.625] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\el\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\el\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.629] GetLastError () returned 0x5 [0082.629] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.629] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.629] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0082.629] SetLastError (dwErrCode=0x0) [0082.629] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.629] GetLastError () returned 0x5 [0082.629] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.629] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.629] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\es\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976d30 [0082.631] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.631] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.631] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.631] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.631] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.631] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.631] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.631] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.631] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.631] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.631] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0082.631] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0082.632] SetLastError (dwErrCode=0x0) [0082.632] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\es\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\es\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.635] GetLastError () returned 0x5 [0082.635] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.635] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.635] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0082.635] SetLastError (dwErrCode=0x0) [0082.635] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.636] GetLastError () returned 0x5 [0082.636] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.636] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.636] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\et\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707977510 [0082.638] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.638] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.638] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.638] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.638] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.638] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.638] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.638] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.638] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.638] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.638] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0082.638] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0082.639] SetLastError (dwErrCode=0x0) [0082.639] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\et\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\et\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.642] GetLastError () returned 0x5 [0082.642] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.643] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.643] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0082.643] SetLastError (dwErrCode=0x0) [0082.643] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.643] GetLastError () returned 0x5 [0082.643] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.643] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.643] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\eu\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976e50 [0082.646] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.646] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.646] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.646] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.646] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.646] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.646] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.646] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.646] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.646] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.646] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0082.646] FindClose (in: hFindFile=0xd707976e50 | out: hFindFile=0xd707976e50) returned 1 [0082.647] SetLastError (dwErrCode=0x0) [0082.647] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\eu\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\eu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.650] GetLastError () returned 0x5 [0082.650] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.651] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.651] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0082.651] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0082.651] SetLastError (dwErrCode=0x0) [0082.651] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.651] GetLastError () returned 0x5 [0082.651] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.651] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.651] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fa\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976d30 [0082.652] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.653] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.653] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.653] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.653] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.653] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.653] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0082.653] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0082.653] SetLastError (dwErrCode=0x0) [0082.654] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fa\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\fa\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.657] GetLastError () returned 0x5 [0082.657] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.657] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.657] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0082.657] SetLastError (dwErrCode=0x0) [0082.657] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.657] GetLastError () returned 0x5 [0082.657] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.658] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.658] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fi\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707977510 [0082.660] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.660] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.660] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.660] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.660] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.660] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.660] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.660] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.660] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.660] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.660] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0082.660] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0082.661] SetLastError (dwErrCode=0x0) [0082.661] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fi\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\fi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.664] GetLastError () returned 0x5 [0082.664] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.664] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.664] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0082.664] SetLastError (dwErrCode=0x0) [0082.664] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.664] GetLastError () returned 0x5 [0082.664] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.664] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.664] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fil\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707977510 [0082.666] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.666] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.666] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.666] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.666] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.666] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.666] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0082.666] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0082.667] SetLastError (dwErrCode=0x0) [0082.667] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fil\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\fil\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.670] GetLastError () returned 0x5 [0082.670] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.670] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.671] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0082.671] SetLastError (dwErrCode=0x0) [0082.671] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.671] GetLastError () returned 0x5 [0082.671] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.671] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.671] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fr\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976d30 [0082.683] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.683] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.683] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.683] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.683] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.683] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.683] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.683] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.683] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.683] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.683] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0082.683] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0082.684] SetLastError (dwErrCode=0x0) [0082.684] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\fr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.687] GetLastError () returned 0x5 [0082.687] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.687] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.687] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0082.687] SetLastError (dwErrCode=0x0) [0082.688] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.688] GetLastError () returned 0x5 [0082.688] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.688] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.688] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ga\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976d30 [0082.690] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.690] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.690] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.690] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.690] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.690] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.690] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0082.691] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0082.691] SetLastError (dwErrCode=0x0) [0082.691] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ga\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ga\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.695] GetLastError () returned 0x5 [0082.695] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.695] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.695] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0082.695] SetLastError (dwErrCode=0x0) [0082.695] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.695] GetLastError () returned 0x5 [0082.695] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.695] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.695] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gd\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707977510 [0082.697] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.697] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.697] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.697] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.697] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.697] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.697] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0082.697] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0082.698] SetLastError (dwErrCode=0x0) [0082.698] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gd\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\gd\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.701] GetLastError () returned 0x5 [0082.701] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.701] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.701] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0082.701] SetLastError (dwErrCode=0x0) [0082.701] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.702] GetLastError () returned 0x5 [0082.702] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.702] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.702] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gl\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976d30 [0082.709] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.709] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.709] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.709] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.709] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.709] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.709] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.709] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.709] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.709] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.709] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0082.709] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0082.710] SetLastError (dwErrCode=0x0) [0082.710] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\gl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.713] GetLastError () returned 0x5 [0082.713] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.713] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.713] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0082.713] SetLastError (dwErrCode=0x0) [0082.713] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.714] GetLastError () returned 0x5 [0082.714] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.714] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.714] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gu\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976d30 [0082.715] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.715] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.715] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.715] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.715] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.715] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.715] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0082.715] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0082.716] SetLastError (dwErrCode=0x0) [0082.716] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gu\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\gu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.720] GetLastError () returned 0x5 [0082.720] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.720] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.720] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0082.720] SetLastError (dwErrCode=0x0) [0082.720] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.720] GetLastError () returned 0x5 [0082.720] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.720] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.720] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\he\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976d30 [0082.722] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.722] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.722] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.722] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.722] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.722] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.722] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.722] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.722] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.722] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.722] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0082.722] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0082.723] SetLastError (dwErrCode=0x0) [0082.723] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\he\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\he\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.726] GetLastError () returned 0x5 [0082.726] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.726] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.726] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0082.726] SetLastError (dwErrCode=0x0) [0082.726] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.727] GetLastError () returned 0x5 [0082.727] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.727] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.727] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hi\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976e50 [0082.729] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.729] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.729] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.729] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.729] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.729] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.729] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.729] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.729] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.729] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.729] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0082.729] FindClose (in: hFindFile=0xd707976e50 | out: hFindFile=0xd707976e50) returned 1 [0082.730] SetLastError (dwErrCode=0x0) [0082.730] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hi\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\hi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.733] GetLastError () returned 0x5 [0082.733] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.733] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.733] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0082.733] SetLastError (dwErrCode=0x0) [0082.733] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.734] GetLastError () returned 0x5 [0082.734] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.734] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.734] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hr\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976d30 [0082.736] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.736] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.736] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.736] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.737] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.737] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.737] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.737] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.737] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.737] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.737] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0082.737] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0082.737] SetLastError (dwErrCode=0x0) [0082.738] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\hr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.741] GetLastError () returned 0x5 [0082.741] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.741] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.741] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0082.741] SetLastError (dwErrCode=0x0) [0082.741] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.741] GetLastError () returned 0x5 [0082.741] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.741] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.741] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hu\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707977510 [0082.745] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.745] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.745] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.745] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.745] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.745] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.745] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.746] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.746] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.746] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.746] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0082.746] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0082.746] SetLastError (dwErrCode=0x0) [0082.746] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hu\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\hu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.750] GetLastError () returned 0x5 [0082.750] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.750] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.750] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0082.750] SetLastError (dwErrCode=0x0) [0082.750] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.750] GetLastError () returned 0x5 [0082.750] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.750] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.750] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hy\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976e50 [0082.784] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.784] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.784] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.784] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.784] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.784] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.784] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0082.784] FindClose (in: hFindFile=0xd707976e50 | out: hFindFile=0xd707976e50) returned 1 [0082.785] SetLastError (dwErrCode=0x0) [0082.785] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hy\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\hy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.788] GetLastError () returned 0x5 [0082.788] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.788] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.788] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0082.788] SetLastError (dwErrCode=0x0) [0082.788] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.789] GetLastError () returned 0x5 [0082.789] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.789] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.789] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\id\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976d30 [0082.791] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.791] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.791] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.791] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.791] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.791] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.791] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.791] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.791] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.791] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.791] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0082.791] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0082.792] SetLastError (dwErrCode=0x0) [0082.792] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\id\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\id\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.795] GetLastError () returned 0x5 [0082.795] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.795] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.795] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0082.795] SetLastError (dwErrCode=0x0) [0082.796] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.796] GetLastError () returned 0x5 [0082.796] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.796] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.796] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\is\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976d30 [0082.798] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.798] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.798] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.798] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.798] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.798] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.798] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0082.798] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0082.799] SetLastError (dwErrCode=0x0) [0082.799] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\is\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\is\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.802] GetLastError () returned 0x5 [0082.802] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.802] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.802] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0082.805] SetLastError (dwErrCode=0x0) [0082.805] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.806] GetLastError () returned 0x5 [0082.806] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.806] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.806] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\it\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976d30 [0082.808] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.808] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.808] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.808] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.808] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.809] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.809] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.809] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.809] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.809] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.809] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0082.809] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0082.809] SetLastError (dwErrCode=0x0) [0082.810] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\it\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\it\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.813] GetLastError () returned 0x5 [0082.813] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.813] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.813] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0082.813] SetLastError (dwErrCode=0x0) [0082.814] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.814] GetLastError () returned 0x5 [0082.814] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.814] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.814] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ja\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707977510 [0082.816] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.816] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.816] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.816] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.816] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.816] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.816] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.816] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.816] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.816] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.816] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0082.816] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0082.817] SetLastError (dwErrCode=0x0) [0082.817] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ja\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ja\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.820] GetLastError () returned 0x5 [0082.820] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.820] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.820] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0082.820] SetLastError (dwErrCode=0x0) [0082.820] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.821] GetLastError () returned 0x5 [0082.821] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.821] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.821] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ka\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707977510 [0082.822] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.822] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.822] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.822] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.822] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.822] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.822] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0082.822] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0082.823] SetLastError (dwErrCode=0x0) [0082.823] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ka\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ka\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.826] GetLastError () returned 0x5 [0082.826] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.826] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.826] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0082.826] SetLastError (dwErrCode=0x0) [0082.826] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.827] GetLastError () returned 0x5 [0082.827] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.827] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.827] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kk\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707977510 [0082.829] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.829] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.829] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.829] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.829] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.829] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.829] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.829] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.829] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.829] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.829] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0082.829] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0082.830] SetLastError (dwErrCode=0x0) [0082.830] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kk\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\kk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.833] GetLastError () returned 0x5 [0082.833] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.833] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.833] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0082.833] SetLastError (dwErrCode=0x0) [0082.833] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.834] GetLastError () returned 0x5 [0082.834] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.834] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.834] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\km\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707977510 [0082.836] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.837] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.837] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.837] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.837] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.837] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.837] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0082.837] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0082.838] SetLastError (dwErrCode=0x0) [0082.838] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\km\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\km\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.841] GetLastError () returned 0x5 [0082.841] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.841] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.841] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0082.841] SetLastError (dwErrCode=0x0) [0082.841] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.842] GetLastError () returned 0x5 [0082.842] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.842] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.842] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kn\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707977510 [0082.844] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.844] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.844] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.844] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.844] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.844] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.844] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0082.844] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0082.847] SetLastError (dwErrCode=0x0) [0082.847] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kn\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\kn\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.850] GetLastError () returned 0x5 [0082.850] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.850] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.850] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0082.850] SetLastError (dwErrCode=0x0) [0082.850] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.851] GetLastError () returned 0x5 [0082.851] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.851] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.851] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ko\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976d30 [0082.853] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.853] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.853] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.853] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.853] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.853] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.853] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.853] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.853] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.853] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.853] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0082.853] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0082.854] SetLastError (dwErrCode=0x0) [0082.854] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ko\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ko\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.858] GetLastError () returned 0x5 [0082.858] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.858] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.858] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0082.858] SetLastError (dwErrCode=0x0) [0082.858] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.858] GetLastError () returned 0x5 [0082.858] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.858] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.858] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kok\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707977510 [0082.945] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.945] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.945] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.945] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.945] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.945] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.945] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0082.945] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0082.946] SetLastError (dwErrCode=0x0) [0082.946] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kok\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\kok\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.961] GetLastError () returned 0x5 [0082.961] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.961] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.961] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0082.961] SetLastError (dwErrCode=0x0) [0082.961] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.961] GetLastError () returned 0x5 [0082.961] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.961] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.961] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ky\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976d30 [0082.981] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.981] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.981] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.981] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.981] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.981] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.981] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0082.981] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0082.982] SetLastError (dwErrCode=0x0) [0082.982] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ky\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ky\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.986] GetLastError () returned 0x5 [0082.986] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.986] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.986] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0082.986] SetLastError (dwErrCode=0x0) [0082.986] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.987] GetLastError () returned 0x5 [0082.987] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.987] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.987] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lb\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707977510 [0082.989] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.989] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.989] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.989] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.989] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.989] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.989] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0082.989] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0082.990] SetLastError (dwErrCode=0x0) [0082.990] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lb\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\lb\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.993] GetLastError () returned 0x5 [0082.993] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.993] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.993] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0082.993] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0082.993] SetLastError (dwErrCode=0x0) [0082.993] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.994] GetLastError () returned 0x5 [0082.994] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0082.994] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0082.994] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lt\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976d30 [0082.999] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.999] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.999] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.999] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.999] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.999] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.999] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.999] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.999] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.999] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0082.999] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0082.999] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0083.000] SetLastError (dwErrCode=0x0) [0083.000] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lt\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\lt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.004] GetLastError () returned 0x5 [0083.004] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.004] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.004] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.004] SetLastError (dwErrCode=0x0) [0083.004] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.004] GetLastError () returned 0x5 [0083.005] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.005] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.005] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lv\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707977510 [0083.007] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.007] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.007] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.007] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.007] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.007] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.007] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.007] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.007] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.007] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.007] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0083.007] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0083.007] SetLastError (dwErrCode=0x0) [0083.007] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lv\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\lv\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.010] GetLastError () returned 0x5 [0083.010] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.010] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.010] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.010] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.010] SetLastError (dwErrCode=0x0) [0083.010] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.011] GetLastError () returned 0x5 [0083.011] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.011] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.011] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mi\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707977510 [0083.012] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.012] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.012] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.012] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.012] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.012] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.012] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0083.012] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0083.013] SetLastError (dwErrCode=0x0) [0083.013] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mi\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\mi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.015] GetLastError () returned 0x5 [0083.015] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.015] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.015] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.015] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.015] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.015] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.016] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.016] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.016] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.016] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.016] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.016] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.016] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.016] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.016] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.016] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.016] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.016] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.016] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.016] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.016] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.016] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.017] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.017] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.017] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.017] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.017] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.017] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.017] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.017] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.017] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.017] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.017] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.017] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.017] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.017] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.017] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.017] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.017] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.017] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.017] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.017] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.017] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.017] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.017] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.017] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.017] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.017] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.017] SetLastError (dwErrCode=0x0) [0083.017] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.017] GetLastError () returned 0x5 [0083.017] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.018] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.018] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mk\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976d30 [0083.019] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.019] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.019] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.019] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.019] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.019] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.019] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0083.019] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0083.020] SetLastError (dwErrCode=0x0) [0083.020] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mk\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\mk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.022] GetLastError () returned 0x5 [0083.022] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.022] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.022] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.022] SetLastError (dwErrCode=0x0) [0083.022] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.023] GetLastError () returned 0x5 [0083.023] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.023] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.023] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ml\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707977510 [0083.025] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.025] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.025] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.025] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.025] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.025] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.025] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0083.025] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0083.025] SetLastError (dwErrCode=0x0) [0083.025] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ml\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ml\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.028] GetLastError () returned 0x5 [0083.028] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.028] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.028] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.028] SetLastError (dwErrCode=0x0) [0083.028] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.028] GetLastError () returned 0x5 [0083.028] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.028] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.028] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mn\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707977510 [0083.030] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.030] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.030] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.030] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.030] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.030] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.030] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0083.030] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0083.031] SetLastError (dwErrCode=0x0) [0083.031] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mn\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\mn\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.033] GetLastError () returned 0x5 [0083.033] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.033] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.033] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.034] SetLastError (dwErrCode=0x0) [0083.034] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.034] GetLastError () returned 0x5 [0083.034] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.034] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.034] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mr\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976d30 [0083.036] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.036] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.036] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.036] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.036] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.036] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.036] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0083.036] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0083.037] SetLastError (dwErrCode=0x0) [0083.037] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\mr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.039] GetLastError () returned 0x5 [0083.039] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.039] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.040] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.040] SetLastError (dwErrCode=0x0) [0083.040] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.040] GetLastError () returned 0x5 [0083.040] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.040] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.040] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ms\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707977510 [0083.041] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.042] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.042] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.042] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.042] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.042] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.042] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.042] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.042] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.042] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.042] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0083.042] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0083.043] SetLastError (dwErrCode=0x0) [0083.043] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ms\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ms\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.045] GetLastError () returned 0x5 [0083.045] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.045] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.045] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.045] SetLastError (dwErrCode=0x0) [0083.045] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.046] GetLastError () returned 0x5 [0083.046] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.046] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.046] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mt\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707977510 [0083.047] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.047] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.047] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.047] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.047] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.047] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.047] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0083.047] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0083.048] SetLastError (dwErrCode=0x0) [0083.048] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mt\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\mt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.051] GetLastError () returned 0x5 [0083.051] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.051] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.051] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.051] SetLastError (dwErrCode=0x0) [0083.051] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.051] GetLastError () returned 0x5 [0083.051] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.051] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.051] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ne\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976d30 [0083.058] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.058] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.058] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.058] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.058] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.058] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.058] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0083.058] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0083.059] SetLastError (dwErrCode=0x0) [0083.059] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ne\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ne\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.061] GetLastError () returned 0x5 [0083.061] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.062] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.062] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.062] SetLastError (dwErrCode=0x0) [0083.062] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.062] GetLastError () returned 0x5 [0083.062] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.062] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.062] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\nl\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707977510 [0083.065] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.065] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.065] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.065] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.065] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.065] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.065] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.065] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.065] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.065] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.065] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0083.065] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0083.066] SetLastError (dwErrCode=0x0) [0083.066] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\nl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\nl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.068] GetLastError () returned 0x5 [0083.068] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.068] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.068] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.068] SetLastError (dwErrCode=0x0) [0083.068] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.069] GetLastError () returned 0x5 [0083.069] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.069] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.069] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\nn-NO\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707977510 [0083.070] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.070] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.070] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.070] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.070] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.070] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.070] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0083.070] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0083.071] SetLastError (dwErrCode=0x0) [0083.071] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\nn-NO\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\nn-no\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.073] GetLastError () returned 0x5 [0083.073] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.073] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.073] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.073] SetLastError (dwErrCode=0x0) [0083.073] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.074] GetLastError () returned 0x5 [0083.074] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.074] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.074] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\no\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707977510 [0083.075] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.075] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.076] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.076] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.076] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.076] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.076] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.076] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.076] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.076] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.076] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0083.076] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0083.076] SetLastError (dwErrCode=0x0) [0083.076] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\no\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\no\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.079] GetLastError () returned 0x5 [0083.079] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.079] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.079] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.079] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.079] SetLastError (dwErrCode=0x0) [0083.079] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.080] GetLastError () returned 0x5 [0083.080] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.080] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.080] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\or\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707977510 [0083.081] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.081] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.081] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.081] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.081] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.081] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.081] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0083.081] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0083.082] SetLastError (dwErrCode=0x0) [0083.082] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\or\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\or\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.084] GetLastError () returned 0x5 [0083.084] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.084] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.084] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.084] SetLastError (dwErrCode=0x0) [0083.085] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.085] GetLastError () returned 0x5 [0083.085] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.085] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.085] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pa\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976d30 [0083.086] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.086] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.086] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.086] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.086] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.086] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.086] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0083.086] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0083.087] SetLastError (dwErrCode=0x0) [0083.087] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pa\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\pa\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.089] GetLastError () returned 0x5 [0083.089] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.090] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.090] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.090] SetLastError (dwErrCode=0x0) [0083.090] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.090] GetLastError () returned 0x5 [0083.090] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.090] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.090] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pl\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976d30 [0083.092] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.092] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.092] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.092] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.092] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.092] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.092] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.092] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.092] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.092] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.092] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0083.092] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0083.093] SetLastError (dwErrCode=0x0) [0083.093] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\pl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.097] GetLastError () returned 0x5 [0083.097] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.097] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.097] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.097] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.097] SetLastError (dwErrCode=0x0) [0083.097] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.098] GetLastError () returned 0x5 [0083.098] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.098] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.098] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\prs-AF\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707977510 [0083.099] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.099] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.099] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.099] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.100] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.100] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.100] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0083.100] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0083.100] SetLastError (dwErrCode=0x0) [0083.100] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\prs-AF\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\prs-af\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.104] GetLastError () returned 0x5 [0083.104] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.104] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.104] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.104] SetLastError (dwErrCode=0x0) [0083.104] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.104] GetLastError () returned 0x5 [0083.104] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.104] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.104] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-BR\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707977510 [0083.106] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.107] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.107] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.107] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.107] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.107] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.107] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.107] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.107] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.107] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.107] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0083.107] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0083.108] SetLastError (dwErrCode=0x0) [0083.108] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-BR\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\pt-br\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.111] GetLastError () returned 0x5 [0083.112] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.112] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.112] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.112] SetLastError (dwErrCode=0x0) [0083.112] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.112] GetLastError () returned 0x5 [0083.112] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.112] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.112] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-pt\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976d30 [0083.114] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.114] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.114] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.114] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.114] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.114] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.114] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.114] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.114] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.114] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.114] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0083.115] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0083.115] SetLastError (dwErrCode=0x0) [0083.115] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-pt\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\pt-pt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.119] GetLastError () returned 0x5 [0083.119] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.119] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.119] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.119] SetLastError (dwErrCode=0x0) [0083.119] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.119] GetLastError () returned 0x5 [0083.119] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.119] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.119] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\quz\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976d30 [0083.121] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.121] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.121] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.121] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.121] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.121] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.121] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0083.121] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0083.122] SetLastError (dwErrCode=0x0) [0083.122] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\quz\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\quz\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.127] GetLastError () returned 0x5 [0083.127] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.127] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.127] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.127] SetLastError (dwErrCode=0x0) [0083.127] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.128] GetLastError () returned 0x5 [0083.128] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.128] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.128] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ro\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976f10 [0083.130] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.130] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.130] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.130] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.130] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.130] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.130] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.130] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.130] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.130] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.130] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0083.130] FindClose (in: hFindFile=0xd707976f10 | out: hFindFile=0xd707976f10) returned 1 [0083.131] SetLastError (dwErrCode=0x0) [0083.131] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ro\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ro\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.134] GetLastError () returned 0x5 [0083.134] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.135] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.135] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.135] SetLastError (dwErrCode=0x0) [0083.135] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.135] GetLastError () returned 0x5 [0083.135] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.135] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.135] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ru\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976d30 [0083.137] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.137] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.137] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.137] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.137] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.137] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.137] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.137] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.137] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.137] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.137] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0083.137] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0083.137] SetLastError (dwErrCode=0x0) [0083.138] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ru\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ru\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.140] GetLastError () returned 0x5 [0083.140] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.140] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.140] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.140] SetLastError (dwErrCode=0x0) [0083.140] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.141] GetLastError () returned 0x5 [0083.141] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.141] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.141] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sd-Arab-PK\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976d30 [0083.142] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.142] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.142] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.142] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.142] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.142] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.142] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0083.142] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0083.143] SetLastError (dwErrCode=0x0) [0083.143] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sd-Arab-PK\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sd-arab-pk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.146] GetLastError () returned 0x5 [0083.146] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.146] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.146] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.146] SetLastError (dwErrCode=0x0) [0083.146] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.146] GetLastError () returned 0x5 [0083.146] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.146] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.146] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\si\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976f10 [0083.148] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.148] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.148] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.148] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.148] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.148] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.148] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0083.148] FindClose (in: hFindFile=0xd707976f10 | out: hFindFile=0xd707976f10) returned 1 [0083.148] SetLastError (dwErrCode=0x0) [0083.148] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\si\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\si\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.151] GetLastError () returned 0x5 [0083.151] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.151] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.151] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.151] SetLastError (dwErrCode=0x0) [0083.151] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.151] GetLastError () returned 0x5 [0083.151] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.152] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.152] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sk\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976d30 [0083.153] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.153] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.153] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.153] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.153] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.153] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.153] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.153] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.153] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.153] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.153] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0083.153] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0083.154] SetLastError (dwErrCode=0x0) [0083.154] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sk\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.157] GetLastError () returned 0x5 [0083.157] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.157] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.157] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.157] SetLastError (dwErrCode=0x0) [0083.157] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.157] GetLastError () returned 0x5 [0083.158] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.158] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.158] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sl\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707977510 [0083.160] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.160] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.160] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.160] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.160] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.160] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.160] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.160] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.160] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.160] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.160] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0083.160] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0083.161] SetLastError (dwErrCode=0x0) [0083.161] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.163] GetLastError () returned 0x5 [0083.163] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.163] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.163] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.163] SetLastError (dwErrCode=0x0) [0083.163] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.164] GetLastError () returned 0x5 [0083.164] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.164] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.164] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sq\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976d30 [0083.165] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.165] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.165] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.165] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.165] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.165] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.165] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0083.165] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0083.166] SetLastError (dwErrCode=0x0) [0083.166] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sq\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sq\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.168] GetLastError () returned 0x5 [0083.168] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.168] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.168] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.168] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.169] SetLastError (dwErrCode=0x0) [0083.169] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.169] GetLastError () returned 0x5 [0083.169] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.169] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.169] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Cyrl\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707977510 [0083.171] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.171] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.171] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.171] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.171] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.171] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.171] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.171] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.171] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.171] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.171] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0083.171] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0083.172] SetLastError (dwErrCode=0x0) [0083.172] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Cyrl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sr-cyrl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.175] GetLastError () returned 0x5 [0083.175] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.175] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.175] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.175] SetLastError (dwErrCode=0x0) [0083.175] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.175] GetLastError () returned 0x5 [0083.175] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.175] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.175] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Cyrl-BA\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976d30 [0083.177] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.177] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.177] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.177] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.177] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.177] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.177] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0083.177] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0083.178] SetLastError (dwErrCode=0x0) [0083.178] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Cyrl-BA\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sr-cyrl-ba\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.180] GetLastError () returned 0x5 [0083.180] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.180] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.180] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.181] SetLastError (dwErrCode=0x0) [0083.181] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.181] GetLastError () returned 0x5 [0083.181] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.181] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.181] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707977510 [0083.182] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.183] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.183] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.183] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.183] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.183] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.183] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.183] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.183] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.183] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.183] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0083.183] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0083.183] SetLastError (dwErrCode=0x0) [0083.183] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sr-latn\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.186] GetLastError () returned 0x5 [0083.186] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.186] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.186] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.186] SetLastError (dwErrCode=0x0) [0083.186] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.186] GetLastError () returned 0x5 [0083.186] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.187] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.187] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn-CS\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976d30 [0083.189] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.189] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.189] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.189] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.189] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.189] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.189] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.189] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.189] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.189] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.189] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0083.189] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0083.190] SetLastError (dwErrCode=0x0) [0083.190] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn-CS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sr-latn-cs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.193] GetLastError () returned 0x5 [0083.193] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.193] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.193] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.193] SetLastError (dwErrCode=0x0) [0083.194] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.194] GetLastError () returned 0x5 [0083.194] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.194] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.194] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sv\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707977510 [0083.197] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.197] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.197] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.197] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.197] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.197] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.197] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.197] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.197] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.197] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.197] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0083.197] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0083.198] SetLastError (dwErrCode=0x0) [0083.198] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sv\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sv\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.201] GetLastError () returned 0x5 [0083.201] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.202] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.202] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.202] SetLastError (dwErrCode=0x0) [0083.202] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.202] GetLastError () returned 0x5 [0083.202] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.202] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.202] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sw\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707977510 [0083.206] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.206] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.206] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.206] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.206] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.206] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.206] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0083.206] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0083.207] SetLastError (dwErrCode=0x0) [0083.207] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sw\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sw\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.211] GetLastError () returned 0x5 [0083.211] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.211] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.211] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.211] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.211] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.211] SetLastError (dwErrCode=0x0) [0083.211] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.211] GetLastError () returned 0x5 [0083.211] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.211] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.211] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ta\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976d30 [0083.213] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.214] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.214] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.214] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.214] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.214] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.214] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0083.214] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0083.215] SetLastError (dwErrCode=0x0) [0083.215] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ta\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ta\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.217] GetLastError () returned 0x5 [0083.217] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.217] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.217] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.217] SetLastError (dwErrCode=0x0) [0083.217] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.218] GetLastError () returned 0x5 [0083.218] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.218] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.218] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\te\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976d30 [0083.220] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.220] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.220] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.220] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.220] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.220] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.220] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0083.220] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0083.220] SetLastError (dwErrCode=0x0) [0083.220] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\te\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\te\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.223] GetLastError () returned 0x5 [0083.223] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.223] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.223] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.223] SetLastError (dwErrCode=0x0) [0083.223] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.223] GetLastError () returned 0x5 [0083.223] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.223] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.223] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\th\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976d30 [0083.225] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.225] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.225] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.225] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.225] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.225] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.225] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.225] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.225] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.225] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.225] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0083.225] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0083.226] SetLastError (dwErrCode=0x0) [0083.226] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\th\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\th\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.229] GetLastError () returned 0x5 [0083.229] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.229] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.229] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.229] SetLastError (dwErrCode=0x0) [0083.229] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.229] GetLastError () returned 0x5 [0083.229] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.229] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.229] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tk\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976d30 [0083.232] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.232] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.232] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.232] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.232] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.232] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.232] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0083.232] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0083.233] SetLastError (dwErrCode=0x0) [0083.233] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tk\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\tk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.236] GetLastError () returned 0x5 [0083.236] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.236] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.237] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.237] SetLastError (dwErrCode=0x0) [0083.237] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.237] GetLastError () returned 0x5 [0083.237] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.237] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.237] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tr\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707977510 [0083.239] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.239] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.239] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.239] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.239] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.239] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.239] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.239] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.239] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.239] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.239] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0083.239] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0083.240] SetLastError (dwErrCode=0x0) [0083.240] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\tr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.243] GetLastError () returned 0x5 [0083.243] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.243] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.243] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.243] SetLastError (dwErrCode=0x0) [0083.243] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.244] GetLastError () returned 0x5 [0083.244] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.244] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.244] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tt\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976d30 [0083.245] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.245] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.245] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.245] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.245] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.245] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.245] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0083.245] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0083.246] SetLastError (dwErrCode=0x0) [0083.246] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tt\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\tt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.248] GetLastError () returned 0x5 [0083.248] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.248] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.248] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.249] SetLastError (dwErrCode=0x0) [0083.249] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.249] GetLastError () returned 0x5 [0083.249] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.249] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.249] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ug\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976d30 [0083.253] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.253] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.253] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.253] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.253] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.253] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.253] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0083.253] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0083.254] SetLastError (dwErrCode=0x0) [0083.254] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ug\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ug\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.256] GetLastError () returned 0x5 [0083.256] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.256] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.256] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.256] SetLastError (dwErrCode=0x0) [0083.257] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.257] GetLastError () returned 0x5 [0083.257] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.257] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.257] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\uk\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976f10 [0083.258] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.258] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.258] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.258] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.258] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.258] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.258] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.259] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.259] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.259] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.259] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0083.259] FindClose (in: hFindFile=0xd707976f10 | out: hFindFile=0xd707976f10) returned 1 [0083.259] SetLastError (dwErrCode=0x0) [0083.259] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\uk\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\uk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.262] GetLastError () returned 0x5 [0083.262] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.262] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.262] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.262] SetLastError (dwErrCode=0x0) [0083.262] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.263] GetLastError () returned 0x5 [0083.263] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.263] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.263] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ur\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976d30 [0083.265] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.265] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.265] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.265] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.265] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.265] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.265] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0083.265] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0083.266] SetLastError (dwErrCode=0x0) [0083.266] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ur\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ur\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.269] GetLastError () returned 0x5 [0083.269] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.269] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.269] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.269] SetLastError (dwErrCode=0x0) [0083.269] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.269] GetLastError () returned 0x5 [0083.269] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.269] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.269] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\uz-Latn-UZ\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976d30 [0083.271] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.271] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.271] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.271] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.271] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.271] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.271] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0083.271] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0083.272] SetLastError (dwErrCode=0x0) [0083.272] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\uz-Latn-UZ\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\uz-latn-uz\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.274] GetLastError () returned 0x5 [0083.274] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.274] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.274] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.274] SetLastError (dwErrCode=0x0) [0083.275] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.275] GetLastError () returned 0x5 [0083.275] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.275] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.275] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\vi\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707977510 [0083.277] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.277] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.277] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.277] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.277] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.277] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.277] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.277] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.277] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.277] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.277] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0083.277] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0083.277] SetLastError (dwErrCode=0x0) [0083.277] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\vi\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\vi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.280] GetLastError () returned 0x5 [0083.280] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.280] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.280] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.280] SetLastError (dwErrCode=0x0) [0083.280] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.281] GetLastError () returned 0x5 [0083.281] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.281] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.281] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANS\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707977510 [0083.283] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.283] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.283] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.283] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.283] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.283] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.283] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.283] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.283] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.283] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.283] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0083.283] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0083.284] SetLastError (dwErrCode=0x0) [0083.284] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\zh-hans\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.286] GetLastError () returned 0x5 [0083.286] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.286] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.286] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.286] SetLastError (dwErrCode=0x0) [0083.287] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.287] GetLastError () returned 0x5 [0083.287] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.287] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.287] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANT\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707977510 [0083.288] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.289] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.289] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.289] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.289] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.289] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.289] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.289] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.289] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.289] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0083.289] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0083.289] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0083.289] SetLastError (dwErrCode=0x0) [0083.289] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANT\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\zh-hant\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.292] GetLastError () returned 0x5 [0083.292] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0083.292] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.292] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0083.292] FindClose (in: hFindFile=0xd7079a0ed0 | out: hFindFile=0xd7079a0ed0) returned 1 [0083.292] SetLastError (dwErrCode=0x0) [0083.292] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.293] GetLastError () returned 0x5 [0083.293] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.293] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.293] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0083.293] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0083.293] SetLastError (dwErrCode=0x0) [0083.293] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.293] GetLastError () returned 0x5 [0083.293] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0083.293] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.293] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0083.293] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0083.293] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.294] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\MSOSEC.XML", dwFileAttributes=0x80) returned 0 [0083.294] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\MSOSEC.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\msosec.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.294] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.294] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.294] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0083.294] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.295] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\MSSPC.ECF", dwFileAttributes=0x80) returned 0 [0083.295] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\MSSPC.ECF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\msspc.ecf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.295] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.295] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.295] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0083.295] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0083.295] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.296] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\OUTEX.ECF", dwFileAttributes=0x80) returned 0 [0083.296] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\OUTEX.ECF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\outex.ecf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.296] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.296] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.296] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0083.296] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.297] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\OUTEX2.ECF", dwFileAttributes=0x80) returned 0 [0083.297] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\OUTEX2.ECF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\outex2.ecf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.297] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.297] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.298] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0083.298] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0083.298] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.298] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PMAILEXT.ECF", dwFileAttributes=0x80) returned 0 [0083.299] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PMAILEXT.ECF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\pmailext.ecf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.299] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.299] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.299] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0083.299] SetLastError (dwErrCode=0x0) [0083.299] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.300] GetLastError () returned 0x5 [0083.300] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0083.300] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.300] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power Map Excel Add-in\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd707977510 [0083.303] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.303] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.303] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.303] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.303] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.303] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.303] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.303] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.303] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.303] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.303] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.303] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.303] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.303] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.303] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.303] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.303] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0083.303] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0083.304] SetLastError (dwErrCode=0x0) [0083.304] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power Map Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power map excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.307] GetLastError () returned 0x5 [0083.307] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0083.307] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.307] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0083.307] SetLastError (dwErrCode=0x0) [0083.307] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.307] GetLastError () returned 0x5 [0083.307] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0083.307] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.307] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd707977510 [0083.309] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.310] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.310] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.310] SetLastError (dwErrCode=0x0) [0083.310] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.311] GetLastError () returned 0x5 [0083.311] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.311] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.311] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ar\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd707976d30 [0083.312] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.312] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.312] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.312] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.312] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.312] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.312] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.312] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.312] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ar\\PowerViewRes.ar.xap", dwFileAttributes=0x80) returned 0 [0083.313] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ar\\PowerViewRes.ar.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ar\\powerviewres.ar.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.313] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.313] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.314] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0083.314] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0083.314] SetLastError (dwErrCode=0x0) [0083.314] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ar\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ar\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.317] GetLastError () returned 0x5 [0083.317] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.317] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.317] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.317] SetLastError (dwErrCode=0x0) [0083.317] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.317] GetLastError () returned 0x5 [0083.317] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.317] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.317] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\bg\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0450 [0083.319] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.319] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.319] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.319] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.319] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.319] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.319] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.319] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.320] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\bg\\PowerViewRes.bg.xap", dwFileAttributes=0x80) returned 0 [0083.320] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\bg\\PowerViewRes.bg.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\bg\\powerviewres.bg.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.320] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.320] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.320] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0083.320] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0083.321] SetLastError (dwErrCode=0x0) [0083.321] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\bg\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\bg\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.324] GetLastError () returned 0x5 [0083.324] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.324] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.324] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.324] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.324] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\BI-Report.png", dwFileAttributes=0x80) returned 0 [0083.324] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\BI-Report.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\bi-report.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.324] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.324] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.325] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.325] SetLastError (dwErrCode=0x0) [0083.325] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.325] GetLastError () returned 0x5 [0083.325] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.325] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.325] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ca\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0810 [0083.327] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.327] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.327] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.327] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.327] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.327] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.327] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.327] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.327] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ca\\PowerViewRes.ca.xap", dwFileAttributes=0x80) returned 0 [0083.328] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ca\\PowerViewRes.ca.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ca\\powerviewres.ca.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.328] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.328] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.329] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0083.329] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0083.330] SetLastError (dwErrCode=0x0) [0083.330] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ca\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ca\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.332] GetLastError () returned 0x5 [0083.332] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.332] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.332] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.332] SetLastError (dwErrCode=0x0) [0083.332] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.333] GetLastError () returned 0x5 [0083.333] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.333] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.333] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\cs\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0ed0 [0083.334] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.334] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.334] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.334] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.334] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.334] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.334] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.334] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\cs\\PowerViewRes.cs.xap", dwFileAttributes=0x80) returned 0 [0083.335] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\cs\\PowerViewRes.cs.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\cs\\powerviewres.cs.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.335] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.335] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.335] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0083.335] FindClose (in: hFindFile=0xd7079a0ed0 | out: hFindFile=0xd7079a0ed0) returned 1 [0083.336] SetLastError (dwErrCode=0x0) [0083.336] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\cs\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\cs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.339] GetLastError () returned 0x5 [0083.339] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.339] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.339] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.339] SetLastError (dwErrCode=0x0) [0083.339] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.339] GetLastError () returned 0x5 [0083.339] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.339] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.339] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\da\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0450 [0083.343] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.343] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.343] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.343] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.343] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.343] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.343] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.343] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.344] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\da\\PowerViewRes.da.xap", dwFileAttributes=0x80) returned 0 [0083.344] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\da\\PowerViewRes.da.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\da\\powerviewres.da.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.345] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.345] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.345] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0083.345] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0083.346] SetLastError (dwErrCode=0x0) [0083.346] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\da\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\da\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.348] GetLastError () returned 0x5 [0083.348] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.348] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.348] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.348] SetLastError (dwErrCode=0x0) [0083.348] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.349] GetLastError () returned 0x5 [0083.349] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.349] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.349] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\de\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0ed0 [0083.350] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.350] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.350] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.351] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.351] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.351] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.351] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.351] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.351] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\de\\PowerViewRes.de.xap", dwFileAttributes=0x80) returned 0 [0083.351] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\de\\PowerViewRes.de.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\de\\powerviewres.de.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.351] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.351] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.352] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0083.352] FindClose (in: hFindFile=0xd7079a0ed0 | out: hFindFile=0xd7079a0ed0) returned 1 [0083.352] SetLastError (dwErrCode=0x0) [0083.352] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\de\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\de\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.355] GetLastError () returned 0x5 [0083.355] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.355] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.355] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.355] SetLastError (dwErrCode=0x0) [0083.355] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.355] GetLastError () returned 0x5 [0083.355] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.355] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.355] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\el\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0ed0 [0083.357] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.357] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.357] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.357] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.357] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.357] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.357] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.357] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.358] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\el\\PowerViewRes.el.xap", dwFileAttributes=0x80) returned 0 [0083.358] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\el\\PowerViewRes.el.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\el\\powerviewres.el.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.359] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.359] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.359] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0083.359] FindClose (in: hFindFile=0xd7079a0ed0 | out: hFindFile=0xd7079a0ed0) returned 1 [0083.360] SetLastError (dwErrCode=0x0) [0083.360] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\el\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\el\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.363] GetLastError () returned 0x5 [0083.363] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.363] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.363] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.363] SetLastError (dwErrCode=0x0) [0083.363] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.363] GetLastError () returned 0x5 [0083.363] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.363] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.363] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\es\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0ed0 [0083.365] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.365] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.365] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.365] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.365] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.365] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.365] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.365] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.365] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\es\\PowerViewRes.es.xap", dwFileAttributes=0x80) returned 0 [0083.366] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\es\\PowerViewRes.es.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\es\\powerviewres.es.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.366] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.366] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.366] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0083.366] FindClose (in: hFindFile=0xd7079a0ed0 | out: hFindFile=0xd7079a0ed0) returned 1 [0083.367] SetLastError (dwErrCode=0x0) [0083.367] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\es\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\es\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.369] GetLastError () returned 0x5 [0083.369] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.369] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.369] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.369] SetLastError (dwErrCode=0x0) [0083.370] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.370] GetLastError () returned 0x5 [0083.370] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.370] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.370] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\et\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0ed0 [0083.371] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.371] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.371] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.371] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.371] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.371] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.371] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.371] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.371] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\et\\PowerViewRes.et.xap", dwFileAttributes=0x80) returned 0 [0083.372] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\et\\PowerViewRes.et.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\et\\powerviewres.et.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.372] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.372] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.372] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0083.372] FindClose (in: hFindFile=0xd7079a0ed0 | out: hFindFile=0xd7079a0ed0) returned 1 [0083.373] SetLastError (dwErrCode=0x0) [0083.373] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\et\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\et\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.375] GetLastError () returned 0x5 [0083.380] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.380] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.380] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.380] SetLastError (dwErrCode=0x0) [0083.380] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.381] GetLastError () returned 0x5 [0083.381] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.381] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.381] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\eu\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0bd0 [0083.398] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.398] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.398] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.398] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.399] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.399] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.399] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.399] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.399] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\eu\\PowerViewRes.eu.xap", dwFileAttributes=0x80) returned 0 [0083.399] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\eu\\PowerViewRes.eu.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\eu\\powerviewres.eu.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.400] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.400] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.400] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0083.400] FindClose (in: hFindFile=0xd7079a0bd0 | out: hFindFile=0xd7079a0bd0) returned 1 [0083.401] SetLastError (dwErrCode=0x0) [0083.401] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\eu\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\eu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.405] GetLastError () returned 0x5 [0083.405] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.405] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.405] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.405] SetLastError (dwErrCode=0x0) [0083.405] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.406] GetLastError () returned 0x5 [0083.406] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.406] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.406] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fi\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0bd0 [0083.408] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.408] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.408] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.409] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.409] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.409] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.409] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.409] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.410] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fi\\PowerViewRes.fi.xap", dwFileAttributes=0x80) returned 0 [0083.410] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fi\\PowerViewRes.fi.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\fi\\powerviewres.fi.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.411] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.411] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.411] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0083.411] FindClose (in: hFindFile=0xd7079a0bd0 | out: hFindFile=0xd7079a0bd0) returned 1 [0083.429] SetLastError (dwErrCode=0x0) [0083.429] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fi\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\fi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.432] GetLastError () returned 0x5 [0083.432] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.432] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.432] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.432] SetLastError (dwErrCode=0x0) [0083.432] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.432] GetLastError () returned 0x5 [0083.432] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.432] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.432] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fr\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0d50 [0083.434] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.434] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.434] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.434] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.434] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.435] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.435] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.435] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.435] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fr\\PowerViewRes.fr.xap", dwFileAttributes=0x80) returned 0 [0083.436] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fr\\PowerViewRes.fr.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\fr\\powerviewres.fr.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.436] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.436] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.436] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0083.436] FindClose (in: hFindFile=0xd7079a0d50 | out: hFindFile=0xd7079a0d50) returned 1 [0083.437] SetLastError (dwErrCode=0x0) [0083.437] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\fr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.440] GetLastError () returned 0x5 [0083.440] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.440] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.441] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.441] SetLastError (dwErrCode=0x0) [0083.441] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.441] GetLastError () returned 0x5 [0083.441] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.441] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.441] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\gl\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0810 [0083.443] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.443] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.443] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.443] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.443] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.443] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.443] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.443] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.444] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\gl\\PowerViewRes.gl.xap", dwFileAttributes=0x80) returned 0 [0083.444] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\gl\\PowerViewRes.gl.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\gl\\powerviewres.gl.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.444] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.444] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.445] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0083.445] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0083.445] SetLastError (dwErrCode=0x0) [0083.445] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\gl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\gl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.448] GetLastError () returned 0x5 [0083.448] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.448] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.449] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.449] SetLastError (dwErrCode=0x0) [0083.449] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.449] GetLastError () returned 0x5 [0083.449] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.449] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.449] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\he\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0450 [0083.452] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.452] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.452] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.452] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.452] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.452] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.452] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.452] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.452] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\he\\PowerViewRes.he.xap", dwFileAttributes=0x80) returned 0 [0083.452] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\he\\PowerViewRes.he.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\he\\powerviewres.he.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.453] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.453] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.453] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0083.453] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0083.454] SetLastError (dwErrCode=0x0) [0083.454] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\he\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\he\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.456] GetLastError () returned 0x5 [0083.456] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.456] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.456] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.456] SetLastError (dwErrCode=0x0) [0083.457] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.457] GetLastError () returned 0x5 [0083.457] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.457] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.457] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hi\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0810 [0083.460] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.460] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.460] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.460] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.460] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.460] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.460] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.460] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.461] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hi\\PowerViewRes.hi.xap", dwFileAttributes=0x80) returned 0 [0083.462] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hi\\PowerViewRes.hi.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\hi\\powerviewres.hi.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.462] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.462] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.462] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0083.462] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0083.463] SetLastError (dwErrCode=0x0) [0083.463] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hi\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\hi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.466] GetLastError () returned 0x5 [0083.466] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.466] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.466] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.466] SetLastError (dwErrCode=0x0) [0083.466] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.467] GetLastError () returned 0x5 [0083.467] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.467] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.467] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hr\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0450 [0083.469] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.469] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.469] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.469] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.469] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.469] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.469] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.469] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.470] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hr\\PowerViewRes.hr.xap", dwFileAttributes=0x80) returned 0 [0083.470] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hr\\PowerViewRes.hr.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\hr\\powerviewres.hr.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.471] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.471] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.471] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0083.471] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0083.472] SetLastError (dwErrCode=0x0) [0083.472] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\hr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.475] GetLastError () returned 0x5 [0083.475] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.475] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.475] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.475] SetLastError (dwErrCode=0x0) [0083.475] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.475] GetLastError () returned 0x5 [0083.475] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.475] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.475] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hu\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0450 [0083.477] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.477] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.477] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.477] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.477] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.477] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.477] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.477] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.477] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hu\\PowerViewRes.hu.xap", dwFileAttributes=0x80) returned 0 [0083.478] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hu\\PowerViewRes.hu.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\hu\\powerviewres.hu.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.478] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.478] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.478] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0083.478] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0083.479] SetLastError (dwErrCode=0x0) [0083.479] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hu\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\hu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.481] GetLastError () returned 0x5 [0083.481] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.481] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.481] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.482] SetLastError (dwErrCode=0x0) [0083.482] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.482] GetLastError () returned 0x5 [0083.482] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.482] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.482] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\id\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0450 [0083.484] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.484] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.484] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.484] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.484] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.484] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.484] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.485] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.485] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\id\\PowerViewRes.id.xap", dwFileAttributes=0x80) returned 0 [0083.485] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\id\\PowerViewRes.id.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\id\\powerviewres.id.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.486] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.486] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.486] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0083.486] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0083.487] SetLastError (dwErrCode=0x0) [0083.487] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\id\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\id\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.490] GetLastError () returned 0x5 [0083.490] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.490] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.490] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.490] SetLastError (dwErrCode=0x0) [0083.490] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.490] GetLastError () returned 0x5 [0083.490] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.490] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.490] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\it\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0450 [0083.492] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.492] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.492] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.492] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.492] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.492] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.492] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.492] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.492] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\it\\PowerViewRes.it.xap", dwFileAttributes=0x80) returned 0 [0083.493] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\it\\PowerViewRes.it.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\it\\powerviewres.it.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.493] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.493] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.493] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0083.493] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0083.494] SetLastError (dwErrCode=0x0) [0083.494] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\it\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\it\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.497] GetLastError () returned 0x5 [0083.497] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.497] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.497] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.497] SetLastError (dwErrCode=0x0) [0083.497] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.497] GetLastError () returned 0x5 [0083.497] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.497] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.497] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ja\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0810 [0083.503] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.503] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.503] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.504] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.504] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.504] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.504] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.504] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ja\\PowerViewRes.ja.xap", dwFileAttributes=0x80) returned 0 [0083.504] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ja\\PowerViewRes.ja.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ja\\powerviewres.ja.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.505] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.505] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.506] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0083.506] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0083.507] SetLastError (dwErrCode=0x0) [0083.507] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ja\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ja\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.510] GetLastError () returned 0x5 [0083.510] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.510] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.510] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.510] SetLastError (dwErrCode=0x0) [0083.510] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.510] GetLastError () returned 0x5 [0083.510] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.510] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.510] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\kk\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0810 [0083.513] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.513] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.513] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.513] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.513] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.513] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.513] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.514] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\kk\\PowerViewRes.kk.xap", dwFileAttributes=0x80) returned 0 [0083.515] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\kk\\PowerViewRes.kk.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\kk\\powerviewres.kk.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.515] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.515] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.515] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0083.515] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0083.516] SetLastError (dwErrCode=0x0) [0083.516] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\kk\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\kk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.519] GetLastError () returned 0x5 [0083.519] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.519] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.520] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.520] SetLastError (dwErrCode=0x0) [0083.520] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.520] GetLastError () returned 0x5 [0083.520] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.520] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.520] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ko\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0450 [0083.523] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.523] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.523] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.523] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.523] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.523] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.523] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.523] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ko\\PowerViewRes.ko.xap", dwFileAttributes=0x80) returned 0 [0083.524] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ko\\PowerViewRes.ko.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ko\\powerviewres.ko.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.524] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.524] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.524] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0083.524] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0083.525] SetLastError (dwErrCode=0x0) [0083.525] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ko\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ko\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.529] GetLastError () returned 0x5 [0083.529] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.529] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.529] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.529] SetLastError (dwErrCode=0x0) [0083.529] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.530] GetLastError () returned 0x5 [0083.530] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.530] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.530] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lt\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0810 [0083.532] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.532] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.532] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.532] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.532] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.532] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.532] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.532] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.532] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lt\\PowerViewRes.lt.xap", dwFileAttributes=0x80) returned 0 [0083.533] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lt\\PowerViewRes.lt.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\lt\\powerviewres.lt.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.533] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.534] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.534] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0083.534] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0083.535] SetLastError (dwErrCode=0x0) [0083.535] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lt\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\lt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.538] GetLastError () returned 0x5 [0083.538] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.538] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.538] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.538] SetLastError (dwErrCode=0x0) [0083.538] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.538] GetLastError () returned 0x5 [0083.538] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.539] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.539] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lv\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0d50 [0083.541] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.541] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.541] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.541] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.541] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.541] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.541] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.541] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.542] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lv\\PowerViewRes.lv.xap", dwFileAttributes=0x80) returned 0 [0083.542] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lv\\PowerViewRes.lv.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\lv\\powerviewres.lv.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.542] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.542] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.543] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0083.543] FindClose (in: hFindFile=0xd7079a0d50 | out: hFindFile=0xd7079a0d50) returned 1 [0083.543] SetLastError (dwErrCode=0x0) [0083.544] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lv\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\lv\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.547] GetLastError () returned 0x5 [0083.547] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.547] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.547] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.547] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.547] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.547] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.547] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\Microsoft.Reporting.AdHoc.Shell.Bootstrapper.xap", dwFileAttributes=0x80) returned 0 [0083.548] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\Microsoft.Reporting.AdHoc.Shell.Bootstrapper.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\microsoft.reporting.adhoc.shell.bootstrapper.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.548] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.548] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.548] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.548] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.548] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.548] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.549] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.549] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.549] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.549] SetLastError (dwErrCode=0x0) [0083.549] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.549] GetLastError () returned 0x5 [0083.549] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.549] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.549] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ms\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0450 [0083.551] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.551] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.551] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.551] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.551] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.552] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.552] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.552] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ms\\PowerViewRes.ms.xap", dwFileAttributes=0x80) returned 0 [0083.552] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ms\\PowerViewRes.ms.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ms\\powerviewres.ms.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.552] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.552] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.553] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0083.553] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0083.553] SetLastError (dwErrCode=0x0) [0083.553] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ms\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ms\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.557] GetLastError () returned 0x5 [0083.557] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.557] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.557] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.557] SetLastError (dwErrCode=0x0) [0083.557] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.557] GetLastError () returned 0x5 [0083.557] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.557] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.557] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\nl\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0450 [0083.560] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.560] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.560] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.560] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.560] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.560] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.560] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.560] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.560] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\nl\\PowerViewRes.nl.xap", dwFileAttributes=0x80) returned 0 [0083.561] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\nl\\PowerViewRes.nl.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\nl\\powerviewres.nl.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.562] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.562] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.562] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0083.562] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0083.563] SetLastError (dwErrCode=0x0) [0083.563] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\nl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\nl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.566] GetLastError () returned 0x5 [0083.566] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.566] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.566] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.566] SetLastError (dwErrCode=0x0) [0083.566] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.566] GetLastError () returned 0x5 [0083.566] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.566] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.566] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\no\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0ed0 [0083.568] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.568] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.568] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.568] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.568] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.568] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.568] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.568] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.568] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\no\\PowerViewRes.no.xap", dwFileAttributes=0x80) returned 0 [0083.568] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\no\\PowerViewRes.no.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\no\\powerviewres.no.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.569] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.569] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.569] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0083.569] FindClose (in: hFindFile=0xd7079a0ed0 | out: hFindFile=0xd7079a0ed0) returned 1 [0083.569] SetLastError (dwErrCode=0x0) [0083.570] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\no\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\no\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.572] GetLastError () returned 0x5 [0083.572] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.572] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.572] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.572] SetLastError (dwErrCode=0x0) [0083.572] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.572] GetLastError () returned 0x5 [0083.572] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.572] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.572] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pl\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0450 [0083.574] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.574] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.574] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.574] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.574] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.574] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.574] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.574] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pl\\PowerViewRes.pl.xap", dwFileAttributes=0x80) returned 0 [0083.574] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pl\\PowerViewRes.pl.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\pl\\powerviewres.pl.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.574] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.575] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.575] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0083.575] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0083.575] SetLastError (dwErrCode=0x0) [0083.575] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\pl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.580] GetLastError () returned 0x5 [0083.580] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.580] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.580] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.580] SetLastError (dwErrCode=0x0) [0083.580] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.580] GetLastError () returned 0x5 [0083.580] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.580] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.580] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0bd0 [0083.583] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.584] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.584] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.584] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.584] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.584] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.584] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.584] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt\\PowerViewRes.pt.xap", dwFileAttributes=0x80) returned 0 [0083.585] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt\\PowerViewRes.pt.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\pt\\powerviewres.pt.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.585] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.585] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.585] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0083.585] FindClose (in: hFindFile=0xd7079a0bd0 | out: hFindFile=0xd7079a0bd0) returned 1 [0083.586] SetLastError (dwErrCode=0x0) [0083.586] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\pt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.588] GetLastError () returned 0x5 [0083.588] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.588] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.588] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.588] SetLastError (dwErrCode=0x0) [0083.589] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.589] GetLastError () returned 0x5 [0083.589] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.589] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.589] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt-PT\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a08d0 [0083.591] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.591] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.591] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.591] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.591] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.591] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.591] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.591] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.591] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt-PT\\PowerViewRes.pt-PT.xap", dwFileAttributes=0x80) returned 0 [0083.592] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt-PT\\PowerViewRes.pt-PT.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\pt-pt\\powerviewres.pt-pt.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.592] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.592] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.593] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0083.593] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0083.593] SetLastError (dwErrCode=0x0) [0083.593] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt-PT\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\pt-pt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.597] GetLastError () returned 0x5 [0083.597] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.597] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.597] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.597] SetLastError (dwErrCode=0x0) [0083.597] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.597] GetLastError () returned 0x5 [0083.597] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.597] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.597] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ro\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0d50 [0083.599] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.599] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.599] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.599] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.599] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.599] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.599] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.600] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.600] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ro\\PowerViewRes.ro.xap", dwFileAttributes=0x80) returned 0 [0083.600] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ro\\PowerViewRes.ro.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ro\\powerviewres.ro.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.600] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.600] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.601] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0083.601] FindClose (in: hFindFile=0xd7079a0d50 | out: hFindFile=0xd7079a0d50) returned 1 [0083.601] SetLastError (dwErrCode=0x0) [0083.601] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ro\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ro\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.604] GetLastError () returned 0x5 [0083.604] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.604] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.604] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.604] SetLastError (dwErrCode=0x0) [0083.604] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.604] GetLastError () returned 0x5 [0083.604] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.604] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.604] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ru\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0450 [0083.608] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.608] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.608] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.608] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.608] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.608] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.608] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.608] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.608] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ru\\PowerViewRes.ru.xap", dwFileAttributes=0x80) returned 0 [0083.609] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ru\\PowerViewRes.ru.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ru\\powerviewres.ru.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.609] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.609] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.609] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0083.609] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0083.610] SetLastError (dwErrCode=0x0) [0083.610] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ru\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ru\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.612] GetLastError () returned 0x5 [0083.612] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.612] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.612] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.613] SetLastError (dwErrCode=0x0) [0083.613] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.613] GetLastError () returned 0x5 [0083.613] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.613] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.613] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sk\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0450 [0083.614] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.614] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.614] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.614] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.615] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.615] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.615] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.615] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.615] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sk\\PowerViewRes.sk.xap", dwFileAttributes=0x80) returned 0 [0083.615] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sk\\PowerViewRes.sk.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\sk\\powerviewres.sk.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.615] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.616] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.616] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0083.616] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0083.617] SetLastError (dwErrCode=0x0) [0083.617] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sk\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\sk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.620] GetLastError () returned 0x5 [0083.620] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.620] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.620] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.620] SetLastError (dwErrCode=0x0) [0083.620] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.620] GetLastError () returned 0x5 [0083.620] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.620] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.621] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sl\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0bd0 [0083.622] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.622] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.622] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.622] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.622] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.622] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.622] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.622] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.623] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sl\\PowerViewRes.sl.xap", dwFileAttributes=0x80) returned 0 [0083.624] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sl\\PowerViewRes.sl.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\sl\\powerviewres.sl.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.624] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.624] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.624] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0083.624] FindClose (in: hFindFile=0xd7079a0bd0 | out: hFindFile=0xd7079a0bd0) returned 1 [0083.625] SetLastError (dwErrCode=0x0) [0083.625] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\sl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.628] GetLastError () returned 0x5 [0083.629] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.629] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.629] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.629] SetLastError (dwErrCode=0x0) [0083.629] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.629] GetLastError () returned 0x5 [0083.629] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.629] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.629] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-cyrl\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0450 [0083.633] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.633] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.633] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.633] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.633] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.633] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.634] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.634] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.634] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-cyrl\\PowerViewRes.sr-cyrl.xap", dwFileAttributes=0x80) returned 0 [0083.634] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-cyrl\\PowerViewRes.sr-cyrl.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\sr-cyrl\\powerviewres.sr-cyrl.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.634] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.634] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.635] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0083.635] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0083.635] SetLastError (dwErrCode=0x0) [0083.635] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-cyrl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\sr-cyrl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.639] GetLastError () returned 0x5 [0083.639] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.639] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.639] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.639] SetLastError (dwErrCode=0x0) [0083.639] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.639] GetLastError () returned 0x5 [0083.639] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.639] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.640] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-latn\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0ed0 [0083.642] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.642] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.642] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.642] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.642] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.642] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.642] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.642] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-latn\\PowerViewRes.sr-latn.xap", dwFileAttributes=0x80) returned 0 [0083.643] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-latn\\PowerViewRes.sr-latn.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\sr-latn\\powerviewres.sr-latn.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.643] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.643] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.643] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0083.643] FindClose (in: hFindFile=0xd7079a0ed0 | out: hFindFile=0xd7079a0ed0) returned 1 [0083.644] SetLastError (dwErrCode=0x0) [0083.644] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-latn\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\sr-latn\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.648] GetLastError () returned 0x5 [0083.648] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.648] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.648] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.648] SetLastError (dwErrCode=0x0) [0083.648] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.648] GetLastError () returned 0x5 [0083.648] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.649] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.649] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-Latn-CS\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0bd0 [0083.650] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.650] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0083.650] FindClose (in: hFindFile=0xd7079a0bd0 | out: hFindFile=0xd7079a0bd0) returned 1 [0083.650] SetLastError (dwErrCode=0x0) [0083.650] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-Latn-CS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\sr-latn-cs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.650] GetLastError () returned 0x5 [0083.651] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.651] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.651] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.651] SetLastError (dwErrCode=0x0) [0083.651] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.651] GetLastError () returned 0x5 [0083.651] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.651] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.651] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sv\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0bd0 [0083.653] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.653] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.653] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.653] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.653] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.653] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.653] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.653] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.654] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sv\\PowerViewRes.sv.xap", dwFileAttributes=0x80) returned 0 [0083.655] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sv\\PowerViewRes.sv.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\sv\\powerviewres.sv.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.655] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.655] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.655] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0083.655] FindClose (in: hFindFile=0xd7079a0bd0 | out: hFindFile=0xd7079a0bd0) returned 1 [0083.656] SetLastError (dwErrCode=0x0) [0083.656] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sv\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\sv\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.659] GetLastError () returned 0x5 [0083.659] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.659] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.659] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.659] SetLastError (dwErrCode=0x0) [0083.659] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.659] GetLastError () returned 0x5 [0083.659] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.659] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.659] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\th\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0ed0 [0083.661] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.661] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.661] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.661] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.661] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.661] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.661] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.661] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\th\\PowerViewRes.th.xap", dwFileAttributes=0x80) returned 0 [0083.662] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\th\\PowerViewRes.th.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\th\\powerviewres.th.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.663] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.663] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.663] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0083.663] FindClose (in: hFindFile=0xd7079a0ed0 | out: hFindFile=0xd7079a0ed0) returned 1 [0083.664] SetLastError (dwErrCode=0x0) [0083.664] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\th\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\th\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.666] GetLastError () returned 0x5 [0083.666] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.666] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.666] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.666] SetLastError (dwErrCode=0x0) [0083.666] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.667] GetLastError () returned 0x5 [0083.667] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.667] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.667] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\tr\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0810 [0083.668] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.668] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.669] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.669] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.669] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.669] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.669] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.669] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.669] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\tr\\PowerViewRes.tr.xap", dwFileAttributes=0x80) returned 0 [0083.669] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\tr\\PowerViewRes.tr.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\tr\\powerviewres.tr.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.669] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.669] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.670] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0083.670] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0083.671] SetLastError (dwErrCode=0x0) [0083.671] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\tr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\tr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.674] GetLastError () returned 0x5 [0083.674] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.674] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.674] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.674] SetLastError (dwErrCode=0x0) [0083.674] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.674] GetLastError () returned 0x5 [0083.674] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.674] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.674] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\uk\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0450 [0083.677] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.677] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.677] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.677] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.677] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.677] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.677] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.677] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\uk\\PowerViewRes.uk.xap", dwFileAttributes=0x80) returned 0 [0083.678] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\uk\\PowerViewRes.uk.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\uk\\powerviewres.uk.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.678] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.678] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.678] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0083.678] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0083.679] SetLastError (dwErrCode=0x0) [0083.679] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\uk\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\uk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.682] GetLastError () returned 0x5 [0083.682] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.682] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.682] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.682] SetLastError (dwErrCode=0x0) [0083.682] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.683] GetLastError () returned 0x5 [0083.683] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.683] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.683] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\vi\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0810 [0083.685] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.685] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.685] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.685] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.685] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.685] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.685] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.685] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.686] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\vi\\PowerViewRes.vi.xap", dwFileAttributes=0x80) returned 0 [0083.686] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\vi\\PowerViewRes.vi.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\vi\\powerviewres.vi.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.687] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.687] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.687] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0083.687] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0083.688] SetLastError (dwErrCode=0x0) [0083.688] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\vi\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\vi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.690] GetLastError () returned 0x5 [0083.690] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.690] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.690] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.690] SetLastError (dwErrCode=0x0) [0083.691] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.691] GetLastError () returned 0x5 [0083.691] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.691] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.691] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHS\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0450 [0083.693] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.693] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.693] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.693] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.693] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.693] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.693] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.693] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.693] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHS\\PowerViewRes.zh-CHS.xap", dwFileAttributes=0x80) returned 0 [0083.694] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHS\\PowerViewRes.zh-CHS.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\zh-chs\\powerviewres.zh-chs.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.694] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.694] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.694] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0083.694] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0083.695] SetLastError (dwErrCode=0x0) [0083.695] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\zh-chs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.697] GetLastError () returned 0x5 [0083.697] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.698] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.698] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.698] SetLastError (dwErrCode=0x0) [0083.698] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.698] GetLastError () returned 0x5 [0083.698] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.698] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.698] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHT\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0450 [0083.699] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.699] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.699] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.699] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.699] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.699] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.699] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.699] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHT\\PowerViewRes.zh-CHT.xap", dwFileAttributes=0x80) returned 0 [0083.700] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHT\\PowerViewRes.zh-CHT.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\zh-cht\\powerviewres.zh-cht.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.700] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.700] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.701] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0083.701] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0083.702] SetLastError (dwErrCode=0x0) [0083.702] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHT\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\zh-cht\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.705] GetLastError () returned 0x5 [0083.705] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.705] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.705] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0083.705] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0083.705] SetLastError (dwErrCode=0x0) [0083.705] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.705] GetLastError () returned 0x5 [0083.705] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0083.705] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.705] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0083.705] SetLastError (dwErrCode=0x0) [0083.705] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.706] GetLastError () returned 0x5 [0083.706] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0083.706] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.706] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0810 [0083.710] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.712] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.712] SetLastError (dwErrCode=0x0) [0083.712] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.713] GetLastError () returned 0x5 [0083.713] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.713] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.713] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0450 [0083.715] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.716] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.716] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.717] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0083.717] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ar\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.718] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.718] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.718] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.718] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.718] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.718] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.718] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.718] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.718] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.718] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.718] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.718] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.718] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.718] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.718] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.718] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.718] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.718] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.718] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.718] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.718] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.718] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.718] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.718] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0083.718] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0083.719] SetLastError (dwErrCode=0x0) [0083.719] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ar\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.722] GetLastError () returned 0x5 [0083.722] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.722] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.722] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.722] SetLastError (dwErrCode=0x0) [0083.722] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.722] GetLastError () returned 0x5 [0083.722] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.722] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.722] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0bd0 [0083.724] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.725] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.725] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0083.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\bg\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.729] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.729] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.729] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.729] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.729] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.729] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.729] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.729] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.729] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.729] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.729] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.729] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.729] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.729] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.729] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.729] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.729] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.729] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.729] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.730] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.730] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.730] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.730] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.730] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0083.730] FindClose (in: hFindFile=0xd7079a0bd0 | out: hFindFile=0xd7079a0bd0) returned 1 [0083.730] SetLastError (dwErrCode=0x0) [0083.730] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\bg\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.734] GetLastError () returned 0x5 [0083.734] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.734] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.734] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.734] SetLastError (dwErrCode=0x0) [0083.734] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.734] GetLastError () returned 0x5 [0083.734] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.734] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.734] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0ed0 [0083.736] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.737] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.737] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.738] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0083.742] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ca\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.742] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.742] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.743] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.743] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.743] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.743] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.743] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.743] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.743] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.743] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.743] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.743] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.743] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.743] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.743] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.743] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.743] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.743] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.743] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.743] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.743] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.743] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.743] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.743] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0083.743] FindClose (in: hFindFile=0xd7079a0ed0 | out: hFindFile=0xd7079a0ed0) returned 1 [0083.744] SetLastError (dwErrCode=0x0) [0083.744] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ca\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.747] GetLastError () returned 0x5 [0083.747] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.747] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.747] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.747] SetLastError (dwErrCode=0x0) [0083.747] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.747] GetLastError () returned 0x5 [0083.747] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.747] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.747] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a08d0 [0083.772] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.772] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.772] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\as80.xsl", dwFileAttributes=0x80) returned 0 [0083.773] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\as80.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\as80.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.773] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.773] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.774] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.774] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\as90.xsl", dwFileAttributes=0x80) returned 0 [0083.775] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\as90.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\as90.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.775] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.776] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.776] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.776] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\db2v0801.xsl", dwFileAttributes=0x80) returned 0 [0083.777] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\db2v0801.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\db2v0801.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.777] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.777] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.777] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.777] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.777] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\hive.xsl", dwFileAttributes=0x80) returned 0 [0083.778] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\hive.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\hive.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.778] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.778] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.778] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.778] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.778] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\Informix.xsl", dwFileAttributes=0x80) returned 0 [0083.778] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\Informix.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\informix.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.779] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.779] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.779] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.779] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.779] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\msjet.xsl", dwFileAttributes=0x80) returned 0 [0083.780] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\msjet.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\msjet.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.780] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.780] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.780] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.780] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\orcl7.xsl", dwFileAttributes=0x80) returned 0 [0083.781] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\orcl7.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\orcl7.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.781] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.781] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.781] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.781] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql120.xsl", dwFileAttributes=0x80) returned 0 [0083.782] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql120.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\sql120.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.782] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.782] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.782] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.782] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql2000.xsl", dwFileAttributes=0x80) returned 0 [0083.783] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql2000.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\sql2000.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.783] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.783] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.783] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.783] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql70.xsl", dwFileAttributes=0x80) returned 0 [0083.784] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql70.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\sql70.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.784] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.784] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.784] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.784] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.785] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql90.xsl", dwFileAttributes=0x80) returned 0 [0083.785] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql90.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\sql90.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.785] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.785] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.785] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.785] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.786] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sqlpdw.xsl", dwFileAttributes=0x80) returned 0 [0083.786] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sqlpdw.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\sqlpdw.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.786] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.786] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.787] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.787] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.787] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\Sybase.xsl", dwFileAttributes=0x80) returned 0 [0083.787] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\Sybase.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\sybase.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.787] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.787] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.788] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.788] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\trdtv2r41.xsl", dwFileAttributes=0x80) returned 0 [0083.788] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\trdtv2r41.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\trdtv2r41.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.788] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.788] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.788] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0083.788] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0083.789] SetLastError (dwErrCode=0x0) [0083.789] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.792] GetLastError () returned 0x5 [0083.792] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.792] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.792] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.792] SetLastError (dwErrCode=0x0) [0083.792] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.792] GetLastError () returned 0x5 [0083.792] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.792] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.792] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0d50 [0083.794] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.795] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.795] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0083.796] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cs\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.796] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.796] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.797] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.797] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.797] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.797] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.797] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.797] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.797] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.797] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.797] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.797] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.797] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.797] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.797] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.797] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.797] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.797] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.797] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.797] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.797] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.797] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.797] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.797] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0083.797] FindClose (in: hFindFile=0xd7079a0d50 | out: hFindFile=0xd7079a0d50) returned 1 [0083.798] SetLastError (dwErrCode=0x0) [0083.798] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.801] GetLastError () returned 0x5 [0083.801] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.801] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.801] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.801] SetLastError (dwErrCode=0x0) [0083.802] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.802] GetLastError () returned 0x5 [0083.802] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.802] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.802] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0d50 [0083.804] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.805] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.805] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0083.806] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\da\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.806] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.806] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.806] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.806] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.806] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.806] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.806] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.807] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.807] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.807] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.807] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.807] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.807] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.807] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.807] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.807] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.807] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.807] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.807] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.807] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.807] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.807] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.807] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.807] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0083.807] FindClose (in: hFindFile=0xd7079a0d50 | out: hFindFile=0xd7079a0d50) returned 1 [0083.808] SetLastError (dwErrCode=0x0) [0083.808] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\da\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.811] GetLastError () returned 0x5 [0083.811] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.811] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.811] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.811] SetLastError (dwErrCode=0x0) [0083.811] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.812] GetLastError () returned 0x5 [0083.812] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.812] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.812] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a08d0 [0083.814] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.815] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.815] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0083.816] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\de\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.816] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.816] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.816] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.816] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.816] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.816] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.816] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.816] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.816] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.816] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.816] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.816] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.816] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.816] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.816] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.817] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.817] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.817] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.817] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.817] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.817] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.817] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.817] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.817] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0083.817] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0083.818] SetLastError (dwErrCode=0x0) [0083.818] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\de\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.821] GetLastError () returned 0x5 [0083.821] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.821] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.821] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.821] SetLastError (dwErrCode=0x0) [0083.821] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.821] GetLastError () returned 0x5 [0083.821] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.821] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.821] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0bd0 [0083.823] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.824] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.824] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.824] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0083.825] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\el\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.825] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.825] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.826] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.826] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.826] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.826] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.826] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.826] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.826] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.826] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.826] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.826] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.826] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.826] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.826] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.826] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.826] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.826] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.826] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.826] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.826] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.826] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.826] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.826] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0083.826] FindClose (in: hFindFile=0xd7079a0bd0 | out: hFindFile=0xd7079a0bd0) returned 1 [0083.828] SetLastError (dwErrCode=0x0) [0083.828] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\el\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.831] GetLastError () returned 0x5 [0083.831] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.831] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.831] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.831] SetLastError (dwErrCode=0x0) [0083.831] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.831] GetLastError () returned 0x5 [0083.831] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.831] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.831] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\en\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a08d0 [0083.832] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.832] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.832] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\en\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0083.833] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\en\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\en\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.833] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.833] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.833] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0083.833] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0083.833] SetLastError (dwErrCode=0x0) [0083.833] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\en\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\en\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.833] GetLastError () returned 0x5 [0083.833] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.833] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.833] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.833] SetLastError (dwErrCode=0x0) [0083.833] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.834] GetLastError () returned 0x5 [0083.834] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.834] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.834] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0450 [0083.835] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.836] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.836] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0083.837] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\es\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.838] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.838] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.838] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.838] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.838] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.838] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.838] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.838] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.838] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.838] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.838] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.838] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.838] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.838] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.838] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.838] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.838] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.838] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.838] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.838] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.838] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.838] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.838] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.838] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0083.838] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0083.839] SetLastError (dwErrCode=0x0) [0083.839] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\es\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.842] GetLastError () returned 0x5 [0083.842] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.842] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.842] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.842] SetLastError (dwErrCode=0x0) [0083.842] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.842] GetLastError () returned 0x5 [0083.842] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.842] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.842] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0450 [0083.844] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.845] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.845] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0083.846] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\et\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.846] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.846] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.846] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.846] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.846] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.846] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.846] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.846] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.846] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.846] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.846] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.846] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.846] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.846] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.846] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.846] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.846] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.846] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.846] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.846] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.846] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.846] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.846] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.846] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0083.846] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0083.847] SetLastError (dwErrCode=0x0) [0083.847] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\et\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.850] GetLastError () returned 0x5 [0083.850] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.850] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.850] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.850] SetLastError (dwErrCode=0x0) [0083.850] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.850] GetLastError () returned 0x5 [0083.850] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.850] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.850] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a08d0 [0083.851] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.852] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.852] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0083.854] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\eu\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.854] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.854] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.854] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.854] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.854] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.854] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.854] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.854] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.854] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.854] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.854] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.854] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.854] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.854] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.854] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.854] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.854] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.855] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.855] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.855] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.855] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.855] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.855] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.855] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0083.855] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0083.855] SetLastError (dwErrCode=0x0) [0083.855] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\eu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.858] GetLastError () returned 0x5 [0083.858] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.858] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.858] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.858] SetLastError (dwErrCode=0x0) [0083.858] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.859] GetLastError () returned 0x5 [0083.859] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.859] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.859] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a08d0 [0083.860] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.861] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.861] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0083.862] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\fi\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.863] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.863] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.863] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.863] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.863] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.863] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.863] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.863] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.863] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.863] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.863] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.863] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.863] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.863] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.863] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.863] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.863] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.863] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.863] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.863] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.863] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.863] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.863] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.863] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0083.863] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0083.864] SetLastError (dwErrCode=0x0) [0083.864] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\fi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.867] GetLastError () returned 0x5 [0083.867] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.867] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.867] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.867] SetLastError (dwErrCode=0x0) [0083.867] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.867] GetLastError () returned 0x5 [0083.867] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.867] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.867] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0ed0 [0083.869] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.870] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.870] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.870] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0083.871] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\fr\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.871] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.871] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.871] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.871] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.871] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.871] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.871] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.871] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.871] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.871] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.871] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.871] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.871] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.871] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.871] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.871] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.871] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.871] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.871] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.872] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.872] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.872] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.872] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.872] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0083.872] FindClose (in: hFindFile=0xd7079a0ed0 | out: hFindFile=0xd7079a0ed0) returned 1 [0083.873] SetLastError (dwErrCode=0x0) [0083.873] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\fr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.877] GetLastError () returned 0x5 [0083.877] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.877] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.877] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.877] SetLastError (dwErrCode=0x0) [0083.877] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.878] GetLastError () returned 0x5 [0083.878] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.878] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.878] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0450 [0083.890] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.891] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.891] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0083.892] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\gl\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.893] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.893] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.893] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.893] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.893] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.893] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.893] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.893] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.893] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.893] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.893] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.893] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.893] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.893] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.893] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.893] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.893] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.893] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.893] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.893] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.893] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.893] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.893] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.893] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0083.893] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0083.894] SetLastError (dwErrCode=0x0) [0083.894] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\gl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.897] GetLastError () returned 0x5 [0083.897] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.897] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.897] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.897] SetLastError (dwErrCode=0x0) [0083.897] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.897] GetLastError () returned 0x5 [0083.897] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.897] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.897] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a08d0 [0083.899] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.900] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.900] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0083.901] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\he\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.901] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.901] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.901] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.901] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.902] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.902] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.902] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.902] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.902] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.902] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.902] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.902] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.902] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.902] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.902] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.902] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.902] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.902] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.902] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.902] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.902] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.902] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.902] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.902] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0083.902] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0083.903] SetLastError (dwErrCode=0x0) [0083.903] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\he\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.906] GetLastError () returned 0x5 [0083.906] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.906] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.906] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.906] SetLastError (dwErrCode=0x0) [0083.906] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.907] GetLastError () returned 0x5 [0083.907] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.907] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.907] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0bd0 [0083.909] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.911] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.911] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.911] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0083.912] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\hi\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.912] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.912] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.912] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.912] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.912] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.912] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.912] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.912] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.912] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.912] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.912] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.912] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.912] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.913] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.913] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.913] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.913] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.913] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.913] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.913] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.913] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.913] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.913] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.913] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0083.913] FindClose (in: hFindFile=0xd7079a0bd0 | out: hFindFile=0xd7079a0bd0) returned 1 [0083.914] SetLastError (dwErrCode=0x0) [0083.914] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\hi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.917] GetLastError () returned 0x5 [0083.917] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.917] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.917] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.917] SetLastError (dwErrCode=0x0) [0083.917] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.917] GetLastError () returned 0x5 [0083.917] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.917] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.917] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0450 [0083.919] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.920] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.920] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.920] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0083.921] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\hr\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.921] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.921] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.921] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.921] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.921] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.921] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.921] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.921] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.921] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.921] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.921] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.921] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.921] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.921] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.921] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.921] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.921] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.922] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.922] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.922] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.922] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.922] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.922] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.922] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0083.922] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0083.923] SetLastError (dwErrCode=0x0) [0083.923] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\hr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.926] GetLastError () returned 0x5 [0083.926] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.926] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.926] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.926] SetLastError (dwErrCode=0x0) [0083.926] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.926] GetLastError () returned 0x5 [0083.926] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.926] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.926] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a08d0 [0083.929] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.930] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.930] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.931] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0083.931] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\hu\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.931] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.931] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.932] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.932] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.932] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.932] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.932] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.932] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.932] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.932] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.932] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.932] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.932] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.932] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.932] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.932] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.932] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.932] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.932] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.932] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.932] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.932] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.932] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.932] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0083.932] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0083.933] SetLastError (dwErrCode=0x0) [0083.933] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\hu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.937] GetLastError () returned 0x5 [0083.937] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.937] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.937] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.937] SetLastError (dwErrCode=0x0) [0083.937] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.938] GetLastError () returned 0x5 [0083.938] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.938] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.938] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a08d0 [0083.944] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.945] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.945] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0083.947] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\id\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.947] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.947] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.947] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.947] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.947] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.947] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.947] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.947] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.948] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.948] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.948] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.948] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.948] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.948] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.948] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.948] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.948] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.948] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.948] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.948] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.948] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.948] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.948] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.948] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0083.948] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0083.949] SetLastError (dwErrCode=0x0) [0083.949] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\id\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.952] GetLastError () returned 0x5 [0083.952] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.952] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.952] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.952] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.952] SetLastError (dwErrCode=0x0) [0083.952] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.953] GetLastError () returned 0x5 [0083.953] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.953] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.953] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\it\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0bd0 [0083.955] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.956] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.956] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.956] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\it\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0083.957] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\it\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\it\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.957] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.957] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.958] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.958] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.958] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.958] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.958] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.958] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.958] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.958] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.958] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.958] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.958] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.958] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.958] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.958] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.958] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.958] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.958] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.958] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.958] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.958] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.958] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.958] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0083.958] FindClose (in: hFindFile=0xd7079a0bd0 | out: hFindFile=0xd7079a0bd0) returned 1 [0083.959] SetLastError (dwErrCode=0x0) [0083.959] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\it\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\it\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.962] GetLastError () returned 0x5 [0083.962] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.962] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.962] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.962] SetLastError (dwErrCode=0x0) [0083.962] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.962] GetLastError () returned 0x5 [0083.962] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.962] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.962] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ja\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a08d0 [0083.964] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.965] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.965] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ja\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0083.966] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ja\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ja\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.967] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.967] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.967] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.967] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.967] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.967] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.967] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.967] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.968] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.968] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.968] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.968] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.968] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.968] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.968] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.968] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.968] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.968] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.968] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.968] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.968] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.968] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.968] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.968] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0083.968] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0083.969] SetLastError (dwErrCode=0x0) [0083.969] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ja\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ja\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.972] GetLastError () returned 0x5 [0083.972] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.972] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.972] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.972] SetLastError (dwErrCode=0x0) [0083.973] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.973] GetLastError () returned 0x5 [0083.973] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.973] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.973] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\kk\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0bd0 [0083.977] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.978] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.978] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\kk\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0083.979] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\kk\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\kk\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.979] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.979] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.979] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.979] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.979] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.979] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.979] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.979] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.979] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.979] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.979] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.979] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.979] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.979] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.979] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.980] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.980] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.980] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.980] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.980] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.980] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.980] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.980] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.980] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0083.980] FindClose (in: hFindFile=0xd7079a0bd0 | out: hFindFile=0xd7079a0bd0) returned 1 [0083.981] SetLastError (dwErrCode=0x0) [0083.981] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\kk\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\kk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.984] GetLastError () returned 0x5 [0083.984] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.985] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.985] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.985] SetLastError (dwErrCode=0x0) [0083.985] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.985] GetLastError () returned 0x5 [0083.985] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.985] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.985] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ko\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0930 [0083.986] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.988] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.988] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ko\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0083.988] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ko\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ko\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.989] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.989] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.989] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.989] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.989] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.989] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.989] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.989] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.989] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.989] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.989] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.989] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.989] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.989] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.989] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.989] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.989] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.989] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.989] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.989] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.989] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.989] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.989] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.989] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0083.989] FindClose (in: hFindFile=0xd7079a0930 | out: hFindFile=0xd7079a0930) returned 1 [0083.990] SetLastError (dwErrCode=0x0) [0083.990] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ko\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ko\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.993] GetLastError () returned 0x5 [0083.993] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.993] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.993] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0083.993] SetLastError (dwErrCode=0x0) [0083.993] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.993] GetLastError () returned 0x5 [0083.993] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0083.993] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.993] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lt\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0d50 [0083.995] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.996] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.996] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0083.996] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lt\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0083.997] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lt\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\lt\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.997] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0083.997] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.997] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.997] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.997] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.997] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.997] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.997] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.997] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.997] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.997] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.997] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.997] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.997] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.997] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.997] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.997] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.997] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.997] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.997] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.997] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.997] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.997] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0083.997] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0083.997] FindClose (in: hFindFile=0xd7079a0d50 | out: hFindFile=0xd7079a0d50) returned 1 [0083.999] SetLastError (dwErrCode=0x0) [0083.999] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lt\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\lt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.002] GetLastError () returned 0x5 [0084.002] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0084.002] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.002] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.002] SetLastError (dwErrCode=0x0) [0084.002] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.002] GetLastError () returned 0x5 [0084.002] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0084.003] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.003] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lv\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a08d0 [0084.005] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.007] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.007] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.008] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lv\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0084.008] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lv\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\lv\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.009] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.009] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.009] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.009] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.009] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.009] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.009] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.009] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.009] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.009] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.009] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.009] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.009] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.009] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.009] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.009] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.009] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.009] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.009] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.009] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.009] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.009] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.009] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.009] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0084.009] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0084.010] SetLastError (dwErrCode=0x0) [0084.010] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lv\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\lv\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.015] GetLastError () returned 0x5 [0084.015] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0084.015] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.015] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.015] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.015] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.015] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.015] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.015] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.016] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.016] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.016] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.016] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.AnalysisServices.Modeler.UI.rll", dwFileAttributes=0x80) returned 0 [0084.018] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.AnalysisServices.Modeler.UI.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\microsoft.analysisservices.modeler.ui.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.018] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.018] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.018] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.018] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.018] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.018] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.018] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.018] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.018] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.019] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.019] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.019] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.019] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.019] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.019] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.019] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.019] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.019] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.019] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.019] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.019] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.019] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.019] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.019] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.Office.PowerPivot.ExcelAddIn.tlb", dwFileAttributes=0x80) returned 0 [0084.020] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.Office.PowerPivot.ExcelAddIn.tlb" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\microsoft.office.powerpivot.exceladdin.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.020] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.020] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.020] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.020] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.020] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.020] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.020] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.020] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.020] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.020] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.020] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.020] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.020] SetLastError (dwErrCode=0x0) [0084.020] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.021] GetLastError () returned 0x5 [0084.021] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0084.021] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.021] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ms\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0450 [0084.022] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.023] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.023] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.024] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ms\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0084.024] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ms\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ms\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.024] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.024] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.025] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.025] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.025] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.025] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.025] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.025] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.025] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.025] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.025] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.025] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.025] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.025] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.025] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.025] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.025] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.025] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.025] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.025] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.025] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.025] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.025] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.025] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0084.025] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0084.026] SetLastError (dwErrCode=0x0) [0084.026] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ms\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ms\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.029] GetLastError () returned 0x5 [0084.029] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0084.029] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.029] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.029] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.029] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.029] SetLastError (dwErrCode=0x0) [0084.029] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.029] GetLastError () returned 0x5 [0084.029] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0084.029] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.030] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\nl\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a08d0 [0084.031] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.032] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.032] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\nl\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0084.033] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\nl\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\nl\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.033] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.033] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.033] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.033] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.033] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.033] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.033] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.033] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.033] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.033] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.033] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.033] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.033] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.033] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.033] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.033] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.033] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.033] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.034] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.034] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.034] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.034] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.034] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.034] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0084.034] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0084.034] SetLastError (dwErrCode=0x0) [0084.034] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\nl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\nl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.037] GetLastError () returned 0x5 [0084.037] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0084.037] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.037] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.037] SetLastError (dwErrCode=0x0) [0084.037] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.038] GetLastError () returned 0x5 [0084.038] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0084.038] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.038] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\no\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0930 [0084.040] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.041] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.041] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.042] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\no\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0084.043] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\no\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\no\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.043] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.043] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.043] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.043] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.043] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.043] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.043] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.043] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.043] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.043] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.043] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.043] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.043] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.043] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.043] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.043] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.044] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.044] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.044] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.044] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.044] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.044] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.044] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.044] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0084.044] FindClose (in: hFindFile=0xd7079a0930 | out: hFindFile=0xd7079a0930) returned 1 [0084.046] SetLastError (dwErrCode=0x0) [0084.046] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\no\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\no\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.050] GetLastError () returned 0x5 [0084.050] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0084.050] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.050] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.050] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.050] SetLastError (dwErrCode=0x0) [0084.050] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.050] GetLastError () returned 0x5 [0084.050] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0084.050] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.050] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pl\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0ed0 [0084.052] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.053] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.053] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.053] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pl\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0084.054] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pl\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\pl\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.054] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.054] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.054] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.054] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.054] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.054] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.054] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.054] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.054] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.054] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.054] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.054] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.054] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.054] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.054] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.054] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.054] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.054] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.055] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.055] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.055] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.055] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.055] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.055] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0084.055] FindClose (in: hFindFile=0xd7079a0ed0 | out: hFindFile=0xd7079a0ed0) returned 1 [0084.056] SetLastError (dwErrCode=0x0) [0084.056] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\pl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.059] GetLastError () returned 0x5 [0084.059] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0084.059] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.059] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.059] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.059] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.060] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\PowerPivotExcelClientAddIn.tlb", dwFileAttributes=0x80) returned 0 [0084.060] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\PowerPivotExcelClientAddIn.tlb" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\powerpivotexcelclientaddin.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.061] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.061] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.061] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.061] SetLastError (dwErrCode=0x0) [0084.061] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.061] GetLastError () returned 0x5 [0084.061] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0084.062] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.062] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a08d0 [0084.064] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.065] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.065] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.065] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0084.066] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\pt\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.066] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.066] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.066] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.066] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.066] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.066] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.066] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.066] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.067] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.067] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.067] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.067] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.067] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.067] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.067] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.067] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.067] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.067] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.067] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.067] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.067] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.067] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.067] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.067] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0084.067] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0084.068] SetLastError (dwErrCode=0x0) [0084.068] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\pt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.071] GetLastError () returned 0x5 [0084.071] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0084.071] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.071] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.071] SetLastError (dwErrCode=0x0) [0084.071] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.071] GetLastError () returned 0x5 [0084.071] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0084.071] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.071] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt-PT\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0bd0 [0084.074] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.075] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.075] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.078] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt-PT\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0084.078] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt-PT\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\pt-pt\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.079] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.079] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.079] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.079] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.079] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.079] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.079] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.079] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.079] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.079] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.079] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.079] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.079] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.079] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.080] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.080] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.080] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.080] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.080] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.080] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.080] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.080] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.080] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.080] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0084.080] FindClose (in: hFindFile=0xd7079a0bd0 | out: hFindFile=0xd7079a0bd0) returned 1 [0084.081] SetLastError (dwErrCode=0x0) [0084.081] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt-PT\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\pt-pt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.085] GetLastError () returned 0x5 [0084.085] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0084.085] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.085] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.085] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.085] SetLastError (dwErrCode=0x0) [0084.085] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.086] GetLastError () returned 0x5 [0084.086] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0084.086] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.086] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0450 [0084.087] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.088] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.088] SetLastError (dwErrCode=0x0) [0084.088] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.089] GetLastError () returned 0x5 [0084.089] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.089] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.089] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1025\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a08d0 [0084.089] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.090] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.090] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.090] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1025\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0084.092] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1025\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1025\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.094] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.094] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.094] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0084.094] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0084.094] SetLastError (dwErrCode=0x0) [0084.094] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1025\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1025\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.095] GetLastError () returned 0x5 [0084.095] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.095] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.095] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.095] SetLastError (dwErrCode=0x0) [0084.095] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.095] GetLastError () returned 0x5 [0084.095] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.095] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.095] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1026\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a08d0 [0084.095] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.095] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.096] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.096] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1026\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0084.097] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1026\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1026\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.097] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.097] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.098] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0084.098] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0084.098] SetLastError (dwErrCode=0x0) [0084.098] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1026\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1026\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.098] GetLastError () returned 0x5 [0084.098] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.098] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.098] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.098] SetLastError (dwErrCode=0x0) [0084.098] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.099] GetLastError () returned 0x5 [0084.099] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.099] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.099] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\10266\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a08d0 [0084.100] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.100] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.100] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.100] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\10266\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0084.101] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\10266\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\10266\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.101] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.101] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.102] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0084.102] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0084.102] SetLastError (dwErrCode=0x0) [0084.102] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\10266\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\10266\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.102] GetLastError () returned 0x5 [0084.102] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.102] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.102] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.102] SetLastError (dwErrCode=0x0) [0084.103] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.103] GetLastError () returned 0x5 [0084.103] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.103] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.103] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1027\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a0ed0 [0084.105] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.105] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.105] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1027\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0084.109] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1027\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1027\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.109] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.109] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.110] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0084.110] FindClose (in: hFindFile=0xd7079a0ed0 | out: hFindFile=0xd7079a0ed0) returned 1 [0084.110] SetLastError (dwErrCode=0x0) [0084.110] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1027\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1027\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.110] GetLastError () returned 0x5 [0084.110] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.110] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.110] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.110] SetLastError (dwErrCode=0x0) [0084.110] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.111] GetLastError () returned 0x5 [0084.111] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.111] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.111] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1028\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a0ed0 [0084.113] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.113] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.113] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.113] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1028\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0084.114] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1028\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1028\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.114] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.114] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.114] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0084.114] FindClose (in: hFindFile=0xd7079a0ed0 | out: hFindFile=0xd7079a0ed0) returned 1 [0084.115] SetLastError (dwErrCode=0x0) [0084.115] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1028\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1028\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.115] GetLastError () returned 0x5 [0084.115] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.115] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.115] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.115] SetLastError (dwErrCode=0x0) [0084.115] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.115] GetLastError () returned 0x5 [0084.115] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.115] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.115] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1029\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a08d0 [0084.116] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.116] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.116] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.117] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1029\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0084.118] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1029\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1029\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.118] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.118] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.119] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0084.119] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0084.119] SetLastError (dwErrCode=0x0) [0084.119] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1029\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1029\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.119] GetLastError () returned 0x5 [0084.119] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.119] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.119] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.119] SetLastError (dwErrCode=0x0) [0084.119] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.120] GetLastError () returned 0x5 [0084.120] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.120] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.120] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1030\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a08d0 [0084.121] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.121] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.121] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.121] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1030\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0084.123] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1030\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1030\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.124] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.124] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.124] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0084.124] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0084.124] SetLastError (dwErrCode=0x0) [0084.125] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1030\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1030\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.125] GetLastError () returned 0x5 [0084.125] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.125] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.125] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.125] SetLastError (dwErrCode=0x0) [0084.125] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.125] GetLastError () returned 0x5 [0084.125] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.125] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.126] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1031\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a08d0 [0084.126] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.127] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.127] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1031\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0084.128] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1031\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1031\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.128] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.128] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.129] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0084.129] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0084.129] SetLastError (dwErrCode=0x0) [0084.129] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1031\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1031\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.129] GetLastError () returned 0x5 [0084.129] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.130] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.130] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.130] SetLastError (dwErrCode=0x0) [0084.130] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.130] GetLastError () returned 0x5 [0084.130] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.130] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.130] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1032\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a08d0 [0084.131] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.131] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.131] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1032\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0084.132] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1032\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1032\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.132] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.132] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.133] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0084.133] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0084.133] SetLastError (dwErrCode=0x0) [0084.133] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1032\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1032\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.133] GetLastError () returned 0x5 [0084.133] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.133] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.133] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.133] SetLastError (dwErrCode=0x0) [0084.134] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.134] GetLastError () returned 0x5 [0084.134] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.134] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.134] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1033\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a08d0 [0084.135] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.135] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.135] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1033\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0084.136] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1033\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1033\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.136] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.136] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.137] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0084.137] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0084.137] SetLastError (dwErrCode=0x0) [0084.137] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.137] GetLastError () returned 0x5 [0084.137] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.137] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.137] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.137] SetLastError (dwErrCode=0x0) [0084.137] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.138] GetLastError () returned 0x5 [0084.138] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.138] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.138] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1035\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a0d50 [0084.138] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.138] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.138] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.140] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1035\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0084.140] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1035\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1035\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.140] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.140] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.141] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0084.141] FindClose (in: hFindFile=0xd7079a0d50 | out: hFindFile=0xd7079a0d50) returned 1 [0084.141] SetLastError (dwErrCode=0x0) [0084.141] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1035\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1035\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.141] GetLastError () returned 0x5 [0084.141] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.141] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.141] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.141] SetLastError (dwErrCode=0x0) [0084.142] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.142] GetLastError () returned 0x5 [0084.142] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.142] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.142] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1036\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a08d0 [0084.145] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.145] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.146] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.146] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1036\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0084.147] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1036\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1036\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.147] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.147] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.148] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0084.148] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0084.148] SetLastError (dwErrCode=0x0) [0084.148] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1036\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1036\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.148] GetLastError () returned 0x5 [0084.148] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.148] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.148] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.148] SetLastError (dwErrCode=0x0) [0084.148] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.149] GetLastError () returned 0x5 [0084.149] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.149] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.149] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1037\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a08d0 [0084.149] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.149] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.149] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1037\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0084.150] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1037\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1037\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.151] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.151] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.151] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0084.151] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0084.151] SetLastError (dwErrCode=0x0) [0084.151] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1037\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1037\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.152] GetLastError () returned 0x5 [0084.152] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.152] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.152] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.152] SetLastError (dwErrCode=0x0) [0084.152] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.152] GetLastError () returned 0x5 [0084.152] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.152] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.152] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1038\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a08d0 [0084.152] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.152] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.152] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1038\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0084.154] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1038\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1038\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.154] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.155] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.155] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0084.155] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0084.155] SetLastError (dwErrCode=0x0) [0084.155] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1038\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1038\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.155] GetLastError () returned 0x5 [0084.155] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.155] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.155] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.155] SetLastError (dwErrCode=0x0) [0084.156] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.156] GetLastError () returned 0x5 [0084.156] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.156] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.156] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1040\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a08d0 [0084.157] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.157] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.157] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1040\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0084.158] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1040\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1040\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.158] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.158] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.159] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0084.159] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0084.159] SetLastError (dwErrCode=0x0) [0084.159] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1040\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1040\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.159] GetLastError () returned 0x5 [0084.159] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.159] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.159] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.159] SetLastError (dwErrCode=0x0) [0084.159] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.160] GetLastError () returned 0x5 [0084.160] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.160] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.160] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1041\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a0ed0 [0084.161] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.161] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.161] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1041\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0084.161] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1041\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1041\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.162] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.162] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.162] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0084.162] FindClose (in: hFindFile=0xd7079a0ed0 | out: hFindFile=0xd7079a0ed0) returned 1 [0084.162] SetLastError (dwErrCode=0x0) [0084.162] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1041\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1041\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.163] GetLastError () returned 0x5 [0084.163] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.163] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.163] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.163] SetLastError (dwErrCode=0x0) [0084.163] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.163] GetLastError () returned 0x5 [0084.163] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.163] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.163] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1042\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a08d0 [0084.163] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.163] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.163] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.164] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1042\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0084.164] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1042\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1042\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.164] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.165] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.165] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0084.165] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0084.165] SetLastError (dwErrCode=0x0) [0084.165] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1042\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1042\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.165] GetLastError () returned 0x5 [0084.165] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.165] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.165] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.165] SetLastError (dwErrCode=0x0) [0084.166] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.166] GetLastError () returned 0x5 [0084.166] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.166] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.166] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1043\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a0bd0 [0084.167] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.167] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.167] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1043\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0084.168] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1043\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1043\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.168] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.168] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.168] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0084.168] FindClose (in: hFindFile=0xd7079a0bd0 | out: hFindFile=0xd7079a0bd0) returned 1 [0084.168] SetLastError (dwErrCode=0x0) [0084.168] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1043\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1043\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.169] GetLastError () returned 0x5 [0084.169] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.169] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.169] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.169] SetLastError (dwErrCode=0x0) [0084.169] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.169] GetLastError () returned 0x5 [0084.169] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.169] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.169] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1044\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a08d0 [0084.170] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.170] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.170] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.171] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1044\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0084.171] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1044\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1044\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.171] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.171] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.172] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0084.172] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0084.172] SetLastError (dwErrCode=0x0) [0084.172] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1044\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1044\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.172] GetLastError () returned 0x5 [0084.172] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.172] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.172] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.172] SetLastError (dwErrCode=0x0) [0084.172] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.173] GetLastError () returned 0x5 [0084.173] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.173] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.173] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1045\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a08d0 [0084.174] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.174] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.174] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.174] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1045\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0084.175] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1045\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1045\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.175] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.175] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.176] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0084.176] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0084.176] SetLastError (dwErrCode=0x0) [0084.176] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1045\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1045\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.176] GetLastError () returned 0x5 [0084.176] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.176] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.176] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.176] SetLastError (dwErrCode=0x0) [0084.177] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.177] GetLastError () returned 0x5 [0084.177] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.177] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.177] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1046\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a08d0 [0084.178] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.178] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.178] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.179] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1046\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0084.179] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1046\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1046\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.180] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.180] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.180] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0084.180] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0084.180] SetLastError (dwErrCode=0x0) [0084.180] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1046\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1046\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.180] GetLastError () returned 0x5 [0084.180] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.180] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.180] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.180] SetLastError (dwErrCode=0x0) [0084.181] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.181] GetLastError () returned 0x5 [0084.181] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.181] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.181] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1048\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a0d50 [0084.182] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.183] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.183] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.183] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1048\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0084.184] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1048\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1048\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.184] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.184] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.184] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0084.184] FindClose (in: hFindFile=0xd7079a0d50 | out: hFindFile=0xd7079a0d50) returned 1 [0084.184] SetLastError (dwErrCode=0x0) [0084.184] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1048\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1048\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.185] GetLastError () returned 0x5 [0084.185] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.185] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.185] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.185] SetLastError (dwErrCode=0x0) [0084.185] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.185] GetLastError () returned 0x5 [0084.185] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.185] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.185] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1049\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a08d0 [0084.186] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.186] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.186] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1049\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0084.187] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1049\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1049\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.188] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.188] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.188] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0084.188] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0084.188] SetLastError (dwErrCode=0x0) [0084.188] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1049\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1049\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.188] GetLastError () returned 0x5 [0084.188] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.188] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.188] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.189] SetLastError (dwErrCode=0x0) [0084.189] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.189] GetLastError () returned 0x5 [0084.189] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.189] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.189] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1050\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a08d0 [0084.190] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.190] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.190] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.190] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1050\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0084.190] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1050\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1050\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.190] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.190] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.191] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0084.191] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0084.191] SetLastError (dwErrCode=0x0) [0084.191] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1050\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1050\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.191] GetLastError () returned 0x5 [0084.191] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.191] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.191] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.191] SetLastError (dwErrCode=0x0) [0084.191] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.191] GetLastError () returned 0x5 [0084.191] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.192] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.192] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1051\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a0d50 [0084.192] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.192] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.192] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.192] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1051\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0084.193] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1051\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1051\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.193] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.193] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.193] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0084.194] FindClose (in: hFindFile=0xd7079a0d50 | out: hFindFile=0xd7079a0d50) returned 1 [0084.194] SetLastError (dwErrCode=0x0) [0084.194] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1051\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1051\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.194] GetLastError () returned 0x5 [0084.194] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.194] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.194] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.194] SetLastError (dwErrCode=0x0) [0084.194] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.194] GetLastError () returned 0x5 [0084.194] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.194] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.194] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1053\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a08d0 [0084.195] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.195] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.195] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.195] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1053\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0084.196] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1053\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1053\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.196] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.196] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.196] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0084.196] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0084.196] SetLastError (dwErrCode=0x0) [0084.196] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1053\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1053\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.197] GetLastError () returned 0x5 [0084.197] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.197] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.197] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.197] SetLastError (dwErrCode=0x0) [0084.197] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.197] GetLastError () returned 0x5 [0084.197] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.197] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.197] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1054\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a0ed0 [0084.198] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.198] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.198] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.198] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1054\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0084.198] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1054\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1054\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.199] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.199] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.199] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0084.199] FindClose (in: hFindFile=0xd7079a0ed0 | out: hFindFile=0xd7079a0ed0) returned 1 [0084.199] SetLastError (dwErrCode=0x0) [0084.199] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1054\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1054\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.199] GetLastError () returned 0x5 [0084.199] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.199] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.199] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.199] SetLastError (dwErrCode=0x0) [0084.200] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.200] GetLastError () returned 0x5 [0084.200] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.200] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.200] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1055\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a08d0 [0084.200] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.201] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.201] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.202] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1055\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0084.205] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1055\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1055\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.205] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.206] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.206] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0084.206] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0084.206] SetLastError (dwErrCode=0x0) [0084.206] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1055\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1055\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.206] GetLastError () returned 0x5 [0084.206] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.206] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.207] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.207] SetLastError (dwErrCode=0x0) [0084.207] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.207] GetLastError () returned 0x5 [0084.207] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.207] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.207] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1057\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a0d50 [0084.212] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.212] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.212] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.213] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1057\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0084.226] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1057\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1057\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.226] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.226] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.227] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0084.227] FindClose (in: hFindFile=0xd7079a0d50 | out: hFindFile=0xd7079a0d50) returned 1 [0084.228] SetLastError (dwErrCode=0x0) [0084.228] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1057\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1057\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.229] GetLastError () returned 0x5 [0084.229] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.229] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.229] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.229] SetLastError (dwErrCode=0x0) [0084.229] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.229] GetLastError () returned 0x5 [0084.229] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.229] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.229] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1058\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a08d0 [0084.246] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.246] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.246] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.246] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1058\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0084.262] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1058\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1058\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.262] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.263] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.263] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0084.263] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0084.263] SetLastError (dwErrCode=0x0) [0084.263] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1058\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1058\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.265] GetLastError () returned 0x5 [0084.265] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.265] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.265] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.265] SetLastError (dwErrCode=0x0) [0084.265] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.265] GetLastError () returned 0x5 [0084.265] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.265] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.265] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1060\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a08d0 [0084.279] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.279] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.279] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.280] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1060\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0084.284] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1060\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1060\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.285] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.285] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.286] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0084.286] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0084.286] SetLastError (dwErrCode=0x0) [0084.286] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1060\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1060\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.286] GetLastError () returned 0x5 [0084.286] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.286] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.286] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.286] SetLastError (dwErrCode=0x0) [0084.286] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.287] GetLastError () returned 0x5 [0084.287] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.287] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.287] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1061\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a08d0 [0084.291] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.291] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.291] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.291] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1061\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0084.292] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1061\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1061\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.292] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.292] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.292] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0084.292] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0084.292] SetLastError (dwErrCode=0x0) [0084.292] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1061\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1061\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.293] GetLastError () returned 0x5 [0084.293] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.293] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.293] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.293] SetLastError (dwErrCode=0x0) [0084.293] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.293] GetLastError () returned 0x5 [0084.293] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.293] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.293] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1062\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a08d0 [0084.294] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.294] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.294] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.294] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1062\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0084.295] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1062\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1062\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.296] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.296] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.296] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0084.296] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0084.296] SetLastError (dwErrCode=0x0) [0084.296] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1062\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1062\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.297] GetLastError () returned 0x5 [0084.297] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.297] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.297] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.297] SetLastError (dwErrCode=0x0) [0084.297] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.297] GetLastError () returned 0x5 [0084.297] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.297] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.297] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1063\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a08d0 [0084.300] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.300] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.300] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.300] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1063\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0084.301] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1063\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1063\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.301] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.301] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.302] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0084.302] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0084.302] SetLastError (dwErrCode=0x0) [0084.302] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1063\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1063\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.302] GetLastError () returned 0x5 [0084.302] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.302] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.302] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.302] SetLastError (dwErrCode=0x0) [0084.302] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.303] GetLastError () returned 0x5 [0084.303] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.303] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.303] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1066\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a0930 [0084.303] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.303] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.303] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.304] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1066\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0084.304] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1066\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1066\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.304] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.304] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.305] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0084.305] FindClose (in: hFindFile=0xd7079a0930 | out: hFindFile=0xd7079a0930) returned 1 [0084.305] SetLastError (dwErrCode=0x0) [0084.305] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1066\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1066\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.305] GetLastError () returned 0x5 [0084.305] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.305] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.305] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.305] SetLastError (dwErrCode=0x0) [0084.305] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.306] GetLastError () returned 0x5 [0084.306] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.306] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.306] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1069\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a0ed0 [0084.307] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.307] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.307] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.307] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1069\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0084.307] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1069\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1069\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.308] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.308] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.308] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0084.308] FindClose (in: hFindFile=0xd7079a0ed0 | out: hFindFile=0xd7079a0ed0) returned 1 [0084.308] SetLastError (dwErrCode=0x0) [0084.308] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1069\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1069\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.309] GetLastError () returned 0x5 [0084.309] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.309] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.309] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.309] SetLastError (dwErrCode=0x0) [0084.309] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.309] GetLastError () returned 0x5 [0084.309] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.309] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.309] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1081\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a08d0 [0084.309] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.309] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.309] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.310] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1081\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0084.311] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1081\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1081\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.311] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.311] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.312] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0084.312] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0084.312] SetLastError (dwErrCode=0x0) [0084.312] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1081\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1081\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.313] GetLastError () returned 0x5 [0084.313] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.313] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.313] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.313] SetLastError (dwErrCode=0x0) [0084.313] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.313] GetLastError () returned 0x5 [0084.313] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.313] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.313] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1086\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a0ed0 [0084.317] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.317] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.317] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.317] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1086\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0084.317] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1086\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1086\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.318] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.318] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.318] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0084.318] FindClose (in: hFindFile=0xd7079a0ed0 | out: hFindFile=0xd7079a0ed0) returned 1 [0084.318] SetLastError (dwErrCode=0x0) [0084.318] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1086\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1086\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.319] GetLastError () returned 0x5 [0084.319] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.319] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.319] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.319] SetLastError (dwErrCode=0x0) [0084.319] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.319] GetLastError () returned 0x5 [0084.319] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.319] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.319] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1087\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a08d0 [0084.320] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.320] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.320] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.320] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1087\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0084.321] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1087\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1087\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.321] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.321] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.322] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0084.322] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0084.322] SetLastError (dwErrCode=0x0) [0084.322] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1087\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1087\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.322] GetLastError () returned 0x5 [0084.322] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.322] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.322] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.322] SetLastError (dwErrCode=0x0) [0084.322] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.323] GetLastError () returned 0x5 [0084.323] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.323] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.323] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1110\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a0bd0 [0084.323] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.323] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.323] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.324] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1110\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0084.324] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1110\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1110\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.324] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.324] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.325] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0084.325] FindClose (in: hFindFile=0xd7079a0bd0 | out: hFindFile=0xd7079a0bd0) returned 1 [0084.325] SetLastError (dwErrCode=0x0) [0084.325] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1110\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1110\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.325] GetLastError () returned 0x5 [0084.325] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.325] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.325] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.325] SetLastError (dwErrCode=0x0) [0084.325] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.326] GetLastError () returned 0x5 [0084.326] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.326] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.326] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2052\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a08d0 [0084.328] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.328] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.328] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.328] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2052\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0084.328] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2052\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\2052\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.328] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.328] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.329] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0084.329] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0084.329] SetLastError (dwErrCode=0x0) [0084.329] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2052\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\2052\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.329] GetLastError () returned 0x5 [0084.329] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.329] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.329] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.329] SetLastError (dwErrCode=0x0) [0084.329] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.329] GetLastError () returned 0x5 [0084.329] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.329] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.329] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2070\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a08d0 [0084.330] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.330] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.330] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.330] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2070\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0084.331] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2070\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\2070\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.331] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.331] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.332] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0084.332] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0084.332] SetLastError (dwErrCode=0x0) [0084.332] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2070\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\2070\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.332] GetLastError () returned 0x5 [0084.332] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.332] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.332] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.332] SetLastError (dwErrCode=0x0) [0084.332] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.332] GetLastError () returned 0x5 [0084.332] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.332] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.332] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2074\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a0bd0 [0084.333] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.333] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0084.333] FindClose (in: hFindFile=0xd7079a0bd0 | out: hFindFile=0xd7079a0bd0) returned 1 [0084.333] SetLastError (dwErrCode=0x0) [0084.333] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2074\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\2074\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.333] GetLastError () returned 0x5 [0084.333] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.333] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.333] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.333] SetLastError (dwErrCode=0x0) [0084.333] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.334] GetLastError () returned 0x5 [0084.334] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.334] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.334] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\3082\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a08d0 [0084.334] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.334] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.334] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\3082\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0084.335] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\3082\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\3082\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.335] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.335] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.335] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0084.335] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0084.335] SetLastError (dwErrCode=0x0) [0084.335] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\3082\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\3082\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.336] GetLastError () returned 0x5 [0084.336] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.336] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.336] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.336] SetLastError (dwErrCode=0x0) [0084.336] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.336] GetLastError () returned 0x5 [0084.336] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.336] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.336] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\9242\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a08d0 [0084.337] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.337] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.337] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.337] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\9242\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0084.338] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\9242\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\9242\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.338] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.338] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.338] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0084.338] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0084.338] SetLastError (dwErrCode=0x0) [0084.338] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\9242\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\9242\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.338] GetLastError () returned 0x5 [0084.338] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.339] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.339] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0084.339] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0084.339] SetLastError (dwErrCode=0x0) [0084.339] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.339] GetLastError () returned 0x5 [0084.339] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0084.339] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.339] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.339] SetLastError (dwErrCode=0x0) [0084.339] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.339] GetLastError () returned 0x5 [0084.339] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0084.339] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.340] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ro\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0450 [0084.342] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.343] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.343] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.343] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ro\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0084.344] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ro\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ro\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.344] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.344] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.344] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.344] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.344] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.344] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.344] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.344] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.344] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.344] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.344] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.344] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.344] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.344] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.344] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.345] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.345] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.345] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.345] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.345] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.345] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.345] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.345] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.345] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0084.345] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0084.345] SetLastError (dwErrCode=0x0) [0084.345] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ro\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ro\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.348] GetLastError () returned 0x5 [0084.348] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0084.348] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.348] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.348] SetLastError (dwErrCode=0x0) [0084.348] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.348] GetLastError () returned 0x5 [0084.348] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0084.348] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.348] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ru\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0d50 [0084.350] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.351] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.351] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.351] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ru\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0084.352] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ru\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ru\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.352] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.352] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.352] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.352] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.352] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.352] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.352] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.352] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.352] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.352] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.352] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.352] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.352] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.352] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.352] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.352] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.352] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.352] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.352] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.352] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.352] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.352] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.352] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.353] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0084.353] FindClose (in: hFindFile=0xd7079a0d50 | out: hFindFile=0xd7079a0d50) returned 1 [0084.353] SetLastError (dwErrCode=0x0) [0084.353] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ru\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ru\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.356] GetLastError () returned 0x5 [0084.356] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0084.356] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.356] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.356] SetLastError (dwErrCode=0x0) [0084.356] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.356] GetLastError () returned 0x5 [0084.356] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0084.356] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.356] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sk\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a08d0 [0084.358] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.359] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.359] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.359] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sk\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0084.359] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sk\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\sk\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.360] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.360] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.360] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.360] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.360] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.360] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.360] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.360] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.360] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.360] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.360] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.360] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.360] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.360] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.360] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.360] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.360] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.360] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.360] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.360] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.360] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.360] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.360] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.360] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0084.360] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0084.361] SetLastError (dwErrCode=0x0) [0084.361] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sk\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\sk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.364] GetLastError () returned 0x5 [0084.364] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0084.364] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.364] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.364] SetLastError (dwErrCode=0x0) [0084.364] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.364] GetLastError () returned 0x5 [0084.364] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0084.364] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.364] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sl\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a08d0 [0084.366] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.367] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.367] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.367] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sl\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0084.368] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sl\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\sl\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.368] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.368] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.368] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.368] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.368] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.368] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.369] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.369] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.369] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.369] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.369] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.369] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.369] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.369] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.369] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.369] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.369] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.369] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.369] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.369] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.369] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.369] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.369] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.369] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0084.369] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0084.370] SetLastError (dwErrCode=0x0) [0084.370] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\sl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.372] GetLastError () returned 0x5 [0084.372] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0084.372] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.372] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.372] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.372] SetLastError (dwErrCode=0x0) [0084.372] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.373] GetLastError () returned 0x5 [0084.373] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0084.373] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.373] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-cyrl\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a08d0 [0084.375] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.376] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.376] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.376] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-cyrl\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0084.377] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-cyrl\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\sr-cyrl\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.377] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.377] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.377] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.377] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.377] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.377] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.377] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.377] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.377] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.377] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.377] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.377] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.377] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.377] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.378] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.378] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.378] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.378] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.378] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.378] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.378] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.378] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.378] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.378] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0084.378] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0084.379] SetLastError (dwErrCode=0x0) [0084.379] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-cyrl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\sr-cyrl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.381] GetLastError () returned 0x5 [0084.381] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0084.381] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.381] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.381] SetLastError (dwErrCode=0x0) [0084.381] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.382] GetLastError () returned 0x5 [0084.382] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0084.382] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.382] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-latn\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0d50 [0084.383] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.384] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.385] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.385] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-latn\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0084.385] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-latn\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\sr-latn\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.385] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.385] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.386] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.386] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.386] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.386] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.386] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.386] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.386] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.386] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.386] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.386] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.386] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.386] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.386] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.386] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.386] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.386] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.386] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.386] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.386] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.386] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.386] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.386] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0084.386] FindClose (in: hFindFile=0xd7079a0d50 | out: hFindFile=0xd7079a0d50) returned 1 [0084.387] SetLastError (dwErrCode=0x0) [0084.387] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-latn\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\sr-latn\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.391] GetLastError () returned 0x5 [0084.391] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0084.391] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.391] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.391] SetLastError (dwErrCode=0x0) [0084.391] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.391] GetLastError () returned 0x5 [0084.391] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0084.391] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.391] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-Latn-CS\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0d50 [0084.392] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.392] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0084.392] FindClose (in: hFindFile=0xd7079a0d50 | out: hFindFile=0xd7079a0d50) returned 1 [0084.392] SetLastError (dwErrCode=0x0) [0084.392] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-Latn-CS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\sr-latn-cs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.392] GetLastError () returned 0x5 [0084.392] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0084.392] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.392] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.392] SetLastError (dwErrCode=0x0) [0084.392] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.392] GetLastError () returned 0x5 [0084.392] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0084.393] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.393] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sv\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0bd0 [0084.395] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.397] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.397] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.397] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sv\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0084.398] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sv\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\sv\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.398] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.398] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.398] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.398] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.398] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.398] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.398] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.398] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.398] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.398] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.398] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.398] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.398] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.398] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.398] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.398] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.398] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.399] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.399] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.399] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.399] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.399] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.399] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.399] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0084.399] FindClose (in: hFindFile=0xd7079a0bd0 | out: hFindFile=0xd7079a0bd0) returned 1 [0084.400] SetLastError (dwErrCode=0x0) [0084.400] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sv\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\sv\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.403] GetLastError () returned 0x5 [0084.403] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0084.403] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.403] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.403] SetLastError (dwErrCode=0x0) [0084.403] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.403] GetLastError () returned 0x5 [0084.403] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0084.403] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.403] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\th\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0450 [0084.405] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.406] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.406] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.407] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\th\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0084.407] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\th\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\th\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.407] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.407] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.408] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.408] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.408] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.408] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.408] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.408] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.408] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.408] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.408] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.408] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.408] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.408] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.408] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.408] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.408] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.408] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.408] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.408] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.408] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.408] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.408] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.408] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0084.408] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0084.409] SetLastError (dwErrCode=0x0) [0084.409] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\th\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\th\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.412] GetLastError () returned 0x5 [0084.412] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0084.412] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.412] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.412] SetLastError (dwErrCode=0x0) [0084.412] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.412] GetLastError () returned 0x5 [0084.412] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0084.412] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.412] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tr\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a08d0 [0084.414] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.415] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.415] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.415] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tr\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0084.416] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tr\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\tr\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.416] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.416] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.416] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.416] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.416] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.416] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.416] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.416] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.416] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.416] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.416] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.416] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.416] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.416] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.416] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.416] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.416] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.416] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.416] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.417] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.417] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.417] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.417] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.417] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0084.417] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0084.417] SetLastError (dwErrCode=0x0) [0084.417] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\tr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.421] GetLastError () returned 0x5 [0084.421] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0084.421] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.421] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.421] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.421] SetLastError (dwErrCode=0x0) [0084.421] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.421] GetLastError () returned 0x5 [0084.421] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0084.421] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.421] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\uk\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0d50 [0084.423] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.426] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.426] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.426] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\uk\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0084.427] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\uk\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\uk\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.427] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.427] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.427] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.427] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.427] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.427] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.427] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.427] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.427] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.427] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.427] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.427] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.427] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.427] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.427] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.427] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.427] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.427] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.427] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.427] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.427] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.428] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.428] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.428] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0084.428] FindClose (in: hFindFile=0xd7079a0d50 | out: hFindFile=0xd7079a0d50) returned 1 [0084.428] SetLastError (dwErrCode=0x0) [0084.428] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\uk\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\uk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.431] GetLastError () returned 0x5 [0084.431] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0084.431] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.431] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.431] SetLastError (dwErrCode=0x0) [0084.432] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.432] GetLastError () returned 0x5 [0084.432] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0084.432] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.432] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\vi\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0bd0 [0084.434] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.435] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.435] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.435] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\vi\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0084.435] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\vi\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\vi\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.436] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.436] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.436] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.436] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.436] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.436] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.436] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.436] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.436] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.436] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.436] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.436] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.436] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.436] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.436] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.436] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.436] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.436] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.436] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.436] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.436] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.436] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.436] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.436] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0084.436] FindClose (in: hFindFile=0xd7079a0bd0 | out: hFindFile=0xd7079a0bd0) returned 1 [0084.437] SetLastError (dwErrCode=0x0) [0084.437] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\vi\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\vi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.440] GetLastError () returned 0x5 [0084.440] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0084.440] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.440] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.440] SetLastError (dwErrCode=0x0) [0084.440] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.441] GetLastError () returned 0x5 [0084.441] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0084.441] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.441] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHS\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0450 [0084.442] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.443] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.443] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.443] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHS\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0084.444] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHS\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\zh-chs\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.444] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.444] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.444] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.444] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.444] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.444] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.444] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.444] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.444] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.444] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.444] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.444] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.444] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.444] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.444] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.444] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.444] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.444] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.444] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.444] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.445] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.445] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.445] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.445] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0084.445] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0084.445] SetLastError (dwErrCode=0x0) [0084.445] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\zh-chs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.448] GetLastError () returned 0x5 [0084.448] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0084.448] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.448] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.448] SetLastError (dwErrCode=0x0) [0084.448] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.448] GetLastError () returned 0x5 [0084.448] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0084.448] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.448] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHT\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a08d0 [0084.450] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.453] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.453] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.453] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHT\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0084.454] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHT\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\zh-cht\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.454] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.454] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.455] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.455] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.455] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.455] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.455] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.455] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.455] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.455] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.455] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.455] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.455] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.455] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.455] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.455] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.455] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.455] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.455] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.455] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.455] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.455] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.455] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.455] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0084.455] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0084.456] SetLastError (dwErrCode=0x0) [0084.456] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHT\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\zh-cht\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.459] GetLastError () returned 0x5 [0084.459] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0084.459] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.459] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0084.459] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0084.459] SetLastError (dwErrCode=0x0) [0084.459] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.459] GetLastError () returned 0x5 [0084.460] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0084.460] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.460] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.460] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0084.460] FindClose (in: hFindFile=0xd7079a0e70 | out: hFindFile=0xd7079a0e70) returned 1 [0084.460] SetLastError (dwErrCode=0x0) [0084.460] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.460] GetLastError () returned 0x5 [0084.460] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0084.460] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.460] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.460] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.460] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.460] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.460] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.460] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.460] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.460] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.460] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.460] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.460] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.460] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.460] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.461] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.461] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.461] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.461] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.461] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.461] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.461] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.463] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.463] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.463] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.463] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.463] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.463] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.463] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.463] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.463] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.463] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.463] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.463] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.463] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.463] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.463] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.463] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.463] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.463] SetLastError (dwErrCode=0x0) [0084.463] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.464] GetLastError () returned 0x5 [0084.464] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0084.464] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.464] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AugLoop\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0450 [0084.465] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.465] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.465] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.465] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AugLoop\\bundle.js", dwFileAttributes=0x80) returned 0 [0084.466] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AugLoop\\bundle.js" (normalized: "c:\\program files\\microsoft office\\root\\office16\\augloop\\bundle.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.467] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.467] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.467] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.467] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AugLoop\\third-party-notices.txt", dwFileAttributes=0x80) returned 0 [0084.470] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AugLoop\\third-party-notices.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\augloop\\third-party-notices.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.470] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.470] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.471] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0084.471] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0084.471] SetLastError (dwErrCode=0x0) [0084.471] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AugLoop\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\augloop\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.471] GetLastError () returned 0x5 [0084.471] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0084.471] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.471] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.471] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.471] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.471] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\bdcmetadata.xsd", dwFileAttributes=0x80) returned 0 [0084.472] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\bdcmetadata.xsd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bdcmetadata.xsd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.472] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.472] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.472] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.472] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.473] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\bdcmetadataresource.xsd", dwFileAttributes=0x80) returned 0 [0084.473] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\bdcmetadataresource.xsd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bdcmetadataresource.xsd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.473] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.473] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.473] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.473] SetLastError (dwErrCode=0x0) [0084.474] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.474] GetLastError () returned 0x5 [0084.474] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0084.474] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.474] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0810 [0084.476] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.476] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.476] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.476] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Author2String.XSL", dwFileAttributes=0x80) returned 0 [0084.477] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Author2String.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\author2string.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.477] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.477] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.478] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.478] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.478] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Author2XML.XSL", dwFileAttributes=0x80) returned 0 [0084.478] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Author2XML.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\author2xml.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.479] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.479] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.479] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.479] SetLastError (dwErrCode=0x0) [0084.479] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.479] GetLastError () returned 0x5 [0084.479] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0084.479] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.479] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Sort\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0e70 [0084.479] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.479] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.479] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.480] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Sort\\AUTHOR.XSL", dwFileAttributes=0x80) returned 0 [0084.480] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Sort\\AUTHOR.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\sort\\author.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.480] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.480] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.480] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.480] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Sort\\TAG.XSL", dwFileAttributes=0x80) returned 0 [0084.481] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Sort\\TAG.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\sort\\tag.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.481] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.481] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.481] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.481] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Sort\\TITLE.XSL", dwFileAttributes=0x80) returned 0 [0084.482] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Sort\\TITLE.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\sort\\title.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.482] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.482] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.482] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.482] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.483] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Sort\\YEAR.XSL", dwFileAttributes=0x80) returned 0 [0084.483] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Sort\\YEAR.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\sort\\year.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.483] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.483] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.483] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0084.483] FindClose (in: hFindFile=0xd7079a0e70 | out: hFindFile=0xd7079a0e70) returned 1 [0084.484] SetLastError (dwErrCode=0x0) [0084.484] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Sort\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\sort\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.484] GetLastError () returned 0x5 [0084.484] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0084.484] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.484] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.484] SetLastError (dwErrCode=0x0) [0084.484] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.484] GetLastError () returned 0x5 [0084.484] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0084.484] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.484] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0d50 [0084.485] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.485] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.485] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.486] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl", dwFileAttributes=0x80) returned 0 [0084.486] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\style\\apasixtheditionofficeonline.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.486] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.486] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.486] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.487] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.487] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\CHICAGO.XSL", dwFileAttributes=0x80) returned 0 [0084.487] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\CHICAGO.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\style\\chicago.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.487] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.487] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.487] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.487] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.488] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\GB.XSL", dwFileAttributes=0x80) returned 0 [0084.488] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\GB.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\style\\gb.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.488] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.488] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.488] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.488] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.489] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\GostName.XSL", dwFileAttributes=0x80) returned 0 [0084.489] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\GostName.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\style\\gostname.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.489] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.489] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.489] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.489] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\GostTitle.XSL", dwFileAttributes=0x80) returned 0 [0084.490] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\GostTitle.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\style\\gosttitle.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.490] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.490] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.490] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.490] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl", dwFileAttributes=0x80) returned 0 [0084.491] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\style\\harvardanglia2008officeonline.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.491] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.491] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.491] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.491] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.491] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl", dwFileAttributes=0x80) returned 0 [0084.492] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\style\\ieee2006officeonline.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.492] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.492] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.492] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.492] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.492] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\ISO690.XSL", dwFileAttributes=0x80) returned 0 [0084.493] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\ISO690.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\style\\iso690.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.493] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.493] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.493] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.493] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.494] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\ISO690Nmerical.XSL", dwFileAttributes=0x80) returned 0 [0084.494] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\ISO690Nmerical.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\style\\iso690nmerical.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.494] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.494] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.494] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.494] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.495] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl", dwFileAttributes=0x80) returned 0 [0084.495] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\style\\mlaseventheditionofficeonline.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.495] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.495] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.495] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.495] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.496] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\SIST02.XSL", dwFileAttributes=0x80) returned 0 [0084.496] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\SIST02.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\style\\sist02.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.496] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.496] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.496] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.496] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.496] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\TURABIAN.XSL", dwFileAttributes=0x80) returned 0 [0084.497] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\TURABIAN.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\style\\turabian.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.497] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.497] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.498] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0084.498] FindClose (in: hFindFile=0xd7079a0d50 | out: hFindFile=0xd7079a0d50) returned 1 [0084.498] SetLastError (dwErrCode=0x0) [0084.499] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\style\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.501] GetLastError () returned 0x5 [0084.501] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0084.501] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.501] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0084.501] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0084.501] SetLastError (dwErrCode=0x0) [0084.501] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.502] GetLastError () returned 0x5 [0084.502] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0084.502] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.502] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.502] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.502] SetLastError (dwErrCode=0x0) [0084.502] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.502] GetLastError () returned 0x5 [0084.502] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0084.502] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.502] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0450 [0084.504] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.504] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.504] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART1.BDR", dwFileAttributes=0x80) returned 0 [0084.505] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART1.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\borders\\msart1.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.505] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.505] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.505] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.505] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART10.BDR", dwFileAttributes=0x80) returned 0 [0084.506] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART10.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\borders\\msart10.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.506] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.506] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.506] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.506] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART11.BDR", dwFileAttributes=0x80) returned 0 [0084.507] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART11.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\borders\\msart11.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.507] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.507] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.507] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.507] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.508] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART12.BDR", dwFileAttributes=0x80) returned 0 [0084.508] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART12.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\borders\\msart12.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.508] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.508] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.508] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.508] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.508] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART13.BDR", dwFileAttributes=0x80) returned 0 [0084.509] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART13.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\borders\\msart13.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.509] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.509] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.509] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.509] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART14.BDR", dwFileAttributes=0x80) returned 0 [0084.510] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART14.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\borders\\msart14.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.510] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.510] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.510] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.510] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.511] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART15.BDR", dwFileAttributes=0x80) returned 0 [0084.511] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART15.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\borders\\msart15.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.511] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.511] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.511] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.511] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.511] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART2.BDR", dwFileAttributes=0x80) returned 0 [0084.512] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART2.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\borders\\msart2.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.512] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.512] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.512] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.512] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART3.BDR", dwFileAttributes=0x80) returned 0 [0084.513] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART3.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\borders\\msart3.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.513] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.513] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.513] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.513] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.515] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART4.BDR", dwFileAttributes=0x80) returned 0 [0084.515] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART4.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\borders\\msart4.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.515] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.515] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.516] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.516] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.516] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART5.BDR", dwFileAttributes=0x80) returned 0 [0084.517] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART5.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\borders\\msart5.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.518] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.518] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.518] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.518] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.518] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART6.BDR", dwFileAttributes=0x80) returned 0 [0084.518] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART6.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\borders\\msart6.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.518] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.518] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.519] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.519] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.519] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART7.BDR", dwFileAttributes=0x80) returned 0 [0084.519] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART7.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\borders\\msart7.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.519] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.519] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.520] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.520] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART8.BDR", dwFileAttributes=0x80) returned 0 [0084.520] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART8.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\borders\\msart8.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.520] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.520] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.521] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.521] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART9.BDR", dwFileAttributes=0x80) returned 0 [0084.521] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART9.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\borders\\msart9.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.521] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.521] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.521] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0084.521] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0084.522] SetLastError (dwErrCode=0x0) [0084.522] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\borders\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.525] GetLastError () returned 0x5 [0084.525] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0084.525] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.525] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.525] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.525] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.525] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.525] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.525] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.525] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.526] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.526] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.526] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.526] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.526] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CommunicatorContentBinApp.xap", dwFileAttributes=0x80) returned 0 [0084.527] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CommunicatorContentBinApp.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\communicatorcontentbinapp.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.527] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.527] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.527] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.527] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.527] SetLastError (dwErrCode=0x0) [0084.527] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.528] GetLastError () returned 0x5 [0084.528] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0084.528] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.528] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Configuration\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0bd0 [0084.529] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.529] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.529] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Configuration\\card_expiration_terms_dict.txt", dwFileAttributes=0x80) returned 0 [0084.530] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Configuration\\card_expiration_terms_dict.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\configuration\\card_expiration_terms_dict.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.530] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.530] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.531] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.531] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Configuration\\card_security_terms_dict.txt", dwFileAttributes=0x80) returned 0 [0084.531] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Configuration\\card_security_terms_dict.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\configuration\\card_security_terms_dict.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.531] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.531] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.532] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.532] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.532] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Configuration\\card_terms_dict.txt", dwFileAttributes=0x80) returned 0 [0084.532] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Configuration\\card_terms_dict.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\configuration\\card_terms_dict.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.532] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.532] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.533] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.533] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Configuration\\config.xml", dwFileAttributes=0x80) returned 0 [0084.533] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Configuration\\config.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\configuration\\config.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.533] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.533] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.533] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.533] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.534] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Configuration\\ssn_high_group_info.txt", dwFileAttributes=0x80) returned 0 [0084.534] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Configuration\\ssn_high_group_info.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\configuration\\ssn_high_group_info.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.534] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.534] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.534] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0084.534] FindClose (in: hFindFile=0xd7079a0bd0 | out: hFindFile=0xd7079a0bd0) returned 1 [0084.535] SetLastError (dwErrCode=0x0) [0084.535] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Configuration\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\configuration\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.538] GetLastError () returned 0x5 [0084.538] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0084.538] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.538] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.538] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.538] SetLastError (dwErrCode=0x0) [0084.538] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.538] GetLastError () returned 0x5 [0084.538] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0084.538] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.538] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0d50 [0084.540] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.540] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.540] SetLastError (dwErrCode=0x0) [0084.540] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.540] GetLastError () returned 0x5 [0084.540] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0084.540] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.540] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0450 [0084.542] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.542] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.542] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.542] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\DELIMR.FAE", dwFileAttributes=0x80) returned 0 [0084.543] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\DELIMR.FAE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\1033\\delimr.fae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.543] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.543] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.543] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.543] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.543] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.544] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\OLADDR.FAE", dwFileAttributes=0x80) returned 0 [0084.544] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\OLADDR.FAE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\1033\\oladdr.fae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.545] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.545] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.545] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.545] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\OLAPPTR.FAE", dwFileAttributes=0x80) returned 0 [0084.545] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\OLAPPTR.FAE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\1033\\olapptr.fae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.546] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.546] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.546] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.546] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.546] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\OLJRNLR.FAE", dwFileAttributes=0x80) returned 0 [0084.546] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\OLJRNLR.FAE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\1033\\oljrnlr.fae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.546] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.547] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.547] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.547] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\OLMAILR.FAE", dwFileAttributes=0x80) returned 0 [0084.547] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\OLMAILR.FAE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\1033\\olmailr.fae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.547] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.547] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.548] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.548] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\OLNOTER.FAE", dwFileAttributes=0x80) returned 0 [0084.548] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\OLNOTER.FAE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\1033\\olnoter.fae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.549] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.549] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.549] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.549] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\OLR.SAM", dwFileAttributes=0x80) returned 0 [0084.550] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\OLR.SAM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\1033\\olr.sam"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.551] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.552] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.552] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.552] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\OLTASKR.FAE", dwFileAttributes=0x80) returned 0 [0084.553] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\OLTASKR.FAE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\1033\\oltaskr.fae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.553] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.553] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.553] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.553] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0084.553] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0084.554] SetLastError (dwErrCode=0x0) [0084.554] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.556] GetLastError () returned 0x5 [0084.556] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0084.556] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.557] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.557] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\DELIMWIN.FAE", dwFileAttributes=0x80) returned 0 [0084.558] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\DELIMWIN.FAE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\delimwin.fae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.558] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.558] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.558] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.558] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.558] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\DESKSAM.SAM", dwFileAttributes=0x80) returned 0 [0084.559] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\DESKSAM.SAM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\desksam.sam"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.559] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.559] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.559] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.560] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.560] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\OL.SAM", dwFileAttributes=0x80) returned 0 [0084.560] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\OL.SAM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\ol.sam"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.560] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.560] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.561] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.561] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\OLADD.FAE", dwFileAttributes=0x80) returned 0 [0084.561] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\OLADD.FAE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\oladd.fae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.562] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.562] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.562] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.562] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.562] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\OLAPPT.FAE", dwFileAttributes=0x80) returned 0 [0084.562] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\OLAPPT.FAE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\olappt.fae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.562] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.563] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.563] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.563] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\OLJRNL.FAE", dwFileAttributes=0x80) returned 0 [0084.564] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\OLJRNL.FAE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\oljrnl.fae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.564] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.564] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.564] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.564] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.564] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\OLMAIL.FAE", dwFileAttributes=0x80) returned 0 [0084.565] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\OLMAIL.FAE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\olmail.fae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.565] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.565] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.565] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.565] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.565] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\OLNOTE.FAE", dwFileAttributes=0x80) returned 0 [0084.565] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\OLNOTE.FAE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\olnote.fae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.566] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.566] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.566] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.566] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.566] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\OLTASK.FAE", dwFileAttributes=0x80) returned 0 [0084.566] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\OLTASK.FAE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\oltask.fae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.566] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.566] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.567] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.567] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.567] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0084.567] FindClose (in: hFindFile=0xd7079a0d50 | out: hFindFile=0xd7079a0d50) returned 1 [0084.567] SetLastError (dwErrCode=0x0) [0084.567] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.567] GetLastError () returned 0x5 [0084.567] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0084.567] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.567] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.567] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.567] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.567] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.567] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.567] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.567] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.567] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.567] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.568] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Custom.propdesc", dwFileAttributes=0x80) returned 0 [0084.568] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Custom.propdesc" (normalized: "c:\\program files\\microsoft office\\root\\office16\\custom.propdesc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.568] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.568] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.568] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.568] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.568] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.569] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.569] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.569] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.569] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.569] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.569] SetLastError (dwErrCode=0x0) [0084.569] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.569] GetLastError () returned 0x5 [0084.569] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0084.569] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.569] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0d50 [0084.570] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.570] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.570] SetLastError (dwErrCode=0x0) [0084.570] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\document parts\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.570] GetLastError () returned 0x5 [0084.570] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0084.570] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.570] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\1033\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0e70 [0084.570] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.570] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.570] SetLastError (dwErrCode=0x0) [0084.570] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\document parts\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.570] GetLastError () returned 0x5 [0084.570] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0084.570] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.570] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\1033\\16\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a08d0 [0084.571] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.571] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.571] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\1033\\16\\Built-In Building Blocks.dotx", dwFileAttributes=0x80) returned 0 [0084.571] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\1033\\16\\Built-In Building Blocks.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\document parts\\1033\\16\\built-in building blocks.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.571] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.571] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.571] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0084.572] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0084.572] SetLastError (dwErrCode=0x0) [0084.572] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\1033\\16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\document parts\\1033\\16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.572] GetLastError () returned 0x5 [0084.572] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0084.572] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.572] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0084.572] FindClose (in: hFindFile=0xd7079a0e70 | out: hFindFile=0xd7079a0e70) returned 1 [0084.572] SetLastError (dwErrCode=0x0) [0084.572] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\document parts\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.572] GetLastError () returned 0x5 [0084.572] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0084.572] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.572] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0084.572] FindClose (in: hFindFile=0xd7079a0d50 | out: hFindFile=0xd7079a0d50) returned 1 [0084.572] SetLastError (dwErrCode=0x0) [0084.572] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\document parts\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.573] GetLastError () returned 0x5 [0084.573] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0084.573] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.573] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.573] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.573] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.573] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.573] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.573] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.573] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.573] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ELECTRICAL.VSL", dwFileAttributes=0x80) returned 0 [0084.577] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ELECTRICAL.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\electrical.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.577] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.577] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.578] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.578] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.580] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.580] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.580] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.580] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.580] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.580] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.580] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ERXIMP.ADD", dwFileAttributes=0x80) returned 0 [0084.581] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ERXIMP.ADD" (normalized: "c:\\program files\\microsoft office\\root\\office16\\erximp.add"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.581] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.581] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.581] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.581] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.581] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.581] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.581] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\EXCEL.VisualElementsManifest.xml", dwFileAttributes=0x80) returned 0 [0084.582] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\EXCEL.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\excel.visualelementsmanifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.582] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.582] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.582] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.582] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.582] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.582] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.582] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.582] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ExcelCtxUICellModel.bin", dwFileAttributes=0x80) returned 0 [0084.583] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ExcelCtxUICellModel.bin" (normalized: "c:\\program files\\microsoft office\\root\\office16\\excelctxuicellmodel.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.583] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.583] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.584] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.584] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.584] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ExtensibleApp.xap", dwFileAttributes=0x80) returned 0 [0084.584] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ExtensibleApp.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\extensibleapp.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.584] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.584] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.585] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.585] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.585] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.585] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.585] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.585] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\flat_officeFontsPreview.ttf", dwFileAttributes=0x80) returned 0 [0084.585] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\flat_officeFontsPreview.ttf" (normalized: "c:\\program files\\microsoft office\\root\\office16\\flat_officefontspreview.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.585] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.585] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.586] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.586] SetLastError (dwErrCode=0x0) [0084.586] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.586] GetLastError () returned 0x5 [0084.586] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0084.586] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.586] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0e70 [0084.587] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.587] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.587] SetLastError (dwErrCode=0x0) [0084.587] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.587] GetLastError () returned 0x5 [0084.587] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0084.587] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.587] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0d50 [0084.588] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.589] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.589] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\ACTIVITL.ICO", dwFileAttributes=0x80) returned 0 [0084.589] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\ACTIVITL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\activitl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.590] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.590] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.590] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.590] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\ACTIVITS.ICO", dwFileAttributes=0x80) returned 0 [0084.590] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\ACTIVITS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\activits.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.591] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.591] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.591] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.591] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.591] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\ACTIVITY.CFG", dwFileAttributes=0x80) returned 0 [0084.591] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\ACTIVITY.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\activity.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.592] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.592] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.592] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.592] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\APPT.CFG", dwFileAttributes=0x80) returned 0 [0084.592] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\APPT.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\appt.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.593] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.593] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.593] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.593] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\APPTL.ICO", dwFileAttributes=0x80) returned 0 [0084.593] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\APPTL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\apptl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.593] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.594] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.594] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.594] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.594] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\APPTS.ICO", dwFileAttributes=0x80) returned 0 [0084.594] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\APPTS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\appts.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.594] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.594] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.595] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.595] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.595] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\CNFNOT.CFG", dwFileAttributes=0x80) returned 0 [0084.596] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\CNFNOT.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\cnfnot.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.596] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.596] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.596] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.596] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\CNFNOT.ICO", dwFileAttributes=0x80) returned 0 [0084.597] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\CNFNOT.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\cnfnot.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.597] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.597] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.597] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.597] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.598] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\CNFRES.CFG", dwFileAttributes=0x80) returned 0 [0084.598] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\CNFRES.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\cnfres.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.598] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.598] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.598] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.598] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.598] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\CONFLICT.ICO", dwFileAttributes=0x80) returned 0 [0084.599] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\CONFLICT.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\conflict.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.599] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.599] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.599] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.599] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.599] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\CONTACT.CFG", dwFileAttributes=0x80) returned 0 [0084.600] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\CONTACT.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\contact.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.600] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.600] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.600] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.600] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.601] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\CONTACTL.ICO", dwFileAttributes=0x80) returned 0 [0084.601] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\CONTACTL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\contactl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.601] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.602] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.602] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.602] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.602] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\CONTACTS.ICO", dwFileAttributes=0x80) returned 0 [0084.602] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\CONTACTS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\contacts.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.602] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.602] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.603] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.603] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.603] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\DISTLIST.CFG", dwFileAttributes=0x80) returned 0 [0084.603] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\DISTLIST.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\distlist.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.603] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.603] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.603] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.603] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.604] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\DISTLSTL.ICO", dwFileAttributes=0x80) returned 0 [0084.604] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\DISTLSTL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\distlstl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.604] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.604] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.604] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.604] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.605] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\DISTLSTS.ICO", dwFileAttributes=0x80) returned 0 [0084.605] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\DISTLSTS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\distlsts.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.605] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.605] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.605] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.605] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.605] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\DOC.CFG", dwFileAttributes=0x80) returned 0 [0084.606] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\DOC.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\doc.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.606] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.606] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.606] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.606] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\DOCL.ICO", dwFileAttributes=0x80) returned 0 [0084.607] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\DOCL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\docl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.607] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.607] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.608] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.608] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.608] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\DOCS.ICO", dwFileAttributes=0x80) returned 0 [0084.608] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\DOCS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\docs.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.608] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.608] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.608] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.608] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\EXITEM.CFG", dwFileAttributes=0x80) returned 0 [0084.611] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\EXITEM.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\exitem.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.612] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.612] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.612] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.612] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\EXITEML.ICO", dwFileAttributes=0x80) returned 0 [0084.613] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\EXITEML.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\exiteml.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.613] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.613] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.613] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.613] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.614] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\EXITEMS.ICO", dwFileAttributes=0x80) returned 0 [0084.614] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\EXITEMS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\exitems.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.614] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.614] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.614] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.614] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.615] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\INFOMAIL.CFG", dwFileAttributes=0x80) returned 0 [0084.615] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\INFOMAIL.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\infomail.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.615] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.615] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.615] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.615] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.615] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\INFOML.ICO", dwFileAttributes=0x80) returned 0 [0084.616] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\INFOML.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\infoml.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.616] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.616] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.616] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.616] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\INFOMS.ICO", dwFileAttributes=0x80) returned 0 [0084.616] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\INFOMS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\infoms.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.617] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.617] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.617] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.617] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.617] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\IPM.CFG", dwFileAttributes=0x80) returned 0 [0084.617] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\IPM.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\ipm.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.617] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.617] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.618] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.618] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.618] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\IPML.ICO", dwFileAttributes=0x80) returned 0 [0084.618] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\IPML.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\ipml.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.618] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.618] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.619] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.619] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\IPMS.ICO", dwFileAttributes=0x80) returned 0 [0084.619] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\IPMS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\ipms.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.619] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.619] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.619] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.619] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\MMSL.ICO", dwFileAttributes=0x80) returned 0 [0084.620] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\MMSL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\mmsl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.621] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.621] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.621] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.621] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.621] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\MMSS.ICO", dwFileAttributes=0x80) returned 0 [0084.621] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\MMSS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\mmss.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.621] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.621] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.622] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.622] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\NOTE.CFG", dwFileAttributes=0x80) returned 0 [0084.622] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\NOTE.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\note.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.622] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.622] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.623] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.623] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.623] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\NOTEL.ICO", dwFileAttributes=0x80) returned 0 [0084.624] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\NOTEL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\notel.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.624] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.624] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.624] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.624] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\NOTES.ICO", dwFileAttributes=0x80) returned 0 [0084.625] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\NOTES.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\notes.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.625] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.625] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.625] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.625] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\OMSMMS.CFG", dwFileAttributes=0x80) returned 0 [0084.626] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\OMSMMS.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\omsmms.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.626] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.626] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.626] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.627] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\OMSSMS.CFG", dwFileAttributes=0x80) returned 0 [0084.627] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\OMSSMS.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\omssms.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.628] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.628] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.628] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.628] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\OOFL.ICO", dwFileAttributes=0x80) returned 0 [0084.628] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\OOFL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\oofl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.629] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.629] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.629] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.629] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\OOFS.ICO", dwFileAttributes=0x80) returned 0 [0084.629] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\OOFS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\oofs.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.629] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.630] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.630] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.630] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.630] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\OOFTMPL.CFG", dwFileAttributes=0x80) returned 0 [0084.630] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\OOFTMPL.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\ooftmpl.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.630] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.630] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.631] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.631] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.631] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\POST.CFG", dwFileAttributes=0x80) returned 0 [0084.631] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\POST.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\post.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.632] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.632] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.632] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.632] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\POSTIT.CFG", dwFileAttributes=0x80) returned 0 [0084.633] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\POSTIT.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\postit.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.633] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.633] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.633] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.633] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.634] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\POSTITL.ICO", dwFileAttributes=0x80) returned 0 [0084.634] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\POSTITL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\postitl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.634] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.634] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.634] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.634] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.634] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\POSTITS.ICO", dwFileAttributes=0x80) returned 0 [0084.635] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\POSTITS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\postits.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.635] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.635] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.635] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.635] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\POSTL.ICO", dwFileAttributes=0x80) returned 0 [0084.635] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\POSTL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\postl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.636] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.636] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.636] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.636] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\POSTS.ICO", dwFileAttributes=0x80) returned 0 [0084.637] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\POSTS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\posts.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.637] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.637] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.637] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.637] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.638] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RCLRPT.CFG", dwFileAttributes=0x80) returned 0 [0084.638] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RCLRPT.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\rclrpt.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.638] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.638] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.639] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.639] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REC.CFG", dwFileAttributes=0x80) returned 0 [0084.639] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REC.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\rec.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.640] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.640] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.640] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.640] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.640] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RECL.ICO", dwFileAttributes=0x80) returned 0 [0084.640] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RECL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\recl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.640] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.641] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.641] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.641] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.641] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RECS.ICO", dwFileAttributes=0x80) returned 0 [0084.641] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RECS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\recs.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.641] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.641] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.642] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.642] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REMOTE.CFG", dwFileAttributes=0x80) returned 0 [0084.643] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REMOTE.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\remote.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.644] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.644] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.644] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.644] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.644] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REMOTEL.ICO", dwFileAttributes=0x80) returned 0 [0084.645] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REMOTEL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\remotel.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.645] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.645] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.645] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.645] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.645] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REMOTES.ICO", dwFileAttributes=0x80) returned 0 [0084.646] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REMOTES.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\remotes.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.646] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.646] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.646] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.646] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REPLTMPL.CFG", dwFileAttributes=0x80) returned 0 [0084.647] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REPLTMPL.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\repltmpl.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.648] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.648] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.648] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.648] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.648] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REPORT.CFG", dwFileAttributes=0x80) returned 0 [0084.649] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REPORT.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\report.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.649] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.649] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.649] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.649] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.650] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REPORTL.ICO", dwFileAttributes=0x80) returned 0 [0084.650] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REPORTL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\reportl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.650] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.650] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.650] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.650] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REPORTS.ICO", dwFileAttributes=0x80) returned 0 [0084.651] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REPORTS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\reports.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.651] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.651] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.652] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.652] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.652] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RESEND.CFG", dwFileAttributes=0x80) returned 0 [0084.652] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RESEND.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\resend.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.652] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.652] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.653] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.653] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.653] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RESENDL.ICO", dwFileAttributes=0x80) returned 0 [0084.653] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RESENDL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\resendl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.654] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.654] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.654] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.654] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RESENDS.ICO", dwFileAttributes=0x80) returned 0 [0084.655] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RESENDS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\resends.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.655] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.655] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.655] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.656] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RSSITEM.CFG", dwFileAttributes=0x80) returned 0 [0084.657] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RSSITEM.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\rssitem.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.657] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.657] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.657] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.657] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RSSITEML.ICO", dwFileAttributes=0x80) returned 0 [0084.660] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RSSITEML.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\rssiteml.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.661] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.661] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.661] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.661] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RSSITEMS.ICO", dwFileAttributes=0x80) returned 0 [0084.662] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RSSITEMS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\rssitems.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.662] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.662] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.662] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.662] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.663] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDCNCLL.ICO", dwFileAttributes=0x80) returned 0 [0084.663] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDCNCLL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\scdcncll.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.663] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.663] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.663] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.663] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDCNCLS.ICO", dwFileAttributes=0x80) returned 0 [0084.664] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDCNCLS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\scdcncls.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.664] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.664] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.665] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.665] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.665] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDREQL.ICO", dwFileAttributes=0x80) returned 0 [0084.666] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDREQL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\scdreql.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.666] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.666] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.666] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.666] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDREQS.ICO", dwFileAttributes=0x80) returned 0 [0084.667] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDREQS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\scdreqs.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.667] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.667] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.667] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.667] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDRESNL.ICO", dwFileAttributes=0x80) returned 0 [0084.668] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDRESNL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\scdresnl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.668] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.668] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.668] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.668] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDRESNS.ICO", dwFileAttributes=0x80) returned 0 [0084.669] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDRESNS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\scdresns.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.669] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.669] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.669] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.669] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.669] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDRESPL.ICO", dwFileAttributes=0x80) returned 0 [0084.670] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDRESPL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\scdrespl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.670] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.670] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.670] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.671] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.671] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDRESPS.ICO", dwFileAttributes=0x80) returned 0 [0084.671] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDRESPS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\scdresps.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.672] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.672] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.672] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.672] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.672] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDRESTL.ICO", dwFileAttributes=0x80) returned 0 [0084.672] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDRESTL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\scdrestl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.673] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.673] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.673] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.673] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDRESTS.ICO", dwFileAttributes=0x80) returned 0 [0084.673] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDRESTS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\scdrests.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.673] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.673] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.674] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.674] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.674] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCHDCNCL.CFG", dwFileAttributes=0x80) returned 0 [0084.675] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCHDCNCL.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\schdcncl.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.675] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.675] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.675] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.675] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCHDREQ.CFG", dwFileAttributes=0x80) returned 0 [0084.675] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCHDREQ.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\schdreq.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.676] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.676] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.676] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.676] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.676] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCHDRESN.CFG", dwFileAttributes=0x80) returned 0 [0084.676] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCHDRESN.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\schdresn.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.677] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.677] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.677] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.677] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCHDRESP.CFG", dwFileAttributes=0x80) returned 0 [0084.677] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCHDRESP.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\schdresp.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.677] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.677] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.678] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.678] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCHDREST.CFG", dwFileAttributes=0x80) returned 0 [0084.678] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCHDREST.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\schdrest.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.678] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.678] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.679] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.679] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SECREC.CFG", dwFileAttributes=0x80) returned 0 [0084.679] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SECREC.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\secrec.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.679] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.679] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.679] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.680] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.680] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SECRECL.ICO", dwFileAttributes=0x80) returned 0 [0084.680] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SECRECL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\secrecl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.680] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.680] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.680] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.680] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SECRECS.ICO", dwFileAttributes=0x80) returned 0 [0084.681] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SECRECS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\secrecs.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.682] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.682] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.682] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.682] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.682] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SECURE.CFG", dwFileAttributes=0x80) returned 0 [0084.683] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SECURE.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\secure.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.683] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.683] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.683] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.683] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.683] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SECURL.ICO", dwFileAttributes=0x80) returned 0 [0084.684] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SECURL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\securl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.684] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.684] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.684] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.684] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.684] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SECURS.ICO", dwFileAttributes=0x80) returned 0 [0084.684] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SECURS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\securs.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.685] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.685] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.685] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.685] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.686] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SHARING.CFG", dwFileAttributes=0x80) returned 0 [0084.686] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SHARING.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\sharing.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.686] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.686] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.686] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.686] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SIGN.CFG", dwFileAttributes=0x80) returned 0 [0084.687] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SIGN.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\sign.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.687] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.688] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.688] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.688] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.688] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SIGNL.ICO", dwFileAttributes=0x80) returned 0 [0084.688] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SIGNL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\signl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.688] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.688] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.689] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.689] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SIGNS.ICO", dwFileAttributes=0x80) returned 0 [0084.689] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SIGNS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\signs.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.689] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.689] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.690] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.690] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SMIMEE.CFG", dwFileAttributes=0x80) returned 0 [0084.690] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SMIMEE.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\smimee.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.690] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.690] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.690] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.690] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SMIMES.CFG", dwFileAttributes=0x80) returned 0 [0084.691] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SMIMES.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\smimes.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.691] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.691] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.691] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.691] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SMSL.ICO", dwFileAttributes=0x80) returned 0 [0084.692] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SMSL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\smsl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.692] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.693] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.693] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.693] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.693] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SMSS.ICO", dwFileAttributes=0x80) returned 0 [0084.694] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SMSS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\smss.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.694] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.694] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.694] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.694] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASK.CFG", dwFileAttributes=0x80) returned 0 [0084.694] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASK.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\task.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.695] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.695] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.695] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.695] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKACC.CFG", dwFileAttributes=0x80) returned 0 [0084.695] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKACC.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\taskacc.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.696] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.696] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.696] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.696] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.696] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKACCL.ICO", dwFileAttributes=0x80) returned 0 [0084.696] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKACCL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\taskaccl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.697] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.697] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.697] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.697] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKACCS.ICO", dwFileAttributes=0x80) returned 0 [0084.697] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKACCS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\taskaccs.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.697] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.697] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.698] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.698] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.698] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKDEC.CFG", dwFileAttributes=0x80) returned 0 [0084.698] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKDEC.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\taskdec.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.698] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.698] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.699] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.699] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKDECL.ICO", dwFileAttributes=0x80) returned 0 [0084.699] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKDECL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\taskdecl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.699] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.699] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.699] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.699] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKDECS.ICO", dwFileAttributes=0x80) returned 0 [0084.700] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKDECS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\taskdecs.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.700] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.700] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.700] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.700] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKL.ICO", dwFileAttributes=0x80) returned 0 [0084.701] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\taskl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.702] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.702] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.702] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.702] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKREQ.CFG", dwFileAttributes=0x80) returned 0 [0084.702] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKREQ.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\taskreq.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.703] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.703] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.703] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.703] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.703] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKREQL.ICO", dwFileAttributes=0x80) returned 0 [0084.706] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKREQL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\taskreql.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.706] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.706] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.707] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.707] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.707] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKREQS.ICO", dwFileAttributes=0x80) returned 0 [0084.707] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKREQS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\taskreqs.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.707] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.707] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.708] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.708] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.708] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKS.ICO", dwFileAttributes=0x80) returned 0 [0084.710] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\tasks.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.711] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.711] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.711] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.711] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKUPD.CFG", dwFileAttributes=0x80) returned 0 [0084.711] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKUPD.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\taskupd.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.712] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.712] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.712] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0084.712] FindClose (in: hFindFile=0xd7079a0d50 | out: hFindFile=0xd7079a0d50) returned 1 [0084.713] SetLastError (dwErrCode=0x0) [0084.713] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.715] GetLastError () returned 0x5 [0084.715] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0084.715] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.715] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0084.715] FindClose (in: hFindFile=0xd7079a0e70 | out: hFindFile=0xd7079a0e70) returned 1 [0084.715] SetLastError (dwErrCode=0x0) [0084.715] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.716] GetLastError () returned 0x5 [0084.716] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0084.716] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.716] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.716] SetLastError (dwErrCode=0x0) [0084.716] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.718] GetLastError () returned 0x5 [0084.718] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0084.718] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.718] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f14\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0450 [0084.718] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.718] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.718] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f14\\FA000000014", dwFileAttributes=0x80) returned 0 [0084.719] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f14\\FA000000014" (normalized: "c:\\program files\\microsoft office\\root\\office16\\fpa_f14\\fa000000014"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.720] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.720] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.720] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0084.720] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0084.720] SetLastError (dwErrCode=0x0) [0084.720] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f14\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\fpa_f14\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.720] GetLastError () returned 0x5 [0084.720] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0084.720] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.720] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.720] SetLastError (dwErrCode=0x0) [0084.720] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.721] GetLastError () returned 0x5 [0084.721] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0084.721] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.721] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f2\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0450 [0084.721] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.721] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.721] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f2\\FA000000002", dwFileAttributes=0x80) returned 0 [0084.722] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f2\\FA000000002" (normalized: "c:\\program files\\microsoft office\\root\\office16\\fpa_f2\\fa000000002"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.722] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.722] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.722] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0084.722] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0084.722] SetLastError (dwErrCode=0x0) [0084.722] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f2\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\fpa_f2\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.723] GetLastError () returned 0x5 [0084.723] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0084.723] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.723] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.723] SetLastError (dwErrCode=0x0) [0084.723] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.723] GetLastError () returned 0x5 [0084.723] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0084.723] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.723] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f3\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0d50 [0084.723] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.723] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.723] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.724] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f3\\FA000000003", dwFileAttributes=0x80) returned 0 [0084.724] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f3\\FA000000003" (normalized: "c:\\program files\\microsoft office\\root\\office16\\fpa_f3\\fa000000003"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.724] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.724] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.725] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0084.725] FindClose (in: hFindFile=0xd7079a0d50 | out: hFindFile=0xd7079a0d50) returned 1 [0084.725] SetLastError (dwErrCode=0x0) [0084.725] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f3\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\fpa_f3\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.725] GetLastError () returned 0x5 [0084.725] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0084.725] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.725] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.725] SetLastError (dwErrCode=0x0) [0084.725] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.725] GetLastError () returned 0x5 [0084.725] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0084.725] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.725] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f4\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0810 [0084.726] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.726] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.726] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f4\\FA000000005", dwFileAttributes=0x80) returned 0 [0084.727] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f4\\FA000000005" (normalized: "c:\\program files\\microsoft office\\root\\office16\\fpa_f4\\fa000000005"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.727] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.727] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.727] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0084.727] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0084.727] SetLastError (dwErrCode=0x0) [0084.727] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f4\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\fpa_f4\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.727] GetLastError () returned 0x5 [0084.727] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0084.727] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.727] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.727] SetLastError (dwErrCode=0x0) [0084.727] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.728] GetLastError () returned 0x5 [0084.728] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0084.728] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.728] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f7\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0810 [0084.728] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.728] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.728] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f7\\FA000000007", dwFileAttributes=0x80) returned 0 [0084.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f7\\FA000000007" (normalized: "c:\\program files\\microsoft office\\root\\office16\\fpa_f7\\fa000000007"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.729] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.729] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.729] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0084.729] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0084.729] SetLastError (dwErrCode=0x0) [0084.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f7\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\fpa_f7\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.729] GetLastError () returned 0x5 [0084.729] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0084.729] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.730] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.730] SetLastError (dwErrCode=0x0) [0084.730] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.730] GetLastError () returned 0x5 [0084.730] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0084.730] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.730] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_FA000000006\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a08d0 [0084.730] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.730] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.730] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_FA000000006\\FA000000006", dwFileAttributes=0x80) returned 0 [0084.731] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_FA000000006\\FA000000006" (normalized: "c:\\program files\\microsoft office\\root\\office16\\fpa_fa000000006\\fa000000006"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.731] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.731] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.731] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0084.731] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0084.731] SetLastError (dwErrCode=0x0) [0084.731] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_FA000000006\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\fpa_fa000000006\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.731] GetLastError () returned 0x5 [0084.731] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0084.731] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.731] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.732] SetLastError (dwErrCode=0x0) [0084.732] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.732] GetLastError () returned 0x5 [0084.732] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0084.732] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.732] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_FA000000008\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0d50 [0084.733] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.733] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.733] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_FA000000008\\FA000000008", dwFileAttributes=0x80) returned 0 [0084.733] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_FA000000008\\FA000000008" (normalized: "c:\\program files\\microsoft office\\root\\office16\\fpa_fa000000008\\fa000000008"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.734] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.734] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.734] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0084.734] FindClose (in: hFindFile=0xd7079a0d50 | out: hFindFile=0xd7079a0d50) returned 1 [0084.734] SetLastError (dwErrCode=0x0) [0084.734] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_FA000000008\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\fpa_fa000000008\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.734] GetLastError () returned 0x5 [0084.734] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0084.734] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.734] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.734] SetLastError (dwErrCode=0x0) [0084.734] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.734] GetLastError () returned 0x5 [0084.734] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0084.734] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.734] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_FA000000011\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0d50 [0084.735] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.735] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.735] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_FA000000011\\FA000000011", dwFileAttributes=0x80) returned 0 [0084.735] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_FA000000011\\FA000000011" (normalized: "c:\\program files\\microsoft office\\root\\office16\\fpa_fa000000011\\fa000000011"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.735] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.735] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.735] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0084.736] FindClose (in: hFindFile=0xd7079a0d50 | out: hFindFile=0xd7079a0d50) returned 1 [0084.736] SetLastError (dwErrCode=0x0) [0084.736] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_FA000000011\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\fpa_fa000000011\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.736] GetLastError () returned 0x5 [0084.736] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0084.736] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.736] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.736] SetLastError (dwErrCode=0x0) [0084.736] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.736] GetLastError () returned 0x5 [0084.736] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0084.736] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.736] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_w1\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0d50 [0084.736] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.736] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.736] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_w1\\WA104381125", dwFileAttributes=0x80) returned 0 [0084.737] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_w1\\WA104381125" (normalized: "c:\\program files\\microsoft office\\root\\office16\\fpa_w1\\wa104381125"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.738] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.738] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.738] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0084.738] FindClose (in: hFindFile=0xd7079a0d50 | out: hFindFile=0xd7079a0d50) returned 1 [0084.738] SetLastError (dwErrCode=0x0) [0084.738] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_w1\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\fpa_w1\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.738] GetLastError () returned 0x5 [0084.738] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0084.738] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.738] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.738] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.738] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.738] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.739] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.739] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.739] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.739] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.739] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GRAPH.ICO", dwFileAttributes=0x80) returned 0 [0084.740] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GRAPH.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\graph.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.740] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.740] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.740] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.740] SetLastError (dwErrCode=0x0) [0084.740] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.740] GetLastError () returned 0x5 [0084.740] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0084.740] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.740] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0d50 [0084.742] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.742] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.742] SetLastError (dwErrCode=0x0) [0084.742] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.742] GetLastError () returned 0x5 [0084.742] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0084.742] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.742] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0450 [0084.743] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.743] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.743] SetLastError (dwErrCode=0x0) [0084.743] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.743] GetLastError () returned 0x5 [0084.743] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0084.743] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.743] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0810 [0084.743] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.743] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.743] SetLastError (dwErrCode=0x0) [0084.743] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\groove.net\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.744] GetLastError () returned 0x5 [0084.744] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.744] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.744] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Components\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a0bd0 [0084.744] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.744] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.744] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Components\\SignedComponents.cer", dwFileAttributes=0x80) returned 0 [0084.745] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Components\\SignedComponents.cer" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\groove.net\\components\\signedcomponents.cer"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.746] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.746] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.746] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0084.746] FindClose (in: hFindFile=0xd7079a0bd0 | out: hFindFile=0xd7079a0bd0) returned 1 [0084.746] SetLastError (dwErrCode=0x0) [0084.746] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Components\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\groove.net\\components\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.746] GetLastError () returned 0x5 [0084.746] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.746] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.746] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.746] SetLastError (dwErrCode=0x0) [0084.746] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\groove.net\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.746] GetLastError () returned 0x5 [0084.746] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.746] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.746] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\ManagedObjects\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a0e70 [0084.747] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.747] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.747] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.747] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\ManagedObjects\\SignedManagedObjects.cer", dwFileAttributes=0x80) returned 0 [0084.747] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\ManagedObjects\\SignedManagedObjects.cer" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\groove.net\\managedobjects\\signedmanagedobjects.cer"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.747] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.747] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.748] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0084.748] FindClose (in: hFindFile=0xd7079a0e70 | out: hFindFile=0xd7079a0e70) returned 1 [0084.771] SetLastError (dwErrCode=0x0) [0084.771] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\ManagedObjects\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\groove.net\\managedobjects\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.771] GetLastError () returned 0x5 [0084.771] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.771] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.771] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.771] SetLastError (dwErrCode=0x0) [0084.771] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\groove.net\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.771] GetLastError () returned 0x5 [0084.771] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.771] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.771] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Servers\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a08d0 [0084.772] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.772] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.772] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.772] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Servers\\Management.cer", dwFileAttributes=0x80) returned 0 [0084.772] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Servers\\Management.cer" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\groove.net\\servers\\management.cer"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.772] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.772] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.773] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.773] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Servers\\RELAY.CER", dwFileAttributes=0x80) returned 0 [0084.773] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Servers\\RELAY.CER" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\groove.net\\servers\\relay.cer"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.773] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.773] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.774] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0084.774] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0084.774] SetLastError (dwErrCode=0x0) [0084.774] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Servers\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\groove.net\\servers\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.774] GetLastError () returned 0x5 [0084.774] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.774] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.774] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0084.774] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0084.774] SetLastError (dwErrCode=0x0) [0084.774] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\groove.net\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.774] GetLastError () returned 0x5 [0084.774] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0084.774] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.774] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.774] SetLastError (dwErrCode=0x0) [0084.774] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.775] GetLastError () returned 0x5 [0084.775] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0084.775] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.775] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0810 [0084.776] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.776] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.776] SetLastError (dwErrCode=0x0) [0084.776] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\verisign\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.776] GetLastError () returned 0x5 [0084.776] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.776] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.776] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\Components\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a08d0 [0084.777] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.778] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.778] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.778] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Code_Signing_2001-4_CA.cer", dwFileAttributes=0x80) returned 0 [0084.778] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Code_Signing_2001-4_CA.cer" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\verisign\\components\\verisign_class_3_code_signing_2001-4_ca.cer"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.778] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.778] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.778] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.778] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.779] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Public_Primary_CA.cer", dwFileAttributes=0x80) returned 0 [0084.779] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Public_Primary_CA.cer" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\verisign\\components\\verisign_class_3_public_primary_ca.cer"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.780] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.780] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.780] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.780] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\Components\\VS_ComponentSigningIntermediate.cer", dwFileAttributes=0x80) returned 0 [0084.780] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\Components\\VS_ComponentSigningIntermediate.cer" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\verisign\\components\\vs_componentsigningintermediate.cer"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.780] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.780] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.781] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0084.781] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0084.781] SetLastError (dwErrCode=0x0) [0084.781] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\Components\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\verisign\\components\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.784] GetLastError () returned 0x5 [0084.784] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.784] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.784] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0084.784] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0084.784] SetLastError (dwErrCode=0x0) [0084.784] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\verisign\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.785] GetLastError () returned 0x5 [0084.785] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0084.785] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.785] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0084.785] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0084.785] SetLastError (dwErrCode=0x0) [0084.785] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.785] GetLastError () returned 0x5 [0084.785] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0084.785] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.785] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.785] SetLastError (dwErrCode=0x0) [0084.785] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.785] GetLastError () returned 0x5 [0084.785] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0084.785] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.785] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0810 [0084.786] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.786] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.786] SetLastError (dwErrCode=0x0) [0084.786] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.786] GetLastError () returned 0x5 [0084.786] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0084.786] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.786] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0bd0 [0084.787] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.787] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.787] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.787] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\COUGH.WAV", dwFileAttributes=0x80) returned 0 [0084.788] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\COUGH.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\people\\cough.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.788] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.788] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.789] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.789] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.789] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\GIGGLE.WAV", dwFileAttributes=0x80) returned 0 [0084.789] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\GIGGLE.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\people\\giggle.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.790] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.790] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.790] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.790] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.790] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\HICCUP.WAV", dwFileAttributes=0x80) returned 0 [0084.790] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\HICCUP.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\people\\hiccup.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.790] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.791] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.791] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.791] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.791] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\MMHMM.WAV", dwFileAttributes=0x80) returned 0 [0084.792] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\MMHMM.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\people\\mmhmm.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.792] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.792] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.792] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.792] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.792] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\SNEEZE.WAV", dwFileAttributes=0x80) returned 0 [0084.793] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\SNEEZE.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\people\\sneeze.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.793] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.793] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.793] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.793] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\THROAT.WAV", dwFileAttributes=0x80) returned 0 [0084.794] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\THROAT.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\people\\throat.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.794] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.794] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.794] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.794] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\Whistling.wav", dwFileAttributes=0x80) returned 0 [0084.795] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\Whistling.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\people\\whistling.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.795] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.795] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.795] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0084.795] FindClose (in: hFindFile=0xd7079a0bd0 | out: hFindFile=0xd7079a0bd0) returned 1 [0084.796] SetLastError (dwErrCode=0x0) [0084.796] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\people\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.799] GetLastError () returned 0x5 [0084.799] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0084.799] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.799] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.799] SetLastError (dwErrCode=0x0) [0084.799] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.799] GetLastError () returned 0x5 [0084.799] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0084.799] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.799] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0e70 [0084.800] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.800] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.800] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\ALARM.WAV", dwFileAttributes=0x80) returned 0 [0084.801] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\ALARM.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\places\\alarm.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.801] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.801] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.801] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.801] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.802] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\BUZZ.WAV", dwFileAttributes=0x80) returned 0 [0084.802] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\BUZZ.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\places\\buzz.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.802] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.802] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.802] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.802] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\LASER.WAV", dwFileAttributes=0x80) returned 0 [0084.803] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\LASER.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\places\\laser.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.803] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.803] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.803] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.803] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\RADAR.WAV", dwFileAttributes=0x80) returned 0 [0084.804] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\RADAR.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\places\\radar.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.804] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.804] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.805] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.805] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\TOOT.WAV", dwFileAttributes=0x80) returned 0 [0084.805] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\TOOT.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\places\\toot.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.806] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.806] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.806] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.806] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\VIBE.WAV", dwFileAttributes=0x80) returned 0 [0084.806] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\VIBE.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\places\\vibe.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.806] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.806] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.807] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.807] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.807] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\WARN.WAV", dwFileAttributes=0x80) returned 0 [0084.807] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\WARN.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\places\\warn.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.807] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.807] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.807] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0084.808] FindClose (in: hFindFile=0xd7079a0e70 | out: hFindFile=0xd7079a0e70) returned 1 [0084.808] SetLastError (dwErrCode=0x0) [0084.808] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\places\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.812] GetLastError () returned 0x5 [0084.812] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0084.812] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.812] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.812] SetLastError (dwErrCode=0x0) [0084.812] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.812] GetLastError () returned 0x5 [0084.812] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0084.812] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.812] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a08d0 [0084.813] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.814] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.814] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\CAN.WAV", dwFileAttributes=0x80) returned 0 [0084.814] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\CAN.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\things\\can.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.814] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.814] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.815] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.815] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\COUPLER.WAV", dwFileAttributes=0x80) returned 0 [0084.815] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\COUPLER.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\things\\coupler.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.815] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.815] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.816] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.816] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\HORN.WAV", dwFileAttributes=0x80) returned 0 [0084.816] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\HORN.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\things\\horn.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.816] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.816] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.816] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.816] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\SHOT.WAV", dwFileAttributes=0x80) returned 0 [0084.817] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\SHOT.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\things\\shot.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.817] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.817] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.817] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.817] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.818] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\SHOVEL.WAV", dwFileAttributes=0x80) returned 0 [0084.818] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\SHOVEL.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\things\\shovel.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.818] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.818] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.818] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.818] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.818] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\SPLASH.WAV", dwFileAttributes=0x80) returned 0 [0084.819] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\SPLASH.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\things\\splash.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.819] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.819] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.819] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.819] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\WHOOSH.WAV", dwFileAttributes=0x80) returned 0 [0084.820] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\WHOOSH.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\things\\whoosh.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.820] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.820] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.820] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0084.820] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0084.821] SetLastError (dwErrCode=0x0) [0084.821] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\things\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.824] GetLastError () returned 0x5 [0084.824] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0084.824] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.824] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0084.824] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0084.824] SetLastError (dwErrCode=0x0) [0084.824] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.824] GetLastError () returned 0x5 [0084.824] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0084.824] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.824] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.824] SetLastError (dwErrCode=0x0) [0084.824] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.824] GetLastError () returned 0x5 [0084.824] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0084.824] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.825] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0ed0 [0084.826] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.828] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.828] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.828] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\DataListIconImages.jpg", dwFileAttributes=0x80) returned 0 [0084.829] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\DataListIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\datalisticonimages.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.829] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.829] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.829] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.829] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\DataListIconImagesMask.bmp", dwFileAttributes=0x80) returned 0 [0084.830] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\DataListIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\datalisticonimagesmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.830] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.830] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.830] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.830] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\GRIP.JPG", dwFileAttributes=0x80) returned 0 [0084.831] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\GRIP.JPG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\grip.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.831] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.831] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.831] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.831] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\GRIPMASK.BMP", dwFileAttributes=0x80) returned 0 [0084.832] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\GRIPMASK.BMP" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\gripmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.832] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.832] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.832] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.832] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\InformationIcon.jpg", dwFileAttributes=0x80) returned 0 [0084.833] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\InformationIcon.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\informationicon.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.833] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.833] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.833] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.833] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\InformationIconMask.bmp", dwFileAttributes=0x80) returned 0 [0084.834] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\InformationIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\informationiconmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.834] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.834] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.834] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.834] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\LoginDialogBackground.jpg", dwFileAttributes=0x80) returned 0 [0084.835] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\LoginDialogBackground.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\logindialogbackground.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.835] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.835] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.835] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.835] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\LoginTool24x24Images.jpg", dwFileAttributes=0x80) returned 0 [0084.836] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\LoginTool24x24Images.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\logintool24x24images.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.836] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.836] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.836] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.836] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\LoginTool24x24ImagesMask.bmp", dwFileAttributes=0x80) returned 0 [0084.836] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\LoginTool24x24ImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\logintool24x24imagesmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.837] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.837] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.837] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.837] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\MessageAttachmentIconImages.jpg", dwFileAttributes=0x80) returned 0 [0084.838] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\MessageAttachmentIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\messageattachmenticonimages.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.838] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.838] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.838] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.838] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\MessageAttachmentIconImagesMask.bmp", dwFileAttributes=0x80) returned 0 [0084.839] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\MessageAttachmentIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\messageattachmenticonimagesmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.839] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.839] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.839] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.839] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\MessageHistoryIconImages.jpg", dwFileAttributes=0x80) returned 0 [0084.840] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\MessageHistoryIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\messagehistoryiconimages.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.840] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.840] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.840] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.840] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\MessageHistoryIconImagesMask.bmp", dwFileAttributes=0x80) returned 0 [0084.841] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\MessageHistoryIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\messagehistoryiconimagesmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.841] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.841] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.841] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.841] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierBackground.jpg", dwFileAttributes=0x80) returned 0 [0084.842] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierBackground.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\notifierbackground.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.842] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.842] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.843] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.843] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.843] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierBackgroundRTL.jpg", dwFileAttributes=0x80) returned 0 [0084.843] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierBackgroundRTL.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\notifierbackgroundrtl.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.843] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.843] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.843] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.844] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierCloseButton.jpg", dwFileAttributes=0x80) returned 0 [0084.844] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierCloseButton.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\notifierclosebutton.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.844] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.844] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.844] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.844] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierDisableDownArrow.jpg", dwFileAttributes=0x80) returned 0 [0084.845] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierDisableDownArrow.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\notifierdisabledownarrow.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.845] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.845] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.845] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.845] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierDisableUpArrow.jpg", dwFileAttributes=0x80) returned 0 [0084.846] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierDisableUpArrow.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\notifierdisableuparrow.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.846] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.846] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.846] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.846] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.846] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierDownArrow.jpg", dwFileAttributes=0x80) returned 0 [0084.847] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierDownArrow.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\notifierdownarrow.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.847] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.847] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.847] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.847] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierUpArrow.jpg", dwFileAttributes=0x80) returned 0 [0084.848] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierUpArrow.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\notifieruparrow.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.848] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.848] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.848] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.848] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierWindowMask.bmp", dwFileAttributes=0x80) returned 0 [0084.849] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierWindowMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\notifierwindowmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.849] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.849] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.850] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.850] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.850] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierWindowMaskRTL.bmp", dwFileAttributes=0x80) returned 0 [0084.850] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierWindowMaskRTL.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\notifierwindowmaskrtl.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.850] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.850] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.850] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.850] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\OutofSyncIconImages.jpg", dwFileAttributes=0x80) returned 0 [0084.851] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\OutofSyncIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\outofsynciconimages.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.851] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.851] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.851] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.851] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\OutofSyncIconImagesMask.bmp", dwFileAttributes=0x80) returned 0 [0084.852] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\OutofSyncIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\outofsynciconimagesmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.852] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.852] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.853] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.853] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\QuestionIcon.jpg", dwFileAttributes=0x80) returned 0 [0084.853] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\QuestionIcon.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\questionicon.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.853] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.853] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.854] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.854] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\QuestionIconMask.bmp", dwFileAttributes=0x80) returned 0 [0084.854] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\QuestionIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\questioniconmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.854] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.854] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.854] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.854] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\Shared16x16Images.jpg", dwFileAttributes=0x80) returned 0 [0084.855] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\Shared16x16Images.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\shared16x16images.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.855] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.855] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.855] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.855] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.856] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\Shared16x16ImagesMask.bmp", dwFileAttributes=0x80) returned 0 [0084.856] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\Shared16x16ImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\shared16x16imagesmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.856] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.856] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.856] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.856] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\Shared24x24Images.jpg", dwFileAttributes=0x80) returned 0 [0084.857] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\Shared24x24Images.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\shared24x24images.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.858] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.858] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.858] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.858] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\Shared24x24ImagesMask.bmp", dwFileAttributes=0x80) returned 0 [0084.859] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\Shared24x24ImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\shared24x24imagesmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.859] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.859] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.859] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.859] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\STOPICON.JPG", dwFileAttributes=0x80) returned 0 [0084.860] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\STOPICON.JPG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\stopicon.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.861] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.861] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.861] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.861] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.861] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\StopIconMask.bmp", dwFileAttributes=0x80) returned 0 [0084.861] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\StopIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\stopiconmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.861] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.861] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.862] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.862] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\TaskbarIconImages256Colors.bmp", dwFileAttributes=0x80) returned 0 [0084.862] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\TaskbarIconImages256Colors.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\taskbariconimages256colors.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.862] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.862] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.863] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.863] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.863] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\TaskbarIconImagesMask256Colors.bmp", dwFileAttributes=0x80) returned 0 [0084.864] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\TaskbarIconImagesMask256Colors.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\taskbariconimagesmask256colors.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.864] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.864] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.864] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.864] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.864] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\TipsImage.jpg", dwFileAttributes=0x80) returned 0 [0084.864] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\TipsImage.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\tipsimage.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.865] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.865] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.865] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.865] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.865] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\TipsImageMask.bmp", dwFileAttributes=0x80) returned 0 [0084.865] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\TipsImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\tipsimagemask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.866] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.866] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.866] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.866] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.866] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\VeriSignLogo.jpg", dwFileAttributes=0x80) returned 0 [0084.866] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\VeriSignLogo.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\verisignlogo.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.866] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.866] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.867] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0084.867] FindClose (in: hFindFile=0xd7079a0ed0 | out: hFindFile=0xd7079a0ed0) returned 1 [0084.867] SetLastError (dwErrCode=0x0) [0084.867] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.870] GetLastError () returned 0x5 [0084.870] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0084.870] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.870] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.870] SetLastError (dwErrCode=0x0) [0084.870] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.870] GetLastError () returned 0x5 [0084.870] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0084.870] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.870] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a08d0 [0084.870] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.871] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.871] SetLastError (dwErrCode=0x0) [0084.871] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.871] GetLastError () returned 0x5 [0084.871] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0084.871] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.871] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0e70 [0084.871] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.871] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.871] SetLastError (dwErrCode=0x0) [0084.871] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.871] GetLastError () returned 0x5 [0084.871] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.871] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.871] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a0810 [0084.873] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.874] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.874] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Auto.jpg", dwFileAttributes=0x80) returned 0 [0084.875] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Auto.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\alertimage_auto.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.875] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.875] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.875] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.875] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_AutoMask.bmp", dwFileAttributes=0x80) returned 0 [0084.876] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_AutoMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\alertimage_automask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.876] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.876] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.876] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.876] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHigh.jpg", dwFileAttributes=0x80) returned 0 [0084.877] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHigh.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\alertimage_contacthigh.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.877] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.878] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.878] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.878] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHighMask.bmp", dwFileAttributes=0x80) returned 0 [0084.884] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHighMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\alertimage_contacthighmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.885] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.885] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.885] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.885] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLow.jpg", dwFileAttributes=0x80) returned 0 [0084.885] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLow.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\alertimage_contactlow.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.886] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.886] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.887] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.887] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLowMask.bmp", dwFileAttributes=0x80) returned 0 [0084.888] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLowMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\alertimage_contactlowmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.888] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.888] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.888] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.888] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHigh.jpg", dwFileAttributes=0x80) returned 0 [0084.889] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHigh.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\alertimage_filehigh.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.889] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.889] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.890] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.890] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHighMask.bmp", dwFileAttributes=0x80) returned 0 [0084.890] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHighMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\alertimage_filehighmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.890] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.890] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.891] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.891] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOff.jpg", dwFileAttributes=0x80) returned 0 [0084.891] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOff.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\alertimage_fileoff.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.891] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.891] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.892] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.892] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOffMask.bmp", dwFileAttributes=0x80) returned 0 [0084.892] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOffMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\alertimage_fileoffmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.892] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.892] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.893] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.893] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_High.jpg", dwFileAttributes=0x80) returned 0 [0084.893] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_High.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\alertimage_high.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.893] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.893] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.893] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.893] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_HighMask.bmp", dwFileAttributes=0x80) returned 0 [0084.894] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_HighMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\alertimage_highmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.894] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.894] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.894] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.894] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Medium.jpg", dwFileAttributes=0x80) returned 0 [0084.896] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Medium.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\alertimage_medium.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.896] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.896] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.896] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.896] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_MediumMAsk.bmp", dwFileAttributes=0x80) returned 0 [0084.897] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_MediumMAsk.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\alertimage_mediummask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.897] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.897] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.898] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.898] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Off.jpg", dwFileAttributes=0x80) returned 0 [0084.898] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Off.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\alertimage_off.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.898] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.898] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.898] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.898] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_OffMask.bmp", dwFileAttributes=0x80) returned 0 [0084.899] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_OffMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\alertimage_offmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.899] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.899] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.899] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.899] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImage.jpg", dwFileAttributes=0x80) returned 0 [0084.900] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImage.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\commsincomingimage.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.900] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.900] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.900] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.900] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMask.bmp", dwFileAttributes=0x80) returned 0 [0084.901] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagemask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.901] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.901] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.901] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.901] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMaskSmall.bmp", dwFileAttributes=0x80) returned 0 [0084.902] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMaskSmall.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagemasksmall.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.902] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.902] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.902] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.902] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageSmall.jpg", dwFileAttributes=0x80) returned 0 [0084.903] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageSmall.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagesmall.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.903] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.903] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.903] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.903] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.903] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImage.jpg", dwFileAttributes=0x80) returned 0 [0084.904] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImage.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimage.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.904] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.904] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.904] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.904] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.905] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMask.bmp", dwFileAttributes=0x80) returned 0 [0084.905] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagemask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.905] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.905] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.905] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.905] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.906] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMaskSmall.bmp", dwFileAttributes=0x80) returned 0 [0084.906] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMaskSmall.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagemasksmall.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.906] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.906] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.907] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.907] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.907] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageSmall.jpg", dwFileAttributes=0x80) returned 0 [0084.907] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageSmall.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagesmall.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.907] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.907] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.908] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.908] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.908] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImages.jpg", dwFileAttributes=0x80) returned 0 [0084.908] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\messageboxiconimages.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.908] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.908] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.908] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.909] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.909] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImagesMask.bmp", dwFileAttributes=0x80) returned 0 [0084.909] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\messageboxiconimagesmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.910] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.910] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.910] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.910] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.910] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIcon.jpg", dwFileAttributes=0x80) returned 0 [0084.910] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIcon.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\unreadicon.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.910] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.911] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.911] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.911] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.911] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImages.jpg", dwFileAttributes=0x80) returned 0 [0084.911] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\unreadiconimages.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.911] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.911] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.912] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.912] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.912] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImagesMask.bmp", dwFileAttributes=0x80) returned 0 [0084.912] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\unreadiconimagesmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.912] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.912] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.913] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0084.913] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0084.913] SetLastError (dwErrCode=0x0) [0084.913] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.916] GetLastError () returned 0x5 [0084.916] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.916] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.916] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0084.916] SetLastError (dwErrCode=0x0) [0084.916] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.916] GetLastError () returned 0x5 [0084.916] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.916] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.916] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\Computers\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a0450 [0084.916] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.916] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.916] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.917] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\Computers\\computericon.jpg", dwFileAttributes=0x80) returned 0 [0084.917] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\Computers\\computericon.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\computers\\computericon.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.917] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.917] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.917] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0084.917] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.918] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\Computers\\computericonMask.bmp", dwFileAttributes=0x80) returned 0 [0084.918] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\Computers\\computericonMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\computers\\computericonmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.918] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.918] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.918] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0084.918] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0084.918] SetLastError (dwErrCode=0x0) [0084.918] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\Computers\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\computers\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.919] GetLastError () returned 0x5 [0084.919] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0084.919] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.919] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0084.919] FindClose (in: hFindFile=0xd7079a0e70 | out: hFindFile=0xd7079a0e70) returned 1 [0084.919] SetLastError (dwErrCode=0x0) [0084.919] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.919] GetLastError () returned 0x5 [0084.919] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0084.919] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.919] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0084.919] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0084.919] SetLastError (dwErrCode=0x0) [0084.919] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.919] GetLastError () returned 0x5 [0084.919] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0084.919] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.919] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.920] SetLastError (dwErrCode=0x0) [0084.920] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.920] GetLastError () returned 0x5 [0084.920] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0084.920] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.920] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0810 [0084.921] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.922] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.922] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.922] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\ALERT.ICO", dwFileAttributes=0x80) returned 0 [0084.923] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\ALERT.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\alert.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.923] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.923] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.923] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.923] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.923] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\CHEVRON.ICO", dwFileAttributes=0x80) returned 0 [0084.924] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\CHEVRON.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\chevron.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.924] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.924] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.925] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.925] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.925] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\COMPUTER.ICO", dwFileAttributes=0x80) returned 0 [0084.926] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\COMPUTER.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\computer.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.926] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.926] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.926] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.926] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.926] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\ContactSelector.ico", dwFileAttributes=0x80) returned 0 [0084.927] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\ContactSelector.ico" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\contactselector.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.927] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.927] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.927] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.927] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.928] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\GWE.ICO", dwFileAttributes=0x80) returned 0 [0084.928] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\GWE.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\gwe.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.929] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.929] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.929] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.929] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.929] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\INCOMING.ICO", dwFileAttributes=0x80) returned 0 [0084.930] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\INCOMING.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\incoming.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.930] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.930] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.930] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.930] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.930] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\INDOMAIN.ICO", dwFileAttributes=0x80) returned 0 [0084.931] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\INDOMAIN.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\indomain.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.931] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.931] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.931] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.931] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.932] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\MAIL.ICO", dwFileAttributes=0x80) returned 0 [0084.932] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\MAIL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\mail.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.932] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.932] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.932] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.932] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.932] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\MANUAL.ICO", dwFileAttributes=0x80) returned 0 [0084.933] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\MANUAL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\manual.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.933] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.933] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.934] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.934] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.934] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\messageboxalert.ico", dwFileAttributes=0x80) returned 0 [0084.934] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\messageboxalert.ico" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\messageboxalert.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.935] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.935] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.935] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.935] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.935] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\messageboxerror.ico", dwFileAttributes=0x80) returned 0 [0084.936] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\messageboxerror.ico" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\messageboxerror.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.936] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.936] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.936] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.936] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.937] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\messageboxinfo.ico", dwFileAttributes=0x80) returned 0 [0084.937] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\messageboxinfo.ico" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\messageboxinfo.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.938] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.938] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.938] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.938] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.938] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\ModifiedTelespace.ico", dwFileAttributes=0x80) returned 0 [0084.939] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\ModifiedTelespace.ico" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\modifiedtelespace.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.939] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.939] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.939] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.939] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\OFFLINE.ICO", dwFileAttributes=0x80) returned 0 [0084.940] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\OFFLINE.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\offline.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.940] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.940] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.940] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.940] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.940] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\ONLINE.ICO", dwFileAttributes=0x80) returned 0 [0084.941] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\ONLINE.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\online.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.941] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.941] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.941] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.941] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.942] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\OnLineBusy.ico", dwFileAttributes=0x80) returned 0 [0084.942] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\OnLineBusy.ico" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\onlinebusy.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.942] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.942] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.942] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.942] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.942] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\OnLineIdle.ico", dwFileAttributes=0x80) returned 0 [0084.943] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\OnLineIdle.ico" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\onlineidle.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.943] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.943] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.944] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.944] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.944] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\OutDomain.ico", dwFileAttributes=0x80) returned 0 [0084.944] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\OutDomain.ico" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\outdomain.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.944] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.944] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.944] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.945] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.945] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\OUTGOING.ICO", dwFileAttributes=0x80) returned 0 [0084.945] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\OUTGOING.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\outgoing.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.946] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.946] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.946] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.946] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\OutSyncPC.ico", dwFileAttributes=0x80) returned 0 [0084.947] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\OutSyncPC.ico" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\outsyncpc.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.947] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.947] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.947] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.947] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.947] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\PersonalContact.ico", dwFileAttributes=0x80) returned 0 [0084.948] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\PersonalContact.ico" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\personalcontact.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.948] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.948] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.948] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.948] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\SessionMember.ico", dwFileAttributes=0x80) returned 0 [0084.949] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\SessionMember.ico" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\sessionmember.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.950] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.950] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.950] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.950] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.950] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\SessionOwner.ico", dwFileAttributes=0x80) returned 0 [0084.951] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\SessionOwner.ico" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\sessionowner.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.951] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.951] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.951] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.951] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.952] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\SpaceSelector.ico", dwFileAttributes=0x80) returned 0 [0084.953] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\SpaceSelector.ico" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\spaceselector.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.953] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.953] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.954] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.954] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.954] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\StatusAway.ico", dwFileAttributes=0x80) returned 0 [0084.954] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\StatusAway.ico" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\statusaway.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.954] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.954] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.955] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.955] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.955] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\StatusDoNotDisturb.ico", dwFileAttributes=0x80) returned 0 [0084.955] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\StatusDoNotDisturb.ico" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\statusdonotdisturb.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.956] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.956] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.956] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.956] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.956] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\StatusOnline.ico", dwFileAttributes=0x80) returned 0 [0084.957] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\StatusOnline.ico" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\statusonline.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.957] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.957] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.957] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.957] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.958] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\TOOLICON.ICO", dwFileAttributes=0x80) returned 0 [0084.958] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\TOOLICON.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\toolicon.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.958] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.958] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.959] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.959] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.959] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\WSS.ICO", dwFileAttributes=0x80) returned 0 [0084.959] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\WSS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\wss.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.959] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.959] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.959] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.960] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.960] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\WSS_DocLib.ico", dwFileAttributes=0x80) returned 0 [0084.960] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\WSS_DocLib.ico" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\wss_doclib.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.961] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.961] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.961] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0084.961] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0084.961] SetLastError (dwErrCode=0x0) [0084.962] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.964] GetLastError () returned 0x5 [0084.964] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0084.964] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.964] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0084.964] FindClose (in: hFindFile=0xd7079a0d50 | out: hFindFile=0xd7079a0d50) returned 1 [0084.964] SetLastError (dwErrCode=0x0) [0084.964] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.964] GetLastError () returned 0x5 [0084.965] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0084.965] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.965] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.965] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.965] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GROOVE.VisualElementsManifest.xml", dwFileAttributes=0x80) returned 0 [0084.965] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GROOVE.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove.visualelementsmanifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.965] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.965] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.966] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.966] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.966] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\HeaderPatterns.xml", dwFileAttributes=0x80) returned 0 [0084.967] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\HeaderPatterns.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\headerpatterns.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.967] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.967] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.967] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.967] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.967] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.967] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.967] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.967] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.967] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.968] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\IMDIMP.ADD", dwFileAttributes=0x80) returned 0 [0084.968] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\IMDIMP.ADD" (normalized: "c:\\program files\\microsoft office\\root\\office16\\imdimp.add"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.969] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.969] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.969] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.969] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.969] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.969] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.969] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.969] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Installed_resources16.xss", dwFileAttributes=0x80) returned 0 [0084.969] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Installed_resources16.xss" (normalized: "c:\\program files\\microsoft office\\root\\office16\\installed_resources16.xss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.969] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.969] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.970] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.970] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Installed_schemas16.xss", dwFileAttributes=0x80) returned 0 [0084.970] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Installed_schemas16.xss" (normalized: "c:\\program files\\microsoft office\\root\\office16\\installed_schemas16.xss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.970] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.970] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.971] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.971] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.971] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.971] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Interceptor.tlb", dwFileAttributes=0x80) returned 0 [0084.971] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Interceptor.tlb" (normalized: "c:\\program files\\microsoft office\\root\\office16\\interceptor.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.971] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.971] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.971] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.971] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.971] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.971] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.972] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\IXGENERC.PDL", dwFileAttributes=0x80) returned 0 [0084.972] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\IXGENERC.PDL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ixgenerc.pdl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.972] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.972] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.972] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.972] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\IXORACLE.PDL", dwFileAttributes=0x80) returned 0 [0084.973] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\IXORACLE.PDL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ixoracle.pdl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.973] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.973] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.973] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.973] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.974] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\IXSSRV.PDL", dwFileAttributes=0x80) returned 0 [0084.974] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\IXSSRV.PDL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ixssrv.pdl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.974] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.974] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.974] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.974] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.974] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.974] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.974] SetLastError (dwErrCode=0x0) [0084.975] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.975] GetLastError () returned 0x5 [0084.975] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0084.975] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.975] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0450 [0084.975] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.975] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.975] SetLastError (dwErrCode=0x0) [0084.975] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\library\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.975] GetLastError () returned 0x5 [0084.975] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0084.975] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.975] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\Analysis\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0810 [0084.977] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.977] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.977] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\Analysis\\ANALYS32.XLL", dwFileAttributes=0x80) returned 0 [0084.978] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\Analysis\\ANALYS32.XLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\library\\analysis\\analys32.xll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.978] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.978] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.979] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.979] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\Analysis\\ATPVBAEN.XLAM", dwFileAttributes=0x80) returned 0 [0084.980] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\Analysis\\ATPVBAEN.XLAM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\library\\analysis\\atpvbaen.xlam"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.980] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.980] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.980] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.980] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.980] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\Analysis\\FUNCRES.XLAM", dwFileAttributes=0x80) returned 0 [0084.981] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\Analysis\\FUNCRES.XLAM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\library\\analysis\\funcres.xlam"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.981] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.981] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.981] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.981] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.981] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\Analysis\\PROCDB.XLAM", dwFileAttributes=0x80) returned 0 [0084.982] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\Analysis\\PROCDB.XLAM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\library\\analysis\\procdb.xlam"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.982] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.982] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.982] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0084.982] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0084.983] SetLastError (dwErrCode=0x0) [0084.983] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\Analysis\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\library\\analysis\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.986] GetLastError () returned 0x5 [0084.986] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0084.986] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.986] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.986] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.986] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\EUROTOOL.XLAM", dwFileAttributes=0x80) returned 0 [0084.986] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\EUROTOOL.XLAM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\library\\eurotool.xlam"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.987] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.987] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.987] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.987] SetLastError (dwErrCode=0x0) [0084.987] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\library\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.987] GetLastError () returned 0x5 [0084.987] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0084.987] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.987] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\SOLVER\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0810 [0084.988] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.988] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.988] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\SOLVER\\SOLVER.XLAM", dwFileAttributes=0x80) returned 0 [0084.988] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\SOLVER\\SOLVER.XLAM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\library\\solver\\solver.xlam"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.989] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.989] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.989] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0084.989] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0084.989] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0084.989] SetLastError (dwErrCode=0x0) [0084.989] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\SOLVER\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\library\\solver\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.989] GetLastError () returned 0x5 [0084.989] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0084.989] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.989] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0084.989] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0084.989] SetLastError (dwErrCode=0x0) [0084.989] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\library\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.990] GetLastError () returned 0x5 [0084.990] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0084.990] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.990] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.990] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.991] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.991] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LOGMODEL.MDL", dwFileAttributes=0x80) returned 0 [0084.992] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LOGMODEL.MDL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logmodel.mdl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.992] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.992] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.992] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0084.992] SetLastError (dwErrCode=0x0) [0084.992] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.992] GetLastError () returned 0x5 [0084.992] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0084.992] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.992] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0450 [0084.994] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.998] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.998] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.998] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-100.png", dwFileAttributes=0x80) returned 0 [0084.999] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.contrast-black_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.999] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0084.999] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.999] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0084.999] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0084.999] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-140.png", dwFileAttributes=0x80) returned 0 [0085.000] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.contrast-black_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.000] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.000] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.000] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.000] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.000] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-180.png", dwFileAttributes=0x80) returned 0 [0085.000] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.001] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.001] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.001] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.001] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.001] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-80.png", dwFileAttributes=0x80) returned 0 [0085.001] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.contrast-black_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.001] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.002] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.002] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.002] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-100.png", dwFileAttributes=0x80) returned 0 [0085.002] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.contrast-white_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.002] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.002] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.003] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.003] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.003] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-140.png", dwFileAttributes=0x80) returned 0 [0085.003] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.contrast-white_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.003] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.003] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.003] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.003] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.004] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-180.png", dwFileAttributes=0x80) returned 0 [0085.004] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.004] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.004] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.004] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.004] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.005] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-80.png", dwFileAttributes=0x80) returned 0 [0085.005] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.contrast-white_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.005] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.005] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.005] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.005] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.005] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-100.png", dwFileAttributes=0x80) returned 0 [0085.006] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.006] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.006] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.006] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.006] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.006] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-140.png", dwFileAttributes=0x80) returned 0 [0085.007] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.007] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.007] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.007] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.007] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.007] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-180.png", dwFileAttributes=0x80) returned 0 [0085.007] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.008] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.008] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.008] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.008] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.008] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-80.png", dwFileAttributes=0x80) returned 0 [0085.008] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.009] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.009] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.009] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.009] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.009] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-100.png", dwFileAttributes=0x80) returned 0 [0085.009] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-black_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.009] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.009] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.010] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.010] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.010] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-140.png", dwFileAttributes=0x80) returned 0 [0085.010] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-black_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.010] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.010] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.011] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.011] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.011] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-180.png", dwFileAttributes=0x80) returned 0 [0085.011] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.011] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.011] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.011] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.011] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-80.png", dwFileAttributes=0x80) returned 0 [0085.012] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-black_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.012] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.012] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.012] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.012] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.013] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-100.png", dwFileAttributes=0x80) returned 0 [0085.013] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-white_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.013] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.013] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.013] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.013] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.014] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-140.png", dwFileAttributes=0x80) returned 0 [0085.014] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-white_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.014] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.014] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.014] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.014] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.015] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-180.png", dwFileAttributes=0x80) returned 0 [0085.015] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.015] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.015] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.015] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.015] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.015] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-80.png", dwFileAttributes=0x80) returned 0 [0085.016] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-white_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.016] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.016] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.016] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.016] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.016] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-100.png", dwFileAttributes=0x80) returned 0 [0085.017] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.017] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.017] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.017] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.017] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-140.png", dwFileAttributes=0x80) returned 0 [0085.017] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.018] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.018] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.018] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.018] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.018] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-180.png", dwFileAttributes=0x80) returned 0 [0085.020] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.020] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.020] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.020] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.023] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.023] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-80.png", dwFileAttributes=0x80) returned 0 [0085.024] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.024] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.024] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.024] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.024] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.024] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-100.png", dwFileAttributes=0x80) returned 0 [0085.025] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-black_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.025] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.025] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.025] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.025] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.025] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-140.png", dwFileAttributes=0x80) returned 0 [0085.026] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-black_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.026] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.026] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.026] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.026] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.026] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-180.png", dwFileAttributes=0x80) returned 0 [0085.026] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.027] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.027] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.027] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.027] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.027] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-80.png", dwFileAttributes=0x80) returned 0 [0085.027] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-black_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.027] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.028] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.028] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.028] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.028] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-100.png", dwFileAttributes=0x80) returned 0 [0085.028] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-white_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.028] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.028] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.029] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.029] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.031] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-140.png", dwFileAttributes=0x80) returned 0 [0085.032] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-white_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.032] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.032] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.032] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.032] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.032] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-180.png", dwFileAttributes=0x80) returned 0 [0085.033] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.033] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.033] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.033] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.033] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-80.png", dwFileAttributes=0x80) returned 0 [0085.033] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-white_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.034] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.034] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.034] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.034] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.034] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-100.png", dwFileAttributes=0x80) returned 0 [0085.034] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.035] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.035] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.035] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.035] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.035] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-140.png", dwFileAttributes=0x80) returned 0 [0085.035] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.035] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.035] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.036] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.036] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.036] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-180.png", dwFileAttributes=0x80) returned 0 [0085.036] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.036] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.036] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.036] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.037] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.037] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-80.png", dwFileAttributes=0x80) returned 0 [0085.037] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.037] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.037] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.037] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.037] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.038] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-100.png", dwFileAttributes=0x80) returned 0 [0085.038] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-black_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.038] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.038] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.038] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.038] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.038] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-140.png", dwFileAttributes=0x80) returned 0 [0085.039] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-black_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.039] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.039] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.039] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.039] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.039] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-180.png", dwFileAttributes=0x80) returned 0 [0085.039] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.040] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.040] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.040] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.040] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.040] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-80.png", dwFileAttributes=0x80) returned 0 [0085.040] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-black_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.041] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.041] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.041] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.041] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.041] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-100.png", dwFileAttributes=0x80) returned 0 [0085.041] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-white_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.041] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.041] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.042] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.042] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.042] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-140.png", dwFileAttributes=0x80) returned 0 [0085.042] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-white_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.042] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.042] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.042] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.043] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.043] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-180.png", dwFileAttributes=0x80) returned 0 [0085.043] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.043] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.043] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.043] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.043] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.044] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-80.png", dwFileAttributes=0x80) returned 0 [0085.044] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-white_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.044] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.044] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.044] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.044] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.045] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-100.png", dwFileAttributes=0x80) returned 0 [0085.045] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.045] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.045] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.046] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.046] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.046] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-140.png", dwFileAttributes=0x80) returned 0 [0085.046] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.046] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.046] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.046] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.051] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.051] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-180.png", dwFileAttributes=0x80) returned 0 [0085.051] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.052] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.052] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.052] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.052] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.052] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-80.png", dwFileAttributes=0x80) returned 0 [0085.052] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.052] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.053] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.053] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.053] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.053] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-100.png", dwFileAttributes=0x80) returned 0 [0085.053] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-black_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.053] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.053] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.054] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.054] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.054] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-140.png", dwFileAttributes=0x80) returned 0 [0085.054] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-black_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.054] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.054] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.054] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.054] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.055] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-180.png", dwFileAttributes=0x80) returned 0 [0085.055] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.055] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.055] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.055] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.055] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.056] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-80.png", dwFileAttributes=0x80) returned 0 [0085.056] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-black_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.056] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.056] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.056] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.056] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.056] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-100.png", dwFileAttributes=0x80) returned 0 [0085.057] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-white_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.057] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.057] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.057] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.057] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.057] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-140.png", dwFileAttributes=0x80) returned 0 [0085.058] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-white_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.058] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.058] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.058] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.058] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.058] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-180.png", dwFileAttributes=0x80) returned 0 [0085.058] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.059] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.059] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.059] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.059] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.059] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-80.png", dwFileAttributes=0x80) returned 0 [0085.059] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-white_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.060] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.060] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.060] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.060] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.060] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-100.png", dwFileAttributes=0x80) returned 0 [0085.061] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.061] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.061] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.061] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.061] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.061] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-140.png", dwFileAttributes=0x80) returned 0 [0085.061] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.062] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.062] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.062] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.062] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.062] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-180.png", dwFileAttributes=0x80) returned 0 [0085.062] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.062] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.063] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.063] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.063] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.063] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-80.png", dwFileAttributes=0x80) returned 0 [0085.063] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.063] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.063] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.064] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.064] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.064] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-100.png", dwFileAttributes=0x80) returned 0 [0085.064] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-black_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.064] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.064] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.065] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.065] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.065] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-140.png", dwFileAttributes=0x80) returned 0 [0085.065] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-black_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.065] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.065] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.065] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.065] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.066] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-180.png", dwFileAttributes=0x80) returned 0 [0085.066] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.066] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.066] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.066] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.066] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.067] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-80.png", dwFileAttributes=0x80) returned 0 [0085.067] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-black_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.067] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.067] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.067] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.067] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.067] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-100.png", dwFileAttributes=0x80) returned 0 [0085.068] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-white_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.068] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.068] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.068] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.068] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.068] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-140.png", dwFileAttributes=0x80) returned 0 [0085.069] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-white_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.069] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.069] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.069] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.069] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.069] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-180.png", dwFileAttributes=0x80) returned 0 [0085.070] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.071] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.071] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.071] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.071] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.071] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-80.png", dwFileAttributes=0x80) returned 0 [0085.072] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-white_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.072] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.072] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.072] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.072] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.072] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-100.png", dwFileAttributes=0x80) returned 0 [0085.073] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.073] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.073] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.073] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.073] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.073] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-140.png", dwFileAttributes=0x80) returned 0 [0085.073] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.074] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.074] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.074] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.079] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.080] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-180.png", dwFileAttributes=0x80) returned 0 [0085.080] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.081] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.081] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.082] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.082] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.082] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-80.png", dwFileAttributes=0x80) returned 0 [0085.082] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.082] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.082] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.083] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.083] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.083] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-100.png", dwFileAttributes=0x80) returned 0 [0085.083] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-black_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.083] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.083] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.083] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.083] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.084] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-140.png", dwFileAttributes=0x80) returned 0 [0085.084] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-black_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.084] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.084] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.084] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.084] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.085] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-180.png", dwFileAttributes=0x80) returned 0 [0085.085] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.085] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.085] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.085] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.085] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.085] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-80.png", dwFileAttributes=0x80) returned 0 [0085.086] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-black_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.086] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.086] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.086] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.086] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.086] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-100.png", dwFileAttributes=0x80) returned 0 [0085.086] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-white_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.087] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.087] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.087] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.087] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.087] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-140.png", dwFileAttributes=0x80) returned 0 [0085.087] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-white_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.087] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.088] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.088] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.088] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.088] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-180.png", dwFileAttributes=0x80) returned 0 [0085.088] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.088] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.088] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.089] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.089] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.089] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-80.png", dwFileAttributes=0x80) returned 0 [0085.089] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-white_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.089] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.089] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.090] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.090] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.090] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-100.png", dwFileAttributes=0x80) returned 0 [0085.090] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.090] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.090] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.090] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.090] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.091] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-140.png", dwFileAttributes=0x80) returned 0 [0085.091] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.092] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.092] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.092] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.092] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.092] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-180.png", dwFileAttributes=0x80) returned 0 [0085.092] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.093] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.093] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.093] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.093] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.093] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-80.png", dwFileAttributes=0x80) returned 0 [0085.093] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.094] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.094] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.094] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.094] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.094] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-100.png", dwFileAttributes=0x80) returned 0 [0085.094] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-black_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.094] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.094] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.095] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.095] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.095] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-140.png", dwFileAttributes=0x80) returned 0 [0085.095] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-black_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.095] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.095] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.096] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.096] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.096] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-180.png", dwFileAttributes=0x80) returned 0 [0085.096] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.097] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.097] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.097] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.097] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.097] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-80.png", dwFileAttributes=0x80) returned 0 [0085.097] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-black_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.097] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.097] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.098] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.098] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.098] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-100.png", dwFileAttributes=0x80) returned 0 [0085.098] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-white_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.098] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.098] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.099] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.099] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.099] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-140.png", dwFileAttributes=0x80) returned 0 [0085.099] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-white_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.099] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.099] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.099] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.099] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.100] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-180.png", dwFileAttributes=0x80) returned 0 [0085.100] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.100] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.100] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.100] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.100] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.101] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-80.png", dwFileAttributes=0x80) returned 0 [0085.101] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-white_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.101] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.101] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.101] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.101] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.101] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-100.png", dwFileAttributes=0x80) returned 0 [0085.102] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.102] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.102] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.102] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.106] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-140.png", dwFileAttributes=0x80) returned 0 [0085.106] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.107] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.107] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.107] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.107] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.107] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-180.png", dwFileAttributes=0x80) returned 0 [0085.108] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.108] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.108] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.108] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.108] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-80.png", dwFileAttributes=0x80) returned 0 [0085.109] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.109] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.109] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.109] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.109] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.109] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-100.png", dwFileAttributes=0x80) returned 0 [0085.109] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-black_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.110] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.110] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.110] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.110] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.110] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-140.png", dwFileAttributes=0x80) returned 0 [0085.110] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-black_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.111] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.111] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.111] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.111] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.111] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-180.png", dwFileAttributes=0x80) returned 0 [0085.111] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.111] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.111] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.112] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.112] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.112] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-80.png", dwFileAttributes=0x80) returned 0 [0085.112] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-black_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.112] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.112] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.113] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.113] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.113] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-100.png", dwFileAttributes=0x80) returned 0 [0085.113] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-white_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.113] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.113] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.113] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.113] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.114] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-140.png", dwFileAttributes=0x80) returned 0 [0085.114] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-white_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.114] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.114] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.114] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.114] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.115] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-180.png", dwFileAttributes=0x80) returned 0 [0085.115] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.115] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.115] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.115] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.115] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.116] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-80.png", dwFileAttributes=0x80) returned 0 [0085.116] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-white_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.116] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.116] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.116] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.116] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.116] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-100.png", dwFileAttributes=0x80) returned 0 [0085.117] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.117] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.117] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.117] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.117] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.117] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-140.png", dwFileAttributes=0x80) returned 0 [0085.118] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.118] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.118] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.118] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.118] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.118] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-180.png", dwFileAttributes=0x80) returned 0 [0085.119] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.119] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.119] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.119] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.119] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.120] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-80.png", dwFileAttributes=0x80) returned 0 [0085.120] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.120] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.120] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.120] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.120] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.121] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-100.png", dwFileAttributes=0x80) returned 0 [0085.121] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-black_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.121] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.121] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.121] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.121] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.122] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-140.png", dwFileAttributes=0x80) returned 0 [0085.122] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-black_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.122] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.122] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.122] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.122] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.123] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-180.png", dwFileAttributes=0x80) returned 0 [0085.123] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.123] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.123] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.123] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.123] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-80.png", dwFileAttributes=0x80) returned 0 [0085.124] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-black_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.124] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.124] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.124] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.124] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-100.png", dwFileAttributes=0x80) returned 0 [0085.125] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-white_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.125] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.125] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.125] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.125] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-140.png", dwFileAttributes=0x80) returned 0 [0085.126] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-white_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.126] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.126] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.126] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.126] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.126] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-180.png", dwFileAttributes=0x80) returned 0 [0085.127] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.127] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.127] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.127] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.127] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-80.png", dwFileAttributes=0x80) returned 0 [0085.128] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-white_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.128] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.128] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.128] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.128] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.128] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-100.png", dwFileAttributes=0x80) returned 0 [0085.128] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.129] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.129] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.129] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.133] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.133] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-140.png", dwFileAttributes=0x80) returned 0 [0085.133] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.133] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.133] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.134] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.134] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-180.png", dwFileAttributes=0x80) returned 0 [0085.134] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.134] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.134] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.134] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.134] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-80.png", dwFileAttributes=0x80) returned 0 [0085.135] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.135] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.135] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.135] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.135] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-100.png", dwFileAttributes=0x80) returned 0 [0085.136] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-black_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.136] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.136] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.136] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.136] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-140.png", dwFileAttributes=0x80) returned 0 [0085.137] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-black_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.137] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.137] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.137] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.137] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.138] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-180.png", dwFileAttributes=0x80) returned 0 [0085.138] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.138] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.138] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.138] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.139] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.140] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-80.png", dwFileAttributes=0x80) returned 0 [0085.140] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-black_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.140] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.140] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.140] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.140] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.141] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-100.png", dwFileAttributes=0x80) returned 0 [0085.141] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-white_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.141] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.141] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.141] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.141] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.142] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-140.png", dwFileAttributes=0x80) returned 0 [0085.142] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-white_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.142] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.142] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.142] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.142] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-180.png", dwFileAttributes=0x80) returned 0 [0085.143] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.143] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.143] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.143] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.143] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-80.png", dwFileAttributes=0x80) returned 0 [0085.144] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-white_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.144] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.144] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.144] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.144] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-100.png", dwFileAttributes=0x80) returned 0 [0085.145] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.145] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.145] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.145] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.145] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.145] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-140.png", dwFileAttributes=0x80) returned 0 [0085.145] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.146] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.146] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.146] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.146] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.146] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-180.png", dwFileAttributes=0x80) returned 0 [0085.146] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.147] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.147] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.147] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.147] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.147] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-80.png", dwFileAttributes=0x80) returned 0 [0085.147] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.147] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.148] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.148] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.148] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.148] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-100.png", dwFileAttributes=0x80) returned 0 [0085.148] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-black_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.148] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.148] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.149] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.149] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.149] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-140.png", dwFileAttributes=0x80) returned 0 [0085.149] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-black_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.149] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.149] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.150] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.150] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-180.png", dwFileAttributes=0x80) returned 0 [0085.150] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.150] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.150] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.150] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.150] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.151] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-80.png", dwFileAttributes=0x80) returned 0 [0085.151] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-black_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.151] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.151] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.151] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.151] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-100.png", dwFileAttributes=0x80) returned 0 [0085.152] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-white_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.152] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.152] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.152] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.152] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-140.png", dwFileAttributes=0x80) returned 0 [0085.153] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-white_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.153] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.153] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.153] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.153] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-180.png", dwFileAttributes=0x80) returned 0 [0085.154] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.154] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.154] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.154] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.155] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.155] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-80.png", dwFileAttributes=0x80) returned 0 [0085.155] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-white_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.155] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.155] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.155] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.155] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-100.png", dwFileAttributes=0x80) returned 0 [0085.156] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.156] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.156] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.156] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.159] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.160] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-140.png", dwFileAttributes=0x80) returned 0 [0085.160] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.160] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.160] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.160] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.160] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-180.png", dwFileAttributes=0x80) returned 0 [0085.161] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.161] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.161] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.161] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.161] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-80.png", dwFileAttributes=0x80) returned 0 [0085.162] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.162] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.162] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.162] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.162] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-100.png", dwFileAttributes=0x80) returned 0 [0085.163] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-black_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.163] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.163] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.163] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.163] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-140.png", dwFileAttributes=0x80) returned 0 [0085.164] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-black_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.164] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.164] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.164] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.164] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.164] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-180.png", dwFileAttributes=0x80) returned 0 [0085.164] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.165] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.165] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.165] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.165] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-80.png", dwFileAttributes=0x80) returned 0 [0085.165] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-black_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.166] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.166] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.166] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.166] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.166] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-100.png", dwFileAttributes=0x80) returned 0 [0085.166] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-white_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.166] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.167] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.167] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.167] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-140.png", dwFileAttributes=0x80) returned 0 [0085.167] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-white_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.167] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.167] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.168] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.168] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-180.png", dwFileAttributes=0x80) returned 0 [0085.168] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.168] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.168] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.169] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.169] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.169] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-80.png", dwFileAttributes=0x80) returned 0 [0085.169] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-white_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.169] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.169] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.170] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.170] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-100.png", dwFileAttributes=0x80) returned 0 [0085.170] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.170] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.171] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.171] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.171] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.171] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-140.png", dwFileAttributes=0x80) returned 0 [0085.171] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.171] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.171] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.172] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.172] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.172] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-180.png", dwFileAttributes=0x80) returned 0 [0085.172] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.172] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.172] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.172] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.172] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.173] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-80.png", dwFileAttributes=0x80) returned 0 [0085.173] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.173] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.173] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.173] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.173] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.174] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-100.png", dwFileAttributes=0x80) returned 0 [0085.174] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.contrast-black_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.174] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.174] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.174] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.174] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.175] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-140.png", dwFileAttributes=0x80) returned 0 [0085.175] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.contrast-black_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.175] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.175] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.175] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.175] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.175] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-180.png", dwFileAttributes=0x80) returned 0 [0085.176] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.176] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.176] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.176] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.176] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.176] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-80.png", dwFileAttributes=0x80) returned 0 [0085.177] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.contrast-black_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.177] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.177] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.177] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.177] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.177] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-100.png", dwFileAttributes=0x80) returned 0 [0085.177] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.contrast-white_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.178] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.178] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.178] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.178] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-140.png", dwFileAttributes=0x80) returned 0 [0085.178] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.contrast-white_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.179] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.179] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.179] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.179] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.179] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-180.png", dwFileAttributes=0x80) returned 0 [0085.179] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.180] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.180] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.180] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.180] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.180] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-80.png", dwFileAttributes=0x80) returned 0 [0085.180] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.contrast-white_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.180] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.180] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.181] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.181] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.181] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.scale-100.png", dwFileAttributes=0x80) returned 0 [0085.181] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.181] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.181] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.182] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.185] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.190] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.scale-140.png", dwFileAttributes=0x80) returned 0 [0085.190] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.191] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.191] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.191] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.191] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.191] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.scale-180.png", dwFileAttributes=0x80) returned 0 [0085.191] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.192] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.192] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.192] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.192] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.192] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.scale-80.png", dwFileAttributes=0x80) returned 0 [0085.192] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.193] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.193] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.193] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.193] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.193] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.contrast-black_scale-100.png", dwFileAttributes=0x80) returned 0 [0085.193] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogo.contrast-black_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.193] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.193] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.194] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.194] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.194] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.contrast-black_scale-140.png", dwFileAttributes=0x80) returned 0 [0085.194] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogo.contrast-black_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.194] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.194] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.195] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.195] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.195] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.contrast-black_scale-180.png", dwFileAttributes=0x80) returned 0 [0085.195] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogo.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.195] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.195] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.195] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.196] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.196] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.contrast-black_scale-80.png", dwFileAttributes=0x80) returned 0 [0085.196] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogo.contrast-black_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.196] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.196] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.197] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.197] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.197] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.contrast-white_scale-100.png", dwFileAttributes=0x80) returned 0 [0085.197] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogo.contrast-white_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.197] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.197] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.198] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.198] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.198] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.contrast-white_scale-140.png", dwFileAttributes=0x80) returned 0 [0085.198] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogo.contrast-white_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.199] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.199] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.199] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.199] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.199] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.contrast-white_scale-180.png", dwFileAttributes=0x80) returned 0 [0085.199] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogo.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.200] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.200] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.200] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.200] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.200] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.contrast-white_scale-80.png", dwFileAttributes=0x80) returned 0 [0085.200] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogo.contrast-white_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.200] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.200] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.201] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.201] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.202] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.scale-100.png", dwFileAttributes=0x80) returned 0 [0085.202] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogo.scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.203] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.203] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.203] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.203] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.203] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.scale-140.png", dwFileAttributes=0x80) returned 0 [0085.203] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogo.scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.204] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.204] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.204] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.204] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.204] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.scale-180.png", dwFileAttributes=0x80) returned 0 [0085.204] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogo.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.204] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.205] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.205] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.205] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.205] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.scale-80.png", dwFileAttributes=0x80) returned 0 [0085.205] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogo.scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.206] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.206] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.206] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.206] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.206] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.contrast-black_scale-100.png", dwFileAttributes=0x80) returned 0 [0085.207] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogosmall.contrast-black_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.207] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.207] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.207] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.207] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.207] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.contrast-black_scale-140.png", dwFileAttributes=0x80) returned 0 [0085.208] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogosmall.contrast-black_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.208] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.208] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.208] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.208] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.208] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.contrast-black_scale-180.png", dwFileAttributes=0x80) returned 0 [0085.209] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogosmall.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.209] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.209] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.209] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.209] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.209] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.contrast-black_scale-80.png", dwFileAttributes=0x80) returned 0 [0085.209] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogosmall.contrast-black_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.210] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.210] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.210] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.210] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.210] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.contrast-white_scale-100.png", dwFileAttributes=0x80) returned 0 [0085.210] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogosmall.contrast-white_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.211] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.211] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.211] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.211] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.211] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.contrast-white_scale-140.png", dwFileAttributes=0x80) returned 0 [0085.211] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogosmall.contrast-white_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.211] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.211] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.212] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.212] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.212] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.contrast-white_scale-180.png", dwFileAttributes=0x80) returned 0 [0085.212] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogosmall.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.212] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.212] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.213] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.213] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.213] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.contrast-white_scale-80.png", dwFileAttributes=0x80) returned 0 [0085.213] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogosmall.contrast-white_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.213] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.213] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.213] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.218] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.219] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.scale-100.png", dwFileAttributes=0x80) returned 0 [0085.219] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogosmall.scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.219] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.219] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.219] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.219] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.220] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.scale-140.png", dwFileAttributes=0x80) returned 0 [0085.220] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogosmall.scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.220] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.220] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.220] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.220] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.220] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.scale-180.png", dwFileAttributes=0x80) returned 0 [0085.221] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogosmall.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.221] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.221] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.221] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.221] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.221] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.scale-80.png", dwFileAttributes=0x80) returned 0 [0085.222] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogosmall.scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.222] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.222] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.222] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.222] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.222] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.contrast-black_scale-100.png", dwFileAttributes=0x80) returned 0 [0085.223] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologo.contrast-black_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.223] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.223] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.223] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.223] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.223] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.contrast-black_scale-140.png", dwFileAttributes=0x80) returned 0 [0085.223] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologo.contrast-black_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.224] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.224] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.224] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.224] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.224] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.contrast-black_scale-180.png", dwFileAttributes=0x80) returned 0 [0085.224] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologo.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.224] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.225] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.225] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.225] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.225] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.contrast-black_scale-80.png", dwFileAttributes=0x80) returned 0 [0085.225] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologo.contrast-black_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.225] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.225] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.226] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.226] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.226] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.contrast-white_scale-100.png", dwFileAttributes=0x80) returned 0 [0085.226] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologo.contrast-white_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.226] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.226] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.226] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.226] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.227] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.contrast-white_scale-140.png", dwFileAttributes=0x80) returned 0 [0085.227] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologo.contrast-white_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.227] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.227] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.227] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.227] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.228] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.contrast-white_scale-180.png", dwFileAttributes=0x80) returned 0 [0085.228] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologo.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.228] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.228] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.228] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.228] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.229] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.contrast-white_scale-80.png", dwFileAttributes=0x80) returned 0 [0085.229] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologo.contrast-white_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.229] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.229] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.229] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.229] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.229] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.scale-100.png", dwFileAttributes=0x80) returned 0 [0085.230] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologo.scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.230] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.230] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.230] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.230] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.230] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.scale-140.png", dwFileAttributes=0x80) returned 0 [0085.230] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologo.scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.231] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.231] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.231] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.231] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.231] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.scale-180.png", dwFileAttributes=0x80) returned 0 [0085.231] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologo.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.232] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.232] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.232] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.232] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.233] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.scale-80.png", dwFileAttributes=0x80) returned 0 [0085.233] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologo.scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.234] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.234] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.234] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.234] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.234] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.contrast-black_scale-100.png", dwFileAttributes=0x80) returned 0 [0085.234] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologosmall.contrast-black_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.235] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.235] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.235] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.235] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.235] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.contrast-black_scale-140.png", dwFileAttributes=0x80) returned 0 [0085.235] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologosmall.contrast-black_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.235] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.235] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.236] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.236] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.236] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.contrast-black_scale-180.png", dwFileAttributes=0x80) returned 0 [0085.236] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologosmall.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.236] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.236] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.237] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.237] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.237] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.contrast-black_scale-80.png", dwFileAttributes=0x80) returned 0 [0085.237] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologosmall.contrast-black_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.237] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.237] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.238] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.238] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.238] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.contrast-white_scale-100.png", dwFileAttributes=0x80) returned 0 [0085.238] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologosmall.contrast-white_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.238] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.238] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.238] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.238] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.239] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.contrast-white_scale-140.png", dwFileAttributes=0x80) returned 0 [0085.239] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologosmall.contrast-white_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.239] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.239] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.239] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.239] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.240] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.contrast-white_scale-180.png", dwFileAttributes=0x80) returned 0 [0085.240] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologosmall.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.241] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.241] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.242] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.242] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.242] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.contrast-white_scale-80.png", dwFileAttributes=0x80) returned 0 [0085.243] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologosmall.contrast-white_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.243] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.243] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.243] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.248] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.249] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.scale-100.png", dwFileAttributes=0x80) returned 0 [0085.249] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologosmall.scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.249] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.249] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.249] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.249] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.250] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.scale-140.png", dwFileAttributes=0x80) returned 0 [0085.250] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologosmall.scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.250] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.250] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.250] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.250] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.250] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.scale-180.png", dwFileAttributes=0x80) returned 0 [0085.251] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologosmall.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.251] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.251] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.251] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.251] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.251] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.scale-80.png", dwFileAttributes=0x80) returned 0 [0085.252] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologosmall.scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.252] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.252] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.252] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.252] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.252] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.contrast-black_scale-100.png", dwFileAttributes=0x80) returned 0 [0085.253] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogo.contrast-black_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.253] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.253] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.253] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.253] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.253] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.contrast-black_scale-140.png", dwFileAttributes=0x80) returned 0 [0085.253] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogo.contrast-black_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.254] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.254] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.254] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.254] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.254] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.contrast-black_scale-180.png", dwFileAttributes=0x80) returned 0 [0085.254] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogo.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.254] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.255] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.255] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.255] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.255] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.contrast-black_scale-80.png", dwFileAttributes=0x80) returned 0 [0085.255] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogo.contrast-black_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.255] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.255] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.256] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.256] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.256] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.contrast-white_scale-100.png", dwFileAttributes=0x80) returned 0 [0085.256] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogo.contrast-white_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.256] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.256] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.257] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.257] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.257] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.contrast-white_scale-140.png", dwFileAttributes=0x80) returned 0 [0085.257] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogo.contrast-white_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.257] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.257] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.257] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.257] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.258] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.contrast-white_scale-180.png", dwFileAttributes=0x80) returned 0 [0085.258] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogo.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.258] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.258] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.258] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.258] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.259] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.contrast-white_scale-80.png", dwFileAttributes=0x80) returned 0 [0085.259] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogo.contrast-white_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.259] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.259] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.259] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.259] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.259] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.scale-100.png", dwFileAttributes=0x80) returned 0 [0085.260] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogo.scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.260] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.260] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.260] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.260] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.260] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.scale-140.png", dwFileAttributes=0x80) returned 0 [0085.261] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogo.scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.261] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.261] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.261] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.261] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.261] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.scale-180.png", dwFileAttributes=0x80) returned 0 [0085.261] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogo.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.262] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.262] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.262] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.262] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.262] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.scale-80.png", dwFileAttributes=0x80) returned 0 [0085.262] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogo.scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.263] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.263] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.263] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.263] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.263] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.contrast-black_scale-100.png", dwFileAttributes=0x80) returned 0 [0085.263] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogosmall.contrast-black_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.264] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.264] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.264] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.264] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.264] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.contrast-black_scale-140.png", dwFileAttributes=0x80) returned 0 [0085.264] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogosmall.contrast-black_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.265] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.265] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.265] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.265] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.265] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.contrast-black_scale-180.png", dwFileAttributes=0x80) returned 0 [0085.266] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogosmall.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.267] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.267] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.267] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.267] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.267] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.contrast-black_scale-80.png", dwFileAttributes=0x80) returned 0 [0085.267] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogosmall.contrast-black_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.268] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.268] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.268] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.268] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.268] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.contrast-white_scale-100.png", dwFileAttributes=0x80) returned 0 [0085.269] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogosmall.contrast-white_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.269] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.269] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.269] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.269] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.269] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.contrast-white_scale-140.png", dwFileAttributes=0x80) returned 0 [0085.270] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogosmall.contrast-white_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.270] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.270] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.270] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.270] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.270] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.contrast-white_scale-180.png", dwFileAttributes=0x80) returned 0 [0085.270] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogosmall.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.271] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.271] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.271] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.271] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.271] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.contrast-white_scale-80.png", dwFileAttributes=0x80) returned 0 [0085.271] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogosmall.contrast-white_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.272] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.272] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.272] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.275] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.276] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.scale-100.png", dwFileAttributes=0x80) returned 0 [0085.276] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogosmall.scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.276] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.276] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.276] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.276] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.277] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.scale-140.png", dwFileAttributes=0x80) returned 0 [0085.277] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogosmall.scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.277] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.277] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.277] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.277] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.278] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.scale-180.png", dwFileAttributes=0x80) returned 0 [0085.278] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogosmall.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.279] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.279] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.279] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.279] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.279] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.scale-80.png", dwFileAttributes=0x80) returned 0 [0085.280] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogosmall.scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.280] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.280] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.280] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.280] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.280] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogo.contrast-black_scale-100.png", dwFileAttributes=0x80) returned 0 [0085.280] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winwordlogo.contrast-black_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.281] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.281] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.281] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.281] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.281] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogo.contrast-black_scale-140.png", dwFileAttributes=0x80) returned 0 [0085.281] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogo.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winwordlogo.contrast-black_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.282] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.282] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.282] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.282] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogo.contrast-black_scale-180.png", dwFileAttributes=0x80) returned 0 [0085.282] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winwordlogo.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.282] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.283] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.283] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.283] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.283] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogo.contrast-black_scale-80.png", dwFileAttributes=0x80) returned 0 [0085.283] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogo.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winwordlogo.contrast-black_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.283] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.283] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.284] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.284] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.284] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogo.contrast-white_scale-100.png", dwFileAttributes=0x80) returned 0 [0085.284] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winwordlogo.contrast-white_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.284] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.284] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.285] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.285] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.285] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogo.contrast-white_scale-140.png", dwFileAttributes=0x80) returned 0 [0085.285] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogo.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winwordlogo.contrast-white_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.285] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.285] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.286] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.286] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.286] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogo.contrast-white_scale-180.png", dwFileAttributes=0x80) returned 0 [0085.286] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winwordlogo.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.286] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.286] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.286] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.286] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.287] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogo.contrast-white_scale-80.png", dwFileAttributes=0x80) returned 0 [0085.287] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogo.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winwordlogo.contrast-white_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.287] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.287] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.287] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.287] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.288] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogo.scale-100.png", dwFileAttributes=0x80) returned 0 [0085.288] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogo.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winwordlogo.scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.288] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.288] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.288] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.300] SetLastError (dwErrCode=0x0) [0085.300] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.304] GetLastError () returned 0x5 [0085.304] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0085.304] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.304] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.304] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.304] SetLastError (dwErrCode=0x0) [0085.304] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.304] GetLastError () returned 0x5 [0085.304] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0085.304] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.304] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0450 [0085.305] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.305] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.305] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.305] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\bundle.js", dwFileAttributes=0x80) returned 0 [0085.306] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\bundle.js" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\bundle.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.306] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.307] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.307] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.307] SetLastError (dwErrCode=0x0) [0085.307] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.307] GetLastError () returned 0x5 [0085.307] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.307] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.307] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0bd0 [0085.307] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.308] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.308] SetLastError (dwErrCode=0x0) [0085.308] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.308] GetLastError () returned 0x5 [0085.308] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0085.308] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.308] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0810 [0085.309] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0085.313] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0085.313] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.314] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\add.png", dwFileAttributes=0x80) returned 0 [0085.315] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\add.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\add.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.315] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.315] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.316] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0085.316] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.316] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\ArrowRight.png", dwFileAttributes=0x80) returned 0 [0085.317] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\ArrowRight.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\arrowright.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.318] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.318] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.318] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0085.318] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.319] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\attachment.png", dwFileAttributes=0x80) returned 0 [0085.319] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\attachment.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\attachment.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.319] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.319] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.319] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0085.319] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.320] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\cancel.png", dwFileAttributes=0x80) returned 0 [0085.320] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\cancel.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\cancel.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.320] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.320] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.320] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0085.320] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.320] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\chat.png", dwFileAttributes=0x80) returned 0 [0085.321] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\chat.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\chat.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.321] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.321] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.322] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0085.322] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.322] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\chat_small.png", dwFileAttributes=0x80) returned 0 [0085.322] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\chat_small.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\chat_small.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.323] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.323] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.323] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0085.323] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\checkmark.png", dwFileAttributes=0x80) returned 0 [0085.324] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\checkmark.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\checkmark.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.324] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.324] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.324] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0085.324] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.325] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\Completed.png", dwFileAttributes=0x80) returned 0 [0085.325] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\Completed.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\completed.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.325] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.325] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.326] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0085.326] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.326] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\DownChevron.png", dwFileAttributes=0x80) returned 0 [0085.326] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\DownChevron.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\downchevron.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.326] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.326] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.328] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0085.328] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.328] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\edit.png", dwFileAttributes=0x80) returned 0 [0085.328] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\edit.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\edit.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.329] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.329] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.329] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0085.329] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.329] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\file_blank.png", dwFileAttributes=0x80) returned 0 [0085.329] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\file_blank.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\file_blank.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.330] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.330] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.330] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0085.330] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.330] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\file_docx.png", dwFileAttributes=0x80) returned 0 [0085.330] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\file_docx.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\file_docx.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.330] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.330] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.331] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0085.331] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.331] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\file_eml.png", dwFileAttributes=0x80) returned 0 [0085.331] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\file_eml.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\file_eml.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.331] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.331] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.332] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0085.332] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.332] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\file_folder.png", dwFileAttributes=0x80) returned 0 [0085.332] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\file_folder.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\file_folder.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.332] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.332] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.332] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0085.333] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.333] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\file_html.png", dwFileAttributes=0x80) returned 0 [0085.333] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\file_html.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\file_html.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.333] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.333] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.333] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0085.333] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\file_jpg.png", dwFileAttributes=0x80) returned 0 [0085.334] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\file_jpg.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\file_jpg.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.335] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.335] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.335] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0085.335] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\file_onenote.png", dwFileAttributes=0x80) returned 0 [0085.336] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\file_onenote.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\file_onenote.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.336] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.336] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.336] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0085.336] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.336] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\file_pdf.png", dwFileAttributes=0x80) returned 0 [0085.337] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\file_pdf.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\file_pdf.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.337] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.337] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.337] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0085.337] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.337] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\file_pptx.png", dwFileAttributes=0x80) returned 0 [0085.338] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\file_pptx.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\file_pptx.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.338] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.338] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.338] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0085.338] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.338] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\file_visio.png", dwFileAttributes=0x80) returned 0 [0085.338] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\file_visio.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\file_visio.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.339] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.339] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.339] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0085.339] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.339] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\file_xlsx.png", dwFileAttributes=0x80) returned 0 [0085.339] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\file_xlsx.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\file_xlsx.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.340] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.340] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.340] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0085.340] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.340] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\file_xml.png", dwFileAttributes=0x80) returned 0 [0085.340] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\file_xml.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\file_xml.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.340] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.341] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.341] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0085.341] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.341] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\file_zip.png", dwFileAttributes=0x80) returned 0 [0085.341] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\file_zip.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\file_zip.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.342] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.342] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.342] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0085.342] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.342] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\LeftChevron.png", dwFileAttributes=0x80) returned 0 [0085.342] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\LeftChevron.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\leftchevron.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.343] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.343] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.343] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0085.343] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.343] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\linkedin_ghost_company.png", dwFileAttributes=0x80) returned 0 [0085.344] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\linkedin_ghost_company.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\linkedin_ghost_company.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.344] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.344] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.344] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0085.344] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.344] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\linkedin_ghost_profile.png", dwFileAttributes=0x80) returned 0 [0085.345] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\linkedin_ghost_profile.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\linkedin_ghost_profile.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.345] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.345] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.346] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0085.346] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.346] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\linkedin_ghost_profile_large.png", dwFileAttributes=0x80) returned 0 [0085.346] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\linkedin_ghost_profile_large.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\linkedin_ghost_profile_large.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.346] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.346] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.346] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0085.347] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.347] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\linkedin_ghost_school.png", dwFileAttributes=0x80) returned 0 [0085.347] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\linkedin_ghost_school.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\linkedin_ghost_school.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.347] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.347] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.347] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0085.347] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.348] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\linkedin_logo.png", dwFileAttributes=0x80) returned 0 [0085.348] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\linkedin_logo.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\linkedin_logo.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.349] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.349] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.349] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0085.349] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.349] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\linkedin_logo_large.png", dwFileAttributes=0x80) returned 0 [0085.349] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\linkedin_logo_large.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\linkedin_logo_large.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.349] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.349] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.350] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0085.350] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.350] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\linkedin_logo_small.png", dwFileAttributes=0x80) returned 0 [0085.351] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\linkedin_logo_small.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\linkedin_logo_small.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.351] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.351] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.351] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0085.352] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.352] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\location.png", dwFileAttributes=0x80) returned 0 [0085.352] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\location.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\location.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.352] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.352] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.352] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0085.352] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.353] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\mail.png", dwFileAttributes=0x80) returned 0 [0085.353] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\mail.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\mail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.353] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.353] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.353] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0085.353] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.354] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\mail_small.png", dwFileAttributes=0x80) returned 0 [0085.354] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\mail_small.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\mail_small.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.354] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.354] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.354] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0085.354] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.355] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\PersonaStatusAway.png", dwFileAttributes=0x80) returned 0 [0085.355] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\PersonaStatusAway.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\personastatusaway.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.355] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.355] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.355] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0085.355] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.356] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\PersonaStatusBlocked.png", dwFileAttributes=0x80) returned 0 [0085.356] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\PersonaStatusBlocked.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\personastatusblocked.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.356] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.356] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.357] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0085.357] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.357] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\PersonaStatusBusy.png", dwFileAttributes=0x80) returned 0 [0085.357] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\PersonaStatusBusy.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\personastatusbusy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.358] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.358] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.358] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0085.358] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.358] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\PersonaStatusDoNotDisturb.png", dwFileAttributes=0x80) returned 0 [0085.358] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\PersonaStatusDoNotDisturb.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\personastatusdonotdisturb.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.358] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.358] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.359] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0085.359] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.359] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\PersonaStatusOffline.png", dwFileAttributes=0x80) returned 0 [0085.360] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\PersonaStatusOffline.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\personastatusoffline.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.360] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.360] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.360] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0085.360] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.360] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\PersonaStatusOnline.png", dwFileAttributes=0x80) returned 0 [0085.361] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\PersonaStatusOnline.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\personastatusonline.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.361] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.361] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.361] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0085.361] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.361] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\phone.png", dwFileAttributes=0x80) returned 0 [0085.361] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\phone.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\phone.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.362] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.362] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.362] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0085.362] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.362] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\phone_small.png", dwFileAttributes=0x80) returned 0 [0085.362] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\phone_small.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\phone_small.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.363] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.363] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.363] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0085.363] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.363] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\RightChevron.png", dwFileAttributes=0x80) returned 0 [0085.363] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\RightChevron.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\rightchevron.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.363] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.364] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.364] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0085.364] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.364] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\shared.png", dwFileAttributes=0x80) returned 0 [0085.364] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\shared.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\shared.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.364] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.364] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.365] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0085.365] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0085.365] SetLastError (dwErrCode=0x0) [0085.365] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.368] GetLastError () returned 0x5 [0085.368] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0085.368] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.368] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0085.368] FindClose (in: hFindFile=0xd7079a0bd0 | out: hFindFile=0xd7079a0bd0) returned 1 [0085.368] SetLastError (dwErrCode=0x0) [0085.368] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.369] GetLastError () returned 0x5 [0085.369] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.369] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.369] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0085.369] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0085.369] SetLastError (dwErrCode=0x0) [0085.369] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.369] GetLastError () returned 0x5 [0085.369] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0085.369] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.369] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.369] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.370] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpklegal.txt", dwFileAttributes=0x80) returned 0 [0085.370] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpklegal.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpklegal.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.370] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.370] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.370] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.370] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.370] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.370] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.371] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync.ico", dwFileAttributes=0x80) returned 0 [0085.371] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync.ico" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lync.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.371] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.371] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.372] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.372] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.372] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Lync2013_Third_Party_Notices.txt", dwFileAttributes=0x80) returned 0 [0085.372] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Lync2013_Third_Party_Notices.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lync2013_third_party_notices.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.372] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.372] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.373] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.373] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.373] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.373] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.373] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.373] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.373] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.373] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.373] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MANIFEST.XML", dwFileAttributes=0x80) returned 0 [0085.374] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MANIFEST.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\manifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.374] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.374] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.374] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.374] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.374] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.374] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.374] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.374] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\McePerfCtr.man", dwFileAttributes=0x80) returned 0 [0085.375] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\McePerfCtr.man" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mceperfctr.man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.375] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.375] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.376] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.376] SetLastError (dwErrCode=0x0) [0085.376] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.376] GetLastError () returned 0x5 [0085.376] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0085.376] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.376] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0e70 [0085.378] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.378] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.379] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.379] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\APPLAUSE.WAV", dwFileAttributes=0x80) returned 0 [0085.380] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\APPLAUSE.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\applause.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.381] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.381] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.381] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.381] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.381] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\ARROW.WAV", dwFileAttributes=0x80) returned 0 [0085.382] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\ARROW.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\arrow.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.382] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.382] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.383] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.383] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.383] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\BOMB.WAV", dwFileAttributes=0x80) returned 0 [0085.383] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\BOMB.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\bomb.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.384] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.384] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.384] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.384] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.384] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\BREEZE.WAV", dwFileAttributes=0x80) returned 0 [0085.385] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\BREEZE.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\breeze.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.385] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.385] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.385] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.385] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.386] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\CAMERA.WAV", dwFileAttributes=0x80) returned 0 [0085.386] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\CAMERA.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\camera.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.386] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.386] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.386] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.386] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.386] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\CASHREG.WAV", dwFileAttributes=0x80) returned 0 [0085.387] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\CASHREG.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\cashreg.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.387] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.387] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.387] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.387] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.387] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\CHIMES.WAV", dwFileAttributes=0x80) returned 0 [0085.388] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\CHIMES.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\chimes.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.388] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.388] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.388] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.388] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.388] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\CLICK.WAV", dwFileAttributes=0x80) returned 0 [0085.388] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\CLICK.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\click.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.389] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.389] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.389] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.389] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.390] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\COIN.WAV", dwFileAttributes=0x80) returned 0 [0085.391] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\COIN.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\coin.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.391] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.391] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.391] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.391] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.391] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\DefaultHold.wma", dwFileAttributes=0x80) returned 0 [0085.391] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\DefaultHold.wma" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\defaulthold.wma"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.392] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.392] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.392] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.392] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.392] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\DRUMROLL.WAV", dwFileAttributes=0x80) returned 0 [0085.392] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\DRUMROLL.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\drumroll.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.393] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.393] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.393] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.393] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.393] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\EXPLODE.WAV", dwFileAttributes=0x80) returned 0 [0085.394] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\EXPLODE.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\explode.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.394] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.394] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.394] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.394] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\HAMMER.WAV", dwFileAttributes=0x80) returned 0 [0085.395] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\HAMMER.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\hammer.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.395] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.395] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.395] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.395] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.396] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LASER.WAV", dwFileAttributes=0x80) returned 0 [0085.396] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LASER.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\laser.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.396] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.396] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.396] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.396] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.396] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_abbrdialtone.wav", dwFileAttributes=0x80) returned 0 [0085.397] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_abbrdialtone.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_abbrdialtone.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.397] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.397] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.397] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.397] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.397] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_ActivePresenterChange.wav", dwFileAttributes=0x80) returned 0 [0085.398] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_ActivePresenterChange.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_activepresenterchange.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.398] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.398] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.398] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.398] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.398] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_appinvite.wav", dwFileAttributes=0x80) returned 0 [0085.399] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_appinvite.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_appinvite.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.399] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.399] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.399] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.399] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.399] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_busy.wav", dwFileAttributes=0x80) returned 0 [0085.400] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_busy.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_busy.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.400] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.400] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.400] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.400] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.400] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_callended.wav", dwFileAttributes=0x80) returned 0 [0085.400] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_callended.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_callended.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.401] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.401] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.401] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.401] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.401] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_ChangeModality.wav", dwFileAttributes=0x80) returned 0 [0085.402] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_ChangeModality.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_changemodality.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.402] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.402] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.402] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.402] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.402] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_connecting.wav", dwFileAttributes=0x80) returned 0 [0085.403] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_connecting.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_connecting.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.403] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.403] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.404] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.404] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.404] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dialtone.wav", dwFileAttributes=0x80) returned 0 [0085.404] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dialtone.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_dialtone.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.405] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.405] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.405] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.405] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.405] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmf0.wav", dwFileAttributes=0x80) returned 0 [0085.405] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmf0.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_dtmf0.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.405] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.405] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.406] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.406] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmf1.wav", dwFileAttributes=0x80) returned 0 [0085.406] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmf1.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_dtmf1.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.406] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.406] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.407] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.407] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.407] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmf2.wav", dwFileAttributes=0x80) returned 0 [0085.408] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmf2.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_dtmf2.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.408] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.408] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.408] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.408] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.408] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmf3.wav", dwFileAttributes=0x80) returned 0 [0085.408] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmf3.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_dtmf3.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.409] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.409] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.409] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.409] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.409] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmf4.wav", dwFileAttributes=0x80) returned 0 [0085.409] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmf4.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_dtmf4.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.410] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.410] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.410] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.410] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.410] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmf5.wav", dwFileAttributes=0x80) returned 0 [0085.410] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmf5.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_dtmf5.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.410] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.411] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.411] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.411] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.411] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmf6.wav", dwFileAttributes=0x80) returned 0 [0085.411] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmf6.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_dtmf6.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.411] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.411] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.412] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.412] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.412] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmf7.wav", dwFileAttributes=0x80) returned 0 [0085.412] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmf7.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_dtmf7.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.413] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.413] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.413] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.413] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.413] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmf8.wav", dwFileAttributes=0x80) returned 0 [0085.413] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmf8.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_dtmf8.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.414] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.414] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.414] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.415] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.415] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmf9.wav", dwFileAttributes=0x80) returned 0 [0085.415] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmf9.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_dtmf9.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.415] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.415] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.416] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.416] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.416] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmfpound.wav", dwFileAttributes=0x80) returned 0 [0085.417] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmfpound.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_dtmfpound.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.417] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.417] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.417] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.417] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.417] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmfstar.wav", dwFileAttributes=0x80) returned 0 [0085.417] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmfstar.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_dtmfstar.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.418] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.418] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.418] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.418] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.418] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_fastbusy.wav", dwFileAttributes=0x80) returned 0 [0085.418] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_fastbusy.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_fastbusy.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.419] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.419] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.419] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.419] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.419] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_fsringing.wav", dwFileAttributes=0x80) returned 0 [0085.419] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_fsringing.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_fsringing.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.419] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.420] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.420] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.420] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.420] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_howler.wav", dwFileAttributes=0x80) returned 0 [0085.420] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_howler.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_howler.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.421] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.421] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.421] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.421] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.421] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_iminvite.wav", dwFileAttributes=0x80) returned 0 [0085.421] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_iminvite.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_iminvite.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.421] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.421] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.422] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.422] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.422] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_istyping.wav", dwFileAttributes=0x80) returned 0 [0085.423] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_istyping.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_istyping.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.423] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.423] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.423] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.423] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.423] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_joinedconference.wav", dwFileAttributes=0x80) returned 0 [0085.424] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_joinedconference.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_joinedconference.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.424] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.424] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.424] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.424] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.424] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_muting.wav", dwFileAttributes=0x80) returned 0 [0085.424] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_muting.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_muting.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.425] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.425] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.425] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.425] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.425] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_newim.wav", dwFileAttributes=0x80) returned 0 [0085.425] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_newim.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_newim.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.425] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.425] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.426] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.426] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.426] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_onhold.wav", dwFileAttributes=0x80) returned 0 [0085.426] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_onhold.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_onhold.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.426] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.426] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.427] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.427] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.427] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_presence.wav", dwFileAttributes=0x80) returned 0 [0085.427] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_presence.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_presence.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.427] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.427] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.428] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.428] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.428] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_redirect.wav", dwFileAttributes=0x80) returned 0 [0085.428] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_redirect.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_redirect.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.429] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.429] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.429] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.429] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.429] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_ringback.wav", dwFileAttributes=0x80) returned 0 [0085.429] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_ringback.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_ringback.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.430] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.430] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.430] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.430] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.430] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_ringing.wav", dwFileAttributes=0x80) returned 0 [0085.430] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_ringing.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_ringing.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.430] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.430] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.431] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.431] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.431] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_ringtone2.wav", dwFileAttributes=0x80) returned 0 [0085.431] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_ringtone2.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_ringtone2.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.431] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.431] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.432] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.432] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.432] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_ringtone3.wav", dwFileAttributes=0x80) returned 0 [0085.432] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_ringtone3.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_ringtone3.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.433] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.433] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.433] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.433] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_ringtone4.wav", dwFileAttributes=0x80) returned 0 [0085.433] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_ringtone4.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_ringtone4.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.434] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.434] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.434] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.434] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.434] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_ringtone5.wav", dwFileAttributes=0x80) returned 0 [0085.434] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_ringtone5.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_ringtone5.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.434] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.434] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.435] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.435] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.435] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_ringtone6.wav", dwFileAttributes=0x80) returned 0 [0085.435] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_ringtone6.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_ringtone6.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.436] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.436] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.436] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.436] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.436] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_ringtone7.wav", dwFileAttributes=0x80) returned 0 [0085.436] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_ringtone7.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_ringtone7.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.437] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.437] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.437] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.437] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.437] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_secondcall.wav", dwFileAttributes=0x80) returned 0 [0085.438] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_secondcall.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_secondcall.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.439] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.439] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.439] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.439] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.439] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_untag.wav", dwFileAttributes=0x80) returned 0 [0085.440] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_untag.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_untag.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.440] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.440] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.440] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.440] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.440] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_videoadded.wav", dwFileAttributes=0x80) returned 0 [0085.440] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_videoadded.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_videoadded.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.441] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.441] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.441] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.441] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.441] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_videocall.wav", dwFileAttributes=0x80) returned 0 [0085.441] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_videocall.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_videocall.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.442] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.442] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.442] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.442] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.442] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\PUSH.WAV", dwFileAttributes=0x80) returned 0 [0085.442] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\PUSH.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\push.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.442] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.443] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.443] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.443] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.443] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\SUCTION.WAV", dwFileAttributes=0x80) returned 0 [0085.444] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\SUCTION.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\suction.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.444] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.444] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.444] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.444] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.444] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\TYPE.WAV", dwFileAttributes=0x80) returned 0 [0085.445] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\TYPE.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\type.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.446] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.446] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.446] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.446] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.446] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\VOLTAGE.WAV", dwFileAttributes=0x80) returned 0 [0085.447] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\VOLTAGE.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\voltage.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.447] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.447] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.447] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.447] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\WHOOSH.WAV", dwFileAttributes=0x80) returned 0 [0085.448] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\WHOOSH.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\whoosh.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.448] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.448] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.448] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.448] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.448] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\WIND.WAV", dwFileAttributes=0x80) returned 0 [0085.448] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\WIND.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\wind.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.449] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.449] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.449] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0085.449] FindClose (in: hFindFile=0xd7079a0e70 | out: hFindFile=0xd7079a0e70) returned 1 [0085.450] SetLastError (dwErrCode=0x0) [0085.450] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.453] GetLastError () returned 0x5 [0085.453] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0085.453] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.453] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.453] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.453] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.453] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.453] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Model.zip", dwFileAttributes=0x80) returned 0 [0085.454] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Model.zip" (normalized: "c:\\program files\\microsoft office\\root\\office16\\microsoft.lync.model.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.455] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.455] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.455] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.455] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.456] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Utilities.Controls.zip", dwFileAttributes=0x80) returned 0 [0085.456] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Utilities.Controls.zip" (normalized: "c:\\program files\\microsoft office\\root\\office16\\microsoft.lync.utilities.controls.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.456] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.456] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.456] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.456] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.457] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Utilities.zip", dwFileAttributes=0x80) returned 0 [0085.457] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Utilities.zip" (normalized: "c:\\program files\\microsoft office\\root\\office16\\microsoft.lync.utilities.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.457] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.457] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.457] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.457] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.457] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.457] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.457] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.459] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.459] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.459] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.459] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.459] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.460] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MLCFG32.CPL", dwFileAttributes=0x80) returned 0 [0085.460] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MLCFG32.CPL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mlcfg32.cpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.460] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.460] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.460] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.460] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.461] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MML2OMML.XSL", dwFileAttributes=0x80) returned 0 [0085.461] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MML2OMML.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mml2omml.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.462] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.462] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.462] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.462] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.462] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.462] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.462] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.462] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSACC.OLB", dwFileAttributes=0x80) returned 0 [0085.462] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSACC.OLB" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msacc.olb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.463] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.463] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.463] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.463] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.463] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.463] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.463] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSACCESS.VisualElementsManifest.xml", dwFileAttributes=0x80) returned 0 [0085.464] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSACCESS.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msaccess.visualelementsmanifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.464] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.464] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.464] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.464] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.464] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.464] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.464] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mscss7cm_en.dub", dwFileAttributes=0x80) returned 0 [0085.465] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mscss7cm_en.dub" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mscss7cm_en.dub"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.465] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.466] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.466] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.466] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.466] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mscss7cm_es.dub", dwFileAttributes=0x80) returned 0 [0085.466] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mscss7cm_es.dub" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mscss7cm_es.dub"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.467] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.467] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.467] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.467] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mscss7cm_fr.dub", dwFileAttributes=0x80) returned 0 [0085.468] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mscss7cm_fr.dub" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mscss7cm_fr.dub"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.468] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.468] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.468] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.468] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.468] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.468] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.468] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.468] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mscss7wre_en.dub", dwFileAttributes=0x80) returned 0 [0085.469] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mscss7wre_en.dub" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mscss7wre_en.dub"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.469] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.469] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.469] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.469] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.469] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mscss7wre_es.dub", dwFileAttributes=0x80) returned 0 [0085.469] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mscss7wre_es.dub" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mscss7wre_es.dub"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.470] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.470] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.470] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.470] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.470] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mscss7wre_fr.dub", dwFileAttributes=0x80) returned 0 [0085.471] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mscss7wre_fr.dub" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mscss7wre_fr.dub"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.471] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.471] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.471] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.471] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.471] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.472] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mset7db.kic", dwFileAttributes=0x80) returned 0 [0085.472] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mset7db.kic" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mset7db.kic"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.472] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.472] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.473] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.473] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.473] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mset7en.kic", dwFileAttributes=0x80) returned 0 [0085.473] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mset7en.kic" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mset7en.kic"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.473] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.473] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.474] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.474] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.474] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mset7es.kic", dwFileAttributes=0x80) returned 0 [0085.474] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mset7es.kic" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mset7es.kic"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.474] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.474] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.474] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.474] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.475] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mset7fr.kic", dwFileAttributes=0x80) returned 0 [0085.475] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mset7fr.kic" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mset7fr.kic"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.476] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.476] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.476] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.476] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.476] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mset7ge.kic", dwFileAttributes=0x80) returned 0 [0085.476] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mset7ge.kic" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mset7ge.kic"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.476] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.477] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.477] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.477] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.477] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mset7jp.kic", dwFileAttributes=0x80) returned 0 [0085.477] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mset7jp.kic" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mset7jp.kic"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.477] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.477] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.478] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.478] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.478] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.479] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.479] SetLastError (dwErrCode=0x0) [0085.479] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.479] GetLastError () returned 0x5 [0085.479] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0085.479] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.479] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0d50 [0085.480] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.481] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.481] SetLastError (dwErrCode=0x0) [0085.481] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.481] GetLastError () returned 0x5 [0085.481] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.481] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.481] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ar\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0bd0 [0085.482] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.482] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.482] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0085.482] FindClose (in: hFindFile=0xd7079a0bd0 | out: hFindFile=0xd7079a0bd0) returned 1 [0085.482] SetLastError (dwErrCode=0x0) [0085.482] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ar\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ar\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.482] GetLastError () returned 0x5 [0085.482] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.482] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.482] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.482] SetLastError (dwErrCode=0x0) [0085.482] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.482] GetLastError () returned 0x5 [0085.482] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.483] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.483] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\bg\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0e70 [0085.483] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.483] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.483] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0085.483] FindClose (in: hFindFile=0xd7079a0e70 | out: hFindFile=0xd7079a0e70) returned 1 [0085.483] SetLastError (dwErrCode=0x0) [0085.483] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\bg\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\bg\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.483] GetLastError () returned 0x5 [0085.483] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.484] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.484] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.484] SetLastError (dwErrCode=0x0) [0085.484] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.484] GetLastError () returned 0x5 [0085.484] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.484] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.484] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ca\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0450 [0085.484] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.484] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.485] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0085.485] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0085.485] SetLastError (dwErrCode=0x0) [0085.485] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ca\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ca\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.485] GetLastError () returned 0x5 [0085.485] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.485] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.485] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.485] SetLastError (dwErrCode=0x0) [0085.485] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.485] GetLastError () returned 0x5 [0085.485] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.485] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.485] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\cs\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0e70 [0085.486] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.486] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.486] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0085.486] FindClose (in: hFindFile=0xd7079a0e70 | out: hFindFile=0xd7079a0e70) returned 1 [0085.486] SetLastError (dwErrCode=0x0) [0085.486] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\cs\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\cs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.486] GetLastError () returned 0x5 [0085.486] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.486] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.486] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.486] SetLastError (dwErrCode=0x0) [0085.486] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.486] GetLastError () returned 0x5 [0085.486] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.487] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.487] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\da\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0810 [0085.487] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.487] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.487] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0085.487] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0085.487] SetLastError (dwErrCode=0x0) [0085.487] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\da\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\da\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.488] GetLastError () returned 0x5 [0085.488] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.488] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.488] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.488] SetLastError (dwErrCode=0x0) [0085.488] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.488] GetLastError () returned 0x5 [0085.488] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.488] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.488] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\de\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0bd0 [0085.489] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.489] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.489] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0085.489] FindClose (in: hFindFile=0xd7079a0bd0 | out: hFindFile=0xd7079a0bd0) returned 1 [0085.489] SetLastError (dwErrCode=0x0) [0085.489] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\de\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\de\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.489] GetLastError () returned 0x5 [0085.489] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.489] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.489] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.489] SetLastError (dwErrCode=0x0) [0085.489] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.489] GetLastError () returned 0x5 [0085.489] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.489] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.489] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\el\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0e70 [0085.490] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.490] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.490] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0085.490] FindClose (in: hFindFile=0xd7079a0e70 | out: hFindFile=0xd7079a0e70) returned 1 [0085.494] SetLastError (dwErrCode=0x0) [0085.494] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\el\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\el\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.494] GetLastError () returned 0x5 [0085.494] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.494] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.494] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.494] SetLastError (dwErrCode=0x0) [0085.494] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.494] GetLastError () returned 0x5 [0085.494] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.494] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.494] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\en-us\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0810 [0085.495] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.495] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.495] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0085.495] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0085.495] SetLastError (dwErrCode=0x0) [0085.495] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\en-us\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.495] GetLastError () returned 0x5 [0085.495] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.495] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.496] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.496] SetLastError (dwErrCode=0x0) [0085.496] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.496] GetLastError () returned 0x5 [0085.496] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.496] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.496] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\es\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0810 [0085.496] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.496] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.497] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0085.497] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0085.497] SetLastError (dwErrCode=0x0) [0085.497] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\es\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\es\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.497] GetLastError () returned 0x5 [0085.497] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.497] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.497] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.497] SetLastError (dwErrCode=0x0) [0085.497] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.497] GetLastError () returned 0x5 [0085.497] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.497] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.497] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\et\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0e70 [0085.499] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.499] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.499] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0085.499] FindClose (in: hFindFile=0xd7079a0e70 | out: hFindFile=0xd7079a0e70) returned 1 [0085.499] SetLastError (dwErrCode=0x0) [0085.499] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\et\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\et\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.499] GetLastError () returned 0x5 [0085.499] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.499] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.499] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.499] SetLastError (dwErrCode=0x0) [0085.499] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.499] GetLastError () returned 0x5 [0085.500] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.500] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.500] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\eu\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a08d0 [0085.500] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.500] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.500] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0085.500] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0085.500] SetLastError (dwErrCode=0x0) [0085.500] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\eu\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\eu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.500] GetLastError () returned 0x5 [0085.500] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.500] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.500] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.500] SetLastError (dwErrCode=0x0) [0085.500] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.500] GetLastError () returned 0x5 [0085.500] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.501] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.501] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\fi\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0e70 [0085.501] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.501] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.501] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0085.501] FindClose (in: hFindFile=0xd7079a0e70 | out: hFindFile=0xd7079a0e70) returned 1 [0085.501] SetLastError (dwErrCode=0x0) [0085.501] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\fi\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\fi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.502] GetLastError () returned 0x5 [0085.502] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.502] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.502] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.502] SetLastError (dwErrCode=0x0) [0085.502] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.502] GetLastError () returned 0x5 [0085.502] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.502] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.502] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\fr\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0bd0 [0085.502] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.502] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.502] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0085.502] FindClose (in: hFindFile=0xd7079a0bd0 | out: hFindFile=0xd7079a0bd0) returned 1 [0085.502] SetLastError (dwErrCode=0x0) [0085.502] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\fr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\fr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.502] GetLastError () returned 0x5 [0085.502] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.502] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.503] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.503] SetLastError (dwErrCode=0x0) [0085.503] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.503] GetLastError () returned 0x5 [0085.503] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.503] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.503] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\gl\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0450 [0085.503] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.503] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.503] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0085.504] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0085.504] SetLastError (dwErrCode=0x0) [0085.504] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\gl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\gl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.504] GetLastError () returned 0x5 [0085.504] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.504] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.504] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.504] SetLastError (dwErrCode=0x0) [0085.504] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.504] GetLastError () returned 0x5 [0085.504] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.504] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.504] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\he\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0810 [0085.505] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.505] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.505] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0085.505] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0085.505] SetLastError (dwErrCode=0x0) [0085.505] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\he\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\he\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.505] GetLastError () returned 0x5 [0085.505] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.505] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.505] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.505] SetLastError (dwErrCode=0x0) [0085.505] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.506] GetLastError () returned 0x5 [0085.506] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.506] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.506] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hi\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0e70 [0085.506] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.506] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.506] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0085.506] FindClose (in: hFindFile=0xd7079a0e70 | out: hFindFile=0xd7079a0e70) returned 1 [0085.506] SetLastError (dwErrCode=0x0) [0085.506] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hi\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\hi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.507] GetLastError () returned 0x5 [0085.507] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.507] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.507] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.507] SetLastError (dwErrCode=0x0) [0085.507] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.507] GetLastError () returned 0x5 [0085.507] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.507] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.507] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hr\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0450 [0085.508] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.508] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.508] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0085.508] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0085.508] SetLastError (dwErrCode=0x0) [0085.508] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\hr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.508] GetLastError () returned 0x5 [0085.508] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.508] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.508] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.508] SetLastError (dwErrCode=0x0) [0085.508] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.508] GetLastError () returned 0x5 [0085.508] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.508] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.508] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hu\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0450 [0085.509] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.509] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.509] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0085.509] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0085.509] SetLastError (dwErrCode=0x0) [0085.509] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hu\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\hu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.509] GetLastError () returned 0x5 [0085.509] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.509] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.509] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.509] SetLastError (dwErrCode=0x0) [0085.510] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.510] GetLastError () returned 0x5 [0085.510] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.510] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.510] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\id\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0810 [0085.510] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.510] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.510] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0085.510] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0085.510] SetLastError (dwErrCode=0x0) [0085.510] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\id\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\id\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.510] GetLastError () returned 0x5 [0085.510] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.510] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.510] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.511] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.511] SetLastError (dwErrCode=0x0) [0085.511] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.511] GetLastError () returned 0x5 [0085.511] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.511] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.511] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\it\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0810 [0085.511] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.511] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.511] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0085.511] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0085.512] SetLastError (dwErrCode=0x0) [0085.512] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\it\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\it\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.512] GetLastError () returned 0x5 [0085.512] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.512] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.512] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.512] SetLastError (dwErrCode=0x0) [0085.512] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.512] GetLastError () returned 0x5 [0085.512] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.512] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.512] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ja\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0810 [0085.512] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.512] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.512] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0085.512] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0085.513] SetLastError (dwErrCode=0x0) [0085.513] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ja\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ja\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.513] GetLastError () returned 0x5 [0085.513] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.513] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.513] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.513] SetLastError (dwErrCode=0x0) [0085.513] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.513] GetLastError () returned 0x5 [0085.513] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.513] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.513] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\kk\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0810 [0085.513] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.513] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.513] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0085.513] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0085.514] SetLastError (dwErrCode=0x0) [0085.514] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\kk\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\kk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.514] GetLastError () returned 0x5 [0085.514] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.514] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.514] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.514] SetLastError (dwErrCode=0x0) [0085.514] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.514] GetLastError () returned 0x5 [0085.514] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.514] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.514] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ko\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0450 [0085.518] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.518] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.518] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0085.518] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0085.518] SetLastError (dwErrCode=0x0) [0085.519] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ko\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ko\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.519] GetLastError () returned 0x5 [0085.519] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.519] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.519] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.519] SetLastError (dwErrCode=0x0) [0085.519] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.519] GetLastError () returned 0x5 [0085.519] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.519] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.519] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\lt\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0930 [0085.520] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.520] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.520] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0085.520] FindClose (in: hFindFile=0xd7079a0930 | out: hFindFile=0xd7079a0930) returned 1 [0085.520] SetLastError (dwErrCode=0x0) [0085.520] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\lt\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\lt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.520] GetLastError () returned 0x5 [0085.520] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.520] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.520] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.520] SetLastError (dwErrCode=0x0) [0085.520] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.520] GetLastError () returned 0x5 [0085.521] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.521] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.521] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\lv\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0930 [0085.521] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.521] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.521] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0085.521] FindClose (in: hFindFile=0xd7079a0930 | out: hFindFile=0xd7079a0930) returned 1 [0085.521] SetLastError (dwErrCode=0x0) [0085.521] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\lv\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\lv\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.521] GetLastError () returned 0x5 [0085.521] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.521] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.521] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.521] SetLastError (dwErrCode=0x0) [0085.521] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.521] GetLastError () returned 0x5 [0085.521] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.522] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.522] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ms\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0e70 [0085.522] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.522] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.522] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0085.522] FindClose (in: hFindFile=0xd7079a0e70 | out: hFindFile=0xd7079a0e70) returned 1 [0085.522] SetLastError (dwErrCode=0x0) [0085.522] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ms\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ms\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.522] GetLastError () returned 0x5 [0085.523] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.523] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.523] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.523] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.523] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\MSIPCEvents.man", dwFileAttributes=0x80) returned 0 [0085.524] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\MSIPCEvents.man" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\msipcevents.man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.524] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.524] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.524] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.524] SetLastError (dwErrCode=0x0) [0085.524] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.524] GetLastError () returned 0x5 [0085.524] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.524] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.524] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\nl\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0e70 [0085.525] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.525] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.525] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0085.525] FindClose (in: hFindFile=0xd7079a0e70 | out: hFindFile=0xd7079a0e70) returned 1 [0085.525] SetLastError (dwErrCode=0x0) [0085.525] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\nl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\nl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.525] GetLastError () returned 0x5 [0085.525] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.525] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.525] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.526] SetLastError (dwErrCode=0x0) [0085.526] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.526] GetLastError () returned 0x5 [0085.526] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.526] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.526] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\no\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0810 [0085.526] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.526] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.526] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0085.526] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0085.527] SetLastError (dwErrCode=0x0) [0085.527] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\no\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\no\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.527] GetLastError () returned 0x5 [0085.527] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.527] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.527] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.527] SetLastError (dwErrCode=0x0) [0085.527] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.527] GetLastError () returned 0x5 [0085.527] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.527] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.527] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pl\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0e70 [0085.527] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.527] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.527] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0085.527] FindClose (in: hFindFile=0xd7079a0e70 | out: hFindFile=0xd7079a0e70) returned 1 [0085.527] SetLastError (dwErrCode=0x0) [0085.527] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\pl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.528] GetLastError () returned 0x5 [0085.528] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.528] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.528] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.528] SetLastError (dwErrCode=0x0) [0085.528] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.528] GetLastError () returned 0x5 [0085.528] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.528] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.528] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pt\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0810 [0085.529] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.529] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.529] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0085.529] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0085.529] SetLastError (dwErrCode=0x0) [0085.529] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pt\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\pt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.529] GetLastError () returned 0x5 [0085.529] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.529] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.529] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.529] SetLastError (dwErrCode=0x0) [0085.529] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.530] GetLastError () returned 0x5 [0085.530] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.530] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.530] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pt-BR\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0810 [0085.530] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.530] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.530] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0085.530] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0085.530] SetLastError (dwErrCode=0x0) [0085.530] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pt-BR\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\pt-br\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.531] GetLastError () returned 0x5 [0085.531] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.531] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.531] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.531] SetLastError (dwErrCode=0x0) [0085.531] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.531] GetLastError () returned 0x5 [0085.531] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.531] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.531] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ro\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0e70 [0085.532] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.532] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.532] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0085.532] FindClose (in: hFindFile=0xd7079a0e70 | out: hFindFile=0xd7079a0e70) returned 1 [0085.532] SetLastError (dwErrCode=0x0) [0085.532] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ro\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ro\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.532] GetLastError () returned 0x5 [0085.532] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.532] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.532] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.532] SetLastError (dwErrCode=0x0) [0085.532] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.532] GetLastError () returned 0x5 [0085.532] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.532] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.532] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ru\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0450 [0085.533] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.533] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.533] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0085.533] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0085.533] SetLastError (dwErrCode=0x0) [0085.533] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ru\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ru\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.533] GetLastError () returned 0x5 [0085.533] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.533] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.534] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.534] SetLastError (dwErrCode=0x0) [0085.534] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.534] GetLastError () returned 0x5 [0085.534] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.534] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.534] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sk\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0ed0 [0085.534] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.534] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.534] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0085.534] FindClose (in: hFindFile=0xd7079a0ed0 | out: hFindFile=0xd7079a0ed0) returned 1 [0085.534] SetLastError (dwErrCode=0x0) [0085.534] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sk\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\sk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.534] GetLastError () returned 0x5 [0085.534] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.534] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.534] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.535] SetLastError (dwErrCode=0x0) [0085.535] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.535] GetLastError () returned 0x5 [0085.535] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.535] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.535] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sl\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0450 [0085.535] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.535] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.535] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0085.535] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0085.535] SetLastError (dwErrCode=0x0) [0085.535] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\sl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.535] GetLastError () returned 0x5 [0085.535] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.535] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.535] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.536] SetLastError (dwErrCode=0x0) [0085.536] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.536] GetLastError () returned 0x5 [0085.536] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.536] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.536] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Cyrl-BA\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0450 [0085.536] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.536] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.536] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0085.537] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0085.537] SetLastError (dwErrCode=0x0) [0085.537] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Cyrl-BA\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\sr-cyrl-ba\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.537] GetLastError () returned 0x5 [0085.537] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.537] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.537] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.537] SetLastError (dwErrCode=0x0) [0085.537] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.537] GetLastError () returned 0x5 [0085.537] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.537] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.537] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Cyrl-CS\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0810 [0085.538] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.538] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0085.538] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0085.538] SetLastError (dwErrCode=0x0) [0085.538] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Cyrl-CS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\sr-cyrl-cs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.538] GetLastError () returned 0x5 [0085.538] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.538] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.538] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.538] SetLastError (dwErrCode=0x0) [0085.538] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.538] GetLastError () returned 0x5 [0085.538] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.539] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.539] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Cyrl-RS\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0810 [0085.539] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.539] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.539] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0085.539] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0085.539] SetLastError (dwErrCode=0x0) [0085.539] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Cyrl-RS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\sr-cyrl-rs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.540] GetLastError () returned 0x5 [0085.540] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.540] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.540] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.540] SetLastError (dwErrCode=0x0) [0085.540] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.540] GetLastError () returned 0x5 [0085.540] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.540] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.540] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Latn-CS\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0810 [0085.541] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.541] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0085.541] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0085.541] SetLastError (dwErrCode=0x0) [0085.541] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Latn-CS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\sr-latn-cs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.541] GetLastError () returned 0x5 [0085.541] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.541] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.541] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.541] SetLastError (dwErrCode=0x0) [0085.541] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.541] GetLastError () returned 0x5 [0085.541] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.541] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.541] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Latn-RS\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0bd0 [0085.542] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.542] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.542] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0085.542] FindClose (in: hFindFile=0xd7079a0bd0 | out: hFindFile=0xd7079a0bd0) returned 1 [0085.542] SetLastError (dwErrCode=0x0) [0085.542] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Latn-RS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\sr-latn-rs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.542] GetLastError () returned 0x5 [0085.542] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.542] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.542] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.542] SetLastError (dwErrCode=0x0) [0085.542] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.543] GetLastError () returned 0x5 [0085.543] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.543] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.543] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sv\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0930 [0085.543] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.543] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.543] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0085.543] FindClose (in: hFindFile=0xd7079a0930 | out: hFindFile=0xd7079a0930) returned 1 [0085.543] SetLastError (dwErrCode=0x0) [0085.543] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sv\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\sv\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.543] GetLastError () returned 0x5 [0085.543] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.543] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.543] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.543] SetLastError (dwErrCode=0x0) [0085.543] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.544] GetLastError () returned 0x5 [0085.544] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.544] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.544] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\th\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0810 [0085.544] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.544] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.544] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0085.544] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0085.544] SetLastError (dwErrCode=0x0) [0085.544] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\th\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\th\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.545] GetLastError () returned 0x5 [0085.545] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.545] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.545] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.545] SetLastError (dwErrCode=0x0) [0085.545] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.545] GetLastError () returned 0x5 [0085.545] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.545] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.545] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\tr\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0450 [0085.546] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.546] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.546] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0085.546] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0085.546] SetLastError (dwErrCode=0x0) [0085.546] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\tr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\tr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.546] GetLastError () returned 0x5 [0085.546] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.546] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.546] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.546] SetLastError (dwErrCode=0x0) [0085.546] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.546] GetLastError () returned 0x5 [0085.546] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.547] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.547] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\uk\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0810 [0085.547] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.547] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.547] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0085.547] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0085.547] SetLastError (dwErrCode=0x0) [0085.547] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\uk\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\uk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.548] GetLastError () returned 0x5 [0085.548] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.548] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.548] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.548] SetLastError (dwErrCode=0x0) [0085.548] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.548] GetLastError () returned 0x5 [0085.548] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.548] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.548] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\vi\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0810 [0085.548] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.548] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.548] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0085.548] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0085.548] SetLastError (dwErrCode=0x0) [0085.548] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\vi\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\vi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.549] GetLastError () returned 0x5 [0085.549] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.549] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.549] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.549] SetLastError (dwErrCode=0x0) [0085.549] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.549] GetLastError () returned 0x5 [0085.549] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.549] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.549] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\zh-CN\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a08d0 [0085.550] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.550] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.550] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0085.550] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0085.550] SetLastError (dwErrCode=0x0) [0085.550] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\zh-CN\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\zh-cn\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.550] GetLastError () returned 0x5 [0085.550] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.550] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.550] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.550] SetLastError (dwErrCode=0x0) [0085.550] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.550] GetLastError () returned 0x5 [0085.550] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.550] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.550] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\zh-TW\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0e70 [0085.551] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.551] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.551] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0085.551] FindClose (in: hFindFile=0xd7079a0e70 | out: hFindFile=0xd7079a0e70) returned 1 [0085.551] SetLastError (dwErrCode=0x0) [0085.551] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\zh-TW\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\zh-tw\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.551] GetLastError () returned 0x5 [0085.551] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.551] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.551] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0085.551] FindClose (in: hFindFile=0xd7079a0d50 | out: hFindFile=0xd7079a0d50) returned 1 [0085.551] SetLastError (dwErrCode=0x0) [0085.551] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.552] GetLastError () returned 0x5 [0085.552] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0085.552] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.552] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.552] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.552] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSO0127.ACL", dwFileAttributes=0x80) returned 0 [0085.553] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSO0127.ACL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mso0127.acl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.553] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.553] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.553] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.553] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.553] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.553] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.553] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.553] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.553] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOCRRES.ORP", dwFileAttributes=0x80) returned 0 [0085.554] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOCRRES.ORP" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msocrres.orp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.554] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.554] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.554] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.554] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.554] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.554] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.554] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.554] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.554] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.554] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.554] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.554] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.555] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.555] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.555] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.555] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.555] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.555] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.555] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.555] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.555] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoutilstat.etw.man", dwFileAttributes=0x80) returned 0 [0085.555] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoutilstat.etw.man" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msoutilstat.etw.man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.555] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.555] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.556] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.556] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOUTL.OLB", dwFileAttributes=0x80) returned 0 [0085.556] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOUTL.OLB" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msoutl.olb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.557] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.557] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.557] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.557] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.557] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.557] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPPT.OLB", dwFileAttributes=0x80) returned 0 [0085.558] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPPT.OLB" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msppt.olb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.558] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.558] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.558] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.558] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPRJ.OLB", dwFileAttributes=0x80) returned 0 [0085.562] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPRJ.OLB" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msprj.olb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.562] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.562] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.562] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.562] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.563] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.563] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.563] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.563] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.TLB", dwFileAttributes=0x80) returned 0 [0085.564] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.TLB" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mspub.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.564] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.564] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.564] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.564] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.564] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.VisualElementsManifest.xml", dwFileAttributes=0x80) returned 0 [0085.565] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mspub.visualelementsmanifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.565] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.565] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.566] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.566] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.566] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.566] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.566] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.566] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.566] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.566] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSWORD.OLB", dwFileAttributes=0x80) returned 0 [0085.567] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSWORD.OLB" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msword.olb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.568] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.568] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.568] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.568] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.568] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.568] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSZIP.DIC", dwFileAttributes=0x80) returned 0 [0085.569] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSZIP.DIC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mszip.dic"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.569] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.569] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.569] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.569] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.569] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\muauth.cab", dwFileAttributes=0x80) returned 0 [0085.570] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\muauth.cab" (normalized: "c:\\program files\\microsoft office\\root\\office16\\muauth.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.570] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.570] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.571] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.571] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MYSL.ICO", dwFileAttributes=0x80) returned 0 [0085.571] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MYSL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mysl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.571] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.571] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.572] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.572] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.572] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.572] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.572] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.572] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.572] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\NativeHostAnnotationApp.xap", dwFileAttributes=0x80) returned 0 [0085.572] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\NativeHostAnnotationApp.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\nativehostannotationapp.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.572] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.572] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.573] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.573] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\NativeHostPollApp.xap", dwFileAttributes=0x80) returned 0 [0085.573] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\NativeHostPollApp.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\nativehostpollapp.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.573] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.573] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.574] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.574] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.574] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.574] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.574] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.574] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.574] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.574] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.574] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.574] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.574] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.574] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.574] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.574] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.574] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.574] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.574] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Ocomprivate.zip", dwFileAttributes=0x80) returned 0 [0085.574] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Ocomprivate.zip" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ocomprivate.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.575] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.575] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.575] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.575] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.575] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.575] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.575] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.575] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.575] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.575] SetLastError (dwErrCode=0x0) [0085.575] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.575] GetLastError () returned 0x5 [0085.575] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0085.575] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.575] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0bd0 [0085.579] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.579] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.579] SetLastError (dwErrCode=0x0) [0085.579] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.579] GetLastError () returned 0x5 [0085.579] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.579] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.579] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Redshift\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0810 [0085.579] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.580] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.580] SetLastError (dwErrCode=0x0) [0085.580] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Redshift\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\redshift\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.580] GetLastError () returned 0x5 [0085.580] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0085.580] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.580] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Redshift\\lib\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a08d0 [0085.581] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0085.582] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0085.582] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0085.582] SetLastError (dwErrCode=0x0) [0085.582] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Redshift\\lib\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\redshift\\lib\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.582] GetLastError () returned 0x5 [0085.582] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0085.582] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.582] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Redshift\\lib\\OpenSSL64.DllA\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a0450 [0085.582] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0085.582] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0085.582] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0085.582] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0085.582] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0085.582] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0085.582] SetLastError (dwErrCode=0x0) [0085.582] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Redshift\\lib\\OpenSSL64.DllA\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\redshift\\lib\\openssl64.dlla\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.582] GetLastError () returned 0x5 [0085.582] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0085.583] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.583] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0085.583] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0085.583] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0085.583] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0085.583] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0085.583] SetLastError (dwErrCode=0x0) [0085.583] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Redshift\\lib\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\redshift\\lib\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.583] GetLastError () returned 0x5 [0085.583] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0085.583] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.583] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0085.583] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0085.583] SetLastError (dwErrCode=0x0) [0085.583] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Redshift\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\redshift\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.583] GetLastError () returned 0x5 [0085.583] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.583] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.583] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.583] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.583] SetLastError (dwErrCode=0x0) [0085.584] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.584] GetLastError () returned 0x5 [0085.584] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.584] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.584] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0450 [0085.584] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.584] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.584] SetLastError (dwErrCode=0x0) [0085.584] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\salesforce\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.584] GetLastError () returned 0x5 [0085.584] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0085.584] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.584] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0d50 [0085.585] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0085.585] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0085.585] SetLastError (dwErrCode=0x0) [0085.586] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\salesforce\\lib\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.586] GetLastError () returned 0x5 [0085.586] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0085.586] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.586] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\1033\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a0e70 [0085.587] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0085.587] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0085.587] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.588] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\1033\\DSMESSAGES.XML", dwFileAttributes=0x80) returned 0 [0085.589] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\1033\\DSMESSAGES.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\salesforce\\lib\\1033\\dsmessages.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.589] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.589] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.589] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0085.589] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\1033\\ODBCMESSAGES.XML", dwFileAttributes=0x80) returned 0 [0085.590] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\1033\\ODBCMESSAGES.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\salesforce\\lib\\1033\\odbcmessages.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.591] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.591] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.591] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0085.591] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.591] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\1033\\PGOMESSAGES.XML", dwFileAttributes=0x80) returned 0 [0085.594] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\1033\\PGOMESSAGES.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\salesforce\\lib\\1033\\pgomessages.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.594] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.594] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.594] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0085.594] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.595] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\1033\\SFMESSAGES.XML", dwFileAttributes=0x80) returned 0 [0085.595] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\1033\\SFMESSAGES.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\salesforce\\lib\\1033\\sfmessages.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.595] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.595] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.596] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0085.596] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\1033\\SQLENGINEMESSAGES.XML", dwFileAttributes=0x80) returned 0 [0085.596] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\1033\\SQLENGINEMESSAGES.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\salesforce\\lib\\1033\\sqlenginemessages.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.596] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.596] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.597] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0085.597] FindClose (in: hFindFile=0xd7079a0e70 | out: hFindFile=0xd7079a0e70) returned 1 [0085.597] SetLastError (dwErrCode=0x0) [0085.597] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\salesforce\\lib\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.600] GetLastError () returned 0x5 [0085.600] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0085.600] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.600] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0085.600] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.601] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\cacerts.pem", dwFileAttributes=0x80) returned 0 [0085.602] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\cacerts.pem" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\salesforce\\lib\\cacerts.pem"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.602] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.602] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.602] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0085.602] SetLastError (dwErrCode=0x0) [0085.602] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\salesforce\\lib\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.602] GetLastError () returned 0x5 [0085.602] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0085.603] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.603] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\LibCurl64.DllA\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a0e70 [0085.603] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0085.603] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0085.603] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0085.603] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0085.603] FindClose (in: hFindFile=0xd7079a0e70 | out: hFindFile=0xd7079a0e70) returned 1 [0085.603] SetLastError (dwErrCode=0x0) [0085.603] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\LibCurl64.DllA\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\salesforce\\lib\\libcurl64.dlla\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.603] GetLastError () returned 0x5 [0085.603] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0085.603] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.603] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0085.603] SetLastError (dwErrCode=0x0) [0085.603] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\salesforce\\lib\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.604] GetLastError () returned 0x5 [0085.604] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0085.604] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.604] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\OpenSSL64.DllA\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a08d0 [0085.604] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0085.604] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0085.604] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0085.604] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0085.604] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0085.604] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0085.604] SetLastError (dwErrCode=0x0) [0085.604] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\OpenSSL64.DllA\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\salesforce\\lib\\openssl64.dlla\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.604] GetLastError () returned 0x5 [0085.605] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0085.605] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.605] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0085.605] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0085.605] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0085.605] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0085.605] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0085.605] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0085.605] FindClose (in: hFindFile=0xd7079a0d50 | out: hFindFile=0xd7079a0d50) returned 1 [0085.605] SetLastError (dwErrCode=0x0) [0085.605] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\salesforce\\lib\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.606] GetLastError () returned 0x5 [0085.606] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0085.606] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.606] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0085.606] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0085.606] SetLastError (dwErrCode=0x0) [0085.606] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\salesforce\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.606] GetLastError () returned 0x5 [0085.606] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.606] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.606] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.606] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0085.606] FindClose (in: hFindFile=0xd7079a0bd0 | out: hFindFile=0xd7079a0bd0) returned 1 [0085.606] SetLastError (dwErrCode=0x0) [0085.606] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.606] GetLastError () returned 0x5 [0085.606] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0085.607] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.607] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.607] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.607] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.607] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.607] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.607] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.607] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OFFSYM.TTF", dwFileAttributes=0x80) returned 0 [0085.608] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OFFSYM.TTF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\offsym.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.608] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.608] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.609] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.609] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OFFSYMB.TTF", dwFileAttributes=0x80) returned 0 [0085.609] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OFFSYMB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\offsymb.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.609] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.609] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.609] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.609] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OFFSYML.TTF", dwFileAttributes=0x80) returned 0 [0085.610] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OFFSYML.TTF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\offsyml.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.610] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.610] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.610] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.610] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.611] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OFFSYMSB.TTF", dwFileAttributes=0x80) returned 0 [0085.611] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OFFSYMSB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\offsymsb.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.611] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.611] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.611] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.611] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OFFSYMSL.TTF", dwFileAttributes=0x80) returned 0 [0085.612] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OFFSYMSL.TTF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\offsymsl.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.612] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.612] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.613] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.613] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.613] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OFFSYMXL.TTF", dwFileAttributes=0x80) returned 0 [0085.613] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OFFSYMXL.TTF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\offsymxl.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.613] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.613] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.614] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.614] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.614] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.614] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.614] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.614] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.614] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.614] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OMML2MML.XSL", dwFileAttributes=0x80) returned 0 [0085.615] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OMML2MML.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\omml2mml.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.615] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.615] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.615] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.615] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.615] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.615] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.615] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.616] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.616] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.616] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.616] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.616] SetLastError (dwErrCode=0x0) [0085.617] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.617] GetLastError () returned 0x5 [0085.617] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0085.617] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.617] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0e70 [0085.618] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.618] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.618] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.618] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\prnms006.inf", dwFileAttributes=0x80) returned 0 [0085.619] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\prnms006.inf" (normalized: "c:\\program files\\microsoft office\\root\\office16\\onenote\\prnms006.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.619] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.619] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.619] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.619] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\prnSendToOneNote.cat", dwFileAttributes=0x80) returned 0 [0085.619] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\prnSendToOneNote.cat" (normalized: "c:\\program files\\microsoft office\\root\\office16\\onenote\\prnsendtoonenote.cat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.620] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.620] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.620] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.620] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\prnSendToOneNote_win7.cat", dwFileAttributes=0x80) returned 0 [0085.621] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\prnSendToOneNote_win7.cat" (normalized: "c:\\program files\\microsoft office\\root\\office16\\onenote\\prnsendtoonenote_win7.cat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.621] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.621] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.621] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.621] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.621] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\prnSendToOneNote_win7.inf", dwFileAttributes=0x80) returned 0 [0085.622] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\prnSendToOneNote_win7.inf" (normalized: "c:\\program files\\microsoft office\\root\\office16\\onenote\\prnsendtoonenote_win7.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.622] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.622] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.622] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.622] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.622] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\SendToOneNote-PipelineConfig.xml", dwFileAttributes=0x80) returned 0 [0085.623] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\SendToOneNote-PipelineConfig.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\onenote\\sendtoonenote-pipelineconfig.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.624] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.624] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.624] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.624] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\SendToOneNote.gpd", dwFileAttributes=0x80) returned 0 [0085.625] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\SendToOneNote.gpd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\onenote\\sendtoonenote.gpd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.625] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.625] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.625] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.625] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.625] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.625] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.626] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\SendToOneNoteNames.gpd", dwFileAttributes=0x80) returned 0 [0085.626] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\SendToOneNoteNames.gpd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\onenote\\sendtoonenotenames.gpd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.626] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.626] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.627] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0085.627] FindClose (in: hFindFile=0xd7079a0e70 | out: hFindFile=0xd7079a0e70) returned 1 [0085.627] SetLastError (dwErrCode=0x0) [0085.627] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\onenote\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.630] GetLastError () returned 0x5 [0085.630] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0085.630] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.630] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.630] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.630] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.631] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTE.VisualElementsManifest.xml", dwFileAttributes=0x80) returned 0 [0085.631] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTE.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\onenote.visualelementsmanifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.631] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.631] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.631] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.631] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.631] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.631] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.631] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.631] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.631] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.631] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.631] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.631] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.631] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.631] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.631] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.631] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.632] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ORMMODEL.MDL", dwFileAttributes=0x80) returned 0 [0085.632] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ORMMODEL.MDL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ormmodel.mdl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.633] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.633] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.633] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.633] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.633] SetLastError (dwErrCode=0x0) [0085.633] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.633] GetLastError () returned 0x5 [0085.633] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0085.633] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.633] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\osfFPA\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0d50 [0085.634] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.634] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.634] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.634] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\osfFPA\\addins.xml", dwFileAttributes=0x80) returned 0 [0085.634] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\osfFPA\\addins.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\osffpa\\addins.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.635] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.635] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.635] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0085.635] FindClose (in: hFindFile=0xd7079a0d50 | out: hFindFile=0xd7079a0d50) returned 1 [0085.635] SetLastError (dwErrCode=0x0) [0085.635] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\osfFPA\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\osffpa\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.635] GetLastError () returned 0x5 [0085.635] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0085.635] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.635] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.635] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.635] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.635] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.635] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.635] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.635] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLFLTR.DAT", dwFileAttributes=0x80) returned 0 [0085.637] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLFLTR.DAT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlfltr.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.638] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.638] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.638] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.638] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.638] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.638] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.638] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.639] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLOOK.VisualElementsManifest.xml", dwFileAttributes=0x80) returned 0 [0085.641] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLOOK.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlook.visualelementsmanifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.641] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.641] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.641] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.641] SetLastError (dwErrCode=0x0) [0085.641] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.641] GetLastError () returned 0x5 [0085.641] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0085.642] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.642] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0bd0 [0085.643] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.644] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.644] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.645] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\AMERITECH.NET.XML", dwFileAttributes=0x80) returned 0 [0085.645] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\AMERITECH.NET.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\ameritech.net.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.645] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.645] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.645] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.645] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\BTINTERNET.NET.XML", dwFileAttributes=0x80) returned 0 [0085.646] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\BTINTERNET.NET.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\btinternet.net.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.646] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.647] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.647] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.647] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\BTOPENWORLD.COM.XML", dwFileAttributes=0x80) returned 0 [0085.650] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\BTOPENWORLD.COM.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\btopenworld.com.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.650] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.650] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.650] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.650] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.650] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\FLASH.NET.XML", dwFileAttributes=0x80) returned 0 [0085.651] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\FLASH.NET.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\flash.net.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.651] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.651] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.651] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.651] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\GMAIL.COM.XML", dwFileAttributes=0x80) returned 0 [0085.652] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\GMAIL.COM.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\gmail.com.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.653] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.653] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.653] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.653] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.653] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\NL.ROGERS.COM.XML", dwFileAttributes=0x80) returned 0 [0085.653] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\NL.ROGERS.COM.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\nl.rogers.com.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.654] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.654] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.654] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.654] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.654] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\NVBELL.NET.XML", dwFileAttributes=0x80) returned 0 [0085.655] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\NVBELL.NET.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\nvbell.net.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.655] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.655] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.655] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.655] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\PACBELL.NET.XML", dwFileAttributes=0x80) returned 0 [0085.655] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\PACBELL.NET.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\pacbell.net.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.656] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.656] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.656] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.656] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\PRODIGY.NET.XML", dwFileAttributes=0x80) returned 0 [0085.656] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\PRODIGY.NET.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\prodigy.net.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.658] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.658] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.658] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.658] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\ROGERS.COM.XML", dwFileAttributes=0x80) returned 0 [0085.659] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\ROGERS.COM.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\rogers.com.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.659] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.659] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.659] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.660] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.660] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\SBCGLOBAL.NET.XML", dwFileAttributes=0x80) returned 0 [0085.660] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\SBCGLOBAL.NET.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\sbcglobal.net.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.660] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.660] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.660] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.660] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\SNET.NET.XML", dwFileAttributes=0x80) returned 0 [0085.661] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\SNET.NET.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\snet.net.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.661] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.661] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.661] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.661] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\SWBELL.NET.XML", dwFileAttributes=0x80) returned 0 [0085.662] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\SWBELL.NET.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\swbell.net.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.662] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.662] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.662] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.662] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\TALK21.COM.XML", dwFileAttributes=0x80) returned 0 [0085.663] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\TALK21.COM.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\talk21.com.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.663] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.663] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.663] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.663] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.663] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\WANS.NET.XML", dwFileAttributes=0x80) returned 0 [0085.663] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\WANS.NET.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\wans.net.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.664] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.664] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.664] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.664] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.CA.XML", dwFileAttributes=0x80) returned 0 [0085.665] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.CA.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.ca.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.665] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.665] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.665] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.665] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.CO.ID.XML", dwFileAttributes=0x80) returned 0 [0085.667] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.CO.ID.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.co.id.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.667] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.667] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.667] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.667] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.CO.IN.XML", dwFileAttributes=0x80) returned 0 [0085.668] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.CO.IN.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.co.in.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.668] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.668] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.668] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.668] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.669] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.CO.JP.XML", dwFileAttributes=0x80) returned 0 [0085.669] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.CO.JP.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.co.jp.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.669] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.669] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.669] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.669] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.670] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.CO.KR.XML", dwFileAttributes=0x80) returned 0 [0085.671] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.CO.KR.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.co.kr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.671] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.671] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.671] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.671] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.671] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.CO.NZ.XML", dwFileAttributes=0x80) returned 0 [0085.671] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.CO.NZ.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.co.nz.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.672] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.672] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.672] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.672] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.672] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.CO.TH.XML", dwFileAttributes=0x80) returned 0 [0085.672] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.CO.TH.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.co.th.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.673] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.673] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.673] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.673] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.CO.UK.XML", dwFileAttributes=0x80) returned 0 [0085.673] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.CO.UK.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.co.uk.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.673] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.673] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.674] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.674] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.674] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.AR.XML", dwFileAttributes=0x80) returned 0 [0085.674] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.AR.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.com.ar.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.674] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.674] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.675] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.675] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.AU.XML", dwFileAttributes=0x80) returned 0 [0085.675] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.AU.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.com.au.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.675] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.675] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.675] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.675] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.676] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.BR.XML", dwFileAttributes=0x80) returned 0 [0085.676] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.BR.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.com.br.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.676] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.676] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.676] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.676] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.CN.XML", dwFileAttributes=0x80) returned 0 [0085.677] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.CN.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.com.cn.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.677] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.677] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.677] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.677] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.HK.XML", dwFileAttributes=0x80) returned 0 [0085.678] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.HK.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.com.hk.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.678] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.679] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.679] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.679] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.MX.XML", dwFileAttributes=0x80) returned 0 [0085.679] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.MX.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.com.mx.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.681] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.681] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.681] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.681] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.MY.XML", dwFileAttributes=0x80) returned 0 [0085.682] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.MY.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.com.my.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.682] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.682] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.682] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.682] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.683] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.PH.XML", dwFileAttributes=0x80) returned 0 [0085.683] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.PH.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.com.ph.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.683] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.683] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.684] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.684] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.684] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.SG.XML", dwFileAttributes=0x80) returned 0 [0085.684] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.SG.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.com.sg.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.684] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.684] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.685] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.685] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.685] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.TW.XML", dwFileAttributes=0x80) returned 0 [0085.685] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.TW.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.com.tw.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.686] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.686] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.686] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.686] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.686] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.VN.XML", dwFileAttributes=0x80) returned 0 [0085.686] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.VN.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.com.vn.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.686] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.687] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.687] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.687] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.XML", dwFileAttributes=0x80) returned 0 [0085.687] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.com.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.687] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.687] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.688] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.688] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.688] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.DE.XML", dwFileAttributes=0x80) returned 0 [0085.688] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.DE.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.de.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.688] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.688] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.689] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.689] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.ES.XML", dwFileAttributes=0x80) returned 0 [0085.690] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.ES.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.es.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.690] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.690] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.690] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.690] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.FR.XML", dwFileAttributes=0x80) returned 0 [0085.691] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.FR.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.fr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.691] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.691] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.691] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.691] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.HK.XML", dwFileAttributes=0x80) returned 0 [0085.692] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.HK.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.hk.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.692] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.692] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.692] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.692] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.IE.XML", dwFileAttributes=0x80) returned 0 [0085.693] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.IE.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.ie.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.693] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.693] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.693] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.693] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.693] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.IT.XML", dwFileAttributes=0x80) returned 0 [0085.694] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.IT.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.it.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.694] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.694] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.694] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.694] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.JP.XML", dwFileAttributes=0x80) returned 0 [0085.695] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.JP.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.jp.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.695] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.695] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.695] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.695] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.696] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.NO.XML", dwFileAttributes=0x80) returned 0 [0085.696] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.NO.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.no.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.696] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.696] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.696] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.696] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.PL.XML", dwFileAttributes=0x80) returned 0 [0085.697] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.PL.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.pl.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.697] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.697] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.697] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.697] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.SE.XML", dwFileAttributes=0x80) returned 0 [0085.698] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.SE.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.se.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.699] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.699] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.699] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0085.699] FindClose (in: hFindFile=0xd7079a0bd0 | out: hFindFile=0xd7079a0bd0) returned 1 [0085.700] SetLastError (dwErrCode=0x0) [0085.700] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.704] GetLastError () returned 0x5 [0085.704] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0085.704] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.704] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.704] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.704] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.704] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.704] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.704] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.704] SetLastError (dwErrCode=0x0) [0085.704] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.704] GetLastError () returned 0x5 [0085.704] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0085.704] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.704] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0450 [0085.707] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.707] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.707] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.707] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL001.XML", dwFileAttributes=0x80) returned 0 [0085.708] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL001.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl001.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.708] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.708] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.708] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.708] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.708] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL002.XML", dwFileAttributes=0x80) returned 0 [0085.709] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL002.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl002.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.709] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.709] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.709] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.709] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.709] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL010.XML", dwFileAttributes=0x80) returned 0 [0085.710] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL010.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl010.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.710] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.710] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.710] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.710] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL011.XML", dwFileAttributes=0x80) returned 0 [0085.711] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL011.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl011.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.711] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.711] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.711] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.711] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.712] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL012.XML", dwFileAttributes=0x80) returned 0 [0085.715] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL012.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl012.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.715] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.715] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.715] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.715] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL016.XML", dwFileAttributes=0x80) returned 0 [0085.715] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL016.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl016.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.716] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.716] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.716] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.716] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.716] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL020.XML", dwFileAttributes=0x80) returned 0 [0085.717] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL020.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl020.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.717] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.717] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.717] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.717] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.717] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL022.XML", dwFileAttributes=0x80) returned 0 [0085.718] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL022.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl022.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.718] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.718] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.718] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.718] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL026.XML", dwFileAttributes=0x80) returned 0 [0085.718] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL026.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl026.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.719] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.719] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.719] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.719] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL027.XML", dwFileAttributes=0x80) returned 0 [0085.719] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL027.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl027.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.720] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.720] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.720] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.720] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.720] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL044.XML", dwFileAttributes=0x80) returned 0 [0085.720] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL044.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl044.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.720] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.721] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.721] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.721] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL048.XML", dwFileAttributes=0x80) returned 0 [0085.722] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL048.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl048.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.722] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.722] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.723] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.723] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL054.XML", dwFileAttributes=0x80) returned 0 [0085.723] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL054.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl054.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.723] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.723] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.724] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.724] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.724] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL058.XML", dwFileAttributes=0x80) returned 0 [0085.725] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL058.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl058.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.725] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.725] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.725] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.725] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL065.XML", dwFileAttributes=0x80) returned 0 [0085.725] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL065.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl065.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.726] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.726] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.726] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.726] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL075.XML", dwFileAttributes=0x80) returned 0 [0085.727] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL075.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl075.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.727] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.727] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.727] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.727] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL077.XML", dwFileAttributes=0x80) returned 0 [0085.728] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL077.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl077.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.728] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.728] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.728] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.728] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL078.XML", dwFileAttributes=0x80) returned 0 [0085.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL078.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl078.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.729] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.729] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.729] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.729] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL081.XML", dwFileAttributes=0x80) returned 0 [0085.730] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL081.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl081.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.730] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.730] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.730] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.730] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL082.XML", dwFileAttributes=0x80) returned 0 [0085.731] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL082.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl082.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.731] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.731] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.731] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.731] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL083.XML", dwFileAttributes=0x80) returned 0 [0085.732] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL083.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl083.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.732] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.732] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.733] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.733] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL086.XML", dwFileAttributes=0x80) returned 0 [0085.733] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL086.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl086.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.734] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.734] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.734] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.734] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL087.XML", dwFileAttributes=0x80) returned 0 [0085.734] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL087.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl087.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.735] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.735] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.735] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.735] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL089.XML", dwFileAttributes=0x80) returned 0 [0085.735] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL089.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl089.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.735] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.735] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.736] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.736] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.736] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL090.XML", dwFileAttributes=0x80) returned 0 [0085.736] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL090.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl090.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.737] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.737] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.737] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.737] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.738] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL092.XML", dwFileAttributes=0x80) returned 0 [0085.738] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL092.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl092.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.739] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.739] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.739] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.739] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL093.XML", dwFileAttributes=0x80) returned 0 [0085.739] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL093.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl093.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.739] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.739] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.740] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.740] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL095.XML", dwFileAttributes=0x80) returned 0 [0085.740] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL095.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl095.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.740] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.740] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.741] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.741] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL096.XML", dwFileAttributes=0x80) returned 0 [0085.742] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL096.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl096.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.742] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.742] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.743] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.743] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.743] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL097.XML", dwFileAttributes=0x80) returned 0 [0085.744] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL097.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl097.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.744] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.744] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.744] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.744] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL102.XML", dwFileAttributes=0x80) returned 0 [0085.745] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL102.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl102.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.746] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.746] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.746] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.746] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL103.XML", dwFileAttributes=0x80) returned 0 [0085.746] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL103.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl103.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.746] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.747] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.747] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.747] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.747] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL104.XML", dwFileAttributes=0x80) returned 0 [0085.747] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL104.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl104.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.747] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.747] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.772] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.774] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL105.XML", dwFileAttributes=0x80) returned 0 [0085.775] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL105.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl105.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.775] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.775] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.775] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.775] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL106.XML", dwFileAttributes=0x80) returned 0 [0085.776] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL106.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl106.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.776] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.776] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.776] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.777] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.777] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL107.XML", dwFileAttributes=0x80) returned 0 [0085.777] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL107.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl107.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.777] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.777] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.778] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.778] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.778] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL108.XML", dwFileAttributes=0x80) returned 0 [0085.781] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL108.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl108.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.781] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.781] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.781] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.781] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL109.XML", dwFileAttributes=0x80) returned 0 [0085.783] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL109.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl109.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.783] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.783] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.783] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.783] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL110.XML", dwFileAttributes=0x80) returned 0 [0085.784] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL110.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl110.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.784] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.784] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.784] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.784] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.785] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL111.XML", dwFileAttributes=0x80) returned 0 [0085.785] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL111.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl111.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.785] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.785] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.786] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.786] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.786] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL112.XML", dwFileAttributes=0x80) returned 0 [0085.786] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL112.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl112.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.787] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.787] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.787] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.787] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL115.XML", dwFileAttributes=0x80) returned 0 [0085.789] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL115.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl115.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.789] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.789] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.789] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.789] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.790] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL116.XML", dwFileAttributes=0x80) returned 0 [0085.790] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL116.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl116.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.791] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.791] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.791] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.791] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.791] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL117.XML", dwFileAttributes=0x80) returned 0 [0085.792] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL117.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl117.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.792] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.792] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.792] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.792] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL118.XML", dwFileAttributes=0x80) returned 0 [0085.794] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL118.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl118.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.794] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.794] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.795] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.795] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL119.XML", dwFileAttributes=0x80) returned 0 [0085.796] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL119.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl119.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.796] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.796] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.796] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.796] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.797] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL120.XML", dwFileAttributes=0x80) returned 0 [0085.798] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL120.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl120.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.798] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.798] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.798] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.798] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.798] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL121.XML", dwFileAttributes=0x80) returned 0 [0085.799] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL121.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl121.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.800] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.800] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.800] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.800] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.800] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN001.XML", dwFileAttributes=0x80) returned 0 [0085.801] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN001.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn001.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.801] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.801] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.801] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.801] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.802] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN002.XML", dwFileAttributes=0x80) returned 0 [0085.802] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN002.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn002.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.802] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.802] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.802] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.802] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN010.XML", dwFileAttributes=0x80) returned 0 [0085.803] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN010.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn010.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.803] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.803] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.804] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.804] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.804] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN011.XML", dwFileAttributes=0x80) returned 0 [0085.804] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN011.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn011.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.805] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.805] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.805] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.805] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN020.XML", dwFileAttributes=0x80) returned 0 [0085.806] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN020.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn020.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.806] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.806] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.807] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.807] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.807] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN022.XML", dwFileAttributes=0x80) returned 0 [0085.808] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN022.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn022.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.808] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.808] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.808] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.808] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.809] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN026.XML", dwFileAttributes=0x80) returned 0 [0085.809] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN026.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn026.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.810] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.810] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.810] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.810] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.811] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN027.XML", dwFileAttributes=0x80) returned 0 [0085.811] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN027.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn027.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.811] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.811] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.812] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.812] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.812] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN044.XML", dwFileAttributes=0x80) returned 0 [0085.812] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN044.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn044.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.812] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.813] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.813] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.813] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.813] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN048.XML", dwFileAttributes=0x80) returned 0 [0085.814] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN048.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn048.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.814] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.815] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.815] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.815] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN054.XML", dwFileAttributes=0x80) returned 0 [0085.815] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN054.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn054.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.816] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.816] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.816] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.816] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN058.XML", dwFileAttributes=0x80) returned 0 [0085.817] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN058.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn058.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.818] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.818] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.818] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.818] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.818] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN065.XML", dwFileAttributes=0x80) returned 0 [0085.819] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN065.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn065.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.819] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.819] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.819] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.819] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.820] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN075.XML", dwFileAttributes=0x80) returned 0 [0085.821] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN075.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn075.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.821] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.821] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.821] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.821] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN081.XML", dwFileAttributes=0x80) returned 0 [0085.822] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN081.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn081.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.823] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.823] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.823] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.823] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.823] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN082.XML", dwFileAttributes=0x80) returned 0 [0085.824] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN082.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn082.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.824] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.824] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.824] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.824] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.824] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN086.XML", dwFileAttributes=0x80) returned 0 [0085.825] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN086.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn086.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.826] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.826] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.827] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.827] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.827] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN089.XML", dwFileAttributes=0x80) returned 0 [0085.827] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN089.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn089.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.828] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.828] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.828] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.828] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.828] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN090.XML", dwFileAttributes=0x80) returned 0 [0085.830] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN090.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn090.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.830] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.830] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.830] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.830] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN092.XML", dwFileAttributes=0x80) returned 0 [0085.831] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN092.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn092.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.831] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.831] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.831] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.831] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN095.XML", dwFileAttributes=0x80) returned 0 [0085.832] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN095.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn095.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.832] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.832] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.832] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.832] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN096.XML", dwFileAttributes=0x80) returned 0 [0085.833] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN096.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn096.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.833] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.833] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.834] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.834] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN097.XML", dwFileAttributes=0x80) returned 0 [0085.835] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN097.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn097.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.835] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.835] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.836] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.836] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN102.XML", dwFileAttributes=0x80) returned 0 [0085.837] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN102.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn102.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.837] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.837] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.837] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.837] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN103.XML", dwFileAttributes=0x80) returned 0 [0085.837] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN103.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn103.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.838] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.838] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.838] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.838] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN105.XML", dwFileAttributes=0x80) returned 0 [0085.838] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN105.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn105.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.839] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.839] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.839] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.839] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN107.XML", dwFileAttributes=0x80) returned 0 [0085.840] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN107.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn107.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.840] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.840] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.840] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.840] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN108.XML", dwFileAttributes=0x80) returned 0 [0085.841] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN108.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn108.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.841] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.841] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.841] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.841] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN109.XML", dwFileAttributes=0x80) returned 0 [0085.845] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN109.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn109.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.845] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.845] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.845] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.845] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN110.XML", dwFileAttributes=0x80) returned 0 [0085.846] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN110.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn110.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.846] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.846] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.846] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.846] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN111.XML", dwFileAttributes=0x80) returned 0 [0085.847] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN111.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn111.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.847] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.847] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.847] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.847] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN114.XML", dwFileAttributes=0x80) returned 0 [0085.848] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN114.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn114.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.849] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.849] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.849] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.849] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.850] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN120.XML", dwFileAttributes=0x80) returned 0 [0085.851] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN120.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn120.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.851] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.851] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.851] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.851] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN121.XML", dwFileAttributes=0x80) returned 0 [0085.852] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN121.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn121.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.852] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.852] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.852] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.852] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PG_INDEX.XML", dwFileAttributes=0x80) returned 0 [0085.853] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PG_INDEX.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pg_index.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.854] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.854] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.854] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0085.854] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0085.855] SetLastError (dwErrCode=0x0) [0085.855] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.858] GetLastError () returned 0x5 [0085.858] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0085.858] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.858] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.858] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.859] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.859] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.859] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.859] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.859] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.859] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.859] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\pkeyconfig-office.xrm-ms", dwFileAttributes=0x80) returned 0 [0085.860] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\pkeyconfig-office.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pkeyconfig-office.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.861] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.861] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.861] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.861] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.861] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\platform-bridge.win32.bundle", dwFileAttributes=0x80) returned 0 [0085.862] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\platform-bridge.win32.bundle" (normalized: "c:\\program files\\microsoft office\\root\\office16\\platform-bridge.win32.bundle"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.862] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.862] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.862] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.862] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.862] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.862] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.863] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\POWERPNT.VisualElementsManifest.xml", dwFileAttributes=0x80) returned 0 [0085.863] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\POWERPNT.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\powerpnt.visualelementsmanifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.864] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.864] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.864] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.864] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.864] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.864] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.864] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.864] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.864] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.864] SetLastError (dwErrCode=0x0) [0085.864] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.864] GetLastError () returned 0x5 [0085.865] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0085.865] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.865] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0d50 [0085.867] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.867] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.867] SetLastError (dwErrCode=0x0) [0085.867] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.867] GetLastError () returned 0x5 [0085.867] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.867] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.867] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\1033\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0810 [0085.868] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.868] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.868] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0085.868] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0085.868] SetLastError (dwErrCode=0x0) [0085.868] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.868] GetLastError () returned 0x5 [0085.868] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.868] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.868] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.868] SetLastError (dwErrCode=0x0) [0085.868] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.869] GetLastError () returned 0x5 [0085.869] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.869] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.869] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\1036\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0e70 [0085.869] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.869] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.870] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0085.870] FindClose (in: hFindFile=0xd7079a0e70 | out: hFindFile=0xd7079a0e70) returned 1 [0085.870] SetLastError (dwErrCode=0x0) [0085.870] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\1036\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\1036\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.870] GetLastError () returned 0x5 [0085.870] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.870] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.870] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.870] SetLastError (dwErrCode=0x0) [0085.870] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.870] GetLastError () returned 0x5 [0085.870] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.870] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.870] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\3082\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0810 [0085.872] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.872] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0085.872] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0085.872] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0085.872] SetLastError (dwErrCode=0x0) [0085.872] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\3082\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\3082\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.872] GetLastError () returned 0x5 [0085.872] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0085.872] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.872] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.872] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\LTSHYPH_EN.LEX", dwFileAttributes=0x80) returned 0 [0085.875] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\LTSHYPH_EN.LEX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\ltshyph_en.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.875] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.875] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.875] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.875] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\LTSHYPH_ES.LEX", dwFileAttributes=0x80) returned 0 [0085.877] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\LTSHYPH_ES.LEX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\ltshyph_es.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.877] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.877] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.878] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.878] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\LTSHYPH_FR.LEX", dwFileAttributes=0x80) returned 0 [0085.887] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\LTSHYPH_FR.LEX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\ltshyph_fr.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.888] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.888] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.889] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.889] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\msgr8en.dub", dwFileAttributes=0x80) returned 0 [0085.891] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\msgr8en.dub" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\msgr8en.dub"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.891] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.891] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.891] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.891] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSGR8EN.LEX", dwFileAttributes=0x80) returned 0 [0085.892] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSGR8EN.LEX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\msgr8en.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.892] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.892] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.893] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.893] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\msgr8es.dub", dwFileAttributes=0x80) returned 0 [0085.893] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\msgr8es.dub" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\msgr8es.dub"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.893] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.894] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.894] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.894] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSGR8ES.LEX", dwFileAttributes=0x80) returned 0 [0085.895] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSGR8ES.LEX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\msgr8es.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.896] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.896] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.896] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.896] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\msgr8fr.dub", dwFileAttributes=0x80) returned 0 [0085.897] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\msgr8fr.dub" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\msgr8fr.dub"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.897] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.897] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.897] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.897] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSGR8FR.LEX", dwFileAttributes=0x80) returned 0 [0085.898] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSGR8FR.LEX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\msgr8fr.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.898] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.898] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.898] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.898] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.898] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSHY7EN.LEX", dwFileAttributes=0x80) returned 0 [0085.900] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSHY7EN.LEX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\mshy7en.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.901] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.901] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.901] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.901] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.901] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSHY7ES.LEX", dwFileAttributes=0x80) returned 0 [0085.902] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSHY7ES.LEX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\mshy7es.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.902] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.902] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.903] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.903] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.903] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.903] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSHY7FR.LEX", dwFileAttributes=0x80) returned 0 [0085.903] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSHY7FR.LEX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\mshy7fr.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.903] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.903] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.903] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.904] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.904] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSSP7EN.dub", dwFileAttributes=0x80) returned 0 [0085.904] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSSP7EN.dub" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\mssp7en.dub"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.905] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.905] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.905] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.905] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.905] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSSP7EN.LEX", dwFileAttributes=0x80) returned 0 [0085.906] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSSP7EN.LEX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\mssp7en.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.906] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.906] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.906] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.906] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.907] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSSP7ES.dub", dwFileAttributes=0x80) returned 0 [0085.907] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSSP7ES.dub" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\mssp7es.dub"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.907] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.907] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.907] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.907] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.908] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSSP7ES.LEX", dwFileAttributes=0x80) returned 0 [0085.910] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSSP7ES.LEX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\mssp7es.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.910] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.910] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.911] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.911] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.911] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSSP7FR.dub", dwFileAttributes=0x80) returned 0 [0085.911] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSSP7FR.dub" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\mssp7fr.dub"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.912] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.912] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.912] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.912] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.912] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSSP7FR.LEX", dwFileAttributes=0x80) returned 0 [0085.912] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSSP7FR.LEX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\mssp7fr.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.913] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.913] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.913] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.913] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.913] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.913] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.913] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\msth8EN.LEX", dwFileAttributes=0x80) returned 0 [0085.914] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\msth8EN.LEX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\msth8en.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.914] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.914] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.914] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.914] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.914] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.915] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\msth8ES.LEX", dwFileAttributes=0x80) returned 0 [0085.915] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\msth8ES.LEX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\msth8es.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.916] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.916] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.916] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.916] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.916] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.916] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\msth8FR.LEX", dwFileAttributes=0x80) returned 0 [0085.917] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\msth8FR.LEX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\msth8fr.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.917] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.917] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.918] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0085.918] FindClose (in: hFindFile=0xd7079a0d50 | out: hFindFile=0xd7079a0d50) returned 1 [0085.918] SetLastError (dwErrCode=0x0) [0085.918] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.918] GetLastError () returned 0x5 [0085.918] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0085.918] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.918] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.918] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.918] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.918] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.918] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.918] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.918] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.919] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.919] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.919] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.919] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.919] SetLastError (dwErrCode=0x0) [0085.919] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.919] GetLastError () returned 0x5 [0085.919] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0085.919] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.919] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0810 [0085.920] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.921] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.921] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.921] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB10.BDR", dwFileAttributes=0x80) returned 0 [0085.922] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB10.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubba\\mspub10.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.922] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.922] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.922] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.923] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.923] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB11.BDR", dwFileAttributes=0x80) returned 0 [0085.923] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB11.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubba\\mspub11.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.924] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.924] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.924] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.924] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.924] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB1A.BDR", dwFileAttributes=0x80) returned 0 [0085.924] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB1A.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubba\\mspub1a.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.925] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.925] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.925] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.925] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.925] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB1B.BDR", dwFileAttributes=0x80) returned 0 [0085.926] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB1B.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubba\\mspub1b.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.926] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.926] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.926] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.926] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.926] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB2A.BDR", dwFileAttributes=0x80) returned 0 [0085.927] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB2A.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubba\\mspub2a.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.927] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.927] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.927] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.927] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.927] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB2B.BDR", dwFileAttributes=0x80) returned 0 [0085.928] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB2B.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubba\\mspub2b.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.928] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.928] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.928] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.928] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.928] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB3A.BDR", dwFileAttributes=0x80) returned 0 [0085.929] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB3A.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubba\\mspub3a.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.929] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.929] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.930] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.930] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.930] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB3B.BDR", dwFileAttributes=0x80) returned 0 [0085.930] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB3B.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubba\\mspub3b.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.931] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.931] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.931] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.931] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.931] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB4.BDR", dwFileAttributes=0x80) returned 0 [0085.932] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB4.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubba\\mspub4.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.932] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.932] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.932] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.932] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.932] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB5A.BDR", dwFileAttributes=0x80) returned 0 [0085.933] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB5A.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubba\\mspub5a.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.933] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.933] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.933] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.933] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.934] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB5B.BDR", dwFileAttributes=0x80) returned 0 [0085.934] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB5B.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubba\\mspub5b.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.935] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.935] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.935] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.935] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.935] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB6.BDR", dwFileAttributes=0x80) returned 0 [0085.936] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB6.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubba\\mspub6.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.936] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.936] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.937] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.937] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.937] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB7.BDR", dwFileAttributes=0x80) returned 0 [0085.937] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB7.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubba\\mspub7.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.937] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.937] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.938] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.938] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.938] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB8.BDR", dwFileAttributes=0x80) returned 0 [0085.938] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB8.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubba\\mspub8.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.938] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.938] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.938] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.939] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB9.BDR", dwFileAttributes=0x80) returned 0 [0085.939] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB9.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubba\\mspub9.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.939] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.939] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.939] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0085.939] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0085.940] SetLastError (dwErrCode=0x0) [0085.940] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubba\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.943] GetLastError () returned 0x5 [0085.943] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0085.943] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.943] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.943] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.943] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0085.943] SetLastError (dwErrCode=0x0) [0085.943] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.943] GetLastError () returned 0x5 [0085.943] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0085.943] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.943] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0810 [0085.945] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.946] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.946] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\ACCSBAR.POC", dwFileAttributes=0x80) returned 0 [0085.946] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\ACCSBAR.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\accsbar.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.946] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.946] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.947] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.947] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.947] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\ACCTBOX.POC", dwFileAttributes=0x80) returned 0 [0085.947] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\ACCTBOX.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\acctbox.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.947] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.947] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.947] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.948] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.948] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\AD.DPV", dwFileAttributes=0x80) returned 0 [0085.948] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\AD.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\ad.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.949] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.949] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.949] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.949] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\AD.XML", dwFileAttributes=0x80) returned 0 [0085.949] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\AD.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\ad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.950] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.950] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.950] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.950] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.950] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\AD98.POC", dwFileAttributes=0x80) returned 0 [0085.950] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\AD98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\ad98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.950] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.951] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.951] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.952] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.952] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\ADRESPEL.POC", dwFileAttributes=0x80) returned 0 [0085.953] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\ADRESPEL.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\adrespel.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.953] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.953] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.953] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.953] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.953] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\AIR98.POC", dwFileAttributes=0x80) returned 0 [0085.954] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\AIR98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\air98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.954] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.954] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.954] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.954] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.954] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\AWARDHM.POC", dwFileAttributes=0x80) returned 0 [0085.955] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\AWARDHM.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\awardhm.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.955] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.955] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.955] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.955] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.955] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BAN98.POC", dwFileAttributes=0x80) returned 0 [0085.956] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BAN98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\ban98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.956] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.956] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.956] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.956] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.956] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BANNER.DPV", dwFileAttributes=0x80) returned 0 [0085.957] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BANNER.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\banner.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.957] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.957] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.957] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.957] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.957] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BANNER.XML", dwFileAttributes=0x80) returned 0 [0085.957] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BANNER.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\banner.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.958] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.958] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.958] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.958] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.958] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BDRTKFUL.POC", dwFileAttributes=0x80) returned 0 [0085.958] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BDRTKFUL.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\bdrtkful.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.958] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.958] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.959] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.959] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.959] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BIZCARD.DPV", dwFileAttributes=0x80) returned 0 [0085.960] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BIZCARD.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\bizcard.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.960] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.960] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.960] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.960] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.961] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BIZCARD.XML", dwFileAttributes=0x80) returned 0 [0085.961] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BIZCARD.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\bizcard.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.961] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.961] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.961] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.961] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.961] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BIZFORM.DPV", dwFileAttributes=0x80) returned 0 [0085.962] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BIZFORM.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\bizform.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.962] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.962] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.962] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.962] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BIZFORM.XML", dwFileAttributes=0x80) returned 0 [0085.962] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BIZFORM.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\bizform.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.963] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.963] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.963] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.963] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.963] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BORDERBB.DPV", dwFileAttributes=0x80) returned 0 [0085.964] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BORDERBB.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\borderbb.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.965] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.965] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.965] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.965] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BORDERBB.POC", dwFileAttributes=0x80) returned 0 [0085.967] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BORDERBB.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\borderbb.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.967] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.967] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.967] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.967] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.967] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BRCH98SP.POC", dwFileAttributes=0x80) returned 0 [0085.968] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BRCH98SP.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\brch98sp.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.968] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.968] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.968] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.968] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.968] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BRCHUR11.POC", dwFileAttributes=0x80) returned 0 [0085.968] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BRCHUR11.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\brchur11.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.969] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.969] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.969] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.969] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.969] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BRCHUR98.POC", dwFileAttributes=0x80) returned 0 [0085.969] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BRCHUR98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\brchur98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.969] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.969] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.970] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.970] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BROCHURE.DPV", dwFileAttributes=0x80) returned 0 [0085.970] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BROCHURE.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\brochure.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.970] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.970] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.970] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.971] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.971] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BROCHURE.XML", dwFileAttributes=0x80) returned 0 [0085.971] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BROCHURE.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\brochure.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.971] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.971] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.971] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.971] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.972] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BS2BARB.POC", dwFileAttributes=0x80) returned 0 [0085.974] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BS2BARB.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\bs2barb.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.974] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.975] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.975] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.975] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BS4BOXES.POC", dwFileAttributes=0x80) returned 0 [0085.976] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BS4BOXES.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\bs4boxes.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.976] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.976] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.976] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.976] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BS53BOXS.POC", dwFileAttributes=0x80) returned 0 [0085.977] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BS53BOXS.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\bs53boxs.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.977] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.977] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.977] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.977] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BZCARD11.POC", dwFileAttributes=0x80) returned 0 [0085.977] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BZCARD11.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\bzcard11.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.978] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.978] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.978] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.978] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BZCARDHM.POC", dwFileAttributes=0x80) returned 0 [0085.978] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BZCARDHM.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\bzcardhm.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.978] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.978] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.979] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.979] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BZCD98SP.POC", dwFileAttributes=0x80) returned 0 [0085.979] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BZCD98SP.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\bzcd98sp.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.979] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.979] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.980] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.980] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.980] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BZCRD98.POC", dwFileAttributes=0x80) returned 0 [0085.980] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BZCRD98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\bzcrd98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.980] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.980] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.981] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.981] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.981] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CALENDAR.DPV", dwFileAttributes=0x80) returned 0 [0085.981] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CALENDAR.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\calendar.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.982] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.982] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.982] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.982] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CALENDAR.XML", dwFileAttributes=0x80) returned 0 [0085.983] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CALENDAR.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\calendar.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.983] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.983] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.983] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.983] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CALHM.POC", dwFileAttributes=0x80) returned 0 [0085.984] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CALHM.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\calhm.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.984] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.984] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.984] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.985] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.986] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CALNDR98.POC", dwFileAttributes=0x80) returned 0 [0085.986] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CALNDR98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\calndr98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.986] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.986] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.986] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.986] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CALSO11.POC", dwFileAttributes=0x80) returned 0 [0085.987] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CALSO11.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\calso11.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.988] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.988] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.988] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.988] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CALSO98.POC", dwFileAttributes=0x80) returned 0 [0085.988] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CALSO98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\calso98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.989] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.989] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.989] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.989] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.989] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CATALOG.DPV", dwFileAttributes=0x80) returned 0 [0085.989] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CATALOG.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\catalog.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.990] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.990] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.990] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.990] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CATALOG.XML", dwFileAttributes=0x80) returned 0 [0085.990] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CATALOG.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\catalog.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.990] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.990] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.991] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.991] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.991] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CATWIZ.POC", dwFileAttributes=0x80) returned 0 [0085.991] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CATWIZ.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\catwiz.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.991] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.991] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.992] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.992] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CATWIZ11.POC", dwFileAttributes=0x80) returned 0 [0085.993] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CATWIZ11.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\catwiz11.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.993] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.993] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.993] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.993] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.994] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CERT.DPV", dwFileAttributes=0x80) returned 0 [0085.994] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CERT.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\cert.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.995] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.995] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.995] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.995] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.995] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CERT.XML", dwFileAttributes=0x80) returned 0 [0085.996] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CERT.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\cert.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.996] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.996] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.996] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.996] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CERT98.POC", dwFileAttributes=0x80) returned 0 [0085.998] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CERT98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\cert98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.998] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.998] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.998] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0085.999] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0085.999] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CERT98SP.POC", dwFileAttributes=0x80) returned 0 [0085.999] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CERT98SP.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\cert98sp.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0085.999] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0085.999] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.000] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.000] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.000] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CHECKER.POC", dwFileAttributes=0x80) returned 0 [0086.000] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CHECKER.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\checker.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.000] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.000] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.000] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.000] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.001] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CONTACTINFOBB.DPV", dwFileAttributes=0x80) returned 0 [0086.001] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CONTACTINFOBB.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\contactinfobb.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.001] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.001] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.001] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.001] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CONTACTINFOBB.POC", dwFileAttributes=0x80) returned 0 [0086.002] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CONTACTINFOBB.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\contactinfobb.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.002] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.002] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.002] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.002] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\COUPON.POC", dwFileAttributes=0x80) returned 0 [0086.003] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\COUPON.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\coupon.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.003] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.003] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.003] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.003] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.003] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGACCBAR.DPV", dwFileAttributes=0x80) returned 0 [0086.004] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGACCBAR.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgaccbar.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.004] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.004] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.004] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.004] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.004] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGACCBAR.XML", dwFileAttributes=0x80) returned 0 [0086.005] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGACCBAR.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgaccbar.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.005] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.005] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.005] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.005] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.006] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGACCBOX.DPV", dwFileAttributes=0x80) returned 0 [0086.006] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGACCBOX.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgaccbox.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.006] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.006] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.006] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.006] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.007] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGACCBOX.XML", dwFileAttributes=0x80) returned 0 [0086.007] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGACCBOX.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgaccbox.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.007] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.007] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.007] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.007] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.007] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGAD.DPV", dwFileAttributes=0x80) returned 0 [0086.008] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGAD.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgad.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.008] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.008] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.008] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.008] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.009] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGAD.XML", dwFileAttributes=0x80) returned 0 [0086.009] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGAD.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.010] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.010] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.010] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.010] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.010] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGATNGET.DPV", dwFileAttributes=0x80) returned 0 [0086.010] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGATNGET.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgatnget.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.010] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.010] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.011] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.011] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.011] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGATNGET.XML", dwFileAttributes=0x80) returned 0 [0086.012] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGATNGET.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgatnget.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.012] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.012] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.012] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.012] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGBARBLL.DPV", dwFileAttributes=0x80) returned 0 [0086.013] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGBARBLL.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgbarbll.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.013] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.013] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.013] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.013] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.014] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGBARBLL.XML", dwFileAttributes=0x80) returned 0 [0086.015] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGBARBLL.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgbarbll.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.015] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.015] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.016] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.016] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.016] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGBORDER.DPV", dwFileAttributes=0x80) returned 0 [0086.016] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGBORDER.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgborder.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.016] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.017] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.017] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.017] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGBORDER.XML", dwFileAttributes=0x80) returned 0 [0086.017] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGBORDER.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgborder.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.017] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.017] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.018] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.018] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.018] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGBOXES.DPV", dwFileAttributes=0x80) returned 0 [0086.018] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGBOXES.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgboxes.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.018] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.018] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.018] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.018] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.019] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGBOXES.XML", dwFileAttributes=0x80) returned 0 [0086.019] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGBOXES.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgboxes.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.019] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.019] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.019] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.019] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.020] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGCAL.DPV", dwFileAttributes=0x80) returned 0 [0086.020] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGCAL.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgcal.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.020] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.020] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.020] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.020] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.020] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGCAL.XML", dwFileAttributes=0x80) returned 0 [0086.021] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGCAL.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgcal.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.021] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.021] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.021] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.021] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.021] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGCHKBRD.DPV", dwFileAttributes=0x80) returned 0 [0086.021] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGCHKBRD.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgchkbrd.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.022] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.022] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.022] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.022] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.022] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGCHKBRD.XML", dwFileAttributes=0x80) returned 0 [0086.022] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGCHKBRD.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgchkbrd.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.023] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.023] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.023] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.023] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.023] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGCINFO.XML", dwFileAttributes=0x80) returned 0 [0086.024] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGCINFO.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgcinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.024] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.024] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.024] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.025] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.025] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGCOUPON.DPV", dwFileAttributes=0x80) returned 0 [0086.025] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGCOUPON.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgcoupon.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.025] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.025] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.025] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.026] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.026] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGCOUPON.XML", dwFileAttributes=0x80) returned 0 [0086.026] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGCOUPON.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgcoupon.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.026] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.026] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.026] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.026] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.027] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGDOTS.DPV", dwFileAttributes=0x80) returned 0 [0086.028] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGDOTS.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgdots.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.028] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.028] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.028] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.028] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.028] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGDOTS.XML", dwFileAttributes=0x80) returned 0 [0086.029] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGDOTS.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgdots.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.030] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.030] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.030] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.030] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.030] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGHEADING.XML", dwFileAttributes=0x80) returned 0 [0086.031] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGHEADING.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgheading.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.031] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.031] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.032] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.032] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.032] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGLINACC.DPV", dwFileAttributes=0x80) returned 0 [0086.032] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGLINACC.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dglinacc.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.032] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.033] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.033] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.033] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGLINACC.XML", dwFileAttributes=0x80) returned 0 [0086.033] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGLINACC.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dglinacc.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.033] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.033] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.034] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.034] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.034] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGLOGO.DPV", dwFileAttributes=0x80) returned 0 [0086.035] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGLOGO.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dglogo.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.035] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.035] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.035] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.035] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.035] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGLOGO.XML", dwFileAttributes=0x80) returned 0 [0086.035] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGLOGO.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dglogo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.036] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.036] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.036] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.036] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.036] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGMAIN.XML", dwFileAttributes=0x80) returned 0 [0086.036] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGMAIN.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgmain.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.036] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.037] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.037] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.037] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.037] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGMARQ.DPV", dwFileAttributes=0x80) returned 0 [0086.037] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGMARQ.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgmarq.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.038] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.038] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.038] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.038] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.038] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGMARQ.XML", dwFileAttributes=0x80) returned 0 [0086.039] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGMARQ.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgmarq.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.039] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.039] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.039] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.039] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.039] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGMASTHD.DPV", dwFileAttributes=0x80) returned 0 [0086.040] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGMASTHD.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgmasthd.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.040] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.040] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.040] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.040] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.040] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGNAVBAR.DPV", dwFileAttributes=0x80) returned 0 [0086.041] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGNAVBAR.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgnavbar.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.041] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.041] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.041] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.041] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.041] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGNAVBAR.XML", dwFileAttributes=0x80) returned 0 [0086.042] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGNAVBAR.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgnavbar.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.042] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.042] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.042] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.042] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.042] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGPICCAP.DPV", dwFileAttributes=0x80) returned 0 [0086.043] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGPICCAP.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgpiccap.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.043] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.043] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.044] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.044] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.044] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGPICCAP.XML", dwFileAttributes=0x80) returned 0 [0086.044] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGPICCAP.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgpiccap.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.044] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.044] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.044] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.044] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.045] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGPQUOT.DPV", dwFileAttributes=0x80) returned 0 [0086.046] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGPQUOT.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgpquot.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.046] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.046] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.046] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.046] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.046] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGPQUOT.XML", dwFileAttributes=0x80) returned 0 [0086.047] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGPQUOT.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgpquot.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.047] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.047] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.047] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.047] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.047] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGPUNCT.DPV", dwFileAttributes=0x80) returned 0 [0086.047] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGPUNCT.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgpunct.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.048] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.048] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.048] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.048] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.048] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGPUNCT.XML", dwFileAttributes=0x80) returned 0 [0086.048] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGPUNCT.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgpunct.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.049] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.049] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.049] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.049] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.049] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGREPFRM.DPV", dwFileAttributes=0x80) returned 0 [0086.049] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGREPFRM.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgrepfrm.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.049] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.049] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.050] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.050] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.050] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGREPFRM.XML", dwFileAttributes=0x80) returned 0 [0086.050] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGREPFRM.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgrepfrm.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.050] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.050] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.050] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.050] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.051] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGSIDEBR.DPV", dwFileAttributes=0x80) returned 0 [0086.051] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGSIDEBR.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgsidebr.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.051] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.051] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.051] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.051] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.052] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGSIDEBR.XML", dwFileAttributes=0x80) returned 0 [0086.052] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGSIDEBR.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgsidebr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.053] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.053] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.053] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.053] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.053] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGSIDEBRV.XML", dwFileAttributes=0x80) returned 0 [0086.053] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGSIDEBRV.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgsidebrv.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.053] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.054] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.054] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.054] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.054] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGSTORY.XML", dwFileAttributes=0x80) returned 0 [0086.054] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGSTORY.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgstory.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.054] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.054] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.055] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.055] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.055] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGSTORYVERT.XML", dwFileAttributes=0x80) returned 0 [0086.055] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGSTORYVERT.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgstoryvert.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.055] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.055] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.056] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.056] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.056] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGTEAR.DPV", dwFileAttributes=0x80) returned 0 [0086.056] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGTEAR.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgtear.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.057] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.057] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.057] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.057] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.057] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGTOC.DPV", dwFileAttributes=0x80) returned 0 [0086.057] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGTOC.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgtoc.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.057] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.058] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.058] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.058] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.058] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGTOC.XML", dwFileAttributes=0x80) returned 0 [0086.059] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGTOC.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgtoc.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.059] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.059] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.059] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.059] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.059] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBAD.XML", dwFileAttributes=0x80) returned 0 [0086.059] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBAD.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgwebad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.060] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.060] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.060] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.060] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.060] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBBTN.DPV", dwFileAttributes=0x80) returned 0 [0086.061] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBBTN.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgwebbtn.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.061] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.061] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.061] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.061] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.061] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBBTN.XML", dwFileAttributes=0x80) returned 0 [0086.061] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBBTN.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgwebbtn.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.062] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.062] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.062] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.063] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.063] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBCAL.DPV", dwFileAttributes=0x80) returned 0 [0086.063] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBCAL.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgwebcal.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.063] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.063] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.064] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.064] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.064] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBCAL.XML", dwFileAttributes=0x80) returned 0 [0086.064] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBCAL.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgwebcal.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.064] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.064] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.065] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.065] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.065] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBHD.DPV", dwFileAttributes=0x80) returned 0 [0086.065] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBHD.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgwebhd.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.065] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.065] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.066] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.066] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.066] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBHD.XML", dwFileAttributes=0x80) returned 0 [0086.066] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBHD.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgwebhd.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.066] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.066] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.067] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.067] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.067] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBPQT.DPV", dwFileAttributes=0x80) returned 0 [0086.067] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBPQT.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgwebpqt.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.068] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.068] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.068] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.068] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.068] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBPQT.XML", dwFileAttributes=0x80) returned 0 [0086.068] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBPQT.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgwebpqt.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.069] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.069] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.069] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.069] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.069] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBREF.XML", dwFileAttributes=0x80) returned 0 [0086.070] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBREF.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgwebref.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.070] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.070] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.070] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.070] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.071] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBSBR.DPV", dwFileAttributes=0x80) returned 0 [0086.071] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBSBR.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgwebsbr.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.071] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.071] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.072] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.072] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.072] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBSBR.XML", dwFileAttributes=0x80) returned 0 [0086.072] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBSBR.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgwebsbr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.072] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.072] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.072] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.073] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.073] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGZIP.DPV", dwFileAttributes=0x80) returned 0 [0086.073] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGZIP.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgzip.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.073] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.073] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.073] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.073] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.074] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGZIPC.XML", dwFileAttributes=0x80) returned 0 [0086.074] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGZIPC.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgzipc.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.074] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.074] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.074] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.074] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.075] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DOTS.POC", dwFileAttributes=0x80) returned 0 [0086.075] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DOTS.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dots.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.075] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.075] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.075] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.075] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.075] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DVDHM.POC", dwFileAttributes=0x80) returned 0 [0086.076] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DVDHM.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dvdhm.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.076] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.076] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.076] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.077] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.077] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\EMAIL.DPV", dwFileAttributes=0x80) returned 0 [0086.077] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\EMAIL.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\email.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.077] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.077] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.077] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.077] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.078] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\EMAIL.XML", dwFileAttributes=0x80) returned 0 [0086.078] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\EMAIL.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\email.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.078] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.078] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.078] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.078] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.079] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\EMAIL11.POC", dwFileAttributes=0x80) returned 0 [0086.079] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\EMAIL11.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\email11.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.079] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.079] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.079] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.079] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.079] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\EMAILMOD.POC", dwFileAttributes=0x80) returned 0 [0086.081] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\EMAILMOD.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\emailmod.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.081] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.081] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.081] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.082] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.082] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\ENV11.POC", dwFileAttributes=0x80) returned 0 [0086.082] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\ENV11.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\env11.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.082] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.082] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.082] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.082] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.083] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\ENV98.POC", dwFileAttributes=0x80) returned 0 [0086.083] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\ENV98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\env98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.084] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.084] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.084] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.084] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.085] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\ENV98SP.POC", dwFileAttributes=0x80) returned 0 [0086.085] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\ENV98SP.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\env98sp.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.085] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.085] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.085] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.085] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.086] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\ENVELOPE.DPV", dwFileAttributes=0x80) returned 0 [0086.086] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\ENVELOPE.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\envelope.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.086] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.086] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.086] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.086] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.087] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\ENVELOPE.XML", dwFileAttributes=0x80) returned 0 [0086.087] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\ENVELOPE.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\envelope.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.087] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.087] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.087] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.087] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.087] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\ENVHM.POC", dwFileAttributes=0x80) returned 0 [0086.088] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\ENVHM.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\envhm.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.088] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.088] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.088] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.088] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.088] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FEZIP.POC", dwFileAttributes=0x80) returned 0 [0086.089] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FEZIP.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\fezip.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.089] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.089] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.089] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.089] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.089] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FLY98SP.POC", dwFileAttributes=0x80) returned 0 [0086.090] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FLY98SP.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\fly98sp.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.090] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.090] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.090] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.090] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.090] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FLYER.DPV", dwFileAttributes=0x80) returned 0 [0086.091] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FLYER.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\flyer.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.091] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.092] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.092] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.092] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.092] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FLYER.XML", dwFileAttributes=0x80) returned 0 [0086.092] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FLYER.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\flyer.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.093] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.093] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.093] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.093] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.093] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FLYER11.POC", dwFileAttributes=0x80) returned 0 [0086.093] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FLYER11.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\flyer11.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.093] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.094] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.094] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.094] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.094] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FLYER98.POC", dwFileAttributes=0x80) returned 0 [0086.094] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FLYER98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\flyer98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.094] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.094] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.095] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.095] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.095] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FLYERHM.POC", dwFileAttributes=0x80) returned 0 [0086.096] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FLYERHM.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\flyerhm.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.096] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.096] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.096] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.096] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.096] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FOLDPROJ.DPV", dwFileAttributes=0x80) returned 0 [0086.096] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FOLDPROJ.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\foldproj.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.097] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.097] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.097] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.097] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.097] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FOLDPROJ.XML", dwFileAttributes=0x80) returned 0 [0086.097] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FOLDPROJ.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\foldproj.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.098] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.098] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.098] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.098] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.098] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FORM98.POC", dwFileAttributes=0x80) returned 0 [0086.098] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FORM98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\form98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.099] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.099] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.099] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.099] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.099] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FORMCTL.POC", dwFileAttributes=0x80) returned 0 [0086.099] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FORMCTL.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\formctl.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.099] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.100] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.100] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.101] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.101] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FS3BOX.POC", dwFileAttributes=0x80) returned 0 [0086.101] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FS3BOX.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\fs3box.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.101] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.101] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.101] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.101] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\GIFT.DPV", dwFileAttributes=0x80) returned 0 [0086.105] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\GIFT.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\gift.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.105] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.105] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.105] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.105] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\GIFT.XML", dwFileAttributes=0x80) returned 0 [0086.107] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\GIFT.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\gift.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.107] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.107] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.107] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.107] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\GIFT98.POC", dwFileAttributes=0x80) returned 0 [0086.108] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\GIFT98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\gift98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.108] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.108] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.109] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.109] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.109] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\GREET11.POC", dwFileAttributes=0x80) returned 0 [0086.109] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\GREET11.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\greet11.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.109] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.109] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.110] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.110] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.110] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\GREETING.DPV", dwFileAttributes=0x80) returned 0 [0086.110] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\GREETING.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\greeting.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.111] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.111] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.111] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.111] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.111] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\GREETING.XML", dwFileAttributes=0x80) returned 0 [0086.111] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\GREETING.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\greeting.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.112] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.112] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.112] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.112] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.112] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\HEADINGBB.DPV", dwFileAttributes=0x80) returned 0 [0086.113] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\HEADINGBB.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\headingbb.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.113] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.113] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.113] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.113] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.113] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\HEADINGBB.POC", dwFileAttributes=0x80) returned 0 [0086.114] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\HEADINGBB.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\headingbb.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.115] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.115] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.116] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.116] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.116] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\INVITE.DPV", dwFileAttributes=0x80) returned 0 [0086.116] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\INVITE.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\invite.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.116] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.116] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.117] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.117] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.117] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\INVITE.XML", dwFileAttributes=0x80) returned 0 [0086.118] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\INVITE.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\invite.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.118] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.118] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.118] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.118] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\INVITE11.POC", dwFileAttributes=0x80) returned 0 [0086.119] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\INVITE11.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\invite11.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.119] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.119] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.119] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.120] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.120] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LABEL.DPV", dwFileAttributes=0x80) returned 0 [0086.120] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LABEL.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\label.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.120] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.120] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.121] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.121] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.121] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LABEL.XML", dwFileAttributes=0x80) returned 0 [0086.122] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LABEL.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\label.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.122] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.122] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.122] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.122] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.123] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LABEL98.POC", dwFileAttributes=0x80) returned 0 [0086.123] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LABEL98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\label98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.123] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.123] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.124] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.124] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LABELHM.POC", dwFileAttributes=0x80) returned 0 [0086.124] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LABELHM.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\labelhm.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.124] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.125] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.125] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.125] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LETTHEAD.DPV", dwFileAttributes=0x80) returned 0 [0086.126] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LETTHEAD.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\letthead.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.127] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.127] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.127] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.127] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LETTHEAD.XML", dwFileAttributes=0x80) returned 0 [0086.128] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LETTHEAD.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\letthead.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.128] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.128] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.128] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.128] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.128] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LINEACT.POC", dwFileAttributes=0x80) returned 0 [0086.129] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LINEACT.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\lineact.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.129] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.129] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.129] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.129] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.129] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LOGO98.POC", dwFileAttributes=0x80) returned 0 [0086.129] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LOGO98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\logo98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.130] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.130] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.130] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.130] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LTHD11.POC", dwFileAttributes=0x80) returned 0 [0086.130] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LTHD11.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\lthd11.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.131] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.131] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.131] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.131] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.131] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LTHD98.POC", dwFileAttributes=0x80) returned 0 [0086.131] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LTHD98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\lthd98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.131] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.131] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.132] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.132] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LTHD98SP.POC", dwFileAttributes=0x80) returned 0 [0086.132] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LTHD98SP.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\lthd98sp.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.132] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.132] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.133] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.133] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.133] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LTHDHM.POC", dwFileAttributes=0x80) returned 0 [0086.133] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LTHDHM.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\lthdhm.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.134] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.134] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.134] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.134] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\MAIN.XML", dwFileAttributes=0x80) returned 0 [0086.134] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\MAIN.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\main.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.134] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.135] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.135] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.135] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\MARQUEE.POC", dwFileAttributes=0x80) returned 0 [0086.136] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\MARQUEE.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\marquee.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.136] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.136] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.137] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.137] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\MENU.DPV", dwFileAttributes=0x80) returned 0 [0086.137] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\MENU.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\menu.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.137] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.137] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.137] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.137] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.138] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\MENU.XML", dwFileAttributes=0x80) returned 0 [0086.138] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\MENU.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\menu.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.138] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.138] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.143] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.143] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\MENU98.POC", dwFileAttributes=0x80) returned 0 [0086.144] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\MENU98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\menu98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.144] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.144] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.145] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.145] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.145] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\MSTHED98.POC", dwFileAttributes=0x80) returned 0 [0086.146] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\MSTHED98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\msthed98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.146] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.146] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.147] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.147] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.147] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\NAVBAR11.POC", dwFileAttributes=0x80) returned 0 [0086.147] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\NAVBAR11.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\navbar11.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.147] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.147] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.147] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.147] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.148] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\NAVBARV.POC", dwFileAttributes=0x80) returned 0 [0086.148] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\NAVBARV.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\navbarv.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.148] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.148] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.148] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.148] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.149] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\NAVBRPH1.POC", dwFileAttributes=0x80) returned 0 [0086.149] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\NAVBRPH1.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\navbrph1.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.149] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.149] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.149] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.149] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\NAVBRPH2.POC", dwFileAttributes=0x80) returned 0 [0086.150] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\NAVBRPH2.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\navbrph2.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.150] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.150] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.150] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.151] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.151] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\NEWS.DPV", dwFileAttributes=0x80) returned 0 [0086.152] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\NEWS.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\news.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.152] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.152] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.152] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.152] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\NEWS.XML", dwFileAttributes=0x80) returned 0 [0086.153] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\NEWS.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\news.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.153] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.153] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.153] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.153] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\NEWS11.POC", dwFileAttributes=0x80) returned 0 [0086.154] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\NEWS11.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\news11.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.154] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.154] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.154] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.154] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.155] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\NEWS98.POC", dwFileAttributes=0x80) returned 0 [0086.155] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\NEWS98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\news98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.155] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.155] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.155] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.155] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.155] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\NEWSHM.POC", dwFileAttributes=0x80) returned 0 [0086.156] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\NEWSHM.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\newshm.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.156] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.156] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.156] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.156] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\ORIG98.POC", dwFileAttributes=0x80) returned 0 [0086.157] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\ORIG98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\orig98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.157] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.157] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.157] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.157] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.158] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PICCAP98.POC", dwFileAttributes=0x80) returned 0 [0086.158] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PICCAP98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\piccap98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.158] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.158] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.159] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.159] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PICSTYLES.DPV", dwFileAttributes=0x80) returned 0 [0086.159] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PICSTYLES.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\picstyles.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.159] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.159] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.159] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.159] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.160] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PICTPH.POC", dwFileAttributes=0x80) returned 0 [0086.160] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PICTPH.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\pictph.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.160] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.160] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.160] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.160] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PNCTUATE.POC", dwFileAttributes=0x80) returned 0 [0086.161] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PNCTUATE.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\pnctuate.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.161] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.161] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.161] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.161] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\POST98SP.POC", dwFileAttributes=0x80) returned 0 [0086.162] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\POST98SP.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\post98sp.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.162] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.162] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.162] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.162] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\POSTCARD.DPV", dwFileAttributes=0x80) returned 0 [0086.163] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\POSTCARD.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\postcard.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.163] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.163] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.163] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.163] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\POSTCARD.XML", dwFileAttributes=0x80) returned 0 [0086.164] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\POSTCARD.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\postcard.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.164] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.164] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.164] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.164] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\POSTCD11.POC", dwFileAttributes=0x80) returned 0 [0086.165] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\POSTCD11.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\postcd11.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.165] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.165] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.166] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.166] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.166] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\POSTCD98.POC", dwFileAttributes=0x80) returned 0 [0086.166] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\POSTCD98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\postcd98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.166] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.166] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.166] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.166] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PROG98.POC", dwFileAttributes=0x80) returned 0 [0086.167] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PROG98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\prog98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.167] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.167] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.167] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.167] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PROGRAM.DPV", dwFileAttributes=0x80) returned 0 [0086.168] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PROGRAM.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\program.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.168] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.168] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.168] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.168] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.169] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PROGRAM.XML", dwFileAttributes=0x80) returned 0 [0086.169] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PROGRAM.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\program.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.169] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.169] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.169] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.169] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PS10TARG.POC", dwFileAttributes=0x80) returned 0 [0086.170] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PS10TARG.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\ps10targ.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.170] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.170] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.170] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.170] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.171] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PS2SWOOS.POC", dwFileAttributes=0x80) returned 0 [0086.171] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PS2SWOOS.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\ps2swoos.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.171] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.171] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.171] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.171] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.172] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PS9CRNRH.POC", dwFileAttributes=0x80) returned 0 [0086.172] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PS9CRNRH.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\ps9crnrh.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.172] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.172] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.173] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.173] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.173] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PULLQUOTEBB.DPV", dwFileAttributes=0x80) returned 0 [0086.174] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PULLQUOTEBB.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\pullquotebb.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.174] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.174] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.174] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.174] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.174] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PULLQUOTEBB.POC", dwFileAttributes=0x80) returned 0 [0086.174] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PULLQUOTEBB.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\pullquotebb.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.175] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.175] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.175] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.175] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.175] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PULQOT98.POC", dwFileAttributes=0x80) returned 0 [0086.176] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PULQOT98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\pulqot98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.176] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.176] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.176] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.176] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.177] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\QP.DPV", dwFileAttributes=0x80) returned 0 [0086.177] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\QP.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\qp.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.177] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.177] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.177] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.177] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\QP.XML", dwFileAttributes=0x80) returned 0 [0086.178] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\QP.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\qp.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.178] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.178] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.178] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.178] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\QUIKPUBS.POC", dwFileAttributes=0x80) returned 0 [0086.179] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\QUIKPUBS.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\quikpubs.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.179] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.179] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.179] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.179] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.179] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\REPTWIZ.POC", dwFileAttributes=0x80) returned 0 [0086.180] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\REPTWIZ.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\reptwiz.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.180] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.180] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.180] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.180] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.181] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\RES98.POC", dwFileAttributes=0x80) returned 0 [0086.181] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\RES98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\res98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.181] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.181] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.181] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.181] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\RESP98.POC", dwFileAttributes=0x80) returned 0 [0086.182] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\RESP98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\resp98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.182] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.182] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.182] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.182] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\RESUME.DPV", dwFileAttributes=0x80) returned 0 [0086.183] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\RESUME.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\resume.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.183] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.183] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.183] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.183] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.183] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\RESUME.XML", dwFileAttributes=0x80) returned 0 [0086.183] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\RESUME.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\resume.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.184] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.184] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.184] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.184] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.184] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\RSPMECH.POC", dwFileAttributes=0x80) returned 0 [0086.184] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\RSPMECH.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\rspmech.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.185] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.185] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.185] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.185] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.185] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\SIDBAR98.POC", dwFileAttributes=0x80) returned 0 [0086.185] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\SIDBAR98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\sidbar98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.186] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.186] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.186] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.186] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\SIDEBARBB.DPV", dwFileAttributes=0x80) returned 0 [0086.187] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\SIDEBARBB.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\sidebarbb.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.187] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.187] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.187] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.187] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\SIDEBARBB.POC", dwFileAttributes=0x80) returned 0 [0086.188] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\SIDEBARBB.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\sidebarbb.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.188] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.188] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.189] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.189] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.189] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\SIDEBARVERTBB.DPV", dwFileAttributes=0x80) returned 0 [0086.189] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\SIDEBARVERTBB.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\sidebarvertbb.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.190] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.190] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.190] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.190] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.190] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\SIDEBARVERTBB.POC", dwFileAttributes=0x80) returned 0 [0086.190] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\SIDEBARVERTBB.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\sidebarvertbb.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.190] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.190] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.191] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.191] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.191] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\SIGN.DPV", dwFileAttributes=0x80) returned 0 [0086.191] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\SIGN.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\sign.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.191] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.191] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.192] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.192] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.192] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\SIGN.XML", dwFileAttributes=0x80) returned 0 [0086.193] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\SIGN.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\sign.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.193] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.193] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.193] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.193] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.193] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\SIGN98.POC", dwFileAttributes=0x80) returned 0 [0086.193] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\SIGN98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\sign98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.194] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.194] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.194] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.194] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.194] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\SIGNHM.POC", dwFileAttributes=0x80) returned 0 [0086.194] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\SIGNHM.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\signhm.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.194] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.195] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.195] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.195] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.195] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\SNIPE.POC", dwFileAttributes=0x80) returned 0 [0086.195] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\SNIPE.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\snipe.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.195] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.195] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.196] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.196] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.196] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\STORYBB.DPV", dwFileAttributes=0x80) returned 0 [0086.196] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\STORYBB.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\storybb.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.196] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.196] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.196] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.197] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.197] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\STORYBB.POC", dwFileAttributes=0x80) returned 0 [0086.197] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\STORYBB.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\storybb.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.198] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.198] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.198] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.198] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.198] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\STORYVERTBB.DPV", dwFileAttributes=0x80) returned 0 [0086.198] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\STORYVERTBB.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\storyvertbb.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.199] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.199] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.199] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.199] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.199] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\STORYVERTBB.POC", dwFileAttributes=0x80) returned 0 [0086.199] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\STORYVERTBB.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\storyvertbb.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.199] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.199] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.200] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.200] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.200] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\STRBRST.POC", dwFileAttributes=0x80) returned 0 [0086.200] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\STRBRST.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\strbrst.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.200] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.200] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.201] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.201] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.202] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\TEAROFF.POC", dwFileAttributes=0x80) returned 0 [0086.202] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\TEAROFF.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\tearoff.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.202] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.202] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.203] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.203] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.203] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\TOC98.POC", dwFileAttributes=0x80) returned 0 [0086.203] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\TOC98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\toc98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.203] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.203] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.204] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.204] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.204] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WCOMP98.POC", dwFileAttributes=0x80) returned 0 [0086.204] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WCOMP98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\wcomp98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.204] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.204] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.204] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.204] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.205] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WEB11.POC", dwFileAttributes=0x80) returned 0 [0086.205] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WEB11.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\web11.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.206] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.206] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.206] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.206] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.206] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WEBCALSO.POC", dwFileAttributes=0x80) returned 0 [0086.206] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WEBCALSO.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\webcalso.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.206] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.207] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.207] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.207] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.207] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WEBEMAIL.POC", dwFileAttributes=0x80) returned 0 [0086.207] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WEBEMAIL.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\webemail.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.207] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.207] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.208] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.208] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.208] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WEBHED98.POC", dwFileAttributes=0x80) returned 0 [0086.208] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WEBHED98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\webhed98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.208] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.208] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.208] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.208] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.209] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WEBHOME.POC", dwFileAttributes=0x80) returned 0 [0086.209] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WEBHOME.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\webhome.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.209] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.209] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.209] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.209] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.210] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WEBLINK.POC", dwFileAttributes=0x80) returned 0 [0086.210] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WEBLINK.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\weblink.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.210] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.210] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.211] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.211] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.211] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WEBPAGE.DPV", dwFileAttributes=0x80) returned 0 [0086.211] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WEBPAGE.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\webpage.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.211] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.211] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.211] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.211] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.212] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WEBPAGE.XML", dwFileAttributes=0x80) returned 0 [0086.212] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WEBPAGE.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\webpage.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.213] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.213] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.213] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.213] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.213] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WITHCOMP.DPV", dwFileAttributes=0x80) returned 0 [0086.213] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WITHCOMP.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\withcomp.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.213] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.213] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.214] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.214] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.214] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WITHCOMP.XML", dwFileAttributes=0x80) returned 0 [0086.214] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WITHCOMP.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\withcomp.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.214] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.214] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.214] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.215] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.215] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WORDREP.DPV", dwFileAttributes=0x80) returned 0 [0086.215] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WORDREP.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\wordrep.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.215] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.215] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.215] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.215] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.216] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WORDREP.XML", dwFileAttributes=0x80) returned 0 [0086.216] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WORDREP.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\wordrep.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.216] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.216] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.216] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.217] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.217] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WPULQT98.POC", dwFileAttributes=0x80) returned 0 [0086.217] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WPULQT98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\wpulqt98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.217] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.217] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.217] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.218] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.218] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WSIDBR98.POC", dwFileAttributes=0x80) returned 0 [0086.218] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WSIDBR98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\wsidbr98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.218] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.218] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.218] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0086.218] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0086.219] SetLastError (dwErrCode=0x0) [0086.219] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.222] GetLastError () returned 0x5 [0086.222] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0086.222] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.222] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.222] SetLastError (dwErrCode=0x0) [0086.222] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.222] GetLastError () returned 0x5 [0086.222] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0086.222] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.223] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\QUERIES\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0810 [0086.223] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.223] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0086.223] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0086.223] SetLastError (dwErrCode=0x0) [0086.223] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\QUERIES\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\queries\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.223] GetLastError () returned 0x5 [0086.224] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0086.224] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.224] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.224] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.224] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.224] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.224] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.224] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.224] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\REMINDER.WAV", dwFileAttributes=0x80) returned 0 [0086.225] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\REMINDER.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\reminder.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.225] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.225] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.225] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.225] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.225] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.225] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Resources.pri", dwFileAttributes=0x80) returned 0 [0086.226] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Resources.pri" (normalized: "c:\\program files\\microsoft office\\root\\office16\\resources.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.226] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.226] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.226] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.226] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.226] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.226] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RSWOP.ICM", dwFileAttributes=0x80) returned 0 [0086.227] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RSWOP.ICM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\rswop.icm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.227] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.227] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.227] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.227] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.227] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.227] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.227] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.227] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.227] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.227] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.227] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.227] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.228] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.228] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.228] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\runtime-20.win32.bundle", dwFileAttributes=0x80) returned 0 [0086.229] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\runtime-20.win32.bundle" (normalized: "c:\\program files\\microsoft office\\root\\office16\\runtime-20.win32.bundle"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.229] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.229] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.229] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.229] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.229] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\runtime-99.win32.bundle", dwFileAttributes=0x80) returned 0 [0086.229] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\runtime-99.win32.bundle" (normalized: "c:\\program files\\microsoft office\\root\\office16\\runtime-99.win32.bundle"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.230] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.230] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.230] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.230] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.230] SetLastError (dwErrCode=0x0) [0086.230] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.230] GetLastError () returned 0x5 [0086.230] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0086.230] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.230] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SAMPLES\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0450 [0086.230] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.230] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.230] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.231] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SAMPLES\\SOLVSAMP.XLS", dwFileAttributes=0x80) returned 0 [0086.231] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SAMPLES\\SOLVSAMP.XLS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\samples\\solvsamp.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.231] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.231] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.231] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0086.231] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0086.231] SetLastError (dwErrCode=0x0) [0086.231] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SAMPLES\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\samples\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.231] GetLastError () returned 0x5 [0086.232] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0086.232] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.232] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.232] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.232] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.232] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.232] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.232] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.232] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.232] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.232] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.232] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.232] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.232] SetLastError (dwErrCode=0x0) [0086.232] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.232] GetLastError () returned 0x5 [0086.232] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0086.232] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.232] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\sdxs\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0450 [0086.232] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.232] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.232] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.233] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\sdxs\\sdxs.xml", dwFileAttributes=0x80) returned 0 [0086.235] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\sdxs\\sdxs.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\sdxs\\sdxs.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.236] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.236] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.237] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0086.237] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0086.237] SetLastError (dwErrCode=0x0) [0086.237] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\sdxs\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\sdxs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.237] GetLastError () returned 0x5 [0086.237] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0086.237] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.237] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.237] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.237] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.237] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.237] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.237] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.237] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.237] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.237] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.237] SetLastError (dwErrCode=0x0) [0086.237] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.237] GetLastError () returned 0x5 [0086.237] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0086.237] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.238] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SkypeSrv\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0450 [0086.239] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.239] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.239] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.239] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.239] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.239] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.239] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.239] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SkypeSrv\\SKYPESERVER.TLB", dwFileAttributes=0x80) returned 0 [0086.239] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SkypeSrv\\SKYPESERVER.TLB" (normalized: "c:\\program files\\microsoft office\\root\\office16\\skypesrv\\skypeserver.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.240] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.240] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.240] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0086.240] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0086.241] SetLastError (dwErrCode=0x0) [0086.241] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SkypeSrv\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\skypesrv\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.244] GetLastError () returned 0x5 [0086.244] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0086.244] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.244] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.244] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.244] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.244] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.244] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.244] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.244] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.244] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.244] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.244] SetLastError (dwErrCode=0x0) [0086.244] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.245] GetLastError () returned 0x5 [0086.245] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0086.245] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.245] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\STARTUP\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a08d0 [0086.245] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.245] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0086.245] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0086.245] SetLastError (dwErrCode=0x0) [0086.245] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\STARTUP\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\startup\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.246] GetLastError () returned 0x5 [0086.246] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0086.246] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.246] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.246] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.246] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.246] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.246] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.246] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.246] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.246] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.246] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.246] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.246] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.246] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.246] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.246] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.246] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.246] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.246] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.246] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.246] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.246] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.247] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\udf-host.win32.bundle", dwFileAttributes=0x80) returned 0 [0086.247] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\udf-host.win32.bundle" (normalized: "c:\\program files\\microsoft office\\root\\office16\\udf-host.win32.bundle"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.247] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.247] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.247] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.247] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.247] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.247] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.247] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.248] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBLZ0007.TLL", dwFileAttributes=0x80) returned 0 [0086.250] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBLZ0007.TLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\vblz0007.tll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.250] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.250] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.250] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.250] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.250] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBLZ0009.TLL", dwFileAttributes=0x80) returned 0 [0086.251] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBLZ0009.TLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\vblz0009.tll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.251] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.251] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.251] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.251] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.252] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBLZ000C.TLL", dwFileAttributes=0x80) returned 0 [0086.252] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBLZ000C.TLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\vblz000c.tll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.252] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.253] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.253] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.253] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.253] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBLZ0011.TLL", dwFileAttributes=0x80) returned 0 [0086.253] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBLZ0011.TLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\vblz0011.tll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.253] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.253] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.254] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.254] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.254] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBS2EXCL.XSL", dwFileAttributes=0x80) returned 0 [0086.255] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBS2EXCL.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\vbs2excl.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.255] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.255] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.256] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.256] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.256] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBS2WORD.XSL", dwFileAttributes=0x80) returned 0 [0086.256] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBS2WORD.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\vbs2word.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.256] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.256] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.257] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.257] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.257] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.257] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.257] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.257] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.257] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.257] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.257] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.257] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.257] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0086.257] SetLastError (dwErrCode=0x0) [0086.257] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.257] GetLastError () returned 0x5 [0086.257] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0086.257] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.257] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0450 [0086.257] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.257] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0086.257] SetLastError (dwErrCode=0x0) [0086.257] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.258] GetLastError () returned 0x5 [0086.258] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0086.258] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.258] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0810 [0086.259] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.267] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.267] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.268] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ACTDIR_M.VSTX", dwFileAttributes=0x80) returned 0 [0086.268] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ACTDIR_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\actdir_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.269] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.269] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.269] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.269] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.269] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ACTDIR_U.VSTX", dwFileAttributes=0x80) returned 0 [0086.270] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ACTDIR_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\actdir_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.270] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.270] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.270] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.270] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.270] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.270] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.271] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ADO_M.VSSX", dwFileAttributes=0x80) returned 0 [0086.271] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ADO_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\ado_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.271] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.271] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.272] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.272] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.272] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ADO_U.VSSX", dwFileAttributes=0x80) returned 0 [0086.273] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ADO_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\ado_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.273] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.273] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.273] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.273] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.273] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ADS_M.VSSX", dwFileAttributes=0x80) returned 0 [0086.274] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ADS_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\ads_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.274] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.274] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.274] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.274] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.275] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ADS_U.VSSX", dwFileAttributes=0x80) returned 0 [0086.275] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ADS_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\ads_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.275] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.275] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.275] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.275] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.276] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ALARM_M.VSSX", dwFileAttributes=0x80) returned 0 [0086.276] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ALARM_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\alarm_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.276] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.276] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.276] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.276] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.277] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ALARM_U.VSSX", dwFileAttributes=0x80) returned 0 [0086.277] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ALARM_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\alarm_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.277] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.277] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.277] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.277] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.277] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ANALYTICS_M.VSSX", dwFileAttributes=0x80) returned 0 [0086.278] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ANALYTICS_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\analytics_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.278] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.278] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.279] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.279] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.279] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ANALYTICS_U.VSSX", dwFileAttributes=0x80) returned 0 [0086.280] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ANALYTICS_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\analytics_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.280] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.280] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.280] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.280] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.281] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ANIMALS_M.VSSX", dwFileAttributes=0x80) returned 0 [0086.281] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ANIMALS_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\animals_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.282] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.282] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.282] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.282] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ANIMALS_U.VSSX", dwFileAttributes=0x80) returned 0 [0086.283] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ANIMALS_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\animals_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.283] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.283] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.283] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.283] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.284] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ANNOT_M.VSSX", dwFileAttributes=0x80) returned 0 [0086.284] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ANNOT_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\annot_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.284] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.284] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.285] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.285] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.285] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ANNOT_U.VSSX", dwFileAttributes=0x80) returned 0 [0086.286] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ANNOT_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\annot_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.286] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.286] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.286] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.286] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.286] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\APPAREL_M.VSSX", dwFileAttributes=0x80) returned 0 [0086.287] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\APPAREL_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\apparel_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.287] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.287] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.287] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.287] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.288] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\APPAREL_U.VSSX", dwFileAttributes=0x80) returned 0 [0086.288] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\APPAREL_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\apparel_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.289] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.289] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.289] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.289] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.289] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\APPL_M.VSSX", dwFileAttributes=0x80) returned 0 [0086.290] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\APPL_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\appl_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.290] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.290] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.290] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.290] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.290] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\APPL_U.VSSX", dwFileAttributes=0x80) returned 0 [0086.291] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\APPL_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\appl_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.291] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.291] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.292] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.292] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.292] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\APPL_VISIO2013_M.VSSX", dwFileAttributes=0x80) returned 0 [0086.293] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\APPL_VISIO2013_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\appl_visio2013_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.293] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.293] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.294] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.294] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.294] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\APPL_VISIO2013_U.VSSX", dwFileAttributes=0x80) returned 0 [0086.295] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\APPL_VISIO2013_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\appl_visio2013_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.295] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.295] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.295] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.295] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.295] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ARROWS2_M.VSSX", dwFileAttributes=0x80) returned 0 [0086.296] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ARROWS2_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\arrows2_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.296] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.296] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.297] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.297] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.297] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ARROWS2_U.VSSX", dwFileAttributes=0x80) returned 0 [0086.297] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ARROWS2_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\arrows2_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.297] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.297] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.298] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.298] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.298] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ARROWS_M.VSSX", dwFileAttributes=0x80) returned 0 [0086.298] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ARROWS_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\arrows_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.298] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.298] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.299] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.299] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.299] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ARROWS_U.VSSX", dwFileAttributes=0x80) returned 0 [0086.299] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ARROWS_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\arrows_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.299] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.299] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.300] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.300] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.300] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ARTS_M.VSSX", dwFileAttributes=0x80) returned 0 [0086.300] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ARTS_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\arts_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.301] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.301] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.301] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.301] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.301] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ARTS_U.VSSX", dwFileAttributes=0x80) returned 0 [0086.301] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ARTS_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\arts_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.302] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.302] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.302] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.302] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ASSOCIATIONS_UML_CLASS_M.VSTX", dwFileAttributes=0x80) returned 0 [0086.303] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ASSOCIATIONS_UML_CLASS_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\associations_uml_class_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.303] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.304] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.304] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.304] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.304] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ASSOCIATIONS_UML_CLASS_U.VSTX", dwFileAttributes=0x80) returned 0 [0086.305] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ASSOCIATIONS_UML_CLASS_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\associations_uml_class_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.305] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.305] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.305] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.308] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.309] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\AUDIT_DATAVISUALIZERPROCESSMAP.XLTX", dwFileAttributes=0x80) returned 0 [0086.309] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\AUDIT_DATAVISUALIZERPROCESSMAP.XLTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\audit_datavisualizerprocessmap.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.309] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.309] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.309] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.309] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.310] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\AUDIT_DATAVISUALIZER_M.VSTX", dwFileAttributes=0x80) returned 0 [0086.310] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\AUDIT_DATAVISUALIZER_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\audit_datavisualizer_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.310] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.310] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.311] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.311] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.311] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\AUDIT_DATAVISUALIZER_U.VSTX", dwFileAttributes=0x80) returned 0 [0086.311] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\AUDIT_DATAVISUALIZER_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\audit_datavisualizer_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.311] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.311] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.311] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.311] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.312] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\AUDIT_M.VSSX", dwFileAttributes=0x80) returned 0 [0086.312] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\AUDIT_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\audit_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.312] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.312] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.312] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.312] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.313] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\AUDIT_M.VSTX", dwFileAttributes=0x80) returned 0 [0086.313] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\AUDIT_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\audit_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.313] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.313] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.313] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.313] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.314] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\AUDIT_SEVERAL_OUTCOMES_M.VSTX", dwFileAttributes=0x80) returned 0 [0086.314] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\AUDIT_SEVERAL_OUTCOMES_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\audit_several_outcomes_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.314] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.314] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.314] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.314] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.315] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\AUDIT_SEVERAL_OUTCOMES_U.VSTX", dwFileAttributes=0x80) returned 0 [0086.315] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\AUDIT_SEVERAL_OUTCOMES_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\audit_several_outcomes_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.315] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.315] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.315] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.315] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.315] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\AUDIT_SUBPROCESS_M.VSTX", dwFileAttributes=0x80) returned 0 [0086.316] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\AUDIT_SUBPROCESS_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\audit_subprocess_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.316] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.316] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.316] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.316] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.316] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\AUDIT_SUBPROCESS_U.VSTX", dwFileAttributes=0x80) returned 0 [0086.317] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\AUDIT_SUBPROCESS_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\audit_subprocess_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.317] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.317] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.317] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.317] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.317] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\AUDIT_U.VSSX", dwFileAttributes=0x80) returned 0 [0086.318] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\AUDIT_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\audit_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.318] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.318] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.318] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.319] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.319] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\AUDIT_U.VSTX", dwFileAttributes=0x80) returned 0 [0086.320] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\AUDIT_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\audit_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.320] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.320] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.320] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.320] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.320] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASFLO_M.VSSX", dwFileAttributes=0x80) returned 0 [0086.321] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASFLO_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\basflo_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.321] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.321] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.321] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.321] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.321] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASFLO_M.VSTX", dwFileAttributes=0x80) returned 0 [0086.322] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASFLO_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\basflo_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.322] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.322] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.322] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.322] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASFLO_U.VSSX", dwFileAttributes=0x80) returned 0 [0086.324] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASFLO_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\basflo_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.326] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.326] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.327] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.327] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.327] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASFLO_U.VSTX", dwFileAttributes=0x80) returned 0 [0086.327] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASFLO_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\basflo_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.327] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.327] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.328] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.328] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.328] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASICCIRCUIT_DIAGRAM_M.VSTX", dwFileAttributes=0x80) returned 0 [0086.330] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASICCIRCUIT_DIAGRAM_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\basiccircuit_diagram_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.330] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.330] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.330] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.330] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.331] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASICCIRCUIT_DIAGRAM_U.VSTX", dwFileAttributes=0x80) returned 0 [0086.331] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASICCIRCUIT_DIAGRAM_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\basiccircuit_diagram_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.332] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.332] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.332] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.332] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.332] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASICD_M.VSTX", dwFileAttributes=0x80) returned 0 [0086.333] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASICD_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\basicd_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.333] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.333] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.333] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.333] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASICD_U.VSTX", dwFileAttributes=0x80) returned 0 [0086.334] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASICD_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\basicd_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.334] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.334] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.334] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.334] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASICELECTRICAL_DIAGRAM_M.VSTX", dwFileAttributes=0x80) returned 0 [0086.335] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASICELECTRICAL_DIAGRAM_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\basicelectrical_diagram_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.335] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.335] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.335] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.335] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASICELECTRICAL_DIAGRAM_U.VSTX", dwFileAttributes=0x80) returned 0 [0086.336] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASICELECTRICAL_DIAGRAM_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\basicelectrical_diagram_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.336] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.336] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.336] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.336] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.336] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASIC_AUDITDIAGRAM_M.VSTX", dwFileAttributes=0x80) returned 0 [0086.336] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASIC_AUDITDIAGRAM_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\basic_auditdiagram_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.337] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.337] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.337] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.337] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.337] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASIC_AUDITDIAGRAM_U.VSTX", dwFileAttributes=0x80) returned 0 [0086.337] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASIC_AUDITDIAGRAM_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\basic_auditdiagram_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.338] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.338] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.338] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.338] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.338] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASIC_GANTTCHART_M.VSTX", dwFileAttributes=0x80) returned 0 [0086.338] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASIC_GANTTCHART_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\basic_ganttchart_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.338] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.339] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.339] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.339] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.339] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASIC_GANTTCHART_U.VSTX", dwFileAttributes=0x80) returned 0 [0086.339] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASIC_GANTTCHART_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\basic_ganttchart_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.339] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.339] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.340] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.340] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.340] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASIC_HOME_NETWORK_M.VSTX", dwFileAttributes=0x80) returned 0 [0086.340] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASIC_HOME_NETWORK_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\basic_home_network_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.340] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.340] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.341] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.341] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.341] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASIC_HOME_NETWORK_U.VSTX", dwFileAttributes=0x80) returned 0 [0086.341] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASIC_HOME_NETWORK_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\basic_home_network_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.341] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.341] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.342] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.342] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.342] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASIC_M.VSSX", dwFileAttributes=0x80) returned 0 [0086.343] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASIC_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\basic_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.343] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.343] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.343] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.343] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.343] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASIC_U.VSSX", dwFileAttributes=0x80) returned 0 [0086.344] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASIC_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\basic_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.344] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.344] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.344] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.348] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.349] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASIC_UMLSEQUENCE_M.VSTX", dwFileAttributes=0x80) returned 0 [0086.349] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASIC_UMLSEQUENCE_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\basic_umlsequence_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.349] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.349] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.349] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.349] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.350] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASIC_UMLSEQUENCE_U.VSTX", dwFileAttributes=0x80) returned 0 [0086.350] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASIC_UMLSEQUENCE_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\basic_umlsequence_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.350] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.350] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.350] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.350] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.351] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BA_DEC_M.VSSX", dwFileAttributes=0x80) returned 0 [0086.351] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BA_DEC_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\ba_dec_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.351] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.351] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.352] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.352] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.352] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BA_DEC_U.VSSX", dwFileAttributes=0x80) returned 0 [0086.352] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BA_DEC_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\ba_dec_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.352] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.352] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.353] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.353] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.353] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BA_GRP_M.VSSX", dwFileAttributes=0x80) returned 0 [0086.353] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BA_GRP_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\ba_grp_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.353] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.353] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.354] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.354] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.354] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BA_GRP_U.VSSX", dwFileAttributes=0x80) returned 0 [0086.354] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BA_GRP_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\ba_grp_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.354] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.354] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.354] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.354] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.355] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BCKGRN_M.VSSX", dwFileAttributes=0x80) returned 0 [0086.355] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BCKGRN_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bckgrn_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.356] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.356] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.356] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.356] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.356] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BCKGRN_U.VSSX", dwFileAttributes=0x80) returned 0 [0086.357] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BCKGRN_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bckgrn_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.357] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.357] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.357] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.357] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.358] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BELTORGCHART_M.VSTX", dwFileAttributes=0x80) returned 0 [0086.358] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BELTORGCHART_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\beltorgchart_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.358] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.358] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.358] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.358] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.359] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BELTORGCHART_U.VSTX", dwFileAttributes=0x80) returned 0 [0086.359] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BELTORGCHART_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\beltorgchart_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.359] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.359] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.359] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.359] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.360] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BF_DATAVISUALIZERPROCESSMAP.XLTX", dwFileAttributes=0x80) returned 0 [0086.360] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BF_DATAVISUALIZERPROCESSMAP.XLTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bf_datavisualizerprocessmap.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.360] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.360] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.361] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.361] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.361] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BF_DATAVISUALIZER_M.VSTX", dwFileAttributes=0x80) returned 0 [0086.361] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BF_DATAVISUALIZER_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bf_datavisualizer_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.361] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.361] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.362] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.362] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.362] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BF_DATAVISUALIZER_U.VSTX", dwFileAttributes=0x80) returned 0 [0086.365] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BF_DATAVISUALIZER_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bf_datavisualizer_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.365] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.366] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.366] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.366] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.366] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLDCOR_M.VSSX", dwFileAttributes=0x80) returned 0 [0086.366] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLDCOR_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bldcor_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.367] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.367] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.367] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.367] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.367] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLDCOR_U.VSSX", dwFileAttributes=0x80) returned 0 [0086.367] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLDCOR_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bldcor_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.368] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.368] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.368] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.368] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.368] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLDCOR_VISIO2013_M.VSSX", dwFileAttributes=0x80) returned 0 [0086.369] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLDCOR_VISIO2013_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bldcor_visio2013_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.370] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.370] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.370] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.370] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.371] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLDCOR_VISIO2013_U.VSSX", dwFileAttributes=0x80) returned 0 [0086.372] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLDCOR_VISIO2013_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bldcor_visio2013_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.372] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.372] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.372] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.372] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.373] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLDGPLAN.DWG", dwFileAttributes=0x80) returned 0 [0086.374] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLDGPLAN.DWG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bldgplan.dwg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.374] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.374] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.375] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.375] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.375] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLDGPLAN.JPG", dwFileAttributes=0x80) returned 0 [0086.376] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLDGPLAN.JPG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bldgplan.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.376] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.376] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.376] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.376] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.376] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCK3_M.VSSX", dwFileAttributes=0x80) returned 0 [0086.377] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCK3_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\block3_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.378] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.378] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.378] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.378] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.379] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCK3_U.VSSX", dwFileAttributes=0x80) returned 0 [0086.379] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCK3_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\block3_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.379] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.379] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.379] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.379] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.380] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCKP_M.VSSX", dwFileAttributes=0x80) returned 0 [0086.380] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCKP_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\blockp_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.381] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.381] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.381] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.381] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.381] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCKP_M.VSTX", dwFileAttributes=0x80) returned 0 [0086.382] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCKP_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\blockp_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.382] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.382] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.382] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.382] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.383] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCKP_U.VSSX", dwFileAttributes=0x80) returned 0 [0086.383] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCKP_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\blockp_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.385] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.385] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.385] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.385] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.385] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCKP_U.VSTX", dwFileAttributes=0x80) returned 0 [0086.386] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCKP_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\blockp_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.387] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.387] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.387] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.387] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.387] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCKS.DWG", dwFileAttributes=0x80) returned 0 [0086.388] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCKS.DWG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\blocks.dwg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.388] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.388] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.388] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.388] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.390] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCK_M.VSSX", dwFileAttributes=0x80) returned 0 [0086.390] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCK_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\block_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.391] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.391] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.391] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.391] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.391] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCK_M.VSTX", dwFileAttributes=0x80) returned 0 [0086.391] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCK_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\block_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.393] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.393] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.393] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.393] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.393] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCK_U.VSSX", dwFileAttributes=0x80) returned 0 [0086.394] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCK_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\block_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.394] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.394] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.394] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.395] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCK_U.VSTX", dwFileAttributes=0x80) returned 0 [0086.395] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCK_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\block_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.395] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.395] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.395] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.395] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.396] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BORDRS_M.VSSX", dwFileAttributes=0x80) returned 0 [0086.397] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BORDRS_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bordrs_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.397] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.397] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.397] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.397] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.397] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BORDRS_U.VSSX", dwFileAttributes=0x80) returned 0 [0086.398] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BORDRS_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bordrs_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.398] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.398] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.398] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.403] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.403] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPMN_ADDRESS_CHANGE_PROCESS_M.VSTX", dwFileAttributes=0x80) returned 0 [0086.404] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPMN_ADDRESS_CHANGE_PROCESS_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bpmn_address_change_process_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.404] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.404] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.405] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.405] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.405] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPMN_ADDRESS_CHANGE_PROCESS_U.VSTX", dwFileAttributes=0x80) returned 0 [0086.405] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPMN_ADDRESS_CHANGE_PROCESS_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bpmn_address_change_process_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.406] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.406] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.406] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.406] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPMN_M.VSSX", dwFileAttributes=0x80) returned 0 [0086.406] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPMN_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bpmn_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.406] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.406] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.407] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.407] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.407] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPMN_M.VSTX", dwFileAttributes=0x80) returned 0 [0086.407] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPMN_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bpmn_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.407] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.407] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.408] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.408] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.408] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPMN_PROCESS_GATEWAY_M.VSTX", dwFileAttributes=0x80) returned 0 [0086.466] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPMN_PROCESS_GATEWAY_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bpmn_process_gateway_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.466] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.466] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.467] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.467] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPMN_PROCESS_GATEWAY_U.VSTX", dwFileAttributes=0x80) returned 0 [0086.508] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPMN_PROCESS_GATEWAY_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bpmn_process_gateway_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.508] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.508] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.508] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.508] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPMN_PROCESS_MULTIPLE_ROLES_M.VSTX", dwFileAttributes=0x80) returned 0 [0086.509] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPMN_PROCESS_MULTIPLE_ROLES_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bpmn_process_multiple_roles_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.509] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.509] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.509] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.509] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPMN_PROCESS_MULTIPLE_ROLES_U.VSTX", dwFileAttributes=0x80) returned 0 [0086.510] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPMN_PROCESS_MULTIPLE_ROLES_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bpmn_process_multiple_roles_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.510] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.510] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.510] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.510] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.511] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPMN_U.VSSX", dwFileAttributes=0x80) returned 0 [0086.511] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPMN_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bpmn_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.511] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.511] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.512] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.512] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPMN_U.VSTX", dwFileAttributes=0x80) returned 0 [0086.512] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPMN_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bpmn_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.515] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.515] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.515] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.515] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.515] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPRES_M.VSSX", dwFileAttributes=0x80) returned 0 [0086.517] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPRES_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bpres_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.518] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.518] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.518] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.518] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.518] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPRES_U.VSSX", dwFileAttributes=0x80) returned 0 [0086.519] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPRES_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bpres_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.519] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.519] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.519] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.519] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BRAINSTM.XML", dwFileAttributes=0x80) returned 0 [0086.521] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BRAINSTM.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\brainstm.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.521] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.521] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.521] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.521] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BSTORM_EXPL_M.VSTX", dwFileAttributes=0x80) returned 0 [0086.521] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BSTORM_EXPL_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bstorm_expl_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.522] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.522] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.522] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.522] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.522] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BSTORM_EXPL_U.VSTX", dwFileAttributes=0x80) returned 0 [0086.523] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BSTORM_EXPL_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bstorm_expl_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.523] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.523] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.523] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.523] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.524] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BSTORM_LGND_M.VSTX", dwFileAttributes=0x80) returned 0 [0086.524] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BSTORM_LGND_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bstorm_lgnd_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.524] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.524] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.524] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.524] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.525] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BSTORM_LGND_U.VSTX", dwFileAttributes=0x80) returned 0 [0086.525] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BSTORM_LGND_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bstorm_lgnd_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.525] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.525] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.525] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.525] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.525] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BSTORM_M.VSSX", dwFileAttributes=0x80) returned 0 [0086.526] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BSTORM_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bstorm_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.527] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.527] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.527] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.527] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BSTORM_M.VSTX", dwFileAttributes=0x80) returned 0 [0086.528] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BSTORM_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bstorm_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.528] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.528] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.529] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.529] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BSTORM_U.VSSX", dwFileAttributes=0x80) returned 0 [0086.530] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BSTORM_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bstorm_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.531] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.531] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.531] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.531] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BSTORM_U.VSTX", dwFileAttributes=0x80) returned 0 [0086.532] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BSTORM_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bstorm_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.532] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.532] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.532] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.532] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.532] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BTHKT_M.VSSX", dwFileAttributes=0x80) returned 0 [0086.533] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BTHKT_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bthkt_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.533] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.533] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.534] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.534] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.534] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BTHKT_U.VSSX", dwFileAttributes=0x80) returned 0 [0086.534] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BTHKT_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bthkt_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.534] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.534] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.535] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.535] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BTHKT_VISIO2013_M.VSSX", dwFileAttributes=0x80) returned 0 [0086.535] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BTHKT_VISIO2013_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bthkt_visio2013_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.535] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.535] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.536] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.536] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.536] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BTHKT_VISIO2013_U.VSSX", dwFileAttributes=0x80) returned 0 [0086.537] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BTHKT_VISIO2013_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bthkt_visio2013_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.537] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.537] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.537] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.537] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.538] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BUILDINGS_M.VSSX", dwFileAttributes=0x80) returned 0 [0086.538] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BUILDINGS_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\buildings_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.539] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.539] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.539] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.539] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.540] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BUILDINGS_U.VSSX", dwFileAttributes=0x80) returned 0 [0086.540] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BUILDINGS_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\buildings_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.540] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.540] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.541] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.541] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.541] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BUSINESS_M.VSSX", dwFileAttributes=0x80) returned 0 [0086.542] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BUSINESS_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\business_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.542] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.542] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.542] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.542] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.542] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BUSINESS_U.VSSX", dwFileAttributes=0x80) returned 0 [0086.543] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BUSINESS_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\business_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.543] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.543] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.543] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.543] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.543] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CABNT_M.VSSX", dwFileAttributes=0x80) returned 0 [0086.543] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CABNT_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\cabnt_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.545] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.545] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.545] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.629] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CABNT_U.VSSX", dwFileAttributes=0x80) returned 0 [0086.630] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CABNT_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\cabnt_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.630] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.630] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.631] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.631] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.631] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CABNT_VISIO2013_M.VSSX", dwFileAttributes=0x80) returned 0 [0086.631] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CABNT_VISIO2013_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\cabnt_visio2013_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.631] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.631] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.632] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.632] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CABNT_VISIO2013_U.VSSX", dwFileAttributes=0x80) returned 0 [0086.632] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CABNT_VISIO2013_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\cabnt_visio2013_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.633] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.633] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.633] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.633] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CALNDR_M.VSSX", dwFileAttributes=0x80) returned 0 [0086.633] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CALNDR_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\calndr_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.635] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.635] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.635] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.635] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CALNDR_M.VSTX", dwFileAttributes=0x80) returned 0 [0086.636] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CALNDR_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\calndr_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.636] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.636] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.636] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.636] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CALNDR_U.VSSX", dwFileAttributes=0x80) returned 0 [0086.637] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CALNDR_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\calndr_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.637] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.637] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.638] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.638] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.638] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CALNDR_U.VSTX", dwFileAttributes=0x80) returned 0 [0086.639] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CALNDR_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\calndr_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.639] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.639] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.639] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.639] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.640] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CALOUT_M.VSSX", dwFileAttributes=0x80) returned 0 [0086.642] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CALOUT_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\calout_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.642] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.642] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.642] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.642] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CALOUT_U.VSSX", dwFileAttributes=0x80) returned 0 [0086.643] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CALOUT_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\calout_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.643] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.643] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.644] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.644] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.644] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CAUSEF_M.VSSX", dwFileAttributes=0x80) returned 0 [0086.644] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CAUSEF_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\causef_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.644] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.644] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.644] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.645] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.645] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CAUSEF_M.VSTX", dwFileAttributes=0x80) returned 0 [0086.646] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CAUSEF_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\causef_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.646] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.646] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.646] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.646] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CAUSEF_U.VSSX", dwFileAttributes=0x80) returned 0 [0086.646] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CAUSEF_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\causef_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.647] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.647] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.647] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.647] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CAUSEF_U.VSTX", dwFileAttributes=0x80) returned 0 [0086.648] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CAUSEF_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\causef_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.648] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.648] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.648] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.649] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.649] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CEILPL_M.VSTX", dwFileAttributes=0x80) returned 0 [0086.649] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CEILPL_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\ceilpl_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.652] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.652] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.652] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.652] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.652] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CEILPL_U.VSTX", dwFileAttributes=0x80) returned 0 [0086.653] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CEILPL_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\ceilpl_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.653] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.653] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.653] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.653] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.654] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CELEBRATION_M.VSSX", dwFileAttributes=0x80) returned 0 [0086.655] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CELEBRATION_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\celebration_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.655] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.655] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.655] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.655] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CELEBRATION_U.VSSX", dwFileAttributes=0x80) returned 0 [0086.656] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CELEBRATION_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\celebration_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.656] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.656] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.656] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.656] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.657] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CFF_DATAVISUALIZERPROCESSMAP.XLTX", dwFileAttributes=0x80) returned 0 [0086.657] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CFF_DATAVISUALIZERPROCESSMAP.XLTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\cff_datavisualizerprocessmap.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.657] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.657] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.657] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.657] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CFF_DATAVISUALIZER_M.VSTX", dwFileAttributes=0x80) returned 0 [0086.658] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CFF_DATAVISUALIZER_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\cff_datavisualizer_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.658] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.658] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.658] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.658] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CFF_DATAVISUALIZER_U.VSTX", dwFileAttributes=0x80) returned 0 [0086.659] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CFF_DATAVISUALIZER_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\cff_datavisualizer_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.660] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.660] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.660] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.660] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.660] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CFF_HORIZONTAL_M.VSTX", dwFileAttributes=0x80) returned 0 [0086.660] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CFF_HORIZONTAL_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\cff_horizontal_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.660] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.661] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.661] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.661] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CFF_HORIZONTAL_U.VSTX", dwFileAttributes=0x80) returned 0 [0086.661] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CFF_HORIZONTAL_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\cff_horizontal_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.661] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.661] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.662] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.662] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CFF_SHAREDPROCESS_M.VSTX", dwFileAttributes=0x80) returned 0 [0086.662] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CFF_SHAREDPROCESS_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\cff_sharedprocess_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.662] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.662] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.663] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.663] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.663] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CFF_SHAREDPROCESS_U.VSTX", dwFileAttributes=0x80) returned 0 [0086.663] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CFF_SHAREDPROCESS_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\cff_sharedprocess_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.663] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.663] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.664] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.664] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CFF_VERTICAL_M.VSTX", dwFileAttributes=0x80) returned 0 [0086.664] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CFF_VERTICAL_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\cff_vertical_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.664] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.664] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.665] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.665] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.665] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CFF_VERTICAL_U.VSTX", dwFileAttributes=0x80) returned 0 [0086.665] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CFF_VERTICAL_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\cff_vertical_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.665] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.665] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.665] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.665] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CHART_M.VSSX", dwFileAttributes=0x80) returned 0 [0086.667] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CHART_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\chart_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.667] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.667] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.667] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.667] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CHART_M.VSTX", dwFileAttributes=0x80) returned 0 [0086.667] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CHART_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\chart_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.668] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.668] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.668] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.668] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CHART_U.VSSX", dwFileAttributes=0x80) returned 0 [0086.669] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CHART_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\chart_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.669] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.669] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.669] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.669] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.670] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CHART_U.VSTX", dwFileAttributes=0x80) returned 0 [0086.670] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CHART_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\chart_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.670] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.670] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.671] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.671] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.671] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CIRCULARORGCHART_M.VSTX", dwFileAttributes=0x80) returned 0 [0086.672] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CIRCULARORGCHART_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\circularorgchart_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.672] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.672] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.672] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.674] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CIRCULARORGCHART_U.VSTX", dwFileAttributes=0x80) returned 0 [0086.675] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CIRCULARORGCHART_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\circularorgchart_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.675] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.675] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.676] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.676] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.676] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMMERCE_M.VSSX", dwFileAttributes=0x80) returned 0 [0086.676] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMMERCE_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\commerce_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.677] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.677] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.677] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.677] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMMERCE_U.VSSX", dwFileAttributes=0x80) returned 0 [0086.678] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMMERCE_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\commerce_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.678] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.678] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.678] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.678] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMMUNICATION_M.VSSX", dwFileAttributes=0x80) returned 0 [0086.679] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMMUNICATION_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\communication_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.679] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.679] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.679] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.679] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.680] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMMUNICATION_U.VSSX", dwFileAttributes=0x80) returned 0 [0086.680] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMMUNICATION_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\communication_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.681] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.681] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.681] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.681] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMOLE_M.VSSX", dwFileAttributes=0x80) returned 0 [0086.682] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMOLE_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\comole_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.685] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.685] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.686] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.686] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.686] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMOLE_M.VSTX", dwFileAttributes=0x80) returned 0 [0086.686] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMOLE_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\comole_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.687] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.687] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.687] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.687] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMOLE_U.VSSX", dwFileAttributes=0x80) returned 0 [0086.687] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMOLE_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\comole_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.688] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.688] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.688] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.688] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.688] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMOLE_U.VSTX", dwFileAttributes=0x80) returned 0 [0086.689] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMOLE_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\comole_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.689] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.689] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.689] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.689] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMPLN_M.VSSX", dwFileAttributes=0x80) returned 0 [0086.691] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMPLN_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\compln_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.691] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.691] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.691] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.691] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMPLN_U.VSSX", dwFileAttributes=0x80) returned 0 [0086.692] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMPLN_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\compln_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.692] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.692] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.692] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.692] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.693] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMPME_M.VSSX", dwFileAttributes=0x80) returned 0 [0086.693] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMPME_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\compme_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.694] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.694] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.694] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.694] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMPME_U.VSSX", dwFileAttributes=0x80) returned 0 [0086.696] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMPME_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\compme_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.696] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.696] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.696] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.696] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMPS_M.VSSX", dwFileAttributes=0x80) returned 0 [0086.698] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMPS_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\comps_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.698] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.698] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.698] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.698] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.698] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMPS_U.VSSX", dwFileAttributes=0x80) returned 0 [0086.699] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMPS_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\comps_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.699] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.699] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.699] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.699] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CONLOG_M.VSTX", dwFileAttributes=0x80) returned 0 [0086.720] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CONLOG_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\conlog_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.722] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.722] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.722] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.722] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.722] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CONLOG_U.VSTX", dwFileAttributes=0x80) returned 0 [0086.723] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CONLOG_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\conlog_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.723] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.723] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.723] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.723] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.724] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CONNEC_M.VSSX", dwFileAttributes=0x80) returned 0 [0086.725] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CONNEC_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\connec_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.725] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.725] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.725] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.725] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CONNEC_U.VSSX", dwFileAttributes=0x80) returned 0 [0086.727] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CONNEC_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\connec_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.727] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.727] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.727] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.727] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CUBICL_M.VSSX", dwFileAttributes=0x80) returned 0 [0086.728] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CUBICL_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\cubicl_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.729] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.729] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.729] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.729] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CUBICL_U.VSSX", dwFileAttributes=0x80) returned 0 [0086.733] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CUBICL_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\cubicl_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.733] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.734] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.734] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.734] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CUBICL_VISIO2013_M.VSSX", dwFileAttributes=0x80) returned 0 [0086.734] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CUBICL_VISIO2013_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\cubicl_visio2013_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.735] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.735] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.735] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.735] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CUBICL_VISIO2013_U.VSSX", dwFileAttributes=0x80) returned 0 [0086.736] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CUBICL_VISIO2013_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\cubicl_visio2013_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.736] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.736] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.736] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.736] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CYCLEDIAG_M.VSSX", dwFileAttributes=0x80) returned 0 [0086.740] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CYCLEDIAG_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\cyclediag_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.741] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.741] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.741] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.741] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CYCLEDIAG_U.VSSX", dwFileAttributes=0x80) returned 0 [0086.743] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CYCLEDIAG_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\cyclediag_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.744] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.744] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.744] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.744] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DATAVISUALIZERPREVIEW_M.VSSX", dwFileAttributes=0x80) returned 0 [0086.745] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DATAVISUALIZERPREVIEW_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\datavisualizerpreview_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.745] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.745] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.745] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.745] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DATAVISUALIZERPREVIEW_U.VSSX", dwFileAttributes=0x80) returned 0 [0086.746] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DATAVISUALIZERPREVIEW_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\datavisualizerpreview_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.746] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.746] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.746] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.746] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.747] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DATAVISUALIZER_M.VSSX", dwFileAttributes=0x80) returned 0 [0086.775] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DATAVISUALIZER_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\datavisualizer_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.776] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.776] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.776] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.776] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DATAVISUALIZER_U.VSSX", dwFileAttributes=0x80) returned 0 [0086.778] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DATAVISUALIZER_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\datavisualizer_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.778] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.778] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.778] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.778] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.778] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DATFLO_M.VSSX", dwFileAttributes=0x80) returned 0 [0086.781] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DATFLO_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\datflo_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.781] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.781] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.781] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.781] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DATFLO_M.VSTX", dwFileAttributes=0x80) returned 0 [0086.782] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DATFLO_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\datflo_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.782] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.782] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.782] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.782] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DATFLO_U.VSSX", dwFileAttributes=0x80) returned 0 [0086.783] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DATFLO_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\datflo_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.784] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.784] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.784] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.791] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.791] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DATFLO_U.VSTX", dwFileAttributes=0x80) returned 0 [0086.792] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DATFLO_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\datflo_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.792] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.792] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.792] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.792] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DATMOD_M.VSTX", dwFileAttributes=0x80) returned 0 [0086.793] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DATMOD_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\datmod_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.793] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.793] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.794] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.794] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.794] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DATMOD_U.VSTX", dwFileAttributes=0x80) returned 0 [0086.794] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DATMOD_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\datmod_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.794] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.794] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.795] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.795] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBCHEN_M.VSSX", dwFileAttributes=0x80) returned 0 [0086.795] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBCHEN_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dbchen_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.795] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.795] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.796] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.796] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBCHEN_M.VSTX", dwFileAttributes=0x80) returned 0 [0086.796] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBCHEN_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dbchen_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.797] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.797] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.797] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.797] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.797] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBCHEN_U.VSSX", dwFileAttributes=0x80) returned 0 [0086.798] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBCHEN_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dbchen_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.798] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.798] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.799] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.799] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.799] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBCHEN_U.VSTX", dwFileAttributes=0x80) returned 0 [0086.799] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBCHEN_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dbchen_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.799] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.799] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.799] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.800] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.800] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBCROW_M.VSSX", dwFileAttributes=0x80) returned 0 [0086.800] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBCROW_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dbcrow_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.800] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.800] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.800] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.800] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBCROW_M.VSTX", dwFileAttributes=0x80) returned 0 [0086.801] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBCROW_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dbcrow_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.802] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.802] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.802] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.802] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBCROW_U.VSSX", dwFileAttributes=0x80) returned 0 [0086.804] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBCROW_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dbcrow_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.804] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.804] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.805] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.805] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBCROW_U.VSTX", dwFileAttributes=0x80) returned 0 [0086.805] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBCROW_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dbcrow_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.806] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.806] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.806] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.806] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBIDEF1X_M.VSSX", dwFileAttributes=0x80) returned 0 [0086.807] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBIDEF1X_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dbidef1x_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.807] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.807] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.807] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.807] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.807] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBIDEF1X_M.VSTX", dwFileAttributes=0x80) returned 0 [0086.807] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBIDEF1X_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dbidef1x_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.808] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.808] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.808] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.808] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.809] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBIDEF1X_U.VSSX", dwFileAttributes=0x80) returned 0 [0086.810] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBIDEF1X_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dbidef1x_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.810] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.810] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.811] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.811] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.811] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBIDEF1X_U.VSTX", dwFileAttributes=0x80) returned 0 [0086.811] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBIDEF1X_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dbidef1x_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.811] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.811] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.812] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.812] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.812] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBMODL_M.VSTX", dwFileAttributes=0x80) returned 0 [0086.813] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBMODL_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dbmodl_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.813] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.813] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.813] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.814] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBMODL_U.VSTX", dwFileAttributes=0x80) returned 0 [0086.814] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBMODL_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dbmodl_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.816] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.816] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.816] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.816] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBUML_M.VSSX", dwFileAttributes=0x80) returned 0 [0086.817] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBUML_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dbuml_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.817] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.817] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.818] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.818] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.818] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBUML_M.VSTX", dwFileAttributes=0x80) returned 0 [0086.819] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBUML_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dbuml_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.819] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.819] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.819] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.819] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBUML_U.VSSX", dwFileAttributes=0x80) returned 0 [0086.820] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBUML_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dbuml_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.820] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.820] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.820] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.820] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBUML_U.VSTX", dwFileAttributes=0x80) returned 0 [0086.821] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBUML_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dbuml_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.822] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.822] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.822] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.822] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.822] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DEPTORGCHART_M.VSTX", dwFileAttributes=0x80) returned 0 [0086.823] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DEPTORGCHART_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\deptorgchart_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.823] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.823] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.823] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.823] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.823] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DEPTORGCHART_U.VSTX", dwFileAttributes=0x80) returned 0 [0086.823] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DEPTORGCHART_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\deptorgchart_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.824] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.824] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.824] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.824] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.824] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DGICON_M.VSSX", dwFileAttributes=0x80) returned 0 [0086.826] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DGICON_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dgicon_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.826] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.826] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.826] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.826] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.827] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DGICON_U.VSSX", dwFileAttributes=0x80) returned 0 [0086.827] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DGICON_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dgicon_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.827] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.827] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.828] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.828] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.828] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DIMARC_U.VSSX", dwFileAttributes=0x80) returned 0 [0086.829] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DIMARC_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dimarc_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.829] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.829] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.829] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.829] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DIMENG_M.VSSX", dwFileAttributes=0x80) returned 0 [0086.830] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DIMENG_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dimeng_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.832] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.832] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.832] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.832] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DIMENG_U.VSSX", dwFileAttributes=0x80) returned 0 [0086.833] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DIMENG_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dimeng_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.833] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.833] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.834] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.834] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DOCUMENT_APPROVAL_WORKFLOW_M.VSTX", dwFileAttributes=0x80) returned 0 [0086.834] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DOCUMENT_APPROVAL_WORKFLOW_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\document_approval_workflow_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.834] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.834] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.835] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.835] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DOCUMENT_APPROVAL_WORKFLOW_U.VSTX", dwFileAttributes=0x80) returned 0 [0086.835] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DOCUMENT_APPROVAL_WORKFLOW_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\document_approval_workflow_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.835] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.835] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.836] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.836] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DRAWTL_M.VSSX", dwFileAttributes=0x80) returned 0 [0086.837] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DRAWTL_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\drawtl_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.837] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.837] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.837] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.837] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DRAWTL_U.VSSX", dwFileAttributes=0x80) returned 0 [0086.837] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DRAWTL_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\drawtl_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.838] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.838] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.838] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.841] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DRILLD_M.VSSX", dwFileAttributes=0x80) returned 0 [0086.842] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DRILLD_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\drilld_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.844] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.844] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.844] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.844] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DRILLD_M.VSTX", dwFileAttributes=0x80) returned 0 [0086.846] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DRILLD_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\drilld_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.847] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.847] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.847] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.847] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DRILLD_U.VSSX", dwFileAttributes=0x80) returned 0 [0086.847] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DRILLD_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\drilld_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.848] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.848] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.848] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.848] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DRILLD_U.VSTX", dwFileAttributes=0x80) returned 0 [0086.849] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DRILLD_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\drilld_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.849] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.849] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.849] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.849] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.849] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DTLNET_M.VSSX", dwFileAttributes=0x80) returned 0 [0086.850] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DTLNET_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dtlnet_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.851] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.851] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.851] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.851] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DTLNET_M.VSTX", dwFileAttributes=0x80) returned 0 [0086.852] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DTLNET_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dtlnet_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.852] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.852] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.853] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.853] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DTLNET_U.VSSX", dwFileAttributes=0x80) returned 0 [0086.854] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DTLNET_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dtlnet_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.854] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.854] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.854] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.854] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DTLNET_U.VSTX", dwFileAttributes=0x80) returned 0 [0086.855] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DTLNET_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dtlnet_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.855] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.855] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.855] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.855] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DTLNME_M.VSSX", dwFileAttributes=0x80) returned 0 [0086.856] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DTLNME_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dtlnme_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.856] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.856] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.856] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.857] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DTLNME_M.VSTX", dwFileAttributes=0x80) returned 0 [0086.858] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DTLNME_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dtlnme_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.858] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.858] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.858] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.858] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.859] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DTLNME_U.VSSX", dwFileAttributes=0x80) returned 0 [0086.859] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DTLNME_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dtlnme_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.859] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.859] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.859] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.859] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DTLNME_U.VSTX", dwFileAttributes=0x80) returned 0 [0086.860] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DTLNME_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dtlnme_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.860] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.860] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.860] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.860] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DVCALL_M.VSSX", dwFileAttributes=0x80) returned 0 [0086.862] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DVCALL_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dvcall_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.863] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.863] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.863] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.863] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.864] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DVCALL_U.VSSX", dwFileAttributes=0x80) returned 0 [0086.864] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DVCALL_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dvcall_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.865] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.865] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.865] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.865] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.865] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DWGCNV_M.VSTX", dwFileAttributes=0x80) returned 0 [0086.866] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DWGCNV_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dwgcnv_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.866] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.866] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.866] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.866] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DWGCNV_U.VSTX", dwFileAttributes=0x80) returned 0 [0086.867] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DWGCNV_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dwgcnv_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.867] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.867] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.867] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.867] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EDUCATION_M.VSSX", dwFileAttributes=0x80) returned 0 [0086.868] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EDUCATION_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\education_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.868] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.868] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.869] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.869] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EDUCATION_U.VSSX", dwFileAttributes=0x80) returned 0 [0086.869] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EDUCATION_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\education_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.869] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.869] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.870] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.870] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.870] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EDU_EECHIP_M.VSTX", dwFileAttributes=0x80) returned 0 [0086.871] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EDU_EECHIP_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\edu_eechip_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.872] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.872] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.872] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.872] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EECHIP_M.VSSX", dwFileAttributes=0x80) returned 0 [0086.874] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EECHIP_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eechip_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.874] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.874] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.874] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.874] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EECHIP_M.VSTX", dwFileAttributes=0x80) returned 0 [0086.875] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EECHIP_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eechip_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.876] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.876] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.876] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.876] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.876] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EECHIP_U.VSSX", dwFileAttributes=0x80) returned 0 [0086.876] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EECHIP_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eechip_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.877] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.877] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.877] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.877] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EECHIP_U.VSTX", dwFileAttributes=0x80) returned 0 [0086.877] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EECHIP_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eechip_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.878] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.878] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.878] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.878] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EECOMP_M.VSSX", dwFileAttributes=0x80) returned 0 [0086.888] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EECOMP_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eecomp_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.888] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.888] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.889] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.889] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EECOMP_U.VSSX", dwFileAttributes=0x80) returned 0 [0086.889] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EECOMP_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eecomp_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.889] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.889] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.890] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.890] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEFUND_M.VSSX", dwFileAttributes=0x80) returned 0 [0086.890] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEFUND_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eefund_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.890] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.890] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.891] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.891] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEFUND_U.VSSX", dwFileAttributes=0x80) returned 0 [0086.891] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEFUND_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eefund_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.892] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.892] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.892] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.892] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEFUND_VISIO2013_M.VSSX", dwFileAttributes=0x80) returned 0 [0086.893] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEFUND_VISIO2013_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eefund_visio2013_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.893] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.893] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.893] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.893] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEFUND_VISIO2013_U.VSSX", dwFileAttributes=0x80) returned 0 [0086.894] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEFUND_VISIO2013_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eefund_visio2013_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.894] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.894] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.895] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.895] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEGENR_M.VSTX", dwFileAttributes=0x80) returned 0 [0086.896] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEGENR_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eegenr_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.896] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.896] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.896] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.896] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEGENR_U.VSTX", dwFileAttributes=0x80) returned 0 [0086.897] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEGENR_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eegenr_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.899] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.899] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.899] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.899] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEICS_M.VSTX", dwFileAttributes=0x80) returned 0 [0086.900] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEICS_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eeics_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.900] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.900] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.900] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.900] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEICS_U.VSTX", dwFileAttributes=0x80) returned 0 [0086.901] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEICS_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eeics_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.901] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.901] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.901] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0086.907] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.907] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEMAIN_M.VSSX", dwFileAttributes=0x80) returned 0 [0086.908] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEMAIN_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eemain_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.908] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.908] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.908] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0086.908] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEMAIN_U.VSSX", dwFileAttributes=0x80) returned 0 [0086.909] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEMAIN_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eemain_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.910] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.910] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.099] SetLastError (dwErrCode=0x0) [0089.099] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.102] GetLastError () returned 0x5 [0089.102] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0089.102] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.102] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0089.102] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0089.103] SetLastError (dwErrCode=0x0) [0089.103] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.103] GetLastError () returned 0x5 [0089.103] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0089.103] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.103] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.103] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.103] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.103] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISIO.VisualElementsManifest.xml", dwFileAttributes=0x80) returned 0 [0089.105] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISIO.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio.visualelementsmanifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.105] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.105] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.106] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.106] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VisioCustom.propdesc", dwFileAttributes=0x80) returned 0 [0089.107] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VisioCustom.propdesc" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visiocustom.propdesc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.107] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.108] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.108] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.108] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.108] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.108] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.108] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.108] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.108] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.108] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.108] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.108] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.108] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.108] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.108] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.108] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.108] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.108] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINPROJ.VisualElementsManifest.xml", dwFileAttributes=0x80) returned 0 [0089.109] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINPROJ.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\winproj.visualelementsmanifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.109] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.109] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.110] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.110] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.110] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.110] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINWORD.VisualElementsManifest.xml", dwFileAttributes=0x80) returned 0 [0089.111] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINWORD.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\winword.visualelementsmanifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.111] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.111] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.111] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.111] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.111] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.112] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Wordcnvpxy.cnv", dwFileAttributes=0x80) returned 0 [0089.113] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Wordcnvpxy.cnv" (normalized: "c:\\program files\\microsoft office\\root\\office16\\wordcnvpxy.cnv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.113] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.113] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.113] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.113] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.113] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.113] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.114] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\wordEtw.man", dwFileAttributes=0x80) returned 0 [0089.114] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\wordEtw.man" (normalized: "c:\\program files\\microsoft office\\root\\office16\\wordetw.man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.114] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.114] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.114] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.114] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.114] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.114] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.114] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.114] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.115] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.115] SetLastError (dwErrCode=0x0) [0089.115] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.115] GetLastError () returned 0x5 [0089.115] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0089.115] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.115] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\XLSTART\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0ed0 [0089.115] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.115] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0089.115] FindClose (in: hFindFile=0xd7079a0ed0 | out: hFindFile=0xd7079a0ed0) returned 1 [0089.115] SetLastError (dwErrCode=0x0) [0089.115] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\XLSTART\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\xlstart\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.115] GetLastError () returned 0x5 [0089.115] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0089.116] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.116] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.116] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.116] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\XML2WORD.XSL", dwFileAttributes=0x80) returned 0 [0089.117] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\XML2WORD.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\xml2word.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.117] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.117] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.117] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0089.117] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0089.117] SetLastError (dwErrCode=0x0) [0089.117] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.118] GetLastError () returned 0x5 [0089.118] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0089.118] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.118] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0089.118] SetLastError (dwErrCode=0x0) [0089.118] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.118] GetLastError () returned 0x5 [0089.118] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0089.118] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.118] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079a0bd0 [0089.124] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.125] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.125] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0089.126] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\access.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.126] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.126] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.126] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.126] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.126] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.tree.dat", dwFileAttributes=0x80) returned 0 [0089.127] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\access.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.127] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.127] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.127] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.127] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmui.msi.16.en-us.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0089.127] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\accessmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.128] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.128] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.128] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.128] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.128] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmui.msi.16.en-us.tree.dat", dwFileAttributes=0x80) returned 0 [0089.129] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\accessmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.129] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.129] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.129] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.129] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.129] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmuiset.msi.16.en-us.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0089.130] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmuiset.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\accessmuiset.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.130] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.130] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.130] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.130] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.131] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmuiset.msi.16.en-us.tree.dat", dwFileAttributes=0x80) returned 0 [0089.131] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmuiset.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\accessmuiset.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.132] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.132] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.132] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.132] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcf.x-none.msi.16.x-none.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0089.132] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcf.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\dcf.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.132] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.132] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.133] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.133] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.133] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcf.x-none.msi.16.x-none.tree.dat", dwFileAttributes=0x80) returned 0 [0089.133] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcf.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\dcf.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.133] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.133] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.134] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.134] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcfmui.msi.16.en-us.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0089.134] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcfmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\dcfmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.134] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.135] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.135] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.135] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcfmui.msi.16.en-us.tree.dat", dwFileAttributes=0x80) returned 0 [0089.136] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcfmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\dcfmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.136] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.136] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.136] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.136] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excel.x-none.msi.16.x-none.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0089.137] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excel.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\excel.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.137] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.137] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.137] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.137] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excel.x-none.msi.16.x-none.tree.dat", dwFileAttributes=0x80) returned 0 [0089.137] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excel.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\excel.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.138] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.138] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.138] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.138] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.138] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excelmui.msi.16.en-us.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0089.138] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excelmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\excelmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.138] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.139] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.139] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.139] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.139] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excelmui.msi.16.en-us.tree.dat", dwFileAttributes=0x80) returned 0 [0089.140] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excelmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\excelmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.140] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.140] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.140] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.140] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.140] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groove.x-none.msi.16.x-none.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0089.141] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groove.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\groove.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.141] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.141] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.141] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.141] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.141] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groove.x-none.msi.16.x-none.tree.dat", dwFileAttributes=0x80) returned 0 [0089.141] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groove.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\groove.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.142] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.142] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.142] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.142] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.142] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groovemui.msi.16.en-us.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0089.142] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groovemui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\groovemui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.142] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.142] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.143] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.143] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groovemui.msi.16.en-us.tree.dat", dwFileAttributes=0x80) returned 0 [0089.143] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groovemui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\groovemui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.143] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.143] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.144] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.144] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lync.x-none.msi.16.x-none.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0089.144] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lync.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\lync.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.144] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.144] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.144] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.145] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.145] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lync.x-none.msi.16.x-none.tree.dat", dwFileAttributes=0x80) returned 0 [0089.145] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lync.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\lync.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.145] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.145] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.145] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.145] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.146] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lyncmui.msi.16.en-us.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0089.146] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lyncmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\lyncmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.146] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.146] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.146] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.146] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.147] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lyncmui.msi.16.en-us.tree.dat", dwFileAttributes=0x80) returned 0 [0089.147] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lyncmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\lyncmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.147] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.147] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.147] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.147] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.147] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office.x-none.msi.16.x-none.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0089.148] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.148] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.148] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.148] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.149] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.149] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office.x-none.msi.16.x-none.tree.dat", dwFileAttributes=0x80) returned 0 [0089.149] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.150] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.150] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.151] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.151] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.151] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32mui.msi.16.en-us.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0089.152] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32mui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office32mui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.152] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.152] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.153] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.153] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32mui.msi.16.en-us.tree.dat", dwFileAttributes=0x80) returned 0 [0089.154] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32mui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office32mui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.154] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.154] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.154] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.154] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.154] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32ww.msi.16.x-none.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0089.155] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32ww.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office32ww.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.155] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.155] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.155] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.155] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.155] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32ww.msi.16.x-none.tree.dat", dwFileAttributes=0x80) returned 0 [0089.156] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32ww.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office32ww.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.156] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.156] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.156] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.156] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemui.msi.16.en-us.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0089.157] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\officemui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.157] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.157] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.157] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.157] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemui.msi.16.en-us.tree.dat", dwFileAttributes=0x80) returned 0 [0089.158] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\officemui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.158] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.158] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.159] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.159] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemuiset.msi.16.en-us.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0089.159] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemuiset.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\officemuiset.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.159] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.159] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.160] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.160] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.160] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemuiset.msi.16.en-us.tree.dat", dwFileAttributes=0x80) returned 0 [0089.160] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemuiset.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\officemuiset.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.160] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.160] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.161] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.161] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenote.x-none.msi.16.x-none.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0089.161] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenote.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\onenote.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.161] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.161] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.161] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.161] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenote.x-none.msi.16.x-none.tree.dat", dwFileAttributes=0x80) returned 0 [0089.162] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenote.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\onenote.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.162] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.162] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.162] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.162] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenotemui.msi.16.en-us.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0089.163] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenotemui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\onenotemui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.163] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.163] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.163] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.163] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.164] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenotemui.msi.16.en-us.tree.dat", dwFileAttributes=0x80) returned 0 [0089.164] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenotemui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\onenotemui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.164] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.164] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.165] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.165] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osm.x-none.msi.16.x-none.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0089.165] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osm.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osm.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.165] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.165] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.166] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.166] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.166] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osm.x-none.msi.16.x-none.tree.dat", dwFileAttributes=0x80) returned 0 [0089.167] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osm.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osm.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.167] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.167] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.167] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.167] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmmui.msi.16.en-us.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0089.167] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.168] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.168] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.168] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.168] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmmui.msi.16.en-us.tree.dat", dwFileAttributes=0x80) returned 0 [0089.168] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.169] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.169] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.169] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.169] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.169] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmux.x-none.msi.16.x-none.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0089.170] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmux.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmux.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.170] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.170] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.170] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.170] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.171] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmux.x-none.msi.16.x-none.tree.dat", dwFileAttributes=0x80) returned 0 [0089.171] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmux.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmux.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.171] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.171] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.171] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.171] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.172] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmuxmui.msi.16.en-us.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0089.172] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmuxmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmuxmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.172] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.172] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.172] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.172] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.173] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmuxmui.msi.16.en-us.tree.dat", dwFileAttributes=0x80) returned 0 [0089.173] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmuxmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmuxmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.173] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.173] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.173] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.173] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.173] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlook.x-none.msi.16.x-none.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0089.174] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlook.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\outlook.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.174] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.174] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.174] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.174] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.174] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlook.x-none.msi.16.x-none.tree.dat", dwFileAttributes=0x80) returned 0 [0089.175] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlook.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\outlook.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.175] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.175] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.175] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.175] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.175] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlookmui.msi.16.en-us.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0089.175] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlookmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\outlookmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.176] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.176] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.176] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.177] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.177] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlookmui.msi.16.en-us.tree.dat", dwFileAttributes=0x80) returned 0 [0089.177] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlookmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\outlookmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.177] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.178] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.178] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.178] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0089.179] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.179] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.179] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.179] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.179] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.179] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.tree.dat", dwFileAttributes=0x80) returned 0 [0089.180] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.180] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.180] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.180] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.180] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.180] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0089.181] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.181] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.181] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.181] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.181] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.tree.dat", dwFileAttributes=0x80) returned 0 [0089.182] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.182] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.182] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.182] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.182] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpointmui.msi.16.en-us.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0089.183] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpointmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpointmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.183] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.183] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.183] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.183] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.183] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpointmui.msi.16.en-us.tree.dat", dwFileAttributes=0x80) returned 0 [0089.184] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpointmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpointmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.184] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.184] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.184] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.184] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.185] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\project.x-none.msi.16.x-none.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0089.185] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\project.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\project.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.185] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.185] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.185] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.185] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.186] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\project.x-none.msi.16.x-none.tree.dat", dwFileAttributes=0x80) returned 0 [0089.186] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\project.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\project.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.186] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.186] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.186] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.186] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\projectmui.msi.16.en-us.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0089.187] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\projectmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\projectmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.187] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.187] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.187] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.187] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.188] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\projectmui.msi.16.en-us.tree.dat", dwFileAttributes=0x80) returned 0 [0089.188] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\projectmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\projectmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.188] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.188] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.188] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.188] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.189] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.en-us.msi.16.en-us.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0089.189] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.en-us.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.en-us.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.189] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.189] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.189] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.189] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.190] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.en-us.msi.16.en-us.tree.dat", dwFileAttributes=0x80) returned 0 [0089.190] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.en-us.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.en-us.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.190] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.190] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.190] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.190] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.191] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.es-es.msi.16.es-es.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0089.191] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.es-es.msi.16.es-es.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.es-es.msi.16.es-es.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.191] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.191] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.191] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.191] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.191] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.es-es.msi.16.es-es.tree.dat", dwFileAttributes=0x80) returned 0 [0089.192] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.es-es.msi.16.es-es.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.es-es.msi.16.es-es.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.192] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.192] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.192] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.192] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.192] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0089.197] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.198] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.198] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.198] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.198] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.198] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.tree.dat", dwFileAttributes=0x80) returned 0 [0089.198] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.199] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.199] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.199] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.199] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.199] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proofing.msi.16.en-us.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0089.201] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proofing.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proofing.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.201] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.201] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.201] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.201] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.201] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proofing.msi.16.en-us.tree.dat", dwFileAttributes=0x80) returned 0 [0089.202] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proofing.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proofing.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.202] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.202] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.202] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.202] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.202] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publisher.x-none.msi.16.x-none.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0089.203] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publisher.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\publisher.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.203] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.203] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.203] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.203] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.204] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publisher.x-none.msi.16.x-none.tree.dat", dwFileAttributes=0x80) returned 0 [0089.204] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publisher.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\publisher.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.205] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.205] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.205] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.205] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.205] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publishermui.msi.16.en-us.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0089.205] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publishermui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\publishermui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.206] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.206] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.206] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.206] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.206] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publishermui.msi.16.en-us.tree.dat", dwFileAttributes=0x80) returned 0 [0089.206] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publishermui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\publishermui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.206] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.206] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.207] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.207] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.207] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visio.x-none.msi.16.x-none.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0089.207] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visio.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\visio.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.207] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.207] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.208] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.208] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.208] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visio.x-none.msi.16.x-none.tree.dat", dwFileAttributes=0x80) returned 0 [0089.208] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visio.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\visio.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.208] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.208] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.208] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.208] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.209] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visiomui.msi.16.en-us.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0089.209] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visiomui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\visiomui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.209] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.210] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.210] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.210] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.210] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visiomui.msi.16.en-us.tree.dat", dwFileAttributes=0x80) returned 0 [0089.211] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visiomui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\visiomui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.211] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.211] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.211] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.211] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.211] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\word.x-none.msi.16.x-none.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0089.212] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\word.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\word.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.212] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.212] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.212] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.212] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.212] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\word.x-none.msi.16.x-none.tree.dat", dwFileAttributes=0x80) returned 0 [0089.213] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\word.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\word.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.213] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.213] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.213] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.213] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.214] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\wordmui.msi.16.en-us.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0089.214] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\wordmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\wordmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.214] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.214] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.214] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.214] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.215] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\wordmui.msi.16.en-us.tree.dat", dwFileAttributes=0x80) returned 0 [0089.215] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\wordmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\wordmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.215] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.215] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.215] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0089.215] FindClose (in: hFindFile=0xd7079a0bd0 | out: hFindFile=0xd7079a0bd0) returned 1 [0089.216] SetLastError (dwErrCode=0x0) [0089.216] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.219] GetLastError () returned 0x5 [0089.219] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0089.219] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.219] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0089.219] SetLastError (dwErrCode=0x0) [0089.219] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.219] GetLastError () returned 0x5 [0089.219] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0089.219] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.219] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079a0bd0 [0089.219] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.219] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.219] SetLastError (dwErrCode=0x0) [0089.219] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.220] GetLastError () returned 0x5 [0089.220] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0089.220] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.220] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0d50 [0089.222] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.222] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.222] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.222] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\CURRENCY.GIF", dwFileAttributes=0x80) returned 0 [0089.223] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\CURRENCY.GIF" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\currency.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.223] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.223] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.223] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.223] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.223] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\CURRENCY.HTM", dwFileAttributes=0x80) returned 0 [0089.224] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\CURRENCY.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\currency.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.224] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.224] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.224] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.224] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.224] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\DADSHIRT.GIF", dwFileAttributes=0x80) returned 0 [0089.225] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\DADSHIRT.GIF" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\dadshirt.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.225] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.225] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.225] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.225] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.225] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\DADSHIRT.HTM", dwFileAttributes=0x80) returned 0 [0089.226] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\DADSHIRT.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\dadshirt.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.226] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.226] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.226] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.226] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.226] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUDGESCH.GIF", dwFileAttributes=0x80) returned 0 [0089.227] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUDGESCH.GIF" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\judgesch.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.227] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.227] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.227] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.227] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.227] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUDGESCH.HTM", dwFileAttributes=0x80) returned 0 [0089.227] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUDGESCH.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\judgesch.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.228] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.228] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.228] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.228] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.228] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUNGLE.GIF", dwFileAttributes=0x80) returned 0 [0089.229] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUNGLE.GIF" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\jungle.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.229] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.229] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.229] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.229] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.229] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUNGLE.HTM", dwFileAttributes=0x80) returned 0 [0089.230] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUNGLE.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\jungle.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.230] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.230] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.230] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.230] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.230] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\NOTEBOOK.HTM", dwFileAttributes=0x80) returned 0 [0089.230] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\NOTEBOOK.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\notebook.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.231] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.231] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.231] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.231] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.231] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\NOTEBOOK.JPG", dwFileAttributes=0x80) returned 0 [0089.231] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\NOTEBOOK.JPG" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\notebook.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.231] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.231] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.232] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.232] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.232] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\OFFISUPP.GIF", dwFileAttributes=0x80) returned 0 [0089.232] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\OFFISUPP.GIF" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\offisupp.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.232] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.232] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.233] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.233] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.233] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\OFFISUPP.HTM", dwFileAttributes=0x80) returned 0 [0089.233] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\OFFISUPP.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\offisupp.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.234] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.234] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.234] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.234] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.234] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PAWPRINT.GIF", dwFileAttributes=0x80) returned 0 [0089.234] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PAWPRINT.GIF" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\pawprint.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.235] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.235] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.235] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.235] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.235] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PAWPRINT.HTM", dwFileAttributes=0x80) returned 0 [0089.235] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PAWPRINT.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\pawprint.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.235] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.235] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.236] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.236] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.236] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PINELUMB.HTM", dwFileAttributes=0x80) returned 0 [0089.236] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PINELUMB.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\pinelumb.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.236] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.236] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.236] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.236] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.237] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PINELUMB.JPG", dwFileAttributes=0x80) returned 0 [0089.237] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PINELUMB.JPG" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\pinelumb.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.237] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.238] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.238] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.238] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.238] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\SEAMARBL.HTM", dwFileAttributes=0x80) returned 0 [0089.238] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\SEAMARBL.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\seamarbl.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.238] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.238] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.239] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.239] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.239] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\SEAMARBL.JPG", dwFileAttributes=0x80) returned 0 [0089.239] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\SEAMARBL.JPG" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\seamarbl.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.239] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.239] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.239] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.239] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.240] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\TECHTOOL.GIF", dwFileAttributes=0x80) returned 0 [0089.240] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\TECHTOOL.GIF" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\techtool.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.240] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.240] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.240] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.240] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.241] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\TECHTOOL.HTM", dwFileAttributes=0x80) returned 0 [0089.241] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\TECHTOOL.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\techtool.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.241] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.241] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.241] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0089.241] FindClose (in: hFindFile=0xd7079a0d50 | out: hFindFile=0xd7079a0d50) returned 1 [0089.242] SetLastError (dwErrCode=0x0) [0089.242] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.246] GetLastError () returned 0x5 [0089.246] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0089.246] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.246] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0089.246] FindClose (in: hFindFile=0xd7079a0bd0 | out: hFindFile=0xd7079a0bd0) returned 1 [0089.246] SetLastError (dwErrCode=0x0) [0089.246] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.247] GetLastError () returned 0x5 [0089.247] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0089.247] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.247] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0089.247] SetLastError (dwErrCode=0x0) [0089.247] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.247] GetLastError () returned 0x5 [0089.247] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0089.247] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.247] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079a0810 [0089.247] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.248] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.248] SetLastError (dwErrCode=0x0) [0089.248] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.248] GetLastError () returned 0x5 [0089.248] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0089.248] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.248] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a08d0 [0089.249] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.250] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.250] SetLastError (dwErrCode=0x0) [0089.250] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.251] GetLastError () returned 0x5 [0089.251] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0089.251] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.251] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0450 [0089.251] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0089.251] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0089.251] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.251] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\accessparts.xml", dwFileAttributes=0x80) returned 0 [0089.251] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\accessparts.xml" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\accessparts.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.252] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.252] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.252] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0089.252] SetLastError (dwErrCode=0x0) [0089.252] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.252] GetLastError () returned 0x5 [0089.252] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0089.252] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.252] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0ed0 [0089.253] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0089.253] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0089.253] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.254] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\Address.accft", dwFileAttributes=0x80) returned 0 [0089.255] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\Address.accft" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\datatype\\address.accft"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.255] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.255] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.255] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0089.255] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.255] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\Category.accft", dwFileAttributes=0x80) returned 0 [0089.329] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\Category.accft" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\datatype\\category.accft"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.329] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.329] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.329] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0089.329] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.330] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\Name.accft", dwFileAttributes=0x80) returned 0 [0089.330] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\Name.accft" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\datatype\\name.accft"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.332] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.332] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.332] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0089.332] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.333] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\Payment Type.accft", dwFileAttributes=0x80) returned 0 [0089.333] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\Payment Type.accft" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\datatype\\payment type.accft"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.333] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.333] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.333] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0089.333] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\Phone.accft", dwFileAttributes=0x80) returned 0 [0089.334] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\Phone.accft" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\datatype\\phone.accft"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.334] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.334] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.334] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0089.334] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\Priority.accft", dwFileAttributes=0x80) returned 0 [0089.335] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\Priority.accft" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\datatype\\priority.accft"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.335] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.335] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.335] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0089.335] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\Start End Dates.accft", dwFileAttributes=0x80) returned 0 [0089.335] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\Start End Dates.accft" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\datatype\\start end dates.accft"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.336] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.336] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.336] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0089.336] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.336] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\Status.accft", dwFileAttributes=0x80) returned 0 [0089.336] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\Status.accft" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\datatype\\status.accft"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.336] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.336] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.337] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0089.337] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.337] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\Tags.accft", dwFileAttributes=0x80) returned 0 [0089.337] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\Tags.accft" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\datatype\\tags.accft"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.339] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.339] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.339] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0089.339] FindClose (in: hFindFile=0xd7079a0ed0 | out: hFindFile=0xd7079a0ed0) returned 1 [0089.340] SetLastError (dwErrCode=0x0) [0089.340] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\datatype\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.343] GetLastError () returned 0x5 [0089.343] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0089.343] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.343] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0089.343] SetLastError (dwErrCode=0x0) [0089.343] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.343] GetLastError () returned 0x5 [0089.343] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0089.343] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.343] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0930 [0089.344] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0089.344] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0089.344] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.345] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\1 Right.accdt", dwFileAttributes=0x80) returned 0 [0089.345] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\1 Right.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\1 right.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.345] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.345] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.346] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0089.346] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.346] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\1 Top.accdt", dwFileAttributes=0x80) returned 0 [0089.346] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\1 Top.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\1 top.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.347] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.347] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.347] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0089.347] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.347] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\2 Right.accdt", dwFileAttributes=0x80) returned 0 [0089.349] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\2 Right.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\2 right.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.349] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.349] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.350] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0089.350] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.350] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\2 Top.accdt", dwFileAttributes=0x80) returned 0 [0089.350] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\2 Top.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\2 top.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.351] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.351] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.351] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0089.351] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.351] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Comments.accdt", dwFileAttributes=0x80) returned 0 [0089.351] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Comments.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\comments.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.351] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.351] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.352] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0089.352] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.352] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Contacts.accdt", dwFileAttributes=0x80) returned 0 [0089.352] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Contacts.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\contacts.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.352] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.352] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.353] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0089.353] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.353] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Details.accdt", dwFileAttributes=0x80) returned 0 [0089.353] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Details.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\details.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.354] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.354] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.354] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0089.354] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.354] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Dialog.accdt", dwFileAttributes=0x80) returned 0 [0089.355] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Dialog.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\dialog.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.356] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.356] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.356] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0089.356] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.356] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Issues.accdt", dwFileAttributes=0x80) returned 0 [0089.357] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Issues.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\issues.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.357] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.357] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.357] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0089.357] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.358] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\List.accdt", dwFileAttributes=0x80) returned 0 [0089.358] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\List.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\list.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.358] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.358] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.359] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0089.359] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.359] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Media.accdt", dwFileAttributes=0x80) returned 0 [0089.359] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Media.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\media.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.359] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.360] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.360] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0089.360] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.360] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Msgbox.accdt", dwFileAttributes=0x80) returned 0 [0089.360] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Msgbox.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\msgbox.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.361] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.361] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.361] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0089.361] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.361] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Tabs.accdt", dwFileAttributes=0x80) returned 0 [0089.362] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Tabs.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\tabs.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.362] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.362] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.362] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0089.363] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.363] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Tasks.accdt", dwFileAttributes=0x80) returned 0 [0089.363] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Tasks.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\tasks.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.363] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.363] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.364] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0089.364] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.364] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Users.accdt", dwFileAttributes=0x80) returned 0 [0089.365] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Users.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\users.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.365] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.365] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.365] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0089.365] FindClose (in: hFindFile=0xd7079a0930 | out: hFindFile=0xd7079a0930) returned 1 [0089.366] SetLastError (dwErrCode=0x0) [0089.366] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.370] GetLastError () returned 0x5 [0089.370] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0089.370] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.371] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0089.371] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0089.371] SetLastError (dwErrCode=0x0) [0089.371] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.371] GetLastError () returned 0x5 [0089.371] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0089.371] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.371] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.371] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.372] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyLetter.dotx", dwFileAttributes=0x80) returned 0 [0089.372] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyLetter.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adjacencyletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.372] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.372] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.373] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.373] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.373] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyReport.dotx", dwFileAttributes=0x80) returned 0 [0089.373] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyReport.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adjacencyreport.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.374] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.374] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.374] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.374] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.374] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyResume.dotx", dwFileAttributes=0x80) returned 0 [0089.375] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyResume.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adjacencyresume.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.376] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.376] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.376] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.376] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.377] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR1.XLT", dwFileAttributes=0x80) returned 0 [0089.377] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR1.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr1.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.377] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.377] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.378] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.378] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR10.XLT", dwFileAttributes=0x80) returned 0 [0089.379] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR10.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr10.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.379] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.379] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.380] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.380] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.380] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR2.XLT", dwFileAttributes=0x80) returned 0 [0089.381] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR2.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr2.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.381] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.381] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.382] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.382] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.382] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR3.XLT", dwFileAttributes=0x80) returned 0 [0089.382] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR3.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr3.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.383] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.383] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.383] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.383] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.383] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR4.XLT", dwFileAttributes=0x80) returned 0 [0089.384] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR4.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr4.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.384] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.384] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.385] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.385] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.385] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR5.XLT", dwFileAttributes=0x80) returned 0 [0089.385] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR5.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr5.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.386] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.386] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.386] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.386] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.386] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR6.XLT", dwFileAttributes=0x80) returned 0 [0089.387] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR6.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr6.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.387] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.387] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.387] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.387] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.388] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR7.XLT", dwFileAttributes=0x80) returned 0 [0089.388] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR7.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr7.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.388] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.388] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.389] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.389] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.389] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR8.XLT", dwFileAttributes=0x80) returned 0 [0089.389] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR8.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr8.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.389] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.389] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.389] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.390] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.390] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR9.XLT", dwFileAttributes=0x80) returned 0 [0089.390] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR9.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr9.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.390] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.390] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.390] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.390] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.391] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryLetter.dotx", dwFileAttributes=0x80) returned 0 [0089.391] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryLetter.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\apothecaryletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.392] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.392] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.392] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.392] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.392] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryNewsletter.dotx", dwFileAttributes=0x80) returned 0 [0089.393] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryNewsletter.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\apothecarynewsletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.393] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.393] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.393] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.393] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.393] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryResume.dotx", dwFileAttributes=0x80) returned 0 [0089.394] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryResume.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\apothecaryresume.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.394] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.394] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.394] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.394] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\BillingStatement.xltx", dwFileAttributes=0x80) returned 0 [0089.395] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\BillingStatement.xltx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\billingstatement.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.395] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.395] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.395] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.395] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.396] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Blog.dotx", dwFileAttributes=0x80) returned 0 [0089.396] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Blog.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\blog.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.396] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.396] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.396] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.396] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.397] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\BloodPressureTracker.xltx", dwFileAttributes=0x80) returned 0 [0089.397] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\BloodPressureTracker.xltx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\bloodpressuretracker.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.397] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.397] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.397] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.397] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.398] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ChronologicalLetter.dotx", dwFileAttributes=0x80) returned 0 [0089.398] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ChronologicalLetter.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\chronologicalletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.398] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.398] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.398] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.398] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.398] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ChronologicalResume.dotx", dwFileAttributes=0x80) returned 0 [0089.399] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ChronologicalResume.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\chronologicalresume.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.399] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.399] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.399] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.399] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.399] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ClassicPhotoAlbum.potx", dwFileAttributes=0x80) returned 0 [0089.400] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ClassicPhotoAlbum.potx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\classicphotoalbum.potx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.400] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.400] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.401] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.401] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.401] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ContemporaryPhotoAlbum.potx", dwFileAttributes=0x80) returned 0 [0089.401] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ContemporaryPhotoAlbum.potx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\contemporaryphotoalbum.potx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.401] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.401] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.402] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.402] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.402] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialLetter.dotx", dwFileAttributes=0x80) returned 0 [0089.403] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialLetter.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\essentialletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.403] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.403] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.403] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.403] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.404] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialReport.dotx", dwFileAttributes=0x80) returned 0 [0089.404] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialReport.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\essentialreport.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.404] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.404] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.404] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.404] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.405] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialResume.dotx", dwFileAttributes=0x80) returned 0 [0089.405] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialResume.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\essentialresume.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.405] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.405] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.405] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.405] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ExpenseReport.xltx", dwFileAttributes=0x80) returned 0 [0089.406] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ExpenseReport.xltx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\expensereport.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.406] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.406] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.407] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.407] SetLastError (dwErrCode=0x0) [0089.407] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.407] GetLastError () returned 0x5 [0089.407] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0089.407] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.407] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\GettingStarted16\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0450 [0089.411] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0089.411] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0089.411] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0089.411] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0089.411] SetLastError (dwErrCode=0x0) [0089.411] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\GettingStarted16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\gettingstarted16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.411] GetLastError () returned 0x5 [0089.411] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0089.411] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.411] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.411] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.412] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\LoanAmortization.xltx", dwFileAttributes=0x80) returned 0 [0089.412] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\LoanAmortization.xltx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\loanamortization.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.412] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.412] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.413] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.413] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.413] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\MAIL.OFT", dwFileAttributes=0x80) returned 0 [0089.413] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\MAIL.OFT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\mail.oft"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.413] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.413] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.413] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.414] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.414] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Office Word 2003 Look.dotx", dwFileAttributes=0x80) returned 0 [0089.414] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Office Word 2003 Look.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\office word 2003 look.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.414] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.414] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.414] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.414] SetLastError (dwErrCode=0x0) [0089.414] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.415] GetLastError () returned 0x5 [0089.415] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0089.415] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.415] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0bd0 [0089.415] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0089.415] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0089.415] SetLastError (dwErrCode=0x0) [0089.415] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.415] GetLastError () returned 0x5 [0089.415] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0089.415] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.415] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0450 [0089.415] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0089.415] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0089.415] SetLastError (dwErrCode=0x0) [0089.415] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.416] GetLastError () returned 0x5 [0089.416] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0089.416] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.416] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Notebook Templates\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a0d50 [0089.416] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0089.416] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0089.416] FindClose (in: hFindFile=0xd7079a0d50 | out: hFindFile=0xd7079a0d50) returned 1 [0089.416] SetLastError (dwErrCode=0x0) [0089.416] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Notebook Templates\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\notebook templates\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.416] GetLastError () returned 0x5 [0089.416] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0089.416] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.416] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0089.416] SetLastError (dwErrCode=0x0) [0089.417] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.417] GetLastError () returned 0x5 [0089.417] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0089.417] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.417] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a0d50 [0089.417] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0089.417] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0089.417] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.417] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\ACADEMIC.ONE", dwFileAttributes=0x80) returned 0 [0089.417] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\ACADEMIC.ONE" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\stationery\\academic.one"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.418] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.418] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.418] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0089.418] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.418] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\BLANK.ONE", dwFileAttributes=0x80) returned 0 [0089.418] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\BLANK.ONE" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\stationery\\blank.one"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.419] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.419] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.419] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0089.419] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.419] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\BUSINESS.ONE", dwFileAttributes=0x80) returned 0 [0089.419] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\BUSINESS.ONE" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\stationery\\business.one"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.419] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.419] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.420] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0089.420] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.420] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\DESIGNER.ONE", dwFileAttributes=0x80) returned 0 [0089.420] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\DESIGNER.ONE" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\stationery\\designer.one"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.420] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.420] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.421] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0089.421] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.421] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\PLANNERS.ONE", dwFileAttributes=0x80) returned 0 [0089.427] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\PLANNERS.ONE" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\stationery\\planners.one"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.427] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.427] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.427] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0089.427] FindClose (in: hFindFile=0xd7079a0d50 | out: hFindFile=0xd7079a0d50) returned 1 [0089.427] SetLastError (dwErrCode=0x0) [0089.427] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\stationery\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.427] GetLastError () returned 0x5 [0089.427] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0089.428] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.428] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0089.428] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0089.428] SetLastError (dwErrCode=0x0) [0089.428] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.428] GetLastError () returned 0x5 [0089.428] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0089.428] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.428] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0089.428] FindClose (in: hFindFile=0xd7079a0bd0 | out: hFindFile=0xd7079a0bd0) returned 1 [0089.428] SetLastError (dwErrCode=0x0) [0089.428] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.428] GetLastError () returned 0x5 [0089.428] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0089.428] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.428] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.428] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.429] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginLetter.Dotx", dwFileAttributes=0x80) returned 0 [0089.429] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\originletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.430] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.430] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.430] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.430] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.430] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginReport.Dotx", dwFileAttributes=0x80) returned 0 [0089.430] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginReport.Dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\originreport.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.431] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.431] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.431] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.431] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.431] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginResume.Dotx", dwFileAttributes=0x80) returned 0 [0089.432] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginResume.Dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\originresume.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.432] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.432] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.432] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.432] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.432] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\PersonalMonthlyBudget.xltx", dwFileAttributes=0x80) returned 0 [0089.432] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\PersonalMonthlyBudget.xltx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\personalmonthlybudget.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.433] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.433] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.433] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.433] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Pitchbook.potx", dwFileAttributes=0x80) returned 0 [0089.433] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Pitchbook.potx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\pitchbook.potx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.433] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.433] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.434] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.434] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.434] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\PROJPLAN.XLTX", dwFileAttributes=0x80) returned 0 [0089.434] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\PROJPLAN.XLTX" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\projplan.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.434] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.434] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.435] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.435] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.435] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\QuizShow.potx", dwFileAttributes=0x80) returned 0 [0089.435] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\QuizShow.potx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\quizshow.potx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.436] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.436] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.436] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.436] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.436] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\RedAndBlackLetter.dotx", dwFileAttributes=0x80) returned 0 [0089.436] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\RedAndBlackLetter.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\redandblackletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.437] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.437] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.437] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.437] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.437] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\RedAndBlackReport.dotx", dwFileAttributes=0x80) returned 0 [0089.437] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\RedAndBlackReport.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\redandblackreport.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.437] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.437] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.438] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.438] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.438] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\SalesReport.xltx", dwFileAttributes=0x80) returned 0 [0089.438] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\SalesReport.xltx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\salesreport.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.438] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.438] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.438] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.439] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.439] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\StudentReport.dotx", dwFileAttributes=0x80) returned 0 [0089.439] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\StudentReport.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\studentreport.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.439] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.439] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.439] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.439] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.440] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TASKLIST.XLTX", dwFileAttributes=0x80) returned 0 [0089.440] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TASKLIST.XLTX" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\tasklist.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.440] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.440] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.440] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.440] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.441] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimeCard.xltx", dwFileAttributes=0x80) returned 0 [0089.441] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimeCard.xltx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\timecard.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.441] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.441] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.442] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.442] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.442] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessLetter.dotx", dwFileAttributes=0x80) returned 0 [0089.442] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessLetter.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\timelessletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.442] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.442] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.442] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.442] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.443] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessReport.dotx", dwFileAttributes=0x80) returned 0 [0089.443] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessReport.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\timelessreport.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.443] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.443] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.443] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.443] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.444] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessResume.dotx", dwFileAttributes=0x80) returned 0 [0089.444] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessResume.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\timelessresume.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.444] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.444] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.444] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.444] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.444] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.444] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\WidescreenPresentation.potx", dwFileAttributes=0x80) returned 0 [0089.445] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\WidescreenPresentation.potx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\widescreenpresentation.potx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.445] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.445] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.445] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.445] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.445] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Word 2010 look.dotx", dwFileAttributes=0x80) returned 0 [0089.446] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Word 2010 look.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\word 2010 look.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.446] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.446] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.446] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0089.446] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0089.446] SetLastError (dwErrCode=0x0) [0089.446] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.446] GetLastError () returned 0x5 [0089.446] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0089.446] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.446] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.446] SetLastError (dwErrCode=0x0) [0089.446] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.447] GetLastError () returned 0x5 [0089.447] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0089.447] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.447] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\Presentation Designs\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a08d0 [0089.448] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.448] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.448] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.448] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\Presentation Designs\\Maple.gif", dwFileAttributes=0x80) returned 0 [0089.449] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\Presentation Designs\\Maple.gif" (normalized: "c:\\program files\\microsoft office\\root\\templates\\presentation designs\\maple.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.449] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.449] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.449] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0089.449] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0089.449] SetLastError (dwErrCode=0x0) [0089.449] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\Presentation Designs\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\presentation designs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.449] GetLastError () returned 0x5 [0089.449] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0089.449] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.449] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0089.450] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0089.450] SetLastError (dwErrCode=0x0) [0089.450] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.450] GetLastError () returned 0x5 [0089.450] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0089.450] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.450] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0089.450] SetLastError (dwErrCode=0x0) [0089.450] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.450] GetLastError () returned 0x5 [0089.450] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0089.450] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.450] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079a0bd0 [0089.451] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.451] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.451] SetLastError (dwErrCode=0x0) [0089.451] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.452] GetLastError () returned 0x5 [0089.452] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0089.452] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.452] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0450 [0089.600] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.600] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.600] SetLastError (dwErrCode=0x0) [0089.600] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.600] GetLastError () returned 0x5 [0089.600] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0089.600] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.600] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a08d0 [0089.615] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0089.615] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0089.615] SetLastError (dwErrCode=0x0) [0089.615] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.615] GetLastError () returned 0x5 [0089.615] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0089.615] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.616] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0930 [0089.617] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0089.617] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0089.617] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.618] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\AssetLibrary.ico", dwFileAttributes=0x80) returned 0 [0089.618] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\AssetLibrary.ico" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft\\office\\assetlibrary.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.619] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.619] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.619] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0089.619] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\DocumentRepository.ico", dwFileAttributes=0x80) returned 0 [0089.620] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\DocumentRepository.ico" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft\\office\\documentrepository.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.620] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.620] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.620] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0089.620] SetLastError (dwErrCode=0x0) [0089.621] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft\\office\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.621] GetLastError () returned 0x5 [0089.621] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0089.621] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.621] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\Heartbeat\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a0810 [0089.621] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0089.621] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0089.621] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0089.621] SetLastError (dwErrCode=0x0) [0089.621] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\Heartbeat\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft\\office\\heartbeat\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.621] GetLastError () returned 0x5 [0089.621] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0089.621] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.621] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0089.621] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\MySharePoints.ico", dwFileAttributes=0x80) returned 0 [0089.622] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\MySharePoints.ico" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft\\office\\mysharepoints.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.622] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.622] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.623] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0089.623] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.623] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\MySite.ico", dwFileAttributes=0x80) returned 0 [0089.624] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\MySite.ico" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft\\office\\mysite.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.624] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.624] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.624] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0089.624] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\SharePointPortalSite.ico", dwFileAttributes=0x80) returned 0 [0089.626] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\SharePointPortalSite.ico" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft\\office\\sharepointportalsite.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.627] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.627] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.627] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0089.627] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\SharePointTeamSite.ico", dwFileAttributes=0x80) returned 0 [0089.628] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\SharePointTeamSite.ico" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft\\office\\sharepointteamsite.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.628] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.628] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.628] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0089.628] FindClose (in: hFindFile=0xd7079a0930 | out: hFindFile=0xd7079a0930) returned 1 [0089.628] SetLastError (dwErrCode=0x0) [0089.628] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft\\office\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.628] GetLastError () returned 0x5 [0089.628] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0089.629] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.629] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0089.629] SetLastError (dwErrCode=0x0) [0089.629] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.629] GetLastError () returned 0x5 [0089.629] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0089.629] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.629] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\VISIO\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0d50 [0089.629] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0089.629] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0089.629] FindClose (in: hFindFile=0xd7079a0d50 | out: hFindFile=0xd7079a0d50) returned 1 [0089.630] SetLastError (dwErrCode=0x0) [0089.630] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\VISIO\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft\\visio\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.630] GetLastError () returned 0x5 [0089.630] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0089.630] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.630] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0089.630] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0089.630] SetLastError (dwErrCode=0x0) [0089.630] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.630] GetLastError () returned 0x5 [0089.630] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0089.630] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.630] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.630] SetLastError (dwErrCode=0x0) [0089.630] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.630] GetLastError () returned 0x5 [0089.631] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0089.631] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.631] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0ed0 [0089.753] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0089.840] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0089.840] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.DATABASECOMPARE.16.1033.hxn", dwFileAttributes=0x80) returned 0 [0089.842] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.DATABASECOMPARE.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.databasecompare.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.842] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.842] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.842] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0089.842] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.EXCEL.16.1033.hxn", dwFileAttributes=0x80) returned 0 [0089.843] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.EXCEL.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.excel.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.843] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.843] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.844] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0089.844] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.GRAPH.16.1033.hxn", dwFileAttributes=0x80) returned 0 [0089.844] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.GRAPH.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.graph.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.844] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.844] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.845] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0089.845] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.GROOVE.16.1033.hxn", dwFileAttributes=0x80) returned 0 [0089.845] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.GROOVE.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.groove.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.846] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.846] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.846] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0089.846] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.846] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.LYNC.16.1033.hxn", dwFileAttributes=0x80) returned 0 [0089.846] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.LYNC.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.lync.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.847] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.847] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.847] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0089.847] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.LYNC_BASIC.16.1033.hxn", dwFileAttributes=0x80) returned 0 [0089.847] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.LYNC_BASIC.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.lync_basic.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.847] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.847] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.848] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0089.848] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.LYNC_ONLINE.16.1033.hxn", dwFileAttributes=0x80) returned 0 [0089.849] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.LYNC_ONLINE.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.lync_online.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.849] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.849] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.849] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0089.849] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.849] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.MSACCESS.16.1033.hxn", dwFileAttributes=0x80) returned 0 [0089.850] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.MSACCESS.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.msaccess.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.850] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.850] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.850] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0089.850] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.MSOUC.16.1033.hxn", dwFileAttributes=0x80) returned 0 [0089.851] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.MSOUC.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.msouc.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.851] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.851] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.851] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0089.851] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.MSPUB.16.1033.hxn", dwFileAttributes=0x80) returned 0 [0089.852] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.MSPUB.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.mspub.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.852] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.852] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.853] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0089.853] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.ONENOTE.16.1033.hxn", dwFileAttributes=0x80) returned 0 [0089.853] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.ONENOTE.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.onenote.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.854] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.854] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.854] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0089.854] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.OUTLOOK.16.1033.hxn", dwFileAttributes=0x80) returned 0 [0089.854] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.OUTLOOK.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.outlook.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.855] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.855] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.855] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0089.855] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.POWERPNT.16.1033.hxn", dwFileAttributes=0x80) returned 0 [0089.855] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.POWERPNT.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.powerpnt.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.856] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.856] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.856] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0089.856] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.856] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.SETLANG.16.1033.hxn", dwFileAttributes=0x80) returned 0 [0089.856] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.SETLANG.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.setlang.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.856] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.856] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.857] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0089.857] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.SKYPEFB.16.1033.hxn", dwFileAttributes=0x80) returned 0 [0089.857] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.SKYPEFB.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.skypefb.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.857] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.857] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.857] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0089.858] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.SKYPEFB_BASIC.16.1033.hxn", dwFileAttributes=0x80) returned 0 [0089.858] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.SKYPEFB_BASIC.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.skypefb_basic.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.858] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.858] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.858] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0089.858] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.859] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.SKYPEFB_ONLINE.16.1033.hxn", dwFileAttributes=0x80) returned 0 [0089.859] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.SKYPEFB_ONLINE.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.skypefb_online.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.859] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.859] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.859] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0089.859] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.859] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.SKYPEFB_ONLINEG.16.1033.hxn", dwFileAttributes=0x80) returned 0 [0089.860] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.SKYPEFB_ONLINEG.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.skypefb_onlineg.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.860] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.860] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.860] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0089.860] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.SPREADSHEETCOMPARE.16.1033.hxn", dwFileAttributes=0x80) returned 0 [0089.861] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.SPREADSHEETCOMPARE.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.spreadsheetcompare.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.861] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.861] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.861] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0089.861] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.861] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.VISIO.16.1033.hxn", dwFileAttributes=0x80) returned 0 [0089.861] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.VISIO.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.visio.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.862] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.862] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.862] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0089.862] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.VISIO_PRM.16.1033.hxn", dwFileAttributes=0x80) returned 0 [0089.862] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.VISIO_PRM.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.visio_prm.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.862] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.863] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.863] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0089.863] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.863] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.VISIO_STD.16.1033.hxn", dwFileAttributes=0x80) returned 0 [0089.864] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.VISIO_STD.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.visio_std.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.864] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.864] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.864] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0089.864] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.865] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.WINPROJ.16.1033.hxn", dwFileAttributes=0x80) returned 0 [0089.865] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.WINPROJ.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.winproj.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.866] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.866] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.866] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0089.866] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.866] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.WINPROJ_STD.16.1033.hxn", dwFileAttributes=0x80) returned 0 [0089.866] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.WINPROJ_STD.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.winproj_std.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.867] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.867] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.867] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0089.867] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.WINWORD.16.1033.hxn", dwFileAttributes=0x80) returned 0 [0089.868] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.WINWORD.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.winword.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.868] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.868] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.868] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0089.868] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0089.868] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\nslist.hxl", dwFileAttributes=0x80) returned 0 [0089.869] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\nslist.hxl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\nslist.hxl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.869] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.869] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.869] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0089.869] FindClose (in: hFindFile=0xd7079a0ed0 | out: hFindFile=0xd7079a0ed0) returned 1 [0089.870] SetLastError (dwErrCode=0x0) [0089.870] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.873] GetLastError () returned 0x5 [0089.873] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0089.873] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.873] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0089.873] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0089.873] SetLastError (dwErrCode=0x0) [0089.873] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.873] GetLastError () returned 0x5 [0089.873] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0089.873] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.873] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0089.874] SetLastError (dwErrCode=0x0) [0089.874] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.874] GetLastError () returned 0x5 [0089.874] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0089.874] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.874] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common Programs\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0e10 [0089.927] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.928] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.929] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.929] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.929] SetLastError (dwErrCode=0x0) [0089.929] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common Programs\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common programs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.929] GetLastError () returned 0x5 [0089.929] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0089.929] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.929] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common Programs\\Microsoft Office 2016 Tools\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0450 [0089.930] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0089.930] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0089.930] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0089.930] SetLastError (dwErrCode=0x0) [0089.930] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common Programs\\Microsoft Office 2016 Tools\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common programs\\microsoft office 2016 tools\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.930] GetLastError () returned 0x5 [0089.930] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0089.930] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.930] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0089.930] SetLastError (dwErrCode=0x0) [0089.930] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common Programs\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common programs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.931] GetLastError () returned 0x5 [0089.931] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0089.931] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0089.931] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common Programs\\Microsoft Office Tools\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0d50 [0090.032] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.032] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.032] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.032] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.032] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.032] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.032] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.032] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.032] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.032] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0090.032] FindClose (in: hFindFile=0xd7079a0d50 | out: hFindFile=0xd7079a0d50) returned 1 [0090.033] SetLastError (dwErrCode=0x0) [0090.033] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common Programs\\Microsoft Office Tools\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common programs\\microsoft office tools\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.036] GetLastError () returned 0x5 [0090.036] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0090.036] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.036] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0090.036] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0090.036] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0090.036] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0090.036] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0090.036] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0090.036] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0090.036] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0090.036] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0090.036] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0090.036] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0090.036] SetLastError (dwErrCode=0x0) [0090.036] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common Programs\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common programs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.037] GetLastError () returned 0x5 [0090.037] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0090.037] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.037] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0090.037] SetLastError (dwErrCode=0x0) [0090.037] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.037] GetLastError () returned 0x5 [0090.037] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0090.037] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.037] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0810 [0090.037] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0090.037] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0090.037] SetLastError (dwErrCode=0x0) [0090.037] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.038] GetLastError () returned 0x5 [0090.038] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0090.038] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.038] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0d50 [0090.040] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.040] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.040] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.041] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\AGENCYB.TTF", dwFileAttributes=0x80) returned 0 [0090.041] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\AGENCYB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\agencyb.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.041] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.041] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.042] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.042] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.042] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\AGENCYR.TTF", dwFileAttributes=0x80) returned 0 [0090.042] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\AGENCYR.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\agencyr.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.042] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.042] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.043] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.043] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.043] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ALGER.TTF", dwFileAttributes=0x80) returned 0 [0090.043] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ALGER.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\alger.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.044] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.044] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.044] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.044] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.044] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ANTQUAB.TTF", dwFileAttributes=0x80) returned 0 [0090.044] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ANTQUAB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\antquab.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.045] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.045] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.045] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.045] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.045] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ANTQUABI.TTF", dwFileAttributes=0x80) returned 0 [0090.045] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ANTQUABI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\antquabi.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.045] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.045] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.046] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.046] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.046] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ANTQUAI.TTF", dwFileAttributes=0x80) returned 0 [0090.047] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ANTQUAI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\antquai.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.047] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.047] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.048] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.048] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.048] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ARIALN.TTF", dwFileAttributes=0x80) returned 0 [0090.048] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ARIALN.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\arialn.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.048] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.048] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.049] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.049] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.049] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ARIALNB.TTF", dwFileAttributes=0x80) returned 0 [0090.049] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ARIALNB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\arialnb.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.050] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.050] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.050] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.050] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.050] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ARIALNBI.TTF", dwFileAttributes=0x80) returned 0 [0090.050] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ARIALNBI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\arialnbi.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.050] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.051] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.051] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.051] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.051] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ARIALNI.TTF", dwFileAttributes=0x80) returned 0 [0090.051] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ARIALNI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\arialni.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.051] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.051] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.052] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.052] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.052] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ARLRDBD.TTF", dwFileAttributes=0x80) returned 0 [0090.052] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ARLRDBD.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\arlrdbd.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.053] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.053] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.053] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.053] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.053] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BASKVILL.TTF", dwFileAttributes=0x80) returned 0 [0090.053] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BASKVILL.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\baskvill.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.054] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.054] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.054] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.054] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.054] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BAUHS93.TTF", dwFileAttributes=0x80) returned 0 [0090.054] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BAUHS93.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\bauhs93.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.055] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.055] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.055] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.055] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.055] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BELL.TTF", dwFileAttributes=0x80) returned 0 [0090.056] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BELL.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\bell.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.056] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.056] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.056] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.056] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.056] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BELLB.TTF", dwFileAttributes=0x80) returned 0 [0090.057] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BELLB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\bellb.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.057] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.057] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.057] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.057] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.057] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BELLI.TTF", dwFileAttributes=0x80) returned 0 [0090.058] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BELLI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\belli.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.058] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.058] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.058] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.058] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.058] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BERNHC.TTF", dwFileAttributes=0x80) returned 0 [0090.058] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BERNHC.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\bernhc.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.059] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.059] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.059] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.059] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.059] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BKANT.TTF", dwFileAttributes=0x80) returned 0 [0090.059] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BKANT.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\bkant.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.059] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.059] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.060] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.060] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.060] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOD_B.TTF", dwFileAttributes=0x80) returned 0 [0090.061] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOD_B.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\bod_b.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.061] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.061] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.061] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.061] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.061] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOD_BI.TTF", dwFileAttributes=0x80) returned 0 [0090.061] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOD_BI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\bod_bi.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.062] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.062] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.062] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.062] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.062] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOD_BLAI.TTF", dwFileAttributes=0x80) returned 0 [0090.062] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOD_BLAI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\bod_blai.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.063] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.063] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.063] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.063] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.063] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOD_BLAR.TTF", dwFileAttributes=0x80) returned 0 [0090.063] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOD_BLAR.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\bod_blar.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.063] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.063] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.064] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.064] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.064] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOD_CB.TTF", dwFileAttributes=0x80) returned 0 [0090.065] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOD_CB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\bod_cb.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.065] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.065] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.065] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.065] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.065] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOD_CBI.TTF", dwFileAttributes=0x80) returned 0 [0090.065] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOD_CBI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\bod_cbi.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.066] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.066] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.066] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.066] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.066] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOD_CI.TTF", dwFileAttributes=0x80) returned 0 [0090.066] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOD_CI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\bod_ci.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.066] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.066] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.067] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.067] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.067] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOD_CR.TTF", dwFileAttributes=0x80) returned 0 [0090.067] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOD_CR.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\bod_cr.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.067] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.067] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.068] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.068] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.068] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOD_I.TTF", dwFileAttributes=0x80) returned 0 [0090.068] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOD_I.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\bod_i.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.069] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.069] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.069] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.069] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.069] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOD_PSTC.TTF", dwFileAttributes=0x80) returned 0 [0090.070] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOD_PSTC.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\bod_pstc.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.070] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.070] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.070] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.070] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.070] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOD_R.TTF", dwFileAttributes=0x80) returned 0 [0090.071] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOD_R.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\bod_r.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.071] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.071] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.071] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.071] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.071] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOOKOS.TTF", dwFileAttributes=0x80) returned 0 [0090.071] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOOKOS.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\bookos.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.072] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.072] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.072] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.072] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.072] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOOKOSB.TTF", dwFileAttributes=0x80) returned 0 [0090.073] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOOKOSB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\bookosb.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.073] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.073] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.073] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.073] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.074] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOOKOSBI.TTF", dwFileAttributes=0x80) returned 0 [0090.074] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOOKOSBI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\bookosbi.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.074] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.074] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.074] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.074] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.074] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOOKOSI.TTF", dwFileAttributes=0x80) returned 0 [0090.075] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOOKOSI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\bookosi.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.075] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.075] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.075] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.076] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.076] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BRADHITC.TTF", dwFileAttributes=0x80) returned 0 [0090.076] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BRADHITC.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\bradhitc.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.076] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.076] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.076] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.076] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.077] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BRITANIC.TTF", dwFileAttributes=0x80) returned 0 [0090.077] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BRITANIC.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\britanic.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.077] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.077] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.077] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.077] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.078] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BRLNSB.TTF", dwFileAttributes=0x80) returned 0 [0090.078] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BRLNSB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\brlnsb.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.078] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.079] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.079] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.079] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.079] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BRLNSDB.TTF", dwFileAttributes=0x80) returned 0 [0090.079] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BRLNSDB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\brlnsdb.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.079] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.079] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.080] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.080] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.080] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BRLNSR.TTF", dwFileAttributes=0x80) returned 0 [0090.081] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BRLNSR.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\brlnsr.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.081] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.081] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.081] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.081] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.081] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BROADW.TTF", dwFileAttributes=0x80) returned 0 [0090.082] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BROADW.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\broadw.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.082] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.082] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.082] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.082] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.083] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BRUSHSCI.TTF", dwFileAttributes=0x80) returned 0 [0090.083] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BRUSHSCI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\brushsci.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.083] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.083] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.083] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.083] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.083] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BSSYM7.TTF", dwFileAttributes=0x80) returned 0 [0090.084] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BSSYM7.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\bssym7.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.084] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.084] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.084] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.084] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.084] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CalibriL.ttf", dwFileAttributes=0x80) returned 0 [0090.084] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CalibriL.ttf" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\calibril.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.085] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.085] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.085] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.086] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.086] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CalibriLI.ttf", dwFileAttributes=0x80) returned 0 [0090.087] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CalibriLI.ttf" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\calibrili.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.087] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.087] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.088] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.088] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.088] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CALIFB.TTF", dwFileAttributes=0x80) returned 0 [0090.088] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CALIFB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\califb.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.088] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.088] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.088] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.088] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.089] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CALIFI.TTF", dwFileAttributes=0x80) returned 0 [0090.089] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CALIFI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\califi.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.089] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.089] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.090] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.090] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.090] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CALIFR.TTF", dwFileAttributes=0x80) returned 0 [0090.090] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CALIFR.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\califr.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.090] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.090] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.091] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.091] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.091] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CALIST.TTF", dwFileAttributes=0x80) returned 0 [0090.091] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CALIST.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\calist.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.091] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.091] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.091] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.091] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.092] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CALISTB.TTF", dwFileAttributes=0x80) returned 0 [0090.092] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CALISTB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\calistb.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.093] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.093] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.093] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.093] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.093] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CALISTBI.TTF", dwFileAttributes=0x80) returned 0 [0090.093] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CALISTBI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\calistbi.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.093] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.094] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.094] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.094] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.094] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CALISTI.TTF", dwFileAttributes=0x80) returned 0 [0090.094] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CALISTI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\calisti.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.094] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.094] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.095] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.095] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.095] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CASTELAR.TTF", dwFileAttributes=0x80) returned 0 [0090.095] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CASTELAR.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\castelar.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.095] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.095] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.096] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.096] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.096] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CENSCBK.TTF", dwFileAttributes=0x80) returned 0 [0090.097] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CENSCBK.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\censcbk.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.097] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.097] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.097] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.097] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.098] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CENTAUR.TTF", dwFileAttributes=0x80) returned 0 [0090.098] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CENTAUR.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\centaur.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.098] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.098] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.099] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.099] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.099] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CENTURY.TTF", dwFileAttributes=0x80) returned 0 [0090.099] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CENTURY.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\century.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.099] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.100] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.100] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.100] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.100] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CHILLER.TTF", dwFileAttributes=0x80) returned 0 [0090.100] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CHILLER.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\chiller.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.101] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.101] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.101] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.101] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\COLONNA.TTF", dwFileAttributes=0x80) returned 0 [0090.102] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\COLONNA.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\colonna.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.102] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.102] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.102] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.102] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\COOPBL.TTF", dwFileAttributes=0x80) returned 0 [0090.104] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\COOPBL.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\coopbl.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.104] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.104] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.104] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.104] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\COPRGTB.TTF", dwFileAttributes=0x80) returned 0 [0090.105] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\COPRGTB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\coprgtb.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.105] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.105] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.105] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.105] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\COPRGTL.TTF", dwFileAttributes=0x80) returned 0 [0090.106] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\COPRGTL.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\coprgtl.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.106] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.106] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.106] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.106] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.107] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CURLZ___.TTF", dwFileAttributes=0x80) returned 0 [0090.107] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CURLZ___.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\curlz___.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.107] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.107] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.107] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.107] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\DUBAI-BOLD.TTF", dwFileAttributes=0x80) returned 0 [0090.109] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\DUBAI-BOLD.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\dubai-bold.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.109] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.109] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.109] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.109] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.110] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\DUBAI-LIGHT.TTF", dwFileAttributes=0x80) returned 0 [0090.110] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\DUBAI-LIGHT.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\dubai-light.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.110] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.110] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.110] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.110] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.111] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\DUBAI-MEDIUM.TTF", dwFileAttributes=0x80) returned 0 [0090.111] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\DUBAI-MEDIUM.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\dubai-medium.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.111] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.111] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.112] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.112] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.112] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\DUBAI-REGULAR.TTF", dwFileAttributes=0x80) returned 0 [0090.112] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\DUBAI-REGULAR.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\dubai-regular.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.112] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.112] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.113] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.113] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.113] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ELEPHNT.TTF", dwFileAttributes=0x80) returned 0 [0090.113] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ELEPHNT.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\elephnt.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.114] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.114] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.114] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.114] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.114] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ELEPHNTI.TTF", dwFileAttributes=0x80) returned 0 [0090.115] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ELEPHNTI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\elephnti.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.115] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.115] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.115] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.116] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.116] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ENGR.TTF", dwFileAttributes=0x80) returned 0 [0090.117] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ENGR.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\engr.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.117] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.117] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.117] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.117] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.117] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ERASBD.TTF", dwFileAttributes=0x80) returned 0 [0090.118] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ERASBD.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\erasbd.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.118] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.118] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.118] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.118] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.118] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ERASDEMI.TTF", dwFileAttributes=0x80) returned 0 [0090.118] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ERASDEMI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\erasdemi.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.119] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.119] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.119] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.119] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ERASLGHT.TTF", dwFileAttributes=0x80) returned 0 [0090.119] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ERASLGHT.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\eraslght.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.120] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.120] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.120] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.120] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.120] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ERASMD.TTF", dwFileAttributes=0x80) returned 0 [0090.121] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ERASMD.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\erasmd.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.121] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.121] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.121] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.121] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.122] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FELIXTI.TTF", dwFileAttributes=0x80) returned 0 [0090.122] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FELIXTI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\felixti.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.122] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.122] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.122] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.122] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.122] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FORTE.TTF", dwFileAttributes=0x80) returned 0 [0090.123] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FORTE.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\forte.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.123] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.123] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.123] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.123] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.123] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FRABK.TTF", dwFileAttributes=0x80) returned 0 [0090.124] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FRABK.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\frabk.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.124] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.124] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.124] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.124] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FRABKIT.TTF", dwFileAttributes=0x80) returned 0 [0090.124] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FRABKIT.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\frabkit.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.125] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.125] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.125] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.125] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FRADM.TTF", dwFileAttributes=0x80) returned 0 [0090.125] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FRADM.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\fradm.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.125] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.126] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.126] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.126] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.126] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FRADMCN.TTF", dwFileAttributes=0x80) returned 0 [0090.126] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FRADMCN.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\fradmcn.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.126] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.126] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.127] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.127] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FRADMIT.TTF", dwFileAttributes=0x80) returned 0 [0090.127] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FRADMIT.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\fradmit.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.127] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.127] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.127] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.127] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.128] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FRAHV.TTF", dwFileAttributes=0x80) returned 0 [0090.128] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FRAHV.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\frahv.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.128] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.128] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.128] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.128] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.129] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FRAHVIT.TTF", dwFileAttributes=0x80) returned 0 [0090.129] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FRAHVIT.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\frahvit.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.129] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.129] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.129] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.129] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FRAMDCN.TTF", dwFileAttributes=0x80) returned 0 [0090.130] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FRAMDCN.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\framdcn.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.130] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.130] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.130] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.130] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.131] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FREESCPT.TTF", dwFileAttributes=0x80) returned 0 [0090.131] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FREESCPT.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\freescpt.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.131] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.131] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.131] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.131] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.131] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FRSCRIPT.TTF", dwFileAttributes=0x80) returned 0 [0090.132] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FRSCRIPT.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\frscript.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.132] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.132] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.132] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.132] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.133] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FTLTLT.TTF", dwFileAttributes=0x80) returned 0 [0090.133] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FTLTLT.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\ftltlt.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.133] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.133] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.133] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.133] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.133] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GABRIOLA.TTF", dwFileAttributes=0x80) returned 0 [0090.134] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GABRIOLA.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\gabriola.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.134] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.134] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.134] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.134] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GADUGI.TTF", dwFileAttributes=0x80) returned 0 [0090.135] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GADUGI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\gadugi.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.135] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.135] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.135] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.135] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GADUGIB.TTF", dwFileAttributes=0x80) returned 0 [0090.136] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GADUGIB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\gadugib.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.136] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.136] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.136] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.136] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GARA.TTF", dwFileAttributes=0x80) returned 0 [0090.137] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GARA.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\gara.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.137] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.137] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.137] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.137] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GARABD.TTF", dwFileAttributes=0x80) returned 0 [0090.138] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GARABD.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\garabd.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.138] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.138] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.138] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.138] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.138] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GARAIT.TTF", dwFileAttributes=0x80) returned 0 [0090.138] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GARAIT.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\garait.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.139] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.139] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.139] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.139] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.139] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GIGI.TTF", dwFileAttributes=0x80) returned 0 [0090.139] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GIGI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\gigi.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.139] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.140] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.140] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.140] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.140] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GILBI___.TTF", dwFileAttributes=0x80) returned 0 [0090.140] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GILBI___.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\gilbi___.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.140] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.140] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.141] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.141] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.141] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GILB____.TTF", dwFileAttributes=0x80) returned 0 [0090.141] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GILB____.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\gilb____.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.141] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.141] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.142] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.142] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.142] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GILC____.TTF", dwFileAttributes=0x80) returned 0 [0090.142] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GILC____.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\gilc____.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.143] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.143] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.143] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.143] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GILI____.TTF", dwFileAttributes=0x80) returned 0 [0090.143] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GILI____.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\gili____.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.143] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.144] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.144] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.144] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GILLUBCD.TTF", dwFileAttributes=0x80) returned 0 [0090.144] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GILLUBCD.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\gillubcd.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.144] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.144] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.145] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.145] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.145] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GILSANUB.TTF", dwFileAttributes=0x80) returned 0 [0090.145] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GILSANUB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\gilsanub.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.145] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.145] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.145] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.146] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.146] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GIL_____.TTF", dwFileAttributes=0x80) returned 0 [0090.146] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GIL_____.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\gil_____.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.146] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.146] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.146] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.146] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.147] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GLECB.TTF", dwFileAttributes=0x80) returned 0 [0090.149] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GLECB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\glecb.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.149] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.149] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.150] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.150] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GLSNECB.TTF", dwFileAttributes=0x80) returned 0 [0090.150] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GLSNECB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\glsnecb.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.150] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.150] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.151] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.151] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GOTHIC.TTF", dwFileAttributes=0x80) returned 0 [0090.152] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GOTHIC.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\gothic.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.152] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.152] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.152] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.152] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GOTHICB.TTF", dwFileAttributes=0x80) returned 0 [0090.153] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GOTHICB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\gothicb.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.153] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.153] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.153] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.153] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GOTHICBI.TTF", dwFileAttributes=0x80) returned 0 [0090.154] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GOTHICBI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\gothicbi.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.154] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.154] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.154] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.155] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.155] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GOTHICI.TTF", dwFileAttributes=0x80) returned 0 [0090.155] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GOTHICI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\gothici.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.155] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.155] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.155] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.155] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GOUDOS.TTF", dwFileAttributes=0x80) returned 0 [0090.156] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GOUDOS.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\goudos.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.156] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.156] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.156] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.156] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GOUDOSB.TTF", dwFileAttributes=0x80) returned 0 [0090.157] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GOUDOSB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\goudosb.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.157] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.157] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.157] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.157] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GOUDOSI.TTF", dwFileAttributes=0x80) returned 0 [0090.158] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GOUDOSI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\goudosi.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.158] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.158] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.158] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.158] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GOUDYSTO.TTF", dwFileAttributes=0x80) returned 0 [0090.159] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GOUDYSTO.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\goudysto.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.159] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.159] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.159] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.159] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.160] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\HARLOWSI.TTF", dwFileAttributes=0x80) returned 0 [0090.160] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\HARLOWSI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\harlowsi.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.160] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.160] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.160] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.160] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.160] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\HARNGTON.TTF", dwFileAttributes=0x80) returned 0 [0090.161] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\HARNGTON.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\harngton.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.161] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.161] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.161] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.161] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\HATTEN.TTF", dwFileAttributes=0x80) returned 0 [0090.162] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\HATTEN.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\hatten.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.162] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.162] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.162] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.162] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\HTOWERT.TTF", dwFileAttributes=0x80) returned 0 [0090.163] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\HTOWERT.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\htowert.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.163] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.163] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.164] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.164] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.164] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\HTOWERTI.TTF", dwFileAttributes=0x80) returned 0 [0090.164] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\HTOWERTI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\htowerti.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.164] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.164] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.164] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.164] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\IMPRISHA.TTF", dwFileAttributes=0x80) returned 0 [0090.165] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\IMPRISHA.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\imprisha.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.165] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.165] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.165] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.165] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.166] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\INFROMAN.TTF", dwFileAttributes=0x80) returned 0 [0090.166] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\INFROMAN.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\infroman.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.166] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.166] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.166] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.166] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.166] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ITCBLKAD.TTF", dwFileAttributes=0x80) returned 0 [0090.167] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ITCBLKAD.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\itcblkad.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.167] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.167] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.167] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.167] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ITCEDSCR.TTF", dwFileAttributes=0x80) returned 0 [0090.168] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ITCEDSCR.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\itcedscr.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.168] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.168] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.168] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.168] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.169] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ITCKRIST.TTF", dwFileAttributes=0x80) returned 0 [0090.169] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ITCKRIST.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\itckrist.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.169] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.169] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.169] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.169] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.169] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\JOKERMAN.TTF", dwFileAttributes=0x80) returned 0 [0090.170] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\JOKERMAN.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\jokerman.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.170] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.170] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.170] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.170] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\JUICE___.TTF", dwFileAttributes=0x80) returned 0 [0090.171] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\JUICE___.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\juice___.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.171] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.171] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.171] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.171] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.171] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\KUNSTLER.TTF", dwFileAttributes=0x80) returned 0 [0090.171] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\KUNSTLER.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\kunstler.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.172] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.172] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.172] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.172] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.172] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LATINWD.TTF", dwFileAttributes=0x80) returned 0 [0090.172] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LATINWD.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\latinwd.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.172] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.172] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.173] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.173] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.173] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LBRITE.TTF", dwFileAttributes=0x80) returned 0 [0090.173] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LBRITE.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\lbrite.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.173] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.173] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.173] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.173] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.174] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LBRITED.TTF", dwFileAttributes=0x80) returned 0 [0090.174] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LBRITED.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\lbrited.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.175] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.175] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.175] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.175] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.175] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LBRITEDI.TTF", dwFileAttributes=0x80) returned 0 [0090.175] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LBRITEDI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\lbritedi.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.175] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.175] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.176] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.176] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.176] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LBRITEI.TTF", dwFileAttributes=0x80) returned 0 [0090.176] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LBRITEI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\lbritei.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.176] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.176] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.176] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.177] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.177] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LCALLIG.TTF", dwFileAttributes=0x80) returned 0 [0090.177] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LCALLIG.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\lcallig.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.177] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.177] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.177] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.177] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LEELAWAD.TTF", dwFileAttributes=0x80) returned 0 [0090.178] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LEELAWAD.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\leelawad.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.178] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.178] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.178] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.178] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LEELAWDB.TTF", dwFileAttributes=0x80) returned 0 [0090.179] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LEELAWDB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\leelawdb.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.179] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.179] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.179] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.179] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.180] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LFAX.TTF", dwFileAttributes=0x80) returned 0 [0090.180] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LFAX.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\lfax.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.180] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.180] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.180] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.180] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.180] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LFAXD.TTF", dwFileAttributes=0x80) returned 0 [0090.181] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LFAXD.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\lfaxd.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.181] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.181] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.181] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.181] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.181] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LFAXDI.TTF", dwFileAttributes=0x80) returned 0 [0090.183] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LFAXDI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\lfaxdi.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.183] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.183] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.183] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.183] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.183] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LFAXI.TTF", dwFileAttributes=0x80) returned 0 [0090.184] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LFAXI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\lfaxi.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.184] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.184] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.185] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.185] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.185] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LHANDW.TTF", dwFileAttributes=0x80) returned 0 [0090.185] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LHANDW.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\lhandw.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.185] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.185] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.185] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.186] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LSANS.TTF", dwFileAttributes=0x80) returned 0 [0090.187] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LSANS.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\lsans.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.187] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.187] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.187] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.187] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LSANSD.TTF", dwFileAttributes=0x80) returned 0 [0090.188] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LSANSD.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\lsansd.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.188] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.188] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.188] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.188] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.188] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LSANSDI.TTF", dwFileAttributes=0x80) returned 0 [0090.189] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LSANSDI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\lsansdi.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.189] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.189] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.189] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.189] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.190] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LSANSI.TTF", dwFileAttributes=0x80) returned 0 [0090.190] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LSANSI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\lsansi.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.190] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.190] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.190] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.190] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.191] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LTYPE.TTF", dwFileAttributes=0x80) returned 0 [0090.191] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LTYPE.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\ltype.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.191] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.191] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.191] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.191] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.191] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LTYPEB.TTF", dwFileAttributes=0x80) returned 0 [0090.192] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LTYPEB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\ltypeb.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.192] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.192] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.193] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.193] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.193] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LTYPEBO.TTF", dwFileAttributes=0x80) returned 0 [0090.193] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LTYPEBO.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\ltypebo.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.193] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.193] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.193] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.193] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.194] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LTYPEO.TTF", dwFileAttributes=0x80) returned 0 [0090.194] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LTYPEO.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\ltypeo.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.194] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.194] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.196] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.196] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.196] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MAGNETOB.TTF", dwFileAttributes=0x80) returned 0 [0090.197] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MAGNETOB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\magnetob.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.197] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.197] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.197] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.197] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.197] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MAIAN.TTF", dwFileAttributes=0x80) returned 0 [0090.198] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MAIAN.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\maian.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.198] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.198] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.198] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.198] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.198] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MATURASC.TTF", dwFileAttributes=0x80) returned 0 [0090.198] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MATURASC.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\maturasc.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.199] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.199] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.199] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.199] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.199] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MISTRAL.TTF", dwFileAttributes=0x80) returned 0 [0090.199] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MISTRAL.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\mistral.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.199] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.199] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.200] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.200] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.200] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MOD20.TTF", dwFileAttributes=0x80) returned 0 [0090.200] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MOD20.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\mod20.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.200] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.200] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.200] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.200] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.201] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MSJH.TTC", dwFileAttributes=0x80) returned 0 [0090.201] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MSJH.TTC" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\msjh.ttc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.202] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.202] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.202] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.202] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.202] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MSJHBD.TTC", dwFileAttributes=0x80) returned 0 [0090.202] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MSJHBD.TTC" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\msjhbd.ttc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.202] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.202] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.203] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.203] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.203] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MSUIGHUB.TTF", dwFileAttributes=0x80) returned 0 [0090.203] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MSUIGHUB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\msuighub.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.203] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.203] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.203] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.204] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.204] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MSUIGHUR.TTF", dwFileAttributes=0x80) returned 0 [0090.204] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MSUIGHUR.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\msuighur.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.205] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.205] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.205] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.205] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.205] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MSYH.TTC", dwFileAttributes=0x80) returned 0 [0090.205] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MSYH.TTC" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\msyh.ttc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.205] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.205] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.206] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.206] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.206] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MSYHBD.TTC", dwFileAttributes=0x80) returned 0 [0090.206] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MSYHBD.TTC" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\msyhbd.ttc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.206] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.206] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.207] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.207] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.207] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MTCORSVA.TTF", dwFileAttributes=0x80) returned 0 [0090.207] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MTCORSVA.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\mtcorsva.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.208] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.208] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.208] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.208] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.208] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MTEXTRA.TTF", dwFileAttributes=0x80) returned 0 [0090.215] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MTEXTRA.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\mtextra.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.215] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.215] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.215] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.215] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.216] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\NIAGENG.TTF", dwFileAttributes=0x80) returned 0 [0090.216] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\NIAGENG.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\niageng.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.217] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.217] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.217] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.217] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.217] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\NIAGSOL.TTF", dwFileAttributes=0x80) returned 0 [0090.218] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\NIAGSOL.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\niagsol.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.218] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.218] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.218] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.218] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.218] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\NIRMALA.TTF", dwFileAttributes=0x80) returned 0 [0090.219] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\NIRMALA.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\nirmala.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.219] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.219] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.219] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.219] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.219] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\NIRMALAB.TTF", dwFileAttributes=0x80) returned 0 [0090.220] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\NIRMALAB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\nirmalab.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.220] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.220] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.220] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.220] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.220] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\OCRAEXT.TTF", dwFileAttributes=0x80) returned 0 [0090.220] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\OCRAEXT.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\ocraext.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.221] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.221] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.221] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.221] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.221] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\OLDENGL.TTF", dwFileAttributes=0x80) returned 0 [0090.221] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\OLDENGL.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\oldengl.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.221] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.221] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.222] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.222] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.222] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ONYX.TTF", dwFileAttributes=0x80) returned 0 [0090.222] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ONYX.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\onyx.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.222] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.222] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.222] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.223] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.223] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\OUTLOOK.TTF", dwFileAttributes=0x80) returned 0 [0090.223] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\OUTLOOK.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\outlook.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.224] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.224] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.224] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.224] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.224] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\PALSCRI.TTF", dwFileAttributes=0x80) returned 0 [0090.224] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\PALSCRI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\palscri.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.224] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.224] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.225] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.225] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.225] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\PAPYRUS.TTF", dwFileAttributes=0x80) returned 0 [0090.225] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\PAPYRUS.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\papyrus.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.225] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.225] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.225] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.226] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.226] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\PARCHM.TTF", dwFileAttributes=0x80) returned 0 [0090.226] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\PARCHM.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\parchm.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.226] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.226] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.227] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.227] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.227] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\PERBI___.TTF", dwFileAttributes=0x80) returned 0 [0090.227] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\PERBI___.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\perbi___.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.228] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.228] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.228] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.228] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.228] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\PERB____.TTF", dwFileAttributes=0x80) returned 0 [0090.228] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\PERB____.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\perb____.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.229] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.229] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.229] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.229] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.230] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\PERI____.TTF", dwFileAttributes=0x80) returned 0 [0090.230] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\PERI____.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\peri____.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.230] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.230] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.230] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.230] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.230] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\PERTIBD.TTF", dwFileAttributes=0x80) returned 0 [0090.231] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\PERTIBD.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\pertibd.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.231] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.231] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.231] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.231] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.231] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\PERTILI.TTF", dwFileAttributes=0x80) returned 0 [0090.231] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\PERTILI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\pertili.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.232] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.232] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.232] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.232] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.232] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\PER_____.TTF", dwFileAttributes=0x80) returned 0 [0090.232] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\PER_____.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\per_____.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.233] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.233] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.233] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.233] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.233] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\PLAYBILL.TTF", dwFileAttributes=0x80) returned 0 [0090.233] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\PLAYBILL.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\playbill.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.233] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.233] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.234] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.234] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.234] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\POORICH.TTF", dwFileAttributes=0x80) returned 0 [0090.234] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\POORICH.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\poorich.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.234] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.234] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.234] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.234] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.235] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\PRISTINA.TTF", dwFileAttributes=0x80) returned 0 [0090.235] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\PRISTINA.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\pristina.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.236] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.236] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.236] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.236] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.236] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\RAGE.TTF", dwFileAttributes=0x80) returned 0 [0090.236] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\RAGE.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\rage.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.236] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.236] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.237] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.237] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.237] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\RAVIE.TTF", dwFileAttributes=0x80) returned 0 [0090.237] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\RAVIE.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\ravie.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.237] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.237] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.238] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.238] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.238] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\REFSAN.TTF", dwFileAttributes=0x80) returned 0 [0090.238] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\REFSAN.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\refsan.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.238] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.238] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.238] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.239] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.239] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\REFSPCL.TTF", dwFileAttributes=0x80) returned 0 [0090.239] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\REFSPCL.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\refspcl.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.239] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.239] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.239] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.239] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.240] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ROCCB___.TTF", dwFileAttributes=0x80) returned 0 [0090.240] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ROCCB___.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\roccb___.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.240] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.241] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.241] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.241] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.241] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ROCC____.TTF", dwFileAttributes=0x80) returned 0 [0090.242] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ROCC____.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\rocc____.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.242] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.242] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.242] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.242] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.242] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ROCK.TTF", dwFileAttributes=0x80) returned 0 [0090.242] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ROCK.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\rock.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.243] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.243] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.243] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.243] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.243] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ROCKB.TTF", dwFileAttributes=0x80) returned 0 [0090.243] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ROCKB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\rockb.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.244] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.244] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.244] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.244] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.244] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ROCKBI.TTF", dwFileAttributes=0x80) returned 0 [0090.244] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ROCKBI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\rockbi.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.245] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.245] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.245] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.245] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.245] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ROCKEB.TTF", dwFileAttributes=0x80) returned 0 [0090.246] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ROCKEB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\rockeb.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.246] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.246] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.246] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.246] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.246] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ROCKI.TTF", dwFileAttributes=0x80) returned 0 [0090.247] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ROCKI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\rocki.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.247] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.247] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.247] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.247] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.247] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\SCHLBKB.TTF", dwFileAttributes=0x80) returned 0 [0090.248] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\SCHLBKB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\schlbkb.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.248] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.248] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.248] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.248] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.248] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\SCHLBKBI.TTF", dwFileAttributes=0x80) returned 0 [0090.248] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\SCHLBKBI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\schlbkbi.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.249] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.249] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.249] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.249] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.249] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\SCHLBKI.TTF", dwFileAttributes=0x80) returned 0 [0090.249] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\SCHLBKI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\schlbki.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.249] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.249] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.250] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.250] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.250] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\SCRIPTBL.TTF", dwFileAttributes=0x80) returned 0 [0090.251] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\SCRIPTBL.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\scriptbl.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.251] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.251] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.251] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.251] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.251] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\SEGOEUISL.TTF", dwFileAttributes=0x80) returned 0 [0090.252] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\SEGOEUISL.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\segoeuisl.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.252] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.252] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.252] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.252] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.252] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\SHOWG.TTF", dwFileAttributes=0x80) returned 0 [0090.253] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\SHOWG.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\showg.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.253] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.253] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.253] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.253] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.253] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\SNAP____.TTF", dwFileAttributes=0x80) returned 0 [0090.253] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\SNAP____.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\snap____.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.254] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.254] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.254] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.254] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.254] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\STENCIL.TTF", dwFileAttributes=0x80) returned 0 [0090.254] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\STENCIL.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\stencil.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.254] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.254] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.255] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.255] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.255] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\TCBI____.TTF", dwFileAttributes=0x80) returned 0 [0090.255] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\TCBI____.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\tcbi____.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.255] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.255] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.255] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.255] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.256] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\TCB_____.TTF", dwFileAttributes=0x80) returned 0 [0090.256] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\TCB_____.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\tcb_____.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.256] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.256] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.256] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.256] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.257] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\TCCB____.TTF", dwFileAttributes=0x80) returned 0 [0090.257] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\TCCB____.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\tccb____.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.257] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.257] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.257] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.257] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.258] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\TCCEB.TTF", dwFileAttributes=0x80) returned 0 [0090.258] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\TCCEB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\tcceb.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.258] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.258] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.258] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.258] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.259] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\TCCM____.TTF", dwFileAttributes=0x80) returned 0 [0090.259] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\TCCM____.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\tccm____.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.259] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.259] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.259] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.259] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.259] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\TCMI____.TTF", dwFileAttributes=0x80) returned 0 [0090.260] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\TCMI____.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\tcmi____.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.260] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.260] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.260] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.260] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.260] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\TCM_____.TTF", dwFileAttributes=0x80) returned 0 [0090.261] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\TCM_____.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\tcm_____.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.261] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.261] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.261] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.261] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.261] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\TEMPSITC.TTF", dwFileAttributes=0x80) returned 0 [0090.261] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\TEMPSITC.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\tempsitc.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.262] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.262] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.262] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.262] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.262] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\VINERITC.TTF", dwFileAttributes=0x80) returned 0 [0090.262] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\VINERITC.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\vineritc.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.263] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.263] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.263] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.263] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.263] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\VIVALDII.TTF", dwFileAttributes=0x80) returned 0 [0090.263] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\VIVALDII.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\vivaldii.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.263] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.263] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.264] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.264] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.264] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\VLADIMIR.TTF", dwFileAttributes=0x80) returned 0 [0090.264] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\VLADIMIR.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\vladimir.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.264] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.264] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.264] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.264] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.265] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\WINGDNG2.TTF", dwFileAttributes=0x80) returned 0 [0090.265] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\WINGDNG2.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\wingdng2.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.265] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.265] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.265] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.265] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.266] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\WINGDNG3.TTF", dwFileAttributes=0x80) returned 0 [0090.266] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\WINGDNG3.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\wingdng3.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.266] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.266] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.266] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0090.266] FindClose (in: hFindFile=0xd7079a0d50 | out: hFindFile=0xd7079a0d50) returned 1 [0090.267] SetLastError (dwErrCode=0x0) [0090.267] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.270] GetLastError () returned 0x5 [0090.270] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0090.270] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.270] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0090.270] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0090.270] SetLastError (dwErrCode=0x0) [0090.270] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.270] GetLastError () returned 0x5 [0090.270] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0090.270] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.270] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0090.270] SetLastError (dwErrCode=0x0) [0090.270] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.270] GetLastError () returned 0x5 [0090.270] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0090.270] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.270] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0810 [0090.271] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0090.271] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0090.271] SetLastError (dwErrCode=0x0) [0090.271] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.271] GetLastError () returned 0x5 [0090.271] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0090.271] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.271] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\DESIGNER\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0450 [0090.272] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.272] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.272] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.272] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\DESIGNER\\MSADDNDR.OLB", dwFileAttributes=0x80) returned 0 [0090.273] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\DESIGNER\\MSADDNDR.OLB" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\designer\\msaddndr.olb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.273] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.273] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.274] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0090.274] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0090.274] SetLastError (dwErrCode=0x0) [0090.274] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\DESIGNER\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\designer\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.274] GetLastError () returned 0x5 [0090.274] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0090.274] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.274] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0090.274] SetLastError (dwErrCode=0x0) [0090.274] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.274] GetLastError () returned 0x5 [0090.274] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0090.274] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.274] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a08d0 [0090.275] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.275] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.275] SetLastError (dwErrCode=0x0) [0090.275] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.275] GetLastError () returned 0x5 [0090.275] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0090.275] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.275] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\DW\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0d50 [0090.277] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.277] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.277] SetLastError (dwErrCode=0x0) [0090.277] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\DW\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\dw\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.277] GetLastError () returned 0x5 [0090.277] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.277] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.278] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\DW\\1033\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a0e10 [0090.278] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.278] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.278] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0090.278] SetLastError (dwErrCode=0x0) [0090.278] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\DW\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\dw\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.278] GetLastError () returned 0x5 [0090.278] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.278] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.278] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.278] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.278] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.278] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0090.278] FindClose (in: hFindFile=0xd7079a0d50 | out: hFindFile=0xd7079a0d50) returned 1 [0090.278] SetLastError (dwErrCode=0x0) [0090.278] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\DW\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\dw\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.278] GetLastError () returned 0x5 [0090.279] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0090.279] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.279] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.279] SetLastError (dwErrCode=0x0) [0090.279] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.279] GetLastError () returned 0x5 [0090.279] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0090.279] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.279] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\EQUATION\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0e10 [0090.280] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.281] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.281] SetLastError (dwErrCode=0x0) [0090.281] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\EQUATION\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\equation\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.281] GetLastError () returned 0x5 [0090.281] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.281] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.281] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\EQUATION\\1033\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a0930 [0090.282] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.282] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.282] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.282] FindClose (in: hFindFile=0xd7079a0930 | out: hFindFile=0xd7079a0930) returned 1 [0090.282] SetLastError (dwErrCode=0x0) [0090.282] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\EQUATION\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\equation\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.282] GetLastError () returned 0x5 [0090.282] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.282] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.282] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.282] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.282] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.282] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.283] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.283] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.283] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.283] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.283] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.283] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.283] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.283] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.283] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.283] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.283] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.283] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.283] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.283] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.283] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.283] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.283] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.283] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.283] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.283] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.283] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.283] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.283] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.283] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.283] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.283] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.283] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.283] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.283] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.283] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0090.283] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0090.283] SetLastError (dwErrCode=0x0) [0090.283] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\EQUATION\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\equation\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.283] GetLastError () returned 0x5 [0090.283] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0090.283] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.283] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.284] SetLastError (dwErrCode=0x0) [0090.284] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.284] GetLastError () returned 0x5 [0090.284] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0090.284] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.284] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\EURO\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0d50 [0090.284] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.284] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.284] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0090.284] FindClose (in: hFindFile=0xd7079a0d50 | out: hFindFile=0xd7079a0d50) returned 1 [0090.284] SetLastError (dwErrCode=0x0) [0090.284] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\EURO\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\euro\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.284] GetLastError () returned 0x5 [0090.284] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0090.284] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.284] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.284] SetLastError (dwErrCode=0x0) [0090.284] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.285] GetLastError () returned 0x5 [0090.285] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0090.285] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.285] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Filters\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0d50 [0090.285] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.285] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.285] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.285] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.285] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.285] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0090.285] FindClose (in: hFindFile=0xd7079a0d50 | out: hFindFile=0xd7079a0d50) returned 1 [0090.285] SetLastError (dwErrCode=0x0) [0090.285] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Filters\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\filters\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.285] GetLastError () returned 0x5 [0090.285] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0090.285] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.285] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.285] SetLastError (dwErrCode=0x0) [0090.285] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.286] GetLastError () returned 0x5 [0090.286] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0090.286] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.286] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0ed0 [0090.287] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.287] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.287] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.288] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", dwFileAttributes=0x80) returned 0 [0090.288] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\grphflt\\epsimp32.flt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.288] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.288] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.289] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.289] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.289] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", dwFileAttributes=0x80) returned 0 [0090.289] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\grphflt\\gifimp32.flt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.289] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.289] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.289] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.290] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.290] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", dwFileAttributes=0x80) returned 0 [0090.290] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\grphflt\\jpegim32.flt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.290] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.290] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.291] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.291] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.291] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\MS.EPS", dwFileAttributes=0x80) returned 0 [0090.291] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\MS.EPS" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\grphflt\\ms.eps"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.291] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.291] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.291] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.291] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.292] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\MS.GIF", dwFileAttributes=0x80) returned 0 [0090.292] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\MS.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\grphflt\\ms.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.293] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.293] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.293] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.293] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.293] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\MS.JPG", dwFileAttributes=0x80) returned 0 [0090.293] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\MS.JPG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\grphflt\\ms.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.293] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.294] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.294] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.294] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.294] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\MS.PNG", dwFileAttributes=0x80) returned 0 [0090.294] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\MS.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\grphflt\\ms.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.294] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.294] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.295] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.295] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.295] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\MS.WPG", dwFileAttributes=0x80) returned 0 [0090.295] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\MS.WPG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\grphflt\\ms.wpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.295] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.295] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.295] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.295] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.296] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", dwFileAttributes=0x80) returned 0 [0090.296] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\grphflt\\pictim32.flt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.296] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.296] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.296] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.296] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.297] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", dwFileAttributes=0x80) returned 0 [0090.297] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\PNG32.FLT" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\grphflt\\png32.flt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.297] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.297] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.297] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.297] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.297] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", dwFileAttributes=0x80) returned 0 [0090.298] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\grphflt\\wpgimp32.flt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.298] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.298] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.298] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0090.298] FindClose (in: hFindFile=0xd7079a0ed0 | out: hFindFile=0xd7079a0ed0) returned 1 [0090.299] SetLastError (dwErrCode=0x0) [0090.299] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\grphflt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.301] GetLastError () returned 0x5 [0090.301] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0090.301] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.301] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.301] SetLastError (dwErrCode=0x0) [0090.301] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.302] GetLastError () returned 0x5 [0090.302] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0090.302] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.302] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Help\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0d50 [0090.303] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.303] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.303] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.304] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Help\\Hx.HxC", dwFileAttributes=0x80) returned 0 [0090.304] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Help\\Hx.HxC" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\help\\hx.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.304] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.304] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.305] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.305] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.305] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Help\\Hx.HxT", dwFileAttributes=0x80) returned 0 [0090.306] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Help\\Hx.HxT" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\help\\hx.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.306] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.306] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.306] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.306] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.306] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.306] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Help\\HxRuntime.HxS", dwFileAttributes=0x80) returned 0 [0090.307] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Help\\HxRuntime.HxS" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\help\\hxruntime.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.307] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.307] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.307] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.307] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.307] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.307] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Help\\Keywords.HxK", dwFileAttributes=0x80) returned 0 [0090.308] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Help\\Keywords.HxK" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\help\\keywords.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.308] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.308] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.308] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.308] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.308] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.309] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Help\\NamedUrls.HxK", dwFileAttributes=0x80) returned 0 [0090.309] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Help\\NamedUrls.HxK" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\help\\namedurls.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.309] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.309] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.309] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0090.309] FindClose (in: hFindFile=0xd7079a0d50 | out: hFindFile=0xd7079a0d50) returned 1 [0090.310] SetLastError (dwErrCode=0x0) [0090.310] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Help\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\help\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.312] GetLastError () returned 0x5 [0090.313] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0090.313] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.313] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.313] SetLastError (dwErrCode=0x0) [0090.313] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.313] GetLastError () returned 0x5 [0090.313] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0090.313] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.313] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\MSClientDataMgr\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0d50 [0090.313] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.314] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.314] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0090.314] FindClose (in: hFindFile=0xd7079a0d50 | out: hFindFile=0xd7079a0d50) returned 1 [0090.314] SetLastError (dwErrCode=0x0) [0090.314] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\MSClientDataMgr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\msclientdatamgr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.314] GetLastError () returned 0x5 [0090.314] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0090.314] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.314] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.314] SetLastError (dwErrCode=0x0) [0090.314] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.314] GetLastError () returned 0x5 [0090.314] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0090.314] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.314] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0450 [0090.314] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.315] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.315] SetLastError (dwErrCode=0x0) [0090.315] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.315] GetLastError () returned 0x5 [0090.315] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.315] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.316] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\1033\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a0930 [0090.316] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.316] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.316] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.316] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.316] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.316] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.317] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\1033\\ADO210.CHM", dwFileAttributes=0x80) returned 0 [0090.317] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\1033\\ADO210.CHM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\1033\\ado210.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.317] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.317] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.318] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.318] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.318] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.318] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.318] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.318] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.318] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.318] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\1033\\osmdp32.msi", dwFileAttributes=0x80) returned 0 [0090.318] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\1033\\osmdp32.msi" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\1033\\osmdp32.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.318] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.318] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.319] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.319] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.319] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\1033\\osmdp64.msi", dwFileAttributes=0x80) returned 0 [0090.320] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\1033\\osmdp64.msi" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\1033\\osmdp64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.320] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.320] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.320] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.320] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.320] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\1033\\osmia32.msi", dwFileAttributes=0x80) returned 0 [0090.321] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\1033\\osmia32.msi" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\1033\\osmia32.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.321] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.321] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.321] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.321] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.321] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\1033\\osmia64.msi", dwFileAttributes=0x80) returned 0 [0090.321] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\1033\\osmia64.msi" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\1033\\osmia64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.322] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.322] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.322] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.322] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.322] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\1033\\README.HTM", dwFileAttributes=0x80) returned 0 [0090.322] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\1033\\README.HTM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\1033\\readme.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.322] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.323] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.323] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.323] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.323] FindClose (in: hFindFile=0xd7079a0930 | out: hFindFile=0xd7079a0930) returned 1 [0090.323] SetLastError (dwErrCode=0x0) [0090.323] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.326] GetLastError () returned 0x5 [0090.326] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.326] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.326] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.326] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.326] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.326] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.326] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.326] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.326] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.326] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.326] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.326] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.326] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.326] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.326] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.326] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.326] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.326] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.326] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.326] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.326] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.326] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.326] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.327] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\AirSpace.Etw.man", dwFileAttributes=0x80) returned 0 [0090.328] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\AirSpace.Etw.man" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\airspace.etw.man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.328] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.328] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.328] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.328] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.328] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.328] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.328] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.328] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.328] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.328] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.328] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.328] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.329] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.329] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.329] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.329] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.329] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.329] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.329] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.329] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.329] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.329] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.329] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.329] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.329] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.329] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.329] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.329] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.329] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.329] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.329] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.329] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.329] SetLastError (dwErrCode=0x0) [0090.329] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.330] GetLastError () returned 0x5 [0090.330] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.330] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.330] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Cultures\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a0d50 [0090.330] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.330] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.330] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.330] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Cultures\\OFFICE.ODF", dwFileAttributes=0x80) returned 0 [0090.330] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Cultures\\OFFICE.ODF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\cultures\\office.odf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.330] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.330] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.331] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.331] FindClose (in: hFindFile=0xd7079a0d50 | out: hFindFile=0xd7079a0d50) returned 1 [0090.331] SetLastError (dwErrCode=0x0) [0090.331] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Cultures\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\cultures\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.331] GetLastError () returned 0x5 [0090.331] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.331] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.331] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.331] SetLastError (dwErrCode=0x0) [0090.331] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.331] GetLastError () returned 0x5 [0090.331] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.331] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.331] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a0930 [0090.333] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.333] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.333] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.333] SetLastError (dwErrCode=0x0) [0090.333] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\datamodel\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.334] GetLastError () returned 0x5 [0090.334] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0) returned 0 [0090.334] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.334] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\*.*", lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 0xd7079a0d50 [0090.336] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0090.337] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0090.337] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.337] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\as80.xsl", dwFileAttributes=0x80) returned 0 [0090.373] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\as80.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\datamodel\\cartridges\\as80.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.373] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.373] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.374] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0090.374] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.374] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\as90.xsl", dwFileAttributes=0x80) returned 0 [0090.375] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\as90.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\datamodel\\cartridges\\as90.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.375] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.375] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.375] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0090.375] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.376] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\db2v0801.xsl", dwFileAttributes=0x80) returned 0 [0090.377] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\db2v0801.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\datamodel\\cartridges\\db2v0801.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.377] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.377] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.377] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0090.377] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\informix.xsl", dwFileAttributes=0x80) returned 0 [0090.378] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\informix.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\datamodel\\cartridges\\informix.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.378] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.378] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.378] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0090.378] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.379] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\msjet.xsl", dwFileAttributes=0x80) returned 0 [0090.379] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\msjet.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\datamodel\\cartridges\\msjet.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.379] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.379] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.380] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0090.380] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.380] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\orcl7.xsl", dwFileAttributes=0x80) returned 0 [0090.380] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\orcl7.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\datamodel\\cartridges\\orcl7.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.380] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.381] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.381] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0090.381] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.381] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\sql2000.xsl", dwFileAttributes=0x80) returned 0 [0090.381] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\sql2000.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\datamodel\\cartridges\\sql2000.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.382] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.382] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.382] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0090.382] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.383] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\sql70.xsl", dwFileAttributes=0x80) returned 0 [0090.383] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\sql70.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\datamodel\\cartridges\\sql70.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.383] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.383] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.383] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0090.383] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.384] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\sql90.xsl", dwFileAttributes=0x80) returned 0 [0090.384] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\sql90.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\datamodel\\cartridges\\sql90.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.384] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.384] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.385] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0090.385] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.385] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\sqlpdw.xsl", dwFileAttributes=0x80) returned 0 [0090.386] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\sqlpdw.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\datamodel\\cartridges\\sqlpdw.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.386] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.386] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.386] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0090.386] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.387] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\sybase.xsl", dwFileAttributes=0x80) returned 0 [0090.387] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\sybase.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\datamodel\\cartridges\\sybase.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.387] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.387] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.387] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0090.387] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.388] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\trdtv2r41.xsl", dwFileAttributes=0x80) returned 0 [0090.388] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\trdtv2r41.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\datamodel\\cartridges\\trdtv2r41.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.388] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.388] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.388] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 0 [0090.389] FindClose (in: hFindFile=0xd7079a0d50 | out: hFindFile=0xd7079a0d50) returned 1 [0090.389] SetLastError (dwErrCode=0x0) [0090.389] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\datamodel\\cartridges\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.393] GetLastError () returned 0x5 [0090.393] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0) returned 0 [0090.393] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.393] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.393] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.393] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.393] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.393] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.393] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.393] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.393] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.393] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.393] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.393] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.393] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.393] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.393] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.393] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.393] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.393] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.393] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.393] SetLastError (dwErrCode=0x0) [0090.393] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\datamodel\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.393] GetLastError () returned 0x5 [0090.393] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0) returned 0 [0090.393] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.394] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Resources\\*.*", lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 0xd7079a0d50 [0090.394] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0090.394] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0090.394] SetLastError (dwErrCode=0x0) [0090.394] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\datamodel\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.395] GetLastError () returned 0x5 [0090.395] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4a330, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4a330, lpOverlapped=0x0) returned 0 [0090.395] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.395] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Resources\\1033\\*.*", lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 0xd7079a0e10 [0090.395] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0090.395] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0090.395] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Resources\\1033\\msmdsrvi_xl.rll", dwFileAttributes=0x80) returned 0 [0090.396] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Resources\\1033\\msmdsrvi_xl.rll" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\datamodel\\resources\\1033\\msmdsrvi_xl.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.397] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.397] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.397] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 0 [0090.397] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0090.397] SetLastError (dwErrCode=0x0) [0090.397] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Resources\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\datamodel\\resources\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.397] GetLastError () returned 0x5 [0090.397] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4a330, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4a330, lpOverlapped=0x0) returned 0 [0090.397] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.397] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 0 [0090.397] FindClose (in: hFindFile=0xd7079a0d50 | out: hFindFile=0xd7079a0d50) returned 1 [0090.399] SetLastError (dwErrCode=0x0) [0090.399] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\datamodel\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.399] GetLastError () returned 0x5 [0090.399] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0) returned 0 [0090.399] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.399] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.399] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.399] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.399] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.399] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.400] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.400] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.400] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.400] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.400] FindClose (in: hFindFile=0xd7079a0930 | out: hFindFile=0xd7079a0930) returned 1 [0090.400] SetLastError (dwErrCode=0x0) [0090.400] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\datamodel\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.400] GetLastError () returned 0x5 [0090.400] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.400] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.400] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.400] SetLastError (dwErrCode=0x0) [0090.400] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.400] GetLastError () returned 0x5 [0090.401] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.401] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.401] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\en-us\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976910 [0090.401] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.401] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.401] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.401] FindClose (in: hFindFile=0xd707976910 | out: hFindFile=0xd707976910) returned 1 [0090.401] SetLastError (dwErrCode=0x0) [0090.401] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\en-us\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.401] GetLastError () returned 0x5 [0090.401] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.401] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.401] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.401] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.401] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.401] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.401] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.401] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.402] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\HeartbeatConfig.xml", dwFileAttributes=0x80) returned 0 [0090.402] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\HeartbeatConfig.xml" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\heartbeatconfig.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.402] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.403] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.403] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.403] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.403] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.403] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\InstallerMainShell.tlb", dwFileAttributes=0x80) returned 0 [0090.403] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\InstallerMainShell.tlb" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\installermainshell.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.404] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.404] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.404] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.404] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.404] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.404] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.404] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.404] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.404] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.404] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.404] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.404] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.404] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.404] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.404] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.404] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.404] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.404] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.404] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.404] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.404] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.404] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.405] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.405] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.405] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.405] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.405] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.405] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.405] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.405] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\MUAUTH.CAB", dwFileAttributes=0x80) returned 0 [0090.406] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\MUAUTH.CAB" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\muauth.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.406] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.406] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.406] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.406] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.407] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.407] SetLastError (dwErrCode=0x0) [0090.407] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.407] GetLastError () returned 0x5 [0090.407] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.407] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.407] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Office Setup Controller\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976910 [0090.408] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.408] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.408] SetLastError (dwErrCode=0x0) [0090.408] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Office Setup Controller\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\office setup controller\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.408] GetLastError () returned 0x5 [0090.408] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0) returned 0 [0090.408] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.408] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Office Setup Controller\\Office.en-us\\*.*", lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 0xd707977510 [0090.410] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0090.410] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0090.410] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0090.410] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.410] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Office Setup Controller\\Office.en-us\\BRANDING.XML", dwFileAttributes=0x80) returned 0 [0090.411] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Office Setup Controller\\Office.en-us\\BRANDING.XML" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\office setup controller\\office.en-us\\branding.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.411] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.411] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.411] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0090.411] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.411] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", dwFileAttributes=0x80) returned 0 [0090.412] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Office Setup Controller\\Office.en-us\\PSS10O.CHM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\office setup controller\\office.en-us\\pss10o.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.413] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.413] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.413] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0090.413] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.414] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", dwFileAttributes=0x80) returned 0 [0090.414] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Office Setup Controller\\Office.en-us\\PSS10R.CHM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\office setup controller\\office.en-us\\pss10r.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.414] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.414] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.415] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0090.415] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.415] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Office Setup Controller\\Office.en-us\\SETUP.CHM", dwFileAttributes=0x80) returned 0 [0090.415] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Office Setup Controller\\Office.en-us\\SETUP.CHM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\office setup controller\\office.en-us\\setup.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.416] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.416] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.416] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 0 [0090.416] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0090.417] SetLastError (dwErrCode=0x0) [0090.417] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Office Setup Controller\\Office.en-us\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\office setup controller\\office.en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.419] GetLastError () returned 0x5 [0090.419] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0) returned 0 [0090.419] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.419] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.419] FindClose (in: hFindFile=0xd707976910 | out: hFindFile=0xd707976910) returned 1 [0090.420] SetLastError (dwErrCode=0x0) [0090.420] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Office Setup Controller\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\office setup controller\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.420] GetLastError () returned 0x5 [0090.420] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.420] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.420] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.420] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.420] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.420] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.420] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.420] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.420] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.420] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.420] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.420] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.420] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\OsfInstallerConfig.xml", dwFileAttributes=0x80) returned 0 [0090.421] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\OsfInstallerConfig.xml" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\osfinstallerconfig.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.421] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.421] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.421] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.421] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.421] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.421] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.421] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.421] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.421] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.421] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.421] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.421] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.421] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0090.421] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0090.421] SetLastError (dwErrCode=0x0) [0090.421] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.422] GetLastError () returned 0x5 [0090.422] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0090.422] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.422] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.422] SetLastError (dwErrCode=0x0) [0090.422] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.422] GetLastError () returned 0x5 [0090.422] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0090.422] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.422] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\PROOF\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd707976f10 [0090.423] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.423] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.423] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.423] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.424] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", dwFileAttributes=0x80) returned 0 [0090.424] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\proof\\mswds_en.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.424] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.424] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.425] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.425] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.425] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", dwFileAttributes=0x80) returned 0 [0090.425] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\proof\\mswds_es.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.425] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.425] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.426] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.426] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.426] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", dwFileAttributes=0x80) returned 0 [0090.426] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\proof\\mswds_fr.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.427] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.427] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.427] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0090.427] FindClose (in: hFindFile=0xd707976f10 | out: hFindFile=0xd707976f10) returned 1 [0090.427] SetLastError (dwErrCode=0x0) [0090.427] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\PROOF\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\proof\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.427] GetLastError () returned 0x5 [0090.427] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0090.428] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.428] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.428] SetLastError (dwErrCode=0x0) [0090.428] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.428] GetLastError () returned 0x5 [0090.428] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0090.428] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.428] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd707976cd0 [0090.430] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.430] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.430] SetLastError (dwErrCode=0x0) [0090.430] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\smart tag\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.430] GetLastError () returned 0x5 [0090.430] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.430] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.430] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\1033\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707977510 [0090.431] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.431] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.431] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.431] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", dwFileAttributes=0x80) returned 0 [0090.432] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\smart tag\\1033\\mcabout.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.432] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.432] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.432] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.432] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.432] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0090.432] SetLastError (dwErrCode=0x0) [0090.432] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\smart tag\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.433] GetLastError () returned 0x5 [0090.433] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.433] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.433] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.433] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.433] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.433] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.433] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.433] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.433] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.433] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.433] SetLastError (dwErrCode=0x0) [0090.433] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\smart tag\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.433] GetLastError () returned 0x5 [0090.433] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.433] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.433] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\LISTS\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976d30 [0090.434] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.434] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.434] SetLastError (dwErrCode=0x0) [0090.434] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\LISTS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\smart tag\\lists\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.434] GetLastError () returned 0x5 [0090.434] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0) returned 0 [0090.434] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.434] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\*.*", lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 0xd707976e50 [0090.434] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0090.434] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0090.434] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.435] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", dwFileAttributes=0x80) returned 0 [0090.435] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\smart tag\\lists\\1033\\dates.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.435] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.435] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.435] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0090.435] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.435] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", dwFileAttributes=0x80) returned 0 [0090.436] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\smart tag\\lists\\1033\\phone.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.436] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.436] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.436] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0090.436] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.436] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", dwFileAttributes=0x80) returned 0 [0090.437] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\smart tag\\lists\\1033\\time.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.437] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.437] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.437] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 0 [0090.437] FindClose (in: hFindFile=0xd707976e50 | out: hFindFile=0xd707976e50) returned 1 [0090.437] SetLastError (dwErrCode=0x0) [0090.437] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\smart tag\\lists\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.437] GetLastError () returned 0x5 [0090.437] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0) returned 0 [0090.437] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.437] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.437] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.438] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", dwFileAttributes=0x80) returned 0 [0090.438] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\smart tag\\lists\\basmla.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.438] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.439] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.439] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.439] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0090.439] SetLastError (dwErrCode=0x0) [0090.439] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\LISTS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\smart tag\\lists\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.439] GetLastError () returned 0x5 [0090.439] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.439] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.439] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.439] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.439] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.439] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\METCONV.TXT", dwFileAttributes=0x80) returned 0 [0090.440] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\METCONV.TXT" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\smart tag\\metconv.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.440] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.440] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.440] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.440] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.440] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.440] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", dwFileAttributes=0x80) returned 0 [0090.442] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\MSTAG.TLB" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\smart tag\\mstag.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.442] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.442] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.442] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.442] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0090.442] FindClose (in: hFindFile=0xd707976cd0 | out: hFindFile=0xd707976cd0) returned 1 [0090.442] SetLastError (dwErrCode=0x0) [0090.442] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\smart tag\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.442] GetLastError () returned 0x5 [0090.442] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0090.442] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.443] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.443] SetLastError (dwErrCode=0x0) [0090.443] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.443] GetLastError () returned 0x5 [0090.443] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0090.443] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.443] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Source Engine\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd707976910 [0090.443] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.444] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.444] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0090.444] FindClose (in: hFindFile=0xd707976910 | out: hFindFile=0xd707976910) returned 1 [0090.444] SetLastError (dwErrCode=0x0) [0090.444] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Source Engine\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\source engine\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.444] GetLastError () returned 0x5 [0090.444] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0090.444] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.444] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.444] SetLastError (dwErrCode=0x0) [0090.444] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.444] GetLastError () returned 0x5 [0090.444] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0090.444] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.444] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TEXTCONV\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd707976f10 [0090.445] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.445] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.445] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.445] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.445] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TEXTCONV\\RECOVR32.CNV", dwFileAttributes=0x80) returned 0 [0090.447] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TEXTCONV\\RECOVR32.CNV" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\textconv\\recovr32.cnv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.447] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.447] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.447] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.447] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TEXTCONV\\WPFT532.CNV", dwFileAttributes=0x80) returned 0 [0090.448] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TEXTCONV\\WPFT532.CNV" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\textconv\\wpft532.cnv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.448] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.448] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.448] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.448] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.448] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TEXTCONV\\WPFT632.CNV", dwFileAttributes=0x80) returned 0 [0090.448] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TEXTCONV\\WPFT632.CNV" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\textconv\\wpft632.cnv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.449] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.449] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.449] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0090.449] FindClose (in: hFindFile=0xd707976f10 | out: hFindFile=0xd707976f10) returned 1 [0090.449] SetLastError (dwErrCode=0x0) [0090.449] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TEXTCONV\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\textconv\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.449] GetLastError () returned 0x5 [0090.449] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0090.449] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.449] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.449] SetLastError (dwErrCode=0x0) [0090.449] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.450] GetLastError () returned 0x5 [0090.450] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0090.450] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.450] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd707976910 [0090.468] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.469] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.469] SetLastError (dwErrCode=0x0) [0090.469] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.469] GetLastError () returned 0x5 [0090.469] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.469] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.469] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AFTRNOON\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976cd0 [0090.470] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.470] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.470] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.470] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AFTRNOON\\AFTRNOON.ELM", dwFileAttributes=0x80) returned 0 [0090.471] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AFTRNOON\\AFTRNOON.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\aftrnoon\\aftrnoon.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.471] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.471] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.472] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.472] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.472] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AFTRNOON\\AFTRNOON.INF", dwFileAttributes=0x80) returned 0 [0090.473] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AFTRNOON\\AFTRNOON.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\aftrnoon\\aftrnoon.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.473] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.473] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.473] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.473] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.473] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AFTRNOON\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0090.474] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AFTRNOON\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\aftrnoon\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.474] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.474] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.474] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.474] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.474] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AFTRNOON\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0090.474] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AFTRNOON\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\aftrnoon\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.475] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.475] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.475] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.475] FindClose (in: hFindFile=0xd707976cd0 | out: hFindFile=0xd707976cd0) returned 1 [0090.475] SetLastError (dwErrCode=0x0) [0090.475] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AFTRNOON\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\aftrnoon\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.475] GetLastError () returned 0x5 [0090.475] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.475] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.475] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.475] SetLastError (dwErrCode=0x0) [0090.475] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.476] GetLastError () returned 0x5 [0090.476] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.476] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.476] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ARCTIC\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976cd0 [0090.476] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.476] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.476] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.476] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ARCTIC\\ARCTIC.ELM", dwFileAttributes=0x80) returned 0 [0090.477] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ARCTIC\\ARCTIC.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\arctic\\arctic.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.477] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.477] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.477] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.477] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.477] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ARCTIC\\ARCTIC.INF", dwFileAttributes=0x80) returned 0 [0090.478] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ARCTIC\\ARCTIC.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\arctic\\arctic.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.478] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.478] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.478] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.478] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.478] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ARCTIC\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0090.478] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ARCTIC\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\arctic\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.479] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.479] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.479] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.479] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.479] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ARCTIC\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0090.480] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ARCTIC\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\arctic\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.480] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.480] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.480] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.480] FindClose (in: hFindFile=0xd707976cd0 | out: hFindFile=0xd707976cd0) returned 1 [0090.480] SetLastError (dwErrCode=0x0) [0090.480] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ARCTIC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\arctic\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.481] GetLastError () returned 0x5 [0090.481] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.481] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.481] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.481] SetLastError (dwErrCode=0x0) [0090.481] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.481] GetLastError () returned 0x5 [0090.481] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.481] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.481] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AXIS\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976e50 [0090.482] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.482] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.482] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AXIS\\AXIS.ELM", dwFileAttributes=0x80) returned 0 [0090.482] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AXIS\\AXIS.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\axis\\axis.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.483] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.483] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.483] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.483] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.483] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AXIS\\AXIS.INF", dwFileAttributes=0x80) returned 0 [0090.483] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AXIS\\AXIS.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\axis\\axis.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.484] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.484] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.484] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.484] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.484] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AXIS\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0090.484] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AXIS\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\axis\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.484] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.485] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.485] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.485] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.485] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AXIS\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0090.485] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AXIS\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\axis\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.485] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.486] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.486] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.486] FindClose (in: hFindFile=0xd707976e50 | out: hFindFile=0xd707976e50) returned 1 [0090.486] SetLastError (dwErrCode=0x0) [0090.486] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AXIS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\axis\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.486] GetLastError () returned 0x5 [0090.486] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.486] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.486] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.486] SetLastError (dwErrCode=0x0) [0090.486] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.486] GetLastError () returned 0x5 [0090.486] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.486] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.486] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLENDS\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976cd0 [0090.487] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.487] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.487] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.487] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLENDS\\BLENDS.ELM", dwFileAttributes=0x80) returned 0 [0090.488] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLENDS\\BLENDS.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\blends\\blends.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.488] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.488] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.488] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.488] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.488] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLENDS\\BLENDS.INF", dwFileAttributes=0x80) returned 0 [0090.489] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLENDS\\BLENDS.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\blends\\blends.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.489] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.489] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.489] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.489] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.489] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLENDS\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0090.490] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLENDS\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\blends\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.490] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.490] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.490] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.490] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLENDS\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0090.490] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLENDS\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\blends\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.491] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.491] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.491] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.491] FindClose (in: hFindFile=0xd707976cd0 | out: hFindFile=0xd707976cd0) returned 1 [0090.491] SetLastError (dwErrCode=0x0) [0090.491] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLENDS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\blends\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.491] GetLastError () returned 0x5 [0090.491] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.491] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.491] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.491] SetLastError (dwErrCode=0x0) [0090.491] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.492] GetLastError () returned 0x5 [0090.492] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.492] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.492] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUECALM\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976e50 [0090.492] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.492] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.492] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.492] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUECALM\\BLUECALM.ELM", dwFileAttributes=0x80) returned 0 [0090.492] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUECALM\\BLUECALM.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\bluecalm\\bluecalm.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.493] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.493] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.493] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.493] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.493] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUECALM\\BLUECALM.INF", dwFileAttributes=0x80) returned 0 [0090.494] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUECALM\\BLUECALM.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\bluecalm\\bluecalm.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.494] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.494] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.494] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.494] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.494] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUECALM\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0090.495] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUECALM\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\bluecalm\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.495] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.495] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.495] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.495] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.496] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUECALM\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0090.496] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUECALM\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\bluecalm\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.497] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.497] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.497] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.497] FindClose (in: hFindFile=0xd707976e50 | out: hFindFile=0xd707976e50) returned 1 [0090.497] SetLastError (dwErrCode=0x0) [0090.497] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUECALM\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\bluecalm\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.497] GetLastError () returned 0x5 [0090.497] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.497] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.497] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.497] SetLastError (dwErrCode=0x0) [0090.497] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.497] GetLastError () returned 0x5 [0090.497] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.497] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.498] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUEPRNT\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976cd0 [0090.498] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.498] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.498] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUEPRNT\\BLUEPRNT.ELM", dwFileAttributes=0x80) returned 0 [0090.499] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUEPRNT\\BLUEPRNT.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\blueprnt\\blueprnt.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.499] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.499] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.499] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.499] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUEPRNT\\BLUEPRNT.INF", dwFileAttributes=0x80) returned 0 [0090.499] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUEPRNT\\BLUEPRNT.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\blueprnt\\blueprnt.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.500] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.500] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.500] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.500] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUEPRNT\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0090.500] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUEPRNT\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\blueprnt\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.501] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.501] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.501] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.501] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.501] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUEPRNT\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0090.501] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUEPRNT\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\blueprnt\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.501] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.501] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.502] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.502] FindClose (in: hFindFile=0xd707976cd0 | out: hFindFile=0xd707976cd0) returned 1 [0090.502] SetLastError (dwErrCode=0x0) [0090.502] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUEPRNT\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\blueprnt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.502] GetLastError () returned 0x5 [0090.502] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.502] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.502] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.502] SetLastError (dwErrCode=0x0) [0090.502] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.502] GetLastError () returned 0x5 [0090.502] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.502] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.502] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BOLDSTRI\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707977510 [0090.502] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.502] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.503] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.503] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BOLDSTRI\\BOLDSTRI.ELM", dwFileAttributes=0x80) returned 0 [0090.503] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BOLDSTRI\\BOLDSTRI.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\boldstri\\boldstri.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.503] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.503] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.503] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.503] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BOLDSTRI\\BOLDSTRI.INF", dwFileAttributes=0x80) returned 0 [0090.504] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BOLDSTRI\\BOLDSTRI.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\boldstri\\boldstri.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.504] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.504] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.504] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.504] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BOLDSTRI\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0090.505] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BOLDSTRI\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\boldstri\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.505] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.505] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.505] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.505] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.506] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BOLDSTRI\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0090.506] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BOLDSTRI\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\boldstri\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.507] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.507] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.507] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.507] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0090.507] SetLastError (dwErrCode=0x0) [0090.507] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BOLDSTRI\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\boldstri\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.508] GetLastError () returned 0x5 [0090.508] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.508] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.508] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.508] SetLastError (dwErrCode=0x0) [0090.508] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.508] GetLastError () returned 0x5 [0090.508] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.508] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.508] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BREEZE\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976cd0 [0090.509] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.509] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.509] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BREEZE\\BREEZE.ELM", dwFileAttributes=0x80) returned 0 [0090.509] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BREEZE\\BREEZE.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\breeze\\breeze.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.510] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.510] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.510] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.510] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BREEZE\\BREEZE.INF", dwFileAttributes=0x80) returned 0 [0090.510] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BREEZE\\BREEZE.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\breeze\\breeze.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.510] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.510] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.511] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.511] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.511] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BREEZE\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0090.511] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BREEZE\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\breeze\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.511] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.511] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.512] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.512] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BREEZE\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0090.512] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BREEZE\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\breeze\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.512] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.512] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.513] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.513] FindClose (in: hFindFile=0xd707976cd0 | out: hFindFile=0xd707976cd0) returned 1 [0090.513] SetLastError (dwErrCode=0x0) [0090.513] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BREEZE\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\breeze\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.513] GetLastError () returned 0x5 [0090.513] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.513] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.513] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.513] SetLastError (dwErrCode=0x0) [0090.513] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.513] GetLastError () returned 0x5 [0090.513] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.514] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.514] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CANYON\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976cd0 [0090.514] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.514] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.514] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CANYON\\CANYON.ELM", dwFileAttributes=0x80) returned 0 [0090.514] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CANYON\\CANYON.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\canyon\\canyon.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.515] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.515] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.515] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.515] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.515] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CANYON\\CANYON.INF", dwFileAttributes=0x80) returned 0 [0090.515] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CANYON\\CANYON.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\canyon\\canyon.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.516] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.516] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.516] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.516] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.516] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CANYON\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0090.516] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CANYON\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\canyon\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.517] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.517] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.517] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.517] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.517] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CANYON\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0090.517] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CANYON\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\canyon\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.518] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.518] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.518] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.518] FindClose (in: hFindFile=0xd707976cd0 | out: hFindFile=0xd707976cd0) returned 1 [0090.518] SetLastError (dwErrCode=0x0) [0090.518] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CANYON\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\canyon\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.518] GetLastError () returned 0x5 [0090.518] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.518] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.518] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.518] SetLastError (dwErrCode=0x0) [0090.518] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.518] GetLastError () returned 0x5 [0090.518] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.518] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.519] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CAPSULES\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707977510 [0090.519] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.519] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.519] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.519] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CAPSULES\\CAPSULES.ELM", dwFileAttributes=0x80) returned 0 [0090.519] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CAPSULES\\CAPSULES.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\capsules\\capsules.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.519] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.519] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.520] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.520] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CAPSULES\\CAPSULES.INF", dwFileAttributes=0x80) returned 0 [0090.520] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CAPSULES\\CAPSULES.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\capsules\\capsules.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.520] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.520] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.521] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.521] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CAPSULES\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0090.521] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CAPSULES\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\capsules\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.522] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.522] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.522] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.522] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.522] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CAPSULES\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0090.523] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CAPSULES\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\capsules\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.524] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.524] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.524] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.524] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0090.524] SetLastError (dwErrCode=0x0) [0090.524] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CAPSULES\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\capsules\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.524] GetLastError () returned 0x5 [0090.524] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.524] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.524] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.524] SetLastError (dwErrCode=0x0) [0090.524] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.524] GetLastError () returned 0x5 [0090.525] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.525] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.525] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CASCADE\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976cd0 [0090.525] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.525] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.525] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.525] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CASCADE\\CASCADE.ELM", dwFileAttributes=0x80) returned 0 [0090.525] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CASCADE\\CASCADE.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\cascade\\cascade.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.525] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.525] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.526] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.526] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CASCADE\\CASCADE.INF", dwFileAttributes=0x80) returned 0 [0090.526] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CASCADE\\CASCADE.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\cascade\\cascade.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.526] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.526] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.527] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.527] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CASCADE\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0090.527] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CASCADE\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\cascade\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.527] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.527] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.527] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.527] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CASCADE\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0090.528] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CASCADE\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\cascade\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.528] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.528] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.528] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.529] FindClose (in: hFindFile=0xd707976cd0 | out: hFindFile=0xd707976cd0) returned 1 [0090.529] SetLastError (dwErrCode=0x0) [0090.529] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CASCADE\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\cascade\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.529] GetLastError () returned 0x5 [0090.529] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.529] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.529] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.529] SetLastError (dwErrCode=0x0) [0090.529] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.529] GetLastError () returned 0x5 [0090.529] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.529] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.529] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\COMPASS\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707977510 [0090.529] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.529] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.529] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\COMPASS\\COMPASS.ELM", dwFileAttributes=0x80) returned 0 [0090.530] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\COMPASS\\COMPASS.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\compass\\compass.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.530] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.530] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.530] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.530] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\COMPASS\\COMPASS.INF", dwFileAttributes=0x80) returned 0 [0090.531] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\COMPASS\\COMPASS.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\compass\\compass.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.531] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.531] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.531] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.531] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.532] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\COMPASS\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0090.533] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\COMPASS\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\compass\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.533] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.533] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.533] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.533] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.534] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\COMPASS\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0090.534] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\COMPASS\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\compass\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.534] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.534] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.534] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.534] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0090.534] SetLastError (dwErrCode=0x0) [0090.534] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\COMPASS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\compass\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.535] GetLastError () returned 0x5 [0090.535] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.535] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.535] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.535] SetLastError (dwErrCode=0x0) [0090.535] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.535] GetLastError () returned 0x5 [0090.535] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.535] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.535] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CONCRETE\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707977510 [0090.536] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.536] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.536] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.536] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CONCRETE\\CONCRETE.ELM", dwFileAttributes=0x80) returned 0 [0090.536] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CONCRETE\\CONCRETE.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\concrete\\concrete.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.536] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.536] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.536] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.537] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.537] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CONCRETE\\CONCRETE.INF", dwFileAttributes=0x80) returned 0 [0090.537] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CONCRETE\\CONCRETE.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\concrete\\concrete.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.538] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.538] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.538] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.538] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.538] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CONCRETE\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0090.539] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CONCRETE\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\concrete\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.539] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.539] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.539] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.539] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.539] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CONCRETE\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0090.539] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CONCRETE\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\concrete\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.540] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.540] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.540] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.540] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0090.540] SetLastError (dwErrCode=0x0) [0090.540] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CONCRETE\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\concrete\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.540] GetLastError () returned 0x5 [0090.540] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.540] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.540] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.540] SetLastError (dwErrCode=0x0) [0090.540] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.541] GetLastError () returned 0x5 [0090.541] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.541] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.541] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\DEEPBLUE\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707977510 [0090.541] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.541] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.541] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.541] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\DEEPBLUE\\DEEPBLUE.ELM", dwFileAttributes=0x80) returned 0 [0090.541] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\DEEPBLUE\\DEEPBLUE.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\deepblue\\deepblue.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.542] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.542] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.542] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.542] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.542] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\DEEPBLUE\\DEEPBLUE.INF", dwFileAttributes=0x80) returned 0 [0090.542] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\DEEPBLUE\\DEEPBLUE.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\deepblue\\deepblue.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.542] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.542] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.543] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.543] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.543] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\DEEPBLUE\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0090.543] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\DEEPBLUE\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\deepblue\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.543] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.543] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.543] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.544] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.544] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\DEEPBLUE\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0090.544] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\DEEPBLUE\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\deepblue\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.544] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.544] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.544] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.544] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0090.545] SetLastError (dwErrCode=0x0) [0090.545] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\DEEPBLUE\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\deepblue\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.545] GetLastError () returned 0x5 [0090.545] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.545] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.545] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.545] SetLastError (dwErrCode=0x0) [0090.545] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.545] GetLastError () returned 0x5 [0090.545] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.545] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.545] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECHO\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976cd0 [0090.546] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.546] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.546] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.546] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECHO\\ECHO.ELM", dwFileAttributes=0x80) returned 0 [0090.546] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECHO\\ECHO.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\echo\\echo.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.547] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.547] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.547] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.547] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECHO\\ECHO.INF", dwFileAttributes=0x80) returned 0 [0090.547] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECHO\\ECHO.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\echo\\echo.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.548] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.548] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.548] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.548] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECHO\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0090.549] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECHO\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\echo\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.549] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.549] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.549] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.549] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECHO\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0090.551] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECHO\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\echo\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.551] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.551] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.551] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.551] FindClose (in: hFindFile=0xd707976cd0 | out: hFindFile=0xd707976cd0) returned 1 [0090.551] SetLastError (dwErrCode=0x0) [0090.551] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECHO\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\echo\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.551] GetLastError () returned 0x5 [0090.551] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.551] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.551] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.551] SetLastError (dwErrCode=0x0) [0090.551] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.552] GetLastError () returned 0x5 [0090.552] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.552] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.552] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECLIPSE\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707977510 [0090.552] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.552] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.552] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECLIPSE\\ECLIPSE.ELM", dwFileAttributes=0x80) returned 0 [0090.553] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECLIPSE\\ECLIPSE.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\eclipse\\eclipse.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.553] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.553] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.553] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.553] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECLIPSE\\ECLIPSE.INF", dwFileAttributes=0x80) returned 0 [0090.554] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECLIPSE\\ECLIPSE.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\eclipse\\eclipse.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.554] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.554] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.555] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.555] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECLIPSE\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0090.555] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECLIPSE\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\eclipse\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.555] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.555] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.555] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.555] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECLIPSE\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0090.556] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECLIPSE\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\eclipse\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.556] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.556] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.556] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.556] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0090.556] SetLastError (dwErrCode=0x0) [0090.556] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECLIPSE\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\eclipse\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.557] GetLastError () returned 0x5 [0090.557] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.557] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.557] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.557] SetLastError (dwErrCode=0x0) [0090.557] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.557] GetLastError () returned 0x5 [0090.557] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.557] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.557] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EDGE\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976cd0 [0090.557] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.557] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.557] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.558] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EDGE\\EDGE.ELM", dwFileAttributes=0x80) returned 0 [0090.558] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EDGE\\EDGE.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\edge\\edge.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.558] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.558] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.558] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.558] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.558] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EDGE\\EDGE.INF", dwFileAttributes=0x80) returned 0 [0090.559] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EDGE\\EDGE.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\edge\\edge.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.559] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.559] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.559] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.559] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EDGE\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0090.559] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EDGE\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\edge\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.560] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.560] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.560] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.560] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.560] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EDGE\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0090.560] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EDGE\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\edge\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.561] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.561] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.561] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.561] FindClose (in: hFindFile=0xd707976cd0 | out: hFindFile=0xd707976cd0) returned 1 [0090.561] SetLastError (dwErrCode=0x0) [0090.561] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EDGE\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\edge\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.561] GetLastError () returned 0x5 [0090.561] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.561] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.561] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.561] SetLastError (dwErrCode=0x0) [0090.561] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.561] GetLastError () returned 0x5 [0090.561] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.562] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.562] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EVRGREEN\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976cd0 [0090.562] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.562] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.562] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EVRGREEN\\EVRGREEN.ELM", dwFileAttributes=0x80) returned 0 [0090.563] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EVRGREEN\\EVRGREEN.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\evrgreen\\evrgreen.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.563] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.563] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.564] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.564] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.564] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EVRGREEN\\EVRGREEN.INF", dwFileAttributes=0x80) returned 0 [0090.564] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EVRGREEN\\EVRGREEN.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\evrgreen\\evrgreen.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.565] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.565] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.565] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.565] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.565] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EVRGREEN\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0090.565] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EVRGREEN\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\evrgreen\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.565] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.566] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.566] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.566] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.566] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EVRGREEN\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0090.566] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EVRGREEN\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\evrgreen\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.566] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.566] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.567] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.567] FindClose (in: hFindFile=0xd707976cd0 | out: hFindFile=0xd707976cd0) returned 1 [0090.567] SetLastError (dwErrCode=0x0) [0090.567] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EVRGREEN\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\evrgreen\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.567] GetLastError () returned 0x5 [0090.567] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.567] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.567] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.567] SetLastError (dwErrCode=0x0) [0090.567] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.567] GetLastError () returned 0x5 [0090.567] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.567] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.567] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EXPEDITN\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976cd0 [0090.567] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.568] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.568] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.568] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EXPEDITN\\EXPEDITN.ELM", dwFileAttributes=0x80) returned 0 [0090.568] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EXPEDITN\\EXPEDITN.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\expeditn\\expeditn.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.568] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.568] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.568] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.568] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.569] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EXPEDITN\\EXPEDITN.INF", dwFileAttributes=0x80) returned 0 [0090.569] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EXPEDITN\\EXPEDITN.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\expeditn\\expeditn.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.569] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.569] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.569] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.570] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.570] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EXPEDITN\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0090.570] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EXPEDITN\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\expeditn\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.571] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.571] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.571] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.571] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EXPEDITN\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0090.571] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EXPEDITN\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\expeditn\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.572] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.572] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.572] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.572] FindClose (in: hFindFile=0xd707976cd0 | out: hFindFile=0xd707976cd0) returned 1 [0090.572] SetLastError (dwErrCode=0x0) [0090.572] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EXPEDITN\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\expeditn\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.572] GetLastError () returned 0x5 [0090.572] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.572] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.572] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.572] SetLastError (dwErrCode=0x0) [0090.572] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.573] GetLastError () returned 0x5 [0090.573] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.573] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.573] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ICE\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976f10 [0090.573] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.573] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.573] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ICE\\ICE.ELM", dwFileAttributes=0x80) returned 0 [0090.573] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ICE\\ICE.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ice\\ice.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.574] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.574] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.574] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.574] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ICE\\ICE.INF", dwFileAttributes=0x80) returned 0 [0090.574] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ICE\\ICE.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ice\\ice.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.574] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.574] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.575] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.575] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ICE\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0090.576] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ICE\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ice\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.576] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.576] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.576] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.576] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.576] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ICE\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0090.577] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ICE\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ice\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.577] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.577] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.578] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.578] FindClose (in: hFindFile=0xd707976f10 | out: hFindFile=0xd707976f10) returned 1 [0090.580] SetLastError (dwErrCode=0x0) [0090.580] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ICE\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ice\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.581] GetLastError () returned 0x5 [0090.581] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.581] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.581] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.581] SetLastError (dwErrCode=0x0) [0090.581] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.581] GetLastError () returned 0x5 [0090.581] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.581] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.581] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\INDUST\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976cd0 [0090.582] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.582] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.582] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.582] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\INDUST\\INDUST.ELM", dwFileAttributes=0x80) returned 0 [0090.582] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\INDUST\\INDUST.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\indust\\indust.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.583] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.583] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.583] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.583] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\INDUST\\INDUST.INF", dwFileAttributes=0x80) returned 0 [0090.583] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\INDUST\\INDUST.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\indust\\indust.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.583] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.584] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.584] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.584] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\INDUST\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0090.584] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\INDUST\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\indust\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.584] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.584] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.585] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.585] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.585] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\INDUST\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0090.586] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\INDUST\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\indust\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.586] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.586] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.586] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.586] FindClose (in: hFindFile=0xd707976cd0 | out: hFindFile=0xd707976cd0) returned 1 [0090.586] SetLastError (dwErrCode=0x0) [0090.586] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\INDUST\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\indust\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.587] GetLastError () returned 0x5 [0090.587] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.587] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.587] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.587] SetLastError (dwErrCode=0x0) [0090.587] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.587] GetLastError () returned 0x5 [0090.587] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.587] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.587] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\IRIS\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707977510 [0090.587] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.587] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.587] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\IRIS\\IRIS.ELM", dwFileAttributes=0x80) returned 0 [0090.588] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\IRIS\\IRIS.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\iris\\iris.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.588] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.588] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.588] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.588] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.588] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\IRIS\\IRIS.INF", dwFileAttributes=0x80) returned 0 [0090.588] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\IRIS\\IRIS.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\iris\\iris.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.589] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.589] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.589] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.589] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\IRIS\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0090.589] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\IRIS\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\iris\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.590] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.590] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.590] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.590] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\IRIS\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0090.590] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\IRIS\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\iris\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.590] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.590] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.591] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.591] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0090.591] SetLastError (dwErrCode=0x0) [0090.591] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\IRIS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\iris\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.591] GetLastError () returned 0x5 [0090.591] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.591] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.591] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.591] SetLastError (dwErrCode=0x0) [0090.591] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.591] GetLastError () returned 0x5 [0090.591] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.591] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.591] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\JOURNAL\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976cd0 [0090.593] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.593] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.593] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\JOURNAL\\JOURNAL.ELM", dwFileAttributes=0x80) returned 0 [0090.594] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\JOURNAL\\JOURNAL.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\journal\\journal.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.594] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.594] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.594] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.594] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.594] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\JOURNAL\\JOURNAL.INF", dwFileAttributes=0x80) returned 0 [0090.595] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\JOURNAL\\JOURNAL.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\journal\\journal.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.595] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.595] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.595] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.595] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\JOURNAL\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0090.596] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\JOURNAL\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\journal\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.596] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.596] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.596] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.596] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\JOURNAL\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0090.597] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\JOURNAL\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\journal\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.597] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.597] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.597] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.597] FindClose (in: hFindFile=0xd707976cd0 | out: hFindFile=0xd707976cd0) returned 1 [0090.597] SetLastError (dwErrCode=0x0) [0090.597] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\JOURNAL\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\journal\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.597] GetLastError () returned 0x5 [0090.597] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.597] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.597] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.598] SetLastError (dwErrCode=0x0) [0090.598] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.598] GetLastError () returned 0x5 [0090.598] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.598] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.598] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LAYERS\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976d30 [0090.598] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.598] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.598] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.598] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LAYERS\\LAYERS.ELM", dwFileAttributes=0x80) returned 0 [0090.598] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LAYERS\\LAYERS.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\layers\\layers.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.599] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.599] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.599] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.599] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.599] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LAYERS\\LAYERS.INF", dwFileAttributes=0x80) returned 0 [0090.599] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LAYERS\\LAYERS.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\layers\\layers.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.599] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.600] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.600] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.600] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.600] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LAYERS\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0090.600] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LAYERS\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\layers\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.600] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.600] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.601] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.601] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.601] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LAYERS\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0090.601] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LAYERS\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\layers\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.602] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.602] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.602] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.602] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0090.602] SetLastError (dwErrCode=0x0) [0090.602] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LAYERS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\layers\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.602] GetLastError () returned 0x5 [0090.602] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.602] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.602] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.602] SetLastError (dwErrCode=0x0) [0090.602] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.602] GetLastError () returned 0x5 [0090.602] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.603] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.603] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LEVEL\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707977510 [0090.603] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.603] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.603] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.603] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LEVEL\\LEVEL.ELM", dwFileAttributes=0x80) returned 0 [0090.603] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LEVEL\\LEVEL.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\level\\level.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.603] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.603] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.604] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.604] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.604] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LEVEL\\LEVEL.INF", dwFileAttributes=0x80) returned 0 [0090.605] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LEVEL\\LEVEL.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\level\\level.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.605] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.605] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.605] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.605] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.605] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LEVEL\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0090.606] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LEVEL\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\level\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.606] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.606] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.606] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.606] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LEVEL\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0090.607] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LEVEL\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\level\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.607] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.608] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.608] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.608] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0090.608] SetLastError (dwErrCode=0x0) [0090.608] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LEVEL\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\level\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.608] GetLastError () returned 0x5 [0090.608] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.608] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.608] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.608] SetLastError (dwErrCode=0x0) [0090.608] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.608] GetLastError () returned 0x5 [0090.608] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.608] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.608] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\NETWORK\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976cd0 [0090.609] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.609] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.609] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\NETWORK\\NETWORK.ELM", dwFileAttributes=0x80) returned 0 [0090.609] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\NETWORK\\NETWORK.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\network\\network.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.609] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.609] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.610] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.610] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\NETWORK\\NETWORK.INF", dwFileAttributes=0x80) returned 0 [0090.610] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\NETWORK\\NETWORK.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\network\\network.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.611] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.611] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.611] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.611] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.611] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\NETWORK\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0090.611] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\NETWORK\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\network\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.612] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.612] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.612] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.612] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\NETWORK\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0090.612] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\NETWORK\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\network\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.612] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.612] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.613] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.613] FindClose (in: hFindFile=0xd707976cd0 | out: hFindFile=0xd707976cd0) returned 1 [0090.613] SetLastError (dwErrCode=0x0) [0090.613] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\NETWORK\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\network\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.613] GetLastError () returned 0x5 [0090.613] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.613] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.613] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.613] SetLastError (dwErrCode=0x0) [0090.613] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.613] GetLastError () returned 0x5 [0090.613] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.613] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.613] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PAPYRUS\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976cd0 [0090.614] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.614] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.614] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.614] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PAPYRUS\\PAPYRUS.ELM", dwFileAttributes=0x80) returned 0 [0090.614] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PAPYRUS\\PAPYRUS.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\papyrus\\papyrus.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.614] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.614] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.614] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.614] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.615] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PAPYRUS\\PAPYRUS.INF", dwFileAttributes=0x80) returned 0 [0090.615] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PAPYRUS\\PAPYRUS.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\papyrus\\papyrus.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.615] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.615] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.615] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.615] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PAPYRUS\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0090.616] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PAPYRUS\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\papyrus\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.616] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.616] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.616] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.616] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.617] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PAPYRUS\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0090.617] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PAPYRUS\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\papyrus\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.617] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.617] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.617] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.617] FindClose (in: hFindFile=0xd707976cd0 | out: hFindFile=0xd707976cd0) returned 1 [0090.617] SetLastError (dwErrCode=0x0) [0090.617] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PAPYRUS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\papyrus\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.618] GetLastError () returned 0x5 [0090.618] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.618] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.618] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.618] SetLastError (dwErrCode=0x0) [0090.618] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.618] GetLastError () returned 0x5 [0090.618] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.618] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.618] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PIXEL\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976cd0 [0090.619] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.619] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.619] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PIXEL\\PIXEL.ELM", dwFileAttributes=0x80) returned 0 [0090.620] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PIXEL\\PIXEL.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\pixel\\pixel.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.620] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.620] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.621] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.621] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.621] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PIXEL\\PIXEL.INF", dwFileAttributes=0x80) returned 0 [0090.621] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PIXEL\\PIXEL.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\pixel\\pixel.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.622] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.622] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.622] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.622] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PIXEL\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0090.623] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PIXEL\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\pixel\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.623] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.623] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.623] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.623] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PIXEL\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0090.625] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PIXEL\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\pixel\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.625] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.625] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.626] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.626] FindClose (in: hFindFile=0xd707976cd0 | out: hFindFile=0xd707976cd0) returned 1 [0090.626] SetLastError (dwErrCode=0x0) [0090.626] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PIXEL\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\pixel\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.626] GetLastError () returned 0x5 [0090.626] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.626] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.626] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.626] SetLastError (dwErrCode=0x0) [0090.626] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.626] GetLastError () returned 0x5 [0090.626] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.626] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.626] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PROFILE\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976cd0 [0090.627] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.627] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.627] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PROFILE\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0090.633] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PROFILE\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\profile\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.634] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.634] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.634] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.634] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.634] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PROFILE\\PROFILE.ELM", dwFileAttributes=0x80) returned 0 [0090.635] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PROFILE\\PROFILE.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\profile\\profile.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.635] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.635] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.635] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.635] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PROFILE\\PROFILE.INF", dwFileAttributes=0x80) returned 0 [0090.636] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PROFILE\\PROFILE.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\profile\\profile.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.636] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.636] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.636] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.636] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.637] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PROFILE\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0090.637] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PROFILE\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\profile\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.637] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.638] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.638] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.638] FindClose (in: hFindFile=0xd707976cd0 | out: hFindFile=0xd707976cd0) returned 1 [0090.638] SetLastError (dwErrCode=0x0) [0090.638] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PROFILE\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\profile\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.638] GetLastError () returned 0x5 [0090.638] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.638] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.638] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.638] SetLastError (dwErrCode=0x0) [0090.638] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.638] GetLastError () returned 0x5 [0090.638] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.638] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.639] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\QUAD\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976cd0 [0090.639] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.639] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.639] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\QUAD\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0090.640] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\QUAD\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\quad\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.640] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.640] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.640] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.640] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.640] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\QUAD\\QUAD.ELM", dwFileAttributes=0x80) returned 0 [0090.641] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\QUAD\\QUAD.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\quad\\quad.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.641] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.641] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.641] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.641] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\QUAD\\QUAD.INF", dwFileAttributes=0x80) returned 0 [0090.642] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\QUAD\\QUAD.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\quad\\quad.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.643] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.643] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.643] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.643] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.643] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\QUAD\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0090.643] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\QUAD\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\quad\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.643] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.643] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.644] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.644] FindClose (in: hFindFile=0xd707976cd0 | out: hFindFile=0xd707976cd0) returned 1 [0090.644] SetLastError (dwErrCode=0x0) [0090.644] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\QUAD\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\quad\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.644] GetLastError () returned 0x5 [0090.644] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.644] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.644] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.644] SetLastError (dwErrCode=0x0) [0090.644] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.644] GetLastError () returned 0x5 [0090.644] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.644] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.644] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RADIAL\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976cd0 [0090.645] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.645] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.645] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.645] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RADIAL\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0090.645] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RADIAL\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\radial\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.645] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.645] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.646] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.646] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RADIAL\\RADIAL.ELM", dwFileAttributes=0x80) returned 0 [0090.646] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RADIAL\\RADIAL.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\radial\\radial.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.647] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.647] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.647] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.647] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RADIAL\\RADIAL.INF", dwFileAttributes=0x80) returned 0 [0090.648] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RADIAL\\RADIAL.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\radial\\radial.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.648] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.648] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.649] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.649] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.649] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RADIAL\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0090.649] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RADIAL\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\radial\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.649] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.649] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.650] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.650] FindClose (in: hFindFile=0xd707976cd0 | out: hFindFile=0xd707976cd0) returned 1 [0090.650] SetLastError (dwErrCode=0x0) [0090.650] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RADIAL\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\radial\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.650] GetLastError () returned 0x5 [0090.650] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.650] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.650] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.650] SetLastError (dwErrCode=0x0) [0090.650] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.650] GetLastError () returned 0x5 [0090.650] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.650] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.650] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\REFINED\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976cd0 [0090.650] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.650] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.651] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\REFINED\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0090.651] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\REFINED\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\refined\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.651] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.651] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.651] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.651] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.652] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\REFINED\\REFINED.ELM", dwFileAttributes=0x80) returned 0 [0090.652] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\REFINED\\REFINED.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\refined\\refined.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.652] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.652] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.652] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.652] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.653] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\REFINED\\REFINED.INF", dwFileAttributes=0x80) returned 0 [0090.653] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\REFINED\\REFINED.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\refined\\refined.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.653] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.653] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.653] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.653] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.653] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\REFINED\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0090.655] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\REFINED\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\refined\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.655] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.655] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.655] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.655] FindClose (in: hFindFile=0xd707976cd0 | out: hFindFile=0xd707976cd0) returned 1 [0090.655] SetLastError (dwErrCode=0x0) [0090.655] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\REFINED\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\refined\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.656] GetLastError () returned 0x5 [0090.656] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.656] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.656] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.656] SetLastError (dwErrCode=0x0) [0090.656] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.656] GetLastError () returned 0x5 [0090.656] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.656] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.656] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RICEPAPR\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707977510 [0090.657] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.657] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.657] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.657] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RICEPAPR\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0090.658] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RICEPAPR\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ricepapr\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.658] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.658] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.658] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.658] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RICEPAPR\\RICEPAPR.ELM", dwFileAttributes=0x80) returned 0 [0090.659] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RICEPAPR\\RICEPAPR.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ricepapr\\ricepapr.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.659] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.659] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.659] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.659] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RICEPAPR\\RICEPAPR.INF", dwFileAttributes=0x80) returned 0 [0090.660] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RICEPAPR\\RICEPAPR.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ricepapr\\ricepapr.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.660] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.660] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.660] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.660] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RICEPAPR\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0090.661] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RICEPAPR\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ricepapr\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.661] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.661] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.661] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.661] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0090.661] SetLastError (dwErrCode=0x0) [0090.661] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RICEPAPR\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ricepapr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.662] GetLastError () returned 0x5 [0090.662] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.662] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.662] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.662] SetLastError (dwErrCode=0x0) [0090.662] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.662] GetLastError () returned 0x5 [0090.662] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.662] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.662] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RIPPLE\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976cd0 [0090.662] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.662] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.662] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.663] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RIPPLE\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0090.663] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RIPPLE\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ripple\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.663] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.663] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.664] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.664] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RIPPLE\\RIPPLE.ELM", dwFileAttributes=0x80) returned 0 [0090.664] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RIPPLE\\RIPPLE.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ripple\\ripple.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.664] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.664] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.664] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.664] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.665] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RIPPLE\\RIPPLE.INF", dwFileAttributes=0x80) returned 0 [0090.665] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RIPPLE\\RIPPLE.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ripple\\ripple.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.665] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.665] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.665] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.665] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RIPPLE\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0090.666] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RIPPLE\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ripple\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.666] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.666] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.666] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.666] FindClose (in: hFindFile=0xd707976cd0 | out: hFindFile=0xd707976cd0) returned 1 [0090.666] SetLastError (dwErrCode=0x0) [0090.666] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RIPPLE\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ripple\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.667] GetLastError () returned 0x5 [0090.667] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.667] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.667] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.667] SetLastError (dwErrCode=0x0) [0090.667] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.667] GetLastError () returned 0x5 [0090.667] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.667] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.667] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RMNSQUE\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707977510 [0090.667] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.667] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.667] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RMNSQUE\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0090.668] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RMNSQUE\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\rmnsque\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.668] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.668] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.668] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.668] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RMNSQUE\\RMNSQUE.ELM", dwFileAttributes=0x80) returned 0 [0090.669] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RMNSQUE\\RMNSQUE.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\rmnsque\\rmnsque.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.669] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.669] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.670] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.670] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.670] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RMNSQUE\\RMNSQUE.INF", dwFileAttributes=0x80) returned 0 [0090.671] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RMNSQUE\\RMNSQUE.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\rmnsque\\rmnsque.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.671] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.671] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.671] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.671] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.671] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RMNSQUE\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0090.671] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RMNSQUE\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\rmnsque\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.672] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.672] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.672] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.672] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0090.672] SetLastError (dwErrCode=0x0) [0090.672] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RMNSQUE\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\rmnsque\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.672] GetLastError () returned 0x5 [0090.672] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.672] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.672] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.672] SetLastError (dwErrCode=0x0) [0090.672] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.673] GetLastError () returned 0x5 [0090.673] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.673] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.673] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SATIN\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707977510 [0090.673] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.673] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.673] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SATIN\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0090.674] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SATIN\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\satin\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.674] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.674] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.674] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.674] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SATIN\\SATIN.ELM", dwFileAttributes=0x80) returned 0 [0090.675] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SATIN\\SATIN.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\satin\\satin.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.675] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.675] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.675] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.675] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SATIN\\SATIN.INF", dwFileAttributes=0x80) returned 0 [0090.676] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SATIN\\SATIN.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\satin\\satin.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.676] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.676] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.676] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.676] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.676] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SATIN\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0090.677] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SATIN\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\satin\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.677] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.677] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.677] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.677] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0090.677] SetLastError (dwErrCode=0x0) [0090.677] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SATIN\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\satin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.677] GetLastError () returned 0x5 [0090.677] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.677] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.677] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.678] SetLastError (dwErrCode=0x0) [0090.678] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.678] GetLastError () returned 0x5 [0090.678] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.678] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.678] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SKY\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976cd0 [0090.678] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.678] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.678] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SKY\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0090.678] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SKY\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\sky\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.679] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.679] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.679] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.679] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SKY\\SKY.ELM", dwFileAttributes=0x80) returned 0 [0090.680] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SKY\\SKY.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\sky\\sky.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.680] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.680] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.680] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.680] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.680] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SKY\\SKY.INF", dwFileAttributes=0x80) returned 0 [0090.680] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SKY\\SKY.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\sky\\sky.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.681] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.681] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.681] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.681] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SKY\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0090.682] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SKY\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\sky\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.682] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.682] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.682] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.682] FindClose (in: hFindFile=0xd707976cd0 | out: hFindFile=0xd707976cd0) returned 1 [0090.682] SetLastError (dwErrCode=0x0) [0090.682] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SKY\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\sky\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.683] GetLastError () returned 0x5 [0090.683] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.683] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.683] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.683] SetLastError (dwErrCode=0x0) [0090.683] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.683] GetLastError () returned 0x5 [0090.683] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.683] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.683] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SLATE\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976cd0 [0090.684] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.684] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.684] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.684] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SLATE\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0090.685] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SLATE\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\slate\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.685] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.685] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.685] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.685] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.685] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SLATE\\SLATE.ELM", dwFileAttributes=0x80) returned 0 [0090.686] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SLATE\\SLATE.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\slate\\slate.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.686] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.686] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.686] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.686] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.686] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SLATE\\SLATE.INF", dwFileAttributes=0x80) returned 0 [0090.687] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SLATE\\SLATE.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\slate\\slate.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.687] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.687] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.687] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.687] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SLATE\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0090.687] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SLATE\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\slate\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.688] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.688] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.688] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.688] FindClose (in: hFindFile=0xd707976cd0 | out: hFindFile=0xd707976cd0) returned 1 [0090.688] SetLastError (dwErrCode=0x0) [0090.688] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SLATE\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\slate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.688] GetLastError () returned 0x5 [0090.688] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.688] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.688] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.688] SetLastError (dwErrCode=0x0) [0090.688] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.689] GetLastError () returned 0x5 [0090.689] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.689] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.689] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SONORA\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976cd0 [0090.689] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.689] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.689] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SONORA\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0090.689] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SONORA\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\sonora\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.690] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.690] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.690] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.690] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SONORA\\SONORA.ELM", dwFileAttributes=0x80) returned 0 [0090.690] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SONORA\\SONORA.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\sonora\\sonora.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.690] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.691] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.691] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.691] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SONORA\\SONORA.INF", dwFileAttributes=0x80) returned 0 [0090.691] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SONORA\\SONORA.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\sonora\\sonora.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.691] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.691] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.692] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.692] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SONORA\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0090.692] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SONORA\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\sonora\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.692] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.692] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.693] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.693] FindClose (in: hFindFile=0xd707976cd0 | out: hFindFile=0xd707976cd0) returned 1 [0090.693] SetLastError (dwErrCode=0x0) [0090.693] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SONORA\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\sonora\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.693] GetLastError () returned 0x5 [0090.693] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.693] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.693] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.693] SetLastError (dwErrCode=0x0) [0090.693] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.693] GetLastError () returned 0x5 [0090.693] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.693] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.693] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SPRING\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707977510 [0090.693] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.693] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.693] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SPRING\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0090.694] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SPRING\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\spring\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.694] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.694] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.694] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.695] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SPRING\\SPRING.ELM", dwFileAttributes=0x80) returned 0 [0090.696] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SPRING\\SPRING.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\spring\\spring.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.696] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.696] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.696] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.696] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.696] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SPRING\\SPRING.INF", dwFileAttributes=0x80) returned 0 [0090.697] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SPRING\\SPRING.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\spring\\spring.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.697] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.697] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.697] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.697] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.698] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SPRING\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0090.698] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SPRING\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\spring\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.698] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.698] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.698] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.698] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0090.698] SetLastError (dwErrCode=0x0) [0090.698] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SPRING\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\spring\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.699] GetLastError () returned 0x5 [0090.699] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.699] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.699] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.699] SetLastError (dwErrCode=0x0) [0090.699] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.699] GetLastError () returned 0x5 [0090.699] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.699] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.699] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STRTEDGE\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976cd0 [0090.699] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.699] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.699] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STRTEDGE\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0090.700] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STRTEDGE\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\strtedge\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.700] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.700] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.701] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.701] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STRTEDGE\\STRTEDGE.ELM", dwFileAttributes=0x80) returned 0 [0090.701] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STRTEDGE\\STRTEDGE.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\strtedge\\strtedge.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.701] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.701] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.701] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.701] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STRTEDGE\\STRTEDGE.INF", dwFileAttributes=0x80) returned 0 [0090.702] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STRTEDGE\\STRTEDGE.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\strtedge\\strtedge.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.702] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.702] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.702] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.702] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.703] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STRTEDGE\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0090.703] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STRTEDGE\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\strtedge\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.703] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.703] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.703] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.703] FindClose (in: hFindFile=0xd707976cd0 | out: hFindFile=0xd707976cd0) returned 1 [0090.703] SetLastError (dwErrCode=0x0) [0090.703] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STRTEDGE\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\strtedge\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.704] GetLastError () returned 0x5 [0090.704] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.704] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.704] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.704] SetLastError (dwErrCode=0x0) [0090.704] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.704] GetLastError () returned 0x5 [0090.704] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.704] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.704] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STUDIO\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976cd0 [0090.704] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.704] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.704] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STUDIO\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0090.705] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STUDIO\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\studio\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.705] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.705] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.705] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.705] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.705] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STUDIO\\STUDIO.ELM", dwFileAttributes=0x80) returned 0 [0090.705] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STUDIO\\STUDIO.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\studio\\studio.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.706] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.706] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.706] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.706] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.706] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STUDIO\\STUDIO.INF", dwFileAttributes=0x80) returned 0 [0090.706] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STUDIO\\STUDIO.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\studio\\studio.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.707] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.707] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.707] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.707] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.707] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STUDIO\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0090.708] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STUDIO\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\studio\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.708] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.708] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.708] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.708] FindClose (in: hFindFile=0xd707976cd0 | out: hFindFile=0xd707976cd0) returned 1 [0090.708] SetLastError (dwErrCode=0x0) [0090.708] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STUDIO\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\studio\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.708] GetLastError () returned 0x5 [0090.708] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.709] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.709] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.709] SetLastError (dwErrCode=0x0) [0090.709] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.709] GetLastError () returned 0x5 [0090.709] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.709] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.709] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SUMIPNTG\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707977510 [0090.709] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.710] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.710] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.710] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SUMIPNTG\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0090.711] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SUMIPNTG\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\sumipntg\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.711] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.711] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.711] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.711] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SUMIPNTG\\SUMIPNTG.ELM", dwFileAttributes=0x80) returned 0 [0090.712] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SUMIPNTG\\SUMIPNTG.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\sumipntg\\sumipntg.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.712] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.712] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.712] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.712] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.712] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SUMIPNTG\\SUMIPNTG.INF", dwFileAttributes=0x80) returned 0 [0090.713] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SUMIPNTG\\SUMIPNTG.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\sumipntg\\sumipntg.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.713] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.713] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.713] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.713] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SUMIPNTG\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0090.714] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SUMIPNTG\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\sumipntg\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.714] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.714] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.714] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.714] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0090.714] SetLastError (dwErrCode=0x0) [0090.714] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SUMIPNTG\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\sumipntg\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.714] GetLastError () returned 0x5 [0090.714] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.714] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.714] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.714] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\THEMES.INF", dwFileAttributes=0x80) returned 0 [0090.715] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\THEMES.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\themes.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.715] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.715] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.715] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.715] SetLastError (dwErrCode=0x0) [0090.715] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.716] GetLastError () returned 0x5 [0090.716] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.716] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.716] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATER\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976cd0 [0090.716] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.716] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.716] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.716] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATER\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0090.716] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATER\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\water\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.717] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.717] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.717] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.717] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.717] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATER\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0090.717] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATER\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\water\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.717] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.717] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.718] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.718] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATER\\WATER.ELM", dwFileAttributes=0x80) returned 0 [0090.718] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATER\\WATER.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\water\\water.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.718] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.718] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.719] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.719] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATER\\WATER.INF", dwFileAttributes=0x80) returned 0 [0090.719] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATER\\WATER.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\water\\water.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.719] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.719] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.720] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.720] FindClose (in: hFindFile=0xd707976cd0 | out: hFindFile=0xd707976cd0) returned 1 [0090.720] SetLastError (dwErrCode=0x0) [0090.720] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATER\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\water\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.720] GetLastError () returned 0x5 [0090.720] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.720] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.720] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.720] SetLastError (dwErrCode=0x0) [0090.720] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.720] GetLastError () returned 0x5 [0090.720] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.720] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.720] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATERMAR\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976cd0 [0090.722] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.722] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.722] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.722] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATERMAR\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0090.722] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATERMAR\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\watermar\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.722] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.723] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.723] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.723] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATERMAR\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0090.723] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATERMAR\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\watermar\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.723] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.723] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.724] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.724] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.724] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATERMAR\\WATERMAR.ELM", dwFileAttributes=0x80) returned 0 [0090.724] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATERMAR\\WATERMAR.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\watermar\\watermar.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.724] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.724] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.725] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.725] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATERMAR\\WATERMAR.INF", dwFileAttributes=0x80) returned 0 [0090.725] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATERMAR\\WATERMAR.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\watermar\\watermar.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.725] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.725] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.726] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.726] FindClose (in: hFindFile=0xd707976cd0 | out: hFindFile=0xd707976cd0) returned 1 [0090.726] SetLastError (dwErrCode=0x0) [0090.726] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATERMAR\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\watermar\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.726] GetLastError () returned 0x5 [0090.726] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.726] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.726] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0090.726] FindClose (in: hFindFile=0xd707976910 | out: hFindFile=0xd707976910) returned 1 [0090.726] SetLastError (dwErrCode=0x0) [0090.726] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.727] GetLastError () returned 0x5 [0090.727] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0090.727] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.727] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.727] SetLastError (dwErrCode=0x0) [0090.727] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.727] GetLastError () returned 0x5 [0090.727] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0090.727] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.727] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd707976cd0 [0090.729] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.729] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.729] SetLastError (dwErrCode=0x0) [0090.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\translat\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.730] GetLastError () returned 0x5 [0090.730] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.730] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.730] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ENES\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976d30 [0090.730] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.730] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.730] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", dwFileAttributes=0x80) returned 0 [0090.731] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\translat\\enes\\msb1enes.its"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.731] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.731] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.731] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.731] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0090.731] SetLastError (dwErrCode=0x0) [0090.731] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ENES\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\translat\\enes\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.732] GetLastError () returned 0x5 [0090.732] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.732] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.732] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.732] SetLastError (dwErrCode=0x0) [0090.732] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\translat\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.732] GetLastError () returned 0x5 [0090.732] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.732] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.732] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ENFR\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707977510 [0090.732] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.732] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.732] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", dwFileAttributes=0x80) returned 0 [0090.733] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\translat\\enfr\\msb1enfr.its"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.733] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.733] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.733] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.733] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0090.733] SetLastError (dwErrCode=0x0) [0090.733] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ENFR\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\translat\\enfr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.733] GetLastError () returned 0x5 [0090.734] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.734] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.734] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.734] SetLastError (dwErrCode=0x0) [0090.734] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\translat\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.734] GetLastError () returned 0x5 [0090.734] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.734] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.734] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ESEN\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707977510 [0090.735] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.735] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.735] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.735] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS", dwFileAttributes=0x80) returned 0 [0090.736] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\translat\\esen\\msb1esen.its"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.736] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.736] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.736] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.736] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.736] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX", dwFileAttributes=0x80) returned 0 [0090.737] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\translat\\esen\\wt61es.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.737] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.737] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.737] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.737] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0090.737] SetLastError (dwErrCode=0x0) [0090.737] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ESEN\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\translat\\esen\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.737] GetLastError () returned 0x5 [0090.737] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.737] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.737] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.737] SetLastError (dwErrCode=0x0) [0090.738] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\translat\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.738] GetLastError () returned 0x5 [0090.738] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.738] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.738] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\FREN\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976910 [0090.738] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.738] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.738] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.738] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS", dwFileAttributes=0x80) returned 0 [0090.739] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\translat\\fren\\msb1fren.its"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.740] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.740] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.740] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.740] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX", dwFileAttributes=0x80) returned 0 [0090.740] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\translat\\fren\\wt61fr.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.740] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.740] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.741] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.741] FindClose (in: hFindFile=0xd707976910 | out: hFindFile=0xd707976910) returned 1 [0090.741] SetLastError (dwErrCode=0x0) [0090.741] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\FREN\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\translat\\fren\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.741] GetLastError () returned 0x5 [0090.741] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.741] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.741] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.742] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX", dwFileAttributes=0x80) returned 0 [0090.742] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\translat\\msb1cach.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.742] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.742] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.742] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.742] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.742] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0090.742] FindClose (in: hFindFile=0xd707976cd0 | out: hFindFile=0xd707976cd0) returned 1 [0090.743] SetLastError (dwErrCode=0x0) [0090.743] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\translat\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.743] GetLastError () returned 0x5 [0090.743] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0090.743] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.743] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.743] SetLastError (dwErrCode=0x0) [0090.743] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.743] GetLastError () returned 0x5 [0090.743] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0090.743] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.743] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd707976910 [0090.743] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.743] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.743] SetLastError (dwErrCode=0x0) [0090.743] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\vba\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.744] GetLastError () returned 0x5 [0090.744] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.744] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.744] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\VBA7.1\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976cd0 [0090.744] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.744] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.744] SetLastError (dwErrCode=0x0) [0090.744] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\VBA7.1\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\vba\\vba7.1\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.744] GetLastError () returned 0x5 [0090.744] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0) returned 0 [0090.744] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.744] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\VBA7.1\\1033\\*.*", lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 0xd707976d30 [0090.744] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0090.744] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0090.744] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0090.744] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 0 [0090.744] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0090.745] SetLastError (dwErrCode=0x0) [0090.745] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\VBA7.1\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\vba\\vba7.1\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.745] GetLastError () returned 0x5 [0090.745] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0) returned 0 [0090.745] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.745] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.745] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.745] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.745] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.745] FindClose (in: hFindFile=0xd707976cd0 | out: hFindFile=0xd707976cd0) returned 1 [0090.745] SetLastError (dwErrCode=0x0) [0090.745] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\VBA7.1\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\vba\\vba7.1\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.745] GetLastError () returned 0x5 [0090.745] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.745] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.745] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0090.745] FindClose (in: hFindFile=0xd707976910 | out: hFindFile=0xd707976910) returned 1 [0090.746] SetLastError (dwErrCode=0x0) [0090.746] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\vba\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.746] GetLastError () returned 0x5 [0090.746] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0090.746] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.746] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.746] SetLastError (dwErrCode=0x0) [0090.746] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.746] GetLastError () returned 0x5 [0090.746] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0090.746] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.746] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd707976cd0 [0090.747] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.747] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.747] SetLastError (dwErrCode=0x0) [0090.747] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\visio shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.747] GetLastError () returned 0x5 [0090.747] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.747] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.747] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\Fonts\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707977510 [0090.751] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.751] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.751] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\Fonts\\BIGFONT.SHX", dwFileAttributes=0x80) returned 0 [0090.752] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\Fonts\\BIGFONT.SHX" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\visio shared\\fonts\\bigfont.shx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.752] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.752] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.752] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.752] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\Fonts\\CHINESET.SHX", dwFileAttributes=0x80) returned 0 [0090.753] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\Fonts\\CHINESET.SHX" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\visio shared\\fonts\\chineset.shx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.753] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.753] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.753] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.753] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.754] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\Fonts\\EXTFONT.SHX", dwFileAttributes=0x80) returned 0 [0090.754] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\Fonts\\EXTFONT.SHX" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\visio shared\\fonts\\extfont.shx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.754] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.754] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.754] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.754] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.754] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\Fonts\\GBCBIG.SHX", dwFileAttributes=0x80) returned 0 [0090.755] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\Fonts\\GBCBIG.SHX" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\visio shared\\fonts\\gbcbig.shx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.755] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.755] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.755] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.755] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.755] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\Fonts\\IC-TXT.SHX", dwFileAttributes=0x80) returned 0 [0090.755] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\Fonts\\IC-TXT.SHX" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\visio shared\\fonts\\ic-txt.shx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.756] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.756] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.756] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.756] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.756] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\Fonts\\ICAD.FMP", dwFileAttributes=0x80) returned 0 [0090.757] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\Fonts\\ICAD.FMP" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\visio shared\\fonts\\icad.fmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.757] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.758] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.758] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.758] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\Fonts\\WHGDTXT.SHX", dwFileAttributes=0x80) returned 0 [0090.758] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\Fonts\\WHGDTXT.SHX" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\visio shared\\fonts\\whgdtxt.shx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.758] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.758] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.759] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.759] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\Fonts\\WHGTXT.SHX", dwFileAttributes=0x80) returned 0 [0090.759] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\Fonts\\WHGTXT.SHX" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\visio shared\\fonts\\whgtxt.shx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.759] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.759] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.760] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.760] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.760] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\Fonts\\WHTGTXT.SHX", dwFileAttributes=0x80) returned 0 [0090.760] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\Fonts\\WHTGTXT.SHX" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\visio shared\\fonts\\whtgtxt.shx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.760] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.760] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.761] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.761] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.761] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\Fonts\\WHTMTXT.SHX", dwFileAttributes=0x80) returned 0 [0090.761] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\Fonts\\WHTMTXT.SHX" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\visio shared\\fonts\\whtmtxt.shx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.761] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.761] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.761] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.761] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0090.762] SetLastError (dwErrCode=0x0) [0090.762] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\Fonts\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\visio shared\\fonts\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.765] GetLastError () returned 0x5 [0090.765] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.765] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.765] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0090.765] FindClose (in: hFindFile=0xd707976cd0 | out: hFindFile=0xd707976cd0) returned 1 [0090.765] SetLastError (dwErrCode=0x0) [0090.765] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\visio shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.765] GetLastError () returned 0x5 [0090.765] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0090.765] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.765] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.765] SetLastError (dwErrCode=0x0) [0090.765] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.766] GetLastError () returned 0x5 [0090.766] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0090.766] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.766] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd707976f10 [0090.766] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.766] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.766] SetLastError (dwErrCode=0x0) [0090.766] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\web server extensions\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.767] GetLastError () returned 0x5 [0090.767] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.767] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.767] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\16\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707977510 [0090.767] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.767] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.767] SetLastError (dwErrCode=0x0) [0090.767] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\web server extensions\\16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.767] GetLastError () returned 0x5 [0090.767] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0) returned 0 [0090.767] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.767] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\16\\BIN\\*.*", lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 0xd707976910 [0090.767] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0090.767] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0090.767] SetLastError (dwErrCode=0x0) [0090.767] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\16\\BIN\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\web server extensions\\16\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.768] GetLastError () returned 0x5 [0090.768] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4a330, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4a330, lpOverlapped=0x0) returned 0 [0090.768] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.768] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\16\\BIN\\1033\\*.*", lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 0xd707976cd0 [0090.768] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0090.768] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0090.768] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.768] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\16\\BIN\\1033\\FPEXT.MSG", dwFileAttributes=0x80) returned 0 [0090.768] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\16\\BIN\\1033\\FPEXT.MSG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\web server extensions\\16\\bin\\1033\\fpext.msg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.769] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.769] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.769] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 0 [0090.769] FindClose (in: hFindFile=0xd707976cd0 | out: hFindFile=0xd707976cd0) returned 1 [0090.769] SetLastError (dwErrCode=0x0) [0090.769] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\16\\BIN\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\web server extensions\\16\\bin\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.769] GetLastError () returned 0x5 [0090.769] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4a330, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4a330, lpOverlapped=0x0) returned 0 [0090.769] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.769] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0090.769] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0090.769] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 0 [0090.769] FindClose (in: hFindFile=0xd707976910 | out: hFindFile=0xd707976910) returned 1 [0090.770] SetLastError (dwErrCode=0x0) [0090.770] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\16\\BIN\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\web server extensions\\16\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.770] GetLastError () returned 0x5 [0090.770] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0) returned 0 [0090.770] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.770] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.770] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0090.770] SetLastError (dwErrCode=0x0) [0090.770] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\web server extensions\\16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.770] GetLastError () returned 0x5 [0090.770] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.770] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.770] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0090.770] FindClose (in: hFindFile=0xd707976f10 | out: hFindFile=0xd707976f10) returned 1 [0090.770] SetLastError (dwErrCode=0x0) [0090.770] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\web server extensions\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.771] GetLastError () returned 0x5 [0090.771] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0090.771] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.771] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0090.771] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0090.771] SetLastError (dwErrCode=0x0) [0090.771] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.771] GetLastError () returned 0x5 [0090.771] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0090.771] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.771] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0090.771] SetLastError (dwErrCode=0x0) [0090.771] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.771] GetLastError () returned 0x5 [0090.771] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0090.771] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.771] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\ODBC\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd707977510 [0090.775] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.775] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.775] SetLastError (dwErrCode=0x0) [0090.775] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\ODBC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\odbc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.776] GetLastError () returned 0x5 [0090.776] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0090.776] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.776] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\ODBC\\Data Sources\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd707976910 [0090.777] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.777] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0090.777] FindClose (in: hFindFile=0xd707976910 | out: hFindFile=0xd707976910) returned 1 [0090.777] SetLastError (dwErrCode=0x0) [0090.777] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\ODBC\\Data Sources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\odbc\\data sources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.777] GetLastError () returned 0x5 [0090.777] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0090.777] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.777] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0090.777] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0090.777] SetLastError (dwErrCode=0x0) [0090.777] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\ODBC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\odbc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.777] GetLastError () returned 0x5 [0090.777] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0090.777] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.777] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0090.777] SetLastError (dwErrCode=0x0) [0090.777] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.778] GetLastError () returned 0x5 [0090.778] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0090.778] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.778] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd707976910 [0090.778] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.778] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.778] SetLastError (dwErrCode=0x0) [0090.778] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\system\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.779] GetLastError () returned 0x5 [0090.779] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0090.779] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.779] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\MSMAPI\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd707977510 [0090.779] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.779] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.779] SetLastError (dwErrCode=0x0) [0090.779] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\MSMAPI\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\system\\msmapi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.779] GetLastError () returned 0x5 [0090.779] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.779] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.779] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\MSMAPI\\1033\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976cd0 [0090.779] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.779] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.779] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.779] FindClose (in: hFindFile=0xd707976cd0 | out: hFindFile=0xd707976cd0) returned 1 [0090.779] SetLastError (dwErrCode=0x0) [0090.779] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\MSMAPI\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\system\\msmapi\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.780] GetLastError () returned 0x5 [0090.780] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.780] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.780] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0090.780] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0090.780] SetLastError (dwErrCode=0x0) [0090.780] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\MSMAPI\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\system\\msmapi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.780] GetLastError () returned 0x5 [0090.780] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0090.780] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.780] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.780] SetLastError (dwErrCode=0x0) [0090.780] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\system\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.780] GetLastError () returned 0x5 [0090.780] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0090.780] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.780] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\ole db\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd707976cd0 [0090.781] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.781] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.781] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.781] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0090.781] FindClose (in: hFindFile=0xd707976cd0 | out: hFindFile=0xd707976cd0) returned 1 [0090.781] SetLastError (dwErrCode=0x0) [0090.781] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\ole db\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\system\\ole db\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.781] GetLastError () returned 0x5 [0090.781] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0090.781] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.781] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0090.782] FindClose (in: hFindFile=0xd707976910 | out: hFindFile=0xd707976910) returned 1 [0090.782] SetLastError (dwErrCode=0x0) [0090.782] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\system\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.782] GetLastError () returned 0x5 [0090.782] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0090.782] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.782] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0090.782] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0090.782] SetLastError (dwErrCode=0x0) [0090.782] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.782] GetLastError () returned 0x5 [0090.782] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0090.782] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.782] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0090.782] SetLastError (dwErrCode=0x0) [0090.782] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.783] GetLastError () returned 0x5 [0090.783] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0090.783] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.783] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd707977510 [0090.784] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0090.784] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0090.784] SetLastError (dwErrCode=0x0) [0090.784] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.784] GetLastError () returned 0x5 [0090.784] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0090.784] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.784] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd707976f10 [0090.785] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.785] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.785] SetLastError (dwErrCode=0x0) [0090.785] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.786] GetLastError () returned 0x5 [0090.786] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0090.786] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.786] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\EQUATION\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd707976910 [0090.787] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.787] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.787] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.787] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.787] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.787] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0090.787] FindClose (in: hFindFile=0xd707976910 | out: hFindFile=0xd707976910) returned 1 [0090.788] SetLastError (dwErrCode=0x0) [0090.788] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\EQUATION\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\equation\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.919] GetLastError () returned 0x5 [0090.919] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0090.919] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.919] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.919] SetLastError (dwErrCode=0x0) [0090.919] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.919] GetLastError () returned 0x5 [0090.919] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0090.919] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.919] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd707976910 [0090.936] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.936] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.936] SetLastError (dwErrCode=0x0) [0090.936] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\help\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.936] GetLastError () returned 0x5 [0090.936] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.936] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.936] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1028\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976cd0 [0090.937] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.937] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.937] FindClose (in: hFindFile=0xd707976cd0 | out: hFindFile=0xd707976cd0) returned 1 [0090.937] SetLastError (dwErrCode=0x0) [0090.937] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1028\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\help\\1028\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.937] GetLastError () returned 0x5 [0090.937] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.937] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.937] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.937] SetLastError (dwErrCode=0x0) [0090.938] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\help\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.938] GetLastError () returned 0x5 [0090.938] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.938] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.938] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1031\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976cd0 [0090.938] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.938] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.938] FindClose (in: hFindFile=0xd707976cd0 | out: hFindFile=0xd707976cd0) returned 1 [0090.938] SetLastError (dwErrCode=0x0) [0090.939] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1031\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\help\\1031\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.939] GetLastError () returned 0x5 [0090.939] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.939] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.939] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.939] SetLastError (dwErrCode=0x0) [0090.939] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\help\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.939] GetLastError () returned 0x5 [0090.939] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.939] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.939] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1033\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976cd0 [0090.939] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.939] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.939] FindClose (in: hFindFile=0xd707976cd0 | out: hFindFile=0xd707976cd0) returned 1 [0090.939] SetLastError (dwErrCode=0x0) [0090.939] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\help\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.940] GetLastError () returned 0x5 [0090.940] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.940] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.940] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.940] SetLastError (dwErrCode=0x0) [0090.940] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\help\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.940] GetLastError () returned 0x5 [0090.940] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.940] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.940] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1036\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976cd0 [0090.940] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.940] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.940] FindClose (in: hFindFile=0xd707976cd0 | out: hFindFile=0xd707976cd0) returned 1 [0090.940] SetLastError (dwErrCode=0x0) [0090.940] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1036\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\help\\1036\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.941] GetLastError () returned 0x5 [0090.941] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.941] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.941] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.941] SetLastError (dwErrCode=0x0) [0090.941] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\help\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.941] GetLastError () returned 0x5 [0090.941] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.941] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.941] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1040\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976cd0 [0090.942] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.942] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.942] FindClose (in: hFindFile=0xd707976cd0 | out: hFindFile=0xd707976cd0) returned 1 [0090.942] SetLastError (dwErrCode=0x0) [0090.942] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1040\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\help\\1040\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.942] GetLastError () returned 0x5 [0090.942] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.942] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.942] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.942] SetLastError (dwErrCode=0x0) [0090.943] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\help\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.943] GetLastError () returned 0x5 [0090.943] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.943] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.943] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1041\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976cd0 [0090.943] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.943] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.943] FindClose (in: hFindFile=0xd707976cd0 | out: hFindFile=0xd707976cd0) returned 1 [0090.943] SetLastError (dwErrCode=0x0) [0090.943] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1041\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\help\\1041\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.943] GetLastError () returned 0x5 [0090.943] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.943] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.943] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.943] SetLastError (dwErrCode=0x0) [0090.944] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\help\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.944] GetLastError () returned 0x5 [0090.944] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.944] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.944] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1042\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976e50 [0090.944] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.944] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.944] FindClose (in: hFindFile=0xd707976e50 | out: hFindFile=0xd707976e50) returned 1 [0090.944] SetLastError (dwErrCode=0x0) [0090.944] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1042\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\help\\1042\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.944] GetLastError () returned 0x5 [0090.945] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.945] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.945] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.945] SetLastError (dwErrCode=0x0) [0090.945] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\help\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.945] GetLastError () returned 0x5 [0090.945] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.945] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.945] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1046\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976d30 [0090.945] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.945] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.945] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0090.945] SetLastError (dwErrCode=0x0) [0090.945] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1046\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\help\\1046\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.945] GetLastError () returned 0x5 [0090.945] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.945] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.946] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.946] SetLastError (dwErrCode=0x0) [0090.946] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\help\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.946] GetLastError () returned 0x5 [0090.946] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.946] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.946] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1049\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976cd0 [0090.946] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.946] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.947] FindClose (in: hFindFile=0xd707976cd0 | out: hFindFile=0xd707976cd0) returned 1 [0090.947] SetLastError (dwErrCode=0x0) [0090.947] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1049\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\help\\1049\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.947] GetLastError () returned 0x5 [0090.947] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.947] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.947] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.947] SetLastError (dwErrCode=0x0) [0090.947] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\help\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.947] GetLastError () returned 0x5 [0090.947] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.947] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.947] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\2052\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976cd0 [0090.948] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.948] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.948] FindClose (in: hFindFile=0xd707976cd0 | out: hFindFile=0xd707976cd0) returned 1 [0090.948] SetLastError (dwErrCode=0x0) [0090.948] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\2052\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\help\\2052\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.949] GetLastError () returned 0x5 [0090.949] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.949] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.949] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.949] SetLastError (dwErrCode=0x0) [0090.949] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\help\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.949] GetLastError () returned 0x5 [0090.949] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.949] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.949] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\3082\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976cd0 [0090.949] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.949] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.949] FindClose (in: hFindFile=0xd707976cd0 | out: hFindFile=0xd707976cd0) returned 1 [0090.949] SetLastError (dwErrCode=0x0) [0090.949] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\3082\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\help\\3082\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.949] GetLastError () returned 0x5 [0090.950] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.950] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.950] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0090.950] FindClose (in: hFindFile=0xd707976910 | out: hFindFile=0xd707976910) returned 1 [0090.950] SetLastError (dwErrCode=0x0) [0090.950] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\help\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.950] GetLastError () returned 0x5 [0090.950] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0090.950] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.950] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.950] SetLastError (dwErrCode=0x0) [0090.950] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.950] GetLastError () returned 0x5 [0090.950] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0090.950] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.950] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd707976cd0 [0090.951] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.953] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.953] SetLastError (dwErrCode=0x0) [0090.953] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.954] GetLastError () returned 0x5 [0090.954] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.954] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.954] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\1033\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976910 [0090.954] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.954] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.954] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.954] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.954] FindClose (in: hFindFile=0xd707976910 | out: hFindFile=0xd707976910) returned 1 [0090.954] SetLastError (dwErrCode=0x0) [0090.954] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\office16\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.954] GetLastError () returned 0x5 [0090.954] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.954] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.954] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.954] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.954] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.954] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.954] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.954] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.954] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.954] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.955] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.955] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.955] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.955] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.955] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.955] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.955] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.955] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.955] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.955] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.955] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.955] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.955] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.955] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.955] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.955] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.955] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.955] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.955] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.955] SetLastError (dwErrCode=0x0) [0090.955] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.955] GetLastError () returned 0x5 [0090.955] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.955] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.955] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\Cultures\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976910 [0090.955] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.955] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.955] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.956] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\Cultures\\OFFICE.ODF", dwFileAttributes=0x80) returned 0 [0090.957] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\Cultures\\OFFICE.ODF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\office16\\cultures\\office.odf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.957] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.957] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.958] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.958] FindClose (in: hFindFile=0xd707976910 | out: hFindFile=0xd707976910) returned 1 [0090.958] SetLastError (dwErrCode=0x0) [0090.958] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\Cultures\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\office16\\cultures\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.958] GetLastError () returned 0x5 [0090.958] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.958] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.958] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.958] SetLastError (dwErrCode=0x0) [0090.958] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.958] GetLastError () returned 0x5 [0090.958] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.958] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.958] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\en-us\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976910 [0090.958] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.958] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.958] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.959] FindClose (in: hFindFile=0xd707976910 | out: hFindFile=0xd707976910) returned 1 [0090.959] SetLastError (dwErrCode=0x0) [0090.959] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\en-us\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\office16\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.959] GetLastError () returned 0x5 [0090.959] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.959] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.959] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.959] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.959] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.959] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.959] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.959] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.959] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.959] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.959] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.959] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.959] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.959] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.959] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.959] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.959] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.959] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.959] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.959] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.959] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.959] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.959] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.959] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0090.959] FindClose (in: hFindFile=0xd707976cd0 | out: hFindFile=0xd707976cd0) returned 1 [0090.959] SetLastError (dwErrCode=0x0) [0090.959] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.960] GetLastError () returned 0x5 [0090.960] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0090.960] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.960] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.960] SetLastError (dwErrCode=0x0) [0090.960] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.960] GetLastError () returned 0x5 [0090.960] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0090.960] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.960] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Portal\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd707976910 [0090.960] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.960] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.960] SetLastError (dwErrCode=0x0) [0090.961] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Portal\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\portal\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.961] GetLastError () returned 0x5 [0090.961] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.961] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.961] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Portal\\1033\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976cd0 [0090.961] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.961] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.961] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.961] FindClose (in: hFindFile=0xd707976cd0 | out: hFindFile=0xd707976cd0) returned 1 [0090.961] SetLastError (dwErrCode=0x0) [0090.962] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Portal\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\portal\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.962] GetLastError () returned 0x5 [0090.962] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.962] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.962] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.962] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0090.962] FindClose (in: hFindFile=0xd707976910 | out: hFindFile=0xd707976910) returned 1 [0090.962] SetLastError (dwErrCode=0x0) [0090.962] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Portal\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\portal\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.962] GetLastError () returned 0x5 [0090.962] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0090.962] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.962] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.962] SetLastError (dwErrCode=0x0) [0090.962] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.962] GetLastError () returned 0x5 [0090.963] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0090.963] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.963] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd707976910 [0090.963] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.963] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.963] SetLastError (dwErrCode=0x0) [0090.963] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\vba\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.963] GetLastError () returned 0x5 [0090.963] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.963] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.963] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA6\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976cd0 [0090.964] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.964] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.964] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.964] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA6\\VBE6EXT.OLB", dwFileAttributes=0x80) returned 0 [0090.965] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA6\\VBE6EXT.OLB" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\vba\\vba6\\vbe6ext.olb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.965] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.965] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.966] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.966] FindClose (in: hFindFile=0xd707976cd0 | out: hFindFile=0xd707976cd0) returned 1 [0090.966] SetLastError (dwErrCode=0x0) [0090.966] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA6\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\vba\\vba6\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.966] GetLastError () returned 0x5 [0090.966] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.966] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.966] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.966] SetLastError (dwErrCode=0x0) [0090.966] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\vba\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.966] GetLastError () returned 0x5 [0090.966] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.966] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.966] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976e50 [0090.966] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.967] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.967] SetLastError (dwErrCode=0x0) [0090.967] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\vba\\vba7.1\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.967] GetLastError () returned 0x5 [0090.967] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0) returned 0 [0090.967] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.967] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\1033\\*.*", lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 0xd707976cd0 [0090.968] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0090.968] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0090.968] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.968] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\1033\\FM20.CHM", dwFileAttributes=0x80) returned 0 [0090.969] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\1033\\FM20.CHM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\vba\\vba7.1\\1033\\fm20.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.969] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.969] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.969] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0090.969] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.969] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\1033\\VBCN6.CHM", dwFileAttributes=0x80) returned 0 [0090.970] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\1033\\VBCN6.CHM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\vba\\vba7.1\\1033\\vbcn6.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.970] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.970] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.970] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0090.970] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.971] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\1033\\VBENDF98.CHM", dwFileAttributes=0x80) returned 0 [0090.971] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\1033\\VBENDF98.CHM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\vba\\vba7.1\\1033\\vbendf98.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.971] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.971] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.971] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0090.971] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.971] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\1033\\VBHW6.CHM", dwFileAttributes=0x80) returned 0 [0090.972] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\1033\\VBHW6.CHM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\vba\\vba7.1\\1033\\vbhw6.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.972] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.972] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.972] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0090.972] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.972] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\1033\\VBLR6.CHM", dwFileAttributes=0x80) returned 0 [0090.973] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\1033\\VBLR6.CHM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\vba\\vba7.1\\1033\\vblr6.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.973] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.973] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.973] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0090.973] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\1033\\VBOB6.CHM", dwFileAttributes=0x80) returned 0 [0090.974] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\1033\\VBOB6.CHM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\vba\\vba7.1\\1033\\vbob6.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.974] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.974] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.974] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0090.974] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0090.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\1033\\VBUI6.CHM", dwFileAttributes=0x80) returned 0 [0090.975] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\1033\\VBUI6.CHM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\vba\\vba7.1\\1033\\vbui6.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.975] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.975] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.975] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 0 [0090.975] FindClose (in: hFindFile=0xd707976cd0 | out: hFindFile=0xd707976cd0) returned 1 [0090.976] SetLastError (dwErrCode=0x0) [0090.976] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\vba\\vba7.1\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.979] GetLastError () returned 0x5 [0090.979] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0) returned 0 [0090.979] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.979] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.979] FindClose (in: hFindFile=0xd707976e50 | out: hFindFile=0xd707976e50) returned 1 [0090.979] SetLastError (dwErrCode=0x0) [0090.979] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\vba\\vba7.1\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.979] GetLastError () returned 0x5 [0090.979] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.979] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.979] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0090.979] FindClose (in: hFindFile=0xd707976910 | out: hFindFile=0xd707976910) returned 1 [0090.979] SetLastError (dwErrCode=0x0) [0090.980] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\vba\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.980] GetLastError () returned 0x5 [0090.980] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0090.980] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.980] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.980] SetLastError (dwErrCode=0x0) [0090.980] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.980] GetLastError () returned 0x5 [0090.980] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0090.980] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.980] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Web Server Extensions\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd707976cd0 [0090.980] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.980] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.980] SetLastError (dwErrCode=0x0) [0090.980] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Web Server Extensions\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\web server extensions\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.981] GetLastError () returned 0x5 [0090.981] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.981] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.981] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Web Server Extensions\\16\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976d30 [0090.981] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.981] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.981] SetLastError (dwErrCode=0x0) [0090.982] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Web Server Extensions\\16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\web server extensions\\16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.982] GetLastError () returned 0x5 [0090.982] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0) returned 0 [0090.982] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.982] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Web Server Extensions\\16\\BIN\\*.*", lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 0xd707976910 [0090.982] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0090.982] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0090.982] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0090.982] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 0 [0090.982] FindClose (in: hFindFile=0xd707976910 | out: hFindFile=0xd707976910) returned 1 [0090.982] SetLastError (dwErrCode=0x0) [0090.982] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Web Server Extensions\\16\\BIN\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\web server extensions\\16\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.982] GetLastError () returned 0x5 [0090.982] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0) returned 0 [0090.982] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.982] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.982] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0090.983] SetLastError (dwErrCode=0x0) [0090.983] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Web Server Extensions\\16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\web server extensions\\16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.983] GetLastError () returned 0x5 [0090.983] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.983] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.983] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0090.983] FindClose (in: hFindFile=0xd707976cd0 | out: hFindFile=0xd707976cd0) returned 1 [0090.983] SetLastError (dwErrCode=0x0) [0090.983] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Web Server Extensions\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\web server extensions\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.983] GetLastError () returned 0x5 [0090.983] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0090.983] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.983] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0090.983] FindClose (in: hFindFile=0xd707976f10 | out: hFindFile=0xd707976f10) returned 1 [0090.983] SetLastError (dwErrCode=0x0) [0090.983] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.984] GetLastError () returned 0x5 [0090.984] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0090.984] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.984] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0090.984] SetLastError (dwErrCode=0x0) [0090.984] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.984] GetLastError () returned 0x5 [0090.984] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0090.984] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.984] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\System\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd707976cd0 [0090.985] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.985] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.985] SetLastError (dwErrCode=0x0) [0090.985] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\System\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\system\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.985] GetLastError () returned 0x5 [0090.985] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0090.985] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.985] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\System\\ole db\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd707976f10 [0090.985] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.985] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.985] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.985] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0090.985] FindClose (in: hFindFile=0xd707976f10 | out: hFindFile=0xd707976f10) returned 1 [0090.985] SetLastError (dwErrCode=0x0) [0090.985] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\System\\ole db\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\system\\ole db\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.985] GetLastError () returned 0x5 [0090.986] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0090.986] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.986] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0090.986] FindClose (in: hFindFile=0xd707976cd0 | out: hFindFile=0xd707976cd0) returned 1 [0090.986] SetLastError (dwErrCode=0x0) [0090.986] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\System\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\system\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.986] GetLastError () returned 0x5 [0090.986] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0090.986] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.986] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0090.986] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0090.986] SetLastError (dwErrCode=0x0) [0090.986] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.986] GetLastError () returned 0x5 [0090.986] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0090.986] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.986] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0090.986] SetLastError (dwErrCode=0x0) [0090.986] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.987] GetLastError () returned 0x5 [0090.987] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0090.987] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.987] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd707976910 [0090.987] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0090.987] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0090.987] SetLastError (dwErrCode=0x0) [0090.987] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.988] GetLastError () returned 0x5 [0090.988] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0090.988] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.988] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd707976cd0 [0090.988] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.988] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0090.988] SetLastError (dwErrCode=0x0) [0090.988] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.989] GetLastError () returned 0x5 [0090.989] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0090.989] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.989] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd707977510 [0090.989] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.989] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.989] SetLastError (dwErrCode=0x0) [0090.989] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.990] GetLastError () returned 0x5 [0090.990] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.990] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.990] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\110\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976e50 [0090.991] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.991] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.991] SetLastError (dwErrCode=0x0) [0090.991] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\110\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\110\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.992] GetLastError () returned 0x5 [0090.992] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0) returned 0 [0090.992] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.992] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\110\\Cartridges\\*.*", lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 0xd7079a0e70 [0090.992] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0090.992] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 0 [0090.992] FindClose (in: hFindFile=0xd7079a0e70 | out: hFindFile=0xd7079a0e70) returned 1 [0090.992] SetLastError (dwErrCode=0x0) [0090.992] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\110\\Cartridges\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\110\\cartridges\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.992] GetLastError () returned 0x5 [0090.992] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0) returned 0 [0090.993] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.993] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.993] SetLastError (dwErrCode=0x0) [0090.993] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\110\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\110\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.993] GetLastError () returned 0x5 [0090.993] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0) returned 0 [0090.993] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.993] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\110\\Resources\\*.*", lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 0xd7079a0450 [0090.993] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0090.993] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0090.993] SetLastError (dwErrCode=0x0) [0090.993] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\110\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\110\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.993] GetLastError () returned 0x5 [0090.993] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4a330, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4a330, lpOverlapped=0x0) returned 0 [0090.993] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.993] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\110\\Resources\\1033\\*.*", lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 0xd7079a0810 [0090.994] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0090.994] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 0 [0090.994] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0090.994] SetLastError (dwErrCode=0x0) [0090.994] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\110\\Resources\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\110\\resources\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.994] GetLastError () returned 0x5 [0090.994] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4a330, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4a330, lpOverlapped=0x0) returned 0 [0090.994] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.994] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 0 [0090.994] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0090.994] SetLastError (dwErrCode=0x0) [0090.994] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\110\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\110\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.994] GetLastError () returned 0x5 [0090.994] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0) returned 0 [0090.994] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.994] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0090.994] FindClose (in: hFindFile=0xd707976e50 | out: hFindFile=0xd707976e50) returned 1 [0090.995] SetLastError (dwErrCode=0x0) [0090.995] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\110\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\110\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.995] GetLastError () returned 0x5 [0090.995] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.995] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.995] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0090.995] SetLastError (dwErrCode=0x0) [0090.995] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.995] GetLastError () returned 0x5 [0090.995] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0090.995] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.995] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a0810 [0090.997] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.997] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.997] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0090.997] SetLastError (dwErrCode=0x0) [0090.997] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\140\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.997] GetLastError () returned 0x5 [0090.997] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0) returned 0 [0090.997] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0090.997] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\*.*", lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 0xd7079a0450 [0091.000] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.000] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.000] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0091.000] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\as80.xsl", dwFileAttributes=0x80) returned 0 [0091.001] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\as80.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\140\\cartridges\\as80.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.001] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.001] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0091.001] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.001] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0091.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\as90.xsl", dwFileAttributes=0x80) returned 0 [0091.002] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\as90.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\140\\cartridges\\as90.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.002] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.002] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0091.002] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.002] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0091.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\db2v0801.xsl", dwFileAttributes=0x80) returned 0 [0091.003] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\db2v0801.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\140\\cartridges\\db2v0801.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.003] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.003] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0091.004] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.004] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0091.004] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\hive.xsl", dwFileAttributes=0x80) returned 0 [0091.005] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\hive.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\140\\cartridges\\hive.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.005] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.005] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0091.005] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.005] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0091.005] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\Informix.xsl", dwFileAttributes=0x80) returned 0 [0091.006] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\Informix.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\140\\cartridges\\informix.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.006] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.006] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0091.006] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.006] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0091.006] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\msjet.xsl", dwFileAttributes=0x80) returned 0 [0091.007] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\msjet.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\140\\cartridges\\msjet.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.007] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.007] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0091.007] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.007] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0091.008] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\msql.xsl", dwFileAttributes=0x80) returned 0 [0091.008] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\msql.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\140\\cartridges\\msql.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.008] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.008] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0091.008] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.008] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0091.008] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\orcl7.xsl", dwFileAttributes=0x80) returned 0 [0091.009] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\orcl7.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\140\\cartridges\\orcl7.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.009] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.009] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0091.009] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.009] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0091.009] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\sql120.xsl", dwFileAttributes=0x80) returned 0 [0091.010] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\sql120.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\140\\cartridges\\sql120.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.010] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.010] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0091.010] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.010] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0091.010] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\sql2000.xsl", dwFileAttributes=0x80) returned 0 [0091.011] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\sql2000.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\140\\cartridges\\sql2000.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.011] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.011] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0091.011] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.011] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0091.011] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\sql70.xsl", dwFileAttributes=0x80) returned 0 [0091.012] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\sql70.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\140\\cartridges\\sql70.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.012] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.012] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0091.012] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.012] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0091.013] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\sql90.xsl", dwFileAttributes=0x80) returned 0 [0091.013] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\sql90.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\140\\cartridges\\sql90.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.014] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.014] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0091.014] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.014] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0091.015] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\sqlpdw.xsl", dwFileAttributes=0x80) returned 0 [0091.015] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\sqlpdw.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\140\\cartridges\\sqlpdw.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.015] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.015] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0091.015] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.015] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0091.016] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\Sybase.xsl", dwFileAttributes=0x80) returned 0 [0091.016] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\Sybase.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\140\\cartridges\\sybase.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.016] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.016] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0091.016] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.016] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0091.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\trdtv2r41.xsl", dwFileAttributes=0x80) returned 0 [0091.017] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\trdtv2r41.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\140\\cartridges\\trdtv2r41.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.018] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.018] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0091.018] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 0 [0091.018] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0091.018] SetLastError (dwErrCode=0x0) [0091.018] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\140\\cartridges\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.021] GetLastError () returned 0x5 [0091.021] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0) returned 0 [0091.021] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.021] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.021] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.021] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.021] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.021] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.021] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.021] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.021] SetLastError (dwErrCode=0x0) [0091.021] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\140\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.022] GetLastError () returned 0x5 [0091.022] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0) returned 0 [0091.022] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.022] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\*.*", lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 0xd7079a0d50 [0091.022] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.022] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.022] SetLastError (dwErrCode=0x0) [0091.022] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\140\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.022] GetLastError () returned 0x5 [0091.022] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4a330, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4a330, lpOverlapped=0x0) returned 0 [0091.022] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.022] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\1033\\*.*", lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 0xd7079a0e10 [0091.117] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.117] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.117] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0091.118] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\1033\\msmdsrv.rll", dwFileAttributes=0x80) returned 0 [0091.164] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\1033\\msmdsrv.rll" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\140\\resources\\1033\\msmdsrv.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.164] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.164] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0091.164] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.164] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0091.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\1033\\msmdsrvi.rll", dwFileAttributes=0x80) returned 0 [0091.193] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\1033\\msmdsrvi.rll" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\140\\resources\\1033\\msmdsrvi.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.193] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.193] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0091.193] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.193] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0091.194] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\1033\\msolui.rll", dwFileAttributes=0x80) returned 0 [0091.194] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\1033\\msolui.rll" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\140\\resources\\1033\\msolui.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.194] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.194] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0091.194] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 0 [0091.194] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0091.195] SetLastError (dwErrCode=0x0) [0091.195] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\140\\resources\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.195] GetLastError () returned 0x5 [0091.195] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4a330, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4a330, lpOverlapped=0x0) returned 0 [0091.195] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.195] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 0 [0091.195] FindClose (in: hFindFile=0xd7079a0d50 | out: hFindFile=0xd7079a0d50) returned 1 [0091.195] SetLastError (dwErrCode=0x0) [0091.195] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\140\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.195] GetLastError () returned 0x5 [0091.195] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0) returned 0 [0091.195] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.196] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.196] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.196] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0091.196] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0091.196] SetLastError (dwErrCode=0x0) [0091.196] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\140\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.196] GetLastError () returned 0x5 [0091.196] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0091.196] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.196] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0091.196] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0091.196] SetLastError (dwErrCode=0x0) [0091.196] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.196] GetLastError () returned 0x5 [0091.196] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0091.196] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.196] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0091.196] FindClose (in: hFindFile=0xd707976cd0 | out: hFindFile=0xd707976cd0) returned 1 [0091.196] SetLastError (dwErrCode=0x0) [0091.196] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.197] GetLastError () returned 0x5 [0091.197] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0091.197] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.197] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0091.197] SetLastError (dwErrCode=0x0) [0091.197] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.197] GetLastError () returned 0x5 [0091.197] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0091.197] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.197] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Office\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0450 [0091.197] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0091.197] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0091.197] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0091.197] SetLastError (dwErrCode=0x0) [0091.197] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Office\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft office\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.198] GetLastError () returned 0x5 [0091.198] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0091.198] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.198] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0091.198] SetLastError (dwErrCode=0x0) [0091.198] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.198] GetLastError () returned 0x5 [0091.198] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0091.198] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.198] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0450 [0091.199] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0091.199] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0091.200] SetLastError (dwErrCode=0x0) [0091.200] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft sql server\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.200] GetLastError () returned 0x5 [0091.200] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0091.200] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.200] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\110\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0d50 [0091.200] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.200] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.200] SetLastError (dwErrCode=0x0) [0091.200] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\110\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft sql server\\110\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.200] GetLastError () returned 0x5 [0091.200] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0091.200] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.200] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\110\\Shared\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a0810 [0091.200] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.201] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0091.201] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0091.201] SetLastError (dwErrCode=0x0) [0091.201] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\110\\Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft sql server\\110\\shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.201] GetLastError () returned 0x5 [0091.201] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0091.201] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.201] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0091.201] FindClose (in: hFindFile=0xd7079a0d50 | out: hFindFile=0xd7079a0d50) returned 1 [0091.201] SetLastError (dwErrCode=0x0) [0091.201] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\110\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft sql server\\110\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.201] GetLastError () returned 0x5 [0091.201] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0091.201] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.201] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0091.201] SetLastError (dwErrCode=0x0) [0091.201] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft sql server\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.202] GetLastError () returned 0x5 [0091.202] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0091.202] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.202] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\130\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0d50 [0091.202] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.202] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.202] SetLastError (dwErrCode=0x0) [0091.202] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\130\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft sql server\\130\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.203] GetLastError () returned 0x5 [0091.203] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0091.203] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.203] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\130\\Shared\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a0e10 [0091.203] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.203] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.203] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0091.203] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0091.203] SetLastError (dwErrCode=0x0) [0091.203] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\130\\Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft sql server\\130\\shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.203] GetLastError () returned 0x5 [0091.203] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0091.203] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.203] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0091.203] FindClose (in: hFindFile=0xd7079a0d50 | out: hFindFile=0xd7079a0d50) returned 1 [0091.203] SetLastError (dwErrCode=0x0) [0091.203] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\130\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft sql server\\130\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.204] GetLastError () returned 0x5 [0091.204] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0091.204] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.204] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0091.204] SetLastError (dwErrCode=0x0) [0091.204] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft sql server\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.204] GetLastError () returned 0x5 [0091.204] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0091.204] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.204] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\140\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0810 [0091.204] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.204] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.204] SetLastError (dwErrCode=0x0) [0091.204] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\140\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft sql server\\140\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.204] GetLastError () returned 0x5 [0091.204] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0091.204] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.205] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\140\\Shared\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a0d50 [0091.205] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.205] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0091.205] FindClose (in: hFindFile=0xd7079a0d50 | out: hFindFile=0xd7079a0d50) returned 1 [0091.205] SetLastError (dwErrCode=0x0) [0091.205] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\140\\Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft sql server\\140\\shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.205] GetLastError () returned 0x5 [0091.205] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0091.205] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.205] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0091.205] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0091.205] SetLastError (dwErrCode=0x0) [0091.205] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\140\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft sql server\\140\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.205] GetLastError () returned 0x5 [0091.205] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0091.205] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.205] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0091.205] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0091.206] SetLastError (dwErrCode=0x0) [0091.206] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft sql server\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.206] GetLastError () returned 0x5 [0091.206] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0091.206] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.206] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0091.206] SetLastError (dwErrCode=0x0) [0091.206] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.206] GetLastError () returned 0x5 [0091.206] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0091.206] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.206] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft.NET\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0450 [0091.207] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0091.207] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0091.207] SetLastError (dwErrCode=0x0) [0091.207] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft.NET\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft.net\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.207] GetLastError () returned 0x5 [0091.207] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0091.207] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.207] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft.NET\\ADOMD.NET\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0810 [0091.207] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.207] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.207] SetLastError (dwErrCode=0x0) [0091.207] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft.NET\\ADOMD.NET\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft.net\\adomd.net\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.208] GetLastError () returned 0x5 [0091.208] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0091.208] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.208] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft.NET\\ADOMD.NET\\110\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a0e10 [0091.208] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.208] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0091.208] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0091.208] SetLastError (dwErrCode=0x0) [0091.208] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft.NET\\ADOMD.NET\\110\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft.net\\adomd.net\\110\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.208] GetLastError () returned 0x5 [0091.208] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0091.208] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.208] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.208] SetLastError (dwErrCode=0x0) [0091.208] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft.NET\\ADOMD.NET\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft.net\\adomd.net\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.208] GetLastError () returned 0x5 [0091.208] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0091.208] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.209] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft.NET\\ADOMD.NET\\130\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a0e10 [0091.209] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.209] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.209] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0091.209] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0091.209] SetLastError (dwErrCode=0x0) [0091.209] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft.NET\\ADOMD.NET\\130\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft.net\\adomd.net\\130\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.209] GetLastError () returned 0x5 [0091.209] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0091.209] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.209] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.209] SetLastError (dwErrCode=0x0) [0091.209] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft.NET\\ADOMD.NET\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft.net\\adomd.net\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.209] GetLastError () returned 0x5 [0091.209] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0091.209] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.209] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft.NET\\ADOMD.NET\\140\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a08d0 [0091.210] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.210] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0091.210] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0091.210] SetLastError (dwErrCode=0x0) [0091.210] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft.NET\\ADOMD.NET\\140\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft.net\\adomd.net\\140\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.210] GetLastError () returned 0x5 [0091.210] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0091.210] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.210] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0091.210] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0091.210] SetLastError (dwErrCode=0x0) [0091.210] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft.NET\\ADOMD.NET\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft.net\\adomd.net\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.211] GetLastError () returned 0x5 [0091.211] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0091.211] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.211] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0091.211] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0091.211] SetLastError (dwErrCode=0x0) [0091.211] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft.NET\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft.net\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.211] GetLastError () returned 0x5 [0091.211] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0091.211] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.211] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0091.211] FindClose (in: hFindFile=0xd707976910 | out: hFindFile=0xd707976910) returned 1 [0091.211] SetLastError (dwErrCode=0x0) [0091.211] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.211] GetLastError () returned 0x5 [0091.211] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0091.211] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.211] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0091.211] SetLastError (dwErrCode=0x0) [0091.212] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.212] GetLastError () returned 0x5 [0091.212] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0091.212] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.212] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079a0450 [0091.213] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0091.213] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0091.213] SetLastError (dwErrCode=0x0) [0091.213] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.213] GetLastError () returned 0x5 [0091.213] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0091.213] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.213] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079a0930 [0091.214] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0091.214] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0091.214] SetLastError (dwErrCode=0x0) [0091.214] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.214] GetLastError () returned 0x5 [0091.214] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0091.214] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.214] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079a0e70 [0091.214] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.214] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.214] SetLastError (dwErrCode=0x0) [0091.215] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.215] GetLastError () returned 0x5 [0091.215] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0091.215] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.215] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\110\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a0e10 [0091.216] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.216] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.216] SetLastError (dwErrCode=0x0) [0091.216] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\110\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\110\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.216] GetLastError () returned 0x5 [0091.216] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0) returned 0 [0091.216] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.216] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\110\\Cartridges\\*.*", lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 0xd7079a0810 [0091.216] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.217] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 0 [0091.217] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0091.217] SetLastError (dwErrCode=0x0) [0091.217] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\110\\Cartridges\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\110\\cartridges\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.217] GetLastError () returned 0x5 [0091.217] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0) returned 0 [0091.217] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.217] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.217] SetLastError (dwErrCode=0x0) [0091.217] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\110\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\110\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.217] GetLastError () returned 0x5 [0091.217] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0) returned 0 [0091.217] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.217] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\110\\Resources\\*.*", lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 0xd7079a0810 [0091.218] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.218] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.218] SetLastError (dwErrCode=0x0) [0091.218] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\110\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\110\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.218] GetLastError () returned 0x5 [0091.218] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4a330, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4a330, lpOverlapped=0x0) returned 0 [0091.218] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.218] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\110\\Resources\\1033\\*.*", lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 0xd7079a08d0 [0091.218] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.218] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 0 [0091.218] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0091.218] SetLastError (dwErrCode=0x0) [0091.219] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\110\\Resources\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\110\\resources\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.219] GetLastError () returned 0x5 [0091.219] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4a330, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4a330, lpOverlapped=0x0) returned 0 [0091.219] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.219] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 0 [0091.219] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0091.219] SetLastError (dwErrCode=0x0) [0091.219] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\110\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\110\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.219] GetLastError () returned 0x5 [0091.219] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0) returned 0 [0091.219] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.219] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0091.219] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0091.219] SetLastError (dwErrCode=0x0) [0091.219] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\110\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\110\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.219] GetLastError () returned 0x5 [0091.220] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0091.220] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.220] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.220] SetLastError (dwErrCode=0x0) [0091.220] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.220] GetLastError () returned 0x5 [0091.220] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0091.220] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.220] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079a0d50 [0091.222] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.222] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.222] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.222] SetLastError (dwErrCode=0x0) [0091.222] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\140\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.222] GetLastError () returned 0x5 [0091.222] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0) returned 0 [0091.222] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.222] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\*.*", lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 0xd7079a0e10 [0091.223] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.223] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.223] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0091.224] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\as80.xsl", dwFileAttributes=0x80) returned 0 [0091.340] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\as80.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\140\\cartridges\\as80.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.341] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.341] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0091.342] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.342] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0091.342] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\as90.xsl", dwFileAttributes=0x80) returned 0 [0091.343] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\as90.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\140\\cartridges\\as90.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.343] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.343] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0091.344] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.344] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0091.344] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\db2v0801.xsl", dwFileAttributes=0x80) returned 0 [0091.345] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\db2v0801.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\140\\cartridges\\db2v0801.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.345] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.345] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0091.345] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.345] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0091.345] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\hive.xsl", dwFileAttributes=0x80) returned 0 [0091.346] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\hive.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\140\\cartridges\\hive.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.346] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.346] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0091.346] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.346] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0091.347] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\Informix.xsl", dwFileAttributes=0x80) returned 0 [0091.347] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\Informix.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\140\\cartridges\\informix.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.348] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.348] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0091.348] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.348] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0091.348] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\msjet.xsl", dwFileAttributes=0x80) returned 0 [0091.348] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\msjet.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\140\\cartridges\\msjet.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.348] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.349] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0091.349] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.349] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0091.349] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\msql.xsl", dwFileAttributes=0x80) returned 0 [0091.349] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\msql.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\140\\cartridges\\msql.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.349] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.349] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0091.350] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.350] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0091.350] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\orcl7.xsl", dwFileAttributes=0x80) returned 0 [0091.350] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\orcl7.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\140\\cartridges\\orcl7.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.350] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.350] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0091.350] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.350] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0091.351] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\sql120.xsl", dwFileAttributes=0x80) returned 0 [0091.351] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\sql120.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\140\\cartridges\\sql120.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.351] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.351] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0091.352] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.352] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0091.352] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\sql2000.xsl", dwFileAttributes=0x80) returned 0 [0091.352] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\sql2000.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\140\\cartridges\\sql2000.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.353] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.353] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0091.353] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.353] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0091.354] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\sql70.xsl", dwFileAttributes=0x80) returned 0 [0091.354] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\sql70.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\140\\cartridges\\sql70.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.354] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.354] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0091.355] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.355] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0091.355] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\sql90.xsl", dwFileAttributes=0x80) returned 0 [0091.355] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\sql90.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\140\\cartridges\\sql90.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.355] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.355] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0091.356] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.356] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0091.356] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\sqlpdw.xsl", dwFileAttributes=0x80) returned 0 [0091.356] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\sqlpdw.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\140\\cartridges\\sqlpdw.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.356] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.356] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0091.356] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.357] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0091.357] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\Sybase.xsl", dwFileAttributes=0x80) returned 0 [0091.357] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\Sybase.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\140\\cartridges\\sybase.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.357] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.357] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0091.357] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.357] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0091.358] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\trdtv2r41.xsl", dwFileAttributes=0x80) returned 0 [0091.358] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\trdtv2r41.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\140\\cartridges\\trdtv2r41.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.358] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.358] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0091.358] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 0 [0091.358] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0091.359] SetLastError (dwErrCode=0x0) [0091.359] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\140\\cartridges\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.362] GetLastError () returned 0x5 [0091.362] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0) returned 0 [0091.362] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.362] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.362] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.362] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.362] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.362] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.362] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.362] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.362] SetLastError (dwErrCode=0x0) [0091.362] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\140\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.362] GetLastError () returned 0x5 [0091.362] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0) returned 0 [0091.362] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.362] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\*.*", lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 0xd707976cd0 [0091.362] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.362] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.362] SetLastError (dwErrCode=0x0) [0091.363] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\140\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.363] GetLastError () returned 0x5 [0091.363] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4a330, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4a330, lpOverlapped=0x0) returned 0 [0091.363] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.363] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\1033\\*.*", lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 0xd707977510 [0091.363] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.363] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.363] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0091.363] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\1033\\msmdsrv.rll", dwFileAttributes=0x80) returned 0 [0091.364] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\1033\\msmdsrv.rll" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\140\\resources\\1033\\msmdsrv.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.364] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.364] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0091.364] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.364] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0091.364] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\1033\\msmdsrvi.rll", dwFileAttributes=0x80) returned 0 [0091.364] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\1033\\msmdsrvi.rll" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\140\\resources\\1033\\msmdsrvi.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.365] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.365] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0091.365] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.365] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0091.365] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\1033\\msolui.rll", dwFileAttributes=0x80) returned 0 [0091.365] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\1033\\msolui.rll" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\140\\resources\\1033\\msolui.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.366] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.366] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0091.366] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 0 [0091.366] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0091.366] SetLastError (dwErrCode=0x0) [0091.366] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\140\\resources\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.366] GetLastError () returned 0x5 [0091.366] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4a330, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4a330, lpOverlapped=0x0) returned 0 [0091.366] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.366] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 0 [0091.366] FindClose (in: hFindFile=0xd707976cd0 | out: hFindFile=0xd707976cd0) returned 1 [0091.366] SetLastError (dwErrCode=0x0) [0091.367] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\140\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.367] GetLastError () returned 0x5 [0091.367] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0) returned 0 [0091.367] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.367] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.367] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.367] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0091.367] FindClose (in: hFindFile=0xd7079a0d50 | out: hFindFile=0xd7079a0d50) returned 1 [0091.367] SetLastError (dwErrCode=0x0) [0091.367] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\140\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.367] GetLastError () returned 0x5 [0091.367] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0091.367] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.367] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0091.367] FindClose (in: hFindFile=0xd7079a0e70 | out: hFindFile=0xd7079a0e70) returned 1 [0091.367] SetLastError (dwErrCode=0x0) [0091.367] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.368] GetLastError () returned 0x5 [0091.368] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0091.368] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.368] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0091.368] FindClose (in: hFindFile=0xd7079a0930 | out: hFindFile=0xd7079a0930) returned 1 [0091.368] SetLastError (dwErrCode=0x0) [0091.368] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.368] GetLastError () returned 0x5 [0091.368] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0091.368] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.368] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0091.368] SetLastError (dwErrCode=0x0) [0091.368] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.368] GetLastError () returned 0x5 [0091.368] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0091.368] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.368] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd707976d30 [0091.369] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0091.369] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0091.369] SetLastError (dwErrCode=0x0) [0091.369] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft office\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.369] GetLastError () returned 0x5 [0091.369] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0091.369] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.369] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd707977510 [0091.371] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.372] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.372] SetLastError (dwErrCode=0x0) [0091.372] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft office\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.373] GetLastError () returned 0x5 [0091.373] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0091.373] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.373] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\1033\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976cd0 [0091.375] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.375] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.375] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.375] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.375] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.375] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.375] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.375] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0091.375] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\1033\\OWSHLP10.CHM", dwFileAttributes=0x80) returned 0 [0091.375] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\1033\\OWSHLP10.CHM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft office\\office16\\1033\\owshlp10.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.376] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.376] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0091.376] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.376] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.376] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.376] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0091.376] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\1033\\VBAOWS10.CHM", dwFileAttributes=0x80) returned 0 [0091.376] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\1033\\VBAOWS10.CHM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft office\\office16\\1033\\vbaows10.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.376] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.377] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0091.377] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.377] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0091.377] FindClose (in: hFindFile=0xd707976cd0 | out: hFindFile=0xd707976cd0) returned 1 [0091.377] SetLastError (dwErrCode=0x0) [0091.377] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft office\\office16\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.380] GetLastError () returned 0x5 [0091.380] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0091.380] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.380] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.380] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.380] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.380] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.380] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.380] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.380] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.380] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.380] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.380] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.380] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.380] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.380] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.380] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.380] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.380] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.380] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.380] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.380] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.380] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.380] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.381] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.381] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.381] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.381] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.381] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.381] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.381] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.381] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.381] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.381] SetLastError (dwErrCode=0x0) [0091.381] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft office\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.381] GetLastError () returned 0x5 [0091.381] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0091.381] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.382] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976910 [0091.385] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.387] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.387] SetLastError (dwErrCode=0x0) [0091.387] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft office\\office16\\dcf\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.387] GetLastError () returned 0x5 [0091.387] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0) returned 0 [0091.387] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.387] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\1033\\*.*", lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 0xd707976cd0 [0091.388] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.388] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.388] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 0 [0091.388] FindClose (in: hFindFile=0xd707976cd0 | out: hFindFile=0xd707976cd0) returned 1 [0091.388] SetLastError (dwErrCode=0x0) [0091.388] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft office\\office16\\dcf\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.388] GetLastError () returned 0x5 [0091.388] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0) returned 0 [0091.388] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.389] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.389] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0091.389] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\AccessCompare.rdlc", dwFileAttributes=0x80) returned 0 [0091.389] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\AccessCompare.rdlc" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft office\\office16\\dcf\\accesscompare.rdlc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.389] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.389] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0091.389] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.389] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0091.390] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\AccessMessageDismissal.txt", dwFileAttributes=0x80) returned 0 [0091.390] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\AccessMessageDismissal.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft office\\office16\\dcf\\accessmessagedismissal.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.391] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.391] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0091.391] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.391] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.391] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.391] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.391] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.391] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.391] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.391] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.391] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.391] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.391] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.391] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.391] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.391] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.391] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.391] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.391] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.391] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0091.391] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\EmptyReport.rdlc", dwFileAttributes=0x80) returned 0 [0091.392] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\EmptyReport.rdlc" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft office\\office16\\dcf\\emptyreport.rdlc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.392] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.392] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0091.392] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.392] SetLastError (dwErrCode=0x0) [0091.392] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft office\\office16\\dcf\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.392] GetLastError () returned 0x5 [0091.392] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0) returned 0 [0091.392] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.392] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\en\\*.*", lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 0xd707976cd0 [0091.394] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.394] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.394] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.394] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.394] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.394] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.395] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.395] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0091.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\en\\DatabaseCompare.HxS", dwFileAttributes=0x80) returned 0 [0091.395] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\en\\DatabaseCompare.HxS" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft office\\office16\\dcf\\en\\databasecompare.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.396] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.396] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0091.396] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.396] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0091.396] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\en\\DatabaseCompare_col.hxc", dwFileAttributes=0x80) returned 0 [0091.397] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\en\\DatabaseCompare_col.hxc" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft office\\office16\\dcf\\en\\databasecompare_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.397] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.397] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0091.397] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.397] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0091.398] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\en\\DatabaseCompare_col.hxt", dwFileAttributes=0x80) returned 0 [0091.398] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\en\\DatabaseCompare_col.hxt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft office\\office16\\dcf\\en\\databasecompare_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.398] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.398] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0091.398] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.398] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0091.399] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\en\\DatabaseCompare_f_col.hxk", dwFileAttributes=0x80) returned 0 [0091.399] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\en\\DatabaseCompare_f_col.hxk" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft office\\office16\\dcf\\en\\databasecompare_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.399] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.399] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0091.399] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.399] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0091.400] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\en\\DatabaseCompare_k_col.hxk", dwFileAttributes=0x80) returned 0 [0091.400] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\en\\DatabaseCompare_k_col.hxk" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft office\\office16\\dcf\\en\\databasecompare_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.400] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.400] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0091.400] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.400] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0091.401] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\en\\SpreadsheetCompare.HxS", dwFileAttributes=0x80) returned 0 [0091.403] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\en\\SpreadsheetCompare.HxS" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft office\\office16\\dcf\\en\\spreadsheetcompare.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.404] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.404] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0091.404] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.404] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0091.405] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\en\\SpreadsheetCompare_col.hxc", dwFileAttributes=0x80) returned 0 [0091.405] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\en\\SpreadsheetCompare_col.hxc" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft office\\office16\\dcf\\en\\spreadsheetcompare_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.405] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.405] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0091.405] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.405] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0091.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\en\\SpreadsheetCompare_col.hxt", dwFileAttributes=0x80) returned 0 [0091.406] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\en\\SpreadsheetCompare_col.hxt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft office\\office16\\dcf\\en\\spreadsheetcompare_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.406] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.406] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0091.406] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.406] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0091.407] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\en\\SpreadsheetCompare_f_col.hxk", dwFileAttributes=0x80) returned 0 [0091.407] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\en\\SpreadsheetCompare_f_col.hxk" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft office\\office16\\dcf\\en\\spreadsheetcompare_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.407] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.407] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0091.408] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.408] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0091.408] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\en\\SpreadsheetCompare_k_col.hxk", dwFileAttributes=0x80) returned 0 [0091.408] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\en\\SpreadsheetCompare_k_col.hxk" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft office\\office16\\dcf\\en\\spreadsheetcompare_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.408] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.408] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0091.409] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.409] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.409] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.409] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 0 [0091.409] FindClose (in: hFindFile=0xd707976cd0 | out: hFindFile=0xd707976cd0) returned 1 [0091.409] SetLastError (dwErrCode=0x0) [0091.409] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\en\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft office\\office16\\dcf\\en\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.412] GetLastError () returned 0x5 [0091.412] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0) returned 0 [0091.412] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.412] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.412] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0091.412] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\ExcelMessageDismissal.txt", dwFileAttributes=0x80) returned 0 [0091.413] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\ExcelMessageDismissal.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft office\\office16\\dcf\\excelmessagedismissal.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.413] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.413] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0091.413] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.413] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.413] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.413] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.413] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.413] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.413] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.414] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.414] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.414] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.414] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.414] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.414] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.414] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.414] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.414] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.414] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.414] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.414] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.414] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.414] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.414] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.414] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.414] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.414] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.414] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.414] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.414] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.414] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.414] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.414] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.414] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.415] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.415] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.415] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.415] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.415] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.415] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.415] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.415] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.415] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.415] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.415] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.415] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.415] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.415] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.415] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.415] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0091.415] FindClose (in: hFindFile=0xd707976910 | out: hFindFile=0xd707976910) returned 1 [0091.415] SetLastError (dwErrCode=0x0) [0091.415] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft office\\office16\\dcf\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.415] GetLastError () returned 0x5 [0091.415] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0091.415] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.415] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.415] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.415] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.415] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.415] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0091.416] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\Interceptor.tlb", dwFileAttributes=0x80) returned 0 [0091.421] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\Interceptor.tlb" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft office\\office16\\interceptor.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.421] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.422] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0091.422] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.422] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.422] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.422] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.422] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.422] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.422] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.422] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.422] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.422] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.422] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.422] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.422] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.422] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.422] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.422] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.422] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.422] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.422] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.422] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.422] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.422] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.422] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.422] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.422] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.422] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.422] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.422] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.422] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.422] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.422] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.422] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.422] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.422] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0091.422] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0091.422] SetLastError (dwErrCode=0x0) [0091.422] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft office\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.423] GetLastError () returned 0x5 [0091.423] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0091.423] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.423] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0091.423] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0091.423] SetLastError (dwErrCode=0x0) [0091.423] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft office\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.423] GetLastError () returned 0x5 [0091.423] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0091.423] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.423] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0091.423] SetLastError (dwErrCode=0x0) [0091.423] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.424] GetLastError () returned 0x5 [0091.424] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0091.424] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.424] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd707976d30 [0091.425] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0091.425] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0091.425] SetLastError (dwErrCode=0x0) [0091.425] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft sql server\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.426] GetLastError () returned 0x5 [0091.426] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0091.426] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.426] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\110\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd707976910 [0091.426] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.426] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.426] SetLastError (dwErrCode=0x0) [0091.426] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\110\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft sql server\\110\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.426] GetLastError () returned 0x5 [0091.426] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0091.426] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.426] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\110\\Shared\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976cd0 [0091.427] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.427] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0091.427] FindClose (in: hFindFile=0xd707976cd0 | out: hFindFile=0xd707976cd0) returned 1 [0091.427] SetLastError (dwErrCode=0x0) [0091.427] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\110\\Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft sql server\\110\\shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.427] GetLastError () returned 0x5 [0091.427] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0091.427] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.427] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0091.427] FindClose (in: hFindFile=0xd707976910 | out: hFindFile=0xd707976910) returned 1 [0091.427] SetLastError (dwErrCode=0x0) [0091.427] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\110\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft sql server\\110\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.427] GetLastError () returned 0x5 [0091.427] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0091.427] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.427] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0091.427] SetLastError (dwErrCode=0x0) [0091.428] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft sql server\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.428] GetLastError () returned 0x5 [0091.428] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0091.428] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.428] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\130\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd707976e50 [0091.428] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.428] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.428] SetLastError (dwErrCode=0x0) [0091.428] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\130\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft sql server\\130\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.428] GetLastError () returned 0x5 [0091.428] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0091.428] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.428] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\130\\Shared\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707977510 [0091.429] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.429] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.429] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0091.429] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0091.430] SetLastError (dwErrCode=0x0) [0091.430] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\130\\Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft sql server\\130\\shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.430] GetLastError () returned 0x5 [0091.430] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0091.430] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.430] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0091.430] FindClose (in: hFindFile=0xd707976e50 | out: hFindFile=0xd707976e50) returned 1 [0091.430] SetLastError (dwErrCode=0x0) [0091.430] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\130\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft sql server\\130\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.430] GetLastError () returned 0x5 [0091.430] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0091.430] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.430] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0091.430] SetLastError (dwErrCode=0x0) [0091.430] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft sql server\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.430] GetLastError () returned 0x5 [0091.431] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0091.431] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.431] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\140\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd707977510 [0091.431] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.431] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.431] SetLastError (dwErrCode=0x0) [0091.431] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\140\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft sql server\\140\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.432] GetLastError () returned 0x5 [0091.432] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0091.432] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.432] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\140\\Shared\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976910 [0091.432] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.432] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0091.432] FindClose (in: hFindFile=0xd707976910 | out: hFindFile=0xd707976910) returned 1 [0091.432] SetLastError (dwErrCode=0x0) [0091.432] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\140\\Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft sql server\\140\\shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.433] GetLastError () returned 0x5 [0091.433] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0091.433] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.433] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0091.433] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0091.433] SetLastError (dwErrCode=0x0) [0091.433] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\140\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft sql server\\140\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.433] GetLastError () returned 0x5 [0091.433] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0091.433] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.433] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0091.433] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0091.433] SetLastError (dwErrCode=0x0) [0091.433] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft sql server\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.433] GetLastError () returned 0x5 [0091.433] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0091.433] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.433] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0091.434] SetLastError (dwErrCode=0x0) [0091.434] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.434] GetLastError () returned 0x5 [0091.434] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0091.434] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.434] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft.NET\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd707977510 [0091.434] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0091.434] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0091.434] SetLastError (dwErrCode=0x0) [0091.434] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft.NET\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft.net\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.435] GetLastError () returned 0x5 [0091.435] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0091.435] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.435] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft.NET\\ADOMD.NET\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd707976d30 [0091.435] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.435] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.435] SetLastError (dwErrCode=0x0) [0091.435] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft.NET\\ADOMD.NET\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft.net\\adomd.net\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.435] GetLastError () returned 0x5 [0091.435] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0091.435] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.435] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft.NET\\ADOMD.NET\\110\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976910 [0091.436] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.436] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0091.436] FindClose (in: hFindFile=0xd707976910 | out: hFindFile=0xd707976910) returned 1 [0091.436] SetLastError (dwErrCode=0x0) [0091.436] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft.NET\\ADOMD.NET\\110\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft.net\\adomd.net\\110\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.436] GetLastError () returned 0x5 [0091.436] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0091.436] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.436] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.436] SetLastError (dwErrCode=0x0) [0091.436] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft.NET\\ADOMD.NET\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft.net\\adomd.net\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.436] GetLastError () returned 0x5 [0091.436] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0091.437] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.437] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft.NET\\ADOMD.NET\\130\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976910 [0091.437] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.437] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.437] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0091.437] FindClose (in: hFindFile=0xd707976910 | out: hFindFile=0xd707976910) returned 1 [0091.437] SetLastError (dwErrCode=0x0) [0091.437] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft.NET\\ADOMD.NET\\130\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft.net\\adomd.net\\130\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.437] GetLastError () returned 0x5 [0091.437] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0091.438] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.438] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.438] SetLastError (dwErrCode=0x0) [0091.438] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft.NET\\ADOMD.NET\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft.net\\adomd.net\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.438] GetLastError () returned 0x5 [0091.438] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0091.438] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.438] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft.NET\\ADOMD.NET\\140\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976cd0 [0091.438] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.438] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0091.438] FindClose (in: hFindFile=0xd707976cd0 | out: hFindFile=0xd707976cd0) returned 1 [0091.439] SetLastError (dwErrCode=0x0) [0091.439] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft.NET\\ADOMD.NET\\140\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft.net\\adomd.net\\140\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.439] GetLastError () returned 0x5 [0091.439] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0091.439] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.439] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0091.439] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0091.440] SetLastError (dwErrCode=0x0) [0091.440] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft.NET\\ADOMD.NET\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft.net\\adomd.net\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.440] GetLastError () returned 0x5 [0091.440] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0091.440] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.440] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0091.440] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0091.440] SetLastError (dwErrCode=0x0) [0091.440] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft.NET\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft.net\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.440] GetLastError () returned 0x5 [0091.440] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0091.440] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.440] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0091.440] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0091.440] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0091.440] SetLastError (dwErrCode=0x0) [0091.440] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.441] GetLastError () returned 0x5 [0091.441] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0091.441] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.441] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0091.441] SetLastError (dwErrCode=0x0) [0091.441] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.441] GetLastError () returned 0x5 [0091.441] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0091.441] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.441] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\System\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd707976910 [0091.442] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0091.442] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0091.442] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0091.442] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0091.442] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0091.442] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0091.442] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0091.442] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0091.442] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0091.442] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0091.442] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0091.442] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0091.442] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0091.442] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0091.442] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0091.442] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0091.442] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0091.442] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0091.442] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0091.442] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0091.442] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0091.442] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0091.442] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\System\\MSCOMCTL.OCX", dwFileAttributes=0x80) returned 0 [0091.443] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\System\\MSCOMCTL.OCX" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\system\\mscomctl.ocx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.443] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.443] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0091.443] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0091.443] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0091.444] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0091.444] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0091.444] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0091.444] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0091.444] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0091.444] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0091.444] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0091.444] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0091.444] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0091.444] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0091.444] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0091.444] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\System\\VEN2232.OLB", dwFileAttributes=0x80) returned 0 [0091.444] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\System\\VEN2232.OLB" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\system\\ven2232.olb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.445] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.445] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0091.445] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0091.445] FindClose (in: hFindFile=0xd707976910 | out: hFindFile=0xd707976910) returned 1 [0091.446] SetLastError (dwErrCode=0x0) [0091.446] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\System\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\system\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.449] GetLastError () returned 0x5 [0091.449] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0091.449] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.449] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0091.449] SetLastError (dwErrCode=0x0) [0091.449] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.449] GetLastError () returned 0x5 [0091.449] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0091.449] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.449] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\SystemX86\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd707976910 [0091.451] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0091.451] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0091.451] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0091.451] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0091.451] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0091.451] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0091.452] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0091.452] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0091.452] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0091.452] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0091.452] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0091.452] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0091.452] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0091.452] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0091.452] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0091.452] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0091.452] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0091.452] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0091.452] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\SystemX86\\mscomct2.ocx", dwFileAttributes=0x80) returned 0 [0091.453] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\SystemX86\\mscomct2.ocx" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\systemx86\\mscomct2.ocx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.453] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.453] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0091.453] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0091.453] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0091.453] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0091.453] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0091.453] FindClose (in: hFindFile=0xd707976910 | out: hFindFile=0xd707976910) returned 1 [0091.454] SetLastError (dwErrCode=0x0) [0091.454] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\SystemX86\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\systemx86\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.457] GetLastError () returned 0x5 [0091.457] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0091.457] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.457] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0091.457] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0091.457] FindClose (in: hFindFile=0xd7079a0bd0 | out: hFindFile=0xd7079a0bd0) returned 1 [0091.457] SetLastError (dwErrCode=0x0) [0091.457] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.458] GetLastError () returned 0x5 [0091.458] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0091.458] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.458] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0 [0091.458] FindClose (in: hFindFile=0xd707976bb0 | out: hFindFile=0xd707976bb0) returned 1 [0091.458] SetLastError (dwErrCode=0x0) [0091.458] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.458] GetLastError () returned 0x5 [0091.458] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0091.458] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.458] FindNextFileW (in: hFindFile=0xd707976eb0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0091.458] SetLastError (dwErrCode=0x0) [0091.458] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.459] GetLastError () returned 0x5 [0091.459] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0091.459] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.459] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\*.*", lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0xd707976910 [0091.459] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0091.459] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0091.459] SetLastError (dwErrCode=0x0) [0091.459] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.459] GetLastError () returned 0x5 [0091.459] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0091.459] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.459] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Apply\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd707976f10 [0091.459] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0091.460] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0091.460] SetLastError (dwErrCode=0x0) [0091.460] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Apply\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\apply\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.460] GetLastError () returned 0x5 [0091.460] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0091.460] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.460] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Apply\\FilesInUse\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd707976bb0 [0091.460] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0091.460] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0091.460] SetLastError (dwErrCode=0x0) [0091.460] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Apply\\FilesInUse\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\apply\\filesinuse\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.461] GetLastError () returned 0x5 [0091.461] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0091.461] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.461] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Apply\\FilesInUse\\6EED28D1-CF58-4796-8953-FAA74D60E25C\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd707976cd0 [0091.461] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0091.461] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0091.461] FindClose (in: hFindFile=0xd707976cd0 | out: hFindFile=0xd707976cd0) returned 1 [0091.461] SetLastError (dwErrCode=0x0) [0091.461] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Apply\\FilesInUse\\6EED28D1-CF58-4796-8953-FAA74D60E25C\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\apply\\filesinuse\\6eed28d1-cf58-4796-8953-faa74d60e25c\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.461] GetLastError () returned 0x5 [0091.461] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0091.462] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.462] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0091.462] SetLastError (dwErrCode=0x0) [0091.462] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Apply\\FilesInUse\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\apply\\filesinuse\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.462] GetLastError () returned 0x5 [0091.462] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0091.462] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.462] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Apply\\FilesInUse\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd707976cd0 [0091.462] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0091.462] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0091.462] FindClose (in: hFindFile=0xd707976cd0 | out: hFindFile=0xd707976cd0) returned 1 [0091.462] SetLastError (dwErrCode=0x0) [0091.462] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Apply\\FilesInUse\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\apply\\filesinuse\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.463] GetLastError () returned 0x5 [0091.463] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0091.463] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.463] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0091.463] FindClose (in: hFindFile=0xd707976bb0 | out: hFindFile=0xd707976bb0) returned 1 [0091.463] SetLastError (dwErrCode=0x0) [0091.463] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Apply\\FilesInUse\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\apply\\filesinuse\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.463] GetLastError () returned 0x5 [0091.463] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0091.463] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.463] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0091.463] FindClose (in: hFindFile=0xd707976f10 | out: hFindFile=0xd707976f10) returned 1 [0091.463] SetLastError (dwErrCode=0x0) [0091.463] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Apply\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\apply\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.464] GetLastError () returned 0x5 [0091.464] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0091.464] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.464] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0091.464] SetLastError (dwErrCode=0x0) [0091.464] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.464] GetLastError () returned 0x5 [0091.464] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0091.464] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.464] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Detection\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd707976bb0 [0091.464] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0091.464] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0091.464] SetLastError (dwErrCode=0x0) [0091.464] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Detection\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\detection\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.465] GetLastError () returned 0x5 [0091.465] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0091.465] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.465] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Detection\\Version\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd707976e50 [0091.467] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0091.467] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0091.467] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0091.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Detection\\Version\\v64.hash", dwFileAttributes=0x80) returned 0 [0091.468] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Detection\\Version\\v64.hash" (normalized: "c:\\program files\\microsoft office\\updates\\detection\\version\\v64.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.468] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.468] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0091.469] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0091.469] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0091.469] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Detection\\Version\\VersionDescriptor.xml", dwFileAttributes=0x80) returned 0 [0091.469] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Detection\\Version\\VersionDescriptor.xml" (normalized: "c:\\program files\\microsoft office\\updates\\detection\\version\\versiondescriptor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.469] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.469] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0091.470] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0091.470] FindClose (in: hFindFile=0xd707976e50 | out: hFindFile=0xd707976e50) returned 1 [0091.471] SetLastError (dwErrCode=0x0) [0091.471] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Detection\\Version\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\detection\\version\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.474] GetLastError () returned 0x5 [0091.474] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0091.474] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.474] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0091.474] FindClose (in: hFindFile=0xd707976bb0 | out: hFindFile=0xd707976bb0) returned 1 [0091.474] SetLastError (dwErrCode=0x0) [0091.474] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Detection\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\detection\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.475] GetLastError () returned 0x5 [0091.475] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0091.475] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.475] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0091.475] SetLastError (dwErrCode=0x0) [0091.475] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.475] GetLastError () returned 0x5 [0091.475] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0091.475] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.475] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd707976bb0 [0091.475] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0091.475] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0091.475] SetLastError (dwErrCode=0x0) [0091.475] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.476] GetLastError () returned 0x5 [0091.476] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0091.476] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.476] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd707976cd0 [0091.476] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0091.476] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0091.476] SetLastError (dwErrCode=0x0) [0091.476] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.477] GetLastError () returned 0x5 [0091.477] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0091.477] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.477] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd707977510 [0091.477] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0091.477] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0091.477] SetLastError (dwErrCode=0x0) [0091.477] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.477] GetLastError () returned 0x5 [0091.477] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0091.477] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.477] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd707976f10 [0091.479] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.479] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.479] SetLastError (dwErrCode=0x0) [0091.479] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.479] GetLastError () returned 0x5 [0091.479] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0091.479] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.479] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd707976e50 [0091.479] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.479] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.480] SetLastError (dwErrCode=0x0) [0091.480] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.480] GetLastError () returned 0x5 [0091.480] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0) returned 0 [0091.480] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.480] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\*.*", lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 0xd707976d30 [0091.480] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.480] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.480] SetLastError (dwErrCode=0x0) [0091.480] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.480] GetLastError () returned 0x5 [0091.480] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4a330, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4a330, lpOverlapped=0x0) returned 0 [0091.481] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.481] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\*.*", lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 0xd7079a0e10 [0091.482] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.482] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.482] SetLastError (dwErrCode=0x0) [0091.482] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.482] GetLastError () returned 0x5 [0091.482] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.482] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.482] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\1033\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079a0d50 [0091.483] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.483] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.483] SetLastError (dwErrCode=0x0) [0091.483] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.484] GetLastError () returned 0x5 [0091.484] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.484] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.484] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\1033\\msotelemetryintl.dll\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0810 [0091.484] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.484] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.484] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0091.484] SetLastError (dwErrCode=0x0) [0091.484] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\1033\\msotelemetryintl.dll\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\1033\\msotelemetryintl.dll\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.484] GetLastError () returned 0x5 [0091.484] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.484] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.484] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.484] FindClose (in: hFindFile=0xd7079a0d50 | out: hFindFile=0xd7079a0d50) returned 1 [0091.484] SetLastError (dwErrCode=0x0) [0091.484] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.485] GetLastError () returned 0x5 [0091.485] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.485] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.485] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.485] SetLastError (dwErrCode=0x0) [0091.485] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.485] GetLastError () returned 0x5 [0091.485] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.485] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.485] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079a0d50 [0091.486] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.486] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.486] SetLastError (dwErrCode=0x0) [0091.486] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.487] GetLastError () returned 0x5 [0091.487] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.487] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.487] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0810 [0091.487] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.487] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.487] SetLastError (dwErrCode=0x0) [0091.487] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\microsoft power query for excel integrated\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.488] GetLastError () returned 0x5 [0091.488] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b48c20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b48c20, lpOverlapped=0x0) returned 0 [0091.488] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.488] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\*.*", lpFindFileData=0xd707b484c0 | out: lpFindFileData=0xd707b484c0) returned 0xd7079a0e70 [0091.488] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b484c0 | out: lpFindFileData=0xd707b484c0) returned 1 [0091.488] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b484c0 | out: lpFindFileData=0xd707b484c0) returned 1 [0091.488] SetLastError (dwErrCode=0x0) [0091.488] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.488] GetLastError () returned 0x5 [0091.488] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b48470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b48470, lpOverlapped=0x0) returned 0 [0091.488] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.488] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Document.XmlSerializers.dll\\*.*", lpFindFileData=0xd707b47d10 | out: lpFindFileData=0xd707b47d10) returned 0xd7079a0450 [0091.488] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b47d10 | out: lpFindFileData=0xd707b47d10) returned 1 [0091.489] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b47d10 | out: lpFindFileData=0xd707b47d10) returned 0 [0091.489] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0091.489] SetLastError (dwErrCode=0x0) [0091.489] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Document.XmlSerializers.dll\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\microsoft.mashup.document.xmlserializers.dll\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.489] GetLastError () returned 0x5 [0091.489] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b48470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b48470, lpOverlapped=0x0) returned 0 [0091.489] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.489] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b484c0 | out: lpFindFileData=0xd707b484c0) returned 0 [0091.489] FindClose (in: hFindFile=0xd7079a0e70 | out: hFindFile=0xd7079a0e70) returned 1 [0091.489] SetLastError (dwErrCode=0x0) [0091.489] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.489] GetLastError () returned 0x5 [0091.489] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b48c20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b48c20, lpOverlapped=0x0) returned 0 [0091.489] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.489] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.489] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0091.490] SetLastError (dwErrCode=0x0) [0091.490] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\microsoft power query for excel integrated\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.490] GetLastError () returned 0x5 [0091.490] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.490] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.490] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.490] SetLastError (dwErrCode=0x0) [0091.490] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.490] GetLastError () returned 0x5 [0091.490] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.490] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.490] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0810 [0091.491] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.491] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.491] SetLastError (dwErrCode=0x0) [0091.491] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.491] GetLastError () returned 0x5 [0091.491] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b48c20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b48c20, lpOverlapped=0x0) returned 0 [0091.491] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.491] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\da\\*.*", lpFindFileData=0xd707b484c0 | out: lpFindFileData=0xd707b484c0) returned 0xd7079a0ed0 [0091.492] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b484c0 | out: lpFindFileData=0xd707b484c0) returned 1 [0091.492] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b484c0 | out: lpFindFileData=0xd707b484c0) returned 1 [0091.492] SetLastError (dwErrCode=0x0) [0091.492] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\da\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\power view excel add-in\\da\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.492] GetLastError () returned 0x5 [0091.492] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b48470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b48470, lpOverlapped=0x0) returned 0 [0091.492] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.492] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\da\\AdHocReportingExcelClient.dll\\*.*", lpFindFileData=0xd707b47d10 | out: lpFindFileData=0xd707b47d10) returned 0xd7079a0bd0 [0091.492] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b47d10 | out: lpFindFileData=0xd707b47d10) returned 1 [0091.492] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b47d10 | out: lpFindFileData=0xd707b47d10) returned 0 [0091.492] FindClose (in: hFindFile=0xd7079a0bd0 | out: hFindFile=0xd7079a0bd0) returned 1 [0091.492] SetLastError (dwErrCode=0x0) [0091.493] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\da\\AdHocReportingExcelClient.dll\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\power view excel add-in\\da\\adhocreportingexcelclient.dll\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.493] GetLastError () returned 0x5 [0091.493] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b48470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b48470, lpOverlapped=0x0) returned 0 [0091.493] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.493] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b484c0 | out: lpFindFileData=0xd707b484c0) returned 0 [0091.493] FindClose (in: hFindFile=0xd7079a0ed0 | out: hFindFile=0xd7079a0ed0) returned 1 [0091.493] SetLastError (dwErrCode=0x0) [0091.493] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\da\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\power view excel add-in\\da\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.493] GetLastError () returned 0x5 [0091.493] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b48c20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b48c20, lpOverlapped=0x0) returned 0 [0091.493] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.493] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.493] SetLastError (dwErrCode=0x0) [0091.493] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.493] GetLastError () returned 0x5 [0091.493] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b48c20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b48c20, lpOverlapped=0x0) returned 0 [0091.494] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.494] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\et\\*.*", lpFindFileData=0xd707b484c0 | out: lpFindFileData=0xd707b484c0) returned 0xd7079a0450 [0091.494] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b484c0 | out: lpFindFileData=0xd707b484c0) returned 1 [0091.494] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b484c0 | out: lpFindFileData=0xd707b484c0) returned 1 [0091.494] SetLastError (dwErrCode=0x0) [0091.494] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\et\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\power view excel add-in\\et\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.494] GetLastError () returned 0x5 [0091.494] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b48470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b48470, lpOverlapped=0x0) returned 0 [0091.494] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.494] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\et\\AdHocReportingExcelClient.dll\\*.*", lpFindFileData=0xd707b47d10 | out: lpFindFileData=0xd707b47d10) returned 0xd7079a08d0 [0091.495] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b47d10 | out: lpFindFileData=0xd707b47d10) returned 1 [0091.495] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b47d10 | out: lpFindFileData=0xd707b47d10) returned 0 [0091.495] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0091.495] SetLastError (dwErrCode=0x0) [0091.495] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\et\\AdHocReportingExcelClient.dll\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\power view excel add-in\\et\\adhocreportingexcelclient.dll\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.495] GetLastError () returned 0x5 [0091.495] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b48470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b48470, lpOverlapped=0x0) returned 0 [0091.495] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.495] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b484c0 | out: lpFindFileData=0xd707b484c0) returned 0 [0091.495] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0091.495] SetLastError (dwErrCode=0x0) [0091.495] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\et\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\power view excel add-in\\et\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.495] GetLastError () returned 0x5 [0091.495] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b48c20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b48c20, lpOverlapped=0x0) returned 0 [0091.495] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.495] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.495] SetLastError (dwErrCode=0x0) [0091.495] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.496] GetLastError () returned 0x5 [0091.496] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b48c20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b48c20, lpOverlapped=0x0) returned 0 [0091.496] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.496] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hu\\*.*", lpFindFileData=0xd707b484c0 | out: lpFindFileData=0xd707b484c0) returned 0xd7079a08d0 [0091.496] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b484c0 | out: lpFindFileData=0xd707b484c0) returned 1 [0091.496] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b484c0 | out: lpFindFileData=0xd707b484c0) returned 1 [0091.496] SetLastError (dwErrCode=0x0) [0091.496] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hu\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\power view excel add-in\\hu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.497] GetLastError () returned 0x5 [0091.497] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b48470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b48470, lpOverlapped=0x0) returned 0 [0091.497] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.497] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hu\\AdHocReportingExcelClient.dll\\*.*", lpFindFileData=0xd707b47d10 | out: lpFindFileData=0xd707b47d10) returned 0xd7079a0930 [0091.497] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b47d10 | out: lpFindFileData=0xd707b47d10) returned 1 [0091.497] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b47d10 | out: lpFindFileData=0xd707b47d10) returned 0 [0091.497] FindClose (in: hFindFile=0xd7079a0930 | out: hFindFile=0xd7079a0930) returned 1 [0091.497] SetLastError (dwErrCode=0x0) [0091.497] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hu\\AdHocReportingExcelClient.dll\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\power view excel add-in\\hu\\adhocreportingexcelclient.dll\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.497] GetLastError () returned 0x5 [0091.497] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b48470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b48470, lpOverlapped=0x0) returned 0 [0091.497] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.497] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b484c0 | out: lpFindFileData=0xd707b484c0) returned 0 [0091.497] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0091.498] SetLastError (dwErrCode=0x0) [0091.498] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hu\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\power view excel add-in\\hu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.498] GetLastError () returned 0x5 [0091.498] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b48c20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b48c20, lpOverlapped=0x0) returned 0 [0091.498] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.498] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.498] SetLastError (dwErrCode=0x0) [0091.498] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.498] GetLastError () returned 0x5 [0091.498] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b48c20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b48c20, lpOverlapped=0x0) returned 0 [0091.498] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.498] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\tr\\*.*", lpFindFileData=0xd707b484c0 | out: lpFindFileData=0xd707b484c0) returned 0xd7079a0450 [0091.498] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b484c0 | out: lpFindFileData=0xd707b484c0) returned 1 [0091.498] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b484c0 | out: lpFindFileData=0xd707b484c0) returned 1 [0091.498] SetLastError (dwErrCode=0x0) [0091.498] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\tr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\power view excel add-in\\tr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.499] GetLastError () returned 0x5 [0091.499] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b48470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b48470, lpOverlapped=0x0) returned 0 [0091.499] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.499] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\tr\\AdHocReportingExcelClient.dll\\*.*", lpFindFileData=0xd707b47d10 | out: lpFindFileData=0xd707b47d10) returned 0xd7079a08d0 [0091.499] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b47d10 | out: lpFindFileData=0xd707b47d10) returned 1 [0091.499] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b47d10 | out: lpFindFileData=0xd707b47d10) returned 0 [0091.499] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0091.499] SetLastError (dwErrCode=0x0) [0091.499] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\tr\\AdHocReportingExcelClient.dll\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\power view excel add-in\\tr\\adhocreportingexcelclient.dll\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.499] GetLastError () returned 0x5 [0091.499] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b48470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b48470, lpOverlapped=0x0) returned 0 [0091.499] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.499] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b484c0 | out: lpFindFileData=0xd707b484c0) returned 0 [0091.499] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0091.499] SetLastError (dwErrCode=0x0) [0091.499] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\tr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\power view excel add-in\\tr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.500] GetLastError () returned 0x5 [0091.500] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b48c20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b48c20, lpOverlapped=0x0) returned 0 [0091.500] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.500] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.500] SetLastError (dwErrCode=0x0) [0091.500] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.500] GetLastError () returned 0x5 [0091.500] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b48c20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b48c20, lpOverlapped=0x0) returned 0 [0091.500] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.500] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHT\\*.*", lpFindFileData=0xd707b484c0 | out: lpFindFileData=0xd707b484c0) returned 0xd7079a0e70 [0091.501] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b484c0 | out: lpFindFileData=0xd707b484c0) returned 1 [0091.501] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b484c0 | out: lpFindFileData=0xd707b484c0) returned 1 [0091.501] SetLastError (dwErrCode=0x0) [0091.501] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHT\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\power view excel add-in\\zh-cht\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.501] GetLastError () returned 0x5 [0091.501] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b48470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b48470, lpOverlapped=0x0) returned 0 [0091.501] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.501] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHT\\AdHocReportingExcelClient.dll\\*.*", lpFindFileData=0xd707b47d10 | out: lpFindFileData=0xd707b47d10) returned 0xd7079a0ed0 [0091.501] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b47d10 | out: lpFindFileData=0xd707b47d10) returned 1 [0091.501] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b47d10 | out: lpFindFileData=0xd707b47d10) returned 0 [0091.501] FindClose (in: hFindFile=0xd7079a0ed0 | out: hFindFile=0xd7079a0ed0) returned 1 [0091.501] SetLastError (dwErrCode=0x0) [0091.501] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHT\\AdHocReportingExcelClient.dll\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\power view excel add-in\\zh-cht\\adhocreportingexcelclient.dll\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.501] GetLastError () returned 0x5 [0091.501] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b48470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b48470, lpOverlapped=0x0) returned 0 [0091.501] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.501] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b484c0 | out: lpFindFileData=0xd707b484c0) returned 0 [0091.501] FindClose (in: hFindFile=0xd7079a0e70 | out: hFindFile=0xd7079a0e70) returned 1 [0091.502] SetLastError (dwErrCode=0x0) [0091.502] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHT\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\power view excel add-in\\zh-cht\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.502] GetLastError () returned 0x5 [0091.502] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b48c20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b48c20, lpOverlapped=0x0) returned 0 [0091.502] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.502] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.502] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0091.502] SetLastError (dwErrCode=0x0) [0091.502] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.502] GetLastError () returned 0x5 [0091.502] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.502] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.502] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.502] SetLastError (dwErrCode=0x0) [0091.502] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.503] GetLastError () returned 0x5 [0091.503] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.503] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.503] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0810 [0091.503] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.503] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.503] SetLastError (dwErrCode=0x0) [0091.503] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.503] GetLastError () returned 0x5 [0091.503] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b48c20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b48c20, lpOverlapped=0x0) returned 0 [0091.503] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.503] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\*.*", lpFindFileData=0xd707b484c0 | out: lpFindFileData=0xd707b484c0) returned 0xd7079a0ed0 [0091.504] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b484c0 | out: lpFindFileData=0xd707b484c0) returned 1 [0091.504] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b484c0 | out: lpFindFileData=0xd707b484c0) returned 1 [0091.504] SetLastError (dwErrCode=0x0) [0091.504] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.504] GetLastError () returned 0x5 [0091.504] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b48470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b48470, lpOverlapped=0x0) returned 0 [0091.504] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.504] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1049\\*.*", lpFindFileData=0xd707b47d10 | out: lpFindFileData=0xd707b47d10) returned 0xd7079a08d0 [0091.505] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b47d10 | out: lpFindFileData=0xd707b47d10) returned 1 [0091.505] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b47d10 | out: lpFindFileData=0xd707b47d10) returned 1 [0091.505] SetLastError (dwErrCode=0x0) [0091.505] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1049\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1049\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.505] GetLastError () returned 0x5 [0091.505] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b47cc0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b47cc0, lpOverlapped=0x0) returned 0 [0091.505] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.505] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1049\\PowerPivotExcelClientAddIn.rll\\*.*", lpFindFileData=0xd707b47560 | out: lpFindFileData=0xd707b47560) returned 0xd7079a0450 [0091.505] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b47560 | out: lpFindFileData=0xd707b47560) returned 1 [0091.507] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b47560 | out: lpFindFileData=0xd707b47560) returned 0 [0091.507] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0091.508] SetLastError (dwErrCode=0x0) [0091.508] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1049\\PowerPivotExcelClientAddIn.rll\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1049\\powerpivotexcelclientaddin.rll\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.508] GetLastError () returned 0x5 [0091.508] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b47cc0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b47cc0, lpOverlapped=0x0) returned 0 [0091.508] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.508] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b47d10 | out: lpFindFileData=0xd707b47d10) returned 0 [0091.508] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0091.509] SetLastError (dwErrCode=0x0) [0091.509] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1049\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1049\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.509] GetLastError () returned 0x5 [0091.509] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b48470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b48470, lpOverlapped=0x0) returned 0 [0091.509] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.509] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b484c0 | out: lpFindFileData=0xd707b484c0) returned 1 [0091.509] SetLastError (dwErrCode=0x0) [0091.509] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.509] GetLastError () returned 0x5 [0091.509] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b48470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b48470, lpOverlapped=0x0) returned 0 [0091.509] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.509] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1051\\*.*", lpFindFileData=0xd707b47d10 | out: lpFindFileData=0xd707b47d10) returned 0xd7079d9990 [0091.510] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b47d10 | out: lpFindFileData=0xd707b47d10) returned 1 [0091.510] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b47d10 | out: lpFindFileData=0xd707b47d10) returned 1 [0091.510] SetLastError (dwErrCode=0x0) [0091.510] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1051\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1051\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.510] GetLastError () returned 0x5 [0091.510] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b47cc0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b47cc0, lpOverlapped=0x0) returned 0 [0091.510] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.510] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1051\\PowerPivotExcelClientAddIn.rll\\*.*", lpFindFileData=0xd707b47560 | out: lpFindFileData=0xd707b47560) returned 0xd7079d9030 [0091.510] FindNextFileW (in: hFindFile=0xd7079d9030, lpFindFileData=0xd707b47560 | out: lpFindFileData=0xd707b47560) returned 1 [0091.510] FindNextFileW (in: hFindFile=0xd7079d9030, lpFindFileData=0xd707b47560 | out: lpFindFileData=0xd707b47560) returned 0 [0091.510] FindClose (in: hFindFile=0xd7079d9030 | out: hFindFile=0xd7079d9030) returned 1 [0091.510] SetLastError (dwErrCode=0x0) [0091.510] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1051\\PowerPivotExcelClientAddIn.rll\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1051\\powerpivotexcelclientaddin.rll\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.511] GetLastError () returned 0x5 [0091.511] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b47cc0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b47cc0, lpOverlapped=0x0) returned 0 [0091.511] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.511] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b47d10 | out: lpFindFileData=0xd707b47d10) returned 0 [0091.511] FindClose (in: hFindFile=0xd7079d9990 | out: hFindFile=0xd7079d9990) returned 1 [0091.511] SetLastError (dwErrCode=0x0) [0091.511] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1051\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1051\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.511] GetLastError () returned 0x5 [0091.511] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b48470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b48470, lpOverlapped=0x0) returned 0 [0091.511] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.511] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b484c0 | out: lpFindFileData=0xd707b484c0) returned 0 [0091.511] FindClose (in: hFindFile=0xd7079a0ed0 | out: hFindFile=0xd7079a0ed0) returned 1 [0091.511] SetLastError (dwErrCode=0x0) [0091.511] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.511] GetLastError () returned 0x5 [0091.511] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b48c20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b48c20, lpOverlapped=0x0) returned 0 [0091.512] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.512] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.512] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0091.512] SetLastError (dwErrCode=0x0) [0091.512] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.512] GetLastError () returned 0x5 [0091.512] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.512] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.512] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.512] FindClose (in: hFindFile=0xd7079a0d50 | out: hFindFile=0xd7079a0d50) returned 1 [0091.512] SetLastError (dwErrCode=0x0) [0091.512] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.512] GetLastError () returned 0x5 [0091.512] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.512] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.512] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.512] SetLastError (dwErrCode=0x0) [0091.512] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.513] GetLastError () returned 0x5 [0091.513] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.513] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.513] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\cpprestsdk.dll\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079d9030 [0091.513] FindNextFileW (in: hFindFile=0xd7079d9030, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.513] FindNextFileW (in: hFindFile=0xd7079d9030, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.513] FindClose (in: hFindFile=0xd7079d9030 | out: hFindFile=0xd7079d9030) returned 1 [0091.513] SetLastError (dwErrCode=0x0) [0091.513] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\cpprestsdk.dll\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\cpprestsdk.dll\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.513] GetLastError () returned 0x5 [0091.513] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.513] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.513] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.513] SetLastError (dwErrCode=0x0) [0091.513] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.514] GetLastError () returned 0x5 [0091.514] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.514] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.514] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\IEAWSDC.DLL\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079d9030 [0091.514] FindNextFileW (in: hFindFile=0xd7079d9030, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.514] FindNextFileW (in: hFindFile=0xd7079d9030, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.514] FindClose (in: hFindFile=0xd7079d9030 | out: hFindFile=0xd7079d9030) returned 1 [0091.514] SetLastError (dwErrCode=0x0) [0091.515] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\IEAWSDC.DLL\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\ieawsdc.dll\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.515] GetLastError () returned 0x5 [0091.515] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.515] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.515] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.515] SetLastError (dwErrCode=0x0) [0091.515] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.515] GetLastError () returned 0x5 [0091.515] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.515] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.515] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\microsoft.office.workflow.actions.proxy.dll\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079d9030 [0091.516] FindNextFileW (in: hFindFile=0xd7079d9030, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.516] FindNextFileW (in: hFindFile=0xd7079d9030, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.516] FindClose (in: hFindFile=0xd7079d9030 | out: hFindFile=0xd7079d9030) returned 1 [0091.516] SetLastError (dwErrCode=0x0) [0091.516] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\microsoft.office.workflow.actions.proxy.dll\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\microsoft.office.workflow.actions.proxy.dll\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.516] GetLastError () returned 0x5 [0091.516] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.516] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.516] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.516] SetLastError (dwErrCode=0x0) [0091.516] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.516] GetLastError () returned 0x5 [0091.516] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.516] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.516] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\microsoft.sharepoint.workflowactions.proxy.dll\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079d9030 [0091.517] FindNextFileW (in: hFindFile=0xd7079d9030, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.517] FindNextFileW (in: hFindFile=0xd7079d9030, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.517] FindClose (in: hFindFile=0xd7079d9030 | out: hFindFile=0xd7079d9030) returned 1 [0091.517] SetLastError (dwErrCode=0x0) [0091.517] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\microsoft.sharepoint.workflowactions.proxy.dll\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\microsoft.sharepoint.workflowactions.proxy.dll\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.517] GetLastError () returned 0x5 [0091.517] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.517] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.517] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.517] SetLastError (dwErrCode=0x0) [0091.517] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.517] GetLastError () returned 0x5 [0091.517] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.517] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.517] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\OMICAUT.DLL\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079d9030 [0091.517] FindNextFileW (in: hFindFile=0xd7079d9030, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.517] FindNextFileW (in: hFindFile=0xd7079d9030, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.517] FindClose (in: hFindFile=0xd7079d9030 | out: hFindFile=0xd7079d9030) returned 1 [0091.518] SetLastError (dwErrCode=0x0) [0091.518] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\OMICAUT.DLL\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\omicaut.dll\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.518] GetLastError () returned 0x5 [0091.518] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.518] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.518] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.518] SetLastError (dwErrCode=0x0) [0091.518] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.518] GetLastError () returned 0x5 [0091.518] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.518] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.518] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\SignalRClient.dll\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079d9030 [0091.519] FindNextFileW (in: hFindFile=0xd7079d9030, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.519] FindNextFileW (in: hFindFile=0xd7079d9030, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.519] FindClose (in: hFindFile=0xd7079d9030 | out: hFindFile=0xd7079d9030) returned 1 [0091.519] SetLastError (dwErrCode=0x0) [0091.519] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\SignalRClient.dll\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\signalrclient.dll\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.519] GetLastError () returned 0x5 [0091.519] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.519] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.519] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 0 [0091.519] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0091.519] SetLastError (dwErrCode=0x0) [0091.519] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.519] GetLastError () returned 0x5 [0091.519] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4a330, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4a330, lpOverlapped=0x0) returned 0 [0091.519] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.520] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 0 [0091.520] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0091.520] SetLastError (dwErrCode=0x0) [0091.520] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.520] GetLastError () returned 0x5 [0091.520] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0) returned 0 [0091.520] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.520] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0091.520] FindClose (in: hFindFile=0xd707976e50 | out: hFindFile=0xd707976e50) returned 1 [0091.520] SetLastError (dwErrCode=0x0) [0091.520] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.520] GetLastError () returned 0x5 [0091.520] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0091.520] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.520] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0091.520] FindClose (in: hFindFile=0xd707976f10 | out: hFindFile=0xd707976f10) returned 1 [0091.520] SetLastError (dwErrCode=0x0) [0091.520] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.521] GetLastError () returned 0x5 [0091.521] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0091.521] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.521] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0091.521] SetLastError (dwErrCode=0x0) [0091.521] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.521] GetLastError () returned 0x5 [0091.521] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0091.521] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.521] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\PackageManifests\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079d9390 [0091.521] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.521] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0091.521] FindClose (in: hFindFile=0xd7079d9390 | out: hFindFile=0xd7079d9390) returned 1 [0091.521] SetLastError (dwErrCode=0x0) [0091.521] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\PackageManifests\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\packagemanifests\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.522] GetLastError () returned 0x5 [0091.522] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0091.522] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.522] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0091.522] SetLastError (dwErrCode=0x0) [0091.522] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.522] GetLastError () returned 0x5 [0091.522] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0091.522] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.522] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079d9030 [0091.524] FindNextFileW (in: hFindFile=0xd7079d9030, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.524] FindNextFileW (in: hFindFile=0xd7079d9030, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.524] SetLastError (dwErrCode=0x0) [0091.524] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.524] GetLastError () returned 0x5 [0091.524] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0091.524] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.524] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Client\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079d9990 [0091.525] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.525] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0091.525] FindClose (in: hFindFile=0xd7079d9990 | out: hFindFile=0xd7079d9990) returned 1 [0091.525] SetLastError (dwErrCode=0x0) [0091.525] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Client\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\client\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.525] GetLastError () returned 0x5 [0091.525] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0091.525] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.525] FindNextFileW (in: hFindFile=0xd7079d9030, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.525] SetLastError (dwErrCode=0x0) [0091.525] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.525] GetLastError () returned 0x5 [0091.525] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0091.525] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.525] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\CLIPART\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079d9390 [0091.526] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.526] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.526] SetLastError (dwErrCode=0x0) [0091.526] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\CLIPART\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\clipart\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.526] GetLastError () returned 0x5 [0091.526] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0) returned 0 [0091.526] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.526] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\CLIPART\\PUB60COR\\*.*", lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 0xd7079d94b0 [0091.527] FindNextFileW (in: hFindFile=0xd7079d94b0, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.527] FindNextFileW (in: hFindFile=0xd7079d94b0, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 0 [0091.527] FindClose (in: hFindFile=0xd7079d94b0 | out: hFindFile=0xd7079d94b0) returned 1 [0091.528] SetLastError (dwErrCode=0x0) [0091.528] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\CLIPART\\PUB60COR\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\clipart\\pub60cor\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.528] GetLastError () returned 0x5 [0091.528] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0) returned 0 [0091.528] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.528] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.528] SetLastError (dwErrCode=0x0) [0091.528] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\CLIPART\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\clipart\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.528] GetLastError () returned 0x5 [0091.528] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0) returned 0 [0091.528] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.528] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\CLIPART\\Publisher\\*.*", lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 0xd7079d94b0 [0091.529] FindNextFileW (in: hFindFile=0xd7079d94b0, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.529] FindNextFileW (in: hFindFile=0xd7079d94b0, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.529] SetLastError (dwErrCode=0x0) [0091.529] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\CLIPART\\Publisher\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\clipart\\publisher\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.529] GetLastError () returned 0x5 [0091.529] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4a330, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4a330, lpOverlapped=0x0) returned 0 [0091.529] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.529] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\CLIPART\\Publisher\\Backgrounds\\*.*", lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 0xd7079d9990 [0091.529] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.529] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 0 [0091.529] FindClose (in: hFindFile=0xd7079d9990 | out: hFindFile=0xd7079d9990) returned 1 [0091.529] SetLastError (dwErrCode=0x0) [0091.529] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\CLIPART\\Publisher\\Backgrounds\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\clipart\\publisher\\backgrounds\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.530] GetLastError () returned 0x5 [0091.530] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4a330, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4a330, lpOverlapped=0x0) returned 0 [0091.530] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.530] FindNextFileW (in: hFindFile=0xd7079d94b0, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 0 [0091.530] FindClose (in: hFindFile=0xd7079d94b0 | out: hFindFile=0xd7079d94b0) returned 1 [0091.530] SetLastError (dwErrCode=0x0) [0091.530] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\CLIPART\\Publisher\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\clipart\\publisher\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.530] GetLastError () returned 0x5 [0091.530] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0) returned 0 [0091.530] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.530] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0091.530] FindClose (in: hFindFile=0xd7079d9390 | out: hFindFile=0xd7079d9390) returned 1 [0091.530] SetLastError (dwErrCode=0x0) [0091.530] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\CLIPART\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\clipart\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.531] GetLastError () returned 0x5 [0091.531] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0091.531] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.531] FindNextFileW (in: hFindFile=0xd7079d9030, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.531] SetLastError (dwErrCode=0x0) [0091.531] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.531] GetLastError () returned 0x5 [0091.531] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0091.531] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.531] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Document Themes 16\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079d94b0 [0091.533] FindNextFileW (in: hFindFile=0xd7079d94b0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.533] FindNextFileW (in: hFindFile=0xd7079d94b0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.533] SetLastError (dwErrCode=0x0) [0091.533] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Document Themes 16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\document themes 16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.533] GetLastError () returned 0x5 [0091.533] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0) returned 0 [0091.533] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.533] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Document Themes 16\\Theme Colors\\*.*", lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 0xd7079d9390 [0091.534] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.534] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 0 [0091.534] FindClose (in: hFindFile=0xd7079d9390 | out: hFindFile=0xd7079d9390) returned 1 [0091.534] SetLastError (dwErrCode=0x0) [0091.534] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Document Themes 16\\Theme Colors\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\document themes 16\\theme colors\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.534] GetLastError () returned 0x5 [0091.534] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0) returned 0 [0091.534] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.534] FindNextFileW (in: hFindFile=0xd7079d94b0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.534] SetLastError (dwErrCode=0x0) [0091.535] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Document Themes 16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\document themes 16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.535] GetLastError () returned 0x5 [0091.535] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0) returned 0 [0091.535] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.535] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Document Themes 16\\Theme Effects\\*.*", lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 0xd7079d9390 [0091.535] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.535] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 0 [0091.535] FindClose (in: hFindFile=0xd7079d9390 | out: hFindFile=0xd7079d9390) returned 1 [0091.535] SetLastError (dwErrCode=0x0) [0091.535] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Document Themes 16\\Theme Effects\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\document themes 16\\theme effects\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.536] GetLastError () returned 0x5 [0091.536] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0) returned 0 [0091.536] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.536] FindNextFileW (in: hFindFile=0xd7079d94b0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.536] SetLastError (dwErrCode=0x0) [0091.536] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Document Themes 16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\document themes 16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.536] GetLastError () returned 0x5 [0091.536] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0) returned 0 [0091.536] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.536] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Document Themes 16\\Theme Fonts\\*.*", lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 0xd7079d9990 [0091.536] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.536] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 0 [0091.536] FindClose (in: hFindFile=0xd7079d9990 | out: hFindFile=0xd7079d9990) returned 1 [0091.536] SetLastError (dwErrCode=0x0) [0091.537] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Document Themes 16\\Theme Fonts\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\document themes 16\\theme fonts\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.537] GetLastError () returned 0x5 [0091.537] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0) returned 0 [0091.537] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.537] FindNextFileW (in: hFindFile=0xd7079d94b0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0091.537] FindClose (in: hFindFile=0xd7079d94b0 | out: hFindFile=0xd7079d94b0) returned 1 [0091.537] SetLastError (dwErrCode=0x0) [0091.537] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Document Themes 16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\document themes 16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.537] GetLastError () returned 0x5 [0091.537] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0091.537] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.537] FindNextFileW (in: hFindFile=0xd7079d9030, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.537] SetLastError (dwErrCode=0x0) [0091.537] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.538] GetLastError () returned 0x5 [0091.538] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0091.538] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.538] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Flattener\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079d9990 [0091.539] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.539] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0091.539] FindClose (in: hFindFile=0xd7079d9990 | out: hFindFile=0xd7079d9990) returned 1 [0091.539] SetLastError (dwErrCode=0x0) [0091.539] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Flattener\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\flattener\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.539] GetLastError () returned 0x5 [0091.539] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0091.539] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.539] FindNextFileW (in: hFindFile=0xd7079d9030, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.539] SetLastError (dwErrCode=0x0) [0091.540] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.540] GetLastError () returned 0x5 [0091.540] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0091.540] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.540] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\fre\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079d9390 [0091.541] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.541] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0091.541] FindClose (in: hFindFile=0xd7079d9390 | out: hFindFile=0xd7079d9390) returned 1 [0091.541] SetLastError (dwErrCode=0x0) [0091.541] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\fre\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\fre\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.541] GetLastError () returned 0x5 [0091.541] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0091.541] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.541] FindNextFileW (in: hFindFile=0xd7079d9030, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.541] SetLastError (dwErrCode=0x0) [0091.541] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.541] GetLastError () returned 0x5 [0091.541] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0091.541] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.541] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Integration\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079d94b0 [0091.542] FindNextFileW (in: hFindFile=0xd7079d94b0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.542] FindNextFileW (in: hFindFile=0xd7079d94b0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0091.542] FindClose (in: hFindFile=0xd7079d94b0 | out: hFindFile=0xd7079d94b0) returned 1 [0091.542] SetLastError (dwErrCode=0x0) [0091.542] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Integration\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\integration\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.542] GetLastError () returned 0x5 [0091.542] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0091.542] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.542] FindNextFileW (in: hFindFile=0xd7079d9030, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.542] SetLastError (dwErrCode=0x0) [0091.542] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.542] GetLastError () returned 0x5 [0091.542] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0091.542] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.542] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Licenses\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079d9390 [0091.542] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.542] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0091.543] FindClose (in: hFindFile=0xd7079d9390 | out: hFindFile=0xd7079d9390) returned 1 [0091.543] SetLastError (dwErrCode=0x0) [0091.543] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Licenses\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\licenses\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.543] GetLastError () returned 0x5 [0091.543] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0091.543] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.543] FindNextFileW (in: hFindFile=0xd7079d9030, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.543] SetLastError (dwErrCode=0x0) [0091.543] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.543] GetLastError () returned 0x5 [0091.543] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0091.543] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.543] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Licenses16\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079d9990 [0091.543] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.543] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0091.544] FindClose (in: hFindFile=0xd7079d9990 | out: hFindFile=0xd7079d9990) returned 1 [0091.544] SetLastError (dwErrCode=0x0) [0091.544] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Licenses16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\licenses16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.544] GetLastError () returned 0x5 [0091.544] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0091.544] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.544] FindNextFileW (in: hFindFile=0xd7079d9030, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.544] SetLastError (dwErrCode=0x0) [0091.544] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.544] GetLastError () returned 0x5 [0091.544] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0091.544] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.544] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\loc\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079d9390 [0091.545] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.545] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0091.545] FindClose (in: hFindFile=0xd7079d9390 | out: hFindFile=0xd7079d9390) returned 1 [0091.548] SetLastError (dwErrCode=0x0) [0091.548] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\loc\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\loc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.548] GetLastError () returned 0x5 [0091.548] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0091.548] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.548] FindNextFileW (in: hFindFile=0xd7079d9030, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.548] SetLastError (dwErrCode=0x0) [0091.548] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.548] GetLastError () returned 0x5 [0091.548] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0091.548] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.548] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\mcxml\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079d9390 [0091.550] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.550] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.550] SetLastError (dwErrCode=0x0) [0091.550] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\mcxml\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\mcxml\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.550] GetLastError () returned 0x5 [0091.550] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0) returned 0 [0091.550] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.550] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\mcxml\\en-us\\*.*", lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 0xd7079d94b0 [0091.550] FindNextFileW (in: hFindFile=0xd7079d94b0, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.550] FindNextFileW (in: hFindFile=0xd7079d94b0, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 0 [0091.550] FindClose (in: hFindFile=0xd7079d94b0 | out: hFindFile=0xd7079d94b0) returned 1 [0091.550] SetLastError (dwErrCode=0x0) [0091.550] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\mcxml\\en-us\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\mcxml\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.551] GetLastError () returned 0x5 [0091.551] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0) returned 0 [0091.551] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.551] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.551] SetLastError (dwErrCode=0x0) [0091.551] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\mcxml\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\mcxml\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.551] GetLastError () returned 0x5 [0091.551] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0) returned 0 [0091.551] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.551] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\mcxml\\es-es\\*.*", lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 0xd7079d94b0 [0091.551] FindNextFileW (in: hFindFile=0xd7079d94b0, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.551] FindNextFileW (in: hFindFile=0xd7079d94b0, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 0 [0091.551] FindClose (in: hFindFile=0xd7079d94b0 | out: hFindFile=0xd7079d94b0) returned 1 [0091.551] SetLastError (dwErrCode=0x0) [0091.551] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\mcxml\\es-es\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\mcxml\\es-es\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.552] GetLastError () returned 0x5 [0091.552] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0) returned 0 [0091.552] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.552] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.552] SetLastError (dwErrCode=0x0) [0091.552] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\mcxml\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\mcxml\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.552] GetLastError () returned 0x5 [0091.552] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0) returned 0 [0091.552] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.552] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\mcxml\\fr-fr\\*.*", lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 0xd7079d9990 [0091.552] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.552] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 0 [0091.552] FindClose (in: hFindFile=0xd7079d9990 | out: hFindFile=0xd7079d9990) returned 1 [0091.552] SetLastError (dwErrCode=0x0) [0091.552] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\mcxml\\fr-fr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\mcxml\\fr-fr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.552] GetLastError () returned 0x5 [0091.552] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0) returned 0 [0091.552] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.552] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.553] SetLastError (dwErrCode=0x0) [0091.553] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\mcxml\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\mcxml\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.553] GetLastError () returned 0x5 [0091.553] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0) returned 0 [0091.553] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.553] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\mcxml\\x-none\\*.*", lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 0xd7079d94b0 [0091.553] FindNextFileW (in: hFindFile=0xd7079d94b0, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.553] FindNextFileW (in: hFindFile=0xd7079d94b0, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 0 [0091.553] FindClose (in: hFindFile=0xd7079d94b0 | out: hFindFile=0xd7079d94b0) returned 1 [0091.553] SetLastError (dwErrCode=0x0) [0091.553] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\mcxml\\x-none\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\mcxml\\x-none\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.553] GetLastError () returned 0x5 [0091.553] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0) returned 0 [0091.553] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.553] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0091.553] FindClose (in: hFindFile=0xd7079d9390 | out: hFindFile=0xd7079d9390) returned 1 [0091.553] SetLastError (dwErrCode=0x0) [0091.554] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\mcxml\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\mcxml\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.554] GetLastError () returned 0x5 [0091.554] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0091.554] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.554] FindNextFileW (in: hFindFile=0xd7079d9030, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.554] SetLastError (dwErrCode=0x0) [0091.554] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.555] GetLastError () returned 0x5 [0091.555] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0091.555] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.555] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office15\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079d9390 [0091.555] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.555] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0091.555] FindClose (in: hFindFile=0xd7079d9390 | out: hFindFile=0xd7079d9390) returned 1 [0091.555] SetLastError (dwErrCode=0x0) [0091.555] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office15\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office15\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.555] GetLastError () returned 0x5 [0091.555] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0091.555] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.555] FindNextFileW (in: hFindFile=0xd7079d9030, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0091.555] SetLastError (dwErrCode=0x0) [0091.555] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.555] GetLastError () returned 0x5 [0091.555] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0091.556] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.556] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079d9390 [0091.558] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.562] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.562] SetLastError (dwErrCode=0x0) [0091.562] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.563] GetLastError () returned 0x5 [0091.563] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0) returned 0 [0091.563] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.563] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\1033\\*.*", lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 0xd7079d94b0 [0091.565] FindNextFileW (in: hFindFile=0xd7079d94b0, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.566] FindNextFileW (in: hFindFile=0xd7079d94b0, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.566] SetLastError (dwErrCode=0x0) [0091.566] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.566] GetLastError () returned 0x5 [0091.566] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4a330, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4a330, lpOverlapped=0x0) returned 0 [0091.566] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.566] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\1033\\Bibliography\\*.*", lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 0xd7079d9990 [0091.566] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.566] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 0 [0091.567] FindClose (in: hFindFile=0xd7079d9990 | out: hFindFile=0xd7079d9990) returned 1 [0091.567] SetLastError (dwErrCode=0x0) [0091.567] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\1033\\Bibliography\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\1033\\bibliography\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.567] GetLastError () returned 0x5 [0091.567] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4a330, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4a330, lpOverlapped=0x0) returned 0 [0091.567] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.567] FindNextFileW (in: hFindFile=0xd7079d94b0, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.567] SetLastError (dwErrCode=0x0) [0091.567] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.567] GetLastError () returned 0x5 [0091.567] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4a330, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4a330, lpOverlapped=0x0) returned 0 [0091.567] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.567] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\1033\\DataServices\\*.*", lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 0xd7079d9990 [0091.568] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.568] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 0 [0091.568] FindClose (in: hFindFile=0xd7079d9990 | out: hFindFile=0xd7079d9990) returned 1 [0091.568] SetLastError (dwErrCode=0x0) [0091.568] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\1033\\DataServices\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\1033\\dataservices\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.568] GetLastError () returned 0x5 [0091.568] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4a330, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4a330, lpOverlapped=0x0) returned 0 [0091.568] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.568] FindNextFileW (in: hFindFile=0xd7079d94b0, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.568] SetLastError (dwErrCode=0x0) [0091.568] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.568] GetLastError () returned 0x5 [0091.568] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4a330, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4a330, lpOverlapped=0x0) returned 0 [0091.568] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.568] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\1033\\PUBFTSCM\\*.*", lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 0xd7079d9990 [0091.568] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.569] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 0 [0091.569] FindClose (in: hFindFile=0xd7079d9990 | out: hFindFile=0xd7079d9990) returned 1 [0091.569] SetLastError (dwErrCode=0x0) [0091.569] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\1033\\PUBFTSCM\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\1033\\pubftscm\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.569] GetLastError () returned 0x5 [0091.569] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4a330, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4a330, lpOverlapped=0x0) returned 0 [0091.569] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.569] FindNextFileW (in: hFindFile=0xd7079d94b0, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.569] SetLastError (dwErrCode=0x0) [0091.569] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.569] GetLastError () returned 0x5 [0091.569] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4a330, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4a330, lpOverlapped=0x0) returned 0 [0091.569] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.569] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\1033\\PUBSPAPR\\*.*", lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 0xd7079a0450 [0091.571] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.571] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 0 [0091.571] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0091.571] SetLastError (dwErrCode=0x0) [0091.571] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\1033\\PUBSPAPR\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\1033\\pubspapr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.571] GetLastError () returned 0x5 [0091.571] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4a330, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4a330, lpOverlapped=0x0) returned 0 [0091.571] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.571] FindNextFileW (in: hFindFile=0xd7079d94b0, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.571] SetLastError (dwErrCode=0x0) [0091.571] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.571] GetLastError () returned 0x5 [0091.571] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4a330, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4a330, lpOverlapped=0x0) returned 0 [0091.571] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.571] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\1033\\QuickStyles\\*.*", lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 0xd7079a0e10 [0091.572] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.572] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 0 [0091.572] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0091.572] SetLastError (dwErrCode=0x0) [0091.572] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\1033\\QuickStyles\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\1033\\quickstyles\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.572] GetLastError () returned 0x5 [0091.572] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4a330, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4a330, lpOverlapped=0x0) returned 0 [0091.572] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.572] FindNextFileW (in: hFindFile=0xd7079d94b0, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 0 [0091.572] FindClose (in: hFindFile=0xd7079d94b0 | out: hFindFile=0xd7079d94b0) returned 1 [0091.572] SetLastError (dwErrCode=0x0) [0091.572] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.572] GetLastError () returned 0x5 [0091.572] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0) returned 0 [0091.572] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.572] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.573] SetLastError (dwErrCode=0x0) [0091.573] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.573] GetLastError () returned 0x5 [0091.573] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0) returned 0 [0091.573] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.573] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\1036\\*.*", lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 0xd7079a0810 [0091.573] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.573] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 0 [0091.573] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0091.573] SetLastError (dwErrCode=0x0) [0091.573] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\1036\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\1036\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.573] GetLastError () returned 0x5 [0091.573] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0) returned 0 [0091.573] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.573] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.573] SetLastError (dwErrCode=0x0) [0091.573] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.574] GetLastError () returned 0x5 [0091.574] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0) returned 0 [0091.574] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.574] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\3082\\*.*", lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 0xd7079a08d0 [0091.574] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.574] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 0 [0091.574] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0091.574] SetLastError (dwErrCode=0x0) [0091.574] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\3082\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\3082\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.574] GetLastError () returned 0x5 [0091.574] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0) returned 0 [0091.574] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.574] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.574] SetLastError (dwErrCode=0x0) [0091.574] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.575] GetLastError () returned 0x5 [0091.575] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0) returned 0 [0091.575] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.575] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\AccessWeb\\*.*", lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 0xd7079a0810 [0091.575] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.575] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 0 [0091.575] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0091.576] SetLastError (dwErrCode=0x0) [0091.576] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\AccessWeb\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\accessweb\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.576] GetLastError () returned 0x5 [0091.576] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0) returned 0 [0091.576] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.576] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.576] SetLastError (dwErrCode=0x0) [0091.576] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.576] GetLastError () returned 0x5 [0091.576] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0) returned 0 [0091.576] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.576] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ACCWIZ\\*.*", lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 0xd7079a0d50 [0091.576] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.576] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 0 [0091.576] FindClose (in: hFindFile=0xd7079a0d50 | out: hFindFile=0xd7079a0d50) returned 1 [0091.576] SetLastError (dwErrCode=0x0) [0091.576] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ACCWIZ\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\accwiz\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.577] GetLastError () returned 0x5 [0091.577] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0) returned 0 [0091.577] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.577] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0091.577] SetLastError (dwErrCode=0x0) [0091.577] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.577] GetLastError () returned 0x5 [0091.577] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0) returned 0 [0091.577] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.577] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\*.*", lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 0xd7079a0bd0 [0091.583] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.583] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.583] SetLastError (dwErrCode=0x0) [0091.583] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.583] GetLastError () returned 0x5 [0091.583] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4a330, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4a330, lpOverlapped=0x0) returned 0 [0091.583] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.583] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\*.*", lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 0xd7079a0450 [0091.583] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.583] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.583] SetLastError (dwErrCode=0x0) [0091.583] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.583] GetLastError () returned 0x5 [0091.583] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.584] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.584] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079a0d50 [0091.585] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.586] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.586] SetLastError (dwErrCode=0x0) [0091.586] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.587] GetLastError () returned 0x5 [0091.587] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.587] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.587] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\af\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0e10 [0091.587] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.587] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.587] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0091.587] SetLastError (dwErrCode=0x0) [0091.587] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\af\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\af\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.587] GetLastError () returned 0x5 [0091.587] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.587] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.587] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.587] SetLastError (dwErrCode=0x0) [0091.587] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.588] GetLastError () returned 0x5 [0091.588] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.588] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.588] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\am\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0810 [0091.588] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.588] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.588] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0091.588] SetLastError (dwErrCode=0x0) [0091.589] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\am\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\am\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.589] GetLastError () returned 0x5 [0091.589] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.589] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.589] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.589] SetLastError (dwErrCode=0x0) [0091.589] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.589] GetLastError () returned 0x5 [0091.589] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.589] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.589] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ar\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0810 [0091.589] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.589] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.589] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0091.589] SetLastError (dwErrCode=0x0) [0091.590] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ar\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ar\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.590] GetLastError () returned 0x5 [0091.590] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.590] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.590] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.590] SetLastError (dwErrCode=0x0) [0091.590] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.590] GetLastError () returned 0x5 [0091.590] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.590] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.590] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\as\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0810 [0091.590] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.590] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.590] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0091.590] SetLastError (dwErrCode=0x0) [0091.590] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\as\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\as\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.591] GetLastError () returned 0x5 [0091.591] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.591] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.591] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.591] SetLastError (dwErrCode=0x0) [0091.591] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.591] GetLastError () returned 0x5 [0091.591] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.591] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.591] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\az-Latn-AZ\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0e10 [0091.591] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.591] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.591] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0091.591] SetLastError (dwErrCode=0x0) [0091.591] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\az-Latn-AZ\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\az-latn-az\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.592] GetLastError () returned 0x5 [0091.592] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.592] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.592] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.592] SetLastError (dwErrCode=0x0) [0091.592] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.592] GetLastError () returned 0x5 [0091.592] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.592] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.592] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\be\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0810 [0091.592] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.592] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.592] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0091.592] SetLastError (dwErrCode=0x0) [0091.592] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\be\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\be\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.593] GetLastError () returned 0x5 [0091.593] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.593] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.593] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.593] SetLastError (dwErrCode=0x0) [0091.593] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.593] GetLastError () returned 0x5 [0091.593] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.593] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.593] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bg\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0e10 [0091.593] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.593] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.593] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0091.593] SetLastError (dwErrCode=0x0) [0091.593] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bg\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\bg\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.594] GetLastError () returned 0x5 [0091.594] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.594] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.594] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.594] SetLastError (dwErrCode=0x0) [0091.594] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.594] GetLastError () returned 0x5 [0091.594] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.594] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.594] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bn-BD\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a08d0 [0091.594] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.594] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.594] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0091.594] SetLastError (dwErrCode=0x0) [0091.594] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bn-BD\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\bn-bd\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.595] GetLastError () returned 0x5 [0091.595] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.595] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.595] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.595] SetLastError (dwErrCode=0x0) [0091.595] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.595] GetLastError () returned 0x5 [0091.595] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.595] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.595] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bn-IN\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0e10 [0091.595] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.595] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.595] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0091.595] SetLastError (dwErrCode=0x0) [0091.595] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bn-IN\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\bn-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.596] GetLastError () returned 0x5 [0091.596] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.596] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.596] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.596] SetLastError (dwErrCode=0x0) [0091.596] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.596] GetLastError () returned 0x5 [0091.596] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.596] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.596] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bs-Latn-BA\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0810 [0091.596] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.596] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.596] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0091.596] SetLastError (dwErrCode=0x0) [0091.596] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bs-Latn-BA\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\bs-latn-ba\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.597] GetLastError () returned 0x5 [0091.597] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.597] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.597] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.597] SetLastError (dwErrCode=0x0) [0091.597] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.597] GetLastError () returned 0x5 [0091.597] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.597] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.597] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ca\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0810 [0091.597] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.597] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.597] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0091.597] SetLastError (dwErrCode=0x0) [0091.597] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ca\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ca\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.598] GetLastError () returned 0x5 [0091.598] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.598] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.598] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.598] SetLastError (dwErrCode=0x0) [0091.598] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.598] GetLastError () returned 0x5 [0091.598] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.598] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.598] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ca-ES-valencia\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0930 [0091.598] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.598] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.598] FindClose (in: hFindFile=0xd7079a0930 | out: hFindFile=0xd7079a0930) returned 1 [0091.598] SetLastError (dwErrCode=0x0) [0091.598] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ca-ES-valencia\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ca-es-valencia\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.599] GetLastError () returned 0x5 [0091.599] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.599] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.599] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.599] SetLastError (dwErrCode=0x0) [0091.599] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.599] GetLastError () returned 0x5 [0091.599] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.599] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.599] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\cs\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0e10 [0091.599] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.599] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.599] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0091.599] SetLastError (dwErrCode=0x0) [0091.599] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\cs\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\cs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.600] GetLastError () returned 0x5 [0091.600] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.600] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.600] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.600] SetLastError (dwErrCode=0x0) [0091.600] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.600] GetLastError () returned 0x5 [0091.600] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.600] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.600] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\cy\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0e10 [0091.600] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.600] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.600] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0091.600] SetLastError (dwErrCode=0x0) [0091.600] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\cy\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\cy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.601] GetLastError () returned 0x5 [0091.601] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.601] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.601] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.601] SetLastError (dwErrCode=0x0) [0091.601] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.601] GetLastError () returned 0x5 [0091.601] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.601] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.601] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\da\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a08d0 [0091.602] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.602] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.602] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0091.602] SetLastError (dwErrCode=0x0) [0091.602] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\da\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\da\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.602] GetLastError () returned 0x5 [0091.602] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.602] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.602] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.602] SetLastError (dwErrCode=0x0) [0091.602] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.602] GetLastError () returned 0x5 [0091.602] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.602] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.603] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\de\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0930 [0091.603] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.603] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.603] FindClose (in: hFindFile=0xd7079a0930 | out: hFindFile=0xd7079a0930) returned 1 [0091.603] SetLastError (dwErrCode=0x0) [0091.603] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\de\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\de\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.603] GetLastError () returned 0x5 [0091.603] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.603] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.603] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.603] SetLastError (dwErrCode=0x0) [0091.603] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.603] GetLastError () returned 0x5 [0091.603] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.603] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.603] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\el\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a08d0 [0091.604] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.604] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.604] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0091.604] SetLastError (dwErrCode=0x0) [0091.604] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\el\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\el\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.604] GetLastError () returned 0x5 [0091.604] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.604] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.604] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.604] SetLastError (dwErrCode=0x0) [0091.604] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.604] GetLastError () returned 0x5 [0091.604] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.604] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.605] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\es\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0810 [0091.605] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.605] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.605] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0091.605] SetLastError (dwErrCode=0x0) [0091.605] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\es\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\es\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.606] GetLastError () returned 0x5 [0091.606] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.606] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.606] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.606] SetLastError (dwErrCode=0x0) [0091.606] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.606] GetLastError () returned 0x5 [0091.606] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.606] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.606] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\et\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0810 [0091.607] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.607] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.607] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0091.607] SetLastError (dwErrCode=0x0) [0091.607] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\et\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\et\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.607] GetLastError () returned 0x5 [0091.607] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.607] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.607] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.607] SetLastError (dwErrCode=0x0) [0091.607] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.607] GetLastError () returned 0x5 [0091.607] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.607] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.607] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\eu\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0e10 [0091.608] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.608] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.608] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0091.608] SetLastError (dwErrCode=0x0) [0091.608] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\eu\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\eu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.608] GetLastError () returned 0x5 [0091.608] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.608] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.608] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.608] SetLastError (dwErrCode=0x0) [0091.608] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.608] GetLastError () returned 0x5 [0091.608] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.608] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.608] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fa\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0ed0 [0091.608] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.609] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.609] FindClose (in: hFindFile=0xd7079a0ed0 | out: hFindFile=0xd7079a0ed0) returned 1 [0091.609] SetLastError (dwErrCode=0x0) [0091.609] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fa\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\fa\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.609] GetLastError () returned 0x5 [0091.609] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.609] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.609] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.609] SetLastError (dwErrCode=0x0) [0091.609] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.609] GetLastError () returned 0x5 [0091.609] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.609] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.609] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fi\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a08d0 [0091.610] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.610] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.610] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0091.610] SetLastError (dwErrCode=0x0) [0091.610] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fi\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\fi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.610] GetLastError () returned 0x5 [0091.610] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.610] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.610] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.610] SetLastError (dwErrCode=0x0) [0091.610] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.611] GetLastError () returned 0x5 [0091.611] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.611] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.611] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fil\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0e10 [0091.611] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.611] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.612] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0091.612] SetLastError (dwErrCode=0x0) [0091.612] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fil\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\fil\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.612] GetLastError () returned 0x5 [0091.612] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.612] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.612] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.612] SetLastError (dwErrCode=0x0) [0091.612] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.612] GetLastError () returned 0x5 [0091.612] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.612] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.612] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fr\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0810 [0091.613] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.613] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.613] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0091.613] SetLastError (dwErrCode=0x0) [0091.613] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\fr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.613] GetLastError () returned 0x5 [0091.613] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.614] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.614] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.614] SetLastError (dwErrCode=0x0) [0091.614] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.614] GetLastError () returned 0x5 [0091.614] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.614] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.614] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ga\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0e10 [0091.614] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.614] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.615] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0091.615] SetLastError (dwErrCode=0x0) [0091.615] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ga\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ga\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.615] GetLastError () returned 0x5 [0091.615] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.615] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.615] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.615] SetLastError (dwErrCode=0x0) [0091.615] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.615] GetLastError () returned 0x5 [0091.615] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.615] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.615] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gd\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0e10 [0091.616] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.616] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.616] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0091.616] SetLastError (dwErrCode=0x0) [0091.616] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gd\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\gd\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.617] GetLastError () returned 0x5 [0091.617] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.617] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.617] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.617] SetLastError (dwErrCode=0x0) [0091.617] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.617] GetLastError () returned 0x5 [0091.617] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.617] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.617] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gl\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0810 [0091.618] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.618] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.618] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0091.618] SetLastError (dwErrCode=0x0) [0091.618] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\gl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.618] GetLastError () returned 0x5 [0091.618] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.618] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.618] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.618] SetLastError (dwErrCode=0x0) [0091.618] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.619] GetLastError () returned 0x5 [0091.619] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.619] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.619] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gu\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0e10 [0091.619] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.619] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.619] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0091.619] SetLastError (dwErrCode=0x0) [0091.619] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gu\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\gu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.619] GetLastError () returned 0x5 [0091.619] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.619] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.619] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.619] SetLastError (dwErrCode=0x0) [0091.619] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.620] GetLastError () returned 0x5 [0091.620] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.620] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.620] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\he\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0810 [0091.622] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.623] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.623] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0091.623] SetLastError (dwErrCode=0x0) [0091.623] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\he\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\he\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.623] GetLastError () returned 0x5 [0091.623] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.623] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.623] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.623] SetLastError (dwErrCode=0x0) [0091.623] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.623] GetLastError () returned 0x5 [0091.623] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.623] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.623] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hi\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0ed0 [0091.624] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.624] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.624] FindClose (in: hFindFile=0xd7079a0ed0 | out: hFindFile=0xd7079a0ed0) returned 1 [0091.624] SetLastError (dwErrCode=0x0) [0091.624] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hi\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\hi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.624] GetLastError () returned 0x5 [0091.624] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.624] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.624] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.624] SetLastError (dwErrCode=0x0) [0091.624] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.625] GetLastError () returned 0x5 [0091.625] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.625] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.625] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hr\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0e10 [0091.625] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.625] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.626] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0091.626] SetLastError (dwErrCode=0x0) [0091.626] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\hr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.626] GetLastError () returned 0x5 [0091.626] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.626] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.626] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.626] SetLastError (dwErrCode=0x0) [0091.626] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.626] GetLastError () returned 0x5 [0091.626] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.626] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.626] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hu\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0810 [0091.627] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.627] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.627] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0091.627] SetLastError (dwErrCode=0x0) [0091.627] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hu\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\hu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.627] GetLastError () returned 0x5 [0091.627] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.627] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.628] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.628] SetLastError (dwErrCode=0x0) [0091.628] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.628] GetLastError () returned 0x5 [0091.628] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.628] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.628] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hy\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0810 [0091.628] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.628] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.628] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0091.629] SetLastError (dwErrCode=0x0) [0091.629] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hy\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\hy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.629] GetLastError () returned 0x5 [0091.629] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.629] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.629] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.629] SetLastError (dwErrCode=0x0) [0091.629] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.629] GetLastError () returned 0x5 [0091.629] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.629] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.629] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\id\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0810 [0091.630] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.630] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.630] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0091.630] SetLastError (dwErrCode=0x0) [0091.630] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\id\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\id\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.630] GetLastError () returned 0x5 [0091.630] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.630] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.630] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.630] SetLastError (dwErrCode=0x0) [0091.630] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.631] GetLastError () returned 0x5 [0091.631] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.631] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.631] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\is\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0810 [0091.631] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.631] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.631] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0091.631] SetLastError (dwErrCode=0x0) [0091.631] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\is\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\is\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.631] GetLastError () returned 0x5 [0091.631] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.631] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.631] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.631] SetLastError (dwErrCode=0x0) [0091.631] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.632] GetLastError () returned 0x5 [0091.632] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.632] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.632] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\it\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0810 [0091.633] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.633] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.633] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0091.633] SetLastError (dwErrCode=0x0) [0091.633] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\it\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\it\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.633] GetLastError () returned 0x5 [0091.633] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.633] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.633] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.633] SetLastError (dwErrCode=0x0) [0091.633] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.634] GetLastError () returned 0x5 [0091.634] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.634] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.634] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ja\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0e10 [0091.634] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.634] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.634] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0091.634] SetLastError (dwErrCode=0x0) [0091.634] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ja\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ja\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.635] GetLastError () returned 0x5 [0091.635] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.635] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.635] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.637] SetLastError (dwErrCode=0x0) [0091.637] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.637] GetLastError () returned 0x5 [0091.637] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.637] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.637] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ka\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0810 [0091.638] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.638] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.638] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0091.638] SetLastError (dwErrCode=0x0) [0091.639] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ka\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ka\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.639] GetLastError () returned 0x5 [0091.639] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.639] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.639] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.639] SetLastError (dwErrCode=0x0) [0091.639] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.640] GetLastError () returned 0x5 [0091.640] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.640] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.640] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kk\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0810 [0091.640] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.640] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.640] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0091.644] SetLastError (dwErrCode=0x0) [0091.644] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kk\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\kk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.644] GetLastError () returned 0x5 [0091.644] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.644] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.644] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.644] SetLastError (dwErrCode=0x0) [0091.644] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.645] GetLastError () returned 0x5 [0091.645] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.645] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.646] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\km\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a08d0 [0091.646] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.646] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.646] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0091.646] SetLastError (dwErrCode=0x0) [0091.646] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\km\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\km\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.647] GetLastError () returned 0x5 [0091.647] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.647] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.647] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.647] SetLastError (dwErrCode=0x0) [0091.647] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.647] GetLastError () returned 0x5 [0091.647] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.647] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.647] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kn\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0e10 [0091.648] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.648] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.648] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0091.648] SetLastError (dwErrCode=0x0) [0091.648] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kn\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\kn\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.648] GetLastError () returned 0x5 [0091.648] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.648] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.648] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.648] SetLastError (dwErrCode=0x0) [0091.648] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.648] GetLastError () returned 0x5 [0091.648] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.649] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.649] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ko\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0810 [0091.649] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.649] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.649] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0091.649] SetLastError (dwErrCode=0x0) [0091.649] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ko\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ko\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.649] GetLastError () returned 0x5 [0091.649] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.649] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.649] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.649] SetLastError (dwErrCode=0x0) [0091.649] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.649] GetLastError () returned 0x5 [0091.649] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.650] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.650] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kok\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0e10 [0091.650] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.650] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.650] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0091.650] SetLastError (dwErrCode=0x0) [0091.650] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kok\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\kok\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.650] GetLastError () returned 0x5 [0091.651] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.651] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.651] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.651] SetLastError (dwErrCode=0x0) [0091.651] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.651] GetLastError () returned 0x5 [0091.651] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.651] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.651] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ky\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0e10 [0091.651] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.651] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.651] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0091.651] SetLastError (dwErrCode=0x0) [0091.651] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ky\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ky\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.651] GetLastError () returned 0x5 [0091.651] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.652] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.652] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.652] SetLastError (dwErrCode=0x0) [0091.652] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.652] GetLastError () returned 0x5 [0091.652] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.652] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.652] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lb\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0e10 [0091.652] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.652] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.652] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0091.652] SetLastError (dwErrCode=0x0) [0091.652] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lb\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\lb\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.652] GetLastError () returned 0x5 [0091.652] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.652] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.653] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.653] SetLastError (dwErrCode=0x0) [0091.653] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.653] GetLastError () returned 0x5 [0091.653] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.653] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.653] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lt\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0810 [0091.653] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.653] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.653] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0091.653] SetLastError (dwErrCode=0x0) [0091.653] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lt\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\lt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.653] GetLastError () returned 0x5 [0091.653] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.653] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.654] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.654] SetLastError (dwErrCode=0x0) [0091.654] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.654] GetLastError () returned 0x5 [0091.654] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.654] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.654] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lv\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a08d0 [0091.654] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.654] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.654] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0091.654] SetLastError (dwErrCode=0x0) [0091.654] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lv\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\lv\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.654] GetLastError () returned 0x5 [0091.654] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.655] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.655] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.655] SetLastError (dwErrCode=0x0) [0091.655] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.655] GetLastError () returned 0x5 [0091.655] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.655] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.655] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mi\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0810 [0091.655] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.655] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.655] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0091.655] SetLastError (dwErrCode=0x0) [0091.655] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mi\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\mi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.656] GetLastError () returned 0x5 [0091.656] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.656] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.656] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.656] SetLastError (dwErrCode=0x0) [0091.656] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.656] GetLastError () returned 0x5 [0091.656] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.656] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.656] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mk\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0e10 [0091.657] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.657] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.657] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0091.657] SetLastError (dwErrCode=0x0) [0091.657] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mk\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\mk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.657] GetLastError () returned 0x5 [0091.657] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.657] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.657] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.657] SetLastError (dwErrCode=0x0) [0091.657] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.657] GetLastError () returned 0x5 [0091.657] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.657] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.657] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ml\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0810 [0091.658] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.658] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.658] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0091.658] SetLastError (dwErrCode=0x0) [0091.658] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ml\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ml\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.658] GetLastError () returned 0x5 [0091.658] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.658] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.658] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.658] SetLastError (dwErrCode=0x0) [0091.658] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.658] GetLastError () returned 0x5 [0091.658] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.658] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.658] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mn\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0810 [0091.659] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.659] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.659] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0091.659] SetLastError (dwErrCode=0x0) [0091.659] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mn\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\mn\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.659] GetLastError () returned 0x5 [0091.659] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.659] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.659] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.660] SetLastError (dwErrCode=0x0) [0091.660] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.660] GetLastError () returned 0x5 [0091.660] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.660] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.660] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mr\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0e10 [0091.660] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.660] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.660] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0091.660] SetLastError (dwErrCode=0x0) [0091.660] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\mr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.660] GetLastError () returned 0x5 [0091.660] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.660] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.661] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.661] SetLastError (dwErrCode=0x0) [0091.661] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.661] GetLastError () returned 0x5 [0091.661] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.661] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.661] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ms\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0810 [0091.661] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.662] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.662] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0091.662] SetLastError (dwErrCode=0x0) [0091.662] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ms\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ms\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.662] GetLastError () returned 0x5 [0091.662] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.662] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.662] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.662] SetLastError (dwErrCode=0x0) [0091.662] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.662] GetLastError () returned 0x5 [0091.662] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.662] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.662] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mt\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0e10 [0091.662] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.662] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.662] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0091.663] SetLastError (dwErrCode=0x0) [0091.663] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mt\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\mt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.663] GetLastError () returned 0x5 [0091.663] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.663] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.663] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.663] SetLastError (dwErrCode=0x0) [0091.663] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.664] GetLastError () returned 0x5 [0091.664] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.664] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.664] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ne\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a08d0 [0091.664] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.664] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.664] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0091.664] SetLastError (dwErrCode=0x0) [0091.665] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ne\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ne\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.665] GetLastError () returned 0x5 [0091.665] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.665] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.665] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.665] SetLastError (dwErrCode=0x0) [0091.665] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.665] GetLastError () returned 0x5 [0091.665] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.665] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.665] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\nl\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0810 [0091.665] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.665] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.665] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0091.665] SetLastError (dwErrCode=0x0) [0091.665] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\nl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\nl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.666] GetLastError () returned 0x5 [0091.666] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.666] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.666] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.666] SetLastError (dwErrCode=0x0) [0091.666] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.666] GetLastError () returned 0x5 [0091.666] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.666] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.666] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\nn-NO\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0e10 [0091.667] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.667] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.667] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0091.667] SetLastError (dwErrCode=0x0) [0091.667] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\nn-NO\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\nn-no\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.667] GetLastError () returned 0x5 [0091.667] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.667] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.667] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.667] SetLastError (dwErrCode=0x0) [0091.667] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.667] GetLastError () returned 0x5 [0091.667] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.667] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.668] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\no\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0810 [0091.668] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.668] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.668] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0091.668] SetLastError (dwErrCode=0x0) [0091.668] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\no\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\no\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.668] GetLastError () returned 0x5 [0091.668] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.668] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.669] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.669] SetLastError (dwErrCode=0x0) [0091.669] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.669] GetLastError () returned 0x5 [0091.669] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.669] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.669] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\or\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0810 [0091.670] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.670] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.670] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0091.670] SetLastError (dwErrCode=0x0) [0091.670] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\or\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\or\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.671] GetLastError () returned 0x5 [0091.671] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.671] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.671] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.671] SetLastError (dwErrCode=0x0) [0091.671] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.671] GetLastError () returned 0x5 [0091.671] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.671] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.671] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pa\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0e10 [0091.672] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.672] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.672] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0091.672] SetLastError (dwErrCode=0x0) [0091.672] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pa\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\pa\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.672] GetLastError () returned 0x5 [0091.672] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.672] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.672] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.672] SetLastError (dwErrCode=0x0) [0091.672] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.672] GetLastError () returned 0x5 [0091.672] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.672] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.672] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pl\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0810 [0091.673] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.673] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.673] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0091.673] SetLastError (dwErrCode=0x0) [0091.673] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\pl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.673] GetLastError () returned 0x5 [0091.673] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.673] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.673] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.673] SetLastError (dwErrCode=0x0) [0091.673] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.673] GetLastError () returned 0x5 [0091.673] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.673] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.673] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\prs-AF\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0930 [0091.674] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.674] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.674] FindClose (in: hFindFile=0xd7079a0930 | out: hFindFile=0xd7079a0930) returned 1 [0091.674] SetLastError (dwErrCode=0x0) [0091.674] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\prs-AF\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\prs-af\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.674] GetLastError () returned 0x5 [0091.674] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.674] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.674] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.674] SetLastError (dwErrCode=0x0) [0091.674] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.675] GetLastError () returned 0x5 [0091.675] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.675] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.675] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-BR\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0e10 [0091.675] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.675] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.675] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0091.676] SetLastError (dwErrCode=0x0) [0091.676] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-BR\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\pt-br\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.676] GetLastError () returned 0x5 [0091.676] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.676] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.676] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.676] SetLastError (dwErrCode=0x0) [0091.676] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.676] GetLastError () returned 0x5 [0091.676] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.676] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.676] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-pt\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0e10 [0091.677] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.677] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.677] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0091.677] SetLastError (dwErrCode=0x0) [0091.677] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-pt\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\pt-pt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.677] GetLastError () returned 0x5 [0091.677] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.677] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.677] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.677] SetLastError (dwErrCode=0x0) [0091.677] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.678] GetLastError () returned 0x5 [0091.678] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.678] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.678] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\quz\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0810 [0091.678] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.678] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.678] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0091.678] SetLastError (dwErrCode=0x0) [0091.678] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\quz\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\quz\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.678] GetLastError () returned 0x5 [0091.678] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.678] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.678] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.678] SetLastError (dwErrCode=0x0) [0091.678] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.679] GetLastError () returned 0x5 [0091.679] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.679] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.679] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ro\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0e10 [0091.679] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.679] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.679] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0091.679] SetLastError (dwErrCode=0x0) [0091.679] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ro\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ro\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.680] GetLastError () returned 0x5 [0091.680] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.680] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.680] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.680] SetLastError (dwErrCode=0x0) [0091.680] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.680] GetLastError () returned 0x5 [0091.680] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.680] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.680] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ru\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0e10 [0091.680] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.680] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.680] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0091.680] SetLastError (dwErrCode=0x0) [0091.680] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ru\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ru\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.680] GetLastError () returned 0x5 [0091.681] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.681] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.681] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.681] SetLastError (dwErrCode=0x0) [0091.681] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.681] GetLastError () returned 0x5 [0091.681] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.681] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.681] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sd-Arab-PK\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0e10 [0091.681] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.681] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.682] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0091.682] SetLastError (dwErrCode=0x0) [0091.682] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sd-Arab-PK\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sd-arab-pk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.682] GetLastError () returned 0x5 [0091.682] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.682] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.682] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.682] SetLastError (dwErrCode=0x0) [0091.682] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.682] GetLastError () returned 0x5 [0091.682] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.682] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.682] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\si\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0810 [0091.683] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.683] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.683] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0091.683] SetLastError (dwErrCode=0x0) [0091.683] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\si\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\si\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.683] GetLastError () returned 0x5 [0091.683] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.683] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.683] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.683] SetLastError (dwErrCode=0x0) [0091.683] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.684] GetLastError () returned 0x5 [0091.684] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.684] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.684] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sk\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0810 [0091.684] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.684] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.684] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0091.684] SetLastError (dwErrCode=0x0) [0091.684] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sk\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.685] GetLastError () returned 0x5 [0091.685] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.685] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.685] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.685] SetLastError (dwErrCode=0x0) [0091.685] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.685] GetLastError () returned 0x5 [0091.685] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.685] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.685] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sl\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0810 [0091.685] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.685] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.685] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0091.685] SetLastError (dwErrCode=0x0) [0091.685] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.686] GetLastError () returned 0x5 [0091.686] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.686] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.686] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.686] SetLastError (dwErrCode=0x0) [0091.686] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.686] GetLastError () returned 0x5 [0091.686] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.686] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.686] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sq\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0810 [0091.687] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.687] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.687] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0091.687] SetLastError (dwErrCode=0x0) [0091.687] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sq\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sq\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.687] GetLastError () returned 0x5 [0091.687] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.687] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.687] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.687] SetLastError (dwErrCode=0x0) [0091.687] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.687] GetLastError () returned 0x5 [0091.687] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.687] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.687] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Cyrl\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0810 [0091.688] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.688] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.688] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0091.688] SetLastError (dwErrCode=0x0) [0091.688] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Cyrl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sr-cyrl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.688] GetLastError () returned 0x5 [0091.688] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.688] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.688] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.688] SetLastError (dwErrCode=0x0) [0091.688] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.688] GetLastError () returned 0x5 [0091.688] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.688] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.688] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Cyrl-BA\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0e10 [0091.689] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.689] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.689] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0091.689] SetLastError (dwErrCode=0x0) [0091.689] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Cyrl-BA\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sr-cyrl-ba\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.689] GetLastError () returned 0x5 [0091.689] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.689] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.690] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.690] SetLastError (dwErrCode=0x0) [0091.690] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.690] GetLastError () returned 0x5 [0091.690] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.690] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.690] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0810 [0091.691] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.691] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.691] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0091.691] SetLastError (dwErrCode=0x0) [0091.691] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sr-latn\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.691] GetLastError () returned 0x5 [0091.691] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.691] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.691] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.691] SetLastError (dwErrCode=0x0) [0091.691] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.691] GetLastError () returned 0x5 [0091.691] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.691] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.691] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn-CS\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a08d0 [0091.692] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.692] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.692] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0091.692] SetLastError (dwErrCode=0x0) [0091.692] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn-CS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sr-latn-cs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.693] GetLastError () returned 0x5 [0091.693] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.693] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.693] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.693] SetLastError (dwErrCode=0x0) [0091.693] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.693] GetLastError () returned 0x5 [0091.693] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.693] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.693] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sv\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0810 [0091.694] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.694] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.694] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0091.694] SetLastError (dwErrCode=0x0) [0091.694] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sv\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sv\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.694] GetLastError () returned 0x5 [0091.694] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.694] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.694] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.694] SetLastError (dwErrCode=0x0) [0091.694] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.694] GetLastError () returned 0x5 [0091.694] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.695] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.695] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sw\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0810 [0091.696] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.696] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.696] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0091.696] SetLastError (dwErrCode=0x0) [0091.696] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sw\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sw\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.697] GetLastError () returned 0x5 [0091.697] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.697] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.697] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.697] SetLastError (dwErrCode=0x0) [0091.697] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.697] GetLastError () returned 0x5 [0091.697] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.697] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.697] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ta\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0930 [0091.697] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.697] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.697] FindClose (in: hFindFile=0xd7079a0930 | out: hFindFile=0xd7079a0930) returned 1 [0091.697] SetLastError (dwErrCode=0x0) [0091.697] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ta\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ta\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.698] GetLastError () returned 0x5 [0091.698] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.698] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.698] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.698] SetLastError (dwErrCode=0x0) [0091.698] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.698] GetLastError () returned 0x5 [0091.698] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.698] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.698] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\te\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0e10 [0091.699] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.699] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.699] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0091.699] SetLastError (dwErrCode=0x0) [0091.699] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\te\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\te\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.699] GetLastError () returned 0x5 [0091.699] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.699] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.699] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.699] SetLastError (dwErrCode=0x0) [0091.699] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.699] GetLastError () returned 0x5 [0091.699] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.699] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.699] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\th\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0e10 [0091.700] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.700] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.700] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0091.700] SetLastError (dwErrCode=0x0) [0091.700] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\th\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\th\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.700] GetLastError () returned 0x5 [0091.700] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.700] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.700] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.700] SetLastError (dwErrCode=0x0) [0091.700] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.701] GetLastError () returned 0x5 [0091.701] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.701] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.701] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tk\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a08d0 [0091.701] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.701] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.701] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0091.701] SetLastError (dwErrCode=0x0) [0091.701] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tk\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\tk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.702] GetLastError () returned 0x5 [0091.702] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.702] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.702] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.702] SetLastError (dwErrCode=0x0) [0091.702] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.702] GetLastError () returned 0x5 [0091.702] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.702] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.702] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tr\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0930 [0091.703] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.703] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.703] FindClose (in: hFindFile=0xd7079a0930 | out: hFindFile=0xd7079a0930) returned 1 [0091.703] SetLastError (dwErrCode=0x0) [0091.703] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\tr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.703] GetLastError () returned 0x5 [0091.703] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.703] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.703] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.703] SetLastError (dwErrCode=0x0) [0091.703] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.703] GetLastError () returned 0x5 [0091.703] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.703] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.703] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tt\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a08d0 [0091.704] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.704] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.704] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0091.704] SetLastError (dwErrCode=0x0) [0091.704] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tt\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\tt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.704] GetLastError () returned 0x5 [0091.704] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.704] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.704] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.704] SetLastError (dwErrCode=0x0) [0091.704] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.704] GetLastError () returned 0x5 [0091.704] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.704] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.704] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ug\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0810 [0091.705] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.705] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.705] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0091.705] SetLastError (dwErrCode=0x0) [0091.705] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ug\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ug\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.705] GetLastError () returned 0x5 [0091.705] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.705] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.705] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.705] SetLastError (dwErrCode=0x0) [0091.705] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.705] GetLastError () returned 0x5 [0091.705] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.705] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.706] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\uk\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0810 [0091.706] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.706] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.706] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0091.706] SetLastError (dwErrCode=0x0) [0091.706] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\uk\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\uk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.706] GetLastError () returned 0x5 [0091.706] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.706] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.706] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.706] SetLastError (dwErrCode=0x0) [0091.706] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.707] GetLastError () returned 0x5 [0091.707] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.707] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.707] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ur\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0e10 [0091.707] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.707] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.707] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0091.707] SetLastError (dwErrCode=0x0) [0091.707] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ur\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ur\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.708] GetLastError () returned 0x5 [0091.708] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.708] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.708] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.708] SetLastError (dwErrCode=0x0) [0091.708] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.708] GetLastError () returned 0x5 [0091.708] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.708] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.708] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\uz-Latn-UZ\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0e10 [0091.708] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.708] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.708] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0091.708] SetLastError (dwErrCode=0x0) [0091.708] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\uz-Latn-UZ\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\uz-latn-uz\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.708] GetLastError () returned 0x5 [0091.709] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.709] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.709] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.709] SetLastError (dwErrCode=0x0) [0091.709] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.709] GetLastError () returned 0x5 [0091.709] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.709] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.709] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\vi\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0810 [0091.710] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.710] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.710] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0091.710] SetLastError (dwErrCode=0x0) [0091.710] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\vi\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\vi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.710] GetLastError () returned 0x5 [0091.710] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.710] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.710] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.710] SetLastError (dwErrCode=0x0) [0091.710] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.711] GetLastError () returned 0x5 [0091.711] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.711] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.711] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANS\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0810 [0091.711] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.711] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.711] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0091.711] SetLastError (dwErrCode=0x0) [0091.711] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\zh-hans\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.712] GetLastError () returned 0x5 [0091.712] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.712] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.712] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.712] SetLastError (dwErrCode=0x0) [0091.712] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.712] GetLastError () returned 0x5 [0091.712] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.712] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.712] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANT\\*.*", lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0xd7079a0810 [0091.712] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 1 [0091.712] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0091.712] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0091.713] SetLastError (dwErrCode=0x0) [0091.713] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANT\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\zh-hant\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.713] GetLastError () returned 0x5 [0091.713] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b493d0, lpOverlapped=0x0) returned 0 [0091.713] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.713] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.713] FindClose (in: hFindFile=0xd7079a0d50 | out: hFindFile=0xd7079a0d50) returned 1 [0091.713] SetLastError (dwErrCode=0x0) [0091.713] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.713] GetLastError () returned 0x5 [0091.713] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.713] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.713] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 0 [0091.713] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0091.716] SetLastError (dwErrCode=0x0) [0091.716] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.717] GetLastError () returned 0x5 [0091.717] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4a330, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4a330, lpOverlapped=0x0) returned 0 [0091.717] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.717] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.717] SetLastError (dwErrCode=0x0) [0091.717] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.717] GetLastError () returned 0x5 [0091.717] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4a330, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4a330, lpOverlapped=0x0) returned 0 [0091.717] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.717] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power Map Excel Add-in\\*.*", lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 0xd7079a0d50 [0091.718] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.718] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 0 [0091.718] FindClose (in: hFindFile=0xd7079a0d50 | out: hFindFile=0xd7079a0d50) returned 1 [0091.718] SetLastError (dwErrCode=0x0) [0091.718] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power Map Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power map excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.718] GetLastError () returned 0x5 [0091.718] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4a330, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4a330, lpOverlapped=0x0) returned 0 [0091.718] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.718] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.718] SetLastError (dwErrCode=0x0) [0091.718] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.718] GetLastError () returned 0x5 [0091.718] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4a330, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4a330, lpOverlapped=0x0) returned 0 [0091.719] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.719] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\*.*", lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 0xd7079a0810 [0091.720] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.720] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.720] SetLastError (dwErrCode=0x0) [0091.720] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.720] GetLastError () returned 0x5 [0091.720] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.721] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.721] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ar\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079a0450 [0091.724] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.724] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.724] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0091.724] SetLastError (dwErrCode=0x0) [0091.724] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ar\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ar\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.724] GetLastError () returned 0x5 [0091.724] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.724] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.724] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.724] SetLastError (dwErrCode=0x0) [0091.724] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.725] GetLastError () returned 0x5 [0091.725] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.725] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.725] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\bg\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079a0450 [0091.725] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.725] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.725] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0091.725] SetLastError (dwErrCode=0x0) [0091.725] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\bg\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\bg\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.726] GetLastError () returned 0x5 [0091.726] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.726] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.726] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.726] SetLastError (dwErrCode=0x0) [0091.726] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.726] GetLastError () returned 0x5 [0091.726] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.726] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.726] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ca\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079a0e10 [0091.727] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.727] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.727] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0091.727] SetLastError (dwErrCode=0x0) [0091.727] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ca\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ca\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.727] GetLastError () returned 0x5 [0091.727] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.727] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.727] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.727] SetLastError (dwErrCode=0x0) [0091.727] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.728] GetLastError () returned 0x5 [0091.728] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.728] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.728] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\cs\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079a08d0 [0091.729] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.729] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.729] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0091.729] SetLastError (dwErrCode=0x0) [0091.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\cs\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\cs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.729] GetLastError () returned 0x5 [0091.729] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.729] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.729] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.729] SetLastError (dwErrCode=0x0) [0091.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.730] GetLastError () returned 0x5 [0091.730] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.730] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.730] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\da\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079a0d50 [0091.730] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.730] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.730] FindClose (in: hFindFile=0xd7079a0d50 | out: hFindFile=0xd7079a0d50) returned 1 [0091.730] SetLastError (dwErrCode=0x0) [0091.730] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\da\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\da\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.730] GetLastError () returned 0x5 [0091.730] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.730] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.731] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.731] SetLastError (dwErrCode=0x0) [0091.731] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.731] GetLastError () returned 0x5 [0091.731] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.731] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.731] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\de\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079a0d50 [0091.732] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.732] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.732] FindClose (in: hFindFile=0xd7079a0d50 | out: hFindFile=0xd7079a0d50) returned 1 [0091.732] SetLastError (dwErrCode=0x0) [0091.732] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\de\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\de\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.732] GetLastError () returned 0x5 [0091.732] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.732] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.732] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.732] SetLastError (dwErrCode=0x0) [0091.732] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.733] GetLastError () returned 0x5 [0091.733] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.733] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.733] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\el\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079a0ed0 [0091.733] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.734] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.734] FindClose (in: hFindFile=0xd7079a0ed0 | out: hFindFile=0xd7079a0ed0) returned 1 [0091.734] SetLastError (dwErrCode=0x0) [0091.734] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\el\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\el\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.734] GetLastError () returned 0x5 [0091.734] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.734] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.734] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.734] SetLastError (dwErrCode=0x0) [0091.734] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.734] GetLastError () returned 0x5 [0091.734] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.735] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.735] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\es\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079a0450 [0091.735] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.735] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.735] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0091.735] SetLastError (dwErrCode=0x0) [0091.735] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\es\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\es\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.736] GetLastError () returned 0x5 [0091.736] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.736] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.736] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.736] SetLastError (dwErrCode=0x0) [0091.736] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.736] GetLastError () returned 0x5 [0091.736] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.736] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.736] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\et\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079a0930 [0091.736] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.736] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.737] FindClose (in: hFindFile=0xd7079a0930 | out: hFindFile=0xd7079a0930) returned 1 [0091.737] SetLastError (dwErrCode=0x0) [0091.737] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\et\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\et\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.737] GetLastError () returned 0x5 [0091.737] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.737] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.737] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.737] SetLastError (dwErrCode=0x0) [0091.737] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.737] GetLastError () returned 0x5 [0091.737] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.737] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.737] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\eu\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079a08d0 [0091.738] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.738] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.738] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0091.738] SetLastError (dwErrCode=0x0) [0091.738] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\eu\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\eu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.739] GetLastError () returned 0x5 [0091.739] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.739] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.739] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.739] SetLastError (dwErrCode=0x0) [0091.739] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.739] GetLastError () returned 0x5 [0091.739] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.739] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.739] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fi\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079a0450 [0091.740] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.740] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.740] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0091.740] SetLastError (dwErrCode=0x0) [0091.740] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fi\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\fi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.740] GetLastError () returned 0x5 [0091.740] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.740] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.740] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.740] SetLastError (dwErrCode=0x0) [0091.740] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.741] GetLastError () returned 0x5 [0091.741] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.741] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.741] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fr\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079a08d0 [0091.742] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.742] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.742] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0091.742] SetLastError (dwErrCode=0x0) [0091.742] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\fr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.742] GetLastError () returned 0x5 [0091.742] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.742] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.743] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.743] SetLastError (dwErrCode=0x0) [0091.743] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.743] GetLastError () returned 0x5 [0091.743] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.743] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.743] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\gl\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079a0ed0 [0091.744] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.744] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.744] FindClose (in: hFindFile=0xd7079a0ed0 | out: hFindFile=0xd7079a0ed0) returned 1 [0091.744] SetLastError (dwErrCode=0x0) [0091.744] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\gl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\gl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.744] GetLastError () returned 0x5 [0091.744] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.744] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.744] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.744] SetLastError (dwErrCode=0x0) [0091.744] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.745] GetLastError () returned 0x5 [0091.745] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.745] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.745] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\he\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079a0450 [0091.745] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.745] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.746] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0091.746] SetLastError (dwErrCode=0x0) [0091.746] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\he\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\he\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.746] GetLastError () returned 0x5 [0091.746] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.746] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.746] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.746] SetLastError (dwErrCode=0x0) [0091.746] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.746] GetLastError () returned 0x5 [0091.746] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.746] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.747] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hi\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079a08d0 [0091.747] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.747] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.747] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0091.747] SetLastError (dwErrCode=0x0) [0091.747] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hi\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\hi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.748] GetLastError () returned 0x5 [0091.748] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.748] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.748] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.748] SetLastError (dwErrCode=0x0) [0091.748] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.748] GetLastError () returned 0x5 [0091.748] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.748] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.748] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hr\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079a0e10 [0091.749] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.749] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.749] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0091.749] SetLastError (dwErrCode=0x0) [0091.749] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\hr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.749] GetLastError () returned 0x5 [0091.749] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.749] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.750] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.750] SetLastError (dwErrCode=0x0) [0091.750] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.750] GetLastError () returned 0x5 [0091.750] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.750] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.750] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hu\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079a08d0 [0091.750] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.750] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.750] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0091.750] SetLastError (dwErrCode=0x0) [0091.750] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hu\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\hu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.751] GetLastError () returned 0x5 [0091.751] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.751] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.751] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.751] SetLastError (dwErrCode=0x0) [0091.751] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.751] GetLastError () returned 0x5 [0091.751] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.751] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.751] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\id\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079a0450 [0091.752] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.752] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.752] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0091.752] SetLastError (dwErrCode=0x0) [0091.752] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\id\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\id\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.752] GetLastError () returned 0x5 [0091.752] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.752] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.752] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.752] SetLastError (dwErrCode=0x0) [0091.753] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.753] GetLastError () returned 0x5 [0091.753] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.753] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.753] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\it\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079a08d0 [0091.754] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.754] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.754] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0091.754] SetLastError (dwErrCode=0x0) [0091.754] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\it\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\it\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.754] GetLastError () returned 0x5 [0091.754] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.754] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.754] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.754] SetLastError (dwErrCode=0x0) [0091.754] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.755] GetLastError () returned 0x5 [0091.755] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.755] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.755] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ja\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079a0450 [0091.755] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.755] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.755] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0091.755] SetLastError (dwErrCode=0x0) [0091.755] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ja\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ja\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.755] GetLastError () returned 0x5 [0091.755] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.755] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.755] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.755] SetLastError (dwErrCode=0x0) [0091.756] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.756] GetLastError () returned 0x5 [0091.756] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.756] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.756] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\kk\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079a0450 [0091.757] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.757] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.757] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0091.758] SetLastError (dwErrCode=0x0) [0091.758] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\kk\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\kk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.758] GetLastError () returned 0x5 [0091.758] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.758] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.758] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.758] SetLastError (dwErrCode=0x0) [0091.758] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.758] GetLastError () returned 0x5 [0091.758] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.759] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.759] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ko\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079a0d50 [0091.759] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.759] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.759] FindClose (in: hFindFile=0xd7079a0d50 | out: hFindFile=0xd7079a0d50) returned 1 [0091.759] SetLastError (dwErrCode=0x0) [0091.759] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ko\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ko\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.759] GetLastError () returned 0x5 [0091.759] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.759] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.759] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.759] SetLastError (dwErrCode=0x0) [0091.759] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.760] GetLastError () returned 0x5 [0091.760] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.760] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.760] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lt\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079a0450 [0091.761] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.761] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.761] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0091.761] SetLastError (dwErrCode=0x0) [0091.761] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lt\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\lt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.762] GetLastError () returned 0x5 [0091.762] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.762] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.762] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.762] SetLastError (dwErrCode=0x0) [0091.762] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.762] GetLastError () returned 0x5 [0091.762] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.762] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.762] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lv\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079a0d50 [0091.763] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.763] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.763] FindClose (in: hFindFile=0xd7079a0d50 | out: hFindFile=0xd7079a0d50) returned 1 [0091.763] SetLastError (dwErrCode=0x0) [0091.763] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lv\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\lv\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.763] GetLastError () returned 0x5 [0091.763] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.763] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.763] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.763] SetLastError (dwErrCode=0x0) [0091.763] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.763] GetLastError () returned 0x5 [0091.763] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.763] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.763] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ms\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079a0450 [0091.764] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.764] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.764] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0091.764] SetLastError (dwErrCode=0x0) [0091.764] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ms\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ms\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.764] GetLastError () returned 0x5 [0091.764] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.765] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.765] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.765] SetLastError (dwErrCode=0x0) [0091.765] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.765] GetLastError () returned 0x5 [0091.765] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.765] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.765] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\nl\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079a0450 [0091.765] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.765] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.765] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0091.765] SetLastError (dwErrCode=0x0) [0091.765] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\nl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\nl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.765] GetLastError () returned 0x5 [0091.765] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.765] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.766] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.766] SetLastError (dwErrCode=0x0) [0091.766] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.766] GetLastError () returned 0x5 [0091.766] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.766] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.766] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\no\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079a0d50 [0091.766] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.766] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.767] FindClose (in: hFindFile=0xd7079a0d50 | out: hFindFile=0xd7079a0d50) returned 1 [0091.767] SetLastError (dwErrCode=0x0) [0091.767] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\no\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\no\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.767] GetLastError () returned 0x5 [0091.767] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.767] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.767] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.767] SetLastError (dwErrCode=0x0) [0091.767] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.767] GetLastError () returned 0x5 [0091.767] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.767] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.767] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pl\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079a0ed0 [0091.768] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.768] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.768] FindClose (in: hFindFile=0xd7079a0ed0 | out: hFindFile=0xd7079a0ed0) returned 1 [0091.768] SetLastError (dwErrCode=0x0) [0091.768] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\pl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.768] GetLastError () returned 0x5 [0091.768] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.768] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.768] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.768] SetLastError (dwErrCode=0x0) [0091.768] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.769] GetLastError () returned 0x5 [0091.769] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.769] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.769] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079a08d0 [0091.769] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.769] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.769] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0091.769] SetLastError (dwErrCode=0x0) [0091.769] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\pt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.770] GetLastError () returned 0x5 [0091.770] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.770] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.770] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.770] SetLastError (dwErrCode=0x0) [0091.770] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.770] GetLastError () returned 0x5 [0091.770] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.770] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.770] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt-PT\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079a0450 [0091.770] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.770] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.770] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0091.770] SetLastError (dwErrCode=0x0) [0091.770] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt-PT\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\pt-pt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.771] GetLastError () returned 0x5 [0091.771] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.771] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.771] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.771] SetLastError (dwErrCode=0x0) [0091.771] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.771] GetLastError () returned 0x5 [0091.771] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.771] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.771] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ro\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079a08d0 [0091.772] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.772] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.772] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0091.772] SetLastError (dwErrCode=0x0) [0091.772] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ro\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ro\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.772] GetLastError () returned 0x5 [0091.772] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.772] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.772] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.772] SetLastError (dwErrCode=0x0) [0091.772] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.772] GetLastError () returned 0x5 [0091.772] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.772] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.773] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ru\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079a08d0 [0091.774] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.774] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.774] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0091.774] SetLastError (dwErrCode=0x0) [0091.774] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ru\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ru\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.774] GetLastError () returned 0x5 [0091.774] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.774] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.774] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.774] SetLastError (dwErrCode=0x0) [0091.774] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.775] GetLastError () returned 0x5 [0091.775] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.775] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.775] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sk\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079a0450 [0091.775] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.775] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.776] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0091.776] SetLastError (dwErrCode=0x0) [0091.776] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sk\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\sk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.776] GetLastError () returned 0x5 [0091.776] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.776] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.776] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.776] SetLastError (dwErrCode=0x0) [0091.776] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.776] GetLastError () returned 0x5 [0091.776] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.776] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.776] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sl\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079a0450 [0091.777] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.777] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.777] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0091.777] SetLastError (dwErrCode=0x0) [0091.777] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\sl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.777] GetLastError () returned 0x5 [0091.777] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.777] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.777] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.777] SetLastError (dwErrCode=0x0) [0091.777] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.778] GetLastError () returned 0x5 [0091.778] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.778] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.778] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-cyrl\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079a0d50 [0091.778] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.778] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.778] FindClose (in: hFindFile=0xd7079a0d50 | out: hFindFile=0xd7079a0d50) returned 1 [0091.778] SetLastError (dwErrCode=0x0) [0091.779] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-cyrl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\sr-cyrl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.779] GetLastError () returned 0x5 [0091.779] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.779] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.779] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.779] SetLastError (dwErrCode=0x0) [0091.779] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.779] GetLastError () returned 0x5 [0091.779] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.779] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.779] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-latn\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079a0450 [0091.780] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.780] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.780] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0091.780] SetLastError (dwErrCode=0x0) [0091.780] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-latn\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\sr-latn\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.780] GetLastError () returned 0x5 [0091.780] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.780] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.780] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.780] SetLastError (dwErrCode=0x0) [0091.780] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.780] GetLastError () returned 0x5 [0091.780] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.781] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.781] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sv\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079a08d0 [0091.781] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.781] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.781] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0091.781] SetLastError (dwErrCode=0x0) [0091.781] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sv\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\sv\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.781] GetLastError () returned 0x5 [0091.781] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.782] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.782] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.782] SetLastError (dwErrCode=0x0) [0091.782] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.782] GetLastError () returned 0x5 [0091.782] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.782] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.782] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\th\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079a08d0 [0091.782] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.782] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.783] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0091.783] SetLastError (dwErrCode=0x0) [0091.783] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\th\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\th\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.783] GetLastError () returned 0x5 [0091.783] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.783] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.783] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.783] SetLastError (dwErrCode=0x0) [0091.783] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.783] GetLastError () returned 0x5 [0091.783] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.783] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.783] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\tr\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079a08d0 [0091.783] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.784] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.784] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0091.784] SetLastError (dwErrCode=0x0) [0091.784] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\tr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\tr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.784] GetLastError () returned 0x5 [0091.784] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.784] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.784] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.784] SetLastError (dwErrCode=0x0) [0091.784] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.784] GetLastError () returned 0x5 [0091.784] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.784] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.784] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\uk\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079a0ed0 [0091.785] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.785] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.785] FindClose (in: hFindFile=0xd7079a0ed0 | out: hFindFile=0xd7079a0ed0) returned 1 [0091.785] SetLastError (dwErrCode=0x0) [0091.785] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\uk\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\uk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.785] GetLastError () returned 0x5 [0091.785] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.785] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.785] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.785] SetLastError (dwErrCode=0x0) [0091.785] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.786] GetLastError () returned 0x5 [0091.786] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.786] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.786] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\vi\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079a0450 [0091.786] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.786] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.786] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0091.786] SetLastError (dwErrCode=0x0) [0091.786] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\vi\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\vi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.787] GetLastError () returned 0x5 [0091.787] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.787] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.787] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.787] SetLastError (dwErrCode=0x0) [0091.787] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.787] GetLastError () returned 0x5 [0091.787] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.787] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.787] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHS\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079a0d50 [0091.788] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.788] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.788] FindClose (in: hFindFile=0xd7079a0d50 | out: hFindFile=0xd7079a0d50) returned 1 [0091.788] SetLastError (dwErrCode=0x0) [0091.788] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\zh-chs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.807] GetLastError () returned 0x5 [0091.807] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.807] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.807] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.807] SetLastError (dwErrCode=0x0) [0091.807] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.807] GetLastError () returned 0x5 [0091.807] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.807] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.807] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHT\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079a0450 [0091.807] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.807] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.807] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0091.807] SetLastError (dwErrCode=0x0) [0091.807] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHT\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\zh-cht\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.808] GetLastError () returned 0x5 [0091.808] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.808] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.808] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 0 [0091.808] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0091.808] SetLastError (dwErrCode=0x0) [0091.808] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.808] GetLastError () returned 0x5 [0091.808] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4a330, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4a330, lpOverlapped=0x0) returned 0 [0091.808] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.808] FindNextFileW (in: hFindFile=0xd7079a0bd0, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0091.808] SetLastError (dwErrCode=0x0) [0091.808] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.808] GetLastError () returned 0x5 [0091.808] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4a330, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4a330, lpOverlapped=0x0) returned 0 [0091.808] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.809] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\*.*", lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 0xd7079a0450 [0091.810] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.811] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.811] SetLastError (dwErrCode=0x0) [0091.811] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.811] GetLastError () returned 0x5 [0091.811] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.811] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.811] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079a0810 [0091.812] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.812] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.812] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0091.812] SetLastError (dwErrCode=0x0) [0091.812] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ar\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.812] GetLastError () returned 0x5 [0091.812] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.812] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.812] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.812] SetLastError (dwErrCode=0x0) [0091.812] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.813] GetLastError () returned 0x5 [0091.813] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.813] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.813] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079a0810 [0091.813] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.813] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.813] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0091.814] SetLastError (dwErrCode=0x0) [0091.814] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\bg\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.814] GetLastError () returned 0x5 [0091.814] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.814] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.814] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.814] SetLastError (dwErrCode=0x0) [0091.814] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.814] GetLastError () returned 0x5 [0091.814] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.814] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.814] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079a08d0 [0091.815] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.815] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.815] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0091.815] SetLastError (dwErrCode=0x0) [0091.815] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ca\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.815] GetLastError () returned 0x5 [0091.815] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.815] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.815] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.815] SetLastError (dwErrCode=0x0) [0091.815] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.816] GetLastError () returned 0x5 [0091.816] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.816] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.816] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079a0d50 [0091.816] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.816] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.816] FindClose (in: hFindFile=0xd7079a0d50 | out: hFindFile=0xd7079a0d50) returned 1 [0091.816] SetLastError (dwErrCode=0x0) [0091.816] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.817] GetLastError () returned 0x5 [0091.817] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.817] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.817] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.817] SetLastError (dwErrCode=0x0) [0091.817] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.817] GetLastError () returned 0x5 [0091.817] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.817] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.817] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079a0d50 [0091.818] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.818] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.818] FindClose (in: hFindFile=0xd7079a0d50 | out: hFindFile=0xd7079a0d50) returned 1 [0091.818] SetLastError (dwErrCode=0x0) [0091.818] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\cs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.818] GetLastError () returned 0x5 [0091.818] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.818] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.818] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.818] SetLastError (dwErrCode=0x0) [0091.818] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.818] GetLastError () returned 0x5 [0091.818] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.818] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.818] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079a0e70 [0091.819] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.819] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.819] FindClose (in: hFindFile=0xd7079a0e70 | out: hFindFile=0xd7079a0e70) returned 1 [0091.819] SetLastError (dwErrCode=0x0) [0091.819] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\da\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.820] GetLastError () returned 0x5 [0091.820] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.820] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.820] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.820] SetLastError (dwErrCode=0x0) [0091.820] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.821] GetLastError () returned 0x5 [0091.821] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.821] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.821] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079a0810 [0091.822] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.822] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.822] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0091.822] SetLastError (dwErrCode=0x0) [0091.822] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\de\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.822] GetLastError () returned 0x5 [0091.822] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.822] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.822] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.822] SetLastError (dwErrCode=0x0) [0091.822] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.823] GetLastError () returned 0x5 [0091.823] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.823] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.823] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079a0810 [0091.823] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.824] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.824] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0091.824] SetLastError (dwErrCode=0x0) [0091.824] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\el\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.824] GetLastError () returned 0x5 [0091.824] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.824] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.824] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.824] SetLastError (dwErrCode=0x0) [0091.824] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.824] GetLastError () returned 0x5 [0091.824] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.824] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.825] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\en\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079a0d50 [0091.825] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.825] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.825] FindClose (in: hFindFile=0xd7079a0d50 | out: hFindFile=0xd7079a0d50) returned 1 [0091.827] SetLastError (dwErrCode=0x0) [0091.827] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\en\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\en\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.827] GetLastError () returned 0x5 [0091.827] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.827] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.827] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.827] SetLastError (dwErrCode=0x0) [0091.827] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.828] GetLastError () returned 0x5 [0091.828] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.828] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.828] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079a0e10 [0091.828] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.828] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.828] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0091.829] SetLastError (dwErrCode=0x0) [0091.829] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\es\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.829] GetLastError () returned 0x5 [0091.829] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.829] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.829] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.829] SetLastError (dwErrCode=0x0) [0091.829] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.829] GetLastError () returned 0x5 [0091.829] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.829] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.829] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079a08d0 [0091.830] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.830] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.830] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0091.830] SetLastError (dwErrCode=0x0) [0091.830] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\et\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.831] GetLastError () returned 0x5 [0091.831] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.831] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.831] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.831] SetLastError (dwErrCode=0x0) [0091.831] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.831] GetLastError () returned 0x5 [0091.831] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.831] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.831] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079a0810 [0091.832] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.832] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.833] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0091.833] SetLastError (dwErrCode=0x0) [0091.833] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\eu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.833] GetLastError () returned 0x5 [0091.833] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.833] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.833] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.833] SetLastError (dwErrCode=0x0) [0091.833] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.833] GetLastError () returned 0x5 [0091.833] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.833] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.833] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079a0810 [0091.834] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.834] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.834] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0091.834] SetLastError (dwErrCode=0x0) [0091.834] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\fi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.835] GetLastError () returned 0x5 [0091.835] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.835] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.835] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.835] SetLastError (dwErrCode=0x0) [0091.835] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.835] GetLastError () returned 0x5 [0091.835] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.835] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.835] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079a0d50 [0091.836] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.836] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.836] FindClose (in: hFindFile=0xd7079a0d50 | out: hFindFile=0xd7079a0d50) returned 1 [0091.836] SetLastError (dwErrCode=0x0) [0091.836] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\fr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.837] GetLastError () returned 0x5 [0091.837] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.837] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.837] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.837] SetLastError (dwErrCode=0x0) [0091.837] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.837] GetLastError () returned 0x5 [0091.837] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.837] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.837] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079a0810 [0091.838] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.838] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.838] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0091.838] SetLastError (dwErrCode=0x0) [0091.838] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\gl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.838] GetLastError () returned 0x5 [0091.838] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.838] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.839] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.839] SetLastError (dwErrCode=0x0) [0091.839] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.839] GetLastError () returned 0x5 [0091.839] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.839] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.839] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079a0810 [0091.840] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.840] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.840] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0091.840] SetLastError (dwErrCode=0x0) [0091.840] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\he\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.840] GetLastError () returned 0x5 [0091.840] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.840] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.840] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.840] SetLastError (dwErrCode=0x0) [0091.840] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.841] GetLastError () returned 0x5 [0091.841] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.841] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.841] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079a0810 [0091.841] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.841] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.842] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0091.842] SetLastError (dwErrCode=0x0) [0091.842] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\hi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.842] GetLastError () returned 0x5 [0091.842] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.842] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.842] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.842] SetLastError (dwErrCode=0x0) [0091.842] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.842] GetLastError () returned 0x5 [0091.842] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.842] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.842] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079a0810 [0091.843] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.843] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.843] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0091.843] SetLastError (dwErrCode=0x0) [0091.843] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\hr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.844] GetLastError () returned 0x5 [0091.844] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.844] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.844] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.844] SetLastError (dwErrCode=0x0) [0091.844] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.844] GetLastError () returned 0x5 [0091.844] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.844] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.844] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079a0d50 [0091.845] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.845] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.845] FindClose (in: hFindFile=0xd7079a0d50 | out: hFindFile=0xd7079a0d50) returned 1 [0091.845] SetLastError (dwErrCode=0x0) [0091.845] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\hu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.845] GetLastError () returned 0x5 [0091.845] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.845] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.845] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.845] SetLastError (dwErrCode=0x0) [0091.845] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.846] GetLastError () returned 0x5 [0091.846] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.846] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.846] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079a0ed0 [0091.846] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.847] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.847] FindClose (in: hFindFile=0xd7079a0ed0 | out: hFindFile=0xd7079a0ed0) returned 1 [0091.847] SetLastError (dwErrCode=0x0) [0091.847] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\id\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.847] GetLastError () returned 0x5 [0091.847] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.847] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.847] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.847] SetLastError (dwErrCode=0x0) [0091.847] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.847] GetLastError () returned 0x5 [0091.847] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.847] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.847] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\it\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079a0810 [0091.848] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.848] FindNextFileW (in: hFindFile=0xd7079a0810, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.848] FindClose (in: hFindFile=0xd7079a0810 | out: hFindFile=0xd7079a0810) returned 1 [0091.848] SetLastError (dwErrCode=0x0) [0091.848] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\it\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\it\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.849] GetLastError () returned 0x5 [0091.849] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.849] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.849] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.849] SetLastError (dwErrCode=0x0) [0091.849] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.849] GetLastError () returned 0x5 [0091.849] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.849] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.849] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ja\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079a08d0 [0091.850] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.850] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.850] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0091.850] SetLastError (dwErrCode=0x0) [0091.850] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ja\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ja\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.850] GetLastError () returned 0x5 [0091.850] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.850] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.850] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.850] SetLastError (dwErrCode=0x0) [0091.851] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.851] GetLastError () returned 0x5 [0091.851] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.851] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.851] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\kk\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079a0d50 [0091.852] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.852] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.852] FindClose (in: hFindFile=0xd7079a0d50 | out: hFindFile=0xd7079a0d50) returned 1 [0091.852] SetLastError (dwErrCode=0x0) [0091.852] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\kk\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\kk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.852] GetLastError () returned 0x5 [0091.852] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.852] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.852] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.852] SetLastError (dwErrCode=0x0) [0091.852] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.853] GetLastError () returned 0x5 [0091.853] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.853] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.853] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ko\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079a08d0 [0091.854] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.854] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.854] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0091.854] SetLastError (dwErrCode=0x0) [0091.855] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ko\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ko\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.855] GetLastError () returned 0x5 [0091.855] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.855] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.855] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0091.855] SetLastError (dwErrCode=0x0) [0091.855] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.855] GetLastError () returned 0x5 [0091.855] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b49b80, lpOverlapped=0x0) returned 0 [0091.855] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.855] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lt\\*.*", lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0xd7079a0d50 [0091.856] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0091.856] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0091.856] FindClose (in: hFindFile=0xd7079a0d50 | out: hFindFile=0xd7079a0d50) returned 1 [0091.856] SetLastError (dwErrCode=0x0) [0091.856] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lt\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\lt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.129] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml", dwFileAttributes=0x80) returned 0 [0092.131] CreateFileW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist\\frameworklist.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.131] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.131] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.132] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0092.132] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0092.133] SetLastError (dwErrCode=0x0) [0092.133] CreateFileW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\RyukReadMe.txt" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.133] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.133] SetFileAttributesW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml", dwFileAttributes=0x80) returned 0 [0092.134] CreateFileW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\winfxlist.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.134] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.134] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.134] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0092.134] FindClose (in: hFindFile=0xd7079a0d50 | out: hFindFile=0xd7079a0d50) returned 1 [0092.137] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\FrameworkList.xml", dwFileAttributes=0x80) returned 0 [0092.138] CreateFileW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\redistlist\\frameworklist.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.138] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.138] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.138] FindNextFileW (in: hFindFile=0xd7079a0450, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0092.138] FindClose (in: hFindFile=0xd7079a0450 | out: hFindFile=0xd7079a0450) returned 1 [0092.142] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.142] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\1494870C-9912-C184-4CC9-B401-A53F4D8DE290.pdf", dwFileAttributes=0x80) returned 0 [0092.143] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\1494870C-9912-C184-4CC9-B401-A53F4D8DE290.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\1494870c-9912-c184-4cc9-b401-a53f4d8de290.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.143] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.143] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.143] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0092.143] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0092.143] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0092.145] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.145] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\AppCenter_R.aapp", dwFileAttributes=0x80) returned 0 [0092.146] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\AppCenter_R.aapp" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acroapp\\enu\\appcenter_r.aapp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.146] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.146] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.146] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0092.147] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.147] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Certificates_R.aapp", dwFileAttributes=0x80) returned 0 [0092.147] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Certificates_R.aapp" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acroapp\\enu\\certificates_r.aapp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.148] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.148] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.148] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0092.148] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.148] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\CollectSignatures.aapp", dwFileAttributes=0x80) returned 0 [0092.148] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\CollectSignatures.aapp" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acroapp\\enu\\collectsignatures.aapp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.149] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.149] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.149] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0092.149] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.149] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Combine_R_RHP.aapp", dwFileAttributes=0x80) returned 0 [0092.149] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Combine_R_RHP.aapp" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acroapp\\enu\\combine_r_rhp.aapp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.150] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.150] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.150] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0092.150] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.150] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Comments.aapp", dwFileAttributes=0x80) returned 0 [0092.151] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Comments.aapp" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acroapp\\enu\\comments.aapp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.151] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.151] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.151] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0092.151] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.151] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Compare_R_RHP.aapp", dwFileAttributes=0x80) returned 0 [0092.152] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Compare_R_RHP.aapp" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acroapp\\enu\\compare_r_rhp.aapp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.152] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.152] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.152] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0092.152] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.152] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\CPDF_Full.aapp", dwFileAttributes=0x80) returned 0 [0092.153] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\CPDF_Full.aapp" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acroapp\\enu\\cpdf_full.aapp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.153] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.153] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.153] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0092.153] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.154] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\CPDF_RHP.aapp", dwFileAttributes=0x80) returned 0 [0092.154] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\CPDF_RHP.aapp" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acroapp\\enu\\cpdf_rhp.aapp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.154] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.154] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.154] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0092.154] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.154] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Edit_R_Exp_RHP.aapp", dwFileAttributes=0x80) returned 0 [0092.155] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Edit_R_Exp_RHP.aapp" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acroapp\\enu\\edit_r_exp_rhp.aapp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.155] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.155] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.155] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0092.155] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.155] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Edit_R_Full.aapp", dwFileAttributes=0x80) returned 0 [0092.156] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Edit_R_Full.aapp" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acroapp\\enu\\edit_r_full.aapp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.156] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.156] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.156] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0092.156] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.156] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Edit_R_RHP.aapp", dwFileAttributes=0x80) returned 0 [0092.156] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Edit_R_RHP.aapp" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acroapp\\enu\\edit_r_rhp.aapp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.157] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.157] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.157] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0092.157] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.157] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\EPDF_Full.aapp", dwFileAttributes=0x80) returned 0 [0092.157] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\EPDF_Full.aapp" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acroapp\\enu\\epdf_full.aapp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.158] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.158] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.158] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0092.158] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.158] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\EPDF_RHP.aapp", dwFileAttributes=0x80) returned 0 [0092.158] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\EPDF_RHP.aapp" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acroapp\\enu\\epdf_rhp.aapp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.158] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.158] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.159] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0092.159] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.159] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\FillSign.aapp", dwFileAttributes=0x80) returned 0 [0092.159] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\FillSign.aapp" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acroapp\\enu\\fillsign.aapp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.159] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.159] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.160] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0092.160] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.160] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Home.aapp", dwFileAttributes=0x80) returned 0 [0092.160] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Home.aapp" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acroapp\\enu\\home.aapp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.160] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.160] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.160] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0092.160] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.161] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Measure.aapp", dwFileAttributes=0x80) returned 0 [0092.161] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Measure.aapp" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acroapp\\enu\\measure.aapp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.162] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.162] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.162] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0092.162] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.162] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\MoreTools.aapp", dwFileAttributes=0x80) returned 0 [0092.163] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\MoreTools.aapp" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acroapp\\enu\\moretools.aapp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.163] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.163] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.163] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0092.163] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.164] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\OptimizePDF_R_RHP.aapp", dwFileAttributes=0x80) returned 0 [0092.164] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\OptimizePDF_R_RHP.aapp" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acroapp\\enu\\optimizepdf_r_rhp.aapp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.164] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.164] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.164] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0092.164] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.165] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Pages_R_RHP.aapp", dwFileAttributes=0x80) returned 0 [0092.165] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Pages_R_RHP.aapp" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acroapp\\enu\\pages_r_rhp.aapp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.165] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.165] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.165] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0092.165] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.166] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Protect_R_RHP.aapp", dwFileAttributes=0x80) returned 0 [0092.166] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Protect_R_RHP.aapp" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acroapp\\enu\\protect_r_rhp.aapp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.166] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.166] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.166] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0092.166] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.167] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Redact_R_RHP.aapp", dwFileAttributes=0x80) returned 0 [0092.167] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Redact_R_RHP.aapp" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acroapp\\enu\\redact_r_rhp.aapp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.167] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.167] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.167] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0092.167] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.167] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Scan_R_RHP.aapp", dwFileAttributes=0x80) returned 0 [0092.168] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Scan_R_RHP.aapp" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acroapp\\enu\\scan_r_rhp.aapp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.168] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.168] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.169] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0092.169] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.169] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Stamp.aapp", dwFileAttributes=0x80) returned 0 [0092.169] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Stamp.aapp" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acroapp\\enu\\stamp.aapp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.169] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.169] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.170] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0092.170] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.170] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\TrackedSend.aapp", dwFileAttributes=0x80) returned 0 [0092.170] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\TrackedSend.aapp" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acroapp\\enu\\trackedsend.aapp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.170] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.170] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.170] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0092.170] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.171] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Viewer.aapp", dwFileAttributes=0x80) returned 0 [0092.171] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Viewer.aapp" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acroapp\\enu\\viewer.aapp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.171] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.171] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.171] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0092.171] FindClose (in: hFindFile=0xd7079a0e70 | out: hFindFile=0xd7079a0e70) returned 1 [0092.176] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.177] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef.pak", dwFileAttributes=0x80) returned 0 [0092.177] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef.pak" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\cef.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.177] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.177] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.177] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.177] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.178] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_100_percent.pak", dwFileAttributes=0x80) returned 0 [0092.178] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_100_percent.pak" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\cef_100_percent.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.178] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.178] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.178] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.178] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.179] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_200_percent.pak", dwFileAttributes=0x80) returned 0 [0092.180] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_200_percent.pak" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\cef_200_percent.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.180] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.180] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.180] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.180] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.180] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_extensions.pak", dwFileAttributes=0x80) returned 0 [0092.181] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_extensions.pak" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\cef_extensions.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.181] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.181] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.181] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.181] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.181] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.181] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\COPYING.LGPLv2.1.txt", dwFileAttributes=0x80) returned 0 [0092.182] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\COPYING.LGPLv2.1.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\copying.lgplv2.1.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.182] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.182] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.182] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.182] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.182] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.182] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.182] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.182] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\icudtl.dat", dwFileAttributes=0x80) returned 0 [0092.183] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\icudtl.dat" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\icudtl.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.183] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.183] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.183] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.183] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.183] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.183] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.183] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.183] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\LICENSE.txt", dwFileAttributes=0x80) returned 0 [0092.184] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\LICENSE.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\license.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.184] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.184] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.184] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.185] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.185] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\locales\\en-US.pak", dwFileAttributes=0x80) returned 0 [0092.185] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\locales\\en-US.pak" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\locales\\en-us.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.185] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.185] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.186] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0092.186] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0092.186] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.186] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\natives_blob.bin", dwFileAttributes=0x80) returned 0 [0092.186] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\natives_blob.bin" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\natives_blob.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.187] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.187] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.187] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.187] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.187] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.187] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.187] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\snapshot_blob.bin", dwFileAttributes=0x80) returned 0 [0092.187] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\snapshot_blob.bin" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\snapshot_blob.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.187] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.187] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.188] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.188] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0092.188] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0092.188] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.188] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Adobe.Reader.Dependencies.manifest", dwFileAttributes=0x80) returned 0 [0092.189] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Adobe.Reader.Dependencies.manifest" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\adobe.reader.dependencies.manifest"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.189] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.189] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.189] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0092.189] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0092.189] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0092.189] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0092.189] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0092.189] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0092.189] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0092.189] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0092.189] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0092.191] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.191] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn\\manifest.json", dwFileAttributes=0x80) returned 0 [0092.192] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn\\manifest.json" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\browser\\wcchromeextn\\manifest.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.192] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.192] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.192] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0092.192] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0092.192] FindClose (in: hFindFile=0xd7079a0930 | out: hFindFile=0xd7079a0930) returned 1 [0092.193] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.193] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Click on 'Change' to select default PDF handler.pdf", dwFileAttributes=0x80) returned 0 [0092.194] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Click on 'Change' to select default PDF handler.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\click on 'change' to select default pdf handler.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.194] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.194] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.194] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0092.194] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0092.194] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0092.194] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.195] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\cryptocme.sig", dwFileAttributes=0x80) returned 0 [0092.195] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\cryptocme.sig" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\cryptocme.sig"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.195] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.195] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.195] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0092.195] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0092.195] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0092.195] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0092.195] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0092.195] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0092.197] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.197] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\AdobeID.pdf", dwFileAttributes=0x80) returned 0 [0092.198] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\idtemplates\\enu\\adobeid.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.198] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.198] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.198] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0092.198] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.199] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\DefaultID.pdf", dwFileAttributes=0x80) returned 0 [0092.199] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\idtemplates\\enu\\defaultid.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.199] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.199] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.199] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0092.199] FindClose (in: hFindFile=0xd7079a0930 | out: hFindFile=0xd7079a0930) returned 1 [0092.201] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.201] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Javascripts\\JSByteCodeWin.bin", dwFileAttributes=0x80) returned 0 [0092.202] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Javascripts\\JSByteCodeWin.bin" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\javascripts\\jsbytecodewin.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.202] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.202] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.203] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0092.203] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0092.204] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.204] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\ENU\\license.html", dwFileAttributes=0x80) returned 0 [0092.204] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\ENU\\license.html" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\legal\\enu\\license.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.204] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.204] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.204] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0092.204] FindClose (in: hFindFile=0xd7079a0e70 | out: hFindFile=0xd7079a0e70) returned 1 [0092.206] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.206] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Locale\\en_US\\stopwords.ENU", dwFileAttributes=0x80) returned 0 [0092.206] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Locale\\en_US\\stopwords.ENU" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\locale\\en_us\\stopwords.enu"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.207] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.207] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.207] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0092.207] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0092.207] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.207] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\PDFSigQFormalRep.pdf", dwFileAttributes=0x80) returned 0 [0092.208] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\PDFSigQFormalRep.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\pdfsigqformalrep.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.208] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.208] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.208] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0092.208] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0092.210] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.210] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Accessibility.api", dwFileAttributes=0x80) returned 0 [0092.211] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Accessibility.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\accessibility.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.211] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.211] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.211] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.212] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.212] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\adobepdf.xdc", dwFileAttributes=0x80) returned 0 [0092.213] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\adobepdf.xdc" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\acroform\\adobepdf.xdc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.213] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.213] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.213] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0092.213] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.213] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\PMP\\AdobePDF417.pmp", dwFileAttributes=0x80) returned 0 [0092.214] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\PMP\\AdobePDF417.pmp" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\acroform\\pmp\\adobepdf417.pmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.214] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.214] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.214] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0092.214] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.214] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\PMP\\DataMatrix.pmp", dwFileAttributes=0x80) returned 0 [0092.214] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\PMP\\DataMatrix.pmp" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\acroform\\pmp\\datamatrix.pmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.215] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.215] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.215] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0092.215] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.215] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\PMP\\QRCode.pmp", dwFileAttributes=0x80) returned 0 [0092.215] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\PMP\\QRCode.pmp" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\acroform\\pmp\\qrcode.pmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.215] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.216] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.216] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0092.216] FindClose (in: hFindFile=0xd7079a0e70 | out: hFindFile=0xd7079a0e70) returned 1 [0092.216] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.216] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm.api", dwFileAttributes=0x80) returned 0 [0092.217] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\acroform.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.217] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.217] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.217] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.218] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.219] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf", dwFileAttributes=0x80) returned 0 [0092.219] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\annotations\\stamps\\enu\\dynamic.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.219] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.219] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.219] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0092.219] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.219] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf", dwFileAttributes=0x80) returned 0 [0092.220] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\annotations\\stamps\\enu\\signhere.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.220] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.220] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.220] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0092.220] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.220] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf", dwFileAttributes=0x80) returned 0 [0092.220] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\annotations\\stamps\\enu\\standardbusiness.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.221] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.221] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.221] FindNextFileW (in: hFindFile=0xd7079a0ed0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0092.221] FindClose (in: hFindFile=0xd7079a0ed0 | out: hFindFile=0xd7079a0ed0) returned 1 [0092.221] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.221] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf", dwFileAttributes=0x80) returned 0 [0092.222] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\annotations\\stamps\\words.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.222] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.222] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.222] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0092.222] FindClose (in: hFindFile=0xd7079a0e70 | out: hFindFile=0xd7079a0e70) returned 1 [0092.222] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.223] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annots.api", dwFileAttributes=0x80) returned 0 [0092.223] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annots.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\annots.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.223] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.223] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.223] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.223] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.224] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Checkers.api", dwFileAttributes=0x80) returned 0 [0092.224] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Checkers.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\checkers.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.224] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.224] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.224] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.224] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.224] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DigSig.api", dwFileAttributes=0x80) returned 0 [0092.225] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DigSig.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\digsig.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.225] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.225] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.225] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.225] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.225] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DropboxStorage.api", dwFileAttributes=0x80) returned 0 [0092.226] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DropboxStorage.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\dropboxstorage.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.226] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.226] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.227] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.227] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.227] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DVA.api", dwFileAttributes=0x80) returned 0 [0092.227] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DVA.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\dva.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.227] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.227] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.227] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.227] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.228] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\eBook.api", dwFileAttributes=0x80) returned 0 [0092.228] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\eBook.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\ebook.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.229] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.229] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.229] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.229] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.229] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\EScript.api", dwFileAttributes=0x80) returned 0 [0092.229] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\EScript.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\escript.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.230] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.230] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.230] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.230] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.230] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\IA32.api", dwFileAttributes=0x80) returned 0 [0092.230] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\IA32.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\ia32.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.230] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.230] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.231] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.231] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.231] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\MakeAccessible.api", dwFileAttributes=0x80) returned 0 [0092.232] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\MakeAccessible.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\makeaccessible.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.233] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.233] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.233] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.233] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.234] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.mpp", dwFileAttributes=0x80) returned 0 [0092.234] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.mpp" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\multimedia\\mpp\\flash.mpp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.234] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.234] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.234] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0092.234] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.234] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.mpp", dwFileAttributes=0x80) returned 0 [0092.235] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.mpp" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.mpp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.235] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.235] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.235] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0092.235] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.236] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.mpp", dwFileAttributes=0x80) returned 0 [0092.236] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.mpp" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\multimedia\\mpp\\quicktime.mpp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.236] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.236] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.236] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0092.236] FindNextFileW (in: hFindFile=0xd7079a0930, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0092.236] FindClose (in: hFindFile=0xd7079a0930 | out: hFindFile=0xd7079a0930) returned 1 [0092.237] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.237] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia.api", dwFileAttributes=0x80) returned 0 [0092.237] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\multimedia.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.238] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.238] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.238] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.238] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.238] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\PDDom.api", dwFileAttributes=0x80) returned 0 [0092.239] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\PDDom.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\pddom.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.239] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.239] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.239] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.240] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.240] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\PPKLite.api", dwFileAttributes=0x80) returned 0 [0092.240] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\PPKLite.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\ppklite.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.240] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.240] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.241] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.241] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.241] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\ReadOutLoud.api", dwFileAttributes=0x80) returned 0 [0092.242] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\ReadOutLoud.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\readoutloud.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.242] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.242] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.242] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.242] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.242] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\reflow.api", dwFileAttributes=0x80) returned 0 [0092.247] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\reflow.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\reflow.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.247] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.247] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.247] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.247] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.248] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\SaveAsRTF.api", dwFileAttributes=0x80) returned 0 [0092.249] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\SaveAsRTF.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\saveasrtf.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.249] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.250] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.250] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.250] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.250] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Search.api", dwFileAttributes=0x80) returned 0 [0092.250] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Search.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\search.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.251] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.251] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.251] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.251] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.251] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\SendMail.api", dwFileAttributes=0x80) returned 0 [0092.252] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\SendMail.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\sendmail.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.252] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.252] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.252] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.252] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.252] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Spelling.api", dwFileAttributes=0x80) returned 0 [0092.253] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Spelling.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\spelling.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.253] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.253] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.253] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.253] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.253] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\StorageConnectors.api", dwFileAttributes=0x80) returned 0 [0092.254] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\StorageConnectors.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\storageconnectors.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.254] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.254] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.254] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.254] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.255] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Updater.api", dwFileAttributes=0x80) returned 0 [0092.255] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Updater.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\updater.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.255] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.255] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.255] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.255] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.256] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\weblink.api", dwFileAttributes=0x80) returned 0 [0092.256] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\weblink.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\weblink.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.256] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.256] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.256] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0092.257] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0092.279] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.279] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\2d.x3d", dwFileAttributes=0x80) returned 0 [0092.280] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\2d.x3d" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins3d\\2d.x3d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.280] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.280] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.280] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.280] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.281] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\3difr.x3d", dwFileAttributes=0x80) returned 0 [0092.281] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\3difr.x3d" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins3d\\3difr.x3d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.281] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.281] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.281] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.282] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.282] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\drvDX9.x3d", dwFileAttributes=0x80) returned 0 [0092.282] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\drvDX9.x3d" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins3d\\drvdx9.x3d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.282] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.282] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.282] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.282] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.283] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\drvSOFT.x3d", dwFileAttributes=0x80) returned 0 [0092.283] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\drvSOFT.x3d" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins3d\\drvsoft.x3d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.283] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.283] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.283] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.284] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.284] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\prc\\MyriadCAD.otf", dwFileAttributes=0x80) returned 0 [0092.284] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\prc\\MyriadCAD.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins3d\\prc\\myriadcad.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.285] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.285] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.285] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0092.285] FindClose (in: hFindFile=0xd7079a0e10 | out: hFindFile=0xd7079a0e10) returned 1 [0092.285] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.285] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\prcr.x3d", dwFileAttributes=0x80) returned 0 [0092.286] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\prcr.x3d" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins3d\\prcr.x3d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.286] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.286] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.286] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.286] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.286] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\tesselate.x3d", dwFileAttributes=0x80) returned 0 [0092.286] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\tesselate.x3d" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins3d\\tesselate.x3d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.287] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.287] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.287] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0092.287] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0092.287] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.287] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\pmd.cer", dwFileAttributes=0x80) returned 0 [0092.288] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\pmd.cer" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\pmd.cer"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.289] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.289] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.289] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0092.289] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0092.289] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0092.289] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.289] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\RTC.der", dwFileAttributes=0x80) returned 0 [0092.289] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\RTC.der" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\rtc.der"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.290] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.290] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.290] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0092.290] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0092.290] FindNextFileW (in: hFindFile=0xd7079a0d50, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0092.921] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.921] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\add_reviewer.gif", dwFileAttributes=0x80) returned 0 [0092.922] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\add_reviewer.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\add_reviewer.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.922] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.922] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.922] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.922] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.923] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\bl.gif", dwFileAttributes=0x80) returned 0 [0092.923] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\bl.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\bl.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.923] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.923] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.923] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.923] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.924] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\br.gif", dwFileAttributes=0x80) returned 0 [0092.924] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\br.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\br.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.924] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.924] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.924] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.924] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.925] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\create_form.gif", dwFileAttributes=0x80) returned 0 [0092.926] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\create_form.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\create_form.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.926] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.926] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.926] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.926] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.926] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\distribute_form.gif", dwFileAttributes=0x80) returned 0 [0092.927] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\distribute_form.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\distribute_form.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.927] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.927] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.927] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.927] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.927] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\email_all.gif", dwFileAttributes=0x80) returned 0 [0092.928] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\email_all.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\email_all.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.928] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.928] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.928] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.928] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.928] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.928] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\ended_review_or_form.gif", dwFileAttributes=0x80) returned 0 [0092.930] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\ended_review_or_form.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\ended_review_or_form.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.930] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.930] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.931] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.931] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.931] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\end_review.gif", dwFileAttributes=0x80) returned 0 [0092.931] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\end_review.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\end_review.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.931] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.932] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.932] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.932] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.932] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_distributed.gif", dwFileAttributes=0x80) returned 0 [0092.932] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_distributed.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\forms_distributed.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.933] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.933] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.933] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.933] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.933] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_received.gif", dwFileAttributes=0x80) returned 0 [0092.934] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_received.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\forms_received.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.934] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.934] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.934] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.934] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.935] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_super.gif", dwFileAttributes=0x80) returned 0 [0092.935] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_super.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\forms_super.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.935] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.935] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.935] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.935] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.936] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\form_responses.gif", dwFileAttributes=0x80) returned 0 [0092.936] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\form_responses.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\form_responses.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.936] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.936] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.936] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.936] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.936] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\info.gif", dwFileAttributes=0x80) returned 0 [0092.937] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\info.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\info.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.937] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.937] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.937] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.937] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.937] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\main.css", dwFileAttributes=0x80) returned 0 [0092.937] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\main.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.938] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.938] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.938] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.938] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.938] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\open_original_form.gif", dwFileAttributes=0x80) returned 0 [0092.939] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\open_original_form.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\open_original_form.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.939] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.939] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.939] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.939] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.940] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\pdf.gif", dwFileAttributes=0x80) returned 0 [0092.940] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\pdf.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\pdf.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.940] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.940] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.940] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.940] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.941] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviewers.gif", dwFileAttributes=0x80) returned 0 [0092.941] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviewers.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\reviewers.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.941] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.941] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.942] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.942] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.942] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_joined.gif", dwFileAttributes=0x80) returned 0 [0092.942] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_joined.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\reviews_joined.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.942] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.942] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.942] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.942] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.943] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_sent.gif", dwFileAttributes=0x80) returned 0 [0092.943] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_sent.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\reviews_sent.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.943] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.944] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.944] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.944] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.944] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_super.gif", dwFileAttributes=0x80) returned 0 [0092.944] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_super.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\reviews_super.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.946] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.946] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.946] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.946] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.946] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_browser.gif", dwFileAttributes=0x80) returned 0 [0092.946] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_browser.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\review_browser.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.947] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.947] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.947] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.947] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.947] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_email.gif", dwFileAttributes=0x80) returned 0 [0092.947] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_email.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\review_email.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.948] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.948] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.948] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.948] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.948] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_same_reviewers.gif", dwFileAttributes=0x80) returned 0 [0092.948] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_same_reviewers.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\review_same_reviewers.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.949] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.949] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.949] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.949] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.949] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_shared.gif", dwFileAttributes=0x80) returned 0 [0092.949] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_shared.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\review_shared.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.949] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.949] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.950] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.950] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.950] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\rss.gif", dwFileAttributes=0x80) returned 0 [0092.950] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\rss.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\rss.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.950] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.950] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.950] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.950] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.951] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\server_issue.gif", dwFileAttributes=0x80) returned 0 [0092.951] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\server_issue.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\server_issue.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.951] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.951] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.951] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.951] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.952] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\server_lg.gif", dwFileAttributes=0x80) returned 0 [0092.953] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\server_lg.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\server_lg.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.953] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.953] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.953] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.953] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.953] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\server_ok.gif", dwFileAttributes=0x80) returned 0 [0092.953] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\server_ok.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\server_ok.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.954] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.954] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.954] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.954] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.954] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\stop_collection_data.gif", dwFileAttributes=0x80) returned 0 [0092.954] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\stop_collection_data.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\stop_collection_data.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.955] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.955] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.955] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.955] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.955] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\submission_history.gif", dwFileAttributes=0x80) returned 0 [0092.955] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\submission_history.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\submission_history.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.955] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.955] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.956] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.956] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.956] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\tl.gif", dwFileAttributes=0x80) returned 0 [0092.957] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\tl.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\tl.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.957] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.957] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.957] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.957] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.957] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\tr.gif", dwFileAttributes=0x80) returned 0 [0092.958] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\tr.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\tr.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.958] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.958] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.958] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.958] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.958] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\trash.gif", dwFileAttributes=0x80) returned 0 [0092.958] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\trash.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\trash.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.959] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.959] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.959] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.959] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.959] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOffNotificationInAcrobat.gif", dwFileAttributes=0x80) returned 0 [0092.960] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOffNotificationInAcrobat.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\turnoffnotificationinacrobat.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.960] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.960] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.960] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.960] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.961] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOffNotificationInTray.gif", dwFileAttributes=0x80) returned 0 [0092.961] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOffNotificationInTray.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\turnoffnotificationintray.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.961] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.961] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.962] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.962] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.962] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOnNotificationInAcrobat.gif", dwFileAttributes=0x80) returned 0 [0092.962] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOnNotificationInAcrobat.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\turnonnotificationinacrobat.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.962] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.962] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.963] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.963] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.963] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOnNotificationInTray.gif", dwFileAttributes=0x80) returned 0 [0092.963] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOnNotificationInTray.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\turnonnotificationintray.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.963] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.963] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.963] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.963] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.964] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\warning.gif", dwFileAttributes=0x80) returned 0 [0092.964] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\warning.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\warning.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.964] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.964] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.964] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0092.964] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0092.968] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.969] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\UIThemes\\DarkTheme.acrotheme", dwFileAttributes=0x80) returned 0 [0092.969] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\UIThemes\\DarkTheme.acrotheme" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\uithemes\\darktheme.acrotheme"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.969] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.969] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.969] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0092.969] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.970] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\UIThemes\\LightTheme.acrotheme", dwFileAttributes=0x80) returned 0 [0092.970] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\UIThemes\\LightTheme.acrotheme" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\uithemes\\lighttheme.acrotheme"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.970] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.970] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.970] FindNextFileW (in: hFindFile=0xd7079a08d0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0092.970] FindClose (in: hFindFile=0xd7079a08d0 | out: hFindFile=0xd7079a08d0) returned 1 [0092.974] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.974] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\base_uris.js", dwFileAttributes=0x80) returned 0 [0092.974] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\base_uris.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\base_uris.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.975] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.975] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.975] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0092.975] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.975] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\index.html", dwFileAttributes=0x80) returned 0 [0092.975] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\index.html" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\index.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.975] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.975] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.976] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0092.976] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0092.976] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.976] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\plugins.js", dwFileAttributes=0x80) returned 0 [0092.976] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\plugins.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\plugins.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.977] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.977] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.977] FindNextFileW (in: hFindFile=0xd7079a0e10, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0092.989] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.989] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-mac.css", dwFileAttributes=0x80) returned 0 [0092.989] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-mac.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\main-cef-mac.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.989] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.989] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.990] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0092.990] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.990] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-ui-theme.css", dwFileAttributes=0x80) returned 0 [0092.990] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-ui-theme.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\main-cef-ui-theme.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.990] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.990] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.991] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0092.991] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.991] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-win.css", dwFileAttributes=0x80) returned 0 [0092.991] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-win.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\main-cef-win.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.991] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.992] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.992] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0092.992] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.992] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-win8.css", dwFileAttributes=0x80) returned 0 [0092.992] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-win8.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\main-cef-win8.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.992] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.992] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.993] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0092.993] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.993] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef.css", dwFileAttributes=0x80) returned 0 [0092.993] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\main-cef.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.993] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.993] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.993] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0092.993] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.994] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-high-contrast.css", dwFileAttributes=0x80) returned 0 [0092.994] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-high-contrast.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\main-high-contrast.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.994] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.994] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.994] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0092.994] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.995] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main.css", dwFileAttributes=0x80) returned 0 [0092.995] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\main.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.995] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.995] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.995] FindNextFileW (in: hFindFile=0xd7079a0e70, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0092.995] FindClose (in: hFindFile=0xd7079a0e70 | out: hFindFile=0xd7079a0e70) returned 1 [0092.997] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.998] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner.gif", dwFileAttributes=0x80) returned 0 [0092.998] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\a12_spinner.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.999] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0092.999] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.999] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0092.999] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0092.999] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_2x.gif", dwFileAttributes=0x80) returned 0 [0093.000] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\a12_spinner_2x.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.000] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.000] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.000] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0093.000] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.000] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_int.gif", dwFileAttributes=0x80) returned 0 [0093.001] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_int.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\a12_spinner_int.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.001] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.001] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.001] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0093.001] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.001] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_int_2x.gif", dwFileAttributes=0x80) returned 0 [0093.001] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_int_2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\a12_spinner_int_2x.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.002] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.002] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.002] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0093.002] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.002] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\adc_logo.png", dwFileAttributes=0x80) returned 0 [0093.002] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\adc_logo.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\adc_logo.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.002] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.002] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.003] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0093.003] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.003] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\adobe_spinner.gif", dwFileAttributes=0x80) returned 0 [0093.003] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\adobe_spinner.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\adobe_spinner.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.003] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.003] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.004] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0093.004] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0093.004] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.004] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-114x114-precomposed.png", dwFileAttributes=0x80) returned 0 [0093.004] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-114x114-precomposed.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\apple-touch-icon-114x114-precomposed.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.004] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.004] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.004] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0093.004] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.005] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-144x144-precomposed.png", dwFileAttributes=0x80) returned 0 [0093.005] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-144x144-precomposed.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\apple-touch-icon-144x144-precomposed.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.005] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.005] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.005] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0093.005] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.006] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-57x57-precomposed.png", dwFileAttributes=0x80) returned 0 [0093.006] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-57x57-precomposed.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\apple-touch-icon-57x57-precomposed.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.006] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.006] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.006] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0093.006] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.006] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-72x72-precomposed.png", dwFileAttributes=0x80) returned 0 [0093.007] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-72x72-precomposed.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\apple-touch-icon-72x72-precomposed.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.007] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.007] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.008] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0093.008] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.008] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ccloud.png", dwFileAttributes=0x80) returned 0 [0093.009] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ccloud.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\ccloud.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.009] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.009] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.009] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0093.010] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.010] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ccloud_retina.png", dwFileAttributes=0x80) returned 0 [0093.010] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ccloud_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\ccloud_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.010] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.010] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.010] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0093.010] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.011] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\close_x.png", dwFileAttributes=0x80) returned 0 [0093.011] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\close_x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\close_x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.011] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.011] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.011] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0093.011] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.012] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\core_icons.png", dwFileAttributes=0x80) returned 0 [0093.012] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\core_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\core_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.012] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.012] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.012] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0093.012] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.012] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\core_icons_retina.png", dwFileAttributes=0x80) returned 0 [0093.013] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\core_icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\core_icons_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.013] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.013] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.013] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0093.013] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.013] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\dd_arrow_small.png", dwFileAttributes=0x80) returned 0 [0093.013] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\dd_arrow_small.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\dd_arrow_small.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.014] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.014] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.014] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0093.014] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.014] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\favicon.ico", dwFileAttributes=0x80) returned 0 [0093.014] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\favicon.ico" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\favicon.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.015] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.015] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.015] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0093.017] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.017] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\aic_file_icons.png", dwFileAttributes=0x80) returned 0 [0093.018] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\aic_file_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\aic_file_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.018] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.018] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.018] FindNextFileW (in: hFindFile=0xd707977450, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0093.018] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.018] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\aic_file_icons_retina_thumb.png", dwFileAttributes=0x80) returned 0 [0093.019] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\aic_file_icons_retina_thumb.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\aic_file_icons_retina_thumb.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.019] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.019] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.019] FindNextFileW (in: hFindFile=0xd707977450, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0093.019] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.019] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\cloud_icon.png", dwFileAttributes=0x80) returned 0 [0093.019] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\cloud_icon.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\cloud_icon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.020] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.020] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.020] FindNextFileW (in: hFindFile=0xd707977450, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0093.021] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.021] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hiContrast_bow.png", dwFileAttributes=0x80) returned 0 [0093.022] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hiContrast_bow.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hicontrast_bow.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.022] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.022] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.023] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0093.023] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.023] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hiContrast_wob.png", dwFileAttributes=0x80) returned 0 [0093.023] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hiContrast_wob.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hicontrast_wob.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.023] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.023] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.024] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0093.024] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.024] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_highcontrast.png", dwFileAttributes=0x80) returned 0 [0093.024] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_highcontrast.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_highcontrast.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.024] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.024] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.024] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0093.024] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.025] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highContrast_bow.png", dwFileAttributes=0x80) returned 0 [0093.025] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highContrast_bow.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highcontrast_bow.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.025] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.025] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.026] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0093.026] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.026] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highContrast_wob.png", dwFileAttributes=0x80) returned 0 [0093.026] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highContrast_wob.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highcontrast_wob.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.026] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.026] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.026] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 0 [0093.026] FindClose (in: hFindFile=0xd707976cd0 | out: hFindFile=0xd707976cd0) returned 1 [0093.031] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.032] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons.png", dwFileAttributes=0x80) returned 0 [0093.032] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.032] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.032] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.032] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0093.032] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.033] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons_retina_thumb.png", dwFileAttributes=0x80) returned 0 [0093.033] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons_retina_thumb.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons_retina_thumb.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.033] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.033] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.033] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0093.033] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.033] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\cloud_icon.png", dwFileAttributes=0x80) returned 0 [0093.034] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\cloud_icon.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\themes\\dark\\cloud_icon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.034] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.034] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.034] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0093.034] FindClose (in: hFindFile=0xd707976910 | out: hFindFile=0xd707976910) returned 1 [0093.039] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.039] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_hiContrast_bow.png", dwFileAttributes=0x80) returned 0 [0093.040] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_hiContrast_bow.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\hi_contrast\\core_icons_hicontrast_bow.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.040] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.040] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.040] FindNextFileW (in: hFindFile=0xd707977450, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0093.040] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.041] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_hiContrast_wob.png", dwFileAttributes=0x80) returned 0 [0093.041] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_hiContrast_wob.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\hi_contrast\\core_icons_hicontrast_wob.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.041] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.041] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.041] FindNextFileW (in: hFindFile=0xd707977450, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0093.041] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.041] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_highcontrast.png", dwFileAttributes=0x80) returned 0 [0093.042] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_highcontrast.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\hi_contrast\\core_icons_highcontrast.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.042] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.042] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.042] FindNextFileW (in: hFindFile=0xd707977450, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0093.042] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.042] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_highcontrast_retina.png", dwFileAttributes=0x80) returned 0 [0093.042] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_highcontrast_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\hi_contrast\\core_icons_highcontrast_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.043] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.043] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.043] FindNextFileW (in: hFindFile=0xd707977450, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0093.043] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.043] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons__retina_hiContrast_bow.png", dwFileAttributes=0x80) returned 0 [0093.043] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons__retina_hiContrast_bow.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\hi_contrast\\core_icons__retina_hicontrast_bow.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.044] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.044] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.044] FindNextFileW (in: hFindFile=0xd707977450, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0093.044] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.044] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons__retina_hiContrast_wob.png", dwFileAttributes=0x80) returned 0 [0093.044] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons__retina_hiContrast_wob.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\hi_contrast\\core_icons__retina_hicontrast_wob.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.044] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.044] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.045] FindNextFileW (in: hFindFile=0xd707977450, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 0 [0093.045] FindClose (in: hFindFile=0xd707977450 | out: hFindFile=0xd707977450) returned 1 [0093.048] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.048] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\illustrations.png", dwFileAttributes=0x80) returned 0 [0093.048] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\illustrations.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\illustrations.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.048] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.049] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.049] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0093.049] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.049] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\illustrations_retina.png", dwFileAttributes=0x80) returned 0 [0093.049] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\illustrations_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\illustrations_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.049] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.049] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.050] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0093.050] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.050] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ind_prog.gif", dwFileAttributes=0x80) returned 0 [0093.050] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ind_prog.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\ind_prog.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.050] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.050] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.050] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0093.050] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.051] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\japanese_over.png", dwFileAttributes=0x80) returned 0 [0093.051] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\japanese_over.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\japanese_over.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.051] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.051] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.051] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0093.051] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.052] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\large_trefoil.png", dwFileAttributes=0x80) returned 0 [0093.052] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\large_trefoil.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\large_trefoil.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.052] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.052] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.052] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0093.052] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.052] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\large_trefoil_2x.png", dwFileAttributes=0x80) returned 0 [0093.053] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\large_trefoil_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\large_trefoil_2x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.053] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.053] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.054] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0093.054] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.054] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\logo_retina.png", dwFileAttributes=0x80) returned 0 [0093.054] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\logo_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\logo_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.055] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.055] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.055] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0093.055] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.055] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress-indeterminate.gif", dwFileAttributes=0x80) returned 0 [0093.055] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress-indeterminate.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\progress-indeterminate.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.055] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.055] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.056] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0093.056] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.056] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner.gif", dwFileAttributes=0x80) returned 0 [0093.056] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\progress_spinner.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.056] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.056] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.057] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0093.057] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.057] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner2x.gif", dwFileAttributes=0x80) returned 0 [0093.057] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\progress_spinner2x.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.058] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.058] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.058] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0093.058] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.058] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner_dark.gif", dwFileAttributes=0x80) returned 0 [0093.058] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner_dark.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\progress_spinner_dark.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.058] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.059] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.059] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0093.059] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.059] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner_dark2x.gif", dwFileAttributes=0x80) returned 0 [0093.059] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner_dark2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\progress_spinner_dark2x.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.059] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.059] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.060] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0093.060] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.060] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\RHP_icons.png", dwFileAttributes=0x80) returned 0 [0093.060] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\RHP_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\rhp_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.060] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.060] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.060] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0093.060] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.061] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\RHP_icons_2x.png", dwFileAttributes=0x80) returned 0 [0093.061] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\RHP_icons_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\rhp_icons_2x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.061] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.061] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.061] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0093.061] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.062] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\selection-actions.png", dwFileAttributes=0x80) returned 0 [0093.062] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\selection-actions.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\selection-actions.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.062] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.062] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.062] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0093.062] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.063] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\selection-actions2x.png", dwFileAttributes=0x80) returned 0 [0093.063] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\selection-actions2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\selection-actions2x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.063] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.063] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.063] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0093.075] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.075] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner.gif", dwFileAttributes=0x80) returned 0 [0093.076] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\a12_spinner.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.076] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.076] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.077] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0093.077] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.077] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_2x.gif", dwFileAttributes=0x80) returned 0 [0093.078] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\a12_spinner_2x.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.078] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.078] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.078] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0093.078] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.078] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_int.gif", dwFileAttributes=0x80) returned 0 [0093.079] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_int.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\a12_spinner_int.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.079] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.079] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.079] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0093.079] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.080] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_int_2x.gif", dwFileAttributes=0x80) returned 0 [0093.080] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_int_2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\a12_spinner_int_2x.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.080] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.080] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.080] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0093.080] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.080] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\adc_logo.png", dwFileAttributes=0x80) returned 0 [0093.081] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\adc_logo.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\adc_logo.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.081] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.081] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.081] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0093.081] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.082] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\adobe_spinner.gif", dwFileAttributes=0x80) returned 0 [0093.082] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\adobe_spinner.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\adobe_spinner.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.082] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.082] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.083] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0093.083] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0093.083] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.083] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-114x114-precomposed.png", dwFileAttributes=0x80) returned 0 [0093.084] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-114x114-precomposed.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\apple-touch-icon-114x114-precomposed.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.084] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.084] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.084] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0093.084] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.084] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-144x144-precomposed.png", dwFileAttributes=0x80) returned 0 [0093.084] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-144x144-precomposed.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\apple-touch-icon-144x144-precomposed.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.085] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.085] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.085] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0093.085] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.085] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-57x57-precomposed.png", dwFileAttributes=0x80) returned 0 [0093.086] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-57x57-precomposed.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\apple-touch-icon-57x57-precomposed.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.086] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.086] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.086] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0093.086] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.086] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-72x72-precomposed.png", dwFileAttributes=0x80) returned 0 [0093.087] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-72x72-precomposed.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\apple-touch-icon-72x72-precomposed.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.087] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.087] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.087] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0093.087] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.088] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ccloud.png", dwFileAttributes=0x80) returned 0 [0093.088] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ccloud.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\ccloud.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.088] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.088] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.088] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0093.088] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.089] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ccloud_retina.png", dwFileAttributes=0x80) returned 0 [0093.089] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ccloud_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\ccloud_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.089] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.089] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.090] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0093.090] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.090] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\close_x.png", dwFileAttributes=0x80) returned 0 [0093.090] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\close_x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\close_x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.090] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.090] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.091] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0093.091] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.091] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\core_icons.png", dwFileAttributes=0x80) returned 0 [0093.091] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\core_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\core_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.092] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.092] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.092] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0093.092] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.092] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\core_icons_retina.png", dwFileAttributes=0x80) returned 0 [0093.092] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\core_icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\core_icons_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.092] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.093] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.093] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0093.093] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.093] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\dd_arrow_small.png", dwFileAttributes=0x80) returned 0 [0093.093] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\dd_arrow_small.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\dd_arrow_small.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.093] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.093] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.094] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0093.094] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.094] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\favicon.ico", dwFileAttributes=0x80) returned 0 [0093.094] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\favicon.ico" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\favicon.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.094] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.094] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.094] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0093.094] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.095] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\illustrations.png", dwFileAttributes=0x80) returned 0 [0093.095] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\illustrations.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\illustrations.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.095] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.095] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.095] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0093.095] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.096] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\illustrations_retina.png", dwFileAttributes=0x80) returned 0 [0093.096] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\illustrations_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\illustrations_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.096] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.096] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.096] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0093.096] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.096] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ind_prog.gif", dwFileAttributes=0x80) returned 0 [0093.097] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ind_prog.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\ind_prog.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.097] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.097] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.097] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0093.097] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.097] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\japanese_over.png", dwFileAttributes=0x80) returned 0 [0093.097] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\japanese_over.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\japanese_over.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.098] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.098] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.098] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0093.098] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.098] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\large_trefoil.png", dwFileAttributes=0x80) returned 0 [0093.098] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\large_trefoil.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\large_trefoil.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.098] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.099] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.099] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0093.099] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.099] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\large_trefoil_2x.png", dwFileAttributes=0x80) returned 0 [0093.100] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\large_trefoil_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\large_trefoil_2x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.100] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.100] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.100] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0093.100] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.100] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\logo_retina.png", dwFileAttributes=0x80) returned 0 [0093.100] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\logo_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\logo_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.101] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.101] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.101] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0093.101] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.101] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress-indeterminate.gif", dwFileAttributes=0x80) returned 0 [0093.101] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress-indeterminate.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\progress-indeterminate.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.102] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.102] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.102] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0093.102] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.102] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner.gif", dwFileAttributes=0x80) returned 0 [0093.102] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\progress_spinner.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.102] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.103] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.103] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0093.103] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.103] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner2x.gif", dwFileAttributes=0x80) returned 0 [0093.103] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\progress_spinner2x.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.103] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.103] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.104] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0093.104] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.104] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner_dark.gif", dwFileAttributes=0x80) returned 0 [0093.104] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner_dark.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\progress_spinner_dark.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.104] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.104] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.104] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0093.104] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.105] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner_dark2x.gif", dwFileAttributes=0x80) returned 0 [0093.105] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner_dark2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\progress_spinner_dark2x.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.105] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.105] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.105] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0093.105] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.106] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\RHP_icons.png", dwFileAttributes=0x80) returned 0 [0093.106] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\RHP_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\rhp_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.106] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.106] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.106] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0093.106] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.106] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\RHP_icons_2x.png", dwFileAttributes=0x80) returned 0 [0093.107] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\RHP_icons_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\rhp_icons_2x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.107] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.107] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.107] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0093.107] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.107] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\selection-actions.png", dwFileAttributes=0x80) returned 0 [0093.107] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\selection-actions.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\selection-actions.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.108] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.108] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.108] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 1 [0093.108] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.108] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\selection-actions2x.png", dwFileAttributes=0x80) returned 0 [0093.108] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\selection-actions2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\selection-actions2x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.108] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.108] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.109] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 0 [0093.109] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0093.260] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.261] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-down.png", dwFileAttributes=0x80) returned 0 [0093.261] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-down.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\arrow-down.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.261] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.261] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.262] FindNextFileW (in: hFindFile=0xd707977450, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0093.262] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.262] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-left.png", dwFileAttributes=0x80) returned 0 [0093.262] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-left.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\arrow-left.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.262] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.262] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.262] FindNextFileW (in: hFindFile=0xd707977450, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0093.262] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.263] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-right.png", dwFileAttributes=0x80) returned 0 [0093.263] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-right.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\arrow-right.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.263] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.263] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.263] FindNextFileW (in: hFindFile=0xd707977450, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0093.263] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.264] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-up.png", dwFileAttributes=0x80) returned 0 [0093.264] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-up.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\arrow-up.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.264] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.264] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.264] FindNextFileW (in: hFindFile=0xd707977450, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0093.264] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.264] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\hscroll-thumb.png", dwFileAttributes=0x80) returned 0 [0093.265] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\hscroll-thumb.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\hscroll-thumb.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.265] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.265] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.265] FindNextFileW (in: hFindFile=0xd707977450, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0093.286] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.287] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-down.png", dwFileAttributes=0x80) returned 0 [0093.287] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-down.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-down.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.288] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.288] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.288] FindNextFileW (in: hFindFile=0xd707976eb0, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0093.288] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.288] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-left.png", dwFileAttributes=0x80) returned 0 [0093.289] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-left.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-left.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.289] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.289] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.289] FindNextFileW (in: hFindFile=0xd707976eb0, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0093.289] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.289] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-right.png", dwFileAttributes=0x80) returned 0 [0093.290] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-right.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-right.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.290] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.290] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.290] FindNextFileW (in: hFindFile=0xd707976eb0, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0093.290] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.290] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-up.png", dwFileAttributes=0x80) returned 0 [0093.290] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-up.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-up.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.291] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.291] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.291] FindNextFileW (in: hFindFile=0xd707976eb0, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0093.291] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.291] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\hscroll-thumb.png", dwFileAttributes=0x80) returned 0 [0093.291] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\hscroll-thumb.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\themes\\dark\\hscroll-thumb.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.292] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.292] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.292] FindNextFileW (in: hFindFile=0xd707976eb0, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0093.292] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.292] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\vscroll-thumb.png", dwFileAttributes=0x80) returned 0 [0093.293] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\vscroll-thumb.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\themes\\dark\\vscroll-thumb.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.293] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.293] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.293] FindNextFileW (in: hFindFile=0xd707976eb0, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0093.293] FindClose (in: hFindFile=0xd707976eb0 | out: hFindFile=0xd707976eb0) returned 1 [0093.297] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.297] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\vscroll-thumb.png", dwFileAttributes=0x80) returned 0 [0093.297] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\vscroll-thumb.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\vscroll-thumb.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.297] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.297] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.297] FindNextFileW (in: hFindFile=0xd707977450, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 0 [0093.297] FindClose (in: hFindFile=0xd707977450 | out: hFindFile=0xd707977450) returned 1 [0093.299] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.299] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-down-pressed.gif", dwFileAttributes=0x80) returned 0 [0093.300] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-down-pressed.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\arrow-down-pressed.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.300] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.300] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.300] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0093.300] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.301] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-down.gif", dwFileAttributes=0x80) returned 0 [0093.301] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-down.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\arrow-down.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.301] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.301] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.302] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0093.302] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.302] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-left-pressed.gif", dwFileAttributes=0x80) returned 0 [0093.302] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-left-pressed.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\arrow-left-pressed.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.302] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.302] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.303] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0093.303] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.303] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-left.gif", dwFileAttributes=0x80) returned 0 [0093.303] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-left.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\arrow-left.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.303] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.303] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.303] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0093.303] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.304] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-right-pressed.gif", dwFileAttributes=0x80) returned 0 [0093.304] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-right-pressed.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\arrow-right-pressed.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.304] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.304] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.305] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0093.305] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.305] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-right.gif", dwFileAttributes=0x80) returned 0 [0093.305] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-right.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\arrow-right.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.305] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.305] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.305] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0093.305] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.306] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-up-pressed.gif", dwFileAttributes=0x80) returned 0 [0093.306] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-up-pressed.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\arrow-up-pressed.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.306] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.306] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.306] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0093.306] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.307] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-up.gif", dwFileAttributes=0x80) returned 0 [0093.307] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-up.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\arrow-up.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.307] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.307] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.307] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0093.324] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.325] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-down-pressed.gif", dwFileAttributes=0x80) returned 0 [0093.325] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-down-pressed.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-down-pressed.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.325] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.325] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.325] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0093.325] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.326] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-down.gif", dwFileAttributes=0x80) returned 0 [0093.326] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-down.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-down.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.327] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.327] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.327] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0093.327] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.327] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-left-pressed.gif", dwFileAttributes=0x80) returned 0 [0093.327] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-left-pressed.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-left-pressed.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.327] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.328] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.328] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0093.328] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.328] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-left.gif", dwFileAttributes=0x80) returned 0 [0093.328] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-left.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-left.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.328] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.328] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.329] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0093.329] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.329] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-right-pressed.gif", dwFileAttributes=0x80) returned 0 [0093.329] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-right-pressed.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-right-pressed.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.329] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.329] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.329] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0093.329] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.330] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-right.gif", dwFileAttributes=0x80) returned 0 [0093.330] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-right.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-right.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.330] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.330] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.330] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0093.330] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.331] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-up-pressed.gif", dwFileAttributes=0x80) returned 0 [0093.331] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-up-pressed.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-up-pressed.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.331] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.331] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.331] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0093.331] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.331] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-up.gif", dwFileAttributes=0x80) returned 0 [0093.332] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-up.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-up.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.332] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.332] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.332] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 0 [0093.332] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0093.341] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.341] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ca-es\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.342] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ca-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\ca-es\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.342] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.342] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.342] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.342] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0093.343] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.343] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\cs-cz\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.343] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\cs-cz\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\cs-cz\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.343] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.343] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.343] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.343] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0093.344] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.344] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\da-dk\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.344] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\da-dk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\da-dk\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.344] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.345] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.345] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.345] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0093.347] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.348] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\de-de\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.348] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\de-de\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\de-de\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.348] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.348] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.349] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.349] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0093.350] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.350] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-ae\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.350] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-ae\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\en-ae\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.350] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.350] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.350] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.350] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0093.351] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.351] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-gb\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.352] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-gb\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\en-gb\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.352] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.352] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.352] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.352] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0093.353] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.353] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-il\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.354] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-il\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\en-il\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.354] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.354] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.354] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.354] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0093.355] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.355] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\es-es\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.355] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\es-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\es-es\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.356] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.356] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.356] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.356] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0093.356] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.357] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\eu-es\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.357] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\eu-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\eu-es\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.357] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.357] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.357] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.357] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0093.358] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.359] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fi-fi\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.359] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fi-fi\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\fi-fi\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.359] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.359] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.359] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.359] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0093.360] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.361] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fr-fr\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.361] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fr-fr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\fr-fr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.361] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.361] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.361] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.361] FindClose (in: hFindFile=0xd707976e50 | out: hFindFile=0xd707976e50) returned 1 [0093.362] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.362] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fr-ma\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.363] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fr-ma\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\fr-ma\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.363] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.363] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.363] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.363] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0093.364] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.364] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\hr-hr\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.365] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\hr-hr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\hr-hr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.365] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.365] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.365] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.365] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0093.366] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.367] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\hu-hu\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.367] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\hu-hu\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\hu-hu\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.367] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.367] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.367] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.367] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0093.368] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.368] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\it-it\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.368] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\it-it\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\it-it\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.368] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.369] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.369] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.369] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0093.369] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.369] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ja-jp\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.370] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ja-jp\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\ja-jp\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.370] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.370] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.370] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.370] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0093.371] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.371] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ko-kr\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.371] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ko-kr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\ko-kr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.371] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.371] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.372] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.372] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0093.372] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.372] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\nb-no\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.373] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\nb-no\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\nb-no\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.373] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.373] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.373] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.373] FindClose (in: hFindFile=0xd707976e50 | out: hFindFile=0xd707976e50) returned 1 [0093.374] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.374] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\nl-nl\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.374] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\nl-nl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\nl-nl\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.374] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.374] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.374] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.375] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0093.375] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.375] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\pl-pl\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.375] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\pl-pl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\pl-pl\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.376] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.376] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.376] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.376] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0093.378] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.379] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\pt-br\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.379] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\pt-br\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\pt-br\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.379] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.379] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.379] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.379] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0093.380] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.380] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ro-ro\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.380] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ro-ro\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\ro-ro\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.381] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.381] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.381] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.381] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0093.381] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.382] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\root\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.382] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\root\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\root\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.383] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.383] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.383] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.383] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0093.384] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.384] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ru-ru\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.384] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ru-ru\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\ru-ru\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.384] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.384] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.385] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.385] FindClose (in: hFindFile=0xd707976e50 | out: hFindFile=0xd707976e50) returned 1 [0093.385] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.386] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sk-sk\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.386] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sk-sk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\sk-sk\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.386] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.386] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.386] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.386] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0093.387] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.387] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sl-si\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.387] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sl-si\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\sl-si\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.387] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.388] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.388] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.388] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0093.389] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.389] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sv-se\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.389] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sv-se\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\sv-se\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.390] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.390] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.390] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.390] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0093.391] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.391] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\tr-tr\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.391] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\tr-tr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\tr-tr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.392] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.392] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.392] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.392] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0093.392] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.393] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.393] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.393] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.393] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.394] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0093.394] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.394] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\uk-ua\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.395] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\uk-ua\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\uk-ua\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.395] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.395] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.395] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.395] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0093.396] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.396] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\zh-cn\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.396] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\zh-cn\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\zh-cn\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.397] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.397] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.399] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.399] FindClose (in: hFindFile=0xd707976d30 | out: hFindFile=0xd707976d30) returned 1 [0093.399] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.400] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\zh-tw\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.400] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\zh-tw\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\zh-tw\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.400] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.400] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.400] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.401] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0093.404] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.404] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app-api\\dev\\app-api.js", dwFileAttributes=0x80) returned 0 [0093.404] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app-api\\dev\\app-api.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app-api\\dev\\app-api.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.404] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.405] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.405] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b49bd0 | out: lpFindFileData=0xd707b49bd0) returned 0 [0093.405] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0093.405] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.406] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\config.js", dwFileAttributes=0x80) returned 0 [0093.407] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\config.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\config.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.408] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.408] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.408] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0093.413] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.414] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ca-es\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.416] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ca-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\ca-es\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.416] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.416] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.416] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.416] FindClose (in: hFindFile=0xd707976bb0 | out: hFindFile=0xd707976bb0) returned 1 [0093.417] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.417] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\cs-cz\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.417] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\cs-cz\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\cs-cz\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.417] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.417] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.471] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.471] FindClose (in: hFindFile=0xd707976bb0 | out: hFindFile=0xd707976bb0) returned 1 [0093.471] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.472] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\da-dk\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.484] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\da-dk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\da-dk\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.484] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.484] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.484] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.484] FindClose (in: hFindFile=0xd707976bb0 | out: hFindFile=0xd707976bb0) returned 1 [0093.533] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.533] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\de-de\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.534] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\de-de\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\de-de\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.534] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.534] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.534] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.534] FindClose (in: hFindFile=0xd707976bb0 | out: hFindFile=0xd707976bb0) returned 1 [0093.539] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.539] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-ae\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.539] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-ae\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\en-ae\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.540] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.540] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.540] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.540] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0093.540] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.541] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-gb\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.541] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-gb\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\en-gb\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.541] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.541] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.541] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.541] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0093.549] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.549] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-il\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.549] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-il\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\en-il\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.549] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.549] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.550] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.550] FindClose (in: hFindFile=0xd707976bb0 | out: hFindFile=0xd707976bb0) returned 1 [0093.553] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.553] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\es-es\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.554] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\es-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\es-es\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.555] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.555] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.555] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.555] FindClose (in: hFindFile=0xd707976bb0 | out: hFindFile=0xd707976bb0) returned 1 [0093.555] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.556] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\eu-es\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.556] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\eu-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\eu-es\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.556] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.556] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.556] FindNextFileW (in: hFindFile=0xd707976eb0, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.556] FindClose (in: hFindFile=0xd707976eb0 | out: hFindFile=0xd707976eb0) returned 1 [0093.558] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.558] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fi-fi\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.558] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fi-fi\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\fi-fi\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.558] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.558] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.559] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.559] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0093.559] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.559] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-fr\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.559] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-fr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\fr-fr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.560] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.560] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.560] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.560] FindClose (in: hFindFile=0xd707976cd0 | out: hFindFile=0xd707976cd0) returned 1 [0093.561] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.561] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-ma\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.561] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-ma\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\fr-ma\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.561] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.561] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.562] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.562] FindClose (in: hFindFile=0xd707976bb0 | out: hFindFile=0xd707976bb0) returned 1 [0093.563] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.563] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hr-hr\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.563] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hr-hr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\hr-hr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.564] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.564] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.564] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.564] FindClose (in: hFindFile=0xd707976bb0 | out: hFindFile=0xd707976bb0) returned 1 [0093.565] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.565] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hu-hu\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.565] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hu-hu\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\hu-hu\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.565] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.565] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.566] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.566] FindClose (in: hFindFile=0xd707976bb0 | out: hFindFile=0xd707976bb0) returned 1 [0093.566] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.567] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\it-it\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.567] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\it-it\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\it-it\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.567] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.567] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.567] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.567] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0093.568] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.568] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ja-jp\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.569] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ja-jp\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\ja-jp\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.569] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.569] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.569] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.569] FindClose (in: hFindFile=0xd707976bb0 | out: hFindFile=0xd707976bb0) returned 1 [0093.569] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.570] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ko-kr\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.570] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ko-kr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\ko-kr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.570] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.570] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.570] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.570] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0093.571] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.571] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nb-no\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.571] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nb-no\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\nb-no\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.571] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.572] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.572] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.572] FindClose (in: hFindFile=0xd707976bb0 | out: hFindFile=0xd707976bb0) returned 1 [0093.572] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.572] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nl-nl\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.573] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nl-nl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\nl-nl\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.573] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.573] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.573] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.573] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0093.574] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.574] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pl-pl\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.574] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pl-pl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\pl-pl\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.575] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.575] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.575] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.575] FindClose (in: hFindFile=0xd707976bb0 | out: hFindFile=0xd707976bb0) returned 1 [0093.575] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.576] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pt-br\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.576] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pt-br\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\pt-br\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.576] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.576] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.576] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.576] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0093.577] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.577] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ro-ro\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.577] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ro-ro\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\ro-ro\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.577] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.577] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.577] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.578] FindClose (in: hFindFile=0xd707976bb0 | out: hFindFile=0xd707976bb0) returned 1 [0093.578] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.578] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\root\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.578] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\root\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\root\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.579] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.579] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.579] FindNextFileW (in: hFindFile=0xd707976eb0, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.579] FindClose (in: hFindFile=0xd707976eb0 | out: hFindFile=0xd707976eb0) returned 1 [0093.579] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.579] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ru-ru\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.580] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ru-ru\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\ru-ru\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.580] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.580] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.580] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.580] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0093.581] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.582] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sk-sk\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.583] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sk-sk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\sk-sk\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.583] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.583] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.583] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.583] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0093.584] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.584] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sl-si\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.584] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sl-si\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\sl-si\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.584] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.584] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.585] FindNextFileW (in: hFindFile=0xd707976f10, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.585] FindClose (in: hFindFile=0xd707976f10 | out: hFindFile=0xd707976f10) returned 1 [0093.585] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.586] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sv-se\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.586] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sv-se\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\sv-se\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.586] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.586] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.586] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.586] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0093.587] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.587] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\tr-tr\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.587] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\tr-tr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\tr-tr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.587] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.587] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.587] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.588] FindClose (in: hFindFile=0xd707976bb0 | out: hFindFile=0xd707976bb0) returned 1 [0093.588] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.588] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.588] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.589] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.589] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.589] FindNextFileW (in: hFindFile=0xd707976d30, lpFindFileData=0xd707b49420 | out: lpFindFileData=0xd707b49420) returned 1 [0093.589] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.589] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\uk-ua\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.590] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\uk-ua\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\uk-ua\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.590] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.590] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.590] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.590] FindClose (in: hFindFile=0xd707976bb0 | out: hFindFile=0xd707976bb0) returned 1 [0093.590] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.591] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-cn\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.591] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-cn\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\zh-cn\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.591] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.591] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.591] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.591] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0093.592] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.592] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-tw\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.592] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-tw\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\zh-tw\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.592] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.592] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.593] FindNextFileW (in: hFindFile=0xd707976bb0, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.593] FindClose (in: hFindFile=0xd707976bb0 | out: hFindFile=0xd707976bb0) returned 1 [0093.596] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.597] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\desktop.js", dwFileAttributes=0x80) returned 0 [0093.598] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\desktop.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\desktop.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.598] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.598] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.598] FindNextFileW (in: hFindFile=0xd707976910, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0093.649] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.650] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ca-es\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.650] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ca-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\ca-es\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.650] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.650] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.650] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.650] FindClose (in: hFindFile=0xd707976e50 | out: hFindFile=0xd707976e50) returned 1 [0093.651] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.651] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\cs-cz\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.651] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\cs-cz\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\cs-cz\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.651] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.651] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.652] FindNextFileW (in: hFindFile=0xd707976e50, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.652] FindClose (in: hFindFile=0xd707976e50 | out: hFindFile=0xd707976e50) returned 1 [0093.652] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.652] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\da-dk\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.653] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\da-dk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\da-dk\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.653] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.653] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.653] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.653] FindClose (in: hFindFile=0xd707976cd0 | out: hFindFile=0xd707976cd0) returned 1 [0093.654] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.654] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\de-de\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.654] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\de-de\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\de-de\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.654] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.655] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.655] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.655] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0093.655] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.655] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-ae\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.656] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-ae\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\en-ae\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.656] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.656] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.656] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.656] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0093.657] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.657] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-gb\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.657] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-gb\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\en-gb\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.658] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.658] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.658] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.658] FindClose (in: hFindFile=0xd707976cd0 | out: hFindFile=0xd707976cd0) returned 1 [0093.659] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.659] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-il\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.660] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-il\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\en-il\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.660] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.660] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.660] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.660] FindClose (in: hFindFile=0xd707976cd0 | out: hFindFile=0xd707976cd0) returned 1 [0093.661] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.661] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\es-es\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.661] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\es-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\es-es\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.661] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.661] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.661] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.661] FindClose (in: hFindFile=0xd707976cd0 | out: hFindFile=0xd707976cd0) returned 1 [0093.662] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.662] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\eu-es\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.663] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\eu-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\eu-es\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.663] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.663] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.663] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.663] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0093.664] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.664] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fi-fi\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.664] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fi-fi\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\fi-fi\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.664] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.664] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.665] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.665] FindClose (in: hFindFile=0xd707976cd0 | out: hFindFile=0xd707976cd0) returned 1 [0093.665] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.666] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-fr\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.666] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-fr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\fr-fr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.666] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.666] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.666] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.666] FindClose (in: hFindFile=0xd707976cd0 | out: hFindFile=0xd707976cd0) returned 1 [0093.667] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.667] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-ma\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.667] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-ma\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\fr-ma\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.667] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.667] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.668] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.668] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0093.670] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.671] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hr-hr\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.671] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hr-hr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\hr-hr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.671] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.671] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.671] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.671] FindClose (in: hFindFile=0xd707976cd0 | out: hFindFile=0xd707976cd0) returned 1 [0093.672] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.673] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hu-hu\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.673] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hu-hu\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\hu-hu\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.673] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.673] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.673] FindNextFileW (in: hFindFile=0xd707976eb0, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.673] FindClose (in: hFindFile=0xd707976eb0 | out: hFindFile=0xd707976eb0) returned 1 [0093.674] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.674] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\it-it\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.674] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\it-it\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\it-it\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.675] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.675] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.675] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.675] FindClose (in: hFindFile=0xd707976cd0 | out: hFindFile=0xd707976cd0) returned 1 [0093.676] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.676] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ja-jp\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.676] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ja-jp\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\ja-jp\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.676] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.676] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.676] FindNextFileW (in: hFindFile=0xd707977510, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.677] FindClose (in: hFindFile=0xd707977510 | out: hFindFile=0xd707977510) returned 1 [0093.677] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.678] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ko-kr\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.678] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ko-kr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\ko-kr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.678] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.678] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.678] FindNextFileW (in: hFindFile=0xd707976cd0, lpFindFileData=0xd707b48c70 | out: lpFindFileData=0xd707b48c70) returned 0 [0093.678] FindClose (in: hFindFile=0xd707976cd0 | out: hFindFile=0xd707976cd0) returned 1 [0093.679] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.679] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nb-no\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.680] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nb-no\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\nb-no\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.680] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.680] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.680] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.681] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nl-nl\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.681] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nl-nl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\nl-nl\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.681] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.681] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.682] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.682] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pl-pl\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.682] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pl-pl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\pl-pl\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.682] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.682] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.683] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.684] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pt-br\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.684] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pt-br\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\pt-br\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.684] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.684] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.685] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.685] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ro-ro\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.685] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ro-ro\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\ro-ro\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.686] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.686] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.686] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.686] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\root\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.687] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\root\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\root\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.687] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.687] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.687] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.688] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ru-ru\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.688] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ru-ru\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\ru-ru\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.688] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.688] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.689] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.689] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sk-sk\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.690] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sk-sk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\sk-sk\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.690] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.690] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.690] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.691] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sl-si\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.691] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sl-si\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\sl-si\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.691] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.691] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.692] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.693] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sv-se\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.693] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sv-se\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\sv-se\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.693] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.693] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.694] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.694] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\tr-tr\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.694] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\tr-tr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\tr-tr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.694] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.694] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.695] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.695] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.695] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.695] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.695] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.696] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.696] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\uk-ua\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.696] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\uk-ua\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\uk-ua\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.696] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.696] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.697] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.697] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-cn\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.697] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-cn\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\zh-cn\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.698] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.698] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.698] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.698] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-tw\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0093.698] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-tw\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\zh-tw\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.699] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.699] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.700] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.701] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\jquery.ui.touch-punch\\0.2.2\\jquery.ui.touch-punch.js", dwFileAttributes=0x80) returned 0 [0093.701] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\jquery.ui.touch-punch\\0.2.2\\jquery.ui.touch-punch.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\libs\\jquery.ui.touch-punch\\0.2.2\\jquery.ui.touch-punch.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.701] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.701] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.702] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.702] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\require\\2.1.15\\require.min.js", dwFileAttributes=0x80) returned 0 [0093.702] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\require\\2.1.15\\require.min.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\libs\\require\\2.1.15\\require.min.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.703] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.703] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.703] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.704] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\misc\\load-typekit.js", dwFileAttributes=0x80) returned 0 [0093.704] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\misc\\load-typekit.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\misc\\load-typekit.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.704] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.704] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.709] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.709] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\css\\main-selector.css", dwFileAttributes=0x80) returned 0 [0093.709] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\css\\main-selector.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\css\\main-selector.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.709] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.709] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.710] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.710] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\css\\main.css", dwFileAttributes=0x80) returned 0 [0093.710] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\css\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\css\\main.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.710] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0093.710] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.979] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0093.979] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\bg_patterns_header.png", dwFileAttributes=0x80) returned 0 [0094.330] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\bg_patterns_header.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\bg_patterns_header.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0094.330] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0094.330] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0094.330] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0094.331] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\bg_pattern_RHP.png", dwFileAttributes=0x80) returned 0 [0094.352] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\bg_pattern_RHP.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\bg_pattern_rhp.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0094.352] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0094.352] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0094.353] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0094.353] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons.png", dwFileAttributes=0x80) returned 0 [0094.353] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0094.354] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0094.354] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0094.354] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0094.354] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons_ie8.gif", dwFileAttributes=0x80) returned 0 [0094.355] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons_ie8.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\icons_ie8.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0094.355] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0094.355] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0094.355] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0094.355] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons_retina.png", dwFileAttributes=0x80) returned 0 [0094.356] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\icons_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0094.356] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0094.356] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0094.356] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0094.356] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\illustrations.png", dwFileAttributes=0x80) returned 0 [0094.357] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\illustrations.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\illustrations.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0094.357] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0094.357] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0094.357] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0094.357] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\illustrations_retina.png", dwFileAttributes=0x80) returned 0 [0094.358] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\illustrations_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\illustrations_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0094.358] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0094.358] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0094.358] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0094.358] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\new_icons.png", dwFileAttributes=0x80) returned 0 [0094.358] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\new_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\new_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0094.359] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0094.359] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0094.359] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0094.359] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\new_icons_retina.png", dwFileAttributes=0x80) returned 0 [0094.359] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\new_icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\new_icons_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0094.360] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0094.360] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0094.371] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0094.372] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\bg_patterns_header.png", dwFileAttributes=0x80) returned 0 [0094.375] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\bg_patterns_header.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\bg_patterns_header.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0094.376] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0094.376] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0094.376] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0094.376] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\bg_pattern_RHP.png", dwFileAttributes=0x80) returned 0 [0094.376] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\bg_pattern_RHP.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\bg_pattern_rhp.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0094.377] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0094.377] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0094.377] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0094.377] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons.png", dwFileAttributes=0x80) returned 0 [0094.377] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0094.378] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0094.378] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0094.378] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0094.382] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons_ie8.gif", dwFileAttributes=0x80) returned 0 [0094.382] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons_ie8.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons_ie8.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0094.382] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0094.382] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0094.383] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0094.383] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons_retina.png", dwFileAttributes=0x80) returned 0 [0094.383] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0094.383] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0094.383] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0094.384] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0094.384] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\illustrations.png", dwFileAttributes=0x80) returned 0 [0094.384] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\illustrations.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\illustrations.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0094.384] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0094.384] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0094.385] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0094.385] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\illustrations_retina.png", dwFileAttributes=0x80) returned 0 [0094.385] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\illustrations_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\illustrations_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0094.385] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0094.385] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0094.386] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0094.386] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\new_icons.png", dwFileAttributes=0x80) returned 0 [0094.386] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\new_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\new_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0094.386] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0094.386] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0094.387] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0094.387] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\new_icons_retina.png", dwFileAttributes=0x80) returned 0 [0094.387] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\new_icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\new_icons_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0094.387] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0094.387] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0094.506] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0094.506] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ca-es\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0094.507] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ca-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\ca-es\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0094.507] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0094.507] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0094.524] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0094.525] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\cs-cz\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0094.525] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\cs-cz\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\cs-cz\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0094.525] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0094.525] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0094.526] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0094.526] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\da-dk\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0094.526] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\da-dk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\da-dk\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0094.527] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0094.527] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0094.569] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0094.570] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\de-de\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0094.570] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\de-de\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\de-de\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0094.570] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0094.570] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0094.621] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0094.621] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-ae\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0094.622] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-ae\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-ae\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0094.622] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0094.622] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0094.626] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0094.626] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-gb\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0094.626] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-gb\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-gb\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0094.626] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0094.627] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0094.662] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0094.662] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-il\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0094.663] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-il\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-il\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0094.663] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0094.663] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0094.664] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0094.664] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\es-es\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0094.664] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\es-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\es-es\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0094.664] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0094.664] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0094.665] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0094.666] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\eu-es\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0094.666] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\eu-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\eu-es\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0094.666] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0094.666] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0094.667] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0094.668] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fi-fi\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0094.668] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fi-fi\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\fi-fi\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0094.668] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0094.668] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0094.669] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0094.669] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-fr\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0094.670] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-fr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-fr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0094.670] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0094.670] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0094.672] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0094.672] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-ma\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0094.672] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-ma\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-ma\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0094.672] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0094.672] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0094.675] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0094.683] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\hr-hr\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0094.684] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\hr-hr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\hr-hr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0094.684] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0094.684] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0094.685] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0094.686] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\hu-hu\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0094.686] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\hu-hu\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\hu-hu\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0094.687] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0094.687] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0094.687] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0094.687] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\it-it\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0094.688] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\it-it\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\it-it\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0094.688] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0094.688] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0094.688] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0094.689] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ja-jp\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0094.689] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ja-jp\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\ja-jp\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0094.689] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0094.689] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0094.690] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0094.690] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ko-kr\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0094.691] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ko-kr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\ko-kr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0094.691] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0094.691] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0094.692] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0094.692] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\nb-no\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0094.692] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\nb-no\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\nb-no\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0094.692] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0094.693] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0094.693] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0094.693] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\nl-nl\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0094.693] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\nl-nl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\nl-nl\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0094.694] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0094.694] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0094.694] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0094.694] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\pl-pl\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0094.695] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\pl-pl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\pl-pl\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0094.695] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0094.695] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0094.696] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0094.698] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\pt-br\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0094.698] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\pt-br\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\pt-br\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0094.699] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0094.699] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0094.699] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0094.699] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ro-ro\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0094.700] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ro-ro\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\ro-ro\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0094.700] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0094.700] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0094.700] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0094.701] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\root\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0094.701] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\root\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\root\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0094.701] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0094.701] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0094.701] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0094.702] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ru-ru\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0094.703] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ru-ru\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\ru-ru\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0094.703] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0094.704] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0094.704] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0094.704] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sk-sk\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0094.704] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sk-sk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\sk-sk\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0094.705] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0094.705] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0094.705] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0094.705] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sl-si\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0094.706] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sl-si\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\sl-si\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0094.706] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0094.706] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0094.710] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0094.710] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sv-se\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0094.710] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sv-se\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\sv-se\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0094.711] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0094.711] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0094.711] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0094.711] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\tr-tr\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0094.712] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\tr-tr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\tr-tr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0094.712] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0094.712] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0094.712] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0094.712] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0094.713] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0094.713] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0094.713] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0094.713] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0094.714] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\uk-ua\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0094.714] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\uk-ua\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\uk-ua\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0094.714] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0094.714] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0094.715] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0094.715] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-cn\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0094.715] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-cn\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-cn\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0094.715] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0094.715] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0094.716] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0094.716] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-tw\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0094.716] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-tw\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-tw\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0094.717] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0094.717] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0094.717] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0094.717] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\plugin.js", dwFileAttributes=0x80) returned 0 [0094.718] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\plugin.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\plugin.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0094.718] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0094.718] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0094.718] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0094.718] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\selector.js", dwFileAttributes=0x80) returned 0 [0094.718] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\selector.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\selector.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0094.719] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0094.719] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0094.719] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0094.720] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\css\\main.css", dwFileAttributes=0x80) returned 0 [0094.720] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\css\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account-select\\css\\main.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0094.720] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0094.720] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0094.721] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0094.721] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\js\\plugin.js", dwFileAttributes=0x80) returned 0 [0094.721] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\js\\plugin.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account-select\\js\\plugin.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0094.721] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0094.722] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0094.768] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0094.768] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\css\\main.css", dwFileAttributes=0x80) returned 0 [0094.768] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\css\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\css\\main.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0094.768] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0094.768] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0094.769] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0094.770] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\css\\plugin-selectors.css", dwFileAttributes=0x80) returned 0 [0094.770] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\css\\plugin-selectors.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\css\\plugin-selectors.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0094.770] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0094.770] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0095.175] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0095.177] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon.png", dwFileAttributes=0x80) returned 0 [0095.177] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0095.177] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0095.177] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0095.178] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0095.178] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_2x.png", dwFileAttributes=0x80) returned 0 [0095.178] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_2x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0095.179] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0095.179] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0095.179] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0095.179] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_hover.png", dwFileAttributes=0x80) returned 0 [0095.179] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_hover.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_hover.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0095.179] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0095.180] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0095.180] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0095.180] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_hover_2x.png", dwFileAttributes=0x80) returned 0 [0095.180] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_hover_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_hover_2x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0095.181] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0095.181] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0095.508] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0095.508] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon.png", dwFileAttributes=0x80) returned 0 [0095.508] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0095.508] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0095.509] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0095.509] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0095.509] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_2x.png", dwFileAttributes=0x80) returned 0 [0095.509] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_2x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0095.510] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0095.510] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0095.510] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0095.510] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_hover.png", dwFileAttributes=0x80) returned 0 [0095.510] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_hover.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_hover.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0095.510] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0095.511] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0095.511] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0095.511] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_hover_2x.png", dwFileAttributes=0x80) returned 0 [0095.511] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_hover_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_hover_2x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0095.511] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0095.511] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0095.512] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0095.512] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\warning.png", dwFileAttributes=0x80) returned 0 [0095.512] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\warning.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\warning.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0095.538] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0095.538] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0095.539] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0095.539] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\warning_2x.png", dwFileAttributes=0x80) returned 0 [0095.539] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\warning_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\warning_2x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0095.540] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0095.540] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0095.543] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0095.547] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\warning.png", dwFileAttributes=0x80) returned 0 [0095.548] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\warning.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\warning.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0095.548] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0095.548] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0095.548] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0095.548] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\warning_2x.png", dwFileAttributes=0x80) returned 0 [0095.604] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\warning_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\warning_2x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0095.604] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0095.604] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0095.614] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0095.614] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\da-dk\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0095.614] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\da-dk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\da-dk\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0095.615] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0095.615] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0095.616] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0095.616] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\de-de\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0095.617] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\de-de\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\de-de\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0095.617] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0095.617] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0095.618] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0095.618] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\en-gb\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0095.618] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\en-gb\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\en-gb\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0095.618] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0095.618] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0095.628] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0095.629] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\es-es\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0095.649] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\es-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\es-es\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0095.649] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0095.649] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0095.650] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0095.650] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fi-fi\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0095.650] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fi-fi\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fi-fi\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0095.651] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0095.651] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0095.694] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0095.695] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fr-fr\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0095.699] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fr-fr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fr-fr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0095.700] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0095.700] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0095.700] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0095.701] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\it-it\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0095.701] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\it-it\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\it-it\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0095.701] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0095.701] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0095.702] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0095.702] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\ja-jp\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0095.702] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\ja-jp\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\ja-jp\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0095.703] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0095.703] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0095.703] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0095.704] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nb-no\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0095.704] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nb-no\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nb-no\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0095.704] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0095.704] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0095.705] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0095.705] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nl-nl\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0095.706] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nl-nl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nl-nl\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0095.706] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0095.706] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0095.706] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0095.707] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\pt-br\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0095.707] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\pt-br\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\pt-br\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0095.707] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0095.707] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0095.708] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0095.708] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\root\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0095.708] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\root\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\root\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0095.709] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0095.709] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0095.709] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0095.710] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\sv-se\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0095.710] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\sv-se\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\sv-se\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0095.710] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0095.710] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0095.711] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0095.711] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0095.711] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0095.711] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0095.711] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0095.727] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0095.742] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\convertpdf-selector.js", dwFileAttributes=0x80) returned 0 [0095.757] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\convertpdf-selector.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\convertpdf-selector.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0095.757] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0095.757] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0095.757] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0095.758] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\convertpdf-tool-view.js", dwFileAttributes=0x80) returned 0 [0095.758] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\convertpdf-tool-view.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\convertpdf-tool-view.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0095.758] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0095.758] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0095.758] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0095.759] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\exportpdf-selector.js", dwFileAttributes=0x80) returned 0 [0095.759] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\exportpdf-selector.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\exportpdf-selector.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0095.759] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0095.759] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0095.759] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0095.760] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\exportpdf-tool-view.js", dwFileAttributes=0x80) returned 0 [0095.764] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\exportpdf-tool-view.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\exportpdf-tool-view.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0095.764] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0095.764] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0095.845] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0095.846] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\convertpdf-rna-selector.js", dwFileAttributes=0x80) returned 0 [0095.862] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\convertpdf-rna-selector.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\convertpdf-rna-selector.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0095.863] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0095.863] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0095.863] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0095.863] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\convertpdf-rna-tool-view.js", dwFileAttributes=0x80) returned 0 [0095.864] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\convertpdf-rna-tool-view.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\convertpdf-rna-tool-view.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0095.864] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0095.864] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0095.865] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0095.865] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-selector.js", dwFileAttributes=0x80) returned 0 [0095.865] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-selector.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-selector.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0095.866] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0095.866] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0095.866] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0095.866] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-tool-view.js", dwFileAttributes=0x80) returned 0 [0095.867] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-tool-view.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-tool-view.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0095.867] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0095.867] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0095.872] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0095.873] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\cpdf\\plugin.js", dwFileAttributes=0x80) returned 0 [0095.873] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\cpdf\\plugin.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\cpdf\\plugin.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0095.873] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0095.873] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0095.874] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0095.874] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\cpdf\\selector.js", dwFileAttributes=0x80) returned 0 [0095.874] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\cpdf\\selector.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\cpdf\\selector.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0095.875] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0095.875] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0095.876] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0095.876] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\epdf\\plugin.js", dwFileAttributes=0x80) returned 0 [0095.876] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\epdf\\plugin.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\epdf\\plugin.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0095.877] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0095.877] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0095.877] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0095.877] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\epdf\\selector.js", dwFileAttributes=0x80) returned 0 [0095.878] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\epdf\\selector.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\epdf\\selector.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0095.878] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0095.878] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0095.881] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0095.881] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\css\\main-selector.css", dwFileAttributes=0x80) returned 0 [0095.886] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\css\\main-selector.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\css\\main-selector.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0095.886] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0095.886] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0095.887] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0095.890] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\css\\main.css", dwFileAttributes=0x80) returned 0 [0095.891] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\css\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\css\\main.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0095.891] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0095.891] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.113] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.113] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\example_icons.png", dwFileAttributes=0x80) returned 0 [0096.114] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\example_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\example_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.114] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.114] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.114] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.115] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\example_icons2x.png", dwFileAttributes=0x80) returned 0 [0096.115] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\example_icons2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\example_icons2x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.116] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.116] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.116] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.116] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon.png", dwFileAttributes=0x80) returned 0 [0096.116] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.117] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.117] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.117] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.117] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_2x.png", dwFileAttributes=0x80) returned 0 [0096.117] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_2x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.118] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.118] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.118] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.118] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_hover.png", dwFileAttributes=0x80) returned 0 [0096.119] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_hover.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_hover.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.119] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.119] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.120] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.120] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_hover_2x.png", dwFileAttributes=0x80) returned 0 [0096.120] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_hover_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_hover_2x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.121] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.121] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.123] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.123] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\example_icons.png", dwFileAttributes=0x80) returned 0 [0096.124] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\example_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\example_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.124] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.124] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.124] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.125] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\example_icons2x.png", dwFileAttributes=0x80) returned 0 [0096.125] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\example_icons2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\example_icons2x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.125] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.125] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.125] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.126] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon.png", dwFileAttributes=0x80) returned 0 [0096.126] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.126] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.126] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.126] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.127] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_2x.png", dwFileAttributes=0x80) returned 0 [0096.127] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_2x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.127] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.127] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.127] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.128] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_hover.png", dwFileAttributes=0x80) returned 0 [0096.128] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_hover.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_hover.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.128] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.128] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.128] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.129] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_hover_2x.png", dwFileAttributes=0x80) returned 0 [0096.129] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_hover_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_hover_2x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.129] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.129] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.137] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.139] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ca-es\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.140] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ca-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ca-es\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.140] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.140] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.141] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.141] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\cs-cz\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.142] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\cs-cz\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\cs-cz\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.142] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.142] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.143] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.143] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\da-dk\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.143] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\da-dk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\da-dk\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.143] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.143] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.144] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.144] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\de-de\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.145] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\de-de\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\de-de\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.145] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.145] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.145] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.146] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-ae\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.146] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-ae\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-ae\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.146] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.146] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.147] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.147] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-il\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.148] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-il\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-il\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.148] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.148] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.149] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.149] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\es-es\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.150] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\es-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\es-es\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.150] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.150] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.150] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.151] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\eu-es\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.151] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\eu-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\eu-es\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.151] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.151] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.152] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.152] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fi-fi\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.154] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fi-fi\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fi-fi\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.154] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.154] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.155] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.155] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-fr\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.156] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-fr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-fr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.156] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.156] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.157] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.157] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-ma\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.157] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-ma\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-ma\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.158] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.158] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.159] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.159] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hr-hr\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.159] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hr-hr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hr-hr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.159] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.159] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.161] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.161] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hu-hu\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.161] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hu-hu\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hu-hu\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.161] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.161] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.162] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.162] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\it-it\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.163] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\it-it\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\it-it\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.163] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.163] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.164] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.164] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ja-jp\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.164] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ja-jp\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ja-jp\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.165] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.165] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.165] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.166] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ko-kr\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.166] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ko-kr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ko-kr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.166] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.166] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.167] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.167] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nb-no\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.167] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nb-no\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nb-no\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.168] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.168] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.173] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.174] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nl-nl\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.174] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nl-nl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nl-nl\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.174] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.174] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.175] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.175] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pl-pl\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.175] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pl-pl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pl-pl\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.176] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.176] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.177] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.177] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pt-br\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.177] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pt-br\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pt-br\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.178] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.178] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.178] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.179] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ro-ro\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.179] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ro-ro\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ro-ro\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.179] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.179] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.180] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.180] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\root\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.180] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\root\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\root\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.180] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.180] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.181] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.181] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ru-ru\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.182] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ru-ru\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ru-ru\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.182] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.182] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.182] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.183] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\sk-sk\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.183] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\sk-sk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\sk-sk\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.183] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.183] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.186] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.186] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\sl-si\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.186] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\sl-si\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\sl-si\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.186] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.187] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.188] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.188] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\sv-se\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.188] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\sv-se\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\sv-se\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.188] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.188] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.189] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.189] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\tr-tr\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.190] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\tr-tr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\tr-tr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.190] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.190] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.190] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.191] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.191] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.191] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.191] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.191] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.192] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\uk-ua\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.192] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\uk-ua\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\uk-ua\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.192] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.192] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.193] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.193] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\zh-cn\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.193] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\zh-cn\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\zh-cn\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.194] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.194] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.197] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.197] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\zh-tw\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.198] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\zh-tw\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\zh-tw\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.198] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.198] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.198] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.199] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\plugin.js", dwFileAttributes=0x80) returned 0 [0096.199] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\plugin.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\plugin.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.199] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.199] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.202] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.203] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\plugins\\rhp\\combinepdf-selector.js", dwFileAttributes=0x80) returned 0 [0096.203] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\plugins\\rhp\\combinepdf-selector.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\plugins\\rhp\\combinepdf-selector.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.203] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.203] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.204] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.204] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\plugins\\rhp\\combinepdf-tool-view.js", dwFileAttributes=0x80) returned 0 [0096.204] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\plugins\\rhp\\combinepdf-tool-view.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\plugins\\rhp\\combinepdf-tool-view.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.204] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.204] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.207] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.207] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\css\\main-selector.css", dwFileAttributes=0x80) returned 0 [0096.208] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\css\\main-selector.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\css\\main-selector.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.208] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.208] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.208] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.209] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\css\\main.css", dwFileAttributes=0x80) returned 0 [0096.209] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\css\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\css\\main.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.209] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.210] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.212] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.212] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\example_icons.png", dwFileAttributes=0x80) returned 0 [0096.213] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\example_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\example_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.214] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.214] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.214] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.214] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\example_icons2x.png", dwFileAttributes=0x80) returned 0 [0096.215] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\example_icons2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\example_icons2x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.215] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.215] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.216] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.216] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon.png", dwFileAttributes=0x80) returned 0 [0096.217] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.217] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.217] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.217] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.218] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon_2x.png", dwFileAttributes=0x80) returned 0 [0096.218] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon_2x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.218] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.218] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.219] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.219] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon_hover.png", dwFileAttributes=0x80) returned 0 [0096.221] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon_hover.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon_hover.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.221] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.221] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.222] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.222] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon_hover_2x.png", dwFileAttributes=0x80) returned 0 [0096.223] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon_hover_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon_hover_2x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.223] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.223] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.242] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.242] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\themes\\dark\\example_icons.png", dwFileAttributes=0x80) returned 0 [0096.242] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\themes\\dark\\example_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\themes\\dark\\example_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.243] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.243] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.243] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.243] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\themes\\dark\\example_icons2x.png", dwFileAttributes=0x80) returned 0 [0096.243] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\themes\\dark\\example_icons2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\themes\\dark\\example_icons2x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.244] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.244] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.244] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.244] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\themes\\dark\\rhp_world_icon.png", dwFileAttributes=0x80) returned 0 [0096.244] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\themes\\dark\\rhp_world_icon.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\themes\\dark\\rhp_world_icon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.245] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.245] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.245] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.245] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\themes\\dark\\rhp_world_icon_2x.png", dwFileAttributes=0x80) returned 0 [0096.245] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\themes\\dark\\rhp_world_icon_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\themes\\dark\\rhp_world_icon_2x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.246] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.246] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.246] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.246] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\themes\\dark\\rhp_world_icon_hover.png", dwFileAttributes=0x80) returned 0 [0096.247] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\themes\\dark\\rhp_world_icon_hover.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\themes\\dark\\rhp_world_icon_hover.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.247] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.247] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.248] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.248] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\themes\\dark\\rhp_world_icon_hover_2x.png", dwFileAttributes=0x80) returned 0 [0096.248] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\themes\\dark\\rhp_world_icon_hover_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\themes\\dark\\rhp_world_icon_hover_2x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.248] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.248] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.258] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.258] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\ca-es\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.258] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\ca-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\ca-es\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.259] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.259] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.259] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.260] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\cs-cz\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.260] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\cs-cz\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\cs-cz\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.260] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.261] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.262] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.262] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\da-dk\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.265] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\da-dk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\da-dk\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.265] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.265] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.266] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.266] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\de-de\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.267] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\de-de\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\de-de\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.267] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.267] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.268] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.268] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\en-ae\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.268] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\en-ae\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\en-ae\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.269] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.269] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.270] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.270] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\en-il\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.271] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\en-il\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\en-il\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.271] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.271] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.272] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.272] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\es-es\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.272] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\es-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\es-es\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.273] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.273] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.273] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.274] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\eu-es\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.274] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\eu-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\eu-es\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.274] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.274] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.275] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.275] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\fi-fi\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.276] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\fi-fi\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\fi-fi\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.276] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.276] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.277] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.277] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\fr-fr\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.278] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\fr-fr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\fr-fr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.281] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.281] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.282] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.282] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\fr-ma\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.282] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\fr-ma\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\fr-ma\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.283] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.283] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.285] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.286] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\hr-hr\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.286] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\hr-hr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\hr-hr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.286] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.286] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.288] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.288] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\hu-hu\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.288] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\hu-hu\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\hu-hu\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.289] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.289] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.290] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.290] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\it-it\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.290] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\it-it\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\it-it\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.291] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.291] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.292] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.292] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\ja-jp\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.292] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\ja-jp\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\ja-jp\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.292] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.293] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.301] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.302] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\ko-kr\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.303] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\ko-kr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\ko-kr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.303] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.303] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.305] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.305] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\nb-no\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.306] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\nb-no\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\nb-no\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.306] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.306] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.307] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.307] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\nl-nl\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.308] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\nl-nl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\nl-nl\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.308] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.308] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.310] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.310] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\pl-pl\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.311] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\pl-pl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\pl-pl\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.311] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.311] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.312] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.313] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\pt-br\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.313] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\pt-br\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\pt-br\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.313] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.313] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.314] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.315] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\ro-ro\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.315] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\ro-ro\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\ro-ro\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.315] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.315] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.316] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.317] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\root\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.317] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\root\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\root\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.317] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.317] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.318] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.319] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\ru-ru\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.319] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\ru-ru\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\ru-ru\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.319] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.319] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.321] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.322] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\sk-sk\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.322] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\sk-sk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\sk-sk\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.323] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.323] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.324] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.324] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\sl-si\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.328] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\sl-si\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\sl-si\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.328] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.328] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.329] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.330] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\sv-se\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.330] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\sv-se\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\sv-se\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.330] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.330] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.331] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.332] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\tr-tr\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.332] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\tr-tr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\tr-tr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.332] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.332] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.333] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.333] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.334] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.334] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.334] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.334] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.335] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\uk-ua\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.335] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\uk-ua\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\uk-ua\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.335] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.335] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.336] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.337] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\zh-cn\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.337] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\zh-cn\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\zh-cn\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.337] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.337] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.338] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.338] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\zh-tw\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.339] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\zh-tw\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\zh-tw\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.339] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.339] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.340] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.344] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\plugin.js", dwFileAttributes=0x80) returned 0 [0096.345] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\plugin.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\plugin.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.345] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.345] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.346] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.347] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\plugins\\rhp\\createpdfupsell-app-selector.js", dwFileAttributes=0x80) returned 0 [0096.347] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\plugins\\rhp\\createpdfupsell-app-selector.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\plugins\\rhp\\createpdfupsell-app-selector.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.347] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.347] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.348] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.348] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\plugins\\rhp\\createpdfupsell-app-tool-view.js", dwFileAttributes=0x80) returned 0 [0096.348] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\plugins\\rhp\\createpdfupsell-app-tool-view.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\plugins\\rhp\\createpdfupsell-app-tool-view.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.348] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.349] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.352] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.352] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\dc-annotations\\js\\plugin.js", dwFileAttributes=0x80) returned 0 [0096.353] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\dc-annotations\\js\\plugin.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\dc-annotations\\js\\plugin.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.353] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.353] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.361] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.361] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\css\\main-selector.css", dwFileAttributes=0x80) returned 0 [0096.361] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\css\\main-selector.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\desktop-connector-files\\css\\main-selector.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.362] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.362] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.362] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.363] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\css\\main.css", dwFileAttributes=0x80) returned 0 [0096.363] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\css\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\desktop-connector-files\\css\\main.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.363] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.363] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.382] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.383] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\ca-es\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.384] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\ca-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\ca-es\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.384] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.384] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.385] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.385] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\cs-cz\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.386] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\cs-cz\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\cs-cz\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.386] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.386] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.387] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.390] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\da-dk\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.391] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\da-dk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\da-dk\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.391] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.391] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.394] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.394] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\de-de\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.394] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\de-de\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\de-de\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.395] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.395] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.396] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.397] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\en-ae\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.397] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\en-ae\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\en-ae\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.398] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.398] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.399] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.399] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\en-gb\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.400] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\en-gb\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\en-gb\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.400] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.400] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.401] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.402] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\en-il\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.402] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\en-il\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\en-il\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.402] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.402] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.404] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.404] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\es-es\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.405] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\es-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\es-es\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.405] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.405] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.406] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.406] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\eu-es\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.407] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\eu-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\eu-es\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.407] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.407] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.408] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.408] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\fi-fi\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.408] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\fi-fi\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\fi-fi\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.409] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.409] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.410] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.410] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\fr-fr\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.411] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\fr-fr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\fr-fr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.411] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.411] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.412] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.412] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\fr-ma\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.413] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\fr-ma\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\fr-ma\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.413] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.413] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.415] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.415] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\hr-hr\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.415] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\hr-hr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\hr-hr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.416] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.416] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.417] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.417] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\hu-hu\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.417] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\hu-hu\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\hu-hu\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.418] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.418] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.422] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.422] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\it-it\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.423] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\it-it\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\it-it\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.423] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.423] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.424] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.424] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\ja-jp\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.424] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\ja-jp\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\ja-jp\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.425] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.425] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.427] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.428] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\ko-kr\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.428] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\ko-kr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\ko-kr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.428] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.428] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.429] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.429] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\nb-no\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.430] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\nb-no\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\nb-no\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.430] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.430] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.431] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.431] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\nl-nl\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.432] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\nl-nl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\nl-nl\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.432] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.432] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.433] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.433] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\pl-pl\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.433] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\pl-pl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\pl-pl\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.434] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.434] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.437] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.438] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\pt-br\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.438] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\pt-br\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\pt-br\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.438] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.439] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.439] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.440] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\ro-ro\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.440] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\ro-ro\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\ro-ro\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.440] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.440] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.441] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.442] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\root\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.442] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\root\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\root\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.442] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.442] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.443] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.443] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\ru-ru\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.443] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\ru-ru\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\ru-ru\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.444] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.444] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.448] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.448] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\sk-sk\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.449] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\sk-sk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\sk-sk\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.449] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.449] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.450] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.451] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\sl-si\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.451] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\sl-si\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\sl-si\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.451] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.451] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.452] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.453] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\sv-se\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.453] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\sv-se\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\sv-se\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.453] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.453] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.454] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.455] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\tr-tr\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.455] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\tr-tr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\tr-tr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.455] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.455] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.456] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.456] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.457] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.457] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.457] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.458] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.458] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\uk-ua\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.458] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\uk-ua\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\uk-ua\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.459] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.459] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.459] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.460] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\zh-cn\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.460] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\zh-cn\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\zh-cn\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.460] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.460] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.461] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.461] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\zh-tw\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.462] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\zh-tw\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\zh-tw\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.462] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.462] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.463] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.463] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\plugin.js", dwFileAttributes=0x80) returned 0 [0096.463] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\plugin.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\desktop-connector-files\\js\\plugin.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.464] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.464] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.464] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.464] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\selector.js", dwFileAttributes=0x80) returned 0 [0096.465] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\selector.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\desktop-connector-files\\js\\selector.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.465] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.465] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.469] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.470] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files-select\\css\\main-selector.css", dwFileAttributes=0x80) returned 0 [0096.470] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files-select\\css\\main-selector.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\desktop-connector-files-select\\css\\main-selector.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.470] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.470] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.471] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.471] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files-select\\css\\main.css", dwFileAttributes=0x80) returned 0 [0096.471] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files-select\\css\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\desktop-connector-files-select\\css\\main.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.472] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.472] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.472] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.473] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files-select\\js\\plugin.js", dwFileAttributes=0x80) returned 0 [0096.473] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files-select\\js\\plugin.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\desktop-connector-files-select\\js\\plugin.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.473] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.473] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.474] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.474] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files-select\\js\\selector.js", dwFileAttributes=0x80) returned 0 [0096.474] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files-select\\js\\selector.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\desktop-connector-files-select\\js\\selector.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.475] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.475] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.476] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.477] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\css\\main.css", dwFileAttributes=0x80) returned 0 [0096.477] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\css\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\digsig\\css\\main.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.477] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.477] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.478] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.478] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\images\\digsig_icons.png", dwFileAttributes=0x80) returned 0 [0096.479] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\images\\digsig_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\digsig\\images\\digsig_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.480] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.480] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.480] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.480] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\images\\digsig_icons_2x.png", dwFileAttributes=0x80) returned 0 [0096.481] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\images\\digsig_icons_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\digsig\\images\\digsig_icons_2x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.481] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.481] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.484] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.484] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\images\\themes\\dark\\digsig_icons.png", dwFileAttributes=0x80) returned 0 [0096.485] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\images\\themes\\dark\\digsig_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\digsig\\images\\themes\\dark\\digsig_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.485] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.485] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.485] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.486] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\images\\themes\\dark\\digsig_icons_2x.png", dwFileAttributes=0x80) returned 0 [0096.486] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\images\\themes\\dark\\digsig_icons_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\digsig\\images\\themes\\dark\\digsig_icons_2x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.486] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.486] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.492] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.492] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\ca-es\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.492] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\ca-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\digsig\\js\\nls\\ca-es\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.493] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.493] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.494] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.495] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\cs-cz\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.495] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\cs-cz\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\digsig\\js\\nls\\cs-cz\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.495] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.495] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.496] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.500] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\da-dk\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.501] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\da-dk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\digsig\\js\\nls\\da-dk\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.501] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.501] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.502] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.503] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\de-de\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.503] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\de-de\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\digsig\\js\\nls\\de-de\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.503] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.503] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.505] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.505] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\en-ae\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.505] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\en-ae\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\digsig\\js\\nls\\en-ae\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.506] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.506] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.508] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.508] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\en-il\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.508] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\en-il\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\digsig\\js\\nls\\en-il\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.508] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.509] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.510] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.510] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\es-es\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.510] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\es-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\digsig\\js\\nls\\es-es\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.511] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.511] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.512] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.515] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\eu-es\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.515] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\eu-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\digsig\\js\\nls\\eu-es\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.515] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.515] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.516] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.517] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\fi-fi\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.517] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\fi-fi\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\digsig\\js\\nls\\fi-fi\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.517] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.518] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.519] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.519] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\fr-fr\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.520] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\fr-fr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\digsig\\js\\nls\\fr-fr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.520] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.520] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.521] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.522] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\fr-ma\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.522] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\fr-ma\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\digsig\\js\\nls\\fr-ma\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.522] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.522] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.525] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.526] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\hr-hr\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.527] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\hr-hr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\digsig\\js\\nls\\hr-hr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.527] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.527] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.528] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.529] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\hu-hu\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.529] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\hu-hu\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\digsig\\js\\nls\\hu-hu\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.529] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.529] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.531] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.531] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\it-it\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.531] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\it-it\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\digsig\\js\\nls\\it-it\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.531] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.532] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.532] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.533] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\ja-jp\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.533] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\ja-jp\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\digsig\\js\\nls\\ja-jp\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.534] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.534] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.535] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.535] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\ko-kr\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.536] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\ko-kr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\digsig\\js\\nls\\ko-kr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.536] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.536] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.537] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.537] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\nb-no\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.538] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\nb-no\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\digsig\\js\\nls\\nb-no\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.538] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.538] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.539] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.539] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\nl-nl\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.539] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\nl-nl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\digsig\\js\\nls\\nl-nl\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.540] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.540] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.541] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.541] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\pl-pl\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.542] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\pl-pl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\digsig\\js\\nls\\pl-pl\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.542] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.542] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.543] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.569] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\pt-br\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.570] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\pt-br\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\digsig\\js\\nls\\pt-br\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.570] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.570] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.571] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.571] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\ro-ro\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.572] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\ro-ro\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\digsig\\js\\nls\\ro-ro\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.572] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.572] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.573] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.573] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\root\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.574] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\root\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\digsig\\js\\nls\\root\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.574] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.574] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.578] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.578] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\ru-ru\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.580] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\ru-ru\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\digsig\\js\\nls\\ru-ru\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.581] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.581] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.582] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.582] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\sk-sk\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.582] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\sk-sk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\digsig\\js\\nls\\sk-sk\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.582] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.583] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.583] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.584] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\sl-si\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.584] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\sl-si\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\digsig\\js\\nls\\sl-si\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.584] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.584] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.586] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.586] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\sv-se\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.586] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\sv-se\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\digsig\\js\\nls\\sv-se\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.586] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.587] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.587] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.588] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\tr-tr\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.588] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\tr-tr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\digsig\\js\\nls\\tr-tr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.588] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.588] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.589] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.589] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.589] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\digsig\\js\\nls\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.590] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.590] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.591] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.591] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\uk-ua\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.591] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\uk-ua\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\digsig\\js\\nls\\uk-ua\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.592] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.592] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.592] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.593] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\zh-cn\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.593] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\zh-cn\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\digsig\\js\\nls\\zh-cn\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.593] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.594] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.594] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.595] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\zh-tw\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.595] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\zh-tw\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\digsig\\js\\nls\\zh-tw\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.595] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.595] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.596] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.596] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\plugin.js", dwFileAttributes=0x80) returned 0 [0096.597] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\plugin.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\digsig\\js\\plugin.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.597] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.597] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.597] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.598] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\selector.js", dwFileAttributes=0x80) returned 0 [0096.598] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\selector.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\digsig\\js\\selector.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.598] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.598] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.600] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.601] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\css\\main-selector.css", dwFileAttributes=0x80) returned 0 [0096.601] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\css\\main-selector.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\editpdf\\css\\main-selector.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.601] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.601] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.602] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.602] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\css\\main.css", dwFileAttributes=0x80) returned 0 [0096.602] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\css\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\editpdf\\css\\main.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.603] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.603] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.605] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.605] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\images\\example_icons.png", dwFileAttributes=0x80) returned 0 [0096.609] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\images\\example_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\editpdf\\images\\example_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.610] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.610] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.610] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.611] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\images\\example_icons2x.png", dwFileAttributes=0x80) returned 0 [0096.611] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\images\\example_icons2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\editpdf\\images\\example_icons2x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.611] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.611] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.611] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.612] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\images\\rhp_world_icon.png", dwFileAttributes=0x80) returned 0 [0096.612] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\images\\rhp_world_icon.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\editpdf\\images\\rhp_world_icon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.612] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.612] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.613] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.613] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\images\\rhp_world_icon_2x.png", dwFileAttributes=0x80) returned 0 [0096.613] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\images\\rhp_world_icon_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\editpdf\\images\\rhp_world_icon_2x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.614] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.614] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.614] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.614] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\images\\rhp_world_icon_hover.png", dwFileAttributes=0x80) returned 0 [0096.615] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\images\\rhp_world_icon_hover.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\editpdf\\images\\rhp_world_icon_hover.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.615] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.615] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.615] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.616] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\images\\rhp_world_icon_hover_2x.png", dwFileAttributes=0x80) returned 0 [0096.616] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\images\\rhp_world_icon_hover_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\editpdf\\images\\rhp_world_icon_hover_2x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.616] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.616] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.632] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.633] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\images\\themes\\dark\\example_icons.png", dwFileAttributes=0x80) returned 0 [0096.633] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\images\\themes\\dark\\example_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\editpdf\\images\\themes\\dark\\example_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.634] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.634] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.634] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.635] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\images\\themes\\dark\\example_icons2x.png", dwFileAttributes=0x80) returned 0 [0096.635] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\images\\themes\\dark\\example_icons2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\editpdf\\images\\themes\\dark\\example_icons2x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.635] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.635] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.635] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.636] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\images\\themes\\dark\\rhp_world_icon.png", dwFileAttributes=0x80) returned 0 [0096.636] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\images\\themes\\dark\\rhp_world_icon.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\editpdf\\images\\themes\\dark\\rhp_world_icon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.636] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.637] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.637] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.640] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\images\\themes\\dark\\rhp_world_icon_2x.png", dwFileAttributes=0x80) returned 0 [0096.640] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\images\\themes\\dark\\rhp_world_icon_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\editpdf\\images\\themes\\dark\\rhp_world_icon_2x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.641] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.641] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.641] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.642] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\images\\themes\\dark\\rhp_world_icon_hover.png", dwFileAttributes=0x80) returned 0 [0096.642] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\images\\themes\\dark\\rhp_world_icon_hover.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\editpdf\\images\\themes\\dark\\rhp_world_icon_hover.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.642] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.642] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.642] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.643] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\images\\themes\\dark\\rhp_world_icon_hover_2x.png", dwFileAttributes=0x80) returned 0 [0096.643] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\images\\themes\\dark\\rhp_world_icon_hover_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\editpdf\\images\\themes\\dark\\rhp_world_icon_hover_2x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.643] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.643] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.654] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.654] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\ca-es\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.654] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\ca-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\editpdf\\js\\nls\\ca-es\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.655] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.655] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.656] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.656] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\cs-cz\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.663] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\cs-cz\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\editpdf\\js\\nls\\cs-cz\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.664] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.664] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.665] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.665] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\da-dk\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.665] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\da-dk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\editpdf\\js\\nls\\da-dk\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.666] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.666] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.680] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.681] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\de-de\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.681] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\de-de\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\editpdf\\js\\nls\\de-de\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.682] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.682] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.697] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.697] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\en-ae\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.698] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\en-ae\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\editpdf\\js\\nls\\en-ae\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.698] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.698] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.751] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.751] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\en-gb\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.752] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\en-gb\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\editpdf\\js\\nls\\en-gb\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.752] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.752] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.755] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.756] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\en-il\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.756] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\en-il\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\editpdf\\js\\nls\\en-il\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.756] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.756] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.757] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.758] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\es-es\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.758] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\es-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\editpdf\\js\\nls\\es-es\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.758] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.758] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.759] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.760] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\eu-es\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.760] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\eu-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\editpdf\\js\\nls\\eu-es\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.761] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.761] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.762] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.765] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\fi-fi\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.765] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\fi-fi\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\editpdf\\js\\nls\\fi-fi\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.766] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.766] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.767] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.767] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\fr-fr\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.767] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\fr-fr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\editpdf\\js\\nls\\fr-fr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.768] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.768] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.769] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.770] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\fr-ma\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.770] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\fr-ma\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\editpdf\\js\\nls\\fr-ma\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.770] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.770] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.774] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.775] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\hr-hr\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.775] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\hr-hr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\editpdf\\js\\nls\\hr-hr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.775] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.776] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.777] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.777] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\hu-hu\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.813] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\hu-hu\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\editpdf\\js\\nls\\hu-hu\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.813] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.813] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.814] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.814] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\it-it\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.815] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\it-it\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\editpdf\\js\\nls\\it-it\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.815] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.815] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.816] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.816] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\ja-jp\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.817] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\ja-jp\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\editpdf\\js\\nls\\ja-jp\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.817] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.817] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.818] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.819] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\ko-kr\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.819] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\ko-kr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\editpdf\\js\\nls\\ko-kr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.819] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.819] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.820] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.820] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\nb-no\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.821] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\nb-no\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\editpdf\\js\\nls\\nb-no\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.821] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.821] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.822] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.822] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\nl-nl\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.823] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\nl-nl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\editpdf\\js\\nls\\nl-nl\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.823] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.823] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.824] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.824] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\pl-pl\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.824] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\pl-pl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\editpdf\\js\\nls\\pl-pl\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.828] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.828] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.829] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.829] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\pt-br\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.830] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\pt-br\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\editpdf\\js\\nls\\pt-br\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.830] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.830] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.831] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.831] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\ro-ro\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.832] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\ro-ro\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\editpdf\\js\\nls\\ro-ro\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.832] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.832] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.833] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.833] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\root\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.833] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\root\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\editpdf\\js\\nls\\root\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.834] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.834] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.836] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.836] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\ru-ru\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.836] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\ru-ru\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\editpdf\\js\\nls\\ru-ru\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.837] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.837] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.837] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.838] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\sk-sk\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.838] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\sk-sk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\editpdf\\js\\nls\\sk-sk\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.838] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.838] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.839] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.840] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\sl-si\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.843] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\sl-si\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\editpdf\\js\\nls\\sl-si\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.843] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.843] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.845] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.845] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\sv-se\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.845] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\sv-se\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\editpdf\\js\\nls\\sv-se\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.846] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.846] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.847] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.847] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\tr-tr\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.847] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\tr-tr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\editpdf\\js\\nls\\tr-tr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.847] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.848] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.848] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.848] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.849] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\editpdf\\js\\nls\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.849] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.849] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.850] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.850] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\uk-ua\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.850] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\uk-ua\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\editpdf\\js\\nls\\uk-ua\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.851] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.851] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.851] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.852] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\zh-cn\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.852] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\zh-cn\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\editpdf\\js\\nls\\zh-cn\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.852] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.852] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.853] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.853] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\zh-tw\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.854] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\zh-tw\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\editpdf\\js\\nls\\zh-tw\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.854] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.854] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.855] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.855] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\plugin.js", dwFileAttributes=0x80) returned 0 [0096.859] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\plugin.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\editpdf\\js\\plugin.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.859] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.859] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.860] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.860] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\plugins\\editpdf-selector.js", dwFileAttributes=0x80) returned 0 [0096.861] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\plugins\\editpdf-selector.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\editpdf\\js\\plugins\\editpdf-selector.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.861] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.862] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.862] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.862] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\plugins\\editpdf-tool-view.js", dwFileAttributes=0x80) returned 0 [0096.862] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\plugins\\editpdf-tool-view.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\editpdf\\js\\plugins\\editpdf-tool-view.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.863] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.863] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.864] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.864] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\plugins\\rhp\\editpdf-selector.js", dwFileAttributes=0x80) returned 0 [0096.865] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\plugins\\rhp\\editpdf-selector.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\editpdf\\js\\plugins\\rhp\\editpdf-selector.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.865] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.865] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.865] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.866] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\plugins\\rhp\\editpdf-tool-view.js", dwFileAttributes=0x80) returned 0 [0096.866] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\plugins\\rhp\\editpdf-tool-view.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\editpdf\\js\\plugins\\rhp\\editpdf-tool-view.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.866] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.866] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.868] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.869] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\css\\main-selector.css", dwFileAttributes=0x80) returned 0 [0096.869] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\css\\main-selector.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\exportpdfupsell-app\\css\\main-selector.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.870] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.870] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.870] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.870] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\css\\main.css", dwFileAttributes=0x80) returned 0 [0096.871] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\css\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\exportpdfupsell-app\\css\\main.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.871] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.871] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.882] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.883] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\images\\example_icons.png", dwFileAttributes=0x80) returned 0 [0096.883] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\images\\example_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\exportpdfupsell-app\\images\\example_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.884] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.884] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.884] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.884] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\images\\example_icons2x.png", dwFileAttributes=0x80) returned 0 [0096.885] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\images\\example_icons2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\exportpdfupsell-app\\images\\example_icons2x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.885] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.885] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.885] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.886] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\images\\rhp_world_icon.png", dwFileAttributes=0x80) returned 0 [0096.886] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\images\\rhp_world_icon.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\exportpdfupsell-app\\images\\rhp_world_icon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.886] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.886] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.887] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.890] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\images\\rhp_world_icon_2x.png", dwFileAttributes=0x80) returned 0 [0096.890] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\images\\rhp_world_icon_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\exportpdfupsell-app\\images\\rhp_world_icon_2x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.891] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.891] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.891] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.891] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\images\\rhp_world_icon_hover.png", dwFileAttributes=0x80) returned 0 [0096.892] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\images\\rhp_world_icon_hover.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\exportpdfupsell-app\\images\\rhp_world_icon_hover.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.892] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.892] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.892] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.893] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\images\\rhp_world_icon_hover_2x.png", dwFileAttributes=0x80) returned 0 [0096.893] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\images\\rhp_world_icon_hover_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\exportpdfupsell-app\\images\\rhp_world_icon_hover_2x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.893] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.893] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.898] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.898] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\images\\themes\\dark\\example_icons.png", dwFileAttributes=0x80) returned 0 [0096.899] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\images\\themes\\dark\\example_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\exportpdfupsell-app\\images\\themes\\dark\\example_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.899] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.899] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.899] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.900] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\images\\themes\\dark\\example_icons2x.png", dwFileAttributes=0x80) returned 0 [0096.900] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\images\\themes\\dark\\example_icons2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\exportpdfupsell-app\\images\\themes\\dark\\example_icons2x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.900] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.900] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.901] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.901] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\images\\themes\\dark\\rhp_world_icon.png", dwFileAttributes=0x80) returned 0 [0096.901] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\images\\themes\\dark\\rhp_world_icon.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\exportpdfupsell-app\\images\\themes\\dark\\rhp_world_icon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.901] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.902] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.902] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.902] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\images\\themes\\dark\\rhp_world_icon_2x.png", dwFileAttributes=0x80) returned 0 [0096.902] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\images\\themes\\dark\\rhp_world_icon_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\exportpdfupsell-app\\images\\themes\\dark\\rhp_world_icon_2x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.903] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.903] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.903] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.904] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\images\\themes\\dark\\rhp_world_icon_hover.png", dwFileAttributes=0x80) returned 0 [0096.904] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\images\\themes\\dark\\rhp_world_icon_hover.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\exportpdfupsell-app\\images\\themes\\dark\\rhp_world_icon_hover.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.904] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.904] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.905] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.905] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\images\\themes\\dark\\rhp_world_icon_hover_2x.png", dwFileAttributes=0x80) returned 0 [0096.905] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\images\\themes\\dark\\rhp_world_icon_hover_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\exportpdfupsell-app\\images\\themes\\dark\\rhp_world_icon_hover_2x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.905] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.906] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.913] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.914] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\ca-es\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.914] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\ca-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\ca-es\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.914] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.914] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.915] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.916] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\cs-cz\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.916] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\cs-cz\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\cs-cz\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.916] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.916] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.917] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.917] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\da-dk\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.918] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\da-dk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\da-dk\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.918] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.918] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.923] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.923] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\de-de\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.923] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\de-de\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\de-de\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.924] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.924] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.925] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.925] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\en-ae\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.925] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\en-ae\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\en-ae\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.926] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.926] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.927] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.927] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\en-il\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.928] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\en-il\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\en-il\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.928] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.928] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.929] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.929] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\es-es\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.929] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\es-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\es-es\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.930] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.930] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.930] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.931] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\eu-es\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.932] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\eu-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\eu-es\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.932] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.932] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.933] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.949] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\fi-fi\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.949] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\fi-fi\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\fi-fi\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.953] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.953] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.955] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.955] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\fr-fr\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.955] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\fr-fr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\fr-fr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.956] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.956] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.956] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.957] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\fr-ma\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.957] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\fr-ma\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\fr-ma\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.957] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.957] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.958] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.959] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\hr-hr\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.959] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\hr-hr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\hr-hr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.959] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.959] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.960] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.960] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\hu-hu\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.961] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\hu-hu\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\hu-hu\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.961] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.961] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.962] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.963] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\it-it\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.963] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\it-it\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\it-it\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.963] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.963] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.964] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.964] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\ja-jp\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.965] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\ja-jp\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\ja-jp\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.965] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.965] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.968] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.969] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\ko-kr\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.969] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\ko-kr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\ko-kr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.969] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.969] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.970] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.970] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\nb-no\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.970] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\nb-no\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\nb-no\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.971] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.971] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.972] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.972] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\nl-nl\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.972] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\nl-nl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\nl-nl\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.972] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.973] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.973] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.974] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\pl-pl\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.974] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\pl-pl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\pl-pl\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.974] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.974] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.975] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.975] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\pt-br\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.975] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\pt-br\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\pt-br\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.976] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.976] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.977] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.977] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\ro-ro\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.977] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\ro-ro\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\ro-ro\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.977] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.977] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.978] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.979] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\root\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.979] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\root\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\root\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.979] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.979] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.980] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.980] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\ru-ru\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.980] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\ru-ru\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\ru-ru\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.981] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.981] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.982] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.982] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\sk-sk\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.982] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\sk-sk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\sk-sk\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.986] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.986] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.987] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.988] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\sl-si\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.988] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\sl-si\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\sl-si\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.988] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.988] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.990] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.990] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\sv-se\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.990] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\sv-se\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\sv-se\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.990] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.990] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.991] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.991] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\tr-tr\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.992] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\tr-tr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\tr-tr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.992] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.992] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.993] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.993] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.993] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.993] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.993] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.994] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.994] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\uk-ua\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.995] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\uk-ua\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\uk-ua\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.995] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.995] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.995] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0096.996] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\zh-cn\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0096.996] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\zh-cn\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\zh-cn\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.996] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0096.996] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.001] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.002] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\zh-tw\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0097.002] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\zh-tw\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\zh-tw\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.002] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.002] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.003] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.003] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\plugin.js", dwFileAttributes=0x80) returned 0 [0097.004] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\plugin.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\plugin.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.004] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.004] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.005] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.005] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\plugins\\rhp\\exportpdfupsell-app-selector.js", dwFileAttributes=0x80) returned 0 [0097.005] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\plugins\\rhp\\exportpdfupsell-app-selector.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\plugins\\rhp\\exportpdfupsell-app-selector.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.005] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.005] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.006] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.006] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\plugins\\rhp\\exportpdfupsell-app-tool-view.js", dwFileAttributes=0x80) returned 0 [0097.006] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\plugins\\rhp\\exportpdfupsell-app-tool-view.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\plugins\\rhp\\exportpdfupsell-app-tool-view.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.006] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.006] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.008] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.008] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\css\\faf-main.css", dwFileAttributes=0x80) returned 0 [0097.008] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\css\\faf-main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\css\\faf-main.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.009] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.009] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.025] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.025] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\adobe_sign_tag.png", dwFileAttributes=0x80) returned 0 [0097.026] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\adobe_sign_tag.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\img\\adobe_sign_tag.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.026] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.026] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.026] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.026] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\adobe_sign_tag_retina.png", dwFileAttributes=0x80) returned 0 [0097.027] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\adobe_sign_tag_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\img\\adobe_sign_tag_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.027] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.027] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.027] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.027] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\core_icons.png", dwFileAttributes=0x80) returned 0 [0097.030] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\core_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\img\\core_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.030] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.030] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.030] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.031] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\core_icons_fw.png", dwFileAttributes=0x80) returned 0 [0097.031] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\core_icons_fw.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\img\\core_icons_fw.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.032] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.032] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.032] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.032] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\core_icons_retina.png", dwFileAttributes=0x80) returned 0 [0097.032] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\core_icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\img\\core_icons_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.033] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.033] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.033] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.033] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\faf_field_grabber.png", dwFileAttributes=0x80) returned 0 [0097.033] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\faf_field_grabber.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\img\\faf_field_grabber.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.033] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.033] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.034] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.034] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\faf_icons.png", dwFileAttributes=0x80) returned 0 [0097.034] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\faf_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\img\\faf_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.034] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.034] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.035] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.035] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\faf_icons_retina.png", dwFileAttributes=0x80) returned 0 [0097.035] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\faf_icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\img\\faf_icons_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.035] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.035] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.035] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.036] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\Handler@1x.png", dwFileAttributes=0x80) returned 0 [0097.036] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\Handler@1x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\img\\handler@1x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.036] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.036] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.036] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.037] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\sample-thumb.png", dwFileAttributes=0x80) returned 0 [0097.037] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\sample-thumb.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\img\\sample-thumb.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.037] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.037] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.053] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.053] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\themes\\dark\\adobe_sign_tag.png", dwFileAttributes=0x80) returned 0 [0097.054] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\themes\\dark\\adobe_sign_tag.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\img\\themes\\dark\\adobe_sign_tag.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.054] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.054] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.055] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.055] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\themes\\dark\\adobe_sign_tag_retina.png", dwFileAttributes=0x80) returned 0 [0097.055] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\themes\\dark\\adobe_sign_tag_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\img\\themes\\dark\\adobe_sign_tag_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.056] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.056] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.056] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.056] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\themes\\dark\\core_icons.png", dwFileAttributes=0x80) returned 0 [0097.057] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\themes\\dark\\core_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\img\\themes\\dark\\core_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.057] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.057] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.058] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.058] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\themes\\dark\\core_icons_fw.png", dwFileAttributes=0x80) returned 0 [0097.058] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\themes\\dark\\core_icons_fw.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\img\\themes\\dark\\core_icons_fw.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.059] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.059] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.062] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.063] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\themes\\dark\\core_icons_retina.png", dwFileAttributes=0x80) returned 0 [0097.063] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\themes\\dark\\core_icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\img\\themes\\dark\\core_icons_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.063] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.063] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.064] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.064] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\themes\\dark\\faf_field_grabber.png", dwFileAttributes=0x80) returned 0 [0097.064] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\themes\\dark\\faf_field_grabber.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\img\\themes\\dark\\faf_field_grabber.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.065] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.065] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.065] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.065] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\themes\\dark\\faf_icons.png", dwFileAttributes=0x80) returned 0 [0097.066] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\themes\\dark\\faf_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\img\\themes\\dark\\faf_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.066] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.066] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.066] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.067] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\themes\\dark\\faf_icons_retina.png", dwFileAttributes=0x80) returned 0 [0097.067] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\themes\\dark\\faf_icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\img\\themes\\dark\\faf_icons_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.067] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.067] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.067] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.068] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\themes\\dark\\Handler@1x.png", dwFileAttributes=0x80) returned 0 [0097.068] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\themes\\dark\\Handler@1x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\img\\themes\\dark\\handler@1x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.068] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.068] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.069] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.069] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\themes\\dark\\sample-thumb.png", dwFileAttributes=0x80) returned 0 [0097.069] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\themes\\dark\\sample-thumb.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\img\\themes\\dark\\sample-thumb.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.069] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.069] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.101] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.102] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\@1x\\A12_AddBlue@1x.png", dwFileAttributes=0x80) returned 0 [0097.102] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\@1x\\A12_AddBlue@1x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\img\\tools\\@1x\\a12_addblue@1x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.103] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.103] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.103] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.104] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\@1x\\A12_Checkmark_White@1x.png", dwFileAttributes=0x80) returned 0 [0097.104] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\@1x\\A12_Checkmark_White@1x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\img\\tools\\@1x\\a12_checkmark_white@1x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.104] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.104] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.105] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.105] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\@1x\\A12_Crossmark_White@1x.png", dwFileAttributes=0x80) returned 0 [0097.105] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\@1x\\A12_Crossmark_White@1x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\img\\tools\\@1x\\a12_crossmark_white@1x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.106] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.109] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.109] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.110] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\@1x\\A12_delete@1x.png", dwFileAttributes=0x80) returned 0 [0097.111] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\@1x\\A12_delete@1x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\img\\tools\\@1x\\a12_delete@1x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.111] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.111] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.111] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.112] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\@1x\\A12_FilledDot_White@1x.png", dwFileAttributes=0x80) returned 0 [0097.112] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\@1x\\A12_FilledDot_White@1x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\img\\tools\\@1x\\a12_filleddot_white@1x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.112] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.112] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.113] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.113] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\@1x\\A12_Line_White@1x.png", dwFileAttributes=0x80) returned 0 [0097.115] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\@1x\\A12_Line_White@1x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\img\\tools\\@1x\\a12_line_white@1x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.115] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.115] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.116] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.116] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\@1x\\A12_Roundrect_White@1x.png", dwFileAttributes=0x80) returned 0 [0097.116] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\@1x\\A12_Roundrect_White@1x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\img\\tools\\@1x\\a12_roundrect_white@1x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.116] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.116] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.117] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.117] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\@1x\\A12_Sign_White@1x.png", dwFileAttributes=0x80) returned 0 [0097.117] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\@1x\\A12_Sign_White@1x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\img\\tools\\@1x\\a12_sign_white@1x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.118] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.118] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.118] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.118] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\@1x\\A12_TypeTextFields_White@1x.png", dwFileAttributes=0x80) returned 0 [0097.118] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\@1x\\A12_TypeTextFields_White@1x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\img\\tools\\@1x\\a12_typetextfields_white@1x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.119] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.119] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.119] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.119] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\@1x\\Comb_field_White@1x.png", dwFileAttributes=0x80) returned 0 [0097.120] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\@1x\\Comb_field_White@1x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\img\\tools\\@1x\\comb_field_white@1x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.120] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.120] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.127] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.128] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\@1x\\themes\\dark\\A12_AddBlue@1x.png", dwFileAttributes=0x80) returned 0 [0097.129] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\@1x\\themes\\dark\\A12_AddBlue@1x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\img\\tools\\@1x\\themes\\dark\\a12_addblue@1x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.129] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.129] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.130] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.130] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\@1x\\themes\\dark\\A12_Checkmark_White@1x.png", dwFileAttributes=0x80) returned 0 [0097.130] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\@1x\\themes\\dark\\A12_Checkmark_White@1x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\img\\tools\\@1x\\themes\\dark\\a12_checkmark_white@1x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.130] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.130] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.131] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.131] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\@1x\\themes\\dark\\A12_Crossmark_White@1x.png", dwFileAttributes=0x80) returned 0 [0097.132] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\@1x\\themes\\dark\\A12_Crossmark_White@1x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\img\\tools\\@1x\\themes\\dark\\a12_crossmark_white@1x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.132] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.132] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.132] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.133] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\@1x\\themes\\dark\\A12_delete@1x.png", dwFileAttributes=0x80) returned 0 [0097.133] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\@1x\\themes\\dark\\A12_delete@1x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\img\\tools\\@1x\\themes\\dark\\a12_delete@1x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.133] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.133] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.134] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.134] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\@1x\\themes\\dark\\A12_FilledDot_White@1x.png", dwFileAttributes=0x80) returned 0 [0097.134] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\@1x\\themes\\dark\\A12_FilledDot_White@1x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\img\\tools\\@1x\\themes\\dark\\a12_filleddot_white@1x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.134] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.134] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.135] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.135] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\@1x\\themes\\dark\\A12_Line_White@1x.png", dwFileAttributes=0x80) returned 0 [0097.135] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\@1x\\themes\\dark\\A12_Line_White@1x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\img\\tools\\@1x\\themes\\dark\\a12_line_white@1x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.136] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.136] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.136] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.136] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\@1x\\themes\\dark\\A12_Roundrect_White@1x.png", dwFileAttributes=0x80) returned 0 [0097.137] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\@1x\\themes\\dark\\A12_Roundrect_White@1x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\img\\tools\\@1x\\themes\\dark\\a12_roundrect_white@1x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.137] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.137] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.144] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.145] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\@1x\\themes\\dark\\A12_Sign_White@1x.png", dwFileAttributes=0x80) returned 0 [0097.145] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\@1x\\themes\\dark\\A12_Sign_White@1x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\img\\tools\\@1x\\themes\\dark\\a12_sign_white@1x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.145] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.145] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.146] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.146] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\@1x\\themes\\dark\\A12_TypeTextFields_White@1x.png", dwFileAttributes=0x80) returned 0 [0097.146] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\@1x\\themes\\dark\\A12_TypeTextFields_White@1x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\img\\tools\\@1x\\themes\\dark\\a12_typetextfields_white@1x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.147] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.147] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.147] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.147] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\@1x\\themes\\dark\\Comb_field_White@1x.png", dwFileAttributes=0x80) returned 0 [0097.148] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\@1x\\themes\\dark\\Comb_field_White@1x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\img\\tools\\@1x\\themes\\dark\\comb_field_white@1x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.148] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.148] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.153] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.153] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\check.cur", dwFileAttributes=0x80) returned 0 [0097.153] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\check.cur" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\img\\tools\\check.cur"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.154] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.154] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.154] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.154] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\check_2x.png", dwFileAttributes=0x80) returned 0 [0097.155] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\check_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\img\\tools\\check_2x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.155] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.155] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.156] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.156] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\circle.cur", dwFileAttributes=0x80) returned 0 [0097.156] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\circle.cur" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\img\\tools\\circle.cur"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.157] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.157] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.157] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.157] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\circle_2x.png", dwFileAttributes=0x80) returned 0 [0097.158] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\circle_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\img\\tools\\circle_2x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.158] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.158] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.158] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.159] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\dot.cur", dwFileAttributes=0x80) returned 0 [0097.159] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\dot.cur" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\img\\tools\\dot.cur"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.159] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.159] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.159] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.160] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\dot_2x.png", dwFileAttributes=0x80) returned 0 [0097.160] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\dot_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\img\\tools\\dot_2x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.160] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.160] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.161] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.161] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\line.cur", dwFileAttributes=0x80) returned 0 [0097.161] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\line.cur" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\img\\tools\\line.cur"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.161] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.161] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.162] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.162] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\line_2x.png", dwFileAttributes=0x80) returned 0 [0097.162] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\line_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\img\\tools\\line_2x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.162] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.163] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.163] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.163] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\text.cur", dwFileAttributes=0x80) returned 0 [0097.163] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\text.cur" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\img\\tools\\text.cur"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.164] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.164] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.164] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.164] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\text_2x.png", dwFileAttributes=0x80) returned 0 [0097.165] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\text_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\img\\tools\\text_2x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.165] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.165] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.178] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.179] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\themes\\dark\\check.cur", dwFileAttributes=0x80) returned 0 [0097.179] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\themes\\dark\\check.cur" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\img\\tools\\themes\\dark\\check.cur"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.180] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.180] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.180] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.180] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\themes\\dark\\check_2x.png", dwFileAttributes=0x80) returned 0 [0097.181] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\themes\\dark\\check_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\img\\tools\\themes\\dark\\check_2x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.181] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.181] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.181] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.182] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\themes\\dark\\circle.cur", dwFileAttributes=0x80) returned 0 [0097.183] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\themes\\dark\\circle.cur" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\img\\tools\\themes\\dark\\circle.cur"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.183] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.183] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.183] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.183] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\themes\\dark\\circle_2x.png", dwFileAttributes=0x80) returned 0 [0097.184] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\themes\\dark\\circle_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\img\\tools\\themes\\dark\\circle_2x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.185] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.185] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.185] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.185] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\themes\\dark\\dot.cur", dwFileAttributes=0x80) returned 0 [0097.186] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\themes\\dark\\dot.cur" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\img\\tools\\themes\\dark\\dot.cur"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.186] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.186] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.186] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.186] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\themes\\dark\\dot_2x.png", dwFileAttributes=0x80) returned 0 [0097.187] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\themes\\dark\\dot_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\img\\tools\\themes\\dark\\dot_2x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.187] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.187] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.187] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.188] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\themes\\dark\\line.cur", dwFileAttributes=0x80) returned 0 [0097.188] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\themes\\dark\\line.cur" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\img\\tools\\themes\\dark\\line.cur"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.188] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.188] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.188] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.189] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\themes\\dark\\line_2x.png", dwFileAttributes=0x80) returned 0 [0097.189] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\themes\\dark\\line_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\img\\tools\\themes\\dark\\line_2x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.189] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.189] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.190] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.190] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\themes\\dark\\text.cur", dwFileAttributes=0x80) returned 0 [0097.190] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\themes\\dark\\text.cur" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\img\\tools\\themes\\dark\\text.cur"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.190] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.190] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.191] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.191] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\themes\\dark\\text_2x.png", dwFileAttributes=0x80) returned 0 [0097.191] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\themes\\dark\\text_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\img\\tools\\themes\\dark\\text_2x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.191] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.191] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.192] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.192] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\themes\\dark\\x.cur", dwFileAttributes=0x80) returned 0 [0097.192] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\themes\\dark\\x.cur" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\img\\tools\\themes\\dark\\x.cur"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.192] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.192] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.193] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.193] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\themes\\dark\\x_2x.png", dwFileAttributes=0x80) returned 0 [0097.193] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\themes\\dark\\x_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\img\\tools\\themes\\dark\\x_2x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.193] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.193] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.197] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.197] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\x.cur", dwFileAttributes=0x80) returned 0 [0097.197] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\x.cur" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\img\\tools\\x.cur"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.198] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.198] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.198] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.198] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\x_2x.png", dwFileAttributes=0x80) returned 0 [0097.198] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\x_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\img\\tools\\x_2x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.198] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.198] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.203] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.203] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\faf-main.js", dwFileAttributes=0x80) returned 0 [0097.204] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\faf-main.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\js\\faf-main.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.204] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.204] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.210] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.211] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\ca-es\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0097.211] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\ca-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\js\\nls\\ca-es\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.212] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.212] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.212] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.212] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\cs-cz\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0097.213] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\cs-cz\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\js\\nls\\cs-cz\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.213] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.213] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.214] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.214] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\da-dk\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0097.214] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\da-dk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\js\\nls\\da-dk\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.214] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.215] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.224] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.225] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\de-de\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0097.225] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\de-de\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\js\\nls\\de-de\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.225] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.225] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.228] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.228] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\en-gb\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0097.228] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\en-gb\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\js\\nls\\en-gb\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.228] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.228] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.230] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.230] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\es-es\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0097.230] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\es-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\js\\nls\\es-es\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.230] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.230] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.234] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.234] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\eu-es\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0097.234] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\eu-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\js\\nls\\eu-es\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.235] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.235] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.235] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.236] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\fi-fi\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0097.236] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\fi-fi\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\js\\nls\\fi-fi\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.236] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.236] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.237] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.237] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\fr-fr\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0097.237] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\fr-fr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\js\\nls\\fr-fr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.237] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.237] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.239] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.239] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\hr-hr\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0097.239] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\hr-hr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\js\\nls\\hr-hr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.240] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.240] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.240] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.240] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\hu-hu\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0097.241] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\hu-hu\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\js\\nls\\hu-hu\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.241] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.241] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.242] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.242] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\it-it\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0097.242] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\it-it\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\js\\nls\\it-it\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.243] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.243] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.243] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.243] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\ja-jp\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0097.244] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\ja-jp\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\js\\nls\\ja-jp\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.244] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.244] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.245] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.245] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\ko-kr\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0097.245] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\ko-kr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\js\\nls\\ko-kr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.245] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.245] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.246] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.246] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\nb-no\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0097.249] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\nb-no\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\js\\nls\\nb-no\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.249] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.249] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.250] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.250] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\nl-nl\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0097.251] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\nl-nl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\js\\nls\\nl-nl\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.251] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.251] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.251] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.252] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\pl-pl\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0097.252] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\pl-pl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\js\\nls\\pl-pl\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.252] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.252] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.253] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.253] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\pt-br\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0097.253] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\pt-br\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\js\\nls\\pt-br\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.253] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.254] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.254] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.254] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\ro-ro\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0097.255] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\ro-ro\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\js\\nls\\ro-ro\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.255] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.255] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.255] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.256] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\root\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0097.256] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\root\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\js\\nls\\root\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.256] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.256] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.257] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.257] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\ru-ru\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0097.257] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\ru-ru\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\js\\nls\\ru-ru\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.257] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.257] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.258] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.259] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\sk-sk\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0097.259] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\sk-sk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\js\\nls\\sk-sk\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.259] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.259] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.260] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.260] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\sl-si\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0097.260] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\sl-si\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\js\\nls\\sl-si\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.260] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.260] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.261] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.261] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\sv-se\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0097.262] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\sv-se\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\js\\nls\\sv-se\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.262] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.262] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.265] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.265] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\tr-tr\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0097.266] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\tr-tr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\js\\nls\\tr-tr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.266] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.266] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.266] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.267] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0097.267] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\js\\nls\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.267] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.267] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.267] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.268] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\uk-ua\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0097.268] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\uk-ua\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\js\\nls\\uk-ua\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.268] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.268] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.269] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.269] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\zh-cn\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0097.269] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\zh-cn\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\js\\nls\\zh-cn\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.269] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.270] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.270] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.270] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\zh-tw\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0097.271] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\zh-tw\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\fss\\js\\nls\\zh-tw\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.271] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.271] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.272] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.273] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\css\\main-selector.css", dwFileAttributes=0x80) returned 0 [0097.273] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\css\\main-selector.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\generic-rhp-app\\css\\main-selector.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.273] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.273] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.274] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.274] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\css\\main.css", dwFileAttributes=0x80) returned 0 [0097.274] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\css\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\generic-rhp-app\\css\\main.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.274] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.274] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.296] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.297] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\images\\example_icons.png", dwFileAttributes=0x80) returned 0 [0097.297] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\images\\example_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\generic-rhp-app\\images\\example_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.298] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.298] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.298] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.298] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\images\\example_icons2x.png", dwFileAttributes=0x80) returned 0 [0097.299] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\images\\example_icons2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\generic-rhp-app\\images\\example_icons2x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.299] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.299] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.299] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.299] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\images\\rhp_world_icon.png", dwFileAttributes=0x80) returned 0 [0097.300] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\images\\rhp_world_icon.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\generic-rhp-app\\images\\rhp_world_icon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.300] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.300] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.300] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.300] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\images\\rhp_world_icon_2x.png", dwFileAttributes=0x80) returned 0 [0097.301] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\images\\rhp_world_icon_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\generic-rhp-app\\images\\rhp_world_icon_2x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.301] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.301] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.301] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.301] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\images\\rhp_world_icon_hover.png", dwFileAttributes=0x80) returned 0 [0097.302] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\images\\rhp_world_icon_hover.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\generic-rhp-app\\images\\rhp_world_icon_hover.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.302] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.302] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.303] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.303] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\images\\rhp_world_icon_hover_2x.png", dwFileAttributes=0x80) returned 0 [0097.303] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\images\\rhp_world_icon_hover_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\generic-rhp-app\\images\\rhp_world_icon_hover_2x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.303] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.303] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.313] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.313] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\images\\themes\\dark\\example_icons.png", dwFileAttributes=0x80) returned 0 [0097.314] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\images\\themes\\dark\\example_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\generic-rhp-app\\images\\themes\\dark\\example_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.314] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.314] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.315] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.315] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\images\\themes\\dark\\example_icons2x.png", dwFileAttributes=0x80) returned 0 [0097.315] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\images\\themes\\dark\\example_icons2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\generic-rhp-app\\images\\themes\\dark\\example_icons2x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.315] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.315] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.316] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.316] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\images\\themes\\dark\\rhp_world_icon.png", dwFileAttributes=0x80) returned 0 [0097.316] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\images\\themes\\dark\\rhp_world_icon.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\generic-rhp-app\\images\\themes\\dark\\rhp_world_icon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.316] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.316] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.317] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.317] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\images\\themes\\dark\\rhp_world_icon_2x.png", dwFileAttributes=0x80) returned 0 [0097.317] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\images\\themes\\dark\\rhp_world_icon_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\generic-rhp-app\\images\\themes\\dark\\rhp_world_icon_2x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.317] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.317] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.318] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.318] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\images\\themes\\dark\\rhp_world_icon_hover.png", dwFileAttributes=0x80) returned 0 [0097.318] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\images\\themes\\dark\\rhp_world_icon_hover.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\generic-rhp-app\\images\\themes\\dark\\rhp_world_icon_hover.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.318] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.318] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.318] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.319] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\images\\themes\\dark\\rhp_world_icon_hover_2x.png", dwFileAttributes=0x80) returned 0 [0097.319] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\images\\themes\\dark\\rhp_world_icon_hover_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\generic-rhp-app\\images\\themes\\dark\\rhp_world_icon_hover_2x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.319] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.319] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.343] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.343] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\js\\nls\\root\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0097.343] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\js\\nls\\root\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\generic-rhp-app\\js\\nls\\root\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.344] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.344] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.344] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.345] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\js\\nls\\ui-strings.js", dwFileAttributes=0x80) returned 0 [0097.345] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\js\\nls\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\generic-rhp-app\\js\\nls\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.345] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.345] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.345] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.346] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\js\\plugin.js", dwFileAttributes=0x80) returned 0 [0097.346] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\js\\plugin.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\generic-rhp-app\\js\\plugin.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.346] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.346] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.347] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.347] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\js\\plugins\\rhp\\generic-rhp-app-selector.js", dwFileAttributes=0x80) returned 0 [0097.347] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\js\\plugins\\rhp\\generic-rhp-app-selector.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\generic-rhp-app\\js\\plugins\\rhp\\generic-rhp-app-selector.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.347] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.347] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.348] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.348] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\js\\plugins\\rhp\\generic-rhp-app-tool-view.js", dwFileAttributes=0x80) returned 0 [0097.348] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\js\\plugins\\rhp\\generic-rhp-app-tool-view.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\generic-rhp-app\\js\\plugins\\rhp\\generic-rhp-app-tool-view.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.348] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.348] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.350] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.351] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\css\\main-selector.css", dwFileAttributes=0x80) returned 0 [0097.351] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\css\\main-selector.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\home\\css\\main-selector.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.351] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.351] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.351] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.352] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\css\\main.css", dwFileAttributes=0x80) returned 0 [0097.352] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\css\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\home\\css\\main.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.352] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.352] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.354] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.354] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\images\\files_icons.png", dwFileAttributes=0x80) returned 0 [0097.354] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\images\\files_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\home\\images\\files_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.355] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.355] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.355] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.355] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\images\\files_icons2x.png", dwFileAttributes=0x80) returned 0 [0097.359] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\images\\files_icons2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\home\\images\\files_icons2x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.359] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.359] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.360] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.360] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\images\\icons.png", dwFileAttributes=0x80) returned 0 [0097.360] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\images\\icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\home\\images\\icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.360] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.360] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.361] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.361] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\images\\icons_ie8.gif", dwFileAttributes=0x80) returned 0 [0097.361] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\images\\icons_ie8.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\home\\images\\icons_ie8.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.362] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.362] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.362] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.362] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\images\\icons_retina.png", dwFileAttributes=0x80) returned 0 [0097.362] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\images\\icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\home\\images\\icons_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.362] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.363] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.363] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.363] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\images\\new_icons.png", dwFileAttributes=0x80) returned 0 [0097.363] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\images\\new_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\home\\images\\new_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.363] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.364] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.364] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0097.364] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\images\\new_icons_retina.png", dwFileAttributes=0x80) returned 0 [0097.364] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\images\\new_icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\home\\images\\new_icons_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0097.364] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0097.365] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0098.817] CryptGenKey (in: hProv=0xd7079ce2d0, Algid=0x6610, dwFlags=0x1, phKey=0xd707b4c780 | out: phKey=0xd707b4c780*=0xd707996620) returned 1 [0098.817] SetFilePointer (in: hFile=0x728, lDistanceToMove=4000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x3d0900 [0098.817] ReadFile (in: hFile=0x728, lpBuffer=0xd707b4c7e8, nNumberOfBytesToRead=0x10, lpNumberOfBytesRead=0xd707b4c7b8, lpOverlapped=0x0 | out: lpBuffer=0xd707b4c7e8*, lpNumberOfBytesRead=0xd707b4c7b8*=0x10, lpOverlapped=0x0) returned 1 [0098.818] SetFilePointer (in: hFile=0x728, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0098.818] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0xd70aa60000 [0098.819] SetFilePointer (in: hFile=0x728, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0098.819] ReadFile (in: hFile=0x728, lpBuffer=0xd70aa60000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xd707b4c790, lpOverlapped=0x0 | out: lpBuffer=0xd70aa60000*, lpNumberOfBytesRead=0xd707b4c790*=0xf4240, lpOverlapped=0x0) returned 1 [0098.842] CryptEncrypt (in: hKey=0xd707996620, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xd707b4c78c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xd707b4c78c*=0xf4240) returned 1 [0098.843] CryptEncrypt (in: hKey=0xd707996620, hHash=0x0, Final=0, dwFlags=0x0, pbData=0xd70aa60000*, pdwDataLen=0xd707b4c788*=0xf4240, dwBufLen=0xf4240 | out: pbData=0xd70aa60000*, pdwDataLen=0xd707b4c788*=0xf4240) returned 1 [0098.845] SetFilePointer (in: hFile=0x728, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0098.845] WriteFile (in: hFile=0x728, lpBuffer=0xd70aa60000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xd707b4c790, lpOverlapped=0x0 | out: lpBuffer=0xd70aa60000*, lpNumberOfBytesWritten=0xd707b4c790*=0xf4240, lpOverlapped=0x0) returned 1 [0098.847] SetFilePointer (in: hFile=0x728, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0098.847] ReadFile (in: hFile=0x728, lpBuffer=0xd70aa60000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xd707b4c790, lpOverlapped=0x0 | out: lpBuffer=0xd70aa60000*, lpNumberOfBytesRead=0xd707b4c790*=0xf4240, lpOverlapped=0x0) returned 1 [0098.864] CryptEncrypt (in: hKey=0xd707996620, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xd707b4c78c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xd707b4c78c*=0xf4240) returned 1 [0098.864] CryptEncrypt (in: hKey=0xd707996620, hHash=0x0, Final=0, dwFlags=0x0, pbData=0xd70aa60000*, pdwDataLen=0xd707b4c788*=0xf4240, dwBufLen=0xf4240 | out: pbData=0xd70aa60000*, pdwDataLen=0xd707b4c788*=0xf4240) returned 1 [0098.866] SetFilePointer (in: hFile=0x728, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0098.866] WriteFile (in: hFile=0x728, lpBuffer=0xd70aa60000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xd707b4c790, lpOverlapped=0x0 | out: lpBuffer=0xd70aa60000*, lpNumberOfBytesWritten=0xd707b4c790*=0xf4240, lpOverlapped=0x0) returned 1 [0098.870] SetFilePointer (in: hFile=0x728, lDistanceToMove=2000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1e8480 [0098.870] ReadFile (in: hFile=0x728, lpBuffer=0xd70aa60000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xd707b4c790, lpOverlapped=0x0 | out: lpBuffer=0xd70aa60000*, lpNumberOfBytesRead=0xd707b4c790*=0xf4240, lpOverlapped=0x0) returned 1 [0098.893] CryptEncrypt (in: hKey=0xd707996620, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xd707b4c78c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xd707b4c78c*=0xf4240) returned 1 [0098.893] CryptEncrypt (in: hKey=0xd707996620, hHash=0x0, Final=0, dwFlags=0x0, pbData=0xd70aa60000*, pdwDataLen=0xd707b4c788*=0xf4240, dwBufLen=0xf4240 | out: pbData=0xd70aa60000*, pdwDataLen=0xd707b4c788*=0xf4240) returned 1 [0098.895] SetFilePointer (in: hFile=0x728, lDistanceToMove=2000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1e8480 [0098.895] WriteFile (in: hFile=0x728, lpBuffer=0xd70aa60000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xd707b4c790, lpOverlapped=0x0 | out: lpBuffer=0xd70aa60000*, lpNumberOfBytesWritten=0xd707b4c790*=0xf4240, lpOverlapped=0x0) returned 1 [0098.898] SetFilePointer (in: hFile=0x728, lDistanceToMove=3000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x2dc6c0 [0098.898] ReadFile (in: hFile=0x728, lpBuffer=0xd70aa60000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xd707b4c790, lpOverlapped=0x0 | out: lpBuffer=0xd70aa60000*, lpNumberOfBytesRead=0xd707b4c790*=0xf4240, lpOverlapped=0x0) returned 1 [0098.916] CryptEncrypt (in: hKey=0xd707996620, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xd707b4c78c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xd707b4c78c*=0xf4240) returned 1 [0098.916] CryptEncrypt (in: hKey=0xd707996620, hHash=0x0, Final=0, dwFlags=0x0, pbData=0xd70aa60000*, pdwDataLen=0xd707b4c788*=0xf4240, dwBufLen=0xf4240 | out: pbData=0xd70aa60000*, pdwDataLen=0xd707b4c788*=0xf4240) returned 1 [0098.918] SetFilePointer (in: hFile=0x728, lDistanceToMove=3000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x2dc6c0 [0098.918] WriteFile (in: hFile=0x728, lpBuffer=0xd70aa60000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xd707b4c790, lpOverlapped=0x0 | out: lpBuffer=0xd70aa60000*, lpNumberOfBytesWritten=0xd707b4c790*=0xf4240, lpOverlapped=0x0) returned 1 [0098.923] SetFilePointer (in: hFile=0x728, lDistanceToMove=4000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x3d0900 [0098.923] ReadFile (in: hFile=0x728, lpBuffer=0xd70aa60000, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0xd707b4c790, lpOverlapped=0x0 | out: lpBuffer=0xd70aa60000*, lpNumberOfBytesRead=0xd707b4c790*=0x0, lpOverlapped=0x0) returned 1 [0098.923] CryptEncrypt (in: hKey=0xd707996620, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xd707b4c78c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xd707b4c78c*=0xf4250) returned 1 [0098.923] CryptEncrypt (in: hKey=0xd707996620, hHash=0x0, Final=1, dwFlags=0x0, pbData=0xd70aa60000*, pdwDataLen=0xd707b4c788*=0x0, dwBufLen=0xf4250 | out: pbData=0xd70aa60000*, pdwDataLen=0xd707b4c788*=0x10) returned 1 [0098.923] SetFilePointer (in: hFile=0x728, lDistanceToMove=4000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x3d0900 [0098.923] WriteFile (in: hFile=0x728, lpBuffer=0xd70aa60000*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0xd707b4c790, lpOverlapped=0x0 | out: lpBuffer=0xd70aa60000*, lpNumberOfBytesWritten=0xd707b4c790*=0x10, lpOverlapped=0x0) returned 1 [0098.923] SetFilePointerEx (in: hFile=0x728, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2 | out: lpNewFilePointer=0x0) returned 1 [0098.923] WriteFile (in: hFile=0x728, lpBuffer=0xd707b4c7d0*, nNumberOfBytesToWrite=0xa, lpNumberOfBytesWritten=0xd707b4c794, lpOverlapped=0x0 | out: lpBuffer=0xd707b4c7d0*, lpNumberOfBytesWritten=0xd707b4c794*=0xa, lpOverlapped=0x0) returned 1 [0098.924] CryptExportKey (in: hKey=0xd707996620, hExpKey=0xd7079a7710, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xd707b4c7a0 | out: pbData=0x0*, pdwDataLen=0xd707b4c7a0*=0x10c) returned 1 [0098.924] CryptExportKey (in: hKey=0xd707996620, hExpKey=0xd7079a7710, dwBlobType=0x1, dwFlags=0x0, pbData=0xd707b4c820, pdwDataLen=0xd707b4c7a0 | out: pbData=0xd707b4c820*, pdwDataLen=0xd707b4c7a0*=0x10c) returned 1 [0098.924] WriteFile (in: hFile=0x728, lpBuffer=0xd707b4c820*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd707b4c794, lpOverlapped=0x0 | out: lpBuffer=0xd707b4c820*, lpNumberOfBytesWritten=0xd707b4c794*=0x10c, lpOverlapped=0x0) returned 1 [0098.924] SetFilePointerEx (in: hFile=0x728, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2 | out: lpNewFilePointer=0x0) returned 1 [0098.924] WriteFile (in: hFile=0x728, lpBuffer=0xd707b4c7e8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0xd707b4c7b8, lpOverlapped=0x0 | out: lpBuffer=0xd707b4c7e8*, lpNumberOfBytesWritten=0xd707b4c7b8*=0x10, lpOverlapped=0x0) returned 1 [0098.924] CloseHandle (hObject=0x728) returned 1 [0098.924] VirtualFree (lpAddress=0xd70aa60000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0098.929] CryptDestroyKey (hKey=0xd707996620) returned 1 [0098.929] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0098.929] SetLastError (dwErrCode=0x0) [0098.930] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_17.012.20098\\RyukReadMe.txt" (normalized: "c:\\programdata\\adobe\\arm\\reader_17.012.20098\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x724 [0098.930] GetLastError () returned 0x0 [0098.930] WriteFile (in: hFile=0x724, lpBuffer=0x7ff7afca9500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpBuffer=0x7ff7afca9500*, lpNumberOfBytesWritten=0xd707b4d150*=0x324, lpOverlapped=0x0) returned 1 [0098.931] CloseHandle (hObject=0x724) returned 1 [0098.931] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0098.931] SetLastError (dwErrCode=0x0) [0098.931] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\ARM\\RyukReadMe.txt" (normalized: "c:\\programdata\\adobe\\arm\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x724 [0098.932] GetLastError () returned 0xb7 [0098.932] CloseHandle (hObject=0x724) returned 1 [0098.932] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\S\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d8d30 [0098.933] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0098.933] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0098.933] FindClose (in: hFindFile=0xd7079d8d30 | out: hFindFile=0xd7079d8d30) returned 1 [0098.933] SetLastError (dwErrCode=0x0) [0098.933] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\ARM\\S\\RyukReadMe.txt" (normalized: "c:\\programdata\\adobe\\arm\\s\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x724 [0098.933] GetLastError () returned 0x0 [0098.933] WriteFile (in: hFile=0x724, lpBuffer=0x7ff7afca9500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpBuffer=0x7ff7afca9500*, lpNumberOfBytesWritten=0xd707b4d150*=0x324, lpOverlapped=0x0) returned 1 [0098.934] CloseHandle (hObject=0x724) returned 1 [0098.942] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0098.942] SetLastError (dwErrCode=0x0) [0098.942] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\ARM\\RyukReadMe.txt" (normalized: "c:\\programdata\\adobe\\arm\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x724 [0098.942] GetLastError () returned 0xb7 [0098.942] CloseHandle (hObject=0x724) returned 1 [0098.943] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\{291AA914-A987-4CE9-BD63-AC0A92D435E5}\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d8af0 [0098.943] FindNextFileW (in: hFindFile=0xd7079d8af0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0098.943] FindNextFileW (in: hFindFile=0xd7079d8af0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0098.943] FindClose (in: hFindFile=0xd7079d8af0 | out: hFindFile=0xd7079d8af0) returned 1 [0098.943] SetLastError (dwErrCode=0x0) [0098.943] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\ARM\\{291AA914-A987-4CE9-BD63-AC0A92D435E5}\\RyukReadMe.txt" (normalized: "c:\\programdata\\adobe\\arm\\{291aa914-a987-4ce9-bd63-ac0a92d435e5}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x724 [0098.943] GetLastError () returned 0x0 [0098.943] WriteFile (in: hFile=0x724, lpBuffer=0x7ff7afca9500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpBuffer=0x7ff7afca9500*, lpNumberOfBytesWritten=0xd707b4d150*=0x324, lpOverlapped=0x0) returned 1 [0098.944] CloseHandle (hObject=0x724) returned 1 [0098.944] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0 [0098.944] FindClose (in: hFindFile=0xd7079d9870 | out: hFindFile=0xd7079d9870) returned 1 [0098.944] SetLastError (dwErrCode=0x0) [0098.944] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\ARM\\RyukReadMe.txt" (normalized: "c:\\programdata\\adobe\\arm\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x720 [0098.944] GetLastError () returned 0xb7 [0098.944] CloseHandle (hObject=0x720) returned 1 [0098.944] FindNextFileW (in: hFindFile=0xd7079d9e10, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0 [0098.944] FindClose (in: hFindFile=0xd7079d9e10 | out: hFindFile=0xd7079d9e10) returned 1 [0098.944] SetLastError (dwErrCode=0x0) [0098.945] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\RyukReadMe.txt" (normalized: "c:\\programdata\\adobe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x71c [0098.945] GetLastError () returned 0xb7 [0098.945] CloseHandle (hObject=0x71c) returned 1 [0098.945] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 1 [0098.945] SetLastError (dwErrCode=0x0) [0098.945] CreateFileW (lpFileName="C:\\ProgramData\\RyukReadMe.txt" (normalized: "c:\\programdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x71c [0098.945] GetLastError () returned 0xb7 [0098.945] CloseHandle (hObject=0x71c) returned 1 [0098.945] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Application Data\\*.*", lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0xffffffffffffffff [0098.945] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0098.945] SetLastError (dwErrCode=0x0) [0098.945] CreateFileW (lpFileName="C:\\ProgramData\\Application Data\\RyukReadMe.txt" (normalized: "c:\\programdata\\application data\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x71c [0098.946] GetLastError () returned 0xb7 [0098.946] CloseHandle (hObject=0x71c) returned 1 [0098.946] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 1 [0098.946] SetLastError (dwErrCode=0x0) [0098.946] CreateFileW (lpFileName="C:\\ProgramData\\RyukReadMe.txt" (normalized: "c:\\programdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x71c [0098.946] GetLastError () returned 0xb7 [0098.946] CloseHandle (hObject=0x71c) returned 1 [0098.946] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Comms\\*.*", lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0xd7079d9870 [0098.946] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0098.946] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0 [0098.946] FindClose (in: hFindFile=0xd7079d9870 | out: hFindFile=0xd7079d9870) returned 1 [0098.946] SetLastError (dwErrCode=0x0) [0098.946] CreateFileW (lpFileName="C:\\ProgramData\\Comms\\RyukReadMe.txt" (normalized: "c:\\programdata\\comms\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x71c [0098.947] GetLastError () returned 0x0 [0098.947] WriteFile (in: hFile=0x71c, lpBuffer=0x7ff7afca9500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpBuffer=0x7ff7afca9500*, lpNumberOfBytesWritten=0xd707b4e0b0*=0x324, lpOverlapped=0x0) returned 1 [0098.948] CloseHandle (hObject=0x71c) returned 1 [0098.948] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 1 [0098.948] SetLastError (dwErrCode=0x0) [0098.948] CreateFileW (lpFileName="C:\\ProgramData\\RyukReadMe.txt" (normalized: "c:\\programdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x71c [0098.949] GetLastError () returned 0xb7 [0098.949] CloseHandle (hObject=0x71c) returned 1 [0098.949] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Desktop\\*.*", lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0xffffffffffffffff [0098.949] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0098.949] SetLastError (dwErrCode=0x0) [0098.949] CreateFileW (lpFileName="C:\\ProgramData\\Desktop\\RyukReadMe.txt" (normalized: "c:\\programdata\\desktop\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0098.949] GetLastError () returned 0x5 [0098.949] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0098.949] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0098.949] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 1 [0098.949] SetLastError (dwErrCode=0x0) [0098.949] CreateFileW (lpFileName="C:\\ProgramData\\RyukReadMe.txt" (normalized: "c:\\programdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x71c [0098.950] GetLastError () returned 0xb7 [0098.950] CloseHandle (hObject=0x71c) returned 1 [0098.950] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Documents\\*.*", lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0xffffffffffffffff [0098.950] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0098.950] SetLastError (dwErrCode=0x0) [0098.950] CreateFileW (lpFileName="C:\\ProgramData\\Documents\\RyukReadMe.txt" (normalized: "c:\\programdata\\documents\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x71c [0098.954] GetLastError () returned 0x0 [0098.954] WriteFile (in: hFile=0x71c, lpBuffer=0x7ff7afca9500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpBuffer=0x7ff7afca9500*, lpNumberOfBytesWritten=0xd707b4e0b0*=0x324, lpOverlapped=0x0) returned 1 [0098.955] CloseHandle (hObject=0x71c) returned 1 [0098.955] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 1 [0098.955] SetLastError (dwErrCode=0x0) [0098.955] CreateFileW (lpFileName="C:\\ProgramData\\RyukReadMe.txt" (normalized: "c:\\programdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x71c [0098.955] GetLastError () returned 0xb7 [0098.955] CloseHandle (hObject=0x71c) returned 1 [0098.955] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\*.*", lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0xd7079d8d30 [0098.956] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0098.956] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0098.956] SetLastError (dwErrCode=0x0) [0098.956] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0098.956] GetLastError () returned 0x5 [0098.956] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0098.956] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0098.956] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\*.*", lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0xd7079d87f0 [0098.959] FindNextFileW (in: hFindFile=0xd7079d87f0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0098.959] FindNextFileW (in: hFindFile=0xd7079d87f0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0098.959] SetLastError (dwErrCode=0x0) [0098.959] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0098.959] GetLastError () returned 0x5 [0098.959] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0098.959] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0098.959] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d9870 [0098.961] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0098.961] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0098.961] SetLastError (dwErrCode=0x0) [0098.961] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\8c296b8e-6699-457c-9415-3d0647e1d775\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0098.961] GetLastError () returned 0x5 [0098.961] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0098.961] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0098.961] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\en-us.16\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d8af0 [0098.962] FindNextFileW (in: hFindFile=0xd7079d8af0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0098.962] FindNextFileW (in: hFindFile=0xd7079d8af0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0098.963] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0098.963] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\en-us.16\\MasterDescriptor.en-us.xml", dwFileAttributes=0x80) returned 0 [0098.963] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\en-us.16\\MasterDescriptor.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\8c296b8e-6699-457c-9415-3d0647e1d775\\en-us.16\\masterdescriptor.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0098.963] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0098.963] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0098.964] FindNextFileW (in: hFindFile=0xd7079d8af0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0098.964] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0098.964] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\en-us.16\\s641033.hash", dwFileAttributes=0x80) returned 0 [0098.964] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\en-us.16\\s641033.hash" (normalized: "c:\\programdata\\microsoft\\clicktorun\\8c296b8e-6699-457c-9415-3d0647e1d775\\en-us.16\\s641033.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0098.965] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0098.965] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0098.965] FindNextFileW (in: hFindFile=0xd7079d8af0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0098.965] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0098.965] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\en-us.16\\stream.x64.en-us.man.dat", dwFileAttributes=0x80) returned 0 [0098.965] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\en-us.16\\stream.x64.en-us.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\8c296b8e-6699-457c-9415-3d0647e1d775\\en-us.16\\stream.x64.en-us.man.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0098.966] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0098.966] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0098.966] FindNextFileW (in: hFindFile=0xd7079d8af0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0098.968] FindClose (in: hFindFile=0xd7079d8af0 | out: hFindFile=0xd7079d8af0) returned 1 [0098.969] SetLastError (dwErrCode=0x0) [0098.969] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\en-us.16\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\8c296b8e-6699-457c-9415-3d0647e1d775\\en-us.16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0098.972] GetLastError () returned 0x5 [0098.972] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0098.972] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0098.972] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0098.972] SetLastError (dwErrCode=0x0) [0098.972] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\8c296b8e-6699-457c-9415-3d0647e1d775\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0098.972] GetLastError () returned 0x5 [0098.972] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0098.972] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0098.972] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\x-none.16\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d9390 [0098.974] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0098.974] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0098.974] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0098.974] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\x-none.16\\MasterDescriptor.x-none.xml", dwFileAttributes=0x80) returned 0 [0098.975] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\x-none.16\\MasterDescriptor.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\8c296b8e-6699-457c-9415-3d0647e1d775\\x-none.16\\masterdescriptor.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0098.975] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0098.975] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0098.975] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0098.975] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0098.975] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\x-none.16\\s640.hash", dwFileAttributes=0x80) returned 0 [0098.975] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\x-none.16\\s640.hash" (normalized: "c:\\programdata\\microsoft\\clicktorun\\8c296b8e-6699-457c-9415-3d0647e1d775\\x-none.16\\s640.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0098.976] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0098.976] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0098.976] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0098.976] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0098.976] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\x-none.16\\stream.x64.x-none.man.dat", dwFileAttributes=0x80) returned 0 [0098.976] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\x-none.16\\stream.x64.x-none.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\8c296b8e-6699-457c-9415-3d0647e1d775\\x-none.16\\stream.x64.x-none.man.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0098.976] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0098.977] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0098.977] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0098.977] FindClose (in: hFindFile=0xd7079d9390 | out: hFindFile=0xd7079d9390) returned 1 [0098.978] SetLastError (dwErrCode=0x0) [0098.978] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\x-none.16\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\8c296b8e-6699-457c-9415-3d0647e1d775\\x-none.16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0098.980] GetLastError () returned 0x5 [0098.980] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0098.980] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0098.980] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0098.980] FindClose (in: hFindFile=0xd7079d9870 | out: hFindFile=0xd7079d9870) returned 1 [0098.980] SetLastError (dwErrCode=0x0) [0098.980] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\8c296b8e-6699-457c-9415-3d0647e1d775\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0098.981] GetLastError () returned 0x5 [0098.981] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0098.981] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0098.981] FindNextFileW (in: hFindFile=0xd7079d87f0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0098.981] SetLastError (dwErrCode=0x0) [0098.981] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0098.981] GetLastError () returned 0x5 [0098.981] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0098.981] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0098.981] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d93f0 [0098.982] FindNextFileW (in: hFindFile=0xd7079d93f0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0098.982] FindNextFileW (in: hFindFile=0xd7079d93f0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0098.982] SetLastError (dwErrCode=0x0) [0098.982] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\9d76938c-943d-439f-a135-26d02821ee05\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0098.982] GetLastError () returned 0x5 [0098.982] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0098.982] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0098.982] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\en-us.16\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d91b0 [0098.983] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0098.983] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0098.983] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0098.983] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\en-us.16\\MasterDescriptor.en-us.xml", dwFileAttributes=0x80) returned 0 [0098.984] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\en-us.16\\MasterDescriptor.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\9d76938c-943d-439f-a135-26d02821ee05\\en-us.16\\masterdescriptor.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0098.984] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0098.984] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0098.985] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0098.985] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0098.985] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\en-us.16\\s641033.hash", dwFileAttributes=0x80) returned 0 [0098.985] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\en-us.16\\s641033.hash" (normalized: "c:\\programdata\\microsoft\\clicktorun\\9d76938c-943d-439f-a135-26d02821ee05\\en-us.16\\s641033.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0098.986] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0098.986] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0098.986] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0098.986] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0098.986] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\en-us.16\\stream.x64.en-us.man.dat", dwFileAttributes=0x80) returned 0 [0098.986] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\en-us.16\\stream.x64.en-us.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\9d76938c-943d-439f-a135-26d02821ee05\\en-us.16\\stream.x64.en-us.man.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0098.987] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0098.987] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0098.987] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0098.987] FindClose (in: hFindFile=0xd7079d91b0 | out: hFindFile=0xd7079d91b0) returned 1 [0098.988] SetLastError (dwErrCode=0x0) [0098.988] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\en-us.16\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\9d76938c-943d-439f-a135-26d02821ee05\\en-us.16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0098.991] GetLastError () returned 0x5 [0098.991] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0098.991] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0098.991] FindNextFileW (in: hFindFile=0xd7079d93f0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0098.991] SetLastError (dwErrCode=0x0) [0098.991] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\9d76938c-943d-439f-a135-26d02821ee05\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0098.991] GetLastError () returned 0x5 [0098.991] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0098.991] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0098.991] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\x-none.16\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d8eb0 [0098.992] FindNextFileW (in: hFindFile=0xd7079d8eb0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0098.992] FindNextFileW (in: hFindFile=0xd7079d8eb0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0098.992] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0098.993] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\x-none.16\\MasterDescriptor.x-none.xml", dwFileAttributes=0x80) returned 0 [0098.993] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\x-none.16\\MasterDescriptor.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\9d76938c-943d-439f-a135-26d02821ee05\\x-none.16\\masterdescriptor.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0098.993] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0098.993] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0098.994] FindNextFileW (in: hFindFile=0xd7079d8eb0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0098.994] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0098.994] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\x-none.16\\s640.hash", dwFileAttributes=0x80) returned 0 [0098.995] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\x-none.16\\s640.hash" (normalized: "c:\\programdata\\microsoft\\clicktorun\\9d76938c-943d-439f-a135-26d02821ee05\\x-none.16\\s640.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0098.995] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0098.995] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0098.995] FindNextFileW (in: hFindFile=0xd7079d8eb0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0098.995] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0098.995] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\x-none.16\\stream.x64.x-none.man.dat", dwFileAttributes=0x80) returned 0 [0098.996] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\x-none.16\\stream.x64.x-none.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\9d76938c-943d-439f-a135-26d02821ee05\\x-none.16\\stream.x64.x-none.man.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0098.999] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0098.999] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0098.999] FindNextFileW (in: hFindFile=0xd7079d8eb0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0098.999] FindClose (in: hFindFile=0xd7079d8eb0 | out: hFindFile=0xd7079d8eb0) returned 1 [0099.000] SetLastError (dwErrCode=0x0) [0099.000] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\x-none.16\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\9d76938c-943d-439f-a135-26d02821ee05\\x-none.16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.003] GetLastError () returned 0x5 [0099.003] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.003] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.003] FindNextFileW (in: hFindFile=0xd7079d93f0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0099.003] FindClose (in: hFindFile=0xd7079d93f0 | out: hFindFile=0xd7079d93f0) returned 1 [0099.003] SetLastError (dwErrCode=0x0) [0099.003] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\9d76938c-943d-439f-a135-26d02821ee05\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.003] GetLastError () returned 0x5 [0099.003] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.003] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.003] FindNextFileW (in: hFindFile=0xd7079d87f0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.003] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.004] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.0.xml", dwFileAttributes=0x80) returned 0 [0099.004] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.0.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\deploymentconfig.0.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.004] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.004] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.004] FindNextFileW (in: hFindFile=0xd7079d87f0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.004] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.005] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.1.xml", dwFileAttributes=0x80) returned 0 [0099.005] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.1.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\deploymentconfig.1.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.005] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.005] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.005] FindNextFileW (in: hFindFile=0xd7079d87f0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.005] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.005] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.2.xml", dwFileAttributes=0x80) returned 0 [0099.006] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.2.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\deploymentconfig.2.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.006] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.006] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.006] FindNextFileW (in: hFindFile=0xd7079d87f0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.006] SetLastError (dwErrCode=0x0) [0099.006] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.006] GetLastError () returned 0x5 [0099.006] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.006] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.007] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d9390 [0099.007] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.007] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.007] SetLastError (dwErrCode=0x0) [0099.007] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.007] GetLastError () returned 0x5 [0099.007] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.007] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.007] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d8af0 [0099.007] FindNextFileW (in: hFindFile=0xd7079d8af0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.007] FindNextFileW (in: hFindFile=0xd7079d8af0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.007] SetLastError (dwErrCode=0x0) [0099.007] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\catalog\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.007] GetLastError () returned 0x5 [0099.007] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0099.007] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.008] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079d91b0 [0099.008] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.008] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.008] SetLastError (dwErrCode=0x0) [0099.008] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.008] GetLastError () returned 0x5 [0099.008] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0099.008] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.008] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079d93f0 [0099.008] FindNextFileW (in: hFindFile=0xd7079d93f0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0099.008] FindNextFileW (in: hFindFile=0xd7079d93f0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0099.008] SetLastError (dwErrCode=0x0) [0099.008] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.008] GetLastError () returned 0x5 [0099.008] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0099.008] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.009] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079d9c90 [0099.009] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0099.009] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0099.009] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.010] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\DeploymentConfiguration.xml", dwFileAttributes=0x80) returned 0 [0099.010] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\DeploymentConfiguration.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\deploymentconfiguration.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.010] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.010] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.010] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0099.010] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.011] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\Manifest.xml", dwFileAttributes=0x80) returned 0 [0099.011] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\Manifest.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\manifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.011] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.011] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.011] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0099.011] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.012] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\UserDeploymentConfiguration.xml", dwFileAttributes=0x80) returned 0 [0099.014] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\UserDeploymentConfiguration.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\userdeploymentconfiguration.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.015] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.015] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.015] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0099.015] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.015] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\UserManifest.xml", dwFileAttributes=0x80) returned 0 [0099.016] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\UserManifest.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\usermanifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.016] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.016] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.016] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0099.016] FindClose (in: hFindFile=0xd7079d9c90 | out: hFindFile=0xd7079d9c90) returned 1 [0099.016] SetLastError (dwErrCode=0x0) [0099.016] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.016] GetLastError () returned 0x5 [0099.016] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0099.016] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.016] FindNextFileW (in: hFindFile=0xd7079d93f0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0099.016] FindClose (in: hFindFile=0xd7079d93f0 | out: hFindFile=0xd7079d93f0) returned 1 [0099.017] SetLastError (dwErrCode=0x0) [0099.017] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.017] GetLastError () returned 0x5 [0099.017] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0099.017] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.017] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0099.017] FindClose (in: hFindFile=0xd7079d91b0 | out: hFindFile=0xd7079d91b0) returned 1 [0099.017] SetLastError (dwErrCode=0x0) [0099.017] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.017] GetLastError () returned 0x5 [0099.017] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0099.017] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.017] FindNextFileW (in: hFindFile=0xd7079d8af0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0099.017] FindClose (in: hFindFile=0xd7079d8af0 | out: hFindFile=0xd7079d8af0) returned 1 [0099.017] SetLastError (dwErrCode=0x0) [0099.017] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\catalog\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.018] GetLastError () returned 0x5 [0099.018] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.018] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.018] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.018] SetLastError (dwErrCode=0x0) [0099.018] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.018] GetLastError () returned 0x5 [0099.018] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.018] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.018] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Integration\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d91b0 [0099.018] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.018] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.018] SetLastError (dwErrCode=0x0) [0099.018] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Integration\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\integration\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.018] GetLastError () returned 0x5 [0099.018] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0099.018] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.018] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Integration\\ShortcutBackups\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079d8eb0 [0099.019] FindNextFileW (in: hFindFile=0xd7079d8eb0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.019] FindNextFileW (in: hFindFile=0xd7079d8eb0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0099.019] FindClose (in: hFindFile=0xd7079d8eb0 | out: hFindFile=0xd7079d8eb0) returned 1 [0099.019] SetLastError (dwErrCode=0x0) [0099.019] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Integration\\ShortcutBackups\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\integration\\shortcutbackups\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.019] GetLastError () returned 0x5 [0099.019] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0099.019] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.019] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0099.019] FindClose (in: hFindFile=0xd7079d91b0 | out: hFindFile=0xd7079d91b0) returned 1 [0099.019] SetLastError (dwErrCode=0x0) [0099.019] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Integration\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\integration\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.019] GetLastError () returned 0x5 [0099.019] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.019] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.019] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0099.019] FindClose (in: hFindFile=0xd7079d9390 | out: hFindFile=0xd7079d9390) returned 1 [0099.020] SetLastError (dwErrCode=0x0) [0099.020] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.020] GetLastError () returned 0x5 [0099.020] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.020] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.020] FindNextFileW (in: hFindFile=0xd7079d87f0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.020] SetLastError (dwErrCode=0x0) [0099.020] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.020] GetLastError () returned 0x5 [0099.020] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.020] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.020] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d9390 [0099.022] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.022] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.022] SetLastError (dwErrCode=0x0) [0099.022] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.022] GetLastError () returned 0x5 [0099.022] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.022] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.022] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d93f0 [0099.022] FindNextFileW (in: hFindFile=0xd7079d93f0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.022] FindNextFileW (in: hFindFile=0xd7079d93f0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.022] SetLastError (dwErrCode=0x0) [0099.022] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\eda58a0b-ad79-496a-8530-618d08767e60\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.022] GetLastError () returned 0x5 [0099.022] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0099.022] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.023] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\en-us.16\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079d8910 [0099.024] FindNextFileW (in: hFindFile=0xd7079d8910, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.024] FindNextFileW (in: hFindFile=0xd7079d8910, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.024] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.025] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\en-us.16\\MasterDescriptor.en-us.xml", dwFileAttributes=0x80) returned 0 [0099.025] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\en-us.16\\MasterDescriptor.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\eda58a0b-ad79-496a-8530-618d08767e60\\en-us.16\\masterdescriptor.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.025] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.026] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.026] FindNextFileW (in: hFindFile=0xd7079d8910, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.026] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.026] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\en-us.16\\s641033.hash", dwFileAttributes=0x80) returned 0 [0099.026] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\en-us.16\\s641033.hash" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\eda58a0b-ad79-496a-8530-618d08767e60\\en-us.16\\s641033.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.026] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.026] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.027] FindNextFileW (in: hFindFile=0xd7079d8910, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.027] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.027] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\en-us.16\\stream.Platform.Culture.man.xml", dwFileAttributes=0x80) returned 0 [0099.027] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\en-us.16\\stream.Platform.Culture.man.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\eda58a0b-ad79-496a-8530-618d08767e60\\en-us.16\\stream.platform.culture.man.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.027] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.027] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.027] FindNextFileW (in: hFindFile=0xd7079d8910, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.028] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.028] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\en-us.16\\stream.x64.en-us.hash", dwFileAttributes=0x80) returned 0 [0099.028] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\en-us.16\\stream.x64.en-us.hash" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\eda58a0b-ad79-496a-8530-618d08767e60\\en-us.16\\stream.x64.en-us.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.028] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.028] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.029] FindNextFileW (in: hFindFile=0xd7079d8910, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.029] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.029] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\en-us.16\\stream.x64.en-us.man.dat", dwFileAttributes=0x80) returned 0 [0099.029] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\en-us.16\\stream.x64.en-us.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\eda58a0b-ad79-496a-8530-618d08767e60\\en-us.16\\stream.x64.en-us.man.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.029] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.029] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.029] FindNextFileW (in: hFindFile=0xd7079d8910, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0099.029] FindClose (in: hFindFile=0xd7079d8910 | out: hFindFile=0xd7079d8910) returned 1 [0099.030] SetLastError (dwErrCode=0x0) [0099.030] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\en-us.16\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\eda58a0b-ad79-496a-8530-618d08767e60\\en-us.16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.033] GetLastError () returned 0x5 [0099.033] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0099.033] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.033] FindNextFileW (in: hFindFile=0xd7079d93f0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.033] SetLastError (dwErrCode=0x0) [0099.033] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\eda58a0b-ad79-496a-8530-618d08767e60\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.033] GetLastError () returned 0x5 [0099.033] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0099.033] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.033] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\x-none.16\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079d9990 [0099.034] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.034] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.034] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.035] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\x-none.16\\MasterDescriptor.x-none.xml", dwFileAttributes=0x80) returned 0 [0099.035] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\x-none.16\\MasterDescriptor.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\eda58a0b-ad79-496a-8530-618d08767e60\\x-none.16\\masterdescriptor.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.035] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.035] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.035] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.035] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.035] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\x-none.16\\s640.hash", dwFileAttributes=0x80) returned 0 [0099.036] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\x-none.16\\s640.hash" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\eda58a0b-ad79-496a-8530-618d08767e60\\x-none.16\\s640.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.036] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.036] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.036] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.036] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.036] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\x-none.16\\stream.Platform.x-none.man.xml", dwFileAttributes=0x80) returned 0 [0099.037] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\x-none.16\\stream.Platform.x-none.man.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\eda58a0b-ad79-496a-8530-618d08767e60\\x-none.16\\stream.platform.x-none.man.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.037] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.037] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.037] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.037] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.037] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\x-none.16\\stream.x64.x-none.hash", dwFileAttributes=0x80) returned 0 [0099.037] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\x-none.16\\stream.x64.x-none.hash" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\eda58a0b-ad79-496a-8530-618d08767e60\\x-none.16\\stream.x64.x-none.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.038] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.038] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.038] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.038] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.038] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\x-none.16\\stream.x64.x-none.man.dat", dwFileAttributes=0x80) returned 0 [0099.038] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\x-none.16\\stream.x64.x-none.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\eda58a0b-ad79-496a-8530-618d08767e60\\x-none.16\\stream.x64.x-none.man.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.038] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.038] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.039] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0099.039] FindClose (in: hFindFile=0xd7079d9990 | out: hFindFile=0xd7079d9990) returned 1 [0099.039] SetLastError (dwErrCode=0x0) [0099.039] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\x-none.16\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\eda58a0b-ad79-496a-8530-618d08767e60\\x-none.16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.042] GetLastError () returned 0x5 [0099.042] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0099.042] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.042] FindNextFileW (in: hFindFile=0xd7079d93f0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0099.042] FindClose (in: hFindFile=0xd7079d93f0 | out: hFindFile=0xd7079d93f0) returned 1 [0099.042] SetLastError (dwErrCode=0x0) [0099.042] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\eda58a0b-ad79-496a-8530-618d08767e60\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.042] GetLastError () returned 0x5 [0099.042] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.042] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.042] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.042] SetLastError (dwErrCode=0x0) [0099.042] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.042] GetLastError () returned 0x5 [0099.043] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.043] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.043] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d9c90 [0099.043] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.046] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.046] SetLastError (dwErrCode=0x0) [0099.046] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.046] GetLastError () returned 0x5 [0099.046] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0099.046] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.046] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\en-us.16\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079d9990 [0099.047] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.047] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.047] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.048] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\en-us.16\\MasterDescriptor.en-us.xml", dwFileAttributes=0x80) returned 0 [0099.048] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\en-us.16\\MasterDescriptor.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\en-us.16\\masterdescriptor.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.048] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.048] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.048] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.048] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.049] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\en-us.16\\s641033.hash", dwFileAttributes=0x80) returned 0 [0099.049] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\en-us.16\\s641033.hash" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\en-us.16\\s641033.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.049] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.049] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.050] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.050] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.050] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\en-us.16\\Stream.Platform.Culture.man.xml", dwFileAttributes=0x80) returned 0 [0099.050] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\en-us.16\\Stream.Platform.Culture.man.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\en-us.16\\stream.platform.culture.man.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.050] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.050] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.050] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.051] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.051] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\en-us.16\\stream.x64.en-us.hash", dwFileAttributes=0x80) returned 0 [0099.051] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\en-us.16\\stream.x64.en-us.hash" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\en-us.16\\stream.x64.en-us.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.051] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.051] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.051] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.051] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.052] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\en-us.16\\stream.x64.en-us.man.dat", dwFileAttributes=0x80) returned 0 [0099.053] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\en-us.16\\stream.x64.en-us.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\en-us.16\\stream.x64.en-us.man.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.053] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.053] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.053] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0099.053] FindClose (in: hFindFile=0xd7079d9990 | out: hFindFile=0xd7079d9990) returned 1 [0099.054] SetLastError (dwErrCode=0x0) [0099.054] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\en-us.16\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\en-us.16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.056] GetLastError () returned 0x5 [0099.056] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0099.056] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.057] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.057] SetLastError (dwErrCode=0x0) [0099.057] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.057] GetLastError () returned 0x5 [0099.057] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0099.057] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.057] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\x-none.16\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079d91b0 [0099.058] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.058] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.058] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.058] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\x-none.16\\MasterDescriptor.x-none.xml", dwFileAttributes=0x80) returned 0 [0099.059] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\x-none.16\\MasterDescriptor.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\x-none.16\\masterdescriptor.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.059] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.059] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.060] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.060] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.060] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\x-none.16\\s640.hash", dwFileAttributes=0x80) returned 0 [0099.060] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\x-none.16\\s640.hash" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\x-none.16\\s640.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.060] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.060] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.060] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.060] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.061] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\x-none.16\\Stream.Platform.x-none.man.xml", dwFileAttributes=0x80) returned 0 [0099.061] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\x-none.16\\Stream.Platform.x-none.man.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\x-none.16\\stream.platform.x-none.man.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.061] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.061] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.062] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.062] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.062] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\x-none.16\\stream.x64.x-none.hash", dwFileAttributes=0x80) returned 0 [0099.062] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\x-none.16\\stream.x64.x-none.hash" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\x-none.16\\stream.x64.x-none.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.062] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.062] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.063] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.063] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.063] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\x-none.16\\stream.x64.x-none.man.dat", dwFileAttributes=0x80) returned 0 [0099.063] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\x-none.16\\stream.x64.x-none.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\x-none.16\\stream.x64.x-none.man.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.063] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.063] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.063] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0099.063] FindClose (in: hFindFile=0xd7079d91b0 | out: hFindFile=0xd7079d91b0) returned 1 [0099.064] SetLastError (dwErrCode=0x0) [0099.064] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\x-none.16\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\x-none.16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.067] GetLastError () returned 0x5 [0099.067] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0099.067] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.067] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0099.067] FindClose (in: hFindFile=0xd7079d9c90 | out: hFindFile=0xd7079d9c90) returned 1 [0099.067] SetLastError (dwErrCode=0x0) [0099.067] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.067] GetLastError () returned 0x5 [0099.067] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.067] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.067] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0099.067] FindClose (in: hFindFile=0xd7079d9390 | out: hFindFile=0xd7079d9390) returned 1 [0099.067] SetLastError (dwErrCode=0x0) [0099.067] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.067] GetLastError () returned 0x5 [0099.067] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.067] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.068] FindNextFileW (in: hFindFile=0xd7079d87f0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.068] SetLastError (dwErrCode=0x0) [0099.068] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.068] GetLastError () returned 0x5 [0099.068] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.068] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.068] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\UserData\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d8910 [0099.068] FindNextFileW (in: hFindFile=0xd7079d8910, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.068] FindNextFileW (in: hFindFile=0xd7079d8910, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0099.068] FindClose (in: hFindFile=0xd7079d8910 | out: hFindFile=0xd7079d8910) returned 1 [0099.068] SetLastError (dwErrCode=0x0) [0099.068] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\UserData\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\userdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.068] GetLastError () returned 0x5 [0099.068] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.068] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.068] FindNextFileW (in: hFindFile=0xd7079d87f0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.068] SetLastError (dwErrCode=0x0) [0099.068] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.069] GetLastError () returned 0x5 [0099.069] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.069] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.069] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d9390 [0099.071] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.072] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.072] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.072] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\AirSpace.Etw.man", dwFileAttributes=0x80) returned 0 [0099.073] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\AirSpace.Etw.man" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\airspace.etw.man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.073] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.073] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.073] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.073] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.073] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0099.074] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.access.access.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.074] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.074] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.074] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.074] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.074] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0099.077] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.accessmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.077] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.078] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.078] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.078] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.078] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmuiset.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0099.079] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmuiset.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.accessmuiset.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.079] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.079] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.079] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.079] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.080] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0099.080] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.dcf.dcf.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.080] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.080] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.080] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.080] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.081] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.dcfmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0099.081] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.dcfmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.dcfmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.082] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.082] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.082] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.082] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.082] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0099.082] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.excel.excel.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.083] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.083] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.083] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.083] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.083] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.excelmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0099.083] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.excelmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.excelmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.083] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.084] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.084] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.084] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.084] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0099.084] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.groove.groove.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.084] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.084] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.085] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.085] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.085] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.groovemui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0099.085] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.groovemui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.groovemui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.085] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.085] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.085] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.085] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.086] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0099.086] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.lync.lync.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.086] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.086] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.086] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.086] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.087] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.lyncmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0099.087] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.lyncmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.lyncmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.087] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.087] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.087] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.087] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.087] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32mui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0099.088] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32mui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.office32mui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.088] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.088] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.088] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.088] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.088] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32ww.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0099.088] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32ww.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.office32ww.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.089] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.089] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.089] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.089] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.089] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0099.089] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.officemui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.090] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.090] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.090] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.090] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.090] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemuiset.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0099.091] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemuiset.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.officemuiset.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.091] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.091] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.091] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.091] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.091] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0099.092] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.onenote.onenote.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.092] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.092] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.092] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.092] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.092] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.onenotemui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0099.093] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.onenotemui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.onenotemui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.093] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.093] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.093] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.093] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.093] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0099.093] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.osm.osm.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.094] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.094] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.094] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.094] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.094] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0099.094] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.osmmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.094] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.095] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.095] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.095] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.095] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0099.095] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.osmux.osmux.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.095] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.095] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.096] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.096] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.096] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmuxmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0099.096] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmuxmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.osmuxmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.096] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.096] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.096] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.101] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.101] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0099.102] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.outlook.outlook.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.102] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.102] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.102] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.102] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.102] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.outlookmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0099.103] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.outlookmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.outlookmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.103] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.103] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.103] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.103] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.103] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0099.103] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.powerpivot.powerpivot.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.104] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.104] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.104] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.104] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.104] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0099.104] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.powerpoint.powerpoint.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.105] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.105] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.105] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.105] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.105] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.powerpointmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0099.105] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.powerpointmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.powerpointmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.105] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.105] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.108] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.108] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.108] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0099.109] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.project.project.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.109] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.109] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.109] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.109] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.109] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.projectmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0099.110] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.projectmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.projectmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.110] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.110] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.110] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.110] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.110] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0099.111] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.proof.culture.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.111] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.111] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.111] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.111] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.111] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.es-es.xml", dwFileAttributes=0x80) returned 0 [0099.111] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.es-es.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.proof.culture.msi.16.es-es.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.112] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.112] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.112] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.112] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.112] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml", dwFileAttributes=0x80) returned 0 [0099.112] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.proof.culture.msi.16.fr-fr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.113] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.113] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.113] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.113] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.113] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.proofing.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0099.113] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.proofing.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.proofing.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.113] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.113] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.114] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.114] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.114] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0099.114] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.publisher.publisher.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.114] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.114] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.115] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.115] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.115] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.publishermui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0099.115] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.publishermui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.publishermui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.115] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.115] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.115] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.115] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.116] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0099.116] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.shared.office.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.116] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.116] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.116] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.116] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.117] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0099.117] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.visio.visio.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.117] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.117] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.117] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.118] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.118] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.visiomui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0099.118] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.visiomui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.visiomui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.118] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.118] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.119] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.119] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.119] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0099.119] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.word.word.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.119] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.119] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.120] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.120] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.120] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.wordmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0099.120] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.wordmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.wordmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.120] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.120] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.121] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.121] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.121] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.121] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeBackgroundTaskHandlerLogon.xml", dwFileAttributes=0x80) returned 0 [0099.121] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeBackgroundTaskHandlerLogon.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\microsoft_office_officebackgroundtaskhandlerlogon.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.121] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.121] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.124] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.124] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.124] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeBackgroundTaskHandlerRegistration.xml", dwFileAttributes=0x80) returned 0 [0099.125] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeBackgroundTaskHandlerRegistration.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\microsoft_office_officebackgroundtaskhandlerregistration.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.125] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.125] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.125] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.125] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.126] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeOsfInstaller.xml", dwFileAttributes=0x80) returned 0 [0099.126] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeOsfInstaller.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\microsoft_office_officeosfinstaller.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.126] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.126] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.126] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.127] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.127] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentFallBack2016.xml", dwFileAttributes=0x80) returned 0 [0099.128] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentFallBack2016.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\microsoft_office_officetelemetryagentfallback2016.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.128] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.128] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.128] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.128] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.129] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentLogOn2016.xml", dwFileAttributes=0x80) returned 0 [0099.129] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentLogOn2016.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\microsoft_office_officetelemetryagentlogon2016.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.129] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.129] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.130] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.130] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.130] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\msoutilstat.etw.man", dwFileAttributes=0x80) returned 0 [0099.130] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\msoutilstat.etw.man" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\msoutilstat.etw.man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.131] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.131] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.131] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.131] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.131] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\wordEtw.man", dwFileAttributes=0x80) returned 0 [0099.131] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\wordEtw.man" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\wordetw.man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.132] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.132] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.132] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0099.132] FindClose (in: hFindFile=0xd7079d9390 | out: hFindFile=0xd7079d9390) returned 1 [0099.133] SetLastError (dwErrCode=0x0) [0099.133] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.136] GetLastError () returned 0x5 [0099.136] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.136] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.136] FindNextFileW (in: hFindFile=0xd7079d87f0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0 [0099.136] FindClose (in: hFindFile=0xd7079d87f0 | out: hFindFile=0xd7079d87f0) returned 1 [0099.136] SetLastError (dwErrCode=0x0) [0099.136] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.137] GetLastError () returned 0x5 [0099.137] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.137] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.137] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0099.137] SetLastError (dwErrCode=0x0) [0099.137] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.137] GetLastError () returned 0x5 [0099.137] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.137] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.138] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\*.*", lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0xd7079d9870 [0099.138] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.138] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.138] SetLastError (dwErrCode=0x0) [0099.138] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\crypto\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.138] GetLastError () returned 0x5 [0099.138] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.138] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.138] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d9990 [0099.138] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.138] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.138] SetLastError (dwErrCode=0x0) [0099.138] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\crypto\\dss\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.139] GetLastError () returned 0x5 [0099.139] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.139] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.139] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d9c90 [0099.139] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.139] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0099.139] FindClose (in: hFindFile=0xd7079d9c90 | out: hFindFile=0xd7079d9c90) returned 1 [0099.139] SetLastError (dwErrCode=0x0) [0099.139] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\crypto\\dss\\machinekeys\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x728 [0099.139] GetLastError () returned 0x0 [0099.140] WriteFile (in: hFile=0x728, lpBuffer=0x7ff7afca9500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpBuffer=0x7ff7afca9500*, lpNumberOfBytesWritten=0xd707b4c9a0*=0x324, lpOverlapped=0x0) returned 1 [0099.140] CloseHandle (hObject=0x728) returned 1 [0099.141] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0099.141] FindClose (in: hFindFile=0xd7079d9990 | out: hFindFile=0xd7079d9990) returned 1 [0099.141] SetLastError (dwErrCode=0x0) [0099.141] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\crypto\\dss\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.141] GetLastError () returned 0x5 [0099.141] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.141] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.141] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.141] SetLastError (dwErrCode=0x0) [0099.142] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\crypto\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.142] GetLastError () returned 0x5 [0099.142] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.142] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.142] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\Keys\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d8910 [0099.142] FindNextFileW (in: hFindFile=0xd7079d8910, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.142] FindNextFileW (in: hFindFile=0xd7079d8910, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0099.142] FindClose (in: hFindFile=0xd7079d8910 | out: hFindFile=0xd7079d8910) returned 1 [0099.142] SetLastError (dwErrCode=0x0) [0099.142] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\Keys\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\crypto\\keys\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.142] GetLastError () returned 0x5 [0099.142] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.143] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.143] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.143] SetLastError (dwErrCode=0x0) [0099.143] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\crypto\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.143] GetLastError () returned 0x5 [0099.143] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.143] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.143] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\PCPKSP\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d8eb0 [0099.143] FindNextFileW (in: hFindFile=0xd7079d8eb0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.143] FindNextFileW (in: hFindFile=0xd7079d8eb0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.143] FindNextFileW (in: hFindFile=0xd7079d8eb0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0099.143] FindClose (in: hFindFile=0xd7079d8eb0 | out: hFindFile=0xd7079d8eb0) returned 1 [0099.143] SetLastError (dwErrCode=0x0) [0099.143] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\PCPKSP\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\crypto\\pcpksp\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.144] GetLastError () returned 0x5 [0099.144] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.144] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.144] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.144] SetLastError (dwErrCode=0x0) [0099.144] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\crypto\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.144] GetLastError () returned 0x5 [0099.144] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.144] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.144] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d91b0 [0099.144] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.144] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.144] SetLastError (dwErrCode=0x0) [0099.144] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.145] GetLastError () returned 0x5 [0099.145] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.145] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.145] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d9c90 [0099.145] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.145] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.145] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.145] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\08e575673cce10c72090304839888e02_427a1946-e0ff-4097-8c9e-ca2c1e22780b", dwFileAttributes=0x80) returned 1 [0099.146] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\08e575673cce10c72090304839888e02_427a1946-e0ff-4097-8c9e-ca2c1e22780b" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\machinekeys\\08e575673cce10c72090304839888e02_427a1946-e0ff-4097-8c9e-ca2c1e22780b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x72c [0099.146] GetFileSizeEx (in: hFile=0x72c, lpFileSize=0xd707b4bfe8 | out: lpFileSize=0xd707b4bfe8*=52) returned 1 [0099.146] GetFileSizeEx (in: hFile=0x72c, lpFileSize=0xd707b4bff8 | out: lpFileSize=0xd707b4bff8*=52) returned 1 [0099.146] CryptGenKey (in: hProv=0xd7079ce2d0, Algid=0x6610, dwFlags=0x1, phKey=0xd707b4bfd0 | out: phKey=0xd707b4bfd0*=0xd707995ba0) returned 1 [0099.146] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0xd70aa60000 [0099.147] SetFilePointer (in: hFile=0x72c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0099.147] ReadFile (in: hFile=0x72c, lpBuffer=0xd70aa60000, nNumberOfBytesToRead=0x34, lpNumberOfBytesRead=0xd707b4bfe0, lpOverlapped=0x0 | out: lpBuffer=0xd70aa60000*, lpNumberOfBytesRead=0xd707b4bfe0*=0x34, lpOverlapped=0x0) returned 1 [0099.147] CryptEncrypt (in: hKey=0xd707995ba0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xd707b4bfdc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xd707b4bfdc*=0xf4250) returned 1 [0099.147] CryptEncrypt (in: hKey=0xd707995ba0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0xd70aa60000*, pdwDataLen=0xd707b4bfd8*=0x34, dwBufLen=0xf4250 | out: pbData=0xd70aa60000*, pdwDataLen=0xd707b4bfd8*=0x40) returned 1 [0099.147] SetFilePointer (in: hFile=0x72c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0099.147] WriteFile (in: hFile=0x72c, lpBuffer=0xd70aa60000*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0xd707b4bfe0, lpOverlapped=0x0 | out: lpBuffer=0xd70aa60000*, lpNumberOfBytesWritten=0xd707b4bfe0*=0x40, lpOverlapped=0x0) returned 1 [0099.147] WriteFile (in: hFile=0x72c, lpBuffer=0xd707b4c020*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xd707b4bfe4, lpOverlapped=0x0 | out: lpBuffer=0xd707b4c020*, lpNumberOfBytesWritten=0xd707b4bfe4*=0x6, lpOverlapped=0x0) returned 1 [0099.147] CryptExportKey (in: hKey=0xd707995ba0, hExpKey=0xd7079a7710, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xd707b4bff0 | out: pbData=0x0*, pdwDataLen=0xd707b4bff0*=0x10c) returned 1 [0099.147] CryptExportKey (in: hKey=0xd707995ba0, hExpKey=0xd7079a7710, dwBlobType=0x1, dwFlags=0x0, pbData=0xd707b4c070, pdwDataLen=0xd707b4bff0 | out: pbData=0xd707b4c070*, pdwDataLen=0xd707b4bff0*=0x10c) returned 1 [0099.147] WriteFile (in: hFile=0x72c, lpBuffer=0xd707b4c070*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd707b4bfe4, lpOverlapped=0x0 | out: lpBuffer=0xd707b4c070*, lpNumberOfBytesWritten=0xd707b4bfe4*=0x10c, lpOverlapped=0x0) returned 1 [0099.148] CloseHandle (hObject=0x72c) returned 1 [0099.169] VirtualFree (lpAddress=0xd70aa60000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.173] CryptDestroyKey (hKey=0xd707995ba0) returned 1 [0099.173] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.174] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0099.174] FindClose (in: hFindFile=0xd7079d9c90 | out: hFindFile=0xd7079d9c90) returned 1 [0099.174] SetLastError (dwErrCode=0x0) [0099.174] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\machinekeys\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x728 [0099.174] GetLastError () returned 0x0 [0099.174] WriteFile (in: hFile=0x728, lpBuffer=0x7ff7afca9500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpBuffer=0x7ff7afca9500*, lpNumberOfBytesWritten=0xd707b4c9a0*=0x324, lpOverlapped=0x0) returned 1 [0099.175] CloseHandle (hObject=0x728) returned 1 [0099.175] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.175] SetLastError (dwErrCode=0x0) [0099.175] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.175] GetLastError () returned 0x5 [0099.175] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.175] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.175] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xffffffffffffffff [0099.177] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0099.177] SetLastError (dwErrCode=0x0) [0099.177] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\s-1-5-18\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.178] GetLastError () returned 0x5 [0099.178] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.178] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.178] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0099.178] FindClose (in: hFindFile=0xd7079d91b0 | out: hFindFile=0xd7079d91b0) returned 1 [0099.178] SetLastError (dwErrCode=0x0) [0099.178] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.178] GetLastError () returned 0x5 [0099.178] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.178] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.178] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.178] SetLastError (dwErrCode=0x0) [0099.178] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\crypto\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.178] GetLastError () returned 0x5 [0099.178] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.178] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.178] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\SystemKeys\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xffffffffffffffff [0099.179] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0099.179] SetLastError (dwErrCode=0x0) [0099.179] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\SystemKeys\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\crypto\\systemkeys\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.179] GetLastError () returned 0x5 [0099.179] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.179] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.179] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0 [0099.179] FindClose (in: hFindFile=0xd7079d9870 | out: hFindFile=0xd7079d9870) returned 1 [0099.179] SetLastError (dwErrCode=0x0) [0099.179] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\crypto\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.179] GetLastError () returned 0x5 [0099.179] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.179] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.179] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0099.179] SetLastError (dwErrCode=0x0) [0099.179] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.179] GetLastError () returned 0x5 [0099.180] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.180] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.180] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\DataMart\\*.*", lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0xd7079d8af0 [0099.180] FindNextFileW (in: hFindFile=0xd7079d8af0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.180] FindNextFileW (in: hFindFile=0xd7079d8af0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.180] SetLastError (dwErrCode=0x0) [0099.180] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\DataMart\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\datamart\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.180] GetLastError () returned 0x5 [0099.180] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.180] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.180] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\DataMart\\PaidWiFi\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d9c90 [0099.180] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.180] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0099.180] FindClose (in: hFindFile=0xd7079d9c90 | out: hFindFile=0xd7079d9c90) returned 1 [0099.180] SetLastError (dwErrCode=0x0) [0099.180] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\DataMart\\PaidWiFi\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\datamart\\paidwifi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x724 [0099.181] GetLastError () returned 0x0 [0099.181] WriteFile (in: hFile=0x724, lpBuffer=0x7ff7afca9500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpBuffer=0x7ff7afca9500*, lpNumberOfBytesWritten=0xd707b4d150*=0x324, lpOverlapped=0x0) returned 1 [0099.181] CloseHandle (hObject=0x724) returned 1 [0099.182] FindNextFileW (in: hFindFile=0xd7079d8af0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0 [0099.182] FindClose (in: hFindFile=0xd7079d8af0 | out: hFindFile=0xd7079d8af0) returned 1 [0099.182] SetLastError (dwErrCode=0x0) [0099.182] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\DataMart\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\datamart\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.182] GetLastError () returned 0x5 [0099.182] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.182] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.182] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0099.182] SetLastError (dwErrCode=0x0) [0099.182] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.182] GetLastError () returned 0x5 [0099.182] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.182] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.182] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\*.*", lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0xd7079d9870 [0099.183] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.183] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.183] SetLastError (dwErrCode=0x0) [0099.183] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\device stage\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.183] GetLastError () returned 0x5 [0099.183] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.183] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.184] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d9390 [0099.184] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.184] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.184] SetLastError (dwErrCode=0x0) [0099.186] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.186] GetLastError () returned 0x5 [0099.186] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.186] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.186] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d91b0 [0099.187] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.187] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.187] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.188] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png", dwFileAttributes=0x80) returned 0 [0099.189] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.189] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.189] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.189] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.189] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.189] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml", dwFileAttributes=0x80) returned 0 [0099.189] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.190] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.190] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.190] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.190] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.190] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png", dwFileAttributes=0x80) returned 0 [0099.191] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.191] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.191] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.191] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.191] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.191] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png", dwFileAttributes=0x80) returned 0 [0099.192] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.192] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.192] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.192] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.192] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.192] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png", dwFileAttributes=0x80) returned 0 [0099.193] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.193] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.193] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.193] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0099.193] FindClose (in: hFindFile=0xd7079d91b0 | out: hFindFile=0xd7079d91b0) returned 1 [0099.194] SetLastError (dwErrCode=0x0) [0099.194] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.197] GetLastError () returned 0x5 [0099.197] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.197] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.197] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.197] SetLastError (dwErrCode=0x0) [0099.197] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.197] GetLastError () returned 0x5 [0099.197] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.197] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.197] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d87f0 [0099.197] FindNextFileW (in: hFindFile=0xd7079d87f0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.197] FindNextFileW (in: hFindFile=0xd7079d87f0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.197] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.198] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png", dwFileAttributes=0x80) returned 0 [0099.198] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.198] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.198] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.198] FindNextFileW (in: hFindFile=0xd7079d87f0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.198] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.199] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml", dwFileAttributes=0x80) returned 0 [0099.199] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.199] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.199] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.199] FindNextFileW (in: hFindFile=0xd7079d87f0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.199] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.202] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png", dwFileAttributes=0x80) returned 0 [0099.203] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.203] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.203] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.203] FindNextFileW (in: hFindFile=0xd7079d87f0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0099.203] FindClose (in: hFindFile=0xd7079d87f0 | out: hFindFile=0xd7079d87f0) returned 1 [0099.203] SetLastError (dwErrCode=0x0) [0099.203] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.204] GetLastError () returned 0x5 [0099.204] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.204] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.204] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0099.204] FindClose (in: hFindFile=0xd7079d9390 | out: hFindFile=0xd7079d9390) returned 1 [0099.204] SetLastError (dwErrCode=0x0) [0099.204] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.204] GetLastError () returned 0x5 [0099.204] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.204] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.204] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.204] SetLastError (dwErrCode=0x0) [0099.204] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\device stage\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.205] GetLastError () returned 0x5 [0099.205] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.205] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.205] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d8af0 [0099.205] FindNextFileW (in: hFindFile=0xd7079d8af0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.206] FindNextFileW (in: hFindFile=0xd7079d8af0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.206] SetLastError (dwErrCode=0x0) [0099.206] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.206] GetLastError () returned 0x5 [0099.206] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.206] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.206] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d87f0 [0099.210] FindNextFileW (in: hFindFile=0xd7079d87f0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.210] FindNextFileW (in: hFindFile=0xd7079d87f0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.210] SetLastError (dwErrCode=0x0) [0099.210] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.210] GetLastError () returned 0x5 [0099.210] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0099.210] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.210] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079d8eb0 [0099.210] FindNextFileW (in: hFindFile=0xd7079d8eb0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.210] FindNextFileW (in: hFindFile=0xd7079d8eb0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.210] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.211] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml", dwFileAttributes=0x80) returned 0 [0099.211] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\resource.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.211] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.211] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.212] FindNextFileW (in: hFindFile=0xd7079d8eb0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0099.212] FindClose (in: hFindFile=0xd7079d8eb0 | out: hFindFile=0xd7079d8eb0) returned 1 [0099.212] SetLastError (dwErrCode=0x0) [0099.212] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.212] GetLastError () returned 0x5 [0099.212] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0099.212] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.212] FindNextFileW (in: hFindFile=0xd7079d87f0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.212] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.213] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico", dwFileAttributes=0x80) returned 0 [0099.213] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.214] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.214] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.214] FindNextFileW (in: hFindFile=0xd7079d87f0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.214] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.214] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico", dwFileAttributes=0x80) returned 0 [0099.215] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.215] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.215] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.215] FindNextFileW (in: hFindFile=0xd7079d87f0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.215] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.216] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico", dwFileAttributes=0x80) returned 0 [0099.216] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.216] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.216] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.217] FindNextFileW (in: hFindFile=0xd7079d87f0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.217] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.217] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml", dwFileAttributes=0x80) returned 0 [0099.217] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.218] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.218] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.218] FindNextFileW (in: hFindFile=0xd7079d87f0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.218] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.218] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico", dwFileAttributes=0x80) returned 0 [0099.219] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.219] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.219] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.220] FindNextFileW (in: hFindFile=0xd7079d87f0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.220] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.220] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico", dwFileAttributes=0x80) returned 0 [0099.220] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.221] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.221] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.221] FindNextFileW (in: hFindFile=0xd7079d87f0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.221] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.221] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico", dwFileAttributes=0x80) returned 0 [0099.221] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.222] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.222] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.222] FindNextFileW (in: hFindFile=0xd7079d87f0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.222] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.222] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml", dwFileAttributes=0x80) returned 0 [0099.223] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.223] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.223] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.223] FindNextFileW (in: hFindFile=0xd7079d87f0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.223] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.224] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico", dwFileAttributes=0x80) returned 0 [0099.227] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.227] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.227] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.227] FindNextFileW (in: hFindFile=0xd7079d87f0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0099.228] FindClose (in: hFindFile=0xd7079d87f0 | out: hFindFile=0xd7079d87f0) returned 1 [0099.228] SetLastError (dwErrCode=0x0) [0099.228] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.228] GetLastError () returned 0x5 [0099.228] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.228] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.228] FindNextFileW (in: hFindFile=0xd7079d8af0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.228] SetLastError (dwErrCode=0x0) [0099.228] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.228] GetLastError () returned 0x5 [0099.228] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.228] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.228] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d87f0 [0099.230] FindNextFileW (in: hFindFile=0xd7079d87f0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.230] FindNextFileW (in: hFindFile=0xd7079d87f0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.230] SetLastError (dwErrCode=0x0) [0099.230] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.230] GetLastError () returned 0x5 [0099.230] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0099.230] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.230] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079d8910 [0099.230] FindNextFileW (in: hFindFile=0xd7079d8910, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.230] FindNextFileW (in: hFindFile=0xd7079d8910, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.230] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.230] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml", dwFileAttributes=0x80) returned 0 [0099.233] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\resource.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.233] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.233] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.233] FindNextFileW (in: hFindFile=0xd7079d8910, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0099.234] FindClose (in: hFindFile=0xd7079d8910 | out: hFindFile=0xd7079d8910) returned 1 [0099.234] SetLastError (dwErrCode=0x0) [0099.234] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.234] GetLastError () returned 0x5 [0099.234] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0099.234] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.234] FindNextFileW (in: hFindFile=0xd7079d87f0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.234] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.234] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico", dwFileAttributes=0x80) returned 0 [0099.235] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.235] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.235] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.235] FindNextFileW (in: hFindFile=0xd7079d87f0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.235] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.235] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico", dwFileAttributes=0x80) returned 0 [0099.235] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.236] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.236] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.236] FindNextFileW (in: hFindFile=0xd7079d87f0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.236] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.236] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico", dwFileAttributes=0x80) returned 0 [0099.236] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.236] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.237] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.237] FindNextFileW (in: hFindFile=0xd7079d87f0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.237] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.237] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico", dwFileAttributes=0x80) returned 0 [0099.237] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.237] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.237] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.238] FindNextFileW (in: hFindFile=0xd7079d87f0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.238] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.238] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico", dwFileAttributes=0x80) returned 0 [0099.238] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.238] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.238] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.238] FindNextFileW (in: hFindFile=0xd7079d87f0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.239] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.239] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico", dwFileAttributes=0x80) returned 0 [0099.239] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.239] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.239] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.239] FindNextFileW (in: hFindFile=0xd7079d87f0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.239] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.240] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico", dwFileAttributes=0x80) returned 0 [0099.241] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.241] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.242] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.242] FindNextFileW (in: hFindFile=0xd7079d87f0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.242] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.242] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml", dwFileAttributes=0x80) returned 0 [0099.242] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.242] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.242] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.243] FindNextFileW (in: hFindFile=0xd7079d87f0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0099.243] FindClose (in: hFindFile=0xd7079d87f0 | out: hFindFile=0xd7079d87f0) returned 1 [0099.243] SetLastError (dwErrCode=0x0) [0099.243] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.243] GetLastError () returned 0x5 [0099.243] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.243] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.243] FindNextFileW (in: hFindFile=0xd7079d8af0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0099.243] FindClose (in: hFindFile=0xd7079d8af0 | out: hFindFile=0xd7079d8af0) returned 1 [0099.243] SetLastError (dwErrCode=0x0) [0099.243] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.243] GetLastError () returned 0x5 [0099.243] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.243] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.243] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0 [0099.244] FindClose (in: hFindFile=0xd7079d9870 | out: hFindFile=0xd7079d9870) returned 1 [0099.244] SetLastError (dwErrCode=0x0) [0099.244] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\device stage\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.244] GetLastError () returned 0x5 [0099.244] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.244] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.244] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0099.244] SetLastError (dwErrCode=0x0) [0099.244] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.244] GetLastError () returned 0x5 [0099.244] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.244] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.244] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\DeviceSync\\*.*", lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0xd7079d9c90 [0099.244] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.244] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0 [0099.244] FindClose (in: hFindFile=0xd7079d9c90 | out: hFindFile=0xd7079d9c90) returned 1 [0099.245] SetLastError (dwErrCode=0x0) [0099.245] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\DeviceSync\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\devicesync\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x720 [0099.245] GetLastError () returned 0x0 [0099.245] WriteFile (in: hFile=0x720, lpBuffer=0x7ff7afca9500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpBuffer=0x7ff7afca9500*, lpNumberOfBytesWritten=0xd707b4d900*=0x324, lpOverlapped=0x0) returned 1 [0099.246] CloseHandle (hObject=0x720) returned 1 [0099.246] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0099.246] SetLastError (dwErrCode=0x0) [0099.246] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.246] GetLastError () returned 0x5 [0099.249] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.249] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.249] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\*.*", lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0xffffffffffffffff [0099.249] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0099.249] SetLastError (dwErrCode=0x0) [0099.249] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\diagnosis\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.249] GetLastError () returned 0x5 [0099.249] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.249] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.249] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0099.249] SetLastError (dwErrCode=0x0) [0099.249] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.249] GetLastError () returned 0x5 [0099.249] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.249] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.249] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\*.*", lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0xd7079d9870 [0099.250] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.250] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.250] SetLastError (dwErrCode=0x0) [0099.250] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\DRM\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\drm\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.250] GetLastError () returned 0x5 [0099.250] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.250] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.251] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\Server\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d8910 [0099.251] FindNextFileW (in: hFindFile=0xd7079d8910, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.251] FindNextFileW (in: hFindFile=0xd7079d8910, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0099.251] FindClose (in: hFindFile=0xd7079d8910 | out: hFindFile=0xd7079d8910) returned 1 [0099.251] SetLastError (dwErrCode=0x0) [0099.251] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\DRM\\Server\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\drm\\server\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.251] GetLastError () returned 0x5 [0099.251] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.251] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.251] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0 [0099.251] FindClose (in: hFindFile=0xd7079d9870 | out: hFindFile=0xd7079d9870) returned 1 [0099.251] SetLastError (dwErrCode=0x0) [0099.251] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\DRM\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\drm\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.251] GetLastError () returned 0x5 [0099.251] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.252] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.252] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0099.252] SetLastError (dwErrCode=0x0) [0099.252] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.252] GetLastError () returned 0x5 [0099.252] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.252] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.252] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\*.*", lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0xd7079d9870 [0099.252] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.253] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.253] SetLastError (dwErrCode=0x0) [0099.253] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\event viewer\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.253] GetLastError () returned 0x5 [0099.253] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.253] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.253] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d8910 [0099.255] FindNextFileW (in: hFindFile=0xd7079d8910, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.255] FindNextFileW (in: hFindFile=0xd7079d8910, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.255] SetLastError (dwErrCode=0x0) [0099.255] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\event viewer\\views\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.255] GetLastError () returned 0x5 [0099.255] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.255] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.255] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d91b0 [0099.256] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.256] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0099.256] FindClose (in: hFindFile=0xd7079d91b0 | out: hFindFile=0xd7079d91b0) returned 1 [0099.256] SetLastError (dwErrCode=0x0) [0099.256] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\event viewer\\views\\applicationviewsrootnode\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.256] GetLastError () returned 0x5 [0099.256] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.256] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.257] FindNextFileW (in: hFindFile=0xd7079d8910, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0099.257] FindClose (in: hFindFile=0xd7079d8910 | out: hFindFile=0xd7079d8910) returned 1 [0099.257] SetLastError (dwErrCode=0x0) [0099.257] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\event viewer\\views\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.257] GetLastError () returned 0x5 [0099.257] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.257] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.257] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0 [0099.257] FindClose (in: hFindFile=0xd7079d9870 | out: hFindFile=0xd7079d9870) returned 1 [0099.257] SetLastError (dwErrCode=0x0) [0099.257] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\event viewer\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.257] GetLastError () returned 0x5 [0099.257] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.257] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.257] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0099.257] SetLastError (dwErrCode=0x0) [0099.257] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.258] GetLastError () returned 0x5 [0099.258] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.258] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.258] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\*.*", lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0xd7079d9990 [0099.258] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.258] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.258] SetLastError (dwErrCode=0x0) [0099.258] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\identitycrl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.258] GetLastError () returned 0x5 [0099.258] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.258] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.259] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\INT\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d9090 [0099.259] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.259] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.259] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0099.259] FindClose (in: hFindFile=0xd7079d9090 | out: hFindFile=0xd7079d9090) returned 1 [0099.259] SetLastError (dwErrCode=0x0) [0099.259] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\INT\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\identitycrl\\int\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.259] GetLastError () returned 0x5 [0099.259] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.259] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.259] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.259] SetLastError (dwErrCode=0x0) [0099.259] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\identitycrl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.259] GetLastError () returned 0x5 [0099.259] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.259] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.259] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\production\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d8eb0 [0099.260] FindNextFileW (in: hFindFile=0xd7079d8eb0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.260] FindNextFileW (in: hFindFile=0xd7079d8eb0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.260] FindNextFileW (in: hFindFile=0xd7079d8eb0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.260] SetLastError (dwErrCode=0x0) [0099.260] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\production\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\identitycrl\\production\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.260] GetLastError () returned 0x5 [0099.260] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.260] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.260] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\production\\temp\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d9090 [0099.260] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.260] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0099.260] FindClose (in: hFindFile=0xd7079d9090 | out: hFindFile=0xd7079d9090) returned 1 [0099.260] SetLastError (dwErrCode=0x0) [0099.260] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\production\\temp\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\identitycrl\\production\\temp\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.260] GetLastError () returned 0x5 [0099.260] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.260] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.260] FindNextFileW (in: hFindFile=0xd7079d8eb0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0099.260] FindClose (in: hFindFile=0xd7079d8eb0 | out: hFindFile=0xd7079d8eb0) returned 1 [0099.261] SetLastError (dwErrCode=0x0) [0099.261] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\production\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\identitycrl\\production\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.261] GetLastError () returned 0x5 [0099.261] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.261] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.261] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0 [0099.261] FindClose (in: hFindFile=0xd7079d9990 | out: hFindFile=0xd7079d9990) returned 1 [0099.261] SetLastError (dwErrCode=0x0) [0099.261] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\identitycrl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.261] GetLastError () returned 0x5 [0099.261] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.261] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.261] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0099.261] SetLastError (dwErrCode=0x0) [0099.261] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.262] GetLastError () returned 0x5 [0099.262] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.262] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.262] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\MapData\\*.*", lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0xd7079d9c90 [0099.262] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.262] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0 [0099.262] FindClose (in: hFindFile=0xd7079d9c90 | out: hFindFile=0xd7079d9c90) returned 1 [0099.262] SetLastError (dwErrCode=0x0) [0099.262] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\MapData\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\mapdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.262] GetLastError () returned 0x5 [0099.262] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.262] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.262] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0099.263] SetLastError (dwErrCode=0x0) [0099.263] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.263] GetLastError () returned 0x5 [0099.263] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.263] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.263] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\MF\\*.*", lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0xd7079d8eb0 [0099.263] FindNextFileW (in: hFindFile=0xd7079d8eb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.263] FindNextFileW (in: hFindFile=0xd7079d8eb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.263] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.263] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\MF\\Active.GRL", dwFileAttributes=0x80) returned 1 [0099.264] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\MF\\Active.GRL" (normalized: "c:\\programdata\\microsoft\\mf\\active.grl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x724 [0099.264] GetFileSizeEx (in: hFile=0x724, lpFileSize=0xd707b4cf48 | out: lpFileSize=0xd707b4cf48*=14972) returned 1 [0099.264] GetFileSizeEx (in: hFile=0x724, lpFileSize=0xd707b4cf58 | out: lpFileSize=0xd707b4cf58*=14972) returned 1 [0099.264] SetFilePointerEx (in: hFile=0x724, liDistanceToMove=0x395a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0099.264] ReadFile (in: hFile=0x724, lpBuffer=0xd707b4cfa8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xd707b4cf68, lpOverlapped=0x0 | out: lpBuffer=0xd707b4cfa8*, lpNumberOfBytesRead=0xd707b4cf68*=0x19, lpOverlapped=0x0) returned 1 [0099.265] SetFilePointer (in: hFile=0x724, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0099.265] CryptGenKey (in: hProv=0xd7079ce2d0, Algid=0x6610, dwFlags=0x1, phKey=0xd707b4cf30 | out: phKey=0xd707b4cf30*=0xd707996620) returned 1 [0099.265] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0xd70aa60000 [0099.265] SetFilePointer (in: hFile=0x724, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0099.265] ReadFile (in: hFile=0x724, lpBuffer=0xd70aa60000, nNumberOfBytesToRead=0x3a7c, lpNumberOfBytesRead=0xd707b4cf40, lpOverlapped=0x0 | out: lpBuffer=0xd70aa60000*, lpNumberOfBytesRead=0xd707b4cf40*=0x3a7c, lpOverlapped=0x0) returned 1 [0099.266] CryptEncrypt (in: hKey=0xd707996620, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xd707b4cf3c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xd707b4cf3c*=0xf4250) returned 1 [0099.266] CryptEncrypt (in: hKey=0xd707996620, hHash=0x0, Final=1, dwFlags=0x0, pbData=0xd70aa60000*, pdwDataLen=0xd707b4cf38*=0x3a7c, dwBufLen=0xf4250 | out: pbData=0xd70aa60000*, pdwDataLen=0xd707b4cf38*=0x3a80) returned 1 [0099.266] SetFilePointer (in: hFile=0x724, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0099.266] WriteFile (in: hFile=0x724, lpBuffer=0xd70aa60000*, nNumberOfBytesToWrite=0x3a80, lpNumberOfBytesWritten=0xd707b4cf40, lpOverlapped=0x0 | out: lpBuffer=0xd70aa60000*, lpNumberOfBytesWritten=0xd707b4cf40*=0x3a80, lpOverlapped=0x0) returned 1 [0099.266] WriteFile (in: hFile=0x724, lpBuffer=0xd707b4cf80*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xd707b4cf44, lpOverlapped=0x0 | out: lpBuffer=0xd707b4cf80*, lpNumberOfBytesWritten=0xd707b4cf44*=0x6, lpOverlapped=0x0) returned 1 [0099.266] CryptExportKey (in: hKey=0xd707996620, hExpKey=0xd7079a7710, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xd707b4cf50 | out: pbData=0x0*, pdwDataLen=0xd707b4cf50*=0x10c) returned 1 [0099.266] CryptExportKey (in: hKey=0xd707996620, hExpKey=0xd7079a7710, dwBlobType=0x1, dwFlags=0x0, pbData=0xd707b4cfd0, pdwDataLen=0xd707b4cf50 | out: pbData=0xd707b4cfd0*, pdwDataLen=0xd707b4cf50*=0x10c) returned 1 [0099.267] WriteFile (in: hFile=0x724, lpBuffer=0xd707b4cfd0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd707b4cf44, lpOverlapped=0x0 | out: lpBuffer=0xd707b4cfd0*, lpNumberOfBytesWritten=0xd707b4cf44*=0x10c, lpOverlapped=0x0) returned 1 [0099.267] CloseHandle (hObject=0x724) returned 1 [0099.291] VirtualFree (lpAddress=0xd70aa60000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.301] CryptDestroyKey (hKey=0xd707996620) returned 1 [0099.301] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.301] FindNextFileW (in: hFindFile=0xd7079d8eb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.302] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.303] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\MF\\Pending.GRL", dwFileAttributes=0x80) returned 1 [0099.304] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\MF\\Pending.GRL" (normalized: "c:\\programdata\\microsoft\\mf\\pending.grl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x724 [0099.304] GetFileSizeEx (in: hFile=0x724, lpFileSize=0xd707b4cf48 | out: lpFileSize=0xd707b4cf48*=14972) returned 1 [0099.304] GetFileSizeEx (in: hFile=0x724, lpFileSize=0xd707b4cf58 | out: lpFileSize=0xd707b4cf58*=14972) returned 1 [0099.304] SetFilePointerEx (in: hFile=0x724, liDistanceToMove=0x395a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0099.304] ReadFile (in: hFile=0x724, lpBuffer=0xd707b4cfa8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xd707b4cf68, lpOverlapped=0x0 | out: lpBuffer=0xd707b4cfa8*, lpNumberOfBytesRead=0xd707b4cf68*=0x19, lpOverlapped=0x0) returned 1 [0099.306] SetFilePointer (in: hFile=0x724, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0099.306] CryptGenKey (in: hProv=0xd7079ce2d0, Algid=0x6610, dwFlags=0x1, phKey=0xd707b4cf30 | out: phKey=0xd707b4cf30*=0xd707996070) returned 1 [0099.306] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0xd70aa60000 [0099.307] SetFilePointer (in: hFile=0x724, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0099.307] ReadFile (in: hFile=0x724, lpBuffer=0xd70aa60000, nNumberOfBytesToRead=0x3a7c, lpNumberOfBytesRead=0xd707b4cf40, lpOverlapped=0x0 | out: lpBuffer=0xd70aa60000*, lpNumberOfBytesRead=0xd707b4cf40*=0x3a7c, lpOverlapped=0x0) returned 1 [0099.308] CryptEncrypt (in: hKey=0xd707996070, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xd707b4cf3c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xd707b4cf3c*=0xf4250) returned 1 [0099.308] CryptEncrypt (in: hKey=0xd707996070, hHash=0x0, Final=1, dwFlags=0x0, pbData=0xd70aa60000*, pdwDataLen=0xd707b4cf38*=0x3a7c, dwBufLen=0xf4250 | out: pbData=0xd70aa60000*, pdwDataLen=0xd707b4cf38*=0x3a80) returned 1 [0099.308] SetFilePointer (in: hFile=0x724, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0099.308] WriteFile (in: hFile=0x724, lpBuffer=0xd70aa60000*, nNumberOfBytesToWrite=0x3a80, lpNumberOfBytesWritten=0xd707b4cf40, lpOverlapped=0x0 | out: lpBuffer=0xd70aa60000*, lpNumberOfBytesWritten=0xd707b4cf40*=0x3a80, lpOverlapped=0x0) returned 1 [0099.309] WriteFile (in: hFile=0x724, lpBuffer=0xd707b4cf80*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xd707b4cf44, lpOverlapped=0x0 | out: lpBuffer=0xd707b4cf80*, lpNumberOfBytesWritten=0xd707b4cf44*=0x6, lpOverlapped=0x0) returned 1 [0099.309] CryptExportKey (in: hKey=0xd707996070, hExpKey=0xd7079a7710, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xd707b4cf50 | out: pbData=0x0*, pdwDataLen=0xd707b4cf50*=0x10c) returned 1 [0099.309] CryptExportKey (in: hKey=0xd707996070, hExpKey=0xd7079a7710, dwBlobType=0x1, dwFlags=0x0, pbData=0xd707b4cfd0, pdwDataLen=0xd707b4cf50 | out: pbData=0xd707b4cfd0*, pdwDataLen=0xd707b4cf50*=0x10c) returned 1 [0099.309] WriteFile (in: hFile=0x724, lpBuffer=0xd707b4cfd0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd707b4cf44, lpOverlapped=0x0 | out: lpBuffer=0xd707b4cfd0*, lpNumberOfBytesWritten=0xd707b4cf44*=0x10c, lpOverlapped=0x0) returned 1 [0099.309] CloseHandle (hObject=0x724) returned 1 [0099.334] VirtualFree (lpAddress=0xd70aa60000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.341] CryptDestroyKey (hKey=0xd707996070) returned 1 [0099.341] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.342] FindNextFileW (in: hFindFile=0xd7079d8eb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0 [0099.342] FindClose (in: hFindFile=0xd7079d8eb0 | out: hFindFile=0xd7079d8eb0) returned 1 [0099.342] SetLastError (dwErrCode=0x0) [0099.342] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\MF\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\mf\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.342] GetLastError () returned 0x5 [0099.342] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.342] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.342] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0099.342] SetLastError (dwErrCode=0x0) [0099.342] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.343] GetLastError () returned 0x5 [0099.343] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.343] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.343] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\*.*", lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0xd7079d8eb0 [0099.343] FindNextFileW (in: hFindFile=0xd7079d8eb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.343] FindNextFileW (in: hFindFile=0xd7079d8eb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.343] SetLastError (dwErrCode=0x0) [0099.343] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\netframework\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.343] GetLastError () returned 0x5 [0099.343] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.343] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.343] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d9090 [0099.344] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.344] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0099.344] FindClose (in: hFindFile=0xd7079d9090 | out: hFindFile=0xd7079d9090) returned 1 [0099.344] SetLastError (dwErrCode=0x0) [0099.344] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\netframework\\breadcrumbstore\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x724 [0099.345] GetLastError () returned 0x0 [0099.345] WriteFile (in: hFile=0x724, lpBuffer=0x7ff7afca9500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpBuffer=0x7ff7afca9500*, lpNumberOfBytesWritten=0xd707b4d150*=0x324, lpOverlapped=0x0) returned 1 [0099.346] CloseHandle (hObject=0x724) returned 1 [0099.346] FindNextFileW (in: hFindFile=0xd7079d8eb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0 [0099.346] FindClose (in: hFindFile=0xd7079d8eb0 | out: hFindFile=0xd7079d8eb0) returned 1 [0099.346] SetLastError (dwErrCode=0x0) [0099.346] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\netframework\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.346] GetLastError () returned 0x5 [0099.346] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.347] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.347] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0099.347] SetLastError (dwErrCode=0x0) [0099.347] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.347] GetLastError () returned 0x5 [0099.347] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.347] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.347] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\*.*", lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0xd7079d9870 [0099.347] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.347] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.347] SetLastError (dwErrCode=0x0) [0099.347] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Network\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\network\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.348] GetLastError () returned 0x5 [0099.348] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.348] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.348] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Connections\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d8eb0 [0099.348] FindNextFileW (in: hFindFile=0xd7079d8eb0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.348] FindNextFileW (in: hFindFile=0xd7079d8eb0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0099.348] FindClose (in: hFindFile=0xd7079d8eb0 | out: hFindFile=0xd7079d8eb0) returned 1 [0099.348] SetLastError (dwErrCode=0x0) [0099.348] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Network\\Connections\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\network\\connections\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.348] GetLastError () returned 0x5 [0099.348] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.348] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.348] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.348] SetLastError (dwErrCode=0x0) [0099.349] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Network\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\network\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.349] GetLastError () returned 0x5 [0099.349] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.349] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.349] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xffffffffffffffff [0099.349] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0099.349] SetLastError (dwErrCode=0x0) [0099.349] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\network\\downloader\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.349] GetLastError () returned 0x5 [0099.349] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.349] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.349] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0 [0099.349] FindClose (in: hFindFile=0xd7079d9870 | out: hFindFile=0xd7079d9870) returned 1 [0099.352] SetLastError (dwErrCode=0x0) [0099.353] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Network\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\network\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.353] GetLastError () returned 0x5 [0099.353] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.353] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.353] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0099.353] SetLastError (dwErrCode=0x0) [0099.353] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.353] GetLastError () returned 0x5 [0099.353] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.353] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.353] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Office\\*.*", lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0xd7079d87f0 [0099.354] FindNextFileW (in: hFindFile=0xd7079d87f0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.354] FindNextFileW (in: hFindFile=0xd7079d87f0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.354] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.354] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Office\\ClickToRunPackageLocker", dwFileAttributes=0x80) returned 0 [0099.354] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Office\\ClickToRunPackageLocker" (normalized: "c:\\programdata\\microsoft\\office\\clicktorunpackagelocker"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.355] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.355] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.355] FindNextFileW (in: hFindFile=0xd7079d87f0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0 [0099.355] FindClose (in: hFindFile=0xd7079d87f0 | out: hFindFile=0xd7079d87f0) returned 1 [0099.355] SetLastError (dwErrCode=0x0) [0099.355] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Office\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\office\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.355] GetLastError () returned 0x5 [0099.355] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.355] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.355] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0099.356] SetLastError (dwErrCode=0x0) [0099.356] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.356] GetLastError () returned 0x5 [0099.356] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.356] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.356] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\*.*", lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0xd7079d8eb0 [0099.359] FindNextFileW (in: hFindFile=0xd7079d8eb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.359] FindNextFileW (in: hFindFile=0xd7079d8eb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.359] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.360] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\countrytable.xml", dwFileAttributes=0x80) returned 0 [0099.360] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\countrytable.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\countrytable.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.361] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.361] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.361] FindNextFileW (in: hFindFile=0xd7079d8eb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.361] SetLastError (dwErrCode=0x0) [0099.361] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.361] GetLastError () returned 0x5 [0099.361] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.361] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.362] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d9090 [0099.362] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.362] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.362] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.363] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\customizations.xml", dwFileAttributes=0x80) returned 0 [0099.363] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.363] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.363] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.364] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.364] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.364] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\MasterDatastore.xml", dwFileAttributes=0x80) returned 0 [0099.365] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\masterdatastore.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.365] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.365] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.366] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.366] SetLastError (dwErrCode=0x0) [0099.366] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.366] GetLastError () returned 0x5 [0099.366] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.366] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.366] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d87f0 [0099.366] FindNextFileW (in: hFindFile=0xd7079d87f0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.366] FindNextFileW (in: hFindFile=0xd7079d87f0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.366] SetLastError (dwErrCode=0x0) [0099.366] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.367] GetLastError () returned 0x5 [0099.367] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0099.367] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.367] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079d9870 [0099.367] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.367] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.367] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.367] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime\\Power_0.provxml", dwFileAttributes=0x80) returned 0 [0099.368] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime\\Power_0.provxml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\prov\\runtime\\power_0.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.368] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.368] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.368] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.368] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.369] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime\\Power_1.provxml", dwFileAttributes=0x80) returned 0 [0099.369] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime\\Power_1.provxml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\prov\\runtime\\power_1.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.369] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.369] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.369] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0099.369] FindClose (in: hFindFile=0xd7079d9870 | out: hFindFile=0xd7079d9870) returned 1 [0099.370] SetLastError (dwErrCode=0x0) [0099.370] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\prov\\runtime\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.370] GetLastError () returned 0x5 [0099.370] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0099.370] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.370] FindNextFileW (in: hFindFile=0xd7079d87f0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.370] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.370] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime.xml", dwFileAttributes=0x80) returned 0 [0099.371] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\prov\\runtime.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.371] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.371] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.371] FindNextFileW (in: hFindFile=0xd7079d87f0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0099.371] FindClose (in: hFindFile=0xd7079d87f0 | out: hFindFile=0xd7079d87f0) returned 1 [0099.371] SetLastError (dwErrCode=0x0) [0099.371] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.372] GetLastError () returned 0x5 [0099.372] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.372] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.372] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0099.372] FindClose (in: hFindFile=0xd7079d9090 | out: hFindFile=0xd7079d9090) returned 1 [0099.372] SetLastError (dwErrCode=0x0) [0099.372] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.374] GetLastError () returned 0x5 [0099.374] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.374] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.374] FindNextFileW (in: hFindFile=0xd7079d8eb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.374] SetLastError (dwErrCode=0x0) [0099.374] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.375] GetLastError () returned 0x5 [0099.375] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.375] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.375] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d9870 [0099.375] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.375] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.375] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.375] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\customizations.xml", dwFileAttributes=0x80) returned 0 [0099.376] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.377] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.377] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.377] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.377] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.377] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\MasterDatastore.xml", dwFileAttributes=0x80) returned 0 [0099.378] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\masterdatastore.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.378] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.378] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.378] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.378] SetLastError (dwErrCode=0x0) [0099.378] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.378] GetLastError () returned 0x5 [0099.378] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.379] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.379] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d9090 [0099.379] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.379] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.380] SetLastError (dwErrCode=0x0) [0099.380] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.380] GetLastError () returned 0x5 [0099.380] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0099.380] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.380] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079d91b0 [0099.380] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.380] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.380] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.381] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime\\Power_0.provxml", dwFileAttributes=0x80) returned 0 [0099.381] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime\\Power_0.provxml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\prov\\runtime\\power_0.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.381] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.381] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.381] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.381] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.382] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime\\Power_1.provxml", dwFileAttributes=0x80) returned 0 [0099.382] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime\\Power_1.provxml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\prov\\runtime\\power_1.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.382] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.382] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.383] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0099.383] FindClose (in: hFindFile=0xd7079d91b0 | out: hFindFile=0xd7079d91b0) returned 1 [0099.383] SetLastError (dwErrCode=0x0) [0099.383] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\prov\\runtime\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.383] GetLastError () returned 0x5 [0099.383] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0099.383] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.383] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.383] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.384] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime.xml", dwFileAttributes=0x80) returned 0 [0099.384] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\prov\\runtime.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.384] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.384] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.384] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0099.384] FindClose (in: hFindFile=0xd7079d9090 | out: hFindFile=0xd7079d9090) returned 1 [0099.385] SetLastError (dwErrCode=0x0) [0099.385] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.385] GetLastError () returned 0x5 [0099.385] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.385] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.385] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0099.385] FindClose (in: hFindFile=0xd7079d9870 | out: hFindFile=0xd7079d9870) returned 1 [0099.385] SetLastError (dwErrCode=0x0) [0099.385] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.385] GetLastError () returned 0x5 [0099.385] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.385] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.386] FindNextFileW (in: hFindFile=0xd7079d8eb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.386] SetLastError (dwErrCode=0x0) [0099.386] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.386] GetLastError () returned 0x5 [0099.386] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.386] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.386] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d91b0 [0099.386] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.386] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.386] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.387] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\customizations.xml", dwFileAttributes=0x80) returned 0 [0099.387] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.390] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.390] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.390] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.390] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.391] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\MasterDatastore.xml", dwFileAttributes=0x80) returned 0 [0099.392] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\masterdatastore.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.392] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.392] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.392] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.392] SetLastError (dwErrCode=0x0) [0099.392] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.393] GetLastError () returned 0x5 [0099.393] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.393] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.393] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d9870 [0099.393] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.393] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.393] SetLastError (dwErrCode=0x0) [0099.393] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.393] GetLastError () returned 0x5 [0099.393] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0099.393] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.393] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079d9e10 [0099.394] FindNextFileW (in: hFindFile=0xd7079d9e10, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.394] FindNextFileW (in: hFindFile=0xd7079d9e10, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.394] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.395] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime\\Power_0.provxml", dwFileAttributes=0x80) returned 0 [0099.395] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime\\Power_0.provxml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\prov\\runtime\\power_0.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.396] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.396] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.396] FindNextFileW (in: hFindFile=0xd7079d9e10, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.396] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.396] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime\\Power_1.provxml", dwFileAttributes=0x80) returned 0 [0099.397] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime\\Power_1.provxml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\prov\\runtime\\power_1.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.397] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.397] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.397] FindNextFileW (in: hFindFile=0xd7079d9e10, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0099.397] FindClose (in: hFindFile=0xd7079d9e10 | out: hFindFile=0xd7079d9e10) returned 1 [0099.397] SetLastError (dwErrCode=0x0) [0099.397] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\prov\\runtime\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.398] GetLastError () returned 0x5 [0099.398] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0099.398] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.398] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.398] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.398] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime.xml", dwFileAttributes=0x80) returned 0 [0099.398] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\prov\\runtime.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.399] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.399] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.399] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0099.399] FindClose (in: hFindFile=0xd7079d9870 | out: hFindFile=0xd7079d9870) returned 1 [0099.399] SetLastError (dwErrCode=0x0) [0099.399] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.399] GetLastError () returned 0x5 [0099.399] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.399] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.399] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0099.400] FindClose (in: hFindFile=0xd7079d91b0 | out: hFindFile=0xd7079d91b0) returned 1 [0099.400] SetLastError (dwErrCode=0x0) [0099.400] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.400] GetLastError () returned 0x5 [0099.400] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.400] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.400] FindNextFileW (in: hFindFile=0xd7079d8eb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.400] SetLastError (dwErrCode=0x0) [0099.400] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.400] GetLastError () returned 0x5 [0099.400] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.400] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.400] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d9390 [0099.401] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.401] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.401] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.401] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\customizations.xml", dwFileAttributes=0x80) returned 0 [0099.401] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.402] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.402] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.402] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.402] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.402] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\MasterDatastore.xml", dwFileAttributes=0x80) returned 0 [0099.402] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\masterdatastore.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.403] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.403] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.403] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.403] SetLastError (dwErrCode=0x0) [0099.403] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.407] GetLastError () returned 0x5 [0099.407] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.407] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.407] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d9870 [0099.407] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.407] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.407] SetLastError (dwErrCode=0x0) [0099.407] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.407] GetLastError () returned 0x5 [0099.407] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0099.407] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.408] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079d9c90 [0099.408] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.408] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.408] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.408] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime\\Power_0.provxml", dwFileAttributes=0x80) returned 0 [0099.409] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime\\Power_0.provxml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\prov\\runtime\\power_0.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.409] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.409] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.410] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.410] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.410] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime\\Power_1.provxml", dwFileAttributes=0x80) returned 0 [0099.410] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime\\Power_1.provxml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\prov\\runtime\\power_1.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.410] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.411] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.411] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.411] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.411] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime\\Power_2.provxml", dwFileAttributes=0x80) returned 0 [0099.411] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime\\Power_2.provxml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\prov\\runtime\\power_2.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.412] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.412] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.412] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0099.412] FindClose (in: hFindFile=0xd7079d9c90 | out: hFindFile=0xd7079d9c90) returned 1 [0099.412] SetLastError (dwErrCode=0x0) [0099.412] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\prov\\runtime\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.412] GetLastError () returned 0x5 [0099.412] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0099.412] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.413] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.413] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.413] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime.xml", dwFileAttributes=0x80) returned 0 [0099.413] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\prov\\runtime.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.413] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.413] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.414] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0099.414] FindClose (in: hFindFile=0xd7079d9870 | out: hFindFile=0xd7079d9870) returned 1 [0099.414] SetLastError (dwErrCode=0x0) [0099.414] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.414] GetLastError () returned 0x5 [0099.414] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.414] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.414] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0099.414] FindClose (in: hFindFile=0xd7079d9390 | out: hFindFile=0xd7079d9390) returned 1 [0099.414] SetLastError (dwErrCode=0x0) [0099.414] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.415] GetLastError () returned 0x5 [0099.415] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.415] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.415] FindNextFileW (in: hFindFile=0xd7079d8eb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.415] SetLastError (dwErrCode=0x0) [0099.415] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.415] GetLastError () returned 0x5 [0099.415] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.415] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.415] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d91b0 [0099.416] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.416] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.416] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.416] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\customizations.xml", dwFileAttributes=0x80) returned 0 [0099.417] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.417] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.417] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.417] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.417] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.417] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\MasterDatastore.xml", dwFileAttributes=0x80) returned 0 [0099.418] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\masterdatastore.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.418] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.418] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.418] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.418] SetLastError (dwErrCode=0x0) [0099.418] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.418] GetLastError () returned 0x5 [0099.418] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.418] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.418] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d8af0 [0099.418] FindNextFileW (in: hFindFile=0xd7079d8af0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.419] FindNextFileW (in: hFindFile=0xd7079d8af0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.419] SetLastError (dwErrCode=0x0) [0099.419] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.419] GetLastError () returned 0x5 [0099.419] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0099.419] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.419] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079d9e10 [0099.419] FindNextFileW (in: hFindFile=0xd7079d9e10, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.419] FindNextFileW (in: hFindFile=0xd7079d9e10, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.419] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.419] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime\\Power_0.provxml", dwFileAttributes=0x80) returned 0 [0099.420] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime\\Power_0.provxml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\prov\\runtime\\power_0.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.420] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.420] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.420] FindNextFileW (in: hFindFile=0xd7079d9e10, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.420] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.420] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime\\Power_1.provxml", dwFileAttributes=0x80) returned 0 [0099.420] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime\\Power_1.provxml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\prov\\runtime\\power_1.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.421] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.421] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.421] FindNextFileW (in: hFindFile=0xd7079d9e10, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.421] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.421] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime\\Power_2.provxml", dwFileAttributes=0x80) returned 0 [0099.421] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime\\Power_2.provxml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\prov\\runtime\\power_2.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.421] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.421] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.422] FindNextFileW (in: hFindFile=0xd7079d9e10, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0099.422] FindClose (in: hFindFile=0xd7079d9e10 | out: hFindFile=0xd7079d9e10) returned 1 [0099.422] SetLastError (dwErrCode=0x0) [0099.422] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\prov\\runtime\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.422] GetLastError () returned 0x5 [0099.422] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0099.422] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.422] FindNextFileW (in: hFindFile=0xd7079d8af0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.422] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.422] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime.xml", dwFileAttributes=0x80) returned 0 [0099.422] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\prov\\runtime.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.423] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.423] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.423] FindNextFileW (in: hFindFile=0xd7079d8af0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0099.423] FindClose (in: hFindFile=0xd7079d8af0 | out: hFindFile=0xd7079d8af0) returned 1 [0099.423] SetLastError (dwErrCode=0x0) [0099.423] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.423] GetLastError () returned 0x5 [0099.423] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.423] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.423] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0099.423] FindClose (in: hFindFile=0xd7079d91b0 | out: hFindFile=0xd7079d91b0) returned 1 [0099.423] SetLastError (dwErrCode=0x0) [0099.423] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.424] GetLastError () returned 0x5 [0099.424] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.424] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.424] FindNextFileW (in: hFindFile=0xd7079d8eb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.424] SetLastError (dwErrCode=0x0) [0099.424] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.424] GetLastError () returned 0x5 [0099.424] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.424] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.424] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d9090 [0099.424] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.424] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.424] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.424] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\customizations.xml", dwFileAttributes=0x80) returned 0 [0099.425] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.425] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.425] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.425] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.425] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.426] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\MasterDatastore.xml", dwFileAttributes=0x80) returned 0 [0099.426] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\masterdatastore.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.426] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.426] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.426] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.426] SetLastError (dwErrCode=0x0) [0099.426] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.427] GetLastError () returned 0x5 [0099.427] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.427] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.427] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d9870 [0099.427] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.427] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.427] SetLastError (dwErrCode=0x0) [0099.427] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.427] GetLastError () returned 0x5 [0099.427] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0099.427] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.428] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RunTime\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079d9c90 [0099.428] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.428] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.428] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.428] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RunTime\\Power_0.provxml", dwFileAttributes=0x80) returned 0 [0099.428] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RunTime\\Power_0.provxml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\prov\\runtime\\power_0.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.428] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.428] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.428] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0099.429] FindClose (in: hFindFile=0xd7079d9c90 | out: hFindFile=0xd7079d9c90) returned 1 [0099.429] SetLastError (dwErrCode=0x0) [0099.429] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RunTime\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\prov\\runtime\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.429] GetLastError () returned 0x5 [0099.429] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0099.429] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.429] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.429] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.429] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RunTime.xml", dwFileAttributes=0x80) returned 0 [0099.429] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\prov\\runtime.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.430] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.430] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.430] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0099.430] FindClose (in: hFindFile=0xd7079d9870 | out: hFindFile=0xd7079d9870) returned 1 [0099.430] SetLastError (dwErrCode=0x0) [0099.430] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.430] GetLastError () returned 0x5 [0099.430] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.430] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.430] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0099.430] FindClose (in: hFindFile=0xd7079d9090 | out: hFindFile=0xd7079d9090) returned 1 [0099.430] SetLastError (dwErrCode=0x0) [0099.430] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.430] GetLastError () returned 0x5 [0099.430] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.430] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.431] FindNextFileW (in: hFindFile=0xd7079d8eb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.431] SetLastError (dwErrCode=0x0) [0099.431] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.431] GetLastError () returned 0x5 [0099.431] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.431] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.431] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d9990 [0099.431] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.431] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.431] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.431] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\customizations.xml", dwFileAttributes=0x80) returned 0 [0099.431] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.432] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.432] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.432] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.432] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.432] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\MasterDatastore.xml", dwFileAttributes=0x80) returned 0 [0099.433] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\masterdatastore.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.433] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.433] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.433] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.433] SetLastError (dwErrCode=0x0) [0099.433] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.433] GetLastError () returned 0x5 [0099.433] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.433] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.433] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d9870 [0099.434] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.434] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.434] SetLastError (dwErrCode=0x0) [0099.434] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.434] GetLastError () returned 0x5 [0099.434] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0099.434] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.434] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RunTime\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079d91b0 [0099.434] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.434] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.434] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.436] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RunTime\\Power_0.provxml", dwFileAttributes=0x80) returned 0 [0099.436] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RunTime\\Power_0.provxml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\prov\\runtime\\power_0.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.437] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.437] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.437] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0099.437] FindClose (in: hFindFile=0xd7079d91b0 | out: hFindFile=0xd7079d91b0) returned 1 [0099.437] SetLastError (dwErrCode=0x0) [0099.437] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RunTime\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\prov\\runtime\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.437] GetLastError () returned 0x5 [0099.437] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0099.438] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.438] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.438] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.438] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RunTime.xml", dwFileAttributes=0x80) returned 0 [0099.439] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\prov\\runtime.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.439] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.439] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.439] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0099.439] FindClose (in: hFindFile=0xd7079d9870 | out: hFindFile=0xd7079d9870) returned 1 [0099.439] SetLastError (dwErrCode=0x0) [0099.439] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.440] GetLastError () returned 0x5 [0099.440] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.440] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.440] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0099.440] FindClose (in: hFindFile=0xd7079d9990 | out: hFindFile=0xd7079d9990) returned 1 [0099.440] SetLastError (dwErrCode=0x0) [0099.440] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.440] GetLastError () returned 0x5 [0099.440] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.440] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.440] FindNextFileW (in: hFindFile=0xd7079d8eb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.440] SetLastError (dwErrCode=0x0) [0099.440] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.441] GetLastError () returned 0x5 [0099.441] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.441] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.441] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d9c90 [0099.441] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.441] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.441] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.441] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\customizations.xml", dwFileAttributes=0x80) returned 0 [0099.441] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.442] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.442] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.442] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.442] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.442] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\MasterDatastore.xml", dwFileAttributes=0x80) returned 0 [0099.442] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\masterdatastore.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.442] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.443] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.443] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.443] SetLastError (dwErrCode=0x0) [0099.443] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.443] GetLastError () returned 0x5 [0099.443] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.443] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.443] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d9090 [0099.443] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.443] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.443] SetLastError (dwErrCode=0x0) [0099.443] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.443] GetLastError () returned 0x5 [0099.443] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0099.444] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.444] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RunTime\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079d91b0 [0099.444] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.444] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.444] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.444] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RunTime\\Power_0.provxml", dwFileAttributes=0x80) returned 0 [0099.444] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RunTime\\Power_0.provxml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\prov\\runtime\\power_0.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.444] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.444] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.445] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0099.445] FindClose (in: hFindFile=0xd7079d91b0 | out: hFindFile=0xd7079d91b0) returned 1 [0099.445] SetLastError (dwErrCode=0x0) [0099.445] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RunTime\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\prov\\runtime\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.445] GetLastError () returned 0x5 [0099.445] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0099.445] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.445] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.445] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.445] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RunTime.xml", dwFileAttributes=0x80) returned 0 [0099.446] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\prov\\runtime.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.446] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.446] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.446] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0099.446] FindClose (in: hFindFile=0xd7079d9090 | out: hFindFile=0xd7079d9090) returned 1 [0099.446] SetLastError (dwErrCode=0x0) [0099.446] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.446] GetLastError () returned 0x5 [0099.446] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.446] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.446] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0099.446] FindClose (in: hFindFile=0xd7079d9c90 | out: hFindFile=0xd7079d9c90) returned 1 [0099.446] SetLastError (dwErrCode=0x0) [0099.447] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.447] GetLastError () returned 0x5 [0099.447] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.447] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.447] FindNextFileW (in: hFindFile=0xd7079d8eb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.447] SetLastError (dwErrCode=0x0) [0099.447] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.447] GetLastError () returned 0x5 [0099.447] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.447] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.447] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d9870 [0099.448] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.448] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.448] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.448] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\customizations.xml", dwFileAttributes=0x80) returned 0 [0099.448] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.449] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.449] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.449] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.449] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.449] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\MasterDatastore.xml", dwFileAttributes=0x80) returned 0 [0099.449] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\masterdatastore.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.450] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.450] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.450] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.450] SetLastError (dwErrCode=0x0) [0099.450] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.450] GetLastError () returned 0x5 [0099.450] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.450] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.450] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d9990 [0099.450] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.450] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.450] SetLastError (dwErrCode=0x0) [0099.450] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.451] GetLastError () returned 0x5 [0099.451] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0099.451] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.451] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079d8910 [0099.451] FindNextFileW (in: hFindFile=0xd7079d8910, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.451] FindNextFileW (in: hFindFile=0xd7079d8910, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.451] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.451] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime\\Power_0.provxml", dwFileAttributes=0x80) returned 0 [0099.452] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime\\Power_0.provxml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\prov\\runtime\\power_0.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.452] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.452] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.452] FindNextFileW (in: hFindFile=0xd7079d8910, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.452] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.453] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime\\Power_1.provxml", dwFileAttributes=0x80) returned 0 [0099.453] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime\\Power_1.provxml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\prov\\runtime\\power_1.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.453] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.453] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.454] FindNextFileW (in: hFindFile=0xd7079d8910, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0099.454] FindClose (in: hFindFile=0xd7079d8910 | out: hFindFile=0xd7079d8910) returned 1 [0099.454] SetLastError (dwErrCode=0x0) [0099.454] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\prov\\runtime\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.454] GetLastError () returned 0x5 [0099.454] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0099.454] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.454] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.454] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.454] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime.xml", dwFileAttributes=0x80) returned 0 [0099.454] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\prov\\runtime.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.455] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.455] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.455] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0099.455] FindClose (in: hFindFile=0xd7079d9990 | out: hFindFile=0xd7079d9990) returned 1 [0099.455] SetLastError (dwErrCode=0x0) [0099.455] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.455] GetLastError () returned 0x5 [0099.455] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.455] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.455] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0099.455] FindClose (in: hFindFile=0xd7079d9870 | out: hFindFile=0xd7079d9870) returned 1 [0099.455] SetLastError (dwErrCode=0x0) [0099.455] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.456] GetLastError () returned 0x5 [0099.456] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.456] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.456] FindNextFileW (in: hFindFile=0xd7079d8eb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.456] SetLastError (dwErrCode=0x0) [0099.456] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.456] GetLastError () returned 0x5 [0099.456] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.456] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.456] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d9870 [0099.456] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.456] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.456] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.456] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\customizations.xml", dwFileAttributes=0x80) returned 0 [0099.457] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.457] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.457] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.457] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.457] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.457] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\MasterDatastore.xml", dwFileAttributes=0x80) returned 0 [0099.457] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\masterdatastore.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.458] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.458] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.458] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.458] SetLastError (dwErrCode=0x0) [0099.458] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.458] GetLastError () returned 0x5 [0099.458] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.458] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.458] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d9c90 [0099.459] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.459] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.459] SetLastError (dwErrCode=0x0) [0099.459] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.459] GetLastError () returned 0x5 [0099.459] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0099.459] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.459] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RunTime\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079d9090 [0099.459] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.459] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.459] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.460] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RunTime\\Power_0.provxml", dwFileAttributes=0x80) returned 0 [0099.460] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RunTime\\Power_0.provxml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\prov\\runtime\\power_0.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.460] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.460] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.461] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0099.461] FindClose (in: hFindFile=0xd7079d9090 | out: hFindFile=0xd7079d9090) returned 1 [0099.461] SetLastError (dwErrCode=0x0) [0099.461] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RunTime\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\prov\\runtime\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.461] GetLastError () returned 0x5 [0099.461] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0099.461] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.461] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.461] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.461] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RunTime.xml", dwFileAttributes=0x80) returned 0 [0099.461] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\prov\\runtime.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.462] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.462] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.462] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0099.462] FindClose (in: hFindFile=0xd7079d9c90 | out: hFindFile=0xd7079d9c90) returned 1 [0099.462] SetLastError (dwErrCode=0x0) [0099.462] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.462] GetLastError () returned 0x5 [0099.462] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.462] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.462] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0099.462] FindClose (in: hFindFile=0xd7079d9870 | out: hFindFile=0xd7079d9870) returned 1 [0099.462] SetLastError (dwErrCode=0x0) [0099.462] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.463] GetLastError () returned 0x5 [0099.463] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.463] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.463] FindNextFileW (in: hFindFile=0xd7079d8eb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.463] SetLastError (dwErrCode=0x0) [0099.463] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.463] GetLastError () returned 0x5 [0099.463] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.463] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.463] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d87f0 [0099.463] FindNextFileW (in: hFindFile=0xd7079d87f0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.463] FindNextFileW (in: hFindFile=0xd7079d87f0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.463] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.463] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\customizations.xml", dwFileAttributes=0x80) returned 0 [0099.464] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.464] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.464] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.464] FindNextFileW (in: hFindFile=0xd7079d87f0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.464] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.464] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\MasterDatastore.xml", dwFileAttributes=0x80) returned 0 [0099.465] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\masterdatastore.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.465] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.465] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.465] FindNextFileW (in: hFindFile=0xd7079d87f0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.465] SetLastError (dwErrCode=0x0) [0099.465] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.466] GetLastError () returned 0x5 [0099.466] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.466] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.466] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d9870 [0099.466] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.468] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.468] SetLastError (dwErrCode=0x0) [0099.468] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.468] GetLastError () returned 0x5 [0099.468] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0099.468] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.468] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\RunTime\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079d8910 [0099.469] FindNextFileW (in: hFindFile=0xd7079d8910, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.469] FindNextFileW (in: hFindFile=0xd7079d8910, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.469] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.469] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\RunTime\\Power_0.provxml", dwFileAttributes=0x80) returned 0 [0099.469] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\RunTime\\Power_0.provxml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\prov\\runtime\\power_0.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.470] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.470] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.470] FindNextFileW (in: hFindFile=0xd7079d8910, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0099.470] FindClose (in: hFindFile=0xd7079d8910 | out: hFindFile=0xd7079d8910) returned 1 [0099.470] SetLastError (dwErrCode=0x0) [0099.470] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\RunTime\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\prov\\runtime\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.470] GetLastError () returned 0x5 [0099.470] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0099.470] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.470] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.470] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.471] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\RunTime.xml", dwFileAttributes=0x80) returned 0 [0099.471] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\prov\\runtime.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.471] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.471] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.471] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0099.471] FindClose (in: hFindFile=0xd7079d9870 | out: hFindFile=0xd7079d9870) returned 1 [0099.471] SetLastError (dwErrCode=0x0) [0099.471] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.472] GetLastError () returned 0x5 [0099.472] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.472] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.472] FindNextFileW (in: hFindFile=0xd7079d87f0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0099.472] FindClose (in: hFindFile=0xd7079d87f0 | out: hFindFile=0xd7079d87f0) returned 1 [0099.472] SetLastError (dwErrCode=0x0) [0099.472] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.472] GetLastError () returned 0x5 [0099.472] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.472] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.472] FindNextFileW (in: hFindFile=0xd7079d8eb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.472] SetLastError (dwErrCode=0x0) [0099.472] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.472] GetLastError () returned 0x5 [0099.472] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.472] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.472] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d9c90 [0099.473] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.473] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.473] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.473] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\customizations.xml", dwFileAttributes=0x80) returned 0 [0099.474] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.474] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.474] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.474] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.474] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.474] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\MasterDatastore.xml", dwFileAttributes=0x80) returned 0 [0099.475] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\masterdatastore.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.475] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.475] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.475] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.475] SetLastError (dwErrCode=0x0) [0099.475] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.475] GetLastError () returned 0x5 [0099.475] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.475] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.475] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d9e10 [0099.475] FindNextFileW (in: hFindFile=0xd7079d9e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.475] FindNextFileW (in: hFindFile=0xd7079d9e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.475] SetLastError (dwErrCode=0x0) [0099.475] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.476] GetLastError () returned 0x5 [0099.476] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0099.476] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.476] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RunTime\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079d9870 [0099.476] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.476] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.476] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.476] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RunTime\\Power_0.provxml", dwFileAttributes=0x80) returned 0 [0099.476] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RunTime\\Power_0.provxml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\prov\\runtime\\power_0.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.477] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.477] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.477] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.477] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.477] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RunTime\\Power_1.provxml", dwFileAttributes=0x80) returned 0 [0099.477] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RunTime\\Power_1.provxml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\prov\\runtime\\power_1.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.477] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.478] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.478] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0099.478] FindClose (in: hFindFile=0xd7079d9870 | out: hFindFile=0xd7079d9870) returned 1 [0099.478] SetLastError (dwErrCode=0x0) [0099.478] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RunTime\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\prov\\runtime\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.478] GetLastError () returned 0x5 [0099.478] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0099.478] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.478] FindNextFileW (in: hFindFile=0xd7079d9e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.478] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.478] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RunTime.xml", dwFileAttributes=0x80) returned 0 [0099.479] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\prov\\runtime.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.479] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.479] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.479] FindNextFileW (in: hFindFile=0xd7079d9e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0099.479] FindClose (in: hFindFile=0xd7079d9e10 | out: hFindFile=0xd7079d9e10) returned 1 [0099.479] SetLastError (dwErrCode=0x0) [0099.479] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.479] GetLastError () returned 0x5 [0099.479] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.479] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.479] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0099.480] FindClose (in: hFindFile=0xd7079d9c90 | out: hFindFile=0xd7079d9c90) returned 1 [0099.480] SetLastError (dwErrCode=0x0) [0099.480] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.480] GetLastError () returned 0x5 [0099.480] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.480] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.480] FindNextFileW (in: hFindFile=0xd7079d8eb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.480] SetLastError (dwErrCode=0x0) [0099.480] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.480] GetLastError () returned 0x5 [0099.480] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.480] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.480] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d8910 [0099.481] FindNextFileW (in: hFindFile=0xd7079d8910, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.481] FindNextFileW (in: hFindFile=0xd7079d8910, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.481] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.481] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\customizations.xml", dwFileAttributes=0x80) returned 0 [0099.482] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.482] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.482] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.482] FindNextFileW (in: hFindFile=0xd7079d8910, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.482] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.483] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\MasterDatastore.xml", dwFileAttributes=0x80) returned 0 [0099.483] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\masterdatastore.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.483] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.483] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.483] FindNextFileW (in: hFindFile=0xd7079d8910, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.483] SetLastError (dwErrCode=0x0) [0099.483] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.483] GetLastError () returned 0x5 [0099.483] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.483] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.483] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d9390 [0099.484] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.484] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.484] SetLastError (dwErrCode=0x0) [0099.484] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.484] GetLastError () returned 0x5 [0099.484] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0099.484] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.484] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079d91b0 [0099.485] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.485] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.485] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.485] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\Power_0.provxml", dwFileAttributes=0x80) returned 0 [0099.486] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\Power_0.provxml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\prov\\runtime\\power_0.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.486] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.486] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.486] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.486] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.486] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\Power_1.provxml", dwFileAttributes=0x80) returned 0 [0099.486] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\Power_1.provxml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\prov\\runtime\\power_1.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.487] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.487] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.487] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.487] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.487] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\Power_2.provxml", dwFileAttributes=0x80) returned 0 [0099.488] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\Power_2.provxml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\prov\\runtime\\power_2.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.488] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.488] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.488] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.488] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.488] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\Power_3.provxml", dwFileAttributes=0x80) returned 0 [0099.489] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\Power_3.provxml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\prov\\runtime\\power_3.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.489] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.489] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.489] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.489] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.489] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\Power_4.provxml", dwFileAttributes=0x80) returned 0 [0099.489] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\Power_4.provxml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\prov\\runtime\\power_4.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.490] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.490] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.490] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.490] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.490] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\Power_5.provxml", dwFileAttributes=0x80) returned 0 [0099.490] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\Power_5.provxml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\prov\\runtime\\power_5.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.491] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.491] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.491] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.491] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.491] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\Power_6.provxml", dwFileAttributes=0x80) returned 0 [0099.492] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\Power_6.provxml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\prov\\runtime\\power_6.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.492] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.492] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.492] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0099.492] FindClose (in: hFindFile=0xd7079d91b0 | out: hFindFile=0xd7079d91b0) returned 1 [0099.493] SetLastError (dwErrCode=0x0) [0099.493] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\prov\\runtime\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.496] GetLastError () returned 0x5 [0099.496] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0099.496] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.496] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.496] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.496] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime.xml", dwFileAttributes=0x80) returned 0 [0099.496] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\prov\\runtime.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.497] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.497] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.497] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0099.497] FindClose (in: hFindFile=0xd7079d9390 | out: hFindFile=0xd7079d9390) returned 1 [0099.497] SetLastError (dwErrCode=0x0) [0099.497] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.499] GetLastError () returned 0x5 [0099.499] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.499] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.499] FindNextFileW (in: hFindFile=0xd7079d8910, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0099.499] FindClose (in: hFindFile=0xd7079d8910 | out: hFindFile=0xd7079d8910) returned 1 [0099.499] SetLastError (dwErrCode=0x0) [0099.499] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.500] GetLastError () returned 0x5 [0099.500] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.500] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.500] FindNextFileW (in: hFindFile=0xd7079d8eb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0 [0099.500] FindClose (in: hFindFile=0xd7079d8eb0 | out: hFindFile=0xd7079d8eb0) returned 1 [0099.500] SetLastError (dwErrCode=0x0) [0099.500] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.500] GetLastError () returned 0x5 [0099.500] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.500] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.500] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0099.500] SetLastError (dwErrCode=0x0) [0099.500] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.500] GetLastError () returned 0x5 [0099.500] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.500] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.500] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\*.*", lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0xd7079d93f0 [0099.501] FindNextFileW (in: hFindFile=0xd7079d93f0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.501] FindNextFileW (in: hFindFile=0xd7079d93f0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.501] SetLastError (dwErrCode=0x0) [0099.501] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Search\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\search\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.501] GetLastError () returned 0x5 [0099.501] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.501] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.501] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xffffffffffffffff [0099.502] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0099.502] SetLastError (dwErrCode=0x0) [0099.502] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\search\\data\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.502] GetLastError () returned 0x5 [0099.502] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.502] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.502] FindNextFileW (in: hFindFile=0xd7079d93f0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0 [0099.502] FindClose (in: hFindFile=0xd7079d93f0 | out: hFindFile=0xd7079d93f0) returned 1 [0099.502] SetLastError (dwErrCode=0x0) [0099.502] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Search\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\search\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.502] GetLastError () returned 0x5 [0099.502] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.502] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.502] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0099.502] SetLastError (dwErrCode=0x0) [0099.502] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.502] GetLastError () returned 0x5 [0099.502] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.503] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.503] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\SmsRouter\\*.*", lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0xffffffffffffffff [0099.503] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0099.503] SetLastError (dwErrCode=0x0) [0099.503] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\SmsRouter\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\smsrouter\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.503] GetLastError () returned 0x5 [0099.503] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.503] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.503] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0099.503] SetLastError (dwErrCode=0x0) [0099.503] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.504] GetLastError () returned 0x5 [0099.504] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.504] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.504] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\*.*", lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0xd7079d8eb0 [0099.504] FindNextFileW (in: hFindFile=0xd7079d8eb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.504] FindNextFileW (in: hFindFile=0xd7079d8eb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.504] FindNextFileW (in: hFindFile=0xd7079d8eb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.504] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.504] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\CIiHmnxMn6Ps.dat", dwFileAttributes=0x80) returned 1 [0099.505] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\CIiHmnxMn6Ps.dat" (normalized: "c:\\programdata\\microsoft\\user account pictures\\ciihmnxmn6ps.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x724 [0099.505] GetFileSizeEx (in: hFile=0x724, lpFileSize=0xd707b4cf48 | out: lpFileSize=0xd707b4cf48*=0) returned 1 [0099.505] GetFileSizeEx (in: hFile=0x724, lpFileSize=0xd707b4cf58 | out: lpFileSize=0xd707b4cf58*=0) returned 1 [0099.505] CloseHandle (hObject=0x724) returned 1 [0099.505] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.505] FindNextFileW (in: hFindFile=0xd7079d8eb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.505] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.505] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp", dwFileAttributes=0x80) returned 0 [0099.506] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\guest.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.506] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.506] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.506] FindNextFileW (in: hFindFile=0xd7079d8eb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.506] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.507] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.png", dwFileAttributes=0x80) returned 0 [0099.507] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.png" (normalized: "c:\\programdata\\microsoft\\user account pictures\\guest.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.507] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.507] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.507] FindNextFileW (in: hFindFile=0xd7079d8eb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.507] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.508] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-192.png", dwFileAttributes=0x80) returned 0 [0099.508] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-192.png" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user-192.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.508] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.508] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.508] FindNextFileW (in: hFindFile=0xd7079d8eb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.508] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.508] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-32.png", dwFileAttributes=0x80) returned 0 [0099.509] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-32.png" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user-32.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.509] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.509] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.509] FindNextFileW (in: hFindFile=0xd7079d8eb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.509] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.509] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-40.png", dwFileAttributes=0x80) returned 0 [0099.510] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-40.png" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user-40.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.510] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.510] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.510] FindNextFileW (in: hFindFile=0xd7079d8eb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.510] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.510] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-48.png", dwFileAttributes=0x80) returned 0 [0099.510] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-48.png" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user-48.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.511] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.511] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.511] FindNextFileW (in: hFindFile=0xd7079d8eb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.511] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.511] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp", dwFileAttributes=0x80) returned 0 [0099.511] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.511] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.511] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.512] FindNextFileW (in: hFindFile=0xd7079d8eb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.512] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.512] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.png", dwFileAttributes=0x80) returned 0 [0099.512] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.png" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.512] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.512] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.513] FindNextFileW (in: hFindFile=0xd7079d8eb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0 [0099.513] FindClose (in: hFindFile=0xd7079d8eb0 | out: hFindFile=0xd7079d8eb0) returned 1 [0099.514] SetLastError (dwErrCode=0x0) [0099.514] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\user account pictures\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x720 [0099.515] GetLastError () returned 0x0 [0099.515] WriteFile (in: hFile=0x720, lpBuffer=0x7ff7afca9500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpBuffer=0x7ff7afca9500*, lpNumberOfBytesWritten=0xd707b4d900*=0x324, lpOverlapped=0x0) returned 1 [0099.516] CloseHandle (hObject=0x720) returned 1 [0099.516] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0099.516] SetLastError (dwErrCode=0x0) [0099.516] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.516] GetLastError () returned 0x5 [0099.516] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.517] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.517] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Vault\\*.*", lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0xd7079d8af0 [0099.517] FindNextFileW (in: hFindFile=0xd7079d8af0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.517] FindNextFileW (in: hFindFile=0xd7079d8af0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.517] SetLastError (dwErrCode=0x0) [0099.517] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Vault\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\vault\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.517] GetLastError () returned 0x5 [0099.517] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.517] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.517] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d9870 [0099.517] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.517] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.517] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.518] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204\\154E23D0-C644-4E6F-8CE6-5069272F999F.vsch", dwFileAttributes=0x80) returned 0 [0099.518] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204\\154E23D0-C644-4E6F-8CE6-5069272F999F.vsch" (normalized: "c:\\programdata\\microsoft\\vault\\ac658cb4-9126-49bd-b877-31eedab3f204\\154e23d0-c644-4e6f-8ce6-5069272f999f.vsch"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.518] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.518] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.518] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.518] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.519] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204\\2F1A6504-0641-44CF-8BB5-3612D865F2E5.vsch", dwFileAttributes=0x80) returned 0 [0099.519] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204\\2F1A6504-0641-44CF-8BB5-3612D865F2E5.vsch" (normalized: "c:\\programdata\\microsoft\\vault\\ac658cb4-9126-49bd-b877-31eedab3f204\\2f1a6504-0641-44cf-8bb5-3612d865f2e5.vsch"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.519] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.519] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.519] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.519] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.519] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204\\3CCD5499-87A8-4B10-A215-608888DD3B55.vsch", dwFileAttributes=0x80) returned 0 [0099.520] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204\\3CCD5499-87A8-4B10-A215-608888DD3B55.vsch" (normalized: "c:\\programdata\\microsoft\\vault\\ac658cb4-9126-49bd-b877-31eedab3f204\\3ccd5499-87a8-4b10-a215-608888dd3b55.vsch"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.520] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.520] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.520] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.520] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.520] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204\\Policy.vpol", dwFileAttributes=0x80) returned 0 [0099.521] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204\\Policy.vpol" (normalized: "c:\\programdata\\microsoft\\vault\\ac658cb4-9126-49bd-b877-31eedab3f204\\policy.vpol"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.521] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.521] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.521] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0099.521] FindClose (in: hFindFile=0xd7079d9870 | out: hFindFile=0xd7079d9870) returned 1 [0099.521] SetLastError (dwErrCode=0x0) [0099.521] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\vault\\ac658cb4-9126-49bd-b877-31eedab3f204\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.521] GetLastError () returned 0x5 [0099.521] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.521] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.521] FindNextFileW (in: hFindFile=0xd7079d8af0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0 [0099.521] FindClose (in: hFindFile=0xd7079d8af0 | out: hFindFile=0xd7079d8af0) returned 1 [0099.521] SetLastError (dwErrCode=0x0) [0099.521] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Vault\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\vault\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.522] GetLastError () returned 0x5 [0099.522] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.522] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.522] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0099.522] SetLastError (dwErrCode=0x0) [0099.522] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.522] GetLastError () returned 0x5 [0099.522] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.522] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.522] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\WDF\\*.*", lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0xd7079d91b0 [0099.522] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.522] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0 [0099.522] FindClose (in: hFindFile=0xd7079d91b0 | out: hFindFile=0xd7079d91b0) returned 1 [0099.522] SetLastError (dwErrCode=0x0) [0099.522] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\WDF\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\wdf\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.523] GetLastError () returned 0x5 [0099.523] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.523] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.523] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0099.523] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0099.523] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0099.523] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0099.523] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0099.523] SetLastError (dwErrCode=0x0) [0099.523] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.523] GetLastError () returned 0x5 [0099.523] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.523] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.523] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\WinMSIPC\\*.*", lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0xd7079d9c90 [0099.524] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.524] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.524] SetLastError (dwErrCode=0x0) [0099.524] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\WinMSIPC\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\winmsipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.524] GetLastError () returned 0x5 [0099.524] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.524] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.524] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\WinMSIPC\\Server\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d8910 [0099.524] FindNextFileW (in: hFindFile=0xd7079d8910, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.524] FindNextFileW (in: hFindFile=0xd7079d8910, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0099.524] FindClose (in: hFindFile=0xd7079d8910 | out: hFindFile=0xd7079d8910) returned 1 [0099.524] SetLastError (dwErrCode=0x0) [0099.524] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\WinMSIPC\\Server\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\winmsipc\\server\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.524] GetLastError () returned 0x5 [0099.524] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.524] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.525] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0 [0099.525] FindClose (in: hFindFile=0xd7079d9c90 | out: hFindFile=0xd7079d9c90) returned 1 [0099.525] SetLastError (dwErrCode=0x0) [0099.525] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\WinMSIPC\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\winmsipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.525] GetLastError () returned 0x5 [0099.525] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.525] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.525] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0099.525] SetLastError (dwErrCode=0x0) [0099.525] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.525] GetLastError () returned 0x5 [0099.525] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.525] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.525] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\*.*", lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0xd7079d9c90 [0099.525] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.525] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.525] SetLastError (dwErrCode=0x0) [0099.526] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\wwansvc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.526] GetLastError () returned 0x5 [0099.526] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.526] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.526] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\DMProfiles\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d9390 [0099.526] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.526] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0099.526] FindClose (in: hFindFile=0xd7079d9390 | out: hFindFile=0xd7079d9390) returned 1 [0099.526] SetLastError (dwErrCode=0x0) [0099.526] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\DMProfiles\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\wwansvc\\dmprofiles\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.526] GetLastError () returned 0x5 [0099.526] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.526] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.526] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.526] SetLastError (dwErrCode=0x0) [0099.526] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\wwansvc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.527] GetLastError () returned 0x5 [0099.527] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.527] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.527] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d91b0 [0099.527] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.527] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0099.527] FindClose (in: hFindFile=0xd7079d91b0 | out: hFindFile=0xd7079d91b0) returned 1 [0099.527] SetLastError (dwErrCode=0x0) [0099.527] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\wwansvc\\profiles\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.527] GetLastError () returned 0x5 [0099.527] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.527] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.527] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0 [0099.527] FindClose (in: hFindFile=0xd7079d9c90 | out: hFindFile=0xd7079d9c90) returned 1 [0099.527] SetLastError (dwErrCode=0x0) [0099.527] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\wwansvc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.528] GetLastError () returned 0x5 [0099.528] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.528] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.528] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0 [0099.528] FindClose (in: hFindFile=0xd7079d8d30 | out: hFindFile=0xd7079d8d30) returned 1 [0099.528] SetLastError (dwErrCode=0x0) [0099.528] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.528] GetLastError () returned 0x5 [0099.528] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0099.528] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.528] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 1 [0099.528] SetLastError (dwErrCode=0x0) [0099.528] CreateFileW (lpFileName="C:\\ProgramData\\RyukReadMe.txt" (normalized: "c:\\programdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x71c [0099.529] GetLastError () returned 0xb7 [0099.529] CloseHandle (hObject=0x71c) returned 1 [0099.529] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft OneDrive\\*.*", lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0xd7079d8af0 [0099.530] FindNextFileW (in: hFindFile=0xd7079d8af0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0099.530] FindNextFileW (in: hFindFile=0xd7079d8af0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0099.530] SetLastError (dwErrCode=0x0) [0099.530] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft OneDrive\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft onedrive\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x720 [0099.530] GetLastError () returned 0x0 [0099.530] WriteFile (in: hFile=0x720, lpBuffer=0x7ff7afca9500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpBuffer=0x7ff7afca9500*, lpNumberOfBytesWritten=0xd707b4d900*=0x324, lpOverlapped=0x0) returned 1 [0099.531] CloseHandle (hObject=0x720) returned 1 [0099.531] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft OneDrive\\setup\\*.*", lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0xd7079d9870 [0099.531] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.531] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0 [0099.531] FindClose (in: hFindFile=0xd7079d9870 | out: hFindFile=0xd7079d9870) returned 1 [0099.531] SetLastError (dwErrCode=0x0) [0099.531] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft OneDrive\\setup\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft onedrive\\setup\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x720 [0099.532] GetLastError () returned 0x0 [0099.532] WriteFile (in: hFile=0x720, lpBuffer=0x7ff7afca9500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpBuffer=0x7ff7afca9500*, lpNumberOfBytesWritten=0xd707b4d900*=0x324, lpOverlapped=0x0) returned 1 [0099.532] CloseHandle (hObject=0x720) returned 1 [0099.532] FindNextFileW (in: hFindFile=0xd7079d8af0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0 [0099.532] FindClose (in: hFindFile=0xd7079d8af0 | out: hFindFile=0xd7079d8af0) returned 1 [0099.532] SetLastError (dwErrCode=0x0) [0099.533] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft OneDrive\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft onedrive\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x71c [0099.533] GetLastError () returned 0xb7 [0099.533] CloseHandle (hObject=0x71c) returned 1 [0099.533] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 1 [0099.533] SetLastError (dwErrCode=0x0) [0099.533] CreateFileW (lpFileName="C:\\ProgramData\\RyukReadMe.txt" (normalized: "c:\\programdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x71c [0099.533] GetLastError () returned 0xb7 [0099.533] CloseHandle (hObject=0x71c) returned 1 [0099.533] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Oracle\\*.*", lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0xd7079d91b0 [0099.533] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0099.533] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0099.533] SetLastError (dwErrCode=0x0) [0099.533] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\RyukReadMe.txt" (normalized: "c:\\programdata\\oracle\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x720 [0099.534] GetLastError () returned 0x0 [0099.534] WriteFile (in: hFile=0x720, lpBuffer=0x7ff7afca9500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpBuffer=0x7ff7afca9500*, lpNumberOfBytesWritten=0xd707b4d900*=0x324, lpOverlapped=0x0) returned 1 [0099.534] CloseHandle (hObject=0x720) returned 1 [0099.535] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\*.*", lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0xd7079d8af0 [0099.535] FindNextFileW (in: hFindFile=0xd7079d8af0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.535] FindNextFileW (in: hFindFile=0xd7079d8af0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.535] SetLastError (dwErrCode=0x0) [0099.535] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\RyukReadMe.txt" (normalized: "c:\\programdata\\oracle\\java\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x724 [0099.536] GetLastError () returned 0x0 [0099.536] WriteFile (in: hFile=0x724, lpBuffer=0x7ff7afca9500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpBuffer=0x7ff7afca9500*, lpNumberOfBytesWritten=0xd707b4d150*=0x324, lpOverlapped=0x0) returned 1 [0099.537] CloseHandle (hObject=0x724) returned 1 [0099.537] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\.oracle_jre_usage\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d9c90 [0099.537] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.537] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.537] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.537] SetFileAttributesW (lpFileName="C:\\ProgramData\\Oracle\\Java\\.oracle_jre_usage\\17dfc292991c7c24.timestamp", dwFileAttributes=0x80) returned 1 [0099.538] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\.oracle_jre_usage\\17dfc292991c7c24.timestamp" (normalized: "c:\\programdata\\oracle\\java\\.oracle_jre_usage\\17dfc292991c7c24.timestamp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x728 [0099.538] GetFileSizeEx (in: hFile=0x728, lpFileSize=0xd707b4c798 | out: lpFileSize=0xd707b4c798*=51) returned 1 [0099.538] GetFileSizeEx (in: hFile=0x728, lpFileSize=0xd707b4c7a8 | out: lpFileSize=0xd707b4c7a8*=51) returned 1 [0099.538] CryptGenKey (in: hProv=0xd7079ce2d0, Algid=0x6610, dwFlags=0x1, phKey=0xd707b4c780 | out: phKey=0xd707b4c780*=0xd707996620) returned 1 [0099.538] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0xd70aa60000 [0099.539] SetFilePointer (in: hFile=0x728, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0099.539] ReadFile (in: hFile=0x728, lpBuffer=0xd70aa60000, nNumberOfBytesToRead=0x33, lpNumberOfBytesRead=0xd707b4c790, lpOverlapped=0x0 | out: lpBuffer=0xd70aa60000*, lpNumberOfBytesRead=0xd707b4c790*=0x33, lpOverlapped=0x0) returned 1 [0099.540] CryptEncrypt (in: hKey=0xd707996620, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xd707b4c78c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xd707b4c78c*=0xf4250) returned 1 [0099.540] CryptEncrypt (in: hKey=0xd707996620, hHash=0x0, Final=1, dwFlags=0x0, pbData=0xd70aa60000*, pdwDataLen=0xd707b4c788*=0x33, dwBufLen=0xf4250 | out: pbData=0xd70aa60000*, pdwDataLen=0xd707b4c788*=0x40) returned 1 [0099.540] SetFilePointer (in: hFile=0x728, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0099.540] WriteFile (in: hFile=0x728, lpBuffer=0xd70aa60000*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0xd707b4c790, lpOverlapped=0x0 | out: lpBuffer=0xd70aa60000*, lpNumberOfBytesWritten=0xd707b4c790*=0x40, lpOverlapped=0x0) returned 1 [0099.540] WriteFile (in: hFile=0x728, lpBuffer=0xd707b4c7d0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xd707b4c794, lpOverlapped=0x0 | out: lpBuffer=0xd707b4c7d0*, lpNumberOfBytesWritten=0xd707b4c794*=0x6, lpOverlapped=0x0) returned 1 [0099.540] CryptExportKey (in: hKey=0xd707996620, hExpKey=0xd7079a7710, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xd707b4c7a0 | out: pbData=0x0*, pdwDataLen=0xd707b4c7a0*=0x10c) returned 1 [0099.540] CryptExportKey (in: hKey=0xd707996620, hExpKey=0xd7079a7710, dwBlobType=0x1, dwFlags=0x0, pbData=0xd707b4c820, pdwDataLen=0xd707b4c7a0 | out: pbData=0xd707b4c820*, pdwDataLen=0xd707b4c7a0*=0x10c) returned 1 [0099.540] WriteFile (in: hFile=0x728, lpBuffer=0xd707b4c820*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd707b4c794, lpOverlapped=0x0 | out: lpBuffer=0xd707b4c820*, lpNumberOfBytesWritten=0xd707b4c794*=0x10c, lpOverlapped=0x0) returned 1 [0099.540] CloseHandle (hObject=0x728) returned 1 [0099.561] VirtualFree (lpAddress=0xd70aa60000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.565] CryptDestroyKey (hKey=0xd707996620) returned 1 [0099.565] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.565] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0099.565] FindClose (in: hFindFile=0xd7079d9c90 | out: hFindFile=0xd7079d9c90) returned 1 [0099.565] SetLastError (dwErrCode=0x0) [0099.565] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\.oracle_jre_usage\\RyukReadMe.txt" (normalized: "c:\\programdata\\oracle\\java\\.oracle_jre_usage\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x724 [0099.566] GetLastError () returned 0x0 [0099.566] WriteFile (in: hFile=0x724, lpBuffer=0x7ff7afca9500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpBuffer=0x7ff7afca9500*, lpNumberOfBytesWritten=0xd707b4d150*=0x324, lpOverlapped=0x0) returned 1 [0099.567] CloseHandle (hObject=0x724) returned 1 [0099.567] FindNextFileW (in: hFindFile=0xd7079d8af0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.567] SetLastError (dwErrCode=0x0) [0099.567] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\RyukReadMe.txt" (normalized: "c:\\programdata\\oracle\\java\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x724 [0099.567] GetLastError () returned 0xb7 [0099.567] CloseHandle (hObject=0x724) returned 1 [0099.567] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\installcache_x64\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d9390 [0099.567] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.568] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.568] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.568] SetFileAttributesW (lpFileName="C:\\ProgramData\\Oracle\\Java\\installcache_x64\\baseimagefam8", dwFileAttributes=0x80) returned 0 [0099.569] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\installcache_x64\\baseimagefam8" (normalized: "c:\\programdata\\oracle\\java\\installcache_x64\\baseimagefam8"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.569] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.569] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.569] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0099.569] FindClose (in: hFindFile=0xd7079d9390 | out: hFindFile=0xd7079d9390) returned 1 [0099.569] SetLastError (dwErrCode=0x0) [0099.569] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\installcache_x64\\RyukReadMe.txt" (normalized: "c:\\programdata\\oracle\\java\\installcache_x64\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.569] GetLastError () returned 0x5 [0099.569] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.569] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.570] FindNextFileW (in: hFindFile=0xd7079d8af0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.570] SetLastError (dwErrCode=0x0) [0099.570] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\RyukReadMe.txt" (normalized: "c:\\programdata\\oracle\\java\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x724 [0099.570] GetLastError () returned 0xb7 [0099.570] CloseHandle (hObject=0x724) returned 1 [0099.570] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d9390 [0099.570] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.570] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.570] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.570] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.570] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0099.570] FindClose (in: hFindFile=0xd7079d9390 | out: hFindFile=0xd7079d9390) returned 1 [0099.570] SetLastError (dwErrCode=0x0) [0099.570] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\RyukReadMe.txt" (normalized: "c:\\programdata\\oracle\\java\\javapath\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.571] GetLastError () returned 0x5 [0099.571] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.571] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.571] FindNextFileW (in: hFindFile=0xd7079d8af0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.571] SetLastError (dwErrCode=0x0) [0099.571] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\RyukReadMe.txt" (normalized: "c:\\programdata\\oracle\\java\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x724 [0099.571] GetLastError () returned 0xb7 [0099.571] CloseHandle (hObject=0x724) returned 1 [0099.571] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath_target_5923062\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d8d30 [0099.571] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.572] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.572] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.572] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.572] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0099.572] FindClose (in: hFindFile=0xd7079d8d30 | out: hFindFile=0xd7079d8d30) returned 1 [0099.572] SetLastError (dwErrCode=0x0) [0099.572] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath_target_5923062\\RyukReadMe.txt" (normalized: "c:\\programdata\\oracle\\java\\javapath_target_5923062\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.572] GetLastError () returned 0x5 [0099.572] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.572] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.572] FindNextFileW (in: hFindFile=0xd7079d8af0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0 [0099.572] FindClose (in: hFindFile=0xd7079d8af0 | out: hFindFile=0xd7079d8af0) returned 1 [0099.572] SetLastError (dwErrCode=0x0) [0099.572] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\RyukReadMe.txt" (normalized: "c:\\programdata\\oracle\\java\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x720 [0099.572] GetLastError () returned 0xb7 [0099.572] CloseHandle (hObject=0x720) returned 1 [0099.573] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0 [0099.573] FindClose (in: hFindFile=0xd7079d91b0 | out: hFindFile=0xd7079d91b0) returned 1 [0099.573] SetLastError (dwErrCode=0x0) [0099.573] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\RyukReadMe.txt" (normalized: "c:\\programdata\\oracle\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x71c [0099.573] GetLastError () returned 0xb7 [0099.573] CloseHandle (hObject=0x71c) returned 1 [0099.573] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 1 [0099.573] SetLastError (dwErrCode=0x0) [0099.573] CreateFileW (lpFileName="C:\\ProgramData\\RyukReadMe.txt" (normalized: "c:\\programdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x71c [0099.573] GetLastError () returned 0xb7 [0099.573] CloseHandle (hObject=0x71c) returned 1 [0099.574] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\*.*", lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0xd7079d9c90 [0099.574] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0099.574] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0099.575] SetLastError (dwErrCode=0x0) [0099.575] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.575] GetLastError () returned 0x5 [0099.575] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.575] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.575] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*.*", lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0xd7079d9090 [0099.578] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.578] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.578] SetLastError (dwErrCode=0x0) [0099.578] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.578] GetLastError () returned 0x5 [0099.578] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.578] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.578] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d9e10 [0099.579] FindNextFileW (in: hFindFile=0xd7079d9e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.579] FindNextFileW (in: hFindFile=0xd7079d9e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.579] SetLastError (dwErrCode=0x0) [0099.579] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.579] GetLastError () returned 0x5 [0099.579] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.579] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.579] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d9390 [0099.579] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.579] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.579] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.580] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\cab1.cab", dwFileAttributes=0x80) returned 0 [0099.580] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.580] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.580] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.580] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.580] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0099.580] FindClose (in: hFindFile=0xd7079d9390 | out: hFindFile=0xd7079d9390) returned 1 [0099.580] SetLastError (dwErrCode=0x0) [0099.580] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.581] GetLastError () returned 0x5 [0099.581] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.581] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.581] FindNextFileW (in: hFindFile=0xd7079d9e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0099.581] FindClose (in: hFindFile=0xd7079d9e10 | out: hFindFile=0xd7079d9e10) returned 1 [0099.581] SetLastError (dwErrCode=0x0) [0099.581] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.581] GetLastError () returned 0x5 [0099.581] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.581] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.581] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0 [0099.581] FindClose (in: hFindFile=0xd7079d9090 | out: hFindFile=0xd7079d9090) returned 1 [0099.581] SetLastError (dwErrCode=0x0) [0099.581] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.581] GetLastError () returned 0x5 [0099.581] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.581] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.582] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0099.582] SetLastError (dwErrCode=0x0) [0099.582] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.582] GetLastError () returned 0x5 [0099.582] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.582] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.582] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*.*", lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0xd7079d8d30 [0099.582] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.582] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.582] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.582] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm", dwFileAttributes=0x80) returned 0 [0099.582] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.583] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.583] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.583] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.583] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0 [0099.583] FindClose (in: hFindFile=0xd7079d8d30 | out: hFindFile=0xd7079d8d30) returned 1 [0099.583] SetLastError (dwErrCode=0x0) [0099.583] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.583] GetLastError () returned 0x5 [0099.583] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.583] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.583] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0099.583] SetLastError (dwErrCode=0x0) [0099.583] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.583] GetLastError () returned 0x5 [0099.584] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.584] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.584] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\*.*", lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0xd7079d9e10 [0099.584] FindNextFileW (in: hFindFile=0xd7079d9e10, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.584] FindNextFileW (in: hFindFile=0xd7079d9e10, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.584] SetLastError (dwErrCode=0x0) [0099.584] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.584] GetLastError () returned 0x5 [0099.584] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.584] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.584] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d9390 [0099.584] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.584] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.584] SetLastError (dwErrCode=0x0) [0099.584] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.584] GetLastError () returned 0x5 [0099.584] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.585] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.585] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d9870 [0099.585] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.585] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.585] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.585] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\cab1.cab", dwFileAttributes=0x80) returned 0 [0099.586] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.586] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.586] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.586] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.586] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.586] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi", dwFileAttributes=0x80) returned 0 [0099.587] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.587] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.587] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.587] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0099.587] FindClose (in: hFindFile=0xd7079d9870 | out: hFindFile=0xd7079d9870) returned 1 [0099.587] SetLastError (dwErrCode=0x0) [0099.587] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.587] GetLastError () returned 0x5 [0099.587] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.587] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.587] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0099.587] FindClose (in: hFindFile=0xd7079d9390 | out: hFindFile=0xd7079d9390) returned 1 [0099.587] SetLastError (dwErrCode=0x0) [0099.588] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.588] GetLastError () returned 0x5 [0099.588] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.588] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.588] FindNextFileW (in: hFindFile=0xd7079d9e10, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0 [0099.588] FindClose (in: hFindFile=0xd7079d9e10 | out: hFindFile=0xd7079d9e10) returned 1 [0099.588] SetLastError (dwErrCode=0x0) [0099.588] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.588] GetLastError () returned 0x5 [0099.588] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.588] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.588] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0099.588] SetLastError (dwErrCode=0x0) [0099.588] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.588] GetLastError () returned 0x5 [0099.588] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.588] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.588] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*.*", lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0xd7079d8eb0 [0099.589] FindNextFileW (in: hFindFile=0xd7079d8eb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.589] FindNextFileW (in: hFindFile=0xd7079d8eb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.589] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.589] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm", dwFileAttributes=0x80) returned 0 [0099.589] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.589] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.589] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.590] FindNextFileW (in: hFindFile=0xd7079d8eb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.590] FindNextFileW (in: hFindFile=0xd7079d8eb0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0 [0099.590] FindClose (in: hFindFile=0xd7079d8eb0 | out: hFindFile=0xd7079d8eb0) returned 1 [0099.590] SetLastError (dwErrCode=0x0) [0099.590] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.590] GetLastError () returned 0x5 [0099.590] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.590] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.590] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0099.590] SetLastError (dwErrCode=0x0) [0099.590] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.590] GetLastError () returned 0x5 [0099.590] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.590] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.590] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{74d0e5db-b326-4dae-a6b2-445b9de1836e}\\*.*", lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0xd7079d9390 [0099.593] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.593] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.593] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.593] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{74d0e5db-b326-4dae-a6b2-445b9de1836e}\\state.rsm", dwFileAttributes=0x80) returned 0 [0099.593] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{74d0e5db-b326-4dae-a6b2-445b9de1836e}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{74d0e5db-b326-4dae-a6b2-445b9de1836e}\\state.rsm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.593] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.593] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.594] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.594] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0 [0099.594] FindClose (in: hFindFile=0xd7079d9390 | out: hFindFile=0xd7079d9390) returned 1 [0099.594] SetLastError (dwErrCode=0x0) [0099.594] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{74d0e5db-b326-4dae-a6b2-445b9de1836e}\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{74d0e5db-b326-4dae-a6b2-445b9de1836e}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.594] GetLastError () returned 0x5 [0099.594] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.594] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.594] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0099.594] SetLastError (dwErrCode=0x0) [0099.594] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.594] GetLastError () returned 0x5 [0099.594] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.594] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.594] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\*.*", lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0xd7079d87f0 [0099.595] FindNextFileW (in: hFindFile=0xd7079d87f0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.595] FindNextFileW (in: hFindFile=0xd7079d87f0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.595] SetLastError (dwErrCode=0x0) [0099.595] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.595] GetLastError () returned 0x5 [0099.595] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.595] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.595] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d9870 [0099.596] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.596] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.596] SetLastError (dwErrCode=0x0) [0099.596] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.596] GetLastError () returned 0x5 [0099.596] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.596] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.596] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d8910 [0099.596] FindNextFileW (in: hFindFile=0xd7079d8910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.596] FindNextFileW (in: hFindFile=0xd7079d8910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.596] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.596] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\cab1.cab", dwFileAttributes=0x80) returned 0 [0099.597] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.597] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.597] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.597] FindNextFileW (in: hFindFile=0xd7079d8910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.598] FindNextFileW (in: hFindFile=0xd7079d8910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0099.598] FindClose (in: hFindFile=0xd7079d8910 | out: hFindFile=0xd7079d8910) returned 1 [0099.598] SetLastError (dwErrCode=0x0) [0099.598] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.598] GetLastError () returned 0x5 [0099.598] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.598] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.598] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0099.598] FindClose (in: hFindFile=0xd7079d9870 | out: hFindFile=0xd7079d9870) returned 1 [0099.598] SetLastError (dwErrCode=0x0) [0099.598] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.598] GetLastError () returned 0x5 [0099.598] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.598] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.598] FindNextFileW (in: hFindFile=0xd7079d87f0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0 [0099.598] FindClose (in: hFindFile=0xd7079d87f0 | out: hFindFile=0xd7079d87f0) returned 1 [0099.599] SetLastError (dwErrCode=0x0) [0099.599] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.599] GetLastError () returned 0x5 [0099.599] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.599] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.599] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0099.599] SetLastError (dwErrCode=0x0) [0099.599] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.599] GetLastError () returned 0x5 [0099.599] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.599] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.599] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\*.*", lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0xd7079d9090 [0099.600] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.600] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.600] SetLastError (dwErrCode=0x0) [0099.600] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.600] GetLastError () returned 0x5 [0099.600] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.600] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.600] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d8af0 [0099.600] FindNextFileW (in: hFindFile=0xd7079d8af0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.600] FindNextFileW (in: hFindFile=0xd7079d8af0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.600] SetLastError (dwErrCode=0x0) [0099.600] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.601] GetLastError () returned 0x5 [0099.601] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.601] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.601] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d8d30 [0099.601] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.601] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.601] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.601] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\cab1.cab", dwFileAttributes=0x80) returned 0 [0099.601] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.602] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.602] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.602] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.602] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.602] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi", dwFileAttributes=0x80) returned 0 [0099.604] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.604] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.604] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.605] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0099.605] FindClose (in: hFindFile=0xd7079d8d30 | out: hFindFile=0xd7079d8d30) returned 1 [0099.605] SetLastError (dwErrCode=0x0) [0099.605] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.605] GetLastError () returned 0x5 [0099.605] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.605] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.605] FindNextFileW (in: hFindFile=0xd7079d8af0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0099.605] FindClose (in: hFindFile=0xd7079d8af0 | out: hFindFile=0xd7079d8af0) returned 1 [0099.605] SetLastError (dwErrCode=0x0) [0099.605] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.605] GetLastError () returned 0x5 [0099.605] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.605] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.605] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0 [0099.605] FindClose (in: hFindFile=0xd7079d9090 | out: hFindFile=0xd7079d9090) returned 1 [0099.606] SetLastError (dwErrCode=0x0) [0099.606] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.606] GetLastError () returned 0x5 [0099.606] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.606] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.606] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0099.606] SetLastError (dwErrCode=0x0) [0099.606] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.606] GetLastError () returned 0x5 [0099.606] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.606] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.606] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A2563E55-3BEC-3828-8D67-E5E8B9E8B675}v14.0.23026\\*.*", lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0xd7079d9870 [0099.606] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.606] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.606] SetLastError (dwErrCode=0x0) [0099.609] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{A2563E55-3BEC-3828-8D67-E5E8B9E8B675}v14.0.23026\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{a2563e55-3bec-3828-8d67-e5e8b9e8b675}v14.0.23026\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.609] GetLastError () returned 0x5 [0099.609] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.609] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.609] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A2563E55-3BEC-3828-8D67-E5E8B9E8B675}v14.0.23026\\packages\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d9390 [0099.610] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.610] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.610] SetLastError (dwErrCode=0x0) [0099.610] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{A2563E55-3BEC-3828-8D67-E5E8B9E8B675}v14.0.23026\\packages\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{a2563e55-3bec-3828-8d67-e5e8b9e8b675}v14.0.23026\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.610] GetLastError () returned 0x5 [0099.610] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.610] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.610] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A2563E55-3BEC-3828-8D67-E5E8B9E8B675}v14.0.23026\\packages\\vcRuntimeMinimum_x86\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d8af0 [0099.610] FindNextFileW (in: hFindFile=0xd7079d8af0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.610] FindNextFileW (in: hFindFile=0xd7079d8af0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.610] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.610] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{A2563E55-3BEC-3828-8D67-E5E8B9E8B675}v14.0.23026\\packages\\vcRuntimeMinimum_x86\\cab1.cab", dwFileAttributes=0x80) returned 0 [0099.611] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{A2563E55-3BEC-3828-8D67-E5E8B9E8B675}v14.0.23026\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{a2563e55-3bec-3828-8d67-e5e8b9e8b675}v14.0.23026\\packages\\vcruntimeminimum_x86\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.611] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.611] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.611] FindNextFileW (in: hFindFile=0xd7079d8af0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.611] FindNextFileW (in: hFindFile=0xd7079d8af0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0099.611] FindClose (in: hFindFile=0xd7079d8af0 | out: hFindFile=0xd7079d8af0) returned 1 [0099.611] SetLastError (dwErrCode=0x0) [0099.611] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{A2563E55-3BEC-3828-8D67-E5E8B9E8B675}v14.0.23026\\packages\\vcRuntimeMinimum_x86\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{a2563e55-3bec-3828-8d67-e5e8b9e8b675}v14.0.23026\\packages\\vcruntimeminimum_x86\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.611] GetLastError () returned 0x5 [0099.612] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.612] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.612] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0099.612] FindClose (in: hFindFile=0xd7079d9390 | out: hFindFile=0xd7079d9390) returned 1 [0099.612] SetLastError (dwErrCode=0x0) [0099.612] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{A2563E55-3BEC-3828-8D67-E5E8B9E8B675}v14.0.23026\\packages\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{a2563e55-3bec-3828-8d67-e5e8b9e8b675}v14.0.23026\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.612] GetLastError () returned 0x5 [0099.612] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.612] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.612] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0 [0099.612] FindClose (in: hFindFile=0xd7079d9870 | out: hFindFile=0xd7079d9870) returned 1 [0099.612] SetLastError (dwErrCode=0x0) [0099.612] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{A2563E55-3BEC-3828-8D67-E5E8B9E8B675}v14.0.23026\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{a2563e55-3bec-3828-8d67-e5e8b9e8b675}v14.0.23026\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.612] GetLastError () returned 0x5 [0099.612] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.612] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.612] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0099.612] SetLastError (dwErrCode=0x0) [0099.612] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.613] GetLastError () returned 0x5 [0099.613] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.613] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.613] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\*.*", lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0xd7079d9e10 [0099.613] FindNextFileW (in: hFindFile=0xd7079d9e10, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.613] FindNextFileW (in: hFindFile=0xd7079d9e10, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.613] SetLastError (dwErrCode=0x0) [0099.613] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.613] GetLastError () returned 0x5 [0099.613] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.613] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.613] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d9390 [0099.613] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.613] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.613] SetLastError (dwErrCode=0x0) [0099.613] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.614] GetLastError () returned 0x5 [0099.614] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.614] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.614] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d9870 [0099.614] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.614] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.614] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.614] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\cab1.cab", dwFileAttributes=0x80) returned 0 [0099.614] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.614] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.615] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.615] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.615] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0099.615] FindClose (in: hFindFile=0xd7079d9870 | out: hFindFile=0xd7079d9870) returned 1 [0099.615] SetLastError (dwErrCode=0x0) [0099.615] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.615] GetLastError () returned 0x5 [0099.615] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.615] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.615] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0099.615] FindClose (in: hFindFile=0xd7079d9390 | out: hFindFile=0xd7079d9390) returned 1 [0099.615] SetLastError (dwErrCode=0x0) [0099.615] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.615] GetLastError () returned 0x5 [0099.616] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.616] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.616] FindNextFileW (in: hFindFile=0xd7079d9e10, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0 [0099.616] FindClose (in: hFindFile=0xd7079d9e10 | out: hFindFile=0xd7079d9e10) returned 1 [0099.616] SetLastError (dwErrCode=0x0) [0099.616] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.616] GetLastError () returned 0x5 [0099.616] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.616] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.616] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0099.616] SetLastError (dwErrCode=0x0) [0099.616] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.616] GetLastError () returned 0x5 [0099.616] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.616] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.616] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*.*", lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0xd7079d9e10 [0099.617] FindNextFileW (in: hFindFile=0xd7079d9e10, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.617] FindNextFileW (in: hFindFile=0xd7079d9e10, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.617] SetLastError (dwErrCode=0x0) [0099.617] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.617] GetLastError () returned 0x5 [0099.617] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.617] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.617] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d93f0 [0099.618] FindNextFileW (in: hFindFile=0xd7079d93f0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.618] FindNextFileW (in: hFindFile=0xd7079d93f0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.618] SetLastError (dwErrCode=0x0) [0099.618] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.618] GetLastError () returned 0x5 [0099.618] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.618] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.618] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d8af0 [0099.618] FindNextFileW (in: hFindFile=0xd7079d8af0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.618] FindNextFileW (in: hFindFile=0xd7079d8af0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.618] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.619] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\cab1.cab", dwFileAttributes=0x80) returned 0 [0099.619] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.619] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.619] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.619] FindNextFileW (in: hFindFile=0xd7079d8af0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.619] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.620] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi", dwFileAttributes=0x80) returned 0 [0099.620] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.620] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.620] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.620] FindNextFileW (in: hFindFile=0xd7079d8af0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0099.620] FindClose (in: hFindFile=0xd7079d8af0 | out: hFindFile=0xd7079d8af0) returned 1 [0099.620] SetLastError (dwErrCode=0x0) [0099.620] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.620] GetLastError () returned 0x5 [0099.620] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.621] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.621] FindNextFileW (in: hFindFile=0xd7079d93f0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0099.621] FindClose (in: hFindFile=0xd7079d93f0 | out: hFindFile=0xd7079d93f0) returned 1 [0099.621] SetLastError (dwErrCode=0x0) [0099.621] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.621] GetLastError () returned 0x5 [0099.621] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.621] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.621] FindNextFileW (in: hFindFile=0xd7079d9e10, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0 [0099.621] FindClose (in: hFindFile=0xd7079d9e10 | out: hFindFile=0xd7079d9e10) returned 1 [0099.621] SetLastError (dwErrCode=0x0) [0099.621] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.621] GetLastError () returned 0x5 [0099.621] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.621] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.621] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0099.621] SetLastError (dwErrCode=0x0) [0099.621] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.622] GetLastError () returned 0x5 [0099.622] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.622] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.622] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*.*", lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0xd7079d94b0 [0099.622] FindNextFileW (in: hFindFile=0xd7079d94b0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.622] FindNextFileW (in: hFindFile=0xd7079d94b0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.622] SetLastError (dwErrCode=0x0) [0099.622] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.622] GetLastError () returned 0x5 [0099.623] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.623] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.623] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d9e10 [0099.623] FindNextFileW (in: hFindFile=0xd7079d9e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.624] FindNextFileW (in: hFindFile=0xd7079d9e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.624] SetLastError (dwErrCode=0x0) [0099.624] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.624] GetLastError () returned 0x5 [0099.624] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.624] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.624] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d9870 [0099.624] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.624] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.624] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.624] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\cab1.cab", dwFileAttributes=0x80) returned 0 [0099.625] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.625] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.625] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.625] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.625] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0099.625] FindClose (in: hFindFile=0xd7079d9870 | out: hFindFile=0xd7079d9870) returned 1 [0099.625] SetLastError (dwErrCode=0x0) [0099.625] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.625] GetLastError () returned 0x5 [0099.625] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.625] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.625] FindNextFileW (in: hFindFile=0xd7079d9e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0099.625] FindClose (in: hFindFile=0xd7079d9e10 | out: hFindFile=0xd7079d9e10) returned 1 [0099.626] SetLastError (dwErrCode=0x0) [0099.626] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.626] GetLastError () returned 0x5 [0099.626] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.626] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.626] FindNextFileW (in: hFindFile=0xd7079d94b0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0 [0099.626] FindClose (in: hFindFile=0xd7079d94b0 | out: hFindFile=0xd7079d94b0) returned 1 [0099.626] SetLastError (dwErrCode=0x0) [0099.626] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.626] GetLastError () returned 0x5 [0099.626] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.626] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.626] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0099.626] SetLastError (dwErrCode=0x0) [0099.626] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.626] GetLastError () returned 0x5 [0099.626] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.626] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.626] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BE960C1C-7BAD-3DE6-8B1A-2616FE532845}v14.0.23026\\*.*", lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0xd7079d91b0 [0099.627] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.627] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.627] SetLastError (dwErrCode=0x0) [0099.627] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{BE960C1C-7BAD-3DE6-8B1A-2616FE532845}v14.0.23026\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{be960c1c-7bad-3de6-8b1a-2616fe532845}v14.0.23026\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.627] GetLastError () returned 0x5 [0099.627] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.627] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.627] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BE960C1C-7BAD-3DE6-8B1A-2616FE532845}v14.0.23026\\packages\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d8d30 [0099.627] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.627] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.627] SetLastError (dwErrCode=0x0) [0099.627] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{BE960C1C-7BAD-3DE6-8B1A-2616FE532845}v14.0.23026\\packages\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{be960c1c-7bad-3de6-8b1a-2616fe532845}v14.0.23026\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.627] GetLastError () returned 0x5 [0099.627] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.627] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.627] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BE960C1C-7BAD-3DE6-8B1A-2616FE532845}v14.0.23026\\packages\\vcRuntimeAdditional_x86\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d9870 [0099.628] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.628] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.628] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.628] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{BE960C1C-7BAD-3DE6-8B1A-2616FE532845}v14.0.23026\\packages\\vcRuntimeAdditional_x86\\cab1.cab", dwFileAttributes=0x80) returned 0 [0099.628] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{BE960C1C-7BAD-3DE6-8B1A-2616FE532845}v14.0.23026\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{be960c1c-7bad-3de6-8b1a-2616fe532845}v14.0.23026\\packages\\vcruntimeadditional_x86\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.628] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.628] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.629] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.629] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.629] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{BE960C1C-7BAD-3DE6-8B1A-2616FE532845}v14.0.23026\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi", dwFileAttributes=0x80) returned 0 [0099.629] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{BE960C1C-7BAD-3DE6-8B1A-2616FE532845}v14.0.23026\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\programdata\\package cache\\{be960c1c-7bad-3de6-8b1a-2616fe532845}v14.0.23026\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.629] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.629] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.630] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0099.630] FindClose (in: hFindFile=0xd7079d9870 | out: hFindFile=0xd7079d9870) returned 1 [0099.630] SetLastError (dwErrCode=0x0) [0099.630] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{BE960C1C-7BAD-3DE6-8B1A-2616FE532845}v14.0.23026\\packages\\vcRuntimeAdditional_x86\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{be960c1c-7bad-3de6-8b1a-2616fe532845}v14.0.23026\\packages\\vcruntimeadditional_x86\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.630] GetLastError () returned 0x5 [0099.630] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.630] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.630] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0099.630] FindClose (in: hFindFile=0xd7079d8d30 | out: hFindFile=0xd7079d8d30) returned 1 [0099.630] SetLastError (dwErrCode=0x0) [0099.630] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{BE960C1C-7BAD-3DE6-8B1A-2616FE532845}v14.0.23026\\packages\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{be960c1c-7bad-3de6-8b1a-2616fe532845}v14.0.23026\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.630] GetLastError () returned 0x5 [0099.630] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.630] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.630] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0 [0099.630] FindClose (in: hFindFile=0xd7079d91b0 | out: hFindFile=0xd7079d91b0) returned 1 [0099.631] SetLastError (dwErrCode=0x0) [0099.631] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{BE960C1C-7BAD-3DE6-8B1A-2616FE532845}v14.0.23026\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{be960c1c-7bad-3de6-8b1a-2616fe532845}v14.0.23026\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.631] GetLastError () returned 0x5 [0099.631] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.631] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.631] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0099.631] SetLastError (dwErrCode=0x0) [0099.631] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.631] GetLastError () returned 0x5 [0099.631] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.631] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.631] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\*.*", lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0xd7079d9870 [0099.631] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.631] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.631] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.632] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm", dwFileAttributes=0x80) returned 0 [0099.632] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.632] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.632] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.632] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.632] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0 [0099.632] FindClose (in: hFindFile=0xd7079d9870 | out: hFindFile=0xd7079d9870) returned 1 [0099.632] SetLastError (dwErrCode=0x0) [0099.632] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.633] GetLastError () returned 0x5 [0099.633] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.633] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.633] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0099.633] SetLastError (dwErrCode=0x0) [0099.633] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.633] GetLastError () returned 0x5 [0099.633] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.633] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.633] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\*.*", lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0xd7079d8af0 [0099.633] FindNextFileW (in: hFindFile=0xd7079d8af0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.633] FindNextFileW (in: hFindFile=0xd7079d8af0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.633] SetLastError (dwErrCode=0x0) [0099.633] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.633] GetLastError () returned 0x5 [0099.633] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.633] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.633] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d9e10 [0099.634] FindNextFileW (in: hFindFile=0xd7079d9e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.634] FindNextFileW (in: hFindFile=0xd7079d9e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.634] SetLastError (dwErrCode=0x0) [0099.634] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.634] GetLastError () returned 0x5 [0099.634] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.634] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.634] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d9090 [0099.634] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.634] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.634] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.634] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\cab1.cab", dwFileAttributes=0x80) returned 0 [0099.635] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.635] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.635] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.635] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.635] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0099.635] FindClose (in: hFindFile=0xd7079d9090 | out: hFindFile=0xd7079d9090) returned 1 [0099.635] SetLastError (dwErrCode=0x0) [0099.635] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.635] GetLastError () returned 0x5 [0099.635] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.635] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.635] FindNextFileW (in: hFindFile=0xd7079d9e10, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0099.635] FindClose (in: hFindFile=0xd7079d9e10 | out: hFindFile=0xd7079d9e10) returned 1 [0099.636] SetLastError (dwErrCode=0x0) [0099.636] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.636] GetLastError () returned 0x5 [0099.636] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.636] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.636] FindNextFileW (in: hFindFile=0xd7079d8af0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0 [0099.636] FindClose (in: hFindFile=0xd7079d8af0 | out: hFindFile=0xd7079d8af0) returned 1 [0099.636] SetLastError (dwErrCode=0x0) [0099.636] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.636] GetLastError () returned 0x5 [0099.636] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.636] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.636] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0099.636] SetLastError (dwErrCode=0x0) [0099.636] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.637] GetLastError () returned 0x5 [0099.637] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.637] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.637] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\*.*", lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0xd7079d9e10 [0099.637] FindNextFileW (in: hFindFile=0xd7079d9e10, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.637] FindNextFileW (in: hFindFile=0xd7079d9e10, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.637] SetLastError (dwErrCode=0x0) [0099.637] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.637] GetLastError () returned 0x5 [0099.637] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.637] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.637] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d9390 [0099.637] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.637] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.637] SetLastError (dwErrCode=0x0) [0099.637] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.638] GetLastError () returned 0x5 [0099.638] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.638] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.638] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d87f0 [0099.638] FindNextFileW (in: hFindFile=0xd7079d87f0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.638] FindNextFileW (in: hFindFile=0xd7079d87f0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.638] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.638] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\cab1.cab", dwFileAttributes=0x80) returned 0 [0099.638] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.638] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.639] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.639] FindNextFileW (in: hFindFile=0xd7079d87f0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.639] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.641] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi", dwFileAttributes=0x80) returned 0 [0099.642] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.642] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.642] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.642] FindNextFileW (in: hFindFile=0xd7079d87f0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0099.642] FindClose (in: hFindFile=0xd7079d87f0 | out: hFindFile=0xd7079d87f0) returned 1 [0099.642] SetLastError (dwErrCode=0x0) [0099.642] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.642] GetLastError () returned 0x5 [0099.643] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.643] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.643] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0099.643] FindClose (in: hFindFile=0xd7079d9390 | out: hFindFile=0xd7079d9390) returned 1 [0099.643] SetLastError (dwErrCode=0x0) [0099.643] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.643] GetLastError () returned 0x5 [0099.643] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.643] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.643] FindNextFileW (in: hFindFile=0xd7079d9e10, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0 [0099.643] FindClose (in: hFindFile=0xd7079d9e10 | out: hFindFile=0xd7079d9e10) returned 1 [0099.643] SetLastError (dwErrCode=0x0) [0099.643] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.643] GetLastError () returned 0x5 [0099.643] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.643] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.643] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0099.643] SetLastError (dwErrCode=0x0) [0099.643] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.644] GetLastError () returned 0x5 [0099.644] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.644] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.644] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\*.*", lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0xd7079d9e10 [0099.644] FindNextFileW (in: hFindFile=0xd7079d9e10, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.644] FindNextFileW (in: hFindFile=0xd7079d9e10, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.644] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.644] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm", dwFileAttributes=0x80) returned 0 [0099.645] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.645] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.645] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.645] FindNextFileW (in: hFindFile=0xd7079d9e10, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.645] FindNextFileW (in: hFindFile=0xd7079d9e10, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0 [0099.645] FindClose (in: hFindFile=0xd7079d9e10 | out: hFindFile=0xd7079d9e10) returned 1 [0099.645] SetLastError (dwErrCode=0x0) [0099.645] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.645] GetLastError () returned 0x5 [0099.645] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.645] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.645] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0099.645] SetLastError (dwErrCode=0x0) [0099.645] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.646] GetLastError () returned 0x5 [0099.646] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.646] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.646] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*.*", lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0xd7079d8d30 [0099.646] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.646] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.646] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.646] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm", dwFileAttributes=0x80) returned 0 [0099.647] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.647] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.647] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.647] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.647] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0 [0099.647] FindClose (in: hFindFile=0xd7079d8d30 | out: hFindFile=0xd7079d8d30) returned 1 [0099.647] SetLastError (dwErrCode=0x0) [0099.647] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.648] GetLastError () returned 0x5 [0099.648] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.648] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.648] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0099.648] SetLastError (dwErrCode=0x0) [0099.648] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.648] GetLastError () returned 0x5 [0099.648] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.648] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.648] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*.*", lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0xd7079d9e10 [0099.648] FindNextFileW (in: hFindFile=0xd7079d9e10, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.648] FindNextFileW (in: hFindFile=0xd7079d9e10, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.648] SetLastError (dwErrCode=0x0) [0099.648] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.648] GetLastError () returned 0x5 [0099.648] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.649] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.649] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d9390 [0099.649] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.649] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.649] SetLastError (dwErrCode=0x0) [0099.649] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.649] GetLastError () returned 0x5 [0099.649] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.649] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.649] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d8d30 [0099.649] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.649] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.649] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.650] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\cab1.cab", dwFileAttributes=0x80) returned 0 [0099.650] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.650] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.650] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.650] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.650] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.650] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi", dwFileAttributes=0x80) returned 0 [0099.651] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.651] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.651] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.651] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0099.652] FindClose (in: hFindFile=0xd7079d8d30 | out: hFindFile=0xd7079d8d30) returned 1 [0099.652] SetLastError (dwErrCode=0x0) [0099.652] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.652] GetLastError () returned 0x5 [0099.652] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.652] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.652] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0099.652] FindClose (in: hFindFile=0xd7079d9390 | out: hFindFile=0xd7079d9390) returned 1 [0099.652] SetLastError (dwErrCode=0x0) [0099.652] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.652] GetLastError () returned 0x5 [0099.652] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.652] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.653] FindNextFileW (in: hFindFile=0xd7079d9e10, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0 [0099.653] FindClose (in: hFindFile=0xd7079d9e10 | out: hFindFile=0xd7079d9e10) returned 1 [0099.653] SetLastError (dwErrCode=0x0) [0099.653] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.653] GetLastError () returned 0x5 [0099.653] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.653] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.653] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0 [0099.653] FindClose (in: hFindFile=0xd7079d9c90 | out: hFindFile=0xd7079d9c90) returned 1 [0099.653] SetLastError (dwErrCode=0x0) [0099.653] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.653] GetLastError () returned 0x5 [0099.654] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0099.654] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.654] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 1 [0099.654] SetLastError (dwErrCode=0x0) [0099.654] CreateFileW (lpFileName="C:\\ProgramData\\RyukReadMe.txt" (normalized: "c:\\programdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x71c [0099.654] GetLastError () returned 0xb7 [0099.654] CloseHandle (hObject=0x71c) returned 1 [0099.654] FindFirstFileW (in: lpFileName="C:\\ProgramData\\regid.1991-06.com.microsoft\\*.*", lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0xd7079d87f0 [0099.655] FindNextFileW (in: hFindFile=0xd7079d87f0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0099.655] FindNextFileW (in: hFindFile=0xd7079d87f0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0099.655] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.655] SetFileAttributesW (lpFileName="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag", dwFileAttributes=0x80) returned 0 [0099.656] CreateFileW (lpFileName="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag" (normalized: "c:\\programdata\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft office 16 click-to-run extensibility component.swidtag"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.656] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.656] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.656] FindNextFileW (in: hFindFile=0xd7079d87f0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0099.656] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.657] SetFileAttributesW (lpFileName="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag", dwFileAttributes=0x80) returned 0 [0099.657] CreateFileW (lpFileName="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag" (normalized: "c:\\programdata\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft office 16 click-to-run licensing component.swidtag"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.657] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.657] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.657] FindNextFileW (in: hFindFile=0xd7079d87f0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0099.657] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.658] SetFileAttributesW (lpFileName="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag", dwFileAttributes=0x80) returned 0 [0099.658] CreateFileW (lpFileName="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag" (normalized: "c:\\programdata\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft office 16 click-to-run localization component.swidtag"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.658] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.658] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.658] FindNextFileW (in: hFindFile=0xd7079d87f0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0099.658] FindNextFileW (in: hFindFile=0xd7079d87f0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0 [0099.658] FindClose (in: hFindFile=0xd7079d87f0 | out: hFindFile=0xd7079d87f0) returned 1 [0099.659] SetLastError (dwErrCode=0x0) [0099.659] CreateFileW (lpFileName="C:\\ProgramData\\regid.1991-06.com.microsoft\\RyukReadMe.txt" (normalized: "c:\\programdata\\regid.1991-06.com.microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.662] GetLastError () returned 0x5 [0099.662] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0099.662] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.662] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 1 [0099.662] SetLastError (dwErrCode=0x0) [0099.662] CreateFileW (lpFileName="C:\\ProgramData\\RyukReadMe.txt" (normalized: "c:\\programdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x71c [0099.662] GetLastError () returned 0xb7 [0099.662] CloseHandle (hObject=0x71c) returned 1 [0099.662] FindFirstFileW (in: lpFileName="C:\\ProgramData\\SoftwareDistribution\\*.*", lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0xd7079d9870 [0099.662] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0099.662] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0 [0099.662] FindClose (in: hFindFile=0xd7079d9870 | out: hFindFile=0xd7079d9870) returned 1 [0099.663] SetLastError (dwErrCode=0x0) [0099.663] CreateFileW (lpFileName="C:\\ProgramData\\SoftwareDistribution\\RyukReadMe.txt" (normalized: "c:\\programdata\\softwaredistribution\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.663] GetLastError () returned 0x5 [0099.663] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0099.663] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.663] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 1 [0099.663] SetLastError (dwErrCode=0x0) [0099.663] CreateFileW (lpFileName="C:\\ProgramData\\RyukReadMe.txt" (normalized: "c:\\programdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x71c [0099.663] GetLastError () returned 0xb7 [0099.663] CloseHandle (hObject=0x71c) returned 1 [0099.663] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Start Menu\\*.*", lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0xffffffffffffffff [0099.663] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0099.663] SetLastError (dwErrCode=0x0) [0099.663] CreateFileW (lpFileName="C:\\ProgramData\\Start Menu\\RyukReadMe.txt" (normalized: "c:\\programdata\\start menu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.664] GetLastError () returned 0x5 [0099.664] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0099.664] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.664] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 1 [0099.664] SetLastError (dwErrCode=0x0) [0099.664] CreateFileW (lpFileName="C:\\ProgramData\\RyukReadMe.txt" (normalized: "c:\\programdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x71c [0099.664] GetLastError () returned 0xb7 [0099.664] CloseHandle (hObject=0x71c) returned 1 [0099.664] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Templates\\*.*", lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0xffffffffffffffff [0099.664] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0099.664] SetLastError (dwErrCode=0x0) [0099.664] CreateFileW (lpFileName="C:\\ProgramData\\Templates\\RyukReadMe.txt" (normalized: "c:\\programdata\\templates\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.665] GetLastError () returned 0x5 [0099.665] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0099.665] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.665] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 1 [0099.665] SetLastError (dwErrCode=0x0) [0099.665] CreateFileW (lpFileName="C:\\ProgramData\\RyukReadMe.txt" (normalized: "c:\\programdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x71c [0099.665] GetLastError () returned 0xb7 [0099.665] CloseHandle (hObject=0x71c) returned 1 [0099.665] FindFirstFileW (in: lpFileName="C:\\ProgramData\\USOPrivate\\*.*", lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0xd7079d8d30 [0099.665] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0099.665] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0099.665] SetLastError (dwErrCode=0x0) [0099.665] CreateFileW (lpFileName="C:\\ProgramData\\USOPrivate\\RyukReadMe.txt" (normalized: "c:\\programdata\\usoprivate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x720 [0099.666] GetLastError () returned 0x0 [0099.666] WriteFile (in: hFile=0x720, lpBuffer=0x7ff7afca9500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpBuffer=0x7ff7afca9500*, lpNumberOfBytesWritten=0xd707b4d900*=0x324, lpOverlapped=0x0) returned 1 [0099.666] CloseHandle (hObject=0x720) returned 1 [0099.680] FindFirstFileW (in: lpFileName="C:\\ProgramData\\USOPrivate\\UpdateStore\\*.*", lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0xd7079d9390 [0099.680] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.680] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.680] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.680] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOPrivate\\UpdateStore\\updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml", dwFileAttributes=0x80) returned 0 [0099.681] CreateFileW (lpFileName="C:\\ProgramData\\USOPrivate\\UpdateStore\\updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml" (normalized: "c:\\programdata\\usoprivate\\updatestore\\updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.681] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.681] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.681] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0 [0099.681] FindClose (in: hFindFile=0xd7079d9390 | out: hFindFile=0xd7079d9390) returned 1 [0099.681] SetLastError (dwErrCode=0x0) [0099.681] CreateFileW (lpFileName="C:\\ProgramData\\USOPrivate\\UpdateStore\\RyukReadMe.txt" (normalized: "c:\\programdata\\usoprivate\\updatestore\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x720 [0099.682] GetLastError () returned 0x0 [0099.682] WriteFile (in: hFile=0x720, lpBuffer=0x7ff7afca9500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpBuffer=0x7ff7afca9500*, lpNumberOfBytesWritten=0xd707b4d900*=0x324, lpOverlapped=0x0) returned 1 [0099.682] CloseHandle (hObject=0x720) returned 1 [0099.682] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0 [0099.683] FindClose (in: hFindFile=0xd7079d8d30 | out: hFindFile=0xd7079d8d30) returned 1 [0099.683] SetLastError (dwErrCode=0x0) [0099.683] CreateFileW (lpFileName="C:\\ProgramData\\USOPrivate\\RyukReadMe.txt" (normalized: "c:\\programdata\\usoprivate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x71c [0099.683] GetLastError () returned 0xb7 [0099.683] CloseHandle (hObject=0x71c) returned 1 [0099.683] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 1 [0099.683] SetLastError (dwErrCode=0x0) [0099.683] CreateFileW (lpFileName="C:\\ProgramData\\RyukReadMe.txt" (normalized: "c:\\programdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x71c [0099.683] GetLastError () returned 0xb7 [0099.683] CloseHandle (hObject=0x71c) returned 1 [0099.683] FindFirstFileW (in: lpFileName="C:\\ProgramData\\USOShared\\*.*", lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0xd7079d9870 [0099.683] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0099.683] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0099.683] SetLastError (dwErrCode=0x0) [0099.684] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\RyukReadMe.txt" (normalized: "c:\\programdata\\usoshared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x720 [0099.684] GetLastError () returned 0x0 [0099.684] WriteFile (in: hFile=0x720, lpBuffer=0x7ff7afca9500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpBuffer=0x7ff7afca9500*, lpNumberOfBytesWritten=0xd707b4d900*=0x324, lpOverlapped=0x0) returned 1 [0099.690] CloseHandle (hObject=0x720) returned 1 [0099.690] FindFirstFileW (in: lpFileName="C:\\ProgramData\\USOShared\\Logs\\*.*", lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0xd7079d9990 [0099.690] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.690] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.690] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.690] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.001.etl", dwFileAttributes=0x80) returned 0 [0099.690] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.001.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.001.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.691] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.691] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.691] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.691] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.691] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.002.etl", dwFileAttributes=0x80) returned 0 [0099.692] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.002.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.002.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.692] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.692] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.692] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.692] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.693] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.003.etl", dwFileAttributes=0x80) returned 0 [0099.693] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.003.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.003.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.694] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.694] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.694] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.694] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.694] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.004.etl", dwFileAttributes=0x80) returned 0 [0099.694] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.004.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.004.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.694] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.695] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.695] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.695] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.695] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.005.etl", dwFileAttributes=0x80) returned 0 [0099.695] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.005.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.005.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.695] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.695] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.696] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.696] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.696] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.006.etl", dwFileAttributes=0x80) returned 0 [0099.696] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.006.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.006.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.696] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.696] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.696] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.697] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.697] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.007.etl", dwFileAttributes=0x80) returned 0 [0099.697] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.007.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.007.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.697] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.697] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.697] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.697] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.698] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.008.etl", dwFileAttributes=0x80) returned 0 [0099.698] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.008.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.008.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.698] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.698] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.698] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.698] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.699] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.009.etl", dwFileAttributes=0x80) returned 0 [0099.699] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.009.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.009.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.699] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.699] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.699] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.699] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.699] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.010.etl", dwFileAttributes=0x80) returned 0 [0099.700] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.010.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.010.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.700] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.700] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.700] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.700] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.702] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.011.etl", dwFileAttributes=0x80) returned 0 [0099.703] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.011.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.011.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.703] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.703] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.703] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.703] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.704] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.012.etl", dwFileAttributes=0x80) returned 0 [0099.705] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.012.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.012.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.705] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.705] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.705] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.705] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.705] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.013.etl", dwFileAttributes=0x80) returned 0 [0099.706] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.013.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.013.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.706] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.706] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.706] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.706] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.706] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.014.etl", dwFileAttributes=0x80) returned 0 [0099.706] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.014.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.014.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.707] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.707] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.707] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.707] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.707] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.015.etl", dwFileAttributes=0x80) returned 0 [0099.707] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.015.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.015.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.707] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.708] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.708] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.708] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.708] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.016.etl", dwFileAttributes=0x80) returned 0 [0099.708] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.016.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.016.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.708] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.708] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.709] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.709] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.709] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.017.etl", dwFileAttributes=0x80) returned 0 [0099.709] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.017.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.017.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.709] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.709] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.709] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.709] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.710] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.018.etl", dwFileAttributes=0x80) returned 0 [0099.710] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.018.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.018.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.710] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.710] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.710] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.710] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.711] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.019.etl", dwFileAttributes=0x80) returned 0 [0099.711] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.019.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.019.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.711] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.711] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.711] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.711] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.711] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateUx.001.etl", dwFileAttributes=0x80) returned 1 [0099.712] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateUx.001.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updateux.001.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x724 [0099.712] GetFileSizeEx (in: hFile=0x724, lpFileSize=0xd707b4cf48 | out: lpFileSize=0xd707b4cf48*=4096) returned 1 [0099.712] GetFileSizeEx (in: hFile=0x724, lpFileSize=0xd707b4cf58 | out: lpFileSize=0xd707b4cf58*=4096) returned 1 [0099.712] SetFilePointerEx (in: hFile=0x724, liDistanceToMove=0xede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0099.712] ReadFile (in: hFile=0x724, lpBuffer=0xd707b4cfa8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xd707b4cf68, lpOverlapped=0x0 | out: lpBuffer=0xd707b4cfa8*, lpNumberOfBytesRead=0xd707b4cf68*=0x19, lpOverlapped=0x0) returned 1 [0099.713] SetFilePointer (in: hFile=0x724, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0099.713] CryptGenKey (in: hProv=0xd7079ce2d0, Algid=0x6610, dwFlags=0x1, phKey=0xd707b4cf30 | out: phKey=0xd707b4cf30*=0xd707995f20) returned 1 [0099.713] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0xd70aa60000 [0099.714] SetFilePointer (in: hFile=0x724, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0099.714] ReadFile (in: hFile=0x724, lpBuffer=0xd70aa60000, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xd707b4cf40, lpOverlapped=0x0 | out: lpBuffer=0xd70aa60000*, lpNumberOfBytesRead=0xd707b4cf40*=0x1000, lpOverlapped=0x0) returned 1 [0099.714] CryptEncrypt (in: hKey=0xd707995f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xd707b4cf3c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xd707b4cf3c*=0xf4250) returned 1 [0099.714] CryptEncrypt (in: hKey=0xd707995f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0xd70aa60000*, pdwDataLen=0xd707b4cf38*=0x1000, dwBufLen=0xf4250 | out: pbData=0xd70aa60000*, pdwDataLen=0xd707b4cf38*=0x1010) returned 1 [0099.714] SetFilePointer (in: hFile=0x724, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0099.714] WriteFile (in: hFile=0x724, lpBuffer=0xd70aa60000*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0xd707b4cf40, lpOverlapped=0x0 | out: lpBuffer=0xd70aa60000*, lpNumberOfBytesWritten=0xd707b4cf40*=0x1010, lpOverlapped=0x0) returned 1 [0099.714] WriteFile (in: hFile=0x724, lpBuffer=0xd707b4cf80*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xd707b4cf44, lpOverlapped=0x0 | out: lpBuffer=0xd707b4cf80*, lpNumberOfBytesWritten=0xd707b4cf44*=0x6, lpOverlapped=0x0) returned 1 [0099.714] CryptExportKey (in: hKey=0xd707995f20, hExpKey=0xd7079a7710, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xd707b4cf50 | out: pbData=0x0*, pdwDataLen=0xd707b4cf50*=0x10c) returned 1 [0099.714] CryptExportKey (in: hKey=0xd707995f20, hExpKey=0xd7079a7710, dwBlobType=0x1, dwFlags=0x0, pbData=0xd707b4cfd0, pdwDataLen=0xd707b4cf50 | out: pbData=0xd707b4cfd0*, pdwDataLen=0xd707b4cf50*=0x10c) returned 1 [0099.714] WriteFile (in: hFile=0x724, lpBuffer=0xd707b4cfd0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd707b4cf44, lpOverlapped=0x0 | out: lpBuffer=0xd707b4cfd0*, lpNumberOfBytesWritten=0xd707b4cf44*=0x10c, lpOverlapped=0x0) returned 1 [0099.714] CloseHandle (hObject=0x724) returned 1 [0099.745] VirtualFree (lpAddress=0xd70aa60000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.751] CryptDestroyKey (hKey=0xd707995f20) returned 1 [0099.751] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.751] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0 [0099.751] FindClose (in: hFindFile=0xd7079d9990 | out: hFindFile=0xd7079d9990) returned 1 [0099.751] SetLastError (dwErrCode=0x0) [0099.752] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\RyukReadMe.txt" (normalized: "c:\\programdata\\usoshared\\logs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x720 [0099.752] GetLastError () returned 0x0 [0099.752] WriteFile (in: hFile=0x720, lpBuffer=0x7ff7afca9500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpBuffer=0x7ff7afca9500*, lpNumberOfBytesWritten=0xd707b4d900*=0x324, lpOverlapped=0x0) returned 1 [0099.753] CloseHandle (hObject=0x720) returned 1 [0099.753] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0 [0099.753] FindClose (in: hFindFile=0xd7079d9870 | out: hFindFile=0xd7079d9870) returned 1 [0099.753] SetLastError (dwErrCode=0x0) [0099.753] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\RyukReadMe.txt" (normalized: "c:\\programdata\\usoshared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x71c [0099.753] GetLastError () returned 0xb7 [0099.753] CloseHandle (hObject=0x71c) returned 1 [0099.753] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 0 [0099.753] FindClose (in: hFindFile=0xd7079d8a90 | out: hFindFile=0xd7079d8a90) returned 1 [0099.753] SetLastError (dwErrCode=0x0) [0099.753] CreateFileW (lpFileName="C:\\ProgramData\\RyukReadMe.txt" (normalized: "c:\\programdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x718 [0099.754] GetLastError () returned 0xb7 [0099.754] CloseHandle (hObject=0x718) returned 1 [0099.754] FindNextFileW (in: hFindFile=0xd707976b50, lpFindFileData=0xd707b4e8b0 | out: lpFindFileData=0xd707b4e8b0) returned 1 [0099.754] SetLastError (dwErrCode=0x0) [0099.754] CreateFileW (lpFileName="C:\\RyukReadMe.txt" (normalized: "c:\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.754] GetLastError () returned 0x5 [0099.754] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e860, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e860, lpOverlapped=0x0) returned 0 [0099.754] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.754] FindFirstFileW (in: lpFileName="C:\\Recovery\\*.*", lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 0xffffffffffffffff [0099.754] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0099.754] SetLastError (dwErrCode=0x0) [0099.754] CreateFileW (lpFileName="C:\\Recovery\\RyukReadMe.txt" (normalized: "c:\\recovery\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.758] GetLastError () returned 0x5 [0099.758] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e860, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e860, lpOverlapped=0x0) returned 0 [0099.758] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.758] FindNextFileW (in: hFindFile=0xd707976b50, lpFindFileData=0xd707b4e8b0 | out: lpFindFileData=0xd707b4e8b0) returned 1 [0099.758] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.758] SetFileAttributesW (lpFileName="C:\\swapfile.sys", dwFileAttributes=0x80) returned 0 [0099.759] CreateFileW (lpFileName="C:\\swapfile.sys" (normalized: "c:\\swapfile.sys"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.759] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.759] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.759] FindNextFileW (in: hFindFile=0xd707976b50, lpFindFileData=0xd707b4e8b0 | out: lpFindFileData=0xd707b4e8b0) returned 1 [0099.759] SetLastError (dwErrCode=0x0) [0099.759] CreateFileW (lpFileName="C:\\RyukReadMe.txt" (normalized: "c:\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.759] GetLastError () returned 0x5 [0099.759] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e860, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e860, lpOverlapped=0x0) returned 0 [0099.759] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.759] FindFirstFileW (in: lpFileName="C:\\System Volume Information\\*.*", lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 0xffffffffffffffff [0099.760] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0099.760] SetLastError (dwErrCode=0x0) [0099.760] CreateFileW (lpFileName="C:\\System Volume Information\\RyukReadMe.txt" (normalized: "c:\\system volume information\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.760] GetLastError () returned 0x5 [0099.760] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e860, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e860, lpOverlapped=0x0) returned 0 [0099.760] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.760] FindNextFileW (in: hFindFile=0xd707976b50, lpFindFileData=0xd707b4e8b0 | out: lpFindFileData=0xd707b4e8b0) returned 1 [0099.760] SetLastError (dwErrCode=0x0) [0099.760] CreateFileW (lpFileName="C:\\RyukReadMe.txt" (normalized: "c:\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.760] GetLastError () returned 0x5 [0099.760] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e860, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e860, lpOverlapped=0x0) returned 0 [0099.760] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.760] FindFirstFileW (in: lpFileName="C:\\Users\\*.*", lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 0xd7079d8eb0 [0099.760] FindNextFileW (in: hFindFile=0xd7079d8eb0, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 1 [0099.760] FindNextFileW (in: hFindFile=0xd7079d8eb0, lpFindFileData=0xd707b4e100 | out: lpFindFileData=0xd707b4e100) returned 1 [0099.760] SetLastError (dwErrCode=0x0) [0099.760] CreateFileW (lpFileName="C:\\Users\\RyukReadMe.txt" (normalized: "c:\\users\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.761] GetLastError () returned 0x5 [0099.761] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4e0b0, lpOverlapped=0x0) returned 0 [0099.761] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.761] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\*.*", lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 0xd7079d93f0 [0099.761] FindNextFileW (in: hFindFile=0xd7079d93f0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0099.761] FindNextFileW (in: hFindFile=0xd7079d93f0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0099.761] SetLastError (dwErrCode=0x0) [0099.761] CreateFileW (lpFileName="C:\\Users\\All Users\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x720 [0099.761] GetLastError () returned 0xb7 [0099.761] CloseHandle (hObject=0x720) returned 1 [0099.761] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\*.*", lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0xd7079d91b0 [0099.761] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.762] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.762] SetLastError (dwErrCode=0x0) [0099.762] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\adobe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x724 [0099.762] GetLastError () returned 0xb7 [0099.762] CloseHandle (hObject=0x724) returned 1 [0099.762] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d9870 [0099.762] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.762] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.762] SetLastError (dwErrCode=0x0) [0099.762] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\adobe\\arm\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x728 [0099.763] GetLastError () returned 0xb7 [0099.763] CloseHandle (hObject=0x728) returned 1 [0099.763] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_15.007.20033\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d9e10 [0099.763] FindNextFileW (in: hFindFile=0xd7079d9e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.763] FindNextFileW (in: hFindFile=0xd7079d9e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.763] FindNextFileW (in: hFindFile=0xd7079d9e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0099.763] FindClose (in: hFindFile=0xd7079d9e10 | out: hFindFile=0xd7079d9e10) returned 1 [0099.763] SetLastError (dwErrCode=0x0) [0099.763] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_15.007.20033\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\adobe\\arm\\reader_15.007.20033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x728 [0099.766] GetLastError () returned 0xb7 [0099.766] CloseHandle (hObject=0x728) returned 1 [0099.766] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.766] SetLastError (dwErrCode=0x0) [0099.766] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\adobe\\arm\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x728 [0099.767] GetLastError () returned 0xb7 [0099.767] CloseHandle (hObject=0x728) returned 1 [0099.767] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_15.023.20070\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d94b0 [0099.767] FindNextFileW (in: hFindFile=0xd7079d94b0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.767] FindNextFileW (in: hFindFile=0xd7079d94b0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.767] FindNextFileW (in: hFindFile=0xd7079d94b0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0099.767] FindClose (in: hFindFile=0xd7079d94b0 | out: hFindFile=0xd7079d94b0) returned 1 [0099.767] SetLastError (dwErrCode=0x0) [0099.767] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_15.023.20070\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\adobe\\arm\\reader_15.023.20070\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x728 [0099.767] GetLastError () returned 0xb7 [0099.767] CloseHandle (hObject=0x728) returned 1 [0099.767] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.767] SetLastError (dwErrCode=0x0) [0099.768] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\adobe\\arm\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x728 [0099.768] GetLastError () returned 0xb7 [0099.768] CloseHandle (hObject=0x728) returned 1 [0099.768] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_17.009.20058\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d9c90 [0099.768] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.768] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.768] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0099.768] FindClose (in: hFindFile=0xd7079d9c90 | out: hFindFile=0xd7079d9c90) returned 1 [0099.768] SetLastError (dwErrCode=0x0) [0099.768] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_17.009.20058\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\adobe\\arm\\reader_17.009.20058\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x728 [0099.769] GetLastError () returned 0xb7 [0099.769] CloseHandle (hObject=0x728) returned 1 [0099.769] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.769] SetLastError (dwErrCode=0x0) [0099.769] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\adobe\\arm\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x728 [0099.769] GetLastError () returned 0xb7 [0099.769] CloseHandle (hObject=0x728) returned 1 [0099.769] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_17.012.20098\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d9390 [0099.770] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.770] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.770] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.770] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_17.012.20098\\AcroRdrDCUpd1800920044_incr.msp", dwFileAttributes=0x80) returned 1 [0099.771] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_17.012.20098\\AcroRdrDCUpd1800920044_incr.msp" (normalized: "c:\\users\\all users\\adobe\\arm\\reader_17.012.20098\\acrordrdcupd1800920044_incr.msp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x72c [0099.771] GetFileSizeEx (in: hFile=0x72c, lpFileSize=0xd707b4bfe8 | out: lpFileSize=0xd707b4bfe8*=23507238) returned 1 [0099.771] GetFileSizeEx (in: hFile=0x72c, lpFileSize=0xd707b4bff8 | out: lpFileSize=0xd707b4bff8*=23507238) returned 1 [0099.771] SetFilePointerEx (in: hFile=0x72c, liDistanceToMove=0x166b004, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0099.771] ReadFile (in: hFile=0x72c, lpBuffer=0xd707b4c048, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xd707b4c008, lpOverlapped=0x0 | out: lpBuffer=0xd707b4c048*, lpNumberOfBytesRead=0xd707b4c008*=0x19, lpOverlapped=0x0) returned 1 [0099.771] CloseHandle (hObject=0x72c) returned 1 [0099.771] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.772] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.772] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0099.772] FindClose (in: hFindFile=0xd7079d9390 | out: hFindFile=0xd7079d9390) returned 1 [0099.772] SetLastError (dwErrCode=0x0) [0099.772] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_17.012.20098\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\adobe\\arm\\reader_17.012.20098\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x728 [0099.772] GetLastError () returned 0xb7 [0099.772] CloseHandle (hObject=0x728) returned 1 [0099.772] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.772] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.772] SetLastError (dwErrCode=0x0) [0099.772] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\adobe\\arm\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x728 [0099.773] GetLastError () returned 0xb7 [0099.773] CloseHandle (hObject=0x728) returned 1 [0099.773] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\S\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d9c90 [0099.773] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.773] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.773] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0099.773] FindClose (in: hFindFile=0xd7079d9c90 | out: hFindFile=0xd7079d9c90) returned 1 [0099.773] SetLastError (dwErrCode=0x0) [0099.773] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\S\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\adobe\\arm\\s\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x728 [0099.774] GetLastError () returned 0xb7 [0099.774] CloseHandle (hObject=0x728) returned 1 [0099.774] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.774] SetLastError (dwErrCode=0x0) [0099.774] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\adobe\\arm\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x728 [0099.774] GetLastError () returned 0xb7 [0099.774] CloseHandle (hObject=0x728) returned 1 [0099.775] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\{291AA914-A987-4CE9-BD63-AC0A92D435E5}\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d94b0 [0099.775] FindNextFileW (in: hFindFile=0xd7079d94b0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.775] FindNextFileW (in: hFindFile=0xd7079d94b0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.775] FindNextFileW (in: hFindFile=0xd7079d94b0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0099.775] FindClose (in: hFindFile=0xd7079d94b0 | out: hFindFile=0xd7079d94b0) returned 1 [0099.775] SetLastError (dwErrCode=0x0) [0099.775] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\{291AA914-A987-4CE9-BD63-AC0A92D435E5}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\adobe\\arm\\{291aa914-a987-4ce9-bd63-ac0a92d435e5}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x728 [0099.775] GetLastError () returned 0xb7 [0099.775] CloseHandle (hObject=0x728) returned 1 [0099.776] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0099.776] FindClose (in: hFindFile=0xd7079d9870 | out: hFindFile=0xd7079d9870) returned 1 [0099.776] SetLastError (dwErrCode=0x0) [0099.776] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\adobe\\arm\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x724 [0099.776] GetLastError () returned 0xb7 [0099.776] CloseHandle (hObject=0x724) returned 1 [0099.776] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.776] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0 [0099.776] FindClose (in: hFindFile=0xd7079d91b0 | out: hFindFile=0xd7079d91b0) returned 1 [0099.776] SetLastError (dwErrCode=0x0) [0099.776] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\adobe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x720 [0099.777] GetLastError () returned 0xb7 [0099.777] CloseHandle (hObject=0x720) returned 1 [0099.777] FindNextFileW (in: hFindFile=0xd7079d93f0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0099.777] SetLastError (dwErrCode=0x0) [0099.777] CreateFileW (lpFileName="C:\\Users\\All Users\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x720 [0099.777] GetLastError () returned 0xb7 [0099.777] CloseHandle (hObject=0x720) returned 1 [0099.778] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Application Data\\*.*", lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0xffffffffffffffff [0099.778] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0099.778] SetLastError (dwErrCode=0x0) [0099.778] CreateFileW (lpFileName="C:\\Users\\All Users\\Application Data\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\application data\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x720 [0099.803] GetLastError () returned 0xb7 [0099.803] CloseHandle (hObject=0x720) returned 1 [0099.804] FindNextFileW (in: hFindFile=0xd7079d93f0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0099.804] SetLastError (dwErrCode=0x0) [0099.804] CreateFileW (lpFileName="C:\\Users\\All Users\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x720 [0099.804] GetLastError () returned 0xb7 [0099.804] CloseHandle (hObject=0x720) returned 1 [0099.804] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Comms\\*.*", lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0xd7079d94b0 [0099.805] FindNextFileW (in: hFindFile=0xd7079d94b0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.805] FindNextFileW (in: hFindFile=0xd7079d94b0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.805] FindNextFileW (in: hFindFile=0xd7079d94b0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0 [0099.805] FindClose (in: hFindFile=0xd7079d94b0 | out: hFindFile=0xd7079d94b0) returned 1 [0099.805] SetLastError (dwErrCode=0x0) [0099.805] CreateFileW (lpFileName="C:\\Users\\All Users\\Comms\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\comms\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x720 [0099.805] GetLastError () returned 0xb7 [0099.805] CloseHandle (hObject=0x720) returned 1 [0099.805] FindNextFileW (in: hFindFile=0xd7079d93f0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0099.805] SetLastError (dwErrCode=0x0) [0099.805] CreateFileW (lpFileName="C:\\Users\\All Users\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x720 [0099.806] GetLastError () returned 0xb7 [0099.806] CloseHandle (hObject=0x720) returned 1 [0099.806] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Desktop\\*.*", lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0xffffffffffffffff [0099.806] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0099.806] SetLastError (dwErrCode=0x0) [0099.806] CreateFileW (lpFileName="C:\\Users\\All Users\\Desktop\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\desktop\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.807] GetLastError () returned 0x5 [0099.807] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d900, lpOverlapped=0x0) returned 0 [0099.807] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.807] FindNextFileW (in: hFindFile=0xd7079d93f0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0099.807] SetLastError (dwErrCode=0x0) [0099.807] CreateFileW (lpFileName="C:\\Users\\All Users\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x720 [0099.807] GetLastError () returned 0xb7 [0099.807] CloseHandle (hObject=0x720) returned 1 [0099.807] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Documents\\*.*", lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0xffffffffffffffff [0099.808] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0099.808] SetLastError (dwErrCode=0x0) [0099.808] CreateFileW (lpFileName="C:\\Users\\All Users\\Documents\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\documents\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x720 [0099.808] GetLastError () returned 0xb7 [0099.808] CloseHandle (hObject=0x720) returned 1 [0099.808] FindNextFileW (in: hFindFile=0xd7079d93f0, lpFindFileData=0xd707b4d950 | out: lpFindFileData=0xd707b4d950) returned 1 [0099.808] SetLastError (dwErrCode=0x0) [0099.808] CreateFileW (lpFileName="C:\\Users\\All Users\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x720 [0099.809] GetLastError () returned 0xb7 [0099.809] CloseHandle (hObject=0x720) returned 1 [0099.809] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\*.*", lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 0xd7079d87f0 [0099.809] FindNextFileW (in: hFindFile=0xd7079d87f0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.809] FindNextFileW (in: hFindFile=0xd7079d87f0, lpFindFileData=0xd707b4d1a0 | out: lpFindFileData=0xd707b4d1a0) returned 1 [0099.809] SetLastError (dwErrCode=0x0) [0099.809] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.810] GetLastError () returned 0x5 [0099.810] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0099.812] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.812] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d8910 [0099.813] FindNextFileW (in: hFindFile=0xd7079d8910, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.813] FindNextFileW (in: hFindFile=0xd7079d8910, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.813] SetLastError (dwErrCode=0x0) [0099.813] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.813] GetLastError () returned 0x5 [0099.813] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.813] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.813] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d9c90 [0099.813] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.813] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.813] SetLastError (dwErrCode=0x0) [0099.813] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\8c296b8e-6699-457c-9415-3d0647e1d775\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.814] GetLastError () returned 0x5 [0099.814] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0099.814] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.814] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\en-us.16\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079d8a90 [0099.815] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.815] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.815] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.815] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\en-us.16\\MasterDescriptor.en-us.xml", dwFileAttributes=0x80) returned 0 [0099.816] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\en-us.16\\MasterDescriptor.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\8c296b8e-6699-457c-9415-3d0647e1d775\\en-us.16\\masterdescriptor.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.816] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.816] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.817] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.817] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.817] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\en-us.16\\s641033.hash", dwFileAttributes=0x80) returned 0 [0099.817] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\en-us.16\\s641033.hash" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\8c296b8e-6699-457c-9415-3d0647e1d775\\en-us.16\\s641033.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.818] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.818] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.818] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.818] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.819] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\en-us.16\\stream.x64.en-us.man.dat", dwFileAttributes=0x80) returned 0 [0099.819] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\en-us.16\\stream.x64.en-us.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\8c296b8e-6699-457c-9415-3d0647e1d775\\en-us.16\\stream.x64.en-us.man.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.819] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.820] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.820] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0099.820] FindClose (in: hFindFile=0xd7079d8a90 | out: hFindFile=0xd7079d8a90) returned 1 [0099.821] SetLastError (dwErrCode=0x0) [0099.821] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\en-us.16\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\8c296b8e-6699-457c-9415-3d0647e1d775\\en-us.16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.826] GetLastError () returned 0x5 [0099.826] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0099.826] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.826] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.826] SetLastError (dwErrCode=0x0) [0099.826] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\8c296b8e-6699-457c-9415-3d0647e1d775\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.826] GetLastError () returned 0x5 [0099.826] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0099.826] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.826] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\x-none.16\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079d9870 [0099.827] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.827] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.827] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.828] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\x-none.16\\MasterDescriptor.x-none.xml", dwFileAttributes=0x80) returned 0 [0099.828] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\x-none.16\\MasterDescriptor.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\8c296b8e-6699-457c-9415-3d0647e1d775\\x-none.16\\masterdescriptor.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.828] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.829] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.829] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.829] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.829] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\x-none.16\\s640.hash", dwFileAttributes=0x80) returned 0 [0099.830] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\x-none.16\\s640.hash" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\8c296b8e-6699-457c-9415-3d0647e1d775\\x-none.16\\s640.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.830] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.830] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.831] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.831] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.831] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\x-none.16\\stream.x64.x-none.man.dat", dwFileAttributes=0x80) returned 0 [0099.831] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\x-none.16\\stream.x64.x-none.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\8c296b8e-6699-457c-9415-3d0647e1d775\\x-none.16\\stream.x64.x-none.man.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.832] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.832] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.832] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0099.832] FindClose (in: hFindFile=0xd7079d9870 | out: hFindFile=0xd7079d9870) returned 1 [0099.833] SetLastError (dwErrCode=0x0) [0099.833] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\x-none.16\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\8c296b8e-6699-457c-9415-3d0647e1d775\\x-none.16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.838] GetLastError () returned 0x5 [0099.838] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0099.838] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.838] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0099.838] FindClose (in: hFindFile=0xd7079d9c90 | out: hFindFile=0xd7079d9c90) returned 1 [0099.838] SetLastError (dwErrCode=0x0) [0099.838] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\8c296b8e-6699-457c-9415-3d0647e1d775\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.839] GetLastError () returned 0x5 [0099.839] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.839] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.839] FindNextFileW (in: hFindFile=0xd7079d8910, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.839] SetLastError (dwErrCode=0x0) [0099.839] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.839] GetLastError () returned 0x5 [0099.839] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.840] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.840] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d9090 [0099.840] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.840] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.840] SetLastError (dwErrCode=0x0) [0099.840] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\9d76938c-943d-439f-a135-26d02821ee05\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.840] GetLastError () returned 0x5 [0099.840] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0099.840] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.840] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\en-us.16\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079d9990 [0099.844] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.844] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.844] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.844] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\en-us.16\\MasterDescriptor.en-us.xml", dwFileAttributes=0x80) returned 0 [0099.845] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\en-us.16\\MasterDescriptor.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\9d76938c-943d-439f-a135-26d02821ee05\\en-us.16\\masterdescriptor.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.845] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.845] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.845] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.845] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.846] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\en-us.16\\s641033.hash", dwFileAttributes=0x80) returned 0 [0099.846] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\en-us.16\\s641033.hash" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\9d76938c-943d-439f-a135-26d02821ee05\\en-us.16\\s641033.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.847] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.847] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.847] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.847] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.847] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\en-us.16\\stream.x64.en-us.man.dat", dwFileAttributes=0x80) returned 0 [0099.848] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\en-us.16\\stream.x64.en-us.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\9d76938c-943d-439f-a135-26d02821ee05\\en-us.16\\stream.x64.en-us.man.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.848] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.848] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.848] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0099.848] FindClose (in: hFindFile=0xd7079d9990 | out: hFindFile=0xd7079d9990) returned 1 [0099.849] SetLastError (dwErrCode=0x0) [0099.849] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\en-us.16\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\9d76938c-943d-439f-a135-26d02821ee05\\en-us.16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.854] GetLastError () returned 0x5 [0099.854] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0099.854] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.854] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.854] SetLastError (dwErrCode=0x0) [0099.854] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\9d76938c-943d-439f-a135-26d02821ee05\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.855] GetLastError () returned 0x5 [0099.855] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0099.855] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.855] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\x-none.16\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079d9870 [0099.856] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.856] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.856] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.856] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\x-none.16\\MasterDescriptor.x-none.xml", dwFileAttributes=0x80) returned 0 [0099.857] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\x-none.16\\MasterDescriptor.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\9d76938c-943d-439f-a135-26d02821ee05\\x-none.16\\masterdescriptor.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.858] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.858] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.858] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.858] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.859] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\x-none.16\\s640.hash", dwFileAttributes=0x80) returned 0 [0099.859] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\x-none.16\\s640.hash" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\9d76938c-943d-439f-a135-26d02821ee05\\x-none.16\\s640.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.859] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.859] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.860] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.860] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.860] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\x-none.16\\stream.x64.x-none.man.dat", dwFileAttributes=0x80) returned 0 [0099.861] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\x-none.16\\stream.x64.x-none.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\9d76938c-943d-439f-a135-26d02821ee05\\x-none.16\\stream.x64.x-none.man.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.861] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.861] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.861] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0099.861] FindClose (in: hFindFile=0xd7079d9870 | out: hFindFile=0xd7079d9870) returned 1 [0099.862] SetLastError (dwErrCode=0x0) [0099.862] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\x-none.16\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\9d76938c-943d-439f-a135-26d02821ee05\\x-none.16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.867] GetLastError () returned 0x5 [0099.867] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0099.867] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.867] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0099.867] FindClose (in: hFindFile=0xd7079d9090 | out: hFindFile=0xd7079d9090) returned 1 [0099.867] SetLastError (dwErrCode=0x0) [0099.867] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\9d76938c-943d-439f-a135-26d02821ee05\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.868] GetLastError () returned 0x5 [0099.868] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.868] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.868] FindNextFileW (in: hFindFile=0xd7079d8910, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.868] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.868] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\DeploymentConfig.0.xml", dwFileAttributes=0x80) returned 0 [0099.869] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\DeploymentConfig.0.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\deploymentconfig.0.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.869] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.869] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.870] FindNextFileW (in: hFindFile=0xd7079d8910, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.870] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.870] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\DeploymentConfig.1.xml", dwFileAttributes=0x80) returned 0 [0099.870] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\DeploymentConfig.1.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\deploymentconfig.1.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.871] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.871] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.871] FindNextFileW (in: hFindFile=0xd7079d8910, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.871] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.871] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\DeploymentConfig.2.xml", dwFileAttributes=0x80) returned 0 [0099.872] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\DeploymentConfig.2.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\deploymentconfig.2.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.875] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.875] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.875] FindNextFileW (in: hFindFile=0xd7079d8910, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.875] SetLastError (dwErrCode=0x0) [0099.875] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.876] GetLastError () returned 0x5 [0099.876] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.876] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.876] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d8a90 [0099.876] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.876] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.876] SetLastError (dwErrCode=0x0) [0099.876] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.876] GetLastError () returned 0x5 [0099.876] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0099.876] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.877] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079d9c90 [0099.877] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.877] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.877] SetLastError (dwErrCode=0x0) [0099.877] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\catalog\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.877] GetLastError () returned 0x5 [0099.877] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0099.877] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.877] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079d8af0 [0099.877] FindNextFileW (in: hFindFile=0xd7079d8af0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0099.877] FindNextFileW (in: hFindFile=0xd7079d8af0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0099.877] SetLastError (dwErrCode=0x0) [0099.877] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.878] GetLastError () returned 0x5 [0099.878] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0099.878] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.878] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079d91b0 [0099.878] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0099.878] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0099.878] SetLastError (dwErrCode=0x0) [0099.878] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.878] GetLastError () returned 0x5 [0099.878] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0) returned 0 [0099.878] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.878] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\*.*", lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 0xd7079d8d30 [0099.878] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0099.878] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0099.879] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.879] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\DeploymentConfiguration.xml", dwFileAttributes=0x80) returned 0 [0099.879] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\DeploymentConfiguration.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\deploymentconfiguration.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.879] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.880] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.880] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0099.880] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.880] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\Manifest.xml", dwFileAttributes=0x80) returned 0 [0099.880] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\Manifest.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\manifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.881] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.881] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.881] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0099.881] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.881] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\UserDeploymentConfiguration.xml", dwFileAttributes=0x80) returned 0 [0099.882] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\UserDeploymentConfiguration.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\userdeploymentconfiguration.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.882] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.882] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.882] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 1 [0099.882] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.882] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\UserManifest.xml", dwFileAttributes=0x80) returned 0 [0099.883] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\UserManifest.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\usermanifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.883] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.883] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.884] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4a380 | out: lpFindFileData=0xd707b4a380) returned 0 [0099.884] FindClose (in: hFindFile=0xd7079d8d30 | out: hFindFile=0xd7079d8d30) returned 1 [0099.884] SetLastError (dwErrCode=0x0) [0099.884] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.884] GetLastError () returned 0x5 [0099.884] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4aae0, lpOverlapped=0x0) returned 0 [0099.884] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.884] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0 [0099.884] FindClose (in: hFindFile=0xd7079d91b0 | out: hFindFile=0xd7079d91b0) returned 1 [0099.884] SetLastError (dwErrCode=0x0) [0099.885] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.885] GetLastError () returned 0x5 [0099.885] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0) returned 0 [0099.885] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.885] FindNextFileW (in: hFindFile=0xd7079d8af0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0099.885] FindClose (in: hFindFile=0xd7079d8af0 | out: hFindFile=0xd7079d8af0) returned 1 [0099.885] SetLastError (dwErrCode=0x0) [0099.885] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.886] GetLastError () returned 0x5 [0099.886] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0099.886] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.886] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0099.886] FindClose (in: hFindFile=0xd7079d9c90 | out: hFindFile=0xd7079d9c90) returned 1 [0099.886] SetLastError (dwErrCode=0x0) [0099.886] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\catalog\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.886] GetLastError () returned 0x5 [0099.886] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0099.886] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.886] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.886] SetLastError (dwErrCode=0x0) [0099.886] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.887] GetLastError () returned 0x5 [0099.887] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0099.887] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.887] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Integration\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079d9390 [0099.887] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.887] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.887] SetLastError (dwErrCode=0x0) [0099.887] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Integration\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\integration\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.888] GetLastError () returned 0x5 [0099.888] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0099.888] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.888] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Integration\\ShortcutBackups\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079d91b0 [0099.892] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0099.893] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0099.893] FindClose (in: hFindFile=0xd7079d91b0 | out: hFindFile=0xd7079d91b0) returned 1 [0099.893] SetLastError (dwErrCode=0x0) [0099.893] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Integration\\ShortcutBackups\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\integration\\shortcutbackups\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.893] GetLastError () returned 0x5 [0099.893] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0099.893] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.893] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0099.893] FindClose (in: hFindFile=0xd7079d9390 | out: hFindFile=0xd7079d9390) returned 1 [0099.893] SetLastError (dwErrCode=0x0) [0099.893] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Integration\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\integration\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.894] GetLastError () returned 0x5 [0099.894] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0099.894] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.894] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0099.894] FindClose (in: hFindFile=0xd7079d8a90 | out: hFindFile=0xd7079d8a90) returned 1 [0099.894] SetLastError (dwErrCode=0x0) [0099.894] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.894] GetLastError () returned 0x5 [0099.894] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.895] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.895] FindNextFileW (in: hFindFile=0xd7079d8910, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.895] SetLastError (dwErrCode=0x0) [0099.895] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.895] GetLastError () returned 0x5 [0099.895] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.895] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.895] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d8d30 [0099.895] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.895] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.895] SetLastError (dwErrCode=0x0) [0099.895] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.896] GetLastError () returned 0x5 [0099.896] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0099.896] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.896] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079d9090 [0099.896] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.896] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.896] SetLastError (dwErrCode=0x0) [0099.896] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\eda58a0b-ad79-496a-8530-618d08767e60\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.897] GetLastError () returned 0x5 [0099.897] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0099.897] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.897] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\en-us.16\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079d94b0 [0099.898] FindNextFileW (in: hFindFile=0xd7079d94b0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0099.898] FindNextFileW (in: hFindFile=0xd7079d94b0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0099.898] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.898] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\en-us.16\\MasterDescriptor.en-us.xml", dwFileAttributes=0x80) returned 0 [0099.898] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\en-us.16\\MasterDescriptor.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\eda58a0b-ad79-496a-8530-618d08767e60\\en-us.16\\masterdescriptor.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.899] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.899] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.899] FindNextFileW (in: hFindFile=0xd7079d94b0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0099.899] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.900] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\en-us.16\\s641033.hash", dwFileAttributes=0x80) returned 0 [0099.900] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\en-us.16\\s641033.hash" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\eda58a0b-ad79-496a-8530-618d08767e60\\en-us.16\\s641033.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.900] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.900] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.901] FindNextFileW (in: hFindFile=0xd7079d94b0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0099.901] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.901] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\en-us.16\\stream.Platform.Culture.man.xml", dwFileAttributes=0x80) returned 0 [0099.901] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\en-us.16\\stream.Platform.Culture.man.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\eda58a0b-ad79-496a-8530-618d08767e60\\en-us.16\\stream.platform.culture.man.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.902] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.902] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.902] FindNextFileW (in: hFindFile=0xd7079d94b0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0099.902] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.902] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\en-us.16\\stream.x64.en-us.hash", dwFileAttributes=0x80) returned 0 [0099.903] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\en-us.16\\stream.x64.en-us.hash" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\eda58a0b-ad79-496a-8530-618d08767e60\\en-us.16\\stream.x64.en-us.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.903] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.904] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.904] FindNextFileW (in: hFindFile=0xd7079d94b0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0099.904] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.904] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\en-us.16\\stream.x64.en-us.man.dat", dwFileAttributes=0x80) returned 0 [0099.905] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\en-us.16\\stream.x64.en-us.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\eda58a0b-ad79-496a-8530-618d08767e60\\en-us.16\\stream.x64.en-us.man.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.905] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.905] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.905] FindNextFileW (in: hFindFile=0xd7079d94b0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0099.906] FindClose (in: hFindFile=0xd7079d94b0 | out: hFindFile=0xd7079d94b0) returned 1 [0099.906] SetLastError (dwErrCode=0x0) [0099.906] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\en-us.16\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\eda58a0b-ad79-496a-8530-618d08767e60\\en-us.16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.911] GetLastError () returned 0x5 [0099.911] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0099.911] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.911] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.911] SetLastError (dwErrCode=0x0) [0099.911] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\eda58a0b-ad79-496a-8530-618d08767e60\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.912] GetLastError () returned 0x5 [0099.912] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0099.912] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.912] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\x-none.16\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079d9e10 [0099.913] FindNextFileW (in: hFindFile=0xd7079d9e10, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0099.913] FindNextFileW (in: hFindFile=0xd7079d9e10, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0099.913] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.913] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\x-none.16\\MasterDescriptor.x-none.xml", dwFileAttributes=0x80) returned 0 [0099.914] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\x-none.16\\MasterDescriptor.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\eda58a0b-ad79-496a-8530-618d08767e60\\x-none.16\\masterdescriptor.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.914] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.914] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.915] FindNextFileW (in: hFindFile=0xd7079d9e10, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0099.915] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.915] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\x-none.16\\s640.hash", dwFileAttributes=0x80) returned 0 [0099.915] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\x-none.16\\s640.hash" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\eda58a0b-ad79-496a-8530-618d08767e60\\x-none.16\\s640.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.916] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.916] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.916] FindNextFileW (in: hFindFile=0xd7079d9e10, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0099.916] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.916] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\x-none.16\\stream.Platform.x-none.man.xml", dwFileAttributes=0x80) returned 0 [0099.917] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\x-none.16\\stream.Platform.x-none.man.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\eda58a0b-ad79-496a-8530-618d08767e60\\x-none.16\\stream.platform.x-none.man.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.917] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.917] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.917] FindNextFileW (in: hFindFile=0xd7079d9e10, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0099.917] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.918] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\x-none.16\\stream.x64.x-none.hash", dwFileAttributes=0x80) returned 0 [0099.918] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\x-none.16\\stream.x64.x-none.hash" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\eda58a0b-ad79-496a-8530-618d08767e60\\x-none.16\\stream.x64.x-none.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.919] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.919] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.919] FindNextFileW (in: hFindFile=0xd7079d9e10, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0099.922] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.922] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\x-none.16\\stream.x64.x-none.man.dat", dwFileAttributes=0x80) returned 0 [0099.922] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\x-none.16\\stream.x64.x-none.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\eda58a0b-ad79-496a-8530-618d08767e60\\x-none.16\\stream.x64.x-none.man.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.923] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.923] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.923] FindNextFileW (in: hFindFile=0xd7079d9e10, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0099.923] FindClose (in: hFindFile=0xd7079d9e10 | out: hFindFile=0xd7079d9e10) returned 1 [0099.924] SetLastError (dwErrCode=0x0) [0099.924] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\x-none.16\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\eda58a0b-ad79-496a-8530-618d08767e60\\x-none.16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.929] GetLastError () returned 0x5 [0099.929] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0099.929] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.929] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0099.929] FindClose (in: hFindFile=0xd7079d9090 | out: hFindFile=0xd7079d9090) returned 1 [0099.929] SetLastError (dwErrCode=0x0) [0099.929] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\eda58a0b-ad79-496a-8530-618d08767e60\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.930] GetLastError () returned 0x5 [0099.930] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0099.930] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.930] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.930] SetLastError (dwErrCode=0x0) [0099.930] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.930] GetLastError () returned 0x5 [0099.930] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0099.930] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.930] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079d8a90 [0099.931] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.931] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.931] SetLastError (dwErrCode=0x0) [0099.931] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.931] GetLastError () returned 0x5 [0099.931] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0099.931] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.931] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\en-us.16\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079d9870 [0099.932] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0099.932] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0099.932] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.933] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\en-us.16\\MasterDescriptor.en-us.xml", dwFileAttributes=0x80) returned 0 [0099.934] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\en-us.16\\MasterDescriptor.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\en-us.16\\masterdescriptor.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.934] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.934] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.946] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0099.946] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.947] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\en-us.16\\s641033.hash", dwFileAttributes=0x80) returned 0 [0099.947] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\en-us.16\\s641033.hash" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\en-us.16\\s641033.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.948] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.948] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.948] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0099.948] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.949] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\en-us.16\\Stream.Platform.Culture.man.xml", dwFileAttributes=0x80) returned 0 [0099.949] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\en-us.16\\Stream.Platform.Culture.man.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\en-us.16\\stream.platform.culture.man.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.949] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.949] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.950] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0099.950] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.950] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\en-us.16\\stream.x64.en-us.hash", dwFileAttributes=0x80) returned 0 [0099.951] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\en-us.16\\stream.x64.en-us.hash" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\en-us.16\\stream.x64.en-us.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.952] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.952] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.952] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0099.952] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.952] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\en-us.16\\stream.x64.en-us.man.dat", dwFileAttributes=0x80) returned 0 [0099.953] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\en-us.16\\stream.x64.en-us.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\en-us.16\\stream.x64.en-us.man.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.953] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.953] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.953] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0099.953] FindClose (in: hFindFile=0xd7079d9870 | out: hFindFile=0xd7079d9870) returned 1 [0099.954] SetLastError (dwErrCode=0x0) [0099.954] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\en-us.16\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\en-us.16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.959] GetLastError () returned 0x5 [0099.959] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0099.959] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.959] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0099.959] SetLastError (dwErrCode=0x0) [0099.959] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.960] GetLastError () returned 0x5 [0099.960] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0099.960] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.960] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\x-none.16\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079d9090 [0099.961] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0099.961] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0099.961] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.961] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\x-none.16\\MasterDescriptor.x-none.xml", dwFileAttributes=0x80) returned 0 [0099.962] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\x-none.16\\MasterDescriptor.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\x-none.16\\masterdescriptor.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.962] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.962] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.963] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0099.963] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.963] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\x-none.16\\s640.hash", dwFileAttributes=0x80) returned 0 [0099.963] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\x-none.16\\s640.hash" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\x-none.16\\s640.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.964] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.964] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.964] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0099.964] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.964] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\x-none.16\\Stream.Platform.x-none.man.xml", dwFileAttributes=0x80) returned 0 [0099.965] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\x-none.16\\Stream.Platform.x-none.man.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\x-none.16\\stream.platform.x-none.man.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.965] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.965] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.966] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0099.966] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.969] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\x-none.16\\stream.x64.x-none.hash", dwFileAttributes=0x80) returned 0 [0099.969] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\x-none.16\\stream.x64.x-none.hash" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\x-none.16\\stream.x64.x-none.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.970] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.970] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.970] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0099.970] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.970] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\x-none.16\\stream.x64.x-none.man.dat", dwFileAttributes=0x80) returned 0 [0099.971] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\x-none.16\\stream.x64.x-none.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\x-none.16\\stream.x64.x-none.man.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.971] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.971] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.972] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0 [0099.972] FindClose (in: hFindFile=0xd7079d9090 | out: hFindFile=0xd7079d9090) returned 1 [0099.972] SetLastError (dwErrCode=0x0) [0099.972] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\x-none.16\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\x-none.16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.977] GetLastError () returned 0x5 [0099.977] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0099.978] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.978] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0099.978] FindClose (in: hFindFile=0xd7079d8a90 | out: hFindFile=0xd7079d8a90) returned 1 [0099.978] SetLastError (dwErrCode=0x0) [0099.978] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.978] GetLastError () returned 0x5 [0099.978] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0099.978] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.978] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0099.978] FindClose (in: hFindFile=0xd7079d8d30 | out: hFindFile=0xd7079d8d30) returned 1 [0099.978] SetLastError (dwErrCode=0x0) [0099.978] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.979] GetLastError () returned 0x5 [0099.979] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.979] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.979] FindNextFileW (in: hFindFile=0xd7079d8910, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.979] SetLastError (dwErrCode=0x0) [0099.979] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.979] GetLastError () returned 0x5 [0099.979] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.980] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.980] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\UserData\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d9090 [0099.980] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.980] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0099.980] FindClose (in: hFindFile=0xd7079d9090 | out: hFindFile=0xd7079d9090) returned 1 [0099.980] SetLastError (dwErrCode=0x0) [0099.980] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\UserData\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\userdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.980] GetLastError () returned 0x5 [0099.980] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.980] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.980] FindNextFileW (in: hFindFile=0xd7079d8910, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0099.980] SetLastError (dwErrCode=0x0) [0099.980] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.981] GetLastError () returned 0x5 [0099.981] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0099.981] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.981] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d8a90 [0099.982] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.982] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.982] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.983] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\AirSpace.Etw.man", dwFileAttributes=0x80) returned 0 [0099.983] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\AirSpace.Etw.man" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\airspace.etw.man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.984] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.984] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.984] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.984] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.984] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0099.985] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.access.access.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.985] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.985] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.986] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.986] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.986] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0099.986] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.accessmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.987] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.987] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.987] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.987] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.987] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmuiset.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0099.988] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmuiset.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.accessmuiset.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.988] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.988] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.989] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.989] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.989] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0099.989] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.dcf.dcf.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.990] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.990] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.990] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.990] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.990] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.dcfmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0099.991] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.dcfmui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.dcfmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.991] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.991] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.992] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.992] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.992] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0099.992] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.excel.excel.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.993] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.993] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.993] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.993] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.993] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.excelmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0099.994] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.excelmui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.excelmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.994] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.994] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.995] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.995] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.995] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0099.995] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.groove.groove.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.996] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0099.996] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.996] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0099.996] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0099.997] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.groovemui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0099.997] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.groovemui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.groovemui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.001] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.001] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.001] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.002] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.002] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0100.002] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.lync.lync.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.003] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.003] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.003] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.003] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.003] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.lyncmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0100.004] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.lyncmui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.lyncmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.004] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.004] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.004] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.005] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.005] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32mui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0100.005] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32mui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.office32mui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.006] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.006] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.006] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.006] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.006] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32ww.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0100.007] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32ww.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.office32ww.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.007] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.007] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.007] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.007] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.008] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0100.008] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.officemui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.009] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.009] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.009] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.009] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.009] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemuiset.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0100.010] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemuiset.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.officemuiset.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.010] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.010] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.010] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.011] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.011] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0100.011] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.onenote.onenote.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.012] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.012] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.012] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.012] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.012] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.onenotemui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0100.016] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.onenotemui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.onenotemui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.016] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.016] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.017] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.017] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.017] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0100.018] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.osm.osm.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.018] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.018] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.018] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.018] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.019] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0100.019] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmmui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.osmmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.019] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.019] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.020] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.020] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.020] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0100.021] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.osmux.osmux.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.021] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.021] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.021] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.021] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.022] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmuxmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0100.022] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmuxmui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.osmuxmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.022] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.022] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.023] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.023] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.023] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0100.024] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.outlook.outlook.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.024] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.024] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.025] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.025] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.025] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.outlookmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0100.025] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.outlookmui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.outlookmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.026] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.026] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.026] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.026] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.026] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0100.027] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.powerpivot.powerpivot.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.027] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.027] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.028] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.028] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.028] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0100.031] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.powerpoint.powerpoint.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.032] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.032] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.032] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.032] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.032] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.powerpointmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0100.033] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.powerpointmui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.powerpointmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.033] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.033] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.034] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.034] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.034] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0100.034] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.project.project.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.035] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.035] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.035] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.035] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.035] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.projectmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0100.036] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.projectmui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.projectmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.036] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.036] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.037] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.037] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.037] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0100.037] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.proof.culture.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.038] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.038] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.038] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.038] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.038] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.es-es.xml", dwFileAttributes=0x80) returned 0 [0100.039] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.es-es.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.proof.culture.msi.16.es-es.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.039] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.039] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.040] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.040] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.040] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml", dwFileAttributes=0x80) returned 0 [0100.040] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.proof.culture.msi.16.fr-fr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.041] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.041] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.041] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.041] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.041] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.proofing.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0100.042] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.proofing.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.proofing.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.042] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.042] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.043] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.043] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.043] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0100.043] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.publisher.publisher.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.044] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.044] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.047] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.047] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.047] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.publishermui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0100.048] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.publishermui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.publishermui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.048] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.048] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.049] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.049] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.049] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0100.049] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.shared.office.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.050] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.050] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.050] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.050] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.050] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0100.051] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.visio.visio.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.051] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.051] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.052] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.052] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.052] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.visiomui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0100.052] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.visiomui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.visiomui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.053] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.053] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.053] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.053] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.053] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0100.054] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.word.word.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.054] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.054] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.055] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.055] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.wordmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0100.055] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.wordmui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.wordmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.056] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.056] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.056] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.056] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeBackgroundTaskHandlerLogon.xml", dwFileAttributes=0x80) returned 0 [0100.057] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeBackgroundTaskHandlerLogon.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\microsoft_office_officebackgroundtaskhandlerlogon.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.057] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.057] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.058] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.058] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeBackgroundTaskHandlerRegistration.xml", dwFileAttributes=0x80) returned 0 [0100.058] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeBackgroundTaskHandlerRegistration.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\microsoft_office_officebackgroundtaskhandlerregistration.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.059] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.059] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.061] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.061] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeOsfInstaller.xml", dwFileAttributes=0x80) returned 0 [0100.062] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeOsfInstaller.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\microsoft_office_officeosfinstaller.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.062] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.062] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.062] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.063] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentFallBack2016.xml", dwFileAttributes=0x80) returned 0 [0100.063] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentFallBack2016.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\microsoft_office_officetelemetryagentfallback2016.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.064] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.064] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.064] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.064] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentLogOn2016.xml", dwFileAttributes=0x80) returned 0 [0100.065] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentLogOn2016.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\microsoft_office_officetelemetryagentlogon2016.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.065] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.065] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.065] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.066] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\msoutilstat.etw.man", dwFileAttributes=0x80) returned 0 [0100.066] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\msoutilstat.etw.man" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\msoutilstat.etw.man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.067] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.067] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.067] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.067] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\wordEtw.man", dwFileAttributes=0x80) returned 0 [0100.068] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\wordEtw.man" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\wordetw.man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.068] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.068] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.070] SetLastError (dwErrCode=0x0) [0100.070] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.078] GetLastError () returned 0x5 [0100.078] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0100.078] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.078] SetLastError (dwErrCode=0x0) [0100.078] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.079] GetLastError () returned 0x5 [0100.079] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0100.079] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.079] SetLastError (dwErrCode=0x0) [0100.079] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.079] GetLastError () returned 0x5 [0100.079] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0100.079] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.079] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d94b0 [0100.080] FindNextFileW (in: hFindFile=0xd7079d94b0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0100.080] FindNextFileW (in: hFindFile=0xd7079d94b0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0100.080] SetLastError (dwErrCode=0x0) [0100.080] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.080] GetLastError () returned 0x5 [0100.080] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0100.080] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.080] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d9870 [0100.080] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.080] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.080] SetLastError (dwErrCode=0x0) [0100.080] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\dss\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.081] GetLastError () returned 0x5 [0100.081] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0100.081] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.081] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079d9090 [0100.081] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0100.081] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0100.081] SetLastError (dwErrCode=0x0) [0100.081] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\dss\\machinekeys\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x72c [0100.082] GetLastError () returned 0xb7 [0100.082] CloseHandle (hObject=0x72c) returned 1 [0100.082] SetLastError (dwErrCode=0x0) [0100.082] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\dss\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.083] GetLastError () returned 0x5 [0100.083] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0100.083] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.083] SetLastError (dwErrCode=0x0) [0100.083] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.083] GetLastError () returned 0x5 [0100.083] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0100.083] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.083] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d9870 [0100.083] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.083] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0100.083] FindClose (in: hFindFile=0xd7079d9870 | out: hFindFile=0xd7079d9870) returned 1 [0100.083] SetLastError (dwErrCode=0x0) [0100.084] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\keys\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.084] GetLastError () returned 0x5 [0100.084] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0100.084] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.084] SetLastError (dwErrCode=0x0) [0100.084] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.084] GetLastError () returned 0x5 [0100.084] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0100.085] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.085] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\PCPKSP\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d8910 [0100.085] FindNextFileW (in: hFindFile=0xd7079d8910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.085] FindNextFileW (in: hFindFile=0xd7079d8910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.085] FindNextFileW (in: hFindFile=0xd7079d8910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0100.085] FindClose (in: hFindFile=0xd7079d8910 | out: hFindFile=0xd7079d8910) returned 1 [0100.085] SetLastError (dwErrCode=0x0) [0100.085] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\PCPKSP\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\pcpksp\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.085] GetLastError () returned 0x5 [0100.085] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0100.085] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.085] SetLastError (dwErrCode=0x0) [0100.086] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.086] GetLastError () returned 0x5 [0100.086] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0100.086] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.086] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d9090 [0100.086] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.086] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.086] SetLastError (dwErrCode=0x0) [0100.086] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.087] GetLastError () returned 0x5 [0100.087] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0100.087] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.087] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079d91b0 [0100.087] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0100.087] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0100.087] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.087] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys\\08e575673cce10c72090304839888e02_427a1946-e0ff-4097-8c9e-ca2c1e22780b", dwFileAttributes=0x80) returned 1 [0100.088] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys\\08e575673cce10c72090304839888e02_427a1946-e0ff-4097-8c9e-ca2c1e22780b" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\machinekeys\\08e575673cce10c72090304839888e02_427a1946-e0ff-4097-8c9e-ca2c1e22780b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x59c [0100.089] GetFileSizeEx (in: hFile=0x59c, lpFileSize=0xd707b4b838 | out: lpFileSize=0xd707b4b838*=338) returned 1 [0100.089] GetFileSizeEx (in: hFile=0x59c, lpFileSize=0xd707b4b848 | out: lpFileSize=0xd707b4b848*=338) returned 1 [0100.089] SetFilePointerEx (in: hFile=0x59c, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0100.089] ReadFile (in: hFile=0x59c, lpBuffer=0xd707b4b898, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xd707b4b858, lpOverlapped=0x0 | out: lpBuffer=0xd707b4b898*, lpNumberOfBytesRead=0xd707b4b858*=0x19, lpOverlapped=0x0) returned 1 [0100.089] CloseHandle (hObject=0x59c) returned 1 [0100.089] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.089] SetLastError (dwErrCode=0x0) [0100.089] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\machinekeys\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x72c [0100.090] GetLastError () returned 0xb7 [0100.090] CloseHandle (hObject=0x72c) returned 1 [0100.090] SetLastError (dwErrCode=0x0) [0100.090] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.090] GetLastError () returned 0x5 [0100.090] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0100.090] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.090] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xffffffffffffffff [0100.091] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0100.091] SetLastError (dwErrCode=0x0) [0100.091] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\s-1-5-18\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.091] GetLastError () returned 0x5 [0100.091] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0100.091] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.091] SetLastError (dwErrCode=0x0) [0100.091] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.092] GetLastError () returned 0x5 [0100.092] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0100.092] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.092] SetLastError (dwErrCode=0x0) [0100.092] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.092] GetLastError () returned 0x5 [0100.092] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0100.092] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.092] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\SystemKeys\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xffffffffffffffff [0100.092] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0100.092] SetLastError (dwErrCode=0x0) [0100.092] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\SystemKeys\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\systemkeys\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.093] GetLastError () returned 0x5 [0100.093] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0100.093] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.093] SetLastError (dwErrCode=0x0) [0100.093] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.096] GetLastError () returned 0x5 [0100.096] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0100.096] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.097] SetLastError (dwErrCode=0x0) [0100.097] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.097] GetLastError () returned 0x5 [0100.097] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0100.097] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.097] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DataMart\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d94b0 [0100.097] FindNextFileW (in: hFindFile=0xd7079d94b0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0100.097] FindNextFileW (in: hFindFile=0xd7079d94b0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0100.097] SetLastError (dwErrCode=0x0) [0100.097] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\DataMart\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\datamart\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.098] GetLastError () returned 0x5 [0100.098] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0100.098] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.098] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DataMart\\PaidWiFi\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d9870 [0100.098] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.098] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.098] SetLastError (dwErrCode=0x0) [0100.098] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\DataMart\\PaidWiFi\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\datamart\\paidwifi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x728 [0100.099] GetLastError () returned 0xb7 [0100.099] CloseHandle (hObject=0x728) returned 1 [0100.099] SetLastError (dwErrCode=0x0) [0100.099] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\DataMart\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\datamart\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.099] GetLastError () returned 0x5 [0100.099] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0100.099] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.099] SetLastError (dwErrCode=0x0) [0100.099] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.100] GetLastError () returned 0x5 [0100.100] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0100.100] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.100] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d8a90 [0100.100] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0100.100] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0100.100] SetLastError (dwErrCode=0x0) [0100.100] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\device stage\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.101] GetLastError () returned 0x5 [0100.101] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0100.101] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.101] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d9c90 [0100.101] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.101] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.101] SetLastError (dwErrCode=0x0) [0100.101] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.101] GetLastError () returned 0x5 [0100.101] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0100.101] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.102] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079d9e10 [0100.102] FindNextFileW (in: hFindFile=0xd7079d9e10, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0100.102] FindNextFileW (in: hFindFile=0xd7079d9e10, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0100.102] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.103] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png", dwFileAttributes=0x80) returned 0 [0100.103] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.104] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.104] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.104] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.105] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml", dwFileAttributes=0x80) returned 0 [0100.105] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.105] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.105] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.106] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.106] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png", dwFileAttributes=0x80) returned 0 [0100.108] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.109] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.109] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.109] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.109] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png", dwFileAttributes=0x80) returned 0 [0100.110] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.110] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.110] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.111] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.111] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png", dwFileAttributes=0x80) returned 0 [0100.111] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.112] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.112] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.113] SetLastError (dwErrCode=0x0) [0100.113] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.118] GetLastError () returned 0x5 [0100.118] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0100.118] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.118] SetLastError (dwErrCode=0x0) [0100.118] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.119] GetLastError () returned 0x5 [0100.119] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0100.119] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.119] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079d91b0 [0100.119] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0100.119] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0100.119] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.120] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png", dwFileAttributes=0x80) returned 0 [0100.120] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.121] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.121] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.121] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.121] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml", dwFileAttributes=0x80) returned 0 [0100.122] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.125] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.125] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.125] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.126] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png", dwFileAttributes=0x80) returned 0 [0100.126] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.127] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.127] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.127] SetLastError (dwErrCode=0x0) [0100.127] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.128] GetLastError () returned 0x5 [0100.128] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0100.128] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.128] SetLastError (dwErrCode=0x0) [0100.128] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.128] GetLastError () returned 0x5 [0100.128] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0100.128] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.128] SetLastError (dwErrCode=0x0) [0100.128] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\device stage\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.129] GetLastError () returned 0x5 [0100.129] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0100.129] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.129] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d8910 [0100.129] FindNextFileW (in: hFindFile=0xd7079d8910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.129] FindNextFileW (in: hFindFile=0xd7079d8910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.129] SetLastError (dwErrCode=0x0) [0100.129] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.130] GetLastError () returned 0x5 [0100.130] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0100.130] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.130] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079d8d30 [0100.130] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0100.130] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0100.130] SetLastError (dwErrCode=0x0) [0100.130] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.130] GetLastError () returned 0x5 [0100.130] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0100.130] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.131] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079d8af0 [0100.131] FindNextFileW (in: hFindFile=0xd7079d8af0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0100.131] FindNextFileW (in: hFindFile=0xd7079d8af0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0100.131] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.131] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml", dwFileAttributes=0x80) returned 0 [0100.132] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\resource.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.132] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.132] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.132] SetLastError (dwErrCode=0x0) [0100.133] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.133] GetLastError () returned 0x5 [0100.133] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0100.133] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.133] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.133] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico", dwFileAttributes=0x80) returned 0 [0100.134] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.134] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.134] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.135] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.135] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico", dwFileAttributes=0x80) returned 0 [0100.136] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.136] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.136] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.136] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.137] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico", dwFileAttributes=0x80) returned 0 [0100.137] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.138] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.138] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.138] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.139] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml", dwFileAttributes=0x80) returned 0 [0100.139] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.139] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.139] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.143] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.143] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico", dwFileAttributes=0x80) returned 0 [0100.144] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.144] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.144] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.145] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.145] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico", dwFileAttributes=0x80) returned 0 [0100.145] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.146] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.146] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.146] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.147] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico", dwFileAttributes=0x80) returned 0 [0100.147] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.147] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.147] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.148] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.148] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml", dwFileAttributes=0x80) returned 0 [0100.149] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.149] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.149] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.149] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.150] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico", dwFileAttributes=0x80) returned 0 [0100.150] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.151] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.151] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.151] SetLastError (dwErrCode=0x0) [0100.151] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.151] GetLastError () returned 0x5 [0100.151] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0100.151] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.151] SetLastError (dwErrCode=0x0) [0100.152] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.152] GetLastError () returned 0x5 [0100.152] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0100.152] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.152] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079d8d30 [0100.152] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0100.152] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0100.152] SetLastError (dwErrCode=0x0) [0100.152] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.153] GetLastError () returned 0x5 [0100.153] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0100.153] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.153] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079d9090 [0100.153] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0100.153] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0100.153] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.154] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml", dwFileAttributes=0x80) returned 0 [0100.155] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\resource.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.155] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.155] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.155] SetLastError (dwErrCode=0x0) [0100.155] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.156] GetLastError () returned 0x5 [0100.156] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0100.156] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.156] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.156] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico", dwFileAttributes=0x80) returned 0 [0100.157] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.157] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.157] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.158] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.158] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico", dwFileAttributes=0x80) returned 0 [0100.159] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.159] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.159] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.159] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.160] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico", dwFileAttributes=0x80) returned 0 [0100.160] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.161] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.161] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.161] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.161] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico", dwFileAttributes=0x80) returned 0 [0100.162] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.162] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.162] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.162] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.163] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico", dwFileAttributes=0x80) returned 0 [0100.163] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.164] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.164] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.164] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.165] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico", dwFileAttributes=0x80) returned 0 [0100.165] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.165] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.166] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.166] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.166] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico", dwFileAttributes=0x80) returned 0 [0100.167] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.167] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.167] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.167] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.168] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml", dwFileAttributes=0x80) returned 0 [0100.168] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.169] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.169] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.169] SetLastError (dwErrCode=0x0) [0100.169] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.172] GetLastError () returned 0x5 [0100.172] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0100.173] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.173] SetLastError (dwErrCode=0x0) [0100.173] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.173] GetLastError () returned 0x5 [0100.173] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0100.173] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.173] SetLastError (dwErrCode=0x0) [0100.173] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\device stage\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.174] GetLastError () returned 0x5 [0100.174] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0100.174] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.174] SetLastError (dwErrCode=0x0) [0100.174] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.174] GetLastError () returned 0x5 [0100.174] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0100.174] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.174] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DeviceSync\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d9870 [0100.175] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0100.175] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0100.175] SetLastError (dwErrCode=0x0) [0100.175] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\DeviceSync\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\devicesync\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x724 [0100.175] GetLastError () returned 0xb7 [0100.175] CloseHandle (hObject=0x724) returned 1 [0100.175] SetLastError (dwErrCode=0x0) [0100.175] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.176] GetLastError () returned 0x5 [0100.176] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0100.176] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.176] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xffffffffffffffff [0100.176] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0100.176] SetLastError (dwErrCode=0x0) [0100.176] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.176] GetLastError () returned 0x5 [0100.176] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0100.177] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.177] SetLastError (dwErrCode=0x0) [0100.177] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.177] GetLastError () returned 0x5 [0100.177] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0100.177] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.177] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d8d30 [0100.177] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0100.177] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0100.177] SetLastError (dwErrCode=0x0) [0100.177] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\drm\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.178] GetLastError () returned 0x5 [0100.178] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0100.178] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.178] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\Server\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d9090 [0100.178] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.178] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0100.178] FindClose (in: hFindFile=0xd7079d9090 | out: hFindFile=0xd7079d9090) returned 1 [0100.178] SetLastError (dwErrCode=0x0) [0100.178] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\Server\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\drm\\server\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.179] GetLastError () returned 0x5 [0100.179] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0100.179] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.179] SetLastError (dwErrCode=0x0) [0100.179] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\drm\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.179] GetLastError () returned 0x5 [0100.179] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0100.180] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.180] SetLastError (dwErrCode=0x0) [0100.180] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.180] GetLastError () returned 0x5 [0100.180] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0100.180] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.180] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d9c90 [0100.181] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0100.181] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0100.181] SetLastError (dwErrCode=0x0) [0100.181] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\event viewer\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.181] GetLastError () returned 0x5 [0100.181] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0100.181] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.181] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d9e10 [0100.181] FindNextFileW (in: hFindFile=0xd7079d9e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.181] FindNextFileW (in: hFindFile=0xd7079d9e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.181] SetLastError (dwErrCode=0x0) [0100.182] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\event viewer\\views\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.182] GetLastError () returned 0x5 [0100.182] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0100.182] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.182] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079d9870 [0100.182] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0100.182] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0100.182] FindClose (in: hFindFile=0xd7079d9870 | out: hFindFile=0xd7079d9870) returned 1 [0100.182] SetLastError (dwErrCode=0x0) [0100.182] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\event viewer\\views\\applicationviewsrootnode\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.183] GetLastError () returned 0x5 [0100.183] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0100.183] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.183] SetLastError (dwErrCode=0x0) [0100.183] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\event viewer\\views\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.183] GetLastError () returned 0x5 [0100.184] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0100.184] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.184] SetLastError (dwErrCode=0x0) [0100.184] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\event viewer\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.184] GetLastError () returned 0x5 [0100.184] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0100.184] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.184] SetLastError (dwErrCode=0x0) [0100.184] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.185] GetLastError () returned 0x5 [0100.185] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0100.185] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.185] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d9090 [0100.185] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0100.186] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0100.186] SetLastError (dwErrCode=0x0) [0100.186] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.186] GetLastError () returned 0x5 [0100.186] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0100.186] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.186] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\INT\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d91b0 [0100.186] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.186] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.186] SetLastError (dwErrCode=0x0) [0100.186] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\INT\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\int\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.187] GetLastError () returned 0x5 [0100.187] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0100.187] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.187] SetLastError (dwErrCode=0x0) [0100.187] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.187] GetLastError () returned 0x5 [0100.187] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0100.187] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.187] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\production\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d9870 [0100.188] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.188] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.188] SetLastError (dwErrCode=0x0) [0100.188] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\production\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\production\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.188] GetLastError () returned 0x5 [0100.188] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0100.188] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.188] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\production\\temp\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079d91b0 [0100.188] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0100.188] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0 [0100.188] FindClose (in: hFindFile=0xd7079d91b0 | out: hFindFile=0xd7079d91b0) returned 1 [0100.189] SetLastError (dwErrCode=0x0) [0100.189] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\production\\temp\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\production\\temp\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.189] GetLastError () returned 0x5 [0100.189] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0100.189] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.189] SetLastError (dwErrCode=0x0) [0100.189] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\production\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\production\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.190] GetLastError () returned 0x5 [0100.190] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0100.190] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.190] SetLastError (dwErrCode=0x0) [0100.190] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.190] GetLastError () returned 0x5 [0100.190] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0100.190] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.190] SetLastError (dwErrCode=0x0) [0100.190] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.191] GetLastError () returned 0x5 [0100.191] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0100.191] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.191] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MapData\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d9870 [0100.191] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0100.191] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0 [0100.191] FindClose (in: hFindFile=0xd7079d9870 | out: hFindFile=0xd7079d9870) returned 1 [0100.191] SetLastError (dwErrCode=0x0) [0100.191] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\MapData\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\mapdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.192] GetLastError () returned 0x5 [0100.192] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0100.192] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.192] SetLastError (dwErrCode=0x0) [0100.192] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.192] GetLastError () returned 0x5 [0100.192] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0100.192] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.192] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d8af0 [0100.192] FindNextFileW (in: hFindFile=0xd7079d8af0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0100.193] FindNextFileW (in: hFindFile=0xd7079d8af0, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0100.193] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.193] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\Active.GRL", dwFileAttributes=0x80) returned 1 [0100.194] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\Active.GRL" (normalized: "c:\\users\\all users\\microsoft\\mf\\active.grl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x728 [0100.194] GetFileSizeEx (in: hFile=0x728, lpFileSize=0xd707b4c798 | out: lpFileSize=0xd707b4c798*=15250) returned 1 [0100.194] GetFileSizeEx (in: hFile=0x728, lpFileSize=0xd707b4c7a8 | out: lpFileSize=0xd707b4c7a8*=15250) returned 1 [0100.194] SetFilePointerEx (in: hFile=0x728, liDistanceToMove=0x3a70, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0100.194] ReadFile (in: hFile=0x728, lpBuffer=0xd707b4c7f8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xd707b4c7b8, lpOverlapped=0x0 | out: lpBuffer=0xd707b4c7f8*, lpNumberOfBytesRead=0xd707b4c7b8*=0x19, lpOverlapped=0x0) returned 1 [0100.194] CloseHandle (hObject=0x728) returned 1 [0100.194] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.195] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.195] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\Pending.GRL", dwFileAttributes=0x80) returned 1 [0100.196] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\Pending.GRL" (normalized: "c:\\users\\all users\\microsoft\\mf\\pending.grl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x728 [0100.196] GetFileSizeEx (in: hFile=0x728, lpFileSize=0xd707b4c798 | out: lpFileSize=0xd707b4c798*=15250) returned 1 [0100.196] GetFileSizeEx (in: hFile=0x728, lpFileSize=0xd707b4c7a8 | out: lpFileSize=0xd707b4c7a8*=15250) returned 1 [0100.196] SetFilePointerEx (in: hFile=0x728, liDistanceToMove=0x3a70, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0100.196] ReadFile (in: hFile=0x728, lpBuffer=0xd707b4c7f8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xd707b4c7b8, lpOverlapped=0x0 | out: lpBuffer=0xd707b4c7f8*, lpNumberOfBytesRead=0xd707b4c7b8*=0x19, lpOverlapped=0x0) returned 1 [0100.196] CloseHandle (hObject=0x728) returned 1 [0100.196] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.197] SetLastError (dwErrCode=0x0) [0100.197] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\mf\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.197] GetLastError () returned 0x5 [0100.197] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0100.197] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.197] SetLastError (dwErrCode=0x0) [0100.197] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.198] GetLastError () returned 0x5 [0100.198] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0100.198] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.198] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d9090 [0100.198] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0100.198] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0100.198] SetLastError (dwErrCode=0x0) [0100.198] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\netframework\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.198] GetLastError () returned 0x5 [0100.198] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0100.198] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.199] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d91b0 [0100.199] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.199] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.199] SetLastError (dwErrCode=0x0) [0100.199] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\netframework\\breadcrumbstore\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.199] GetLastError () returned 0x5 [0100.199] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0100.199] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.199] SetLastError (dwErrCode=0x0) [0100.199] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\netframework\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.200] GetLastError () returned 0x5 [0100.200] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0100.200] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.200] SetLastError (dwErrCode=0x0) [0100.200] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.204] GetLastError () returned 0x5 [0100.204] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0100.204] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.204] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d9870 [0100.205] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0100.205] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0100.205] SetLastError (dwErrCode=0x0) [0100.205] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\network\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.205] GetLastError () returned 0x5 [0100.205] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0100.205] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.205] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d9e10 [0100.205] FindNextFileW (in: hFindFile=0xd7079d9e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.205] FindNextFileW (in: hFindFile=0xd7079d9e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0 [0100.206] FindClose (in: hFindFile=0xd7079d9e10 | out: hFindFile=0xd7079d9e10) returned 1 [0100.206] SetLastError (dwErrCode=0x0) [0100.206] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\network\\connections\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.206] GetLastError () returned 0x5 [0100.206] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0100.206] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.206] SetLastError (dwErrCode=0x0) [0100.206] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\network\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.207] GetLastError () returned 0x5 [0100.207] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0100.207] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.207] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xffffffffffffffff [0100.207] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0100.207] SetLastError (dwErrCode=0x0) [0100.207] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.207] GetLastError () returned 0x5 [0100.207] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0100.207] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.208] SetLastError (dwErrCode=0x0) [0100.208] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\network\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.208] GetLastError () returned 0x5 [0100.208] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0100.208] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.208] SetLastError (dwErrCode=0x0) [0100.208] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.209] GetLastError () returned 0x5 [0100.209] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0100.209] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.209] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Office\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d8910 [0100.209] FindNextFileW (in: hFindFile=0xd7079d8910, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0100.209] FindNextFileW (in: hFindFile=0xd7079d8910, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0100.209] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.209] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Office\\ClickToRunPackageLocker", dwFileAttributes=0x80) returned 0 [0100.210] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Office\\ClickToRunPackageLocker" (normalized: "c:\\users\\all users\\microsoft\\office\\clicktorunpackagelocker"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.210] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.210] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.211] SetLastError (dwErrCode=0x0) [0100.211] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Office\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\office\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.211] GetLastError () returned 0x5 [0100.211] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0100.211] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.211] SetLastError (dwErrCode=0x0) [0100.211] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.212] GetLastError () returned 0x5 [0100.212] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0100.212] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.212] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d9390 [0100.212] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0100.212] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0100.212] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.212] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\countrytable.xml", dwFileAttributes=0x80) returned 0 [0100.213] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\countrytable.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\countrytable.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.213] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.213] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.214] SetLastError (dwErrCode=0x0) [0100.214] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.214] GetLastError () returned 0x5 [0100.214] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0100.214] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.214] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d9c90 [0100.214] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.214] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.214] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.215] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\customizations.xml", dwFileAttributes=0x80) returned 0 [0100.215] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.216] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.216] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.219] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.220] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\MasterDatastore.xml", dwFileAttributes=0x80) returned 0 [0100.220] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\masterdatastore.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.221] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.221] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.221] SetLastError (dwErrCode=0x0) [0100.221] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.221] GetLastError () returned 0x5 [0100.221] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0100.221] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.221] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079d94b0 [0100.222] FindNextFileW (in: hFindFile=0xd7079d94b0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0100.222] FindNextFileW (in: hFindFile=0xd7079d94b0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0100.222] SetLastError (dwErrCode=0x0) [0100.222] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.222] GetLastError () returned 0x5 [0100.222] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0100.222] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.222] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079d8d30 [0100.222] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0100.223] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0100.223] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.223] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime\\Power_0.provxml", dwFileAttributes=0x80) returned 0 [0100.223] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime\\Power_0.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\prov\\runtime\\power_0.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.224] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.224] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.224] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.225] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime\\Power_1.provxml", dwFileAttributes=0x80) returned 0 [0100.225] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime\\Power_1.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\prov\\runtime\\power_1.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.226] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.226] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.226] SetLastError (dwErrCode=0x0) [0100.226] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\prov\\runtime\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.226] GetLastError () returned 0x5 [0100.226] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0100.226] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.226] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.227] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime.xml", dwFileAttributes=0x80) returned 0 [0100.227] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\prov\\runtime.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.228] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.228] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.228] SetLastError (dwErrCode=0x0) [0100.228] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.229] GetLastError () returned 0x5 [0100.229] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0100.229] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.229] SetLastError (dwErrCode=0x0) [0100.229] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.229] GetLastError () returned 0x5 [0100.229] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0100.229] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.229] SetLastError (dwErrCode=0x0) [0100.229] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.230] GetLastError () returned 0x5 [0100.230] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0100.230] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.230] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d9090 [0100.230] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.230] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.230] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.230] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\customizations.xml", dwFileAttributes=0x80) returned 0 [0100.231] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.231] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.231] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.236] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.237] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\MasterDatastore.xml", dwFileAttributes=0x80) returned 0 [0100.238] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\masterdatastore.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.238] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.238] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.238] SetLastError (dwErrCode=0x0) [0100.238] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.239] GetLastError () returned 0x5 [0100.239] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0100.239] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.239] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079d8d30 [0100.239] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0100.239] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0100.239] SetLastError (dwErrCode=0x0) [0100.239] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.240] GetLastError () returned 0x5 [0100.240] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0100.240] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.240] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079d8a90 [0100.240] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0100.240] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0100.240] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.240] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime\\Power_0.provxml", dwFileAttributes=0x80) returned 0 [0100.241] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime\\Power_0.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\prov\\runtime\\power_0.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.241] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.241] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.242] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.242] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime\\Power_1.provxml", dwFileAttributes=0x80) returned 0 [0100.242] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime\\Power_1.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\prov\\runtime\\power_1.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.243] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.243] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.243] SetLastError (dwErrCode=0x0) [0100.243] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\prov\\runtime\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.244] GetLastError () returned 0x5 [0100.244] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0100.244] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.244] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.244] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime.xml", dwFileAttributes=0x80) returned 0 [0100.245] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\prov\\runtime.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.245] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.245] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.245] SetLastError (dwErrCode=0x0) [0100.245] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.246] GetLastError () returned 0x5 [0100.246] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0100.246] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.246] SetLastError (dwErrCode=0x0) [0100.246] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.246] GetLastError () returned 0x5 [0100.246] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0100.246] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.247] SetLastError (dwErrCode=0x0) [0100.247] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.247] GetLastError () returned 0x5 [0100.247] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0100.248] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.248] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d9c90 [0100.248] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.248] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.248] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.248] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\customizations.xml", dwFileAttributes=0x80) returned 0 [0100.249] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.249] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.249] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.249] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.250] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\MasterDatastore.xml", dwFileAttributes=0x80) returned 0 [0100.250] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\masterdatastore.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.251] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.251] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.251] SetLastError (dwErrCode=0x0) [0100.251] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.252] GetLastError () returned 0x5 [0100.252] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0100.252] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.252] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079d9e10 [0100.252] FindNextFileW (in: hFindFile=0xd7079d9e10, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0100.252] FindNextFileW (in: hFindFile=0xd7079d9e10, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0100.252] SetLastError (dwErrCode=0x0) [0100.252] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.252] GetLastError () returned 0x5 [0100.252] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0100.252] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.252] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079d8910 [0100.253] FindNextFileW (in: hFindFile=0xd7079d8910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0100.253] FindNextFileW (in: hFindFile=0xd7079d8910, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0100.253] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.253] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime\\Power_0.provxml", dwFileAttributes=0x80) returned 0 [0100.253] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime\\Power_0.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\prov\\runtime\\power_0.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.254] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.254] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.254] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.255] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime\\Power_1.provxml", dwFileAttributes=0x80) returned 0 [0100.255] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime\\Power_1.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\prov\\runtime\\power_1.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.255] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.255] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.256] SetLastError (dwErrCode=0x0) [0100.256] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\prov\\runtime\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.256] GetLastError () returned 0x5 [0100.256] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0100.256] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.256] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.257] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime.xml", dwFileAttributes=0x80) returned 0 [0100.257] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\prov\\runtime.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.258] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.258] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.258] SetLastError (dwErrCode=0x0) [0100.258] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.258] GetLastError () returned 0x5 [0100.258] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0100.258] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.259] SetLastError (dwErrCode=0x0) [0100.259] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.259] GetLastError () returned 0x5 [0100.259] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0100.259] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.259] SetLastError (dwErrCode=0x0) [0100.259] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.260] GetLastError () returned 0x5 [0100.260] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0100.260] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.260] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d9c90 [0100.260] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.260] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.260] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.260] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\customizations.xml", dwFileAttributes=0x80) returned 0 [0100.261] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.261] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.261] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.261] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.262] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\MasterDatastore.xml", dwFileAttributes=0x80) returned 0 [0100.262] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\masterdatastore.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.263] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.270] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.271] SetLastError (dwErrCode=0x0) [0100.271] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.271] GetLastError () returned 0x5 [0100.271] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0100.271] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.272] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079d9090 [0100.272] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0100.272] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0100.272] SetLastError (dwErrCode=0x0) [0100.272] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.272] GetLastError () returned 0x5 [0100.272] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0100.272] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.272] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079d91b0 [0100.272] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0100.273] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0100.273] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.273] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime\\Power_0.provxml", dwFileAttributes=0x80) returned 0 [0100.273] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime\\Power_0.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\prov\\runtime\\power_0.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.274] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.274] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.274] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.275] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime\\Power_1.provxml", dwFileAttributes=0x80) returned 0 [0100.275] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime\\Power_1.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\prov\\runtime\\power_1.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.275] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.275] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.276] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.276] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime\\Power_2.provxml", dwFileAttributes=0x80) returned 0 [0100.277] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime\\Power_2.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\prov\\runtime\\power_2.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.277] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.277] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.277] SetLastError (dwErrCode=0x0) [0100.277] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\prov\\runtime\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.278] GetLastError () returned 0x5 [0100.278] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0100.278] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.278] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.278] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime.xml", dwFileAttributes=0x80) returned 0 [0100.279] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\prov\\runtime.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.279] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.279] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.280] SetLastError (dwErrCode=0x0) [0100.280] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.283] GetLastError () returned 0x5 [0100.283] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0100.283] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.283] SetLastError (dwErrCode=0x0) [0100.283] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.284] GetLastError () returned 0x5 [0100.284] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0100.284] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.284] SetLastError (dwErrCode=0x0) [0100.284] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.284] GetLastError () returned 0x5 [0100.284] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0100.284] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.284] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d9c90 [0100.285] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.285] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.285] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.285] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\customizations.xml", dwFileAttributes=0x80) returned 0 [0100.286] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.286] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.286] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.286] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.287] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\MasterDatastore.xml", dwFileAttributes=0x80) returned 0 [0100.287] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\masterdatastore.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.287] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.288] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.288] SetLastError (dwErrCode=0x0) [0100.288] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.288] GetLastError () returned 0x5 [0100.288] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0100.288] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.288] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079d8d30 [0100.289] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0100.289] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0100.289] SetLastError (dwErrCode=0x0) [0100.289] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.289] GetLastError () returned 0x5 [0100.289] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0100.289] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.289] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079d9090 [0100.289] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0100.289] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0100.289] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.290] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime\\Power_0.provxml", dwFileAttributes=0x80) returned 0 [0100.290] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime\\Power_0.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\prov\\runtime\\power_0.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.291] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.291] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.291] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.291] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime\\Power_1.provxml", dwFileAttributes=0x80) returned 0 [0100.292] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime\\Power_1.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\prov\\runtime\\power_1.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.292] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.292] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.293] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.293] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime\\Power_2.provxml", dwFileAttributes=0x80) returned 0 [0100.293] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime\\Power_2.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\prov\\runtime\\power_2.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.294] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.294] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.295] SetLastError (dwErrCode=0x0) [0100.295] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\prov\\runtime\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.296] GetLastError () returned 0x5 [0100.296] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0100.296] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.296] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.296] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime.xml", dwFileAttributes=0x80) returned 0 [0100.297] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\prov\\runtime.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.297] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.297] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.298] SetLastError (dwErrCode=0x0) [0100.298] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.298] GetLastError () returned 0x5 [0100.298] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0100.298] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.298] SetLastError (dwErrCode=0x0) [0100.298] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.299] GetLastError () returned 0x5 [0100.299] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0100.299] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.299] SetLastError (dwErrCode=0x0) [0100.299] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.299] GetLastError () returned 0x5 [0100.299] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0100.299] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.299] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d8910 [0100.300] FindNextFileW (in: hFindFile=0xd7079d8910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.300] FindNextFileW (in: hFindFile=0xd7079d8910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.300] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.300] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\customizations.xml", dwFileAttributes=0x80) returned 0 [0100.301] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.301] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.301] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.301] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.302] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\MasterDatastore.xml", dwFileAttributes=0x80) returned 0 [0100.302] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\masterdatastore.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.303] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.303] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.303] SetLastError (dwErrCode=0x0) [0100.303] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.303] GetLastError () returned 0x5 [0100.303] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0100.304] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.304] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079d8a90 [0100.304] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0100.304] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0100.304] SetLastError (dwErrCode=0x0) [0100.304] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.304] GetLastError () returned 0x5 [0100.304] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0100.304] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.304] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RunTime\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079d9e10 [0100.305] FindNextFileW (in: hFindFile=0xd7079d9e10, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0100.305] FindNextFileW (in: hFindFile=0xd7079d9e10, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0100.305] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.305] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RunTime\\Power_0.provxml", dwFileAttributes=0x80) returned 0 [0100.305] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RunTime\\Power_0.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\prov\\runtime\\power_0.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.306] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.306] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.306] SetLastError (dwErrCode=0x0) [0100.306] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RunTime\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\prov\\runtime\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.307] GetLastError () returned 0x5 [0100.307] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0100.307] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.307] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.307] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RunTime.xml", dwFileAttributes=0x80) returned 0 [0100.308] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\prov\\runtime.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.308] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.308] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.308] SetLastError (dwErrCode=0x0) [0100.308] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.309] GetLastError () returned 0x5 [0100.309] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0100.309] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.309] SetLastError (dwErrCode=0x0) [0100.309] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.309] GetLastError () returned 0x5 [0100.309] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0100.309] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.313] SetLastError (dwErrCode=0x0) [0100.313] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.314] GetLastError () returned 0x5 [0100.314] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0100.314] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.314] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d8d30 [0100.314] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.314] FindNextFileW (in: hFindFile=0xd7079d8d30, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.314] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.315] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\customizations.xml", dwFileAttributes=0x80) returned 0 [0100.318] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.318] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.318] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.319] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.319] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\MasterDatastore.xml", dwFileAttributes=0x80) returned 0 [0100.320] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\masterdatastore.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.320] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.320] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.321] SetLastError (dwErrCode=0x0) [0100.321] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.321] GetLastError () returned 0x5 [0100.321] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0100.321] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.321] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079d9870 [0100.322] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0100.322] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0100.322] SetLastError (dwErrCode=0x0) [0100.322] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.323] GetLastError () returned 0x5 [0100.323] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0100.323] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.323] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RunTime\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079d9e10 [0100.323] FindNextFileW (in: hFindFile=0xd7079d9e10, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0100.323] FindNextFileW (in: hFindFile=0xd7079d9e10, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0100.323] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.323] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RunTime\\Power_0.provxml", dwFileAttributes=0x80) returned 0 [0100.324] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RunTime\\Power_0.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\prov\\runtime\\power_0.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.325] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.325] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.325] SetLastError (dwErrCode=0x0) [0100.325] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RunTime\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\prov\\runtime\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.330] GetLastError () returned 0x5 [0100.330] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0100.330] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.330] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.330] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RunTime.xml", dwFileAttributes=0x80) returned 0 [0100.331] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\prov\\runtime.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.331] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.331] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.332] SetLastError (dwErrCode=0x0) [0100.332] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.333] GetLastError () returned 0x5 [0100.333] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0100.333] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.333] SetLastError (dwErrCode=0x0) [0100.333] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.334] GetLastError () returned 0x5 [0100.334] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0100.334] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.334] SetLastError (dwErrCode=0x0) [0100.334] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.335] GetLastError () returned 0x5 [0100.335] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0100.335] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.335] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d9e10 [0100.335] FindNextFileW (in: hFindFile=0xd7079d9e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.335] FindNextFileW (in: hFindFile=0xd7079d9e10, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.335] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.335] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\customizations.xml", dwFileAttributes=0x80) returned 0 [0100.336] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.336] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.336] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.337] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.337] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\MasterDatastore.xml", dwFileAttributes=0x80) returned 0 [0100.338] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\masterdatastore.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.338] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.339] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.339] SetLastError (dwErrCode=0x0) [0100.339] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.340] GetLastError () returned 0x5 [0100.340] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0100.340] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.341] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079d9090 [0100.341] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0100.341] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0100.341] SetLastError (dwErrCode=0x0) [0100.341] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.341] GetLastError () returned 0x5 [0100.341] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0100.341] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.341] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RunTime\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079d94b0 [0100.342] FindNextFileW (in: hFindFile=0xd7079d94b0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0100.342] FindNextFileW (in: hFindFile=0xd7079d94b0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0100.342] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.342] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RunTime\\Power_0.provxml", dwFileAttributes=0x80) returned 0 [0100.347] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RunTime\\Power_0.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\prov\\runtime\\power_0.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.347] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.348] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.348] SetLastError (dwErrCode=0x0) [0100.348] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RunTime\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\prov\\runtime\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.348] GetLastError () returned 0x5 [0100.349] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0100.349] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.349] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.349] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RunTime.xml", dwFileAttributes=0x80) returned 0 [0100.350] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\prov\\runtime.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.350] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.350] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.350] SetLastError (dwErrCode=0x0) [0100.350] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.351] GetLastError () returned 0x5 [0100.351] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0100.351] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.351] SetLastError (dwErrCode=0x0) [0100.351] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.351] GetLastError () returned 0x5 [0100.351] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0100.352] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.352] SetLastError (dwErrCode=0x0) [0100.352] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.353] GetLastError () returned 0x5 [0100.353] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0100.353] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.353] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d8910 [0100.353] FindNextFileW (in: hFindFile=0xd7079d8910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.353] FindNextFileW (in: hFindFile=0xd7079d8910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.353] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.354] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\customizations.xml", dwFileAttributes=0x80) returned 0 [0100.354] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.355] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.355] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.355] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.355] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\MasterDatastore.xml", dwFileAttributes=0x80) returned 0 [0100.356] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\masterdatastore.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.356] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.356] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.357] SetLastError (dwErrCode=0x0) [0100.357] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.357] GetLastError () returned 0x5 [0100.357] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0100.357] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.357] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079d9c90 [0100.357] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0100.357] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0100.357] SetLastError (dwErrCode=0x0) [0100.357] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.358] GetLastError () returned 0x5 [0100.358] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0100.358] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.358] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079d8a90 [0100.358] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0100.358] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0100.358] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.358] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime\\Power_0.provxml", dwFileAttributes=0x80) returned 0 [0100.359] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime\\Power_0.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\prov\\runtime\\power_0.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.359] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.359] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.360] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.360] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime\\Power_1.provxml", dwFileAttributes=0x80) returned 0 [0100.360] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime\\Power_1.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\prov\\runtime\\power_1.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.361] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.361] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.361] SetLastError (dwErrCode=0x0) [0100.361] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\prov\\runtime\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.362] GetLastError () returned 0x5 [0100.362] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0100.362] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.362] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.362] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime.xml", dwFileAttributes=0x80) returned 0 [0100.363] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\prov\\runtime.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.363] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.363] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.364] SetLastError (dwErrCode=0x0) [0100.364] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.364] GetLastError () returned 0x5 [0100.364] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0100.364] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.364] SetLastError (dwErrCode=0x0) [0100.364] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.365] GetLastError () returned 0x5 [0100.365] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0100.365] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.365] SetLastError (dwErrCode=0x0) [0100.365] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.365] GetLastError () returned 0x5 [0100.365] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0100.365] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.365] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d9090 [0100.365] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.366] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.366] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.366] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\customizations.xml", dwFileAttributes=0x80) returned 0 [0100.366] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.367] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.367] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.367] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.368] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\MasterDatastore.xml", dwFileAttributes=0x80) returned 0 [0100.368] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\masterdatastore.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.368] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.368] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.369] SetLastError (dwErrCode=0x0) [0100.369] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.369] GetLastError () returned 0x5 [0100.372] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0100.372] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.372] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079d9870 [0100.372] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0100.373] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0100.373] SetLastError (dwErrCode=0x0) [0100.373] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.373] GetLastError () returned 0x5 [0100.373] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0100.373] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.373] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RunTime\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079d91b0 [0100.373] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0100.373] FindNextFileW (in: hFindFile=0xd7079d91b0, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0100.373] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.374] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RunTime\\Power_0.provxml", dwFileAttributes=0x80) returned 0 [0100.374] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RunTime\\Power_0.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\prov\\runtime\\power_0.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.375] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.375] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.375] SetLastError (dwErrCode=0x0) [0100.375] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RunTime\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\prov\\runtime\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.376] GetLastError () returned 0x5 [0100.376] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0100.376] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.376] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.376] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RunTime.xml", dwFileAttributes=0x80) returned 0 [0100.377] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\prov\\runtime.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.377] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.377] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.377] SetLastError (dwErrCode=0x0) [0100.377] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.378] GetLastError () returned 0x5 [0100.378] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0100.378] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.378] SetLastError (dwErrCode=0x0) [0100.378] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.378] GetLastError () returned 0x5 [0100.378] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0100.378] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.378] SetLastError (dwErrCode=0x0) [0100.379] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.379] GetLastError () returned 0x5 [0100.379] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0100.379] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.379] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d9870 [0100.379] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.379] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.379] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.380] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\customizations.xml", dwFileAttributes=0x80) returned 0 [0100.380] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.380] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.380] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.381] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.381] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\MasterDatastore.xml", dwFileAttributes=0x80) returned 0 [0100.382] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\masterdatastore.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.382] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.382] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.382] SetLastError (dwErrCode=0x0) [0100.382] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.383] GetLastError () returned 0x5 [0100.383] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0100.383] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.383] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079d94b0 [0100.383] FindNextFileW (in: hFindFile=0xd7079d94b0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0100.383] FindNextFileW (in: hFindFile=0xd7079d94b0, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0100.383] SetLastError (dwErrCode=0x0) [0100.383] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.383] GetLastError () returned 0x5 [0100.383] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0100.384] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.384] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\RunTime\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079d9990 [0100.384] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0100.384] FindNextFileW (in: hFindFile=0xd7079d9990, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0100.384] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.384] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\RunTime\\Power_0.provxml", dwFileAttributes=0x80) returned 0 [0100.385] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\RunTime\\Power_0.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\prov\\runtime\\power_0.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.386] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.386] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.386] SetLastError (dwErrCode=0x0) [0100.386] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\RunTime\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\prov\\runtime\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.387] GetLastError () returned 0x5 [0100.387] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0100.387] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.387] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.387] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\RunTime.xml", dwFileAttributes=0x80) returned 0 [0100.388] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\prov\\runtime.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.388] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.388] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.388] SetLastError (dwErrCode=0x0) [0100.388] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.388] GetLastError () returned 0x5 [0100.388] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0100.388] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.389] SetLastError (dwErrCode=0x0) [0100.389] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.389] GetLastError () returned 0x5 [0100.389] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0100.389] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.389] SetLastError (dwErrCode=0x0) [0100.389] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.389] GetLastError () returned 0x5 [0100.389] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0100.389] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.389] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d8a90 [0100.389] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.390] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.390] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.390] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\customizations.xml", dwFileAttributes=0x80) returned 0 [0100.390] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.390] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.390] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.391] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.391] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\MasterDatastore.xml", dwFileAttributes=0x80) returned 0 [0100.391] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\masterdatastore.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.392] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.392] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.392] SetLastError (dwErrCode=0x0) [0100.392] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.392] GetLastError () returned 0x5 [0100.392] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0100.392] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.392] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079d8910 [0100.392] FindNextFileW (in: hFindFile=0xd7079d8910, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0100.392] FindNextFileW (in: hFindFile=0xd7079d8910, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0100.392] SetLastError (dwErrCode=0x0) [0100.392] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.393] GetLastError () returned 0x5 [0100.393] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0100.393] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.393] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RunTime\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079d9090 [0100.393] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0100.393] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0100.393] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.393] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RunTime\\Power_0.provxml", dwFileAttributes=0x80) returned 0 [0100.394] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RunTime\\Power_0.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\prov\\runtime\\power_0.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.394] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.394] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.394] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.394] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RunTime\\Power_1.provxml", dwFileAttributes=0x80) returned 0 [0100.395] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RunTime\\Power_1.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\prov\\runtime\\power_1.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.395] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.395] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.395] SetLastError (dwErrCode=0x0) [0100.395] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RunTime\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\prov\\runtime\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.396] GetLastError () returned 0x5 [0100.396] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0100.396] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.396] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.396] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RunTime.xml", dwFileAttributes=0x80) returned 0 [0100.396] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\prov\\runtime.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.397] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.397] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.397] SetLastError (dwErrCode=0x0) [0100.397] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.397] GetLastError () returned 0x5 [0100.397] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0100.397] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.397] SetLastError (dwErrCode=0x0) [0100.398] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.398] GetLastError () returned 0x5 [0100.398] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0100.398] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.398] SetLastError (dwErrCode=0x0) [0100.398] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.398] GetLastError () returned 0x5 [0100.398] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0100.398] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.398] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d8910 [0100.398] FindNextFileW (in: hFindFile=0xd7079d8910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.399] FindNextFileW (in: hFindFile=0xd7079d8910, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.399] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.399] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\customizations.xml", dwFileAttributes=0x80) returned 0 [0100.399] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.399] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.399] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.400] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.400] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\MasterDatastore.xml", dwFileAttributes=0x80) returned 0 [0100.404] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\masterdatastore.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.404] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.404] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.404] SetLastError (dwErrCode=0x0) [0100.404] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.405] GetLastError () returned 0x5 [0100.405] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0100.405] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.405] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\*.*", lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 0xd7079d9870 [0100.405] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0100.405] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4ba90 | out: lpFindFileData=0xd707b4ba90) returned 1 [0100.405] SetLastError (dwErrCode=0x0) [0100.405] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.406] GetLastError () returned 0x5 [0100.406] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0100.406] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.406] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\*.*", lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 0xd7079d9c90 [0100.407] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0100.407] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0100.407] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.407] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\Power_0.provxml", dwFileAttributes=0x80) returned 0 [0100.408] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\Power_0.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\prov\\runtime\\power_0.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.408] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.408] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.408] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.409] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\Power_1.provxml", dwFileAttributes=0x80) returned 0 [0100.409] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\Power_1.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\prov\\runtime\\power_1.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.409] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.409] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.410] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.410] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\Power_2.provxml", dwFileAttributes=0x80) returned 0 [0100.410] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\Power_2.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\prov\\runtime\\power_2.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.411] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.411] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.411] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.411] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\Power_3.provxml", dwFileAttributes=0x80) returned 0 [0100.412] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\Power_3.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\prov\\runtime\\power_3.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.412] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.412] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.413] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.413] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\Power_4.provxml", dwFileAttributes=0x80) returned 0 [0100.414] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\Power_4.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\prov\\runtime\\power_4.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.414] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.414] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.414] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.415] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\Power_5.provxml", dwFileAttributes=0x80) returned 0 [0100.415] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\Power_5.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\prov\\runtime\\power_5.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.415] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.416] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.416] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.419] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\Power_6.provxml", dwFileAttributes=0x80) returned 0 [0100.419] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\Power_6.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\prov\\runtime\\power_6.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.420] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.420] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.421] SetLastError (dwErrCode=0x0) [0100.421] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\prov\\runtime\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.426] GetLastError () returned 0x5 [0100.426] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4ba40, lpOverlapped=0x0) returned 0 [0100.426] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.426] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.427] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime.xml", dwFileAttributes=0x80) returned 0 [0100.427] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\prov\\runtime.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.427] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.428] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.428] SetLastError (dwErrCode=0x0) [0100.428] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.428] GetLastError () returned 0x5 [0100.428] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c1f0, lpOverlapped=0x0) returned 0 [0100.428] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.429] SetLastError (dwErrCode=0x0) [0100.429] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.429] GetLastError () returned 0x5 [0100.429] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0100.429] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.429] SetLastError (dwErrCode=0x0) [0100.429] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.429] GetLastError () returned 0x5 [0100.430] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0100.430] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.430] SetLastError (dwErrCode=0x0) [0100.430] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.430] GetLastError () returned 0x5 [0100.430] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0100.430] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.430] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d8a90 [0100.430] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0100.430] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0100.430] SetLastError (dwErrCode=0x0) [0100.430] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\search\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.431] GetLastError () returned 0x5 [0100.431] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0100.431] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.431] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xffffffffffffffff [0100.431] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0100.431] SetLastError (dwErrCode=0x0) [0100.431] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.431] GetLastError () returned 0x5 [0100.431] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0100.431] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.432] SetLastError (dwErrCode=0x0) [0100.432] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\search\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.435] GetLastError () returned 0x5 [0100.435] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0100.435] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.435] SetLastError (dwErrCode=0x0) [0100.435] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.436] GetLastError () returned 0x5 [0100.436] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0100.436] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.436] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xffffffffffffffff [0100.436] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0100.436] SetLastError (dwErrCode=0x0) [0100.436] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\smsrouter\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.436] GetLastError () returned 0x5 [0100.436] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0100.436] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.436] SetLastError (dwErrCode=0x0) [0100.436] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.437] GetLastError () returned 0x5 [0100.437] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0100.437] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.437] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d9090 [0100.437] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0100.437] FindNextFileW (in: hFindFile=0xd7079d9090, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0100.437] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.438] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\CIiHmnxMn6Ps.dat", dwFileAttributes=0x80) returned 1 [0100.438] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\CIiHmnxMn6Ps.dat" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\ciihmnxmn6ps.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x728 [0100.439] GetFileSizeEx (in: hFile=0x728, lpFileSize=0xd707b4c798 | out: lpFileSize=0xd707b4c798*=0) returned 1 [0100.439] GetFileSizeEx (in: hFile=0x728, lpFileSize=0xd707b4c7a8 | out: lpFileSize=0xd707b4c7a8*=0) returned 1 [0100.439] CloseHandle (hObject=0x728) returned 1 [0100.439] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.439] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.439] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.bmp", dwFileAttributes=0x80) returned 0 [0100.440] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\guest.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.440] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.440] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.441] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.441] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.png", dwFileAttributes=0x80) returned 0 [0100.441] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.png" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\guest.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.442] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.442] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.442] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.442] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-192.png", dwFileAttributes=0x80) returned 0 [0100.443] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-192.png" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user-192.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.443] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.443] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.443] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.444] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-32.png", dwFileAttributes=0x80) returned 0 [0100.444] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-32.png" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user-32.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.445] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.445] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.445] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.445] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-40.png", dwFileAttributes=0x80) returned 0 [0100.446] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-40.png" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user-40.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.446] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.446] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.446] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.447] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-48.png", dwFileAttributes=0x80) returned 0 [0100.447] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-48.png" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user-48.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.451] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.451] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.451] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.452] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.bmp", dwFileAttributes=0x80) returned 0 [0100.452] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.453] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.453] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.453] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.453] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.png", dwFileAttributes=0x80) returned 0 [0100.454] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.png" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.454] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.454] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.454] SetLastError (dwErrCode=0x0) [0100.454] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.455] GetLastError () returned 0x5 [0100.455] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0100.455] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.455] SetLastError (dwErrCode=0x0) [0100.455] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.456] GetLastError () returned 0x5 [0100.456] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4d150, lpOverlapped=0x0) returned 0 [0100.456] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.456] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Vault\\*.*", lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 0xd7079d9c90 [0100.456] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0100.456] FindNextFileW (in: hFindFile=0xd7079d9c90, lpFindFileData=0xd707b4c9f0 | out: lpFindFileData=0xd707b4c9f0) returned 1 [0100.456] SetLastError (dwErrCode=0x0) [0100.456] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Vault\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\vault\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.456] GetLastError () returned 0x5 [0100.456] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0100.456] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.456] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204\\*.*", lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 0xd7079d9390 [0100.457] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.457] FindNextFileW (in: hFindFile=0xd7079d9390, lpFindFileData=0xd707b4c240 | out: lpFindFileData=0xd707b4c240) returned 1 [0100.457] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.457] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204\\154E23D0-C644-4E6F-8CE6-5069272F999F.vsch", dwFileAttributes=0x80) returned 0 [0100.457] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204\\154E23D0-C644-4E6F-8CE6-5069272F999F.vsch" (normalized: "c:\\users\\all users\\microsoft\\vault\\ac658cb4-9126-49bd-b877-31eedab3f204\\154e23d0-c644-4e6f-8ce6-5069272f999f.vsch"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.458] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.458] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.458] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.459] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204\\2F1A6504-0641-44CF-8BB5-3612D865F2E5.vsch", dwFileAttributes=0x80) returned 0 [0100.459] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204\\2F1A6504-0641-44CF-8BB5-3612D865F2E5.vsch" (normalized: "c:\\users\\all users\\microsoft\\vault\\ac658cb4-9126-49bd-b877-31eedab3f204\\2f1a6504-0641-44cf-8bb5-3612d865f2e5.vsch"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.459] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.460] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.460] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.460] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204\\3CCD5499-87A8-4B10-A215-608888DD3B55.vsch", dwFileAttributes=0x80) returned 0 [0100.461] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204\\3CCD5499-87A8-4B10-A215-608888DD3B55.vsch" (normalized: "c:\\users\\all users\\microsoft\\vault\\ac658cb4-9126-49bd-b877-31eedab3f204\\3ccd5499-87a8-4b10-a215-608888dd3b55.vsch"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.461] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.461] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.461] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.462] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204\\Policy.vpol", dwFileAttributes=0x80) returned 0 [0100.462] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204\\Policy.vpol" (normalized: "c:\\users\\all users\\microsoft\\vault\\ac658cb4-9126-49bd-b877-31eedab3f204\\policy.vpol"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.462] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.463] SetLastError (dwErrCode=0x0) [0100.463] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\vault\\ac658cb4-9126-49bd-b877-31eedab3f204\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.467] GetLastError () returned 0x5 [0100.467] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7afca9500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xd707b4c9a0, lpOverlapped=0x0) returned 0 [0100.467] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0100.881] CryptGenKey (in: hProv=0xd7079ce2d0, Algid=0x6610, dwFlags=0x1, phKey=0xd707b4b070 | out: phKey=0xd707b4b070*=0xd707996620) returned 1 [0100.881] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0xd70aa60000 [0100.881] SetFilePointer (in: hFile=0x638, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0100.881] ReadFile (in: hFile=0x638, lpBuffer=0xd70aa60000, nNumberOfBytesToRead=0x40b, lpNumberOfBytesRead=0xd707b4b080, lpOverlapped=0x0 | out: lpBuffer=0xd70aa60000*, lpNumberOfBytesRead=0xd707b4b080*=0x40b, lpOverlapped=0x0) returned 1 [0100.882] CryptEncrypt (in: hKey=0xd707996620, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xd707b4b07c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xd707b4b07c*=0xf4250) returned 1 [0100.882] CryptEncrypt (in: hKey=0xd707996620, hHash=0x0, Final=1, dwFlags=0x0, pbData=0xd70aa60000*, pdwDataLen=0xd707b4b078*=0x40b, dwBufLen=0xf4250 | out: pbData=0xd70aa60000*, pdwDataLen=0xd707b4b078*=0x410) returned 1 [0100.882] SetFilePointer (in: hFile=0x638, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0100.882] WriteFile (in: hFile=0x638, lpBuffer=0xd70aa60000*, nNumberOfBytesToWrite=0x410, lpNumberOfBytesWritten=0xd707b4b080, lpOverlapped=0x0 | out: lpBuffer=0xd70aa60000*, lpNumberOfBytesWritten=0xd707b4b080*=0x410, lpOverlapped=0x0) returned 1 [0100.882] WriteFile (in: hFile=0x638, lpBuffer=0xd707b4b0c0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xd707b4b084, lpOverlapped=0x0 | out: lpBuffer=0xd707b4b0c0*, lpNumberOfBytesWritten=0xd707b4b084*=0x6, lpOverlapped=0x0) returned 1 [0100.882] CryptExportKey (in: hKey=0xd707996620, hExpKey=0xd7079a7710, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xd707b4b090 | out: pbData=0x0*, pdwDataLen=0xd707b4b090*=0x10c) returned 1 [0100.882] CryptExportKey (in: hKey=0xd707996620, hExpKey=0xd7079a7710, dwBlobType=0x1, dwFlags=0x0, pbData=0xd707b4b110, pdwDataLen=0xd707b4b090 | out: pbData=0xd707b4b110*, pdwDataLen=0xd707b4b090*=0x10c) returned 1 [0100.882] WriteFile (in: hFile=0x638, lpBuffer=0xd707b4b110*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd707b4b084, lpOverlapped=0x0 | out: lpBuffer=0xd707b4b110*, lpNumberOfBytesWritten=0xd707b4b084*=0x10c, lpOverlapped=0x0) returned 1 [0100.882] CloseHandle (hObject=0x638) returned 1 [0100.900] VirtualFree (lpAddress=0xd70aa60000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.905] CryptDestroyKey (hKey=0xd707996620) returned 1 [0100.905] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0100.905] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.905] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt17.lst", dwFileAttributes=0x80) returned 1 [0100.906] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt17.lst" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\adobecmapfnt17.lst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x638 [0100.906] GetFileSizeEx (in: hFile=0x638, lpFileSize=0xd707b4b088 | out: lpFileSize=0xd707b4b088*=536) returned 1 [0100.906] GetFileSizeEx (in: hFile=0x638, lpFileSize=0xd707b4b098 | out: lpFileSize=0xd707b4b098*=536) returned 1 [0100.906] SetFilePointerEx (in: hFile=0x638, liDistanceToMove=0xf6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0100.906] ReadFile (in: hFile=0x638, lpBuffer=0xd707b4b0e8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xd707b4b0a8, lpOverlapped=0x0 | out: lpBuffer=0xd707b4b0e8*, lpNumberOfBytesRead=0xd707b4b0a8*=0x19, lpOverlapped=0x0) returned 1 [0100.907] SetFilePointer (in: hFile=0x638, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0100.907] CryptGenKey (in: hProv=0xd7079ce2d0, Algid=0x6610, dwFlags=0x1, phKey=0xd707b4b070 | out: phKey=0xd707b4b070*=0xd707995c80) returned 1 [0100.907] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0xd70aa60000 [0100.907] SetFilePointer (in: hFile=0x638, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0100.907] ReadFile (in: hFile=0x638, lpBuffer=0xd70aa60000, nNumberOfBytesToRead=0x218, lpNumberOfBytesRead=0xd707b4b080, lpOverlapped=0x0 | out: lpBuffer=0xd70aa60000*, lpNumberOfBytesRead=0xd707b4b080*=0x218, lpOverlapped=0x0) returned 1 [0100.907] CryptEncrypt (in: hKey=0xd707995c80, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xd707b4b07c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xd707b4b07c*=0xf4250) returned 1 [0100.907] CryptEncrypt (in: hKey=0xd707995c80, hHash=0x0, Final=1, dwFlags=0x0, pbData=0xd70aa60000*, pdwDataLen=0xd707b4b078*=0x218, dwBufLen=0xf4250 | out: pbData=0xd70aa60000*, pdwDataLen=0xd707b4b078*=0x220) returned 1 [0100.907] SetFilePointer (in: hFile=0x638, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0100.907] WriteFile (in: hFile=0x638, lpBuffer=0xd70aa60000*, nNumberOfBytesToWrite=0x220, lpNumberOfBytesWritten=0xd707b4b080, lpOverlapped=0x0 | out: lpBuffer=0xd70aa60000*, lpNumberOfBytesWritten=0xd707b4b080*=0x220, lpOverlapped=0x0) returned 1 [0100.908] WriteFile (in: hFile=0x638, lpBuffer=0xd707b4b0c0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xd707b4b084, lpOverlapped=0x0 | out: lpBuffer=0xd707b4b0c0*, lpNumberOfBytesWritten=0xd707b4b084*=0x6, lpOverlapped=0x0) returned 1 [0100.908] CryptExportKey (in: hKey=0xd707995c80, hExpKey=0xd7079a7710, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xd707b4b090 | out: pbData=0x0*, pdwDataLen=0xd707b4b090*=0x10c) returned 1 [0100.908] CryptExportKey (in: hKey=0xd707995c80, hExpKey=0xd7079a7710, dwBlobType=0x1, dwFlags=0x0, pbData=0xd707b4b110, pdwDataLen=0xd707b4b090 | out: pbData=0xd707b4b110*, pdwDataLen=0xd707b4b090*=0x10c) returned 1 [0100.908] WriteFile (in: hFile=0x638, lpBuffer=0xd707b4b110*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd707b4b084, lpOverlapped=0x0 | out: lpBuffer=0xd707b4b110*, lpNumberOfBytesWritten=0xd707b4b084*=0x10c, lpOverlapped=0x0) returned 1 [0100.913] CloseHandle (hObject=0x638) returned 1 [0100.928] VirtualFree (lpAddress=0xd70aa60000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.932] CryptDestroyKey (hKey=0xd707995c80) returned 1 [0100.932] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.933] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0100.933] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.933] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt15.lst", dwFileAttributes=0x80) returned 1 [0100.934] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt15.lst" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\adobesysfnt15.lst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x638 [0100.934] GetFileSizeEx (in: hFile=0x638, lpFileSize=0xd707b4b088 | out: lpFileSize=0xd707b4b088*=90431) returned 1 [0100.934] GetFileSizeEx (in: hFile=0x638, lpFileSize=0xd707b4b098 | out: lpFileSize=0xd707b4b098*=90431) returned 1 [0100.934] SetFilePointerEx (in: hFile=0x638, liDistanceToMove=0x1601d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0100.934] ReadFile (in: hFile=0x638, lpBuffer=0xd707b4b0e8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xd707b4b0a8, lpOverlapped=0x0 | out: lpBuffer=0xd707b4b0e8*, lpNumberOfBytesRead=0xd707b4b0a8*=0x19, lpOverlapped=0x0) returned 1 [0100.945] SetFilePointer (in: hFile=0x638, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0100.945] CryptGenKey (in: hProv=0xd7079ce2d0, Algid=0x6610, dwFlags=0x1, phKey=0xd707b4b070 | out: phKey=0xd707b4b070*=0xd7079969a0) returned 1 [0100.945] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0xd70aa60000 [0100.945] SetFilePointer (in: hFile=0x638, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0100.945] ReadFile (in: hFile=0x638, lpBuffer=0xd70aa60000, nNumberOfBytesToRead=0x1613f, lpNumberOfBytesRead=0xd707b4b080, lpOverlapped=0x0 | out: lpBuffer=0xd70aa60000*, lpNumberOfBytesRead=0xd707b4b080*=0x1613f, lpOverlapped=0x0) returned 1 [0100.947] CryptEncrypt (in: hKey=0xd7079969a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xd707b4b07c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xd707b4b07c*=0xf4250) returned 1 [0100.947] CryptEncrypt (in: hKey=0xd7079969a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0xd70aa60000*, pdwDataLen=0xd707b4b078*=0x1613f, dwBufLen=0xf4250 | out: pbData=0xd70aa60000*, pdwDataLen=0xd707b4b078*=0x16140) returned 1 [0100.948] SetFilePointer (in: hFile=0x638, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0100.948] WriteFile (in: hFile=0x638, lpBuffer=0xd70aa60000*, nNumberOfBytesToWrite=0x16140, lpNumberOfBytesWritten=0xd707b4b080, lpOverlapped=0x0 | out: lpBuffer=0xd70aa60000*, lpNumberOfBytesWritten=0xd707b4b080*=0x16140, lpOverlapped=0x0) returned 1 [0100.948] WriteFile (in: hFile=0x638, lpBuffer=0xd707b4b0c0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xd707b4b084, lpOverlapped=0x0 | out: lpBuffer=0xd707b4b0c0*, lpNumberOfBytesWritten=0xd707b4b084*=0x6, lpOverlapped=0x0) returned 1 [0100.948] CryptExportKey (in: hKey=0xd7079969a0, hExpKey=0xd7079a7710, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xd707b4b090 | out: pbData=0x0*, pdwDataLen=0xd707b4b090*=0x10c) returned 1 [0100.948] CryptExportKey (in: hKey=0xd7079969a0, hExpKey=0xd7079a7710, dwBlobType=0x1, dwFlags=0x0, pbData=0xd707b4b110, pdwDataLen=0xd707b4b090 | out: pbData=0xd707b4b110*, pdwDataLen=0xd707b4b090*=0x10c) returned 1 [0100.948] WriteFile (in: hFile=0x638, lpBuffer=0xd707b4b110*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd707b4b084, lpOverlapped=0x0 | out: lpBuffer=0xd707b4b110*, lpNumberOfBytesWritten=0xd707b4b084*=0x10c, lpOverlapped=0x0) returned 1 [0100.948] CloseHandle (hObject=0x638) returned 1 [0100.969] VirtualFree (lpAddress=0xd70aa60000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.976] CryptDestroyKey (hKey=0xd7079969a0) returned 1 [0100.976] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.976] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0100.976] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0100.976] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt17.lst", dwFileAttributes=0x80) returned 1 [0100.977] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt17.lst" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\adobesysfnt17.lst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4c8 [0100.977] GetFileSizeEx (in: hFile=0x4c8, lpFileSize=0xd707b4b088 | out: lpFileSize=0xd707b4b088*=150357) returned 1 [0100.977] GetFileSizeEx (in: hFile=0x4c8, lpFileSize=0xd707b4b098 | out: lpFileSize=0xd707b4b098*=150357) returned 1 [0100.977] SetFilePointerEx (in: hFile=0x4c8, liDistanceToMove=0x24a33, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0100.977] ReadFile (in: hFile=0x4c8, lpBuffer=0xd707b4b0e8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xd707b4b0a8, lpOverlapped=0x0 | out: lpBuffer=0xd707b4b0e8*, lpNumberOfBytesRead=0xd707b4b0a8*=0x19, lpOverlapped=0x0) returned 1 [0100.978] SetFilePointer (in: hFile=0x4c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0100.978] CryptGenKey (in: hProv=0xd7079ce2d0, Algid=0x6610, dwFlags=0x1, phKey=0xd707b4b070 | out: phKey=0xd707b4b070*=0xd707995ac0) returned 1 [0100.978] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0xd70aa60000 [0100.979] SetFilePointer (in: hFile=0x4c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0100.979] ReadFile (in: hFile=0x4c8, lpBuffer=0xd70aa60000, nNumberOfBytesToRead=0x24b55, lpNumberOfBytesRead=0xd707b4b080, lpOverlapped=0x0 | out: lpBuffer=0xd70aa60000*, lpNumberOfBytesRead=0xd707b4b080*=0x24b55, lpOverlapped=0x0) returned 1 [0100.981] CryptEncrypt (in: hKey=0xd707995ac0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xd707b4b07c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xd707b4b07c*=0xf4250) returned 1 [0100.981] CryptEncrypt (in: hKey=0xd707995ac0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0xd70aa60000*, pdwDataLen=0xd707b4b078*=0x24b55, dwBufLen=0xf4250 | out: pbData=0xd70aa60000*, pdwDataLen=0xd707b4b078*=0x24b60) returned 1 [0100.982] SetFilePointer (in: hFile=0x4c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0100.982] WriteFile (in: hFile=0x4c8, lpBuffer=0xd70aa60000*, nNumberOfBytesToWrite=0x24b60, lpNumberOfBytesWritten=0xd707b4b080, lpOverlapped=0x0 | out: lpBuffer=0xd70aa60000*, lpNumberOfBytesWritten=0xd707b4b080*=0x24b60, lpOverlapped=0x0) returned 1 [0100.982] WriteFile (in: hFile=0x4c8, lpBuffer=0xd707b4b0c0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xd707b4b084, lpOverlapped=0x0 | out: lpBuffer=0xd707b4b0c0*, lpNumberOfBytesWritten=0xd707b4b084*=0x6, lpOverlapped=0x0) returned 1 [0100.982] CryptExportKey (in: hKey=0xd707995ac0, hExpKey=0xd7079a7710, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xd707b4b090 | out: pbData=0x0*, pdwDataLen=0xd707b4b090*=0x10c) returned 1 [0100.982] CryptExportKey (in: hKey=0xd707995ac0, hExpKey=0xd7079a7710, dwBlobType=0x1, dwFlags=0x0, pbData=0xd707b4b110, pdwDataLen=0xd707b4b090 | out: pbData=0xd707b4b110*, pdwDataLen=0xd707b4b090*=0x10c) returned 1 [0100.983] WriteFile (in: hFile=0x4c8, lpBuffer=0xd707b4b110*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd707b4b084, lpOverlapped=0x0 | out: lpBuffer=0xd707b4b110*, lpNumberOfBytesWritten=0xd707b4b084*=0x10c, lpOverlapped=0x0) returned 1 [0100.983] CloseHandle (hObject=0x4c8) returned 1 [0101.054] VirtualFree (lpAddress=0xd70aa60000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0101.058] CryptDestroyKey (hKey=0xd707995ac0) returned 1 [0101.058] VirtualFree (lpAddress=0xd707b90000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0101.058] FindNextFileW (in: hFindFile=0xd7079d8a90, lpFindFileData=0xd707b4b2e0 | out: lpFindFileData=0xd707b4b2e0) returned 1 [0101.058] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x528 [0101.064] WriteFile (in: hFile=0x528, lpBuffer=0x7ff7afca9500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xd707b4b290, lpOverlapped=0x0 | out: lpBuffer=0x7ff7afca9500*, lpNumberOfBytesWritten=0xd707b4b290*=0x324, lpOverlapped=0x0) returned 1 [0101.065] CloseHandle (hObject=0x528) returned 1 [0101.065] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\*.*", lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 0xd7079d9870 [0101.114] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0101.114] FindNextFileW (in: hFindFile=0xd7079d9870, lpFindFileData=0xd707b4ab30 | out: lpFindFileData=0xd707b4ab30) returned 1 [0101.114] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xd707b90000 [0101.115] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt15.lst", dwFileAttributes=0x80) returned 1 [0101.115] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt15.lst" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\cache\\acrofnt15.lst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4c8 [0101.115] GetFileSizeEx (in: hFile=0x4c8, lpFileSize=0xd707b4a8d8 | out: lpFileSize=0xd707b4a8d8*=9566) returned 1 [0101.115] GetFileSizeEx (in: hFile=0x4c8, lpFileSize=0xd707b4a8e8 | out: lpFileSize=0xd707b4a8e8*=9566) returned 1 [0101.115] SetFilePointerEx (in: hFile=0x4c8, liDistanceToMove=0x243c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0101.116] ReadFile (in: hFile=0x4c8, lpBuffer=0xd707b4a938, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xd707b4a8f8, lpOverlapped=0x0 | out: lpBuffer=0xd707b4a938*, lpNumberOfBytesRead=0xd707b4a8f8*=0x19, lpOverlapped=0x0) returned 1 [0101.117] SetFilePointer (in: hFile=0x4c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0101.117] CryptGenKey (in: hProv=0xd7079ce2d0, Algid=0x6610, dwFlags=0x1, phKey=0xd707b4a8c0 | out: phKey=0xd707b4a8c0*=0xd707995b30) returned 1 [0101.117] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0xd70aa60000 [0101.117] SetFilePointer (in: hFile=0x4c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0101.117] ReadFile (in: hFile=0x4c8, lpBuffer=0xd70aa60000, nNumberOfBytesToRead=0x255e, lpNumberOfBytesRead=0xd707b4a8d0, lpOverlapped=0x0 | out: lpBuffer=0xd70aa60000*, lpNumberOfBytesRead=0xd707b4a8d0*=0x255e, lpOverlapped=0x0) returned 1 [0101.118] CryptEncrypt (in: hKey=0xd707995b30, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xd707b4a8cc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xd707b4a8cc*=0xf4250) returned 1 [0101.118] CryptEncrypt (in: hKey=0xd707995b30, hHash=0x0, Final=1, dwFlags=0x0, pbData=0xd70aa60000*, pdwDataLen=0xd707b4a8c8*=0x255e, dwBufLen=0xf4250 | out: pbData=0xd70aa60000*, pdwDataLen=0xd707b4a8c8*=0x2560) returned 1 [0101.118] SetFilePointer (in: hFile=0x4c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0101.118] WriteFile (in: hFile=0x4c8, lpBuffer=0xd70aa60000*, nNumberOfBytesToWrite=0x2560, lpNumberOfBytesWritten=0xd707b4a8d0, lpOverlapped=0x0 | out: lpBuffer=0xd70aa60000*, lpNumberOfBytesWritten=0xd707b4a8d0*=0x2560, lpOverlapped=0x0) returned 1 [0101.118] WriteFile (in: hFile=0x4c8, lpBuffer=0xd707b4a910*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xd707b4a8d4, lpOverlapped=0x0 | out: lpBuffer=0xd707b4a910*, lpNumberOfBytesWritten=0xd707b4a8d4*=0x6, lpOverlapped=0x0) returned 1 [0101.118] CryptExportKey (in: hKey=0xd707995b30, hExpKey=0xd7079a7710, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xd707b4a8e0 | out: pbData=0x0*, pdwDataLen=0xd707b4a8e0*=0x10c) returned 1 [0101.118] CryptExportKey (in: hKey=0xd707995b30, hExpKey=0xd7079a7710, dwBlobType=0x1, dwFlags=0x0, pbData=0xd707b4a960, pdwDataLen=0xd707b4a8e0 | out: pbData=0xd707b4a960*, pdwDataLen=0xd707b4a8e0*=0x10c) returned 1 [0101.118] WriteFile (in: hFile=0x4c8, lpBuffer=0xd707b4a960*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd707b4a8d4, lpOverlapped=0x0 | out: lpBuffer=0xd707b4a960*, lpNumberOfBytesWritten=0xd707b4a8d4*=0x10c, lpOverlapped=0x0) returned 1 [0101.118] CloseHandle (hObject=0x4c8) returned 1 [0101.141] VirtualFree (lpAddress=0xd70aa60000, dwSize=0x0, dwFreeType=0x8000) Thread: id = 36 os_tid = 0xcd0 Thread: id = 121 os_tid = 0xd48 Thread: id = 122 os_tid = 0xd4c Thread: id = 129 os_tid = 0xee8 Process: id = "5" image_name = "taskhostw.exe" filename = "c:\\windows\\system32\\taskhostw.exe" page_root = "0xac3a000" os_pid = "0x7ac" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "injection" parent_id = "1" os_parent_pid = "0x300" cmd_line = "taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}" cur_dir = "C:\\Windows\\system32\\" os_username = "LHNIWSJ\\CIiHmnxMn6Ps" os_groups = "LHNIWSJ\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00014ee5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 445 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 446 start_va = 0x13be5e0000 end_va = 0x13be5effff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000013be5e0000" filename = "" Region: id = 447 start_va = 0x13be5f0000 end_va = 0x13be5f6fff entry_point = 0x0 region_type = private name = "private_0x00000013be5f0000" filename = "" Region: id = 448 start_va = 0x13be600000 end_va = 0x13be613fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000013be600000" filename = "" Region: id = 449 start_va = 0x13be620000 end_va = 0x13be69ffff entry_point = 0x0 region_type = private name = "private_0x00000013be620000" filename = "" Region: id = 450 start_va = 0x13be6a0000 end_va = 0x13be6a3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000013be6a0000" filename = "" Region: id = 451 start_va = 0x13be6b0000 end_va = 0x13be6b0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000013be6b0000" filename = "" Region: id = 452 start_va = 0x13be6c0000 end_va = 0x13be6c1fff entry_point = 0x0 region_type = private name = "private_0x00000013be6c0000" filename = "" Region: id = 453 start_va = 0x13be6d0000 end_va = 0x13be6d6fff entry_point = 0x0 region_type = private name = "private_0x00000013be6d0000" filename = "" Region: id = 454 start_va = 0x13be6e0000 end_va = 0x13be6e0fff entry_point = 0x13be6e0000 region_type = mapped_file name = "taskhostw.exe.mui" filename = "\\Windows\\System32\\en-US\\taskhostw.exe.mui" (normalized: "c:\\windows\\system32\\en-us\\taskhostw.exe.mui") Region: id = 455 start_va = 0x13be6f0000 end_va = 0x13be7effff entry_point = 0x0 region_type = private name = "private_0x00000013be6f0000" filename = "" Region: id = 456 start_va = 0x13be7f0000 end_va = 0x13be8adfff entry_point = 0x13be7f0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 457 start_va = 0x13be8b0000 end_va = 0x13be8bffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000013be8b0000" filename = "" Region: id = 458 start_va = 0x13be8c0000 end_va = 0x13be8cffff entry_point = 0x13be8c0000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 459 start_va = 0x13be8d0000 end_va = 0x13be8dffff entry_point = 0x13be8d0000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 460 start_va = 0x13be8e0000 end_va = 0x13be8effff entry_point = 0x13be8e0000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 461 start_va = 0x13be8f0000 end_va = 0x13be8fffff entry_point = 0x13be8f0000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 462 start_va = 0x13be900000 end_va = 0x13be90ffff entry_point = 0x13be900000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 463 start_va = 0x13be910000 end_va = 0x13be91ffff entry_point = 0x13be910000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 464 start_va = 0x13be920000 end_va = 0x13be92ffff entry_point = 0x13be920000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 465 start_va = 0x13be930000 end_va = 0x13be9affff entry_point = 0x0 region_type = private name = "private_0x00000013be930000" filename = "" Region: id = 466 start_va = 0x13be9b0000 end_va = 0x13be9b0fff entry_point = 0x0 region_type = private name = "private_0x00000013be9b0000" filename = "" Region: id = 467 start_va = 0x13be9c0000 end_va = 0x13be9c0fff entry_point = 0x0 region_type = private name = "private_0x00000013be9c0000" filename = "" Region: id = 468 start_va = 0x13be9d0000 end_va = 0x13be9d3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000013be9d0000" filename = "" Region: id = 469 start_va = 0x13be9e0000 end_va = 0x13be9effff entry_point = 0x0 region_type = private name = "private_0x00000013be9e0000" filename = "" Region: id = 470 start_va = 0x13be9f0000 end_va = 0x13beaa7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000013be9f0000" filename = "" Region: id = 471 start_va = 0x13beab0000 end_va = 0x13beab0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000013beab0000" filename = "" Region: id = 472 start_va = 0x13beac0000 end_va = 0x13beac0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000013beac0000" filename = "" Region: id = 473 start_va = 0x13bead0000 end_va = 0x13bead0fff entry_point = 0x13bead0000 region_type = mapped_file name = "msctfmonitor.dll.mui" filename = "\\Windows\\System32\\en-US\\MsCtfMonitor.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\msctfmonitor.dll.mui") Region: id = 474 start_va = 0x13beae0000 end_va = 0x13beae0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000013beae0000" filename = "" Region: id = 475 start_va = 0x13beaf0000 end_va = 0x13beafffff entry_point = 0x0 region_type = private name = "private_0x00000013beaf0000" filename = "" Region: id = 476 start_va = 0x13beb00000 end_va = 0x13bec87fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000013beb00000" filename = "" Region: id = 477 start_va = 0x13bec90000 end_va = 0x13bee10fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000013bec90000" filename = "" Region: id = 478 start_va = 0x13bee20000 end_va = 0x13c021ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000013bee20000" filename = "" Region: id = 479 start_va = 0x13c0220000 end_va = 0x13c029ffff entry_point = 0x0 region_type = private name = "private_0x00000013c0220000" filename = "" Region: id = 480 start_va = 0x13c02a0000 end_va = 0x13c02a5fff entry_point = 0x13c02a0000 region_type = mapped_file name = "winmm.dll.mui" filename = "\\Windows\\System32\\en-US\\winmm.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\winmm.dll.mui") Region: id = 481 start_va = 0x13c02b0000 end_va = 0x13c02b0fff entry_point = 0x0 region_type = private name = "private_0x00000013c02b0000" filename = "" Region: id = 482 start_va = 0x13c02c0000 end_va = 0x13c02c0fff entry_point = 0x0 region_type = private name = "private_0x00000013c02c0000" filename = "" Region: id = 483 start_va = 0x13c02d0000 end_va = 0x13c02d7fff entry_point = 0x0 region_type = private name = "private_0x00000013c02d0000" filename = "" Region: id = 484 start_va = 0x13c02e0000 end_va = 0x13c02e0fff entry_point = 0x0 region_type = private name = "private_0x00000013c02e0000" filename = "" Region: id = 485 start_va = 0x13c02f0000 end_va = 0x13c02f0fff entry_point = 0x0 region_type = private name = "private_0x00000013c02f0000" filename = "" Region: id = 486 start_va = 0x13c0300000 end_va = 0x13c0303fff entry_point = 0x0 region_type = private name = "private_0x00000013c0300000" filename = "" Region: id = 487 start_va = 0x13c0310000 end_va = 0x13c0311fff entry_point = 0x0 region_type = private name = "private_0x00000013c0310000" filename = "" Region: id = 488 start_va = 0x13c0320000 end_va = 0x13c0320fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000013c0320000" filename = "" Region: id = 489 start_va = 0x13c0330000 end_va = 0x13c033ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000013c0330000" filename = "" Region: id = 490 start_va = 0x13c0340000 end_va = 0x13c034ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000013c0340000" filename = "" Region: id = 491 start_va = 0x13c0350000 end_va = 0x13c035ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000013c0350000" filename = "" Region: id = 492 start_va = 0x13c0360000 end_va = 0x13c036ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000013c0360000" filename = "" Region: id = 493 start_va = 0x13c0370000 end_va = 0x13c037ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000013c0370000" filename = "" Region: id = 494 start_va = 0x13c0380000 end_va = 0x13c038ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000013c0380000" filename = "" Region: id = 495 start_va = 0x13c0390000 end_va = 0x13c0390fff entry_point = 0x0 region_type = private name = "private_0x00000013c0390000" filename = "" Region: id = 496 start_va = 0x13c03a0000 end_va = 0x13c06d6fff entry_point = 0x13c03a0000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 497 start_va = 0x13c06e0000 end_va = 0x13c075ffff entry_point = 0x0 region_type = private name = "private_0x00000013c06e0000" filename = "" Region: id = 498 start_va = 0x13c0760000 end_va = 0x13c07dffff entry_point = 0x0 region_type = private name = "private_0x00000013c0760000" filename = "" Region: id = 499 start_va = 0x13c07e0000 end_va = 0x13c085ffff entry_point = 0x0 region_type = private name = "private_0x00000013c07e0000" filename = "" Region: id = 500 start_va = 0x13c0860000 end_va = 0x13c08dffff entry_point = 0x0 region_type = private name = "private_0x00000013c0860000" filename = "" Region: id = 501 start_va = 0x13c08e0000 end_va = 0x13c08e6fff entry_point = 0x0 region_type = private name = "private_0x00000013c08e0000" filename = "" Region: id = 502 start_va = 0x13c08f0000 end_va = 0x13c09effff entry_point = 0x0 region_type = private name = "private_0x00000013c08f0000" filename = "" Region: id = 503 start_va = 0x13c09f0000 end_va = 0x13c0a6ffff entry_point = 0x0 region_type = private name = "private_0x00000013c09f0000" filename = "" Region: id = 504 start_va = 0x13c0a70000 end_va = 0x13c0a7ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000013c0a70000" filename = "" Region: id = 505 start_va = 0x13c0a80000 end_va = 0x13c0a8ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000013c0a80000" filename = "" Region: id = 506 start_va = 0x13c0a90000 end_va = 0x13c0a9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000013c0a90000" filename = "" Region: id = 507 start_va = 0x13c0aa0000 end_va = 0x13c0aaffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000013c0aa0000" filename = "" Region: id = 508 start_va = 0x13c0ab0000 end_va = 0x13c0abffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000013c0ab0000" filename = "" Region: id = 509 start_va = 0x13c0ac0000 end_va = 0x13c0acffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000013c0ac0000" filename = "" Region: id = 510 start_va = 0x13c0ad0000 end_va = 0x13c1acffff entry_point = 0x0 region_type = private name = "private_0x00000013c0ad0000" filename = "" Region: id = 511 start_va = 0x13c1ad0000 end_va = 0x13c1b5ffff entry_point = 0x0 region_type = private name = "private_0x00000013c1ad0000" filename = "" Region: id = 512 start_va = 0x13c1b60000 end_va = 0x13c5b5ffff entry_point = 0x0 region_type = private name = "private_0x00000013c1b60000" filename = "" Region: id = 513 start_va = 0x13c5b60000 end_va = 0x13c9b5ffff entry_point = 0x0 region_type = private name = "private_0x00000013c5b60000" filename = "" Region: id = 514 start_va = 0x13c9b60000 end_va = 0x13c9b67fff entry_point = 0x0 region_type = private name = "private_0x00000013c9b60000" filename = "" Region: id = 515 start_va = 0x13c9b70000 end_va = 0x13c9b7ffff entry_point = 0x13c9b70000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 516 start_va = 0x13c9b80000 end_va = 0x13c9b8ffff entry_point = 0x13c9b80000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 517 start_va = 0x13c9b90000 end_va = 0x13c9b9ffff entry_point = 0x13c9b90000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 518 start_va = 0x13c9ba0000 end_va = 0x13c9baffff entry_point = 0x13c9ba0000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 519 start_va = 0x13c9bb0000 end_va = 0x13c9bbffff entry_point = 0x13c9bb0000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 520 start_va = 0x13c9bc0000 end_va = 0x13c9bcffff entry_point = 0x13c9bc0000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 521 start_va = 0x13c9bd0000 end_va = 0x13c9bdffff entry_point = 0x13c9bd0000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 522 start_va = 0x13c9be0000 end_va = 0x13c9beffff entry_point = 0x13c9be0000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 523 start_va = 0x13c9bf0000 end_va = 0x13c9bfffff entry_point = 0x13c9bf0000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 524 start_va = 0x13c9c00000 end_va = 0x13c9c0ffff entry_point = 0x13c9c00000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 525 start_va = 0x13c9c10000 end_va = 0x13c9c1ffff entry_point = 0x13c9c10000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 526 start_va = 0x13c9c20000 end_va = 0x13c9c2ffff entry_point = 0x13c9c20000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 527 start_va = 0x13c9c30000 end_va = 0x13c9c3ffff entry_point = 0x13c9c30000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 528 start_va = 0x13c9c40000 end_va = 0x13c9c4ffff entry_point = 0x13c9c40000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 529 start_va = 0x13c9c50000 end_va = 0x13c9c5ffff entry_point = 0x13c9c50000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 530 start_va = 0x13c9c60000 end_va = 0x13c9c6ffff entry_point = 0x13c9c60000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 531 start_va = 0x13c9c70000 end_va = 0x13c9ceffff entry_point = 0x0 region_type = private name = "private_0x00000013c9c70000" filename = "" Region: id = 532 start_va = 0x13c9cf0000 end_va = 0x13c9cf7fff entry_point = 0x0 region_type = private name = "private_0x00000013c9cf0000" filename = "" Region: id = 533 start_va = 0x13c9d00000 end_va = 0x13c9d0ffff entry_point = 0x13c9d00000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 534 start_va = 0x13c9d10000 end_va = 0x13c9d1ffff entry_point = 0x13c9d10000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 535 start_va = 0x13c9d20000 end_va = 0x13c9d2ffff entry_point = 0x13c9d20000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 536 start_va = 0x13c9d30000 end_va = 0x13c9d3ffff entry_point = 0x13c9d30000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 537 start_va = 0x13c9d40000 end_va = 0x13c9d4ffff entry_point = 0x13c9d40000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 538 start_va = 0x13c9d50000 end_va = 0x13c9d5ffff entry_point = 0x13c9d50000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 539 start_va = 0x13c9d60000 end_va = 0x13c9d67fff entry_point = 0x0 region_type = private name = "private_0x00000013c9d60000" filename = "" Region: id = 540 start_va = 0x13c9d70000 end_va = 0x13c9d7ffff entry_point = 0x13c9d70000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 541 start_va = 0x13c9d80000 end_va = 0x13c9d8ffff entry_point = 0x13c9d80000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 542 start_va = 0x13c9d90000 end_va = 0x13c9d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000013c9d90000" filename = "" Region: id = 543 start_va = 0x13c9da0000 end_va = 0x13c9daffff entry_point = 0x13c9da0000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 544 start_va = 0x13c9db0000 end_va = 0x13c9dbffff entry_point = 0x13c9db0000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 545 start_va = 0x13c9dc0000 end_va = 0x13c9dcffff entry_point = 0x13c9dc0000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 546 start_va = 0x13c9dd0000 end_va = 0x13c9ddffff entry_point = 0x13c9dd0000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 547 start_va = 0x13c9de0000 end_va = 0x13c9deffff entry_point = 0x13c9de0000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 548 start_va = 0x13c9df0000 end_va = 0x13c9e6ffff entry_point = 0x0 region_type = private name = "private_0x00000013c9df0000" filename = "" Region: id = 549 start_va = 0x13c9e70000 end_va = 0x13c9e7ffff entry_point = 0x13c9e70000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 550 start_va = 0x13c9e80000 end_va = 0x13c9e8ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000013c9e80000" filename = "" Region: id = 551 start_va = 0x13c9e90000 end_va = 0x13c9e9ffff entry_point = 0x13c9e90000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 552 start_va = 0x13c9ea0000 end_va = 0x13c9eaffff entry_point = 0x13c9ea0000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 553 start_va = 0x13c9eb0000 end_va = 0x13c9ebffff entry_point = 0x13c9eb0000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 554 start_va = 0x13c9ec0000 end_va = 0x13c9ecffff entry_point = 0x13c9ec0000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 555 start_va = 0x13c9ed0000 end_va = 0x13c9edffff entry_point = 0x13c9ed0000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 556 start_va = 0x13c9ee0000 end_va = 0x13c9eeffff entry_point = 0x13c9ee0000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 557 start_va = 0x13c9ef0000 end_va = 0x13c9efffff entry_point = 0x13c9ef0000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 558 start_va = 0x13c9f00000 end_va = 0x13c9f0ffff entry_point = 0x13c9f00000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 559 start_va = 0x13c9f20000 end_va = 0x13c9f2ffff entry_point = 0x13c9f20000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 560 start_va = 0x13c9f30000 end_va = 0x13c9f3ffff entry_point = 0x13c9f30000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 561 start_va = 0x13c9f40000 end_va = 0x13c9f4ffff entry_point = 0x13c9f40000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 562 start_va = 0x13c9f50000 end_va = 0x13c9f5ffff entry_point = 0x13c9f50000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 563 start_va = 0x13c9f60000 end_va = 0x13c9f6ffff entry_point = 0x13c9f60000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 564 start_va = 0x13c9f70000 end_va = 0x13c9f77fff entry_point = 0x0 region_type = private name = "private_0x00000013c9f70000" filename = "" Region: id = 565 start_va = 0x13c9f80000 end_va = 0x13ca07ffff entry_point = 0x0 region_type = private name = "private_0x00000013c9f80000" filename = "" Region: id = 566 start_va = 0x13ca080000 end_va = 0x13ca08ffff entry_point = 0x13ca080000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 567 start_va = 0x13ca090000 end_va = 0x13ca09ffff entry_point = 0x13ca090000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 568 start_va = 0x13ca0a0000 end_va = 0x13ca0affff entry_point = 0x13ca0a0000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 569 start_va = 0x13ca0b0000 end_va = 0x13ca0bffff entry_point = 0x13ca0b0000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 570 start_va = 0x13ca0c0000 end_va = 0x13ca0cffff entry_point = 0x13ca0c0000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 571 start_va = 0x13ca0d0000 end_va = 0x13ca0dffff entry_point = 0x13ca0d0000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 572 start_va = 0x13ca0e0000 end_va = 0x13ca0effff entry_point = 0x13ca0e0000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 573 start_va = 0x13ca0f0000 end_va = 0x13ca0fffff entry_point = 0x13ca0f0000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 574 start_va = 0x13ca100000 end_va = 0x13ca10ffff entry_point = 0x13ca100000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 575 start_va = 0x13ca110000 end_va = 0x13ca11ffff entry_point = 0x13ca110000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 576 start_va = 0x13ca120000 end_va = 0x13ca12ffff entry_point = 0x13ca120000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 577 start_va = 0x13ca130000 end_va = 0x13ca13ffff entry_point = 0x13ca130000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 578 start_va = 0x13ca140000 end_va = 0x13ca14ffff entry_point = 0x13ca140000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 579 start_va = 0x13ca150000 end_va = 0x13ca15ffff entry_point = 0x13ca150000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 580 start_va = 0x13ca160000 end_va = 0x13ca167fff entry_point = 0x0 region_type = private name = "private_0x00000013ca160000" filename = "" Region: id = 581 start_va = 0x13ca170000 end_va = 0x13ca17ffff entry_point = 0x13ca170000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 582 start_va = 0x13ca180000 end_va = 0x13ca187fff entry_point = 0x0 region_type = private name = "private_0x00000013ca180000" filename = "" Region: id = 583 start_va = 0x13ca190000 end_va = 0x13ca19ffff entry_point = 0x13ca190000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 584 start_va = 0x13ca1a0000 end_va = 0x13ca1affff entry_point = 0x13ca1a0000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 585 start_va = 0x13ca1e0000 end_va = 0x13ca1effff entry_point = 0x13ca1e0000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 586 start_va = 0x13ca1f0000 end_va = 0x13ca1fffff entry_point = 0x13ca1f0000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 587 start_va = 0x7df5ff9d0000 end_va = 0x7ff5ff9cffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ff9d0000" filename = "" Region: id = 588 start_va = 0x7ff7afc80000 end_va = 0x7ff7afcb4fff entry_point = 0x0 region_type = private name = "private_0x00007ff7afc80000" filename = "" Region: id = 589 start_va = 0x7ff7f6524000 end_va = 0x7ff7f6525fff entry_point = 0x0 region_type = private name = "private_0x00007ff7f6524000" filename = "" Region: id = 590 start_va = 0x7ff7f6526000 end_va = 0x7ff7f6527fff entry_point = 0x0 region_type = private name = "private_0x00007ff7f6526000" filename = "" Region: id = 591 start_va = 0x7ff7f6528000 end_va = 0x7ff7f6529fff entry_point = 0x0 region_type = private name = "private_0x00007ff7f6528000" filename = "" Region: id = 592 start_va = 0x7ff7f652a000 end_va = 0x7ff7f652bfff entry_point = 0x0 region_type = private name = "private_0x00007ff7f652a000" filename = "" Region: id = 593 start_va = 0x7ff7f652c000 end_va = 0x7ff7f652dfff entry_point = 0x0 region_type = private name = "private_0x00007ff7f652c000" filename = "" Region: id = 594 start_va = 0x7ff7f652e000 end_va = 0x7ff7f652ffff entry_point = 0x0 region_type = private name = "private_0x00007ff7f652e000" filename = "" Region: id = 595 start_va = 0x7ff7f6530000 end_va = 0x7ff7f662ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff7f6530000" filename = "" Region: id = 596 start_va = 0x7ff7f6630000 end_va = 0x7ff7f6652fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff7f6630000" filename = "" Region: id = 597 start_va = 0x7ff7f6654000 end_va = 0x7ff7f6655fff entry_point = 0x0 region_type = private name = "private_0x00007ff7f6654000" filename = "" Region: id = 598 start_va = 0x7ff7f6656000 end_va = 0x7ff7f6657fff entry_point = 0x0 region_type = private name = "private_0x00007ff7f6656000" filename = "" Region: id = 599 start_va = 0x7ff7f6658000 end_va = 0x7ff7f6659fff entry_point = 0x0 region_type = private name = "private_0x00007ff7f6658000" filename = "" Region: id = 600 start_va = 0x7ff7f665a000 end_va = 0x7ff7f665afff entry_point = 0x0 region_type = private name = "private_0x00007ff7f665a000" filename = "" Region: id = 601 start_va = 0x7ff7f665e000 end_va = 0x7ff7f665ffff entry_point = 0x0 region_type = private name = "private_0x00007ff7f665e000" filename = "" Region: id = 602 start_va = 0x7ff7f7400000 end_va = 0x7ff7f7418fff entry_point = 0x7ff7f7400000 region_type = mapped_file name = "taskhostw.exe" filename = "\\Windows\\System32\\taskhostw.exe" (normalized: "c:\\windows\\system32\\taskhostw.exe") Region: id = 603 start_va = 0x7ff8db910000 end_va = 0x7ff8db93bfff entry_point = 0x7ff8db910000 region_type = mapped_file name = "winmmbase.dll" filename = "\\Windows\\System32\\winmmbase.dll" (normalized: "c:\\windows\\system32\\winmmbase.dll") Region: id = 604 start_va = 0x7ff8db940000 end_va = 0x7ff8db962fff entry_point = 0x7ff8db940000 region_type = mapped_file name = "winmm.dll" filename = "\\Windows\\System32\\winmm.dll" (normalized: "c:\\windows\\system32\\winmm.dll") Region: id = 605 start_va = 0x7ff8dcd40000 end_va = 0x7ff8dcd54fff entry_point = 0x7ff8dcd40000 region_type = mapped_file name = "profext.dll" filename = "\\Windows\\System32\\profext.dll" (normalized: "c:\\windows\\system32\\profext.dll") Region: id = 606 start_va = 0x7ff8df5c0000 end_va = 0x7ff8df638fff entry_point = 0x7ff8df5c0000 region_type = mapped_file name = "msutb.dll" filename = "\\Windows\\System32\\msutb.dll" (normalized: "c:\\windows\\system32\\msutb.dll") Region: id = 607 start_va = 0x7ff8dff00000 end_va = 0x7ff8e01a6fff entry_point = 0x7ff8dff00000 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\System32\\wininet.dll" (normalized: "c:\\windows\\system32\\wininet.dll") Region: id = 608 start_va = 0x7ff8e1690000 end_va = 0x7ff8e169bfff entry_point = 0x7ff8e1690000 region_type = mapped_file name = "msctfmonitor.dll" filename = "\\Windows\\System32\\MsCtfMonitor.dll" (normalized: "c:\\windows\\system32\\msctfmonitor.dll") Region: id = 609 start_va = 0x7ff8e16a0000 end_va = 0x7ff8e16bafff entry_point = 0x7ff8e16a0000 region_type = mapped_file name = "playsndsrv.dll" filename = "\\Windows\\System32\\PlaySndSrv.dll" (normalized: "c:\\windows\\system32\\playsndsrv.dll") Region: id = 610 start_va = 0x7ff8e1940000 end_va = 0x7ff8e1c21fff entry_point = 0x7ff8e1940000 region_type = mapped_file name = "esent.dll" filename = "\\Windows\\System32\\esent.dll" (normalized: "c:\\windows\\system32\\esent.dll") Region: id = 611 start_va = 0x7ff8e3c30000 end_va = 0x7ff8e3fa5fff entry_point = 0x7ff8e3c30000 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" (normalized: "c:\\windows\\system32\\iertutil.dll") Region: id = 612 start_va = 0x7ff8e8ad0000 end_va = 0x7ff8e8ae2fff entry_point = 0x7ff8e8ad0000 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll") Region: id = 613 start_va = 0x7ff8e8fb0000 end_va = 0x7ff8e8fd1fff entry_point = 0x7ff8e8fb0000 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\System32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll") Region: id = 614 start_va = 0x7ff8e9680000 end_va = 0x7ff8e9715fff entry_point = 0x7ff8e9680000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 615 start_va = 0x7ff8e9720000 end_va = 0x7ff8e9746fff entry_point = 0x7ff8e9720000 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 616 start_va = 0x7ff8ea0f0000 end_va = 0x7ff8ea121fff entry_point = 0x7ff8ea0f0000 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll") Region: id = 617 start_va = 0x7ff8ea360000 end_va = 0x7ff8ea37efff entry_point = 0x7ff8ea360000 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 618 start_va = 0x7ff8ea820000 end_va = 0x7ff8ea877fff entry_point = 0x7ff8ea820000 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll") Region: id = 619 start_va = 0x7ff8eac00000 end_va = 0x7ff8eac6afff entry_point = 0x7ff8eac00000 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 620 start_va = 0x7ff8eadd0000 end_va = 0x7ff8eae19fff entry_point = 0x7ff8eadd0000 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 621 start_va = 0x7ff8eae20000 end_va = 0x7ff8eae2efff entry_point = 0x7ff8eae20000 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 622 start_va = 0x7ff8eae30000 end_va = 0x7ff8eae42fff entry_point = 0x7ff8eae30000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 623 start_va = 0x7ff8eaf60000 end_va = 0x7ff8eafa3fff entry_point = 0x7ff8eaf60000 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 624 start_va = 0x7ff8eb180000 end_va = 0x7ff8eb7a7fff entry_point = 0x7ff8eb180000 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\System32\\windows.storage.dll" (normalized: "c:\\windows\\system32\\windows.storage.dll") Region: id = 625 start_va = 0x7ff8eb7b0000 end_va = 0x7ff8eb862fff entry_point = 0x7ff8eb7b0000 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\System32\\SHCore.dll" (normalized: "c:\\windows\\system32\\shcore.dll") Region: id = 626 start_va = 0x7ff8eb870000 end_va = 0x7ff8eba4cfff entry_point = 0x7ff8eb870000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 627 start_va = 0x7ff8ebb30000 end_va = 0x7ff8ebbedfff entry_point = 0x7ff8ebb30000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 628 start_va = 0x7ff8ebdc0000 end_va = 0x7ff8ebf0dfff entry_point = 0x7ff8ebdc0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 629 start_va = 0x7ff8ec0c0000 end_va = 0x7ff8ec21bfff entry_point = 0x7ff8ec0c0000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 630 start_va = 0x7ff8ec240000 end_va = 0x7ff8ec29afff entry_point = 0x7ff8ec240000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 631 start_va = 0x7ff8ec300000 end_va = 0x7ff8ec440fff entry_point = 0x7ff8ec300000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 632 start_va = 0x7ff8ec450000 end_va = 0x7ff8ec575fff entry_point = 0x7ff8ec450000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 633 start_va = 0x7ff8ec580000 end_va = 0x7ff8edaa4fff entry_point = 0x7ff8ec580000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 634 start_va = 0x7ff8edb10000 end_va = 0x7ff8edbb4fff entry_point = 0x7ff8edb10000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 635 start_va = 0x7ff8edbc0000 end_va = 0x7ff8edd44fff entry_point = 0x7ff8edbc0000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 636 start_va = 0x7ff8edd60000 end_va = 0x7ff8edfdbfff entry_point = 0x7ff8edd60000 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 637 start_va = 0x7ff8edfe0000 end_va = 0x7ff8ee030fff entry_point = 0x7ff8edfe0000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 638 start_va = 0x7ff8ee0b0000 end_va = 0x7ff8ee14cfff entry_point = 0x7ff8ee0b0000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 639 start_va = 0x7ff8ee150000 end_va = 0x7ff8ee185fff entry_point = 0x7ff8ee150000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 640 start_va = 0x7ff8ee190000 end_va = 0x7ff8ee235fff entry_point = 0x7ff8ee190000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 641 start_va = 0x7ff8ee2d0000 end_va = 0x7ff8ee37cfff entry_point = 0x7ff8ee2d0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 642 start_va = 0x7ff8ee380000 end_va = 0x7ff8ee541fff entry_point = 0x7ff8ee380000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 764 start_va = 0x13ca200000 end_va = 0x13ca27ffff entry_point = 0x0 region_type = private name = "private_0x00000013ca200000" filename = "" Region: id = 765 start_va = 0x7ff7f665c000 end_va = 0x7ff7f665dfff entry_point = 0x0 region_type = private name = "private_0x00007ff7f665c000" filename = "" Region: id = 766 start_va = 0x7ff8e9fe0000 end_va = 0x7ff8e9ffbfff entry_point = 0x7ff8e9fe0000 region_type = mapped_file name = "mpr.dll" filename = "\\Windows\\System32\\mpr.dll" (normalized: "c:\\windows\\system32\\mpr.dll") Region: id = 767 start_va = 0x7ff8e8480000 end_va = 0x7ff8e84b7fff entry_point = 0x7ff8e8480000 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 768 start_va = 0x7ff8ee250000 end_va = 0x7ff8ee257fff entry_point = 0x7ff8ee250000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 769 start_va = 0x13ca280000 end_va = 0x13ca2fffff entry_point = 0x0 region_type = private name = "private_0x00000013ca280000" filename = "" Region: id = 770 start_va = 0x7ff7f6522000 end_va = 0x7ff7f6523fff entry_point = 0x0 region_type = private name = "private_0x00007ff7f6522000" filename = "" Region: id = 771 start_va = 0x7ff8e8460000 end_va = 0x7ff8e846afff entry_point = 0x7ff8e8460000 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll") Thread: id = 25 os_tid = 0xb2c Thread: id = 26 os_tid = 0xbd0 Thread: id = 27 os_tid = 0xac4 Thread: id = 28 os_tid = 0xabc Thread: id = 29 os_tid = 0xa10 Thread: id = 30 os_tid = 0x9dc Thread: id = 31 os_tid = 0x9c8 Thread: id = 32 os_tid = 0x9c4 Thread: id = 33 os_tid = 0x7b8 Thread: id = 34 os_tid = 0x7b0 Thread: id = 35 os_tid = 0xcc4 [0072.010] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x7ff8ee2d0000 [0072.011] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="LoadLibraryA") returned 0x7ff8ee2f2080 [0072.011] LoadLibraryA (lpLibFileName="mpr.dll") returned 0x7ff8e9fe0000 [0072.014] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x7ff8ee190000 [0072.014] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x7ff8ec300000 [0072.015] LoadLibraryA (lpLibFileName="Shell32.dll") returned 0x7ff8ec580000 [0072.015] LoadLibraryA (lpLibFileName="Iphlpapi.dll") returned 0x7ff8e8480000 [0072.023] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GetLastError") returned 0x7ff8ee2e6060 [0072.023] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="VirtualFree") returned 0x7ff8ee2ebc10 [0072.023] GetProcAddress (hModule=0x7ff8ee190000, lpProcName="CryptExportKey") returned 0x7ff8ee1a7b50 [0072.024] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="DeleteFileW") returned 0x7ff8ee2f57a0 [0072.024] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GetDriveTypeW") returned 0x7ff8ee2f58f0 [0072.024] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GetCommandLineW") returned 0x7ff8ee2f0150 [0072.025] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GetStartupInfoW") returned 0x7ff8ee2eed80 [0072.025] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="FindNextFileW") returned 0x7ff8ee2f5880 [0072.025] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="VirtualAlloc") returned 0x7ff8ee2ebaf0 [0072.026] GetProcAddress (hModule=0x7ff8ee190000, lpProcName="GetUserNameA") returned 0x7ff8ee1bec40 [0072.026] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="ExitProcess") returned 0x7ff8ee2eef50 [0072.026] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="Wow64RevertWow64FsRedirection") returned 0x7ff8ee3136a0 [0072.027] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="CreateProcessA") returned 0x7ff8ee2ed5b0 [0072.027] GetProcAddress (hModule=0x7ff8e8480000, lpProcName="GetIpNetTable") returned 0x7ff8e849f0b0 [0072.027] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GetVersionExW") returned 0x7ff8ee2eaa30 [0072.028] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x7ff8ee313690 [0072.028] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GetSystemDefaultLangID") returned 0x7ff8ee2f2ba0 [0072.028] GetProcAddress (hModule=0x7ff8ee190000, lpProcName="GetUserNameW") returned 0x7ff8ee1ada40 [0072.028] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="ReadFile") returned 0x7ff8ee2f5a90 [0072.029] GetProcAddress (hModule=0x7ff8ee190000, lpProcName="RegQueryValueExA") returned 0x7ff8ee1a7dd0 [0072.029] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="CloseHandle") returned 0x7ff8ee2f5510 [0072.029] GetProcAddress (hModule=0x7ff8ee190000, lpProcName="RegSetValueExW") returned 0x7ff8ee1a7850 [0072.030] GetProcAddress (hModule=0x7ff8ee190000, lpProcName="RegCloseKey") returned 0x7ff8ee1a72e0 [0072.030] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="CopyFileA") returned 0x7ff8ee30e430 [0072.030] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="SetFileAttributesW") returned 0x7ff8ee2f5b00 [0072.031] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="WinExec") returned 0x7ff8ee311e60 [0072.031] GetProcAddress (hModule=0x7ff8ee190000, lpProcName="CryptDeriveKey") returned 0x7ff8ee1c07a0 [0072.031] GetProcAddress (hModule=0x7ff8ee190000, lpProcName="CryptGenKey") returned 0x7ff8ee1acab0 [0072.031] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="Sleep") returned 0x7ff8ee2e8f00 [0072.032] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GetCurrentProcess") returned 0x7ff8ee2e6580 [0072.032] GetProcAddress (hModule=0x7ff8ec580000, lpProcName="ShellExecuteW") returned 0x7ff8ec6cabc0 [0072.032] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GetFileSize") returned 0x7ff8ee2f5950 [0072.032] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GlobalAlloc") returned 0x7ff8ee2eb810 [0072.033] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="FindClose") returned 0x7ff8ee2f57c0 [0072.033] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="WaitForMultipleObjects") returned 0x7ff8ee2f56e0 [0072.033] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GetModuleFileNameA") returned 0x7ff8ee2f0c70 [0072.034] GetProcAddress (hModule=0x7ff8ec580000, lpProcName="ShellExecuteA") returned 0x7ff8ec787de0 [0072.034] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GetModuleHandleA") returned 0x7ff8ee2ee6d0 [0072.034] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GetModuleFileNameW") returned 0x7ff8ee2eeca0 [0072.034] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="CreateFileA") returned 0x7ff8ee2f5760 [0072.035] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GetFileSizeEx") returned 0x7ff8ee2f5960 [0072.035] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="WriteFile") returned 0x7ff8ee2f5b80 [0072.035] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GetLogicalDrives") returned 0x7ff8ee2e66d0 [0072.036] GetProcAddress (hModule=0x7ff8e9fe0000, lpProcName="WNetEnumResourceW") returned 0x7ff8e9fe27d0 [0072.036] GetProcAddress (hModule=0x7ff8ee190000, lpProcName="RegOpenKeyExW") returned 0x7ff8ee1a6cb0 [0072.036] GetProcAddress (hModule=0x7ff8e9fe0000, lpProcName="WNetCloseEnum") returned 0x7ff8e9fe2e20 [0072.036] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GetWindowsDirectoryW") returned 0x7ff8ee2f2940 [0072.037] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="SetFileAttributesA") returned 0x7ff8ee2f5af0 [0072.037] GetProcAddress (hModule=0x7ff8ee190000, lpProcName="RegOpenKeyExA") returned 0x7ff8ee1a7d70 [0072.037] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="SetFilePointer") returned 0x7ff8ee2f5b20 [0072.037] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GetTickCount") returned 0x7ff8ee2e60a0 [0072.038] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GetFileAttributesW") returned 0x7ff8ee2f5930 [0072.038] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="FindFirstFileW") returned 0x7ff8ee2f5840 [0072.038] GetProcAddress (hModule=0x7ff8ee190000, lpProcName="CryptAcquireContextW") returned 0x7ff8ee1a89e0 [0072.038] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="MoveFileExW") returned 0x7ff8ee2f3010 [0072.039] GetProcAddress (hModule=0x7ff8e9fe0000, lpProcName="WNetOpenEnumW") returned 0x7ff8e9fe2f20 [0072.039] GetProcAddress (hModule=0x7ff8ec300000, lpProcName="CoInitialize") returned 0x7ff8ec313870 [0072.039] GetProcAddress (hModule=0x7ff8ee190000, lpProcName="CryptDecrypt") returned 0x7ff8ee1a9140 [0072.040] GetProcAddress (hModule=0x7ff8ee190000, lpProcName="CryptImportKey") returned 0x7ff8ee1a7b40 [0072.040] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="SetFilePointerEx") returned 0x7ff8ee2f5b30 [0072.040] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="CopyFileW") returned 0x7ff8ee2f5d70 [0072.110] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="FreeLibrary") returned 0x7ff8ee2eeb90 [0072.110] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="CreateProcessW") returned 0x7ff8ee2edee0 [0072.110] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="CreateDirectoryW") returned 0x7ff8ee2f5740 [0072.111] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="CreateThread") returned 0x7ff8ee2ebc20 [0072.111] GetProcAddress (hModule=0x7ff8ee190000, lpProcName="CryptDestroyKey") returned 0x7ff8ee1a86b0 [0072.111] GetProcAddress (hModule=0x7ff8ec300000, lpProcName="CoCreateInstance") returned 0x7ff8edde7000 [0072.112] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="CreateFileW") returned 0x7ff8ee2f5770 [0072.112] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GetFileAttributesA") returned 0x7ff8ee2f5900 [0072.112] GetProcAddress (hModule=0x7ff8ee190000, lpProcName="CryptEncrypt") returned 0x7ff8ee1ad7e0 [0072.113] GetProcAddress (hModule=0x7ff8ee190000, lpProcName="RegDeleteValueW") returned 0x7ff8ee1a90b0 [0072.113] GetVersionExW (in: lpVersionInformation=0x13ca27f5b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x13ca27f5b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x2800, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0072.113] GetWindowsDirectoryW (in: lpBuffer=0x13ca27f660, uSize=0x32 | out: lpBuffer="C:\\Windows") returned 0xa [0072.113] SetLastError (dwErrCode=0x0) [0072.113] CreateFileW (lpFileName="C:\\users\\Public\\sys" (normalized: "c:\\users\\public\\sys"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0xffffffffffffffff [0072.113] GetLastError () returned 0x20 [0072.113] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0072.114] Sleep (dwMilliseconds=0x1388) [0077.115] Sleep (dwMilliseconds=0x2328) [0086.126] GetWindowsDirectoryW (in: lpBuffer=0x13ca27f660, uSize=0x32 | out: lpBuffer="C:\\Windows") returned 0xa [0086.126] SetLastError (dwErrCode=0x0) [0086.126] CreateFileW (lpFileName="C:\\users\\Public\\sys" (normalized: "c:\\users\\public\\sys"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.126] GetLastError () returned 0x20 [0086.126] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.126] Sleep (dwMilliseconds=0x2328) [0095.276] GetWindowsDirectoryW (in: lpBuffer=0x13ca27f660, uSize=0x32 | out: lpBuffer="C:\\Windows") returned 0xa [0095.276] SetLastError (dwErrCode=0x0) [0095.276] CreateFileW (lpFileName="C:\\users\\Public\\sys" (normalized: "c:\\users\\public\\sys"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0xffffffffffffffff [0095.276] GetLastError () returned 0x20 [0095.276] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0095.276] Sleep (dwMilliseconds=0x2328) Thread: id = 48 os_tid = 0xce4 Thread: id = 130 os_tid = 0xf20 Process: id = "6" image_name = "runtimebroker.exe" filename = "c:\\windows\\system32\\runtimebroker.exe" page_root = "0xd219000" os_pid = "0x814" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "injection" parent_id = "1" os_parent_pid = "0x300" cmd_line = "C:\\Windows\\System32\\RuntimeBroker.exe -Embedding" cur_dir = "C:\\Windows\\system32\\" os_username = "LHNIWSJ\\CIiHmnxMn6Ps" os_groups = "LHNIWSJ\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00014ee5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 649 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 650 start_va = 0xa7239e0000 end_va = 0xa7239effff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000a7239e0000" filename = "" Region: id = 651 start_va = 0xa7239f0000 end_va = 0xa7239f6fff entry_point = 0x0 region_type = private name = "private_0x000000a7239f0000" filename = "" Region: id = 652 start_va = 0xa723a00000 end_va = 0xa723a13fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000a723a00000" filename = "" Region: id = 653 start_va = 0xa723a20000 end_va = 0xa723a9ffff entry_point = 0x0 region_type = private name = "private_0x000000a723a20000" filename = "" Region: id = 654 start_va = 0xa723aa0000 end_va = 0xa723aa3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000a723aa0000" filename = "" Region: id = 655 start_va = 0xa723ab0000 end_va = 0xa723ab1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000a723ab0000" filename = "" Region: id = 656 start_va = 0xa723ac0000 end_va = 0xa723ac1fff entry_point = 0x0 region_type = private name = "private_0x000000a723ac0000" filename = "" Region: id = 657 start_va = 0xa723ad0000 end_va = 0xa723b8dfff entry_point = 0xa723ad0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 658 start_va = 0xa723b90000 end_va = 0xa723c0ffff entry_point = 0x0 region_type = private name = "private_0x000000a723b90000" filename = "" Region: id = 659 start_va = 0xa723c10000 end_va = 0xa723c10fff entry_point = 0x0 region_type = private name = "private_0x000000a723c10000" filename = "" Region: id = 660 start_va = 0xa723c20000 end_va = 0xa723c20fff entry_point = 0x0 region_type = private name = "private_0x000000a723c20000" filename = "" Region: id = 661 start_va = 0xa723c30000 end_va = 0xa723c30fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000a723c30000" filename = "" Region: id = 662 start_va = 0xa723c40000 end_va = 0xa723c40fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000a723c40000" filename = "" Region: id = 663 start_va = 0xa723c50000 end_va = 0xa723c79fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000a723c50000" filename = "" Region: id = 664 start_va = 0xa723c80000 end_va = 0xa723c86fff entry_point = 0x0 region_type = private name = "private_0x000000a723c80000" filename = "" Region: id = 665 start_va = 0xa723c90000 end_va = 0xa723c92fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000a723c90000" filename = "" Region: id = 666 start_va = 0xa723ca0000 end_va = 0xa723ca0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000a723ca0000" filename = "" Region: id = 667 start_va = 0xa723cb0000 end_va = 0xa723cb0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000a723cb0000" filename = "" Region: id = 668 start_va = 0xa723cc0000 end_va = 0xa723cc6fff entry_point = 0x0 region_type = private name = "private_0x000000a723cc0000" filename = "" Region: id = 669 start_va = 0xa723d00000 end_va = 0xa723dfffff entry_point = 0x0 region_type = private name = "private_0x000000a723d00000" filename = "" Region: id = 670 start_va = 0xa723e00000 end_va = 0xa723efffff entry_point = 0x0 region_type = private name = "private_0x000000a723e00000" filename = "" Region: id = 671 start_va = 0xa723f00000 end_va = 0xa723f7ffff entry_point = 0x0 region_type = private name = "private_0x000000a723f00000" filename = "" Region: id = 672 start_va = 0xa723f80000 end_va = 0xa724107fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000a723f80000" filename = "" Region: id = 673 start_va = 0xa724110000 end_va = 0xa724290fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000a724110000" filename = "" Region: id = 674 start_va = 0xa7242a0000 end_va = 0xa72569ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000a7242a0000" filename = "" Region: id = 675 start_va = 0xa7256a0000 end_va = 0xa7259d6fff entry_point = 0xa7256a0000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 676 start_va = 0xa7259e0000 end_va = 0xa725a5ffff entry_point = 0x0 region_type = private name = "private_0x000000a7259e0000" filename = "" Region: id = 677 start_va = 0xa725a60000 end_va = 0xa725adffff entry_point = 0x0 region_type = private name = "private_0x000000a725a60000" filename = "" Region: id = 678 start_va = 0xa725ae0000 end_va = 0xa725b5ffff entry_point = 0x0 region_type = private name = "private_0x000000a725ae0000" filename = "" Region: id = 679 start_va = 0xa725b60000 end_va = 0xa725bdffff entry_point = 0x0 region_type = private name = "private_0x000000a725b60000" filename = "" Region: id = 680 start_va = 0xa725c00000 end_va = 0xa725cfffff entry_point = 0x0 region_type = private name = "private_0x000000a725c00000" filename = "" Region: id = 681 start_va = 0xa725d80000 end_va = 0xa725e7ffff entry_point = 0x0 region_type = private name = "private_0x000000a725d80000" filename = "" Region: id = 682 start_va = 0xa725e80000 end_va = 0xa725efffff entry_point = 0x0 region_type = private name = "private_0x000000a725e80000" filename = "" Region: id = 683 start_va = 0xa725f00000 end_va = 0xa725f7ffff entry_point = 0x0 region_type = private name = "private_0x000000a725f00000" filename = "" Region: id = 684 start_va = 0x7df5ffee0000 end_va = 0x7ff5ffedffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ffee0000" filename = "" Region: id = 685 start_va = 0x7ff70c8b0000 end_va = 0x7ff70d101fff entry_point = 0x7ff70c8b0000 region_type = mapped_file name = "ntoskrnl.exe" filename = "\\Windows\\System32\\ntoskrnl.exe" (normalized: "c:\\windows\\system32\\ntoskrnl.exe") Region: id = 686 start_va = 0x7ff78dd78000 end_va = 0x7ff78dd79fff entry_point = 0x0 region_type = private name = "private_0x00007ff78dd78000" filename = "" Region: id = 687 start_va = 0x7ff78dd7a000 end_va = 0x7ff78dd7bfff entry_point = 0x0 region_type = private name = "private_0x00007ff78dd7a000" filename = "" Region: id = 688 start_va = 0x7ff78dd7e000 end_va = 0x7ff78dd7ffff entry_point = 0x0 region_type = private name = "private_0x00007ff78dd7e000" filename = "" Region: id = 689 start_va = 0x7ff78dd80000 end_va = 0x7ff78de7ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff78dd80000" filename = "" Region: id = 690 start_va = 0x7ff78de80000 end_va = 0x7ff78dea2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff78de80000" filename = "" Region: id = 691 start_va = 0x7ff78dea3000 end_va = 0x7ff78dea4fff entry_point = 0x0 region_type = private name = "private_0x00007ff78dea3000" filename = "" Region: id = 692 start_va = 0x7ff78dea5000 end_va = 0x7ff78dea6fff entry_point = 0x0 region_type = private name = "private_0x00007ff78dea5000" filename = "" Region: id = 693 start_va = 0x7ff78dea7000 end_va = 0x7ff78dea8fff entry_point = 0x0 region_type = private name = "private_0x00007ff78dea7000" filename = "" Region: id = 694 start_va = 0x7ff78dea9000 end_va = 0x7ff78deaafff entry_point = 0x0 region_type = private name = "private_0x00007ff78dea9000" filename = "" Region: id = 695 start_va = 0x7ff78deab000 end_va = 0x7ff78deacfff entry_point = 0x0 region_type = private name = "private_0x00007ff78deab000" filename = "" Region: id = 696 start_va = 0x7ff78dead000 end_va = 0x7ff78deadfff entry_point = 0x0 region_type = private name = "private_0x00007ff78dead000" filename = "" Region: id = 697 start_va = 0x7ff78deae000 end_va = 0x7ff78deaffff entry_point = 0x0 region_type = private name = "private_0x00007ff78deae000" filename = "" Region: id = 698 start_va = 0x7ff78e2e0000 end_va = 0x7ff78e2f5fff entry_point = 0x7ff78e2e0000 region_type = mapped_file name = "runtimebroker.exe" filename = "\\Windows\\System32\\RuntimeBroker.exe" (normalized: "c:\\windows\\system32\\runtimebroker.exe") Region: id = 699 start_va = 0x7ff7afc80000 end_va = 0x7ff7afcb4fff entry_point = 0x0 region_type = private name = "private_0x00007ff7afc80000" filename = "" Region: id = 700 start_va = 0x7ff8db9f0000 end_va = 0x7ff8dba81fff entry_point = 0x7ff8db9f0000 region_type = mapped_file name = "windows.internal.shell.broker.dll" filename = "\\Windows\\System32\\Windows.Internal.Shell.Broker.dll" (normalized: "c:\\windows\\system32\\windows.internal.shell.broker.dll") Region: id = 701 start_va = 0x7ff8deca0000 end_va = 0x7ff8ded65fff entry_point = 0x7ff8deca0000 region_type = mapped_file name = "tokenbroker.dll" filename = "\\Windows\\System32\\TokenBroker.dll" (normalized: "c:\\windows\\system32\\tokenbroker.dll") Region: id = 702 start_va = 0x7ff8df3b0000 end_va = 0x7ff8df3f2fff entry_point = 0x7ff8df3b0000 region_type = mapped_file name = "execmodelclient.dll" filename = "\\Windows\\System32\\ExecModelClient.dll" (normalized: "c:\\windows\\system32\\execmodelclient.dll") Region: id = 703 start_va = 0x7ff8df640000 end_va = 0x7ff8dfaa9fff entry_point = 0x7ff8df640000 region_type = mapped_file name = "actxprxy.dll" filename = "\\Windows\\System32\\actxprxy.dll" (normalized: "c:\\windows\\system32\\actxprxy.dll") Region: id = 704 start_va = 0x7ff8e3040000 end_va = 0x7ff8e3066fff entry_point = 0x7ff8e3040000 region_type = mapped_file name = "idstore.dll" filename = "\\Windows\\System32\\IDStore.dll" (normalized: "c:\\windows\\system32\\idstore.dll") Region: id = 705 start_va = 0x7ff8e3a70000 end_va = 0x7ff8e3c26fff entry_point = 0x7ff8e3a70000 region_type = mapped_file name = "windows.ui.immersive.dll" filename = "\\Windows\\System32\\Windows.UI.Immersive.dll" (normalized: "c:\\windows\\system32\\windows.ui.immersive.dll") Region: id = 706 start_va = 0x7ff8e5050000 end_va = 0x7ff8e515efff entry_point = 0x7ff8e5050000 region_type = mapped_file name = "mrmcorer.dll" filename = "\\Windows\\System32\\MrmCoreR.dll" (normalized: "c:\\windows\\system32\\mrmcorer.dll") Region: id = 707 start_va = 0x7ff8e7400000 end_va = 0x7ff8e741bfff entry_point = 0x7ff8e7400000 region_type = mapped_file name = "samlib.dll" filename = "\\Windows\\System32\\samlib.dll" (normalized: "c:\\windows\\system32\\samlib.dll") Region: id = 708 start_va = 0x7ff8e7430000 end_va = 0x7ff8e7560fff entry_point = 0x7ff8e7430000 region_type = mapped_file name = "wintypes.dll" filename = "\\Windows\\System32\\WinTypes.dll" (normalized: "c:\\windows\\system32\\wintypes.dll") Region: id = 709 start_va = 0x7ff8e76f0000 end_va = 0x7ff8e7707fff entry_point = 0x7ff8e76f0000 region_type = mapped_file name = "samcli.dll" filename = "\\Windows\\System32\\samcli.dll" (normalized: "c:\\windows\\system32\\samcli.dll") Region: id = 710 start_va = 0x7ff8e79b0000 end_va = 0x7ff8e7b32fff entry_point = 0x7ff8e79b0000 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 711 start_va = 0x7ff8e7b40000 end_va = 0x7ff8e7bb1fff entry_point = 0x7ff8e7b40000 region_type = mapped_file name = "mmdevapi.dll" filename = "\\Windows\\System32\\MMDevAPI.dll" (normalized: "c:\\windows\\system32\\mmdevapi.dll") Region: id = 712 start_va = 0x7ff8e7cd0000 end_va = 0x7ff8e7ce5fff entry_point = 0x7ff8e7cd0000 region_type = mapped_file name = "wkscli.dll" filename = "\\Windows\\System32\\wkscli.dll" (normalized: "c:\\windows\\system32\\wkscli.dll") Region: id = 713 start_va = 0x7ff8e8ad0000 end_va = 0x7ff8e8ae2fff entry_point = 0x7ff8e8ad0000 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll") Region: id = 714 start_va = 0x7ff8e8b60000 end_va = 0x7ff8e8b84fff entry_point = 0x7ff8e8b60000 region_type = mapped_file name = "sppc.dll" filename = "\\Windows\\System32\\sppc.dll" (normalized: "c:\\windows\\system32\\sppc.dll") Region: id = 715 start_va = 0x7ff8e8b90000 end_va = 0x7ff8e8bb5fff entry_point = 0x7ff8e8b90000 region_type = mapped_file name = "slc.dll" filename = "\\Windows\\System32\\slc.dll" (normalized: "c:\\windows\\system32\\slc.dll") Region: id = 716 start_va = 0x7ff8e9060000 end_va = 0x7ff8e9127fff entry_point = 0x7ff8e9060000 region_type = mapped_file name = "coremessaging.dll" filename = "\\Windows\\System32\\CoreMessaging.dll" (normalized: "c:\\windows\\system32\\coremessaging.dll") Region: id = 717 start_va = 0x7ff8e9680000 end_va = 0x7ff8e9715fff entry_point = 0x7ff8e9680000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 718 start_va = 0x7ff8e9720000 end_va = 0x7ff8e9746fff entry_point = 0x7ff8e9720000 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 719 start_va = 0x7ff8ea000000 end_va = 0x7ff8ea00bfff entry_point = 0x7ff8ea000000 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\System32\\netutils.dll" (normalized: "c:\\windows\\system32\\netutils.dll") Region: id = 720 start_va = 0x7ff8ea270000 end_va = 0x7ff8ea2a2fff entry_point = 0x7ff8ea270000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 721 start_va = 0x7ff8ea360000 end_va = 0x7ff8ea37efff entry_point = 0x7ff8ea360000 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 722 start_va = 0x7ff8ea620000 end_va = 0x7ff8ea636fff entry_point = 0x7ff8ea620000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 723 start_va = 0x7ff8ea790000 end_va = 0x7ff8ea79afff entry_point = 0x7ff8ea790000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 724 start_va = 0x7ff8ea9d0000 end_va = 0x7ff8ea9fbfff entry_point = 0x7ff8ea9d0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 725 start_va = 0x7ff8eabd0000 end_va = 0x7ff8eabf7fff entry_point = 0x7ff8eabd0000 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 726 start_va = 0x7ff8eac00000 end_va = 0x7ff8eac6afff entry_point = 0x7ff8eac00000 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 727 start_va = 0x7ff8eac70000 end_va = 0x7ff8ead07fff entry_point = 0x7ff8eac70000 region_type = mapped_file name = "sxs.dll" filename = "\\Windows\\System32\\sxs.dll" (normalized: "c:\\windows\\system32\\sxs.dll") Region: id = 728 start_va = 0x7ff8eadb0000 end_va = 0x7ff8eadc0fff entry_point = 0x7ff8eadb0000 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 729 start_va = 0x7ff8eadd0000 end_va = 0x7ff8eae19fff entry_point = 0x7ff8eadd0000 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 730 start_va = 0x7ff8eae20000 end_va = 0x7ff8eae2efff entry_point = 0x7ff8eae20000 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 731 start_va = 0x7ff8eae30000 end_va = 0x7ff8eae42fff entry_point = 0x7ff8eae30000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 732 start_va = 0x7ff8eaf60000 end_va = 0x7ff8eafa3fff entry_point = 0x7ff8eaf60000 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 733 start_va = 0x7ff8eafb0000 end_va = 0x7ff8eb170fff entry_point = 0x7ff8eafb0000 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 734 start_va = 0x7ff8eb180000 end_va = 0x7ff8eb7a7fff entry_point = 0x7ff8eb180000 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\System32\\windows.storage.dll" (normalized: "c:\\windows\\system32\\windows.storage.dll") Region: id = 735 start_va = 0x7ff8eb7b0000 end_va = 0x7ff8eb862fff entry_point = 0x7ff8eb7b0000 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\System32\\SHCore.dll" (normalized: "c:\\windows\\system32\\shcore.dll") Region: id = 736 start_va = 0x7ff8eb870000 end_va = 0x7ff8eba4cfff entry_point = 0x7ff8eb870000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 737 start_va = 0x7ff8ebb30000 end_va = 0x7ff8ebbedfff entry_point = 0x7ff8ebb30000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 738 start_va = 0x7ff8ebdc0000 end_va = 0x7ff8ebf0dfff entry_point = 0x7ff8ebdc0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 739 start_va = 0x7ff8ec0c0000 end_va = 0x7ff8ec21bfff entry_point = 0x7ff8ec0c0000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 740 start_va = 0x7ff8ec240000 end_va = 0x7ff8ec29afff entry_point = 0x7ff8ec240000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 741 start_va = 0x7ff8ec300000 end_va = 0x7ff8ec440fff entry_point = 0x7ff8ec300000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 742 start_va = 0x7ff8ec450000 end_va = 0x7ff8ec575fff entry_point = 0x7ff8ec450000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 743 start_va = 0x7ff8ec580000 end_va = 0x7ff8edaa4fff entry_point = 0x7ff8ec580000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 744 start_va = 0x7ff8edb10000 end_va = 0x7ff8edbb4fff entry_point = 0x7ff8edb10000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 745 start_va = 0x7ff8edbc0000 end_va = 0x7ff8edd44fff entry_point = 0x7ff8edbc0000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 746 start_va = 0x7ff8edd60000 end_va = 0x7ff8edfdbfff entry_point = 0x7ff8edd60000 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 747 start_va = 0x7ff8edfe0000 end_va = 0x7ff8ee030fff entry_point = 0x7ff8edfe0000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 748 start_va = 0x7ff8ee0b0000 end_va = 0x7ff8ee14cfff entry_point = 0x7ff8ee0b0000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 749 start_va = 0x7ff8ee150000 end_va = 0x7ff8ee185fff entry_point = 0x7ff8ee150000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 750 start_va = 0x7ff8ee190000 end_va = 0x7ff8ee235fff entry_point = 0x7ff8ee190000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 751 start_va = 0x7ff8ee2d0000 end_va = 0x7ff8ee37cfff entry_point = 0x7ff8ee2d0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 752 start_va = 0x7ff8ee380000 end_va = 0x7ff8ee541fff entry_point = 0x7ff8ee380000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 801 start_va = 0xa725d00000 end_va = 0xa725d7ffff entry_point = 0x0 region_type = private name = "private_0x000000a725d00000" filename = "" Region: id = 802 start_va = 0x7ff78dd7c000 end_va = 0x7ff78dd7dfff entry_point = 0x0 region_type = private name = "private_0x00007ff78dd7c000" filename = "" Region: id = 803 start_va = 0x7ff8e9fe0000 end_va = 0x7ff8e9ffbfff entry_point = 0x7ff8e9fe0000 region_type = mapped_file name = "mpr.dll" filename = "\\Windows\\System32\\mpr.dll" (normalized: "c:\\windows\\system32\\mpr.dll") Region: id = 804 start_va = 0x7ff8e8480000 end_va = 0x7ff8e84b7fff entry_point = 0x7ff8e8480000 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 805 start_va = 0x7ff8ee250000 end_va = 0x7ff8ee257fff entry_point = 0x7ff8ee250000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 806 start_va = 0x7ff8e8460000 end_va = 0x7ff8e846afff entry_point = 0x7ff8e8460000 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll") Thread: id = 37 os_tid = 0xc74 Thread: id = 38 os_tid = 0xbc4 Thread: id = 39 os_tid = 0xbbc Thread: id = 40 os_tid = 0xa08 Thread: id = 41 os_tid = 0x868 Thread: id = 42 os_tid = 0x860 Thread: id = 43 os_tid = 0x85c Thread: id = 44 os_tid = 0x824 Thread: id = 45 os_tid = 0x818 Thread: id = 47 os_tid = 0xce0 [0072.283] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x7ff8ee2d0000 [0072.283] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="LoadLibraryA") returned 0x7ff8ee2f2080 [0072.283] LoadLibraryA (lpLibFileName="mpr.dll") returned 0x7ff8e9fe0000 [0072.286] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x7ff8ee190000 [0072.286] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x7ff8ec300000 [0072.287] LoadLibraryA (lpLibFileName="Shell32.dll") returned 0x7ff8ec580000 [0072.287] LoadLibraryA (lpLibFileName="Iphlpapi.dll") returned 0x7ff8e8480000 [0072.294] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GetLastError") returned 0x7ff8ee2e6060 [0072.294] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="VirtualFree") returned 0x7ff8ee2ebc10 [0072.294] GetProcAddress (hModule=0x7ff8ee190000, lpProcName="CryptExportKey") returned 0x7ff8ee1a7b50 [0072.294] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="DeleteFileW") returned 0x7ff8ee2f57a0 [0072.294] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GetDriveTypeW") returned 0x7ff8ee2f58f0 [0072.295] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GetCommandLineW") returned 0x7ff8ee2f0150 [0072.295] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GetStartupInfoW") returned 0x7ff8ee2eed80 [0072.295] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="FindNextFileW") returned 0x7ff8ee2f5880 [0072.295] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="VirtualAlloc") returned 0x7ff8ee2ebaf0 [0072.295] GetProcAddress (hModule=0x7ff8ee190000, lpProcName="GetUserNameA") returned 0x7ff8ee1bec40 [0072.295] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="ExitProcess") returned 0x7ff8ee2eef50 [0072.296] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="Wow64RevertWow64FsRedirection") returned 0x7ff8ee3136a0 [0072.296] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="CreateProcessA") returned 0x7ff8ee2ed5b0 [0072.296] GetProcAddress (hModule=0x7ff8e8480000, lpProcName="GetIpNetTable") returned 0x7ff8e849f0b0 [0072.296] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GetVersionExW") returned 0x7ff8ee2eaa30 [0072.296] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x7ff8ee313690 [0072.296] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GetSystemDefaultLangID") returned 0x7ff8ee2f2ba0 [0072.297] GetProcAddress (hModule=0x7ff8ee190000, lpProcName="GetUserNameW") returned 0x7ff8ee1ada40 [0072.297] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="ReadFile") returned 0x7ff8ee2f5a90 [0072.297] GetProcAddress (hModule=0x7ff8ee190000, lpProcName="RegQueryValueExA") returned 0x7ff8ee1a7dd0 [0072.297] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="CloseHandle") returned 0x7ff8ee2f5510 [0072.297] GetProcAddress (hModule=0x7ff8ee190000, lpProcName="RegSetValueExW") returned 0x7ff8ee1a7850 [0072.297] GetProcAddress (hModule=0x7ff8ee190000, lpProcName="RegCloseKey") returned 0x7ff8ee1a72e0 [0072.298] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="CopyFileA") returned 0x7ff8ee30e430 [0072.298] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="SetFileAttributesW") returned 0x7ff8ee2f5b00 [0072.298] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="WinExec") returned 0x7ff8ee311e60 [0072.298] GetProcAddress (hModule=0x7ff8ee190000, lpProcName="CryptDeriveKey") returned 0x7ff8ee1c07a0 [0072.298] GetProcAddress (hModule=0x7ff8ee190000, lpProcName="CryptGenKey") returned 0x7ff8ee1acab0 [0072.298] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="Sleep") returned 0x7ff8ee2e8f00 [0072.298] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GetCurrentProcess") returned 0x7ff8ee2e6580 [0072.299] GetProcAddress (hModule=0x7ff8ec580000, lpProcName="ShellExecuteW") returned 0x7ff8ec6cabc0 [0072.299] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GetFileSize") returned 0x7ff8ee2f5950 [0072.299] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GlobalAlloc") returned 0x7ff8ee2eb810 [0072.299] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="FindClose") returned 0x7ff8ee2f57c0 [0072.299] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="WaitForMultipleObjects") returned 0x7ff8ee2f56e0 [0072.299] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GetModuleFileNameA") returned 0x7ff8ee2f0c70 [0072.300] GetProcAddress (hModule=0x7ff8ec580000, lpProcName="ShellExecuteA") returned 0x7ff8ec787de0 [0072.300] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GetModuleHandleA") returned 0x7ff8ee2ee6d0 [0072.300] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GetModuleFileNameW") returned 0x7ff8ee2eeca0 [0072.300] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="CreateFileA") returned 0x7ff8ee2f5760 [0072.300] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GetFileSizeEx") returned 0x7ff8ee2f5960 [0072.300] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="WriteFile") returned 0x7ff8ee2f5b80 [0072.301] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GetLogicalDrives") returned 0x7ff8ee2e66d0 [0072.301] GetProcAddress (hModule=0x7ff8e9fe0000, lpProcName="WNetEnumResourceW") returned 0x7ff8e9fe27d0 [0072.301] GetProcAddress (hModule=0x7ff8ee190000, lpProcName="RegOpenKeyExW") returned 0x7ff8ee1a6cb0 [0072.301] GetProcAddress (hModule=0x7ff8e9fe0000, lpProcName="WNetCloseEnum") returned 0x7ff8e9fe2e20 [0072.301] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GetWindowsDirectoryW") returned 0x7ff8ee2f2940 [0072.301] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="SetFileAttributesA") returned 0x7ff8ee2f5af0 [0072.301] GetProcAddress (hModule=0x7ff8ee190000, lpProcName="RegOpenKeyExA") returned 0x7ff8ee1a7d70 [0072.302] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="SetFilePointer") returned 0x7ff8ee2f5b20 [0072.302] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GetTickCount") returned 0x7ff8ee2e60a0 [0072.302] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GetFileAttributesW") returned 0x7ff8ee2f5930 [0072.302] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="FindFirstFileW") returned 0x7ff8ee2f5840 [0072.302] GetProcAddress (hModule=0x7ff8ee190000, lpProcName="CryptAcquireContextW") returned 0x7ff8ee1a89e0 [0072.302] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="MoveFileExW") returned 0x7ff8ee2f3010 [0072.303] GetProcAddress (hModule=0x7ff8e9fe0000, lpProcName="WNetOpenEnumW") returned 0x7ff8e9fe2f20 [0072.303] GetProcAddress (hModule=0x7ff8ec300000, lpProcName="CoInitialize") returned 0x7ff8ec313870 [0072.303] GetProcAddress (hModule=0x7ff8ee190000, lpProcName="CryptDecrypt") returned 0x7ff8ee1a9140 [0072.303] GetProcAddress (hModule=0x7ff8ee190000, lpProcName="CryptImportKey") returned 0x7ff8ee1a7b40 [0072.303] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="SetFilePointerEx") returned 0x7ff8ee2f5b30 [0072.303] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="CopyFileW") returned 0x7ff8ee2f5d70 [0072.303] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="FreeLibrary") returned 0x7ff8ee2eeb90 [0072.304] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="CreateProcessW") returned 0x7ff8ee2edee0 [0072.304] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="CreateDirectoryW") returned 0x7ff8ee2f5740 [0072.304] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="CreateThread") returned 0x7ff8ee2ebc20 [0072.304] GetProcAddress (hModule=0x7ff8ee190000, lpProcName="CryptDestroyKey") returned 0x7ff8ee1a86b0 [0072.304] GetProcAddress (hModule=0x7ff8ec300000, lpProcName="CoCreateInstance") returned 0x7ff8edde7000 [0072.304] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="CreateFileW") returned 0x7ff8ee2f5770 [0072.305] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GetFileAttributesA") returned 0x7ff8ee2f5900 [0072.305] GetProcAddress (hModule=0x7ff8ee190000, lpProcName="CryptEncrypt") returned 0x7ff8ee1ad7e0 [0072.305] GetProcAddress (hModule=0x7ff8ee190000, lpProcName="RegDeleteValueW") returned 0x7ff8ee1a90b0 [0072.305] GetVersionExW (in: lpVersionInformation=0xa725d7f950*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0xa725d7f950*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x2800, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0072.305] GetWindowsDirectoryW (in: lpBuffer=0xa725d7fa00, uSize=0x32 | out: lpBuffer="C:\\Windows") returned 0xa [0072.305] SetLastError (dwErrCode=0x0) [0072.305] CreateFileW (lpFileName="C:\\users\\Public\\sys" (normalized: "c:\\users\\public\\sys"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0xffffffffffffffff [0072.306] GetLastError () returned 0x20 [0072.306] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0072.306] Sleep (dwMilliseconds=0x1388) [0077.317] Sleep (dwMilliseconds=0x2328) [0086.329] GetWindowsDirectoryW (in: lpBuffer=0xa725d7fa00, uSize=0x32 | out: lpBuffer="C:\\Windows") returned 0xa [0086.329] SetLastError (dwErrCode=0x0) [0086.329] CreateFileW (lpFileName="C:\\users\\Public\\sys" (normalized: "c:\\users\\public\\sys"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0xffffffffffffffff [0086.329] GetLastError () returned 0x20 [0086.329] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0086.329] Sleep (dwMilliseconds=0x2328) [0095.363] GetWindowsDirectoryW (in: lpBuffer=0xa725d7fa00, uSize=0x32 | out: lpBuffer="C:\\Windows") returned 0xa [0095.363] SetLastError (dwErrCode=0x0) [0095.364] CreateFileW (lpFileName="C:\\users\\Public\\sys" (normalized: "c:\\users\\public\\sys"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0xffffffffffffffff [0095.364] GetLastError () returned 0x20 [0095.364] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0095.364] Sleep (dwMilliseconds=0x2328) Process: id = "7" image_name = "shellexperiencehost.exe" filename = "c:\\windows\\systemapps\\shellexperiencehost_cw5n1h2txyewy\\shellexperiencehost.exe" page_root = "0x1337b000" os_pid = "0x9a0" os_integrity_level = "0x1000" os_privileges = "0x800000" monitor_reason = "injection" parent_id = "1" os_parent_pid = "0x300" cmd_line = "\"C:\\Windows\\SystemApps\\ShellExperienceHost_cw5n1h2txyewy\\ShellExperienceHost.exe\" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca" cur_dir = "C:\\Windows\\SystemApps\\ShellExperienceHost_cw5n1h2txyewy\\" os_username = "LHNIWSJ\\CIiHmnxMn6Ps" os_groups = "LHNIWSJ\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00014ee5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 807 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 808 start_va = 0x1a8bef0000 end_va = 0x1a8befffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000001a8bef0000" filename = "" Region: id = 809 start_va = 0x1a8bf00000 end_va = 0x1a8bf00fff entry_point = 0x0 region_type = private name = "private_0x0000001a8bf00000" filename = "" Region: id = 810 start_va = 0x1a8bf10000 end_va = 0x1a8bf23fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000001a8bf10000" filename = "" Region: id = 811 start_va = 0x1a8bf30000 end_va = 0x1a8c02ffff entry_point = 0x0 region_type = private name = "private_0x0000001a8bf30000" filename = "" Region: id = 812 start_va = 0x1a8c030000 end_va = 0x1a8c033fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000001a8c030000" filename = "" Region: id = 813 start_va = 0x1a8c040000 end_va = 0x1a8c041fff entry_point = 0x0 region_type = private name = "private_0x0000001a8c040000" filename = "" Region: id = 814 start_va = 0x1a8c050000 end_va = 0x1a8c050fff entry_point = 0x0 region_type = private name = "private_0x0000001a8c050000" filename = "" Region: id = 815 start_va = 0x1a8c060000 end_va = 0x1a8c11dfff entry_point = 0x1a8c060000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 816 start_va = 0x1a8c120000 end_va = 0x1a8c149fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000001a8c120000" filename = "" Region: id = 817 start_va = 0x1a8c150000 end_va = 0x1a8c150fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000001a8c150000" filename = "" Region: id = 818 start_va = 0x1a8c160000 end_va = 0x1a8c166fff entry_point = 0x0 region_type = private name = "private_0x0000001a8c160000" filename = "" Region: id = 819 start_va = 0x1a8c170000 end_va = 0x1a8c170fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000001a8c170000" filename = "" Region: id = 820 start_va = 0x1a8c180000 end_va = 0x1a8c180fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000001a8c180000" filename = "" Region: id = 821 start_va = 0x1a8c190000 end_va = 0x1a8c190fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000001a8c190000" filename = "" Region: id = 822 start_va = 0x1a8c1a0000 end_va = 0x1a8c1a0fff entry_point = 0x0 region_type = private name = "private_0x0000001a8c1a0000" filename = "" Region: id = 823 start_va = 0x1a8c1b0000 end_va = 0x1a8c1b0fff entry_point = 0x0 region_type = private name = "private_0x0000001a8c1b0000" filename = "" Region: id = 824 start_va = 0x1a8c1c0000 end_va = 0x1a8c1cbfff entry_point = 0x1a8c1c0000 region_type = mapped_file name = "2504515037.pri" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3295484897\\2504515037.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\windows\\3295484897\\2504515037.pri") Region: id = 825 start_va = 0x1a8c1d0000 end_va = 0x1a8c1d0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000001a8c1d0000" filename = "" Region: id = 826 start_va = 0x1a8c1f0000 end_va = 0x1a8c1fcfff entry_point = 0x1a8c1f0000 region_type = mapped_file name = "resources.en-us.pri" filename = "\\Windows\\SystemApps\\ShellExperienceHost_cw5n1h2txyewy\\pris\\resources.en-US.pri" (normalized: "c:\\windows\\systemapps\\shellexperiencehost_cw5n1h2txyewy\\pris\\resources.en-us.pri") Region: id = 827 start_va = 0x1a8c200000 end_va = 0x1a8c2fffff entry_point = 0x0 region_type = private name = "private_0x0000001a8c200000" filename = "" Region: id = 828 start_va = 0x1a8c300000 end_va = 0x1a8c3fffff entry_point = 0x0 region_type = private name = "private_0x0000001a8c300000" filename = "" Region: id = 829 start_va = 0x1a8c400000 end_va = 0x1a8c4fffff entry_point = 0x0 region_type = private name = "private_0x0000001a8c400000" filename = "" Region: id = 830 start_va = 0x1a8c500000 end_va = 0x1a8c506fff entry_point = 0x0 region_type = private name = "private_0x0000001a8c500000" filename = "" Region: id = 831 start_va = 0x1a8c510000 end_va = 0x1a8c5eefff entry_point = 0x1a8c510000 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui") Region: id = 832 start_va = 0x1a8c5f0000 end_va = 0x1a8c5f1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000001a8c5f0000" filename = "" Region: id = 833 start_va = 0x1a8c600000 end_va = 0x1a8c6fffff entry_point = 0x0 region_type = private name = "private_0x0000001a8c600000" filename = "" Region: id = 834 start_va = 0x1a8c700000 end_va = 0x1a8c887fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000001a8c700000" filename = "" Region: id = 835 start_va = 0x1a8c890000 end_va = 0x1a8ca10fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000001a8c890000" filename = "" Region: id = 836 start_va = 0x1a8ca20000 end_va = 0x1a8de1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000001a8ca20000" filename = "" Region: id = 837 start_va = 0x1a8de20000 end_va = 0x1a8df56fff entry_point = 0x1a8de20000 region_type = mapped_file name = "windows.ui.xaml.resources.dll" filename = "\\Windows\\System32\\Windows.UI.Xaml.Resources.dll" (normalized: "c:\\windows\\system32\\windows.ui.xaml.resources.dll") Region: id = 838 start_va = 0x1a8df60000 end_va = 0x1a8e296fff entry_point = 0x1a8df60000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 839 start_va = 0x1a8e2a0000 end_va = 0x1a8e39ffff entry_point = 0x0 region_type = private name = "private_0x0000001a8e2a0000" filename = "" Region: id = 840 start_va = 0x1a8e3a0000 end_va = 0x1a8e49ffff entry_point = 0x0 region_type = private name = "private_0x0000001a8e3a0000" filename = "" Region: id = 841 start_va = 0x1a8e4a0000 end_va = 0x1a8e59ffff entry_point = 0x0 region_type = private name = "private_0x0000001a8e4a0000" filename = "" Region: id = 842 start_va = 0x1a8e5a0000 end_va = 0x1a8e5affff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000001a8e5a0000" filename = "" Region: id = 843 start_va = 0x1a8e5b0000 end_va = 0x1a8e5bffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000001a8e5b0000" filename = "" Region: id = 844 start_va = 0x1a8e5c0000 end_va = 0x1a8e5cffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000001a8e5c0000" filename = "" Region: id = 845 start_va = 0x1a8e5d0000 end_va = 0x1a8e5d9fff entry_point = 0x1a8e5d0000 region_type = mapped_file name = "windows.ui.xaml.dll.mui" filename = "\\Windows\\System32\\en-US\\windows.ui.xaml.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\windows.ui.xaml.dll.mui") Region: id = 846 start_va = 0x1a8e5e0000 end_va = 0x1a8e5e2fff entry_point = 0x1a8e5e0000 region_type = mapped_file name = "tilecache_100_0_header.bin" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState\\TileCache_100_0_Header.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\tempstate\\tilecache_100_0_header.bin") Region: id = 847 start_va = 0x1a8e5f0000 end_va = 0x1a8e5f0fff entry_point = 0x0 region_type = private name = "private_0x0000001a8e5f0000" filename = "" Region: id = 848 start_va = 0x1a8e600000 end_va = 0x1a8e606fff entry_point = 0x0 region_type = private name = "private_0x0000001a8e600000" filename = "" Region: id = 849 start_va = 0x1a8e610000 end_va = 0x1a8e613fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000001a8e610000" filename = "" Region: id = 850 start_va = 0x1a8e620000 end_va = 0x1a8e620fff entry_point = 0x0 region_type = private name = "private_0x0000001a8e620000" filename = "" Region: id = 851 start_va = 0x1a8e630000 end_va = 0x1a8e636fff entry_point = 0x0 region_type = private name = "private_0x0000001a8e630000" filename = "" Region: id = 852 start_va = 0x1a8e640000 end_va = 0x1a8e6b5fff entry_point = 0x1a8e640000 region_type = mapped_file name = "~fontcache-system.dat" filename = "\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\FontCache\\~FontCache-System.dat" (normalized: "c:\\windows\\serviceprofiles\\localservice\\appdata\\local\\fontcache\\~fontcache-system.dat") Region: id = 853 start_va = 0x1a8e6c0000 end_va = 0x1a8e6f1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000001a8e6c0000" filename = "" Region: id = 854 start_va = 0x1a8e700000 end_va = 0x1a8e7fffff entry_point = 0x0 region_type = private name = "private_0x0000001a8e700000" filename = "" Region: id = 855 start_va = 0x1a8e800000 end_va = 0x1a8e8fffff entry_point = 0x0 region_type = private name = "private_0x0000001a8e800000" filename = "" Region: id = 856 start_va = 0x1a8e900000 end_va = 0x1a8f0fffff entry_point = 0x0 region_type = private name = "private_0x0000001a8e900000" filename = "" Region: id = 857 start_va = 0x1a8f100000 end_va = 0x1a8f1fffff entry_point = 0x0 region_type = private name = "private_0x0000001a8f100000" filename = "" Region: id = 858 start_va = 0x1a8f200000 end_va = 0x1a8f2d3fff entry_point = 0x1a8f200000 region_type = mapped_file name = "resources.pri" filename = "\\Windows\\SystemApps\\ShellExperienceHost_cw5n1h2txyewy\\resources.pri" (normalized: "c:\\windows\\systemapps\\shellexperiencehost_cw5n1h2txyewy\\resources.pri") Region: id = 859 start_va = 0x1a8f2e0000 end_va = 0x1a8f3dffff entry_point = 0x0 region_type = private name = "private_0x0000001a8f2e0000" filename = "" Region: id = 860 start_va = 0x1a8f3e0000 end_va = 0x1a8f4dffff entry_point = 0x0 region_type = private name = "private_0x0000001a8f3e0000" filename = "" Region: id = 861 start_va = 0x1a8f4e0000 end_va = 0x1a8f4e0fff entry_point = 0x0 region_type = private name = "private_0x0000001a8f4e0000" filename = "" Region: id = 862 start_va = 0x1a8f4f0000 end_va = 0x1a8f4f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000001a8f4f0000" filename = "" Region: id = 863 start_va = 0x1a8f500000 end_va = 0x1a8f5fffff entry_point = 0x0 region_type = private name = "private_0x0000001a8f500000" filename = "" Region: id = 864 start_va = 0x1a8f600000 end_va = 0x1a8f6fffff entry_point = 0x0 region_type = private name = "private_0x0000001a8f600000" filename = "" Region: id = 865 start_va = 0x1a8f700000 end_va = 0x1a8f7fffff entry_point = 0x0 region_type = private name = "private_0x0000001a8f700000" filename = "" Region: id = 866 start_va = 0x1a8f800000 end_va = 0x1a8f8fffff entry_point = 0x0 region_type = private name = "private_0x0000001a8f800000" filename = "" Region: id = 867 start_va = 0x1a8f900000 end_va = 0x1a8f9fffff entry_point = 0x0 region_type = private name = "private_0x0000001a8f900000" filename = "" Region: id = 868 start_va = 0x1a8fa00000 end_va = 0x1a8fafffff entry_point = 0x0 region_type = private name = "private_0x0000001a8fa00000" filename = "" Region: id = 869 start_va = 0x1a8fb00000 end_va = 0x1a8fbfffff entry_point = 0x0 region_type = private name = "private_0x0000001a8fb00000" filename = "" Region: id = 870 start_va = 0x1a8fc00000 end_va = 0x1a8fcfffff entry_point = 0x0 region_type = private name = "private_0x0000001a8fc00000" filename = "" Region: id = 871 start_va = 0x1a8fe00000 end_va = 0x1a8fefffff entry_point = 0x0 region_type = private name = "private_0x0000001a8fe00000" filename = "" Region: id = 872 start_va = 0x1a90000000 end_va = 0x1a900fffff entry_point = 0x0 region_type = private name = "private_0x0000001a90000000" filename = "" Region: id = 873 start_va = 0x1a90100000 end_va = 0x1a901fffff entry_point = 0x0 region_type = private name = "private_0x0000001a90100000" filename = "" Region: id = 874 start_va = 0x1a90400000 end_va = 0x1a904fffff entry_point = 0x0 region_type = private name = "private_0x0000001a90400000" filename = "" Region: id = 875 start_va = 0x1a90500000 end_va = 0x1a905fffff entry_point = 0x0 region_type = private name = "private_0x0000001a90500000" filename = "" Region: id = 876 start_va = 0x1a90610000 end_va = 0x1a90610fff entry_point = 0x0 region_type = private name = "private_0x0000001a90610000" filename = "" Region: id = 877 start_va = 0x1a90620000 end_va = 0x1a90620fff entry_point = 0x0 region_type = private name = "private_0x0000001a90620000" filename = "" Region: id = 878 start_va = 0x1a90630000 end_va = 0x1a90636fff entry_point = 0x0 region_type = private name = "private_0x0000001a90630000" filename = "" Region: id = 879 start_va = 0x1a90640000 end_va = 0x1a906bffff entry_point = 0x0 region_type = private name = "private_0x0000001a90640000" filename = "" Region: id = 880 start_va = 0x1a906c0000 end_va = 0x1a906c3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000001a906c0000" filename = "" Region: id = 881 start_va = 0x1a906d0000 end_va = 0x1a906d0fff entry_point = 0x0 region_type = private name = "private_0x0000001a906d0000" filename = "" Region: id = 882 start_va = 0x1a906e0000 end_va = 0x1a906e3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000001a906e0000" filename = "" Region: id = 883 start_va = 0x1a906f0000 end_va = 0x1a906f0fff entry_point = 0x1a906f0000 region_type = mapped_file name = "msxml6r.dll" filename = "\\Windows\\System32\\msxml6r.dll" (normalized: "c:\\windows\\system32\\msxml6r.dll") Region: id = 884 start_va = 0x1a90700000 end_va = 0x1a907fffff entry_point = 0x0 region_type = private name = "private_0x0000001a90700000" filename = "" Region: id = 885 start_va = 0x1a90800000 end_va = 0x1a917fffff entry_point = 0x1a90800000 region_type = mapped_file name = "~fontcache-fontface.dat" filename = "\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\FontCache\\~FontCache-FontFace.dat" (normalized: "c:\\windows\\serviceprofiles\\localservice\\appdata\\local\\fontcache\\~fontcache-fontface.dat") Region: id = 886 start_va = 0x1a91800000 end_va = 0x1a91ffffff entry_point = 0x1a91800000 region_type = mapped_file name = "~fontcache-s-1-5-21-1462094071-1423818996-289466292-1000.dat" filename = "\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\FontCache\\~FontCache-S-1-5-21-1462094071-1423818996-289466292-1000.dat" (normalized: "c:\\windows\\serviceprofiles\\localservice\\appdata\\local\\fontcache\\~fontcache-s-1-5-21-1462094071-1423818996-289466292-1000.dat") Region: id = 887 start_va = 0x1a92000000 end_va = 0x1a920defff entry_point = 0x1a92000000 region_type = mapped_file name = "segoeui.ttf" filename = "\\Windows\\Fonts\\segoeui.ttf" (normalized: "c:\\windows\\fonts\\segoeui.ttf") Region: id = 888 start_va = 0x1a92100000 end_va = 0x1a921fffff entry_point = 0x0 region_type = private name = "private_0x0000001a92100000" filename = "" Region: id = 889 start_va = 0x1a92200000 end_va = 0x1a922fffff entry_point = 0x0 region_type = private name = "private_0x0000001a92200000" filename = "" Region: id = 890 start_va = 0x1a92300000 end_va = 0x1a923fffff entry_point = 0x0 region_type = private name = "private_0x0000001a92300000" filename = "" Region: id = 891 start_va = 0x1a92400000 end_va = 0x1a924fffff entry_point = 0x1a92400000 region_type = mapped_file name = "tilecache_100_0_data.bin" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState\\TileCache_100_0_Data.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\tempstate\\tilecache_100_0_data.bin") Region: id = 892 start_va = 0x1a927b0000 end_va = 0x1a927b6fff entry_point = 0x0 region_type = private name = "private_0x0000001a927b0000" filename = "" Region: id = 893 start_va = 0x1a92800000 end_va = 0x1a928fffff entry_point = 0x0 region_type = private name = "private_0x0000001a92800000" filename = "" Region: id = 894 start_va = 0x1a92900000 end_va = 0x1a929fffff entry_point = 0x0 region_type = private name = "private_0x0000001a92900000" filename = "" Region: id = 895 start_va = 0x1a92a00000 end_va = 0x1a92afffff entry_point = 0x0 region_type = private name = "private_0x0000001a92a00000" filename = "" Region: id = 896 start_va = 0x1a92d00000 end_va = 0x1a92dfffff entry_point = 0x0 region_type = private name = "private_0x0000001a92d00000" filename = "" Region: id = 897 start_va = 0x1a93100000 end_va = 0x1a931fffff entry_point = 0x0 region_type = private name = "private_0x0000001a93100000" filename = "" Region: id = 898 start_va = 0x1a93200000 end_va = 0x1a934bffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000001a93200000" filename = "" Region: id = 899 start_va = 0x1a934c0000 end_va = 0x1a935bffff entry_point = 0x0 region_type = private name = "private_0x0000001a934c0000" filename = "" Region: id = 900 start_va = 0x1a936c0000 end_va = 0x1a937bffff entry_point = 0x0 region_type = private name = "private_0x0000001a936c0000" filename = "" Region: id = 901 start_va = 0x1a938c0000 end_va = 0x1a939bffff entry_point = 0x0 region_type = private name = "private_0x0000001a938c0000" filename = "" Region: id = 902 start_va = 0x1a93ac0000 end_va = 0x1a93bbffff entry_point = 0x0 region_type = private name = "private_0x0000001a93ac0000" filename = "" Region: id = 903 start_va = 0x1a93bc0000 end_va = 0x1a93cbffff entry_point = 0x0 region_type = private name = "private_0x0000001a93bc0000" filename = "" Region: id = 904 start_va = 0x1a93cc0000 end_va = 0x1a93dbffff entry_point = 0x0 region_type = private name = "private_0x0000001a93cc0000" filename = "" Region: id = 905 start_va = 0x1a93dc0000 end_va = 0x1a93ebffff entry_point = 0x0 region_type = private name = "private_0x0000001a93dc0000" filename = "" Region: id = 906 start_va = 0x1a93f00000 end_va = 0x1a93ffffff entry_point = 0x0 region_type = private name = "private_0x0000001a93f00000" filename = "" Region: id = 907 start_va = 0x1a94100000 end_va = 0x1a941fffff entry_point = 0x0 region_type = private name = "private_0x0000001a94100000" filename = "" Region: id = 908 start_va = 0x1a94200000 end_va = 0x1a942fffff entry_point = 0x0 region_type = private name = "private_0x0000001a94200000" filename = "" Region: id = 909 start_va = 0x1a94300000 end_va = 0x1a943fffff entry_point = 0x0 region_type = private name = "private_0x0000001a94300000" filename = "" Region: id = 910 start_va = 0x1a94560000 end_va = 0x1a94566fff entry_point = 0x0 region_type = private name = "private_0x0000001a94560000" filename = "" Region: id = 911 start_va = 0x1a94600000 end_va = 0x1a946fffff entry_point = 0x0 region_type = private name = "private_0x0000001a94600000" filename = "" Region: id = 912 start_va = 0x1a94700000 end_va = 0x1a947fffff entry_point = 0x0 region_type = private name = "private_0x0000001a94700000" filename = "" Region: id = 913 start_va = 0x1a94800000 end_va = 0x1a948fffff entry_point = 0x0 region_type = private name = "private_0x0000001a94800000" filename = "" Region: id = 914 start_va = 0x1a94900000 end_va = 0x1a949fffff entry_point = 0x0 region_type = private name = "private_0x0000001a94900000" filename = "" Region: id = 915 start_va = 0x1a94a00000 end_va = 0x1a94afffff entry_point = 0x0 region_type = private name = "private_0x0000001a94a00000" filename = "" Region: id = 916 start_va = 0x7ff60020a000 end_va = 0x7ff60020bfff entry_point = 0x0 region_type = private name = "private_0x00007ff60020a000" filename = "" Region: id = 917 start_va = 0x7ff60020c000 end_va = 0x7ff60020dfff entry_point = 0x0 region_type = private name = "private_0x00007ff60020c000" filename = "" Region: id = 918 start_va = 0x7ff600210000 end_va = 0x7ff600211fff entry_point = 0x0 region_type = private name = "private_0x00007ff600210000" filename = "" Region: id = 919 start_va = 0x7ff600212000 end_va = 0x7ff600213fff entry_point = 0x0 region_type = private name = "private_0x00007ff600212000" filename = "" Region: id = 920 start_va = 0x7ff600216000 end_va = 0x7ff600217fff entry_point = 0x0 region_type = private name = "private_0x00007ff600216000" filename = "" Region: id = 921 start_va = 0x7ff600218000 end_va = 0x7ff600219fff entry_point = 0x0 region_type = private name = "private_0x00007ff600218000" filename = "" Region: id = 922 start_va = 0x7ff60021a000 end_va = 0x7ff60021bfff entry_point = 0x0 region_type = private name = "private_0x00007ff60021a000" filename = "" Region: id = 923 start_va = 0x7ff60021c000 end_va = 0x7ff60021dfff entry_point = 0x0 region_type = private name = "private_0x00007ff60021c000" filename = "" Region: id = 924 start_va = 0x7ff600220000 end_va = 0x7ff600221fff entry_point = 0x0 region_type = private name = "private_0x00007ff600220000" filename = "" Region: id = 925 start_va = 0x7ff600224000 end_va = 0x7ff600225fff entry_point = 0x0 region_type = private name = "private_0x00007ff600224000" filename = "" Region: id = 926 start_va = 0x7ff600228000 end_va = 0x7ff600229fff entry_point = 0x0 region_type = private name = "private_0x00007ff600228000" filename = "" Region: id = 927 start_va = 0x7ff600230000 end_va = 0x7ff600231fff entry_point = 0x0 region_type = private name = "private_0x00007ff600230000" filename = "" Region: id = 928 start_va = 0x7ff600236000 end_va = 0x7ff600237fff entry_point = 0x0 region_type = private name = "private_0x00007ff600236000" filename = "" Region: id = 929 start_va = 0x7ff60023c000 end_va = 0x7ff60023dfff entry_point = 0x0 region_type = private name = "private_0x00007ff60023c000" filename = "" Region: id = 930 start_va = 0x7ff60023e000 end_va = 0x7ff60023ffff entry_point = 0x0 region_type = private name = "private_0x00007ff60023e000" filename = "" Region: id = 931 start_va = 0x7ff600244000 end_va = 0x7ff600245fff entry_point = 0x0 region_type = private name = "private_0x00007ff600244000" filename = "" Region: id = 932 start_va = 0x7ff600246000 end_va = 0x7ff600247fff entry_point = 0x0 region_type = private name = "private_0x00007ff600246000" filename = "" Region: id = 933 start_va = 0x7ff60024c000 end_va = 0x7ff60024dfff entry_point = 0x0 region_type = private name = "private_0x00007ff60024c000" filename = "" Region: id = 934 start_va = 0x7ff60024e000 end_va = 0x7ff60024ffff entry_point = 0x0 region_type = private name = "private_0x00007ff60024e000" filename = "" Region: id = 935 start_va = 0x7ff600250000 end_va = 0x7ff600251fff entry_point = 0x0 region_type = private name = "private_0x00007ff600250000" filename = "" Region: id = 936 start_va = 0x7ff600252000 end_va = 0x7ff600253fff entry_point = 0x0 region_type = private name = "private_0x00007ff600252000" filename = "" Region: id = 937 start_va = 0x7ff600254000 end_va = 0x7ff600255fff entry_point = 0x0 region_type = private name = "private_0x00007ff600254000" filename = "" Region: id = 938 start_va = 0x7ff600256000 end_va = 0x7ff600257fff entry_point = 0x0 region_type = private name = "private_0x00007ff600256000" filename = "" Region: id = 939 start_va = 0x7ff600258000 end_va = 0x7ff600259fff entry_point = 0x0 region_type = private name = "private_0x00007ff600258000" filename = "" Region: id = 940 start_va = 0x7ff60025a000 end_va = 0x7ff60025bfff entry_point = 0x0 region_type = private name = "private_0x00007ff60025a000" filename = "" Region: id = 941 start_va = 0x7ff60025c000 end_va = 0x7ff60025dfff entry_point = 0x0 region_type = private name = "private_0x00007ff60025c000" filename = "" Region: id = 942 start_va = 0x7ff60025e000 end_va = 0x7ff60025ffff entry_point = 0x0 region_type = private name = "private_0x00007ff60025e000" filename = "" Region: id = 943 start_va = 0x7ff600260000 end_va = 0x7ff60035ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff600260000" filename = "" Region: id = 944 start_va = 0x7ff600360000 end_va = 0x7ff600382fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff600360000" filename = "" Region: id = 945 start_va = 0x7ff600383000 end_va = 0x7ff600384fff entry_point = 0x0 region_type = private name = "private_0x00007ff600383000" filename = "" Region: id = 946 start_va = 0x7ff600385000 end_va = 0x7ff600386fff entry_point = 0x0 region_type = private name = "private_0x00007ff600385000" filename = "" Region: id = 947 start_va = 0x7ff600387000 end_va = 0x7ff600388fff entry_point = 0x0 region_type = private name = "private_0x00007ff600387000" filename = "" Region: id = 948 start_va = 0x7ff600389000 end_va = 0x7ff60038afff entry_point = 0x0 region_type = private name = "private_0x00007ff600389000" filename = "" Region: id = 949 start_va = 0x7ff60038b000 end_va = 0x7ff60038cfff entry_point = 0x0 region_type = private name = "private_0x00007ff60038b000" filename = "" Region: id = 950 start_va = 0x7ff60038d000 end_va = 0x7ff60038efff entry_point = 0x0 region_type = private name = "private_0x00007ff60038d000" filename = "" Region: id = 951 start_va = 0x7ff60038f000 end_va = 0x7ff60038ffff entry_point = 0x0 region_type = private name = "private_0x00007ff60038f000" filename = "" Region: id = 952 start_va = 0x7ff600d40000 end_va = 0x7ff600f2dfff entry_point = 0x7ff600d40000 region_type = mapped_file name = "shellexperiencehost.exe" filename = "\\Windows\\SystemApps\\ShellExperienceHost_cw5n1h2txyewy\\ShellExperienceHost.exe" (normalized: "c:\\windows\\systemapps\\shellexperiencehost_cw5n1h2txyewy\\shellexperiencehost.exe") Region: id = 953 start_va = 0x7ff7afc80000 end_va = 0x7ff7afcb4fff entry_point = 0x0 region_type = private name = "private_0x00007ff7afc80000" filename = "" Region: id = 954 start_va = 0x7ff8daa00000 end_va = 0x7ff8daa2afff entry_point = 0x7ff8daa00000 region_type = mapped_file name = "personax.dll" filename = "\\Windows\\System32\\PersonaX.dll" (normalized: "c:\\windows\\system32\\personax.dll") Region: id = 955 start_va = 0x7ff8db970000 end_va = 0x7ff8db9e5fff entry_point = 0x7ff8db970000 region_type = mapped_file name = "rtmediaframe.dll" filename = "\\Windows\\System32\\RTMediaFrame.dll" (normalized: "c:\\windows\\system32\\rtmediaframe.dll") Region: id = 956 start_va = 0x7ff8dba90000 end_va = 0x7ff8dbae9fff entry_point = 0x7ff8dba90000 region_type = mapped_file name = "windows.graphics.dll" filename = "\\Windows\\System32\\Windows.Graphics.dll" (normalized: "c:\\windows\\system32\\windows.graphics.dll") Region: id = 957 start_va = 0x7ff8dbaf0000 end_va = 0x7ff8dbb42fff entry_point = 0x7ff8dbaf0000 region_type = mapped_file name = "windows.storage.applicationdata.dll" filename = "\\Windows\\System32\\Windows.Storage.ApplicationData.dll" (normalized: "c:\\windows\\system32\\windows.storage.applicationdata.dll") Region: id = 958 start_va = 0x7ff8dbb50000 end_va = 0x7ff8dbb59fff entry_point = 0x7ff8dbb50000 region_type = mapped_file name = "fontgroupsoverride.dll" filename = "\\Windows\\System32\\fontgroupsoverride.dll" (normalized: "c:\\windows\\system32\\fontgroupsoverride.dll") Region: id = 959 start_va = 0x7ff8dbbe0000 end_va = 0x7ff8dbbf7fff entry_point = 0x7ff8dbbe0000 region_type = mapped_file name = "windows.globalization.fontgroups.dll" filename = "\\Windows\\System32\\Windows.Globalization.Fontgroups.dll" (normalized: "c:\\windows\\system32\\windows.globalization.fontgroups.dll") Region: id = 960 start_va = 0x7ff8dbc00000 end_va = 0x7ff8dbc4dfff entry_point = 0x7ff8dbc00000 region_type = mapped_file name = "notificationobjfactory.dll" filename = "\\Windows\\System32\\NotificationObjFactory.dll" (normalized: "c:\\windows\\system32\\notificationobjfactory.dll") Region: id = 961 start_va = 0x7ff8dbc50000 end_va = 0x7ff8dbc7dfff entry_point = 0x7ff8dbc50000 region_type = mapped_file name = "quickactionsdatamodel.dll" filename = "\\Windows\\System32\\QuickActionsDataModel.dll" (normalized: "c:\\windows\\system32\\quickactionsdatamodel.dll") Region: id = 962 start_va = 0x7ff8dbc80000 end_va = 0x7ff8dbebcfff entry_point = 0x7ff8dbc80000 region_type = mapped_file name = "windows.ui.actioncenter.dll" filename = "\\Windows\\SystemApps\\ShellExperienceHost_cw5n1h2txyewy\\Windows.UI.ActionCenter.dll" (normalized: "c:\\windows\\systemapps\\shellexperiencehost_cw5n1h2txyewy\\windows.ui.actioncenter.dll") Region: id = 963 start_va = 0x7ff8dbec0000 end_va = 0x7ff8dbf2cfff entry_point = 0x7ff8dbec0000 region_type = mapped_file name = "quickactions.dll" filename = "\\Windows\\SystemApps\\ShellExperienceHost_cw5n1h2txyewy\\QuickActions.dll" (normalized: "c:\\windows\\systemapps\\shellexperiencehost_cw5n1h2txyewy\\quickactions.dll") Region: id = 964 start_va = 0x7ff8dbf30000 end_va = 0x7ff8dc6d6fff entry_point = 0x7ff8dbf30000 region_type = mapped_file name = "startui.dll" filename = "\\Windows\\SystemApps\\ShellExperienceHost_cw5n1h2txyewy\\StartUI.dll" (normalized: "c:\\windows\\systemapps\\shellexperiencehost_cw5n1h2txyewy\\startui.dll") Region: id = 965 start_va = 0x7ff8dc6e0000 end_va = 0x7ff8dc778fff entry_point = 0x7ff8dc6e0000 region_type = mapped_file name = "staterepository.core.dll" filename = "\\Windows\\System32\\StateRepository.Core.dll" (normalized: "c:\\windows\\system32\\staterepository.core.dll") Region: id = 966 start_va = 0x7ff8dc780000 end_va = 0x7ff8dca11fff entry_point = 0x7ff8dc780000 region_type = mapped_file name = "windows.staterepository.dll" filename = "\\Windows\\System32\\Windows.StateRepository.dll" (normalized: "c:\\windows\\system32\\windows.staterepository.dll") Region: id = 967 start_va = 0x7ff8dcfd0000 end_va = 0x7ff8dd018fff entry_point = 0x7ff8dcfd0000 region_type = mapped_file name = "veeventdispatcher.dll" filename = "\\Windows\\System32\\VEEventDispatcher.dll" (normalized: "c:\\windows\\system32\\veeventdispatcher.dll") Region: id = 968 start_va = 0x7ff8deb70000 end_va = 0x7ff8debb5fff entry_point = 0x7ff8deb70000 region_type = mapped_file name = "dataexchange.dll" filename = "\\Windows\\System32\\DataExchange.dll" (normalized: "c:\\windows\\system32\\dataexchange.dll") Region: id = 969 start_va = 0x7ff8df640000 end_va = 0x7ff8dfaa9fff entry_point = 0x7ff8df640000 region_type = mapped_file name = "actxprxy.dll" filename = "\\Windows\\System32\\actxprxy.dll" (normalized: "c:\\windows\\system32\\actxprxy.dll") Region: id = 970 start_va = 0x7ff8dfab0000 end_va = 0x7ff8dfd10fff entry_point = 0x7ff8dfab0000 region_type = mapped_file name = "coreuicomponents.dll" filename = "\\Windows\\System32\\CoreUIComponents.dll" (normalized: "c:\\windows\\system32\\coreuicomponents.dll") Region: id = 971 start_va = 0x7ff8e0a60000 end_va = 0x7ff8e0bf6fff entry_point = 0x7ff8e0a60000 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\System32\\urlmon.dll" (normalized: "c:\\windows\\system32\\urlmon.dll") Region: id = 972 start_va = 0x7ff8e16c0000 end_va = 0x7ff8e16d1fff entry_point = 0x7ff8e16c0000 region_type = mapped_file name = "windows.shell.servicehostbuilder.dll" filename = "\\Windows\\System32\\Windows.Shell.ServiceHostBuilder.dll" (normalized: "c:\\windows\\system32\\windows.shell.servicehostbuilder.dll") Region: id = 973 start_va = 0x7ff8e1c70000 end_va = 0x7ff8e1ee6fff entry_point = 0x7ff8e1c70000 region_type = mapped_file name = "msxml6.dll" filename = "\\Windows\\System32\\msxml6.dll" (normalized: "c:\\windows\\system32\\msxml6.dll") Region: id = 974 start_va = 0x7ff8e2ff0000 end_va = 0x7ff8e3004fff entry_point = 0x7ff8e2ff0000 region_type = mapped_file name = "threadpoolwinrt.dll" filename = "\\Windows\\System32\\threadpoolwinrt.dll" (normalized: "c:\\windows\\system32\\threadpoolwinrt.dll") Region: id = 975 start_va = 0x7ff8e3070000 end_va = 0x7ff8e30f8fff entry_point = 0x7ff8e3070000 region_type = mapped_file name = "directmanipulation.dll" filename = "\\Windows\\System32\\directmanipulation.dll" (normalized: "c:\\windows\\system32\\directmanipulation.dll") Region: id = 976 start_va = 0x7ff8e3660000 end_va = 0x7ff8e37e5fff entry_point = 0x7ff8e3660000 region_type = mapped_file name = "windows.globalization.dll" filename = "\\Windows\\System32\\Windows.Globalization.dll" (normalized: "c:\\windows\\system32\\windows.globalization.dll") Region: id = 977 start_va = 0x7ff8e37f0000 end_va = 0x7ff8e3a48fff entry_point = 0x7ff8e37f0000 region_type = mapped_file name = "dwrite.dll" filename = "\\Windows\\System32\\DWrite.dll" (normalized: "c:\\windows\\system32\\dwrite.dll") Region: id = 978 start_va = 0x7ff8e3c30000 end_va = 0x7ff8e3fa5fff entry_point = 0x7ff8e3c30000 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" (normalized: "c:\\windows\\system32\\iertutil.dll") Region: id = 979 start_va = 0x7ff8e3fb0000 end_va = 0x7ff8e4fa6fff entry_point = 0x7ff8e3fb0000 region_type = mapped_file name = "windows.ui.xaml.dll" filename = "\\Windows\\System32\\Windows.UI.Xaml.dll" (normalized: "c:\\windows\\system32\\windows.ui.xaml.dll") Region: id = 980 start_va = 0x7ff8e4fb0000 end_va = 0x7ff8e504dfff entry_point = 0x7ff8e4fb0000 region_type = mapped_file name = "windows.ui.dll" filename = "\\Windows\\System32\\Windows.UI.dll" (normalized: "c:\\windows\\system32\\windows.ui.dll") Region: id = 981 start_va = 0x7ff8e5050000 end_va = 0x7ff8e515efff entry_point = 0x7ff8e5050000 region_type = mapped_file name = "mrmcorer.dll" filename = "\\Windows\\System32\\MrmCoreR.dll" (normalized: "c:\\windows\\system32\\mrmcorer.dll") Region: id = 982 start_va = 0x7ff8e5160000 end_va = 0x7ff8e51c9fff entry_point = 0x7ff8e5160000 region_type = mapped_file name = "wincorlib.dll" filename = "\\Windows\\System32\\wincorlib.dll" (normalized: "c:\\windows\\system32\\wincorlib.dll") Region: id = 983 start_va = 0x7ff8e60a0000 end_va = 0x7ff8e6131fff entry_point = 0x7ff8e60a0000 region_type = mapped_file name = "msvcp110_win.dll" filename = "\\Windows\\System32\\msvcp110_win.dll" (normalized: "c:\\windows\\system32\\msvcp110_win.dll") Region: id = 984 start_va = 0x7ff8e6140000 end_va = 0x7ff8e6178fff entry_point = 0x7ff8e6140000 region_type = mapped_file name = "policymanager.dll" filename = "\\Windows\\System32\\policymanager.dll" (normalized: "c:\\windows\\system32\\policymanager.dll") Region: id = 985 start_va = 0x7ff8e6330000 end_va = 0x7ff8e6365fff entry_point = 0x7ff8e6330000 region_type = mapped_file name = "xmllite.dll" filename = "\\Windows\\System32\\xmllite.dll" (normalized: "c:\\windows\\system32\\xmllite.dll") Region: id = 986 start_va = 0x7ff8e6640000 end_va = 0x7ff8e6b84fff entry_point = 0x7ff8e6640000 region_type = mapped_file name = "d2d1.dll" filename = "\\Windows\\System32\\d2d1.dll" (normalized: "c:\\windows\\system32\\d2d1.dll") Region: id = 987 start_va = 0x7ff8e7430000 end_va = 0x7ff8e7560fff entry_point = 0x7ff8e7430000 region_type = mapped_file name = "wintypes.dll" filename = "\\Windows\\System32\\WinTypes.dll" (normalized: "c:\\windows\\system32\\wintypes.dll") Region: id = 988 start_va = 0x7ff8e79b0000 end_va = 0x7ff8e7b32fff entry_point = 0x7ff8e79b0000 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 989 start_va = 0x7ff8e86a0000 end_va = 0x7ff8e8851fff entry_point = 0x7ff8e86a0000 region_type = mapped_file name = "windowscodecs.dll" filename = "\\Windows\\System32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll") Region: id = 990 start_va = 0x7ff8e8860000 end_va = 0x7ff8e8acdfff entry_point = 0x7ff8e8860000 region_type = mapped_file name = "d3d10warp.dll" filename = "\\Windows\\System32\\d3d10warp.dll" (normalized: "c:\\windows\\system32\\d3d10warp.dll") Region: id = 991 start_va = 0x7ff8e8af0000 end_va = 0x7ff8e8b55fff entry_point = 0x7ff8e8af0000 region_type = mapped_file name = "bcp47langs.dll" filename = "\\Windows\\System32\\BCP47Langs.dll" (normalized: "c:\\windows\\system32\\bcp47langs.dll") Region: id = 992 start_va = 0x7ff8e8c60000 end_va = 0x7ff8e8cfbfff entry_point = 0x7ff8e8c60000 region_type = mapped_file name = "dxgi.dll" filename = "\\Windows\\System32\\dxgi.dll" (normalized: "c:\\windows\\system32\\dxgi.dll") Region: id = 993 start_va = 0x7ff8e8d00000 end_va = 0x7ff8e8fa2fff entry_point = 0x7ff8e8d00000 region_type = mapped_file name = "d3d11.dll" filename = "\\Windows\\System32\\d3d11.dll" (normalized: "c:\\windows\\system32\\d3d11.dll") Region: id = 994 start_va = 0x7ff8e8fb0000 end_va = 0x7ff8e8fd1fff entry_point = 0x7ff8e8fb0000 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\System32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll") Region: id = 995 start_va = 0x7ff8e9000000 end_va = 0x7ff8e905bfff entry_point = 0x7ff8e9000000 region_type = mapped_file name = "ninput.dll" filename = "\\Windows\\System32\\ninput.dll" (normalized: "c:\\windows\\system32\\ninput.dll") Region: id = 996 start_va = 0x7ff8e9060000 end_va = 0x7ff8e9127fff entry_point = 0x7ff8e9060000 region_type = mapped_file name = "coremessaging.dll" filename = "\\Windows\\System32\\CoreMessaging.dll" (normalized: "c:\\windows\\system32\\coremessaging.dll") Region: id = 997 start_va = 0x7ff8e9130000 end_va = 0x7ff8e9200fff entry_point = 0x7ff8e9130000 region_type = mapped_file name = "dcomp.dll" filename = "\\Windows\\System32\\dcomp.dll" (normalized: "c:\\windows\\system32\\dcomp.dll") Region: id = 998 start_va = 0x7ff8e9680000 end_va = 0x7ff8e9715fff entry_point = 0x7ff8e9680000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 999 start_va = 0x7ff8e9860000 end_va = 0x7ff8e994dfff entry_point = 0x7ff8e9860000 region_type = mapped_file name = "twinapi.appcore.dll" filename = "\\Windows\\System32\\twinapi.appcore.dll" (normalized: "c:\\windows\\system32\\twinapi.appcore.dll") Region: id = 1000 start_va = 0x7ff8ea270000 end_va = 0x7ff8ea2a2fff entry_point = 0x7ff8ea270000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 1001 start_va = 0x7ff8ea360000 end_va = 0x7ff8ea37efff entry_point = 0x7ff8ea360000 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 1002 start_va = 0x7ff8ea620000 end_va = 0x7ff8ea636fff entry_point = 0x7ff8ea620000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 1003 start_va = 0x7ff8ea790000 end_va = 0x7ff8ea79afff entry_point = 0x7ff8ea790000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 1004 start_va = 0x7ff8ea820000 end_va = 0x7ff8ea877fff entry_point = 0x7ff8ea820000 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll") Region: id = 1005 start_va = 0x7ff8eabd0000 end_va = 0x7ff8eabf7fff entry_point = 0x7ff8eabd0000 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 1006 start_va = 0x7ff8eac00000 end_va = 0x7ff8eac6afff entry_point = 0x7ff8eac00000 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 1007 start_va = 0x7ff8eadd0000 end_va = 0x7ff8eae19fff entry_point = 0x7ff8eadd0000 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 1008 start_va = 0x7ff8eae20000 end_va = 0x7ff8eae2efff entry_point = 0x7ff8eae20000 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 1009 start_va = 0x7ff8eae30000 end_va = 0x7ff8eae42fff entry_point = 0x7ff8eae30000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 1010 start_va = 0x7ff8eb180000 end_va = 0x7ff8eb7a7fff entry_point = 0x7ff8eb180000 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\System32\\windows.storage.dll" (normalized: "c:\\windows\\system32\\windows.storage.dll") Region: id = 1011 start_va = 0x7ff8eb7b0000 end_va = 0x7ff8eb862fff entry_point = 0x7ff8eb7b0000 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\System32\\SHCore.dll" (normalized: "c:\\windows\\system32\\shcore.dll") Region: id = 1012 start_va = 0x7ff8eb870000 end_va = 0x7ff8eba4cfff entry_point = 0x7ff8eb870000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 1013 start_va = 0x7ff8ebb30000 end_va = 0x7ff8ebbedfff entry_point = 0x7ff8ebb30000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 1014 start_va = 0x7ff8ebdc0000 end_va = 0x7ff8ebf0dfff entry_point = 0x7ff8ebdc0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 1015 start_va = 0x7ff8ec0c0000 end_va = 0x7ff8ec21bfff entry_point = 0x7ff8ec0c0000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 1016 start_va = 0x7ff8ec240000 end_va = 0x7ff8ec29afff entry_point = 0x7ff8ec240000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 1017 start_va = 0x7ff8ec300000 end_va = 0x7ff8ec440fff entry_point = 0x7ff8ec300000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 1018 start_va = 0x7ff8ec450000 end_va = 0x7ff8ec575fff entry_point = 0x7ff8ec450000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 1019 start_va = 0x7ff8ec580000 end_va = 0x7ff8edaa4fff entry_point = 0x7ff8ec580000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 1020 start_va = 0x7ff8edbc0000 end_va = 0x7ff8edd44fff entry_point = 0x7ff8edbc0000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 1021 start_va = 0x7ff8edd60000 end_va = 0x7ff8edfdbfff entry_point = 0x7ff8edd60000 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 1022 start_va = 0x7ff8edfe0000 end_va = 0x7ff8ee030fff entry_point = 0x7ff8edfe0000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 1023 start_va = 0x7ff8ee0b0000 end_va = 0x7ff8ee14cfff entry_point = 0x7ff8ee0b0000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 1024 start_va = 0x7ff8ee150000 end_va = 0x7ff8ee185fff entry_point = 0x7ff8ee150000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 1025 start_va = 0x7ff8ee190000 end_va = 0x7ff8ee235fff entry_point = 0x7ff8ee190000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 1026 start_va = 0x7ff8ee2d0000 end_va = 0x7ff8ee37cfff entry_point = 0x7ff8ee2d0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 1027 start_va = 0x7ff8ee380000 end_va = 0x7ff8ee541fff entry_point = 0x7ff8ee380000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Thread: id = 51 os_tid = 0xbf0 Thread: id = 52 os_tid = 0x7cc Thread: id = 53 os_tid = 0x7f4 Thread: id = 54 os_tid = 0xab8 Thread: id = 55 os_tid = 0xab4 Thread: id = 56 os_tid = 0xaac Thread: id = 57 os_tid = 0xaa8 Thread: id = 58 os_tid = 0xaa4 Thread: id = 59 os_tid = 0xaa0 Thread: id = 60 os_tid = 0xa7c Thread: id = 61 os_tid = 0xa70 Thread: id = 62 os_tid = 0xa68 Thread: id = 63 os_tid = 0xa50 Thread: id = 64 os_tid = 0xa44 Thread: id = 65 os_tid = 0xa38 Thread: id = 66 os_tid = 0xa30 Thread: id = 67 os_tid = 0xa24 Thread: id = 68 os_tid = 0xa20 Thread: id = 69 os_tid = 0xa00 Thread: id = 70 os_tid = 0x9fc Thread: id = 71 os_tid = 0x9f4 Thread: id = 72 os_tid = 0x9f0 Thread: id = 73 os_tid = 0x9ec Thread: id = 74 os_tid = 0x9e8 Thread: id = 75 os_tid = 0x9e0 Thread: id = 76 os_tid = 0x9d0 Thread: id = 77 os_tid = 0x9cc Thread: id = 78 os_tid = 0x9c0 Thread: id = 79 os_tid = 0x9bc Thread: id = 80 os_tid = 0x9b8 Thread: id = 81 os_tid = 0x9b4 Thread: id = 82 os_tid = 0x9b0 Thread: id = 83 os_tid = 0x9a4 Thread: id = 85 os_tid = 0xd04 Process: id = "8" image_name = "reg.exe" filename = "c:\\windows\\system32\\reg.exe" page_root = "0x2e25d000" os_pid = "0xd08" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "2" os_parent_pid = "0xc80" cmd_line = "REG ADD \"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run\" /v \"svchos\" /t REG_SZ /d \"C:\\Users\\CIiHmnxMn6Ps\\Desktop\\eqBNr.exe\" /f" cur_dir = "C:\\Users\\CIiHmnxMn6Ps\\Desktop\\" os_username = "LHNIWSJ\\CIiHmnxMn6Ps" os_groups = "LHNIWSJ\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00014ee5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 1054 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 1055 start_va = 0xd4951d0000 end_va = 0xd4951effff entry_point = 0x0 region_type = private name = "private_0x000000d4951d0000" filename = "" Region: id = 1056 start_va = 0xd4951f0000 end_va = 0xd495203fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d4951f0000" filename = "" Region: id = 1057 start_va = 0xd495210000 end_va = 0xd49528ffff entry_point = 0x0 region_type = private name = "private_0x000000d495210000" filename = "" Region: id = 1058 start_va = 0xd495290000 end_va = 0xd495293fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d495290000" filename = "" Region: id = 1059 start_va = 0xd4952a0000 end_va = 0xd4952a0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d4952a0000" filename = "" Region: id = 1060 start_va = 0xd4952b0000 end_va = 0xd4952b1fff entry_point = 0x0 region_type = private name = "private_0x000000d4952b0000" filename = "" Region: id = 1061 start_va = 0x7df5ff9d0000 end_va = 0x7ff5ff9cffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ff9d0000" filename = "" Region: id = 1062 start_va = 0x7ff6efb90000 end_va = 0x7ff6efbb2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff6efb90000" filename = "" Region: id = 1063 start_va = 0x7ff6efbb3000 end_va = 0x7ff6efbb3fff entry_point = 0x0 region_type = private name = "private_0x00007ff6efbb3000" filename = "" Region: id = 1064 start_va = 0x7ff6efbbe000 end_va = 0x7ff6efbbffff entry_point = 0x0 region_type = private name = "private_0x00007ff6efbbe000" filename = "" Region: id = 1065 start_va = 0x7ff6f06f0000 end_va = 0x7ff6f0745fff entry_point = 0x7ff6f06f0000 region_type = mapped_file name = "reg.exe" filename = "\\Windows\\System32\\reg.exe" (normalized: "c:\\windows\\system32\\reg.exe") Region: id = 1066 start_va = 0x7ff8ee380000 end_va = 0x7ff8ee541fff entry_point = 0x7ff8ee380000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 1067 start_va = 0xd4951d0000 end_va = 0xd4951dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d4951d0000" filename = "" Region: id = 1068 start_va = 0xd495310000 end_va = 0xd49540ffff entry_point = 0x0 region_type = private name = "private_0x000000d495310000" filename = "" Region: id = 1069 start_va = 0x7ff6efa90000 end_va = 0x7ff6efb8ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff6efa90000" filename = "" Region: id = 1070 start_va = 0x7ff8eb870000 end_va = 0x7ff8eba4cfff entry_point = 0x7ff8eb870000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 1071 start_va = 0x7ff8ee2d0000 end_va = 0x7ff8ee37cfff entry_point = 0x7ff8ee2d0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 1454 start_va = 0xd4951e0000 end_va = 0xd4951e6fff entry_point = 0x0 region_type = private name = "private_0x000000d4951e0000" filename = "" Region: id = 1455 start_va = 0xd495410000 end_va = 0xd4954cdfff entry_point = 0xd495410000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 1456 start_va = 0xd4954d0000 end_va = 0xd49554ffff entry_point = 0x0 region_type = private name = "private_0x000000d4954d0000" filename = "" Region: id = 1457 start_va = 0xd4956f0000 end_va = 0xd4956fffff entry_point = 0x0 region_type = private name = "private_0x000000d4956f0000" filename = "" Region: id = 1458 start_va = 0x7ff6efbbc000 end_va = 0x7ff6efbbdfff entry_point = 0x0 region_type = private name = "private_0x00007ff6efbbc000" filename = "" Region: id = 1459 start_va = 0x7ff8ec240000 end_va = 0x7ff8ec29afff entry_point = 0x7ff8ec240000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 1460 start_va = 0x7ff8ec450000 end_va = 0x7ff8ec575fff entry_point = 0x7ff8ec450000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 1461 start_va = 0x7ff8ee040000 end_va = 0x7ff8ee0a8fff entry_point = 0x7ff8ee040000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 1462 start_va = 0x7ff8ee0b0000 end_va = 0x7ff8ee14cfff entry_point = 0x7ff8ee0b0000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 1463 start_va = 0x7ff8ee190000 end_va = 0x7ff8ee235fff entry_point = 0x7ff8ee190000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 1464 start_va = 0x7ff8ee250000 end_va = 0x7ff8ee257fff entry_point = 0x7ff8ee250000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 1465 start_va = 0xd495700000 end_va = 0xd495a36fff entry_point = 0xd495700000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 1466 start_va = 0xd4952c0000 end_va = 0xd4952c6fff entry_point = 0x0 region_type = private name = "private_0x000000d4952c0000" filename = "" Region: id = 1467 start_va = 0xd495550000 end_va = 0xd49562efff entry_point = 0xd495550000 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui") Thread: id = 86 os_tid = 0xd0c [0073.653] GetModuleHandleW (lpModuleName=0x0) returned 0x7ff6f06f0000 [0073.653] __set_app_type (_Type=0x1) [0073.653] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x7ff6f06fe510) returned 0x0 [0073.653] __wgetmainargs (in: _Argc=0x7ff6f0702048, _Argv=0x7ff6f0702050, _Env=0x7ff6f0702058, _DoWildCard=0, _StartInfo=0x7ff6f0702064 | out: _Argc=0x7ff6f0702048, _Argv=0x7ff6f0702050, _Env=0x7ff6f0702058) returned 0 [0073.653] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="ADD", cchCount1=-1, lpString2="QUERY", cchCount2=-1) returned 1 [0073.656] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="ADD", cchCount1=-1, lpString2="ADD", cchCount2=-1) returned 2 [0073.656] RegOpenKeyW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", phkResult=0xd49528fd78 | out: phkResult=0xd49528fd78*=0x0) returned 0x2 [0073.656] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="ADD", cchCount1=-1, lpString2="ADD", cchCount2=-1) returned 2 [0073.656] lstrlenW (lpString="-?|/?|-h|/h") returned 11 [0073.656] lstrlenW (lpString="") returned 0 [0073.658] SetThreadUILanguage (LangId=0x0) returned 0x409 [0073.703] _memicmp (_Buf1=0xd495314470, _Buf2=0x7ff6f07000d8, _Size=0x7) returned 0 [0073.703] lstrlenW (lpString="HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run") returned 63 [0073.704] _memicmp (_Buf1=0xd495312230, _Buf2=0x7ff6f07000d8, _Size=0x7) returned 0 [0073.704] _vsnwprintf (in: _Buffer=0xd495318870, _BufferCount=0xe, _Format="|%s|", _ArgList=0xd49528fbb8 | out: _Buffer="|-?|/?|-h|/h|") returned 13 [0073.704] _vsnwprintf (in: _Buffer=0xd495314000, _BufferCount=0x42, _Format="|%s|", _ArgList=0xd49528fbb8 | out: _Buffer="|HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run|") returned 65 [0073.704] lstrlenW (lpString="|-?|/?|-h|/h|") returned 13 [0073.704] lstrlenW (lpString="|HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run|") returned 65 [0073.704] RtlRestoreLastWin32Error () returned 0x7ff6efbbe000 [0073.704] lstrlenW (lpString="HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run") returned 63 [0073.704] lstrlenW (lpString="HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run") returned 63 [0073.704] StrChrW (lpStart=" \x09", wMatch=0x48) returned 0x0 [0073.704] StrChrW (lpStart=" \x09", wMatch=0x48) returned 0x0 [0073.704] StrChrW (lpStart=" \x09", wMatch=0x4b) returned 0x0 [0073.704] StrChrW (lpStart=" \x09", wMatch=0x45) returned 0x0 [0073.704] StrChrW (lpStart=" \x09", wMatch=0x59) returned 0x0 [0073.704] StrChrW (lpStart=" \x09", wMatch=0x5f) returned 0x0 [0073.704] StrChrW (lpStart=" \x09", wMatch=0x43) returned 0x0 [0073.704] StrChrW (lpStart=" \x09", wMatch=0x55) returned 0x0 [0073.705] StrChrW (lpStart=" \x09", wMatch=0x52) returned 0x0 [0073.705] StrChrW (lpStart=" \x09", wMatch=0x52) returned 0x0 [0073.705] StrChrW (lpStart=" \x09", wMatch=0x45) returned 0x0 [0073.705] StrChrW (lpStart=" \x09", wMatch=0x4e) returned 0x0 [0073.705] StrChrW (lpStart=" \x09", wMatch=0x54) returned 0x0 [0073.705] StrChrW (lpStart=" \x09", wMatch=0x5f) returned 0x0 [0073.705] StrChrW (lpStart=" \x09", wMatch=0x55) returned 0x0 [0073.705] StrChrW (lpStart=" \x09", wMatch=0x53) returned 0x0 [0073.705] StrChrW (lpStart=" \x09", wMatch=0x45) returned 0x0 [0073.705] StrChrW (lpStart=" \x09", wMatch=0x52) returned 0x0 [0073.705] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0 [0073.705] StrChrW (lpStart=" \x09", wMatch=0x53) returned 0x0 [0073.705] StrChrW (lpStart=" \x09", wMatch=0x4f) returned 0x0 [0073.705] StrChrW (lpStart=" \x09", wMatch=0x46) returned 0x0 [0073.705] StrChrW (lpStart=" \x09", wMatch=0x54) returned 0x0 [0073.705] StrChrW (lpStart=" \x09", wMatch=0x57) returned 0x0 [0073.705] StrChrW (lpStart=" \x09", wMatch=0x41) returned 0x0 [0073.705] StrChrW (lpStart=" \x09", wMatch=0x52) returned 0x0 [0073.705] StrChrW (lpStart=" \x09", wMatch=0x45) returned 0x0 [0073.705] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0 [0073.705] StrChrW (lpStart=" \x09", wMatch=0x4d) returned 0x0 [0073.705] StrChrW (lpStart=" \x09", wMatch=0x69) returned 0x0 [0073.705] StrChrW (lpStart=" \x09", wMatch=0x63) returned 0x0 [0073.705] StrChrW (lpStart=" \x09", wMatch=0x72) returned 0x0 [0073.705] StrChrW (lpStart=" \x09", wMatch=0x6f) returned 0x0 [0073.705] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0 [0073.705] StrChrW (lpStart=" \x09", wMatch=0x6f) returned 0x0 [0073.705] StrChrW (lpStart=" \x09", wMatch=0x66) returned 0x0 [0073.705] StrChrW (lpStart=" \x09", wMatch=0x74) returned 0x0 [0073.705] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0 [0073.705] StrChrW (lpStart=" \x09", wMatch=0x57) returned 0x0 [0073.705] StrChrW (lpStart=" \x09", wMatch=0x69) returned 0x0 [0073.705] StrChrW (lpStart=" \x09", wMatch=0x6e) returned 0x0 [0073.705] StrChrW (lpStart=" \x09", wMatch=0x64) returned 0x0 [0073.705] StrChrW (lpStart=" \x09", wMatch=0x6f) returned 0x0 [0073.705] StrChrW (lpStart=" \x09", wMatch=0x77) returned 0x0 [0073.705] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0 [0073.706] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0 [0073.706] StrChrW (lpStart=" \x09", wMatch=0x43) returned 0x0 [0073.706] StrChrW (lpStart=" \x09", wMatch=0x75) returned 0x0 [0073.706] StrChrW (lpStart=" \x09", wMatch=0x72) returned 0x0 [0073.706] StrChrW (lpStart=" \x09", wMatch=0x72) returned 0x0 [0073.706] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0 [0073.706] StrChrW (lpStart=" \x09", wMatch=0x6e) returned 0x0 [0073.706] StrChrW (lpStart=" \x09", wMatch=0x74) returned 0x0 [0073.706] StrChrW (lpStart=" \x09", wMatch=0x56) returned 0x0 [0073.706] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0 [0073.706] StrChrW (lpStart=" \x09", wMatch=0x72) returned 0x0 [0073.706] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0 [0073.706] StrChrW (lpStart=" \x09", wMatch=0x69) returned 0x0 [0073.706] StrChrW (lpStart=" \x09", wMatch=0x6f) returned 0x0 [0073.706] StrChrW (lpStart=" \x09", wMatch=0x6e) returned 0x0 [0073.706] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0 [0073.706] StrChrW (lpStart=" \x09", wMatch=0x52) returned 0x0 [0073.706] StrChrW (lpStart=" \x09", wMatch=0x75) returned 0x0 [0073.706] StrChrW (lpStart=" \x09", wMatch=0x6e) returned 0x0 [0073.706] lstrlenW (lpString="HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run") returned 63 [0073.706] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run", cchCount1=2, lpString2="\\\\", cchCount2=2) returned 3 [0073.706] lstrlenW (lpString="HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run") returned 63 [0073.706] lstrlenW (lpString="HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run") returned 63 [0073.706] StrChrIW (lpStart="HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run", wMatch=0x5c) returned="\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" [0073.707] lstrlenW (lpString="HKEY_CURRENT_CONFIG") returned 19 [0073.707] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="HKEY_CURRENT_USER", cchCount1=-1, lpString2="HKCU", cchCount2=-1) returned 3 [0073.707] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="HKEY_CURRENT_USER", cchCount1=-1, lpString2="HKEY_CURRENT_USER", cchCount2=-1) returned 2 [0073.707] lstrlenW (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run") returned 45 [0073.707] lstrlenW (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run") returned 45 [0073.707] lstrlenW (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run") returned 45 [0073.707] StrChrIW (lpStart="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run", wMatch=0x5c) returned="\\Microsoft\\Windows\\CurrentVersion\\Run" [0073.707] lstrlenW (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run") returned 45 [0073.707] StrChrIW (lpStart="Microsoft\\Windows\\CurrentVersion\\Run", wMatch=0x5c) returned="\\Windows\\CurrentVersion\\Run" [0073.707] lstrlenW (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run") returned 45 [0073.707] StrChrIW (lpStart="Windows\\CurrentVersion\\Run", wMatch=0x5c) returned="\\CurrentVersion\\Run" [0073.707] lstrlenW (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run") returned 45 [0073.707] StrChrIW (lpStart="CurrentVersion\\Run", wMatch=0x5c) returned="\\Run" [0073.707] lstrlenW (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run") returned 45 [0073.707] StrChrIW (lpStart="Run", wMatch=0x5c) returned 0x0 [0073.707] RtlRestoreLastWin32Error () returned 0x7ff6efbbe000 [0073.707] lstrlenW (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run") returned 45 [0073.707] RtlRestoreLastWin32Error () returned 0x7ff6efbbe000 [0073.707] lstrlenW (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run") returned 45 [0073.742] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/v", cchCount1=-1, lpString2="/v", cchCount2=-1) returned 2 [0073.742] lstrlenW (lpString="svchos") returned 6 [0073.742] lstrlenW (lpString="svchos") returned 6 [0073.742] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0 [0073.742] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0 [0073.742] StrChrW (lpStart=" \x09", wMatch=0x76) returned 0x0 [0073.742] StrChrW (lpStart=" \x09", wMatch=0x63) returned 0x0 [0073.742] StrChrW (lpStart=" \x09", wMatch=0x68) returned 0x0 [0073.742] StrChrW (lpStart=" \x09", wMatch=0x6f) returned 0x0 [0073.742] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0 [0073.742] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/t", cchCount1=-1, lpString2="/v", cchCount2=-1) returned 1 [0073.742] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/t", cchCount1=-1, lpString2="-v", cchCount2=-1) returned 1 [0073.742] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/t", cchCount1=-1, lpString2="/ve", cchCount2=-1) returned 1 [0073.742] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/t", cchCount1=-1, lpString2="-ve", cchCount2=-1) returned 1 [0073.742] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/t", cchCount1=-1, lpString2="/t", cchCount2=-1) returned 2 [0073.742] StrDupW (lpSrch="REG_SZ") returned="REG_SZ" [0073.742] lstrlenW (lpString="REG_SZ") returned 6 [0073.742] StrChrW (lpStart=" \x09", wMatch=0x52) returned 0x0 [0073.742] StrChrW (lpStart=" \x09", wMatch=0x52) returned 0x0 [0073.742] StrChrW (lpStart=" \x09", wMatch=0x45) returned 0x0 [0073.742] StrChrW (lpStart=" \x09", wMatch=0x47) returned 0x0 [0073.742] StrChrW (lpStart=" \x09", wMatch=0x5f) returned 0x0 [0073.742] StrChrW (lpStart=" \x09", wMatch=0x53) returned 0x0 [0073.742] StrChrW (lpStart=" \x09", wMatch=0x5a) returned 0x0 [0073.742] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="REG_SZ", cchCount1=-1, lpString2="REG_SZ", cchCount2=-1) returned 2 [0073.742] LocalFree (hMem=0xd4953140b0) returned 0x0 [0073.743] RtlRestoreLastWin32Error () returned 0x7ff6efbbe000 [0073.743] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/d", cchCount1=-1, lpString2="/v", cchCount2=-1) returned 1 [0073.743] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/d", cchCount1=-1, lpString2="-v", cchCount2=-1) returned 1 [0073.743] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/d", cchCount1=-1, lpString2="/ve", cchCount2=-1) returned 1 [0073.743] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/d", cchCount1=-1, lpString2="-ve", cchCount2=-1) returned 1 [0073.743] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/d", cchCount1=-1, lpString2="/t", cchCount2=-1) returned 1 [0073.743] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/d", cchCount1=-1, lpString2="-t", cchCount2=-1) returned 1 [0073.743] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/d", cchCount1=-1, lpString2="/s", cchCount2=-1) returned 1 [0073.743] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/d", cchCount1=-1, lpString2="-s", cchCount2=-1) returned 1 [0073.743] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/d", cchCount1=-1, lpString2="/d", cchCount2=-1) returned 2 [0073.743] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\eqBNr.exe") returned 39 [0073.743] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="/v", cchCount2=-1) returned 1 [0073.743] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="-v", cchCount2=-1) returned 1 [0073.743] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="/ve", cchCount2=-1) returned 1 [0073.743] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="-ve", cchCount2=-1) returned 1 [0073.743] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="/t", cchCount2=-1) returned 1 [0073.743] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="-t", cchCount2=-1) returned 1 [0073.743] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="/s", cchCount2=-1) returned 1 [0073.743] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="-s", cchCount2=-1) returned 1 [0073.743] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="/d", cchCount2=-1) returned 3 [0073.743] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="-d", cchCount2=-1) returned 1 [0073.743] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="/f", cchCount2=-1) returned 2 [0073.743] RtlRestoreLastWin32Error () returned 0x7ff6efbbe000 [0073.743] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2001f, lpSecurityAttributes=0x0, phkResult=0xd49528fc90, lpdwDisposition=0xd49528fca8 | out: phkResult=0xd49528fc90*=0x7c, lpdwDisposition=0xd49528fca8*=0x2) returned 0x0 [0073.744] RegQueryValueExW (in: hKey=0x7c, lpValueName="svchos", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x2 [0073.744] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\eqBNr.exe") returned 39 [0073.744] RegSetValueExW (in: hKey=0x7c, lpValueName="svchos", Reserved=0x0, dwType=0x1, lpData="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\eqBNr.exe", cbData=0x50 | out: lpData="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\eqBNr.exe") returned 0x0 [0073.744] RegCloseKey (hKey=0x7c) returned 0x0 [0073.745] RtlRestoreLastWin32Error () returned 0x7ff6efbbe000 [0073.745] GetLastError () returned 0x0 [0073.745] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x0, dwLanguageId=0x0, lpBuffer=0xd49528fc10, nSize=0x0, Arguments=0x0 | out: lpBuffer="㩐锱Ô") returned 0x27 [0073.747] GetLastError () returned 0x0 [0073.747] lstrlenW (lpString="The operation completed successfully.\r\n") returned 39 [0073.748] RtlRestoreLastWin32Error () returned 0x7ff6efbbe000 [0073.748] LocalFree (hMem=0xd495313a50) returned 0x0 [0073.748] __iob_func () returned 0x7ff8ee13e210 [0073.748] _fileno (_File=0x7ff8ee13e240) returned 1 [0073.748] _errno () returned 0xd4956f0840 [0073.748] _get_osfhandle (_FileHandle=1) returned 0x24 [0073.748] _errno () returned 0xd4956f0840 [0073.748] GetFileType (hFile=0x24) returned 0x2 [0073.748] GetStdHandle (nStdHandle=0xfffffff5) returned 0x24 [0073.748] GetFileType (hFile=0x24) returned 0x2 [0073.748] GetConsoleMode (in: hConsoleHandle=0x24, lpMode=0xd49528fb90 | out: lpMode=0xd49528fb90) returned 1 [0073.756] __iob_func () returned 0x7ff8ee13e210 [0073.756] GetStdHandle (nStdHandle=0xfffffff5) returned 0x24 [0073.756] lstrlenW (lpString="The operation completed successfully.\r\n") returned 39 [0073.756] WriteConsoleW (in: hConsoleOutput=0x24, lpBuffer=0xd495314130*, nNumberOfCharsToWrite=0x27, lpNumberOfCharsWritten=0xd49528fc00, lpReserved=0x0 | out: lpBuffer=0xd495314130*, lpNumberOfCharsWritten=0xd49528fc00*=0x27) returned 1 [0073.759] exit (_Code=0) Thread: id = 120 os_tid = 0xd2c Process: id = "9" image_name = "searchui.exe" filename = "c:\\windows\\systemapps\\microsoft.windows.cortana_cw5n1h2txyewy\\searchui.exe" page_root = "0x1074b000" os_pid = "0xb7c" os_integrity_level = "0x1000" os_privileges = "0x800000" monitor_reason = "injection" parent_id = "1" os_parent_pid = "0x300" cmd_line = "\"C:\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\SearchUI.exe\" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca" cur_dir = "C:\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\" os_username = "LHNIWSJ\\CIiHmnxMn6Ps" os_groups = "LHNIWSJ\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00014ee5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 1072 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 1073 start_va = 0x53ee70000 end_va = 0x53ee7ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000053ee70000" filename = "" Region: id = 1074 start_va = 0x53ee80000 end_va = 0x53ee80fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000053ee80000" filename = "" Region: id = 1075 start_va = 0x53ee90000 end_va = 0x53eea3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000053ee90000" filename = "" Region: id = 1076 start_va = 0x53eeb0000 end_va = 0x53efaffff entry_point = 0x0 region_type = private name = "private_0x000000053eeb0000" filename = "" Region: id = 1077 start_va = 0x53efb0000 end_va = 0x53efb3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000053efb0000" filename = "" Region: id = 1078 start_va = 0x53efc0000 end_va = 0x53efc1fff entry_point = 0x0 region_type = private name = "private_0x000000053efc0000" filename = "" Region: id = 1079 start_va = 0x53efd0000 end_va = 0x53efd0fff entry_point = 0x0 region_type = private name = "private_0x000000053efd0000" filename = "" Region: id = 1080 start_va = 0x53efe0000 end_va = 0x53f09dfff entry_point = 0x53efe0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 1081 start_va = 0x53f0a0000 end_va = 0x53f0a0fff entry_point = 0x0 region_type = private name = "private_0x000000053f0a0000" filename = "" Region: id = 1082 start_va = 0x53f0b0000 end_va = 0x53f0b0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000053f0b0000" filename = "" Region: id = 1083 start_va = 0x53f0c0000 end_va = 0x53f0c6fff entry_point = 0x0 region_type = private name = "private_0x000000053f0c0000" filename = "" Region: id = 1084 start_va = 0x53f0d0000 end_va = 0x53f0f9fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000053f0d0000" filename = "" Region: id = 1085 start_va = 0x53f100000 end_va = 0x53f1fffff entry_point = 0x0 region_type = private name = "private_0x000000053f100000" filename = "" Region: id = 1086 start_va = 0x53f200000 end_va = 0x53f2fffff entry_point = 0x0 region_type = private name = "private_0x000000053f200000" filename = "" Region: id = 1087 start_va = 0x53f300000 end_va = 0x53f300fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000053f300000" filename = "" Region: id = 1088 start_va = 0x53f310000 end_va = 0x53f310fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000053f310000" filename = "" Region: id = 1089 start_va = 0x53f320000 end_va = 0x53f320fff entry_point = 0x0 region_type = private name = "private_0x000000053f320000" filename = "" Region: id = 1090 start_va = 0x53f330000 end_va = 0x53f330fff entry_point = 0x0 region_type = private name = "private_0x000000053f330000" filename = "" Region: id = 1091 start_va = 0x53f340000 end_va = 0x53f347fff entry_point = 0x53f340000 region_type = mapped_file name = "cortana.search.winmd" filename = "\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Cortana.Search.winmd" (normalized: "c:\\windows\\systemapps\\microsoft.windows.cortana_cw5n1h2txyewy\\cortana.search.winmd") Region: id = 1092 start_va = 0x53f350000 end_va = 0x53f350fff entry_point = 0x53f350000 region_type = mapped_file name = "counters.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\counters.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\counters.dat") Region: id = 1093 start_va = 0x53f360000 end_va = 0x53f366fff entry_point = 0x0 region_type = private name = "private_0x000000053f360000" filename = "" Region: id = 1094 start_va = 0x53f370000 end_va = 0x53f370fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000053f370000" filename = "" Region: id = 1095 start_va = 0x53f390000 end_va = 0x53f3b0fff entry_point = 0x53f390000 region_type = mapped_file name = "resources.pri" filename = "\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\resources.pri" (normalized: "c:\\windows\\systemapps\\microsoft.windows.cortana_cw5n1h2txyewy\\resources.pri") Region: id = 1096 start_va = 0x53f3c0000 end_va = 0x53f3d3fff entry_point = 0x53f3c0000 region_type = mapped_file name = "2495906576.pri" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\2495906576.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\windows\\3530508098\\2495906576.pri") Region: id = 1097 start_va = 0x53f3e0000 end_va = 0x53f3e0fff entry_point = 0x53f3e0000 region_type = mapped_file name = "app.xbf" filename = "\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\App.xbf" (normalized: "c:\\windows\\systemapps\\microsoft.windows.cortana_cw5n1h2txyewy\\app.xbf") Region: id = 1098 start_va = 0x53f3f0000 end_va = 0x53f3f0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000053f3f0000" filename = "" Region: id = 1099 start_va = 0x53f400000 end_va = 0x53f4fffff entry_point = 0x0 region_type = private name = "private_0x000000053f400000" filename = "" Region: id = 1100 start_va = 0x53f500000 end_va = 0x53f5fffff entry_point = 0x0 region_type = private name = "private_0x000000053f500000" filename = "" Region: id = 1101 start_va = 0x53f600000 end_va = 0x53f787fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000053f600000" filename = "" Region: id = 1102 start_va = 0x53f790000 end_va = 0x53f910fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000053f790000" filename = "" Region: id = 1103 start_va = 0x53f920000 end_va = 0x540d1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000053f920000" filename = "" Region: id = 1104 start_va = 0x540d20000 end_va = 0x540e56fff entry_point = 0x540d20000 region_type = mapped_file name = "windows.ui.xaml.resources.dll" filename = "\\Windows\\System32\\Windows.UI.Xaml.Resources.dll" (normalized: "c:\\windows\\system32\\windows.ui.xaml.resources.dll") Region: id = 1105 start_va = 0x540e60000 end_va = 0x540f3efff entry_point = 0x540e60000 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui") Region: id = 1106 start_va = 0x540f40000 end_va = 0x541276fff entry_point = 0x540f40000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 1107 start_va = 0x541280000 end_va = 0x54137ffff entry_point = 0x0 region_type = private name = "private_0x0000000541280000" filename = "" Region: id = 1108 start_va = 0x541380000 end_va = 0x54147ffff entry_point = 0x0 region_type = private name = "private_0x0000000541380000" filename = "" Region: id = 1109 start_va = 0x541480000 end_va = 0x54157ffff entry_point = 0x0 region_type = private name = "private_0x0000000541480000" filename = "" Region: id = 1110 start_va = 0x541580000 end_va = 0x54167ffff entry_point = 0x0 region_type = private name = "private_0x0000000541580000" filename = "" Region: id = 1111 start_va = 0x541680000 end_va = 0x54177ffff entry_point = 0x0 region_type = private name = "private_0x0000000541680000" filename = "" Region: id = 1112 start_va = 0x541780000 end_va = 0x54187ffff entry_point = 0x0 region_type = private name = "private_0x0000000541780000" filename = "" Region: id = 1113 start_va = 0x541880000 end_va = 0x541895fff entry_point = 0x541880000 region_type = mapped_file name = "resources.en-us.pri" filename = "\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\pris\\resources.en-US.pri" (normalized: "c:\\windows\\systemapps\\microsoft.windows.cortana_cw5n1h2txyewy\\pris\\resources.en-us.pri") Region: id = 1114 start_va = 0x5418a0000 end_va = 0x5418a3fff entry_point = 0x5418a0000 region_type = mapped_file name = "dictionary.xbf" filename = "\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Dictionary.xbf" (normalized: "c:\\windows\\systemapps\\microsoft.windows.cortana_cw5n1h2txyewy\\dictionary.xbf") Region: id = 1115 start_va = 0x5418b0000 end_va = 0x5418b4fff entry_point = 0x5418b0000 region_type = mapped_file name = "reactivecat1themeresources.xbf" filename = "\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Views\\ReactiveCat1ThemeResources.xbf" (normalized: "c:\\windows\\systemapps\\microsoft.windows.cortana_cw5n1h2txyewy\\views\\reactivecat1themeresources.xbf") Region: id = 1116 start_va = 0x5418c0000 end_va = 0x5418c1fff entry_point = 0x5418c0000 region_type = mapped_file name = "speechtextinputthemeresources.xbf" filename = "\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Views\\SpeechTextInputThemeResources.xbf" (normalized: "c:\\windows\\systemapps\\microsoft.windows.cortana_cw5n1h2txyewy\\views\\speechtextinputthemeresources.xbf") Region: id = 1117 start_va = 0x5418d0000 end_va = 0x5418d6fff entry_point = 0x0 region_type = private name = "private_0x00000005418d0000" filename = "" Region: id = 1118 start_va = 0x5418e0000 end_va = 0x5418e0fff entry_point = 0x5418e0000 region_type = mapped_file name = "cortanawindow.xbf" filename = "\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Views\\CortanaWindow.xbf" (normalized: "c:\\windows\\systemapps\\microsoft.windows.cortana_cw5n1h2txyewy\\views\\cortanawindow.xbf") Region: id = 1119 start_va = 0x5418f0000 end_va = 0x5418f7fff entry_point = 0x5418f0000 region_type = mapped_file name = "chrome.xbf" filename = "\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Views\\Chrome.xbf" (normalized: "c:\\windows\\systemapps\\microsoft.windows.cortana_cw5n1h2txyewy\\views\\chrome.xbf") Region: id = 1120 start_va = 0x541900000 end_va = 0x5419fffff entry_point = 0x0 region_type = private name = "private_0x0000000541900000" filename = "" Region: id = 1121 start_va = 0x541b00000 end_va = 0x541bfffff entry_point = 0x0 region_type = private name = "private_0x0000000541b00000" filename = "" Region: id = 1122 start_va = 0x541c00000 end_va = 0x5423fffff entry_point = 0x0 region_type = private name = "private_0x0000000541c00000" filename = "" Region: id = 1123 start_va = 0x542400000 end_va = 0x5424fffff entry_point = 0x0 region_type = private name = "private_0x0000000542400000" filename = "" Region: id = 1124 start_va = 0x542500000 end_va = 0x5425fffff entry_point = 0x0 region_type = private name = "private_0x0000000542500000" filename = "" Region: id = 1125 start_va = 0x542600000 end_va = 0x5426fffff entry_point = 0x0 region_type = private name = "private_0x0000000542600000" filename = "" Region: id = 1126 start_va = 0x542700000 end_va = 0x5427fffff entry_point = 0x0 region_type = private name = "private_0x0000000542700000" filename = "" Region: id = 1127 start_va = 0x542800000 end_va = 0x5428fffff entry_point = 0x0 region_type = private name = "private_0x0000000542800000" filename = "" Region: id = 1128 start_va = 0x542900000 end_va = 0x5429fffff entry_point = 0x0 region_type = private name = "private_0x0000000542900000" filename = "" Region: id = 1129 start_va = 0x542b00000 end_va = 0x542b60fff entry_point = 0x542b00000 region_type = mapped_file name = "shell32.dll.mui" filename = "\\Windows\\System32\\en-US\\shell32.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\shell32.dll.mui") Region: id = 1130 start_va = 0x542b80000 end_va = 0x542c7ffff entry_point = 0x0 region_type = private name = "private_0x0000000542b80000" filename = "" Region: id = 1131 start_va = 0x542c80000 end_va = 0x542c80fff entry_point = 0x542c80000 region_type = mapped_file name = "msxml6r.dll" filename = "\\Windows\\System32\\msxml6r.dll" (normalized: "c:\\windows\\system32\\msxml6r.dll") Region: id = 1132 start_va = 0x542c90000 end_va = 0x542d47fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000542c90000" filename = "" Region: id = 1133 start_va = 0x542d50000 end_va = 0x542d53fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000542d50000" filename = "" Region: id = 1134 start_va = 0x542d60000 end_va = 0x542d60fff entry_point = 0x542d60000 region_type = mapped_file name = "homeburgermenucontrol.xbf" filename = "\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Views\\HomeburgerMenuControl.xbf" (normalized: "c:\\windows\\systemapps\\microsoft.windows.cortana_cw5n1h2txyewy\\views\\homeburgermenucontrol.xbf") Region: id = 1135 start_va = 0x542d70000 end_va = 0x542d71fff entry_point = 0x542d70000 region_type = mapped_file name = "greetingscontrol.xbf" filename = "\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Views\\GreetingsControl.xbf" (normalized: "c:\\windows\\systemapps\\microsoft.windows.cortana_cw5n1h2txyewy\\views\\greetingscontrol.xbf") Region: id = 1136 start_va = 0x542d80000 end_va = 0x542d80fff entry_point = 0x542d80000 region_type = mapped_file name = "hostedwebviewcontrol.xbf" filename = "\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Views\\HostedWebViewControl.xbf" (normalized: "c:\\windows\\systemapps\\microsoft.windows.cortana_cw5n1h2txyewy\\views\\hostedwebviewcontrol.xbf") Region: id = 1137 start_va = 0x542d90000 end_va = 0x542d96fff entry_point = 0x0 region_type = private name = "private_0x0000000542d90000" filename = "" Region: id = 1138 start_va = 0x542da0000 end_va = 0x542da1fff entry_point = 0x542da0000 region_type = mapped_file name = "speechtextinputcontrol.xbf" filename = "\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Views\\SpeechTextInputControl.xbf" (normalized: "c:\\windows\\systemapps\\microsoft.windows.cortana_cw5n1h2txyewy\\views\\speechtextinputcontrol.xbf") Region: id = 1139 start_va = 0x542db0000 end_va = 0x542db0fff entry_point = 0x542db0000 region_type = mapped_file name = "searchboxcontrol.xbf" filename = "\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Views\\SearchBoxControl.xbf" (normalized: "c:\\windows\\systemapps\\microsoft.windows.cortana_cw5n1h2txyewy\\views\\searchboxcontrol.xbf") Region: id = 1140 start_va = 0x542dc0000 end_va = 0x542dc9fff entry_point = 0x542dc0000 region_type = mapped_file name = "windows.ui.xaml.dll.mui" filename = "\\Windows\\System32\\en-US\\windows.ui.xaml.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\windows.ui.xaml.dll.mui") Region: id = 1141 start_va = 0x542dd0000 end_va = 0x542dd0fff entry_point = 0x0 region_type = private name = "private_0x0000000542dd0000" filename = "" Region: id = 1142 start_va = 0x542de0000 end_va = 0x542de0fff entry_point = 0x0 region_type = private name = "private_0x0000000542de0000" filename = "" Region: id = 1143 start_va = 0x542df0000 end_va = 0x542df3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000542df0000" filename = "" Region: id = 1144 start_va = 0x542e00000 end_va = 0x542efffff entry_point = 0x0 region_type = private name = "private_0x0000000542e00000" filename = "" Region: id = 1145 start_va = 0x542f00000 end_va = 0x542ffffff entry_point = 0x0 region_type = private name = "private_0x0000000542f00000" filename = "" Region: id = 1146 start_va = 0x543000000 end_va = 0x5430fffff entry_point = 0x0 region_type = private name = "private_0x0000000543000000" filename = "" Region: id = 1147 start_va = 0x543100000 end_va = 0x5431fffff entry_point = 0x0 region_type = private name = "private_0x0000000543100000" filename = "" Region: id = 1148 start_va = 0x543200000 end_va = 0x543200fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000543200000" filename = "" Region: id = 1149 start_va = 0x543210000 end_va = 0x543216fff entry_point = 0x0 region_type = private name = "private_0x0000000543210000" filename = "" Region: id = 1150 start_va = 0x543220000 end_va = 0x543295fff entry_point = 0x543220000 region_type = mapped_file name = "~fontcache-system.dat" filename = "\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\FontCache\\~FontCache-System.dat" (normalized: "c:\\windows\\serviceprofiles\\localservice\\appdata\\local\\fontcache\\~fontcache-system.dat") Region: id = 1151 start_va = 0x5432a0000 end_va = 0x5432bffff entry_point = 0x0 region_type = private name = "private_0x00000005432a0000" filename = "" Region: id = 1152 start_va = 0x5432c0000 end_va = 0x5432c0fff entry_point = 0x0 region_type = private name = "private_0x00000005432c0000" filename = "" Region: id = 1153 start_va = 0x5432d0000 end_va = 0x5432d0fff entry_point = 0x0 region_type = private name = "private_0x00000005432d0000" filename = "" Region: id = 1154 start_va = 0x5432e0000 end_va = 0x5432e0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000005432e0000" filename = "" Region: id = 1155 start_va = 0x5432f0000 end_va = 0x5432f0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000005432f0000" filename = "" Region: id = 1156 start_va = 0x543300000 end_va = 0x5433fffff entry_point = 0x0 region_type = private name = "private_0x0000000543300000" filename = "" Region: id = 1157 start_va = 0x543400000 end_va = 0x5434fffff entry_point = 0x0 region_type = private name = "private_0x0000000543400000" filename = "" Region: id = 1158 start_va = 0x543500000 end_va = 0x5444fffff entry_point = 0x543500000 region_type = mapped_file name = "~fontcache-fontface.dat" filename = "\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\FontCache\\~FontCache-FontFace.dat" (normalized: "c:\\windows\\serviceprofiles\\localservice\\appdata\\local\\fontcache\\~fontcache-fontface.dat") Region: id = 1159 start_va = 0x544500000 end_va = 0x5445defff entry_point = 0x544500000 region_type = mapped_file name = "segoeui.ttf" filename = "\\Windows\\Fonts\\segoeui.ttf" (normalized: "c:\\windows\\fonts\\segoeui.ttf") Region: id = 1160 start_va = 0x5445e0000 end_va = 0x544ddffff entry_point = 0x5445e0000 region_type = mapped_file name = "~fontcache-s-1-5-21-1462094071-1423818996-289466292-1000.dat" filename = "\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\FontCache\\~FontCache-S-1-5-21-1462094071-1423818996-289466292-1000.dat" (normalized: "c:\\windows\\serviceprofiles\\localservice\\appdata\\local\\fontcache\\~fontcache-s-1-5-21-1462094071-1423818996-289466292-1000.dat") Region: id = 1161 start_va = 0x544de0000 end_va = 0xd44ddffff entry_point = 0x0 region_type = private name = "private_0x0000000544de0000" filename = "" Region: id = 1162 start_va = 0xd44de0000 end_va = 0xd44de0fff entry_point = 0x0 region_type = private name = "private_0x0000000d44de0000" filename = "" Region: id = 1163 start_va = 0xd44df0000 end_va = 0xd44dfffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000d44df0000" filename = "" Region: id = 1164 start_va = 0xd44e00000 end_va = 0xd44efffff entry_point = 0x0 region_type = private name = "private_0x0000000d44e00000" filename = "" Region: id = 1165 start_va = 0xd44f00000 end_va = 0xd44ffffff entry_point = 0x0 region_type = private name = "private_0x0000000d44f00000" filename = "" Region: id = 1166 start_va = 0xd45000000 end_va = 0xd4504ffff entry_point = 0x0 region_type = private name = "private_0x0000000d45000000" filename = "" Region: id = 1167 start_va = 0xd45050000 end_va = 0xd450affff entry_point = 0xd45050000 region_type = mapped_file name = "edgehtml.dll.mui" filename = "\\Windows\\System32\\en-US\\edgehtml.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\edgehtml.dll.mui") Region: id = 1168 start_va = 0xd450b0000 end_va = 0xd450bffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000d450b0000" filename = "" Region: id = 1169 start_va = 0xd450c0000 end_va = 0xd450c6fff entry_point = 0x0 region_type = private name = "private_0x0000000d450c0000" filename = "" Region: id = 1170 start_va = 0xd450d0000 end_va = 0xd451cffff entry_point = 0x0 region_type = private name = "private_0x0000000d450d0000" filename = "" Region: id = 1171 start_va = 0xd451d0000 end_va = 0xd451effff entry_point = 0x0 region_type = private name = "private_0x0000000d451d0000" filename = "" Region: id = 1172 start_va = 0xd451f0000 end_va = 0xd451fefff entry_point = 0xd451f0000 region_type = mapped_file name = "windows.foundation.winmd" filename = "\\Windows\\System32\\WinMetadata\\Windows.Foundation.winmd" (normalized: "c:\\windows\\system32\\winmetadata\\windows.foundation.winmd") Region: id = 1173 start_va = 0xd45200000 end_va = 0xd452fffff entry_point = 0x0 region_type = private name = "private_0x0000000d45200000" filename = "" Region: id = 1174 start_va = 0xd45300000 end_va = 0xd453fffff entry_point = 0x0 region_type = private name = "private_0x0000000d45300000" filename = "" Region: id = 1175 start_va = 0xd45400000 end_va = 0xd454fffff entry_point = 0x0 region_type = private name = "private_0x0000000d45400000" filename = "" Region: id = 1176 start_va = 0xd45500000 end_va = 0xd455fffff entry_point = 0x0 region_type = private name = "private_0x0000000d45500000" filename = "" Region: id = 1177 start_va = 0xd45600000 end_va = 0xd456fffff entry_point = 0x0 region_type = private name = "private_0x0000000d45600000" filename = "" Region: id = 1178 start_va = 0xd45700000 end_va = 0xd457fffff entry_point = 0x0 region_type = private name = "private_0x0000000d45700000" filename = "" Region: id = 1179 start_va = 0xd45800000 end_va = 0xd458fffff entry_point = 0x0 region_type = private name = "private_0x0000000d45800000" filename = "" Region: id = 1180 start_va = 0xd45900000 end_va = 0xd459fffff entry_point = 0x0 region_type = private name = "private_0x0000000d45900000" filename = "" Region: id = 1181 start_va = 0xd45a00000 end_va = 0xd45a1ffff entry_point = 0x0 region_type = private name = "private_0x0000000d45a00000" filename = "" Region: id = 1182 start_va = 0xd45a20000 end_va = 0xd45a6ffff entry_point = 0x0 region_type = private name = "private_0x0000000d45a20000" filename = "" Region: id = 1183 start_va = 0xd45a70000 end_va = 0xd45b6ffff entry_point = 0x0 region_type = private name = "private_0x0000000d45a70000" filename = "" Region: id = 1184 start_va = 0xd45b70000 end_va = 0xd45b8ffff entry_point = 0x0 region_type = private name = "private_0x0000000d45b70000" filename = "" Region: id = 1185 start_va = 0xd45b90000 end_va = 0xd45c8ffff entry_point = 0x0 region_type = private name = "private_0x0000000d45b90000" filename = "" Region: id = 1186 start_va = 0xd45c90000 end_va = 0xd45caffff entry_point = 0x0 region_type = private name = "private_0x0000000d45c90000" filename = "" Region: id = 1187 start_va = 0xd45cb0000 end_va = 0xd45ccffff entry_point = 0x0 region_type = private name = "private_0x0000000d45cb0000" filename = "" Region: id = 1188 start_va = 0xd45cd0000 end_va = 0xd45ceffff entry_point = 0x0 region_type = private name = "private_0x0000000d45cd0000" filename = "" Region: id = 1189 start_va = 0xd45cf0000 end_va = 0xd45d00fff entry_point = 0xd45cf0000 region_type = mapped_file name = "cortana.internal.search.winmd" filename = "\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Cortana.Internal.Search.winmd" (normalized: "c:\\windows\\systemapps\\microsoft.windows.cortana_cw5n1h2txyewy\\cortana.internal.search.winmd") Region: id = 1190 start_va = 0xd45d10000 end_va = 0xd45d2ffff entry_point = 0x0 region_type = private name = "private_0x0000000d45d10000" filename = "" Region: id = 1191 start_va = 0xd45d30000 end_va = 0xd45d4dfff entry_point = 0xd45d30000 region_type = mapped_file name = "windows.security.winmd" filename = "\\Windows\\System32\\WinMetadata\\Windows.Security.winmd" (normalized: "c:\\windows\\system32\\winmetadata\\windows.security.winmd") Region: id = 1192 start_va = 0xd45d50000 end_va = 0xd45e4ffff entry_point = 0x0 region_type = private name = "private_0x0000000d45d50000" filename = "" Region: id = 1193 start_va = 0xd45e50000 end_va = 0xd45e6ffff entry_point = 0x0 region_type = private name = "private_0x0000000d45e50000" filename = "" Region: id = 1194 start_va = 0xd45e70000 end_va = 0xd45e8afff entry_point = 0xd45e70000 region_type = mapped_file name = "windows.storage.winmd" filename = "\\Windows\\System32\\WinMetadata\\Windows.Storage.winmd" (normalized: "c:\\windows\\system32\\winmetadata\\windows.storage.winmd") Region: id = 1195 start_va = 0xd45e90000 end_va = 0xd45eaffff entry_point = 0x0 region_type = private name = "private_0x0000000d45e90000" filename = "" Region: id = 1196 start_va = 0xd45eb0000 end_va = 0xd45eb9fff entry_point = 0xd45eb0000 region_type = mapped_file name = "chakra.dll.mui" filename = "\\Windows\\System32\\en-US\\Chakra.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\chakra.dll.mui") Region: id = 1197 start_va = 0xd45ec0000 end_va = 0xd45edffff entry_point = 0x0 region_type = private name = "private_0x0000000d45ec0000" filename = "" Region: id = 1198 start_va = 0xd45ee0000 end_va = 0xd45efffff entry_point = 0x0 region_type = private name = "private_0x0000000d45ee0000" filename = "" Region: id = 1199 start_va = 0xd45f00000 end_va = 0xd45f1ffff entry_point = 0x0 region_type = private name = "private_0x0000000d45f00000" filename = "" Region: id = 1200 start_va = 0xd45f20000 end_va = 0xd45f3ffff entry_point = 0x0 region_type = private name = "private_0x0000000d45f20000" filename = "" Region: id = 1201 start_va = 0xd45f40000 end_va = 0xd45f5ffff entry_point = 0x0 region_type = private name = "private_0x0000000d45f40000" filename = "" Region: id = 1202 start_va = 0xd45f60000 end_va = 0xd45f7ffff entry_point = 0x0 region_type = private name = "private_0x0000000d45f60000" filename = "" Region: id = 1203 start_va = 0xd45f80000 end_va = 0xd45f9ffff entry_point = 0x0 region_type = private name = "private_0x0000000d45f80000" filename = "" Region: id = 1204 start_va = 0xd45fa0000 end_va = 0xd45fbffff entry_point = 0x0 region_type = private name = "private_0x0000000d45fa0000" filename = "" Region: id = 1205 start_va = 0xd45fe0000 end_va = 0xd45ffffff entry_point = 0x0 region_type = private name = "private_0x0000000d45fe0000" filename = "" Region: id = 1206 start_va = 0xd46000000 end_va = 0xd460fffff entry_point = 0x0 region_type = private name = "private_0x0000000d46000000" filename = "" Region: id = 1207 start_va = 0xd46100000 end_va = 0xd461fffff entry_point = 0x0 region_type = private name = "private_0x0000000d46100000" filename = "" Region: id = 1208 start_va = 0xd46200000 end_va = 0xd4621ffff entry_point = 0x0 region_type = private name = "private_0x0000000d46200000" filename = "" Region: id = 1209 start_va = 0xd46220000 end_va = 0xd4631ffff entry_point = 0x0 region_type = private name = "private_0x0000000d46220000" filename = "" Region: id = 1210 start_va = 0xd46320000 end_va = 0xd4633ffff entry_point = 0x0 region_type = private name = "private_0x0000000d46320000" filename = "" Region: id = 1211 start_va = 0xd46340000 end_va = 0xd4635ffff entry_point = 0x0 region_type = private name = "private_0x0000000d46340000" filename = "" Region: id = 1212 start_va = 0xd46360000 end_va = 0xd4637ffff entry_point = 0x0 region_type = private name = "private_0x0000000d46360000" filename = "" Region: id = 1213 start_va = 0xd46380000 end_va = 0xd4639ffff entry_point = 0x0 region_type = private name = "private_0x0000000d46380000" filename = "" Region: id = 1214 start_va = 0xd463a0000 end_va = 0xd463bffff entry_point = 0x0 region_type = private name = "private_0x0000000d463a0000" filename = "" Region: id = 1215 start_va = 0xd463c0000 end_va = 0xd463dffff entry_point = 0x0 region_type = private name = "private_0x0000000d463c0000" filename = "" Region: id = 1216 start_va = 0xd463e0000 end_va = 0xd463fffff entry_point = 0x0 region_type = private name = "private_0x0000000d463e0000" filename = "" Region: id = 1217 start_va = 0xd46400000 end_va = 0xd4641ffff entry_point = 0x0 region_type = private name = "private_0x0000000d46400000" filename = "" Region: id = 1218 start_va = 0xd46460000 end_va = 0xd4647ffff entry_point = 0x0 region_type = private name = "private_0x0000000d46460000" filename = "" Region: id = 1219 start_va = 0xd46480000 end_va = 0xd4649ffff entry_point = 0x0 region_type = private name = "private_0x0000000d46480000" filename = "" Region: id = 1220 start_va = 0xd464c0000 end_va = 0xd464dffff entry_point = 0x0 region_type = private name = "private_0x0000000d464c0000" filename = "" Region: id = 1221 start_va = 0xd464e0000 end_va = 0xd464fffff entry_point = 0x0 region_type = private name = "private_0x0000000d464e0000" filename = "" Region: id = 1222 start_va = 0xd46500000 end_va = 0xd4651ffff entry_point = 0x0 region_type = private name = "private_0x0000000d46500000" filename = "" Region: id = 1223 start_va = 0xd46520000 end_va = 0xd4653ffff entry_point = 0x0 region_type = private name = "private_0x0000000d46520000" filename = "" Region: id = 1224 start_va = 0xd46540000 end_va = 0xd4655ffff entry_point = 0x0 region_type = private name = "private_0x0000000d46540000" filename = "" Region: id = 1225 start_va = 0xd46560000 end_va = 0xd4657ffff entry_point = 0x0 region_type = private name = "private_0x0000000d46560000" filename = "" Region: id = 1226 start_va = 0xd46580000 end_va = 0xd4659ffff entry_point = 0x0 region_type = private name = "private_0x0000000d46580000" filename = "" Region: id = 1227 start_va = 0xd465a0000 end_va = 0xd465bffff entry_point = 0x0 region_type = private name = "private_0x0000000d465a0000" filename = "" Region: id = 1228 start_va = 0xd465c0000 end_va = 0xd465dffff entry_point = 0x0 region_type = private name = "private_0x0000000d465c0000" filename = "" Region: id = 1229 start_va = 0xd465e0000 end_va = 0xd465fffff entry_point = 0x0 region_type = private name = "private_0x0000000d465e0000" filename = "" Region: id = 1230 start_va = 0xd46600000 end_va = 0xd4661ffff entry_point = 0x0 region_type = private name = "private_0x0000000d46600000" filename = "" Region: id = 1231 start_va = 0xd46620000 end_va = 0xd4671ffff entry_point = 0x0 region_type = private name = "private_0x0000000d46620000" filename = "" Region: id = 1232 start_va = 0xd46720000 end_va = 0xd4673ffff entry_point = 0x0 region_type = private name = "private_0x0000000d46720000" filename = "" Region: id = 1233 start_va = 0xd46740000 end_va = 0xd4675ffff entry_point = 0x0 region_type = private name = "private_0x0000000d46740000" filename = "" Region: id = 1234 start_va = 0xd46760000 end_va = 0xd4677ffff entry_point = 0x0 region_type = private name = "private_0x0000000d46760000" filename = "" Region: id = 1235 start_va = 0xd46780000 end_va = 0xd4679ffff entry_point = 0x0 region_type = private name = "private_0x0000000d46780000" filename = "" Region: id = 1236 start_va = 0xd467a0000 end_va = 0xd467bffff entry_point = 0x0 region_type = private name = "private_0x0000000d467a0000" filename = "" Region: id = 1237 start_va = 0xd467e0000 end_va = 0xd467fffff entry_point = 0x0 region_type = private name = "private_0x0000000d467e0000" filename = "" Region: id = 1238 start_va = 0xd46800000 end_va = 0xd468fffff entry_point = 0x0 region_type = private name = "private_0x0000000d46800000" filename = "" Region: id = 1239 start_va = 0xd46900000 end_va = 0xd469fffff entry_point = 0x0 region_type = private name = "private_0x0000000d46900000" filename = "" Region: id = 1240 start_va = 0xd46a00000 end_va = 0xd46afffff entry_point = 0x0 region_type = private name = "private_0x0000000d46a00000" filename = "" Region: id = 1241 start_va = 0xd46b00000 end_va = 0xd46b1ffff entry_point = 0x0 region_type = private name = "private_0x0000000d46b00000" filename = "" Region: id = 1242 start_va = 0xd46b20000 end_va = 0xd46b3ffff entry_point = 0x0 region_type = private name = "private_0x0000000d46b20000" filename = "" Region: id = 1243 start_va = 0xd46b80000 end_va = 0xd46c7ffff entry_point = 0x0 region_type = private name = "private_0x0000000d46b80000" filename = "" Region: id = 1244 start_va = 0xd46c80000 end_va = 0xd46c9ffff entry_point = 0x0 region_type = private name = "private_0x0000000d46c80000" filename = "" Region: id = 1245 start_va = 0xd46ca0000 end_va = 0xd46cbffff entry_point = 0x0 region_type = private name = "private_0x0000000d46ca0000" filename = "" Region: id = 1246 start_va = 0xd46cc0000 end_va = 0xd46cdffff entry_point = 0x0 region_type = private name = "private_0x0000000d46cc0000" filename = "" Region: id = 1247 start_va = 0xd46ce0000 end_va = 0xd46cfffff entry_point = 0x0 region_type = private name = "private_0x0000000d46ce0000" filename = "" Region: id = 1248 start_va = 0xd46d00000 end_va = 0xd46d1ffff entry_point = 0x0 region_type = private name = "private_0x0000000d46d00000" filename = "" Region: id = 1249 start_va = 0xd46d20000 end_va = 0xd46d3ffff entry_point = 0x0 region_type = private name = "private_0x0000000d46d20000" filename = "" Region: id = 1250 start_va = 0xd46d40000 end_va = 0xd46d5ffff entry_point = 0x0 region_type = private name = "private_0x0000000d46d40000" filename = "" Region: id = 1251 start_va = 0xd46d60000 end_va = 0xd46d7ffff entry_point = 0x0 region_type = private name = "private_0x0000000d46d60000" filename = "" Region: id = 1252 start_va = 0xd46d80000 end_va = 0xd46d9ffff entry_point = 0x0 region_type = private name = "private_0x0000000d46d80000" filename = "" Region: id = 1253 start_va = 0xd46da0000 end_va = 0xd46dbffff entry_point = 0x0 region_type = private name = "private_0x0000000d46da0000" filename = "" Region: id = 1254 start_va = 0xd46dc0000 end_va = 0xd46ddffff entry_point = 0x0 region_type = private name = "private_0x0000000d46dc0000" filename = "" Region: id = 1255 start_va = 0xd46de0000 end_va = 0xd46dfffff entry_point = 0x0 region_type = private name = "private_0x0000000d46de0000" filename = "" Region: id = 1256 start_va = 0xd46e00000 end_va = 0xd46e1ffff entry_point = 0x0 region_type = private name = "private_0x0000000d46e00000" filename = "" Region: id = 1257 start_va = 0xd46e40000 end_va = 0xd46e5ffff entry_point = 0x0 region_type = private name = "private_0x0000000d46e40000" filename = "" Region: id = 1258 start_va = 0xd46e60000 end_va = 0xd46e7ffff entry_point = 0x0 region_type = private name = "private_0x0000000d46e60000" filename = "" Region: id = 1259 start_va = 0xd46e80000 end_va = 0xd46e9ffff entry_point = 0x0 region_type = private name = "private_0x0000000d46e80000" filename = "" Region: id = 1260 start_va = 0xd46ea0000 end_va = 0xd46ebffff entry_point = 0x0 region_type = private name = "private_0x0000000d46ea0000" filename = "" Region: id = 1261 start_va = 0xd46ec0000 end_va = 0xd46edffff entry_point = 0x0 region_type = private name = "private_0x0000000d46ec0000" filename = "" Region: id = 1262 start_va = 0xd46ee0000 end_va = 0xd46efffff entry_point = 0x0 region_type = private name = "private_0x0000000d46ee0000" filename = "" Region: id = 1263 start_va = 0xd46f00000 end_va = 0xd46f1ffff entry_point = 0x0 region_type = private name = "private_0x0000000d46f00000" filename = "" Region: id = 1264 start_va = 0xd46f20000 end_va = 0xd4701ffff entry_point = 0x0 region_type = private name = "private_0x0000000d46f20000" filename = "" Region: id = 1265 start_va = 0xd47020000 end_va = 0xd4703ffff entry_point = 0x0 region_type = private name = "private_0x0000000d47020000" filename = "" Region: id = 1266 start_va = 0xd47040000 end_va = 0xd4705ffff entry_point = 0x0 region_type = private name = "private_0x0000000d47040000" filename = "" Region: id = 1267 start_va = 0xd471a0000 end_va = 0xd471bffff entry_point = 0x0 region_type = private name = "private_0x0000000d471a0000" filename = "" Region: id = 1268 start_va = 0xd471c0000 end_va = 0xd471c1fff entry_point = 0x0 region_type = private name = "private_0x0000000d471c0000" filename = "" Region: id = 1269 start_va = 0xd471f0000 end_va = 0xd471f6fff entry_point = 0x0 region_type = private name = "private_0x0000000d471f0000" filename = "" Region: id = 1270 start_va = 0xd47200000 end_va = 0xd472fffff entry_point = 0x0 region_type = private name = "private_0x0000000d47200000" filename = "" Region: id = 1271 start_va = 0xd47300000 end_va = 0xd473fffff entry_point = 0x0 region_type = private name = "private_0x0000000d47300000" filename = "" Region: id = 1272 start_va = 0xd47400000 end_va = 0xd474fffff entry_point = 0x0 region_type = private name = "private_0x0000000d47400000" filename = "" Region: id = 1273 start_va = 0xd47500000 end_va = 0xd475fffff entry_point = 0x0 region_type = private name = "private_0x0000000d47500000" filename = "" Region: id = 1274 start_va = 0xd47620000 end_va = 0xd4771ffff entry_point = 0x0 region_type = private name = "private_0x0000000d47620000" filename = "" Region: id = 1275 start_va = 0xd47820000 end_va = 0xd4791ffff entry_point = 0x0 region_type = private name = "private_0x0000000d47820000" filename = "" Region: id = 1276 start_va = 0xd47920000 end_va = 0xd47b1ffff entry_point = 0x0 region_type = private name = "private_0x0000000d47920000" filename = "" Region: id = 1277 start_va = 0xd47b20000 end_va = 0xd47b20fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000d47b20000" filename = "" Region: id = 1278 start_va = 0xd47b30000 end_va = 0xd47b30fff entry_point = 0x0 region_type = private name = "private_0x0000000d47b30000" filename = "" Region: id = 1279 start_va = 0xd47b40000 end_va = 0xd47b4ffff entry_point = 0x0 region_type = private name = "private_0x0000000d47b40000" filename = "" Region: id = 1280 start_va = 0xd47b50000 end_va = 0xd47b5ffff entry_point = 0x0 region_type = private name = "private_0x0000000d47b50000" filename = "" Region: id = 1281 start_va = 0xd47b60000 end_va = 0xd47b6ffff entry_point = 0x0 region_type = private name = "private_0x0000000d47b60000" filename = "" Region: id = 1282 start_va = 0xd47b70000 end_va = 0xd47b73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000d47b70000" filename = "" Region: id = 1283 start_va = 0xd47b80000 end_va = 0xd47c7ffff entry_point = 0x0 region_type = private name = "private_0x0000000d47b80000" filename = "" Region: id = 1284 start_va = 0xd47c80000 end_va = 0xd47d19fff entry_point = 0x0 region_type = private name = "private_0x0000000d47c80000" filename = "" Region: id = 1285 start_va = 0xd47d20000 end_va = 0xd47e1ffff entry_point = 0x0 region_type = private name = "private_0x0000000d47d20000" filename = "" Region: id = 1286 start_va = 0xd47e20000 end_va = 0xd47e3ffff entry_point = 0x0 region_type = private name = "private_0x0000000d47e20000" filename = "" Region: id = 1287 start_va = 0xd47e40000 end_va = 0xd47e5ffff entry_point = 0x0 region_type = private name = "private_0x0000000d47e40000" filename = "" Region: id = 1288 start_va = 0xd47e60000 end_va = 0xd47e9ffff entry_point = 0x0 region_type = private name = "private_0x0000000d47e60000" filename = "" Region: id = 1289 start_va = 0xd47ea0000 end_va = 0xd47edffff entry_point = 0xd47ea0000 region_type = mapped_file name = "windows.ui.winmd" filename = "\\Windows\\System32\\WinMetadata\\Windows.UI.winmd" (normalized: "c:\\windows\\system32\\winmetadata\\windows.ui.winmd") Region: id = 1290 start_va = 0xd47ee0000 end_va = 0xd47eeefff entry_point = 0xd47ee0000 region_type = mapped_file name = "windows.system.winmd" filename = "\\Windows\\System32\\WinMetadata\\Windows.System.winmd" (normalized: "c:\\windows\\system32\\winmetadata\\windows.system.winmd") Region: id = 1291 start_va = 0xd47ef0000 end_va = 0xd47f0afff entry_point = 0xd47ef0000 region_type = mapped_file name = "windows.web.winmd" filename = "\\Windows\\System32\\WinMetadata\\Windows.Web.winmd" (normalized: "c:\\windows\\system32\\winmetadata\\windows.web.winmd") Region: id = 1292 start_va = 0xd47f10000 end_va = 0xd4800ffff entry_point = 0x0 region_type = private name = "private_0x0000000d47f10000" filename = "" Region: id = 1293 start_va = 0xd48010000 end_va = 0xd48012fff entry_point = 0xd48010000 region_type = mapped_file name = "mswsock.dll.mui" filename = "\\Windows\\System32\\en-US\\mswsock.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\mswsock.dll.mui") Region: id = 1294 start_va = 0xd48030000 end_va = 0xd4812ffff entry_point = 0x0 region_type = private name = "private_0x0000000d48030000" filename = "" Region: id = 1295 start_va = 0xd48130000 end_va = 0xd48139fff entry_point = 0xd48130000 region_type = mapped_file name = "crypt32.dll.mui" filename = "\\Windows\\System32\\en-US\\crypt32.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\crypt32.dll.mui") Region: id = 1296 start_va = 0xd48200000 end_va = 0xd482fffff entry_point = 0x0 region_type = private name = "private_0x0000000d48200000" filename = "" Region: id = 1297 start_va = 0xd48300000 end_va = 0xd483fffff entry_point = 0x0 region_type = private name = "private_0x0000000d48300000" filename = "" Region: id = 1298 start_va = 0x7ff7afc80000 end_va = 0x7ff7afcb4fff entry_point = 0x0 region_type = private name = "private_0x00007ff7afc80000" filename = "" Region: id = 1299 start_va = 0x7ff7c8650000 end_va = 0x7ff7c865ffff entry_point = 0x0 region_type = private name = "private_0x00007ff7c8650000" filename = "" Region: id = 1300 start_va = 0x7ff7c8664000 end_va = 0x7ff7c8665fff entry_point = 0x0 region_type = private name = "private_0x00007ff7c8664000" filename = "" Region: id = 1301 start_va = 0x7ff7c8666000 end_va = 0x7ff7c8667fff entry_point = 0x0 region_type = private name = "private_0x00007ff7c8666000" filename = "" Region: id = 1302 start_va = 0x7ff7c8668000 end_va = 0x7ff7c8669fff entry_point = 0x0 region_type = private name = "private_0x00007ff7c8668000" filename = "" Region: id = 1303 start_va = 0x7ff7c866a000 end_va = 0x7ff7c866bfff entry_point = 0x0 region_type = private name = "private_0x00007ff7c866a000" filename = "" Region: id = 1304 start_va = 0x7ff7c866c000 end_va = 0x7ff7c866dfff entry_point = 0x0 region_type = private name = "private_0x00007ff7c866c000" filename = "" Region: id = 1305 start_va = 0x7ff7c8670000 end_va = 0x7ff7c8671fff entry_point = 0x0 region_type = private name = "private_0x00007ff7c8670000" filename = "" Region: id = 1306 start_va = 0x7ff7c8672000 end_va = 0x7ff7c8673fff entry_point = 0x0 region_type = private name = "private_0x00007ff7c8672000" filename = "" Region: id = 1307 start_va = 0x7ff7c8674000 end_va = 0x7ff7c8675fff entry_point = 0x0 region_type = private name = "private_0x00007ff7c8674000" filename = "" Region: id = 1308 start_va = 0x7ff7c8676000 end_va = 0x7ff7c8677fff entry_point = 0x0 region_type = private name = "private_0x00007ff7c8676000" filename = "" Region: id = 1309 start_va = 0x7ff7c8678000 end_va = 0x7ff7c8679fff entry_point = 0x0 region_type = private name = "private_0x00007ff7c8678000" filename = "" Region: id = 1310 start_va = 0x7ff7c867a000 end_va = 0x7ff7c867bfff entry_point = 0x0 region_type = private name = "private_0x00007ff7c867a000" filename = "" Region: id = 1311 start_va = 0x7ff7c867c000 end_va = 0x7ff7c867dfff entry_point = 0x0 region_type = private name = "private_0x00007ff7c867c000" filename = "" Region: id = 1312 start_va = 0x7ff7c867e000 end_va = 0x7ff7c867ffff entry_point = 0x0 region_type = private name = "private_0x00007ff7c867e000" filename = "" Region: id = 1313 start_va = 0x7ff7c8680000 end_va = 0x7ff7c8681fff entry_point = 0x0 region_type = private name = "private_0x00007ff7c8680000" filename = "" Region: id = 1314 start_va = 0x7ff7c8682000 end_va = 0x7ff7c8683fff entry_point = 0x0 region_type = private name = "private_0x00007ff7c8682000" filename = "" Region: id = 1315 start_va = 0x7ff7c8684000 end_va = 0x7ff7c8685fff entry_point = 0x0 region_type = private name = "private_0x00007ff7c8684000" filename = "" Region: id = 1316 start_va = 0x7ff7c8686000 end_va = 0x7ff7c8687fff entry_point = 0x0 region_type = private name = "private_0x00007ff7c8686000" filename = "" Region: id = 1317 start_va = 0x7ff7c8688000 end_va = 0x7ff7c8689fff entry_point = 0x0 region_type = private name = "private_0x00007ff7c8688000" filename = "" Region: id = 1318 start_va = 0x7ff7c868c000 end_va = 0x7ff7c868dfff entry_point = 0x0 region_type = private name = "private_0x00007ff7c868c000" filename = "" Region: id = 1319 start_va = 0x7ff7c868e000 end_va = 0x7ff7c868ffff entry_point = 0x0 region_type = private name = "private_0x00007ff7c868e000" filename = "" Region: id = 1320 start_va = 0x7ff7c8690000 end_va = 0x7ff7c8691fff entry_point = 0x0 region_type = private name = "private_0x00007ff7c8690000" filename = "" Region: id = 1321 start_va = 0x7ff7c8692000 end_va = 0x7ff7c8693fff entry_point = 0x0 region_type = private name = "private_0x00007ff7c8692000" filename = "" Region: id = 1322 start_va = 0x7ff7c8694000 end_va = 0x7ff7c8695fff entry_point = 0x0 region_type = private name = "private_0x00007ff7c8694000" filename = "" Region: id = 1323 start_va = 0x7ff7c8698000 end_va = 0x7ff7c8699fff entry_point = 0x0 region_type = private name = "private_0x00007ff7c8698000" filename = "" Region: id = 1324 start_va = 0x7ff7c869a000 end_va = 0x7ff7c869bfff entry_point = 0x0 region_type = private name = "private_0x00007ff7c869a000" filename = "" Region: id = 1325 start_va = 0x7ff7c869c000 end_va = 0x7ff7c869dfff entry_point = 0x0 region_type = private name = "private_0x00007ff7c869c000" filename = "" Region: id = 1326 start_va = 0x7ff7c869e000 end_va = 0x7ff7c869ffff entry_point = 0x0 region_type = private name = "private_0x00007ff7c869e000" filename = "" Region: id = 1327 start_va = 0x7ff7c86a0000 end_va = 0x7ff7c879ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff7c86a0000" filename = "" Region: id = 1328 start_va = 0x7ff7c87a0000 end_va = 0x7ff7c87c2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff7c87a0000" filename = "" Region: id = 1329 start_va = 0x7ff7c87c4000 end_va = 0x7ff7c87c5fff entry_point = 0x0 region_type = private name = "private_0x00007ff7c87c4000" filename = "" Region: id = 1330 start_va = 0x7ff7c87c6000 end_va = 0x7ff7c87c7fff entry_point = 0x0 region_type = private name = "private_0x00007ff7c87c6000" filename = "" Region: id = 1331 start_va = 0x7ff7c87c8000 end_va = 0x7ff7c87c9fff entry_point = 0x0 region_type = private name = "private_0x00007ff7c87c8000" filename = "" Region: id = 1332 start_va = 0x7ff7c87ca000 end_va = 0x7ff7c87cbfff entry_point = 0x0 region_type = private name = "private_0x00007ff7c87ca000" filename = "" Region: id = 1333 start_va = 0x7ff7c87cc000 end_va = 0x7ff7c87cdfff entry_point = 0x0 region_type = private name = "private_0x00007ff7c87cc000" filename = "" Region: id = 1334 start_va = 0x7ff7c87ce000 end_va = 0x7ff7c87cefff entry_point = 0x0 region_type = private name = "private_0x00007ff7c87ce000" filename = "" Region: id = 1335 start_va = 0x7ff7c8d90000 end_va = 0x7ff7c94b7fff entry_point = 0x7ff7c8d90000 region_type = mapped_file name = "searchui.exe" filename = "\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\SearchUI.exe" (normalized: "c:\\windows\\systemapps\\microsoft.windows.cortana_cw5n1h2txyewy\\searchui.exe") Region: id = 1336 start_va = 0x7ff8d7c60000 end_va = 0x7ff8d7c9cfff entry_point = 0x7ff8d7c60000 region_type = mapped_file name = "mlang.dll" filename = "\\Windows\\System32\\mlang.dll" (normalized: "c:\\windows\\system32\\mlang.dll") Region: id = 1337 start_va = 0x7ff8d7ca0000 end_va = 0x7ff8d83d6fff entry_point = 0x7ff8d7ca0000 region_type = mapped_file name = "chakra.dll" filename = "\\Windows\\System32\\Chakra.dll" (normalized: "c:\\windows\\system32\\chakra.dll") Region: id = 1338 start_va = 0x7ff8d83e0000 end_va = 0x7ff8d98d1fff entry_point = 0x7ff8d83e0000 region_type = mapped_file name = "edgehtml.dll" filename = "\\Windows\\System32\\edgehtml.dll" (normalized: "c:\\windows\\system32\\edgehtml.dll") Region: id = 1339 start_va = 0x7ff8d9c70000 end_va = 0x7ff8d9e9ffff entry_point = 0x7ff8d9c70000 region_type = mapped_file name = "remindersui.dll" filename = "\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\RemindersUI.dll" (normalized: "c:\\windows\\systemapps\\microsoft.windows.cortana_cw5n1h2txyewy\\remindersui.dll") Region: id = 1340 start_va = 0x7ff8d9ea0000 end_va = 0x7ff8d9eabfff entry_point = 0x7ff8d9ea0000 region_type = mapped_file name = "windows.applicationmodel.background.timebroker.dll" filename = "\\Windows\\System32\\Windows.ApplicationModel.Background.TimeBroker.dll" (normalized: "c:\\windows\\system32\\windows.applicationmodel.background.timebroker.dll") Region: id = 1341 start_va = 0x7ff8da1f0000 end_va = 0x7ff8da4c7fff entry_point = 0x7ff8da1f0000 region_type = mapped_file name = "sapi_onecore.dll" filename = "\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore.dll" (normalized: "c:\\windows\\system32\\speech_onecore\\common\\sapi_onecore.dll") Region: id = 1342 start_va = 0x7ff8da4d0000 end_va = 0x7ff8da4e0fff entry_point = 0x7ff8da4d0000 region_type = mapped_file name = "geolocatorhelper.dll" filename = "\\Windows\\System32\\GeoLocatorHelper.dll" (normalized: "c:\\windows\\system32\\geolocatorhelper.dll") Region: id = 1343 start_va = 0x7ff8da4f0000 end_va = 0x7ff8da61efff entry_point = 0x7ff8da4f0000 region_type = mapped_file name = "remotenaturallanguage.dll" filename = "\\Windows\\System32\\RemoteNaturalLanguage.dll" (normalized: "c:\\windows\\system32\\remotenaturallanguage.dll") Region: id = 1344 start_va = 0x7ff8da620000 end_va = 0x7ff8da7acfff entry_point = 0x7ff8da620000 region_type = mapped_file name = "windows.media.speech.dll" filename = "\\Windows\\System32\\Windows.Media.Speech.dll" (normalized: "c:\\windows\\system32\\windows.media.speech.dll") Region: id = 1345 start_va = 0x7ff8daa00000 end_va = 0x7ff8daa2afff entry_point = 0x7ff8daa00000 region_type = mapped_file name = "personax.dll" filename = "\\Windows\\System32\\PersonaX.dll" (normalized: "c:\\windows\\system32\\personax.dll") Region: id = 1346 start_va = 0x7ff8daa30000 end_va = 0x7ff8daae2fff entry_point = 0x7ff8daa30000 region_type = mapped_file name = "windows.security.authentication.onlineid.dll" filename = "\\Windows\\System32\\Windows.Security.Authentication.OnlineId.dll" (normalized: "c:\\windows\\system32\\windows.security.authentication.onlineid.dll") Region: id = 1347 start_va = 0x7ff8daaf0000 end_va = 0x7ff8dab23fff entry_point = 0x7ff8daaf0000 region_type = mapped_file name = "windows.applicationmodel.dll" filename = "\\Windows\\System32\\Windows.ApplicationModel.dll" (normalized: "c:\\windows\\system32\\windows.applicationmodel.dll") Region: id = 1348 start_va = 0x7ff8dab30000 end_va = 0x7ff8dac7dfff entry_point = 0x7ff8dab30000 region_type = mapped_file name = "windows.web.http.dll" filename = "\\Windows\\System32\\Windows.Web.Http.dll" (normalized: "c:\\windows\\system32\\windows.web.http.dll") Region: id = 1349 start_va = 0x7ff8dac80000 end_va = 0x7ff8dac9dfff entry_point = 0x7ff8dac80000 region_type = mapped_file name = "bingidentitymanagerinternal.dll" filename = "\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\BingIdentityManagerInternal.dll" (normalized: "c:\\windows\\systemapps\\microsoft.windows.cortana_cw5n1h2txyewy\\bingidentitymanagerinternal.dll") Region: id = 1350 start_va = 0x7ff8daca0000 end_va = 0x7ff8dacd2fff entry_point = 0x7ff8daca0000 region_type = mapped_file name = "biwinrt.dll" filename = "\\Windows\\System32\\biwinrt.dll" (normalized: "c:\\windows\\system32\\biwinrt.dll") Region: id = 1351 start_va = 0x7ff8dace0000 end_va = 0x7ff8db32afff entry_point = 0x7ff8dace0000 region_type = mapped_file name = "cortanaapi.dll" filename = "\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\CortanaApi.dll" (normalized: "c:\\windows\\systemapps\\microsoft.windows.cortana_cw5n1h2txyewy\\cortanaapi.dll") Region: id = 1352 start_va = 0x7ff8db910000 end_va = 0x7ff8db93bfff entry_point = 0x7ff8db910000 region_type = mapped_file name = "winmmbase.dll" filename = "\\Windows\\System32\\winmmbase.dll" (normalized: "c:\\windows\\system32\\winmmbase.dll") Region: id = 1353 start_va = 0x7ff8dba90000 end_va = 0x7ff8dbae9fff entry_point = 0x7ff8dba90000 region_type = mapped_file name = "windows.graphics.dll" filename = "\\Windows\\System32\\Windows.Graphics.dll" (normalized: "c:\\windows\\system32\\windows.graphics.dll") Region: id = 1354 start_va = 0x7ff8dbaf0000 end_va = 0x7ff8dbb42fff entry_point = 0x7ff8dbaf0000 region_type = mapped_file name = "windows.storage.applicationdata.dll" filename = "\\Windows\\System32\\Windows.Storage.ApplicationData.dll" (normalized: "c:\\windows\\system32\\windows.storage.applicationdata.dll") Region: id = 1355 start_va = 0x7ff8dbb50000 end_va = 0x7ff8dbb59fff entry_point = 0x7ff8dbb50000 region_type = mapped_file name = "fontgroupsoverride.dll" filename = "\\Windows\\System32\\fontgroupsoverride.dll" (normalized: "c:\\windows\\system32\\fontgroupsoverride.dll") Region: id = 1356 start_va = 0x7ff8dbb60000 end_va = 0x7ff8dbbd7fff entry_point = 0x7ff8dbb60000 region_type = mapped_file name = "cortana.core.dll" filename = "\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Cortana.Core.dll" (normalized: "c:\\windows\\systemapps\\microsoft.windows.cortana_cw5n1h2txyewy\\cortana.core.dll") Region: id = 1357 start_va = 0x7ff8dbbe0000 end_va = 0x7ff8dbbf7fff entry_point = 0x7ff8dbbe0000 region_type = mapped_file name = "windows.globalization.fontgroups.dll" filename = "\\Windows\\System32\\Windows.Globalization.Fontgroups.dll" (normalized: "c:\\windows\\system32\\windows.globalization.fontgroups.dll") Region: id = 1358 start_va = 0x7ff8dcc90000 end_va = 0x7ff8dcd3bfff entry_point = 0x7ff8dcc90000 region_type = mapped_file name = "windows.networking.connectivity.dll" filename = "\\Windows\\System32\\Windows.Networking.Connectivity.dll" (normalized: "c:\\windows\\system32\\windows.networking.connectivity.dll") Region: id = 1359 start_va = 0x7ff8dcd40000 end_va = 0x7ff8dcd54fff entry_point = 0x7ff8dcd40000 region_type = mapped_file name = "profext.dll" filename = "\\Windows\\System32\\profext.dll" (normalized: "c:\\windows\\system32\\profext.dll") Region: id = 1360 start_va = 0x7ff8deb70000 end_va = 0x7ff8debb5fff entry_point = 0x7ff8deb70000 region_type = mapped_file name = "dataexchange.dll" filename = "\\Windows\\System32\\DataExchange.dll" (normalized: "c:\\windows\\system32\\dataexchange.dll") Region: id = 1361 start_va = 0x7ff8df0c0000 end_va = 0x7ff8df179fff entry_point = 0x7ff8df0c0000 region_type = mapped_file name = "twinapi.dll" filename = "\\Windows\\System32\\twinapi.dll" (normalized: "c:\\windows\\system32\\twinapi.dll") Region: id = 1362 start_va = 0x7ff8df640000 end_va = 0x7ff8dfaa9fff entry_point = 0x7ff8df640000 region_type = mapped_file name = "actxprxy.dll" filename = "\\Windows\\System32\\actxprxy.dll" (normalized: "c:\\windows\\system32\\actxprxy.dll") Region: id = 1363 start_va = 0x7ff8dfab0000 end_va = 0x7ff8dfd10fff entry_point = 0x7ff8dfab0000 region_type = mapped_file name = "coreuicomponents.dll" filename = "\\Windows\\System32\\CoreUIComponents.dll" (normalized: "c:\\windows\\system32\\coreuicomponents.dll") Region: id = 1364 start_va = 0x7ff8dff00000 end_va = 0x7ff8e01a6fff entry_point = 0x7ff8dff00000 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\System32\\wininet.dll" (normalized: "c:\\windows\\system32\\wininet.dll") Region: id = 1365 start_va = 0x7ff8e0a60000 end_va = 0x7ff8e0bf6fff entry_point = 0x7ff8e0a60000 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\System32\\urlmon.dll" (normalized: "c:\\windows\\system32\\urlmon.dll") Region: id = 1366 start_va = 0x7ff8e0f80000 end_va = 0x7ff8e0f94fff entry_point = 0x7ff8e0f80000 region_type = mapped_file name = "ondemandconnroutehelper.dll" filename = "\\Windows\\System32\\OnDemandConnRouteHelper.dll" (normalized: "c:\\windows\\system32\\ondemandconnroutehelper.dll") Region: id = 1367 start_va = 0x7ff8e1900000 end_va = 0x7ff8e1930fff entry_point = 0x7ff8e1900000 region_type = mapped_file name = "onlineservices.dll" filename = "\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\OnlineServices.dll" (normalized: "c:\\windows\\systemapps\\microsoft.windows.cortana_cw5n1h2txyewy\\onlineservices.dll") Region: id = 1368 start_va = 0x7ff8e1c70000 end_va = 0x7ff8e1ee6fff entry_point = 0x7ff8e1c70000 region_type = mapped_file name = "msxml6.dll" filename = "\\Windows\\System32\\msxml6.dll" (normalized: "c:\\windows\\system32\\msxml6.dll") Region: id = 1369 start_va = 0x7ff8e2b20000 end_va = 0x7ff8e2b4dfff entry_point = 0x7ff8e2b20000 region_type = mapped_file name = "globinputhost.dll" filename = "\\Windows\\System32\\globinputhost.dll" (normalized: "c:\\windows\\system32\\globinputhost.dll") Region: id = 1370 start_va = 0x7ff8e2b50000 end_va = 0x7ff8e2e6ffff entry_point = 0x7ff8e2b50000 region_type = mapped_file name = "msftedit.dll" filename = "\\Windows\\System32\\msftedit.dll" (normalized: "c:\\windows\\system32\\msftedit.dll") Region: id = 1371 start_va = 0x7ff8e2ea0000 end_va = 0x7ff8e2ea9fff entry_point = 0x7ff8e2ea0000 region_type = mapped_file name = "rasadhlp.dll" filename = "\\Windows\\System32\\rasadhlp.dll" (normalized: "c:\\windows\\system32\\rasadhlp.dll") Region: id = 1372 start_va = 0x7ff8e2ff0000 end_va = 0x7ff8e3004fff entry_point = 0x7ff8e2ff0000 region_type = mapped_file name = "threadpoolwinrt.dll" filename = "\\Windows\\System32\\threadpoolwinrt.dll" (normalized: "c:\\windows\\system32\\threadpoolwinrt.dll") Region: id = 1373 start_va = 0x7ff8e3070000 end_va = 0x7ff8e30f8fff entry_point = 0x7ff8e3070000 region_type = mapped_file name = "directmanipulation.dll" filename = "\\Windows\\System32\\directmanipulation.dll" (normalized: "c:\\windows\\system32\\directmanipulation.dll") Region: id = 1374 start_va = 0x7ff8e3170000 end_va = 0x7ff8e3183fff entry_point = 0x7ff8e3170000 region_type = mapped_file name = "mskeyprotect.dll" filename = "\\Windows\\System32\\mskeyprotect.dll" (normalized: "c:\\windows\\system32\\mskeyprotect.dll") Region: id = 1375 start_va = 0x7ff8e3660000 end_va = 0x7ff8e37e5fff entry_point = 0x7ff8e3660000 region_type = mapped_file name = "windows.globalization.dll" filename = "\\Windows\\System32\\Windows.Globalization.dll" (normalized: "c:\\windows\\system32\\windows.globalization.dll") Region: id = 1376 start_va = 0x7ff8e37f0000 end_va = 0x7ff8e3a48fff entry_point = 0x7ff8e37f0000 region_type = mapped_file name = "dwrite.dll" filename = "\\Windows\\System32\\DWrite.dll" (normalized: "c:\\windows\\system32\\dwrite.dll") Region: id = 1377 start_va = 0x7ff8e3c30000 end_va = 0x7ff8e3fa5fff entry_point = 0x7ff8e3c30000 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" (normalized: "c:\\windows\\system32\\iertutil.dll") Region: id = 1378 start_va = 0x7ff8e3fb0000 end_va = 0x7ff8e4fa6fff entry_point = 0x7ff8e3fb0000 region_type = mapped_file name = "windows.ui.xaml.dll" filename = "\\Windows\\System32\\Windows.UI.Xaml.dll" (normalized: "c:\\windows\\system32\\windows.ui.xaml.dll") Region: id = 1379 start_va = 0x7ff8e4fb0000 end_va = 0x7ff8e504dfff entry_point = 0x7ff8e4fb0000 region_type = mapped_file name = "windows.ui.dll" filename = "\\Windows\\System32\\Windows.UI.dll" (normalized: "c:\\windows\\system32\\windows.ui.dll") Region: id = 1380 start_va = 0x7ff8e5050000 end_va = 0x7ff8e515efff entry_point = 0x7ff8e5050000 region_type = mapped_file name = "mrmcorer.dll" filename = "\\Windows\\System32\\MrmCoreR.dll" (normalized: "c:\\windows\\system32\\mrmcorer.dll") Region: id = 1381 start_va = 0x7ff8e5160000 end_va = 0x7ff8e51c9fff entry_point = 0x7ff8e5160000 region_type = mapped_file name = "wincorlib.dll" filename = "\\Windows\\System32\\wincorlib.dll" (normalized: "c:\\windows\\system32\\wincorlib.dll") Region: id = 1382 start_va = 0x7ff8e52f0000 end_va = 0x7ff8e530efff entry_point = 0x7ff8e52f0000 region_type = mapped_file name = "ncryptsslp.dll" filename = "\\Windows\\System32\\ncryptsslp.dll" (normalized: "c:\\windows\\system32\\ncryptsslp.dll") Region: id = 1383 start_va = 0x7ff8e5430000 end_va = 0x7ff8e5467fff entry_point = 0x7ff8e5430000 region_type = mapped_file name = "rometadata.dll" filename = "\\Windows\\System32\\rometadata.dll" (normalized: "c:\\windows\\system32\\rometadata.dll") Region: id = 1384 start_va = 0x7ff8e5470000 end_va = 0x7ff8e547ffff entry_point = 0x7ff8e5470000 region_type = mapped_file name = "msimtf.dll" filename = "\\Windows\\System32\\msimtf.dll" (normalized: "c:\\windows\\system32\\msimtf.dll") Region: id = 1385 start_va = 0x7ff8e5dd0000 end_va = 0x7ff8e5ea5fff entry_point = 0x7ff8e5dd0000 region_type = mapped_file name = "winhttp.dll" filename = "\\Windows\\System32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll") Region: id = 1386 start_va = 0x7ff8e60a0000 end_va = 0x7ff8e6131fff entry_point = 0x7ff8e60a0000 region_type = mapped_file name = "msvcp110_win.dll" filename = "\\Windows\\System32\\msvcp110_win.dll" (normalized: "c:\\windows\\system32\\msvcp110_win.dll") Region: id = 1387 start_va = 0x7ff8e6140000 end_va = 0x7ff8e6178fff entry_point = 0x7ff8e6140000 region_type = mapped_file name = "policymanager.dll" filename = "\\Windows\\System32\\policymanager.dll" (normalized: "c:\\windows\\system32\\policymanager.dll") Region: id = 1388 start_va = 0x7ff8e6190000 end_va = 0x7ff8e6198fff entry_point = 0x7ff8e6190000 region_type = mapped_file name = "commstypehelperutil_ca.dll" filename = "\\Windows\\System32\\CommsTypeHelperUtil_ca.dll" (normalized: "c:\\windows\\system32\\commstypehelperutil_ca.dll") Region: id = 1389 start_va = 0x7ff8e61a0000 end_va = 0x7ff8e61bbfff entry_point = 0x7ff8e61a0000 region_type = mapped_file name = "aistokenmanager.dll" filename = "\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AISTokenManager.dll" (normalized: "c:\\windows\\systemapps\\microsoft.windows.cortana_cw5n1h2txyewy\\aistokenmanager.dll") Region: id = 1390 start_va = 0x7ff8e61c0000 end_va = 0x7ff8e61d1fff entry_point = 0x7ff8e61c0000 region_type = mapped_file name = "windows.cortana.pal.desktop.dll" filename = "\\Windows\\System32\\Windows.Cortana.PAL.Desktop.dll" (normalized: "c:\\windows\\system32\\windows.cortana.pal.desktop.dll") Region: id = 1391 start_va = 0x7ff8e61e0000 end_va = 0x7ff8e6202fff entry_point = 0x7ff8e61e0000 region_type = mapped_file name = "bingconfigurationclient.dll" filename = "\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\BingConfigurationClient.dll" (normalized: "c:\\windows\\systemapps\\microsoft.windows.cortana_cw5n1h2txyewy\\bingconfigurationclient.dll") Region: id = 1392 start_va = 0x7ff8e6330000 end_va = 0x7ff8e6365fff entry_point = 0x7ff8e6330000 region_type = mapped_file name = "xmllite.dll" filename = "\\Windows\\System32\\xmllite.dll" (normalized: "c:\\windows\\system32\\xmllite.dll") Region: id = 1393 start_va = 0x7ff8e6640000 end_va = 0x7ff8e6b84fff entry_point = 0x7ff8e6640000 region_type = mapped_file name = "d2d1.dll" filename = "\\Windows\\System32\\d2d1.dll" (normalized: "c:\\windows\\system32\\d2d1.dll") Region: id = 1394 start_va = 0x7ff8e7160000 end_va = 0x7ff8e71c7fff entry_point = 0x7ff8e7160000 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 1395 start_va = 0x7ff8e7430000 end_va = 0x7ff8e7560fff entry_point = 0x7ff8e7430000 region_type = mapped_file name = "wintypes.dll" filename = "\\Windows\\System32\\WinTypes.dll" (normalized: "c:\\windows\\system32\\wintypes.dll") Region: id = 1396 start_va = 0x7ff8e79b0000 end_va = 0x7ff8e7b32fff entry_point = 0x7ff8e79b0000 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 1397 start_va = 0x7ff8e7b40000 end_va = 0x7ff8e7bb1fff entry_point = 0x7ff8e7b40000 region_type = mapped_file name = "mmdevapi.dll" filename = "\\Windows\\System32\\MMDevAPI.dll" (normalized: "c:\\windows\\system32\\mmdevapi.dll") Region: id = 1398 start_va = 0x7ff8e8460000 end_va = 0x7ff8e846afff entry_point = 0x7ff8e8460000 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll") Region: id = 1399 start_va = 0x7ff8e8480000 end_va = 0x7ff8e84b7fff entry_point = 0x7ff8e8480000 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 1400 start_va = 0x7ff8e8860000 end_va = 0x7ff8e8acdfff entry_point = 0x7ff8e8860000 region_type = mapped_file name = "d3d10warp.dll" filename = "\\Windows\\System32\\d3d10warp.dll" (normalized: "c:\\windows\\system32\\d3d10warp.dll") Region: id = 1401 start_va = 0x7ff8e8af0000 end_va = 0x7ff8e8b55fff entry_point = 0x7ff8e8af0000 region_type = mapped_file name = "bcp47langs.dll" filename = "\\Windows\\System32\\BCP47Langs.dll" (normalized: "c:\\windows\\system32\\bcp47langs.dll") Region: id = 1402 start_va = 0x7ff8e8c60000 end_va = 0x7ff8e8cfbfff entry_point = 0x7ff8e8c60000 region_type = mapped_file name = "dxgi.dll" filename = "\\Windows\\System32\\dxgi.dll" (normalized: "c:\\windows\\system32\\dxgi.dll") Region: id = 1403 start_va = 0x7ff8e8d00000 end_va = 0x7ff8e8fa2fff entry_point = 0x7ff8e8d00000 region_type = mapped_file name = "d3d11.dll" filename = "\\Windows\\System32\\d3d11.dll" (normalized: "c:\\windows\\system32\\d3d11.dll") Region: id = 1404 start_va = 0x7ff8e8fb0000 end_va = 0x7ff8e8fd1fff entry_point = 0x7ff8e8fb0000 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\System32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll") Region: id = 1405 start_va = 0x7ff8e9000000 end_va = 0x7ff8e905bfff entry_point = 0x7ff8e9000000 region_type = mapped_file name = "ninput.dll" filename = "\\Windows\\System32\\ninput.dll" (normalized: "c:\\windows\\system32\\ninput.dll") Region: id = 1406 start_va = 0x7ff8e9060000 end_va = 0x7ff8e9127fff entry_point = 0x7ff8e9060000 region_type = mapped_file name = "coremessaging.dll" filename = "\\Windows\\System32\\CoreMessaging.dll" (normalized: "c:\\windows\\system32\\coremessaging.dll") Region: id = 1407 start_va = 0x7ff8e9130000 end_va = 0x7ff8e9200fff entry_point = 0x7ff8e9130000 region_type = mapped_file name = "dcomp.dll" filename = "\\Windows\\System32\\dcomp.dll" (normalized: "c:\\windows\\system32\\dcomp.dll") Region: id = 1408 start_va = 0x7ff8e9680000 end_va = 0x7ff8e9715fff entry_point = 0x7ff8e9680000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 1409 start_va = 0x7ff8e9720000 end_va = 0x7ff8e9746fff entry_point = 0x7ff8e9720000 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 1410 start_va = 0x7ff8e9860000 end_va = 0x7ff8e994dfff entry_point = 0x7ff8e9860000 region_type = mapped_file name = "twinapi.appcore.dll" filename = "\\Windows\\System32\\twinapi.appcore.dll" (normalized: "c:\\windows\\system32\\twinapi.appcore.dll") Region: id = 1411 start_va = 0x7ff8e9cd0000 end_va = 0x7ff8e9cf2fff entry_point = 0x7ff8e9cd0000 region_type = mapped_file name = "gpapi.dll" filename = "\\Windows\\System32\\gpapi.dll" (normalized: "c:\\windows\\system32\\gpapi.dll") Region: id = 1412 start_va = 0x7ff8ea0f0000 end_va = 0x7ff8ea121fff entry_point = 0x7ff8ea0f0000 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll") Region: id = 1413 start_va = 0x7ff8ea150000 end_va = 0x7ff8ea1c3fff entry_point = 0x7ff8ea150000 region_type = mapped_file name = "schannel.dll" filename = "\\Windows\\System32\\schannel.dll" (normalized: "c:\\windows\\system32\\schannel.dll") Region: id = 1414 start_va = 0x7ff8ea1d0000 end_va = 0x7ff8ea1d9fff entry_point = 0x7ff8ea1d0000 region_type = mapped_file name = "dpapi.dll" filename = "\\Windows\\System32\\dpapi.dll" (normalized: "c:\\windows\\system32\\dpapi.dll") Region: id = 1415 start_va = 0x7ff8ea270000 end_va = 0x7ff8ea2a2fff entry_point = 0x7ff8ea270000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 1416 start_va = 0x7ff8ea360000 end_va = 0x7ff8ea37efff entry_point = 0x7ff8ea360000 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 1417 start_va = 0x7ff8ea380000 end_va = 0x7ff8ea3bdfff entry_point = 0x7ff8ea380000 region_type = mapped_file name = "logoncli.dll" filename = "\\Windows\\System32\\logoncli.dll" (normalized: "c:\\windows\\system32\\logoncli.dll") Region: id = 1418 start_va = 0x7ff8ea3c0000 end_va = 0x7ff8ea467fff entry_point = 0x7ff8ea3c0000 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll") Region: id = 1419 start_va = 0x7ff8ea5c0000 end_va = 0x7ff8ea61cfff entry_point = 0x7ff8ea5c0000 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll") Region: id = 1420 start_va = 0x7ff8ea620000 end_va = 0x7ff8ea636fff entry_point = 0x7ff8ea620000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 1421 start_va = 0x7ff8ea790000 end_va = 0x7ff8ea79afff entry_point = 0x7ff8ea790000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 1422 start_va = 0x7ff8ea880000 end_va = 0x7ff8ea8b5fff entry_point = 0x7ff8ea880000 region_type = mapped_file name = "ntasn1.dll" filename = "\\Windows\\System32\\ntasn1.dll" (normalized: "c:\\windows\\system32\\ntasn1.dll") Region: id = 1423 start_va = 0x7ff8ea8c0000 end_va = 0x7ff8ea8e5fff entry_point = 0x7ff8ea8c0000 region_type = mapped_file name = "ncrypt.dll" filename = "\\Windows\\System32\\ncrypt.dll" (normalized: "c:\\windows\\system32\\ncrypt.dll") Region: id = 1424 start_va = 0x7ff8ea9d0000 end_va = 0x7ff8ea9fbfff entry_point = 0x7ff8ea9d0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 1425 start_va = 0x7ff8eabd0000 end_va = 0x7ff8eabf7fff entry_point = 0x7ff8eabd0000 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 1426 start_va = 0x7ff8eac00000 end_va = 0x7ff8eac6afff entry_point = 0x7ff8eac00000 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 1427 start_va = 0x7ff8eadb0000 end_va = 0x7ff8eadc0fff entry_point = 0x7ff8eadb0000 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 1428 start_va = 0x7ff8eadd0000 end_va = 0x7ff8eae19fff entry_point = 0x7ff8eadd0000 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 1429 start_va = 0x7ff8eae20000 end_va = 0x7ff8eae2efff entry_point = 0x7ff8eae20000 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 1430 start_va = 0x7ff8eae30000 end_va = 0x7ff8eae42fff entry_point = 0x7ff8eae30000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 1431 start_va = 0x7ff8eae50000 end_va = 0x7ff8eaea3fff entry_point = 0x7ff8eae50000 region_type = mapped_file name = "wintrust.dll" filename = "\\Windows\\System32\\wintrust.dll" (normalized: "c:\\windows\\system32\\wintrust.dll") Region: id = 1432 start_va = 0x7ff8eaf60000 end_va = 0x7ff8eafa3fff entry_point = 0x7ff8eaf60000 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 1433 start_va = 0x7ff8eafb0000 end_va = 0x7ff8eb170fff entry_point = 0x7ff8eafb0000 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 1434 start_va = 0x7ff8eb180000 end_va = 0x7ff8eb7a7fff entry_point = 0x7ff8eb180000 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\System32\\windows.storage.dll" (normalized: "c:\\windows\\system32\\windows.storage.dll") Region: id = 1435 start_va = 0x7ff8eb7b0000 end_va = 0x7ff8eb862fff entry_point = 0x7ff8eb7b0000 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\System32\\SHCore.dll" (normalized: "c:\\windows\\system32\\shcore.dll") Region: id = 1436 start_va = 0x7ff8eb870000 end_va = 0x7ff8eba4cfff entry_point = 0x7ff8eb870000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 1437 start_va = 0x7ff8ebb30000 end_va = 0x7ff8ebbedfff entry_point = 0x7ff8ebb30000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 1438 start_va = 0x7ff8ebdc0000 end_va = 0x7ff8ebf0dfff entry_point = 0x7ff8ebdc0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 1439 start_va = 0x7ff8ec0c0000 end_va = 0x7ff8ec21bfff entry_point = 0x7ff8ec0c0000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 1440 start_va = 0x7ff8ec240000 end_va = 0x7ff8ec29afff entry_point = 0x7ff8ec240000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 1441 start_va = 0x7ff8ec300000 end_va = 0x7ff8ec440fff entry_point = 0x7ff8ec300000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 1442 start_va = 0x7ff8ec450000 end_va = 0x7ff8ec575fff entry_point = 0x7ff8ec450000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 1443 start_va = 0x7ff8ec580000 end_va = 0x7ff8edaa4fff entry_point = 0x7ff8ec580000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 1444 start_va = 0x7ff8edbc0000 end_va = 0x7ff8edd44fff entry_point = 0x7ff8edbc0000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 1445 start_va = 0x7ff8edd60000 end_va = 0x7ff8edfdbfff entry_point = 0x7ff8edd60000 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 1446 start_va = 0x7ff8edfe0000 end_va = 0x7ff8ee030fff entry_point = 0x7ff8edfe0000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 1447 start_va = 0x7ff8ee040000 end_va = 0x7ff8ee0a8fff entry_point = 0x7ff8ee040000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 1448 start_va = 0x7ff8ee0b0000 end_va = 0x7ff8ee14cfff entry_point = 0x7ff8ee0b0000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 1449 start_va = 0x7ff8ee150000 end_va = 0x7ff8ee185fff entry_point = 0x7ff8ee150000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 1450 start_va = 0x7ff8ee190000 end_va = 0x7ff8ee235fff entry_point = 0x7ff8ee190000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 1451 start_va = 0x7ff8ee250000 end_va = 0x7ff8ee257fff entry_point = 0x7ff8ee250000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 1452 start_va = 0x7ff8ee2d0000 end_va = 0x7ff8ee37cfff entry_point = 0x7ff8ee2d0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 1453 start_va = 0x7ff8ee380000 end_va = 0x7ff8ee541fff entry_point = 0x7ff8ee380000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Thread: id = 87 os_tid = 0xb64 Thread: id = 88 os_tid = 0xad8 Thread: id = 89 os_tid = 0xb4c Thread: id = 90 os_tid = 0xb34 Thread: id = 91 os_tid = 0xae4 Thread: id = 92 os_tid = 0xb28 Thread: id = 93 os_tid = 0xb30 Thread: id = 94 os_tid = 0xb20 Thread: id = 95 os_tid = 0xb3c Thread: id = 96 os_tid = 0xb38 Thread: id = 97 os_tid = 0xafc Thread: id = 98 os_tid = 0xb04 Thread: id = 99 os_tid = 0xaf4 Thread: id = 100 os_tid = 0xb08 Thread: id = 101 os_tid = 0xb0c Thread: id = 102 os_tid = 0xb00 Thread: id = 103 os_tid = 0x388 Thread: id = 104 os_tid = 0xbf4 Thread: id = 105 os_tid = 0xbe4 Thread: id = 106 os_tid = 0xbc8 Thread: id = 107 os_tid = 0xbc0 Thread: id = 108 os_tid = 0xbb8 Thread: id = 109 os_tid = 0xbb4 Thread: id = 110 os_tid = 0xbb0 Thread: id = 111 os_tid = 0xba4 Thread: id = 112 os_tid = 0xba0 Thread: id = 113 os_tid = 0xb9c Thread: id = 114 os_tid = 0xb98 Thread: id = 115 os_tid = 0xb94 Thread: id = 116 os_tid = 0xb8c Thread: id = 117 os_tid = 0xb88 Thread: id = 118 os_tid = 0xb84 Thread: id = 119 os_tid = 0xb80 Thread: id = 132 os_tid = 0xd24 Process: id = "10" image_name = "backgroundtaskhost.exe" filename = "c:\\windows\\system32\\backgroundtaskhost.exe" page_root = "0x74045000" os_pid = "0xa1c" os_integrity_level = "0x1000" os_privileges = "0x800000" monitor_reason = "injection" parent_id = "1" os_parent_pid = "0x300" cmd_line = "\"C:\\Windows\\system32\\backgroundTaskHost.exe\" -ServerName:CortanaUI.AppXy7vb4pc2dr3kc93kfc509b1d0arkfb2x.mca" cur_dir = "C:\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\" os_username = "LHNIWSJ\\CIiHmnxMn6Ps" os_groups = "LHNIWSJ\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00014ee5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 2070 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 2071 start_va = 0x2f11950000 end_va = 0x2f1196ffff entry_point = 0x0 region_type = private name = "private_0x0000002f11950000" filename = "" Region: id = 2072 start_va = 0x2f11970000 end_va = 0x2f11983fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000002f11970000" filename = "" Region: id = 2073 start_va = 0x2f11990000 end_va = 0x2f11a0ffff entry_point = 0x0 region_type = private name = "private_0x0000002f11990000" filename = "" Region: id = 2074 start_va = 0x2f11a10000 end_va = 0x2f11a13fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000002f11a10000" filename = "" Region: id = 2075 start_va = 0x2f11a20000 end_va = 0x2f11a21fff entry_point = 0x0 region_type = private name = "private_0x0000002f11a20000" filename = "" Region: id = 2076 start_va = 0x2f11a30000 end_va = 0x2f11a30fff entry_point = 0x2f11a30000 region_type = mapped_file name = "s-1-5-21-1462094071-1423818996-289466292-1000.pckgdep" filename = "\\ProgramData\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\S-1-5-21-1462094071-1423818996-289466292-1000.pckgdep" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\packages\\microsoft.windows.cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\s-1-5-21-1462094071-1423818996-289466292-1000.pckgdep") Region: id = 2077 start_va = 0x7df5ff7e0000 end_va = 0x7ff5ff7dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ff7e0000" filename = "" Region: id = 2078 start_va = 0x7ff6551e0000 end_va = 0x7ff655202fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff6551e0000" filename = "" Region: id = 2079 start_va = 0x7ff65520d000 end_va = 0x7ff65520efff entry_point = 0x0 region_type = private name = "private_0x00007ff65520d000" filename = "" Region: id = 2080 start_va = 0x7ff65520f000 end_va = 0x7ff65520ffff entry_point = 0x0 region_type = private name = "private_0x00007ff65520f000" filename = "" Region: id = 2081 start_va = 0x7ff6560e0000 end_va = 0x7ff6560e6fff entry_point = 0x7ff6560e0000 region_type = mapped_file name = "backgroundtaskhost.exe" filename = "\\Windows\\System32\\backgroundTaskHost.exe" (normalized: "c:\\windows\\system32\\backgroundtaskhost.exe") Region: id = 2082 start_va = 0x7ff7afc80000 end_va = 0x7ff7afcb4fff entry_point = 0x0 region_type = private name = "private_0x00007ff7afc80000" filename = "" Region: id = 2083 start_va = 0x7ff8ee380000 end_va = 0x7ff8ee541fff entry_point = 0x7ff8ee380000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Thread: id = 123 os_tid = 0x2ec Thread: id = 131 os_tid = 0xdd0 Process: id = "11" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x2f65d000" os_pid = "0xc4c" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "injection" parent_id = "1" os_parent_pid = "0x300" cmd_line = "C:\\Windows\\system32\\svchost.exe -k UnistackSvcGroup" cur_dir = "C:\\Windows\\system32\\" os_username = "LHNIWSJ\\CIiHmnxMn6Ps" os_groups = "LHNIWSJ\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00014ee5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 2489 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 2490 start_va = 0x104d970000 end_va = 0x104d97ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000104d970000" filename = "" Region: id = 2491 start_va = 0x104d980000 end_va = 0x104d980fff entry_point = 0x104d980000 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\System32\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\system32\\en-us\\svchost.exe.mui") Region: id = 2492 start_va = 0x104d990000 end_va = 0x104d9a3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000104d990000" filename = "" Region: id = 2493 start_va = 0x104d9b0000 end_va = 0x104da2ffff entry_point = 0x0 region_type = private name = "private_0x000000104d9b0000" filename = "" Region: id = 2494 start_va = 0x104da30000 end_va = 0x104da33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000104da30000" filename = "" Region: id = 2495 start_va = 0x104da40000 end_va = 0x104da40fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000104da40000" filename = "" Region: id = 2496 start_va = 0x104da50000 end_va = 0x104da51fff entry_point = 0x0 region_type = private name = "private_0x000000104da50000" filename = "" Region: id = 2497 start_va = 0x104da60000 end_va = 0x104db1dfff entry_point = 0x104da60000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 2498 start_va = 0x104db20000 end_va = 0x104db9ffff entry_point = 0x0 region_type = private name = "private_0x000000104db20000" filename = "" Region: id = 2499 start_va = 0x104dba0000 end_va = 0x104dba0fff entry_point = 0x0 region_type = private name = "private_0x000000104dba0000" filename = "" Region: id = 2500 start_va = 0x104dbb0000 end_va = 0x104dbb0fff entry_point = 0x0 region_type = private name = "private_0x000000104dbb0000" filename = "" Region: id = 2501 start_va = 0x104dbc0000 end_va = 0x104dbc0fff entry_point = 0x104dbc0000 region_type = mapped_file name = "phoneutilres.dll" filename = "\\Windows\\System32\\PhoneutilRes.dll" (normalized: "c:\\windows\\system32\\phoneutilres.dll") Region: id = 2502 start_va = 0x104dc10000 end_va = 0x104dc16fff entry_point = 0x0 region_type = private name = "private_0x000000104dc10000" filename = "" Region: id = 2503 start_va = 0x104dce0000 end_va = 0x104dce6fff entry_point = 0x0 region_type = private name = "private_0x000000104dce0000" filename = "" Region: id = 2504 start_va = 0x104dd00000 end_va = 0x104ddfffff entry_point = 0x0 region_type = private name = "private_0x000000104dd00000" filename = "" Region: id = 2505 start_va = 0x104de00000 end_va = 0x104defffff entry_point = 0x0 region_type = private name = "private_0x000000104de00000" filename = "" Region: id = 2506 start_va = 0x104df00000 end_va = 0x104e087fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000104df00000" filename = "" Region: id = 2507 start_va = 0x104e090000 end_va = 0x104e210fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000104e090000" filename = "" Region: id = 2508 start_va = 0x104e220000 end_va = 0x104f61ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000104e220000" filename = "" Region: id = 2509 start_va = 0x104f620000 end_va = 0x104f71ffff entry_point = 0x0 region_type = private name = "private_0x000000104f620000" filename = "" Region: id = 2510 start_va = 0x104f720000 end_va = 0x104f81ffff entry_point = 0x0 region_type = private name = "private_0x000000104f720000" filename = "" Region: id = 2511 start_va = 0x7df5ffc90000 end_va = 0x7ff5ffc8ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ffc90000" filename = "" Region: id = 2512 start_va = 0x7ff673500000 end_va = 0x7ff6735fffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff673500000" filename = "" Region: id = 2513 start_va = 0x7ff673600000 end_va = 0x7ff673622fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff673600000" filename = "" Region: id = 2514 start_va = 0x7ff673629000 end_va = 0x7ff67362afff entry_point = 0x0 region_type = private name = "private_0x00007ff673629000" filename = "" Region: id = 2515 start_va = 0x7ff67362b000 end_va = 0x7ff67362bfff entry_point = 0x0 region_type = private name = "private_0x00007ff67362b000" filename = "" Region: id = 2516 start_va = 0x7ff67362c000 end_va = 0x7ff67362dfff entry_point = 0x0 region_type = private name = "private_0x00007ff67362c000" filename = "" Region: id = 2517 start_va = 0x7ff67362e000 end_va = 0x7ff67362ffff entry_point = 0x0 region_type = private name = "private_0x00007ff67362e000" filename = "" Region: id = 2518 start_va = 0x7ff673b40000 end_va = 0x7ff673b4cfff entry_point = 0x7ff673b40000 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 2519 start_va = 0x7ff7afc80000 end_va = 0x7ff7afcb4fff entry_point = 0x0 region_type = private name = "private_0x00007ff7afc80000" filename = "" Region: id = 2520 start_va = 0x7ff8d5540000 end_va = 0x7ff8d5580fff entry_point = 0x7ff8d5540000 region_type = mapped_file name = "phoneutil.dll" filename = "\\Windows\\System32\\Phoneutil.dll" (normalized: "c:\\windows\\system32\\phoneutil.dll") Region: id = 2521 start_va = 0x7ff8d5590000 end_va = 0x7ff8d5700fff entry_point = 0x7ff8d5590000 region_type = mapped_file name = "pimstore.dll" filename = "\\Windows\\System32\\Pimstore.dll" (normalized: "c:\\windows\\system32\\pimstore.dll") Region: id = 2522 start_va = 0x7ff8d5710000 end_va = 0x7ff8d5756fff entry_point = 0x7ff8d5710000 region_type = mapped_file name = "syncutil.dll" filename = "\\Windows\\System32\\syncutil.dll" (normalized: "c:\\windows\\system32\\syncutil.dll") Region: id = 2523 start_va = 0x7ff8d5860000 end_va = 0x7ff8d58adfff entry_point = 0x7ff8d5860000 region_type = mapped_file name = "aphostservice.dll" filename = "\\Windows\\System32\\APHostService.dll" (normalized: "c:\\windows\\system32\\aphostservice.dll") Region: id = 2524 start_va = 0x7ff8d5f20000 end_va = 0x7ff8d5f35fff entry_point = 0x7ff8d5f20000 region_type = mapped_file name = "userdataplatformhelperutil.dll" filename = "\\Windows\\System32\\UserDataPlatformHelperUtil.dll" (normalized: "c:\\windows\\system32\\userdataplatformhelperutil.dll") Region: id = 2525 start_va = 0x7ff8d7680000 end_va = 0x7ff8d7696fff entry_point = 0x7ff8d7680000 region_type = mapped_file name = "networkhelper.dll" filename = "\\Windows\\System32\\networkhelper.dll" (normalized: "c:\\windows\\system32\\networkhelper.dll") Region: id = 2526 start_va = 0x7ff8dcd60000 end_va = 0x7ff8dcda7fff entry_point = 0x7ff8dcd60000 region_type = mapped_file name = "vaultcli.dll" filename = "\\Windows\\System32\\vaultcli.dll" (normalized: "c:\\windows\\system32\\vaultcli.dll") Region: id = 2527 start_va = 0x7ff8df180000 end_va = 0x7ff8df18cfff entry_point = 0x7ff8df180000 region_type = mapped_file name = "inproclogger.dll" filename = "\\Windows\\System32\\InprocLogger.dll" (normalized: "c:\\windows\\system32\\inproclogger.dll") Region: id = 2528 start_va = 0x7ff8e1050000 end_va = 0x7ff8e1060fff entry_point = 0x7ff8e1050000 region_type = mapped_file name = "userdatatypehelperutil.dll" filename = "\\Windows\\System32\\UserDataTypeHelperUtil.dll" (normalized: "c:\\windows\\system32\\userdatatypehelperutil.dll") Region: id = 2529 start_va = 0x7ff8e1650000 end_va = 0x7ff8e165bfff entry_point = 0x7ff8e1650000 region_type = mapped_file name = "dsclient.dll" filename = "\\Windows\\System32\\dsclient.dll" (normalized: "c:\\windows\\system32\\dsclient.dll") Region: id = 2530 start_va = 0x7ff8e1940000 end_va = 0x7ff8e1c21fff entry_point = 0x7ff8e1940000 region_type = mapped_file name = "esent.dll" filename = "\\Windows\\System32\\esent.dll" (normalized: "c:\\windows\\system32\\esent.dll") Region: id = 2531 start_va = 0x7ff8e2fe0000 end_va = 0x7ff8e2feafff entry_point = 0x7ff8e2fe0000 region_type = mapped_file name = "mccspal.dll" filename = "\\Windows\\System32\\MCCSPal.dll" (normalized: "c:\\windows\\system32\\mccspal.dll") Region: id = 2532 start_va = 0x7ff8e3c30000 end_va = 0x7ff8e3fa5fff entry_point = 0x7ff8e3c30000 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" (normalized: "c:\\windows\\system32\\iertutil.dll") Region: id = 2533 start_va = 0x7ff8e5dd0000 end_va = 0x7ff8e5ea5fff entry_point = 0x7ff8e5dd0000 region_type = mapped_file name = "winhttp.dll" filename = "\\Windows\\System32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll") Region: id = 2534 start_va = 0x7ff8e7430000 end_va = 0x7ff8e7560fff entry_point = 0x7ff8e7430000 region_type = mapped_file name = "wintypes.dll" filename = "\\Windows\\System32\\WinTypes.dll" (normalized: "c:\\windows\\system32\\wintypes.dll") Region: id = 2535 start_va = 0x7ff8ea0f0000 end_va = 0x7ff8ea121fff entry_point = 0x7ff8ea0f0000 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll") Region: id = 2536 start_va = 0x7ff8eabd0000 end_va = 0x7ff8eabf7fff entry_point = 0x7ff8eabd0000 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 2537 start_va = 0x7ff8eac00000 end_va = 0x7ff8eac6afff entry_point = 0x7ff8eac00000 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 2538 start_va = 0x7ff8eae20000 end_va = 0x7ff8eae2efff entry_point = 0x7ff8eae20000 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 2539 start_va = 0x7ff8eae30000 end_va = 0x7ff8eae42fff entry_point = 0x7ff8eae30000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 2540 start_va = 0x7ff8eb7b0000 end_va = 0x7ff8eb862fff entry_point = 0x7ff8eb7b0000 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\System32\\SHCore.dll" (normalized: "c:\\windows\\system32\\shcore.dll") Region: id = 2541 start_va = 0x7ff8eb870000 end_va = 0x7ff8eba4cfff entry_point = 0x7ff8eb870000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 2542 start_va = 0x7ff8ebb30000 end_va = 0x7ff8ebbedfff entry_point = 0x7ff8ebb30000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 2543 start_va = 0x7ff8ebdc0000 end_va = 0x7ff8ebf0dfff entry_point = 0x7ff8ebdc0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 2544 start_va = 0x7ff8ec0c0000 end_va = 0x7ff8ec21bfff entry_point = 0x7ff8ec0c0000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 2545 start_va = 0x7ff8ec240000 end_va = 0x7ff8ec29afff entry_point = 0x7ff8ec240000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 2546 start_va = 0x7ff8ec450000 end_va = 0x7ff8ec575fff entry_point = 0x7ff8ec450000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 2547 start_va = 0x7ff8edbc0000 end_va = 0x7ff8edd44fff entry_point = 0x7ff8edbc0000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 2548 start_va = 0x7ff8edd60000 end_va = 0x7ff8edfdbfff entry_point = 0x7ff8edd60000 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 2549 start_va = 0x7ff8ee0b0000 end_va = 0x7ff8ee14cfff entry_point = 0x7ff8ee0b0000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 2550 start_va = 0x7ff8ee150000 end_va = 0x7ff8ee185fff entry_point = 0x7ff8ee150000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 2551 start_va = 0x7ff8ee190000 end_va = 0x7ff8ee235fff entry_point = 0x7ff8ee190000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 2552 start_va = 0x7ff8ee2d0000 end_va = 0x7ff8ee37cfff entry_point = 0x7ff8ee2d0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 2553 start_va = 0x7ff8ee380000 end_va = 0x7ff8ee541fff entry_point = 0x7ff8ee380000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 5368 start_va = 0x104f820000 end_va = 0x104f91ffff entry_point = 0x0 region_type = private name = "private_0x000000104f820000" filename = "" Region: id = 5369 start_va = 0x7ff673627000 end_va = 0x7ff673628fff entry_point = 0x0 region_type = private name = "private_0x00007ff673627000" filename = "" Region: id = 5370 start_va = 0x7ff8ea9d0000 end_va = 0x7ff8ea9fbfff entry_point = 0x7ff8ea9d0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 5395 start_va = 0x104dc20000 end_va = 0x104dc9ffff entry_point = 0x0 region_type = private name = "private_0x000000104dc20000" filename = "" Region: id = 5396 start_va = 0x7ff673625000 end_va = 0x7ff673626fff entry_point = 0x0 region_type = private name = "private_0x00007ff673625000" filename = "" Region: id = 5397 start_va = 0x7ff8ea550000 end_va = 0x7ff8ea55afff entry_point = 0x7ff8ea550000 region_type = mapped_file name = "ntlmshared.dll" filename = "\\Windows\\System32\\NtlmShared.dll" (normalized: "c:\\windows\\system32\\ntlmshared.dll") Region: id = 5398 start_va = 0x7ff8ea560000 end_va = 0x7ff8ea5befff entry_point = 0x7ff8ea560000 region_type = mapped_file name = "msv1_0.dll" filename = "\\Windows\\System32\\msv1_0.dll" (normalized: "c:\\windows\\system32\\msv1_0.dll") Region: id = 5399 start_va = 0x7ff8ea620000 end_va = 0x7ff8ea636fff entry_point = 0x7ff8ea620000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 5400 start_va = 0x7ff8ea770000 end_va = 0x7ff8ea783fff entry_point = 0x7ff8ea770000 region_type = mapped_file name = "cryptdll.dll" filename = "\\Windows\\System32\\cryptdll.dll" (normalized: "c:\\windows\\system32\\cryptdll.dll") Region: id = 5401 start_va = 0x7ff8ea790000 end_va = 0x7ff8ea79afff entry_point = 0x7ff8ea790000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 5403 start_va = 0x7ff8e9fe0000 end_va = 0x7ff8e9ffbfff entry_point = 0x7ff8e9fe0000 region_type = mapped_file name = "mpr.dll" filename = "\\Windows\\System32\\mpr.dll" (normalized: "c:\\windows\\system32\\mpr.dll") Region: id = 5404 start_va = 0x7ff8ec300000 end_va = 0x7ff8ec440fff entry_point = 0x7ff8ec300000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 5405 start_va = 0x7ff8ec580000 end_va = 0x7ff8edaa4fff entry_point = 0x7ff8ec580000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 5407 start_va = 0x7ff8eb180000 end_va = 0x7ff8eb7a7fff entry_point = 0x7ff8eb180000 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\System32\\windows.storage.dll" (normalized: "c:\\windows\\system32\\windows.storage.dll") Region: id = 5408 start_va = 0x7ff8edfe0000 end_va = 0x7ff8ee030fff entry_point = 0x7ff8edfe0000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 5409 start_va = 0x7ff8eadd0000 end_va = 0x7ff8eae19fff entry_point = 0x7ff8eadd0000 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 5410 start_va = 0x7ff8e8480000 end_va = 0x7ff8e84b7fff entry_point = 0x7ff8e8480000 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 5411 start_va = 0x7ff8ee250000 end_va = 0x7ff8ee257fff entry_point = 0x7ff8ee250000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 5412 start_va = 0x7ff8e8460000 end_va = 0x7ff8e846afff entry_point = 0x7ff8e8460000 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll") Region: id = 5811 start_va = 0x104dbd0000 end_va = 0x104dbd0fff entry_point = 0x0 region_type = private name = "private_0x000000104dbd0000" filename = "" Region: id = 5812 start_va = 0x104dbe0000 end_va = 0x104dbe0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000104dbe0000" filename = "" Region: id = 5813 start_va = 0x104dbf0000 end_va = 0x104dbf0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000104dbf0000" filename = "" Region: id = 5814 start_va = 0x7ff8d5010000 end_va = 0x7ff8d5030fff entry_point = 0x7ff8d5010000 region_type = mapped_file name = "userdatatimeutil.dll" filename = "\\Windows\\System32\\UserDataTimeUtil.dll" (normalized: "c:\\windows\\system32\\userdatatimeutil.dll") Region: id = 5815 start_va = 0x7ff8d5520000 end_va = 0x7ff8d5530fff entry_point = 0x7ff8d5520000 region_type = mapped_file name = "userdatalanguageutil.dll" filename = "\\Windows\\System32\\UserDataLanguageUtil.dll" (normalized: "c:\\windows\\system32\\userdatalanguageutil.dll") Region: id = 5816 start_va = 0x7ff8d5770000 end_va = 0x7ff8d57a5fff entry_point = 0x7ff8d5770000 region_type = mapped_file name = "accountaccessor.dll" filename = "\\Windows\\System32\\accountaccessor.dll" (normalized: "c:\\windows\\system32\\accountaccessor.dll") Region: id = 5817 start_va = 0x7ff8d57b0000 end_va = 0x7ff8d57effff entry_point = 0x7ff8d57b0000 region_type = mapped_file name = "cemapi.dll" filename = "\\Windows\\System32\\cemapi.dll" (normalized: "c:\\windows\\system32\\cemapi.dll") Region: id = 5818 start_va = 0x7ff8d57f0000 end_va = 0x7ff8d585bfff entry_point = 0x7ff8d57f0000 region_type = mapped_file name = "synccontroller.dll" filename = "\\Windows\\System32\\SyncController.dll" (normalized: "c:\\windows\\system32\\synccontroller.dll") Region: id = 5819 start_va = 0x7ff8db590000 end_va = 0x7ff8db59ffff entry_point = 0x7ff8db590000 region_type = mapped_file name = "aphostclient.dll" filename = "\\Windows\\System32\\APHostClient.dll" (normalized: "c:\\windows\\system32\\aphostclient.dll") Region: id = 5820 start_va = 0x7ff8e84e0000 end_va = 0x7ff8e84f7fff entry_point = 0x7ff8e84e0000 region_type = mapped_file name = "nlaapi.dll" filename = "\\Windows\\System32\\nlaapi.dll" (normalized: "c:\\windows\\system32\\nlaapi.dll") Region: id = 5821 start_va = 0x7ff8edb10000 end_va = 0x7ff8edbb4fff entry_point = 0x7ff8edb10000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Thread: id = 124 os_tid = 0xc7c Thread: id = 125 os_tid = 0xc70 Thread: id = 126 os_tid = 0xc50 Thread: id = 127 os_tid = 0xdd4 [0091.156] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x7ff8ee2d0000 [0091.156] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="LoadLibraryA") returned 0x7ff8ee2f2080 [0091.156] LoadLibraryA (lpLibFileName="mpr.dll") returned 0x7ff8e9fe0000 [0091.158] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x7ff8ee190000 [0091.158] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x7ff8ec300000 [0091.162] LoadLibraryA (lpLibFileName="Shell32.dll") returned 0x7ff8ec580000 [0091.180] LoadLibraryA (lpLibFileName="Iphlpapi.dll") returned 0x7ff8e8480000 [0091.185] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GetLastError") returned 0x7ff8ee2e6060 [0091.185] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="VirtualFree") returned 0x7ff8ee2ebc10 [0091.185] GetProcAddress (hModule=0x7ff8ee190000, lpProcName="CryptExportKey") returned 0x7ff8ee1a7b50 [0091.185] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="DeleteFileW") returned 0x7ff8ee2f57a0 [0091.185] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GetDriveTypeW") returned 0x7ff8ee2f58f0 [0091.185] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GetCommandLineW") returned 0x7ff8ee2f0150 [0091.185] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GetStartupInfoW") returned 0x7ff8ee2eed80 [0091.185] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="FindNextFileW") returned 0x7ff8ee2f5880 [0091.186] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="VirtualAlloc") returned 0x7ff8ee2ebaf0 [0091.186] GetProcAddress (hModule=0x7ff8ee190000, lpProcName="GetUserNameA") returned 0x7ff8ee1bec40 [0091.186] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="ExitProcess") returned 0x7ff8ee2eef50 [0091.186] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="Wow64RevertWow64FsRedirection") returned 0x7ff8ee3136a0 [0091.186] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="CreateProcessA") returned 0x7ff8ee2ed5b0 [0091.186] GetProcAddress (hModule=0x7ff8e8480000, lpProcName="GetIpNetTable") returned 0x7ff8e849f0b0 [0091.186] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GetVersionExW") returned 0x7ff8ee2eaa30 [0091.186] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x7ff8ee313690 [0091.186] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GetSystemDefaultLangID") returned 0x7ff8ee2f2ba0 [0091.186] GetProcAddress (hModule=0x7ff8ee190000, lpProcName="GetUserNameW") returned 0x7ff8ee1ada40 [0091.187] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="ReadFile") returned 0x7ff8ee2f5a90 [0091.187] GetProcAddress (hModule=0x7ff8ee190000, lpProcName="RegQueryValueExA") returned 0x7ff8ee1a7dd0 [0091.187] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="CloseHandle") returned 0x7ff8ee2f5510 [0091.187] GetProcAddress (hModule=0x7ff8ee190000, lpProcName="RegSetValueExW") returned 0x7ff8ee1a7850 [0091.187] GetProcAddress (hModule=0x7ff8ee190000, lpProcName="RegCloseKey") returned 0x7ff8ee1a72e0 [0091.187] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="CopyFileA") returned 0x7ff8ee30e430 [0091.187] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="SetFileAttributesW") returned 0x7ff8ee2f5b00 [0091.187] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="WinExec") returned 0x7ff8ee311e60 [0091.187] GetProcAddress (hModule=0x7ff8ee190000, lpProcName="CryptDeriveKey") returned 0x7ff8ee1c07a0 [0091.187] GetProcAddress (hModule=0x7ff8ee190000, lpProcName="CryptGenKey") returned 0x7ff8ee1acab0 [0091.187] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="Sleep") returned 0x7ff8ee2e8f00 [0091.188] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GetCurrentProcess") returned 0x7ff8ee2e6580 [0091.188] GetProcAddress (hModule=0x7ff8ec580000, lpProcName="ShellExecuteW") returned 0x7ff8ec6cabc0 [0091.188] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GetFileSize") returned 0x7ff8ee2f5950 [0091.188] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GlobalAlloc") returned 0x7ff8ee2eb810 [0091.188] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="FindClose") returned 0x7ff8ee2f57c0 [0091.188] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="WaitForMultipleObjects") returned 0x7ff8ee2f56e0 [0091.188] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GetModuleFileNameA") returned 0x7ff8ee2f0c70 [0091.188] GetProcAddress (hModule=0x7ff8ec580000, lpProcName="ShellExecuteA") returned 0x7ff8ec787de0 [0091.188] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GetModuleHandleA") returned 0x7ff8ee2ee6d0 [0091.189] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GetModuleFileNameW") returned 0x7ff8ee2eeca0 [0091.189] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="CreateFileA") returned 0x7ff8ee2f5760 [0091.189] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GetFileSizeEx") returned 0x7ff8ee2f5960 [0091.189] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="WriteFile") returned 0x7ff8ee2f5b80 [0091.189] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GetLogicalDrives") returned 0x7ff8ee2e66d0 [0091.189] GetProcAddress (hModule=0x7ff8e9fe0000, lpProcName="WNetEnumResourceW") returned 0x7ff8e9fe27d0 [0091.189] GetProcAddress (hModule=0x7ff8ee190000, lpProcName="RegOpenKeyExW") returned 0x7ff8ee1a6cb0 [0091.189] GetProcAddress (hModule=0x7ff8e9fe0000, lpProcName="WNetCloseEnum") returned 0x7ff8e9fe2e20 [0091.189] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GetWindowsDirectoryW") returned 0x7ff8ee2f2940 [0091.189] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="SetFileAttributesA") returned 0x7ff8ee2f5af0 [0091.190] GetProcAddress (hModule=0x7ff8ee190000, lpProcName="RegOpenKeyExA") returned 0x7ff8ee1a7d70 [0091.190] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="SetFilePointer") returned 0x7ff8ee2f5b20 [0091.190] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GetTickCount") returned 0x7ff8ee2e60a0 [0091.190] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GetFileAttributesW") returned 0x7ff8ee2f5930 [0091.190] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="FindFirstFileW") returned 0x7ff8ee2f5840 [0091.190] GetProcAddress (hModule=0x7ff8ee190000, lpProcName="CryptAcquireContextW") returned 0x7ff8ee1a89e0 [0091.190] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="MoveFileExW") returned 0x7ff8ee2f3010 [0091.190] GetProcAddress (hModule=0x7ff8e9fe0000, lpProcName="WNetOpenEnumW") returned 0x7ff8e9fe2f20 [0091.190] GetProcAddress (hModule=0x7ff8ec300000, lpProcName="CoInitialize") returned 0x7ff8ec313870 [0091.191] GetProcAddress (hModule=0x7ff8ee190000, lpProcName="CryptDecrypt") returned 0x7ff8ee1a9140 [0091.191] GetProcAddress (hModule=0x7ff8ee190000, lpProcName="CryptImportKey") returned 0x7ff8ee1a7b40 [0091.191] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="SetFilePointerEx") returned 0x7ff8ee2f5b30 [0091.191] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="CopyFileW") returned 0x7ff8ee2f5d70 [0091.191] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="FreeLibrary") returned 0x7ff8ee2eeb90 [0091.191] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="CreateProcessW") returned 0x7ff8ee2edee0 [0091.191] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="CreateDirectoryW") returned 0x7ff8ee2f5740 [0091.191] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="CreateThread") returned 0x7ff8ee2ebc20 [0091.191] GetProcAddress (hModule=0x7ff8ee190000, lpProcName="CryptDestroyKey") returned 0x7ff8ee1a86b0 [0091.191] GetProcAddress (hModule=0x7ff8ec300000, lpProcName="CoCreateInstance") returned 0x7ff8edde7000 [0091.192] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="CreateFileW") returned 0x7ff8ee2f5770 [0091.192] GetProcAddress (hModule=0x7ff8ee2d0000, lpProcName="GetFileAttributesA") returned 0x7ff8ee2f5900 [0091.192] GetProcAddress (hModule=0x7ff8ee190000, lpProcName="CryptEncrypt") returned 0x7ff8ee1ad7e0 [0091.192] GetProcAddress (hModule=0x7ff8ee190000, lpProcName="RegDeleteValueW") returned 0x7ff8ee1a90b0 [0091.192] GetVersionExW (in: lpVersionInformation=0x104f91f860*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x104f91f860*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x2800, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0091.192] GetWindowsDirectoryW (in: lpBuffer=0x104f91f910, uSize=0x32 | out: lpBuffer="C:\\Windows") returned 0xa [0091.192] SetLastError (dwErrCode=0x0) [0091.192] CreateFileW (lpFileName="C:\\users\\Public\\sys" (normalized: "c:\\users\\public\\sys"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.193] GetLastError () returned 0x20 [0091.193] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0091.193] Sleep (dwMilliseconds=0x1388) Thread: id = 128 os_tid = 0xde4 Process: id = "12" image_name = "eqbnr.exe" filename = "c:\\users\\ciihmnxmn6ps\\desktop\\eqbnr.exe" page_root = "0x202f7000" os_pid = "0x5dc" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "autostart" parent_id = "0" os_parent_pid = "0x0" cmd_line = "\"C:\\Users\\CIiHmnxMn6Ps\\Desktop\\eqBNr.exe\" " cur_dir = "C:\\Windows\\system32\\" os_username = "LHNIWSJ\\CIiHmnxMn6Ps" os_groups = "LHNIWSJ\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0001b4e9" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 6778 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 6779 start_va = 0x2eee590000 end_va = 0x2eee5affff entry_point = 0x0 region_type = private name = "private_0x0000002eee590000" filename = "" Region: id = 6780 start_va = 0x2eee5b0000 end_va = 0x2eee5c3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000002eee5b0000" filename = "" Region: id = 6781 start_va = 0x2eee5d0000 end_va = 0x2eee6cffff entry_point = 0x0 region_type = private name = "private_0x0000002eee5d0000" filename = "" Region: id = 6782 start_va = 0x2eee6d0000 end_va = 0x2eee6d3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000002eee6d0000" filename = "" Region: id = 6783 start_va = 0x2eee6e0000 end_va = 0x2eee6e0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000002eee6e0000" filename = "" Region: id = 6784 start_va = 0x2eee6f0000 end_va = 0x2eee6f1fff entry_point = 0x0 region_type = private name = "private_0x0000002eee6f0000" filename = "" Region: id = 6785 start_va = 0x7ff74ebd0000 end_va = 0x7ff74ebf2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff74ebd0000" filename = "" Region: id = 6786 start_va = 0x7ff74ebfd000 end_va = 0x7ff74ebfefff entry_point = 0x0 region_type = private name = "private_0x00007ff74ebfd000" filename = "" Region: id = 6787 start_va = 0x7ff74ebff000 end_va = 0x7ff74ebfffff entry_point = 0x0 region_type = private name = "private_0x00007ff74ebff000" filename = "" Region: id = 6788 start_va = 0x7ff74ec20000 end_va = 0x7ff74ec54fff entry_point = 0x7ff74ec20000 region_type = mapped_file name = "eqbnr.exe" filename = "\\Users\\CIiHmnxMn6Ps\\Desktop\\eqBNr.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\eqbnr.exe") Region: id = 6789 start_va = 0x7ffb91480000 end_va = 0x7ffb91641fff entry_point = 0x7ffb91480000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 6928 start_va = 0x2eee8e0000 end_va = 0x2eee9dffff entry_point = 0x0 region_type = private name = "private_0x0000002eee8e0000" filename = "" Region: id = 6929 start_va = 0x7ffb8e920000 end_va = 0x7ffb8eafcfff entry_point = 0x7ffb8e920000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 6930 start_va = 0x7ffb90a40000 end_va = 0x7ffb90aecfff entry_point = 0x7ffb90a40000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 6931 start_va = 0x2eee590000 end_va = 0x2eee59ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000002eee590000" filename = "" Region: id = 6932 start_va = 0x2eee700000 end_va = 0x2eee7bdfff entry_point = 0x2eee700000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 6933 start_va = 0x7ff74ead0000 end_va = 0x7ff74ebcffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff74ead0000" filename = "" Region: id = 6934 start_va = 0x7ffb8c600000 end_va = 0x7ffb8c677fff entry_point = 0x7ffb8c600000 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\System32\\apphelp.dll" (normalized: "c:\\windows\\system32\\apphelp.dll") Region: id = 6935 start_va = 0x2eee5a0000 end_va = 0x2eee5a6fff entry_point = 0x0 region_type = private name = "private_0x0000002eee5a0000" filename = "" Region: id = 6936 start_va = 0x2eee7c0000 end_va = 0x2eee8bffff entry_point = 0x0 region_type = private name = "private_0x0000002eee7c0000" filename = "" Region: id = 6937 start_va = 0x7ff74ebfb000 end_va = 0x7ff74ebfcfff entry_point = 0x0 region_type = private name = "private_0x00007ff74ebfb000" filename = "" Region: id = 6938 start_va = 0x7ffb8d8f0000 end_va = 0x7ffb8d8fafff entry_point = 0x7ffb8d8f0000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 6939 start_va = 0x7ffb8dd00000 end_va = 0x7ffb8dd6afff entry_point = 0x7ffb8dd00000 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 6940 start_va = 0x7ffb8deb0000 end_va = 0x7ffb8dec2fff entry_point = 0x7ffb8deb0000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 6941 start_va = 0x7ffb8def0000 end_va = 0x7ffb8df39fff entry_point = 0x7ffb8def0000 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 6942 start_va = 0x7ffb8df40000 end_va = 0x7ffb8df4efff entry_point = 0x7ffb8df40000 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 6943 start_va = 0x7ffb8e000000 end_va = 0x7ffb8e0b2fff entry_point = 0x7ffb8e000000 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\System32\\SHCore.dll" (normalized: "c:\\windows\\system32\\shcore.dll") Region: id = 6944 start_va = 0x7ffb8e120000 end_va = 0x7ffb8e747fff entry_point = 0x7ffb8e120000 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\System32\\windows.storage.dll" (normalized: "c:\\windows\\system32\\windows.storage.dll") Region: id = 6945 start_va = 0x7ffb8eb50000 end_va = 0x7ffb8ebecfff entry_point = 0x7ffb8eb50000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 6946 start_va = 0x7ffb8ebf0000 end_va = 0x7ffb8ee6bfff entry_point = 0x7ffb8ebf0000 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 6947 start_va = 0x7ffb8ee70000 end_va = 0x7ffb8efbdfff entry_point = 0x7ffb8ee70000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 6948 start_va = 0x7ffb8efc0000 end_va = 0x7ffb8f0e5fff entry_point = 0x7ffb8efc0000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 6949 start_va = 0x7ffb8f100000 end_va = 0x7ffb8f284fff entry_point = 0x7ffb8f100000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 6950 start_va = 0x7ffb8f290000 end_va = 0x7ffb8f2e0fff entry_point = 0x7ffb8f290000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 6951 start_va = 0x7ffb8f2f0000 end_va = 0x7ffb8f395fff entry_point = 0x7ffb8f2f0000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 6952 start_va = 0x7ffb8f500000 end_va = 0x7ffb90a24fff entry_point = 0x7ffb8f500000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 6953 start_va = 0x7ffb90af0000 end_va = 0x7ffb90b4afff entry_point = 0x7ffb90af0000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 6954 start_va = 0x2eee8c0000 end_va = 0x2eee8c6fff entry_point = 0x0 region_type = private name = "private_0x0000002eee8c0000" filename = "" Region: id = 6955 start_va = 0x2eeea90000 end_va = 0x2eeea9ffff entry_point = 0x0 region_type = private name = "private_0x0000002eeea90000" filename = "" Region: id = 6956 start_va = 0x2eeeaa0000 end_va = 0x2eeec27fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000002eeeaa0000" filename = "" Region: id = 6957 start_va = 0x7ffb8f3a0000 end_va = 0x7ffb8f4fbfff entry_point = 0x7ffb8f3a0000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 6958 start_va = 0x7ffb90f70000 end_va = 0x7ffb90fa5fff entry_point = 0x7ffb90f70000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 6959 start_va = 0x2eee8d0000 end_va = 0x2eee8d0fff entry_point = 0x0 region_type = private name = "private_0x0000002eee8d0000" filename = "" Region: id = 6960 start_va = 0x2eee9e0000 end_va = 0x2eee9e0fff entry_point = 0x0 region_type = private name = "private_0x0000002eee9e0000" filename = "" Region: id = 6961 start_va = 0x2eeec30000 end_va = 0x2eeedb0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000002eeec30000" filename = "" Region: id = 6962 start_va = 0x2eeedc0000 end_va = 0x2ef01bffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000002eeedc0000" filename = "" Region: id = 6963 start_va = 0x2ef01c0000 end_va = 0x2ef04f6fff entry_point = 0x2ef01c0000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 6964 start_va = 0x2eee9f0000 end_va = 0x2eee9f0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000002eee9f0000" filename = "" Region: id = 6965 start_va = 0x2ef0500000 end_va = 0x2ef05d5fff entry_point = 0x2ef0500000 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 6966 start_va = 0x7ffb8c780000 end_va = 0x7ffb8c815fff entry_point = 0x7ffb8c780000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 6967 start_va = 0x2ef0500000 end_va = 0x2ef068ffff entry_point = 0x0 region_type = private name = "private_0x0000002ef0500000" filename = "" Region: id = 6968 start_va = 0x7ffb90fb0000 end_va = 0x7ffb910f0fff entry_point = 0x7ffb90fb0000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 6969 start_va = 0x2ef0500000 end_va = 0x2ef05bcfff entry_point = 0x2ef0500000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 6970 start_va = 0x2ef0680000 end_va = 0x2ef068ffff entry_point = 0x0 region_type = private name = "private_0x0000002ef0680000" filename = "" Region: id = 6971 start_va = 0x7ffb8a850000 end_va = 0x7ffb8a9d2fff entry_point = 0x7ffb8a850000 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 6972 start_va = 0x7ffb90bc0000 end_va = 0x7ffb90c7dfff entry_point = 0x7ffb90bc0000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 6973 start_va = 0x2eeea00000 end_va = 0x2eeea00fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000002eeea00000" filename = "" Region: id = 6974 start_va = 0x7ffb90e60000 end_va = 0x7ffb90f04fff entry_point = 0x7ffb90e60000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 6975 start_va = 0x2eeea10000 end_va = 0x2eeea10fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000002eeea10000" filename = "" Region: id = 6976 start_va = 0x2eeea20000 end_va = 0x2eeea23fff entry_point = 0x2eeea20000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 6977 start_va = 0x2eeea30000 end_va = 0x2eeea72fff entry_point = 0x2eeea30000 region_type = mapped_file name = "{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000f.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x000000000000000f.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000f.db") Region: id = 6978 start_va = 0x2eeea80000 end_va = 0x2eeea83fff entry_point = 0x2eeea80000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 6979 start_va = 0x2ef0500000 end_va = 0x2ef058afff entry_point = 0x2ef0500000 region_type = mapped_file name = "{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db") Region: id = 6980 start_va = 0x2ef0590000 end_va = 0x2ef05a0fff entry_point = 0x2ef0590000 region_type = mapped_file name = "propsys.dll.mui" filename = "\\Windows\\System32\\en-US\\propsys.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\propsys.dll.mui") Region: id = 6981 start_va = 0x2ef05b0000 end_va = 0x2ef05b3fff entry_point = 0x2ef05b0000 region_type = mapped_file name = "cversions.1.db" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db") Region: id = 6982 start_va = 0x2ef05c0000 end_va = 0x2ef05d2fff entry_point = 0x2ef05c0000 region_type = mapped_file name = "{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001c.db" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001c.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001c.db") Region: id = 6983 start_va = 0x2ef05e0000 end_va = 0x2ef05e0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000002ef05e0000" filename = "" Region: id = 6984 start_va = 0x2ef0690000 end_va = 0x2ef078ffff entry_point = 0x0 region_type = private name = "private_0x0000002ef0690000" filename = "" Region: id = 6985 start_va = 0x7ff74ebf9000 end_va = 0x7ff74ebfafff entry_point = 0x0 region_type = private name = "private_0x00007ff74ebf9000" filename = "" Region: id = 6986 start_va = 0x7ffb8eb00000 end_va = 0x7ffb8eb43fff entry_point = 0x7ffb8eb00000 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 6987 start_va = 0x7ffb8d780000 end_va = 0x7ffb8d796fff entry_point = 0x7ffb8d780000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 6988 start_va = 0x7ffb8dcd0000 end_va = 0x7ffb8dcf7fff entry_point = 0x7ffb8dcd0000 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 6989 start_va = 0x7ffb8d3d0000 end_va = 0x7ffb8d402fff entry_point = 0x7ffb8d3d0000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 6990 start_va = 0x2ef0790000 end_va = 0x2ef088ffff entry_point = 0x0 region_type = private name = "private_0x0000002ef0790000" filename = "" Region: id = 6991 start_va = 0x2ef0890000 end_va = 0x2ef098ffff entry_point = 0x0 region_type = private name = "private_0x0000002ef0890000" filename = "" Region: id = 6992 start_va = 0x2ef0990000 end_va = 0x2ef0a8ffff entry_point = 0x0 region_type = private name = "private_0x0000002ef0990000" filename = "" Region: id = 6993 start_va = 0x7ff74ebf3000 end_va = 0x7ff74ebf4fff entry_point = 0x0 region_type = private name = "private_0x00007ff74ebf3000" filename = "" Region: id = 6994 start_va = 0x7ff74ebf5000 end_va = 0x7ff74ebf6fff entry_point = 0x0 region_type = private name = "private_0x00007ff74ebf5000" filename = "" Region: id = 6995 start_va = 0x7ff74ebf7000 end_va = 0x7ff74ebf8fff entry_point = 0x0 region_type = private name = "private_0x00007ff74ebf7000" filename = "" Region: id = 6996 start_va = 0x7ffb85bc0000 end_va = 0x7ffb85d56fff entry_point = 0x7ffb85bc0000 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\System32\\urlmon.dll" (normalized: "c:\\windows\\system32\\urlmon.dll") Region: id = 6997 start_va = 0x2ef0a90000 end_va = 0x2ef0b8ffff entry_point = 0x0 region_type = private name = "private_0x0000002ef0a90000" filename = "" Region: id = 6998 start_va = 0x7ff74eace000 end_va = 0x7ff74eacffff entry_point = 0x0 region_type = private name = "private_0x00007ff74eace000" filename = "" Region: id = 6999 start_va = 0x7ffb88720000 end_va = 0x7ffb88a95fff entry_point = 0x7ffb88720000 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" (normalized: "c:\\windows\\system32\\iertutil.dll") Region: id = 7000 start_va = 0x7ffb8dad0000 end_va = 0x7ffb8dafbfff entry_point = 0x7ffb8dad0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 7001 start_va = 0x2ef05b0000 end_va = 0x2ef05b0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000002ef05b0000" filename = "" Region: id = 7015 start_va = 0x2eeea00000 end_va = 0x2eeea0ffff entry_point = 0x0 region_type = private name = "private_0x0000002eeea00000" filename = "" Region: id = 7016 start_va = 0x2ef05b0000 end_va = 0x2ef05b4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000002ef05b0000" filename = "" Region: id = 7017 start_va = 0x2eeea00000 end_va = 0x2eeea04fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000002eeea00000" filename = "" Region: id = 7018 start_va = 0x2eeea00000 end_va = 0x2eeea04fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000002eeea00000" filename = "" Region: id = 7019 start_va = 0x2eeea00000 end_va = 0x2eeea04fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000002eeea00000" filename = "" Region: id = 7020 start_va = 0x2eeea00000 end_va = 0x2eeea04fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000002eeea00000" filename = "" Region: id = 7021 start_va = 0x2eeea00000 end_va = 0x2eeea04fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000002eeea00000" filename = "" Region: id = 7022 start_va = 0x2eeea00000 end_va = 0x2eeea04fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000002eeea00000" filename = "" Region: id = 7023 start_va = 0x2eeea00000 end_va = 0x2eeea04fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000002eeea00000" filename = "" Region: id = 7024 start_va = 0x2eeea00000 end_va = 0x2eeea04fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000002eeea00000" filename = "" Region: id = 7025 start_va = 0x2eeea00000 end_va = 0x2eeea04fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000002eeea00000" filename = "" Region: id = 7026 start_va = 0x2eeea00000 end_va = 0x2eeea04fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000002eeea00000" filename = "" Region: id = 7027 start_va = 0x2eeea00000 end_va = 0x2eeea04fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000002eeea00000" filename = "" Region: id = 7028 start_va = 0x2eeea00000 end_va = 0x2eeea04fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000002eeea00000" filename = "" Region: id = 7029 start_va = 0x2eeea00000 end_va = 0x2eeea04fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000002eeea00000" filename = "" Region: id = 7030 start_va = 0x2eeea00000 end_va = 0x2eeea04fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000002eeea00000" filename = "" Region: id = 7031 start_va = 0x2eeea00000 end_va = 0x2eeea04fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000002eeea00000" filename = "" Region: id = 7032 start_va = 0x2eeea00000 end_va = 0x2eeea04fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000002eeea00000" filename = "" Region: id = 7033 start_va = 0x2eeea00000 end_va = 0x2eeea04fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000002eeea00000" filename = "" Region: id = 7034 start_va = 0x2eeea00000 end_va = 0x2eeea04fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000002eeea00000" filename = "" Region: id = 7035 start_va = 0x2eeea00000 end_va = 0x2eeea04fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000002eeea00000" filename = "" Region: id = 7036 start_va = 0x2eeea00000 end_va = 0x2eeea04fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000002eeea00000" filename = "" Region: id = 7037 start_va = 0x2eeea00000 end_va = 0x2eeea04fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000002eeea00000" filename = "" Region: id = 7038 start_va = 0x2eeea00000 end_va = 0x2eeea04fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000002eeea00000" filename = "" Region: id = 7039 start_va = 0x2eeea00000 end_va = 0x2eeea04fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000002eeea00000" filename = "" Region: id = 7040 start_va = 0x2eeea00000 end_va = 0x2eeea04fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000002eeea00000" filename = "" Region: id = 7041 start_va = 0x2eeea00000 end_va = 0x2eeea04fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000002eeea00000" filename = "" Region: id = 7042 start_va = 0x2eeea00000 end_va = 0x2eeea04fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000002eeea00000" filename = "" Region: id = 7043 start_va = 0x2eeea00000 end_va = 0x2eeea04fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000002eeea00000" filename = "" Region: id = 7044 start_va = 0x2eeea00000 end_va = 0x2eeea04fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000002eeea00000" filename = "" Region: id = 7045 start_va = 0x2eeea00000 end_va = 0x2eeea04fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000002eeea00000" filename = "" Region: id = 7050 start_va = 0x2eeea00000 end_va = 0x2eeea04fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000002eeea00000" filename = "" Region: id = 7051 start_va = 0x2eeea00000 end_va = 0x2eeea04fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000002eeea00000" filename = "" Region: id = 7052 start_va = 0x2eeea00000 end_va = 0x2eeea04fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000002eeea00000" filename = "" Thread: id = 133 os_tid = 0x868 [0164.518] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x7ffb8e920000 [0164.518] GetProcAddress (hModule=0x7ffb8e920000, lpProcName="InitializeCriticalSectionEx") returned 0x7ffb8e973900 [0164.518] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x7ffb8e920000 [0164.519] GetProcAddress (hModule=0x7ffb8e920000, lpProcName="FlsAlloc") returned 0x7ffb8e984580 [0164.519] GetProcAddress (hModule=0x7ffb8e920000, lpProcName="FlsSetValue") returned 0x7ffb8e972900 [0164.519] LoadLibraryExW (lpLibFileName="advapi32", hFile=0x0, dwFlags=0x800) returned 0x7ffb8f2f0000 [0164.519] GetProcAddress (hModule=0x7ffb8f2f0000, lpProcName="EventRegister") returned 0x7ffb914b8ff0 [0164.519] EtwEventRegister (in: ProviderId=0x7ff74ec44058, EnableCallback=0x7ff74ec2107c, CallbackContext=0x7ff74ec44030, RegHandle=0x7ff74ec44050 | out: RegHandle=0x7ff74ec44050) returned 0x0 [0164.519] GetProcAddress (hModule=0x7ffb8f2f0000, lpProcName="EventSetInformation") returned 0x7ffb9148e180 [0164.519] EtwEventSetInformation (RegHandle=0x30002eee8f4c10, InformationClass=0x2, EventInformation=0x7ff74ec41cc0, InformationLength=0x2b) returned 0x0 [0164.520] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x7ffb8e920000 [0164.521] GetProcAddress (hModule=0x7ffb8e920000, lpProcName="InitializeCriticalSectionEx") returned 0x7ffb8e973900 [0164.521] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x7ffb8e920000 [0164.521] GetProcAddress (hModule=0x7ffb8e920000, lpProcName="FlsAlloc") returned 0x7ffb8e984580 [0164.521] GetLastError () returned 0x36b7 [0164.521] GetProcAddress (hModule=0x7ffb8e920000, lpProcName="FlsGetValue") returned 0x7ffb8e968e40 [0164.521] GetProcAddress (hModule=0x7ffb8e920000, lpProcName="FlsSetValue") returned 0x7ffb8e972900 [0164.522] SetLastError (dwErrCode=0x36b7) [0164.523] GetStartupInfoW (in: lpStartupInfo=0x2eee6cf740 | out: lpStartupInfo=0x2eee6cf740*(cb=0x68, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\eqBNr.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x1)) [0164.523] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0164.523] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0164.523] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0164.523] GetCommandLineA () returned="\"C:\\Users\\CIiHmnxMn6Ps\\Desktop\\eqBNr.exe\" " [0164.523] GetCommandLineW () returned="\"C:\\Users\\CIiHmnxMn6Ps\\Desktop\\eqBNr.exe\" " [0164.523] GetLastError () returned 0x36b7 [0164.523] SetLastError (dwErrCode=0x36b7) [0164.523] GetLastError () returned 0x36b7 [0164.523] SetLastError (dwErrCode=0x36b7) [0164.523] GetACP () returned 0x4e4 [0164.523] IsValidCodePage (CodePage=0x4e4) returned 1 [0164.523] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x2eee6cf710 | out: lpCPInfo=0x2eee6cf710) returned 1 [0164.523] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x2eee6cefb0 | out: lpCPInfo=0x2eee6cefb0) returned 1 [0164.523] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x2eee6cefd0, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0164.524] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x2eee6cefd0, cbMultiByte=256, lpWideCharStr=0x2eee6ced00, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ.") returned 256 [0164.524] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ.", cchSrc=256, lpCharType=0x2eee6cf2d0 | out: lpCharType=0x2eee6cf2d0) returned 1 [0164.524] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x2eee6cefd0, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0164.524] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x2eee6cefd0, cbMultiByte=256, lpWideCharStr=0x2eee6ceca0, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ") returned 256 [0164.524] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x800) returned 0x7ffb8e920000 [0164.524] GetProcAddress (hModule=0x7ffb8e920000, lpProcName="LCMapStringEx") returned 0x7ffb8e93a930 [0164.524] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0164.524] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ", cchSrc=256, lpDestStr=0x2eee6cea90, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ쳌") returned 256 [0164.524] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ쳌", cchWideChar=256, lpMultiByteStr=0x2eee6cf0d0, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ\x80ólî.", lpUsedDefaultChar=0x0) returned 256 [0164.524] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x2eee6cefd0, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0164.524] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x2eee6cefd0, cbMultiByte=256, lpWideCharStr=0x2eee6ceca0, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ") returned 256 [0164.524] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0164.524] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ", cchSrc=256, lpDestStr=0x2eee6cea90, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸ쳌") returned 256 [0164.524] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸ쳌", cchWideChar=256, lpMultiByteStr=0x2eee6cf1d0, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9fH\x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02h\x02(\x02(\x02(\x02(\x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x81\x03\x81\x03\x81\x03\x81\x03\x81\x03\x81\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x82\x03\x82\x03\x82\x03\x82\x03\x82\x03\x82\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x10\x02\x10\x02\x10\x02\x10\x02 \x02", lpUsedDefaultChar=0x0) returned 256 [0164.524] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x7ff74ec4b390, nSize=0x104 | out: lpFilename="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\eqBNr.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\eqbnr.exe")) returned 0x27 [0164.524] RtlInitializeSListHead (in: ListHead=0x7ff74ec4b1a0 | out: ListHead=0x7ff74ec4b1a0) [0164.524] GetLastError () returned 0x0 [0164.524] SetLastError (dwErrCode=0x0) [0164.524] GetEnvironmentStringsW () returned 0x2eee8f8040* [0164.525] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="=::=::\\", cchWideChar=1320, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1320 [0164.525] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="=::=::\\", cchWideChar=1320, lpMultiByteStr=0x2eee8f8aa0, cbMultiByte=1320, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="=::=::\\", lpUsedDefaultChar=0x0) returned 1320 [0164.525] FreeEnvironmentStringsW (penv=0x2eee8f8040) returned 1 [0164.525] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x7ff74ec28bc4) returned 0x0 [0164.526] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x2eee6cf620, nSize=0x104 | out: lpFilename="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\eqBNr.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\eqbnr.exe")) returned 0x27 [0164.526] GetStartupInfoW (in: lpStartupInfo=0x2eee6cf7d0 | out: lpStartupInfo=0x2eee6cf7d0*(cb=0x68, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\eqBNr.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0164.537] Sleep (dwMilliseconds=0x1388) [0169.541] GetCommandLineW () returned="\"C:\\Users\\CIiHmnxMn6Ps\\Desktop\\eqBNr.exe\" " [0169.541] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\CIiHmnxMn6Ps\\Desktop\\eqBNr.exe\" ", pNumArgs=0x2eee60dfc8 | out: pNumArgs=0x2eee60dfc8) returned 0x2eee8e69e0*="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\eqBNr.exe" [0169.541] DeleteFileW (lpFileName=0x0) returned 0 [0169.541] LocalFree (hMem=0x2eee8e69e0) returned 0x0 [0169.542] GetVersionExW (in: lpVersionInformation=0x2eee60dfd0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x2eee60dfd0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x2, dwBuildNumber=0x23f0, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0169.542] GetWindowsDirectoryW (in: lpBuffer=0x2eee60d720, uSize=0x64 | out: lpBuffer="C:\\Windows") returned 0xa [0169.543] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x7ffb90a40000 [0169.544] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="IsWow64Process") returned 0x7ffb90a5e960 [0169.544] GetCurrentProcess () returned 0xffffffffffffffff [0169.544] IsWow64Process (in: hProcess=0xffffffffffffffff, Wow64Process=0x2eee60d6c0 | out: Wow64Process=0x2eee60d6c0) returned 1 [0169.544] FreeLibrary (hLibModule=0x7ffb90a40000) returned 1 [0169.544] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x2eee60dcf0, nSize=0x140 | out: lpFilename="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\eqBNr.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\eqbnr.exe")) returned 0x27 [0169.544] ShellExecuteW (hwnd=0x0, lpOperation=0x0, lpFile="C:\\Windows\\System32\\cmd.exe", lpParameters="/C REG ADD \"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run\" /v \"svchos\" /t REG_SZ /d \"C:\\Users\\CIiHmnxMn6Ps\\Desktop\\eqBNr.exe\" /f", lpDirectory=0x0, nShowCmd=0) returned 0x2a [0169.793] SetLastError (dwErrCode=0x0) [0169.793] GetCurrentThread () returned 0xfffffffffffffffe [0169.793] OpenThreadToken (in: ThreadHandle=0xfffffffffffffffe, DesiredAccess=0x28, OpenAsSelf=0, TokenHandle=0x2eee60dfc0 | out: TokenHandle=0x2eee60dfc0*=0x0) returned 0 [0169.793] GetLastError () returned 0x3f0 [0169.793] ImpersonateSelf (ImpersonationLevel=0x2) returned 1 [0169.793] GetCurrentThread () returned 0xfffffffffffffffe [0169.793] OpenThreadToken (in: ThreadHandle=0xfffffffffffffffe, DesiredAccess=0x28, OpenAsSelf=0, TokenHandle=0x2eee60dfc0 | out: TokenHandle=0x2eee60dfc0*=0x29c) returned 1 [0169.793] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x2eee60df70 | out: lpLuid=0x2eee60df70*(LowPart=0x14, HighPart=0)) returned 1 [0169.795] AdjustTokenPrivileges (in: TokenHandle=0x29c, DisableAllPrivileges=0, NewState=0x2eee60df78*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0169.795] GetLastError () returned 0x514 [0169.795] GetLastError () returned 0x514 [0169.795] SetLastError (dwErrCode=0x514) [0169.795] GetLastError () returned 0x514 [0169.795] SetLastError (dwErrCode=0x514) [0169.796] GetLastError () returned 0x514 [0169.796] SetLastError (dwErrCode=0x514) [0169.796] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2c8 [0169.797] Process32FirstW (in: hSnapshot=0x2c8, lppe=0x2eee60dd20 | out: lppe=0x2eee60dd20*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0169.798] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2eee60dd20 | out: lppe=0x2eee60dd20*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x65, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0169.798] SetLastError (dwErrCode=0x0) [0169.798] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0169.798] CloseHandle (hObject=0x0) returned 0 [0169.798] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2eee60dd20 | out: lppe=0x2eee60dd20*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0169.799] SetLastError (dwErrCode=0x0) [0169.799] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x108) returned 0x0 [0169.799] CloseHandle (hObject=0x0) returned 0 [0169.799] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2eee60dd20 | out: lppe=0x2eee60dd20*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x150, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x148, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0169.799] SetLastError (dwErrCode=0x0) [0169.799] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x150) returned 0x0 [0169.800] CloseHandle (hObject=0x0) returned 0 [0169.800] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2eee60dd20 | out: lppe=0x2eee60dd20*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x148, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0169.800] SetLastError (dwErrCode=0x0) [0169.800] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x190) returned 0x0 [0169.800] CloseHandle (hObject=0x0) returned 0 [0169.800] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2eee60dd20 | out: lppe=0x2eee60dd20*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x188, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0169.801] SetLastError (dwErrCode=0x0) [0169.801] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x198) returned 0x0 [0169.801] CloseHandle (hObject=0x0) returned 0 [0169.801] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2eee60dd20 | out: lppe=0x2eee60dd20*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x188, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0169.801] SetLastError (dwErrCode=0x0) [0169.801] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x1c8) returned 0x0 [0169.801] CloseHandle (hObject=0x0) returned 0 [0169.801] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2eee60dd20 | out: lppe=0x2eee60dd20*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x190, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0169.802] SetLastError (dwErrCode=0x0) [0169.802] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x1e0) returned 0x0 [0169.802] CloseHandle (hObject=0x0) returned 0 [0169.802] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2eee60dd20 | out: lppe=0x2eee60dd20*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x190, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0169.802] SetLastError (dwErrCode=0x0) [0169.802] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x1e8) returned 0x0 [0169.802] CloseHandle (hObject=0x0) returned 0 [0169.802] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2eee60dd20 | out: lppe=0x2eee60dd20*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1e0, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0169.803] SetLastError (dwErrCode=0x0) [0169.803] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x23c) returned 0x0 [0169.803] CloseHandle (hObject=0x0) returned 0 [0169.803] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2eee60dd20 | out: lppe=0x2eee60dd20*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1e0, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0169.803] SetLastError (dwErrCode=0x0) [0169.803] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x260) returned 0x0 [0169.804] CloseHandle (hObject=0x0) returned 0 [0169.804] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2eee60dd20 | out: lppe=0x2eee60dd20*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0169.804] SetLastError (dwErrCode=0x0) [0169.804] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x2d4) returned 0x0 [0169.804] CloseHandle (hObject=0x0) returned 0 [0169.804] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2eee60dd20 | out: lppe=0x2eee60dd20*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x328, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x41, th32ParentProcessID=0x1e0, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0169.805] SetLastError (dwErrCode=0x0) [0169.805] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x328) returned 0x0 [0169.805] CloseHandle (hObject=0x0) returned 0 [0169.805] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2eee60dd20 | out: lppe=0x2eee60dd20*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1e0, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0169.805] SetLastError (dwErrCode=0x0) [0169.805] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x344) returned 0x0 [0169.805] CloseHandle (hObject=0x0) returned 0 [0169.805] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2eee60dd20 | out: lppe=0x2eee60dd20*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x34c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1e0, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0169.806] SetLastError (dwErrCode=0x0) [0169.806] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x34c) returned 0x0 [0169.806] CloseHandle (hObject=0x0) returned 0 [0169.806] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2eee60dd20 | out: lppe=0x2eee60dd20*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1e0, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0169.807] SetLastError (dwErrCode=0x0) [0169.807] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x390) returned 0x0 [0169.807] CloseHandle (hObject=0x0) returned 0 [0169.807] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2eee60dd20 | out: lppe=0x2eee60dd20*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x1e0, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0169.808] SetLastError (dwErrCode=0x0) [0169.808] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x3b8) returned 0x0 [0169.808] CloseHandle (hObject=0x0) returned 0 [0169.808] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2eee60dd20 | out: lppe=0x2eee60dd20*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x228, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1e0, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0169.808] SetLastError (dwErrCode=0x0) [0169.808] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x228) returned 0x0 [0169.809] CloseHandle (hObject=0x0) returned 0 [0169.809] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2eee60dd20 | out: lppe=0x2eee60dd20*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x404, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1e0, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0169.809] SetLastError (dwErrCode=0x0) [0169.809] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x404) returned 0x0 [0169.809] CloseHandle (hObject=0x0) returned 0 [0169.809] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2eee60dd20 | out: lppe=0x2eee60dd20*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1e0, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0169.810] SetLastError (dwErrCode=0x0) [0169.810] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x444) returned 0x0 [0169.810] CloseHandle (hObject=0x0) returned 0 [0169.810] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2eee60dd20 | out: lppe=0x2eee60dd20*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x1e0, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0169.810] SetLastError (dwErrCode=0x0) [0169.810] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x45c) returned 0x0 [0169.810] CloseHandle (hObject=0x0) returned 0 [0169.810] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2eee60dd20 | out: lppe=0x2eee60dd20*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1e0, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0169.811] SetLastError (dwErrCode=0x0) [0169.811] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x558) returned 0x0 [0169.811] CloseHandle (hObject=0x0) returned 0 [0169.811] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2eee60dd20 | out: lppe=0x2eee60dd20*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1e0, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0169.811] SetLastError (dwErrCode=0x0) [0169.811] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x5a0) returned 0x0 [0169.811] CloseHandle (hObject=0x0) returned 0 [0169.812] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2eee60dd20 | out: lppe=0x2eee60dd20*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x328, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0169.812] SetLastError (dwErrCode=0x0) [0169.812] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x7cc) returned 0x2c4 [0169.812] OpenProcessToken (in: ProcessHandle=0x2c4, DesiredAccess=0x20008, TokenHandle=0x2eee60dd10 | out: TokenHandle=0x2eee60dd10*=0x2c0) returned 1 [0169.812] GetTokenInformation (in: TokenHandle=0x2c0, TokenInformationClass=0x1, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x2eee60dd00 | out: TokenInformation=0x0, ReturnLength=0x2eee60dd00) returned 0 [0169.812] GetTokenInformation (in: TokenHandle=0x2c0, TokenInformationClass=0x1, TokenInformation=0x2eee91f150, TokenInformationLength=0x2c, ReturnLength=0x2eee60dd00 | out: TokenInformation=0x2eee91f150, ReturnLength=0x2eee60dd00) returned 1 [0169.812] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x2eee91f160*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x0, cchName=0x2eee60dd08, ReferencedDomainName=0x0, cchReferencedDomainName=0x2eee60dd04, peUse=0x2eee60dd0c | out: Name=0x0, cchName=0x2eee60dd08, ReferencedDomainName=0x0, cchReferencedDomainName=0x2eee60dd04, peUse=0x2eee60dd0c) returned 0 [0169.814] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x2eee91f160*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x2eee932bb0, cchName=0x2eee60dd08, ReferencedDomainName=0x2eee929b40, cchReferencedDomainName=0x2eee60dd04, peUse=0x2eee60dd0c | out: Name="CIiHmnxMn6Ps", cchName=0x2eee60dd08, ReferencedDomainName="LHNIWSJ", cchReferencedDomainName=0x2eee60dd04, peUse=0x2eee60dd0c) returned 1 [0169.814] CloseHandle (hObject=0x2c4) returned 1 [0169.814] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2eee60dd20 | out: lppe=0x2eee60dd20*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x328, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0169.815] SetLastError (dwErrCode=0x0) [0169.815] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x7ec) returned 0x2c4 [0169.815] OpenProcessToken (in: ProcessHandle=0x2c4, DesiredAccess=0x20008, TokenHandle=0x2eee60dd10 | out: TokenHandle=0x2eee60dd10*=0x2bc) returned 1 [0169.815] GetTokenInformation (in: TokenHandle=0x2bc, TokenInformationClass=0x1, TokenInformation=0x2eee91f150, TokenInformationLength=0x0, ReturnLength=0x2eee60dd00 | out: TokenInformation=0x2eee91f150, ReturnLength=0x2eee60dd00) returned 0 [0169.815] GetTokenInformation (in: TokenHandle=0x2bc, TokenInformationClass=0x1, TokenInformation=0x2eee91f090, TokenInformationLength=0x2c, ReturnLength=0x2eee60dd00 | out: TokenInformation=0x2eee91f090, ReturnLength=0x2eee60dd00) returned 1 [0169.815] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x2eee91f0a0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x0, cchName=0x2eee60dd08, ReferencedDomainName=0x0, cchReferencedDomainName=0x2eee60dd04, peUse=0x2eee60dd0c | out: Name=0x0, cchName=0x2eee60dd08, ReferencedDomainName=0x0, cchReferencedDomainName=0x2eee60dd04, peUse=0x2eee60dd0c) returned 0 [0169.816] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x2eee91f0a0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x2eee9325e0, cchName=0x2eee60dd08, ReferencedDomainName=0x2eee9299a0, cchReferencedDomainName=0x2eee60dd04, peUse=0x2eee60dd0c | out: Name="CIiHmnxMn6Ps", cchName=0x2eee60dd08, ReferencedDomainName="LHNIWSJ", cchReferencedDomainName=0x2eee60dd04, peUse=0x2eee60dd0c) returned 1 [0169.816] CloseHandle (hObject=0x2c4) returned 1 [0169.816] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2eee60dd20 | out: lppe=0x2eee60dd20*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x43, th32ParentProcessID=0x500, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0169.817] SetLastError (dwErrCode=0x0) [0169.817] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x5d4) returned 0x2c4 [0169.817] OpenProcessToken (in: ProcessHandle=0x2c4, DesiredAccess=0x20008, TokenHandle=0x2eee60dd10 | out: TokenHandle=0x2eee60dd10*=0x294) returned 1 [0169.817] GetTokenInformation (in: TokenHandle=0x294, TokenInformationClass=0x1, TokenInformation=0x2eee91f090, TokenInformationLength=0x0, ReturnLength=0x2eee60dd00 | out: TokenInformation=0x2eee91f090, ReturnLength=0x2eee60dd00) returned 0 [0169.817] GetTokenInformation (in: TokenHandle=0x294, TokenInformationClass=0x1, TokenInformation=0x2eee91f090, TokenInformationLength=0x2c, ReturnLength=0x2eee60dd00 | out: TokenInformation=0x2eee91f090, ReturnLength=0x2eee60dd00) returned 1 [0169.817] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x2eee91f0a0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x0, cchName=0x2eee60dd08, ReferencedDomainName=0x0, cchReferencedDomainName=0x2eee60dd04, peUse=0x2eee60dd0c | out: Name=0x0, cchName=0x2eee60dd08, ReferencedDomainName=0x0, cchReferencedDomainName=0x2eee60dd04, peUse=0x2eee60dd0c) returned 0 [0169.818] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x2eee91f0a0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x2eee932850, cchName=0x2eee60dd08, ReferencedDomainName=0x2eee929c80, cchReferencedDomainName=0x2eee60dd04, peUse=0x2eee60dd0c | out: Name="CIiHmnxMn6Ps", cchName=0x2eee60dd08, ReferencedDomainName="LHNIWSJ", cchReferencedDomainName=0x2eee60dd04, peUse=0x2eee60dd0c) returned 1 [0169.818] CloseHandle (hObject=0x2c4) returned 1 [0169.818] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2eee60dd20 | out: lppe=0x2eee60dd20*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x818, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0169.819] SetLastError (dwErrCode=0x0) [0169.819] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x818) returned 0x2c4 [0169.819] OpenProcessToken (in: ProcessHandle=0x2c4, DesiredAccess=0x20008, TokenHandle=0x2eee60dd10 | out: TokenHandle=0x2eee60dd10*=0x290) returned 1 [0169.819] GetTokenInformation (in: TokenHandle=0x290, TokenInformationClass=0x1, TokenInformation=0x2eee91f090, TokenInformationLength=0x0, ReturnLength=0x2eee60dd00 | out: TokenInformation=0x2eee91f090, ReturnLength=0x2eee60dd00) returned 0 [0169.819] GetTokenInformation (in: TokenHandle=0x290, TokenInformationClass=0x1, TokenInformation=0x2eee91ead0, TokenInformationLength=0x2c, ReturnLength=0x2eee60dd00 | out: TokenInformation=0x2eee91ead0, ReturnLength=0x2eee60dd00) returned 1 [0169.819] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x2eee91eae0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x0, cchName=0x2eee60dd08, ReferencedDomainName=0x0, cchReferencedDomainName=0x2eee60dd04, peUse=0x2eee60dd0c | out: Name=0x0, cchName=0x2eee60dd08, ReferencedDomainName=0x0, cchReferencedDomainName=0x2eee60dd04, peUse=0x2eee60dd0c) returned 0 [0169.820] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x2eee91eae0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x2eee932910, cchName=0x2eee60dd08, ReferencedDomainName=0x2eee929a40, cchReferencedDomainName=0x2eee60dd04, peUse=0x2eee60dd0c | out: Name="CIiHmnxMn6Ps", cchName=0x2eee60dd08, ReferencedDomainName="LHNIWSJ", cchReferencedDomainName=0x2eee60dd04, peUse=0x2eee60dd0c) returned 1 [0169.820] CloseHandle (hObject=0x2c4) returned 1 [0169.821] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2eee60dd20 | out: lppe=0x2eee60dd20*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x97c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0169.821] SetLastError (dwErrCode=0x0) [0169.821] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x97c) returned 0x2c4 [0169.821] OpenProcessToken (in: ProcessHandle=0x2c4, DesiredAccess=0x20008, TokenHandle=0x2eee60dd10 | out: TokenHandle=0x2eee60dd10*=0x280) returned 1 [0169.821] GetTokenInformation (in: TokenHandle=0x280, TokenInformationClass=0x1, TokenInformation=0x2eee91ead0, TokenInformationLength=0x0, ReturnLength=0x2eee60dd00 | out: TokenInformation=0x2eee91ead0, ReturnLength=0x2eee60dd00) returned 0 [0169.821] GetTokenInformation (in: TokenHandle=0x280, TokenInformationClass=0x1, TokenInformation=0x2eee91e910, TokenInformationLength=0x2c, ReturnLength=0x2eee60dd00 | out: TokenInformation=0x2eee91e910, ReturnLength=0x2eee60dd00) returned 1 [0169.821] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x2eee91e920*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x0, cchName=0x2eee60dd08, ReferencedDomainName=0x0, cchReferencedDomainName=0x2eee60dd04, peUse=0x2eee60dd0c | out: Name=0x0, cchName=0x2eee60dd08, ReferencedDomainName=0x0, cchReferencedDomainName=0x2eee60dd04, peUse=0x2eee60dd0c) returned 0 [0169.822] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x2eee91e920*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x2eee932850, cchName=0x2eee60dd08, ReferencedDomainName=0x2eee929bc0, cchReferencedDomainName=0x2eee60dd04, peUse=0x2eee60dd0c | out: Name="CIiHmnxMn6Ps", cchName=0x2eee60dd08, ReferencedDomainName="LHNIWSJ", cchReferencedDomainName=0x2eee60dd04, peUse=0x2eee60dd0c) returned 1 [0169.823] CloseHandle (hObject=0x2c4) returned 1 [0169.823] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2eee60dd20 | out: lppe=0x2eee60dd20*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xb0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0169.824] SetLastError (dwErrCode=0x0) [0169.824] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0xb0c) returned 0x2c4 [0169.824] OpenProcessToken (in: ProcessHandle=0x2c4, DesiredAccess=0x20008, TokenHandle=0x2eee60dd10 | out: TokenHandle=0x2eee60dd10*=0x2b0) returned 1 [0169.824] GetTokenInformation (in: TokenHandle=0x2b0, TokenInformationClass=0x1, TokenInformation=0x2eee91e910, TokenInformationLength=0x0, ReturnLength=0x2eee60dd00 | out: TokenInformation=0x2eee91e910, ReturnLength=0x2eee60dd00) returned 0 [0169.824] GetTokenInformation (in: TokenHandle=0x2b0, TokenInformationClass=0x1, TokenInformation=0x2eee91ef50, TokenInformationLength=0x2c, ReturnLength=0x2eee60dd00 | out: TokenInformation=0x2eee91ef50, ReturnLength=0x2eee60dd00) returned 1 [0169.824] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x2eee91ef60*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x0, cchName=0x2eee60dd08, ReferencedDomainName=0x0, cchReferencedDomainName=0x2eee60dd04, peUse=0x2eee60dd0c | out: Name=0x0, cchName=0x2eee60dd08, ReferencedDomainName=0x0, cchReferencedDomainName=0x2eee60dd04, peUse=0x2eee60dd0c) returned 0 [0169.872] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x2eee91ef60*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x2eee932730, cchName=0x2eee60dd08, ReferencedDomainName=0x2eee929bc0, cchReferencedDomainName=0x2eee60dd04, peUse=0x2eee60dd0c | out: Name="CIiHmnxMn6Ps", cchName=0x2eee60dd08, ReferencedDomainName="LHNIWSJ", cchReferencedDomainName=0x2eee60dd04, peUse=0x2eee60dd0c) returned 1 [0169.873] CloseHandle (hObject=0x2c4) returned 1 [0169.873] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2eee60dd20 | out: lppe=0x2eee60dd20*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x5d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="eqBNr.exe")) returned 1 [0169.874] SetLastError (dwErrCode=0x0) [0169.874] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x5dc) returned 0x2c4 [0169.874] OpenProcessToken (in: ProcessHandle=0x2c4, DesiredAccess=0x20008, TokenHandle=0x2eee60dd10 | out: TokenHandle=0x2eee60dd10*=0x2ac) returned 1 [0169.874] GetTokenInformation (in: TokenHandle=0x2ac, TokenInformationClass=0x1, TokenInformation=0x2eee91ef50, TokenInformationLength=0x0, ReturnLength=0x2eee60dd00 | out: TokenInformation=0x2eee91ef50, ReturnLength=0x2eee60dd00) returned 0 [0169.874] GetTokenInformation (in: TokenHandle=0x2ac, TokenInformationClass=0x1, TokenInformation=0x2eee91f2d0, TokenInformationLength=0x2c, ReturnLength=0x2eee60dd00 | out: TokenInformation=0x2eee91f2d0, ReturnLength=0x2eee60dd00) returned 1 [0169.874] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x2eee91f2e0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x0, cchName=0x2eee60dd08, ReferencedDomainName=0x0, cchReferencedDomainName=0x2eee60dd04, peUse=0x2eee60dd0c | out: Name=0x0, cchName=0x2eee60dd08, ReferencedDomainName=0x0, cchReferencedDomainName=0x2eee60dd04, peUse=0x2eee60dd0c) returned 0 [0169.875] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x2eee91f2e0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x2eee932a90, cchName=0x2eee60dd08, ReferencedDomainName=0x2eee929be0, cchReferencedDomainName=0x2eee60dd04, peUse=0x2eee60dd0c | out: Name="CIiHmnxMn6Ps", cchName=0x2eee60dd08, ReferencedDomainName="LHNIWSJ", cchReferencedDomainName=0x2eee60dd04, peUse=0x2eee60dd0c) returned 1 [0169.875] CloseHandle (hObject=0x2c4) returned 1 [0169.875] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2eee60dd20 | out: lppe=0x2eee60dd20*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x478, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x5dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0169.876] SetLastError (dwErrCode=0x0) [0169.876] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x478) returned 0x2c4 [0169.876] OpenProcessToken (in: ProcessHandle=0x2c4, DesiredAccess=0x20008, TokenHandle=0x2eee60dd10 | out: TokenHandle=0x2eee60dd10*=0x2a8) returned 1 [0169.876] GetTokenInformation (in: TokenHandle=0x2a8, TokenInformationClass=0x1, TokenInformation=0x2eee91f2d0, TokenInformationLength=0x0, ReturnLength=0x2eee60dd00 | out: TokenInformation=0x2eee91f2d0, ReturnLength=0x2eee60dd00) returned 0 [0169.876] GetTokenInformation (in: TokenHandle=0x2a8, TokenInformationClass=0x1, TokenInformation=0x2eee91ee50, TokenInformationLength=0x2c, ReturnLength=0x2eee60dd00 | out: TokenInformation=0x2eee91ee50, ReturnLength=0x2eee60dd00) returned 1 [0169.876] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x2eee91ee60*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x0, cchName=0x2eee60dd08, ReferencedDomainName=0x0, cchReferencedDomainName=0x2eee60dd04, peUse=0x2eee60dd0c | out: Name=0x0, cchName=0x2eee60dd08, ReferencedDomainName=0x0, cchReferencedDomainName=0x2eee60dd04, peUse=0x2eee60dd0c) returned 0 [0169.878] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x2eee91ee60*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xf7)), Name=0x2eee932b80, cchName=0x2eee60dd08, ReferencedDomainName=0x2eee929d20, cchReferencedDomainName=0x2eee60dd04, peUse=0x2eee60dd0c | out: Name="CIiHmnxMn6Ps", cchName=0x2eee60dd08, ReferencedDomainName="LHNIWSJ", cchReferencedDomainName=0x2eee60dd04, peUse=0x2eee60dd0c) returned 1 [0169.879] CloseHandle (hObject=0x2c4) returned 1 [0169.879] Process32NextW (in: hSnapshot=0x2c8, lppe=0x2eee60dd20 | out: lppe=0x2eee60dd20*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x478, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x5dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 0 [0169.879] CloseHandle (hObject=0x2c8) returned 1 [0169.879] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x2eee6cf740, nSize=0x64 | out: lpFilename="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\eqBNr.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\eqbnr.exe")) returned 0x27 [0169.880] SetLastError (dwErrCode=0x0) [0169.880] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x7cc) returned 0x2c8 [0169.880] GetModuleHandleA (lpModuleName=0x0) returned 0x7ff74ec20000 [0169.880] SetLastError (dwErrCode=0x0) [0169.880] VirtualAllocEx (hProcess=0x2c8, lpAddress=0x7ff74ec20000, dwSize=0x35000, flAllocationType=0x3000, flProtect=0x40) returned 0x7ff74ec20000 [0169.882] WriteProcessMemory (in: hProcess=0x2c8, lpBaseAddress=0x7ff74ec20000, lpBuffer=0x7ff74ec20000*, nSize=0x35000, lpNumberOfBytesWritten=0x2eee60df70 | out: lpBuffer=0x7ff74ec20000*, lpNumberOfBytesWritten=0x2eee60df70*=0x35000) returned 1 [0169.966] CreateRemoteThread (in: hProcess=0x2c8, lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff74ec219a0, lpParameter=0x7ff74ec20000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c4 [0169.967] Sleep (dwMilliseconds=0x12c) [0170.270] SetLastError (dwErrCode=0x0) [0170.270] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x7ec) returned 0x2a4 [0170.270] GetModuleHandleA (lpModuleName=0x0) returned 0x7ff74ec20000 [0170.270] SetLastError (dwErrCode=0x0) [0170.270] VirtualAllocEx (hProcess=0x2a4, lpAddress=0x7ff74ec20000, dwSize=0x35000, flAllocationType=0x3000, flProtect=0x40) returned 0x7ff74ec20000 [0170.274] WriteProcessMemory (in: hProcess=0x2a4, lpBaseAddress=0x7ff74ec20000, lpBuffer=0x7ff74ec20000*, nSize=0x35000, lpNumberOfBytesWritten=0x2eee60df70 | out: lpBuffer=0x7ff74ec20000*, lpNumberOfBytesWritten=0x2eee60df70*=0x35000) returned 1 [0170.279] CreateRemoteThread (in: hProcess=0x2a4, lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff74ec219a0, lpParameter=0x7ff74ec20000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a0 [0170.279] Sleep (dwMilliseconds=0x12c) [0170.602] SetLastError (dwErrCode=0x0) [0170.602] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x818) returned 0x2e0 [0170.602] GetModuleHandleA (lpModuleName=0x0) returned 0x7ff74ec20000 [0170.602] SetLastError (dwErrCode=0x0) [0170.602] VirtualAllocEx (hProcess=0x2e0, lpAddress=0x7ff74ec20000, dwSize=0x35000, flAllocationType=0x3000, flProtect=0x40) returned 0x7ff74ec20000 [0170.611] WriteProcessMemory (in: hProcess=0x2e0, lpBaseAddress=0x7ff74ec20000, lpBuffer=0x7ff74ec20000*, nSize=0x35000, lpNumberOfBytesWritten=0x2eee60df70 | out: lpBuffer=0x7ff74ec20000*, lpNumberOfBytesWritten=0x2eee60df70*=0x35000) returned 1 [0170.615] CreateRemoteThread (in: hProcess=0x2e0, lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff74ec219a0, lpParameter=0x7ff74ec20000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2e4 [0170.616] Sleep (dwMilliseconds=0x12c) [0170.932] SetLastError (dwErrCode=0x0) [0170.932] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x97c) returned 0x288 [0170.932] GetModuleHandleA (lpModuleName=0x0) returned 0x7ff74ec20000 [0170.932] SetLastError (dwErrCode=0x0) [0170.932] VirtualAllocEx (hProcess=0x288, lpAddress=0x7ff74ec20000, dwSize=0x35000, flAllocationType=0x3000, flProtect=0x40) returned 0x7ff74ec20000 [0170.936] WriteProcessMemory (in: hProcess=0x288, lpBaseAddress=0x7ff74ec20000, lpBuffer=0x7ff74ec20000*, nSize=0x35000, lpNumberOfBytesWritten=0x2eee60df70 | out: lpBuffer=0x7ff74ec20000*, lpNumberOfBytesWritten=0x2eee60df70*=0x35000) returned 1 [0170.945] CreateRemoteThread (in: hProcess=0x288, lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff74ec219a0, lpParameter=0x7ff74ec20000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x284 [0170.947] Sleep (dwMilliseconds=0x12c) [0171.260] SetLastError (dwErrCode=0x0) [0171.260] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0xb0c) returned 0x2d8 [0171.260] GetModuleHandleA (lpModuleName=0x0) returned 0x7ff74ec20000 [0171.260] SetLastError (dwErrCode=0x0) [0171.260] VirtualAllocEx (hProcess=0x2d8, lpAddress=0x7ff74ec20000, dwSize=0x35000, flAllocationType=0x3000, flProtect=0x40) returned 0x7ff74ec20000 [0171.270] WriteProcessMemory (in: hProcess=0x2d8, lpBaseAddress=0x7ff74ec20000, lpBuffer=0x7ff74ec20000*, nSize=0x35000, lpNumberOfBytesWritten=0x2eee60df70 | out: lpBuffer=0x7ff74ec20000*, lpNumberOfBytesWritten=0x2eee60df70*=0x35000) returned 1 [0171.283] CreateRemoteThread (in: hProcess=0x2d8, lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff74ec219a0, lpParameter=0x7ff74ec20000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b8 [0171.284] Sleep (dwMilliseconds=0x12c) [0171.588] SetLastError (dwErrCode=0x0) [0171.588] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x478) returned 0x0 [0171.588] Sleep (dwMilliseconds=0x12c) [0171.900] Sleep (dwMilliseconds=0x1388) [0176.902] GetWindowsDirectoryW (in: lpBuffer=0x2eee60df10, uSize=0x32 | out: lpBuffer="C:\\Windows") returned 0xa [0176.902] SetLastError (dwErrCode=0x0) [0176.902] CreateFileW (lpFileName="C:\\users\\Public\\sys" (normalized: "c:\\users\\public\\sys"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.903] GetLastError () returned 0x20 [0176.903] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.903] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x2eee6cf620, nSize=0x104 | out: lpFilename="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\eqBNr.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\eqbnr.exe")) returned 0x27 [0176.903] GetModuleHandleW (lpModuleName=0x0) returned 0x7ff74ec20000 [0176.903] GetModuleHandleW (lpModuleName=0x0) returned 0x7ff74ec20000 [0176.903] GetLastError () returned 0x0 [0176.903] SetLastError (dwErrCode=0x0) [0176.903] GetLastError () returned 0x0 [0176.903] SetLastError (dwErrCode=0x0) [0176.904] LoadLibraryExW (lpLibFileName="api-ms-win-appmodel-runtime-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x7ffb8df40000 [0176.904] GetProcAddress (hModule=0x7ffb8df40000, lpProcName="GetCurrentPackageId") returned 0x7ffb8df42310 [0176.904] GetCurrentPackageId () returned 0x3d54 [0176.904] GetModuleHandleExW (in: dwFlags=0x0, lpModuleName="mscoree.dll", phModule=0x2eee6cf7f8 | out: phModule=0x2eee6cf7f8) returned 0 [0176.904] ExitProcess (uExitCode=0x0) Thread: id = 134 os_tid = 0x864 Thread: id = 135 os_tid = 0xbb0 Thread: id = 136 os_tid = 0x2e8 Thread: id = 137 os_tid = 0xbd0 Thread: id = 138 os_tid = 0x2e4 Thread: id = 139 os_tid = 0x760 Process: id = "13" image_name = "cmd.exe" filename = "c:\\windows\\system32\\cmd.exe" page_root = "0x29af1000" os_pid = "0x478" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "12" os_parent_pid = "0x5dc" cmd_line = "\"C:\\Windows\\System32\\cmd.exe\" /C REG ADD \"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run\" /v \"svchos\" /t REG_SZ /d \"C:\\Users\\CIiHmnxMn6Ps\\Desktop\\eqBNr.exe\" /f" cur_dir = "C:\\Windows\\system32\\" os_username = "LHNIWSJ\\CIiHmnxMn6Ps" os_groups = "LHNIWSJ\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0001b4e9" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 7002 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 7003 start_va = 0xc3b0cb0000 end_va = 0xc3b0ccffff entry_point = 0x0 region_type = private name = "private_0x000000c3b0cb0000" filename = "" Region: id = 7004 start_va = 0xc3b0cd0000 end_va = 0xc3b0ce3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000c3b0cd0000" filename = "" Region: id = 7005 start_va = 0xc3b0cf0000 end_va = 0xc3b0deffff entry_point = 0x0 region_type = private name = "private_0x000000c3b0cf0000" filename = "" Region: id = 7006 start_va = 0xc3b0df0000 end_va = 0xc3b0df3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000c3b0df0000" filename = "" Region: id = 7007 start_va = 0xc3b0e00000 end_va = 0xc3b0e00fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000c3b0e00000" filename = "" Region: id = 7008 start_va = 0xc3b0e10000 end_va = 0xc3b0e11fff entry_point = 0x0 region_type = private name = "private_0x000000c3b0e10000" filename = "" Region: id = 7009 start_va = 0x7df5ff3b0000 end_va = 0x7ff5ff3affff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ff3b0000" filename = "" Region: id = 7010 start_va = 0x7ff6a4bb0000 end_va = 0x7ff6a4bd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff6a4bb0000" filename = "" Region: id = 7011 start_va = 0x7ff6a4bdc000 end_va = 0x7ff6a4bddfff entry_point = 0x0 region_type = private name = "private_0x00007ff6a4bdc000" filename = "" Region: id = 7012 start_va = 0x7ff6a4bde000 end_va = 0x7ff6a4bdefff entry_point = 0x0 region_type = private name = "private_0x00007ff6a4bde000" filename = "" Region: id = 7013 start_va = 0x7ff6a4d80000 end_va = 0x7ff6a4dd8fff entry_point = 0x7ff6a4d80000 region_type = mapped_file name = "cmd.exe" filename = "\\Windows\\System32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe") Region: id = 7014 start_va = 0x7ffb91480000 end_va = 0x7ffb91641fff entry_point = 0x7ffb91480000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 7046 start_va = 0xc3b0ff0000 end_va = 0xc3b10effff entry_point = 0x0 region_type = private name = "private_0x000000c3b0ff0000" filename = "" Region: id = 7047 start_va = 0x7ffb8e920000 end_va = 0x7ffb8eafcfff entry_point = 0x7ffb8e920000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 7048 start_va = 0x7ffb90a40000 end_va = 0x7ffb90aecfff entry_point = 0x7ffb90a40000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 7426 start_va = 0xc3b0cb0000 end_va = 0xc3b0cbffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000c3b0cb0000" filename = "" Region: id = 7427 start_va = 0xc3b0cc0000 end_va = 0xc3b0cc6fff entry_point = 0x0 region_type = private name = "private_0x000000c3b0cc0000" filename = "" Region: id = 7428 start_va = 0xc3b0e20000 end_va = 0xc3b0eddfff entry_point = 0xc3b0e20000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 7429 start_va = 0xc3b0ee0000 end_va = 0xc3b0fdffff entry_point = 0x0 region_type = private name = "private_0x000000c3b0ee0000" filename = "" Region: id = 7430 start_va = 0xc3b1160000 end_va = 0xc3b116ffff entry_point = 0x0 region_type = private name = "private_0x000000c3b1160000" filename = "" Region: id = 7431 start_va = 0x7ff6a4ab0000 end_va = 0x7ff6a4baffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff6a4ab0000" filename = "" Region: id = 7432 start_va = 0x7ff6a4bda000 end_va = 0x7ff6a4bdbfff entry_point = 0x0 region_type = private name = "private_0x00007ff6a4bda000" filename = "" Region: id = 7433 start_va = 0x7ffb8eb50000 end_va = 0x7ffb8ebecfff entry_point = 0x7ffb8eb50000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 7434 start_va = 0xc3b0fe0000 end_va = 0xc3b0fe6fff entry_point = 0x0 region_type = private name = "private_0x000000c3b0fe0000" filename = "" Region: id = 7435 start_va = 0xc3b1170000 end_va = 0xc3b14a6fff entry_point = 0xc3b1170000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Thread: id = 140 os_tid = 0x564 [0170.521] GetModuleHandleW (lpModuleName=0x0) returned 0x7ff6a4d80000 [0170.521] __set_app_type (_Type=0x1) [0170.521] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x7ff6a4d944a0) returned 0x0 [0170.521] __getmainargs (in: _Argc=0x7ff6a4daf0e8, _Argv=0x7ff6a4daf0f0, _Env=0x7ff6a4daf0f8, _DoWildCard=0, _StartInfo=0x7ff6a4daf104 | out: _Argc=0x7ff6a4daf0e8, _Argv=0x7ff6a4daf0f0, _Env=0x7ff6a4daf0f8) returned 0 [0170.522] GetCurrentThreadId () returned 0x564 [0170.522] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x564) returned 0x6c [0170.523] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x7ffb90a40000 [0170.523] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="SetThreadUILanguage") returned 0x7ffb90a5d550 [0170.523] SetThreadUILanguage (LangId=0x0) returned 0x409 [0170.524] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0170.524] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0xc3b0defb98 | out: phkResult=0xc3b0defb98*=0x0) returned 0x2 [0170.525] VirtualQuery (in: lpAddress=0xc3b0defb84, lpBuffer=0xc3b0defb00, dwLength=0x30 | out: lpBuffer=0xc3b0defb00*(BaseAddress=0xc3b0def000, AllocationBase=0xc3b0cf0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0xffffd000)) returned 0x30 [0170.525] VirtualQuery (in: lpAddress=0xc3b0cf0000, lpBuffer=0xc3b0defb00, dwLength=0x30 | out: lpBuffer=0xc3b0defb00*(BaseAddress=0xc3b0cf0000, AllocationBase=0xc3b0cf0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0xffffd000)) returned 0x30 [0170.525] VirtualQuery (in: lpAddress=0xc3b0cf1000, lpBuffer=0xc3b0defb00, dwLength=0x30 | out: lpBuffer=0xc3b0defb00*(BaseAddress=0xc3b0cf1000, AllocationBase=0xc3b0cf0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x3000, State=0x1000, Protect=0x104, Type=0x20000, __alignment2=0xffffd000)) returned 0x30 [0170.525] VirtualQuery (in: lpAddress=0xc3b0cf4000, lpBuffer=0xc3b0defb00, dwLength=0x30 | out: lpBuffer=0xc3b0defb00*(BaseAddress=0xc3b0cf4000, AllocationBase=0xc3b0cf0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0xfc000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0xffffd000)) returned 0x30 [0170.525] VirtualQuery (in: lpAddress=0xc3b0df0000, lpBuffer=0xc3b0defb00, dwLength=0x30 | out: lpBuffer=0xc3b0defb00*(BaseAddress=0xc3b0df0000, AllocationBase=0xc3b0df0000, AllocationProtect=0x2, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x2, Type=0x40000, __alignment2=0xffffd000)) returned 0x30 [0170.525] GetConsoleOutputCP () returned 0x1b5 [0170.525] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff6a4db8640 | out: lpCPInfo=0x7ff6a4db8640) returned 1 [0170.525] SetConsoleCtrlHandler (HandlerRoutine=0x7ff6a4da15d0, Add=1) returned 1 [0170.525] _get_osfhandle (_FileHandle=1) returned 0x24 [0170.526] SetConsoleMode (hConsoleHandle=0x24, dwMode=0x0) returned 1 [0170.526] _get_osfhandle (_FileHandle=1) returned 0x24 [0170.526] GetConsoleMode (in: hConsoleHandle=0x24, lpMode=0x7ff6a4db85ec | out: lpMode=0x7ff6a4db85ec) returned 1 [0170.526] _get_osfhandle (_FileHandle=1) returned 0x24 [0170.526] SetConsoleMode (hConsoleHandle=0x24, dwMode=0x3) returned 1 [0170.526] _get_osfhandle (_FileHandle=0) returned 0x20 [0170.526] GetConsoleMode (in: hConsoleHandle=0x20, lpMode=0x7ff6a4db85e8 | out: lpMode=0x7ff6a4db85e8) returned 1 [0170.527] _get_osfhandle (_FileHandle=0) returned 0x20 [0170.527] SetConsoleMode (hConsoleHandle=0x20, dwMode=0x1e7) returned 1 [0170.527] GetEnvironmentStringsW () returned 0xc3b0ff5720* [0170.527] FreeEnvironmentStringsA (penv="=") returned 1 [0170.527] GetEnvironmentStringsW () returned 0xc3b0ff5720* [0170.527] FreeEnvironmentStringsA (penv="=") returned 1 [0170.527] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0xc3b0deea48 | out: phkResult=0xc3b0deea48*=0x78) returned 0x0 [0170.528] RegQueryValueExW (in: hKey=0x78, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0xc3b0deea40, lpData=0xc3b0deea60, lpcbData=0xc3b0deea44*=0x1000 | out: lpType=0xc3b0deea40*=0x0, lpData=0xc3b0deea60*=0x1, lpcbData=0xc3b0deea44*=0x1000) returned 0x2 [0170.528] RegQueryValueExW (in: hKey=0x78, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0xc3b0deea40, lpData=0xc3b0deea60, lpcbData=0xc3b0deea44*=0x1000 | out: lpType=0xc3b0deea40*=0x4, lpData=0xc3b0deea60*=0x1, lpcbData=0xc3b0deea44*=0x4) returned 0x0 [0170.528] RegQueryValueExW (in: hKey=0x78, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0xc3b0deea40, lpData=0xc3b0deea60, lpcbData=0xc3b0deea44*=0x1000 | out: lpType=0xc3b0deea40*=0x0, lpData=0xc3b0deea60*=0x1, lpcbData=0xc3b0deea44*=0x1000) returned 0x2 [0170.528] RegQueryValueExW (in: hKey=0x78, lpValueName="DefaultColor", lpReserved=0x0, lpType=0xc3b0deea40, lpData=0xc3b0deea60, lpcbData=0xc3b0deea44*=0x1000 | out: lpType=0xc3b0deea40*=0x4, lpData=0xc3b0deea60*=0x0, lpcbData=0xc3b0deea44*=0x4) returned 0x0 [0170.528] RegQueryValueExW (in: hKey=0x78, lpValueName="CompletionChar", lpReserved=0x0, lpType=0xc3b0deea40, lpData=0xc3b0deea60, lpcbData=0xc3b0deea44*=0x1000 | out: lpType=0xc3b0deea40*=0x4, lpData=0xc3b0deea60*=0x40, lpcbData=0xc3b0deea44*=0x4) returned 0x0 [0170.528] RegQueryValueExW (in: hKey=0x78, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0xc3b0deea40, lpData=0xc3b0deea60, lpcbData=0xc3b0deea44*=0x1000 | out: lpType=0xc3b0deea40*=0x4, lpData=0xc3b0deea60*=0x40, lpcbData=0xc3b0deea44*=0x4) returned 0x0 [0170.528] RegQueryValueExW (in: hKey=0x78, lpValueName="AutoRun", lpReserved=0x0, lpType=0xc3b0deea40, lpData=0xc3b0deea60, lpcbData=0xc3b0deea44*=0x1000 | out: lpType=0xc3b0deea40*=0x0, lpData=0xc3b0deea60*=0x40, lpcbData=0xc3b0deea44*=0x1000) returned 0x2 [0170.528] RegCloseKey (hKey=0x78) returned 0x0 [0170.528] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0xc3b0deea48 | out: phkResult=0xc3b0deea48*=0x78) returned 0x0 [0170.528] RegQueryValueExW (in: hKey=0x78, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0xc3b0deea40, lpData=0xc3b0deea60, lpcbData=0xc3b0deea44*=0x1000 | out: lpType=0xc3b0deea40*=0x0, lpData=0xc3b0deea60*=0x40, lpcbData=0xc3b0deea44*=0x1000) returned 0x2 [0170.528] RegQueryValueExW (in: hKey=0x78, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0xc3b0deea40, lpData=0xc3b0deea60, lpcbData=0xc3b0deea44*=0x1000 | out: lpType=0xc3b0deea40*=0x4, lpData=0xc3b0deea60*=0x1, lpcbData=0xc3b0deea44*=0x4) returned 0x0 [0170.528] RegQueryValueExW (in: hKey=0x78, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0xc3b0deea40, lpData=0xc3b0deea60, lpcbData=0xc3b0deea44*=0x1000 | out: lpType=0xc3b0deea40*=0x0, lpData=0xc3b0deea60*=0x1, lpcbData=0xc3b0deea44*=0x1000) returned 0x2 [0170.528] RegQueryValueExW (in: hKey=0x78, lpValueName="DefaultColor", lpReserved=0x0, lpType=0xc3b0deea40, lpData=0xc3b0deea60, lpcbData=0xc3b0deea44*=0x1000 | out: lpType=0xc3b0deea40*=0x4, lpData=0xc3b0deea60*=0x0, lpcbData=0xc3b0deea44*=0x4) returned 0x0 [0170.528] RegQueryValueExW (in: hKey=0x78, lpValueName="CompletionChar", lpReserved=0x0, lpType=0xc3b0deea40, lpData=0xc3b0deea60, lpcbData=0xc3b0deea44*=0x1000 | out: lpType=0xc3b0deea40*=0x4, lpData=0xc3b0deea60*=0x9, lpcbData=0xc3b0deea44*=0x4) returned 0x0 [0170.528] RegQueryValueExW (in: hKey=0x78, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0xc3b0deea40, lpData=0xc3b0deea60, lpcbData=0xc3b0deea44*=0x1000 | out: lpType=0xc3b0deea40*=0x4, lpData=0xc3b0deea60*=0x9, lpcbData=0xc3b0deea44*=0x4) returned 0x0 [0170.528] RegQueryValueExW (in: hKey=0x78, lpValueName="AutoRun", lpReserved=0x0, lpType=0xc3b0deea40, lpData=0xc3b0deea60, lpcbData=0xc3b0deea44*=0x1000 | out: lpType=0xc3b0deea40*=0x0, lpData=0xc3b0deea60*=0x9, lpcbData=0xc3b0deea44*=0x1000) returned 0x2 [0170.528] RegCloseKey (hKey=0x78) returned 0x0 [0170.528] time (in: timer=0x0 | out: timer=0x0) returned 0x5bfd0580 [0170.528] srand (_Seed=0x5bfd0580) [0170.528] GetCommandLineW () returned="\"C:\\Windows\\System32\\cmd.exe\" /C REG ADD \"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run\" /v \"svchos\" /t REG_SZ /d \"C:\\Users\\CIiHmnxMn6Ps\\Desktop\\eqBNr.exe\" /f" [0170.528] GetCommandLineW () returned="\"C:\\Windows\\System32\\cmd.exe\" /C REG ADD \"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run\" /v \"svchos\" /t REG_SZ /d \"C:\\Users\\CIiHmnxMn6Ps\\Desktop\\eqBNr.exe\" /f" [0170.528] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x7ff6a4dc0920 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0170.529] GetModuleFileNameW (in: hModule=0x0, lpFilename=0xc3b0ff7680, nSize=0x104 | out: lpFilename="C:\\Windows\\System32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe")) returned 0x1b [0170.529] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x7ff6a4db8680, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x87 [0170.529] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x7ff6a4db8680, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0170.529] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x7ff6a4db8680, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0170.529] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0170.529] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0170.529] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0170.529] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0170.529] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0170.529] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0170.529] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0170.529] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0170.529] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0170.529] GetEnvironmentStringsW () returned 0xc3b0ff8300* [0170.529] FreeEnvironmentStringsA (penv="=") returned 1 [0170.529] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x7ff6a4db8680, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0170.529] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x7ff6a4db8680, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0170.529] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0170.529] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0170.529] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0170.529] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0170.529] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0170.529] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0170.529] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0170.529] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0170.529] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0xc3b0def850 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0170.530] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x104, lpBuffer=0xc3b0def850, lpFilePart=0xc3b0def830 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0xc3b0def830*="system32") returned 0x13 [0170.530] GetFileAttributesW (lpFileName="C:\\Windows\\system32" (normalized: "c:\\windows\\system32")) returned 0x10 [0170.530] FindFirstFileW (in: lpFileName="C:\\Windows", lpFindFileData=0xc3b0def560 | out: lpFindFileData=0xc3b0def560) returned 0xc3b0ff0720 [0170.530] FindClose (in: hFindFile=0xc3b0ff0720 | out: hFindFile=0xc3b0ff0720) returned 1 [0170.530] FindFirstFileW (in: lpFileName="C:\\Windows\\system32", lpFindFileData=0xc3b0def560 | out: lpFindFileData=0xc3b0def560) returned 0xc3b0ff0720 [0170.531] FindClose (in: hFindFile=0xc3b0ff0720 | out: hFindFile=0xc3b0ff0720) returned 1 [0170.531] GetFileAttributesW (lpFileName="C:\\Windows\\System32" (normalized: "c:\\windows\\system32")) returned 0x10 [0170.531] SetCurrentDirectoryW (lpPathName="C:\\Windows\\System32" (normalized: "c:\\windows\\system32")) returned 1 [0170.531] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Windows\\System32") returned 1 [0170.531] GetEnvironmentStringsW () returned 0xc3b0ffae50* [0170.531] FreeEnvironmentStringsA (penv="=") returned 1 [0170.531] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x7ff6a4dc0920 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0170.532] GetConsoleOutputCP () returned 0x1b5 [0170.532] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff6a4db8640 | out: lpCPInfo=0x7ff6a4db8640) returned 1 [0170.532] GetUserDefaultLCID () returned 0x409 [0170.532] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x7ff6a4dbc680, cchData=8 | out: lpLCData=":") returned 2 [0170.532] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0xc3b0def980, cchData=128 | out: lpLCData="0") returned 2 [0170.532] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0xc3b0def980, cchData=128 | out: lpLCData="0") returned 2 [0170.532] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0xc3b0def980, cchData=128 | out: lpLCData="1") returned 2 [0170.532] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x7ff6a4dbc690, cchData=8 | out: lpLCData="/") returned 2 [0170.532] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x7ff6a4dbc6e0, cchData=32 | out: lpLCData="Mon") returned 4 [0170.532] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x7ff6a4dbc720, cchData=32 | out: lpLCData="Tue") returned 4 [0170.532] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x7ff6a4dbc760, cchData=32 | out: lpLCData="Wed") returned 4 [0170.532] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x7ff6a4dbc7a0, cchData=32 | out: lpLCData="Thu") returned 4 [0170.532] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x7ff6a4dbc7e0, cchData=32 | out: lpLCData="Fri") returned 4 [0170.533] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x7ff6a4dbc820, cchData=32 | out: lpLCData="Sat") returned 4 [0170.533] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x7ff6a4dbc860, cchData=32 | out: lpLCData="Sun") returned 4 [0170.533] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x7ff6a4dbc6a0, cchData=8 | out: lpLCData=".") returned 2 [0170.533] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x7ff6a4dbc6c0, cchData=8 | out: lpLCData=",") returned 2 [0170.533] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0170.533] GetConsoleTitleW (in: lpConsoleTitle=0xc3b0ff1070, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\System32\\cmd.exe") returned 0x1b [0170.534] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x7ffb90a40000 [0170.534] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="CopyFileExW") returned 0x7ffb90a625e0 [0170.534] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="IsDebuggerPresent") returned 0x7ffb90a61f90 [0170.534] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="SetConsoleInputExeNameW") returned 0x7ffb8e973a10 [0170.534] _wcsicmp (_String1="REG", _String2=")") returned 73 [0170.534] _wcsicmp (_String1="FOR", _String2="REG") returned -12 [0170.535] _wcsicmp (_String1="FOR/?", _String2="REG") returned -12 [0170.535] _wcsicmp (_String1="IF", _String2="REG") returned -9 [0170.535] _wcsicmp (_String1="IF/?", _String2="REG") returned -9 [0170.535] _wcsicmp (_String1="REM", _String2="REG") returned 6 [0170.535] _wcsicmp (_String1="REM/?", _String2="REG") returned 6 [0170.537] GetConsoleTitleW (in: lpConsoleTitle=0xc3b0def870, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\System32\\cmd.exe") returned 0x1b [0170.538] _wcsicmp (_String1="REG", _String2="DIR") returned 14 [0170.538] _wcsicmp (_String1="REG", _String2="ERASE") returned 13 [0170.538] _wcsicmp (_String1="REG", _String2="DEL") returned 14 [0170.538] _wcsicmp (_String1="REG", _String2="TYPE") returned -2 [0170.538] _wcsicmp (_String1="REG", _String2="COPY") returned 15 [0170.538] _wcsicmp (_String1="REG", _String2="CD") returned 15 [0170.538] _wcsicmp (_String1="REG", _String2="CHDIR") returned 15 [0170.538] _wcsicmp (_String1="REG", _String2="RENAME") returned -7 [0170.538] _wcsicmp (_String1="REG", _String2="REN") returned -7 [0170.538] _wcsicmp (_String1="REG", _String2="ECHO") returned 13 [0170.538] _wcsicmp (_String1="REG", _String2="SET") returned -1 [0170.538] _wcsicmp (_String1="REG", _String2="PAUSE") returned 2 [0170.538] _wcsicmp (_String1="REG", _String2="DATE") returned 14 [0170.538] _wcsicmp (_String1="REG", _String2="TIME") returned -2 [0170.538] _wcsicmp (_String1="REG", _String2="PROMPT") returned 2 [0170.538] _wcsicmp (_String1="REG", _String2="MD") returned 5 [0170.538] _wcsicmp (_String1="REG", _String2="MKDIR") returned 5 [0170.538] _wcsicmp (_String1="REG", _String2="RD") returned 1 [0170.538] _wcsicmp (_String1="REG", _String2="RMDIR") returned -8 [0170.538] _wcsicmp (_String1="REG", _String2="PATH") returned 2 [0170.538] _wcsicmp (_String1="REG", _String2="GOTO") returned 11 [0170.538] _wcsicmp (_String1="REG", _String2="SHIFT") returned -1 [0170.538] _wcsicmp (_String1="REG", _String2="CLS") returned 15 [0170.538] _wcsicmp (_String1="REG", _String2="CALL") returned 15 [0170.538] _wcsicmp (_String1="REG", _String2="VERIFY") returned -4 [0170.538] _wcsicmp (_String1="REG", _String2="VER") returned -4 [0170.538] _wcsicmp (_String1="REG", _String2="VOL") returned -4 [0170.538] _wcsicmp (_String1="REG", _String2="EXIT") returned 13 [0170.538] _wcsicmp (_String1="REG", _String2="SETLOCAL") returned -1 [0170.538] _wcsicmp (_String1="REG", _String2="ENDLOCAL") returned 13 [0170.538] _wcsicmp (_String1="REG", _String2="TITLE") returned -2 [0170.538] _wcsicmp (_String1="REG", _String2="START") returned -1 [0170.538] _wcsicmp (_String1="REG", _String2="DPATH") returned 14 [0170.538] _wcsicmp (_String1="REG", _String2="KEYS") returned 7 [0170.539] _wcsicmp (_String1="REG", _String2="MOVE") returned 5 [0170.539] _wcsicmp (_String1="REG", _String2="PUSHD") returned 2 [0170.539] _wcsicmp (_String1="REG", _String2="POPD") returned 2 [0170.539] _wcsicmp (_String1="REG", _String2="ASSOC") returned 17 [0170.539] _wcsicmp (_String1="REG", _String2="FTYPE") returned 12 [0170.539] _wcsicmp (_String1="REG", _String2="BREAK") returned 16 [0170.539] _wcsicmp (_String1="REG", _String2="COLOR") returned 15 [0170.539] _wcsicmp (_String1="REG", _String2="MKLINK") returned 5 [0170.539] _wcsicmp (_String1="REG", _String2="DIR") returned 14 [0170.539] _wcsicmp (_String1="REG", _String2="ERASE") returned 13 [0170.539] _wcsicmp (_String1="REG", _String2="DEL") returned 14 [0170.539] _wcsicmp (_String1="REG", _String2="TYPE") returned -2 [0170.539] _wcsicmp (_String1="REG", _String2="COPY") returned 15 [0170.539] _wcsicmp (_String1="REG", _String2="CD") returned 15 [0170.539] _wcsicmp (_String1="REG", _String2="CHDIR") returned 15 [0170.539] _wcsicmp (_String1="REG", _String2="RENAME") returned -7 [0170.539] _wcsicmp (_String1="REG", _String2="REN") returned -7 [0170.539] _wcsicmp (_String1="REG", _String2="ECHO") returned 13 [0170.539] _wcsicmp (_String1="REG", _String2="SET") returned -1 [0170.539] _wcsicmp (_String1="REG", _String2="PAUSE") returned 2 [0170.539] _wcsicmp (_String1="REG", _String2="DATE") returned 14 [0170.539] _wcsicmp (_String1="REG", _String2="TIME") returned -2 [0170.539] _wcsicmp (_String1="REG", _String2="PROMPT") returned 2 [0170.539] _wcsicmp (_String1="REG", _String2="MD") returned 5 [0170.539] _wcsicmp (_String1="REG", _String2="MKDIR") returned 5 [0170.539] _wcsicmp (_String1="REG", _String2="RD") returned 1 [0170.539] _wcsicmp (_String1="REG", _String2="RMDIR") returned -8 [0170.539] _wcsicmp (_String1="REG", _String2="PATH") returned 2 [0170.539] _wcsicmp (_String1="REG", _String2="GOTO") returned 11 [0170.539] _wcsicmp (_String1="REG", _String2="SHIFT") returned -1 [0170.539] _wcsicmp (_String1="REG", _String2="CLS") returned 15 [0170.539] _wcsicmp (_String1="REG", _String2="CALL") returned 15 [0170.539] _wcsicmp (_String1="REG", _String2="VERIFY") returned -4 [0170.539] _wcsicmp (_String1="REG", _String2="VER") returned -4 [0170.539] _wcsicmp (_String1="REG", _String2="VOL") returned -4 [0170.539] _wcsicmp (_String1="REG", _String2="EXIT") returned 13 [0170.539] _wcsicmp (_String1="REG", _String2="SETLOCAL") returned -1 [0170.539] _wcsicmp (_String1="REG", _String2="ENDLOCAL") returned 13 [0170.539] _wcsicmp (_String1="REG", _String2="TITLE") returned -2 [0170.539] _wcsicmp (_String1="REG", _String2="START") returned -1 [0170.539] _wcsicmp (_String1="REG", _String2="DPATH") returned 14 [0170.539] _wcsicmp (_String1="REG", _String2="KEYS") returned 7 [0170.539] _wcsicmp (_String1="REG", _String2="MOVE") returned 5 [0170.539] _wcsicmp (_String1="REG", _String2="PUSHD") returned 2 [0170.539] _wcsicmp (_String1="REG", _String2="POPD") returned 2 [0170.539] _wcsicmp (_String1="REG", _String2="ASSOC") returned 17 [0170.540] _wcsicmp (_String1="REG", _String2="FTYPE") returned 12 [0170.540] _wcsicmp (_String1="REG", _String2="BREAK") returned 16 [0170.540] _wcsicmp (_String1="REG", _String2="COLOR") returned 15 [0170.540] _wcsicmp (_String1="REG", _String2="MKLINK") returned 5 [0170.540] _wcsicmp (_String1="REG", _String2="FOR") returned 12 [0170.540] _wcsicmp (_String1="REG", _String2="IF") returned 9 [0170.540] _wcsicmp (_String1="REG", _String2="REM") returned -6 [0170.540] _wcsnicmp (_String1="REG", _String2="cmd ", _MaxCount=0x4) returned 15 [0170.540] SetErrorMode (uMode=0x0) returned 0x0 [0170.540] SetErrorMode (uMode=0x1) returned 0x0 [0170.540] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0xc3b0ff7d40, lpFilePart=0xc3b0def110 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0xc3b0def110*="system32") returned 0x13 [0170.540] SetErrorMode (uMode=0x0) returned 0x1 [0170.540] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x7ff6a4db8680, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x87 [0170.540] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0170.547] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x7ff6a4db8680, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0170.549] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0170.549] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\REG.*", fInfoLevelId=0x1, lpFindFileData=0xc3b0deee90, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xc3b0deee90) returned 0xc3b0ff80d0 [0170.549] FindClose (in: hFindFile=0xc3b0ff80d0 | out: hFindFile=0xc3b0ff80d0) returned 1 [0170.549] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\reg.COM", fInfoLevelId=0x1, lpFindFileData=0xc3b0deee90, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xc3b0deee90) returned 0xffffffffffffffff [0170.549] GetLastError () returned 0x2 [0170.549] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\reg.EXE", fInfoLevelId=0x1, lpFindFileData=0xc3b0deee90, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xc3b0deee90) returned 0xc3b0ff80d0 [0170.549] FindClose (in: hFindFile=0xc3b0ff80d0 | out: hFindFile=0xc3b0ff80d0) returned 1 [0170.549] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3 [0170.550] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2 [0170.550] GetConsoleTitleW (in: lpConsoleTitle=0xc3b0def3f0, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\System32\\cmd.exe") returned 0x1b [0170.550] InitializeProcThreadAttributeList (in: lpAttributeList=0xc3b0def310, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0xc3b0def210 | out: lpAttributeList=0xc3b0def310, lpSize=0xc3b0def210) returned 1 [0170.550] UpdateProcThreadAttribute (in: lpAttributeList=0xc3b0def310, dwFlags=0x0, Attribute=0x60001, lpValue=0xc3b0def1fc, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0xc3b0def310, lpPreviousValue=0x0) returned 1 [0170.550] GetStartupInfoW (in: lpStartupInfo=0xc3b0def2a0 | out: lpStartupInfo=0xc3b0def2a0*(cb=0x68, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Windows\\System32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0170.550] _wcsnicmp (_String1="COPYCMD", _String2="=::=::\\", _MaxCount=0x7) returned 38 [0170.550] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38 [0170.550] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2 [0170.550] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2 [0170.550] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0170.550] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0170.550] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0170.550] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3 [0170.550] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3 [0170.551] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5 [0170.551] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5 [0170.551] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9 [0170.551] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9 [0170.551] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11 [0170.551] _wcsnicmp (_String1="COPYCMD", _String2="OneDriv", _MaxCount=0x7) returned -12 [0170.551] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12 [0170.551] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13 [0170.551] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13 [0170.551] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0170.551] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0170.551] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0170.551] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0170.551] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0170.551] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0170.551] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0170.551] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0170.551] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13 [0170.551] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13 [0170.551] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13 [0170.551] _wcsnicmp (_String1="COPYCMD", _String2="SESSION", _MaxCount=0x7) returned -16 [0170.551] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16 [0170.551] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16 [0170.551] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17 [0170.551] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17 [0170.551] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0170.551] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0170.551] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18 [0170.551] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18 [0170.551] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20 [0170.551] lstrcmpW (lpString1="\\reg.exe", lpString2="\\XCOPY.EXE") returned -1 [0170.553] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\reg.exe", lpCommandLine="REG ADD \"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run\" /v \"svchos\" /t REG_SZ /d \"C:\\Users\\CIiHmnxMn6Ps\\Desktop\\eqBNr.exe\" /f", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Windows\\system32", lpStartupInfo=0xc3b0def230*(cb=0x70, lpReserved=0x0, lpDesktop="Winsta0\\Default", lpTitle="REG ADD \"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run\" /v \"svchos\" /t REG_SZ /d \"C:\\Users\\CIiHmnxMn6Ps\\Desktop\\eqBNr.exe\" /f", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0xc3b0def218 | out: lpCommandLine="REG ADD \"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run\" /v \"svchos\" /t REG_SZ /d \"C:\\Users\\CIiHmnxMn6Ps\\Desktop\\eqBNr.exe\" /f", lpProcessInformation=0xc3b0def218*(hProcess=0x8c, hThread=0x88, dwProcessId=0x560, dwThreadId=0x588)) returned 1 [0170.566] CloseHandle (hObject=0x88) returned 1 [0170.566] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0170.566] GetEnvironmentStringsW () returned 0xc3b0ff5720* [0170.566] FreeEnvironmentStringsA (penv="=") returned 1 [0170.567] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0 [0170.847] GetExitCodeProcess (in: hProcess=0x8c, lpExitCode=0xc3b0def198 | out: lpExitCode=0xc3b0def198*=0x0) returned 1 [0170.847] CloseHandle (hObject=0x8c) returned 1 [0170.848] _vsnwprintf (in: _Buffer=0xc3b0def358, _BufferCount=0x13, _Format="%08X", _ArgList=0xc3b0def1a8 | out: _Buffer="00000000") returned 8 [0170.848] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000000") returned 1 [0170.848] GetEnvironmentStringsW () returned 0xc3b0ffa3b0* [0170.848] FreeEnvironmentStringsA (penv="=") returned 1 [0170.848] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1 [0170.848] GetEnvironmentStringsW () returned 0xc3b0ffa3b0* [0170.848] FreeEnvironmentStringsA (penv="=") returned 1 [0170.848] DeleteProcThreadAttributeList (in: lpAttributeList=0xc3b0def310 | out: lpAttributeList=0xc3b0def310) [0170.848] _get_osfhandle (_FileHandle=1) returned 0x24 [0170.848] SetConsoleMode (hConsoleHandle=0x24, dwMode=0x3) returned 1 [0170.849] _get_osfhandle (_FileHandle=1) returned 0x24 [0170.849] GetConsoleMode (in: hConsoleHandle=0x24, lpMode=0x7ff6a4db85ec | out: lpMode=0x7ff6a4db85ec) returned 1 [0170.849] _get_osfhandle (_FileHandle=0) returned 0x20 [0170.849] GetConsoleMode (in: hConsoleHandle=0x20, lpMode=0x7ff6a4db85e8 | out: lpMode=0x7ff6a4db85e8) returned 1 [0170.849] SetConsoleInputExeNameW () returned 0x1 [0170.849] GetConsoleOutputCP () returned 0x1b5 [0170.850] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff6a4db8640 | out: lpCPInfo=0x7ff6a4db8640) returned 1 [0170.850] SetThreadUILanguage (LangId=0x0) returned 0x409 [0170.850] exit (_Code=0) Thread: id = 173 os_tid = 0x768 Process: id = "14" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x62122000" os_pid = "0x484" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "13" os_parent_pid = "0x478" cmd_line = "\\??\\C:\\Windows\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\Windows" os_username = "LHNIWSJ\\CIiHmnxMn6Ps" os_groups = "LHNIWSJ\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0001b4e9" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 7184 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 7185 start_va = 0xd819450000 end_va = 0xd81946ffff entry_point = 0x0 region_type = private name = "private_0x000000d819450000" filename = "" Region: id = 7186 start_va = 0xd819470000 end_va = 0xd819483fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d819470000" filename = "" Region: id = 7187 start_va = 0xd819490000 end_va = 0xd8194cffff entry_point = 0x0 region_type = private name = "private_0x000000d819490000" filename = "" Region: id = 7188 start_va = 0x7df5ff1b0000 end_va = 0x7ff5ff1affff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ff1b0000" filename = "" Region: id = 7189 start_va = 0x7ff6bc720000 end_va = 0x7ff6bc742fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff6bc720000" filename = "" Region: id = 7190 start_va = 0x7ff6bc74d000 end_va = 0x7ff6bc74dfff entry_point = 0x0 region_type = private name = "private_0x00007ff6bc74d000" filename = "" Region: id = 7191 start_va = 0x7ff6bc74e000 end_va = 0x7ff6bc74ffff entry_point = 0x0 region_type = private name = "private_0x00007ff6bc74e000" filename = "" Region: id = 7192 start_va = 0x7ff6bd290000 end_va = 0x7ff6bd2a0fff entry_point = 0x7ff6bd290000 region_type = mapped_file name = "conhost.exe" filename = "\\Windows\\System32\\conhost.exe" (normalized: "c:\\windows\\system32\\conhost.exe") Region: id = 7193 start_va = 0x7ffb91480000 end_va = 0x7ffb91641fff entry_point = 0x7ffb91480000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 7194 start_va = 0xd819690000 end_va = 0xd81978ffff entry_point = 0x0 region_type = private name = "private_0x000000d819690000" filename = "" Region: id = 7195 start_va = 0x7ffb8e920000 end_va = 0x7ffb8eafcfff entry_point = 0x7ffb8e920000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 7196 start_va = 0x7ffb90a40000 end_va = 0x7ffb90aecfff entry_point = 0x7ffb90a40000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 7197 start_va = 0xd819450000 end_va = 0xd81945ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d819450000" filename = "" Region: id = 7198 start_va = 0xd819460000 end_va = 0xd819466fff entry_point = 0x0 region_type = private name = "private_0x000000d819460000" filename = "" Region: id = 7199 start_va = 0xd8194d0000 end_va = 0xd81958dfff entry_point = 0xd8194d0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 7200 start_va = 0xd819590000 end_va = 0xd8195cffff entry_point = 0x0 region_type = private name = "private_0x000000d819590000" filename = "" Region: id = 7201 start_va = 0xd819680000 end_va = 0xd81968ffff entry_point = 0x0 region_type = private name = "private_0x000000d819680000" filename = "" Region: id = 7202 start_va = 0x7ff6bc620000 end_va = 0x7ff6bc71ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff6bc620000" filename = "" Region: id = 7203 start_va = 0x7ff6bc74b000 end_va = 0x7ff6bc74cfff entry_point = 0x0 region_type = private name = "private_0x00007ff6bc74b000" filename = "" Region: id = 7204 start_va = 0x7ffb8eb50000 end_va = 0x7ffb8ebecfff entry_point = 0x7ffb8eb50000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 7205 start_va = 0xd8195d0000 end_va = 0xd8195d0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d8195d0000" filename = "" Region: id = 7206 start_va = 0xd8195e0000 end_va = 0xd8195e6fff entry_point = 0x0 region_type = private name = "private_0x000000d8195e0000" filename = "" Region: id = 7207 start_va = 0xd8195f0000 end_va = 0xd8195f0fff entry_point = 0x0 region_type = private name = "private_0x000000d8195f0000" filename = "" Region: id = 7208 start_va = 0xd819600000 end_va = 0xd819600fff entry_point = 0x0 region_type = private name = "private_0x000000d819600000" filename = "" Region: id = 7209 start_va = 0xd819790000 end_va = 0xd819917fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d819790000" filename = "" Region: id = 7210 start_va = 0xd819920000 end_va = 0xd819aa0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d819920000" filename = "" Region: id = 7211 start_va = 0xd819ab0000 end_va = 0xd81aeaffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d819ab0000" filename = "" Region: id = 7212 start_va = 0x7ffb89cf0000 end_va = 0x7ffb89d42fff entry_point = 0x7ffb89cf0000 region_type = mapped_file name = "conhostv2.dll" filename = "\\Windows\\System32\\ConhostV2.dll" (normalized: "c:\\windows\\system32\\conhostv2.dll") Region: id = 7213 start_va = 0x7ffb8a850000 end_va = 0x7ffb8a9d2fff entry_point = 0x7ffb8a850000 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 7214 start_va = 0x7ffb8ebf0000 end_va = 0x7ffb8ee6bfff entry_point = 0x7ffb8ebf0000 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 7215 start_va = 0x7ffb8ee70000 end_va = 0x7ffb8efbdfff entry_point = 0x7ffb8ee70000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 7216 start_va = 0x7ffb8efc0000 end_va = 0x7ffb8f0e5fff entry_point = 0x7ffb8efc0000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 7217 start_va = 0x7ffb8f100000 end_va = 0x7ffb8f284fff entry_point = 0x7ffb8f100000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 7218 start_va = 0x7ffb8f3a0000 end_va = 0x7ffb8f4fbfff entry_point = 0x7ffb8f3a0000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 7219 start_va = 0x7ffb90af0000 end_va = 0x7ffb90b4afff entry_point = 0x7ffb90af0000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 7220 start_va = 0x7ffb90bc0000 end_va = 0x7ffb90c7dfff entry_point = 0x7ffb90bc0000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 7221 start_va = 0x7ffb90f70000 end_va = 0x7ffb90fa5fff entry_point = 0x7ffb90f70000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 7222 start_va = 0x7ffb90fb0000 end_va = 0x7ffb910f0fff entry_point = 0x7ffb90fb0000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 7223 start_va = 0xd819610000 end_va = 0xd81964ffff entry_point = 0x0 region_type = private name = "private_0x000000d819610000" filename = "" Region: id = 7224 start_va = 0xd81aff0000 end_va = 0xd81affffff entry_point = 0x0 region_type = private name = "private_0x000000d81aff0000" filename = "" Region: id = 7225 start_va = 0x7ff6bc749000 end_va = 0x7ff6bc74afff entry_point = 0x0 region_type = private name = "private_0x00007ff6bc749000" filename = "" Region: id = 7226 start_va = 0x7ffb8deb0000 end_va = 0x7ffb8dec2fff entry_point = 0x7ffb8deb0000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 7227 start_va = 0x7ffb8def0000 end_va = 0x7ffb8df39fff entry_point = 0x7ffb8def0000 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 7228 start_va = 0x7ffb8df40000 end_va = 0x7ffb8df4efff entry_point = 0x7ffb8df40000 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 7229 start_va = 0x7ffb8e000000 end_va = 0x7ffb8e0b2fff entry_point = 0x7ffb8e000000 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\System32\\SHCore.dll" (normalized: "c:\\windows\\system32\\shcore.dll") Region: id = 7230 start_va = 0x7ffb8e120000 end_va = 0x7ffb8e747fff entry_point = 0x7ffb8e120000 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\System32\\windows.storage.dll" (normalized: "c:\\windows\\system32\\windows.storage.dll") Region: id = 7231 start_va = 0x7ffb8f290000 end_va = 0x7ffb8f2e0fff entry_point = 0x7ffb8f290000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 7232 start_va = 0x7ffb8f2f0000 end_va = 0x7ffb8f395fff entry_point = 0x7ffb8f2f0000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 7233 start_va = 0x7ffb8f500000 end_va = 0x7ffb90a24fff entry_point = 0x7ffb8f500000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 7402 start_va = 0xd819650000 end_va = 0xd81965ffff entry_point = 0x0 region_type = private name = "private_0x000000d819650000" filename = "" Region: id = 7403 start_va = 0xd81aeb0000 end_va = 0xd81afbcfff entry_point = 0x0 region_type = private name = "private_0x000000d81aeb0000" filename = "" Region: id = 7404 start_va = 0xd81b000000 end_va = 0xd81b336fff entry_point = 0xd81b000000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 7405 start_va = 0xd81b340000 end_va = 0xd81b559fff entry_point = 0x0 region_type = private name = "private_0x000000d81b340000" filename = "" Region: id = 7406 start_va = 0xd81b560000 end_va = 0xd81b772fff entry_point = 0x0 region_type = private name = "private_0x000000d81b560000" filename = "" Region: id = 7407 start_va = 0xd81b780000 end_va = 0xd81b997fff entry_point = 0x0 region_type = private name = "private_0x000000d81b780000" filename = "" Region: id = 7408 start_va = 0xd81b9a0000 end_va = 0xd81bab5fff entry_point = 0x0 region_type = private name = "private_0x000000d81b9a0000" filename = "" Region: id = 7409 start_va = 0x7ffb8c780000 end_va = 0x7ffb8c815fff entry_point = 0x7ffb8c780000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 7410 start_va = 0xd819660000 end_va = 0xd819663fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d819660000" filename = "" Region: id = 7411 start_va = 0xd81bac0000 end_va = 0xd81bb77fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d81bac0000" filename = "" Region: id = 7412 start_va = 0x7ffb8bf20000 end_va = 0x7ffb8bf41fff entry_point = 0x7ffb8bf20000 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\System32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll") Region: id = 7413 start_va = 0x7ffb8bf70000 end_va = 0x7ffb8bf82fff entry_point = 0x7ffb8bf70000 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll") Region: id = 7414 start_va = 0x7ffb8d050000 end_va = 0x7ffb8d0a7fff entry_point = 0x7ffb8d050000 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll") Region: id = 7415 start_va = 0xd819670000 end_va = 0xd819676fff entry_point = 0x0 region_type = private name = "private_0x000000d819670000" filename = "" Region: id = 7416 start_va = 0xd81afc0000 end_va = 0xd81afc4fff entry_point = 0xd81afc0000 region_type = mapped_file name = "user32.dll.mui" filename = "\\Windows\\System32\\en-US\\user32.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\user32.dll.mui") Region: id = 7417 start_va = 0xd81afd0000 end_va = 0xd81afd0fff entry_point = 0xd81afd0000 region_type = mapped_file name = "conhostv2.dll.mui" filename = "\\Windows\\System32\\en-US\\ConhostV2.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\conhostv2.dll.mui") Region: id = 7418 start_va = 0xd81afe0000 end_va = 0xd81afe1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d81afe0000" filename = "" Region: id = 7419 start_va = 0x7ffb86140000 end_va = 0x7ffb863b3fff entry_point = 0x7ffb86140000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\WinSxS\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43\\comctl32.dll") Thread: id = 156 os_tid = 0x43c Thread: id = 157 os_tid = 0x474 Thread: id = 159 os_tid = 0x2f4 Thread: id = 172 os_tid = 0x440 Process: id = "15" image_name = "sihost.exe" filename = "c:\\windows\\system32\\sihost.exe" page_root = "0x5f66b000" os_pid = "0x7cc" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "injection" parent_id = "12" os_parent_pid = "0x5dc" cmd_line = "sihost.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "LHNIWSJ\\CIiHmnxMn6Ps" os_groups = "LHNIWSJ\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0001b4e9" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 7053 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 7054 start_va = 0x665a970000 end_va = 0x665a97ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000665a970000" filename = "" Region: id = 7055 start_va = 0x665a980000 end_va = 0x665a986fff entry_point = 0x0 region_type = private name = "private_0x000000665a980000" filename = "" Region: id = 7056 start_va = 0x665a990000 end_va = 0x665a9a3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000665a990000" filename = "" Region: id = 7057 start_va = 0x665a9b0000 end_va = 0x665aa2ffff entry_point = 0x0 region_type = private name = "private_0x000000665a9b0000" filename = "" Region: id = 7058 start_va = 0x665aa30000 end_va = 0x665aa33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000665aa30000" filename = "" Region: id = 7059 start_va = 0x665aa40000 end_va = 0x665aa41fff entry_point = 0x0 region_type = private name = "private_0x000000665aa40000" filename = "" Region: id = 7060 start_va = 0x665aa50000 end_va = 0x665aacffff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 7061 start_va = 0x665aad0000 end_va = 0x665abcffff entry_point = 0x0 region_type = private name = "private_0x000000665aad0000" filename = "" Region: id = 7062 start_va = 0x665abd0000 end_va = 0x665ac8dfff entry_point = 0x665abd0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 7063 start_va = 0x665ac90000 end_va = 0x665ac96fff entry_point = 0x0 region_type = private name = "private_0x000000665ac90000" filename = "" Region: id = 7064 start_va = 0x665aca0000 end_va = 0x665ae27fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000665aca0000" filename = "" Region: id = 7065 start_va = 0x665ae30000 end_va = 0x665ae30fff entry_point = 0x0 region_type = private name = "private_0x000000665ae30000" filename = "" Region: id = 7066 start_va = 0x665ae40000 end_va = 0x665ae40fff entry_point = 0x0 region_type = private name = "private_0x000000665ae40000" filename = "" Region: id = 7067 start_va = 0x665ae50000 end_va = 0x665ae50fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000665ae50000" filename = "" Region: id = 7068 start_va = 0x665ae60000 end_va = 0x665ae60fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000665ae60000" filename = "" Region: id = 7069 start_va = 0x665ae80000 end_va = 0x665ae8ffff entry_point = 0x0 region_type = private name = "private_0x000000665ae80000" filename = "" Region: id = 7070 start_va = 0x665ae90000 end_va = 0x665b010fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000665ae90000" filename = "" Region: id = 7071 start_va = 0x665b020000 end_va = 0x665c41ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000665b020000" filename = "" Region: id = 7072 start_va = 0x665c420000 end_va = 0x665c51ffff entry_point = 0x0 region_type = private name = "private_0x000000665c420000" filename = "" Region: id = 7073 start_va = 0x665c520000 end_va = 0x665c856fff entry_point = 0x665c520000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 7074 start_va = 0x665c860000 end_va = 0x665c8dffff entry_point = 0x0 region_type = private name = "private_0x000000665c860000" filename = "" Region: id = 7075 start_va = 0x665c8e0000 end_va = 0x665c95ffff entry_point = 0x0 region_type = private name = "private_0x000000665c8e0000" filename = "" Region: id = 7076 start_va = 0x665c960000 end_va = 0x665c9dffff entry_point = 0x0 region_type = private name = "private_0x000000665c960000" filename = "" Region: id = 7077 start_va = 0x665c9e0000 end_va = 0x665ca5ffff entry_point = 0x0 region_type = private name = "private_0x000000665c9e0000" filename = "" Region: id = 7078 start_va = 0x665ca60000 end_va = 0x665cadffff entry_point = 0x0 region_type = private name = "private_0x000000665ca60000" filename = "" Region: id = 7079 start_va = 0x665cae0000 end_va = 0x665caeffff entry_point = 0x0 region_type = private name = "private_0x000000665cae0000" filename = "" Region: id = 7080 start_va = 0x665caf0000 end_va = 0x665cb6ffff entry_point = 0x0 region_type = private name = "private_0x000000665caf0000" filename = "" Region: id = 7081 start_va = 0x665cb70000 end_va = 0x665cc6ffff entry_point = 0x0 region_type = private name = "private_0x000000665cb70000" filename = "" Region: id = 7082 start_va = 0x665cc70000 end_va = 0x665d46ffff entry_point = 0x0 region_type = private name = "private_0x000000665cc70000" filename = "" Region: id = 7083 start_va = 0x665d470000 end_va = 0x665d4effff entry_point = 0x0 region_type = private name = "private_0x000000665d470000" filename = "" Region: id = 7084 start_va = 0x665d4f0000 end_va = 0x665d56ffff entry_point = 0x0 region_type = private name = "private_0x000000665d4f0000" filename = "" Region: id = 7085 start_va = 0x665d570000 end_va = 0x665d5effff entry_point = 0x0 region_type = private name = "private_0x000000665d570000" filename = "" Region: id = 7086 start_va = 0x665d5f0000 end_va = 0x665d66ffff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 7087 start_va = 0x665d670000 end_va = 0x665d6effff entry_point = 0x0 region_type = private name = "private_0x000000665d670000" filename = "" Region: id = 7088 start_va = 0x665d6f0000 end_va = 0x665d76ffff entry_point = 0x0 region_type = private name = "private_0x000000665d6f0000" filename = "" Region: id = 7089 start_va = 0x665d770000 end_va = 0x665d84efff entry_point = 0x665d770000 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui") Region: id = 7090 start_va = 0x665d850000 end_va = 0x665d8cffff entry_point = 0x0 region_type = private name = "private_0x000000665d850000" filename = "" Region: id = 7091 start_va = 0x665d8d0000 end_va = 0x665d8f9fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000665d8d0000" filename = "" Region: id = 7092 start_va = 0x665d900000 end_va = 0x665d9fffff entry_point = 0x0 region_type = private name = "private_0x000000665d900000" filename = "" Region: id = 7093 start_va = 0x7df5ffee0000 end_va = 0x7ff5ffedffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ffee0000" filename = "" Region: id = 7094 start_va = 0x7ff74ec20000 end_va = 0x7ff74ec54fff entry_point = 0x0 region_type = private name = "private_0x00007ff74ec20000" filename = "" Region: id = 7095 start_va = 0x7ff7ee80e000 end_va = 0x7ff7ee80ffff entry_point = 0x0 region_type = private name = "private_0x00007ff7ee80e000" filename = "" Region: id = 7096 start_va = 0x7ff7ee810000 end_va = 0x7ff7ee811fff entry_point = 0x0 region_type = private name = "private_0x00007ff7ee810000" filename = "" Region: id = 7097 start_va = 0x7ff7ee812000 end_va = 0x7ff7ee813fff entry_point = 0x0 region_type = private name = "private_0x00007ff7ee812000" filename = "" Region: id = 7098 start_va = 0x7ff7ee814000 end_va = 0x7ff7ee815fff entry_point = 0x0 region_type = private name = "private_0x00007ff7ee814000" filename = "" Region: id = 7099 start_va = 0x7ff7ee816000 end_va = 0x7ff7ee817fff entry_point = 0x0 region_type = private name = "private_0x00007ff7ee816000" filename = "" Region: id = 7100 start_va = 0x7ff7ee818000 end_va = 0x7ff7ee819fff entry_point = 0x0 region_type = private name = "private_0x00007ff7ee818000" filename = "" Region: id = 7101 start_va = 0x7ff7ee81a000 end_va = 0x7ff7ee81bfff entry_point = 0x0 region_type = private name = "private_0x00007ff7ee81a000" filename = "" Region: id = 7102 start_va = 0x7ff7ee81c000 end_va = 0x7ff7ee81dfff entry_point = 0x0 region_type = private name = "private_0x00007ff7ee81c000" filename = "" Region: id = 7103 start_va = 0x7ff7ee81e000 end_va = 0x7ff7ee81ffff entry_point = 0x0 region_type = private name = "private_0x00007ff7ee81e000" filename = "" Region: id = 7104 start_va = 0x7ff7ee820000 end_va = 0x7ff7ee91ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff7ee820000" filename = "" Region: id = 7105 start_va = 0x7ff7ee920000 end_va = 0x7ff7ee942fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff7ee920000" filename = "" Region: id = 7106 start_va = 0x7ff7ee943000 end_va = 0x7ff7ee944fff entry_point = 0x0 region_type = private name = "private_0x00007ff7ee943000" filename = "" Region: id = 7107 start_va = 0x7ff7ee945000 end_va = 0x7ff7ee946fff entry_point = 0x0 region_type = private name = "private_0x00007ff7ee945000" filename = "" Region: id = 7108 start_va = 0x7ff7ee947000 end_va = 0x7ff7ee947fff entry_point = 0x0 region_type = private name = "private_0x00007ff7ee947000" filename = "" Region: id = 7109 start_va = 0x7ff7ee948000 end_va = 0x7ff7ee949fff entry_point = 0x0 region_type = private name = "private_0x00007ff7ee948000" filename = "" Region: id = 7110 start_va = 0x7ff7ee94a000 end_va = 0x7ff7ee94bfff entry_point = 0x0 region_type = private name = "private_0x00007ff7ee94a000" filename = "" Region: id = 7111 start_va = 0x7ff7ee94c000 end_va = 0x7ff7ee94dfff entry_point = 0x0 region_type = private name = "private_0x00007ff7ee94c000" filename = "" Region: id = 7112 start_va = 0x7ff7ee94e000 end_va = 0x7ff7ee94ffff entry_point = 0x0 region_type = private name = "private_0x00007ff7ee94e000" filename = "" Region: id = 7113 start_va = 0x7ff7eed30000 end_va = 0x7ff7eed45fff entry_point = 0x7ff7eed30000 region_type = mapped_file name = "sihost.exe" filename = "\\Windows\\System32\\sihost.exe" (normalized: "c:\\windows\\system32\\sihost.exe") Region: id = 7114 start_va = 0x7ffb7f330000 end_va = 0x7ffb7f33bfff entry_point = 0x7ffb7f330000 region_type = mapped_file name = "licensemanagerapi.dll" filename = "\\Windows\\System32\\LicenseManagerApi.dll" (normalized: "c:\\windows\\system32\\licensemanagerapi.dll") Region: id = 7115 start_va = 0x7ffb7f450000 end_va = 0x7ffb7f4e8fff entry_point = 0x7ffb7f450000 region_type = mapped_file name = "staterepository.core.dll" filename = "\\Windows\\System32\\StateRepository.Core.dll" (normalized: "c:\\windows\\system32\\staterepository.core.dll") Region: id = 7116 start_va = 0x7ffb7f4f0000 end_va = 0x7ffb7f781fff entry_point = 0x7ffb7f4f0000 region_type = mapped_file name = "windows.staterepository.dll" filename = "\\Windows\\System32\\Windows.StateRepository.dll" (normalized: "c:\\windows\\system32\\windows.staterepository.dll") Region: id = 7117 start_va = 0x7ffb80a90000 end_va = 0x7ffb80c9cfff entry_point = 0x7ffb80a90000 region_type = mapped_file name = "twinui.appcore.dll" filename = "\\Windows\\System32\\twinui.appcore.dll" (normalized: "c:\\windows\\system32\\twinui.appcore.dll") Region: id = 7118 start_va = 0x7ffb821b0000 end_va = 0x7ffb821c4fff entry_point = 0x7ffb821b0000 region_type = mapped_file name = "execmodelproxy.dll" filename = "\\Windows\\System32\\execmodelproxy.dll" (normalized: "c:\\windows\\system32\\execmodelproxy.dll") Region: id = 7119 start_va = 0x7ffb821d0000 end_va = 0x7ffb82274fff entry_point = 0x7ffb821d0000 region_type = mapped_file name = "sharehost.dll" filename = "\\Windows\\System32\\ShareHost.dll" (normalized: "c:\\windows\\system32\\sharehost.dll") Region: id = 7120 start_va = 0x7ffb82280000 end_va = 0x7ffb82290fff entry_point = 0x7ffb82280000 region_type = mapped_file name = "ondemandbrokerclient.dll" filename = "\\Windows\\System32\\OnDemandBrokerClient.dll" (normalized: "c:\\windows\\system32\\ondemandbrokerclient.dll") Region: id = 7121 start_va = 0x7ffb822a0000 end_va = 0x7ffb8234bfff entry_point = 0x7ffb822a0000 region_type = mapped_file name = "appcontracts.dll" filename = "\\Windows\\System32\\AppContracts.dll" (normalized: "c:\\windows\\system32\\appcontracts.dll") Region: id = 7122 start_va = 0x7ffb82350000 end_va = 0x7ffb8235cfff entry_point = 0x7ffb82350000 region_type = mapped_file name = "notificationplatformcomponent.dll" filename = "\\Windows\\System32\\notificationplatformcomponent.dll" (normalized: "c:\\windows\\system32\\notificationplatformcomponent.dll") Region: id = 7123 start_va = 0x7ffb82360000 end_va = 0x7ffb823a2fff entry_point = 0x7ffb82360000 region_type = mapped_file name = "execmodelclient.dll" filename = "\\Windows\\System32\\ExecModelClient.dll" (normalized: "c:\\windows\\system32\\execmodelclient.dll") Region: id = 7124 start_va = 0x7ffb82420000 end_va = 0x7ffb82428fff entry_point = 0x7ffb82420000 region_type = mapped_file name = "wpportinglibrary.dll" filename = "\\Windows\\System32\\WpPortingLibrary.dll" (normalized: "c:\\windows\\system32\\wpportinglibrary.dll") Region: id = 7125 start_va = 0x7ffb82430000 end_va = 0x7ffb82507fff entry_point = 0x7ffb82430000 region_type = mapped_file name = "modernexecserver.dll" filename = "\\Windows\\System32\\modernexecserver.dll" (normalized: "c:\\windows\\system32\\modernexecserver.dll") Region: id = 7126 start_va = 0x7ffb82510000 end_va = 0x7ffb8251bfff entry_point = 0x7ffb82510000 region_type = mapped_file name = "dsclient.dll" filename = "\\Windows\\System32\\dsclient.dll" (normalized: "c:\\windows\\system32\\dsclient.dll") Region: id = 7127 start_va = 0x7ffb82520000 end_va = 0x7ffb82530fff entry_point = 0x7ffb82520000 region_type = mapped_file name = "userdatatypehelperutil.dll" filename = "\\Windows\\System32\\UserDataTypeHelperUtil.dll" (normalized: "c:\\windows\\system32\\userdatatypehelperutil.dll") Region: id = 7128 start_va = 0x7ffb82540000 end_va = 0x7ffb82561fff entry_point = 0x7ffb82540000 region_type = mapped_file name = "appointmentactivation.dll" filename = "\\Windows\\System32\\AppointmentActivation.dll" (normalized: "c:\\windows\\system32\\appointmentactivation.dll") Region: id = 7129 start_va = 0x7ffb82570000 end_va = 0x7ffb825cdfff entry_point = 0x7ffb82570000 region_type = mapped_file name = "activationmanager.dll" filename = "\\Windows\\System32\\ActivationManager.dll" (normalized: "c:\\windows\\system32\\activationmanager.dll") Region: id = 7130 start_va = 0x7ffb825d0000 end_va = 0x7ffb825fefff entry_point = 0x7ffb825d0000 region_type = mapped_file name = "edputil.dll" filename = "\\Windows\\System32\\edputil.dll" (normalized: "c:\\windows\\system32\\edputil.dll") Region: id = 7131 start_va = 0x7ffb82600000 end_va = 0x7ffb8262ffff entry_point = 0x7ffb82600000 region_type = mapped_file name = "clipboardserver.dll" filename = "\\Windows\\System32\\ClipboardServer.dll" (normalized: "c:\\windows\\system32\\clipboardserver.dll") Region: id = 7132 start_va = 0x7ffb82650000 end_va = 0x7ffb82ab9fff entry_point = 0x7ffb82650000 region_type = mapped_file name = "actxprxy.dll" filename = "\\Windows\\System32\\actxprxy.dll" (normalized: "c:\\windows\\system32\\actxprxy.dll") Region: id = 7133 start_va = 0x7ffb82b70000 end_va = 0x7ffb82b81fff entry_point = 0x7ffb82b70000 region_type = mapped_file name = "windows.shell.servicehostbuilder.dll" filename = "\\Windows\\System32\\Windows.Shell.ServiceHostBuilder.dll" (normalized: "c:\\windows\\system32\\windows.shell.servicehostbuilder.dll") Region: id = 7134 start_va = 0x7ffb82b90000 end_va = 0x7ffb82ba6fff entry_point = 0x7ffb82b90000 region_type = mapped_file name = "desktopshellext.dll" filename = "\\Windows\\System32\\DesktopShellExt.dll" (normalized: "c:\\windows\\system32\\desktopshellext.dll") Region: id = 7135 start_va = 0x7ffb82bb0000 end_va = 0x7ffb82e10fff entry_point = 0x7ffb82bb0000 region_type = mapped_file name = "coreuicomponents.dll" filename = "\\Windows\\System32\\CoreUIComponents.dll" (normalized: "c:\\windows\\system32\\coreuicomponents.dll") Region: id = 7136 start_va = 0x7ffb87810000 end_va = 0x7ffb878a1fff entry_point = 0x7ffb87810000 region_type = mapped_file name = "msvcp110_win.dll" filename = "\\Windows\\System32\\msvcp110_win.dll" (normalized: "c:\\windows\\system32\\msvcp110_win.dll") Region: id = 7137 start_va = 0x7ffb878b0000 end_va = 0x7ffb878e8fff entry_point = 0x7ffb878b0000 region_type = mapped_file name = "policymanager.dll" filename = "\\Windows\\System32\\policymanager.dll" (normalized: "c:\\windows\\system32\\policymanager.dll") Region: id = 7138 start_va = 0x7ffb87a20000 end_va = 0x7ffb87a55fff entry_point = 0x7ffb87a20000 region_type = mapped_file name = "xmllite.dll" filename = "\\Windows\\System32\\xmllite.dll" (normalized: "c:\\windows\\system32\\xmllite.dll") Region: id = 7139 start_va = 0x7ffb88720000 end_va = 0x7ffb88a95fff entry_point = 0x7ffb88720000 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" (normalized: "c:\\windows\\system32\\iertutil.dll") Region: id = 7140 start_va = 0x7ffb8a850000 end_va = 0x7ffb8a9d2fff entry_point = 0x7ffb8a850000 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 7141 start_va = 0x7ffb8a9e0000 end_va = 0x7ffb8aa51fff entry_point = 0x7ffb8a9e0000 region_type = mapped_file name = "mmdevapi.dll" filename = "\\Windows\\System32\\MMDevAPI.dll" (normalized: "c:\\windows\\system32\\mmdevapi.dll") Region: id = 7142 start_va = 0x7ffb8ab60000 end_va = 0x7ffb8ac90fff entry_point = 0x7ffb8ab60000 region_type = mapped_file name = "wintypes.dll" filename = "\\Windows\\System32\\WinTypes.dll" (normalized: "c:\\windows\\system32\\wintypes.dll") Region: id = 7143 start_va = 0x7ffb8aca0000 end_va = 0x7ffb8acddfff entry_point = 0x7ffb8aca0000 region_type = mapped_file name = "usermgrproxy.dll" filename = "\\Windows\\System32\\UserMgrProxy.dll" (normalized: "c:\\windows\\system32\\usermgrproxy.dll") Region: id = 7144 start_va = 0x7ffb8afe0000 end_va = 0x7ffb8afeffff entry_point = 0x7ffb8afe0000 region_type = mapped_file name = "usermgrcli.dll" filename = "\\Windows\\System32\\usermgrcli.dll" (normalized: "c:\\windows\\system32\\usermgrcli.dll") Region: id = 7145 start_va = 0x7ffb8bf20000 end_va = 0x7ffb8bf41fff entry_point = 0x7ffb8bf20000 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\System32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll") Region: id = 7146 start_va = 0x7ffb8c060000 end_va = 0x7ffb8c127fff entry_point = 0x7ffb8c060000 region_type = mapped_file name = "coremessaging.dll" filename = "\\Windows\\System32\\CoreMessaging.dll" (normalized: "c:\\windows\\system32\\coremessaging.dll") Region: id = 7147 start_va = 0x7ffb8c780000 end_va = 0x7ffb8c815fff entry_point = 0x7ffb8c780000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 7148 start_va = 0x7ffb8c820000 end_va = 0x7ffb8c846fff entry_point = 0x7ffb8c820000 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 7149 start_va = 0x7ffb8c870000 end_va = 0x7ffb8c95dfff entry_point = 0x7ffb8c870000 region_type = mapped_file name = "twinapi.appcore.dll" filename = "\\Windows\\System32\\twinapi.appcore.dll" (normalized: "c:\\windows\\system32\\twinapi.appcore.dll") Region: id = 7150 start_va = 0x7ffb8cae0000 end_va = 0x7ffb8cb07fff entry_point = 0x7ffb8cae0000 region_type = mapped_file name = "rmclient.dll" filename = "\\Windows\\System32\\rmclient.dll" (normalized: "c:\\windows\\system32\\rmclient.dll") Region: id = 7151 start_va = 0x7ffb8d160000 end_va = 0x7ffb8d16bfff entry_point = 0x7ffb8d160000 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\System32\\netutils.dll" (normalized: "c:\\windows\\system32\\netutils.dll") Region: id = 7152 start_va = 0x7ffb8d250000 end_va = 0x7ffb8d281fff entry_point = 0x7ffb8d250000 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll") Region: id = 7153 start_va = 0x7ffb8d3d0000 end_va = 0x7ffb8d402fff entry_point = 0x7ffb8d3d0000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 7154 start_va = 0x7ffb8d4c0000 end_va = 0x7ffb8d4defff entry_point = 0x7ffb8d4c0000 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 7155 start_va = 0x7ffb8d780000 end_va = 0x7ffb8d796fff entry_point = 0x7ffb8d780000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 7156 start_va = 0x7ffb8d8f0000 end_va = 0x7ffb8d8fafff entry_point = 0x7ffb8d8f0000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 7157 start_va = 0x7ffb8dad0000 end_va = 0x7ffb8dafbfff entry_point = 0x7ffb8dad0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 7158 start_va = 0x7ffb8dcd0000 end_va = 0x7ffb8dcf7fff entry_point = 0x7ffb8dcd0000 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 7159 start_va = 0x7ffb8dd00000 end_va = 0x7ffb8dd6afff entry_point = 0x7ffb8dd00000 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 7160 start_va = 0x7ffb8deb0000 end_va = 0x7ffb8dec2fff entry_point = 0x7ffb8deb0000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 7161 start_va = 0x7ffb8ded0000 end_va = 0x7ffb8dee0fff entry_point = 0x7ffb8ded0000 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 7162 start_va = 0x7ffb8def0000 end_va = 0x7ffb8df39fff entry_point = 0x7ffb8def0000 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 7163 start_va = 0x7ffb8df40000 end_va = 0x7ffb8df4efff entry_point = 0x7ffb8df40000 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 7164 start_va = 0x7ffb8e000000 end_va = 0x7ffb8e0b2fff entry_point = 0x7ffb8e000000 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\System32\\SHCore.dll" (normalized: "c:\\windows\\system32\\shcore.dll") Region: id = 7165 start_va = 0x7ffb8e120000 end_va = 0x7ffb8e747fff entry_point = 0x7ffb8e120000 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\System32\\windows.storage.dll" (normalized: "c:\\windows\\system32\\windows.storage.dll") Region: id = 7166 start_va = 0x7ffb8e750000 end_va = 0x7ffb8e910fff entry_point = 0x7ffb8e750000 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 7167 start_va = 0x7ffb8e920000 end_va = 0x7ffb8eafcfff entry_point = 0x7ffb8e920000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 7168 start_va = 0x7ffb8eb00000 end_va = 0x7ffb8eb43fff entry_point = 0x7ffb8eb00000 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 7169 start_va = 0x7ffb8eb50000 end_va = 0x7ffb8ebecfff entry_point = 0x7ffb8eb50000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 7170 start_va = 0x7ffb8ebf0000 end_va = 0x7ffb8ee6bfff entry_point = 0x7ffb8ebf0000 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 7171 start_va = 0x7ffb8ee70000 end_va = 0x7ffb8efbdfff entry_point = 0x7ffb8ee70000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 7172 start_va = 0x7ffb8efc0000 end_va = 0x7ffb8f0e5fff entry_point = 0x7ffb8efc0000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 7173 start_va = 0x7ffb8f100000 end_va = 0x7ffb8f284fff entry_point = 0x7ffb8f100000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 7174 start_va = 0x7ffb8f290000 end_va = 0x7ffb8f2e0fff entry_point = 0x7ffb8f290000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 7175 start_va = 0x7ffb8f2f0000 end_va = 0x7ffb8f395fff entry_point = 0x7ffb8f2f0000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 7176 start_va = 0x7ffb8f3a0000 end_va = 0x7ffb8f4fbfff entry_point = 0x7ffb8f3a0000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 7177 start_va = 0x7ffb90a40000 end_va = 0x7ffb90aecfff entry_point = 0x7ffb90a40000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 7178 start_va = 0x7ffb90af0000 end_va = 0x7ffb90b4afff entry_point = 0x7ffb90af0000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 7179 start_va = 0x7ffb90bc0000 end_va = 0x7ffb90c7dfff entry_point = 0x7ffb90bc0000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 7180 start_va = 0x7ffb90e60000 end_va = 0x7ffb90f04fff entry_point = 0x7ffb90e60000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 7181 start_va = 0x7ffb90f70000 end_va = 0x7ffb90fa5fff entry_point = 0x7ffb90f70000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 7182 start_va = 0x7ffb90fb0000 end_va = 0x7ffb910f0fff entry_point = 0x7ffb90fb0000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 7183 start_va = 0x7ffb91480000 end_va = 0x7ffb91641fff entry_point = 0x7ffb91480000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 7234 start_va = 0x665da00000 end_va = 0x665da7ffff entry_point = 0x0 region_type = private name = "private_0x000000665da00000" filename = "" Region: id = 7235 start_va = 0x7ff7ee80c000 end_va = 0x7ff7ee80dfff entry_point = 0x0 region_type = private name = "private_0x00007ff7ee80c000" filename = "" Region: id = 7236 start_va = 0x7ffb8d140000 end_va = 0x7ffb8d15bfff entry_point = 0x7ffb8d140000 region_type = mapped_file name = "mpr.dll" filename = "\\Windows\\System32\\mpr.dll" (normalized: "c:\\windows\\system32\\mpr.dll") Region: id = 7237 start_va = 0x7ffb8f500000 end_va = 0x7ffb90a24fff entry_point = 0x7ffb8f500000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 7238 start_va = 0x7ffb8b580000 end_va = 0x7ffb8b5b7fff entry_point = 0x7ffb8b580000 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 7239 start_va = 0x7ffb90a30000 end_va = 0x7ffb90a37fff entry_point = 0x7ffb90a30000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 7240 start_va = 0x7ffb8b560000 end_va = 0x7ffb8b56afff entry_point = 0x7ffb8b560000 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll") Region: id = 8193 start_va = 0x7ffb8d330000 end_va = 0x7ffb8d339fff entry_point = 0x7ffb8d330000 region_type = mapped_file name = "dpapi.dll" filename = "\\Windows\\System32\\dpapi.dll" (normalized: "c:\\windows\\system32\\dpapi.dll") Region: id = 8194 start_va = 0x665ae70000 end_va = 0x665ae70fff entry_point = 0x0 region_type = private name = "private_0x000000665ae70000" filename = "" Region: id = 8195 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8196 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8197 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8198 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8199 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8200 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8201 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8202 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8203 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8204 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8205 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8206 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8207 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8208 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8209 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8210 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8211 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8212 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8213 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8214 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8215 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8216 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8217 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8218 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8219 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8220 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8221 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8222 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8223 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8224 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8225 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8226 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8227 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8228 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8229 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8230 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8231 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8232 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8233 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8234 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8235 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8236 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8237 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8238 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8239 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8240 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8241 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8242 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8243 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8244 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8245 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8246 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8247 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8248 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8249 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8250 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8251 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8252 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8253 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8254 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8255 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8256 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8257 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8258 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8259 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8260 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8261 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8262 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8263 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8264 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8265 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8266 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8267 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8268 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8269 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8270 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8271 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8272 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8273 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8274 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8275 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8276 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8277 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8278 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8279 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8280 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8281 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8282 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8283 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8284 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8285 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8286 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8287 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8288 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8289 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8290 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8291 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8292 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8293 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8294 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8295 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8296 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8297 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8298 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8299 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8300 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8301 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8302 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8303 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8304 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8305 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8306 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8307 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8308 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8309 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8310 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8311 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8312 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8313 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8314 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8315 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8316 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8317 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8318 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8319 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8320 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8321 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8322 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8323 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8324 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8325 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8326 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8327 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8328 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8329 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8330 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8331 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8332 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8333 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8334 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8335 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8336 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8337 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8338 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8339 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8340 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8341 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8342 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8343 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8344 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8345 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8346 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8347 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8348 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8349 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8350 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8351 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8352 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8353 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8354 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8355 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8356 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8357 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8358 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8359 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8360 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8361 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8362 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8363 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8364 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8365 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8366 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8367 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8368 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8369 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8370 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8371 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8372 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8373 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8374 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8375 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8376 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8377 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8378 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8379 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8380 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8381 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8382 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8383 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8384 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8385 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8386 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8387 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8388 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8389 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8390 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8391 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8392 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8393 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8394 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8395 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8396 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8397 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8398 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8399 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8400 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8401 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8402 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8403 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8404 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8405 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8406 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8407 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8408 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8409 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8410 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8411 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8412 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8413 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8414 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8415 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8416 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8417 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8418 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8419 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8420 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8421 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8422 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8423 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8424 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8425 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8426 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8427 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8428 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8429 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8430 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8431 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8432 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8433 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8434 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8435 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8436 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8437 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8438 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8439 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8440 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8441 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8442 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8443 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8444 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8445 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8446 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8447 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8448 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8449 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8450 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8451 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8452 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8453 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8454 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8455 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8456 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8457 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8458 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8459 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8460 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8461 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8462 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8463 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8464 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8465 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8466 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8467 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8468 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8469 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8470 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8471 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8472 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8473 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8474 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8475 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8476 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8477 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8478 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8479 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8480 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8481 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8482 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8483 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8484 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8485 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8486 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8487 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8488 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8489 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8490 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8491 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8492 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8493 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8494 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8495 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8496 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8497 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8498 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8499 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8500 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8501 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8502 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8503 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8504 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8505 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8506 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8507 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8508 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8509 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8510 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8511 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8512 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8513 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8514 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8515 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8516 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8517 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8518 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8519 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8520 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8521 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8522 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8523 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8524 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8525 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8526 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8527 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8528 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8529 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8530 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8531 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8532 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8533 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8534 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8535 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8536 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8537 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8538 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8539 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8540 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8541 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8542 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8543 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8544 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8545 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8546 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8547 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8548 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8549 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8550 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8551 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8552 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8553 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8554 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8555 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8556 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8557 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8558 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8559 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8560 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8561 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8562 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8563 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8564 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8565 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8566 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8567 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8568 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8569 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8570 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8571 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8572 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8573 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8574 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8575 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8576 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8577 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8578 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8579 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8580 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8581 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8582 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8583 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8584 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8585 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8586 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8587 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8588 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8589 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8590 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8591 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8592 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8593 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8594 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8595 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8596 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8597 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8598 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8599 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8600 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8601 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8602 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8603 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8604 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8605 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8606 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8607 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8608 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8609 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8610 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8611 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8612 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8613 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8614 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8615 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8616 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8617 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8618 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8619 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8620 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8621 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8622 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8623 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8624 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8625 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8626 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8627 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8628 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8629 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8630 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8631 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8632 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8633 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8634 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8635 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8636 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8637 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8638 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8639 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8640 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8641 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8642 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8643 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8644 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8645 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8646 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8647 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8648 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8649 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8650 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8651 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8652 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8653 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8654 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8655 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8656 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8657 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8658 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8659 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8660 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8661 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8662 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8663 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8664 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8665 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8666 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8667 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8668 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8669 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8670 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8671 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8672 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8673 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8674 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8675 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8676 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8677 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8678 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8679 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8680 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8681 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8682 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8683 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8684 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8685 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8686 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8687 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8688 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8689 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8690 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8691 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8692 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8693 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8694 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8695 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8696 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8697 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8698 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8699 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8700 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8701 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8702 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8703 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8704 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8705 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8706 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8707 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8708 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8709 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8710 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8711 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8712 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8713 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8714 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8715 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8716 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8717 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8718 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8719 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8720 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8721 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8722 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8723 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8724 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8725 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8726 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8727 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8728 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8729 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8730 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8731 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8732 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8733 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8734 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8735 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8736 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8737 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8738 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8739 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8740 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8741 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8742 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8743 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8744 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8745 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8746 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8747 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8748 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8749 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8750 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8751 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8752 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8753 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8754 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8755 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8756 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8757 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8758 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8759 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8760 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8761 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8762 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8763 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8764 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8765 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8766 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8767 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8768 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8769 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8770 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8771 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8772 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8773 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8774 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8775 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8776 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8777 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8778 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8779 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8780 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8781 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8782 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8783 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8784 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8785 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8786 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8787 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8788 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8789 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8790 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8791 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8792 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8793 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8794 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8795 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8796 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8797 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8798 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8799 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8800 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8801 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8802 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8803 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8804 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8805 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8806 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8807 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8808 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8809 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8810 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8811 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8812 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8813 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8814 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8815 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8816 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8817 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8818 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8819 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8820 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8821 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8822 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8823 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8824 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8825 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8826 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8827 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8828 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8829 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8830 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8831 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8832 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8833 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8834 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8835 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8836 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8837 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8838 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8839 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8840 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8841 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8842 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8843 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8844 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8845 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8846 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8847 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8848 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8849 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8850 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8851 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8852 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8853 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8854 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8855 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8856 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8857 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8858 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8859 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8860 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8861 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8862 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8863 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8864 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8865 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8866 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8867 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8868 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8869 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8870 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8871 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8872 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8873 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8874 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8875 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8876 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8877 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8878 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8879 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8880 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8881 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8882 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8883 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8884 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8885 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8886 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8887 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8888 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8889 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8890 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8891 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8892 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8893 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8894 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8895 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8896 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8897 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8898 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8899 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8900 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8901 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8902 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8903 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8904 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8905 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8906 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8907 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8908 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8909 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8910 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8911 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8912 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8913 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8914 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8915 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8916 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8917 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8918 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8919 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8920 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8921 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8922 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8923 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8924 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8925 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8926 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8927 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8928 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8929 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8930 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8931 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8932 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8933 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8934 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8935 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8936 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8937 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8938 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8939 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8940 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8941 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8942 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8943 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8944 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8945 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8946 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8947 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8948 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8949 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8950 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8951 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8952 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8953 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8954 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8955 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8956 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8957 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8958 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8959 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8960 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8961 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8962 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8963 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8964 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8965 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8966 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8967 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8968 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8969 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8970 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8971 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8972 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8973 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8974 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8975 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8976 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8977 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8978 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8979 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8980 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8981 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8982 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8983 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8984 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8985 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8986 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8987 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8988 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8989 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8990 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8991 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8992 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8993 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8994 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8995 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8996 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8997 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8998 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 8999 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9000 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9001 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9002 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9003 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9004 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9005 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9006 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9007 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9008 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9009 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9010 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9011 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9012 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9013 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9014 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9015 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9016 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9017 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9018 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9019 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9020 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9021 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9022 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9023 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9024 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9025 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9026 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9027 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9028 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9029 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9030 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9031 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9032 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9033 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9034 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9035 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9036 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9037 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9038 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9039 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9040 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9041 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9042 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9043 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9044 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9045 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9046 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9047 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9048 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9049 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9050 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9051 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9052 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9053 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9054 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9055 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9056 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9057 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9058 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9059 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9060 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9061 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9062 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9063 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9064 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9065 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9066 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9067 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9068 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9069 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9070 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9071 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9072 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9073 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9074 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9075 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9076 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9077 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9078 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9079 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9080 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9081 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9082 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9083 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9084 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9085 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9086 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9087 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9088 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9089 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9090 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9091 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9092 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9093 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9094 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9095 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9096 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9097 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9098 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9099 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9100 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9101 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9102 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9103 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9104 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9105 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9106 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9107 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9108 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9109 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9110 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9111 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9112 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9113 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9114 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9115 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9116 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9117 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9118 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9119 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9120 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9121 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9122 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9123 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9124 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9125 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9126 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9127 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9128 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9129 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9130 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9131 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9132 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9133 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9134 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9135 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9136 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9137 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9138 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9139 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9140 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9141 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9142 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9143 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9144 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9145 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9146 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9147 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9148 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9149 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9150 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9151 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9152 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9153 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9154 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9155 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9156 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9157 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9158 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9159 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9160 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9161 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9162 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9163 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9164 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9165 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9166 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9167 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9168 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9169 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9170 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9171 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9172 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9173 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9174 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9175 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9176 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9177 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9178 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9179 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9180 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9181 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9182 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9183 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9184 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9185 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9186 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9187 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9188 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9189 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9190 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9191 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9192 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9193 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9194 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9195 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9196 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9197 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9198 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9199 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9200 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9201 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9202 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9203 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9204 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9205 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9206 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9207 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9208 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9209 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9210 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9211 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9212 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9213 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9214 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9215 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9216 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9217 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9218 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9219 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9220 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9221 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9222 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9223 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9224 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9225 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9226 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9227 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9228 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9229 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9230 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9231 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9232 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9233 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9234 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9235 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9236 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9237 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9238 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9239 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9240 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9241 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9242 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9243 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9244 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9245 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9246 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9247 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9248 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9249 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9250 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9251 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9252 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9253 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9254 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9255 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9256 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9257 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9258 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9259 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9260 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9261 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9262 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9263 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9264 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9265 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9266 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9267 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9268 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9269 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9270 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9271 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9272 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9273 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9274 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9275 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9276 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9277 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9278 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9279 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9280 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9281 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9282 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9283 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9284 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9285 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9286 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9287 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9288 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9289 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9290 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9291 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9292 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9293 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9294 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9295 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9296 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9297 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9298 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9299 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9300 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9301 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9302 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9303 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9304 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9305 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9306 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9307 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9308 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9309 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9310 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9311 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9312 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9313 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9314 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9315 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9316 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9317 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9318 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9319 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9320 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9321 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9322 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9323 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9324 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9325 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9326 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9327 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9328 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9329 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9330 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9331 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9332 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9333 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9334 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9335 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9336 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9337 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9338 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9339 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9340 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9341 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9342 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9343 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9344 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9345 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9346 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9347 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9348 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9349 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9350 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9351 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9352 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9353 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9354 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9355 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9356 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9357 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9358 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9359 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9360 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9361 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9362 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9363 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9364 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9365 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9366 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9367 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9368 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9369 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9370 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9371 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9372 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9373 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9374 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9375 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9376 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9377 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9378 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9379 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9380 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9381 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9382 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9383 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9384 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9385 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9386 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9387 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9388 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9389 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9390 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9391 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9392 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9393 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9394 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9395 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9396 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9397 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9398 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9399 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9400 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9401 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9402 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9403 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9404 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9405 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9406 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9407 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9408 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9409 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9410 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9411 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9412 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9413 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9414 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9415 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9416 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9417 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9418 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9419 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9420 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9421 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9422 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9423 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9424 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9425 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9426 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9427 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9428 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9429 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9430 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9431 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9432 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9433 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9434 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9435 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9436 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9437 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9438 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9439 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9440 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9441 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9442 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9443 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9444 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9445 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9446 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9447 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9448 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9449 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9450 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9451 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9452 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9453 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9454 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9455 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9456 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9457 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9458 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9459 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9460 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9461 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9462 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9463 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9464 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9465 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9466 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9467 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9468 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9469 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9470 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9471 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9472 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9473 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9474 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9475 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9476 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9477 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9478 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9479 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9480 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9481 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9482 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9483 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9484 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9485 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9486 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9487 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9488 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9489 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9490 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9491 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9492 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9493 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9494 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9495 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9496 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9497 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9498 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9499 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9500 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9501 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9502 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9503 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9504 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9505 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9506 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9507 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9508 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9509 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9510 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9511 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9512 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9513 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9514 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9515 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9516 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9517 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9518 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9519 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9520 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9521 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9522 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9523 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9524 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9525 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9526 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9527 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9528 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9529 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9530 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9531 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9532 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9533 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9534 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9535 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9536 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9537 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9538 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9539 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9540 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9541 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9542 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9543 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9544 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9545 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9546 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9547 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9548 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9549 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9550 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9551 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9552 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9553 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9554 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9555 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9556 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9557 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9558 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9559 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9560 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9561 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9562 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9563 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9564 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9565 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9566 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9567 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9568 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9569 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9570 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9571 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9572 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9573 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9574 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9575 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9576 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9577 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9578 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9579 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9580 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9581 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9582 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9583 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9584 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9585 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9586 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9587 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9588 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9589 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9590 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9591 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9592 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9593 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9594 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9595 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9596 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9597 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9598 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9599 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9600 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9601 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9602 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9603 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9604 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9605 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9606 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9607 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9608 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9609 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9610 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9611 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9612 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9613 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9614 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9615 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9616 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9617 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9618 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9619 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9620 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9621 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9622 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9623 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9624 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9625 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9626 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9627 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9628 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9629 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9630 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9631 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9632 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9633 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9634 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9635 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9636 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9637 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9638 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9639 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9640 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9641 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9642 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9643 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9644 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9645 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9646 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9647 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9648 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9649 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9650 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9651 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9652 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9653 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9654 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9655 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9656 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9657 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9658 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9659 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9660 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9661 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9662 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9663 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9664 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9665 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9666 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9667 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9668 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9669 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9670 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9671 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9672 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9673 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9674 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9675 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9676 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9677 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9678 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9679 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9680 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9681 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9682 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9683 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9684 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9685 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9686 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9687 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9688 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9689 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9690 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9691 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9692 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9693 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9694 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9695 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9696 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9697 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9698 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9699 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9700 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9701 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9702 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9703 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9704 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9705 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9706 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9707 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9708 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9709 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9710 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9711 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9712 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9713 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9714 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9715 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9716 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9717 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9718 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9719 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9720 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9721 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9722 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9723 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9724 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9725 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9726 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9727 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9728 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9729 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9730 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9731 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9732 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9733 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9734 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9735 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9736 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9737 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9738 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9739 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9740 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9741 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9742 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9743 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9744 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9745 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9746 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9747 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9748 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9749 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9750 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9751 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9752 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9753 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9754 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9755 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9756 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9757 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9758 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9759 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9760 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9761 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9762 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9763 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9764 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9765 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9766 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9767 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9768 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9769 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9770 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9771 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9772 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9773 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9774 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9775 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9776 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9777 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9778 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9779 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9780 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9781 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9782 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9783 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9784 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9785 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9786 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9787 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9788 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9789 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9790 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9791 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9792 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9793 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9794 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9795 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9796 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9797 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9798 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9799 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9800 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9801 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9802 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9803 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9804 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9805 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9806 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9807 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9808 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9809 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9810 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9811 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9812 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9813 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9814 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9815 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9816 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9817 start_va = 0x665da80000 end_va = 0x665da82fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 9818 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9819 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9820 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9821 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9822 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9823 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9824 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9825 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9826 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9827 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9828 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9829 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9830 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9831 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9832 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9833 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9834 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9835 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9836 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9837 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9838 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9839 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9840 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9841 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9842 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9843 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9844 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9845 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9846 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9847 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9848 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9849 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9850 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9851 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9852 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9853 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9854 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9855 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9856 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9857 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9858 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9859 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9860 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9861 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9862 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9863 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9864 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9865 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9866 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9867 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9868 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9869 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9870 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9871 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9872 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9873 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9874 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9875 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9876 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9877 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9878 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9879 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9880 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9881 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9882 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9883 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9884 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9885 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9886 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9887 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9888 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9889 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9890 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9891 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9892 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9893 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9894 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9895 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9896 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9897 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9898 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9899 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9900 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9901 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9902 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9903 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9904 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9905 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9906 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9907 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9908 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9909 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9910 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9911 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9912 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9913 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9914 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9915 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9916 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9917 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9918 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9919 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9920 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9921 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9922 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9923 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9924 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9925 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9926 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9927 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9928 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9929 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9930 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9931 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9932 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9933 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9934 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9935 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9936 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9937 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9938 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9939 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9940 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9941 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9942 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9943 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9944 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9945 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9946 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9947 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9948 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9949 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9950 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9951 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9952 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9953 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9954 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9955 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9956 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9957 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9958 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9959 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9960 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9961 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9962 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9963 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9964 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9965 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9966 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9967 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9968 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9969 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9970 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9971 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9972 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9973 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9974 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9975 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9976 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9977 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9978 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9979 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9980 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9981 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9982 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9983 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9984 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9985 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9986 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9987 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9988 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9989 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9990 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9991 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9992 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9993 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9994 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9995 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9996 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9997 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9998 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 9999 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10000 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10001 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10002 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10003 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10004 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10005 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10006 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10007 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10008 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10009 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10010 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10011 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10012 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10013 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10014 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10015 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10016 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10017 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10018 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10019 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10020 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10021 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10022 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10023 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10024 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10025 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10026 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10027 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10028 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10029 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10030 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10031 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10032 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10033 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10034 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10035 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10036 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10037 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10038 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10039 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10040 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10041 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10042 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10043 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10044 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10045 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10046 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10047 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10048 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10049 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10050 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10051 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10052 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10053 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10054 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10055 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10056 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10057 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10058 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10059 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10060 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10061 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10062 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10063 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10064 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10065 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10066 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10067 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10068 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10069 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10070 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10071 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10072 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10073 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10074 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10075 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10076 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10077 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10078 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10079 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10080 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10081 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10082 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10083 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10084 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10085 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10086 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10087 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10088 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10089 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10090 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10091 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10092 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10093 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10094 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10095 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10096 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10097 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10098 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10099 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10100 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10101 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10102 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10103 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10104 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10105 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10106 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10107 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10108 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10109 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10110 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10111 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10112 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10113 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10114 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10115 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10116 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10117 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10118 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10119 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10120 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10121 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10122 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10123 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10124 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10125 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10126 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10127 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10128 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10129 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10130 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10131 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10132 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10133 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10134 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10135 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10136 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10137 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10138 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10139 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10140 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10141 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10142 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10143 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10144 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10145 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10146 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10147 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10148 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10149 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10150 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10151 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10152 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10153 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10154 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10155 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10156 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10157 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10158 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10159 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10160 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10161 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10162 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10163 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10164 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10165 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10166 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10167 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10168 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10169 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10170 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10171 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10172 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10173 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10174 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10175 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10176 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10177 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10178 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10179 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10180 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10181 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10182 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10183 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10184 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10185 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10186 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10187 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10188 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10189 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10190 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10191 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10192 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10193 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10194 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10195 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10196 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10197 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10198 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10199 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10200 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10201 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10202 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10203 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10204 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10205 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10206 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10207 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10208 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10209 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10210 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10211 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10212 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10213 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10214 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10215 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10216 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10217 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10218 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10219 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10220 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10221 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10222 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10223 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10224 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10225 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10226 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10227 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10228 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10229 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10230 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10231 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10232 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10233 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10234 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10235 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10236 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10237 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10238 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10239 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10240 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10241 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10242 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10243 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10244 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10245 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10246 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10247 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10248 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10249 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10250 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10251 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10252 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10253 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10254 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10255 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10256 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10257 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10258 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10259 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10260 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10261 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10262 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10263 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10264 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10265 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10266 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10267 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10268 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10269 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10270 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10271 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10272 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10273 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10274 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10275 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10276 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10277 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10278 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10279 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10280 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10281 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10282 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10283 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10284 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10285 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10286 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10287 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10288 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10289 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10290 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10291 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10292 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10293 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10294 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10295 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10296 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10297 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10298 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10299 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10300 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10301 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10302 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10303 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10304 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10305 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10306 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10307 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10308 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10309 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10310 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10311 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10312 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10313 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10314 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10315 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10316 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10317 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10318 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10319 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10320 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10321 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10322 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10323 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10324 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10325 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10326 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10327 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10328 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10329 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10330 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10331 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10332 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10333 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10334 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10335 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10336 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10337 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10338 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10339 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10340 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10341 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10342 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10343 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10344 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10345 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10346 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10347 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10348 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10349 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10350 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10351 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10352 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10353 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10354 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10355 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10356 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10357 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10358 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10359 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10360 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10361 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10362 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10363 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10364 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10365 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10366 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10367 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10368 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10369 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10370 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10371 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10372 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10373 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10374 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10375 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10376 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10377 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10378 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10379 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10380 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10381 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10382 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10383 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10384 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10385 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10386 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10387 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10388 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10389 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10390 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10391 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10392 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10393 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10394 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10395 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10396 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10397 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10398 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10399 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10400 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10401 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10402 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10403 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10404 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10405 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10406 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10407 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10408 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10409 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10410 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10411 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10412 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10413 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10414 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10415 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10416 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10417 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10418 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10419 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10420 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10421 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10422 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10423 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10424 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10425 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10426 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10427 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10428 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10429 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10430 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10431 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10432 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10433 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10434 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10435 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10436 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10437 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10438 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10439 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10440 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10441 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10442 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10443 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10444 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10445 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10446 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10447 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10448 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10449 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10450 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10451 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10452 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10453 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10454 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10455 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10456 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10457 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10458 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10459 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10460 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10461 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10462 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10463 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10464 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10465 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10466 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10467 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10468 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10469 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10470 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10471 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10472 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10473 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10474 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10475 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10476 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10477 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10478 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10479 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10480 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10481 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10482 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10483 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10484 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10485 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10486 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10487 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10488 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10489 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10490 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10491 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10492 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10493 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10494 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10495 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10496 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10497 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10498 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10499 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10500 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10501 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10502 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10503 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10504 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10505 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10506 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10507 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10508 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10509 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10510 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10511 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10512 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10513 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10514 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10515 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10516 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10517 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10518 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10519 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10520 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10521 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10522 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10523 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10524 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10525 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10526 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10527 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10528 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10529 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10530 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10531 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10532 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10533 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10534 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10535 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10536 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10537 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10538 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10539 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10540 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10541 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10542 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10543 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10544 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10545 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10546 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10547 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10548 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10549 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10550 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10551 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10552 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10553 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10554 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10555 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10556 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10557 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10558 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10559 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10560 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10561 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10562 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10563 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10564 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10565 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10566 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10567 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10568 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10569 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10570 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10571 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10572 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10573 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10574 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10575 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10576 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10577 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10578 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10579 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10580 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10581 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10582 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10583 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10584 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10585 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10586 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10587 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10588 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10589 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10590 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10591 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10592 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10593 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10594 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10595 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10596 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10597 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10598 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10599 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10600 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10601 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10602 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10603 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10604 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10605 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10606 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10607 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10608 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10609 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10610 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10611 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10612 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10613 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10614 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10615 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10616 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10617 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10618 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10619 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10620 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10621 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10622 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10623 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10624 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10625 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10626 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10627 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10628 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10629 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10630 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10631 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10632 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10633 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10634 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10635 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10636 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10637 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10638 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10639 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10640 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10641 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10642 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10643 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10644 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10645 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10646 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10647 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10648 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10649 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10650 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10651 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10652 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10653 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10654 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10655 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10656 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10657 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10658 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10659 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10660 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10661 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10662 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10663 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10664 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10665 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10666 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10667 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10668 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10669 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10670 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10671 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10672 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10673 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10674 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10675 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10676 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10677 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10678 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10679 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10680 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10681 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10682 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10683 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10684 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10685 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10686 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10687 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10688 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10689 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10690 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10691 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10692 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10693 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10694 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10695 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10696 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10697 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10698 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10699 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10700 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10701 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10702 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10703 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10704 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10705 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10706 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10707 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10708 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10709 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10710 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10711 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10712 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10713 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10714 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10715 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10716 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10717 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10718 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10719 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10720 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10721 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10722 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10723 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10724 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10725 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10726 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10727 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10728 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10729 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10730 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10731 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10732 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10733 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10734 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10735 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10736 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10737 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10738 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10739 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10740 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10741 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10742 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10743 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10744 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10745 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10746 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10747 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10748 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10749 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10750 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10751 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10752 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10753 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10754 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10755 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10756 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10757 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10758 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10759 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10760 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10761 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10762 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10763 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10764 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10765 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10766 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10767 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10768 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10769 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10770 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10771 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10772 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10773 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10774 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10775 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10776 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10777 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10778 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10779 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10780 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10781 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10782 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10783 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10784 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10785 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10786 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10787 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10788 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10789 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10790 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10791 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10792 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10793 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10794 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10795 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10796 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10797 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10798 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10799 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10800 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10801 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10802 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10803 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10804 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10805 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10806 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10807 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10808 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10809 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10810 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10811 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10812 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10813 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10814 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10815 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10816 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10817 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10818 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10819 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10820 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10821 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10822 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10823 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10824 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10825 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10826 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10827 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10828 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10829 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10830 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10831 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10832 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10833 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10834 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10835 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10836 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10837 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10838 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10839 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10840 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10841 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10842 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10843 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10844 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10845 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10846 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10847 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10848 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10849 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10850 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10851 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10852 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10853 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10854 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10855 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10856 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10857 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10858 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10859 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10860 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10861 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10862 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10863 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10864 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10865 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10866 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10867 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10868 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10869 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10870 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10871 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10872 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10873 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10874 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10875 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10876 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10877 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10878 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10879 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10880 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10881 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10882 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10883 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10884 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10885 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10886 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10887 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10888 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10889 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10890 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10891 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10892 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10893 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10894 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10895 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10896 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10897 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10898 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10899 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10900 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10901 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10902 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10903 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10904 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10905 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10906 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10907 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10908 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10909 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10910 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10911 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10912 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10913 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10914 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10915 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10916 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10917 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10918 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10919 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10920 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10921 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10922 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10923 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10924 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10925 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10926 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10927 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10928 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10929 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10930 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10931 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10932 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10933 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10934 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10935 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10936 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10937 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10938 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10939 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10940 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10941 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10942 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10943 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10944 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10945 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10946 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10947 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10948 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10949 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10950 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10951 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10952 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10953 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10954 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10955 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10956 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10957 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10958 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10959 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10960 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10961 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10962 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10963 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10964 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10965 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10966 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10967 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10968 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10969 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10970 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10971 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10972 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10973 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10974 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10975 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10976 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10977 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10978 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10979 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10980 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10981 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10982 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10983 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10984 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10985 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10986 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10987 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10988 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10989 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10990 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10991 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10992 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10993 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10994 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10995 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10996 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10997 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10998 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 10999 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11000 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11001 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11002 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11003 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11004 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11005 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11006 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11007 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11008 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11009 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11010 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11011 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11012 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11013 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11014 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11015 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11016 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11017 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11018 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11019 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11020 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11021 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11022 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11023 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11024 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11025 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11026 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11027 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11028 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11029 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11030 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11031 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11032 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11033 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11034 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11035 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11036 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11037 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11038 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11039 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11040 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11041 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11042 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11043 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11044 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11045 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11046 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11047 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11048 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11049 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11050 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11051 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11052 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11053 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11054 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11055 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11056 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11057 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11058 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11059 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11060 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11061 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11062 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11063 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11064 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11065 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11066 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11067 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11068 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11069 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11070 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11071 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11072 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11073 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11074 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11075 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11076 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11077 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11078 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11079 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11080 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11081 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11082 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11083 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11084 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11085 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11086 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11087 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11088 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11089 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11090 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11091 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11092 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11093 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11094 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11095 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11096 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11097 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11098 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11099 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11100 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11101 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11102 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11103 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11104 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11105 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11106 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11107 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11108 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11109 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11110 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11111 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11112 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11113 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11114 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11115 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11116 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11117 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11118 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11119 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11120 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11121 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11122 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11123 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11124 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11125 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11126 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11127 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11128 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11129 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11130 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11131 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11132 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11133 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11134 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11135 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11136 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11137 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11138 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11139 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11140 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11141 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11142 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11143 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11144 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11145 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11146 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11147 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11148 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11149 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11150 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11151 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11152 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11153 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11154 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11155 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11156 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11157 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11158 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11159 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11160 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11161 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11162 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11163 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11164 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11165 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11166 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11167 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11168 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11169 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11170 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11171 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11172 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11173 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11174 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11175 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11176 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11177 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11178 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11179 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11180 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11181 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11182 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11183 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11184 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11185 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11186 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11187 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11188 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11189 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11190 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11191 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11192 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11193 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11194 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11195 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11196 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11197 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11198 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11199 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11200 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11201 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11202 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11203 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11204 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11205 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11206 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11207 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11208 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11209 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11210 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11211 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11212 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11213 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11214 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11215 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11216 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11217 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11218 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11219 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11220 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11221 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11222 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11223 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11224 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11225 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11226 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11227 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11228 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11229 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11230 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11231 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11232 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11233 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11234 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11235 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11236 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11237 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11238 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11239 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11240 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11241 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11242 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11243 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11244 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11245 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11246 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11247 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11248 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11249 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11250 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11251 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11252 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11253 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11254 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11255 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11256 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11257 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11258 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11259 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11260 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11261 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11262 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11263 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11264 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11265 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11266 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11267 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11268 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11269 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11270 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11271 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11272 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11273 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11274 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11275 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11276 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11277 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11278 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11279 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11280 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11281 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11282 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11283 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11284 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11285 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11286 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11287 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11288 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11289 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11290 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11291 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11292 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11293 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11294 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11295 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11296 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11297 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11298 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11299 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11300 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11301 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11302 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11303 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11304 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11305 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11306 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11307 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11308 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11309 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11310 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11311 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11312 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11313 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11314 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11315 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11316 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11317 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11318 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11319 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11320 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11321 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11322 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11323 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11324 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11325 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11326 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11327 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11328 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11329 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11330 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11331 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11332 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11333 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11334 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11335 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11336 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11337 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11338 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11339 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11340 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11341 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11342 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11343 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11344 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11345 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11346 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11347 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11348 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11349 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11350 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11351 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11352 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11353 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11354 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11355 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11356 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11357 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11358 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11359 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11360 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11361 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11362 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11363 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11364 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11365 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11366 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11367 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11368 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11369 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11370 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11371 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11372 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11373 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11374 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11375 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11376 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11377 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11378 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11379 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11380 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11381 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11382 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11383 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11384 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11385 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11386 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11387 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11388 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11389 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11390 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11391 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11392 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11393 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11394 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11395 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11396 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11397 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11398 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11399 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11400 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11401 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11402 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11403 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11404 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11405 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11406 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11407 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11408 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11409 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11410 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11411 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11412 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11413 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11414 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11415 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11416 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11417 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11418 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11419 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11420 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11421 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11422 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11423 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11424 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11425 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11426 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11427 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11428 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11429 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11430 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11431 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11432 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11433 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11434 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11435 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11436 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11437 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11438 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11439 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11440 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11441 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11442 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11443 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11444 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11445 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11446 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11447 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11448 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11449 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11450 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11451 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11452 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11453 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11454 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11455 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11456 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11457 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11458 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11459 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11460 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11461 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11462 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11463 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11464 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11465 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11466 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11467 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11468 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11469 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11470 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11471 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11472 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11473 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11474 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11475 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11476 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11477 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11478 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11479 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11480 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11481 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11482 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11483 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11484 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11485 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11486 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11487 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11488 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11489 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11490 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11491 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11492 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11493 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11494 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11495 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11496 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11497 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11498 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11499 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11500 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11501 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11502 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11503 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11504 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11505 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11506 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11507 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11508 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11509 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11510 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11511 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11512 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11513 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11514 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11515 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11516 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11517 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11518 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11519 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11520 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11521 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11522 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11523 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11524 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11525 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11526 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11527 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11528 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11529 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11530 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11531 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11532 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11533 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11534 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11535 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11536 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11537 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11538 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11539 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11540 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11541 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11542 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11543 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11544 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11545 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11546 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11547 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11548 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11549 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11550 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11551 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11552 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11553 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11554 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11555 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11556 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11557 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11558 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11559 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11560 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11561 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11562 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11563 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11564 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11565 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11566 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11567 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11568 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11569 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11570 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11571 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11572 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11573 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11574 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11575 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11576 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11577 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11578 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11579 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11580 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11581 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11582 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11583 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11584 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11585 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11586 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11587 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11588 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11589 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11590 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11591 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11592 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11593 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11594 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11595 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11596 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11597 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11598 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11599 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11600 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11601 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11602 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11603 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11604 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11605 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11606 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11607 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11608 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11609 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11610 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11611 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11612 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11613 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11614 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11615 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11616 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11617 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11618 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11619 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11620 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11621 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11622 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11623 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11624 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11625 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11626 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11627 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11628 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11629 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11630 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11631 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11632 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11633 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11634 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11635 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11636 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11637 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11638 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11639 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11640 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11641 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11642 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11643 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11644 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11645 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11646 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11647 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11648 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11649 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11650 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11651 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11652 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11653 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11654 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11655 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11656 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11657 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11658 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11659 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11660 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11661 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11662 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11663 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11664 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11665 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11666 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11667 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11668 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11669 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11670 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11671 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11672 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11673 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11674 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11675 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11676 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11677 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11678 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11679 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11680 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11681 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11682 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11683 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11684 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11685 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11686 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11687 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11688 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11689 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11690 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11691 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11692 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11693 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11694 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11695 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11696 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11697 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11698 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11699 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11700 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11701 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11702 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11703 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11704 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11705 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11706 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11707 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11708 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11709 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11710 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11711 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11712 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11713 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11714 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11715 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11716 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11717 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11718 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11719 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11720 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11721 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11722 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11723 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11724 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11725 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11726 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11727 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11728 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11729 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11730 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11731 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11732 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11733 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11734 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11735 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11736 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11737 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11738 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11739 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11740 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11741 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11742 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11743 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11744 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11745 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11746 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11747 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11748 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11749 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11750 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11751 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11752 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11753 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11754 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11755 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11756 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11757 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11758 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11759 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11760 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11761 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11762 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11763 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11764 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11765 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11766 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11767 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11768 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11769 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11770 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11771 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11772 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11773 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11774 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11775 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11776 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11777 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11778 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11779 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11780 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11781 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11782 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11783 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11784 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11785 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11786 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11787 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11788 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11789 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11790 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11791 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11792 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11793 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11794 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11795 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11796 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11797 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11798 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11799 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11800 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11801 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11802 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11803 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11804 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11805 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11806 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11807 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11808 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11809 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11810 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11811 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11812 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11813 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11814 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11815 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11816 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11817 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11818 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11819 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11820 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11821 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11822 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11823 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11824 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11825 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11826 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11827 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11828 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11829 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11830 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11831 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11832 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11833 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11834 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11835 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11836 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11837 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11838 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11839 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11840 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11841 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11842 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11843 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11844 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11845 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11846 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11847 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11848 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11849 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11850 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11851 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11852 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11853 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11854 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11855 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11856 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11857 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11858 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11859 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11860 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11861 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11862 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11863 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11864 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11865 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11866 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11867 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11868 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11869 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11870 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11871 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11872 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11873 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11874 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11875 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11876 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11877 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11878 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11879 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11880 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11881 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11882 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11883 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11884 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11885 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11886 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11887 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11888 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11889 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11890 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11891 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11892 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11893 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11894 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11895 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11896 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11897 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11898 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11899 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11900 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11901 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11902 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11903 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11904 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11905 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11906 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11907 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11908 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11909 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11910 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11911 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11912 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11913 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11914 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11915 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11916 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11917 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11918 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11919 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11920 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11921 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11922 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11923 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11924 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11925 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11926 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11927 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11928 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11929 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11930 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11931 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11932 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11933 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11934 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11935 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11936 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11937 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11938 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11939 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11940 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11941 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11942 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11943 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11944 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11945 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11946 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11947 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11948 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11949 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11950 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11951 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11952 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11953 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11954 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11955 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11956 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11957 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11958 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11959 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11960 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11961 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11962 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11963 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11964 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11965 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11966 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11967 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11968 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11969 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11970 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11971 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11972 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11973 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11974 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11975 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11976 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11977 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11978 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11979 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11980 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11981 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11982 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11983 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11984 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11985 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11986 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11987 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11988 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11989 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11990 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11991 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11992 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11993 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11994 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11995 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11996 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11997 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11998 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 11999 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12000 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12001 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12002 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12003 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12004 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12005 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12006 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12007 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12008 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12009 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12010 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12011 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12012 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12013 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12014 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12015 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12016 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12017 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12018 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12019 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12020 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12021 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12022 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12023 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12024 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12025 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12026 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12027 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12028 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12029 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12030 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12031 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12032 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12033 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12034 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12035 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12036 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12037 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12038 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12039 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12040 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12041 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12042 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12043 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12044 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12045 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12046 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12047 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12048 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12049 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12050 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12051 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12052 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12053 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12054 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12055 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12056 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12057 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12058 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12059 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12060 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12061 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12062 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12063 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12064 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12065 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12066 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12067 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12068 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12069 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12070 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12071 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12072 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12073 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12074 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12075 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12076 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12077 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12078 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12079 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12080 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12081 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12082 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12083 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12084 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12085 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12086 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12087 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12088 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12089 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12090 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12091 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12092 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12093 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12094 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12095 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12096 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12097 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12098 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12099 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12100 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12101 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12102 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12103 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12104 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12105 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12106 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12107 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12108 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12109 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12110 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12111 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12112 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12113 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12114 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12115 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12116 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12117 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12118 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12119 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12120 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12121 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12122 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12123 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12124 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12125 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12126 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12127 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12128 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12129 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12130 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12131 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12132 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12133 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12134 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12135 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12136 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12137 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12138 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12139 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12140 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12141 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12142 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12143 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12144 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12145 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12146 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12147 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12148 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12149 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12150 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12151 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12152 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12153 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12154 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12155 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12156 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12157 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12158 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12159 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12160 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12161 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12162 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12163 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12164 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12165 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12166 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12167 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12168 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12169 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12170 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12171 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12172 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12173 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12174 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12175 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12176 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12177 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12178 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12179 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12180 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12181 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12182 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12183 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12184 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12185 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12186 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12187 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12188 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12189 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12190 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12191 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12192 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12193 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12194 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12195 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12196 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12197 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12198 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12199 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12200 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12201 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12202 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12203 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12204 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12205 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12206 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12207 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12208 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12209 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12210 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12211 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12212 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12213 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12214 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12215 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12216 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12217 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12218 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12219 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12220 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12221 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12222 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12223 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12224 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12225 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12226 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12227 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12228 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12229 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12230 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12231 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12232 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12233 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12234 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12235 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12236 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12237 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12238 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12239 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12240 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12241 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12242 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12243 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12244 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12245 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12246 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12247 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12248 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12249 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12250 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12251 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12252 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12253 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12254 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12255 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12256 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12257 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12258 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12259 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12260 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12261 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12262 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12263 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12264 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12265 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12266 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12267 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12268 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12269 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12270 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12271 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12272 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12273 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12274 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12275 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12276 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12277 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12278 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12279 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12280 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12281 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12282 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12283 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12284 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12285 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12286 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12287 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12288 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12289 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12290 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12291 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12292 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12293 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12294 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12295 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12296 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12297 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12298 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12299 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12300 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12301 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12302 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12303 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12304 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12305 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12306 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12307 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12308 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12309 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12310 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12311 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12312 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12313 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12314 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12315 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12316 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12317 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12318 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12319 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12320 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12321 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12322 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12323 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12324 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12325 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12326 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12327 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12328 start_va = 0x665da80000 end_va = 0x665db74fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 12329 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12330 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12331 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12332 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12333 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12334 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12335 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12336 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12337 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12338 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12339 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12340 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12341 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12342 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12343 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12344 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12345 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12346 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12347 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12348 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12349 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12350 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12351 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12352 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12353 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12354 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12355 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12356 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12357 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12358 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12359 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12360 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12361 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12362 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12363 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12364 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12365 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12366 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12367 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12368 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12369 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12370 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12371 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12372 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12373 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12374 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12375 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12376 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12377 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12378 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12379 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12380 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12381 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12382 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12383 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12384 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12385 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12386 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12387 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12388 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12389 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12390 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12391 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12392 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12393 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12394 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12395 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12396 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12397 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12398 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12399 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12400 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12401 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12402 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12403 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12404 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12405 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12406 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12407 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12408 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12409 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12410 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12411 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12412 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12413 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12414 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12415 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12416 start_va = 0x665da80000 end_va = 0x665db74fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 12417 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12418 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12419 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12420 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12421 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12422 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12423 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12424 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12425 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12426 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12427 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12428 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12429 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12430 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12431 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12432 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12433 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12434 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12435 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12436 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12437 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12438 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12439 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12440 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12441 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12442 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12443 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12444 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12445 start_va = 0x665da80000 end_va = 0x665db74fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 12446 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12447 start_va = 0x665da80000 end_va = 0x665db74fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 12448 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12449 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12450 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12451 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12452 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12453 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12454 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12455 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12456 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12457 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12458 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12459 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12460 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12461 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12462 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12463 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12464 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12465 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12466 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12467 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12468 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12469 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12470 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12471 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12472 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12473 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12474 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12475 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12476 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12477 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12478 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12479 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12480 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12481 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12482 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12483 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12484 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12485 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12486 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12487 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12488 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12489 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12490 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12491 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12492 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12493 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12494 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12495 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12496 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12497 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12498 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12499 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12500 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12501 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12502 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12503 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12504 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12505 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12506 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12507 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12508 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12509 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12510 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12511 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12512 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12513 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12514 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12515 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12516 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12517 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12518 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12519 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12520 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12521 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12522 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12523 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12524 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12525 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12526 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12527 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12528 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12529 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12530 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12531 start_va = 0x665da80000 end_va = 0x665db74fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 12532 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12533 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12534 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12535 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12536 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12537 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12538 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12539 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12540 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12541 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12542 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12543 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12544 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12545 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12546 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12547 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12548 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12549 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12550 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12551 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12552 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12553 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12554 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12555 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12556 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12557 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12558 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12559 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12560 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12561 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12562 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12563 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12564 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12565 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12566 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12567 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12568 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12569 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12570 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12571 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12572 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12573 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12574 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12575 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12576 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12577 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12578 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12579 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12580 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12581 start_va = 0x665da80000 end_va = 0x665db74fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 12582 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12583 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12584 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12585 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12586 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12587 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12588 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12589 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12590 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12591 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12592 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12593 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12594 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12595 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12596 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12597 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12598 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12599 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12600 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12601 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12602 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12603 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12604 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12605 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12606 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12607 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12608 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12609 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12610 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12611 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12612 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12613 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12614 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12615 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12616 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12617 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12618 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12619 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12620 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12621 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12622 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12623 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12624 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12625 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12626 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12627 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12628 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12629 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12630 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12631 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12632 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12633 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12634 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12635 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12636 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12637 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12638 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12639 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12640 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12641 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12642 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12643 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12644 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12645 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12646 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12647 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12648 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12649 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12650 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12651 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12652 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12653 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12654 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12655 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12656 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12657 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12658 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12659 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12660 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12661 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12662 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12663 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12664 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12665 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12666 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12667 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12668 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12669 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12670 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12671 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12672 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12673 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12674 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12675 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12676 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12677 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12678 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12679 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12680 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12681 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12682 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12683 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12684 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12685 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12686 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12687 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12688 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12689 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12690 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12691 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12692 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12693 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12694 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12695 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12696 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12697 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12698 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12699 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12700 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12701 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12702 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12703 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12704 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12705 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12706 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12707 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12708 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12709 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12710 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12711 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12712 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12713 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12714 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12715 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12716 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12717 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12718 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12719 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12720 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12721 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12722 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12723 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12724 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12725 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12726 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12727 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12728 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12729 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12730 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12731 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12732 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12733 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12734 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12735 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12736 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12737 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12738 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12739 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12740 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12741 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12742 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12743 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12744 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12745 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12746 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12747 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12748 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12749 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12750 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12751 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12752 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12753 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12754 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12755 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12756 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12757 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12758 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12759 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12760 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12761 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12762 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12763 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12764 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12765 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12766 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12767 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12768 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12769 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12770 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12771 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12772 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12773 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12774 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12775 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12776 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12777 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12778 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12779 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12780 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12781 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12782 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12783 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12784 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12785 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12786 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12787 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12788 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12789 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12790 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12791 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12792 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12793 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12794 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12795 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12796 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12797 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12798 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12799 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12800 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12801 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12802 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12803 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12804 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12805 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12806 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12807 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12808 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12809 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12810 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12811 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12812 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12813 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12814 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12815 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12816 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12817 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12818 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12819 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12820 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12821 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12822 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12823 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12824 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12825 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12826 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12827 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12828 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12829 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12830 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12831 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12832 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12833 start_va = 0x665da80000 end_va = 0x665db74fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 12834 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12835 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12836 start_va = 0x665da80000 end_va = 0x665db74fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 12837 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12838 start_va = 0x665da80000 end_va = 0x665db74fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 12839 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12840 start_va = 0x665da80000 end_va = 0x665db74fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 12841 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12842 start_va = 0x665da80000 end_va = 0x665db74fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 12843 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12844 start_va = 0x665da80000 end_va = 0x665db74fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 12845 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12846 start_va = 0x665da80000 end_va = 0x665db74fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 12847 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12848 start_va = 0x665da80000 end_va = 0x665db74fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 12849 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12850 start_va = 0x665da80000 end_va = 0x665db74fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 12851 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12852 start_va = 0x665da80000 end_va = 0x665db74fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 12853 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12854 start_va = 0x665da80000 end_va = 0x665db74fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 12855 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12856 start_va = 0x665da80000 end_va = 0x665db74fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 12857 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12858 start_va = 0x665da80000 end_va = 0x665db74fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 12859 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12860 start_va = 0x665da80000 end_va = 0x665db74fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 12861 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12862 start_va = 0x665da80000 end_va = 0x665db74fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 12863 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12864 start_va = 0x665da80000 end_va = 0x665db74fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 12865 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12866 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12867 start_va = 0x665da80000 end_va = 0x665db74fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 12868 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12869 start_va = 0x665da80000 end_va = 0x665db74fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 12870 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12871 start_va = 0x665da80000 end_va = 0x665db74fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 12872 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12873 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12874 start_va = 0x665da80000 end_va = 0x665db74fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 12875 start_va = 0x7ffb89cf0000 end_va = 0x7ffb89d4dfff entry_point = 0x7ffb89cf0000 region_type = mapped_file name = "faultrep.dll" filename = "\\Windows\\System32\\Faultrep.dll" (normalized: "c:\\windows\\system32\\faultrep.dll") Region: id = 12876 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12877 start_va = 0x665da80000 end_va = 0x665db74fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 12878 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12879 start_va = 0x665da80000 end_va = 0x665db74fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 12880 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12881 start_va = 0x665da80000 end_va = 0x665db74fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 12882 start_va = 0x7ffb7e690000 end_va = 0x7ffb7e819fff entry_point = 0x7ffb7e690000 region_type = mapped_file name = "dbghelp.dll" filename = "\\Windows\\System32\\dbghelp.dll" (normalized: "c:\\windows\\system32\\dbghelp.dll") Region: id = 12883 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12884 start_va = 0x665da80000 end_va = 0x665db74fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 12885 start_va = 0x665db80000 end_va = 0x665dbfffff entry_point = 0x0 region_type = private name = "private_0x000000665db80000" filename = "" Region: id = 12886 start_va = 0x7ff7ee814000 end_va = 0x7ff7ee815fff entry_point = 0x0 region_type = private name = "private_0x00007ff7ee814000" filename = "" Region: id = 12887 start_va = 0x7ffb89cc0000 end_va = 0x7ffb89ce4fff entry_point = 0x7ffb89cc0000 region_type = mapped_file name = "dbgcore.dll" filename = "\\Windows\\System32\\dbgcore.dll" (normalized: "c:\\windows\\system32\\dbgcore.dll") Region: id = 12888 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12889 start_va = 0x665da80000 end_va = 0x665db74fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 12890 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12891 start_va = 0x665da80000 end_va = 0x665db74fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 12892 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12893 start_va = 0x665da80000 end_va = 0x665db74fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 12894 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12895 start_va = 0x665da80000 end_va = 0x665db74fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 12896 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12897 start_va = 0x665da80000 end_va = 0x665db74fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 12898 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12899 start_va = 0x665da80000 end_va = 0x665db74fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 12900 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12901 start_va = 0x665da80000 end_va = 0x665db74fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 12902 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12903 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12904 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12905 start_va = 0x665da80000 end_va = 0x665db74fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 12906 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12907 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12908 start_va = 0x665da80000 end_va = 0x665db74fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 12909 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12910 start_va = 0x665da80000 end_va = 0x665db74fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 12911 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12912 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12913 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12914 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12915 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12916 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12917 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12918 start_va = 0x665da80000 end_va = 0x665db74fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 12919 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12920 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12921 start_va = 0x665da80000 end_va = 0x665db74fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 12922 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12923 start_va = 0x665da80000 end_va = 0x665db74fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 12924 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12925 start_va = 0x665da80000 end_va = 0x665db74fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 12926 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12927 start_va = 0x665da80000 end_va = 0x665db74fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 12928 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12929 start_va = 0x665da80000 end_va = 0x665db74fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 12930 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12931 start_va = 0x665da80000 end_va = 0x665db74fff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 12932 start_va = 0x665da80000 end_va = 0x665dafffff entry_point = 0x0 region_type = private name = "private_0x000000665da80000" filename = "" Region: id = 12933 start_va = 0x7ff7ee80a000 end_va = 0x7ff7ee80bfff entry_point = 0x0 region_type = private name = "private_0x00007ff7ee80a000" filename = "" Region: id = 12934 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12935 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 12936 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12937 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 12938 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12939 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 12940 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12941 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 12942 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12943 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 12944 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12945 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 12946 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12947 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 12948 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12949 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 12950 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12951 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 12952 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12953 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 12954 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12955 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 12956 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12957 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 12958 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12959 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 12960 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12961 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 12962 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12963 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 12964 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12965 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 12966 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12967 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 12968 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12969 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 12970 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12971 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 12972 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12973 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 12974 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12975 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 12976 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12977 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 12978 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12979 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 12980 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12981 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 12982 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12983 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 12984 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12985 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 12986 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12987 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 12988 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12989 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 12990 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12991 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 12992 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12993 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 12994 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12995 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 12996 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12997 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 12998 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 12999 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13000 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13001 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13002 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13003 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13004 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13005 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13006 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13007 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13008 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13009 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13010 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13011 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13012 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13013 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13014 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13015 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13016 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13017 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13018 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13019 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13020 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13021 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13022 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13023 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13024 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13025 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13026 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13027 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13028 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13029 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13030 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13031 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13032 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13033 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13034 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13035 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13036 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13037 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13038 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13039 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13040 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13041 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13042 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13043 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13044 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13045 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13046 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13047 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13048 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13049 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13050 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13051 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13052 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13053 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13054 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13055 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13056 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13057 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13058 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13059 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13060 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13061 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13062 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13063 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13064 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13065 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13066 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13067 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13068 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13069 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13070 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13071 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13072 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13073 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13074 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13075 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13076 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13077 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13078 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13079 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13080 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13081 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13082 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13083 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13084 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13085 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13086 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13087 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13088 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13089 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13090 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13091 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13092 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13093 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13094 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13095 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13096 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13097 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13098 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13099 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13100 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13101 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13102 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13103 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13104 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13105 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13106 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13107 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13108 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13109 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13110 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13111 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13112 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13113 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13114 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13115 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13116 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13117 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13118 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13119 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13120 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13121 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13122 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13123 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13124 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13125 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13126 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13127 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13128 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13129 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13130 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13131 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13132 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13133 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13134 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13135 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13136 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13137 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13138 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13139 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13140 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13141 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13142 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13143 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13144 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13145 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13146 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13147 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13148 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13149 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13150 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13151 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13152 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13153 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13154 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13155 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13156 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13157 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13158 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13159 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13160 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13161 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13162 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13163 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13164 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13165 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13166 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13167 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13168 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13169 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13170 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13171 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13172 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13173 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13174 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13175 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13176 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13177 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13178 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13179 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13180 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13181 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13182 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13183 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13184 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13185 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13186 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13187 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13188 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13189 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13190 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13191 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13192 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13193 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13194 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13195 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13196 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13197 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13198 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13199 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13200 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13201 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13202 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13203 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13204 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13205 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13206 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13207 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13208 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13209 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13210 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13211 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13212 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13213 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13214 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13215 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13216 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13217 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13218 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13219 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13220 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13221 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13222 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13223 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13224 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13225 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13226 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13227 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13228 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13229 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13230 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13231 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13232 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13233 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13234 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13235 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13236 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13237 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13238 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13239 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13240 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13241 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13242 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13243 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13244 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13245 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13246 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13247 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13248 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13249 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13250 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13251 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13252 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13253 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13254 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13255 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13256 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13257 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13258 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13259 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13260 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13261 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13262 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13263 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13264 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13265 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13266 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13267 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13268 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13269 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13270 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13271 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13272 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13273 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13274 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13275 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13276 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13277 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13278 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13279 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13280 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13281 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13282 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13283 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13284 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13285 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13286 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13287 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13288 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13289 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13290 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13291 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13292 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13293 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13294 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13295 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13296 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13297 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13298 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13299 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13300 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13301 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13302 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13303 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13304 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13305 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13306 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13307 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13308 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13309 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13310 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13311 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13312 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13313 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13314 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13315 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13316 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13317 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13318 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13319 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13320 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13321 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13322 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13323 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13324 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13325 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13326 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13327 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13328 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13329 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13330 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13331 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13332 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13333 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13334 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13335 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13336 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13337 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13338 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13339 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13340 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13341 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13342 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13343 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13344 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13345 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13346 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13347 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13348 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13349 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13350 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13351 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13352 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13353 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13354 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13355 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13356 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13357 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13358 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13359 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13360 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13361 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13362 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13363 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13364 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13365 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13366 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13367 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13368 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13369 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13370 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13371 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13372 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13373 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13374 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13375 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13376 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13377 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13378 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13379 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13380 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13381 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13382 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13383 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13384 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13385 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13386 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13387 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13388 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13389 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13390 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13391 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13392 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13393 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13394 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13395 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13396 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13397 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13398 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13399 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13400 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13401 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13402 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13403 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13404 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13405 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13406 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13407 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13408 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13409 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13410 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13411 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13412 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13413 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13414 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13415 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13416 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13417 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13418 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13419 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13420 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13421 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13422 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13423 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13424 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13425 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13426 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13427 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13428 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13429 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13430 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13431 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13432 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13433 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13434 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13435 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13436 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13437 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13438 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13439 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13440 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13441 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13442 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13443 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13444 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13445 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13446 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13447 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13448 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13449 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13450 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13451 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13452 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13453 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13454 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13455 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13456 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13457 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13458 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13459 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13460 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13461 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13462 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13463 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13464 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13465 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13466 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13467 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13468 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13469 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13470 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13471 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13472 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13473 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13474 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13475 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13476 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13477 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13478 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13479 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13480 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13481 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13482 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13483 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13484 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13485 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13486 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13487 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13488 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13489 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13490 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13491 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13492 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13493 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13494 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13495 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13496 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13497 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13498 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13499 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13500 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13501 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13502 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13503 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13504 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13505 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13506 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13507 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13508 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13509 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13510 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13511 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13512 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13513 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13514 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13515 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13516 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13517 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13518 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13519 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13520 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13521 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13522 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13523 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13524 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13525 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13526 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13527 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13528 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13529 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13530 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13531 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13532 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13533 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13534 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13535 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13536 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13537 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13538 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13539 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13540 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13541 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13542 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13543 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13544 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13545 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13546 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13547 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13548 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13549 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13550 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13551 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13552 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13553 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13554 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13555 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13556 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13557 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13558 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13559 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13560 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13561 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13562 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13563 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13564 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13565 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13566 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13567 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13568 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13569 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13570 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13571 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13572 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13573 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13574 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13575 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13576 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13577 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13578 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13579 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13580 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13581 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13582 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13583 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13584 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13585 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13586 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13587 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13588 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13589 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13590 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13591 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13592 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13593 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13594 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13595 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13596 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13597 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13598 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13599 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13600 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13601 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13602 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13603 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13604 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13605 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13606 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13607 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13608 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13609 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13610 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13611 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13612 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13613 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13614 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13615 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13616 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13617 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13618 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13619 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13620 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13621 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13622 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13623 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13624 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13625 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13626 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13627 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13628 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13629 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13630 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13631 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13632 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13633 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13634 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13635 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13636 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13637 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13638 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13639 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13640 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13641 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13642 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13643 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13644 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13645 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13646 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13647 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13648 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13649 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13650 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13651 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13652 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13653 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13654 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13655 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13656 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13657 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13658 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13659 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13660 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13661 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13662 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13663 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13664 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13665 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13666 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13667 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13668 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13669 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13670 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13671 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13672 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13673 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13674 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13675 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13676 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13677 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13678 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13679 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13680 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13681 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13682 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13683 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13684 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13685 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13686 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13687 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13688 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13689 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13690 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13691 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13692 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13693 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13694 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13695 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13696 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13697 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13698 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13699 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13700 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13701 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13702 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13703 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13704 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13705 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13706 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13707 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13708 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13709 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13710 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13711 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13712 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13713 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13714 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13715 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13716 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13717 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13718 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13719 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13720 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13721 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13722 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13723 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13724 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13725 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13726 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13727 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13728 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13729 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13730 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13731 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13732 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13733 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13734 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13735 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13736 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13737 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13738 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13739 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13740 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13741 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13742 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13743 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13744 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13745 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13746 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13747 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13748 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13749 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13750 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13751 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13752 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13753 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13754 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13755 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13756 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13757 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13758 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13759 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13760 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13761 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13762 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13763 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13764 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13765 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13766 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13767 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13768 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13769 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13770 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13771 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13772 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13773 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13774 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13775 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13776 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13777 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13778 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13779 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13780 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13781 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13782 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13783 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13784 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13785 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13786 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13787 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13788 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13789 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13790 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13791 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13792 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13793 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13794 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13795 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13796 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13797 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13798 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13799 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13800 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13801 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13802 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13803 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13804 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13805 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13806 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13807 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13808 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13809 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13810 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13811 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13812 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13813 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13814 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13815 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13816 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13817 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13818 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13819 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13820 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13821 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13822 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13823 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13824 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13825 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13826 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13827 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13828 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13829 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13830 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13831 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13832 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13833 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13834 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13835 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13836 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13837 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13838 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13839 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13840 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13841 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13842 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13843 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13844 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13845 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13846 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13847 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13848 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13849 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13850 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13851 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13852 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13853 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13854 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13855 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13856 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13857 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13858 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13859 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13860 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13861 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13862 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13863 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13864 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13865 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13866 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13867 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13868 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13869 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13870 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13871 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13872 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13873 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13874 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13875 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13876 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13877 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13878 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13879 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13880 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13881 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13882 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13883 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13884 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13885 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13886 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13887 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13888 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13889 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13890 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13891 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13892 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13893 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13894 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13895 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13896 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13897 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13898 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13899 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13900 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13901 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13902 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13903 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13904 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13905 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13906 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13907 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13908 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13909 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13910 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13911 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13912 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13913 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13914 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13915 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13916 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13917 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13918 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13919 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13920 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13921 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13922 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13923 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13924 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13925 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13926 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13927 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13928 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13929 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13930 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13931 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13932 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13933 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13934 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13935 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13936 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13937 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13938 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13939 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13940 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13941 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13942 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13943 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13944 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13945 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13946 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13947 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13948 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13949 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13950 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13951 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13952 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13953 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13954 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13955 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13956 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13957 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13958 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13959 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13960 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13961 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13962 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13963 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13964 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13965 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13966 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13967 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13968 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13969 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13970 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13971 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13972 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13973 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13974 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13975 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13976 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13977 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13978 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13979 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13980 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13981 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13982 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13983 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13984 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13985 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13986 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13987 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13988 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13989 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13990 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13991 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13992 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13993 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13994 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13995 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13996 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13997 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 13998 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 13999 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14000 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14001 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14002 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14003 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14004 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14005 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14006 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14007 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14008 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14009 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14010 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14011 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14012 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14013 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14014 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14015 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14016 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14017 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14018 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14019 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14020 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14021 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14022 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14023 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14024 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14025 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14026 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14027 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14028 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14029 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14030 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14031 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14032 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14033 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14034 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14035 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14036 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14037 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14038 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14039 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14040 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14041 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14042 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14043 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14044 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14045 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14046 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14047 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14048 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14049 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14050 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14051 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14052 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14053 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14054 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14055 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14056 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14057 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14058 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14059 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14060 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14061 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14062 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14063 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14064 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14065 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14066 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14067 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14068 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14069 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14070 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14071 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14072 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14073 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14074 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14075 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14076 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14077 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14078 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14079 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14080 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14081 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14082 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14083 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14084 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14085 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14086 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14087 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14088 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14089 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14090 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14091 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14092 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14093 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14094 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14095 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14096 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14097 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14098 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14099 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14100 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14101 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14102 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14103 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14104 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14105 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14106 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14107 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14108 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14109 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14110 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14111 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14112 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14113 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14114 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14115 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14116 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14117 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14118 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14119 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14120 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14121 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14122 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14123 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14124 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14125 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14126 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14127 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14128 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14129 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14130 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14131 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14132 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14133 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14134 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14135 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14136 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14137 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14138 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14139 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14140 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14141 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14142 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14143 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14144 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14145 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14146 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14147 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14148 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14149 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14150 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14151 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14152 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14153 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14154 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14155 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14156 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14157 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14158 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14159 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14160 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14161 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14162 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14163 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14164 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14165 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14166 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14167 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14168 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14169 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14170 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14171 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14172 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14173 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14174 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14175 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14176 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14177 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14178 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14179 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14180 start_va = 0x665d5f0000 end_va = 0x665d5f2fff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 14181 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14182 start_va = 0x665d470000 end_va = 0x665d472fff entry_point = 0x0 region_type = private name = "private_0x000000665d470000" filename = "" Region: id = 14183 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14184 start_va = 0x665d470000 end_va = 0x665d472fff entry_point = 0x0 region_type = private name = "private_0x000000665d470000" filename = "" Region: id = 14185 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14186 start_va = 0x665d470000 end_va = 0x665d472fff entry_point = 0x0 region_type = private name = "private_0x000000665d470000" filename = "" Region: id = 14187 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14188 start_va = 0x665d470000 end_va = 0x665d472fff entry_point = 0x0 region_type = private name = "private_0x000000665d470000" filename = "" Region: id = 14189 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14190 start_va = 0x665d470000 end_va = 0x665d472fff entry_point = 0x0 region_type = private name = "private_0x000000665d470000" filename = "" Region: id = 14191 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14192 start_va = 0x665d470000 end_va = 0x665d472fff entry_point = 0x0 region_type = private name = "private_0x000000665d470000" filename = "" Region: id = 14193 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14194 start_va = 0x665d470000 end_va = 0x665d472fff entry_point = 0x0 region_type = private name = "private_0x000000665d470000" filename = "" Region: id = 14195 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14196 start_va = 0x665d470000 end_va = 0x665d472fff entry_point = 0x0 region_type = private name = "private_0x000000665d470000" filename = "" Region: id = 14197 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14198 start_va = 0x665d470000 end_va = 0x665d472fff entry_point = 0x0 region_type = private name = "private_0x000000665d470000" filename = "" Region: id = 14199 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14200 start_va = 0x665d470000 end_va = 0x665d472fff entry_point = 0x0 region_type = private name = "private_0x000000665d470000" filename = "" Region: id = 14201 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14202 start_va = 0x665d470000 end_va = 0x665d472fff entry_point = 0x0 region_type = private name = "private_0x000000665d470000" filename = "" Region: id = 14203 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14204 start_va = 0x665d470000 end_va = 0x665d472fff entry_point = 0x0 region_type = private name = "private_0x000000665d470000" filename = "" Region: id = 14205 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14206 start_va = 0x665d470000 end_va = 0x665d472fff entry_point = 0x0 region_type = private name = "private_0x000000665d470000" filename = "" Region: id = 14207 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14208 start_va = 0x665d470000 end_va = 0x665d472fff entry_point = 0x0 region_type = private name = "private_0x000000665d470000" filename = "" Region: id = 14209 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14210 start_va = 0x665d470000 end_va = 0x665d472fff entry_point = 0x0 region_type = private name = "private_0x000000665d470000" filename = "" Region: id = 14211 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14212 start_va = 0x665d470000 end_va = 0x665d472fff entry_point = 0x0 region_type = private name = "private_0x000000665d470000" filename = "" Region: id = 14213 start_va = 0x665dc00000 end_va = 0x665dcf4fff entry_point = 0x0 region_type = private name = "private_0x000000665dc00000" filename = "" Region: id = 14214 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14215 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14216 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14217 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14218 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14219 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14220 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14221 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14222 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14223 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14224 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14225 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14226 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14227 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14228 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14229 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14230 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14231 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14232 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14233 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14234 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14235 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14236 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14237 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14238 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14239 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14240 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14241 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14242 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14243 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14244 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14245 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14246 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14247 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14248 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14249 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14250 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14251 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14252 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14253 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14254 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14255 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14256 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14257 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14258 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14259 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14260 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14261 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14262 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14263 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14264 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14265 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14266 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14267 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14268 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14269 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14270 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14271 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14272 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14273 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14274 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14275 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14276 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14277 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14278 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14279 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14280 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14281 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14282 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14283 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14284 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14285 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14286 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14287 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14288 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14289 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14290 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14291 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14292 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14293 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14294 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14295 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14296 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14297 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14298 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14299 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14300 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14301 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14302 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14303 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14304 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14305 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14306 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14307 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14308 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14309 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14310 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14311 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14312 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14313 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14314 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14315 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14316 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14317 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14318 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14319 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14320 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14321 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14322 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14323 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14324 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14325 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14326 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14327 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14328 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14329 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14330 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14331 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14332 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14333 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14334 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14335 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14336 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14337 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14338 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14339 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14340 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14341 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14342 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14343 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14344 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14345 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14346 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14347 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14348 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14349 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14350 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14351 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14352 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14353 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14354 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14355 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14356 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14357 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14358 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14359 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14360 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14361 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14362 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14363 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14364 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14365 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14366 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14367 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14368 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14369 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14370 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14371 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14372 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14373 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14374 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14375 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14376 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14377 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14378 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14379 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14380 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14381 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14382 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14383 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14384 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14385 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14386 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14387 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14388 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14389 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14390 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14391 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14392 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14393 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14394 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14395 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14396 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14397 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14398 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14399 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14400 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14401 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14402 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14403 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14404 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14405 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14406 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14407 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14408 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14409 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14410 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14411 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14412 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14413 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14414 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14415 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14416 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14417 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14418 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14419 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14420 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14421 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14422 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14423 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14424 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14425 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14426 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14427 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14428 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14429 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14430 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14431 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14432 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14433 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14434 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14435 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14436 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14437 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14438 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14439 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14440 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14441 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14442 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14443 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14444 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14445 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14446 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14447 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14448 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14449 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14450 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14451 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14452 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14453 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14454 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14455 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14456 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14457 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14458 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14459 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14460 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14461 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14462 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14463 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14464 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14465 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14466 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14467 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14468 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14469 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14470 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14471 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14472 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14473 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14474 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14475 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14476 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14477 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14478 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14479 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14480 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14481 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14482 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14483 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14484 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14485 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14486 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14487 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14488 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14489 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14490 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14491 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14492 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14493 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14494 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14495 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14496 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14497 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14498 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14499 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14500 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14501 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14502 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14503 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14504 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14505 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14506 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14507 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14508 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14509 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14510 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14511 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14512 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14513 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14514 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14515 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14516 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14517 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14518 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14519 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14520 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14521 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14522 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14523 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14524 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14525 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14526 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14527 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14528 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14529 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14530 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14531 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14532 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14533 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14534 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14535 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14536 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14537 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14538 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14539 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14540 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14541 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14542 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14543 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14544 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14545 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14546 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14547 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14548 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14549 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14550 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14551 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14552 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14553 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14554 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14555 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14556 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14557 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14558 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14559 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14560 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14561 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14562 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14563 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14564 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14565 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14566 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14567 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14568 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14569 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14570 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14571 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14572 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14573 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14574 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14575 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14576 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14577 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14578 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14579 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14580 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14581 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14582 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14583 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14584 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14585 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14586 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14587 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14588 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14589 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14590 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14591 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14592 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14593 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14594 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14595 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14596 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14597 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14598 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14599 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14600 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14601 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14602 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14603 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14604 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14605 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14606 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14607 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14608 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14609 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14610 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14611 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14612 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14613 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14614 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14615 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14616 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14617 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14618 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14619 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14620 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14621 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14622 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14623 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14624 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14625 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14626 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14627 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14628 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14629 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14630 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14631 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14632 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14633 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14634 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14635 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14636 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14637 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14638 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14639 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14640 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14641 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14642 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14643 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14644 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14645 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14646 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14647 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14648 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14649 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14650 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14651 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14652 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14653 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14654 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14655 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14656 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14657 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14658 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14659 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14660 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14661 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14662 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14663 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14664 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14665 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14666 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14667 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14668 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14669 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14670 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14671 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14672 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14673 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14674 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14675 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14676 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14677 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14678 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14679 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14680 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14681 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14682 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14683 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14684 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14685 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14686 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14687 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14688 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14689 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14690 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14691 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14692 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14693 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14694 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14695 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14696 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14697 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14698 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14699 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14700 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14701 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14702 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14703 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14704 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14705 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14706 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14707 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14708 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14709 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14710 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14711 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14712 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14713 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14714 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14715 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14716 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14717 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14718 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14719 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14720 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14721 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14722 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14723 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14724 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14725 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14726 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14727 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14728 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14729 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14730 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14731 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14732 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14733 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14734 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14735 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14736 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14737 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14738 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14739 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14740 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14741 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14742 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14743 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14744 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14745 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14746 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14747 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14748 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14749 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14750 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14751 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14752 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14753 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14754 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14755 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14756 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14757 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14758 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14759 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14760 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14761 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14762 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14763 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14764 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14765 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14766 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14767 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14768 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14769 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14770 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14771 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14772 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14773 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14774 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14775 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14776 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14777 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14778 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14779 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14780 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14781 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14782 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14783 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14784 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14785 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14786 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14787 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14788 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14789 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14790 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14791 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14792 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14793 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14794 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14795 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14796 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14797 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14798 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14799 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14800 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14801 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14802 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14803 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14804 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14805 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14806 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14807 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14808 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14809 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14810 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14811 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14812 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14813 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14814 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14815 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14816 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14817 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14818 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14819 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14820 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14821 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14822 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14823 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14824 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14825 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14826 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14827 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14828 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14829 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14830 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14831 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14832 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14833 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14834 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14835 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14836 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14837 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14838 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14839 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14840 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14841 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14842 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14843 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14844 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14845 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14846 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14847 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14848 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14849 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14850 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14851 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14852 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14853 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14854 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14855 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14856 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14857 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14858 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14859 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14860 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14861 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14862 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14863 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14864 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14865 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14866 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14867 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14868 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14869 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14870 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14871 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14872 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14873 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14874 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14875 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14876 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14877 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14878 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14879 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14880 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14881 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14882 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14883 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14884 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14885 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14886 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14887 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14888 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14889 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14890 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14891 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14892 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14893 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14894 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14895 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14896 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14897 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14898 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14899 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14900 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14901 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14902 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14903 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14904 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14905 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14906 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14907 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14908 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14909 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14910 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14911 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14912 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14913 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14914 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14915 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14916 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14917 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14918 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14919 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14920 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14921 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14922 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14923 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14924 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14925 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14926 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14927 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14928 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14929 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14930 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14931 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14932 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14933 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14934 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14935 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14936 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14937 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14938 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14939 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14940 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14941 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14942 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14943 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14944 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14945 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14946 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14947 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14948 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14949 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14950 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14951 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14952 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14953 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14954 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14955 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14956 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14957 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14958 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14959 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14960 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14961 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14962 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14963 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14964 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14965 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14966 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14967 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14968 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14969 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14970 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14971 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14972 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14973 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14974 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14975 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14978 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14979 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14980 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14981 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14982 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14983 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14984 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14985 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14986 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14987 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14988 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14989 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14990 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14991 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14992 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14993 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14994 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14995 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14996 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14997 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 14998 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 14999 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15000 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15001 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15002 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15003 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15004 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15005 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15006 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15007 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15008 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15009 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15010 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15011 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15012 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15013 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15014 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15015 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15016 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15017 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15018 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15019 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15020 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15021 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15022 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15023 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15024 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15025 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15026 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15027 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15028 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15029 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15030 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15031 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15032 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15033 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15034 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15035 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15036 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15037 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15038 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15039 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15040 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15041 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15042 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15043 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15044 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15045 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15046 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15047 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15048 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15049 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15050 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15051 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15052 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15053 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15054 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15055 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15056 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15057 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15058 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15059 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15060 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15061 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15062 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15063 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15064 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15065 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15066 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15067 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15068 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15069 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15070 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15071 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15072 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15073 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15074 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15075 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15076 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15077 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15078 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15079 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15080 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15081 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15082 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15083 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15084 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15085 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15086 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15087 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15088 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15089 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15090 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15091 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15092 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15093 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15094 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15095 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15096 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15097 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15098 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15099 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15100 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15101 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15102 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15103 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15104 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15105 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15106 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15107 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15108 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15109 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15110 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15111 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15112 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15113 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15114 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15115 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15116 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15117 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15118 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15119 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15120 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15121 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15122 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15123 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15124 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15125 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15126 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15127 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15128 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15129 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15130 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15131 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15132 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15133 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15134 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15135 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15136 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15137 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15138 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15139 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15140 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15141 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15142 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15143 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15144 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15145 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15146 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15147 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15148 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15149 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15150 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15151 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15152 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15153 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15154 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15155 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15156 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15157 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15158 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15159 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15160 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15161 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15162 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15163 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15164 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15165 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15166 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15167 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15168 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15169 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15170 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15171 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15172 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15173 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15174 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15175 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15176 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15177 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15178 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15179 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15180 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15181 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15182 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15183 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15184 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15185 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15186 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15187 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15188 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15189 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15190 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15191 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15192 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15193 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15194 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15195 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15196 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15197 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15198 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15199 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15200 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15201 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15202 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15203 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15204 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15205 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15206 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15207 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15208 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15209 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15210 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15211 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15212 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15213 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15214 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15215 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15216 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15217 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15218 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15219 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15220 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15221 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15222 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15223 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15224 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15225 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15226 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15227 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15228 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15229 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15230 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15231 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15232 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15233 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15234 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15235 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15236 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15237 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15238 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15239 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15240 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15241 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15242 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15243 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15244 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15245 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15246 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15247 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15248 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15249 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15250 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15251 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15252 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15253 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15254 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15255 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15256 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15257 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15258 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15259 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15260 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15261 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15262 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15263 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15264 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15265 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15266 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15267 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15268 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15269 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15270 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15271 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15272 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15273 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15274 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15275 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15276 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15277 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15278 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15279 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15280 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15281 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15282 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15283 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15284 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15285 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15286 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15287 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15288 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15289 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15290 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15291 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15292 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15293 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15294 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15295 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15296 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15297 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15298 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15299 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15300 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15301 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15302 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15303 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15304 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15305 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15306 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15307 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15308 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15309 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15310 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15311 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15312 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15313 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15314 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15315 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15316 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15317 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15318 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15319 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15320 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15321 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15322 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15323 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15324 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15325 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15326 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15327 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15328 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15329 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15330 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15331 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15332 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15333 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15334 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15335 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15336 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15337 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15338 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15339 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15340 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15341 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15342 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15343 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15344 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15345 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15346 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15347 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15348 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15349 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15350 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15351 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15352 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15353 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15354 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15355 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15356 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15357 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15358 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15359 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15360 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15361 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15362 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15363 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15364 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15365 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15366 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15367 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15368 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15369 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15370 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15371 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15372 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15373 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15374 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15375 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15376 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15377 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15378 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15379 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15380 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15381 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15382 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15383 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15384 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15385 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15386 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15387 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15388 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15389 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15390 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15391 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15392 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15393 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15394 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15395 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15396 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15397 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15398 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15399 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15400 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15401 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15402 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15403 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15404 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15405 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15406 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15407 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15408 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15409 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15410 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15411 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15412 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15413 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15414 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15415 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15416 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15417 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15418 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15419 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15420 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15421 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15422 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15423 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15424 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15425 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15426 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15427 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15428 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15429 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15430 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15431 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15432 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15433 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15434 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15435 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15436 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15437 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15438 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15439 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15440 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15441 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15442 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15443 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15444 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15445 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15446 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15447 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15448 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15449 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15450 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15451 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15452 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15453 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15454 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15455 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15456 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15457 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15458 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15459 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15460 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15461 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15462 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15463 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15464 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15465 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15466 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15467 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15468 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15469 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15470 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15471 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15472 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15473 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15474 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15475 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15476 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15477 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15478 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15479 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15480 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15481 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15482 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15483 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15484 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15485 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15486 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15487 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15488 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15489 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15490 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15491 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15492 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15493 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15494 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15495 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15496 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15497 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15498 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15499 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15500 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15501 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15502 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15503 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15504 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15505 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15506 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15507 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15508 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15509 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15510 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15511 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15512 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15513 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15514 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15515 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15516 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15517 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15518 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15519 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15520 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15521 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15522 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15523 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15524 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15525 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15526 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15527 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15528 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15529 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15530 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15531 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15532 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15533 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15534 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15535 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15536 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15537 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15538 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15539 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15540 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15541 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15542 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15543 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15544 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15545 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15546 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15547 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15548 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15549 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15550 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15551 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15552 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15553 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15554 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15555 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15556 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15557 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15558 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15559 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15560 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15561 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15562 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15563 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15564 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15565 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15566 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15567 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15568 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15569 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15570 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15571 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15572 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15573 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15574 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15575 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15576 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15577 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15578 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15579 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15580 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15581 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15582 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15583 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15584 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15585 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15586 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15587 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15588 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15589 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15590 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15591 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15592 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15593 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15594 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15595 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15596 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15597 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15598 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15599 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15600 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15601 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15602 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15603 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15604 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15605 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15606 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15607 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15608 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15609 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15610 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15611 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15612 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15613 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15614 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15615 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15616 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15617 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15618 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15619 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15620 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15621 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15622 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15623 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15624 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15625 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15626 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15627 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15628 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15629 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15630 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15631 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15632 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15633 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15634 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15635 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15636 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15637 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15638 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15639 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15640 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15641 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15642 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15643 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15644 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15645 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15646 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15647 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15648 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15649 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15650 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15651 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15652 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15653 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15654 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15655 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15656 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15657 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15658 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15659 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15660 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15661 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15662 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15663 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15664 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15665 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15666 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15667 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15668 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15669 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15670 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15671 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15672 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15673 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15674 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15675 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15676 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15677 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15678 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15679 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15680 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15681 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15682 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15683 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15684 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15685 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15686 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15687 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15688 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15689 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15690 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15691 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15692 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15693 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15694 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15695 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15696 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15697 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15698 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15699 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15700 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15701 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15702 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15703 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15704 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15705 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15706 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15707 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15708 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15709 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15710 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15711 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15712 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15713 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15714 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15715 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15716 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15717 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15718 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15719 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15720 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15721 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15722 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15723 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15724 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15725 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15726 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15727 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15728 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15729 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15730 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15731 start_va = 0x665db00000 end_va = 0x665dbf4fff entry_point = 0x0 region_type = private name = "private_0x000000665db00000" filename = "" Region: id = 15732 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15733 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15734 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15735 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15736 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15737 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15738 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15739 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15740 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15741 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15742 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15743 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15744 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15745 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15746 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15747 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15748 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15749 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15750 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15751 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15752 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15753 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15754 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15755 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15756 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15757 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15758 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15759 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15760 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15761 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15762 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15763 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15764 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15765 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15766 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15767 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15768 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15769 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15770 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15771 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15772 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15773 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15774 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15775 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15776 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15777 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15778 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15779 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15780 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15781 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15782 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15783 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15784 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15785 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15786 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15787 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15788 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15789 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15790 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15791 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15792 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15793 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15794 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15795 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15796 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15797 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15798 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15799 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15800 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15801 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15802 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15803 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15804 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15805 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15806 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15807 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15808 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15809 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15810 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15811 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15812 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15813 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15814 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15815 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15816 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15817 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15818 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15819 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15820 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15821 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15822 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15823 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15824 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15825 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15826 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15827 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15828 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15829 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15830 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15831 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15832 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15833 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15834 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15835 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15836 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15837 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15838 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15839 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15840 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15841 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15842 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15843 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15844 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15845 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15846 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15847 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15848 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15849 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15850 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15851 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15852 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15853 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15854 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15855 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15856 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15857 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15858 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15859 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15860 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15861 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15862 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15863 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15864 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15865 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15866 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15867 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15868 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15869 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15870 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15871 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15872 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15873 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15874 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15875 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15876 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15877 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15878 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15879 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15880 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15881 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15882 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15883 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15884 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15885 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15886 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15887 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15888 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15889 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15890 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15891 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15892 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15893 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15894 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15895 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15896 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15897 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15898 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15899 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15900 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15901 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15902 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15903 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15904 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15905 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15906 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15907 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15908 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15909 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15910 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15911 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15912 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15913 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15914 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15915 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15916 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15917 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15918 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15919 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15920 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15921 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15922 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15923 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15924 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15925 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15926 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15927 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15928 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15929 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15930 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15931 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15932 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15933 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15934 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15935 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15936 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15937 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15938 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15939 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15940 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15941 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15942 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15943 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15944 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15945 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15946 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15947 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15948 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15949 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15950 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15951 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15952 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15953 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15954 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15955 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15956 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15957 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15958 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15959 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15960 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15961 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15962 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15963 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15964 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15965 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15966 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15967 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15968 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15969 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15970 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15971 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15972 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15973 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15974 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15975 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15976 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15977 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15978 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15979 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15980 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15981 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15982 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15983 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15984 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15985 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15986 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15987 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15988 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15989 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15990 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15991 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15992 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15993 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15994 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15995 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15996 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15997 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15998 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 15999 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16000 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16001 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16002 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16003 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16004 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16005 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16006 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16007 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16008 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16009 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16010 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16011 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16012 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16013 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16014 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16015 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16016 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16017 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16018 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16019 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16020 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16021 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16022 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16023 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16024 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16025 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16026 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16027 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16028 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16029 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16030 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16031 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16032 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16033 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16034 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16035 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16036 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16037 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16038 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16039 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16040 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16041 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16042 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16043 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16044 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16045 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16046 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16047 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16048 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16049 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16050 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16051 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16052 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16053 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16054 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16055 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16056 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16057 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16058 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16059 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16060 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16061 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16062 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16063 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16064 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16065 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16066 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16067 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16068 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16069 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16070 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16071 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16072 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16073 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16074 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16075 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16076 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16077 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16078 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16079 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16080 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16081 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16082 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16083 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16084 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16085 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16086 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16087 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16088 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16089 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16090 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16091 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16092 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16093 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16094 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16095 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16096 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16097 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16098 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16099 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16100 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16101 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16102 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16103 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16104 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16105 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16106 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16107 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16108 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16109 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16110 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16111 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16112 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16113 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16114 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16115 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16116 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16117 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16118 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16119 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16120 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16121 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16122 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16123 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16124 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16125 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16126 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16127 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16128 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16129 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16130 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16131 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16132 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16133 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16134 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16135 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16136 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16137 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16138 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16139 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16140 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16141 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16142 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16143 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16144 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16145 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16146 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16147 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16148 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16149 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16150 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16151 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16152 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16153 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16154 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16155 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16156 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16157 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16158 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16159 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16160 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16161 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16162 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16163 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16164 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16165 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16166 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16167 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16168 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16169 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16170 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16171 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16172 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16173 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16174 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16175 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16176 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16177 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16178 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16179 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16180 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16181 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16182 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16183 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16184 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16185 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16186 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16187 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16188 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16189 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16190 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16191 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16192 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16193 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16194 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16195 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16196 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16197 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16198 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16199 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16200 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16201 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16202 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16203 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16204 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16205 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16206 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16207 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16208 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16209 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16210 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16211 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16212 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16213 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16214 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16215 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16216 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16217 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16218 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16219 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16220 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16221 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16222 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16223 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16224 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16225 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16226 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16227 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16228 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16229 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16230 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16231 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16232 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16233 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16234 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16235 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16236 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16237 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16238 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16239 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16240 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16241 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16242 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16243 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16244 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16245 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16246 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16247 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16248 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16249 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16250 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16251 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16252 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16253 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16254 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16255 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16256 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16257 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16258 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16259 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16260 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16261 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16262 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16263 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16264 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16265 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16266 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16267 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16268 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16269 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16270 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16271 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16272 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16273 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16274 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16275 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16276 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16277 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16278 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16279 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16280 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16281 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16282 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16283 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16284 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16285 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16286 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16287 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16288 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16289 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16290 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16291 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16292 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16293 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16294 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16295 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16296 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16297 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16298 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16299 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16300 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16301 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16302 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16303 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16304 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16305 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16306 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16307 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16308 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16309 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16310 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16311 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16312 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16313 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16314 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16315 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16316 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16317 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16318 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16319 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16320 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16321 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16322 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16323 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16324 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16325 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16326 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16327 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16328 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16329 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16330 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16331 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16332 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16333 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16334 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16335 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16336 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16337 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16338 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16339 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16340 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16341 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16342 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16343 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16344 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16345 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16346 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16347 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16348 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16349 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16350 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16351 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16352 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16353 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16354 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16355 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16356 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16357 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16358 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16359 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16360 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16361 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16362 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16363 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16364 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16365 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16366 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16367 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16368 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16369 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16370 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16371 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16372 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16373 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16374 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16375 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16376 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16377 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16378 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16379 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16380 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16381 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16382 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16383 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16384 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16385 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16386 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16387 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16388 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16389 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16390 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16391 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16392 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16393 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16394 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16395 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16396 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16397 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16398 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16399 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16400 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16401 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16402 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16403 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16404 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16405 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16406 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16407 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16408 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16409 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16410 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16411 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16412 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16413 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16414 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16415 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16416 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16417 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16418 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16419 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16420 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16421 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16422 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16423 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16424 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16425 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16426 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16427 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16428 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16429 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16430 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16431 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16432 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16433 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16434 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16435 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16436 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16437 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16438 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16439 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16440 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16441 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16442 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16443 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16444 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16445 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16446 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16447 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16448 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16449 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16450 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16451 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16452 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16453 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16454 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16455 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16456 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16457 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16458 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16459 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16460 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16461 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16462 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16463 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16464 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16465 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16466 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16467 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16468 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16469 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16470 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16471 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16472 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16473 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16474 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16475 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16476 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16477 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16478 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16479 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16480 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16481 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16482 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16483 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16484 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16485 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16486 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16487 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16488 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16489 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16490 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16491 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16492 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16493 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16494 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16495 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16496 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16497 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16498 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16499 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16500 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16501 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16502 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16503 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16504 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16505 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16506 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16507 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16508 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16509 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16510 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16511 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16512 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16513 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16514 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16515 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16516 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16517 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16518 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16519 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16520 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16521 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16522 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16523 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16524 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16525 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16526 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16527 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16528 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16529 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16530 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16531 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16532 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16533 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16534 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16535 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16536 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16537 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16538 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16539 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16540 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16541 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16542 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16543 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16544 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16545 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16546 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16547 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16548 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16549 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16550 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16551 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16552 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16553 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16554 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16555 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16556 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16557 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16558 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16559 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16560 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16561 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16562 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16563 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16564 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16565 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16566 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16567 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16568 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16569 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16570 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16571 start_va = 0x665aa50000 end_va = 0x665aa52fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16572 start_va = 0x665aa50000 end_va = 0x665aa50fff entry_point = 0x0 region_type = private name = "private_0x000000665aa50000" filename = "" Region: id = 16573 start_va = 0x665aa60000 end_va = 0x665aa60fff entry_point = 0x0 region_type = private name = "private_0x000000665aa60000" filename = "" Region: id = 16574 start_va = 0x665aa70000 end_va = 0x665aa70fff entry_point = 0x665aa70000 region_type = mapped_file name = "mpr.dll.mui" filename = "\\Windows\\System32\\en-US\\mpr.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\mpr.dll.mui") Region: id = 16575 start_va = 0x7ffb821a0000 end_va = 0x7ffb821aafff entry_point = 0x7ffb821a0000 region_type = mapped_file name = "drprov.dll" filename = "\\Windows\\System32\\drprov.dll" (normalized: "c:\\windows\\system32\\drprov.dll") Region: id = 16576 start_va = 0x665d470000 end_va = 0x665d4effff entry_point = 0x0 region_type = private name = "private_0x000000665d470000" filename = "" Region: id = 16577 start_va = 0x7ff7ee94c000 end_va = 0x7ff7ee94dfff entry_point = 0x0 region_type = private name = "private_0x00007ff7ee94c000" filename = "" Region: id = 16578 start_va = 0x7ffb8d050000 end_va = 0x7ffb8d0a7fff entry_point = 0x7ffb8d050000 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll") Region: id = 16579 start_va = 0x7ffb7d4d0000 end_va = 0x7ffb7d4e5fff entry_point = 0x7ffb7d4d0000 region_type = mapped_file name = "ntlanman.dll" filename = "\\Windows\\System32\\ntlanman.dll" (normalized: "c:\\windows\\system32\\ntlanman.dll") Region: id = 16580 start_va = 0x7ffb7d4b0000 end_va = 0x7ffb7d4cffff entry_point = 0x7ffb7d4b0000 region_type = mapped_file name = "davclnt.dll" filename = "\\Windows\\System32\\davclnt.dll" (normalized: "c:\\windows\\system32\\davclnt.dll") Region: id = 16581 start_va = 0x7ffb7f7b0000 end_va = 0x7ffb7f7bbfff entry_point = 0x7ffb7f7b0000 region_type = mapped_file name = "davhlpr.dll" filename = "\\Windows\\System32\\davhlpr.dll" (normalized: "c:\\windows\\system32\\davhlpr.dll") Region: id = 16582 start_va = 0x7ffb8af20000 end_va = 0x7ffb8af35fff entry_point = 0x7ffb8af20000 region_type = mapped_file name = "wkscli.dll" filename = "\\Windows\\System32\\wkscli.dll" (normalized: "c:\\windows\\system32\\wkscli.dll") Region: id = 16583 start_va = 0x7ffb83ea0000 end_va = 0x7ffb83eb1fff entry_point = 0x7ffb83ea0000 region_type = mapped_file name = "cscapi.dll" filename = "\\Windows\\System32\\cscapi.dll" (normalized: "c:\\windows\\system32\\cscapi.dll") Region: id = 16584 start_va = 0x7ffb8d170000 end_va = 0x7ffb8d195fff entry_point = 0x7ffb8d170000 region_type = mapped_file name = "srvcli.dll" filename = "\\Windows\\System32\\srvcli.dll" (normalized: "c:\\windows\\system32\\srvcli.dll") Region: id = 16585 start_va = 0x665d5f0000 end_va = 0x665d66ffff entry_point = 0x0 region_type = private name = "private_0x000000665d5f0000" filename = "" Region: id = 16586 start_va = 0x7ff7ee81a000 end_va = 0x7ff7ee81bfff entry_point = 0x0 region_type = private name = "private_0x00007ff7ee81a000" filename = "" Region: id = 16587 start_va = 0x665aa50000 end_va = 0x665aa50fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000665aa50000" filename = "" Region: id = 16588 start_va = 0x665aa60000 end_va = 0x665aa63fff entry_point = 0x665aa60000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 16589 start_va = 0x665aa80000 end_va = 0x665aac2fff entry_point = 0x665aa80000 region_type = mapped_file name = "{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000f.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x000000000000000f.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000f.db") Region: id = 16590 start_va = 0x665d670000 end_va = 0x665d673fff entry_point = 0x665d670000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 16591 start_va = 0x665db00000 end_va = 0x665db8afff entry_point = 0x665db00000 region_type = mapped_file name = "{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db") Region: id = 16592 start_va = 0x665d680000 end_va = 0x665d690fff entry_point = 0x665d680000 region_type = mapped_file name = "propsys.dll.mui" filename = "\\Windows\\System32\\en-US\\propsys.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\propsys.dll.mui") Region: id = 16593 start_va = 0x665d6a0000 end_va = 0x665d6a3fff entry_point = 0x665d6a0000 region_type = mapped_file name = "cversions.1.db" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db") Region: id = 16594 start_va = 0x665d6b0000 end_va = 0x665d6c2fff entry_point = 0x665d6b0000 region_type = mapped_file name = "{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001c.db" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001c.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001c.db") Region: id = 16595 start_va = 0x665d6d0000 end_va = 0x665d6d0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000665d6d0000" filename = "" Region: id = 16596 start_va = 0x7ffb85bc0000 end_va = 0x7ffb85d56fff entry_point = 0x7ffb85bc0000 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\System32\\urlmon.dll" (normalized: "c:\\windows\\system32\\urlmon.dll") Region: id = 16597 start_va = 0x665d6a0000 end_va = 0x665d6a0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000665d6a0000" filename = "" Thread: id = 141 os_tid = 0x934 Thread: id = 142 os_tid = 0x8b4 Thread: id = 143 os_tid = 0x69c Thread: id = 144 os_tid = 0x5ec Thread: id = 145 os_tid = 0x4a4 Thread: id = 146 os_tid = 0x574 Thread: id = 147 os_tid = 0x598 Thread: id = 148 os_tid = 0x4fc Thread: id = 149 os_tid = 0x4e8 Thread: id = 150 os_tid = 0x518 Thread: id = 151 os_tid = 0x128 Thread: id = 152 os_tid = 0x3dc Thread: id = 153 os_tid = 0x464 Thread: id = 154 os_tid = 0x7dc Thread: id = 155 os_tid = 0x7d0 Thread: id = 158 os_tid = 0x2d0 [0170.152] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x7ffb90a40000 [0170.153] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="LoadLibraryA") returned 0x7ffb90a62080 [0170.153] LoadLibraryA (lpLibFileName="mpr.dll") returned 0x7ffb8d140000 [0170.155] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x7ffb8f2f0000 [0170.155] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x7ffb90fb0000 [0170.155] LoadLibraryA (lpLibFileName="Shell32.dll") returned 0x7ffb8f500000 [0170.162] LoadLibraryA (lpLibFileName="Iphlpapi.dll") returned 0x7ffb8b580000 [0170.170] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GetLastError") returned 0x7ffb90a56060 [0170.171] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="VirtualFree") returned 0x7ffb90a5bc10 [0170.171] GetProcAddress (hModule=0x7ffb8f2f0000, lpProcName="CryptExportKey") returned 0x7ffb8f307b50 [0170.171] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="DeleteFileW") returned 0x7ffb90a657a0 [0170.171] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GetDriveTypeW") returned 0x7ffb90a658f0 [0170.171] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GetCommandLineW") returned 0x7ffb90a60150 [0170.172] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GetStartupInfoW") returned 0x7ffb90a5ed80 [0170.172] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="FindNextFileW") returned 0x7ffb90a65880 [0170.172] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="VirtualAlloc") returned 0x7ffb90a5baf0 [0170.173] GetProcAddress (hModule=0x7ffb8f2f0000, lpProcName="GetUserNameA") returned 0x7ffb8f31ec40 [0170.173] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="ExitProcess") returned 0x7ffb90a5ef50 [0170.173] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="Wow64RevertWow64FsRedirection") returned 0x7ffb90a836a0 [0170.173] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="CreateProcessA") returned 0x7ffb90a5d5b0 [0170.173] GetProcAddress (hModule=0x7ffb8b580000, lpProcName="GetIpNetTable") returned 0x7ffb8b59f0b0 [0170.173] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GetVersionExW") returned 0x7ffb90a5aa30 [0170.174] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x7ffb90a83690 [0170.174] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GetSystemDefaultLangID") returned 0x7ffb90a62ba0 [0170.174] GetProcAddress (hModule=0x7ffb8f2f0000, lpProcName="GetUserNameW") returned 0x7ffb8f30da40 [0170.174] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="ReadFile") returned 0x7ffb90a65a90 [0170.174] GetProcAddress (hModule=0x7ffb8f2f0000, lpProcName="RegQueryValueExA") returned 0x7ffb8f307dd0 [0170.174] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="CloseHandle") returned 0x7ffb90a65510 [0170.175] GetProcAddress (hModule=0x7ffb8f2f0000, lpProcName="RegSetValueExW") returned 0x7ffb8f307850 [0170.175] GetProcAddress (hModule=0x7ffb8f2f0000, lpProcName="RegCloseKey") returned 0x7ffb8f3072e0 [0170.175] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="CopyFileA") returned 0x7ffb90a7e430 [0170.175] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="SetFileAttributesW") returned 0x7ffb90a65b00 [0170.176] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="WinExec") returned 0x7ffb90a81e60 [0170.176] GetProcAddress (hModule=0x7ffb8f2f0000, lpProcName="CryptDeriveKey") returned 0x7ffb8f3207a0 [0170.176] GetProcAddress (hModule=0x7ffb8f2f0000, lpProcName="CryptGenKey") returned 0x7ffb8f30cab0 [0170.176] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="Sleep") returned 0x7ffb90a58f00 [0170.176] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GetCurrentProcess") returned 0x7ffb90a56580 [0170.177] GetProcAddress (hModule=0x7ffb8f500000, lpProcName="ShellExecuteW") returned 0x7ffb8f64abc0 [0170.177] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GetFileSize") returned 0x7ffb90a65950 [0170.177] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GlobalAlloc") returned 0x7ffb90a5b810 [0170.177] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="FindClose") returned 0x7ffb90a657c0 [0170.178] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="WaitForMultipleObjects") returned 0x7ffb90a656e0 [0170.178] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GetModuleFileNameA") returned 0x7ffb90a60c70 [0170.178] GetProcAddress (hModule=0x7ffb8f500000, lpProcName="ShellExecuteA") returned 0x7ffb8f707de0 [0170.178] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GetModuleHandleA") returned 0x7ffb90a5e6d0 [0170.178] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GetModuleFileNameW") returned 0x7ffb90a5eca0 [0170.178] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="CreateFileA") returned 0x7ffb90a65760 [0170.179] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GetFileSizeEx") returned 0x7ffb90a65960 [0170.179] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="WriteFile") returned 0x7ffb90a65b80 [0170.179] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GetLogicalDrives") returned 0x7ffb90a566d0 [0170.179] GetProcAddress (hModule=0x7ffb8d140000, lpProcName="WNetEnumResourceW") returned 0x7ffb8d1427d0 [0170.179] GetProcAddress (hModule=0x7ffb8f2f0000, lpProcName="RegOpenKeyExW") returned 0x7ffb8f306cb0 [0170.179] GetProcAddress (hModule=0x7ffb8d140000, lpProcName="WNetCloseEnum") returned 0x7ffb8d142e20 [0170.180] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GetWindowsDirectoryW") returned 0x7ffb90a62940 [0170.180] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="SetFileAttributesA") returned 0x7ffb90a65af0 [0170.180] GetProcAddress (hModule=0x7ffb8f2f0000, lpProcName="RegOpenKeyExA") returned 0x7ffb8f307d70 [0170.180] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="SetFilePointer") returned 0x7ffb90a65b20 [0170.181] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GetTickCount") returned 0x7ffb90a560a0 [0170.181] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GetFileAttributesW") returned 0x7ffb90a65930 [0170.181] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="FindFirstFileW") returned 0x7ffb90a65840 [0170.181] GetProcAddress (hModule=0x7ffb8f2f0000, lpProcName="CryptAcquireContextW") returned 0x7ffb8f3089e0 [0170.181] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="MoveFileExW") returned 0x7ffb90a63010 [0170.181] GetProcAddress (hModule=0x7ffb8d140000, lpProcName="WNetOpenEnumW") returned 0x7ffb8d142f20 [0170.181] GetProcAddress (hModule=0x7ffb90fb0000, lpProcName="CoInitialize") returned 0x7ffb90fc3870 [0170.182] GetProcAddress (hModule=0x7ffb8f2f0000, lpProcName="CryptDecrypt") returned 0x7ffb8f309140 [0170.182] GetProcAddress (hModule=0x7ffb8f2f0000, lpProcName="CryptImportKey") returned 0x7ffb8f307b40 [0170.182] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="SetFilePointerEx") returned 0x7ffb90a65b30 [0170.182] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="CopyFileW") returned 0x7ffb90a65d70 [0170.183] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="FreeLibrary") returned 0x7ffb90a5eb90 [0170.183] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="CreateProcessW") returned 0x7ffb90a5dee0 [0170.183] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="CreateDirectoryW") returned 0x7ffb90a65740 [0170.183] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="CreateThread") returned 0x7ffb90a5bc20 [0170.183] GetProcAddress (hModule=0x7ffb8f2f0000, lpProcName="CryptDestroyKey") returned 0x7ffb8f3086b0 [0170.183] GetProcAddress (hModule=0x7ffb90fb0000, lpProcName="CoCreateInstance") returned 0x7ffb8ec77000 [0170.184] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="CreateFileW") returned 0x7ffb90a65770 [0170.184] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GetFileAttributesA") returned 0x7ffb90a65900 [0170.184] GetProcAddress (hModule=0x7ffb8f2f0000, lpProcName="CryptEncrypt") returned 0x7ffb8f30d7e0 [0170.184] GetProcAddress (hModule=0x7ffb8f2f0000, lpProcName="RegDeleteValueW") returned 0x7ffb8f3090b0 [0170.184] GetVersionExW (in: lpVersionInformation=0x665da7fa60*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x665da7fa60*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x2800, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0170.184] GetWindowsDirectoryW (in: lpBuffer=0x665da7fb10, uSize=0x32 | out: lpBuffer="C:\\Windows") returned 0xa [0170.184] SetLastError (dwErrCode=0x0) [0170.184] CreateFileW (lpFileName="C:\\users\\Public\\sys" (normalized: "c:\\users\\public\\sys"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0x518 [0170.270] GetLastError () returned 0x0 [0170.270] Sleep (dwMilliseconds=0x1388) [0175.277] GetVersionExW (in: lpVersionInformation=0x665da7f170*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x665da7f170*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x2800, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0175.277] GetWindowsDirectoryW (in: lpBuffer=0x7ff74ec4bdc0, uSize=0x64 | out: lpBuffer="C:\\Windows") returned 0xa [0175.277] GetWindowsDirectoryW (in: lpBuffer=0x7ff74ec4ce50, uSize=0x140 | out: lpBuffer="C:\\Windows") returned 0xa [0175.277] CreateFileW (lpFileName="C:\\users\\Public\\PUBLIC" (normalized: "c:\\users\\public\\public"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x684 [0175.278] WriteFile (in: hFile=0x684, lpBuffer=0x7ff74ec493d0*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0x665da7edc0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec493d0*, lpNumberOfBytesWritten=0x665da7edc0*=0x114, lpOverlapped=0x0) returned 1 [0175.278] CloseHandle (hObject=0x684) returned 1 [0175.279] CreateFileW (lpFileName="C:\\users\\Public\\UNIQUE_ID_DO_NOT_REMOVE" (normalized: "c:\\users\\public\\unique_id_do_not_remove"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x684 [0175.279] WriteFile (in: hFile=0x684, lpBuffer=0x7ff74ec48e20*, nNumberOfBytesToWrite=0x5a4, lpNumberOfBytesWritten=0x665da7edc0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec48e20*, lpNumberOfBytesWritten=0x665da7edc0*=0x5a4, lpOverlapped=0x0) returned 1 [0175.280] CloseHandle (hObject=0x684) returned 1 [0175.280] CreateFileW (lpFileName="C:\\users\\Public\\PUBLIC" (normalized: "c:\\users\\public\\public"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x684 [0175.280] CloseHandle (hObject=0x684) returned 1 [0175.281] CryptAcquireContextW (in: phProv=0x7ff74ec4ce20, szContainer="AES_unique_", szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0x10 | out: phProv=0x7ff74ec4ce20*=0x0) returned 0 [0175.289] CryptAcquireContextW (in: phProv=0x7ff74ec4ce20, szContainer="AES_unique_", szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0x20 | out: phProv=0x7ff74ec4ce20*=0x0) returned 0 [0175.293] CryptAcquireContextW (in: phProv=0x7ff74ec4ce20, szContainer="AES_unique_", szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0x28 | out: phProv=0x7ff74ec4ce20*=0x0) returned 0 [0175.294] CryptAcquireContextW (in: phProv=0x7ff74ec4ce20, szContainer="AES_unique_", szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0x8 | out: phProv=0x7ff74ec4ce20*=0x665ab76310) returned 1 [0175.304] CreateFileW (lpFileName="C:\\users\\Public\\PUBLIC" (normalized: "c:\\users\\public\\public"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x684 [0175.304] GetFileSize (in: hFile=0x684, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x114 [0175.304] VirtualAlloc (lpAddress=0x0, dwSize=0x114, flAllocationType=0x1000, flProtect=0x4) returned 0x665ae70000 [0175.304] ReadFile (in: hFile=0x684, lpBuffer=0x665ae70000, nNumberOfBytesToRead=0x114, lpNumberOfBytesRead=0x665da7f2b0, lpOverlapped=0x0 | out: lpBuffer=0x665ae70000*, lpNumberOfBytesRead=0x665da7f2b0*=0x114, lpOverlapped=0x0) returned 1 [0175.305] CryptImportKey (in: hProv=0x665ab76310, pbData=0x665ae70000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x1, phKey=0x7ff74ec4f848 | out: phKey=0x7ff74ec4f848*=0x665ab9a960) returned 1 [0175.305] Sleep (dwMilliseconds=0x3e8) [0176.308] GetLogicalDrives () returned 0x4 [0176.308] GetDriveTypeW (lpRootPathName="C:") returned 0x3 [0176.308] FindFirstFileW (in: lpFileName="C:\\*.*", lpFindFileData=0x665da7eb50 | out: lpFindFileData=0x665da7eb50) returned 0x665abb47a0 [0176.308] FindNextFileW (in: hFindFile=0x665abb47a0, lpFindFileData=0x665da7eb50 | out: lpFindFileData=0x665da7eb50) returned 1 [0176.308] SetLastError (dwErrCode=0x0) [0176.308] CreateFileW (lpFileName="C:\\RyukReadMe.txt" (normalized: "c:\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.308] GetLastError () returned 0x5 [0176.308] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7eb00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7eb00, lpOverlapped=0x0) returned 0 [0176.309] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.309] FindFirstFileW (in: lpFileName="C:\\Boot\\*.*", lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 0x665abb43e0 [0176.309] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0176.311] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0176.311] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.311] SetFileAttributesW (lpFileName="C:\\Boot\\BCD", dwFileAttributes=0x80) returned 0 [0176.312] CreateFileW (lpFileName="C:\\Boot\\BCD" (normalized: "c:\\boot\\bcd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.312] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.312] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.312] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0176.312] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.312] SetFileAttributesW (lpFileName="C:\\Boot\\BCD.LOG", dwFileAttributes=0x80) returned 0 [0176.313] CreateFileW (lpFileName="C:\\Boot\\BCD.LOG" (normalized: "c:\\boot\\bcd.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.313] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.313] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.313] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0176.313] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.313] SetFileAttributesW (lpFileName="C:\\Boot\\BCD.LOG1", dwFileAttributes=0x80) returned 0 [0176.313] CreateFileW (lpFileName="C:\\Boot\\BCD.LOG1" (normalized: "c:\\boot\\bcd.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.314] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.314] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.314] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0176.314] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.314] SetFileAttributesW (lpFileName="C:\\Boot\\BCD.LOG2", dwFileAttributes=0x80) returned 0 [0176.314] CreateFileW (lpFileName="C:\\Boot\\BCD.LOG2" (normalized: "c:\\boot\\bcd.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.315] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.315] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.315] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0176.315] SetLastError (dwErrCode=0x0) [0176.315] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.315] GetLastError () returned 0x5 [0176.315] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.315] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.315] FindFirstFileW (in: lpFileName="C:\\Boot\\bg-BG\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665abb4c20 [0176.316] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.316] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.316] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0176.316] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0176.316] SetLastError (dwErrCode=0x0) [0176.316] CreateFileW (lpFileName="C:\\Boot\\bg-BG\\RyukReadMe.txt" (normalized: "c:\\boot\\bg-bg\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.316] GetLastError () returned 0x5 [0176.316] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.316] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.316] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0176.316] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.316] SetFileAttributesW (lpFileName="C:\\Boot\\BOOTSTAT.DAT", dwFileAttributes=0x80) returned 0 [0176.317] CreateFileW (lpFileName="C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.317] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.317] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.318] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0176.318] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0176.318] SetLastError (dwErrCode=0x0) [0176.318] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.318] GetLastError () returned 0x5 [0176.318] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.318] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.318] FindFirstFileW (in: lpFileName="C:\\Boot\\cs-CZ\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665abb4ec0 [0176.319] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.319] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.319] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.319] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0176.319] FindClose (in: hFindFile=0x665abb4ec0 | out: hFindFile=0x665abb4ec0) returned 1 [0176.323] SetLastError (dwErrCode=0x0) [0176.323] CreateFileW (lpFileName="C:\\Boot\\cs-CZ\\RyukReadMe.txt" (normalized: "c:\\boot\\cs-cz\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.324] GetLastError () returned 0x5 [0176.324] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.324] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.324] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0176.324] SetLastError (dwErrCode=0x0) [0176.324] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.324] GetLastError () returned 0x5 [0176.324] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.324] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.324] FindFirstFileW (in: lpFileName="C:\\Boot\\da-DK\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665abb5280 [0176.324] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.324] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.324] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.324] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0176.324] FindClose (in: hFindFile=0x665abb5280 | out: hFindFile=0x665abb5280) returned 1 [0176.324] SetLastError (dwErrCode=0x0) [0176.324] CreateFileW (lpFileName="C:\\Boot\\da-DK\\RyukReadMe.txt" (normalized: "c:\\boot\\da-dk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.325] GetLastError () returned 0x5 [0176.325] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.325] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.325] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0176.325] SetLastError (dwErrCode=0x0) [0176.325] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.325] GetLastError () returned 0x5 [0176.325] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.325] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.325] FindFirstFileW (in: lpFileName="C:\\Boot\\de-DE\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665abb42c0 [0176.326] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.326] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.326] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.326] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0176.326] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0176.326] SetLastError (dwErrCode=0x0) [0176.326] CreateFileW (lpFileName="C:\\Boot\\de-DE\\RyukReadMe.txt" (normalized: "c:\\boot\\de-de\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.326] GetLastError () returned 0x5 [0176.326] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.326] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.326] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0176.326] SetLastError (dwErrCode=0x0) [0176.326] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.326] GetLastError () returned 0x5 [0176.326] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.326] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.326] FindFirstFileW (in: lpFileName="C:\\Boot\\el-GR\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665abb4f80 [0176.327] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.327] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.327] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.327] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0176.327] FindClose (in: hFindFile=0x665abb4f80 | out: hFindFile=0x665abb4f80) returned 1 [0176.327] SetLastError (dwErrCode=0x0) [0176.327] CreateFileW (lpFileName="C:\\Boot\\el-GR\\RyukReadMe.txt" (normalized: "c:\\boot\\el-gr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.327] GetLastError () returned 0x5 [0176.327] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.327] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.327] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0176.327] SetLastError (dwErrCode=0x0) [0176.327] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.328] GetLastError () returned 0x5 [0176.328] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.328] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.328] FindFirstFileW (in: lpFileName="C:\\Boot\\en-GB\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665abb55e0 [0176.328] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.328] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.328] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0176.328] FindClose (in: hFindFile=0x665abb55e0 | out: hFindFile=0x665abb55e0) returned 1 [0176.328] SetLastError (dwErrCode=0x0) [0176.328] CreateFileW (lpFileName="C:\\Boot\\en-GB\\RyukReadMe.txt" (normalized: "c:\\boot\\en-gb\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.329] GetLastError () returned 0x5 [0176.329] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.329] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.329] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0176.329] SetLastError (dwErrCode=0x0) [0176.329] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.329] GetLastError () returned 0x5 [0176.329] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.329] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.329] FindFirstFileW (in: lpFileName="C:\\Boot\\en-US\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665abb56a0 [0176.329] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.329] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.329] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.329] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0176.329] FindClose (in: hFindFile=0x665abb56a0 | out: hFindFile=0x665abb56a0) returned 1 [0176.329] SetLastError (dwErrCode=0x0) [0176.329] CreateFileW (lpFileName="C:\\Boot\\en-US\\RyukReadMe.txt" (normalized: "c:\\boot\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.330] GetLastError () returned 0x5 [0176.330] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.330] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.330] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0176.330] SetLastError (dwErrCode=0x0) [0176.330] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.330] GetLastError () returned 0x5 [0176.330] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.330] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.330] FindFirstFileW (in: lpFileName="C:\\Boot\\es-ES\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665abb42c0 [0176.331] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.331] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.331] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.331] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0176.331] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0176.331] SetLastError (dwErrCode=0x0) [0176.331] CreateFileW (lpFileName="C:\\Boot\\es-ES\\RyukReadMe.txt" (normalized: "c:\\boot\\es-es\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.331] GetLastError () returned 0x5 [0176.331] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.331] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.331] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0176.331] SetLastError (dwErrCode=0x0) [0176.331] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.331] GetLastError () returned 0x5 [0176.331] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.331] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.331] FindFirstFileW (in: lpFileName="C:\\Boot\\es-MX\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665abb5520 [0176.332] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.332] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.332] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0176.332] FindClose (in: hFindFile=0x665abb5520 | out: hFindFile=0x665abb5520) returned 1 [0176.332] SetLastError (dwErrCode=0x0) [0176.332] CreateFileW (lpFileName="C:\\Boot\\es-MX\\RyukReadMe.txt" (normalized: "c:\\boot\\es-mx\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.332] GetLastError () returned 0x5 [0176.332] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.332] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.332] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0176.333] SetLastError (dwErrCode=0x0) [0176.333] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.333] GetLastError () returned 0x5 [0176.333] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.333] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.333] FindFirstFileW (in: lpFileName="C:\\Boot\\et-EE\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665abb4c20 [0176.333] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.333] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.333] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0176.333] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0176.333] SetLastError (dwErrCode=0x0) [0176.333] CreateFileW (lpFileName="C:\\Boot\\et-EE\\RyukReadMe.txt" (normalized: "c:\\boot\\et-ee\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.333] GetLastError () returned 0x5 [0176.333] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.333] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.333] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0176.333] SetLastError (dwErrCode=0x0) [0176.333] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.334] GetLastError () returned 0x5 [0176.334] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.334] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.334] FindFirstFileW (in: lpFileName="C:\\Boot\\fi-FI\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665abb4920 [0176.334] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.334] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.334] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.334] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0176.334] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0176.334] SetLastError (dwErrCode=0x0) [0176.335] CreateFileW (lpFileName="C:\\Boot\\fi-FI\\RyukReadMe.txt" (normalized: "c:\\boot\\fi-fi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.335] GetLastError () returned 0x5 [0176.335] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.335] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.335] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0176.335] SetLastError (dwErrCode=0x0) [0176.335] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.335] GetLastError () returned 0x5 [0176.335] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.335] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.335] FindFirstFileW (in: lpFileName="C:\\Boot\\Fonts\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665abb4c20 [0176.337] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.337] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.337] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.337] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\chs_boot.ttf", dwFileAttributes=0x80) returned 0 [0176.338] CreateFileW (lpFileName="C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.338] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.338] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.338] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.338] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.339] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\cht_boot.ttf", dwFileAttributes=0x80) returned 0 [0176.339] CreateFileW (lpFileName="C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.339] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.339] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.339] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.339] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.340] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\jpn_boot.ttf", dwFileAttributes=0x80) returned 0 [0176.340] CreateFileW (lpFileName="C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.341] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.341] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.341] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.341] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.341] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\kor_boot.ttf", dwFileAttributes=0x80) returned 0 [0176.342] CreateFileW (lpFileName="C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.342] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.342] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.342] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.342] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.342] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\malgunn_boot.ttf", dwFileAttributes=0x80) returned 0 [0176.344] CreateFileW (lpFileName="C:\\Boot\\Fonts\\malgunn_boot.ttf" (normalized: "c:\\boot\\fonts\\malgunn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.344] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.344] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.344] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.344] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.344] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\malgun_boot.ttf", dwFileAttributes=0x80) returned 0 [0176.346] CreateFileW (lpFileName="C:\\Boot\\Fonts\\malgun_boot.ttf" (normalized: "c:\\boot\\fonts\\malgun_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.346] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.346] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.346] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.346] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.346] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\meiryon_boot.ttf", dwFileAttributes=0x80) returned 0 [0176.347] CreateFileW (lpFileName="C:\\Boot\\Fonts\\meiryon_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryon_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.347] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.347] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.347] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.347] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.347] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\meiryo_boot.ttf", dwFileAttributes=0x80) returned 0 [0176.348] CreateFileW (lpFileName="C:\\Boot\\Fonts\\meiryo_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryo_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.348] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.348] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.348] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.348] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.349] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\msjhn_boot.ttf", dwFileAttributes=0x80) returned 0 [0176.349] CreateFileW (lpFileName="C:\\Boot\\Fonts\\msjhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msjhn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.349] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.349] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.349] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.349] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.350] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\msjh_boot.ttf", dwFileAttributes=0x80) returned 0 [0176.350] CreateFileW (lpFileName="C:\\Boot\\Fonts\\msjh_boot.ttf" (normalized: "c:\\boot\\fonts\\msjh_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.350] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.350] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.350] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.350] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.351] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\msyhn_boot.ttf", dwFileAttributes=0x80) returned 0 [0176.351] CreateFileW (lpFileName="C:\\Boot\\Fonts\\msyhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msyhn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.351] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.351] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.351] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.351] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.351] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\msyh_boot.ttf", dwFileAttributes=0x80) returned 0 [0176.352] CreateFileW (lpFileName="C:\\Boot\\Fonts\\msyh_boot.ttf" (normalized: "c:\\boot\\fonts\\msyh_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.352] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.352] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.352] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.353] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.353] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\segmono_boot.ttf", dwFileAttributes=0x80) returned 0 [0176.353] CreateFileW (lpFileName="C:\\Boot\\Fonts\\segmono_boot.ttf" (normalized: "c:\\boot\\fonts\\segmono_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.353] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.353] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.353] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.353] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.354] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\segoen_slboot.ttf", dwFileAttributes=0x80) returned 0 [0176.354] CreateFileW (lpFileName="C:\\Boot\\Fonts\\segoen_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoen_slboot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.354] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.354] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.354] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.354] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.355] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\segoe_slboot.ttf", dwFileAttributes=0x80) returned 0 [0176.355] CreateFileW (lpFileName="C:\\Boot\\Fonts\\segoe_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoe_slboot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.355] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.355] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.355] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.355] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.356] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\wgl4_boot.ttf", dwFileAttributes=0x80) returned 0 [0176.356] CreateFileW (lpFileName="C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.357] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.357] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.357] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0176.357] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0176.358] SetLastError (dwErrCode=0x0) [0176.358] CreateFileW (lpFileName="C:\\Boot\\Fonts\\RyukReadMe.txt" (normalized: "c:\\boot\\fonts\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.360] GetLastError () returned 0x5 [0176.360] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.360] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.360] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0176.360] SetLastError (dwErrCode=0x0) [0176.360] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.361] GetLastError () returned 0x5 [0176.361] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.361] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.361] FindFirstFileW (in: lpFileName="C:\\Boot\\fr-CA\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665abb4920 [0176.361] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.361] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.361] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0176.361] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0176.361] SetLastError (dwErrCode=0x0) [0176.361] CreateFileW (lpFileName="C:\\Boot\\fr-CA\\RyukReadMe.txt" (normalized: "c:\\boot\\fr-ca\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.361] GetLastError () returned 0x5 [0176.361] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.361] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.361] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0176.361] SetLastError (dwErrCode=0x0) [0176.361] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.362] GetLastError () returned 0x5 [0176.362] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.362] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.362] FindFirstFileW (in: lpFileName="C:\\Boot\\fr-FR\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665abb57c0 [0176.362] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.362] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.362] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.362] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0176.362] FindClose (in: hFindFile=0x665abb57c0 | out: hFindFile=0x665abb57c0) returned 1 [0176.363] SetLastError (dwErrCode=0x0) [0176.363] CreateFileW (lpFileName="C:\\Boot\\fr-FR\\RyukReadMe.txt" (normalized: "c:\\boot\\fr-fr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.363] GetLastError () returned 0x5 [0176.363] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.363] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.363] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0176.363] SetLastError (dwErrCode=0x0) [0176.363] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.363] GetLastError () returned 0x5 [0176.363] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.363] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.363] FindFirstFileW (in: lpFileName="C:\\Boot\\hr-HR\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665abb55e0 [0176.364] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.364] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.364] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0176.364] FindClose (in: hFindFile=0x665abb55e0 | out: hFindFile=0x665abb55e0) returned 1 [0176.364] SetLastError (dwErrCode=0x0) [0176.364] CreateFileW (lpFileName="C:\\Boot\\hr-HR\\RyukReadMe.txt" (normalized: "c:\\boot\\hr-hr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.364] GetLastError () returned 0x5 [0176.364] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.364] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.364] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0176.364] SetLastError (dwErrCode=0x0) [0176.364] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.365] GetLastError () returned 0x5 [0176.365] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.365] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.365] FindFirstFileW (in: lpFileName="C:\\Boot\\hu-HU\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665abb4920 [0176.365] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.365] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.365] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.365] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0176.365] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0176.365] SetLastError (dwErrCode=0x0) [0176.365] CreateFileW (lpFileName="C:\\Boot\\hu-HU\\RyukReadMe.txt" (normalized: "c:\\boot\\hu-hu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.366] GetLastError () returned 0x5 [0176.366] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.366] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.366] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0176.366] SetLastError (dwErrCode=0x0) [0176.366] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.366] GetLastError () returned 0x5 [0176.366] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.366] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.366] FindFirstFileW (in: lpFileName="C:\\Boot\\it-IT\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665abb42c0 [0176.367] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.367] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.367] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.367] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0176.367] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0176.367] SetLastError (dwErrCode=0x0) [0176.367] CreateFileW (lpFileName="C:\\Boot\\it-IT\\RyukReadMe.txt" (normalized: "c:\\boot\\it-it\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.367] GetLastError () returned 0x5 [0176.367] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.367] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.368] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0176.368] SetLastError (dwErrCode=0x0) [0176.368] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.368] GetLastError () returned 0x5 [0176.368] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.368] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.368] FindFirstFileW (in: lpFileName="C:\\Boot\\ja-JP\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665abb4c20 [0176.369] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.369] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.369] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.369] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0176.369] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0176.369] SetLastError (dwErrCode=0x0) [0176.369] CreateFileW (lpFileName="C:\\Boot\\ja-JP\\RyukReadMe.txt" (normalized: "c:\\boot\\ja-jp\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.369] GetLastError () returned 0x5 [0176.369] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.369] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.369] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0176.369] SetLastError (dwErrCode=0x0) [0176.369] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.369] GetLastError () returned 0x5 [0176.369] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.369] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.369] FindFirstFileW (in: lpFileName="C:\\Boot\\ko-KR\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665abb4440 [0176.369] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.370] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.370] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.370] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0176.370] FindClose (in: hFindFile=0x665abb4440 | out: hFindFile=0x665abb4440) returned 1 [0176.370] SetLastError (dwErrCode=0x0) [0176.370] CreateFileW (lpFileName="C:\\Boot\\ko-KR\\RyukReadMe.txt" (normalized: "c:\\boot\\ko-kr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.370] GetLastError () returned 0x5 [0176.370] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.370] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.370] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0176.370] SetLastError (dwErrCode=0x0) [0176.370] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.370] GetLastError () returned 0x5 [0176.370] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.371] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.371] FindFirstFileW (in: lpFileName="C:\\Boot\\lt-LT\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665abb42c0 [0176.371] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.371] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.371] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0176.371] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0176.371] SetLastError (dwErrCode=0x0) [0176.371] CreateFileW (lpFileName="C:\\Boot\\lt-LT\\RyukReadMe.txt" (normalized: "c:\\boot\\lt-lt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.371] GetLastError () returned 0x5 [0176.371] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.372] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.372] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0176.372] SetLastError (dwErrCode=0x0) [0176.372] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.372] GetLastError () returned 0x5 [0176.372] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.372] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.372] FindFirstFileW (in: lpFileName="C:\\Boot\\lv-LV\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665abb4f80 [0176.373] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.373] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.373] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0176.373] FindClose (in: hFindFile=0x665abb4f80 | out: hFindFile=0x665abb4f80) returned 1 [0176.373] SetLastError (dwErrCode=0x0) [0176.373] CreateFileW (lpFileName="C:\\Boot\\lv-LV\\RyukReadMe.txt" (normalized: "c:\\boot\\lv-lv\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.373] GetLastError () returned 0x5 [0176.373] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.373] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.373] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0176.373] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0176.373] SetLastError (dwErrCode=0x0) [0176.373] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.374] GetLastError () returned 0x5 [0176.374] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.374] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.374] FindFirstFileW (in: lpFileName="C:\\Boot\\nb-NO\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665abb4c80 [0176.374] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.374] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.374] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.374] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0176.374] FindClose (in: hFindFile=0x665abb4c80 | out: hFindFile=0x665abb4c80) returned 1 [0176.374] SetLastError (dwErrCode=0x0) [0176.374] CreateFileW (lpFileName="C:\\Boot\\nb-NO\\RyukReadMe.txt" (normalized: "c:\\boot\\nb-no\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.374] GetLastError () returned 0x5 [0176.374] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.374] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.374] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0176.374] SetLastError (dwErrCode=0x0) [0176.374] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.375] GetLastError () returned 0x5 [0176.375] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.375] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.375] FindFirstFileW (in: lpFileName="C:\\Boot\\nl-NL\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665abb42c0 [0176.375] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.376] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.376] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.376] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0176.376] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0176.376] SetLastError (dwErrCode=0x0) [0176.376] CreateFileW (lpFileName="C:\\Boot\\nl-NL\\RyukReadMe.txt" (normalized: "c:\\boot\\nl-nl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.376] GetLastError () returned 0x5 [0176.376] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.376] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.376] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0176.376] SetLastError (dwErrCode=0x0) [0176.376] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.376] GetLastError () returned 0x5 [0176.376] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.376] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.376] FindFirstFileW (in: lpFileName="C:\\Boot\\pl-PL\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665abb5460 [0176.377] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.377] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.377] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.377] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0176.377] FindClose (in: hFindFile=0x665abb5460 | out: hFindFile=0x665abb5460) returned 1 [0176.377] SetLastError (dwErrCode=0x0) [0176.377] CreateFileW (lpFileName="C:\\Boot\\pl-PL\\RyukReadMe.txt" (normalized: "c:\\boot\\pl-pl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.377] GetLastError () returned 0x5 [0176.377] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.377] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.377] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0176.378] SetLastError (dwErrCode=0x0) [0176.378] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.378] GetLastError () returned 0x5 [0176.378] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.378] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.378] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-BR\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665abb5340 [0176.378] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.378] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.378] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.378] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0176.378] FindClose (in: hFindFile=0x665abb5340 | out: hFindFile=0x665abb5340) returned 1 [0176.379] SetLastError (dwErrCode=0x0) [0176.379] CreateFileW (lpFileName="C:\\Boot\\pt-BR\\RyukReadMe.txt" (normalized: "c:\\boot\\pt-br\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.379] GetLastError () returned 0x5 [0176.379] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.379] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.379] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0176.379] SetLastError (dwErrCode=0x0) [0176.379] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.379] GetLastError () returned 0x5 [0176.379] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.379] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.379] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-PT\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665abb55e0 [0176.379] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.379] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.379] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.379] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0176.379] FindClose (in: hFindFile=0x665abb55e0 | out: hFindFile=0x665abb55e0) returned 1 [0176.379] SetLastError (dwErrCode=0x0) [0176.379] CreateFileW (lpFileName="C:\\Boot\\pt-PT\\RyukReadMe.txt" (normalized: "c:\\boot\\pt-pt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.380] GetLastError () returned 0x5 [0176.380] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.380] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.380] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0176.380] SetLastError (dwErrCode=0x0) [0176.380] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.380] GetLastError () returned 0x5 [0176.380] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.380] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.380] FindFirstFileW (in: lpFileName="C:\\Boot\\qps-ploc\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665abb5160 [0176.381] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.381] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.381] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.381] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0176.381] FindClose (in: hFindFile=0x665abb5160 | out: hFindFile=0x665abb5160) returned 1 [0176.381] SetLastError (dwErrCode=0x0) [0176.381] CreateFileW (lpFileName="C:\\Boot\\qps-ploc\\RyukReadMe.txt" (normalized: "c:\\boot\\qps-ploc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.381] GetLastError () returned 0x5 [0176.381] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.381] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.381] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0176.381] SetLastError (dwErrCode=0x0) [0176.381] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.381] GetLastError () returned 0x5 [0176.381] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.381] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.382] FindFirstFileW (in: lpFileName="C:\\Boot\\Resources\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665abb5280 [0176.382] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.382] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.382] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.382] SetLastError (dwErrCode=0x0) [0176.382] CreateFileW (lpFileName="C:\\Boot\\Resources\\RyukReadMe.txt" (normalized: "c:\\boot\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.382] GetLastError () returned 0x5 [0176.382] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0176.382] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.382] FindFirstFileW (in: lpFileName="C:\\Boot\\Resources\\en-US\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665abb5160 [0176.382] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.382] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.382] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0176.382] FindClose (in: hFindFile=0x665abb5160 | out: hFindFile=0x665abb5160) returned 1 [0176.382] SetLastError (dwErrCode=0x0) [0176.382] CreateFileW (lpFileName="C:\\Boot\\Resources\\en-US\\RyukReadMe.txt" (normalized: "c:\\boot\\resources\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.382] GetLastError () returned 0x5 [0176.383] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0176.383] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.383] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0176.383] FindClose (in: hFindFile=0x665abb5280 | out: hFindFile=0x665abb5280) returned 1 [0176.383] SetLastError (dwErrCode=0x0) [0176.383] CreateFileW (lpFileName="C:\\Boot\\Resources\\RyukReadMe.txt" (normalized: "c:\\boot\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.383] GetLastError () returned 0x5 [0176.383] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.383] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.383] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0176.383] SetLastError (dwErrCode=0x0) [0176.383] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.383] GetLastError () returned 0x5 [0176.383] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.383] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.383] FindFirstFileW (in: lpFileName="C:\\Boot\\ro-RO\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665abb4f20 [0176.384] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.384] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.384] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0176.384] FindClose (in: hFindFile=0x665abb4f20 | out: hFindFile=0x665abb4f20) returned 1 [0176.384] SetLastError (dwErrCode=0x0) [0176.384] CreateFileW (lpFileName="C:\\Boot\\ro-RO\\RyukReadMe.txt" (normalized: "c:\\boot\\ro-ro\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.384] GetLastError () returned 0x5 [0176.384] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.384] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.384] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0176.384] SetLastError (dwErrCode=0x0) [0176.384] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.385] GetLastError () returned 0x5 [0176.385] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.385] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.385] FindFirstFileW (in: lpFileName="C:\\Boot\\ru-RU\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665abb4c20 [0176.385] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.385] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.385] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.385] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0176.385] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0176.385] SetLastError (dwErrCode=0x0) [0176.385] CreateFileW (lpFileName="C:\\Boot\\ru-RU\\RyukReadMe.txt" (normalized: "c:\\boot\\ru-ru\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.385] GetLastError () returned 0x5 [0176.385] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.385] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.385] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0176.385] SetLastError (dwErrCode=0x0) [0176.385] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.385] GetLastError () returned 0x5 [0176.385] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.386] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.386] FindFirstFileW (in: lpFileName="C:\\Boot\\sk-SK\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665abb4920 [0176.386] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.386] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.386] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0176.386] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0176.386] SetLastError (dwErrCode=0x0) [0176.386] CreateFileW (lpFileName="C:\\Boot\\sk-SK\\RyukReadMe.txt" (normalized: "c:\\boot\\sk-sk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.387] GetLastError () returned 0x5 [0176.387] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.387] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.387] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0176.387] SetLastError (dwErrCode=0x0) [0176.387] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.387] GetLastError () returned 0x5 [0176.387] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.387] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.387] FindFirstFileW (in: lpFileName="C:\\Boot\\sl-SI\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665abb4440 [0176.388] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.388] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.388] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0176.388] FindClose (in: hFindFile=0x665abb4440 | out: hFindFile=0x665abb4440) returned 1 [0176.388] SetLastError (dwErrCode=0x0) [0176.388] CreateFileW (lpFileName="C:\\Boot\\sl-SI\\RyukReadMe.txt" (normalized: "c:\\boot\\sl-si\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.388] GetLastError () returned 0x5 [0176.388] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.388] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.388] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0176.388] SetLastError (dwErrCode=0x0) [0176.388] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.388] GetLastError () returned 0x5 [0176.388] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.388] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.388] FindFirstFileW (in: lpFileName="C:\\Boot\\sr-Latn-CS\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665abb4920 [0176.389] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.389] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.389] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.389] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0176.389] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0176.389] SetLastError (dwErrCode=0x0) [0176.389] CreateFileW (lpFileName="C:\\Boot\\sr-Latn-CS\\RyukReadMe.txt" (normalized: "c:\\boot\\sr-latn-cs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.389] GetLastError () returned 0x5 [0176.389] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.389] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.389] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0176.389] SetLastError (dwErrCode=0x0) [0176.389] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.389] GetLastError () returned 0x5 [0176.389] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.389] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.389] FindFirstFileW (in: lpFileName="C:\\Boot\\sr-Latn-RS\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665abb4c20 [0176.390] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.390] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.390] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0176.390] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0176.390] SetLastError (dwErrCode=0x0) [0176.390] CreateFileW (lpFileName="C:\\Boot\\sr-Latn-RS\\RyukReadMe.txt" (normalized: "c:\\boot\\sr-latn-rs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.390] GetLastError () returned 0x5 [0176.390] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.390] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.390] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0176.390] SetLastError (dwErrCode=0x0) [0176.390] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.391] GetLastError () returned 0x5 [0176.391] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.391] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.391] FindFirstFileW (in: lpFileName="C:\\Boot\\sv-SE\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665abb5460 [0176.391] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.391] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.391] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.391] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0176.391] FindClose (in: hFindFile=0x665abb5460 | out: hFindFile=0x665abb5460) returned 1 [0176.391] SetLastError (dwErrCode=0x0) [0176.391] CreateFileW (lpFileName="C:\\Boot\\sv-SE\\RyukReadMe.txt" (normalized: "c:\\boot\\sv-se\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.391] GetLastError () returned 0x5 [0176.391] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.391] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.391] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0176.391] SetLastError (dwErrCode=0x0) [0176.391] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.392] GetLastError () returned 0x5 [0176.392] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.392] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.392] FindFirstFileW (in: lpFileName="C:\\Boot\\tr-TR\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665abb4920 [0176.392] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.392] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.392] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.392] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0176.392] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0176.392] SetLastError (dwErrCode=0x0) [0176.392] CreateFileW (lpFileName="C:\\Boot\\tr-TR\\RyukReadMe.txt" (normalized: "c:\\boot\\tr-tr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.393] GetLastError () returned 0x5 [0176.393] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.393] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.393] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0176.393] SetLastError (dwErrCode=0x0) [0176.393] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.393] GetLastError () returned 0x5 [0176.393] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.393] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.393] FindFirstFileW (in: lpFileName="C:\\Boot\\uk-UA\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665abb4c20 [0176.394] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.394] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.394] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0176.394] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0176.394] SetLastError (dwErrCode=0x0) [0176.394] CreateFileW (lpFileName="C:\\Boot\\uk-UA\\RyukReadMe.txt" (normalized: "c:\\boot\\uk-ua\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.394] GetLastError () returned 0x5 [0176.394] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.394] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.394] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0176.394] SetLastError (dwErrCode=0x0) [0176.394] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.394] GetLastError () returned 0x5 [0176.394] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.394] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.395] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-CN\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665abb4920 [0176.395] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.395] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.395] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.395] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0176.395] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0176.395] SetLastError (dwErrCode=0x0) [0176.395] CreateFileW (lpFileName="C:\\Boot\\zh-CN\\RyukReadMe.txt" (normalized: "c:\\boot\\zh-cn\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.395] GetLastError () returned 0x5 [0176.395] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.395] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.395] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0176.395] SetLastError (dwErrCode=0x0) [0176.395] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.395] GetLastError () returned 0x5 [0176.395] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.395] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.395] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-HK\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665abb4c20 [0176.396] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.396] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.396] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.396] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0176.396] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0176.396] SetLastError (dwErrCode=0x0) [0176.396] CreateFileW (lpFileName="C:\\Boot\\zh-HK\\RyukReadMe.txt" (normalized: "c:\\boot\\zh-hk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.396] GetLastError () returned 0x5 [0176.396] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.396] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.396] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0176.396] SetLastError (dwErrCode=0x0) [0176.397] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.397] GetLastError () returned 0x5 [0176.397] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.397] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.397] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-TW\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665abb45c0 [0176.397] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.397] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.397] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.397] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0176.397] FindClose (in: hFindFile=0x665abb45c0 | out: hFindFile=0x665abb45c0) returned 1 [0176.398] SetLastError (dwErrCode=0x0) [0176.398] CreateFileW (lpFileName="C:\\Boot\\zh-TW\\RyukReadMe.txt" (normalized: "c:\\boot\\zh-tw\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.398] GetLastError () returned 0x5 [0176.398] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.398] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.398] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 0 [0176.398] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0176.398] SetLastError (dwErrCode=0x0) [0176.398] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.398] GetLastError () returned 0x5 [0176.398] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7eb00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7eb00, lpOverlapped=0x0) returned 0 [0176.398] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.398] FindNextFileW (in: hFindFile=0x665abb47a0, lpFindFileData=0x665da7eb50 | out: lpFindFileData=0x665da7eb50) returned 1 [0176.398] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.399] SetFileAttributesW (lpFileName="C:\\bootmgr", dwFileAttributes=0x80) returned 0 [0176.399] CreateFileW (lpFileName="C:\\bootmgr" (normalized: "c:\\bootmgr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.399] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.400] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.400] FindNextFileW (in: hFindFile=0x665abb47a0, lpFindFileData=0x665da7eb50 | out: lpFindFileData=0x665da7eb50) returned 1 [0176.400] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.400] SetFileAttributesW (lpFileName="C:\\BOOTNXT", dwFileAttributes=0x80) returned 0 [0176.400] CreateFileW (lpFileName="C:\\BOOTNXT" (normalized: "c:\\bootnxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.400] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.400] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.401] FindNextFileW (in: hFindFile=0x665abb47a0, lpFindFileData=0x665da7eb50 | out: lpFindFileData=0x665da7eb50) returned 1 [0176.401] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.401] SetFileAttributesW (lpFileName="C:\\BOOTSECT.BAK", dwFileAttributes=0x80) returned 0 [0176.402] CreateFileW (lpFileName="C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.402] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.402] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.402] FindNextFileW (in: hFindFile=0x665abb47a0, lpFindFileData=0x665da7eb50 | out: lpFindFileData=0x665da7eb50) returned 1 [0176.402] SetLastError (dwErrCode=0x0) [0176.402] CreateFileW (lpFileName="C:\\RyukReadMe.txt" (normalized: "c:\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.402] GetLastError () returned 0x5 [0176.402] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7eb00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7eb00, lpOverlapped=0x0) returned 0 [0176.403] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.403] FindFirstFileW (in: lpFileName="C:\\Config.Msi\\*.*", lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 0xffffffffffffffff [0176.404] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0176.404] SetLastError (dwErrCode=0x0) [0176.404] CreateFileW (lpFileName="C:\\Config.Msi\\RyukReadMe.txt" (normalized: "c:\\config.msi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.404] GetLastError () returned 0x5 [0176.404] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7eb00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7eb00, lpOverlapped=0x0) returned 0 [0176.404] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.404] FindNextFileW (in: hFindFile=0x665abb47a0, lpFindFileData=0x665da7eb50 | out: lpFindFileData=0x665da7eb50) returned 1 [0176.404] SetLastError (dwErrCode=0x0) [0176.404] CreateFileW (lpFileName="C:\\RyukReadMe.txt" (normalized: "c:\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.404] GetLastError () returned 0x5 [0176.404] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7eb00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7eb00, lpOverlapped=0x0) returned 0 [0176.404] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.404] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\*.*", lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 0xffffffffffffffff [0176.404] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0176.404] SetLastError (dwErrCode=0x0) [0176.404] CreateFileW (lpFileName="C:\\Documents and Settings\\RyukReadMe.txt" (normalized: "c:\\documents and settings\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.405] GetLastError () returned 0x5 [0176.405] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7eb00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7eb00, lpOverlapped=0x0) returned 0 [0176.405] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.405] FindNextFileW (in: hFindFile=0x665abb47a0, lpFindFileData=0x665da7eb50 | out: lpFindFileData=0x665da7eb50) returned 1 [0176.405] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.405] SetFileAttributesW (lpFileName="C:\\hiberfil.sys", dwFileAttributes=0x80) returned 0 [0176.405] CreateFileW (lpFileName="C:\\hiberfil.sys" (normalized: "c:\\hiberfil.sys"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.406] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.406] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.406] FindNextFileW (in: hFindFile=0x665abb47a0, lpFindFileData=0x665da7eb50 | out: lpFindFileData=0x665da7eb50) returned 1 [0176.406] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.406] SetFileAttributesW (lpFileName="C:\\pagefile.sys", dwFileAttributes=0x80) returned 0 [0176.406] CreateFileW (lpFileName="C:\\pagefile.sys" (normalized: "c:\\pagefile.sys"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.406] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.406] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.407] FindNextFileW (in: hFindFile=0x665abb47a0, lpFindFileData=0x665da7eb50 | out: lpFindFileData=0x665da7eb50) returned 1 [0176.407] SetLastError (dwErrCode=0x0) [0176.407] CreateFileW (lpFileName="C:\\RyukReadMe.txt" (normalized: "c:\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.407] GetLastError () returned 0x5 [0176.407] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7eb00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7eb00, lpOverlapped=0x0) returned 0 [0176.407] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.407] FindFirstFileW (in: lpFileName="C:\\PerfLogs\\*.*", lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 0xffffffffffffffff [0176.407] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0176.407] SetLastError (dwErrCode=0x0) [0176.407] CreateFileW (lpFileName="C:\\PerfLogs\\RyukReadMe.txt" (normalized: "c:\\perflogs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.407] GetLastError () returned 0x5 [0176.407] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7eb00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7eb00, lpOverlapped=0x0) returned 0 [0176.407] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.407] FindNextFileW (in: hFindFile=0x665abb47a0, lpFindFileData=0x665da7eb50 | out: lpFindFileData=0x665da7eb50) returned 1 [0176.408] SetLastError (dwErrCode=0x0) [0176.408] CreateFileW (lpFileName="C:\\RyukReadMe.txt" (normalized: "c:\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.408] GetLastError () returned 0x5 [0176.408] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7eb00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7eb00, lpOverlapped=0x0) returned 0 [0176.408] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.408] FindFirstFileW (in: lpFileName="C:\\Program Files\\*.*", lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 0x665abb4ec0 [0176.408] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0176.408] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0176.408] SetLastError (dwErrCode=0x0) [0176.408] CreateFileW (lpFileName="C:\\Program Files\\RyukReadMe.txt" (normalized: "c:\\program files\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.408] GetLastError () returned 0x5 [0176.408] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.408] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.408] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665abb42c0 [0176.408] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.409] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.409] SetLastError (dwErrCode=0x0) [0176.409] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.409] GetLastError () returned 0x5 [0176.409] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0176.409] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.409] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665abb5460 [0176.413] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.413] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.413] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.414] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB", dwFileAttributes=0x80) returned 0 [0176.414] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.415] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.415] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.415] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0176.415] FindClose (in: hFindFile=0x665abb5460 | out: hFindFile=0x665abb5460) returned 1 [0176.415] SetLastError (dwErrCode=0x0) [0176.415] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\designer\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.415] GetLastError () returned 0x5 [0176.415] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0176.415] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.415] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.415] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.415] SetLastError (dwErrCode=0x0) [0176.415] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.416] GetLastError () returned 0x5 [0176.416] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0176.416] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.416] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665abb43e0 [0176.416] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.416] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.416] SetLastError (dwErrCode=0x0) [0176.416] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.416] GetLastError () returned 0x5 [0176.416] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0176.416] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.416] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb4440 [0176.422] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.423] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.423] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.423] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.423] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.423] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.423] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.423] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.423] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.423] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.423] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.423] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.423] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.423] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.423] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.423] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.423] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.423] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.423] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.423] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.424] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.424] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.424] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.424] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.424] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.424] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.424] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.424] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.424] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.424] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVClient.man", dwFileAttributes=0x80) returned 0 [0176.425] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVClient.man" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvclient.man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.425] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.425] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.425] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.425] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.426] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVClientIsv.man", dwFileAttributes=0x80) returned 0 [0176.426] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVClientIsv.man" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvclientisv.man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.426] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.426] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.426] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.426] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.426] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.426] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.426] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.426] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.426] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.426] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.426] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.426] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.426] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.426] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.427] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.427] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.427] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.427] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.427] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.427] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml", dwFileAttributes=0x80) returned 0 [0176.427] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rheartbeatconfig.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.427] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.427] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.427] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.427] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.427] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.428] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.428] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.428] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.428] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.428] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.428] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.428] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.428] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.428] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.428] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.428] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.428] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.428] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.428] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.428] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.428] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.428] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.428] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.428] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.428] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.428] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.428] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.428] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.428] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.428] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.428] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.428] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.428] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.428] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.428] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.428] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.428] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.428] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.428] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.428] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.428] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.428] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.428] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.428] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.428] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.429] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ClientCapabilities.json", dwFileAttributes=0x80) returned 0 [0176.429] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ClientCapabilities.json" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\clientcapabilities.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.430] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.430] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.430] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.430] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.430] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ClientEventLogMessages.man", dwFileAttributes=0x80) returned 0 [0176.430] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ClientEventLogMessages.man" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\clienteventlogmessages.man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.430] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.431] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.431] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.431] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.431] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.431] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.431] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.431] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\FrequentOfficeUpdateSchedule.xml", dwFileAttributes=0x80) returned 0 [0176.432] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\FrequentOfficeUpdateSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\frequentofficeupdateschedule.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.432] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.432] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.432] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.432] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.432] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash", dwFileAttributes=0x80) returned 0 [0176.433] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i640.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.433] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.433] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.433] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.433] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash", dwFileAttributes=0x80) returned 0 [0176.434] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i641033.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.434] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.434] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.435] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.435] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.435] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.435] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.435] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.435] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.435] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.435] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.435] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.435] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.435] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.435] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.435] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml", dwFileAttributes=0x80) returned 0 [0176.435] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeupdateschedule.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.435] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.435] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.436] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.436] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.436] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml", dwFileAttributes=0x80) returned 0 [0176.437] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\servicewatcherschedule.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.437] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.437] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.437] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.437] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.437] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\SharedPerformance.man", dwFileAttributes=0x80) returned 0 [0176.438] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\SharedPerformance.man" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\sharedperformance.man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.438] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.438] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.438] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.438] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.438] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.438] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\SubsystemController.man", dwFileAttributes=0x80) returned 0 [0176.438] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\SubsystemController.man" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\subsystemcontroller.man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.439] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.439] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.439] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.439] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.439] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.439] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0176.439] FindClose (in: hFindFile=0x665abb4440 | out: hFindFile=0x665abb4440) returned 1 [0176.439] SetLastError (dwErrCode=0x0) [0176.439] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.439] GetLastError () returned 0x5 [0176.439] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0176.439] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.439] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.439] SetLastError (dwErrCode=0x0) [0176.439] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.440] GetLastError () returned 0x5 [0176.440] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0176.440] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.440] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb4a40 [0176.440] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.441] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.441] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.441] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml", dwFileAttributes=0x80) returned 0 [0176.442] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.442] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.442] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.442] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.442] SetLastError (dwErrCode=0x0) [0176.442] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.443] GetLastError () returned 0x5 [0176.443] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.443] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.443] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb5280 [0176.443] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.443] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.443] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0176.443] FindClose (in: hFindFile=0x665abb5280 | out: hFindFile=0x665abb5280) returned 1 [0176.443] SetLastError (dwErrCode=0x0) [0176.443] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.444] GetLastError () returned 0x5 [0176.444] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.444] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.444] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.444] SetLastError (dwErrCode=0x0) [0176.444] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.444] GetLastError () returned 0x5 [0176.444] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.444] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.444] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4440 [0176.444] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.444] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.444] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0176.444] FindClose (in: hFindFile=0x665abb4440 | out: hFindFile=0x665abb4440) returned 1 [0176.444] SetLastError (dwErrCode=0x0) [0176.444] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.444] GetLastError () returned 0x5 [0176.445] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.445] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.445] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.445] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.445] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml", dwFileAttributes=0x80) returned 0 [0176.445] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.445] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.445] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.445] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.446] SetLastError (dwErrCode=0x0) [0176.446] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.446] GetLastError () returned 0x5 [0176.446] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.446] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.446] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4920 [0176.446] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.446] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.446] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0176.446] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0176.446] SetLastError (dwErrCode=0x0) [0176.446] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.446] GetLastError () returned 0x5 [0176.446] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.446] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.446] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.446] SetLastError (dwErrCode=0x0) [0176.447] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.447] GetLastError () returned 0x5 [0176.447] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.447] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.447] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4da0 [0176.447] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.448] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.448] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0176.448] FindClose (in: hFindFile=0x665abb4da0 | out: hFindFile=0x665abb4da0) returned 1 [0176.448] SetLastError (dwErrCode=0x0) [0176.448] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.448] GetLastError () returned 0x5 [0176.448] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.448] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.448] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.448] SetLastError (dwErrCode=0x0) [0176.448] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.449] GetLastError () returned 0x5 [0176.449] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.449] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.449] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb56a0 [0176.449] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.449] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.449] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0176.449] FindClose (in: hFindFile=0x665abb56a0 | out: hFindFile=0x665abb56a0) returned 1 [0176.449] SetLastError (dwErrCode=0x0) [0176.449] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.449] GetLastError () returned 0x5 [0176.449] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.449] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.449] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.450] SetLastError (dwErrCode=0x0) [0176.450] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.450] GetLastError () returned 0x5 [0176.450] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.450] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.450] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4560 [0176.450] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.450] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.450] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0176.450] FindClose (in: hFindFile=0x665abb4560 | out: hFindFile=0x665abb4560) returned 1 [0176.450] SetLastError (dwErrCode=0x0) [0176.450] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.450] GetLastError () returned 0x5 [0176.450] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.450] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.450] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.450] SetLastError (dwErrCode=0x0) [0176.450] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.451] GetLastError () returned 0x5 [0176.451] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.451] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.451] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb56a0 [0176.451] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.451] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.451] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0176.451] FindClose (in: hFindFile=0x665abb56a0 | out: hFindFile=0x665abb56a0) returned 1 [0176.451] SetLastError (dwErrCode=0x0) [0176.451] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-gb\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.451] GetLastError () returned 0x5 [0176.451] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.451] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.451] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.451] SetLastError (dwErrCode=0x0) [0176.451] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.452] GetLastError () returned 0x5 [0176.452] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.452] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.452] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4920 [0176.453] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.454] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.454] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.454] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi", dwFileAttributes=0x80) returned 0 [0176.454] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.455] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.455] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.455] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.455] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.455] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi", dwFileAttributes=0x80) returned 0 [0176.455] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.456] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.456] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.456] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.456] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.456] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi", dwFileAttributes=0x80) returned 0 [0176.457] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.457] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.457] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.457] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.457] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.457] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi", dwFileAttributes=0x80) returned 0 [0176.458] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.458] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.458] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.458] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.458] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.458] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi", dwFileAttributes=0x80) returned 0 [0176.459] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\correct.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.459] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.459] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.459] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.459] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.459] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi", dwFileAttributes=0x80) returned 0 [0176.460] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\delete.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.460] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.460] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.460] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.460] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.460] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.460] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.460] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.460] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.460] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.460] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi", dwFileAttributes=0x80) returned 0 [0176.461] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\join.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.461] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.461] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.462] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.462] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.462] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.462] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.462] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.462] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.462] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.462] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi", dwFileAttributes=0x80) returned 0 [0176.463] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\split.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.463] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.463] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.463] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.463] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.463] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.463] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.463] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.463] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0176.463] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0176.464] SetLastError (dwErrCode=0x0) [0176.464] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.466] GetLastError () returned 0x5 [0176.466] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.467] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.467] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.467] SetLastError (dwErrCode=0x0) [0176.467] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.467] GetLastError () returned 0x5 [0176.467] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.467] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.467] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4440 [0176.467] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.467] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.467] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0176.467] FindClose (in: hFindFile=0x665abb4440 | out: hFindFile=0x665abb4440) returned 1 [0176.467] SetLastError (dwErrCode=0x0) [0176.467] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.467] GetLastError () returned 0x5 [0176.467] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.467] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.468] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.468] SetLastError (dwErrCode=0x0) [0176.468] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.468] GetLastError () returned 0x5 [0176.468] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.468] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.468] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4f20 [0176.468] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.468] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.468] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0176.468] FindClose (in: hFindFile=0x665abb4f20 | out: hFindFile=0x665abb4f20) returned 1 [0176.468] SetLastError (dwErrCode=0x0) [0176.468] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-mx\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.468] GetLastError () returned 0x5 [0176.468] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.468] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.468] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.468] SetLastError (dwErrCode=0x0) [0176.468] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.469] GetLastError () returned 0x5 [0176.469] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.469] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.469] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4920 [0176.469] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.469] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.469] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0176.469] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0176.469] SetLastError (dwErrCode=0x0) [0176.469] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.469] GetLastError () returned 0x5 [0176.469] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.469] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.469] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.469] SetLastError (dwErrCode=0x0) [0176.469] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.470] GetLastError () returned 0x5 [0176.470] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.470] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.470] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4920 [0176.470] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.470] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.470] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0176.470] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0176.470] SetLastError (dwErrCode=0x0) [0176.471] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fi-fi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.471] GetLastError () returned 0x5 [0176.471] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.471] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.471] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.471] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.471] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi", dwFileAttributes=0x80) returned 0 [0176.472] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.472] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.472] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.472] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.472] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.472] SetLastError (dwErrCode=0x0) [0176.472] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.472] GetLastError () returned 0x5 [0176.472] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.473] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.473] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb5040 [0176.473] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.473] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.473] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0176.473] FindClose (in: hFindFile=0x665abb5040 | out: hFindFile=0x665abb5040) returned 1 [0176.487] SetLastError (dwErrCode=0x0) [0176.487] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-ca\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.487] GetLastError () returned 0x5 [0176.487] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.487] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.488] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.488] SetLastError (dwErrCode=0x0) [0176.488] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.488] GetLastError () returned 0x5 [0176.488] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.488] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.488] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4920 [0176.488] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.488] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.488] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0176.488] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0176.488] SetLastError (dwErrCode=0x0) [0176.488] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-fr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.488] GetLastError () returned 0x5 [0176.488] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.489] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.489] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.489] SetLastError (dwErrCode=0x0) [0176.489] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.489] GetLastError () returned 0x5 [0176.489] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.489] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.489] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb57c0 [0176.490] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.490] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.490] SetLastError (dwErrCode=0x0) [0176.490] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.490] GetLastError () returned 0x5 [0176.491] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0176.491] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.491] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4c20 [0176.491] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0176.491] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0176.491] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.492] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml", dwFileAttributes=0x80) returned 0 [0176.492] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.493] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.493] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.493] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0176.493] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0176.493] SetLastError (dwErrCode=0x0) [0176.493] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.493] GetLastError () returned 0x5 [0176.493] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0176.493] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.493] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.493] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.494] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml", dwFileAttributes=0x80) returned 0 [0176.495] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.495] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.495] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.495] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.495] SetLastError (dwErrCode=0x0) [0176.495] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.495] GetLastError () returned 0x5 [0176.495] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0176.496] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.496] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb49e0 [0176.496] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0176.496] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0176.496] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.496] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml", dwFileAttributes=0x80) returned 0 [0176.496] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.497] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.497] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.497] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0176.497] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0176.497] SetLastError (dwErrCode=0x0) [0176.497] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.497] GetLastError () returned 0x5 [0176.497] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0176.497] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.498] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.498] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert.xml", dwFileAttributes=0x80) returned 0 [0176.499] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.499] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.499] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.499] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.499] SetLastError (dwErrCode=0x0) [0176.499] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.500] GetLastError () returned 0x5 [0176.500] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0176.500] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.500] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4920 [0176.500] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0176.500] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0176.500] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml", dwFileAttributes=0x80) returned 0 [0176.501] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.501] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.501] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.501] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0176.501] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml", dwFileAttributes=0x80) returned 0 [0176.502] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.502] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.502] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.502] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0176.502] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.503] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml", dwFileAttributes=0x80) returned 0 [0176.503] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.503] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.503] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.504] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0176.504] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0176.504] SetLastError (dwErrCode=0x0) [0176.504] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.504] GetLastError () returned 0x5 [0176.504] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0176.504] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.504] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.504] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml", dwFileAttributes=0x80) returned 0 [0176.505] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.505] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.505] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.505] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.505] SetLastError (dwErrCode=0x0) [0176.505] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.506] GetLastError () returned 0x5 [0176.506] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0176.506] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.506] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb5160 [0176.507] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0176.507] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0176.507] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.508] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml", dwFileAttributes=0x80) returned 0 [0176.508] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.508] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.508] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.509] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0176.509] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml", dwFileAttributes=0x80) returned 0 [0176.509] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\basealtgr_rtl.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.509] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.509] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.510] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0176.510] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml", dwFileAttributes=0x80) returned 0 [0176.511] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.511] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.511] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.512] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0176.512] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml", dwFileAttributes=0x80) returned 0 [0176.512] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.513] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.513] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.513] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0176.513] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.513] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml", dwFileAttributes=0x80) returned 0 [0176.513] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.514] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.514] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.514] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0176.514] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml", dwFileAttributes=0x80) returned 0 [0176.515] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.515] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.515] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.515] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0176.515] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.515] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml", dwFileAttributes=0x80) returned 0 [0176.516] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.517] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.517] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.517] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0176.517] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.517] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml", dwFileAttributes=0x80) returned 0 [0176.518] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.518] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.518] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.518] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0176.518] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.519] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml", dwFileAttributes=0x80) returned 0 [0176.519] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.520] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.520] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.520] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0176.520] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml", dwFileAttributes=0x80) returned 0 [0176.521] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.521] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.521] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.521] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0176.521] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.522] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml", dwFileAttributes=0x80) returned 0 [0176.522] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.522] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.522] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.522] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0176.522] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml", dwFileAttributes=0x80) returned 0 [0176.523] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.523] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.523] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.523] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0176.523] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml", dwFileAttributes=0x80) returned 0 [0176.524] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.524] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.524] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.524] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0176.525] FindClose (in: hFindFile=0x665abb5160 | out: hFindFile=0x665abb5160) returned 1 [0176.525] SetLastError (dwErrCode=0x0) [0176.525] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.528] GetLastError () returned 0x5 [0176.528] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0176.528] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.528] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.528] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main.xml", dwFileAttributes=0x80) returned 0 [0176.529] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.529] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.529] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.529] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.529] SetLastError (dwErrCode=0x0) [0176.530] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.530] GetLastError () returned 0x5 [0176.530] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0176.530] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.530] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4560 [0176.531] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0176.531] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0176.531] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml", dwFileAttributes=0x80) returned 0 [0176.531] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.532] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.532] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.532] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0176.532] FindClose (in: hFindFile=0x665abb4560 | out: hFindFile=0x665abb4560) returned 1 [0176.532] SetLastError (dwErrCode=0x0) [0176.532] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.532] GetLastError () returned 0x5 [0176.532] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0176.532] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.533] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.533] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml", dwFileAttributes=0x80) returned 0 [0176.534] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.534] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.534] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.534] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.534] SetLastError (dwErrCode=0x0) [0176.534] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.534] GetLastError () returned 0x5 [0176.535] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0176.535] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.535] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4920 [0176.535] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0176.535] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0176.535] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml", dwFileAttributes=0x80) returned 0 [0176.535] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.536] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.536] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.536] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0176.536] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0176.536] SetLastError (dwErrCode=0x0) [0176.536] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.536] GetLastError () returned 0x5 [0176.536] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0176.536] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.536] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.536] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.537] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml", dwFileAttributes=0x80) returned 0 [0176.537] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.537] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.537] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.537] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.537] SetLastError (dwErrCode=0x0) [0176.537] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.538] GetLastError () returned 0x5 [0176.538] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0176.538] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.538] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb5280 [0176.538] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0176.538] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0176.538] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.538] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml", dwFileAttributes=0x80) returned 0 [0176.538] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.539] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.539] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.539] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0176.539] FindClose (in: hFindFile=0x665abb5280 | out: hFindFile=0x665abb5280) returned 1 [0176.539] SetLastError (dwErrCode=0x0) [0176.539] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.539] GetLastError () returned 0x5 [0176.539] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0176.539] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.539] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.539] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.540] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml", dwFileAttributes=0x80) returned 0 [0176.540] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.540] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.540] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.540] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.540] SetLastError (dwErrCode=0x0) [0176.540] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.540] GetLastError () returned 0x5 [0176.540] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0176.540] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.541] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4440 [0176.541] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0176.541] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0176.541] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.541] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml", dwFileAttributes=0x80) returned 0 [0176.541] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.541] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.541] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.542] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0176.542] FindClose (in: hFindFile=0x665abb4440 | out: hFindFile=0x665abb4440) returned 1 [0176.542] SetLastError (dwErrCode=0x0) [0176.542] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.542] GetLastError () returned 0x5 [0176.542] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0176.543] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.543] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.543] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.543] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml", dwFileAttributes=0x80) returned 0 [0176.543] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.543] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.543] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.544] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.544] SetLastError (dwErrCode=0x0) [0176.544] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.544] GetLastError () returned 0x5 [0176.544] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0176.544] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.544] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4f20 [0176.545] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0176.545] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0176.545] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml", dwFileAttributes=0x80) returned 0 [0176.546] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.546] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.546] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.546] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0176.546] FindClose (in: hFindFile=0x665abb4f20 | out: hFindFile=0x665abb4f20) returned 1 [0176.546] SetLastError (dwErrCode=0x0) [0176.546] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.546] GetLastError () returned 0x5 [0176.546] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0176.546] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.547] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.547] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml", dwFileAttributes=0x80) returned 0 [0176.547] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.547] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.547] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.547] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.547] SetLastError (dwErrCode=0x0) [0176.547] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.548] GetLastError () returned 0x5 [0176.548] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0176.548] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.548] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb56a0 [0176.550] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0176.550] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0176.550] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.551] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml", dwFileAttributes=0x80) returned 0 [0176.551] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.551] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.551] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.552] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0176.552] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml", dwFileAttributes=0x80) returned 0 [0176.552] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.552] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.552] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.553] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0176.553] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.553] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml", dwFileAttributes=0x80) returned 0 [0176.554] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.554] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.554] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.554] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0176.554] FindClose (in: hFindFile=0x665abb56a0 | out: hFindFile=0x665abb56a0) returned 1 [0176.554] SetLastError (dwErrCode=0x0) [0176.554] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.555] GetLastError () returned 0x5 [0176.555] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0176.555] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.555] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.555] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml", dwFileAttributes=0x80) returned 0 [0176.555] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.555] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.555] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.556] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0176.556] FindClose (in: hFindFile=0x665abb57c0 | out: hFindFile=0x665abb57c0) returned 1 [0176.556] SetLastError (dwErrCode=0x0) [0176.556] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.556] GetLastError () returned 0x5 [0176.556] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.556] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.556] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.556] SetLastError (dwErrCode=0x0) [0176.556] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.557] GetLastError () returned 0x5 [0176.557] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.557] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.557] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4c20 [0176.557] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.557] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.557] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0176.557] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0176.557] SetLastError (dwErrCode=0x0) [0176.557] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\he-il\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.557] GetLastError () returned 0x5 [0176.557] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.557] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.557] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.557] SetLastError (dwErrCode=0x0) [0176.557] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.558] GetLastError () returned 0x5 [0176.558] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.558] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.558] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb57c0 [0176.558] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.558] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.558] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0176.558] FindClose (in: hFindFile=0x665abb57c0 | out: hFindFile=0x665abb57c0) returned 1 [0176.558] SetLastError (dwErrCode=0x0) [0176.558] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hr-hr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.558] GetLastError () returned 0x5 [0176.558] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.558] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.558] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.558] SetLastError (dwErrCode=0x0) [0176.559] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.559] GetLastError () returned 0x5 [0176.559] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.559] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.559] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb54c0 [0176.560] FindNextFileW (in: hFindFile=0x665abb54c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.560] FindNextFileW (in: hFindFile=0x665abb54c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.560] FindNextFileW (in: hFindFile=0x665abb54c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0176.560] FindClose (in: hFindFile=0x665abb54c0 | out: hFindFile=0x665abb54c0) returned 1 [0176.560] SetLastError (dwErrCode=0x0) [0176.560] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hu-hu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.560] GetLastError () returned 0x5 [0176.560] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.560] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.560] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.560] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.560] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrcommonlm.dat", dwFileAttributes=0x80) returned 0 [0176.561] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrcommonlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcommonlm.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.561] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.561] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.561] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.561] SetLastError (dwErrCode=0x0) [0176.561] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.561] GetLastError () returned 0x5 [0176.561] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.561] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.561] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\HWRCustomization\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb5160 [0176.562] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.562] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0176.562] FindClose (in: hFindFile=0x665abb5160 | out: hFindFile=0x665abb5160) returned 1 [0176.562] SetLastError (dwErrCode=0x0) [0176.562] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\HWRCustomization\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcustomization\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.562] GetLastError () returned 0x5 [0176.562] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.562] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.562] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.562] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.562] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrenclm.dat", dwFileAttributes=0x80) returned 0 [0176.563] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrenclm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrenclm.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.563] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.563] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.563] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.564] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.564] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrlatinlm.dat", dwFileAttributes=0x80) returned 0 [0176.564] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrlatinlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrlatinlm.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.564] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.564] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.564] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.564] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.565] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat", dwFileAttributes=0x80) returned 0 [0176.565] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusalm.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.566] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.566] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.566] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.566] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.566] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat", dwFileAttributes=0x80) returned 0 [0176.567] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusash.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.567] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.567] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.567] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.567] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.567] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.567] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.567] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.568] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsar.xml", dwFileAttributes=0x80) returned 0 [0176.568] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsar.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsar.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.569] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.569] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.569] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.569] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.569] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml", dwFileAttributes=0x80) returned 0 [0176.569] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscat.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.570] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.570] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.570] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.570] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.570] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml", dwFileAttributes=0x80) returned 0 [0176.570] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipschs.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.570] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.571] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.571] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.571] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml", dwFileAttributes=0x80) returned 0 [0176.571] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscht.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.571] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.571] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.572] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.572] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.572] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml", dwFileAttributes=0x80) returned 0 [0176.572] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscsy.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.572] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.572] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.573] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.573] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml", dwFileAttributes=0x80) returned 0 [0176.573] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdan.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.573] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.573] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.574] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.574] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml", dwFileAttributes=0x80) returned 0 [0176.574] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdeu.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.574] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.574] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.575] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.575] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsel.xml", dwFileAttributes=0x80) returned 0 [0176.575] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsel.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsel.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.576] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.576] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.576] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.576] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.576] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsen.xml", dwFileAttributes=0x80) returned 0 [0176.576] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsen.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsen.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.577] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.577] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.577] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.577] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.577] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsesp.xml", dwFileAttributes=0x80) returned 0 [0176.577] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsesp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsesp.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.577] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.577] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.578] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.578] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.578] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfin.xml", dwFileAttributes=0x80) returned 0 [0176.579] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfin.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfin.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.579] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.579] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.579] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.579] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.579] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfra.xml", dwFileAttributes=0x80) returned 0 [0176.579] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfra.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfra.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.580] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.580] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.580] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.580] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshe.xml", dwFileAttributes=0x80) returned 0 [0176.580] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshe.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshe.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.580] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.580] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.581] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.581] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.581] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshi.xml", dwFileAttributes=0x80) returned 0 [0176.581] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshi.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.581] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.581] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.581] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.581] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.582] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshrv.xml", dwFileAttributes=0x80) returned 0 [0176.582] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshrv.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshrv.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.583] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.583] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.583] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.583] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsid.xml", dwFileAttributes=0x80) returned 0 [0176.583] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsid.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsid.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.583] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.583] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.584] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.584] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsita.xml", dwFileAttributes=0x80) returned 0 [0176.584] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsita.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsita.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.584] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.584] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.584] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.584] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.585] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml", dwFileAttributes=0x80) returned 0 [0176.585] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsjpn.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.585] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.585] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.585] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.585] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.586] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml", dwFileAttributes=0x80) returned 0 [0176.586] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipskor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.586] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.586] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.587] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.587] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.587] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml", dwFileAttributes=0x80) returned 0 [0176.587] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnld.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.587] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.587] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.587] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.587] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.588] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml", dwFileAttributes=0x80) returned 0 [0176.588] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.588] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.588] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.588] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.588] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml", dwFileAttributes=0x80) returned 0 [0176.589] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplk.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.589] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.589] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.589] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.589] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.589] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml", dwFileAttributes=0x80) returned 0 [0176.590] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptb.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.591] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.591] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.591] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.591] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.591] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptg.xml", dwFileAttributes=0x80) returned 0 [0176.591] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptg.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptg.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.591] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.592] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.592] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.592] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrom.xml", dwFileAttributes=0x80) returned 0 [0176.592] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrom.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrom.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.593] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.593] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.593] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.593] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrus.xml", dwFileAttributes=0x80) returned 0 [0176.594] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrus.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrus.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.594] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.594] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.594] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.595] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.595] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrb.xml", dwFileAttributes=0x80) returned 0 [0176.595] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrb.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.595] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.595] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.595] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.595] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrl.xml", dwFileAttributes=0x80) returned 0 [0176.596] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrl.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.596] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.596] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.596] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.596] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssve.xml", dwFileAttributes=0x80) returned 0 [0176.597] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssve.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssve.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.597] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.597] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.597] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.597] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.597] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipstr.xml", dwFileAttributes=0x80) returned 0 [0176.598] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipstr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipstr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.598] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.598] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.598] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.598] SetLastError (dwErrCode=0x0) [0176.598] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.599] GetLastError () returned 0x5 [0176.599] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.599] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.599] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4560 [0176.599] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.599] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.599] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0176.599] FindClose (in: hFindFile=0x665abb4560 | out: hFindFile=0x665abb4560) returned 1 [0176.599] SetLastError (dwErrCode=0x0) [0176.599] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\it-it\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.599] GetLastError () returned 0x5 [0176.599] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.599] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.599] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.599] SetLastError (dwErrCode=0x0) [0176.599] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.600] GetLastError () returned 0x5 [0176.600] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.600] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.600] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb56a0 [0176.600] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.600] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.600] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0176.600] FindClose (in: hFindFile=0x665abb56a0 | out: hFindFile=0x665abb56a0) returned 1 [0176.600] SetLastError (dwErrCode=0x0) [0176.600] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ja-jp\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.600] GetLastError () returned 0x5 [0176.600] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.600] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.600] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.600] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.600] SetLastError (dwErrCode=0x0) [0176.600] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.600] GetLastError () returned 0x5 [0176.600] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.601] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.601] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4920 [0176.601] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.601] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.601] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0176.601] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0176.601] SetLastError (dwErrCode=0x0) [0176.601] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ko-kr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.602] GetLastError () returned 0x5 [0176.602] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.602] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.602] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.602] SetLastError (dwErrCode=0x0) [0176.602] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.602] GetLastError () returned 0x5 [0176.602] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.602] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.602] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4f20 [0176.602] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.602] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.602] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.602] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\chstic.dgml", dwFileAttributes=0x80) returned 0 [0176.603] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\chstic.dgml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\languagemodel\\chstic.dgml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.603] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.603] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.604] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0176.604] FindClose (in: hFindFile=0x665abb4f20 | out: hFindFile=0x665abb4f20) returned 1 [0176.604] SetLastError (dwErrCode=0x0) [0176.604] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\languagemodel\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.604] GetLastError () returned 0x5 [0176.604] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.604] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.604] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.604] SetLastError (dwErrCode=0x0) [0176.604] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.604] GetLastError () returned 0x5 [0176.604] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.604] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.604] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4f20 [0176.605] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.605] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.605] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0176.605] FindClose (in: hFindFile=0x665abb4f20 | out: hFindFile=0x665abb4f20) returned 1 [0176.605] SetLastError (dwErrCode=0x0) [0176.605] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lt-lt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.605] GetLastError () returned 0x5 [0176.605] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.605] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.605] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.605] SetLastError (dwErrCode=0x0) [0176.605] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.605] GetLastError () returned 0x5 [0176.605] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.605] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.605] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb57c0 [0176.606] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.606] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.606] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0176.606] FindClose (in: hFindFile=0x665abb57c0 | out: hFindFile=0x665abb57c0) returned 1 [0176.606] SetLastError (dwErrCode=0x0) [0176.606] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lv-lv\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.606] GetLastError () returned 0x5 [0176.606] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.606] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.606] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.606] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.606] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.606] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.606] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.606] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.606] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.606] SetLastError (dwErrCode=0x0) [0176.606] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.606] GetLastError () returned 0x5 [0176.606] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.606] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.606] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb5760 [0176.607] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.607] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.607] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0176.607] FindClose (in: hFindFile=0x665abb5760 | out: hFindFile=0x665abb5760) returned 1 [0176.607] SetLastError (dwErrCode=0x0) [0176.607] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nb-no\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.607] GetLastError () returned 0x5 [0176.607] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.607] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.607] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.608] SetLastError (dwErrCode=0x0) [0176.608] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.608] GetLastError () returned 0x5 [0176.608] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.608] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.608] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb5040 [0176.608] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.608] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.608] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0176.608] FindClose (in: hFindFile=0x665abb5040 | out: hFindFile=0x665abb5040) returned 1 [0176.608] SetLastError (dwErrCode=0x0) [0176.608] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nl-nl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.608] GetLastError () returned 0x5 [0176.608] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.608] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.608] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.608] SetLastError (dwErrCode=0x0) [0176.608] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.609] GetLastError () returned 0x5 [0176.609] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.609] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.609] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb45c0 [0176.609] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.609] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.609] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0176.609] FindClose (in: hFindFile=0x665abb45c0 | out: hFindFile=0x665abb45c0) returned 1 [0176.609] SetLastError (dwErrCode=0x0) [0176.609] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pl-pl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.609] GetLastError () returned 0x5 [0176.609] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.609] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.609] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.609] SetLastError (dwErrCode=0x0) [0176.609] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.610] GetLastError () returned 0x5 [0176.610] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.610] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.610] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4440 [0176.610] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.610] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.610] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0176.610] FindClose (in: hFindFile=0x665abb4440 | out: hFindFile=0x665abb4440) returned 1 [0176.610] SetLastError (dwErrCode=0x0) [0176.610] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-br\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.610] GetLastError () returned 0x5 [0176.610] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.610] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.610] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.610] SetLastError (dwErrCode=0x0) [0176.610] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.610] GetLastError () returned 0x5 [0176.610] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.611] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.611] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb5340 [0176.611] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.611] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.611] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0176.611] FindClose (in: hFindFile=0x665abb5340 | out: hFindFile=0x665abb5340) returned 1 [0176.611] SetLastError (dwErrCode=0x0) [0176.611] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-pt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.612] GetLastError () returned 0x5 [0176.612] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.612] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.612] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.612] SetLastError (dwErrCode=0x0) [0176.612] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.612] GetLastError () returned 0x5 [0176.612] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.612] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.612] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb5040 [0176.612] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.612] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.612] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0176.612] FindClose (in: hFindFile=0x665abb5040 | out: hFindFile=0x665abb5040) returned 1 [0176.612] SetLastError (dwErrCode=0x0) [0176.612] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ro-ro\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.612] GetLastError () returned 0x5 [0176.612] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.612] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.613] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.613] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.613] SetLastError (dwErrCode=0x0) [0176.613] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.613] GetLastError () returned 0x5 [0176.613] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.613] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.613] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4920 [0176.615] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.615] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.615] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0176.615] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0176.615] SetLastError (dwErrCode=0x0) [0176.615] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ru-ru\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.616] GetLastError () returned 0x5 [0176.616] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.616] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.616] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.616] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.616] SetLastError (dwErrCode=0x0) [0176.616] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.616] GetLastError () returned 0x5 [0176.616] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.616] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.616] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb57c0 [0176.616] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.616] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.616] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0176.616] FindClose (in: hFindFile=0x665abb57c0 | out: hFindFile=0x665abb57c0) returned 1 [0176.616] SetLastError (dwErrCode=0x0) [0176.616] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sk-sk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.616] GetLastError () returned 0x5 [0176.617] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.617] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.617] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.617] SetLastError (dwErrCode=0x0) [0176.617] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.617] GetLastError () returned 0x5 [0176.617] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.617] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.617] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb55e0 [0176.618] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.618] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.618] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0176.618] FindClose (in: hFindFile=0x665abb55e0 | out: hFindFile=0x665abb55e0) returned 1 [0176.618] SetLastError (dwErrCode=0x0) [0176.618] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sl-si\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.618] GetLastError () returned 0x5 [0176.618] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.618] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.618] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.618] SetLastError (dwErrCode=0x0) [0176.618] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.618] GetLastError () returned 0x5 [0176.618] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.618] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.618] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-CS\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4920 [0176.619] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.619] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.619] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0176.619] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0176.619] SetLastError (dwErrCode=0x0) [0176.619] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-CS\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-cs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.619] GetLastError () returned 0x5 [0176.619] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.619] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.619] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.619] SetLastError (dwErrCode=0x0) [0176.619] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.619] GetLastError () returned 0x5 [0176.619] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.619] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.619] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4440 [0176.619] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.619] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.619] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0176.620] FindClose (in: hFindFile=0x665abb4440 | out: hFindFile=0x665abb4440) returned 1 [0176.620] SetLastError (dwErrCode=0x0) [0176.620] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-rs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.620] GetLastError () returned 0x5 [0176.620] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.620] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.620] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.620] SetLastError (dwErrCode=0x0) [0176.620] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.620] GetLastError () returned 0x5 [0176.620] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.620] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.620] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4c20 [0176.621] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.621] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.621] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0176.621] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0176.621] SetLastError (dwErrCode=0x0) [0176.621] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sv-se\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.621] GetLastError () returned 0x5 [0176.621] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.621] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.621] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.621] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.621] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.621] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.621] SetLastError (dwErrCode=0x0) [0176.621] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.621] GetLastError () returned 0x5 [0176.621] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.621] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.621] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4440 [0176.622] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.622] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.622] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0176.622] FindClose (in: hFindFile=0x665abb4440 | out: hFindFile=0x665abb4440) returned 1 [0176.622] SetLastError (dwErrCode=0x0) [0176.622] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\th-th\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.622] GetLastError () returned 0x5 [0176.622] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.622] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.623] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.623] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.623] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.623] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.623] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.623] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.623] SetLastError (dwErrCode=0x0) [0176.623] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.623] GetLastError () returned 0x5 [0176.623] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.623] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.623] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4440 [0176.623] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.623] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.623] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0176.623] FindClose (in: hFindFile=0x665abb4440 | out: hFindFile=0x665abb4440) returned 1 [0176.623] SetLastError (dwErrCode=0x0) [0176.623] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tr-tr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.623] GetLastError () returned 0x5 [0176.623] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.623] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.624] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.624] SetLastError (dwErrCode=0x0) [0176.624] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.624] GetLastError () returned 0x5 [0176.624] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.624] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.624] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4f80 [0176.624] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.624] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.624] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0176.624] FindClose (in: hFindFile=0x665abb4f80 | out: hFindFile=0x665abb4f80) returned 1 [0176.624] SetLastError (dwErrCode=0x0) [0176.624] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\uk-ua\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.624] GetLastError () returned 0x5 [0176.624] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.624] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.624] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.625] SetLastError (dwErrCode=0x0) [0176.625] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.625] GetLastError () returned 0x5 [0176.625] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.625] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.625] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4c80 [0176.625] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.625] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.625] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0176.625] FindClose (in: hFindFile=0x665abb4c80 | out: hFindFile=0x665abb4c80) returned 1 [0176.625] SetLastError (dwErrCode=0x0) [0176.625] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-cn\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.625] GetLastError () returned 0x5 [0176.625] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.625] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.625] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.625] SetLastError (dwErrCode=0x0) [0176.625] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.626] GetLastError () returned 0x5 [0176.626] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.626] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.626] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-HK\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4440 [0176.626] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.626] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.626] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0176.626] FindClose (in: hFindFile=0x665abb4440 | out: hFindFile=0x665abb4440) returned 1 [0176.627] SetLastError (dwErrCode=0x0) [0176.627] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-HK\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-hk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.627] GetLastError () returned 0x5 [0176.627] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.627] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.627] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.627] SetLastError (dwErrCode=0x0) [0176.627] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.627] GetLastError () returned 0x5 [0176.627] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.627] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.627] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb5460 [0176.627] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.627] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.627] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0176.627] FindClose (in: hFindFile=0x665abb5460 | out: hFindFile=0x665abb5460) returned 1 [0176.627] SetLastError (dwErrCode=0x0) [0176.627] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-tw\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.628] GetLastError () returned 0x5 [0176.628] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.628] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.628] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0176.628] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0176.628] SetLastError (dwErrCode=0x0) [0176.628] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.628] GetLastError () returned 0x5 [0176.628] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0176.628] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.628] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.628] SetLastError (dwErrCode=0x0) [0176.628] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.628] GetLastError () returned 0x5 [0176.628] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0176.628] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.628] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb4920 [0176.629] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.629] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.629] SetLastError (dwErrCode=0x0) [0176.629] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.629] GetLastError () returned 0x5 [0176.629] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.629] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.629] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb55e0 [0176.629] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.629] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.629] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0176.629] FindClose (in: hFindFile=0x665abb55e0 | out: hFindFile=0x665abb55e0) returned 1 [0176.629] SetLastError (dwErrCode=0x0) [0176.629] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.629] GetLastError () returned 0x5 [0176.629] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.629] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.630] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.630] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0176.630] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0176.630] SetLastError (dwErrCode=0x0) [0176.630] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.630] GetLastError () returned 0x5 [0176.630] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0176.630] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.630] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.630] SetLastError (dwErrCode=0x0) [0176.630] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.630] GetLastError () returned 0x5 [0176.630] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0176.630] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.630] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb49e0 [0176.631] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.631] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.631] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.631] SetLastError (dwErrCode=0x0) [0176.632] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.632] GetLastError () returned 0x5 [0176.632] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.632] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.632] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb5280 [0176.633] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.634] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.634] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.634] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.634] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms", dwFileAttributes=0x80) returned 0 [0176.635] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig-office.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.635] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.635] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.635] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.635] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0176.635] FindClose (in: hFindFile=0x665abb5280 | out: hFindFile=0x665abb5280) returned 1 [0176.636] SetLastError (dwErrCode=0x0) [0176.636] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.639] GetLastError () returned 0x5 [0176.639] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.639] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.639] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0176.639] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0176.639] SetLastError (dwErrCode=0x0) [0176.639] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.639] GetLastError () returned 0x5 [0176.639] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0176.639] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.639] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.639] SetLastError (dwErrCode=0x0) [0176.639] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.639] GetLastError () returned 0x5 [0176.639] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0176.639] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.639] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OfficeSoftwareProtectionPlatform\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb4560 [0176.640] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.640] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0176.640] FindClose (in: hFindFile=0x665abb4560 | out: hFindFile=0x665abb4560) returned 1 [0176.640] SetLastError (dwErrCode=0x0) [0176.640] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OfficeSoftwareProtectionPlatform\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.640] GetLastError () returned 0x5 [0176.640] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0176.640] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.640] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.640] SetLastError (dwErrCode=0x0) [0176.640] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.640] GetLastError () returned 0x5 [0176.640] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0176.640] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.640] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb5520 [0176.640] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.640] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.640] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0176.641] FindClose (in: hFindFile=0x665abb5520 | out: hFindFile=0x665abb5520) returned 1 [0176.641] SetLastError (dwErrCode=0x0) [0176.641] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.641] GetLastError () returned 0x5 [0176.641] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0176.641] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.641] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.641] SetLastError (dwErrCode=0x0) [0176.641] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.641] GetLastError () returned 0x5 [0176.641] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0176.641] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.641] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb4920 [0176.643] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.643] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.643] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.644] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.htm", dwFileAttributes=0x80) returned 0 [0176.645] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.645] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.645] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.645] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.645] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.645] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg", dwFileAttributes=0x80) returned 0 [0176.646] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.646] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.646] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.646] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.646] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Blue_Gradient.jpg", dwFileAttributes=0x80) returned 0 [0176.647] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Blue_Gradient.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\blue_gradient.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.647] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.647] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.647] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.647] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Cave_Drawings.gif", dwFileAttributes=0x80) returned 0 [0176.648] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Cave_Drawings.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\cave_drawings.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.648] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.648] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.648] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.648] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.648] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Connectivity.gif", dwFileAttributes=0x80) returned 0 [0176.649] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Connectivity.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\connectivity.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.649] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.649] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.649] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.649] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.649] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.649] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Dotted_Lines.emf", dwFileAttributes=0x80) returned 0 [0176.650] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Dotted_Lines.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\dotted_lines.emf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.650] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.650] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.651] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.651] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm", dwFileAttributes=0x80) returned 0 [0176.651] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.651] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.651] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.652] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.652] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.652] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg", dwFileAttributes=0x80) returned 0 [0176.653] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.653] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.653] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.653] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.653] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.653] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Genko_1.emf", dwFileAttributes=0x80) returned 0 [0176.653] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Genko_1.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\genko_1.emf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.654] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.654] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.654] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.654] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.654] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Genko_2.emf", dwFileAttributes=0x80) returned 0 [0176.655] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Genko_2.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\genko_2.emf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.655] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.655] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.655] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.655] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Graph.emf", dwFileAttributes=0x80) returned 0 [0176.656] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Graph.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\graph.emf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.656] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.656] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.656] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.656] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.657] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm", dwFileAttributes=0x80) returned 0 [0176.657] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\green bubbles.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.657] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.657] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.657] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.657] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg", dwFileAttributes=0x80) returned 0 [0176.658] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\greenbubbles.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.658] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.658] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.659] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.659] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\grid_(cm).wmf", dwFileAttributes=0x80) returned 0 [0176.659] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\grid_(cm).wmf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\grid_(cm).wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.659] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.659] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.660] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.660] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.660] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\grid_(inch).wmf", dwFileAttributes=0x80) returned 0 [0176.660] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\grid_(inch).wmf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\grid_(inch).wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.661] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.661] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.661] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.661] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm", dwFileAttributes=0x80) returned 0 [0176.661] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\hand prints.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.661] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.661] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.662] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.662] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg", dwFileAttributes=0x80) returned 0 [0176.662] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.662] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.662] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.663] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.663] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.663] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Memo.emf", dwFileAttributes=0x80) returned 0 [0176.663] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Memo.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\memo.emf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.664] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.664] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.664] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.664] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Monet.jpg", dwFileAttributes=0x80) returned 0 [0176.665] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Monet.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\monet.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.665] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.665] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.665] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.665] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Month_Calendar.emf", dwFileAttributes=0x80) returned 0 [0176.666] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Month_Calendar.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\month_calendar.emf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.666] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.666] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.666] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.666] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Music.emf", dwFileAttributes=0x80) returned 0 [0176.667] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Music.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\music.emf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.667] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.667] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.667] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.667] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Notebook.jpg", dwFileAttributes=0x80) returned 0 [0176.668] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Notebook.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\notebook.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.668] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.668] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.668] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.668] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm", dwFileAttributes=0x80) returned 0 [0176.669] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orange circles.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.669] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.669] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.670] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.670] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.670] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg", dwFileAttributes=0x80) returned 0 [0176.670] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orangecircles.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.670] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.670] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.670] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.670] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.671] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.htm", dwFileAttributes=0x80) returned 0 [0176.671] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.671] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.671] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.671] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.671] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.671] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg", dwFileAttributes=0x80) returned 0 [0176.672] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.672] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.672] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.673] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.673] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Pine_Lumber.jpg", dwFileAttributes=0x80) returned 0 [0176.673] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Pine_Lumber.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\pine_lumber.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.673] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.673] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.673] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.673] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.674] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Pretty_Peacock.jpg", dwFileAttributes=0x80) returned 0 [0176.674] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Pretty_Peacock.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\pretty_peacock.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.674] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.674] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.674] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.674] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.674] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Psychedelic.jpg", dwFileAttributes=0x80) returned 0 [0176.675] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Psychedelic.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\psychedelic.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.675] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.675] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.676] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.676] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.676] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.htm", dwFileAttributes=0x80) returned 0 [0176.676] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.677] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.677] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.677] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.677] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg", dwFileAttributes=0x80) returned 0 [0176.677] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.678] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.678] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.678] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.678] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Sand_Paper.jpg", dwFileAttributes=0x80) returned 0 [0176.678] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Sand_Paper.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\sand_paper.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.679] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.679] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.679] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.679] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Seyes.emf", dwFileAttributes=0x80) returned 0 [0176.681] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Seyes.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\seyes.emf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.681] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.681] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.681] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.681] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Shades of Blue.htm", dwFileAttributes=0x80) returned 0 [0176.681] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Shades of Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shades of blue.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.682] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.682] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.682] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.682] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.682] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg", dwFileAttributes=0x80) returned 0 [0176.682] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shadesofblue.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.682] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.683] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.683] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.683] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.683] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Shorthand.emf", dwFileAttributes=0x80) returned 0 [0176.684] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Shorthand.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shorthand.emf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.684] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.684] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.684] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.684] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.685] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Small_News.jpg", dwFileAttributes=0x80) returned 0 [0176.685] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Small_News.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\small_news.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.685] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.685] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.685] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.685] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.685] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Soft Blue.htm", dwFileAttributes=0x80) returned 0 [0176.686] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Soft Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\soft blue.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.686] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.686] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.687] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.687] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg", dwFileAttributes=0x80) returned 0 [0176.687] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\softblue.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.688] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.688] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.688] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.688] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.688] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm", dwFileAttributes=0x80) returned 0 [0176.688] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.689] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.689] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.689] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.689] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg", dwFileAttributes=0x80) returned 0 [0176.689] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.689] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.689] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.690] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.690] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stucco.gif", dwFileAttributes=0x80) returned 0 [0176.690] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stucco.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stucco.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.690] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.690] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.690] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.690] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Tanspecks.jpg", dwFileAttributes=0x80) returned 0 [0176.691] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Tanspecks.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\tanspecks.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.691] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.692] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.692] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.692] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Tiki.gif", dwFileAttributes=0x80) returned 0 [0176.692] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Tiki.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\tiki.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.692] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.692] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.693] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.693] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.693] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\To_Do_List.emf", dwFileAttributes=0x80) returned 0 [0176.693] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\To_Do_List.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\to_do_list.emf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.693] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.693] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.693] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.693] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\White_Chocolate.jpg", dwFileAttributes=0x80) returned 0 [0176.694] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\White_Chocolate.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\white_chocolate.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.694] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.694] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.694] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.694] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Wrinkled_Paper.gif", dwFileAttributes=0x80) returned 0 [0176.695] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Wrinkled_Paper.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\wrinkled_paper.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.695] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.695] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.695] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0176.695] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0176.696] SetLastError (dwErrCode=0x0) [0176.696] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.706] GetLastError () returned 0x5 [0176.706] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0176.706] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.706] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.706] SetLastError (dwErrCode=0x0) [0176.706] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.706] GetLastError () returned 0x5 [0176.706] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0176.706] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.706] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb4f20 [0176.706] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.706] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.706] SetLastError (dwErrCode=0x0) [0176.706] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.706] GetLastError () returned 0x5 [0176.706] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.707] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.707] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\en-US\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb45c0 [0176.707] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.707] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0176.707] FindClose (in: hFindFile=0x665abb45c0 | out: hFindFile=0x665abb45c0) returned 1 [0176.707] SetLastError (dwErrCode=0x0) [0176.707] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\en-US\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.707] GetLastError () returned 0x5 [0176.707] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.707] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.707] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0176.707] FindClose (in: hFindFile=0x665abb4f20 | out: hFindFile=0x665abb4f20) returned 1 [0176.707] SetLastError (dwErrCode=0x0) [0176.707] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.707] GetLastError () returned 0x5 [0176.708] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0176.708] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.708] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.708] SetLastError (dwErrCode=0x0) [0176.708] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.708] GetLastError () returned 0x5 [0176.708] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0176.708] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.708] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb5520 [0176.708] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.708] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.708] SetLastError (dwErrCode=0x0) [0176.708] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\triedit\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.708] GetLastError () returned 0x5 [0176.708] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.708] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.708] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\en-US\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb5280 [0176.709] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.709] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0176.709] FindClose (in: hFindFile=0x665abb5280 | out: hFindFile=0x665abb5280) returned 1 [0176.709] SetLastError (dwErrCode=0x0) [0176.709] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\en-US\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\triedit\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.709] GetLastError () returned 0x5 [0176.709] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.709] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.709] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0176.709] FindClose (in: hFindFile=0x665abb5520 | out: hFindFile=0x665abb5520) returned 1 [0176.709] SetLastError (dwErrCode=0x0) [0176.709] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\triedit\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.709] GetLastError () returned 0x5 [0176.709] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0176.709] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.709] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.709] SetLastError (dwErrCode=0x0) [0176.709] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.710] GetLastError () returned 0x5 [0176.710] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0176.710] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.710] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VC\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb55e0 [0176.710] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.710] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.710] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.710] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0176.710] FindClose (in: hFindFile=0x665abb55e0 | out: hFindFile=0x665abb55e0) returned 1 [0176.711] SetLastError (dwErrCode=0x0) [0176.711] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VC\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.711] GetLastError () returned 0x5 [0176.711] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0176.711] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.711] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.711] SetLastError (dwErrCode=0x0) [0176.711] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.711] GetLastError () returned 0x5 [0176.711] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0176.711] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.711] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VGX\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb4440 [0176.711] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.711] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.711] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0176.711] FindClose (in: hFindFile=0x665abb4440 | out: hFindFile=0x665abb4440) returned 1 [0176.711] SetLastError (dwErrCode=0x0) [0176.712] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VGX\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\vgx\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.712] GetLastError () returned 0x5 [0176.712] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0176.712] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.712] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.712] SetLastError (dwErrCode=0x0) [0176.712] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.712] GetLastError () returned 0x5 [0176.712] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0176.712] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.712] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb4920 [0176.712] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.712] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.712] SetLastError (dwErrCode=0x0) [0176.712] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.713] GetLastError () returned 0x5 [0176.713] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.713] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.713] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb56a0 [0176.715] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.715] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.715] SetLastError (dwErrCode=0x0) [0176.715] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.715] GetLastError () returned 0x5 [0176.715] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0176.715] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.715] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4f20 [0176.716] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0176.716] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0176.716] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0176.716] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0176.716] FindClose (in: hFindFile=0x665abb4f20 | out: hFindFile=0x665abb4f20) returned 1 [0176.716] SetLastError (dwErrCode=0x0) [0176.717] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.717] GetLastError () returned 0x5 [0176.717] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0176.717] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.717] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.717] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.717] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.717] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0176.717] FindClose (in: hFindFile=0x665abb56a0 | out: hFindFile=0x665abb56a0) returned 1 [0176.717] SetLastError (dwErrCode=0x0) [0176.717] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.717] GetLastError () returned 0x5 [0176.717] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.717] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.717] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.717] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.717] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb", dwFileAttributes=0x80) returned 0 [0176.718] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee100.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.719] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.719] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.719] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.719] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb", dwFileAttributes=0x80) returned 0 [0176.719] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee90.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.720] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.720] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.720] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0176.720] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0176.720] SetLastError (dwErrCode=0x0) [0176.720] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.720] GetLastError () returned 0x5 [0176.720] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0176.720] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.720] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0176.720] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0176.720] SetLastError (dwErrCode=0x0) [0176.720] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.721] GetLastError () returned 0x5 [0176.721] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0176.721] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.721] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.721] SetLastError (dwErrCode=0x0) [0176.721] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.721] GetLastError () returned 0x5 [0176.721] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0176.721] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.721] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Services\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665abb4920 [0176.721] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.721] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.721] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.722] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Services\\verisign.bmp", dwFileAttributes=0x80) returned 0 [0176.722] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.722] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.722] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.722] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0176.722] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0176.722] SetLastError (dwErrCode=0x0) [0176.722] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Services\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\services\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.722] GetLastError () returned 0x5 [0176.722] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0176.723] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.723] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.723] SetLastError (dwErrCode=0x0) [0176.723] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.723] GetLastError () returned 0x5 [0176.723] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0176.723] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.723] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665abb4c20 [0176.723] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.723] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.723] SetLastError (dwErrCode=0x0) [0176.723] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\system\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.723] GetLastError () returned 0x5 [0176.723] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0176.723] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.723] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb5160 [0176.725] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.725] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.725] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc", dwFileAttributes=0x80) returned 0 [0176.726] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adojavas.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.726] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.726] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.727] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.727] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.727] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\adovbs.inc", dwFileAttributes=0x80) returned 0 [0176.727] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\adovbs.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adovbs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.727] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.727] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.728] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.728] SetLastError (dwErrCode=0x0) [0176.728] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\system\\ado\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.728] GetLastError () returned 0x5 [0176.728] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.728] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.728] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\en-US\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb49e0 [0176.728] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.728] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.728] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0176.728] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0176.730] SetLastError (dwErrCode=0x0) [0176.730] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\en-US\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\system\\ado\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.730] GetLastError () returned 0x5 [0176.730] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.730] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.730] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.730] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.731] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.731] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb", dwFileAttributes=0x80) returned 0 [0176.731] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado20.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.732] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.732] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.732] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.732] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb", dwFileAttributes=0x80) returned 0 [0176.733] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado21.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.733] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.733] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.734] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.734] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado25.tlb", dwFileAttributes=0x80) returned 0 [0176.734] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado25.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado25.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.734] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.734] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.734] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.734] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb", dwFileAttributes=0x80) returned 0 [0176.735] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado26.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.735] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.735] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.735] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.735] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.736] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb", dwFileAttributes=0x80) returned 0 [0176.736] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado27.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.736] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.736] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.736] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.736] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.736] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb", dwFileAttributes=0x80) returned 0 [0176.737] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado28.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.737] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.737] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.737] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.737] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado60.tlb", dwFileAttributes=0x80) returned 0 [0176.738] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado60.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado60.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.738] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.738] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.738] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.738] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.738] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadomd28.tlb", dwFileAttributes=0x80) returned 0 [0176.739] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadomd28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd28.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.739] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.739] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.739] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.739] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.739] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msador28.tlb", dwFileAttributes=0x80) returned 0 [0176.740] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msador28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msador28.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.740] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.740] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.740] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.740] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.740] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadox28.tlb", dwFileAttributes=0x80) returned 0 [0176.741] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadox28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadox28.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.741] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.741] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.741] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.741] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0176.741] FindClose (in: hFindFile=0x665abb5160 | out: hFindFile=0x665abb5160) returned 1 [0176.741] SetLastError (dwErrCode=0x0) [0176.741] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\system\\ado\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.741] GetLastError () returned 0x5 [0176.741] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0176.741] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.742] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.742] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.742] SetLastError (dwErrCode=0x0) [0176.742] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\system\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.742] GetLastError () returned 0x5 [0176.742] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0176.742] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.742] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\en-US\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb5280 [0176.742] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.742] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.742] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0176.742] FindClose (in: hFindFile=0x665abb5280 | out: hFindFile=0x665abb5280) returned 1 [0176.742] SetLastError (dwErrCode=0x0) [0176.742] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\en-US\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\system\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.742] GetLastError () returned 0x5 [0176.742] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0176.742] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.742] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.742] SetLastError (dwErrCode=0x0) [0176.743] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\system\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.743] GetLastError () returned 0x5 [0176.743] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0176.743] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.743] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb5520 [0176.747] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.747] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.747] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.747] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc", dwFileAttributes=0x80) returned 0 [0176.748] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcjavas.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.748] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.748] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.748] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.748] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.748] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc", dwFileAttributes=0x80) returned 0 [0176.749] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcvbs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.749] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.749] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.749] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.749] SetLastError (dwErrCode=0x0) [0176.749] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\system\\msadc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.749] GetLastError () returned 0x5 [0176.749] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.749] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.749] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb5460 [0176.749] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.750] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.750] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.750] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.750] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.750] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.750] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0176.750] FindClose (in: hFindFile=0x665abb5460 | out: hFindFile=0x665abb5460) returned 1 [0176.750] SetLastError (dwErrCode=0x0) [0176.750] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.750] GetLastError () returned 0x5 [0176.750] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.750] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.750] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.750] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.750] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.750] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.750] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.750] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.750] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.750] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.750] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.750] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.750] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.750] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0176.750] FindClose (in: hFindFile=0x665abb5520 | out: hFindFile=0x665abb5520) returned 1 [0176.750] SetLastError (dwErrCode=0x0) [0176.751] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\system\\msadc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.751] GetLastError () returned 0x5 [0176.751] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0176.751] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.751] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.751] SetLastError (dwErrCode=0x0) [0176.751] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\system\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.751] GetLastError () returned 0x5 [0176.751] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0176.751] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.751] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb49e0 [0176.751] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.751] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.751] SetLastError (dwErrCode=0x0) [0176.751] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\system\\ole db\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.751] GetLastError () returned 0x5 [0176.751] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.751] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.752] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4a40 [0176.752] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.752] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.752] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.752] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.752] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.752] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqloledb.rll.mui", dwFileAttributes=0x80) returned 0 [0176.753] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqloledb.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqloledb.rll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.753] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.753] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.753] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.753] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqlxmlx.rll.mui", dwFileAttributes=0x80) returned 0 [0176.754] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqlxmlx.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqlxmlx.rll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.754] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.754] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.754] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0176.754] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0176.754] SetLastError (dwErrCode=0x0) [0176.754] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.754] GetLastError () returned 0x5 [0176.754] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.754] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.754] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.754] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.754] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.754] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.754] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.754] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.754] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.755] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.755] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.755] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.755] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc", dwFileAttributes=0x80) returned 0 [0176.755] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbjvs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.755] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.755] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.755] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.755] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.756] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc", dwFileAttributes=0x80) returned 0 [0176.756] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbvbs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.757] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.757] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.757] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.757] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.757] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.rll", dwFileAttributes=0x80) returned 0 [0176.757] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.rll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.758] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.758] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.758] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.758] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.758] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.rll", dwFileAttributes=0x80) returned 0 [0176.759] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.rll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.759] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.759] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.759] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0176.759] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0176.759] SetLastError (dwErrCode=0x0) [0176.759] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\system\\ole db\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.760] GetLastError () returned 0x5 [0176.760] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0176.760] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.760] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.760] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.760] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0176.760] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0176.760] SetLastError (dwErrCode=0x0) [0176.760] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\system\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.760] GetLastError () returned 0x5 [0176.760] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0176.760] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.760] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0176.760] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0176.760] SetLastError (dwErrCode=0x0) [0176.760] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.760] GetLastError () returned 0x5 [0176.760] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.760] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.760] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0176.761] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0176.761] SetLastError (dwErrCode=0x0) [0176.761] CreateFileW (lpFileName="C:\\Program Files\\RyukReadMe.txt" (normalized: "c:\\program files\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.761] GetLastError () returned 0x5 [0176.761] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.761] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.761] FindFirstFileW (in: lpFileName="C:\\Program Files\\Internet Explorer\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665abb4440 [0176.762] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.762] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.762] SetLastError (dwErrCode=0x0) [0176.762] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\RyukReadMe.txt" (normalized: "c:\\program files\\internet explorer\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.762] GetLastError () returned 0x5 [0176.762] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0176.762] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.762] FindFirstFileW (in: lpFileName="C:\\Program Files\\Internet Explorer\\en-US\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665abb42c0 [0176.763] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.763] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.763] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.763] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.763] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0176.763] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0176.763] SetLastError (dwErrCode=0x0) [0176.763] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\en-US\\RyukReadMe.txt" (normalized: "c:\\program files\\internet explorer\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.763] GetLastError () returned 0x5 [0176.763] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0176.763] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.763] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.763] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.763] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.763] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.763] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.763] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.763] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.764] SetLastError (dwErrCode=0x0) [0176.764] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\RyukReadMe.txt" (normalized: "c:\\program files\\internet explorer\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.764] GetLastError () returned 0x5 [0176.764] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0176.764] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.764] FindFirstFileW (in: lpFileName="C:\\Program Files\\Internet Explorer\\images\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665abb5460 [0176.764] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.764] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.764] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Internet Explorer\\images\\bing.ico", dwFileAttributes=0x80) returned 0 [0176.765] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\images\\bing.ico" (normalized: "c:\\program files\\internet explorer\\images\\bing.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.765] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.765] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.765] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0176.765] FindClose (in: hFindFile=0x665abb5460 | out: hFindFile=0x665abb5460) returned 1 [0176.766] SetLastError (dwErrCode=0x0) [0176.766] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\images\\RyukReadMe.txt" (normalized: "c:\\program files\\internet explorer\\images\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.766] GetLastError () returned 0x5 [0176.766] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0176.766] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.766] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.766] SetLastError (dwErrCode=0x0) [0176.766] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\RyukReadMe.txt" (normalized: "c:\\program files\\internet explorer\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.766] GetLastError () returned 0x5 [0176.766] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0176.766] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.766] FindFirstFileW (in: lpFileName="C:\\Program Files\\Internet Explorer\\SIGNUP\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665abb49e0 [0176.766] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.766] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.766] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins", dwFileAttributes=0x80) returned 0 [0176.767] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins" (normalized: "c:\\program files\\internet explorer\\signup\\install.ins"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.768] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.768] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.768] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0176.768] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0176.768] SetLastError (dwErrCode=0x0) [0176.768] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\SIGNUP\\RyukReadMe.txt" (normalized: "c:\\program files\\internet explorer\\signup\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.768] GetLastError () returned 0x5 [0176.768] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0176.768] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.768] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.768] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.768] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0176.768] FindClose (in: hFindFile=0x665abb4440 | out: hFindFile=0x665abb4440) returned 1 [0176.768] SetLastError (dwErrCode=0x0) [0176.768] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\RyukReadMe.txt" (normalized: "c:\\program files\\internet explorer\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.769] GetLastError () returned 0x5 [0176.769] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.769] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.769] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0176.769] SetLastError (dwErrCode=0x0) [0176.769] CreateFileW (lpFileName="C:\\Program Files\\RyukReadMe.txt" (normalized: "c:\\program files\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.769] GetLastError () returned 0x5 [0176.769] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.769] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.769] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665abb49e0 [0176.769] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.769] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.769] SetLastError (dwErrCode=0x0) [0176.769] CreateFileW (lpFileName="C:\\Program Files\\Java\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.769] GetLastError () returned 0x5 [0176.769] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0176.769] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.770] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665abb5280 [0176.770] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.770] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.770] SetLastError (dwErrCode=0x0) [0176.770] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.770] GetLastError () returned 0x5 [0176.770] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0176.770] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.770] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb5160 [0176.771] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.772] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.772] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.772] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.772] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.772] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.772] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.772] SetLastError (dwErrCode=0x0) [0176.772] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.772] GetLastError () returned 0x5 [0176.773] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.773] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.773] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\dtplugin\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4f20 [0176.773] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.773] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.773] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.773] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0176.773] FindClose (in: hFindFile=0x665abb4f20 | out: hFindFile=0x665abb4f20) returned 1 [0176.773] SetLastError (dwErrCode=0x0) [0176.773] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\dtplugin\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\bin\\dtplugin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.774] GetLastError () returned 0x5 [0176.774] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.774] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.774] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.774] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.774] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.774] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.774] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.774] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.774] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.774] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.774] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.774] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.774] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.774] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.774] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.774] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.774] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.774] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.774] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.774] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.774] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.774] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\javacpl.cpl", dwFileAttributes=0x80) returned 0 [0176.775] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\javacpl.cpl" (normalized: "c:\\program files\\java\\jre1.8.0_131\\bin\\javacpl.cpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.775] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.775] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.775] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.775] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.775] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.775] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.775] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.775] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.775] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.775] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.775] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.776] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.776] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.776] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.776] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.776] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.776] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.776] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.776] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.776] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.776] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.776] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.776] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.776] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.776] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.777] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.777] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.777] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.777] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.777] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.777] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.777] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.777] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.777] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.777] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.777] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.777] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.777] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.777] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.777] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.777] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.777] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.777] SetLastError (dwErrCode=0x0) [0176.777] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.777] GetLastError () returned 0x5 [0176.777] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.777] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.777] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\plugin2\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4c20 [0176.778] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.778] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.778] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.778] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0176.778] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0176.778] SetLastError (dwErrCode=0x0) [0176.778] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\plugin2\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\bin\\plugin2\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.778] GetLastError () returned 0x5 [0176.778] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.778] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.778] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.778] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.778] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.778] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.778] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.778] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.779] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.779] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.779] SetLastError (dwErrCode=0x0) [0176.779] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.779] GetLastError () returned 0x5 [0176.779] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.779] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.779] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\server\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4920 [0176.780] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.780] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.780] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\server\\classes.jsa", dwFileAttributes=0x80) returned 0 [0176.780] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\server\\classes.jsa" (normalized: "c:\\program files\\java\\jre1.8.0_131\\bin\\server\\classes.jsa"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.781] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.781] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.781] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.781] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.781] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\server\\Xusage.txt", dwFileAttributes=0x80) returned 0 [0176.782] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\server\\Xusage.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\bin\\server\\xusage.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.782] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.782] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.783] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0176.783] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0176.783] SetLastError (dwErrCode=0x0) [0176.783] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\server\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\bin\\server\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.783] GetLastError () returned 0x5 [0176.783] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.783] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.783] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.783] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.783] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.783] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.783] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.783] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.783] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.783] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.784] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.784] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.784] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.784] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.784] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.784] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.784] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.784] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0176.784] FindClose (in: hFindFile=0x665abb5160 | out: hFindFile=0x665abb5160) returned 1 [0176.784] SetLastError (dwErrCode=0x0) [0176.784] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.784] GetLastError () returned 0x5 [0176.784] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0176.784] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.784] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.785] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.785] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\COPYRIGHT", dwFileAttributes=0x80) returned 0 [0176.786] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\COPYRIGHT" (normalized: "c:\\program files\\java\\jre1.8.0_131\\copyright"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.786] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.786] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.786] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.786] SetLastError (dwErrCode=0x0) [0176.786] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.787] GetLastError () returned 0x5 [0176.787] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0176.787] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.787] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb5340 [0176.788] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.789] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.789] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.790] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\accessibility.properties", dwFileAttributes=0x80) returned 0 [0176.790] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\accessibility.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\accessibility.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.790] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.790] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.790] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.790] SetLastError (dwErrCode=0x0) [0176.790] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.791] GetLastError () returned 0x5 [0176.791] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.791] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.791] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\amd64\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb5460 [0176.791] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.791] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.791] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.791] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\amd64\\jvm.cfg", dwFileAttributes=0x80) returned 0 [0176.791] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\amd64\\jvm.cfg" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\amd64\\jvm.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.791] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.792] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.792] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0176.792] FindClose (in: hFindFile=0x665abb5460 | out: hFindFile=0x665abb5460) returned 1 [0176.792] SetLastError (dwErrCode=0x0) [0176.792] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\amd64\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\amd64\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.792] GetLastError () returned 0x5 [0176.792] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.792] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.792] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.792] SetLastError (dwErrCode=0x0) [0176.792] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.793] GetLastError () returned 0x5 [0176.793] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.793] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.793] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\applet\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb55e0 [0176.793] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.793] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0176.793] FindClose (in: hFindFile=0x665abb55e0 | out: hFindFile=0x665abb55e0) returned 1 [0176.793] SetLastError (dwErrCode=0x0) [0176.793] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\applet\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\applet\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.794] GetLastError () returned 0x5 [0176.794] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.794] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.794] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.794] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.794] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\calendars.properties", dwFileAttributes=0x80) returned 0 [0176.794] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\calendars.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\calendars.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.794] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.794] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.795] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.795] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\charsets.jar", dwFileAttributes=0x80) returned 0 [0176.795] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\charsets.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\charsets.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.795] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.795] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.795] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.795] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\classlist", dwFileAttributes=0x80) returned 0 [0176.796] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\classlist" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\classlist"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.796] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.796] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.796] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.796] SetLastError (dwErrCode=0x0) [0176.796] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.797] GetLastError () returned 0x5 [0176.797] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.797] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.797] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\cmm\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4c20 [0176.797] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.797] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.797] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.797] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\cmm\\CIEXYZ.pf", dwFileAttributes=0x80) returned 0 [0176.798] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\cmm\\CIEXYZ.pf" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\cmm\\ciexyz.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.798] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.798] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.798] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.798] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.799] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\cmm\\GRAY.pf", dwFileAttributes=0x80) returned 0 [0176.799] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\cmm\\GRAY.pf" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\cmm\\gray.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.799] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.799] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.800] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.800] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.800] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\cmm\\LINEAR_RGB.pf", dwFileAttributes=0x80) returned 0 [0176.800] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\cmm\\LINEAR_RGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\cmm\\linear_rgb.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.800] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.800] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.800] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.800] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\cmm\\PYCC.pf", dwFileAttributes=0x80) returned 0 [0176.801] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\cmm\\PYCC.pf" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\cmm\\pycc.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.801] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.801] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.801] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.801] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\cmm\\sRGB.pf", dwFileAttributes=0x80) returned 0 [0176.802] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\cmm\\sRGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\cmm\\srgb.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.802] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.802] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.803] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0176.803] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0176.803] SetLastError (dwErrCode=0x0) [0176.803] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\cmm\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\cmm\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.803] GetLastError () returned 0x5 [0176.803] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.803] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.803] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.803] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\content-types.properties", dwFileAttributes=0x80) returned 0 [0176.803] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\content-types.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\content-types.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.804] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.804] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.804] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.804] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.804] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\currency.data", dwFileAttributes=0x80) returned 0 [0176.804] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\currency.data" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\currency.data"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.804] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.804] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.805] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.805] SetLastError (dwErrCode=0x0) [0176.805] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.805] GetLastError () returned 0x5 [0176.805] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.805] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.805] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4920 [0176.806] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.806] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.806] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.807] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\ffjcext.zip", dwFileAttributes=0x80) returned 0 [0176.807] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\deploy\\ffjcext.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.807] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.807] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.808] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.808] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages.properties", dwFileAttributes=0x80) returned 0 [0176.808] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\deploy\\messages.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.808] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.808] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.808] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.808] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.809] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_de.properties", dwFileAttributes=0x80) returned 0 [0176.809] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_de.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\deploy\\messages_de.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.809] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.809] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.809] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.809] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.810] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_es.properties", dwFileAttributes=0x80) returned 0 [0176.810] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_es.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\deploy\\messages_es.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.810] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.810] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.810] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.810] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.811] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_fr.properties", dwFileAttributes=0x80) returned 0 [0176.811] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_fr.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\deploy\\messages_fr.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.812] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.812] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.812] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.812] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.812] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_it.properties", dwFileAttributes=0x80) returned 0 [0176.812] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_it.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\deploy\\messages_it.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.812] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.812] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.813] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.813] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.813] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_ja.properties", dwFileAttributes=0x80) returned 0 [0176.813] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_ja.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\deploy\\messages_ja.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.813] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.813] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.813] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.813] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_ko.properties", dwFileAttributes=0x80) returned 0 [0176.814] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_ko.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\deploy\\messages_ko.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.814] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.814] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.814] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.814] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_pt_BR.properties", dwFileAttributes=0x80) returned 0 [0176.815] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_pt_BR.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\deploy\\messages_pt_br.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.815] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.815] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.816] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.816] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_sv.properties", dwFileAttributes=0x80) returned 0 [0176.816] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_sv.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\deploy\\messages_sv.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.816] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.816] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.816] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.816] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_zh_CN.properties", dwFileAttributes=0x80) returned 0 [0176.817] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_zh_CN.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\deploy\\messages_zh_cn.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.817] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.817] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.817] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.817] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_zh_HK.properties", dwFileAttributes=0x80) returned 0 [0176.818] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_zh_HK.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\deploy\\messages_zh_hk.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.818] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.818] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.818] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.818] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.818] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_zh_TW.properties", dwFileAttributes=0x80) returned 0 [0176.819] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_zh_TW.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\deploy\\messages_zh_tw.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.819] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.819] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.819] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.819] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.820] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\splash.gif", dwFileAttributes=0x80) returned 0 [0176.820] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\splash.gif" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\deploy\\splash.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.820] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.820] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.820] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.820] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.820] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\splash@2x.gif", dwFileAttributes=0x80) returned 0 [0176.821] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\splash@2x.gif" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\deploy\\splash@2x.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.821] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.821] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.821] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.821] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\splash_11-lic.gif", dwFileAttributes=0x80) returned 0 [0176.822] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\splash_11-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\deploy\\splash_11-lic.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.822] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.822] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.822] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.822] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.822] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\splash_11@2x-lic.gif", dwFileAttributes=0x80) returned 0 [0176.823] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\splash_11@2x-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\deploy\\splash_11@2x-lic.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.823] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.823] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.823] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0176.823] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0176.824] SetLastError (dwErrCode=0x0) [0176.824] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\deploy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.827] GetLastError () returned 0x5 [0176.827] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.827] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.827] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.827] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.827] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy.jar", dwFileAttributes=0x80) returned 0 [0176.828] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\deploy.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.828] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.828] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.828] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.828] SetLastError (dwErrCode=0x0) [0176.828] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.828] GetLastError () returned 0x5 [0176.828] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.829] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.829] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb42c0 [0176.830] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.830] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.830] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\access-bridge-64.jar", dwFileAttributes=0x80) returned 0 [0176.830] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\access-bridge-64.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ext\\access-bridge-64.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.830] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.830] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.831] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.831] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\cldrdata.jar", dwFileAttributes=0x80) returned 0 [0176.831] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\cldrdata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ext\\cldrdata.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.831] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.831] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.831] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.831] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\dnsns.jar", dwFileAttributes=0x80) returned 0 [0176.832] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ext\\dnsns.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.833] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.833] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.833] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.833] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\jaccess.jar", dwFileAttributes=0x80) returned 0 [0176.833] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ext\\jaccess.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.833] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.833] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.834] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.834] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\jfxrt.jar", dwFileAttributes=0x80) returned 0 [0176.834] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\jfxrt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ext\\jfxrt.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.834] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.834] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.834] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.834] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\localedata.jar", dwFileAttributes=0x80) returned 0 [0176.835] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\localedata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ext\\localedata.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.835] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.835] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.835] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.835] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\meta-index", dwFileAttributes=0x80) returned 0 [0176.836] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ext\\meta-index"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.836] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.836] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.836] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.836] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\nashorn.jar", dwFileAttributes=0x80) returned 0 [0176.837] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\nashorn.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ext\\nashorn.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.837] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.837] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.837] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.837] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\sunec.jar", dwFileAttributes=0x80) returned 0 [0176.838] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\sunec.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ext\\sunec.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.838] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.838] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.838] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.838] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\sunjce_provider.jar", dwFileAttributes=0x80) returned 0 [0176.839] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ext\\sunjce_provider.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.839] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.839] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.839] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.839] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\sunmscapi.jar", dwFileAttributes=0x80) returned 0 [0176.840] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ext\\sunmscapi.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.840] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.840] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.840] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.840] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\sunpkcs11.jar", dwFileAttributes=0x80) returned 0 [0176.841] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ext\\sunpkcs11.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.842] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.842] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.842] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.842] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\zipfs.jar", dwFileAttributes=0x80) returned 0 [0176.842] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ext\\zipfs.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.842] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.842] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.843] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0176.843] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0176.843] SetLastError (dwErrCode=0x0) [0176.843] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ext\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.846] GetLastError () returned 0x5 [0176.846] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.846] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.846] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.846] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.846] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\flavormap.properties", dwFileAttributes=0x80) returned 0 [0176.847] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\flavormap.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\flavormap.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.847] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.847] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.847] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.847] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fontconfig.bfc", dwFileAttributes=0x80) returned 0 [0176.847] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fontconfig.bfc" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\fontconfig.bfc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.848] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.848] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.848] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.848] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fontconfig.properties.src", dwFileAttributes=0x80) returned 0 [0176.849] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fontconfig.properties.src" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\fontconfig.properties.src"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.849] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.849] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.849] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.849] SetLastError (dwErrCode=0x0) [0176.850] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.850] GetLastError () returned 0x5 [0176.850] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.850] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.850] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fonts\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb56a0 [0176.851] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.851] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.851] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fonts\\LucidaBrightDemiBold.ttf", dwFileAttributes=0x80) returned 0 [0176.852] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fonts\\LucidaBrightDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\fonts\\lucidabrightdemibold.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.852] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.852] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.852] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.852] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fonts\\LucidaBrightDemiItalic.ttf", dwFileAttributes=0x80) returned 0 [0176.852] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fonts\\LucidaBrightDemiItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\fonts\\lucidabrightdemiitalic.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.853] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.853] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.853] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.853] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fonts\\LucidaBrightItalic.ttf", dwFileAttributes=0x80) returned 0 [0176.854] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fonts\\LucidaBrightItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\fonts\\lucidabrightitalic.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.854] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.854] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.854] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.854] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fonts\\LucidaBrightRegular.ttf", dwFileAttributes=0x80) returned 0 [0176.855] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fonts\\LucidaBrightRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\fonts\\lucidabrightregular.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.855] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.855] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.855] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.855] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fonts\\LucidaSansDemiBold.ttf", dwFileAttributes=0x80) returned 0 [0176.855] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fonts\\LucidaSansDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\fonts\\lucidasansdemibold.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.856] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.856] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.856] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.856] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.856] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fonts\\LucidaSansRegular.ttf", dwFileAttributes=0x80) returned 0 [0176.856] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fonts\\LucidaSansRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\fonts\\lucidasansregular.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.856] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.857] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.857] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.857] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fonts\\LucidaTypewriterBold.ttf", dwFileAttributes=0x80) returned 0 [0176.858] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fonts\\LucidaTypewriterBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\fonts\\lucidatypewriterbold.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.858] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.858] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.858] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.858] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fonts\\LucidaTypewriterRegular.ttf", dwFileAttributes=0x80) returned 0 [0176.858] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fonts\\LucidaTypewriterRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\fonts\\lucidatypewriterregular.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.859] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.859] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.859] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0176.859] FindClose (in: hFindFile=0x665abb56a0 | out: hFindFile=0x665abb56a0) returned 1 [0176.859] SetLastError (dwErrCode=0x0) [0176.860] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fonts\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\fonts\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.862] GetLastError () returned 0x5 [0176.862] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.862] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.862] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.862] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\hijrah-config-umalqura.properties", dwFileAttributes=0x80) returned 0 [0176.863] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\hijrah-config-umalqura.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\hijrah-config-umalqura.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.863] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.863] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.863] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.863] SetLastError (dwErrCode=0x0) [0176.863] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.863] GetLastError () returned 0x5 [0176.863] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.863] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.864] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4f20 [0176.864] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.864] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.864] SetLastError (dwErrCode=0x0) [0176.864] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\images\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.864] GetLastError () returned 0x5 [0176.864] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0176.864] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.864] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4c20 [0176.866] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0176.866] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0176.866] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.866] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\cursors.properties", dwFileAttributes=0x80) returned 0 [0176.867] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\cursors.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\images\\cursors\\cursors.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.867] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.867] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.867] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0176.867] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\invalid32x32.gif", dwFileAttributes=0x80) returned 0 [0176.868] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\images\\cursors\\invalid32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.868] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.868] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.868] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0176.868] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.868] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\win32_CopyDrop32x32.gif", dwFileAttributes=0x80) returned 0 [0176.868] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\images\\cursors\\win32_copydrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.869] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.869] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.869] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0176.869] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif", dwFileAttributes=0x80) returned 0 [0176.870] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\images\\cursors\\win32_copynodrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.870] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.870] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.870] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0176.870] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.871] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\win32_LinkDrop32x32.gif", dwFileAttributes=0x80) returned 0 [0176.871] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\images\\cursors\\win32_linkdrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.871] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.871] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.871] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0176.871] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif", dwFileAttributes=0x80) returned 0 [0176.872] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\images\\cursors\\win32_linknodrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.872] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.872] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.872] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0176.872] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\win32_MoveDrop32x32.gif", dwFileAttributes=0x80) returned 0 [0176.873] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\images\\cursors\\win32_movedrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.873] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.873] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.873] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0176.873] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif", dwFileAttributes=0x80) returned 0 [0176.875] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\images\\cursors\\win32_movenodrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.876] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.876] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.876] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0176.876] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0176.877] SetLastError (dwErrCode=0x0) [0176.877] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\images\\cursors\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.879] GetLastError () returned 0x5 [0176.879] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0176.879] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.879] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0176.879] FindClose (in: hFindFile=0x665abb4f20 | out: hFindFile=0x665abb4f20) returned 1 [0176.879] SetLastError (dwErrCode=0x0) [0176.880] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\images\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.880] GetLastError () returned 0x5 [0176.880] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.880] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.880] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.880] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.880] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\javafx.properties", dwFileAttributes=0x80) returned 0 [0176.880] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\javafx.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\javafx.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.881] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.881] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.881] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.881] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.881] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\javaws.jar", dwFileAttributes=0x80) returned 0 [0176.881] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\javaws.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\javaws.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.881] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.882] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.882] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.882] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\jce.jar", dwFileAttributes=0x80) returned 0 [0176.882] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\jce.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\jce.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.882] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.882] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.883] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.883] SetLastError (dwErrCode=0x0) [0176.883] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.883] GetLastError () returned 0x5 [0176.883] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.883] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.883] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\jfr\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4a40 [0176.883] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.883] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.883] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\jfr\\default.jfc", dwFileAttributes=0x80) returned 0 [0176.884] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\jfr\\default.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\jfr\\default.jfc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.884] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.884] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.884] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.884] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\jfr\\profile.jfc", dwFileAttributes=0x80) returned 0 [0176.885] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\jfr\\profile.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\jfr\\profile.jfc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.885] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.885] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.885] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0176.885] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0176.885] SetLastError (dwErrCode=0x0) [0176.885] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\jfr\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\jfr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.886] GetLastError () returned 0x5 [0176.886] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.886] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.886] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.886] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\jfr.jar", dwFileAttributes=0x80) returned 0 [0176.886] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\jfr.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.887] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.887] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.887] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.887] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\jfxswt.jar", dwFileAttributes=0x80) returned 0 [0176.887] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\jfxswt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\jfxswt.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.887] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.887] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.888] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.888] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.888] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\jsse.jar", dwFileAttributes=0x80) returned 0 [0176.889] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\jsse.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.889] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.889] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.889] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.889] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\jvm.hprof.txt", dwFileAttributes=0x80) returned 0 [0176.890] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\jvm.hprof.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\jvm.hprof.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.890] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.890] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.890] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.890] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\logging.properties", dwFileAttributes=0x80) returned 0 [0176.891] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\logging.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\logging.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.891] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.891] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.891] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.891] SetLastError (dwErrCode=0x0) [0176.891] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.891] GetLastError () returned 0x5 [0176.891] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.891] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.891] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\management\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb42c0 [0176.893] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.893] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.893] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\management\\jmxremote.access", dwFileAttributes=0x80) returned 0 [0176.893] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\management\\jmxremote.access" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\management\\jmxremote.access"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.893] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.893] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.894] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.894] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\management\\jmxremote.password.template", dwFileAttributes=0x80) returned 0 [0176.895] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\management\\jmxremote.password.template" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\management\\jmxremote.password.template"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.895] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.895] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.895] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.895] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\management\\management.properties", dwFileAttributes=0x80) returned 0 [0176.895] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\management\\management.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\management\\management.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.896] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.896] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.896] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.896] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\management\\snmp.acl.template", dwFileAttributes=0x80) returned 0 [0176.896] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\management\\snmp.acl.template" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\management\\snmp.acl.template"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.897] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.897] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.897] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0176.897] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0176.897] SetLastError (dwErrCode=0x0) [0176.897] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\management\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\management\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.900] GetLastError () returned 0x5 [0176.900] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.900] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.900] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.900] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\management-agent.jar", dwFileAttributes=0x80) returned 0 [0176.901] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\management-agent.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\management-agent.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.901] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.901] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.901] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.901] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\meta-index", dwFileAttributes=0x80) returned 0 [0176.909] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\meta-index"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.910] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.910] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.910] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.910] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.910] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\net.properties", dwFileAttributes=0x80) returned 0 [0176.910] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\net.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\net.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.911] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.911] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.911] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.911] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.911] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\plugin.jar", dwFileAttributes=0x80) returned 0 [0176.911] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\plugin.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\plugin.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.911] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.912] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.912] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.912] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.912] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\psfont.properties.ja", dwFileAttributes=0x80) returned 0 [0176.912] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\psfont.properties.ja" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\psfont.properties.ja"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.912] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.912] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.913] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.913] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.913] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\psfontj2d.properties", dwFileAttributes=0x80) returned 0 [0176.913] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\psfontj2d.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\psfontj2d.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.913] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.913] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.913] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.913] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.914] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\resources.jar", dwFileAttributes=0x80) returned 0 [0176.916] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\resources.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\resources.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.916] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.916] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.916] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.916] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.916] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\rt.jar", dwFileAttributes=0x80) returned 0 [0176.916] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\rt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\rt.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.917] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.917] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.917] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.917] SetLastError (dwErrCode=0x0) [0176.917] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.917] GetLastError () returned 0x5 [0176.917] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.917] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.917] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb5460 [0176.920] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.921] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.921] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.921] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\blacklist", dwFileAttributes=0x80) returned 0 [0176.921] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\blacklist" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\security\\blacklist"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.921] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.921] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.921] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.921] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.922] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\blacklisted.certs", dwFileAttributes=0x80) returned 0 [0176.922] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\blacklisted.certs" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\security\\blacklisted.certs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.922] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.922] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.922] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.922] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.923] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\cacerts", dwFileAttributes=0x80) returned 0 [0176.924] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\cacerts" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\security\\cacerts"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.924] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.924] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.925] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.925] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.925] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\java.policy", dwFileAttributes=0x80) returned 0 [0176.925] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\java.policy" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\security\\java.policy"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.925] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.925] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.925] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.925] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.926] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\java.security", dwFileAttributes=0x80) returned 0 [0176.926] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\java.security" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\security\\java.security"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.926] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.926] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.926] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.926] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.927] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\javaws.policy", dwFileAttributes=0x80) returned 0 [0176.927] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\javaws.policy" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\security\\javaws.policy"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.927] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.927] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.927] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.927] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.927] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\local_policy.jar", dwFileAttributes=0x80) returned 0 [0176.931] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\local_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\security\\local_policy.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.931] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.932] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.932] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.932] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.932] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\trusted.libraries", dwFileAttributes=0x80) returned 0 [0176.932] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\trusted.libraries" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\security\\trusted.libraries"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.932] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.932] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.933] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0176.933] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.933] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\US_export_policy.jar", dwFileAttributes=0x80) returned 0 [0176.933] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\US_export_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\security\\us_export_policy.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.934] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.934] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.934] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0176.934] FindClose (in: hFindFile=0x665abb5460 | out: hFindFile=0x665abb5460) returned 1 [0176.934] SetLastError (dwErrCode=0x0) [0176.934] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\security\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.937] GetLastError () returned 0x5 [0176.937] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0176.937] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.937] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.937] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.937] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\sound.properties", dwFileAttributes=0x80) returned 0 [0176.938] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\sound.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\sound.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.938] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.938] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.938] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.938] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.938] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\tzdb.dat", dwFileAttributes=0x80) returned 0 [0176.939] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\tzdb.dat" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\tzdb.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.939] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.939] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.939] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0176.939] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.940] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\tzmappings", dwFileAttributes=0x80) returned 0 [0176.940] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\tzmappings" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\tzmappings"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.940] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.940] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.940] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0176.940] FindClose (in: hFindFile=0x665abb5340 | out: hFindFile=0x665abb5340) returned 1 [0176.940] SetLastError (dwErrCode=0x0) [0176.940] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.941] GetLastError () returned 0x5 [0176.941] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0176.941] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.941] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.941] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.941] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\LICENSE", dwFileAttributes=0x80) returned 0 [0176.942] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\LICENSE" (normalized: "c:\\program files\\java\\jre1.8.0_131\\license"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.942] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.942] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.942] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.942] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.942] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\README.txt", dwFileAttributes=0x80) returned 0 [0176.942] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\README.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\readme.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.943] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.943] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.943] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.943] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.943] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\release", dwFileAttributes=0x80) returned 0 [0176.943] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\release" (normalized: "c:\\program files\\java\\jre1.8.0_131\\release"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.943] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.944] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.944] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.944] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.944] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\THIRDPARTYLICENSEREADME-JAVAFX.txt", dwFileAttributes=0x80) returned 0 [0176.944] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\thirdpartylicensereadme-javafx.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.944] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.944] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.945] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.945] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.945] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\THIRDPARTYLICENSEREADME.txt", dwFileAttributes=0x80) returned 0 [0176.945] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\thirdpartylicensereadme.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.945] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.945] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.945] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.945] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\Welcome.html", dwFileAttributes=0x80) returned 0 [0176.946] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\Welcome.html" (normalized: "c:\\program files\\java\\jre1.8.0_131\\welcome.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.946] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.946] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.946] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0176.946] FindClose (in: hFindFile=0x665abb5280 | out: hFindFile=0x665abb5280) returned 1 [0176.946] SetLastError (dwErrCode=0x0) [0176.946] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.947] GetLastError () returned 0x5 [0176.947] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0176.947] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.947] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0176.947] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0176.947] SetLastError (dwErrCode=0x0) [0176.947] CreateFileW (lpFileName="C:\\Program Files\\Java\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.947] GetLastError () returned 0x5 [0176.947] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.947] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.947] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0176.947] SetLastError (dwErrCode=0x0) [0176.947] CreateFileW (lpFileName="C:\\Program Files\\RyukReadMe.txt" (normalized: "c:\\program files\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.947] GetLastError () returned 0x5 [0176.947] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0176.947] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.947] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665abb5280 [0176.948] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.948] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.948] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.948] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\AppXManifest.xml", dwFileAttributes=0x80) returned 0 [0176.948] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\AppXManifest.xml" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.948] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.948] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.949] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.949] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml", dwFileAttributes=0x80) returned 0 [0176.949] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.949] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.949] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.950] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.950] SetLastError (dwErrCode=0x0) [0176.950] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.950] GetLastError () returned 0x5 [0176.950] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0176.950] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.950] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665abb4920 [0176.950] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.950] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.950] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.950] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM", dwFileAttributes=0x80) returned 0 [0176.950] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.951] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.951] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.951] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.951] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.951] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS", dwFileAttributes=0x80) returned 0 [0176.952] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.952] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.952] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.952] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.952] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.952] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.953] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML", dwFileAttributes=0x80) returned 0 [0176.953] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.953] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.954] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.954] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0176.954] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0176.954] SetLastError (dwErrCode=0x0) [0176.954] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.954] GetLastError () returned 0x5 [0176.954] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0176.954] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.954] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0176.954] SetLastError (dwErrCode=0x0) [0176.954] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.954] GetLastError () returned 0x5 [0176.954] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0176.954] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.954] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665abb4920 [0176.957] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.958] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.958] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.958] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0176.959] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.959] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.959] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.959] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.960] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.960] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0176.960] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.960] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.960] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.960] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.960] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.961] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0176.961] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.961] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.962] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.962] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.962] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0176.963] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.963] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.963] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.963] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.963] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.963] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0176.963] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.964] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.964] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.964] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.964] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.964] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0176.965] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.965] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.965] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.965] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.965] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0176.966] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.966] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.966] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.966] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.966] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.967] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0176.967] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.967] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.967] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.967] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.967] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.968] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0176.968] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.968] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.968] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.968] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.968] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.969] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0176.969] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.969] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.969] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.970] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.970] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0176.970] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.970] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.970] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.971] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.971] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.971] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0176.971] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.971] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.971] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.972] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.972] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.972] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0176.972] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.973] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.973] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.973] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.973] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0176.974] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.974] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.974] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.974] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.974] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0176.975] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.975] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.975] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.975] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.975] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0176.976] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.976] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.976] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.976] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.976] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0176.976] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.977] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.977] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.977] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.977] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0176.977] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.978] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.978] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.978] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.978] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0176.979] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.979] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.979] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.979] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.979] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.980] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0176.980] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.980] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.980] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.980] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.980] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.981] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0176.981] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.981] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.981] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.981] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.981] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.982] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0176.982] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.982] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.982] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.983] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.983] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0176.983] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.983] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.983] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.984] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.984] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.984] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0176.985] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.985] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.985] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.985] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.985] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.985] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0176.986] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.986] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.986] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.986] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.986] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.986] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0176.987] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.987] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.987] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.987] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.987] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0176.987] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.988] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.988] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.988] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.988] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0176.988] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.989] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.989] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.989] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.989] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.989] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0176.990] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.990] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.990] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.990] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.990] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0176.991] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.991] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.991] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.991] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.991] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0176.993] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.993] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.993] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.993] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.993] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.993] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0176.994] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.994] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.994] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.994] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.994] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.994] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0176.994] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.995] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.995] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.995] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.995] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.995] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0176.996] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.996] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.996] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.996] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.996] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0176.997] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.997] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.998] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.998] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.998] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.998] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0176.998] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.998] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.998] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.999] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.999] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0176.999] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0176.999] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.999] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0176.999] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.999] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0176.999] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.000] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0177.000] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.000] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.000] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.000] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0177.000] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.001] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.16.xml", dwFileAttributes=0x80) returned 0 [0177.001] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.16.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.16.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.001] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.001] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.001] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0177.001] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.001] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0177.002] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.002] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.002] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.002] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0177.002] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.16.xml", dwFileAttributes=0x80) returned 0 [0177.006] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.16.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.16.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.006] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.006] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.006] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0177.006] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0177.007] SetLastError (dwErrCode=0x0) [0177.007] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.010] GetLastError () returned 0x5 [0177.010] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0177.010] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.010] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0177.010] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0177.010] SetLastError (dwErrCode=0x0) [0177.010] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.010] GetLastError () returned 0x5 [0177.010] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0177.010] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.010] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665abb5340 [0177.010] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0177.010] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0177.010] SetLastError (dwErrCode=0x0) [0177.010] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.011] GetLastError () returned 0x5 [0177.011] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0177.011] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.011] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb42c0 [0177.013] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0177.013] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0177.013] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0177.013] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0177.013] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0177.014] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0177.014] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0177.014] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0177.014] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0177.014] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0177.014] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0177.014] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0177.014] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0177.014] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0177.014] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0177.014] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0177.014] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0177.014] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0177.014] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0177.014] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0177.014] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0177.014] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0177.014] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0177.014] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0177.014] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0177.014] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0177.014] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0177.014] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0177.014] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0177.014] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0177.014] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0177.014] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0177.014] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0177.014] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0177.014] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0177.014] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0177.014] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0177.014] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0177.014] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0177.014] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0177.014] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0177.015] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0177.015] SetLastError (dwErrCode=0x0) [0177.015] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\client\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.018] GetLastError () returned 0x5 [0177.018] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0177.018] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.018] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0177.018] SetLastError (dwErrCode=0x0) [0177.018] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.018] GetLastError () returned 0x5 [0177.018] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0177.018] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.018] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb4920 [0177.021] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0177.021] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0177.021] SetLastError (dwErrCode=0x0) [0177.021] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.021] GetLastError () returned 0x5 [0177.021] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0177.021] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.021] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb56a0 [0177.026] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.027] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.027] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.027] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF", dwFileAttributes=0x80) returned 0 [0177.028] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00004_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.028] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.028] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.028] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.028] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.028] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF", dwFileAttributes=0x80) returned 0 [0177.029] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00011_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.029] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.029] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.030] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.030] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.030] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF", dwFileAttributes=0x80) returned 0 [0177.030] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00021_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.030] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.030] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.030] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.030] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.031] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF", dwFileAttributes=0x80) returned 0 [0177.031] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00037_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.031] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.031] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.031] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.031] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.032] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF", dwFileAttributes=0x80) returned 0 [0177.032] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00038_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.032] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.032] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.033] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.033] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF", dwFileAttributes=0x80) returned 0 [0177.033] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.033] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.033] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.034] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.034] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.034] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF", dwFileAttributes=0x80) returned 0 [0177.034] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.034] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.034] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.034] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.034] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.035] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF", dwFileAttributes=0x80) returned 0 [0177.035] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.035] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.035] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.035] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.035] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.035] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF", dwFileAttributes=0x80) returned 0 [0177.036] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00090_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.036] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.036] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.037] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.037] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.037] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF", dwFileAttributes=0x80) returned 0 [0177.037] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00092_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.037] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.037] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.037] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.037] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.038] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF", dwFileAttributes=0x80) returned 0 [0177.038] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.038] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.038] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.038] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.038] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.039] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF", dwFileAttributes=0x80) returned 0 [0177.039] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00120_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.039] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.039] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.039] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.039] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.039] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF", dwFileAttributes=0x80) returned 0 [0177.040] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00126_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.040] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.040] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.040] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.040] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.040] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF", dwFileAttributes=0x80) returned 0 [0177.041] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.041] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.041] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.041] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.041] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.042] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF", dwFileAttributes=0x80) returned 0 [0177.042] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.043] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.043] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.043] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.043] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.043] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF", dwFileAttributes=0x80) returned 0 [0177.043] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00135_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.043] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.043] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.044] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.044] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.044] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF", dwFileAttributes=0x80) returned 0 [0177.045] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.045] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.045] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.045] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.045] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.045] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF", dwFileAttributes=0x80) returned 0 [0177.045] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.046] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.046] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.046] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.046] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.046] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF", dwFileAttributes=0x80) returned 0 [0177.046] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.046] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.046] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.047] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.047] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.047] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF", dwFileAttributes=0x80) returned 0 [0177.047] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.047] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.047] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.048] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.048] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.048] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF", dwFileAttributes=0x80) returned 0 [0177.048] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.048] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.048] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.048] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.048] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.049] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF", dwFileAttributes=0x80) returned 0 [0177.049] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00160_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.049] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.049] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.049] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.049] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.049] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF", dwFileAttributes=0x80) returned 0 [0177.050] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00161_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.050] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.050] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.050] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.050] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.050] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF", dwFileAttributes=0x80) returned 0 [0177.051] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00163_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.051] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.051] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.051] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.051] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.052] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF", dwFileAttributes=0x80) returned 0 [0177.052] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00164_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.052] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.052] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.053] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.053] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.053] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF", dwFileAttributes=0x80) returned 0 [0177.053] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00165_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.053] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.053] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.054] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.054] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.054] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF", dwFileAttributes=0x80) returned 0 [0177.054] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00167_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.054] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.054] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.054] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.054] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.055] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF", dwFileAttributes=0x80) returned 0 [0177.055] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00169_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.055] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.055] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.055] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.055] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.055] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF", dwFileAttributes=0x80) returned 0 [0177.056] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00170_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.056] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.056] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.056] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.056] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.056] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF", dwFileAttributes=0x80) returned 0 [0177.057] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00171_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.057] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.057] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.057] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.057] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.057] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF", dwFileAttributes=0x80) returned 0 [0177.057] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00172_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.058] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.058] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.058] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.058] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.058] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF", dwFileAttributes=0x80) returned 0 [0177.058] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00174_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.059] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.059] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.059] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.059] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.059] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF", dwFileAttributes=0x80) returned 0 [0177.059] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00175_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.059] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.059] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.060] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.061] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.061] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF", dwFileAttributes=0x80) returned 0 [0177.062] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00176_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.062] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.062] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.062] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.062] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.063] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF", dwFileAttributes=0x80) returned 0 [0177.063] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00010_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.063] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.063] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.063] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.063] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.064] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF", dwFileAttributes=0x80) returned 0 [0177.066] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00015_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.066] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.066] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.067] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.067] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.067] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF", dwFileAttributes=0x80) returned 0 [0177.068] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00790_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.068] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.068] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.068] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.068] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.068] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF", dwFileAttributes=0x80) returned 0 [0177.069] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00853_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.069] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.069] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.069] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.069] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.070] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF", dwFileAttributes=0x80) returned 0 [0177.072] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00914_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.072] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.072] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.072] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.072] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.073] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF", dwFileAttributes=0x80) returned 0 [0177.073] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00932_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.073] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.073] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.073] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.073] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.074] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF", dwFileAttributes=0x80) returned 0 [0177.074] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00965_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.074] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.074] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.074] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.074] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.075] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF", dwFileAttributes=0x80) returned 0 [0177.075] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01039_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.075] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.075] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.075] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.075] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.075] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF", dwFileAttributes=0x80) returned 0 [0177.076] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01044_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.076] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.076] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.076] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.076] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.076] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF", dwFileAttributes=0x80) returned 0 [0177.077] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01060_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.077] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.077] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.078] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.078] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.078] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF", dwFileAttributes=0x80) returned 0 [0177.078] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01084_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.079] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.079] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.079] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.079] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.079] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF", dwFileAttributes=0x80) returned 0 [0177.080] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01173_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.080] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.080] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.080] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.080] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.080] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF", dwFileAttributes=0x80) returned 0 [0177.081] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01174_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.081] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.081] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.082] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.082] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.082] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF", dwFileAttributes=0x80) returned 0 [0177.082] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01184_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.082] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.082] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.083] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.083] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.083] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF", dwFileAttributes=0x80) returned 0 [0177.083] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01216_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.083] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.083] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.083] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.083] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.084] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF", dwFileAttributes=0x80) returned 0 [0177.084] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01218_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.084] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.084] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.084] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.084] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.085] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF", dwFileAttributes=0x80) returned 0 [0177.085] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01251_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.085] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.085] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.085] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.085] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.085] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF", dwFileAttributes=0x80) returned 0 [0177.086] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01545_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.086] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.086] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.086] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.086] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.086] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF", dwFileAttributes=0x80) returned 0 [0177.086] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02122_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.087] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.087] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.087] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.087] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.087] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF", dwFileAttributes=0x80) returned 0 [0177.088] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02559_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.088] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.088] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.088] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.088] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.088] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF", dwFileAttributes=0x80) returned 0 [0177.089] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02724_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.089] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.090] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.090] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.090] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.090] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF", dwFileAttributes=0x80) returned 0 [0177.090] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an03500_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.090] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.090] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.091] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.091] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.091] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF", dwFileAttributes=0x80) returned 0 [0177.091] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04108_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.091] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.091] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.092] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.092] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.092] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF", dwFileAttributes=0x80) returned 0 [0177.092] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04117_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.093] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.093] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.093] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.093] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.093] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF", dwFileAttributes=0x80) returned 0 [0177.093] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04134_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.094] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.094] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.094] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.094] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.094] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF", dwFileAttributes=0x80) returned 0 [0177.094] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04174_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.094] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.094] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.095] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.095] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.095] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF", dwFileAttributes=0x80) returned 0 [0177.095] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04191_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.095] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.095] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.096] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.096] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.096] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF", dwFileAttributes=0x80) returned 0 [0177.096] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04195_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.096] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.096] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.096] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.096] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.097] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF", dwFileAttributes=0x80) returned 0 [0177.097] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04196_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.097] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.097] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.097] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.097] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.097] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF", dwFileAttributes=0x80) returned 0 [0177.098] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04206_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.098] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.098] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.099] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.099] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.099] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF", dwFileAttributes=0x80) returned 0 [0177.099] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04225_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.099] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.099] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.099] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.099] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.100] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF", dwFileAttributes=0x80) returned 0 [0177.100] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04235_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.100] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.100] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.100] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.100] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.101] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF", dwFileAttributes=0x80) returned 0 [0177.101] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04267_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.101] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.101] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.102] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.103] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF", dwFileAttributes=0x80) returned 0 [0177.103] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04269_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.103] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.103] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.103] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.103] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF", dwFileAttributes=0x80) returned 0 [0177.104] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04323_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.104] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.104] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.104] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.104] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.105] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF", dwFileAttributes=0x80) returned 0 [0177.105] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04326_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.105] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.105] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.105] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.105] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF", dwFileAttributes=0x80) returned 0 [0177.106] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04332_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.106] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.106] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.106] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.106] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF", dwFileAttributes=0x80) returned 0 [0177.107] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04355_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.107] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.107] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.107] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.107] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.107] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF", dwFileAttributes=0x80) returned 0 [0177.108] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04369_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.108] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.108] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.108] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.108] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF", dwFileAttributes=0x80) returned 0 [0177.109] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04384_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.109] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.109] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.109] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.109] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.110] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF", dwFileAttributes=0x80) returned 0 [0177.110] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04385_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.110] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.110] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.111] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.111] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.111] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID", dwFileAttributes=0x80) returned 0 [0177.111] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\baby_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.111] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.111] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.112] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.112] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.112] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF", dwFileAttributes=0x80) returned 0 [0177.112] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00116_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.112] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.112] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.112] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.112] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.113] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF", dwFileAttributes=0x80) returned 0 [0177.113] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00141_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.113] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.113] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.114] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.114] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.114] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF", dwFileAttributes=0x80) returned 0 [0177.114] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00146_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.114] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.114] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.115] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.115] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.115] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF", dwFileAttributes=0x80) returned 0 [0177.115] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00155_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.115] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.115] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.115] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.115] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.116] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF", dwFileAttributes=0x80) returned 0 [0177.116] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00160_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.116] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.116] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.116] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.116] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.116] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF", dwFileAttributes=0x80) returned 0 [0177.117] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00173_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.117] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.117] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.117] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.117] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.117] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF", dwFileAttributes=0x80) returned 0 [0177.117] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd05119_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.118] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.118] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.118] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.118] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.118] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF", dwFileAttributes=0x80) returned 0 [0177.119] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06102_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.119] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.119] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.119] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.119] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF", dwFileAttributes=0x80) returned 0 [0177.120] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06200_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.120] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.120] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.120] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.120] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.120] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF", dwFileAttributes=0x80) returned 0 [0177.121] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07761_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.121] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.121] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.121] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.121] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.121] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF", dwFileAttributes=0x80) returned 0 [0177.123] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07804_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.123] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.123] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.123] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.123] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF", dwFileAttributes=0x80) returned 0 [0177.124] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07831_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.124] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.124] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.124] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.124] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF", dwFileAttributes=0x80) returned 0 [0177.125] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08758_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.125] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.125] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.125] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.125] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF", dwFileAttributes=0x80) returned 0 [0177.125] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08773_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.126] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.126] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.126] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.126] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.126] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF", dwFileAttributes=0x80) returned 0 [0177.126] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08808_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.126] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.127] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.127] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.127] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF", dwFileAttributes=0x80) returned 0 [0177.127] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08868_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.127] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.127] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.128] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.128] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.128] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF", dwFileAttributes=0x80) returned 0 [0177.128] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09031_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.128] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.128] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.128] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.128] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.129] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF", dwFileAttributes=0x80) returned 0 [0177.129] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09194_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.130] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.130] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.130] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.130] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF", dwFileAttributes=0x80) returned 0 [0177.131] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09662_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.131] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.131] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.131] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.131] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.131] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF", dwFileAttributes=0x80) returned 0 [0177.132] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09664_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.132] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.132] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.132] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.132] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF", dwFileAttributes=0x80) returned 0 [0177.133] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10890_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.133] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.133] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.133] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.133] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.133] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF", dwFileAttributes=0x80) returned 0 [0177.134] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10972_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.134] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.134] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.134] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.134] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF", dwFileAttributes=0x80) returned 0 [0177.135] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19563_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.135] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.135] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.135] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.135] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF", dwFileAttributes=0x80) returned 0 [0177.136] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19582_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.136] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.136] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.136] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.136] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF", dwFileAttributes=0x80) returned 0 [0177.137] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19695_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.137] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.137] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.137] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.139] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.139] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF", dwFileAttributes=0x80) returned 0 [0177.139] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19827_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.139] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.139] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.140] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.140] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.140] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF", dwFileAttributes=0x80) returned 0 [0177.140] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19828_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.140] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.140] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.141] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.141] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.141] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF", dwFileAttributes=0x80) returned 0 [0177.142] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19986_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.142] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.142] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.142] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.142] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.142] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF", dwFileAttributes=0x80) returned 0 [0177.142] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19988_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.143] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.143] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.143] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.143] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF", dwFileAttributes=0x80) returned 0 [0177.143] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd20013_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.143] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.143] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.144] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.144] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF", dwFileAttributes=0x80) returned 0 [0177.144] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00008_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.145] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.145] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.145] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.145] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.145] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF", dwFileAttributes=0x80) returned 0 [0177.145] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00012_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.146] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.146] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.146] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.146] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.146] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF", dwFileAttributes=0x80) returned 0 [0177.146] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00045_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.146] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.146] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.147] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.147] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.147] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF", dwFileAttributes=0x80) returned 0 [0177.147] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00098_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.147] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.147] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.148] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.148] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.148] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF", dwFileAttributes=0x80) returned 0 [0177.148] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00105_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.148] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.148] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.148] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.148] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.149] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF", dwFileAttributes=0x80) returned 0 [0177.149] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00122_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.149] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.149] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.149] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.149] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF", dwFileAttributes=0x80) returned 0 [0177.150] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00130_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.150] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.150] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.150] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.150] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF", dwFileAttributes=0x80) returned 0 [0177.151] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00148_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.151] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.152] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.152] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.152] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF", dwFileAttributes=0x80) returned 0 [0177.153] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00152_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.153] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.153] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.153] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.153] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF", dwFileAttributes=0x80) returned 0 [0177.154] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00194_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.154] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.154] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.154] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.154] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.154] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF", dwFileAttributes=0x80) returned 0 [0177.154] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00195_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.155] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.155] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.155] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.155] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.155] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF", dwFileAttributes=0x80) returned 0 [0177.156] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00234_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.156] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.156] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.156] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.156] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF", dwFileAttributes=0x80) returned 0 [0177.157] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00242_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.157] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.157] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.157] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.157] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF", dwFileAttributes=0x80) returned 0 [0177.158] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00247_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.158] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.158] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.158] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.158] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.158] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF", dwFileAttributes=0x80) returned 0 [0177.158] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00248_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.159] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.159] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.159] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.159] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF", dwFileAttributes=0x80) returned 0 [0177.159] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00252_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.159] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.160] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.160] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.160] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.160] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF", dwFileAttributes=0x80) returned 0 [0177.160] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00254_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.160] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.160] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.161] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.161] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF", dwFileAttributes=0x80) returned 0 [0177.161] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00261_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.162] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.162] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.162] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.162] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF", dwFileAttributes=0x80) returned 0 [0177.162] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00262_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.162] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.163] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.163] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.163] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF", dwFileAttributes=0x80) returned 0 [0177.163] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00265_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.163] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.163] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.164] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.164] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.164] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF", dwFileAttributes=0x80) returned 0 [0177.164] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00267_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.165] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.165] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.165] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.165] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF", dwFileAttributes=0x80) returned 0 [0177.165] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00269_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.165] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.166] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.166] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.166] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.166] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF", dwFileAttributes=0x80) returned 0 [0177.166] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00270_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.166] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.166] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.167] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.167] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF", dwFileAttributes=0x80) returned 0 [0177.167] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00273_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.167] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.168] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.168] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.168] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF", dwFileAttributes=0x80) returned 0 [0177.168] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00274_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.168] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.168] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.169] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.169] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.169] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF", dwFileAttributes=0x80) returned 0 [0177.169] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00296_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.169] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.169] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.169] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.169] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF", dwFileAttributes=0x80) returned 0 [0177.170] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00390_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.170] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.170] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.170] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.170] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.171] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF", dwFileAttributes=0x80) returned 0 [0177.171] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00392_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.172] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.172] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.172] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.172] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.172] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF", dwFileAttributes=0x80) returned 0 [0177.173] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00524_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.173] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.173] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.173] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.174] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.174] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF", dwFileAttributes=0x80) returned 0 [0177.175] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00525_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.175] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.175] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.175] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.175] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.175] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF", dwFileAttributes=0x80) returned 0 [0177.176] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00526_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.176] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.176] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.176] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.176] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.176] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF", dwFileAttributes=0x80) returned 0 [0177.177] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00648_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.177] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.177] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.178] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.178] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF", dwFileAttributes=0x80) returned 0 [0177.178] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00921_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.178] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.178] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.179] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.179] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.179] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF", dwFileAttributes=0x80) returned 0 [0177.179] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00923_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.179] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.179] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.179] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.179] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.180] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF", dwFileAttributes=0x80) returned 0 [0177.180] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00932_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.180] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.180] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.180] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.180] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.181] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF", dwFileAttributes=0x80) returned 0 [0177.181] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00985_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.181] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.181] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.181] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.181] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.181] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF", dwFileAttributes=0x80) returned 0 [0177.182] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boat.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.182] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.182] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.182] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.182] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF", dwFileAttributes=0x80) returned 0 [0177.183] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boatinst.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.183] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.183] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.183] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.183] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.184] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF", dwFileAttributes=0x80) returned 0 [0177.184] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00076_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.184] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.184] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.184] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.184] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.185] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF", dwFileAttributes=0x80) returned 0 [0177.185] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00078_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.185] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.185] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.185] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.185] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.185] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF", dwFileAttributes=0x80) returned 0 [0177.186] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00092_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.186] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.186] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.186] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.186] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF", dwFileAttributes=0x80) returned 0 [0177.187] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00100_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.187] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.187] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.187] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.187] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.188] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF", dwFileAttributes=0x80) returned 0 [0177.188] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00135_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.188] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.188] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.188] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.188] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.188] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF", dwFileAttributes=0x80) returned 0 [0177.189] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00136_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.189] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.189] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.189] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.189] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.189] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF", dwFileAttributes=0x80) returned 0 [0177.190] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00145_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.190] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.190] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.190] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.190] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.190] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF", dwFileAttributes=0x80) returned 0 [0177.190] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00174_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.191] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.191] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.191] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.191] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.191] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF", dwFileAttributes=0x80) returned 0 [0177.191] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00184_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.191] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.191] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.192] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.192] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.192] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF", dwFileAttributes=0x80) returned 0 [0177.193] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00186_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.193] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.193] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.193] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.193] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.193] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF", dwFileAttributes=0x80) returned 0 [0177.194] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00200_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.194] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.194] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.194] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.194] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.195] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF", dwFileAttributes=0x80) returned 0 [0177.195] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00224_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.195] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.195] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.195] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.195] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.195] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF", dwFileAttributes=0x80) returned 0 [0177.196] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00438_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.196] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.196] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.196] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.196] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.196] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF", dwFileAttributes=0x80) returned 0 [0177.197] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00439_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.197] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.197] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.197] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.197] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.198] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF", dwFileAttributes=0x80) returned 0 [0177.198] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00440_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.198] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.198] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.198] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.205] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.205] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF", dwFileAttributes=0x80) returned 0 [0177.206] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00441_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.206] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.206] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.206] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.206] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.206] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF", dwFileAttributes=0x80) returned 0 [0177.206] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00442_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.207] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.207] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.207] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.207] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.207] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF", dwFileAttributes=0x80) returned 0 [0177.207] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00443_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.208] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.208] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.208] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.208] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.208] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF", dwFileAttributes=0x80) returned 0 [0177.208] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00444_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.208] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.208] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.209] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.209] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.209] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF", dwFileAttributes=0x80) returned 0 [0177.210] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00445_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.210] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.210] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.210] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.210] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.210] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF", dwFileAttributes=0x80) returned 0 [0177.211] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00453_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.211] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.211] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.211] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.211] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.211] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF", dwFileAttributes=0x80) returned 0 [0177.211] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01080_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.212] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.212] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.212] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.212] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.212] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF", dwFileAttributes=0x80) returned 0 [0177.213] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01603_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.213] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.213] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.213] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.213] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.213] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF", dwFileAttributes=0x80) returned 0 [0177.214] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01634_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.214] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.214] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.214] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.214] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.215] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF", dwFileAttributes=0x80) returned 0 [0177.215] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01635_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.215] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.215] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.215] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.216] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.216] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF", dwFileAttributes=0x80) returned 0 [0177.217] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01636_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.217] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.217] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.217] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.217] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.217] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF", dwFileAttributes=0x80) returned 0 [0177.218] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01637_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.218] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.218] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.218] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.218] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.218] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF", dwFileAttributes=0x80) returned 0 [0177.218] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01638_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.219] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.219] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.219] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.219] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.219] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF", dwFileAttributes=0x80) returned 0 [0177.219] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01639_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.219] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.220] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.220] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.220] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.220] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID", dwFileAttributes=0x80) returned 0 [0177.221] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\carbn_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.221] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.221] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.221] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.221] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.221] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF", dwFileAttributes=0x80) returned 0 [0177.222] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cg1606.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.222] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.222] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.222] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.222] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.223] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF", dwFileAttributes=0x80) returned 0 [0177.223] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic1.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.223] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.223] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.223] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.223] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.224] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF", dwFileAttributes=0x80) returned 0 [0177.224] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic2.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.224] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.224] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.224] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.224] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.225] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF", dwFileAttributes=0x80) returned 0 [0177.225] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\clip.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.225] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.225] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.226] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.226] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.226] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID", dwFileAttributes=0x80) returned 0 [0177.226] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cmnty_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.226] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.226] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.227] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.227] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.227] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF", dwFileAttributes=0x80) returned 0 [0177.227] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\crane.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.227] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.227] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.227] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.228] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.228] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF", dwFileAttributes=0x80) returned 0 [0177.228] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\craninst.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.228] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.228] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.228] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.228] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.229] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF", dwFileAttributes=0x80) returned 0 [0177.229] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cup.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.229] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.229] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.229] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.229] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.230] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF", dwFileAttributes=0x80) returned 0 [0177.230] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cupinst.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.230] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.230] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.230] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.231] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.231] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF", dwFileAttributes=0x80) returned 0 [0177.231] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00117_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.232] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.232] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.232] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.232] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.232] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF", dwFileAttributes=0x80) returned 0 [0177.232] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00121_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.233] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.233] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.233] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.233] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.233] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF", dwFileAttributes=0x80) returned 0 [0177.233] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00234_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.233] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.233] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.234] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.234] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.234] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF", dwFileAttributes=0x80) returned 0 [0177.235] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00255_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.235] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.235] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.235] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.235] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.235] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF", dwFileAttributes=0x80) returned 0 [0177.236] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00256_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.236] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.236] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.236] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.236] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.236] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF", dwFileAttributes=0x80) returned 0 [0177.236] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00261_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.237] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.237] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.237] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.237] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.237] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF", dwFileAttributes=0x80) returned 0 [0177.237] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00297_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.237] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.237] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.238] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.238] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.238] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF", dwFileAttributes=0x80) returned 0 [0177.238] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00372_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.238] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.238] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.239] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.239] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.239] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF", dwFileAttributes=0x80) returned 0 [0177.239] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00405_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.239] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.239] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.239] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.239] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.240] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF", dwFileAttributes=0x80) returned 0 [0177.240] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00407_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.240] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.240] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.240] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.240] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.241] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF", dwFileAttributes=0x80) returned 0 [0177.242] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00413_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.242] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.242] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.242] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.242] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.242] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF", dwFileAttributes=0x80) returned 0 [0177.243] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00414_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.243] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.243] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.244] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.244] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.244] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF", dwFileAttributes=0x80) returned 0 [0177.244] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00419_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.244] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.244] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.244] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.244] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.245] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF", dwFileAttributes=0x80) returned 0 [0177.245] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00437_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.245] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.245] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.245] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.245] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.246] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF", dwFileAttributes=0x80) returned 0 [0177.246] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00448_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.246] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.247] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.247] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.247] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.247] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF", dwFileAttributes=0x80) returned 0 [0177.247] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00449_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.247] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.247] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.248] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.248] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.248] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF", dwFileAttributes=0x80) returned 0 [0177.248] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00687_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.248] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.248] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.248] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.248] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.249] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF", dwFileAttributes=0x80) returned 0 [0177.249] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00705_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.249] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.249] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.249] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.249] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.249] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF", dwFileAttributes=0x80) returned 0 [0177.250] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01015_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.250] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.250] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.250] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.250] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.250] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF", dwFileAttributes=0x80) returned 0 [0177.251] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01039_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.251] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.251] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.251] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.251] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.252] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF", dwFileAttributes=0x80) returned 0 [0177.252] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01138_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.253] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.253] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.253] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.253] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.253] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF", dwFileAttributes=0x80) returned 0 [0177.253] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01139_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.253] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.253] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.254] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.254] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.254] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF", dwFileAttributes=0x80) returned 0 [0177.254] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01140_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.254] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.254] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.254] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.254] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.255] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF", dwFileAttributes=0x80) returned 0 [0177.256] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01143_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.257] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.257] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.257] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.257] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.257] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF", dwFileAttributes=0x80) returned 0 [0177.257] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01145_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.257] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.257] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.258] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.258] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.258] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF", dwFileAttributes=0x80) returned 0 [0177.258] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01146_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.258] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.258] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.259] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.259] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.259] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF", dwFileAttributes=0x80) returned 0 [0177.259] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01151_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.259] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.259] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.259] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.259] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.260] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF", dwFileAttributes=0x80) returned 0 [0177.260] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01152_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.261] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.261] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.261] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.261] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.261] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF", dwFileAttributes=0x80) returned 0 [0177.261] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01157_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.262] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.262] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.262] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.262] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.262] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF", dwFileAttributes=0x80) returned 0 [0177.262] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01160_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.263] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.263] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.263] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.263] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.263] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF", dwFileAttributes=0x80) returned 0 [0177.264] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01162_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.264] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.264] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.264] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.264] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.264] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF", dwFileAttributes=0x80) returned 0 [0177.267] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01163_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.268] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.268] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.268] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.268] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.268] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF", dwFileAttributes=0x80) returned 0 [0177.268] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01166_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.268] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.269] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.269] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.269] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.269] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF", dwFileAttributes=0x80) returned 0 [0177.269] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01167_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.269] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.269] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.270] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.270] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.270] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF", dwFileAttributes=0x80) returned 0 [0177.271] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01168_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.271] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.271] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.271] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.271] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.271] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF", dwFileAttributes=0x80) returned 0 [0177.273] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01169_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.273] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.273] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.273] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.273] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.273] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF", dwFileAttributes=0x80) returned 0 [0177.273] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01170_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.274] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.274] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.274] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.274] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.274] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF", dwFileAttributes=0x80) returned 0 [0177.274] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01171_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.274] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.274] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.275] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.275] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.275] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF", dwFileAttributes=0x80) returned 0 [0177.275] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01172_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.275] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.275] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.275] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.276] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.276] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF", dwFileAttributes=0x80) returned 0 [0177.277] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01173_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.277] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.278] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.278] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.278] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.278] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF", dwFileAttributes=0x80) returned 0 [0177.279] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01176_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.279] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.279] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.279] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.279] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.279] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF", dwFileAttributes=0x80) returned 0 [0177.280] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01178_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.280] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.280] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.280] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.280] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.280] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF", dwFileAttributes=0x80) returned 0 [0177.281] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01179_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.281] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.281] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.281] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.281] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.281] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF", dwFileAttributes=0x80) returned 0 [0177.282] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01180_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.282] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.282] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.282] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.282] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF", dwFileAttributes=0x80) returned 0 [0177.283] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01181_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.283] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.283] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.283] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.283] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.283] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF", dwFileAttributes=0x80) returned 0 [0177.284] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01182_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.284] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.284] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.284] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.284] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.284] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF", dwFileAttributes=0x80) returned 0 [0177.284] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01183_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.285] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.285] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.285] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.285] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.285] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF", dwFileAttributes=0x80) returned 0 [0177.285] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01186_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.285] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.285] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.286] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.286] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.286] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF", dwFileAttributes=0x80) returned 0 [0177.286] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01366_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.286] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.286] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.286] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.286] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.287] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF", dwFileAttributes=0x80) returned 0 [0177.287] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01434_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.287] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.287] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.287] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.287] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.288] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF", dwFileAttributes=0x80) returned 0 [0177.288] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01585_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.288] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.288] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.289] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.289] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.289] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF", dwFileAttributes=0x80) returned 0 [0177.290] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01586_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.290] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.290] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.290] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.290] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.290] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF", dwFileAttributes=0x80) returned 0 [0177.290] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01628_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.291] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.291] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.291] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.291] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.291] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF", dwFileAttributes=0x80) returned 0 [0177.291] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01629_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.291] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.291] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.292] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.293] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.294] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF", dwFileAttributes=0x80) returned 0 [0177.294] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01630_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.295] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.295] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.295] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.295] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.295] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF", dwFileAttributes=0x80) returned 0 [0177.295] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01631_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.295] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.295] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.296] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.296] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.296] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF", dwFileAttributes=0x80) returned 0 [0177.296] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01761_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.296] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.296] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.297] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.297] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.297] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF", dwFileAttributes=0x80) returned 0 [0177.297] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01772_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.297] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.297] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.297] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.297] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.298] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF", dwFileAttributes=0x80) returned 0 [0177.298] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01793_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.298] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.298] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.298] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.298] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.299] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID", dwFileAttributes=0x80) returned 0 [0177.299] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\east_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.299] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.299] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.299] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.299] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.299] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF", dwFileAttributes=0x80) returned 0 [0177.300] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00010_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.300] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.300] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.301] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.301] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.301] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF", dwFileAttributes=0x80) returned 0 [0177.301] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00019_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.301] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.301] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.301] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.302] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.302] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF", dwFileAttributes=0x80) returned 0 [0177.302] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00172_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.302] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.302] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.302] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.302] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF", dwFileAttributes=0x80) returned 0 [0177.303] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00184_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.304] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.304] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.304] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.304] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.304] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF", dwFileAttributes=0x80) returned 0 [0177.304] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00006_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.304] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.304] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.305] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0177.305] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0177.305] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF", dwFileAttributes=0x80) returned 0 [0177.305] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00202_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0177.305] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0177.305] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.306] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0178.171] SetLastError (dwErrCode=0x0) [0178.171] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.174] GetLastError () returned 0x5 [0178.174] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0178.174] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.174] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.174] SetLastError (dwErrCode=0x0) [0178.174] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.174] GetLastError () returned 0x5 [0178.174] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0178.174] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.175] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb53a0 [0178.175] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0178.175] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0178.175] SetLastError (dwErrCode=0x0) [0178.175] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.175] GetLastError () returned 0x5 [0178.175] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0178.175] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.175] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb42c0 [0178.178] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0178.178] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0178.178] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.179] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143743.GIF", dwFileAttributes=0x80) returned 0 [0178.179] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143743.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143743.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.180] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.180] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.180] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0178.180] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.180] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143744.GIF", dwFileAttributes=0x80) returned 0 [0178.180] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143744.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143744.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.181] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.181] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.181] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0178.181] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.181] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143745.GIF", dwFileAttributes=0x80) returned 0 [0178.181] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143745.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143745.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.181] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.181] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.182] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0178.182] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143746.GIF", dwFileAttributes=0x80) returned 0 [0178.182] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143746.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143746.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.182] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.182] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.183] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0178.183] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.183] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143748.GIF", dwFileAttributes=0x80) returned 0 [0178.183] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143748.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143748.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.183] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.183] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.184] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0178.184] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.184] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143749.GIF", dwFileAttributes=0x80) returned 0 [0178.185] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143749.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143749.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.185] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.185] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.185] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0178.185] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.185] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143750.GIF", dwFileAttributes=0x80) returned 0 [0178.185] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143750.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143750.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.186] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.186] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.186] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0178.186] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.186] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143752.GIF", dwFileAttributes=0x80) returned 0 [0178.186] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143752.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143752.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.186] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.186] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.187] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0178.187] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143753.GIF", dwFileAttributes=0x80) returned 0 [0178.187] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143753.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143753.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.187] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.187] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.187] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0178.188] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.188] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143754.GIF", dwFileAttributes=0x80) returned 0 [0178.188] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143754.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143754.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.189] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.189] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.189] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0178.189] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.189] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143758.GIF", dwFileAttributes=0x80) returned 0 [0178.189] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143758.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143758.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.189] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.189] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.190] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0178.190] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.190] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00516L.GIF", dwFileAttributes=0x80) returned 0 [0178.190] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00516L.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00516l.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.190] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.190] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.190] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0178.190] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.191] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00531L.GIF", dwFileAttributes=0x80) returned 0 [0178.191] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00531L.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00531l.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.191] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.191] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.191] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0178.191] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.192] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00673L.GIF", dwFileAttributes=0x80) returned 0 [0178.192] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00673L.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00673l.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.192] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.192] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.192] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0178.192] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.192] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00703L.GIF", dwFileAttributes=0x80) returned 0 [0178.193] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00703L.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00703l.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.193] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.193] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.193] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0178.193] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.193] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00760L.GIF", dwFileAttributes=0x80) returned 0 [0178.194] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00760L.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00760l.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.194] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.194] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.194] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0178.194] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.195] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00780L.GIF", dwFileAttributes=0x80) returned 0 [0178.195] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00780L.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00780l.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.195] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.195] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.195] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0178.195] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.195] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB01741L.GIF", dwFileAttributes=0x80) returned 0 [0178.196] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB01741L.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb01741l.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.196] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.196] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.196] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0178.196] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.197] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02039_.GIF", dwFileAttributes=0x80) returned 0 [0178.197] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02039_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02039_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.197] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.197] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.197] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0178.197] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.198] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02055_.GIF", dwFileAttributes=0x80) returned 0 [0178.198] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02055_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02055_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.198] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.198] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.198] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0178.205] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.205] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02073_.GIF", dwFileAttributes=0x80) returned 0 [0178.206] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02073_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02073_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.207] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.207] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.207] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0178.207] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.207] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02074_.GIF", dwFileAttributes=0x80) returned 0 [0178.207] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02074_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02074_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.207] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.208] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.208] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0178.208] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.208] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02077_.GIF", dwFileAttributes=0x80) returned 0 [0178.208] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02077_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02077_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.208] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.208] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.209] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0178.209] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.209] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02082_.GIF", dwFileAttributes=0x80) returned 0 [0178.209] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02082_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02082_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.209] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.209] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.210] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0178.210] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.210] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02085_.GIF", dwFileAttributes=0x80) returned 0 [0178.210] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02085_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02085_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.210] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.210] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.210] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0178.210] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.211] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02097_.GIF", dwFileAttributes=0x80) returned 0 [0178.211] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02097_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02097_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.212] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.212] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.212] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0178.212] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.212] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02106_.GIF", dwFileAttributes=0x80) returned 0 [0178.212] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02106_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02106_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.213] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.213] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.213] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0178.213] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.213] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02116_.GIF", dwFileAttributes=0x80) returned 0 [0178.214] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02116_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02116_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.214] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.214] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.214] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0178.214] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.215] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02134_.GIF", dwFileAttributes=0x80) returned 0 [0178.215] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02134_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02134_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.215] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.215] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.216] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0178.216] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.216] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02187_.GIF", dwFileAttributes=0x80) returned 0 [0178.217] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02187_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02187_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.217] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.217] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.217] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0178.217] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.218] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02198_.GIF", dwFileAttributes=0x80) returned 0 [0178.218] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02198_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02198_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.218] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.218] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.218] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0178.218] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.219] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02201_.GIF", dwFileAttributes=0x80) returned 0 [0178.219] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02201_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02201_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.219] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.219] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.219] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0178.219] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.219] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02214_.GIF", dwFileAttributes=0x80) returned 0 [0178.220] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02214_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02214_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.220] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.220] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.220] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0178.220] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.220] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02218_.GIF", dwFileAttributes=0x80) returned 0 [0178.221] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02218_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02218_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.221] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.221] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.221] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0178.221] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0178.222] SetLastError (dwErrCode=0x0) [0178.222] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.224] GetLastError () returned 0x5 [0178.224] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0178.224] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.224] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0178.224] FindClose (in: hFindFile=0x665abb53a0 | out: hFindFile=0x665abb53a0) returned 1 [0178.224] SetLastError (dwErrCode=0x0) [0178.225] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.225] GetLastError () returned 0x5 [0178.225] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0178.225] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.225] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0178.225] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0178.225] SetLastError (dwErrCode=0x0) [0178.225] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.225] GetLastError () returned 0x5 [0178.225] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0178.225] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.225] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0178.225] SetLastError (dwErrCode=0x0) [0178.225] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.225] GetLastError () returned 0x5 [0178.225] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0178.225] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.226] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb42c0 [0178.227] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.227] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.227] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.228] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Facet.thmx", dwFileAttributes=0x80) returned 0 [0178.228] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Facet.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\facet.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.228] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.228] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.229] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.229] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.229] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Gallery.thmx", dwFileAttributes=0x80) returned 0 [0178.231] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Gallery.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\gallery.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.231] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.231] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.231] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.231] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.231] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Integral.thmx", dwFileAttributes=0x80) returned 0 [0178.231] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Integral.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\integral.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.232] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.232] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.232] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.232] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.232] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Ion Boardroom.thmx", dwFileAttributes=0x80) returned 0 [0178.232] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Ion Boardroom.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\ion boardroom.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.233] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.233] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.233] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.233] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.233] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Ion.thmx", dwFileAttributes=0x80) returned 0 [0178.233] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Ion.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\ion.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.233] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.233] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.234] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.234] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.234] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Office Theme.thmx", dwFileAttributes=0x80) returned 0 [0178.235] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Office Theme.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\office theme.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.235] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.235] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.235] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.235] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.235] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Organic.thmx", dwFileAttributes=0x80) returned 0 [0178.235] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Organic.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\organic.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.236] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.236] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.236] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.236] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.236] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Retrospect.thmx", dwFileAttributes=0x80) returned 0 [0178.236] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Retrospect.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\retrospect.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.237] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.237] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.237] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.237] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.237] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Slice.thmx", dwFileAttributes=0x80) returned 0 [0178.238] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Slice.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\slice.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.238] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.238] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.238] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.238] SetLastError (dwErrCode=0x0) [0178.238] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.238] GetLastError () returned 0x5 [0178.238] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0178.238] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.238] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4f80 [0178.240] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0178.240] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0178.240] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.240] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Aspect.xml", dwFileAttributes=0x80) returned 0 [0178.240] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Aspect.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\aspect.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.240] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.240] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.241] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0178.241] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.241] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue Green.xml", dwFileAttributes=0x80) returned 0 [0178.241] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue Green.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\blue green.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.241] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.241] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.242] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0178.242] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.242] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue II.xml", dwFileAttributes=0x80) returned 0 [0178.244] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue II.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\blue ii.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.244] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.244] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.244] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0178.244] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.244] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue Warm.xml", dwFileAttributes=0x80) returned 0 [0178.245] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue Warm.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\blue warm.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.245] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.245] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.245] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0178.245] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.245] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue.xml", dwFileAttributes=0x80) returned 0 [0178.246] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\blue.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.246] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.246] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.246] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0178.246] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.246] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Grayscale.xml", dwFileAttributes=0x80) returned 0 [0178.246] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Grayscale.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\grayscale.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.247] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.247] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.247] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0178.247] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.247] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Green Yellow.xml", dwFileAttributes=0x80) returned 0 [0178.248] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Green Yellow.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\green yellow.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.248] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.248] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.248] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0178.248] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.248] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Green.xml", dwFileAttributes=0x80) returned 0 [0178.249] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Green.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\green.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.249] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.249] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.249] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0178.249] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.249] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Marquee.xml", dwFileAttributes=0x80) returned 0 [0178.249] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Marquee.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\marquee.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.250] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.250] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.250] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0178.250] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.250] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Median.xml", dwFileAttributes=0x80) returned 0 [0178.250] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Median.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\median.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.251] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.251] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.251] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0178.251] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.251] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Office 2007 - 2010.xml", dwFileAttributes=0x80) returned 0 [0178.252] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Office 2007 - 2010.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\office 2007 - 2010.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.252] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.252] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.252] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0178.252] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.252] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Orange Red.xml", dwFileAttributes=0x80) returned 0 [0178.253] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Orange Red.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\orange red.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.253] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.253] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.253] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0178.253] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.253] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Orange.xml", dwFileAttributes=0x80) returned 0 [0178.253] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Orange.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\orange.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.254] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.254] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.254] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0178.254] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.254] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Paper.xml", dwFileAttributes=0x80) returned 0 [0178.254] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Paper.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\paper.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.254] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.255] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.255] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0178.255] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.255] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red Orange.xml", dwFileAttributes=0x80) returned 0 [0178.256] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red Orange.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\red orange.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.256] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.256] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.256] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0178.256] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.256] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red Violet.xml", dwFileAttributes=0x80) returned 0 [0178.257] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red Violet.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\red violet.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.257] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.257] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.257] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0178.257] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.258] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red.xml", dwFileAttributes=0x80) returned 0 [0178.258] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\red.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.258] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.258] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.258] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0178.258] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.259] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Slipstream.xml", dwFileAttributes=0x80) returned 0 [0178.259] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Slipstream.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\slipstream.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.259] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.259] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.260] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0178.260] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.260] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Violet II.xml", dwFileAttributes=0x80) returned 0 [0178.260] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Violet II.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\violet ii.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.260] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.260] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.261] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0178.261] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.261] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Violet.xml", dwFileAttributes=0x80) returned 0 [0178.261] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Violet.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\violet.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.261] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.261] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.262] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0178.262] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.262] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Yellow Orange.xml", dwFileAttributes=0x80) returned 0 [0178.262] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Yellow Orange.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\yellow orange.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.262] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.262] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.263] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0178.263] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.263] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Yellow.xml", dwFileAttributes=0x80) returned 0 [0178.263] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Yellow.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\yellow.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.263] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.263] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.263] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0178.263] FindClose (in: hFindFile=0x665abb4f80 | out: hFindFile=0x665abb4f80) returned 1 [0178.264] SetLastError (dwErrCode=0x0) [0178.264] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.267] GetLastError () returned 0x5 [0178.267] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0178.267] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.267] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.267] SetLastError (dwErrCode=0x0) [0178.267] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.267] GetLastError () returned 0x5 [0178.267] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0178.267] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.267] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb43e0 [0178.268] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0178.268] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0178.268] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.269] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Banded Edge.eftx", dwFileAttributes=0x80) returned 0 [0178.269] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Banded Edge.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\banded edge.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.270] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.270] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.270] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0178.270] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.270] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Extreme Shadow.eftx", dwFileAttributes=0x80) returned 0 [0178.270] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Extreme Shadow.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\extreme shadow.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.270] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.270] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.271] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0178.271] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.271] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Frosted Glass.eftx", dwFileAttributes=0x80) returned 0 [0178.271] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Frosted Glass.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\frosted glass.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.271] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.271] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.271] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0178.271] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.272] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glossy.eftx", dwFileAttributes=0x80) returned 0 [0178.272] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glossy.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\glossy.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.273] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.273] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.273] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0178.273] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.273] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glow Edge.eftx", dwFileAttributes=0x80) returned 0 [0178.273] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glow Edge.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\glow edge.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.273] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.273] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.274] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0178.274] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.274] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Grunge Texture.eftx", dwFileAttributes=0x80) returned 0 [0178.275] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Grunge Texture.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\grunge texture.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.275] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.275] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.275] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0178.275] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.275] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Inset.eftx", dwFileAttributes=0x80) returned 0 [0178.275] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Inset.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\inset.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.276] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.276] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.276] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0178.276] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.276] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Milk Glass.eftx", dwFileAttributes=0x80) returned 0 [0178.277] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Milk Glass.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\milk glass.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.277] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.277] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.277] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0178.277] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.277] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Office 2007 - 2010.eftx", dwFileAttributes=0x80) returned 0 [0178.278] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Office 2007 - 2010.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\office 2007 - 2010.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.278] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.278] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.279] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0178.279] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.279] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Reflection.eftx", dwFileAttributes=0x80) returned 0 [0178.279] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Reflection.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\reflection.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.279] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.279] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.279] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0178.279] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.280] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Riblet.eftx", dwFileAttributes=0x80) returned 0 [0178.280] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Riblet.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\riblet.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.280] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.280] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.280] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0178.280] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.281] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Smokey Glass.eftx", dwFileAttributes=0x80) returned 0 [0178.281] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Smokey Glass.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\smokey glass.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.281] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.281] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.281] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0178.281] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.281] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Subtle Solids.eftx", dwFileAttributes=0x80) returned 0 [0178.282] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Subtle Solids.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\subtle solids.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.282] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.282] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.282] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0178.282] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Top Shadow.eftx", dwFileAttributes=0x80) returned 0 [0178.282] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Top Shadow.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\top shadow.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.283] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.283] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.283] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0178.283] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0178.284] SetLastError (dwErrCode=0x0) [0178.284] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.286] GetLastError () returned 0x5 [0178.286] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0178.286] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.286] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.286] SetLastError (dwErrCode=0x0) [0178.286] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.286] GetLastError () returned 0x5 [0178.286] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0178.287] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.287] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb45c0 [0178.288] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0178.288] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0178.288] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.289] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial Black-Arial.xml", dwFileAttributes=0x80) returned 0 [0178.289] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial Black-Arial.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\arial black-arial.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.289] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.289] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.289] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0178.289] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.289] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial-Times New Roman.xml", dwFileAttributes=0x80) returned 0 [0178.290] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial-Times New Roman.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\arial-times new roman.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.290] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.290] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.291] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0178.291] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.291] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial.xml", dwFileAttributes=0x80) returned 0 [0178.291] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\arial.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.293] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.293] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.293] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0178.293] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.294] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri Light-Constantia.xml", dwFileAttributes=0x80) returned 0 [0178.294] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri Light-Constantia.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\calibri light-constantia.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.294] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.294] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.294] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0178.294] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.295] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri-Cambria.xml", dwFileAttributes=0x80) returned 0 [0178.295] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri-Cambria.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\calibri-cambria.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.296] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.296] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.296] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0178.296] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.296] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri.xml", dwFileAttributes=0x80) returned 0 [0178.296] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\calibri.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.296] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.296] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.297] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0178.297] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.297] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Cambria.xml", dwFileAttributes=0x80) returned 0 [0178.297] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Cambria.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\cambria.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.297] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.297] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.298] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0178.298] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.298] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Candara.xml", dwFileAttributes=0x80) returned 0 [0178.298] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Candara.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\candara.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.298] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.298] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.298] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0178.298] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.299] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Gothic-Palatino Linotype.xml", dwFileAttributes=0x80) returned 0 [0178.299] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Gothic-Palatino Linotype.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\century gothic-palatino linotype.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.299] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.299] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.299] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0178.299] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.300] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Gothic.xml", dwFileAttributes=0x80) returned 0 [0178.300] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Gothic.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\century gothic.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.300] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.300] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.300] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0178.300] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.300] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Schoolbook.xml", dwFileAttributes=0x80) returned 0 [0178.301] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Schoolbook.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\century schoolbook.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.301] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.301] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.301] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0178.301] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.301] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Consolas-Verdana.xml", dwFileAttributes=0x80) returned 0 [0178.301] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Consolas-Verdana.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\consolas-verdana.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.302] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.302] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.302] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0178.302] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.302] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Constantia-Franklin Gothic Book.xml", dwFileAttributes=0x80) returned 0 [0178.303] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Constantia-Franklin Gothic Book.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\constantia-franklin gothic book.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.303] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.303] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.303] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0178.303] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.304] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Corbel.xml", dwFileAttributes=0x80) returned 0 [0178.304] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Corbel.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\corbel.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.304] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.304] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.304] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0178.304] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.304] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Franklin Gothic.xml", dwFileAttributes=0x80) returned 0 [0178.305] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Franklin Gothic.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\franklin gothic.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.305] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.305] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.306] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0178.306] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.306] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Garamond-TrebuchetMs.xml", dwFileAttributes=0x80) returned 0 [0178.306] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Garamond-TrebuchetMs.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\garamond-trebuchetms.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.306] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.306] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.306] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0178.306] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.307] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Garamond.xml", dwFileAttributes=0x80) returned 0 [0178.307] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Garamond.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\garamond.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.307] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.307] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.307] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0178.307] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.308] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Georgia.xml", dwFileAttributes=0x80) returned 0 [0178.308] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Georgia.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\georgia.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.308] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.308] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.308] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0178.308] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.309] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Gill Sans MT.xml", dwFileAttributes=0x80) returned 0 [0178.310] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Gill Sans MT.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\gill sans mt.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.310] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.310] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.310] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0178.310] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.310] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Office 2007 - 2010.xml", dwFileAttributes=0x80) returned 0 [0178.310] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Office 2007 - 2010.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\office 2007 - 2010.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.311] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.311] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.311] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0178.311] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.311] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Times New Roman-Arial.xml", dwFileAttributes=0x80) returned 0 [0178.311] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Times New Roman-Arial.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\times new roman-arial.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.312] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.312] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.312] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0178.312] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.312] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\TrebuchetMs.xml", dwFileAttributes=0x80) returned 0 [0178.312] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\TrebuchetMs.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\trebuchetms.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.312] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.312] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.313] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0178.313] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.313] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Tw Cen MT-Rockwell.xml", dwFileAttributes=0x80) returned 0 [0178.313] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Tw Cen MT-Rockwell.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\tw cen mt-rockwell.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.313] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.313] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.313] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0178.314] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.314] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Tw Cen MT.xml", dwFileAttributes=0x80) returned 0 [0178.314] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Tw Cen MT.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\tw cen mt.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.315] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.315] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.315] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0178.315] FindClose (in: hFindFile=0x665abb45c0 | out: hFindFile=0x665abb45c0) returned 1 [0178.316] SetLastError (dwErrCode=0x0) [0178.316] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.318] GetLastError () returned 0x5 [0178.318] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0178.318] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.318] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.318] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.319] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Wisp.thmx", dwFileAttributes=0x80) returned 0 [0178.319] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Wisp.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\wisp.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.319] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.319] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.319] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0178.319] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0178.319] SetLastError (dwErrCode=0x0) [0178.319] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.320] GetLastError () returned 0x5 [0178.320] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0178.320] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.320] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0178.320] SetLastError (dwErrCode=0x0) [0178.320] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.320] GetLastError () returned 0x5 [0178.320] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0178.320] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.320] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb56a0 [0178.322] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.323] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.323] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.323] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.323] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.323] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.323] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.323] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.323] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.323] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.323] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.323] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.323] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.323] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.323] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.323] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.323] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.323] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.323] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.324] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.324] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.324] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.324] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.324] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.324] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.324] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.324] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.324] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.324] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.324] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.325] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.325] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.325] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\CommonSequencingProperties.xml", dwFileAttributes=0x80) returned 0 [0178.326] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\CommonSequencingProperties.xml" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\commonsequencingproperties.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.326] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.326] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.326] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.326] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.326] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.326] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.326] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.326] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.326] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.326] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.326] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.326] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.326] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.326] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.326] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.326] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.326] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.326] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.326] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0178.326] FindClose (in: hFindFile=0x665abb56a0 | out: hFindFile=0x665abb56a0) returned 1 [0178.327] SetLastError (dwErrCode=0x0) [0178.327] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.330] GetLastError () returned 0x5 [0178.330] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0178.330] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.330] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0178.330] SetLastError (dwErrCode=0x0) [0178.330] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.330] GetLastError () returned 0x5 [0178.330] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0178.330] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.330] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb4f20 [0178.332] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.332] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.332] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.332] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win10.mp4", dwFileAttributes=0x80) returned 0 [0178.332] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win10.mp4" (normalized: "c:\\program files\\microsoft office\\root\\fre\\startmenu_win10.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.332] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.332] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.333] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.333] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.333] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win10_RTL.mp4", dwFileAttributes=0x80) returned 0 [0178.333] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win10_RTL.mp4" (normalized: "c:\\program files\\microsoft office\\root\\fre\\startmenu_win10_rtl.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.333] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.333] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.334] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.334] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win7.wmv", dwFileAttributes=0x80) returned 0 [0178.334] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win7.wmv" (normalized: "c:\\program files\\microsoft office\\root\\fre\\startmenu_win7.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.334] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.334] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.334] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.335] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win7_RTL.wmv", dwFileAttributes=0x80) returned 0 [0178.335] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win7_RTL.wmv" (normalized: "c:\\program files\\microsoft office\\root\\fre\\startmenu_win7_rtl.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.335] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.335] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.335] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.335] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.336] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win8.mp4", dwFileAttributes=0x80) returned 0 [0178.336] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win8.mp4" (normalized: "c:\\program files\\microsoft office\\root\\fre\\startmenu_win8.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.336] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.336] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.336] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.336] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.336] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win8_RTL.mp4", dwFileAttributes=0x80) returned 0 [0178.337] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win8_RTL.mp4" (normalized: "c:\\program files\\microsoft office\\root\\fre\\startmenu_win8_rtl.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.337] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.337] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.337] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0178.337] FindClose (in: hFindFile=0x665abb4f20 | out: hFindFile=0x665abb4f20) returned 1 [0178.338] SetLastError (dwErrCode=0x0) [0178.338] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\fre\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.341] GetLastError () returned 0x5 [0178.341] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0178.341] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.341] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0178.341] SetLastError (dwErrCode=0x0) [0178.341] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.341] GetLastError () returned 0x5 [0178.341] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0178.341] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.341] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb55e0 [0178.344] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.346] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.346] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.347] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RInt.16.msi", dwFileAttributes=0x80) returned 0 [0178.349] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RInt.16.msi" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rint.16.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.350] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.350] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.350] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.350] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.350] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RIntLoc.en-us.16.msi", dwFileAttributes=0x80) returned 0 [0178.351] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RIntLoc.en-us.16.msi" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rintloc.en-us.16.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.352] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.352] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.352] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.352] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.352] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0178.353] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.access.access.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.353] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.353] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.353] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.353] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.353] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.accessmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0178.355] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.accessmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.accessmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.355] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.355] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.355] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.355] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.356] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.accessmuiset.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0178.356] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.accessmuiset.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.accessmuiset.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.356] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.357] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.357] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.357] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.357] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0178.358] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.dcf.dcf.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.358] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.358] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.358] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.358] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.359] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.dcfmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0178.360] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.dcfmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.dcfmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.360] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.360] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.360] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.360] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.360] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0178.361] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.excel.excel.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.361] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.361] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.361] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.361] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.362] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.excelmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0178.362] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.excelmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.excelmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.362] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.362] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.363] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.363] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.363] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0178.364] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.groove.groove.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.364] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.364] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.364] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.364] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.365] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.groovemui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0178.365] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.groovemui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.groovemui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.366] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.366] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.366] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.366] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.366] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0178.367] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.lync.lync.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.367] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.367] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.367] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.367] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.368] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.lyncmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0178.368] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.lyncmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.lyncmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.369] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.369] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.369] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.369] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.369] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32mui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0178.370] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32mui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.office32mui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.370] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.370] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.370] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.370] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.371] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32ww.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0178.374] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32ww.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.office32ww.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.374] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.374] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.375] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.375] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.375] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.officemui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0178.376] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.officemui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.officemui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.376] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.376] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.376] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.376] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.377] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.officemuiset.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0178.378] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.officemuiset.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.officemuiset.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.378] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.378] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.378] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.378] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.379] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0178.379] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.onenote.onenote.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.380] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.380] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.380] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.380] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.380] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.onenotemui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0178.381] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.onenotemui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.onenotemui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.381] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.381] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.382] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.382] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.382] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0178.383] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.osm.osm.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.383] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.383] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.383] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.383] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.384] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0178.384] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.osmmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.385] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.385] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.385] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.385] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.385] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0178.386] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.osmux.osmux.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.386] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.386] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.386] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.386] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.387] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmuxmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0178.387] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmuxmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.osmuxmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.387] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.387] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.387] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.387] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.388] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0178.388] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.outlook.outlook.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.388] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.388] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.389] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.389] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.389] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.outlookmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0178.390] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.outlookmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.outlookmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.390] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.390] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.390] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.390] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.390] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0178.391] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.powerpivot.powerpivot.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.391] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.391] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.391] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.391] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.392] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0178.392] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.powerpoint.powerpoint.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.392] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.392] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.393] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.393] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.393] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.powerpointmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0178.393] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.powerpointmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.powerpointmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.393] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.393] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.394] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.394] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0178.394] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.project.project.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.394] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.394] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.394] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.394] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.projectmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0178.395] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.projectmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.projectmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.395] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.396] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.396] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.396] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.396] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0178.396] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.proof.culture.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.396] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.396] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.397] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.397] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.397] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.es-es.xml", dwFileAttributes=0x80) returned 0 [0178.397] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.es-es.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.proof.culture.msi.16.es-es.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.397] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.397] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.397] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.397] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.398] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml", dwFileAttributes=0x80) returned 0 [0178.398] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.proof.culture.msi.16.fr-fr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.398] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.398] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.398] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.398] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.398] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.proofing.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0178.399] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.proofing.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.proofing.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.399] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.399] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.400] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.400] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.400] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0178.400] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.publisher.publisher.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.401] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.401] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.401] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.401] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.401] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.publishermui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0178.402] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.publishermui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.publishermui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.402] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.402] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.402] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.402] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.403] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0178.403] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.shared.office.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.404] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.404] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.404] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.404] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.404] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0178.405] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.visio.visio.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.405] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.405] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.405] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.405] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.visiomui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0178.406] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.visiomui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.visiomui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.406] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.407] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.407] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.407] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.407] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0178.408] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.word.word.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.408] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.408] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.408] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.408] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.408] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.wordmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0178.409] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.wordmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.wordmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.409] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.409] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.409] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.409] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.409] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.409] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.409] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31927.msp", dwFileAttributes=0x80) returned 0 [0178.410] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31927.msp" (normalized: "c:\\program files\\microsoft office\\root\\integration\\qfe31927.msp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.411] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.411] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.411] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.411] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.411] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31928.msp", dwFileAttributes=0x80) returned 0 [0178.412] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31928.msp" (normalized: "c:\\program files\\microsoft office\\root\\integration\\qfe31928.msp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.412] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.412] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.412] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.412] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.412] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\SPPRedist.msi", dwFileAttributes=0x80) returned 0 [0178.413] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\SPPRedist.msi" (normalized: "c:\\program files\\microsoft office\\root\\integration\\sppredist.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.413] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.413] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.413] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0178.413] FindClose (in: hFindFile=0x665abb55e0 | out: hFindFile=0x665abb55e0) returned 1 [0178.414] SetLastError (dwErrCode=0x0) [0178.414] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\integration\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.417] GetLastError () returned 0x5 [0178.417] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0178.417] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.417] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0178.417] SetLastError (dwErrCode=0x0) [0178.417] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.417] GetLastError () returned 0x5 [0178.417] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0178.417] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.418] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb4920 [0178.418] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.418] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.418] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.418] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses\\c2rpridslicensefiles_auto.xml", dwFileAttributes=0x80) returned 0 [0178.419] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses\\c2rpridslicensefiles_auto.xml" (normalized: "c:\\program files\\microsoft office\\root\\licenses\\c2rpridslicensefiles_auto.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.419] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.419] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.419] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0178.419] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0178.419] SetLastError (dwErrCode=0x0) [0178.419] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\licenses\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.420] GetLastError () returned 0x5 [0178.420] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0178.420] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.420] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0178.420] SetLastError (dwErrCode=0x0) [0178.420] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.420] GetLastError () returned 0x5 [0178.420] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0178.420] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.420] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb5040 [0178.423] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.430] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.430] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.430] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019R_Grace-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.430] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019R_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\access2019r_grace-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.431] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.431] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.431] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.431] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.431] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019R_Grace-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.432] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019R_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\access2019r_grace-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.432] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.432] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.432] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.432] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.432] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019R_OEM_Perp-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.433] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019R_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\access2019r_oem_perp-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.433] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.433] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.433] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.433] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019R_OEM_Perp-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.434] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019R_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\access2019r_oem_perp-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.434] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.434] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.434] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.434] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.434] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019R_OEM_Perp-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.434] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019R_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\access2019r_oem_perp-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.435] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.435] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.435] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.435] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.435] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019R_OEM_Perp-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.435] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019R_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\access2019r_oem_perp-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.436] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.436] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.436] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.436] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.436] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019R_Retail-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.436] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019R_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\access2019r_retail-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.437] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.437] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.437] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.437] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.437] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019R_Retail-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.437] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019R_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\access2019r_retail-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.437] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.437] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.438] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.438] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.438] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019R_Retail-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.438] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019R_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\access2019r_retail-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.438] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.438] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.439] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.439] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.439] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019R_Retail-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.439] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019R_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\access2019r_retail-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.439] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.439] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.439] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.439] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.440] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019R_Trial-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.440] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019R_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\access2019r_trial-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.440] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.440] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.440] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.440] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.441] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019R_Trial-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.441] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019R_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\access2019r_trial-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.441] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.441] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.441] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.441] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.441] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019R_Trial-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.442] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019R_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\access2019r_trial-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.442] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.442] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.442] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.442] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.442] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019VL_KMS_Client_AE-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.443] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019VL_KMS_Client_AE-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\access2019vl_kms_client_ae-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.443] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.443] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.443] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.443] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.443] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019VL_KMS_Client_AE-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.443] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019VL_KMS_Client_AE-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\access2019vl_kms_client_ae-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.444] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.444] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.444] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.444] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.444] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019VL_KMS_Client_AE-ul.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.444] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019VL_KMS_Client_AE-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\access2019vl_kms_client_ae-ul.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.444] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.444] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.445] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.445] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.445] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019VL_MAK_AE-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.445] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019VL_MAK_AE-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\access2019vl_mak_ae-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.445] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.445] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.446] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.446] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.446] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019VL_MAK_AE-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.446] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019VL_MAK_AE-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\access2019vl_mak_ae-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.446] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.446] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.446] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.446] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019VL_MAK_AE-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.447] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019VL_MAK_AE-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\access2019vl_mak_ae-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.447] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.447] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.447] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.447] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.448] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019VL_MAK_AE-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.448] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019VL_MAK_AE-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\access2019vl_mak_ae-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.448] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.448] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.449] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.449] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessRuntime2019R_PrepidBypass-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.449] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessRuntime2019R_PrepidBypass-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessruntime2019r_prepidbypass-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.450] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.450] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.450] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.450] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.450] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessRuntime2019R_PrepidBypass-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.450] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessRuntime2019R_PrepidBypass-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessruntime2019r_prepidbypass-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.450] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.451] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.451] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.451] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.451] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessRuntimeR_PrepidBypass-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.451] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessRuntimeR_PrepidBypass-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessruntimer_prepidbypass-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.451] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.451] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.452] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.452] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.452] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessRuntimeR_PrepidBypass-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.452] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessRuntimeR_PrepidBypass-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessruntimer_prepidbypass-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.452] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.452] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.452] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.457] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.457] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.457] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_grace-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.457] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.457] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.458] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.458] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.458] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.458] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.458] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.458] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.458] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.458] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.459] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.459] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_oem_perp-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.459] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.459] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.459] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.459] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.460] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.460] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_oem_perp-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.460] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.460] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.460] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.460] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.460] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.461] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_oem_perp-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.461] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.461] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.461] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.461] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.461] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.461] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_oem_perp-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.462] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.462] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.462] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.462] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.462] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.462] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_retail-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.462] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.462] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.463] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.463] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.463] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.463] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_retail-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.463] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.463] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.463] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.463] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.464] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.464] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_retail-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.464] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.464] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.465] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.465] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.465] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.465] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_retail-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.465] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.465] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.466] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.466] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.466] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.466] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_trial-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.466] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.466] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.466] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.466] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.467] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_trial-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.467] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.467] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.467] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.467] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.468] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.468] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_trial-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.468] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.468] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.468] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.468] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.468] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.469] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_kms_client-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.469] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.469] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.469] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.469] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.469] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.470] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_kms_client-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.470] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.470] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.470] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.470] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.470] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.470] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_kms_client-ul.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.471] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.471] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.471] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.471] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.471] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.471] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_mak-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.472] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.472] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.472] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.472] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.472] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.472] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_mak-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.472] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.472] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.473] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.473] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.473] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.473] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_mak-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.473] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.473] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.474] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.474] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.474] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.475] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_mak-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.475] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.475] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.475] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.475] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.475] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\c2rpridslicensefiles_auto.xml", dwFileAttributes=0x80) returned 0 [0178.476] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\c2rpridslicensefiles_auto.xml" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\c2rpridslicensefiles_auto.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.476] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.476] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.476] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.477] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.477] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-bridge-office.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.477] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-bridge-office.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-bridge-office.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.478] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.478] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.478] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.478] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.478] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root-bridge-test.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.479] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root-bridge-test.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-root-bridge-test.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.479] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.479] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.479] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.479] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.480] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.481] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-root.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.481] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.481] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.481] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.481] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-stil.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.481] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-stil.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-stil.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.482] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.482] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.482] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.482] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.483] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.483] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.483] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.483] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.490] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.491] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-ul.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.491] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.491] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.491] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.491] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.491] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.491] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_grace-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.492] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.492] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.492] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.492] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.492] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.492] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.492] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.492] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.493] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.493] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.493] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.493] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_oem_perp-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.493] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.493] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.493] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.494] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.494] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.494] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_oem_perp-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.494] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.494] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.495] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.495] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.495] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.495] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_oem_perp-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.496] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.496] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.496] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.496] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.496] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.496] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_oem_perp-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.497] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.497] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.497] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.497] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.497] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_retail-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.498] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.498] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.498] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.498] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.499] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_retail-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.499] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.499] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.499] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.499] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.500] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_retail-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.500] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.500] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.500] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.500] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.500] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_retail-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.501] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.501] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.501] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.501] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.501] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.501] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_trial-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.502] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.502] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.502] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.502] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.502] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_trial-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.502] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.502] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.503] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.503] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.503] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.503] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_trial-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.503] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.503] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.503] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.503] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.504] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_kms_client-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.504] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.504] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.504] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.504] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.505] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_kms_client-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.505] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.505] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.505] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.505] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.506] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_kms_client-ul.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.506] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.506] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.506] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.506] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.506] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.506] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_mak-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.507] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.507] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.507] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.507] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.507] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_mak-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.507] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.508] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.508] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.508] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.508] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.508] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_mak-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.508] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.508] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.509] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.509] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.509] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_mak-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.509] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.509] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.509] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.509] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial365-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.510] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial365-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessdemor_bypasstrial365-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.510] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.510] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.510] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.510] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial365-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.511] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial365-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessdemor_bypasstrial365-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.511] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.511] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.511] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.511] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcDemoR_BypassTrial365-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.512] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcDemoR_BypassTrial365-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcdemor_bypasstrial365-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.512] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.512] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.512] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.512] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.513] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcDemoR_BypassTrial365-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.513] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcDemoR_BypassTrial365-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcdemor_bypasstrial365-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.513] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.513] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.513] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.514] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.514] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_grace-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.514] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.514] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.514] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.520] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.520] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.521] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.521] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.521] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.521] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.521] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_oem_perp-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.522] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.522] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.522] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.522] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.522] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.522] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_oem_perp-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.522] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.522] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.523] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.523] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.523] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_oem_perp-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.523] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.523] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.523] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.523] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.524] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.524] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_oem_perp-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.524] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.524] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.524] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.524] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.525] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.525] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_grace-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.525] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.525] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.525] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.525] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.525] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.526] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.526] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.526] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.526] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.526] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.527] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.527] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.527] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.527] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.527] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.528] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.528] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.528] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.528] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.528] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.528] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.529] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.529] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.529] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.529] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.529] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.529] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.530] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.530] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.530] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.530] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp2-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.530] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.530] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.531] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.531] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.531] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp2-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.531] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.531] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.531] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.531] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.532] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.532] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp2-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.532] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.532] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.532] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.532] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.533] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp2-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.533] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.533] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.533] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.533] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.534] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp3-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.534] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.534] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.534] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.534] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.534] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.534] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp3-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.535] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.535] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.535] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.535] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.535] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp3-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.535] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.536] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.536] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.536] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.536] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.536] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp3-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.536] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.536] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.537] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.537] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.537] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.537] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp4-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.537] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.537] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.537] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.537] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.538] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.538] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp4-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.538] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.538] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.538] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.538] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.539] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.539] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp4-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.539] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.539] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.539] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.539] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.539] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.540] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp4-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.540] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.540] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.540] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.540] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.540] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.540] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.541] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.541] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.541] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.545] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.546] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.546] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.546] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.546] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.546] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.546] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.547] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.547] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.547] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.547] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.547] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.548] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.548] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.548] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.548] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.548] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.548] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail2-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.549] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.549] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.549] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.549] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.549] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail2-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.549] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.550] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.550] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.550] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.550] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail2-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.550] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.550] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.551] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.551] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.551] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.551] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail2-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.551] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.551] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.551] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.551] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.552] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail3-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.552] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.552] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.552] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.552] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.553] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.553] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail3-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.553] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.553] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.553] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.553] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.553] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.554] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail3-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.554] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.554] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.554] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.554] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.554] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail3-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.555] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.555] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.555] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.555] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.555] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.555] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.556] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.556] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.556] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.556] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.556] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.556] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.557] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.557] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.557] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.557] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.557] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.557] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.557] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.558] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.558] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial2-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.558] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.558] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.559] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.559] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.559] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial2-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.559] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.559] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.559] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.559] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.560] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.560] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial2-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.560] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.560] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.560] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.560] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.561] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentdemor_bypasstrial180-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.561] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.561] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.561] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.561] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.562] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentdemor_bypasstrial180-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.562] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.562] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.562] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.562] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.562] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.563] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_grace-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.563] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.563] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.563] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.563] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.563] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.564] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.564] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.564] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.564] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.564] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.564] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_oem_perp-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.564] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.564] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.565] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.565] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.565] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.565] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_oem_perp-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.565] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.565] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.566] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.566] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.566] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.566] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_oem_perp-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.566] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.566] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.566] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.574] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.574] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_oem_perp-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.574] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.574] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.575] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.575] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.575] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_retail-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.575] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.575] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.575] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.575] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.576] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.576] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_retail-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.576] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.576] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.576] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.576] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.577] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.577] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_retail-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.577] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.577] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.577] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.577] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.578] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_retail-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.578] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.578] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.579] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.579] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.579] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.579] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.579] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.579] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.580] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.580] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.580] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.580] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.580] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.580] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.580] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.581] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.581] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.581] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.581] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.581] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.581] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.582] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.582] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial2-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.582] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.582] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.582] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.582] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.582] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.583] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial2-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.583] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.583] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.583] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.583] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.583] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial2-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.584] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.584] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.584] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.584] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentVNextR_Grace-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.584] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentVNextR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentvnextr_grace-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.585] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.585] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.585] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.585] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.585] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentVNextR_Grace-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.585] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentVNextR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentvnextr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.585] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.585] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.586] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.586] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.586] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentVNextR_Retail-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.586] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentVNextR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentvnextr_retail-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.586] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.586] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.586] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.587] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentVNextR_Retail-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.587] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentVNextR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentvnextr_retail-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.587] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.587] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.587] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.587] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.588] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentVNextR_Retail-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.588] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentVNextR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentvnextr_retail-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.588] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.588] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.588] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.588] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.588] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentVNextR_Retail-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.589] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentVNextR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentvnextr_retail-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.589] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.589] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.589] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.589] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentVNextR_Trial-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.590] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentVNextR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentvnextr_trial-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.590] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.590] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.590] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.590] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentVNextR_Trial-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.591] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentVNextR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentvnextr_trial-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.591] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.591] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.591] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.591] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.591] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentVNextR_Trial-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.592] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentVNextR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentvnextr_trial-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.592] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.592] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.592] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.592] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.593] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_bypasstrial180-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.593] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.593] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.593] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.593] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.593] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_bypasstrial180-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.594] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.594] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.594] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.594] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.594] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_ConsumerSub_Bypass30-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.594] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_ConsumerSub_Bypass30-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_consumersub_bypass30-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.594] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.594] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.595] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.595] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.595] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_ConsumerSub_Bypass30-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.595] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_ConsumerSub_Bypass30-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_consumersub_bypass30-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.595] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.595] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.596] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.600] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.600] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_EnterpriseSub_Bypass30-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.600] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_EnterpriseSub_Bypass30-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_enterprisesub_bypass30-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.600] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.600] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.600] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.600] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.601] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_EnterpriseSub_Bypass30-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.601] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_EnterpriseSub_Bypass30-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_enterprisesub_bypass30-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.601] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.601] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.601] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.601] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.602] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.602] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_grace-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.602] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.602] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.602] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.602] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.602] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.603] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_grace-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.603] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.603] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.603] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.603] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.603] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.604] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_kms_automation-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.604] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.604] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.604] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.604] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.604] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.606] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_kms_automation-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.607] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.607] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.607] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.607] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.607] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_kms_automation-ul.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.608] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.608] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.608] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.608] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.608] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_O16ConsumerPerp_Bypass30-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.608] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_O16ConsumerPerp_Bypass30-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_o16consumerperp_bypass30-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.608] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.608] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.609] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.609] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_O16ConsumerPerp_Bypass30-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.609] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_O16ConsumerPerp_Bypass30-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_o16consumerperp_bypass30-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.609] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.609] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.610] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.610] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_O16EnterpriseVL_Bypass30-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.610] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_O16EnterpriseVL_Bypass30-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_o16enterprisevl_bypass30-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.610] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.610] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.610] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.610] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.611] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_O16EnterpriseVL_Bypass30-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.611] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_O16EnterpriseVL_Bypass30-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_o16enterprisevl_bypass30-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.611] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.611] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.611] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.611] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_O17EnterpriseVL_Bypass30-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.612] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_O17EnterpriseVL_Bypass30-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_o17enterprisevl_bypass30-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.612] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.612] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.612] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.612] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_O17EnterpriseVL_Bypass30-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.613] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_O17EnterpriseVL_Bypass30-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_o17enterprisevl_bypass30-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.613] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.613] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.613] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.613] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.613] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.614] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_oem_perp-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.614] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.614] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.614] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.614] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.614] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.614] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_oem_perp-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.615] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.615] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.615] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.615] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.615] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.615] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_oem_perp-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.615] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.615] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.616] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.616] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.616] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_oem_perp-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.616] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.616] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.617] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.617] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.617] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.617] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_retail-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.617] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.617] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.617] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.617] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.618] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.618] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_retail-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.618] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.618] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.618] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.618] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.619] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_retail-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.619] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.619] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.619] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.619] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.620] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_retail-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.620] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.620] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.620] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.620] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.621] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.621] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.621] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.621] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.621] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.621] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.622] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.622] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.622] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.622] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.622] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.623] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.623] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.623] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.623] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.623] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.623] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.623] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription2-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.624] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.624] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.624] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.628] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.629] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription2-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.629] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.629] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.629] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.629] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.630] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.630] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription2-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.630] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.630] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.630] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.630] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.631] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.631] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.631] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.631] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.631] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.631] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.631] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.632] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.632] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.632] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.632] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.632] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.633] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.633] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.633] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.633] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.633] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.633] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest2-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.634] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.634] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.634] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.634] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.634] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.634] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest2-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.635] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.635] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.635] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.635] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.635] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest2-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.635] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.635] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.636] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.636] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.636] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.637] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.637] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.637] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.637] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.637] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.637] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.637] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.638] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.638] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.638] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.638] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.638] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.638] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.638] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.639] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.639] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.639] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial2-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.639] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.639] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.639] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.639] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.640] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.640] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial2-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.640] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.640] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.640] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.640] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.641] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.641] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial2-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.641] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.641] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.641] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.641] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.641] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.642] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_trial-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.642] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.642] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.642] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.642] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.642] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_trial-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.643] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.643] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.643] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.643] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.643] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.643] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_trial-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.644] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.644] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.644] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.644] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.644] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_ViewOnly_ZeroGrace-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.644] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_ViewOnly_ZeroGrace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_viewonly_zerograce-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.644] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.644] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.645] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.645] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.645] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_ViewOnly_ZeroGrace-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.645] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_ViewOnly_ZeroGrace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_viewonly_zerograce-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.645] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.645] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.645] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.645] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.646] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_kms_client-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.646] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.646] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.646] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.646] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.647] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_kms_client-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.647] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.647] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.647] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.647] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.648] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_kms_client-ul.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.648] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.648] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.648] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.648] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.648] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.648] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_mak-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.649] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.649] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.649] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.649] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.649] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.649] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_mak-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.649] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.649] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.650] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.650] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.650] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.650] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_mak-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.650] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.650] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.650] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.651] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.651] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_mak-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.651] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.651] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.652] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.658] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessDemoR_BypassTrial365-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.658] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessDemoR_BypassTrial365-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessdemor_bypasstrial365-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.659] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.659] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.659] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.659] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessDemoR_BypassTrial365-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.659] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessDemoR_BypassTrial365-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessdemor_bypasstrial365-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.659] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.660] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.660] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.660] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.660] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.660] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_grace-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.660] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.660] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.661] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.661] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.661] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.661] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.661] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.661] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.662] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.662] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subscription-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.662] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.662] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.662] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.662] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.663] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.663] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subscription-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.663] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.663] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.663] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.663] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.663] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.664] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subscription-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.664] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.664] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.664] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.664] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.665] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtest-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.665] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.665] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.665] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.665] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.665] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.665] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtest-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.666] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.666] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.666] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.666] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.666] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtest-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.666] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.666] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.667] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.667] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.667] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtrial-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.668] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.668] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.668] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.668] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.668] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtrial-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.669] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.669] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.669] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.669] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.669] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.669] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtrial-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.669] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.669] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.670] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.670] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.670] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365EduCloudEDUR_Grace-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.671] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365EduCloudEDUR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365educloudedur_grace-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.671] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.671] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.672] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.672] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.672] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365EduCloudEDUR_Grace-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.672] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365EduCloudEDUR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365educloudedur_grace-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.672] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.672] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.673] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.673] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365EduCloudEDUR_Subscription-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.674] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365EduCloudEDUR_Subscription-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365educloudedur_subscription-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.674] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.674] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.674] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.674] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.674] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365EduCloudEDUR_Subscription-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.675] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365EduCloudEDUR_Subscription-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365educloudedur_subscription-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.675] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.675] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.675] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.675] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365EduCloudEDUR_Subscription-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.676] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365EduCloudEDUR_Subscription-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365educloudedur_subscription-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.676] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.676] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.676] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.676] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.676] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365EduCloudEDUR_SubTrial-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.676] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365EduCloudEDUR_SubTrial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365educloudedur_subtrial-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.677] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.677] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.677] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.677] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365EduCloudEDUR_SubTrial-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.677] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365EduCloudEDUR_SubTrial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365educloudedur_subtrial-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.678] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.678] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.678] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.678] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365EduCloudEDUR_SubTrial-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.678] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365EduCloudEDUR_SubTrial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365educloudedur_subtrial-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.678] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.679] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.679] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.679] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial365-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.679] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial365-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremdemor_bypasstrial365-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.679] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.679] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.680] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.680] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.680] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial365-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.680] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial365-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremdemor_bypasstrial365-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.680] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.680] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.681] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.681] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.681] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_grace-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.681] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.681] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.681] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.689] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.690] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.690] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.690] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.691] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.691] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.691] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription1-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.691] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.692] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.692] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.692] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.692] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription1-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.692] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.692] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.693] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.693] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.693] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.693] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription1-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.693] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.693] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.693] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.693] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.694] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription2-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.694] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.694] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.694] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.694] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.695] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription2-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.695] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.695] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.695] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.695] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.696] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription2-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.696] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.696] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.696] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.696] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.696] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.696] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription3-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.697] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.697] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.697] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.697] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.697] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription3-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.697] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.697] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.698] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.698] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.698] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.698] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription3-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.698] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.698] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.706] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.706] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.706] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.706] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription4-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.706] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.706] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.707] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.707] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.707] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.707] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription4-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.707] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.707] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.708] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.708] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.708] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.708] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription4-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.708] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.708] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.708] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.708] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.709] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.709] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription5-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.709] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.709] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.709] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.709] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.710] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.710] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription5-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.710] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.710] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.710] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.710] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.710] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.711] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription5-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.711] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.711] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.711] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.711] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.711] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest1-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.712] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.712] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.712] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.712] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.712] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.712] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest1-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.712] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.712] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.713] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.713] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.713] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest1-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.713] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.713] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.714] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.714] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.714] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.714] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest2-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.714] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.715] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.715] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.715] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.715] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest2-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.715] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.715] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.716] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.716] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.716] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.716] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest2-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.716] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.716] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.717] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.717] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.717] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.717] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest3-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.717] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.717] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.718] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.718] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-ppd.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.718] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest3-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.718] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.718] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.719] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.725] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.725] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest3-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.725] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.725] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.726] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0178.726] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0178.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest4-pl.xrm-ms", dwFileAttributes=0x80) returned 0 [0178.726] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest4-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest4-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0178.726] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0178.726] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.727] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0179.296] SetLastError (dwErrCode=0x0) [0179.296] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.301] GetLastError () returned 0x5 [0179.301] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0179.301] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.301] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0179.301] SetLastError (dwErrCode=0x0) [0179.301] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.301] GetLastError () returned 0x5 [0179.301] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0179.301] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.301] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\loc\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb5460 [0179.302] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0179.302] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0179.302] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\loc\\AppXManifestLoc.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0179.304] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\loc\\AppXManifestLoc.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\loc\\appxmanifestloc.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.304] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.304] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.304] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0179.304] FindClose (in: hFindFile=0x665abb5460 | out: hFindFile=0x665abb5460) returned 1 [0179.304] SetLastError (dwErrCode=0x0) [0179.304] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\loc\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\loc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.305] GetLastError () returned 0x5 [0179.305] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0179.305] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.305] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0179.305] SetLastError (dwErrCode=0x0) [0179.305] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.305] GetLastError () returned 0x5 [0179.305] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0179.305] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.305] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb4f20 [0179.308] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0179.308] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0179.308] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0179.308] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0179.308] SetLastError (dwErrCode=0x0) [0179.308] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.308] GetLastError () returned 0x5 [0179.308] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0179.308] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.308] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4c20 [0179.310] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.311] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.311] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.312] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\accessmui.msi.16_accessmui.mcxml", dwFileAttributes=0x80) returned 0 [0179.312] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\accessmui.msi.16_accessmui.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\accessmui.msi.16_accessmui.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.313] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.313] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.313] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.313] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.313] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\accessmuiset.msi.16_accessmuiset.mcxml", dwFileAttributes=0x80) returned 0 [0179.314] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\accessmuiset.msi.16_accessmuiset.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\accessmuiset.msi.16_accessmuiset.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.314] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.314] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.314] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.314] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.314] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\branding.mcxml", dwFileAttributes=0x80) returned 0 [0179.316] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\branding.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\branding.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.316] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.316] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.316] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.316] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.317] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\dcfmui.msi.16_dcfmui.mcxml", dwFileAttributes=0x80) returned 0 [0179.317] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\dcfmui.msi.16_dcfmui.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\dcfmui.msi.16_dcfmui.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.317] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.317] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.317] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.317] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.317] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\excelmui.msi.16_excelmui.mcxml", dwFileAttributes=0x80) returned 0 [0179.318] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\excelmui.msi.16_excelmui.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\excelmui.msi.16_excelmui.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.318] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.318] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.318] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.318] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.318] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\groovemui.msi.16_groovemui.mcxml", dwFileAttributes=0x80) returned 0 [0179.318] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\groovemui.msi.16_groovemui.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\groovemui.msi.16_groovemui.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.319] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.319] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.319] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.319] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.319] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\lyncmui.msi.16_lyncmui.mcxml", dwFileAttributes=0x80) returned 0 [0179.319] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\lyncmui.msi.16_lyncmui.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\lyncmui.msi.16_lyncmui.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.319] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.320] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.320] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.320] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.320] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\office32mui.msi.16_office32mui.mcxml", dwFileAttributes=0x80) returned 0 [0179.321] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\office32mui.msi.16_office32mui.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\office32mui.msi.16_office32mui.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.321] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.321] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.321] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.321] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.321] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\officemui.msi.16_AppXManifestLoc.mcxml", dwFileAttributes=0x80) returned 0 [0179.323] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\officemui.msi.16_AppXManifestLoc.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\officemui.msi.16_appxmanifestloc.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.323] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.323] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.323] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.323] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\officemui.msi.16_officemui.mcxml", dwFileAttributes=0x80) returned 0 [0179.324] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\officemui.msi.16_officemui.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\officemui.msi.16_officemui.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.324] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.324] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.324] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.324] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.325] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\officemui.msi.16_PostCommon.Office.MUI.mcxml", dwFileAttributes=0x80) returned 0 [0179.325] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\officemui.msi.16_PostCommon.Office.MUI.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\officemui.msi.16_postcommon.office.mui.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.325] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.326] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.326] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.326] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.326] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\officemuiset.msi.16_officemuiset.mcxml", dwFileAttributes=0x80) returned 0 [0179.326] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\officemuiset.msi.16_officemuiset.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\officemuiset.msi.16_officemuiset.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.326] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.326] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.327] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.327] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.327] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\onenotemui.msi.16_onenotemui.mcxml", dwFileAttributes=0x80) returned 0 [0179.328] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\onenotemui.msi.16_onenotemui.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\onenotemui.msi.16_onenotemui.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.328] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.328] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.328] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.328] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.328] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\osmmui.msi.16_osmmui.mcxml", dwFileAttributes=0x80) returned 0 [0179.328] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\osmmui.msi.16_osmmui.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\osmmui.msi.16_osmmui.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.329] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.329] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.329] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.329] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.329] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\osmuxmui.msi.16_osmuxmui.mcxml", dwFileAttributes=0x80) returned 0 [0179.329] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\osmuxmui.msi.16_osmuxmui.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\osmuxmui.msi.16_osmuxmui.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.329] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.329] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.330] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.330] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.330] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\outlookmui.msi.16_outlookmui.mcxml", dwFileAttributes=0x80) returned 0 [0179.331] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\outlookmui.msi.16_outlookmui.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\outlookmui.msi.16_outlookmui.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.331] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.331] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.331] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.331] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.331] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\powerpointmui.msi.16_powerpointmui.mcxml", dwFileAttributes=0x80) returned 0 [0179.331] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\powerpointmui.msi.16_powerpointmui.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\powerpointmui.msi.16_powerpointmui.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.332] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.332] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.332] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.332] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.332] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\projectmui.msi.16_projectmui.mcxml", dwFileAttributes=0x80) returned 0 [0179.332] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\projectmui.msi.16_projectmui.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\projectmui.msi.16_projectmui.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.332] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.332] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.333] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.333] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.333] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\Proof.Culture.msi.16_proof.mcxml", dwFileAttributes=0x80) returned 0 [0179.333] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\Proof.Culture.msi.16_proof.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\proof.culture.msi.16_proof.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.333] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.333] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.333] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.333] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\proofing.msi.16_proofing.mcxml", dwFileAttributes=0x80) returned 0 [0179.334] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\proofing.msi.16_proofing.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\proofing.msi.16_proofing.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.334] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.334] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.334] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.334] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\publishermui.msi.16_publishermui.mcxml", dwFileAttributes=0x80) returned 0 [0179.335] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\publishermui.msi.16_publishermui.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\publishermui.msi.16_publishermui.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.335] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.335] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.335] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.335] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\visiomui.msi.16_visiomui.mcxml", dwFileAttributes=0x80) returned 0 [0179.336] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\visiomui.msi.16_visiomui.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\visiomui.msi.16_visiomui.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.336] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.336] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.336] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.336] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.336] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\wordmui.msi.16_wordmui.mcxml", dwFileAttributes=0x80) returned 0 [0179.338] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\wordmui.msi.16_wordmui.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\wordmui.msi.16_wordmui.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.338] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.338] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.339] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0179.339] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0179.339] SetLastError (dwErrCode=0x0) [0179.339] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.343] GetLastError () returned 0x5 [0179.343] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0179.343] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.343] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0179.343] SetLastError (dwErrCode=0x0) [0179.343] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.343] GetLastError () returned 0x5 [0179.343] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0179.343] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.343] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\es-es\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4560 [0179.344] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.345] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.345] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.345] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\es-es\\Proof.Culture.msi.16_proof.mcxml", dwFileAttributes=0x80) returned 0 [0179.345] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\es-es\\Proof.Culture.msi.16_proof.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\es-es\\proof.culture.msi.16_proof.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.346] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.346] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.346] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0179.346] FindClose (in: hFindFile=0x665abb4560 | out: hFindFile=0x665abb4560) returned 1 [0179.346] SetLastError (dwErrCode=0x0) [0179.346] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\es-es\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\es-es\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.346] GetLastError () returned 0x5 [0179.346] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0179.347] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.347] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0179.347] SetLastError (dwErrCode=0x0) [0179.347] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.347] GetLastError () returned 0x5 [0179.347] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0179.347] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.347] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\fr-fr\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb45c0 [0179.348] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.348] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.348] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.348] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\fr-fr\\Proof.Culture.msi.16_proof.mcxml", dwFileAttributes=0x80) returned 0 [0179.349] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\fr-fr\\Proof.Culture.msi.16_proof.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\fr-fr\\proof.culture.msi.16_proof.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.350] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.350] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.350] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0179.350] FindClose (in: hFindFile=0x665abb45c0 | out: hFindFile=0x665abb45c0) returned 1 [0179.350] SetLastError (dwErrCode=0x0) [0179.350] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\fr-fr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\fr-fr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.350] GetLastError () returned 0x5 [0179.350] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0179.350] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.350] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0179.350] SetLastError (dwErrCode=0x0) [0179.350] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.350] GetLastError () returned 0x5 [0179.350] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0179.351] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.351] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb5580 [0179.353] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.354] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.354] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.354] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Access.x-none.msi.16_mondoww.mcxml", dwFileAttributes=0x80) returned 0 [0179.355] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Access.x-none.msi.16_mondoww.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\access.x-none.msi.16_mondoww.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.355] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.356] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.356] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.356] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.356] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\AppLocalCRT.x-none.msi.16_AppLocalConditionalCRT.mcxml", dwFileAttributes=0x80) returned 0 [0179.357] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\AppLocalCRT.x-none.msi.16_AppLocalConditionalCRT.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\applocalcrt.x-none.msi.16_applocalconditionalcrt.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.357] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.357] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.357] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.357] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.357] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\AppLocalCRT32.x-none.msi.16_AppLocalConditionalCRTCrossBitness.mcxml", dwFileAttributes=0x80) returned 0 [0179.358] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\AppLocalCRT32.x-none.msi.16_AppLocalConditionalCRTCrossBitness.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\applocalcrt32.x-none.msi.16_applocalconditionalcrtcrossbitness.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.358] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.358] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.358] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.358] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.358] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\AppLocalUCRT.x-none.msi.16_AppLocalConditionalUCRT.mcxml", dwFileAttributes=0x80) returned 0 [0179.359] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\AppLocalUCRT.x-none.msi.16_AppLocalConditionalUCRT.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\applocalucrt.x-none.msi.16_applocalconditionalucrt.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.359] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.359] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.359] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.359] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.360] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\AppLocalUCRT32.x-none.msi.16_AppLocalConditionalUCRTCrossBitness.mcxml", dwFileAttributes=0x80) returned 0 [0179.360] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\AppLocalUCRT32.x-none.msi.16_AppLocalConditionalUCRTCrossBitness.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\applocalucrt32.x-none.msi.16_applocalconditionalucrtcrossbitness.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.361] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.361] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.361] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.361] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.361] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\DCF.x-none.msi.16_mondoww.mcxml", dwFileAttributes=0x80) returned 0 [0179.361] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\DCF.x-none.msi.16_mondoww.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\dcf.x-none.msi.16_mondoww.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.362] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.362] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.362] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.362] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.362] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Excel.x-none.msi.16_mondoww.mcxml", dwFileAttributes=0x80) returned 0 [0179.364] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Excel.x-none.msi.16_mondoww.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\excel.x-none.msi.16_mondoww.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.364] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.364] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.365] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.365] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.365] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Groove.x-none.msi.16_mondoww.mcxml", dwFileAttributes=0x80) returned 0 [0179.365] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Groove.x-none.msi.16_mondoww.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\groove.x-none.msi.16_mondoww.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.366] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.366] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.366] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.366] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.366] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Lync.x-none.msi.16_mondoww.mcxml", dwFileAttributes=0x80) returned 0 [0179.366] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Lync.x-none.msi.16_mondoww.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\lync.x-none.msi.16_mondoww.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.367] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.367] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.367] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.367] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.367] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Office.x-none.msi.16_authored.mcxml", dwFileAttributes=0x80) returned 0 [0179.368] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Office.x-none.msi.16_authored.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\office.x-none.msi.16_authored.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.368] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.368] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.368] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.368] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.368] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Office.x-none.msi.16_Common.mcxml", dwFileAttributes=0x80) returned 0 [0179.369] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Office.x-none.msi.16_Common.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\office.x-none.msi.16_common.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.370] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.370] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.370] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.370] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.370] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Office.x-none.msi.16_licensing.mcxml", dwFileAttributes=0x80) returned 0 [0179.370] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Office.x-none.msi.16_licensing.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\office.x-none.msi.16_licensing.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.371] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.371] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.371] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.371] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.371] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Office.x-none.msi.16_mondoww.mcxml", dwFileAttributes=0x80) returned 0 [0179.371] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Office.x-none.msi.16_mondoww.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\office.x-none.msi.16_mondoww.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.371] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.371] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.372] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.372] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.372] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Office.x-none.msi.16_postcommon.mcxml", dwFileAttributes=0x80) returned 0 [0179.372] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Office.x-none.msi.16_postcommon.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\office.x-none.msi.16_postcommon.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.372] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.372] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.373] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.373] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.373] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Office.x-none.msi.16_PostCommon.Office.x-none.mcxml", dwFileAttributes=0x80) returned 0 [0179.373] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Office.x-none.msi.16_PostCommon.Office.x-none.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\office.x-none.msi.16_postcommon.office.x-none.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.373] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.373] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.374] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.374] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.374] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\office32ww.msi.16_crossbitness.mcxml", dwFileAttributes=0x80) returned 0 [0179.374] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\office32ww.msi.16_crossbitness.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\office32ww.msi.16_crossbitness.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.374] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.374] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.374] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.374] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.375] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\office32ww.msi.16_office32ww.mcxml", dwFileAttributes=0x80) returned 0 [0179.376] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\office32ww.msi.16_office32ww.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\office32ww.msi.16_office32ww.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.376] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.376] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.376] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.376] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.377] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\OneNote.x-none.msi.16_mondoww.mcxml", dwFileAttributes=0x80) returned 0 [0179.377] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\OneNote.x-none.msi.16_mondoww.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\onenote.x-none.msi.16_mondoww.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.377] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.377] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.377] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.377] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\OneNote.x-none.msi.16_OneNote.mcxml", dwFileAttributes=0x80) returned 0 [0179.378] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\OneNote.x-none.msi.16_OneNote.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\onenote.x-none.msi.16_onenote.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.378] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.378] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.378] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.378] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.379] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\OSM.x-none.msi.16_mondoww.mcxml", dwFileAttributes=0x80) returned 0 [0179.379] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\OSM.x-none.msi.16_mondoww.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\osm.x-none.msi.16_mondoww.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.379] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.379] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.379] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.379] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.380] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\OSMUX.x-none.msi.16_mondoww.mcxml", dwFileAttributes=0x80) returned 0 [0179.380] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\OSMUX.x-none.msi.16_mondoww.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\osmux.x-none.msi.16_mondoww.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.380] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.380] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.381] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.381] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.381] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Outlook.x-none.msi.16_mondoww.mcxml", dwFileAttributes=0x80) returned 0 [0179.381] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Outlook.x-none.msi.16_mondoww.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\outlook.x-none.msi.16_mondoww.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.381] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.381] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.382] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.382] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.382] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Outlook.x-none.msi.16_PostCommon.Outlook.x-none.mcxml", dwFileAttributes=0x80) returned 0 [0179.382] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Outlook.x-none.msi.16_PostCommon.Outlook.x-none.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\outlook.x-none.msi.16_postcommon.outlook.x-none.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.382] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.382] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.383] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.383] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.383] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\PowerPivot.x-none.msi.16_mondoww.mcxml", dwFileAttributes=0x80) returned 0 [0179.383] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\PowerPivot.x-none.msi.16_mondoww.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\powerpivot.x-none.msi.16_mondoww.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.383] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.383] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.383] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.383] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.384] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\PowerPoint.x-none.msi.16_mondoww.mcxml", dwFileAttributes=0x80) returned 0 [0179.384] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\PowerPoint.x-none.msi.16_mondoww.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\powerpoint.x-none.msi.16_mondoww.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.384] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.384] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.384] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.384] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.385] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Project.x-none.msi.16_mondoww.mcxml", dwFileAttributes=0x80) returned 0 [0179.385] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Project.x-none.msi.16_mondoww.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\project.x-none.msi.16_mondoww.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.385] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.385] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.385] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.385] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.386] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Publisher.x-none.msi.16_mondoww.mcxml", dwFileAttributes=0x80) returned 0 [0179.386] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Publisher.x-none.msi.16_mondoww.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\publisher.x-none.msi.16_mondoww.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.387] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.387] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.387] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.387] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.387] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Visio.x-none.msi.16_mondoww.mcxml", dwFileAttributes=0x80) returned 0 [0179.387] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Visio.x-none.msi.16_mondoww.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\visio.x-none.msi.16_mondoww.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.387] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.388] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.388] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.388] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.388] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Visio.x-none.msi.16_PostCommon.Visio.x-none.mcxml", dwFileAttributes=0x80) returned 0 [0179.389] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Visio.x-none.msi.16_PostCommon.Visio.x-none.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\visio.x-none.msi.16_postcommon.visio.x-none.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.389] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.389] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.390] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.390] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.390] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Word.x-none.msi.16_mondoww.mcxml", dwFileAttributes=0x80) returned 0 [0179.390] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Word.x-none.msi.16_mondoww.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\word.x-none.msi.16_mondoww.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.390] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.390] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.391] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0179.391] FindClose (in: hFindFile=0x665abb5580 | out: hFindFile=0x665abb5580) returned 1 [0179.391] SetLastError (dwErrCode=0x0) [0179.391] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.394] GetLastError () returned 0x5 [0179.394] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0179.394] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.394] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0179.394] FindClose (in: hFindFile=0x665abb4f20 | out: hFindFile=0x665abb4f20) returned 1 [0179.394] SetLastError (dwErrCode=0x0) [0179.394] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.394] GetLastError () returned 0x5 [0179.394] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0179.394] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.394] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0179.395] SetLastError (dwErrCode=0x0) [0179.395] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.395] GetLastError () returned 0x5 [0179.395] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0179.395] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.395] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office15\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb4c20 [0179.395] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0179.395] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0179.395] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0179.395] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office15\\pkeyconfig-office.xrm-ms", dwFileAttributes=0x80) returned 0 [0179.397] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office15\\pkeyconfig-office.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\office15\\pkeyconfig-office.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.397] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.397] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.397] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0179.397] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0179.397] SetLastError (dwErrCode=0x0) [0179.397] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office15\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office15\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.398] GetLastError () returned 0x5 [0179.398] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0179.398] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.398] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0179.398] SetLastError (dwErrCode=0x0) [0179.398] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.398] GetLastError () returned 0x5 [0179.398] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0179.398] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.398] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb5160 [0179.398] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0179.403] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0179.403] SetLastError (dwErrCode=0x0) [0179.403] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.403] GetLastError () returned 0x5 [0179.403] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0179.403] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.403] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4f20 [0179.404] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.405] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.405] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.405] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ACCESS12.ACC", dwFileAttributes=0x80) returned 0 [0179.405] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ACCESS12.ACC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\access12.acc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.406] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.406] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.406] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.406] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\AccessRuntime2019_eula.txt", dwFileAttributes=0x80) returned 0 [0179.407] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\AccessRuntime2019_eula.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\accessruntime2019_eula.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.408] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.408] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.408] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.408] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.408] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\AccessRuntime_eula.txt", dwFileAttributes=0x80) returned 0 [0179.409] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\AccessRuntime_eula.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\accessruntime_eula.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.410] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.410] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.410] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.410] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.410] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ACCESS_WHATSNEW.XML", dwFileAttributes=0x80) returned 0 [0179.410] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ACCESS_WHATSNEW.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\access_whatsnew.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.411] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.411] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.411] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.411] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.411] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.411] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ACTIP10.HLP", dwFileAttributes=0x80) returned 0 [0179.412] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ACTIP10.HLP" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\actip10.hlp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.412] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.412] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.412] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.412] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.412] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.412] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\AEC.VSL", dwFileAttributes=0x80) returned 0 [0179.413] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\AEC.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\aec.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.413] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.413] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.413] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.413] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.414] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\AECUTILS.VSL", dwFileAttributes=0x80) returned 0 [0179.414] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\AECUTILS.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\aecutils.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.414] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.415] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.415] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.415] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.415] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ASSET.VRD", dwFileAttributes=0x80) returned 0 [0179.419] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ASSET.VRD" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\asset.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.420] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.420] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.420] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.420] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.420] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\BASIC.HTM", dwFileAttributes=0x80) returned 0 [0179.421] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\BASIC.HTM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\basic.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.421] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.421] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.421] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.421] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.421] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.421] SetLastError (dwErrCode=0x0) [0179.421] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.422] GetLastError () returned 0x5 [0179.422] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0179.422] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.422] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Bibliography\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb5520 [0179.422] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.423] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.423] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.423] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Bibliography\\BIBFORM.XML", dwFileAttributes=0x80) returned 0 [0179.423] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Bibliography\\BIBFORM.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\bibliography\\bibform.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.424] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.424] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.424] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0179.424] FindClose (in: hFindFile=0x665abb5520 | out: hFindFile=0x665abb5520) returned 1 [0179.424] SetLastError (dwErrCode=0x0) [0179.424] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Bibliography\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\bibliography\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.424] GetLastError () returned 0x5 [0179.424] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0179.424] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.424] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.424] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.424] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\BSTORM.VSL", dwFileAttributes=0x80) returned 0 [0179.426] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\BSTORM.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\bstorm.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.426] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.426] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.426] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.426] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.426] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\BW.CSS", dwFileAttributes=0x80) returned 0 [0179.426] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\BW.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\bw.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.427] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.427] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.427] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.427] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.427] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\CALEVENT.VRD", dwFileAttributes=0x80) returned 0 [0179.427] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\CALEVENT.VRD" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\calevent.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.427] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.428] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.428] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.428] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.428] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.428] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Client2019_eula.txt", dwFileAttributes=0x80) returned 0 [0179.429] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Client2019_eula.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\client2019_eula.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.429] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.429] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.429] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.429] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.429] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ClientARMRefer2019_eula.txt", dwFileAttributes=0x80) returned 0 [0179.430] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ClientARMRefer2019_eula.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\clientarmrefer2019_eula.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.430] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.430] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.431] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.431] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.431] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ClientARMRefer_eula.txt", dwFileAttributes=0x80) returned 0 [0179.431] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ClientARMRefer_eula.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\clientarmrefer_eula.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.432] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.432] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.432] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.432] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.432] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ClientLangPack2019_eula.txt", dwFileAttributes=0x80) returned 0 [0179.433] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ClientLangPack2019_eula.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\clientlangpack2019_eula.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.433] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.433] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.433] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.433] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ClientLangPack_eula.txt", dwFileAttributes=0x80) returned 0 [0179.433] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ClientLangPack_eula.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\clientlangpack_eula.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.434] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.434] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.434] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.434] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.434] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ClientOSub2019_eula.txt", dwFileAttributes=0x80) returned 0 [0179.434] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ClientOSub2019_eula.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\clientosub2019_eula.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.434] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.434] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.435] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.435] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.435] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ClientOSub_eula.txt", dwFileAttributes=0x80) returned 0 [0179.435] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ClientOSub_eula.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\clientosub_eula.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.435] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.435] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.435] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.436] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.436] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ClientPreview_eula.txt", dwFileAttributes=0x80) returned 0 [0179.436] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ClientPreview_eula.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\clientpreview_eula.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.436] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.436] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.436] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.436] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.437] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ClientSub2019_eula.txt", dwFileAttributes=0x80) returned 0 [0179.437] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ClientSub2019_eula.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\clientsub2019_eula.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.437] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.437] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.438] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.438] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.438] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ClientSub_eula.txt", dwFileAttributes=0x80) returned 0 [0179.438] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ClientSub_eula.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\clientsub_eula.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.438] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.438] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.438] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.438] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.439] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ClientVolumeLicense2019_eula.txt", dwFileAttributes=0x80) returned 0 [0179.439] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ClientVolumeLicense2019_eula.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\clientvolumelicense2019_eula.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.439] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.439] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.439] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.439] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.440] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ClientVolumeLicense_eula.txt", dwFileAttributes=0x80) returned 0 [0179.440] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ClientVolumeLicense_eula.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\clientvolumelicense_eula.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.440] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.440] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.440] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.442] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.442] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\client_eula.txt", dwFileAttributes=0x80) returned 0 [0179.442] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\client_eula.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\client_eula.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.442] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.442] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.443] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.443] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.443] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.443] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.443] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\COFFEE.CSS", dwFileAttributes=0x80) returned 0 [0179.443] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\COFFEE.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\coffee.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.443] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.443] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.443] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.443] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.444] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\CollectSignatures_Init.xsn", dwFileAttributes=0x80) returned 0 [0179.444] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\CollectSignatures_Init.xsn" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\collectsignatures_init.xsn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.444] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.444] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.444] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.444] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.444] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\CollectSignatures_Sign.xsn", dwFileAttributes=0x80) returned 0 [0179.445] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\CollectSignatures_Sign.xsn" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\collectsignatures_sign.xsn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.445] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.445] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.445] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.445] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.445] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\CT_ROOTS.XML", dwFileAttributes=0x80) returned 0 [0179.446] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\CT_ROOTS.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\ct_roots.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.446] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.446] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.446] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.446] SetLastError (dwErrCode=0x0) [0179.446] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.447] GetLastError () returned 0x5 [0179.447] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0179.447] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.447] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4920 [0179.449] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.449] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.449] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\+Connect to New Data Source.odc", dwFileAttributes=0x80) returned 0 [0179.449] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\+Connect to New Data Source.odc" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\dataservices\\+connect to new data source.odc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.449] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.449] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.450] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.450] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.450] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\+NewSQLServerConnection.odc", dwFileAttributes=0x80) returned 0 [0179.450] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\+NewSQLServerConnection.odc" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\dataservices\\+newsqlserverconnection.odc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.450] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.450] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.450] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.450] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.450] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.451] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\FOLDER.ICO", dwFileAttributes=0x80) returned 0 [0179.451] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\FOLDER.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\dataservices\\folder.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.451] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.451] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.451] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0179.451] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0179.452] SetLastError (dwErrCode=0x0) [0179.452] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\dataservices\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.455] GetLastError () returned 0x5 [0179.455] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0179.455] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.455] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.455] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.455] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DBENGR.VSL", dwFileAttributes=0x80) returned 0 [0179.456] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DBENGR.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\dbengr.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.456] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.456] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.456] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.456] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.456] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DBSAMPLE.MDB", dwFileAttributes=0x80) returned 0 [0179.457] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DBSAMPLE.MDB" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\dbsample.mdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.457] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.457] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.457] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.457] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.457] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DBWIZ.VSL", dwFileAttributes=0x80) returned 0 [0179.458] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DBWIZ.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\dbwiz.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.459] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.459] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.459] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.459] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.459] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DEFAULT.CSS", dwFileAttributes=0x80) returned 0 [0179.460] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DEFAULT.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\default.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.460] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.460] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.461] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.461] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.461] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DOORSCHD.VRD", dwFileAttributes=0x80) returned 0 [0179.462] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DOORSCHD.VRD" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\doorschd.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.462] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.462] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.462] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.462] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.462] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DRILLDWN.VSL", dwFileAttributes=0x80) returned 0 [0179.462] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DRILLDWN.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\drilldwn.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.463] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.463] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.463] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.463] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.463] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DWGCNV.VSL", dwFileAttributes=0x80) returned 0 [0179.464] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DWGCNV.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\dwgcnv.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.464] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.464] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.465] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.465] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.465] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.465] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.465] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EADOCUMENTAPPROVAL_REVIEW.XSN", dwFileAttributes=0x80) returned 0 [0179.465] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EADOCUMENTAPPROVAL_REVIEW.XSN" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\eadocumentapproval_review.xsn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.466] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.466] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.466] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.466] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.466] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.466] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.466] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.466] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EQPLIST.VRD", dwFileAttributes=0x80) returned 0 [0179.468] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EQPLIST.VRD" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\eqplist.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.468] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.468] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.468] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.468] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.469] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXCEL.HXS", dwFileAttributes=0x80) returned 0 [0179.469] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXCEL.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\excel.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.469] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.469] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.469] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.469] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.470] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXCEL_COL.HXC", dwFileAttributes=0x80) returned 0 [0179.470] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXCEL_COL.HXC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\excel_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.470] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.470] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.471] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.471] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.471] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXCEL_COL.HXT", dwFileAttributes=0x80) returned 0 [0179.472] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXCEL_COL.HXT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\excel_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.472] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.472] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.472] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.472] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.473] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXCEL_F_COL.HXK", dwFileAttributes=0x80) returned 0 [0179.473] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXCEL_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\excel_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.474] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.474] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.474] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.474] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.474] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXCEL_K_COL.HXK", dwFileAttributes=0x80) returned 0 [0179.474] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXCEL_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\excel_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.474] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.474] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.475] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.475] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.475] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXCEL_WHATSNEW.XML", dwFileAttributes=0x80) returned 0 [0179.475] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXCEL_WHATSNEW.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\excel_whatsnew.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.475] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.475] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.476] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.476] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.476] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.476] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXPTOOWS.XLA", dwFileAttributes=0x80) returned 0 [0179.476] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXPTOOWS.XLA" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\exptoows.xla"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.476] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.476] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.476] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.476] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.477] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\FACILITY.VSL", dwFileAttributes=0x80) returned 0 [0179.478] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\FACILITY.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\facility.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.478] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.478] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.478] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.478] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.479] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\FLOCH.VRD", dwFileAttributes=0x80) returned 0 [0179.479] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\FLOCH.VRD" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\floch.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.480] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.480] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.480] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.482] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.483] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\FOREST.CSS", dwFileAttributes=0x80) returned 0 [0179.483] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\FOREST.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\forest.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.484] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.484] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.484] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.484] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.484] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GANTT.CSS", dwFileAttributes=0x80) returned 0 [0179.485] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GANTT.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\gantt.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.486] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.486] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.486] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.486] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.486] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GANTT.VRD", dwFileAttributes=0x80) returned 0 [0179.486] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GANTT.VRD" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\gantt.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.486] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.487] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.487] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.487] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.487] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GANTT.VSL", dwFileAttributes=0x80) returned 0 [0179.488] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GANTT.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\gantt.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.488] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.488] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.488] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.488] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.488] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GR8GALRY.GRA", dwFileAttributes=0x80) returned 0 [0179.489] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GR8GALRY.GRA" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\gr8galry.gra"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.489] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.489] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.489] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.489] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GRAPH.HXS", dwFileAttributes=0x80) returned 0 [0179.490] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GRAPH.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\graph.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.490] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.490] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.491] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.491] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.491] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GRAPH_COL.HXC", dwFileAttributes=0x80) returned 0 [0179.491] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GRAPH_COL.HXC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\graph_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.491] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.491] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.491] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.492] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.492] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GRAPH_COL.HXT", dwFileAttributes=0x80) returned 0 [0179.492] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GRAPH_COL.HXT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\graph_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.493] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.493] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.493] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.493] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.493] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GRAPH_F_COL.HXK", dwFileAttributes=0x80) returned 0 [0179.494] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GRAPH_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\graph_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.494] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.494] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.494] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.494] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.495] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GRAPH_K_COL.HXK", dwFileAttributes=0x80) returned 0 [0179.495] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GRAPH_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\graph_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.495] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.495] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.495] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.495] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.495] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.495] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.496] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GROOVE.HXS", dwFileAttributes=0x80) returned 0 [0179.497] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GROOVE.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\groove.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.497] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.497] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.497] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.497] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.497] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GROOVE_COL.HXC", dwFileAttributes=0x80) returned 0 [0179.498] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GROOVE_COL.HXC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\groove_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.498] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.498] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.498] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.498] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GROOVE_COL.HXT", dwFileAttributes=0x80) returned 0 [0179.498] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GROOVE_COL.HXT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\groove_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.499] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.499] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.499] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.499] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GROOVE_F_COL.HXK", dwFileAttributes=0x80) returned 0 [0179.499] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GROOVE_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\groove_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.499] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.500] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.500] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.500] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GROOVE_K_COL.HXK", dwFileAttributes=0x80) returned 0 [0179.500] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GROOVE_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\groove_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.500] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.500] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.501] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.501] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.501] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\HVAC.VSL", dwFileAttributes=0x80) returned 0 [0179.503] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\HVAC.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\hvac.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.503] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.503] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.503] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.503] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\HVACDIFF.VRD", dwFileAttributes=0x80) returned 0 [0179.505] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\HVACDIFF.VRD" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\hvacdiff.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.505] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.505] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.505] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.505] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\HVACDUCT.VRD", dwFileAttributes=0x80) returned 0 [0179.506] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\HVACDUCT.VRD" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\hvacduct.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.506] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.506] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.506] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.506] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.506] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.506] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\INSTLIST.VRD", dwFileAttributes=0x80) returned 0 [0179.509] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\INSTLIST.VRD" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\instlist.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.509] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.509] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.509] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.509] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\INVENTRY.VRD", dwFileAttributes=0x80) returned 0 [0179.510] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\INVENTRY.VRD" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\inventry.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.510] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.510] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.510] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.510] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.511] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Invite or Link.one", dwFileAttributes=0x80) returned 0 [0179.511] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Invite or Link.one" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\invite or link.one"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.511] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.511] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.511] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.511] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.511] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\JADE.CSS", dwFileAttributes=0x80) returned 0 [0179.512] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\JADE.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\jade.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.512] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.512] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.512] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.512] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LGND.VSL", dwFileAttributes=0x80) returned 0 [0179.513] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LGND.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lgnd.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.514] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.514] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.514] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.514] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC.HXS", dwFileAttributes=0x80) returned 0 [0179.515] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lync.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.515] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.515] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.515] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.515] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.515] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LyncBasic_Eula.txt", dwFileAttributes=0x80) returned 0 [0179.517] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LyncBasic_Eula.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lyncbasic_eula.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.517] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.517] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.517] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.517] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.517] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.517] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LyncVDI_Eula.txt", dwFileAttributes=0x80) returned 0 [0179.518] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LyncVDI_Eula.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lyncvdi_eula.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.519] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.519] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.519] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.519] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.519] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_BASIC.HXS", dwFileAttributes=0x80) returned 0 [0179.519] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_BASIC.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lync_basic.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.519] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.520] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.520] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.520] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_BASIC_COL.HXC", dwFileAttributes=0x80) returned 0 [0179.520] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_BASIC_COL.HXC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lync_basic_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.520] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.520] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.521] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.521] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_BASIC_COL.HXT", dwFileAttributes=0x80) returned 0 [0179.522] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_BASIC_COL.HXT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lync_basic_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.522] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.522] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.522] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.522] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_BASIC_F_COL.HXK", dwFileAttributes=0x80) returned 0 [0179.523] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_BASIC_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lync_basic_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.523] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.523] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.523] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.523] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.524] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_BASIC_K_COL.HXK", dwFileAttributes=0x80) returned 0 [0179.524] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_BASIC_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lync_basic_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.524] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.524] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.524] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.524] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.524] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_COL.HXC", dwFileAttributes=0x80) returned 0 [0179.525] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_COL.HXC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lync_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.525] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.525] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.525] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.525] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.525] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_COL.HXT", dwFileAttributes=0x80) returned 0 [0179.526] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_COL.HXT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lync_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.526] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.526] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.526] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.526] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_F_COL.HXK", dwFileAttributes=0x80) returned 0 [0179.527] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lync_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.527] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.527] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.527] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.527] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_K_COL.HXK", dwFileAttributes=0x80) returned 0 [0179.527] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lync_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.528] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.528] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.528] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.528] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_ONLINE.HXS", dwFileAttributes=0x80) returned 0 [0179.529] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_ONLINE.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lync_online.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.529] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.529] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.530] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.530] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_ONLINE_COL.HXC", dwFileAttributes=0x80) returned 0 [0179.530] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_ONLINE_COL.HXC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lync_online_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.530] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.530] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.530] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.531] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_ONLINE_COL.HXT", dwFileAttributes=0x80) returned 0 [0179.531] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_ONLINE_COL.HXT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lync_online_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.531] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.531] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.532] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.532] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.532] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_ONLINE_F_COL.HXK", dwFileAttributes=0x80) returned 0 [0179.532] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_ONLINE_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lync_online_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.532] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.532] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.532] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.532] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_ONLINE_K_COL.HXK", dwFileAttributes=0x80) returned 0 [0179.533] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_ONLINE_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lync_online_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.533] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.533] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.533] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.533] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.533] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.533] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.533] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.533] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.534] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MOVE.VRD", dwFileAttributes=0x80) returned 0 [0179.534] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MOVE.VRD" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\move.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.534] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.534] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.534] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.534] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.534] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.534] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSACCESS.HXS", dwFileAttributes=0x80) returned 0 [0179.535] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSACCESS.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\msaccess.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.535] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.535] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.536] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.536] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.536] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSACCESS_COL.HXC", dwFileAttributes=0x80) returned 0 [0179.536] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSACCESS_COL.HXC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\msaccess_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.536] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.537] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.537] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.537] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.537] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSACCESS_COL.HXT", dwFileAttributes=0x80) returned 0 [0179.539] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSACCESS_COL.HXT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\msaccess_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.539] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.539] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.540] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.540] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.540] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSACCESS_F_COL.HXK", dwFileAttributes=0x80) returned 0 [0179.540] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSACCESS_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\msaccess_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.540] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.540] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.540] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.540] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.541] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSACCESS_K_COL.HXK", dwFileAttributes=0x80) returned 0 [0179.541] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSACCESS_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\msaccess_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.541] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.541] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.541] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.541] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.541] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.542] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSO.ACL", dwFileAttributes=0x80) returned 0 [0179.542] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSO.ACL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\mso.acl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.542] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.542] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.542] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.542] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.542] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.542] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.543] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSOUC.HXS", dwFileAttributes=0x80) returned 0 [0179.543] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSOUC.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\msouc.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.544] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.544] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.544] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.544] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.544] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSOUC_COL.HXC", dwFileAttributes=0x80) returned 0 [0179.545] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSOUC_COL.HXC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\msouc_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.545] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.545] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.545] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.545] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSOUC_COL.HXT", dwFileAttributes=0x80) returned 0 [0179.546] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSOUC_COL.HXT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\msouc_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.546] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.546] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.546] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.546] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSOUC_F_COL.HXK", dwFileAttributes=0x80) returned 0 [0179.547] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSOUC_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\msouc_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.547] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.547] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.547] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.547] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSOUC_K_COL.HXK", dwFileAttributes=0x80) returned 0 [0179.548] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSOUC_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\msouc_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.548] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.548] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.548] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.549] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSPUB.HXS", dwFileAttributes=0x80) returned 0 [0179.550] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSPUB.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\mspub.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.550] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.550] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.551] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.551] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.551] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSPUB.OPG", dwFileAttributes=0x80) returned 0 [0179.551] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSPUB.OPG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\mspub.opg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.551] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.551] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.552] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.552] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSPUB_COL.HXC", dwFileAttributes=0x80) returned 0 [0179.552] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSPUB_COL.HXC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\mspub_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.552] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.552] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.552] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.552] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.553] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSPUB_COL.HXT", dwFileAttributes=0x80) returned 0 [0179.553] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSPUB_COL.HXT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\mspub_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.553] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.553] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.553] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.553] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.553] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSPUB_F_COL.HXK", dwFileAttributes=0x80) returned 0 [0179.554] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSPUB_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\mspub_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.554] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.554] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.554] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.554] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSPUB_K_COL.HXK", dwFileAttributes=0x80) returned 0 [0179.554] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSPUB_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\mspub_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.555] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.555] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.555] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.555] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSQRY32.CHM", dwFileAttributes=0x80) returned 0 [0179.555] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSQRY32.CHM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\msqry32.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.556] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.556] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.556] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.556] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.556] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\NETWORK.CSS", dwFileAttributes=0x80) returned 0 [0179.556] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\NETWORK.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\network.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.556] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.557] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.557] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.557] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\NETWORK1.VRD", dwFileAttributes=0x80) returned 0 [0179.557] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\NETWORK1.VRD" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\network1.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.558] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.558] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.558] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.558] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.558] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\NETWORK2.VRD", dwFileAttributes=0x80) returned 0 [0179.558] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\NETWORK2.VRD" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\network2.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.558] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.558] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.559] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.559] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\NETWORK3.VRD", dwFileAttributes=0x80) returned 0 [0179.560] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\NETWORK3.VRD" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\network3.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.560] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.560] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.560] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.560] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.560] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.560] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OCCMPVRD.XML", dwFileAttributes=0x80) returned 0 [0179.560] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OCCMPVRD.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\occmpvrd.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.561] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.561] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.561] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.561] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.561] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OCMODVRD.XML", dwFileAttributes=0x80) returned 0 [0179.561] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OCMODVRD.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\ocmodvrd.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.562] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.562] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.562] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.562] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.562] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.562] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\officeinventoryagentfallback.xml", dwFileAttributes=0x80) returned 0 [0179.562] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\officeinventoryagentfallback.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\officeinventoryagentfallback.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.562] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.562] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.563] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.563] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\officeinventoryagentlogon.xml", dwFileAttributes=0x80) returned 0 [0179.563] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\officeinventoryagentlogon.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\officeinventoryagentlogon.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.563] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.563] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.564] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.564] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.564] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\offsym.ttf", dwFileAttributes=0x80) returned 0 [0179.565] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\offsym.ttf" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\offsym.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.565] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.565] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.565] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.565] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.566] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\offsymb.ttf", dwFileAttributes=0x80) returned 0 [0179.567] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\offsymb.ttf" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\offsymb.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.567] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.567] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.567] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.567] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.567] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\offsyml.ttf", dwFileAttributes=0x80) returned 0 [0179.567] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\offsyml.ttf" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\offsyml.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.568] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.568] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.568] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.568] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.568] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\offsymsb.ttf", dwFileAttributes=0x80) returned 0 [0179.568] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\offsymsb.ttf" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\offsymsb.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.568] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.569] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.569] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.569] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.569] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\offsymsl.ttf", dwFileAttributes=0x80) returned 0 [0179.570] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\offsymsl.ttf" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\offsymsl.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.570] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.570] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.570] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.570] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.570] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\offsymxl.ttf", dwFileAttributes=0x80) returned 0 [0179.571] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\offsymxl.ttf" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\offsymxl.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.571] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.571] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.571] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.571] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.571] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.571] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ONENOTE.HXS", dwFileAttributes=0x80) returned 0 [0179.572] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ONENOTE.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\onenote.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.572] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.572] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.573] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.573] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ONENOTE_COL.HXC", dwFileAttributes=0x80) returned 0 [0179.573] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ONENOTE_COL.HXC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\onenote_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.573] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.573] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.574] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.574] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ONENOTE_COL.HXT", dwFileAttributes=0x80) returned 0 [0179.576] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ONENOTE_COL.HXT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\onenote_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.576] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.576] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.576] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.576] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.577] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ONENOTE_F_COL.HXK", dwFileAttributes=0x80) returned 0 [0179.577] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ONENOTE_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\onenote_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.577] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.577] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.578] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.578] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ONENOTE_K_COL.HXK", dwFileAttributes=0x80) returned 0 [0179.578] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ONENOTE_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\onenote_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.578] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.578] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.579] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.580] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ONENOTE_WHATSNEW.XML", dwFileAttributes=0x80) returned 0 [0179.581] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ONENOTE_WHATSNEW.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\onenote_whatsnew.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.582] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.582] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.582] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.582] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.582] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ONGuide.onepkg", dwFileAttributes=0x80) returned 0 [0179.583] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ONGuide.onepkg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\onguide.onepkg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.583] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.583] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.583] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.583] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.583] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ORGCH.VRD", dwFileAttributes=0x80) returned 0 [0179.585] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ORGCH.VRD" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\orgch.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.585] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.585] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.585] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.586] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.586] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ORGCHART.CHM", dwFileAttributes=0x80) returned 0 [0179.586] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ORGCHART.CHM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\orgchart.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.586] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.586] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.586] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.586] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ORGCHART.VSL", dwFileAttributes=0x80) returned 0 [0179.588] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ORGCHART.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\orgchart.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.588] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.588] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.589] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.589] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.589] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ORGPOS.VRD", dwFileAttributes=0x80) returned 0 [0179.590] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ORGPOS.VRD" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\orgpos.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.590] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.590] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.591] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.591] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.591] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ORGWIZ.VSL", dwFileAttributes=0x80) returned 0 [0179.592] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ORGWIZ.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\orgwiz.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.592] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.592] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.592] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.592] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.592] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTFORM.DAT", dwFileAttributes=0x80) returned 0 [0179.593] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTFORM.DAT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\outform.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.593] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.593] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.593] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.593] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.593] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLOOK.HOL", dwFileAttributes=0x80) returned 0 [0179.594] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLOOK.HOL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\outlook.hol"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.594] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.594] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.594] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.594] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.594] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLOOK.HXS", dwFileAttributes=0x80) returned 0 [0179.597] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLOOK.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\outlook.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.597] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.597] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.597] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.597] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.597] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLOOK_COL.HXC", dwFileAttributes=0x80) returned 0 [0179.598] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLOOK_COL.HXC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\outlook_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.598] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.598] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.599] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.599] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.599] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLOOK_COL.HXT", dwFileAttributes=0x80) returned 0 [0179.599] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLOOK_COL.HXT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\outlook_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.599] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.599] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.599] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.599] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.600] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLOOK_F_COL.HXK", dwFileAttributes=0x80) returned 0 [0179.600] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLOOK_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\outlook_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.600] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.600] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.600] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.600] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.601] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLOOK_K_COL.HXK", dwFileAttributes=0x80) returned 0 [0179.601] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLOOK_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\outlook_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.601] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.601] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.601] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.601] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.601] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLOOK_WHATSNEW.XML", dwFileAttributes=0x80) returned 0 [0179.602] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLOOK_WHATSNEW.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\outlook_whatsnew.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.602] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.602] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.602] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.602] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.602] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLPERF.H", dwFileAttributes=0x80) returned 0 [0179.603] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLPERF.H" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\outlperf.h"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.603] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.603] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.603] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.603] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.603] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.603] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.604] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PASSPORT.CSS", dwFileAttributes=0x80) returned 0 [0179.604] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PASSPORT.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\passport.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.604] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.604] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.604] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.605] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.605] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PASTEL.CSS", dwFileAttributes=0x80) returned 0 [0179.605] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PASTEL.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pastel.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.605] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.605] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.605] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.605] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.606] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PE.VSL", dwFileAttributes=0x80) returned 0 [0179.606] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PE.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pe.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.606] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.607] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.607] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.607] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PIPELINE.VRD", dwFileAttributes=0x80) returned 0 [0179.607] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PIPELINE.VRD" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pipeline.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.607] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.607] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.608] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.608] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.608] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.608] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.608] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\POWERPNT.HXS", dwFileAttributes=0x80) returned 0 [0179.608] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\POWERPNT.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\powerpnt.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.609] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.609] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.609] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.609] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\POWERPNT_COL.HXC", dwFileAttributes=0x80) returned 0 [0179.609] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\POWERPNT_COL.HXC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\powerpnt_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.610] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.610] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.610] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.610] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\POWERPNT_COL.HXT", dwFileAttributes=0x80) returned 0 [0179.610] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\POWERPNT_COL.HXT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\powerpnt_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.610] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.610] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.611] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.611] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.611] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\POWERPNT_F_COL.HXK", dwFileAttributes=0x80) returned 0 [0179.611] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\POWERPNT_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\powerpnt_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.611] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.611] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.611] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.611] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\POWERPNT_K_COL.HXK", dwFileAttributes=0x80) returned 0 [0179.612] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\POWERPNT_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\powerpnt_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.612] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.612] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.612] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.612] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.613] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.613] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PPT_WHATSNEW.XML", dwFileAttributes=0x80) returned 0 [0179.616] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PPT_WHATSNEW.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\ppt_whatsnew.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.617] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.617] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.617] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.617] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.617] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PREVIEWTEMPLATE.POTX", dwFileAttributes=0x80) returned 0 [0179.617] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PREVIEWTEMPLATE.POTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\previewtemplate.potx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.617] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.618] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.618] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.618] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.618] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PREVIEWTEMPLATE2.POTX", dwFileAttributes=0x80) returned 0 [0179.618] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PREVIEWTEMPLATE2.POTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\previewtemplate2.potx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.618] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.618] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.619] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.619] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PRIMARY.CSS", dwFileAttributes=0x80) returned 0 [0179.620] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PRIMARY.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\primary.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.620] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.620] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.620] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.620] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.621] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROPRPT.VSL", dwFileAttributes=0x80) returned 0 [0179.621] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROPRPT.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\proprpt.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.622] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.622] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.622] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.622] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROPRPT.VSSX", dwFileAttributes=0x80) returned 0 [0179.623] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROPRPT.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\proprpt.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.623] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.623] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.623] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.623] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.623] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.623] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.DOC", dwFileAttributes=0x80) returned 0 [0179.624] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.DOC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\prottpln.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.624] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.624] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.624] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.625] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.PPT", dwFileAttributes=0x80) returned 0 [0179.625] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.PPT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\prottpln.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.626] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.626] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.626] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.626] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.626] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.XLS", dwFileAttributes=0x80) returned 0 [0179.626] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.XLS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\prottpln.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.627] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.627] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.627] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.627] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.DOC", dwFileAttributes=0x80) returned 0 [0179.628] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.DOC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\prottplv.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.628] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.628] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.629] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.629] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.PPT", dwFileAttributes=0x80) returned 0 [0179.629] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.PPT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\prottplv.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.629] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.629] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.629] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.629] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.630] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.XLS", dwFileAttributes=0x80) returned 0 [0179.630] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.XLS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\prottplv.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.631] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.631] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.631] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.631] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.631] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\prstevnt.VSL", dwFileAttributes=0x80) returned 0 [0179.631] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\prstevnt.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\prstevnt.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.631] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.631] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.632] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.632] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHKEY.DAT", dwFileAttributes=0x80) returned 0 [0179.632] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHKEY.DAT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\psrchkey.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.632] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.632] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.633] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.633] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHLEX.DAT", dwFileAttributes=0x80) returned 0 [0179.633] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHLEX.DAT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\psrchlex.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.633] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.633] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.633] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.633] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.634] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHLTS.DAT", dwFileAttributes=0x80) returned 0 [0179.634] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHLTS.DAT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\psrchlts.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.634] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.634] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.635] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.635] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHPHN.DAT", dwFileAttributes=0x80) returned 0 [0179.635] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHPHN.DAT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\psrchphn.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.636] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.636] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.636] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.636] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHSRN.DAT", dwFileAttributes=0x80) returned 0 [0179.636] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHSRN.DAT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\psrchsrn.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.637] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.637] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.637] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.637] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.637] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.637] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBCOLOR.SCM", dwFileAttributes=0x80) returned 0 [0179.638] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBCOLOR.SCM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubcolor.scm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.638] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.638] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.638] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.638] SetLastError (dwErrCode=0x0) [0179.638] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.638] GetLastError () returned 0x5 [0179.638] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0179.638] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.639] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb53a0 [0179.640] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.640] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.640] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.640] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.641] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME01.CSS", dwFileAttributes=0x80) returned 0 [0179.641] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME01.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme01.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.641] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.641] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.641] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.641] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.641] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME02.CSS", dwFileAttributes=0x80) returned 0 [0179.642] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME02.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme02.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.642] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.642] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.643] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.643] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.643] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME03.CSS", dwFileAttributes=0x80) returned 0 [0179.644] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME03.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme03.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.644] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.644] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.644] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.644] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.644] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME04.CSS", dwFileAttributes=0x80) returned 0 [0179.645] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME04.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme04.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.645] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.645] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.645] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.645] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.645] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME05.CSS", dwFileAttributes=0x80) returned 0 [0179.646] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME05.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme05.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.646] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.646] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.646] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.646] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME06.CSS", dwFileAttributes=0x80) returned 0 [0179.647] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME06.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme06.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.647] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.647] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.647] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.647] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME07.CSS", dwFileAttributes=0x80) returned 0 [0179.648] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME07.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme07.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.648] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.648] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.648] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.648] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.649] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME08.CSS", dwFileAttributes=0x80) returned 0 [0179.649] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME08.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme08.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.649] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.649] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.649] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.649] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.650] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME09.CSS", dwFileAttributes=0x80) returned 0 [0179.650] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME09.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme09.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.650] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.650] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.650] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.650] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME10.CSS", dwFileAttributes=0x80) returned 0 [0179.651] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME10.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme10.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.651] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.651] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.651] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.651] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.652] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME11.CSS", dwFileAttributes=0x80) returned 0 [0179.652] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME11.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme11.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.652] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.652] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.652] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.652] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.653] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME12.CSS", dwFileAttributes=0x80) returned 0 [0179.653] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME12.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme12.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.653] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.653] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.654] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.654] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.654] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME13.CSS", dwFileAttributes=0x80) returned 0 [0179.654] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME13.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme13.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.654] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.654] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.654] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.654] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME14.CSS", dwFileAttributes=0x80) returned 0 [0179.655] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME14.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme14.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.655] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.655] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.655] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.655] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME15.CSS", dwFileAttributes=0x80) returned 0 [0179.656] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME15.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme15.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.656] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.656] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.657] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.657] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.657] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME16.CSS", dwFileAttributes=0x80) returned 0 [0179.657] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME16.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme16.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.657] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.657] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.657] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.657] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME17.CSS", dwFileAttributes=0x80) returned 0 [0179.658] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME17.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme17.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.658] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.658] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.658] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.658] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME18.CSS", dwFileAttributes=0x80) returned 0 [0179.659] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME18.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme18.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.659] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.659] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.659] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.659] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME19.CSS", dwFileAttributes=0x80) returned 0 [0179.660] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME19.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme19.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.660] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.660] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.660] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.660] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME20.CSS", dwFileAttributes=0x80) returned 0 [0179.661] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME20.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme20.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.662] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.662] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.662] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.662] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME21.CSS", dwFileAttributes=0x80) returned 0 [0179.662] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME21.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme21.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.663] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.663] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.663] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.663] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.663] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME22.CSS", dwFileAttributes=0x80) returned 0 [0179.663] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME22.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme22.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.663] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.663] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.664] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.664] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME23.CSS", dwFileAttributes=0x80) returned 0 [0179.664] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME23.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme23.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.664] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.664] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.665] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.665] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.665] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME24.CSS", dwFileAttributes=0x80) returned 0 [0179.665] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME24.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme24.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.665] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.665] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.665] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.665] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME25.CSS", dwFileAttributes=0x80) returned 0 [0179.667] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME25.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme25.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.667] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.667] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.667] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.667] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME26.CSS", dwFileAttributes=0x80) returned 0 [0179.668] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME26.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme26.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.668] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.668] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.668] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.668] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME27.CSS", dwFileAttributes=0x80) returned 0 [0179.669] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME27.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme27.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.669] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.669] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.669] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.669] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.670] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME28.CSS", dwFileAttributes=0x80) returned 0 [0179.670] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME28.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme28.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.670] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.671] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.671] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.671] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.671] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME29.CSS", dwFileAttributes=0x80) returned 0 [0179.671] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME29.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme29.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.671] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.671] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.672] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.672] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.672] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME30.CSS", dwFileAttributes=0x80) returned 0 [0179.672] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME30.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme30.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.672] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.672] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.672] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.673] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME31.CSS", dwFileAttributes=0x80) returned 0 [0179.673] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME31.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme31.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.673] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.673] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.673] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.673] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.674] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME32.CSS", dwFileAttributes=0x80) returned 0 [0179.674] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME32.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme32.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.674] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.674] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.674] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.675] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME33.CSS", dwFileAttributes=0x80) returned 0 [0179.675] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME33.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme33.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.675] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.676] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.676] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.676] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.676] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME34.CSS", dwFileAttributes=0x80) returned 0 [0179.676] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME34.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme34.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.676] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.676] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.677] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.677] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME35.CSS", dwFileAttributes=0x80) returned 0 [0179.678] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME35.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme35.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.678] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.678] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.678] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.678] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME36.CSS", dwFileAttributes=0x80) returned 0 [0179.679] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME36.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme36.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.679] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.679] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.679] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.679] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.680] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME37.CSS", dwFileAttributes=0x80) returned 0 [0179.680] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME37.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme37.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.680] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.680] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.681] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.681] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME38.CSS", dwFileAttributes=0x80) returned 0 [0179.681] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME38.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme38.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.681] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.681] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.681] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.681] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.682] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME39.CSS", dwFileAttributes=0x80) returned 0 [0179.682] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME39.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme39.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.682] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.682] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.682] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.683] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.683] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME40.CSS", dwFileAttributes=0x80) returned 0 [0179.683] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME40.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme40.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.683] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.683] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.683] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.683] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.684] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME41.CSS", dwFileAttributes=0x80) returned 0 [0179.684] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME41.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme41.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.684] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.684] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.684] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.684] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.685] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME42.CSS", dwFileAttributes=0x80) returned 0 [0179.685] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME42.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme42.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.685] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.685] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.685] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.685] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.685] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME43.CSS", dwFileAttributes=0x80) returned 0 [0179.686] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME43.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme43.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.686] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.686] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.686] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.686] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.686] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME44.CSS", dwFileAttributes=0x80) returned 0 [0179.687] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME44.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme44.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.687] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.687] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.687] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.687] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME45.CSS", dwFileAttributes=0x80) returned 0 [0179.687] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME45.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme45.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.688] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.688] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.688] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.688] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.688] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME46.CSS", dwFileAttributes=0x80) returned 0 [0179.689] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME46.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme46.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.689] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.689] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.689] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.689] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME47.CSS", dwFileAttributes=0x80) returned 0 [0179.690] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME47.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme47.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.690] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.690] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.691] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.691] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME48.CSS", dwFileAttributes=0x80) returned 0 [0179.693] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME48.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme48.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.693] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.693] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.694] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.694] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME49.CSS", dwFileAttributes=0x80) returned 0 [0179.694] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME49.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme49.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.695] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.695] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.695] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.695] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME50.CSS", dwFileAttributes=0x80) returned 0 [0179.695] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME50.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme50.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.695] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.696] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.696] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.696] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.696] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME51.CSS", dwFileAttributes=0x80) returned 0 [0179.696] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME51.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme51.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.696] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.696] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.697] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.697] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME52.CSS", dwFileAttributes=0x80) returned 0 [0179.697] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME52.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme52.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.697] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.705] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.705] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.705] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.705] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME53.CSS", dwFileAttributes=0x80) returned 0 [0179.705] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME53.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme53.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.705] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.706] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.706] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.706] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.706] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME54.CSS", dwFileAttributes=0x80) returned 0 [0179.706] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME54.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme54.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.706] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.706] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.707] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.707] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.707] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME55.CSS", dwFileAttributes=0x80) returned 0 [0179.707] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME55.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme55.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.707] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.707] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.707] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0179.707] FindClose (in: hFindFile=0x665abb53a0 | out: hFindFile=0x665abb53a0) returned 1 [0179.708] SetLastError (dwErrCode=0x0) [0179.708] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.711] GetLastError () returned 0x5 [0179.711] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0179.711] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.711] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.711] SetLastError (dwErrCode=0x0) [0179.711] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.711] GetLastError () returned 0x5 [0179.711] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0179.711] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.711] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4920 [0179.713] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.714] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.714] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.714] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.714] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR10F.GIF", dwFileAttributes=0x80) returned 0 [0179.714] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR10F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir10f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.714] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.714] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.715] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.715] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR11F.GIF", dwFileAttributes=0x80) returned 0 [0179.715] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR11F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir11f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.715] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.715] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.715] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.715] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.716] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR12F.GIF", dwFileAttributes=0x80) returned 0 [0179.716] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR12F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir12f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.716] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.716] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.716] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.716] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.716] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR13F.GIF", dwFileAttributes=0x80) returned 0 [0179.717] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR13F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir13f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.717] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.717] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.718] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.718] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR14F.GIF", dwFileAttributes=0x80) returned 0 [0179.718] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR14F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir14f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.718] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.718] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.718] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.718] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR15F.GIF", dwFileAttributes=0x80) returned 0 [0179.719] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR15F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir15f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.719] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.719] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.720] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.720] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.720] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR16F.GIF", dwFileAttributes=0x80) returned 0 [0179.720] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR16F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir16f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.720] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.720] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.721] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.721] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR17F.GIF", dwFileAttributes=0x80) returned 0 [0179.721] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR17F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir17f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.721] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.721] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.722] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.722] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.722] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR18F.GIF", dwFileAttributes=0x80) returned 0 [0179.722] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR18F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir18f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.722] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.722] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.722] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.722] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR19F.GIF", dwFileAttributes=0x80) returned 0 [0179.724] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR19F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir19f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.724] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.724] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.725] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.725] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR1B.GIF", dwFileAttributes=0x80) returned 0 [0179.726] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR1B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir1b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.726] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.726] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.726] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.726] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR1F.GIF", dwFileAttributes=0x80) returned 0 [0179.727] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR1F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir1f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.727] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.727] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.727] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.727] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.727] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR20F.GIF", dwFileAttributes=0x80) returned 0 [0179.728] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR20F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir20f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.728] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.728] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.728] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.728] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR21F.GIF", dwFileAttributes=0x80) returned 0 [0179.728] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR21F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir21f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.729] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.729] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.729] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.729] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR22F.GIF", dwFileAttributes=0x80) returned 0 [0179.730] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR22F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir22f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.730] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.730] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.730] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.730] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR23F.GIF", dwFileAttributes=0x80) returned 0 [0179.730] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR23F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir23f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.731] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.731] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.731] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.731] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR24F.GIF", dwFileAttributes=0x80) returned 0 [0179.731] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR24F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir24f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.732] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.732] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.732] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.732] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR25F.GIF", dwFileAttributes=0x80) returned 0 [0179.733] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR25F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir25f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.733] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.733] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.733] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.733] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR26F.GIF", dwFileAttributes=0x80) returned 0 [0179.734] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR26F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir26f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.734] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.734] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.734] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.734] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR27F.GIF", dwFileAttributes=0x80) returned 0 [0179.734] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR27F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir27f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.735] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.735] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.735] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.735] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR28B.GIF", dwFileAttributes=0x80) returned 0 [0179.736] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR28B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir28b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.736] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.736] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.736] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.736] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR28F.GIF", dwFileAttributes=0x80) returned 0 [0179.737] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR28F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir28f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.737] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.737] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.737] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.737] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR29B.GIF", dwFileAttributes=0x80) returned 0 [0179.738] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR29B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir29b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.738] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.738] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.739] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.739] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR29F.GIF", dwFileAttributes=0x80) returned 0 [0179.739] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR29F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir29f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.740] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.740] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.740] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.740] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR2B.GIF", dwFileAttributes=0x80) returned 0 [0179.740] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR2B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir2b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.741] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.741] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.741] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.741] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR2F.GIF", dwFileAttributes=0x80) returned 0 [0179.741] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR2F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir2f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.741] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.741] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.742] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.742] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR30B.GIF", dwFileAttributes=0x80) returned 0 [0179.742] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR30B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir30b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.742] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.742] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.742] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.742] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.743] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR30F.GIF", dwFileAttributes=0x80) returned 0 [0179.743] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR30F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir30f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.743] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.743] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.743] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.743] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR31B.GIF", dwFileAttributes=0x80) returned 0 [0179.744] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR31B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir31b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.744] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.744] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.744] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.744] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR31F.GIF", dwFileAttributes=0x80) returned 0 [0179.745] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR31F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir31f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.746] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.746] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.746] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.746] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR32B.GIF", dwFileAttributes=0x80) returned 0 [0179.747] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR32B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir32b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.747] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.747] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.747] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.747] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.747] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR32F.GIF", dwFileAttributes=0x80) returned 0 [0179.747] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR32F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir32f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.748] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.748] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.748] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.749] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR33B.GIF", dwFileAttributes=0x80) returned 0 [0179.750] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR33B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir33b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.750] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.750] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.750] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.750] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.750] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR33F.GIF", dwFileAttributes=0x80) returned 0 [0179.750] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR33F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir33f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.751] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.751] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.751] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.751] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR34B.GIF", dwFileAttributes=0x80) returned 0 [0179.751] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR34B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir34b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.752] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.752] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.752] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.752] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.752] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR34F.GIF", dwFileAttributes=0x80) returned 0 [0179.752] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR34F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir34f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.752] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.752] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.753] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.753] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR35B.GIF", dwFileAttributes=0x80) returned 0 [0179.753] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR35B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir35b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.753] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.753] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.753] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.753] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.754] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR35F.GIF", dwFileAttributes=0x80) returned 0 [0179.754] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR35F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir35f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.754] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.754] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.754] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.754] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.755] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR36B.GIF", dwFileAttributes=0x80) returned 0 [0179.755] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR36B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir36b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.755] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.755] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.755] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.755] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.755] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR36F.GIF", dwFileAttributes=0x80) returned 0 [0179.756] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR36F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir36f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.756] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.756] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.756] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.756] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR37F.GIF", dwFileAttributes=0x80) returned 0 [0179.757] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR37F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir37f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.757] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.757] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.758] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.758] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR38F.GIF", dwFileAttributes=0x80) returned 0 [0179.758] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR38F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir38f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.758] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.758] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.759] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.759] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR39F.GIF", dwFileAttributes=0x80) returned 0 [0179.759] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR39F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir39f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.760] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.760] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.760] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.760] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.760] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR3B.GIF", dwFileAttributes=0x80) returned 0 [0179.760] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR3B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir3b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.761] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.761] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.761] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.761] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.761] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR3F.GIF", dwFileAttributes=0x80) returned 0 [0179.761] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR3F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir3f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.762] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.762] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.762] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.762] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR40F.GIF", dwFileAttributes=0x80) returned 0 [0179.762] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR40F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir40f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.762] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.762] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.763] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.763] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.763] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR41F.GIF", dwFileAttributes=0x80) returned 0 [0179.763] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR41F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir41f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.763] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.763] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.763] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.763] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR42F.GIF", dwFileAttributes=0x80) returned 0 [0179.764] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR42F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir42f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.764] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.764] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.764] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.764] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.765] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR43B.GIF", dwFileAttributes=0x80) returned 0 [0179.765] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR43B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir43b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.765] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.765] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.765] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.765] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.765] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR43F.GIF", dwFileAttributes=0x80) returned 0 [0179.766] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR43F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir43f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.766] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.766] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.766] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.767] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR44B.GIF", dwFileAttributes=0x80) returned 0 [0179.767] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR44B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir44b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.768] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.768] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.768] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.768] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.768] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR44F.GIF", dwFileAttributes=0x80) returned 0 [0179.768] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR44F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir44f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.768] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.768] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.769] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.769] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.769] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR45B.GIF", dwFileAttributes=0x80) returned 0 [0179.769] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR45B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir45b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.769] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.769] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.769] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.769] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR45F.GIF", dwFileAttributes=0x80) returned 0 [0179.770] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR45F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir45f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.770] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.770] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.770] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.770] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.771] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR46B.GIF", dwFileAttributes=0x80) returned 0 [0179.771] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR46B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir46b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.771] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.771] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.771] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.771] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.771] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR46F.GIF", dwFileAttributes=0x80) returned 0 [0179.772] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR46F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir46f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.772] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.772] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.772] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.772] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.772] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR47B.GIF", dwFileAttributes=0x80) returned 0 [0179.772] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR47B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir47b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.773] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.773] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.773] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.773] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR47F.GIF", dwFileAttributes=0x80) returned 0 [0179.773] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR47F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir47f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.773] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.773] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.774] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.774] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR48B.GIF", dwFileAttributes=0x80) returned 0 [0179.774] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR48B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir48b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.774] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.774] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.774] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.774] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.775] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR48F.GIF", dwFileAttributes=0x80) returned 0 [0179.777] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR48F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir48f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.777] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.777] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.777] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.777] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.777] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR49B.GIF", dwFileAttributes=0x80) returned 0 [0179.778] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR49B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir49b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.778] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.778] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.779] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.779] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.779] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR49F.GIF", dwFileAttributes=0x80) returned 0 [0179.779] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR49F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir49f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.779] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.779] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.779] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.779] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR4B.GIF", dwFileAttributes=0x80) returned 0 [0179.780] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR4B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir4b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.781] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.781] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.781] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.781] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR4F.GIF", dwFileAttributes=0x80) returned 0 [0179.781] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR4F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir4f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.781] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.781] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.782] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.782] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR50B.GIF", dwFileAttributes=0x80) returned 0 [0179.782] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR50B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir50b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.782] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.782] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.783] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.783] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR50F.GIF", dwFileAttributes=0x80) returned 0 [0179.783] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR50F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir50f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.783] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.783] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.783] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.784] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR51B.GIF", dwFileAttributes=0x80) returned 0 [0179.785] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR51B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir51b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.785] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.785] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.785] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.785] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.786] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR51F.GIF", dwFileAttributes=0x80) returned 0 [0179.786] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR51F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir51f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.786] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.786] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.786] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.786] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.786] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR5B.GIF", dwFileAttributes=0x80) returned 0 [0179.787] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR5B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir5b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.787] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.787] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.787] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.787] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.787] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR5F.GIF", dwFileAttributes=0x80) returned 0 [0179.788] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR5F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir5f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.788] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.788] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.788] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.788] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.789] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR6B.GIF", dwFileAttributes=0x80) returned 0 [0179.789] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR6B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir6b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.789] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.789] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.790] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.790] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.790] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR6F.GIF", dwFileAttributes=0x80) returned 0 [0179.790] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR6F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir6f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.790] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.790] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.791] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.791] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.791] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR7B.GIF", dwFileAttributes=0x80) returned 0 [0179.791] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR7B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir7b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.791] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.791] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.792] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.792] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.792] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR7F.GIF", dwFileAttributes=0x80) returned 0 [0179.792] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR7F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir7f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.792] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.792] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.793] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.793] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR8B.GIF", dwFileAttributes=0x80) returned 0 [0179.793] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR8B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir8b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.793] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.793] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.793] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.793] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.794] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR8F.GIF", dwFileAttributes=0x80) returned 0 [0179.794] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR8F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir8f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.794] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.794] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.794] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.794] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR9B.GIF", dwFileAttributes=0x80) returned 0 [0179.795] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR9B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir9b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.795] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.795] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.795] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.795] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR9F.GIF", dwFileAttributes=0x80) returned 0 [0179.796] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR9F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir9f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.796] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.796] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.796] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.796] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.796] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR00.GIF", dwFileAttributes=0x80) returned 0 [0179.797] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR00.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir00.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.797] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.797] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.798] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.798] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.798] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR10F.GIF", dwFileAttributes=0x80) returned 0 [0179.798] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR10F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir10f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.799] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.799] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.799] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.799] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.799] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR11F.GIF", dwFileAttributes=0x80) returned 0 [0179.799] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR11F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir11f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.800] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.800] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.800] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.800] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.800] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR12F.GIF", dwFileAttributes=0x80) returned 0 [0179.801] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR12F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir12f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.801] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.801] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.801] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.801] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR13F.GIF", dwFileAttributes=0x80) returned 0 [0179.802] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR13F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir13f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.802] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.802] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.802] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.802] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.802] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR14F.GIF", dwFileAttributes=0x80) returned 0 [0179.803] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR14F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir14f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.803] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.803] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.803] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.803] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.804] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR15F.GIF", dwFileAttributes=0x80) returned 0 [0179.804] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR15F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir15f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.804] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.804] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.804] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.804] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR16F.GIF", dwFileAttributes=0x80) returned 0 [0179.805] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR16F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir16f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.805] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.805] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.805] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.805] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR17F.GIF", dwFileAttributes=0x80) returned 0 [0179.806] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR17F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir17f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.806] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.806] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.806] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.806] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR18F.GIF", dwFileAttributes=0x80) returned 0 [0179.807] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR18F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir18f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.808] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.808] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.808] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.808] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR19F.GIF", dwFileAttributes=0x80) returned 0 [0179.809] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR19F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir19f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.809] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.809] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.809] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.809] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.809] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR1B.GIF", dwFileAttributes=0x80) returned 0 [0179.810] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR1B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir1b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.810] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.810] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.811] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.811] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.811] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR1F.GIF", dwFileAttributes=0x80) returned 0 [0179.811] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR1F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir1f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.811] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.811] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.811] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.811] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.812] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR20F.GIF", dwFileAttributes=0x80) returned 0 [0179.812] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR20F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir20f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.812] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.812] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.812] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.812] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.813] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR21F.GIF", dwFileAttributes=0x80) returned 0 [0179.813] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR21F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir21f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.813] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.813] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.813] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.813] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.813] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR22F.GIF", dwFileAttributes=0x80) returned 0 [0179.814] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR22F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir22f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.814] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.814] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.814] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.814] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR23F.GIF", dwFileAttributes=0x80) returned 0 [0179.814] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR23F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir23f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.815] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.815] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.815] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.815] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR24F.GIF", dwFileAttributes=0x80) returned 0 [0179.815] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR24F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir24f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.816] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.816] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.816] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.816] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR25F.GIF", dwFileAttributes=0x80) returned 0 [0179.816] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR25F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir25f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.817] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.817] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.817] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.817] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR26F.GIF", dwFileAttributes=0x80) returned 0 [0179.818] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR26F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir26f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.818] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.818] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.818] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.818] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR27F.GIF", dwFileAttributes=0x80) returned 0 [0179.820] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR27F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir27f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.820] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.820] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.820] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.821] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR28F.GIF", dwFileAttributes=0x80) returned 0 [0179.822] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR28F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir28f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.822] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.822] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.823] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.823] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.823] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR29F.GIF", dwFileAttributes=0x80) returned 0 [0179.823] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR29F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir29f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.823] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.823] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.824] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.824] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.824] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR2B.GIF", dwFileAttributes=0x80) returned 0 [0179.825] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR2B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir2b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.825] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.825] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.825] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.825] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.825] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR2F.GIF", dwFileAttributes=0x80) returned 0 [0179.825] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR2F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir2f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.826] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.826] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.826] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.826] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR30F.GIF", dwFileAttributes=0x80) returned 0 [0179.826] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR30F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir30f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.826] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.827] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.827] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.827] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.827] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR31F.GIF", dwFileAttributes=0x80) returned 0 [0179.827] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR31F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir31f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.827] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.828] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.828] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.828] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.828] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR32F.GIF", dwFileAttributes=0x80) returned 0 [0179.828] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR32F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir32f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.828] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.828] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.829] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.829] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR33F.GIF", dwFileAttributes=0x80) returned 0 [0179.829] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR33F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir33f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.829] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.829] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.830] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.830] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR34F.GIF", dwFileAttributes=0x80) returned 0 [0179.830] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR34F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir34f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.830] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.830] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.830] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.831] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR35F.GIF", dwFileAttributes=0x80) returned 0 [0179.831] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR35F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir35f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.832] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.832] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.832] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.832] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR36F.GIF", dwFileAttributes=0x80) returned 0 [0179.833] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR36F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir36f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.833] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.833] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.833] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.833] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR37F.GIF", dwFileAttributes=0x80) returned 0 [0179.834] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR37F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir37f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.834] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.834] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.834] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.834] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR38F.GIF", dwFileAttributes=0x80) returned 0 [0179.835] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR38F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir38f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.835] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.835] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.835] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.835] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR39F.GIF", dwFileAttributes=0x80) returned 0 [0179.835] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR39F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir39f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.836] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.836] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.836] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.836] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR3B.GIF", dwFileAttributes=0x80) returned 0 [0179.836] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR3B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir3b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.836] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.837] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.837] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.837] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR3F.GIF", dwFileAttributes=0x80) returned 0 [0179.837] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR3F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir3f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.837] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.837] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.838] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.838] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR40F.GIF", dwFileAttributes=0x80) returned 0 [0179.838] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR40F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir40f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.838] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.839] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.839] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.839] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR41F.GIF", dwFileAttributes=0x80) returned 0 [0179.839] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR41F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir41f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.839] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.839] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.840] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.840] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR42F.GIF", dwFileAttributes=0x80) returned 0 [0179.840] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR42F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir42f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.840] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.840] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.840] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.841] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR43B.GIF", dwFileAttributes=0x80) returned 0 [0179.841] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR43B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir43b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.842] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.842] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.842] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.842] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR43F.GIF", dwFileAttributes=0x80) returned 0 [0179.843] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR43F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir43f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.843] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.843] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.843] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.843] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR44B.GIF", dwFileAttributes=0x80) returned 0 [0179.844] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR44B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir44b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.844] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.844] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.844] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.844] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR44F.GIF", dwFileAttributes=0x80) returned 0 [0179.845] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR44F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir44f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.845] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.845] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.845] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.845] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.846] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR45B.GIF", dwFileAttributes=0x80) returned 0 [0179.846] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR45B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir45b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.846] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.846] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.846] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.846] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR45F.GIF", dwFileAttributes=0x80) returned 0 [0179.847] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR45F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir45f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.847] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.847] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.847] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.847] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR46B.GIF", dwFileAttributes=0x80) returned 0 [0179.848] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR46B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir46b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.848] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.848] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.848] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.848] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR46F.GIF", dwFileAttributes=0x80) returned 0 [0179.848] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR46F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir46f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.849] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.849] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.849] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.849] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.849] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR47B.GIF", dwFileAttributes=0x80) returned 0 [0179.849] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR47B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir47b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.849] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.850] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.850] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.850] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.850] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR47F.GIF", dwFileAttributes=0x80) returned 0 [0179.850] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR47F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir47f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.850] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.850] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.851] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.851] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR48B.GIF", dwFileAttributes=0x80) returned 0 [0179.851] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR48B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir48b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.852] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.852] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.852] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.852] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR48F.GIF", dwFileAttributes=0x80) returned 0 [0179.853] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR48F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir48f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.853] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.853] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.853] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.853] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR49B.GIF", dwFileAttributes=0x80) returned 0 [0179.854] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR49B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir49b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.854] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.854] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.854] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.854] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR49F.GIF", dwFileAttributes=0x80) returned 0 [0179.855] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR49F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir49f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.855] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.855] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.855] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.855] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR4B.GIF", dwFileAttributes=0x80) returned 0 [0179.856] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR4B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir4b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.856] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.856] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.856] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.856] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.856] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR4F.GIF", dwFileAttributes=0x80) returned 0 [0179.857] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR4F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir4f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.857] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.857] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.857] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.857] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR50B.GIF", dwFileAttributes=0x80) returned 0 [0179.857] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR50B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir50b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.858] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.858] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.858] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.858] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR50F.GIF", dwFileAttributes=0x80) returned 0 [0179.858] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR50F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir50f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.859] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.859] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.859] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.859] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.859] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR51B.GIF", dwFileAttributes=0x80) returned 0 [0179.859] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR51B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir51b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.859] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.859] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.860] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.860] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR51F.GIF", dwFileAttributes=0x80) returned 0 [0179.860] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR51F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir51f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.860] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.860] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.861] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.861] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.861] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR5B.GIF", dwFileAttributes=0x80) returned 0 [0179.863] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR5B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir5b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.863] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.864] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.864] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.864] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.864] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR5F.GIF", dwFileAttributes=0x80) returned 0 [0179.865] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR5F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir5f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.865] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.865] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.865] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.865] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.866] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR6B.GIF", dwFileAttributes=0x80) returned 0 [0179.866] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR6B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir6b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.866] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.866] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.866] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.866] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.866] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR6F.GIF", dwFileAttributes=0x80) returned 0 [0179.867] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR6F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir6f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.867] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.867] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.868] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.868] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.868] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR7B.GIF", dwFileAttributes=0x80) returned 0 [0179.868] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR7B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir7b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.868] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.868] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.868] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.868] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR7F.GIF", dwFileAttributes=0x80) returned 0 [0179.869] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR7F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir7f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.869] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.870] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.870] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.870] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.870] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR8B.GIF", dwFileAttributes=0x80) returned 0 [0179.870] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR8B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir8b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.871] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.871] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.871] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.871] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.871] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR8F.GIF", dwFileAttributes=0x80) returned 0 [0179.871] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR8F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir8f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.872] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.872] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.873] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.873] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR9B.GIF", dwFileAttributes=0x80) returned 0 [0179.873] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR9B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir9b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.873] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.874] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.874] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.874] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR9F.GIF", dwFileAttributes=0x80) returned 0 [0179.874] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR9F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir9f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.875] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.875] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.875] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0179.875] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0179.876] SetLastError (dwErrCode=0x0) [0179.876] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.880] GetLastError () returned 0x5 [0179.880] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0179.880] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.880] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.880] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.880] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.880] SetLastError (dwErrCode=0x0) [0179.880] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.881] GetLastError () returned 0x5 [0179.881] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0179.881] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.881] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb43e0 [0179.883] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.883] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.883] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicelegant.dotx", dwFileAttributes=0x80) returned 0 [0179.884] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicelegant.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\basicelegant.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.884] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.884] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.884] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.884] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicsimple.dotx", dwFileAttributes=0x80) returned 0 [0179.885] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicsimple.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\basicsimple.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.885] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.885] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.886] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.886] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicstylish.dotx", dwFileAttributes=0x80) returned 0 [0179.886] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicstylish.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\basicstylish.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.886] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.886] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.887] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.887] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwcapitalized.dotx", dwFileAttributes=0x80) returned 0 [0179.888] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwcapitalized.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\bwcapitalized.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.889] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.889] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.889] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.889] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwclassic.dotx", dwFileAttributes=0x80) returned 0 [0179.890] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwclassic.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\bwclassic.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.891] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.891] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.891] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.891] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwnumbered.dotx", dwFileAttributes=0x80) returned 0 [0179.892] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwnumbered.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\bwnumbered.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.892] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.892] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.892] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.892] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\casual.dotx", dwFileAttributes=0x80) returned 0 [0179.893] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\casual.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\casual.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.894] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.894] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.894] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.894] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\centered.dotx", dwFileAttributes=0x80) returned 0 [0179.895] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\centered.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\centered.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.895] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.895] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.895] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.896] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\Classic.dotx", dwFileAttributes=0x80) returned 0 [0179.896] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\Classic.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\classic.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.896] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.897] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.897] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.897] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\Default.dotx", dwFileAttributes=0x80) returned 0 [0179.898] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\Default.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\default.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.898] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.898] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.898] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.898] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linesdistinctive.dotx", dwFileAttributes=0x80) returned 0 [0179.899] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linesdistinctive.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\linesdistinctive.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.900] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.900] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.900] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.900] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linessimple.dotx", dwFileAttributes=0x80) returned 0 [0179.902] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linessimple.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\linessimple.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.902] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.902] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.902] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.902] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linesstylish.dotx", dwFileAttributes=0x80) returned 0 [0179.903] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linesstylish.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\linesstylish.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.903] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.903] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.903] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.903] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.903] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.904] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\shaded.dotx", dwFileAttributes=0x80) returned 0 [0179.904] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\shaded.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\shaded.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.905] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.905] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.905] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.905] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.905] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\word2013.dotx", dwFileAttributes=0x80) returned 0 [0179.905] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\word2013.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\word2013.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.906] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.906] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.906] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0179.906] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.906] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\word2013bw.dotx", dwFileAttributes=0x80) returned 0 [0179.907] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\word2013bw.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\word2013bw.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.907] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.907] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.907] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0179.907] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0179.908] SetLastError (dwErrCode=0x0) [0179.908] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.912] GetLastError () returned 0x5 [0179.912] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0179.912] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.912] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.912] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.913] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ReviewRouting_Init.xsn", dwFileAttributes=0x80) returned 0 [0179.914] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ReviewRouting_Init.xsn" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\reviewrouting_init.xsn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.915] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.915] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.915] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.915] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.915] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ReviewRouting_Review.xsn", dwFileAttributes=0x80) returned 0 [0179.915] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ReviewRouting_Review.xsn" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\reviewrouting_review.xsn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.915] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.916] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.916] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.916] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.916] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ROSE.CSS", dwFileAttributes=0x80) returned 0 [0179.917] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ROSE.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\rose.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.917] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.917] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.917] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.917] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.917] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SAVASWEB.VSL", dwFileAttributes=0x80) returned 0 [0179.918] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SAVASWEB.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\savasweb.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.918] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.919] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.919] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.919] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.919] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SETLANG.HXS", dwFileAttributes=0x80) returned 0 [0179.920] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SETLANG.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\setlang.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.921] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.921] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.921] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.921] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.921] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SETLANG_COL.HXC", dwFileAttributes=0x80) returned 0 [0179.922] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SETLANG_COL.HXC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\setlang_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.922] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.922] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.922] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.928] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.928] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SETLANG_COL.HXT", dwFileAttributes=0x80) returned 0 [0179.928] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SETLANG_COL.HXT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\setlang_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.929] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.929] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.929] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.929] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.929] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SETLANG_F_COL.HXK", dwFileAttributes=0x80) returned 0 [0179.930] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SETLANG_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\setlang_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.930] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.930] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.930] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.930] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.931] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SETLANG_K_COL.HXK", dwFileAttributes=0x80) returned 0 [0179.931] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SETLANG_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\setlang_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.931] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.931] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.932] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.932] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.932] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.932] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SHAPNUM.VSL", dwFileAttributes=0x80) returned 0 [0179.933] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SHAPNUM.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\shapnum.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.933] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.933] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.933] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.933] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.934] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKY.CSS", dwFileAttributes=0x80) returned 0 [0179.935] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKY.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\sky.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.935] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.935] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.935] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.935] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.936] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB.HXS", dwFileAttributes=0x80) returned 0 [0179.936] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.937] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.937] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.937] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.937] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.937] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_BASIC.HXS", dwFileAttributes=0x80) returned 0 [0179.938] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_BASIC.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_basic.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.938] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.938] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.938] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.938] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.938] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_BASIC_COL.HXC", dwFileAttributes=0x80) returned 0 [0179.939] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_BASIC_COL.HXC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_basic_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.939] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.939] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.939] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.939] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.940] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_BASIC_COL.HXT", dwFileAttributes=0x80) returned 0 [0179.940] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_BASIC_COL.HXT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_basic_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.940] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.940] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.940] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.940] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.941] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_BASIC_F_COL.HXK", dwFileAttributes=0x80) returned 0 [0179.941] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_BASIC_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_basic_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.941] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.941] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.942] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.942] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.942] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_BASIC_K_COL.HXK", dwFileAttributes=0x80) returned 0 [0179.942] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_BASIC_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_basic_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.942] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.942] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.943] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.943] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.943] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_COL.HXC", dwFileAttributes=0x80) returned 0 [0179.943] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_COL.HXC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.944] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.944] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.944] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.944] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.944] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_COL.HXT", dwFileAttributes=0x80) returned 0 [0179.944] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_COL.HXT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.945] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.945] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.945] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.945] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.945] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_F_COL.HXK", dwFileAttributes=0x80) returned 0 [0179.946] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.946] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.946] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.947] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.947] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.947] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_K_COL.HXK", dwFileAttributes=0x80) returned 0 [0179.947] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.947] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.948] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.948] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.948] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.948] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINE.HXS", dwFileAttributes=0x80) returned 0 [0179.948] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINE.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_online.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.949] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.949] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.949] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.949] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINEG.HXS", dwFileAttributes=0x80) returned 0 [0179.950] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINEG.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_onlineg.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.950] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.950] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.950] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.950] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.950] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINEG_COL.HXC", dwFileAttributes=0x80) returned 0 [0179.951] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINEG_COL.HXC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_onlineg_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.951] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.951] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.951] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.951] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.952] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINEG_COL.HXT", dwFileAttributes=0x80) returned 0 [0179.952] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINEG_COL.HXT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_onlineg_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.952] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.952] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.952] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.952] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.953] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINEG_F_COL.HXK", dwFileAttributes=0x80) returned 0 [0179.953] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINEG_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_onlineg_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.953] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.953] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.953] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.954] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.954] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINEG_K_COL.HXK", dwFileAttributes=0x80) returned 0 [0179.954] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINEG_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_onlineg_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.954] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.954] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.955] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.955] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.955] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINE_COL.HXC", dwFileAttributes=0x80) returned 0 [0179.955] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINE_COL.HXC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_online_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.955] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.955] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.956] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.956] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.956] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINE_COL.HXT", dwFileAttributes=0x80) returned 0 [0179.956] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINE_COL.HXT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_online_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.956] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.957] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.957] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.957] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.957] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINE_F_COL.HXK", dwFileAttributes=0x80) returned 0 [0179.957] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINE_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_online_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.957] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.957] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.958] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.958] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.958] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINE_K_COL.HXK", dwFileAttributes=0x80) returned 0 [0179.958] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINE_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_online_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.958] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.958] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.958] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.958] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.959] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SkypeForBusinessBasic2019_eula.txt", dwFileAttributes=0x80) returned 0 [0179.959] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SkypeForBusinessBasic2019_eula.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypeforbusinessbasic2019_eula.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.960] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.960] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.960] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.960] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.960] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SkypeForBusinessVDI2019_eula.txt", dwFileAttributes=0x80) returned 0 [0179.960] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SkypeForBusinessVDI2019_eula.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypeforbusinessvdi2019_eula.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.960] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.960] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.961] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.961] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.961] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.961] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SMIGRATE.VSL", dwFileAttributes=0x80) returned 0 [0179.962] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SMIGRATE.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\smigrate.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.962] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.962] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.962] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.967] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.967] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.967] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SPACE.VRD", dwFileAttributes=0x80) returned 0 [0179.967] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SPACE.VRD" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\space.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.968] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.968] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.968] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.968] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.968] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SPRING.CSS", dwFileAttributes=0x80) returned 0 [0179.969] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SPRING.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\spring.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.969] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.969] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.969] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.969] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SPS.CSS", dwFileAttributes=0x80) returned 0 [0179.970] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SPS.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\sps.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.970] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.970] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.970] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.970] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.971] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SSPRINT.VSL", dwFileAttributes=0x80) returned 0 [0179.971] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SSPRINT.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\ssprint.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.972] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.972] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.972] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.972] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.972] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\STEEL.CSS", dwFileAttributes=0x80) returned 0 [0179.973] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\STEEL.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\steel.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.973] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.973] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.974] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.974] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.974] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\STSLIST.CHM", dwFileAttributes=0x80) returned 0 [0179.974] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\STSLIST.CHM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\stslist.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.974] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.975] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.975] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.975] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.975] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SUNNY.CSS", dwFileAttributes=0x80) returned 0 [0179.975] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SUNNY.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\sunny.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.976] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.976] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.976] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.976] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SUNSET.CSS", dwFileAttributes=0x80) returned 0 [0179.977] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SUNSET.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\sunset.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.977] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.977] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.977] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.978] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TelemetryDashboard.xltx", dwFileAttributes=0x80) returned 0 [0179.978] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TelemetryDashboard.xltx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\telemetrydashboard.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.978] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.978] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.979] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.979] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TelemetryLog.xltx", dwFileAttributes=0x80) returned 0 [0179.979] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TelemetryLog.xltx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\telemetrylog.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.980] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.980] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.980] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.980] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.980] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeAccess.nrr", dwFileAttributes=0x80) returned 0 [0179.980] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeAccess.nrr" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\tellmeaccess.nrr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.981] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.981] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.981] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.981] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.981] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeExcel.nrr", dwFileAttributes=0x80) returned 0 [0179.982] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeExcel.nrr" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\tellmeexcel.nrr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.982] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.982] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.982] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.982] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.982] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeOneNote.nrr", dwFileAttributes=0x80) returned 0 [0179.983] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeOneNote.nrr" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\tellmeonenote.nrr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.983] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.983] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.983] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.983] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeOutlook.nrr", dwFileAttributes=0x80) returned 0 [0179.984] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeOutlook.nrr" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\tellmeoutlook.nrr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.984] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.984] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.984] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.984] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.984] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeOutlookAddr.nrr", dwFileAttributes=0x80) returned 0 [0179.985] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeOutlookAddr.nrr" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\tellmeoutlookaddr.nrr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.985] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.985] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.985] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.985] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.985] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeOutlookAppt.nrr", dwFileAttributes=0x80) returned 0 [0179.985] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeOutlookAppt.nrr" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\tellmeoutlookappt.nrr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.986] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.986] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.986] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.986] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.986] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeOutlookMail.nrr", dwFileAttributes=0x80) returned 0 [0179.986] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeOutlookMail.nrr" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\tellmeoutlookmail.nrr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.986] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.986] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.987] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.987] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeOutlookMailRead.nrr", dwFileAttributes=0x80) returned 0 [0179.987] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeOutlookMailRead.nrr" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\tellmeoutlookmailread.nrr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.987] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.987] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.987] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.987] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeOutlookMeetingReqRead.nrr", dwFileAttributes=0x80) returned 0 [0179.988] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeOutlookMeetingReqRead.nrr" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\tellmeoutlookmeetingreqread.nrr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.988] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.988] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.988] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.988] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.989] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeOutlookMeetingReqSend.nrr", dwFileAttributes=0x80) returned 0 [0179.989] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeOutlookMeetingReqSend.nrr" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\tellmeoutlookmeetingreqsend.nrr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.989] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.989] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.989] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.989] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeOutlookTask.nrr", dwFileAttributes=0x80) returned 0 [0179.990] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeOutlookTask.nrr" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\tellmeoutlooktask.nrr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.990] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.990] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.990] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.990] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.991] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMePowerPoint.nrr", dwFileAttributes=0x80) returned 0 [0179.991] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMePowerPoint.nrr" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\tellmepowerpoint.nrr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.991] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.991] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.991] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.991] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeProject.nrr", dwFileAttributes=0x80) returned 0 [0179.992] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeProject.nrr" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\tellmeproject.nrr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.992] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.992] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.992] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.992] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeVisio.nrr", dwFileAttributes=0x80) returned 0 [0179.993] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeVisio.nrr" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\tellmevisio.nrr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.993] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.993] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.993] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.993] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.993] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeWord.nrr", dwFileAttributes=0x80) returned 0 [0179.994] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeWord.nrr" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\tellmeword.nrr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.994] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.994] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.994] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.994] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.994] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TERRCOTT.CSS", dwFileAttributes=0x80) returned 0 [0179.995] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TERRCOTT.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\terrcott.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.996] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.996] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.996] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.996] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0179.996] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TIMESOLN.VSL", dwFileAttributes=0x80) returned 0 [0179.997] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TIMESOLN.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\timesoln.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0179.997] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0179.997] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.998] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.998] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0179.998] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.003] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.003] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0180.003] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VALVE.VRD", dwFileAttributes=0x80) returned 0 [0180.003] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VALVE.VRD" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\valve.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.004] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.004] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0180.004] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.004] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.004] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0180.004] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISCOLOR.VSL", dwFileAttributes=0x80) returned 0 [0180.006] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISCOLOR.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\viscolor.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.006] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.006] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0180.006] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.006] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.006] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.006] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0180.007] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO.CSS", dwFileAttributes=0x80) returned 0 [0180.008] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.008] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.008] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0180.009] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.009] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0180.009] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO.HXS", dwFileAttributes=0x80) returned 0 [0180.010] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.010] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.010] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0180.010] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.010] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0180.011] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_COL.HXC", dwFileAttributes=0x80) returned 0 [0180.011] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_COL.HXC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.011] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.011] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0180.011] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.011] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0180.011] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_COL.HXT", dwFileAttributes=0x80) returned 0 [0180.012] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_COL.HXT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.012] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.012] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0180.012] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.012] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0180.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_F_COL.HXK", dwFileAttributes=0x80) returned 0 [0180.014] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.014] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.014] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0180.014] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.014] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0180.014] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_K_COL.HXK", dwFileAttributes=0x80) returned 0 [0180.014] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.015] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.015] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0180.015] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.015] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0180.015] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_PRM.HXS", dwFileAttributes=0x80) returned 0 [0180.015] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_PRM.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio_prm.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.015] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.015] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0180.016] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.016] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0180.016] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_PRM_COL.HXC", dwFileAttributes=0x80) returned 0 [0180.016] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_PRM_COL.HXC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio_prm_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.016] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.016] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0180.016] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.016] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0180.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_PRM_COL.HXT", dwFileAttributes=0x80) returned 0 [0180.017] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_PRM_COL.HXT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio_prm_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.017] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.017] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0180.017] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.017] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0180.018] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_PRM_F_COL.HXK", dwFileAttributes=0x80) returned 0 [0180.018] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_PRM_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio_prm_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.018] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.018] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0180.018] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.018] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0180.019] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_PRM_K_COL.HXK", dwFileAttributes=0x80) returned 0 [0180.019] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_PRM_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio_prm_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.019] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.019] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0180.019] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.019] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0180.019] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_STD.HXS", dwFileAttributes=0x80) returned 0 [0180.020] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_STD.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio_std.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.020] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.020] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0180.020] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.020] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0180.020] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_STD_COL.HXC", dwFileAttributes=0x80) returned 0 [0180.020] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_STD_COL.HXC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio_std_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.021] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.021] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0180.021] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.021] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0180.021] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_STD_COL.HXT", dwFileAttributes=0x80) returned 0 [0180.021] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_STD_COL.HXT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio_std_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.021] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.021] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0180.022] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.022] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0180.022] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_STD_F_COL.HXK", dwFileAttributes=0x80) returned 0 [0180.022] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_STD_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio_std_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.022] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.022] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0180.022] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.022] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0180.023] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_STD_K_COL.HXK", dwFileAttributes=0x80) returned 0 [0180.023] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_STD_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio_std_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.023] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.023] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0180.023] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.023] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0180.024] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_WHATSNEW.XML", dwFileAttributes=0x80) returned 0 [0180.025] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_WHATSNEW.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio_whatsnew.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.025] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.025] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0180.025] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.025] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0180.026] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISUTILS.VSL", dwFileAttributes=0x80) returned 0 [0180.026] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISUTILS.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visutils.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.027] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.027] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0180.027] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.027] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0180.027] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISWEB.VSL", dwFileAttributes=0x80) returned 0 [0180.028] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISWEB.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visweb.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.028] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.028] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0180.028] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.028] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.028] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0180.028] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WacLangPack2019Eula.txt", dwFileAttributes=0x80) returned 0 [0180.029] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WacLangPack2019Eula.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\waclangpack2019eula.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.029] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.029] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0180.030] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.030] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0180.030] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WacLangPackEula.txt", dwFileAttributes=0x80) returned 0 [0180.030] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WacLangPackEula.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\waclangpackeula.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.031] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.031] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0180.031] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.031] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.031] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0180.031] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WDCMPVRD.XML", dwFileAttributes=0x80) returned 0 [0180.032] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WDCMPVRD.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\wdcmpvrd.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.032] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.032] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0180.032] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.033] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.033] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0180.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ.HXS", dwFileAttributes=0x80) returned 0 [0180.033] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winproj.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.033] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.033] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0180.033] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.036] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0180.036] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_COL.HXC", dwFileAttributes=0x80) returned 0 [0180.036] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_COL.HXC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winproj_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.036] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.036] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0180.037] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.037] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0180.037] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_COL.HXT", dwFileAttributes=0x80) returned 0 [0180.037] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_COL.HXT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winproj_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.037] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.037] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0180.037] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.037] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0180.038] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_F_COL.HXK", dwFileAttributes=0x80) returned 0 [0180.038] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winproj_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.038] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.038] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0180.038] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.038] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0180.038] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_K_COL.HXK", dwFileAttributes=0x80) returned 0 [0180.039] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winproj_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.039] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.039] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0180.039] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.039] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0180.041] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_STD.HXS", dwFileAttributes=0x80) returned 0 [0180.041] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_STD.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winproj_std.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.041] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.041] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0180.041] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.041] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0180.042] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_STD_COL.HXC", dwFileAttributes=0x80) returned 0 [0180.042] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_STD_COL.HXC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winproj_std_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.042] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.042] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0180.043] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.043] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0180.043] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_STD_COL.HXT", dwFileAttributes=0x80) returned 0 [0180.043] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_STD_COL.HXT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winproj_std_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.043] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.043] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0180.044] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.044] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0180.044] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_STD_F_COL.HXK", dwFileAttributes=0x80) returned 0 [0180.044] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_STD_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winproj_std_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.044] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.044] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0180.045] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.045] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0180.045] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_STD_K_COL.HXK", dwFileAttributes=0x80) returned 0 [0180.045] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_STD_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winproj_std_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.045] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.046] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0180.046] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.046] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0180.046] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINSCHD.VRD", dwFileAttributes=0x80) returned 0 [0180.047] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINSCHD.VRD" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winschd.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.047] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.047] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0180.047] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.048] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0180.048] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINWORD.HXS", dwFileAttributes=0x80) returned 0 [0180.048] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINWORD.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winword.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.048] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.048] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0180.049] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.049] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0180.049] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINWORD_COL.HXC", dwFileAttributes=0x80) returned 0 [0180.049] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINWORD_COL.HXC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winword_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.049] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.049] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0180.050] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.050] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0180.050] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINWORD_COL.HXT", dwFileAttributes=0x80) returned 0 [0180.050] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINWORD_COL.HXT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winword_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.051] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.051] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0180.051] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.051] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0180.051] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINWORD_F_COL.HXK", dwFileAttributes=0x80) returned 0 [0180.051] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINWORD_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winword_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.052] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.052] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0180.052] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.052] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0180.052] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINWORD_K_COL.HXK", dwFileAttributes=0x80) returned 0 [0180.052] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINWORD_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winword_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.053] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.053] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0180.053] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.053] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0180.053] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WORD_WHATSNEW.XML", dwFileAttributes=0x80) returned 0 [0180.054] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WORD_WHATSNEW.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\word_whatsnew.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.054] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.054] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0180.055] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.055] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0180.055] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WORKFLOW.VSL", dwFileAttributes=0x80) returned 0 [0180.055] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WORKFLOW.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\workflow.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.055] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.055] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0180.056] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.056] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.056] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.056] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0180.056] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\XFUNC.VSL", dwFileAttributes=0x80) returned 0 [0180.058] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\XFUNC.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\xfunc.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.058] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.058] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0180.058] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.058] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0180.059] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Xlate_Complete.xsn", dwFileAttributes=0x80) returned 0 [0180.059] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Xlate_Complete.xsn" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\xlate_complete.xsn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.059] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.059] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0180.059] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.059] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0180.060] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Xlate_Init.xsn", dwFileAttributes=0x80) returned 0 [0180.882] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Xlate_Init.xsn" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\xlate_init.xsn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.882] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.882] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0180.882] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.882] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.882] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.882] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0180.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\XLMACRO.CHM", dwFileAttributes=0x80) returned 0 [0180.883] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\XLMACRO.CHM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\xlmacro.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.883] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.883] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0180.883] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.883] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0180.883] FindClose (in: hFindFile=0x665abb4f20 | out: hFindFile=0x665abb4f20) returned 1 [0180.883] SetLastError (dwErrCode=0x0) [0180.884] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.884] GetLastError () returned 0x5 [0180.884] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0180.884] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.884] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0180.884] SetLastError (dwErrCode=0x0) [0180.884] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.884] GetLastError () returned 0x5 [0180.884] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0180.884] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.884] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1036\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb5040 [0180.885] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.885] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.885] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0180.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1036\\MSO.ACL", dwFileAttributes=0x80) returned 0 [0180.886] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1036\\MSO.ACL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1036\\mso.acl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.886] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.886] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0180.886] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0180.886] FindClose (in: hFindFile=0x665abb5040 | out: hFindFile=0x665abb5040) returned 1 [0180.886] SetLastError (dwErrCode=0x0) [0180.886] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1036\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1036\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.887] GetLastError () returned 0x5 [0180.887] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0180.887] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.887] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0180.887] SetLastError (dwErrCode=0x0) [0180.887] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.887] GetLastError () returned 0x5 [0180.887] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0180.887] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.887] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\3082\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4920 [0180.887] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.887] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.887] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0180.888] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\3082\\MSO.ACL", dwFileAttributes=0x80) returned 0 [0180.888] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\3082\\MSO.ACL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\3082\\mso.acl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.888] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.888] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0180.889] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0180.889] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0180.889] SetLastError (dwErrCode=0x0) [0180.889] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\3082\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\3082\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.889] GetLastError () returned 0x5 [0180.889] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0180.889] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.889] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0180.889] SetLastError (dwErrCode=0x0) [0180.889] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.890] GetLastError () returned 0x5 [0180.890] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0180.890] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.890] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb53a0 [0180.891] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.891] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.891] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0180.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\CLNTWRAP.HTM", dwFileAttributes=0x80) returned 0 [0180.891] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\CLNTWRAP.HTM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accessweb\\clntwrap.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.892] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.892] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0180.892] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.892] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0180.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\RPT2HTM4.XSL", dwFileAttributes=0x80) returned 0 [0180.892] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\RPT2HTM4.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accessweb\\rpt2htm4.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.892] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.892] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0180.893] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.893] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0180.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\SERVWRAP.ASP", dwFileAttributes=0x80) returned 0 [0180.893] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\SERVWRAP.ASP" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accessweb\\servwrap.asp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.893] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.893] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0180.893] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0180.893] FindClose (in: hFindFile=0x665abb53a0 | out: hFindFile=0x665abb53a0) returned 1 [0180.894] SetLastError (dwErrCode=0x0) [0180.894] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accessweb\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.894] GetLastError () returned 0x5 [0180.894] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0180.894] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.894] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0180.894] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0180.894] SetLastError (dwErrCode=0x0) [0180.894] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.894] GetLastError () returned 0x5 [0180.894] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0180.894] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.894] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4a40 [0180.896] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.896] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.896] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0180.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZDAT12.ACCDU", dwFileAttributes=0x80) returned 0 [0180.897] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZDAT12.ACCDU" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwzdat12.accdu"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.897] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.897] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0180.898] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.898] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0180.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZLIB.ACCDE", dwFileAttributes=0x80) returned 0 [0180.898] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZLIB.ACCDE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwzlib.accde"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.898] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.898] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0180.898] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.899] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0180.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZMAIN.ACCDE", dwFileAttributes=0x80) returned 0 [0180.899] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZMAIN.ACCDE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwzmain.accde"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.899] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.899] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0180.899] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.899] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0180.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZTOOL.ACCDE", dwFileAttributes=0x80) returned 0 [0180.901] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZTOOL.ACCDE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwztool.accde"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.901] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.901] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0180.901] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.901] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0180.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZUSR12.ACCDU", dwFileAttributes=0x80) returned 0 [0180.902] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZUSR12.ACCDU" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwzusr12.accdu"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.902] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.902] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0180.902] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.902] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0180.903] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\UTILITY.ACCDA", dwFileAttributes=0x80) returned 0 [0180.903] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\UTILITY.ACCDA" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\utility.accda"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.903] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.903] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0180.903] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0180.903] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0180.904] SetLastError (dwErrCode=0x0) [0180.904] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.907] GetLastError () returned 0x5 [0180.907] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0180.907] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.907] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0180.907] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0180.907] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0180.907] SetLastError (dwErrCode=0x0) [0180.907] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.907] GetLastError () returned 0x5 [0180.907] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0180.907] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.907] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4a40 [0180.909] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.909] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.909] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.909] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.909] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0180.909] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\FAXEXT.ECF", dwFileAttributes=0x80) returned 0 [0180.910] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\FAXEXT.ECF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\faxext.ecf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.910] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.910] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0180.910] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0180.910] SetLastError (dwErrCode=0x0) [0180.910] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.910] GetLastError () returned 0x5 [0180.910] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0180.910] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.910] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4920 [0180.914] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0180.914] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0180.914] SetLastError (dwErrCode=0x0) [0180.914] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.914] GetLastError () returned 0x5 [0180.914] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0180.914] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.914] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4c20 [0180.937] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0180.939] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0180.939] SetLastError (dwErrCode=0x0) [0180.939] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.940] GetLastError () returned 0x5 [0180.940] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0180.940] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.940] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\af\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4560 [0180.942] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0180.942] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0180.942] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0180.942] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0180.942] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0180.942] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0180.942] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0180.942] FindClose (in: hFindFile=0x665abb4560 | out: hFindFile=0x665abb4560) returned 1 [0180.943] SetLastError (dwErrCode=0x0) [0180.943] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\af\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\af\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.945] GetLastError () returned 0x5 [0180.945] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0180.945] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.945] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0180.945] SetLastError (dwErrCode=0x0) [0180.946] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.946] GetLastError () returned 0x5 [0180.946] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0180.946] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.946] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\am\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb42c0 [0180.947] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0180.947] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0180.947] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0180.947] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0180.947] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0180.947] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0180.947] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0180.947] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0180.948] SetLastError (dwErrCode=0x0) [0180.948] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\am\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\am\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.950] GetLastError () returned 0x5 [0180.950] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0180.951] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.951] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0180.951] SetLastError (dwErrCode=0x0) [0180.951] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.951] GetLastError () returned 0x5 [0180.951] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0180.951] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.951] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ar\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4440 [0180.955] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0180.955] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0180.955] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0180.955] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0180.955] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0180.955] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0180.955] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0180.955] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0180.955] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0180.955] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0180.955] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0180.955] FindClose (in: hFindFile=0x665abb4440 | out: hFindFile=0x665abb4440) returned 1 [0180.955] SetLastError (dwErrCode=0x0) [0180.955] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ar\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ar\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.958] GetLastError () returned 0x5 [0180.958] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0180.958] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.958] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0180.958] SetLastError (dwErrCode=0x0) [0180.958] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.958] GetLastError () returned 0x5 [0180.958] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0180.959] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.959] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\as\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb42c0 [0180.960] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0180.960] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0180.960] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0180.960] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0180.960] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0180.960] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0180.960] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0180.960] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0180.961] SetLastError (dwErrCode=0x0) [0180.961] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\as\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\as\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.963] GetLastError () returned 0x5 [0180.963] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0180.963] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.963] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0180.963] SetLastError (dwErrCode=0x0) [0180.963] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.964] GetLastError () returned 0x5 [0180.964] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0180.964] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.964] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\az-Latn-AZ\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4c80 [0180.965] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0180.965] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0180.965] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0180.965] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0180.965] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0180.965] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0180.965] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0180.965] FindClose (in: hFindFile=0x665abb4c80 | out: hFindFile=0x665abb4c80) returned 1 [0180.966] SetLastError (dwErrCode=0x0) [0180.966] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\az-Latn-AZ\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\az-latn-az\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.970] GetLastError () returned 0x5 [0180.970] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0180.970] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.970] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0180.970] SetLastError (dwErrCode=0x0) [0180.970] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.970] GetLastError () returned 0x5 [0180.970] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0180.970] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.970] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\be\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb49e0 [0180.972] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0180.972] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0180.972] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0180.972] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0180.972] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0180.972] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0180.972] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0180.972] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0180.973] SetLastError (dwErrCode=0x0) [0180.973] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\be\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\be\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.975] GetLastError () returned 0x5 [0180.975] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0180.975] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.975] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0180.976] SetLastError (dwErrCode=0x0) [0180.976] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.976] GetLastError () returned 0x5 [0180.976] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0180.976] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.976] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bg\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb43e0 [0180.978] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0180.978] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0180.978] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0180.978] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0180.978] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0180.978] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0180.978] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0180.978] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0180.978] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0180.978] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0180.978] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0180.978] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0180.979] SetLastError (dwErrCode=0x0) [0180.979] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bg\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\bg\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.982] GetLastError () returned 0x5 [0180.982] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0180.982] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.982] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0180.982] SetLastError (dwErrCode=0x0) [0180.982] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.982] GetLastError () returned 0x5 [0180.982] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0180.982] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.982] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bn-BD\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb49e0 [0180.984] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0180.984] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0180.984] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0180.984] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0180.984] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0180.984] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0180.984] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0180.984] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0180.985] SetLastError (dwErrCode=0x0) [0180.985] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bn-BD\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\bn-bd\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.987] GetLastError () returned 0x5 [0180.987] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0180.988] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.988] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0180.988] SetLastError (dwErrCode=0x0) [0180.988] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.988] GetLastError () returned 0x5 [0180.988] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0180.988] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.988] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bn-IN\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4560 [0180.989] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0180.989] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0180.989] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0180.989] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0180.989] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0180.989] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0180.989] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0180.989] FindClose (in: hFindFile=0x665abb4560 | out: hFindFile=0x665abb4560) returned 1 [0180.990] SetLastError (dwErrCode=0x0) [0180.990] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bn-IN\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\bn-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.993] GetLastError () returned 0x5 [0180.993] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0180.993] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.993] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0180.993] SetLastError (dwErrCode=0x0) [0180.993] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.993] GetLastError () returned 0x5 [0180.993] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0180.993] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.993] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bs-Latn-BA\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4f20 [0180.995] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0180.995] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0180.995] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0180.995] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0180.995] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0180.995] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0180.995] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0180.995] FindClose (in: hFindFile=0x665abb4f20 | out: hFindFile=0x665abb4f20) returned 1 [0180.995] SetLastError (dwErrCode=0x0) [0180.995] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bs-Latn-BA\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\bs-latn-ba\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.998] GetLastError () returned 0x5 [0180.998] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0180.998] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.998] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0180.998] SetLastError (dwErrCode=0x0) [0180.998] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.999] GetLastError () returned 0x5 [0180.999] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0180.999] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0180.999] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ca\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb53a0 [0181.000] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.000] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.001] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.001] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.001] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.001] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.001] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.001] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.001] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.001] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.001] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.001] FindClose (in: hFindFile=0x665abb53a0 | out: hFindFile=0x665abb53a0) returned 1 [0181.001] SetLastError (dwErrCode=0x0) [0181.001] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ca\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ca\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.004] GetLastError () returned 0x5 [0181.004] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.004] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.004] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.004] SetLastError (dwErrCode=0x0) [0181.004] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.004] GetLastError () returned 0x5 [0181.004] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.004] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.004] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ca-ES-valencia\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4c80 [0181.006] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.006] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.006] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.006] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.006] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.006] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.006] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.006] FindClose (in: hFindFile=0x665abb4c80 | out: hFindFile=0x665abb4c80) returned 1 [0181.007] SetLastError (dwErrCode=0x0) [0181.007] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ca-ES-valencia\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ca-es-valencia\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.010] GetLastError () returned 0x5 [0181.010] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.010] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.010] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.010] SetLastError (dwErrCode=0x0) [0181.010] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.010] GetLastError () returned 0x5 [0181.010] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.010] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.010] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\cs\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4c80 [0181.012] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.012] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.012] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.012] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.012] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.012] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.012] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.012] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.012] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.012] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.012] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.012] FindClose (in: hFindFile=0x665abb4c80 | out: hFindFile=0x665abb4c80) returned 1 [0181.013] SetLastError (dwErrCode=0x0) [0181.013] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\cs\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\cs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.015] GetLastError () returned 0x5 [0181.016] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.016] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.016] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.016] SetLastError (dwErrCode=0x0) [0181.016] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.016] GetLastError () returned 0x5 [0181.016] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.016] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.016] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\cy\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb45c0 [0181.017] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.017] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.017] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.017] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.017] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.017] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.017] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.017] FindClose (in: hFindFile=0x665abb45c0 | out: hFindFile=0x665abb45c0) returned 1 [0181.018] SetLastError (dwErrCode=0x0) [0181.018] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\cy\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\cy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.021] GetLastError () returned 0x5 [0181.021] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.021] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.021] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.021] SetLastError (dwErrCode=0x0) [0181.021] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.021] GetLastError () returned 0x5 [0181.021] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.021] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.021] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\da\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb53a0 [0181.023] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.024] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.024] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.024] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.024] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.024] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.024] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.024] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.024] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.024] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.024] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.024] FindClose (in: hFindFile=0x665abb53a0 | out: hFindFile=0x665abb53a0) returned 1 [0181.024] SetLastError (dwErrCode=0x0) [0181.024] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\da\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\da\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.027] GetLastError () returned 0x5 [0181.027] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.027] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.027] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.027] SetLastError (dwErrCode=0x0) [0181.027] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.027] GetLastError () returned 0x5 [0181.027] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.027] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.027] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\de\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4f20 [0181.029] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.029] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.029] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.029] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.029] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.029] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.029] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.029] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.029] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.029] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.029] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.029] FindClose (in: hFindFile=0x665abb4f20 | out: hFindFile=0x665abb4f20) returned 1 [0181.030] SetLastError (dwErrCode=0x0) [0181.030] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\de\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\de\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.033] GetLastError () returned 0x5 [0181.033] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.033] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.033] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.033] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.033] SetLastError (dwErrCode=0x0) [0181.033] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.033] GetLastError () returned 0x5 [0181.033] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.033] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.033] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\el\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb5460 [0181.035] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.035] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.035] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.035] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.035] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.035] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.035] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.035] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.035] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.035] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.036] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.036] FindClose (in: hFindFile=0x665abb5460 | out: hFindFile=0x665abb5460) returned 1 [0181.036] SetLastError (dwErrCode=0x0) [0181.036] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\el\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\el\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.039] GetLastError () returned 0x5 [0181.039] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.039] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.039] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.039] SetLastError (dwErrCode=0x0) [0181.039] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.039] GetLastError () returned 0x5 [0181.039] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.040] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.040] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\es\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb53a0 [0181.041] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.041] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.041] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.041] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.041] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.041] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.041] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.042] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.042] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.042] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.042] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.042] FindClose (in: hFindFile=0x665abb53a0 | out: hFindFile=0x665abb53a0) returned 1 [0181.042] SetLastError (dwErrCode=0x0) [0181.043] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\es\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\es\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.046] GetLastError () returned 0x5 [0181.046] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.046] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.046] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.047] SetLastError (dwErrCode=0x0) [0181.047] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.047] GetLastError () returned 0x5 [0181.047] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.047] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.047] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\et\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb49e0 [0181.049] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.049] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.049] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.049] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.049] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.049] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.049] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.049] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.049] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.049] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.049] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.049] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0181.050] SetLastError (dwErrCode=0x0) [0181.050] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\et\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\et\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.053] GetLastError () returned 0x5 [0181.053] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.053] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.053] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.053] SetLastError (dwErrCode=0x0) [0181.053] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.053] GetLastError () returned 0x5 [0181.053] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.054] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.054] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\eu\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4c80 [0181.055] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.055] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.055] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.055] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.056] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.056] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.056] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.056] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.056] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.056] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.056] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.056] FindClose (in: hFindFile=0x665abb4c80 | out: hFindFile=0x665abb4c80) returned 1 [0181.056] SetLastError (dwErrCode=0x0) [0181.056] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\eu\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\eu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.059] GetLastError () returned 0x5 [0181.059] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.059] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.059] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.059] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.059] SetLastError (dwErrCode=0x0) [0181.059] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.059] GetLastError () returned 0x5 [0181.059] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.059] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.059] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fa\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4560 [0181.061] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.061] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.061] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.061] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.061] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.061] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.061] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.061] FindClose (in: hFindFile=0x665abb4560 | out: hFindFile=0x665abb4560) returned 1 [0181.062] SetLastError (dwErrCode=0x0) [0181.062] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fa\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\fa\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.064] GetLastError () returned 0x5 [0181.064] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.064] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.064] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.064] SetLastError (dwErrCode=0x0) [0181.064] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.065] GetLastError () returned 0x5 [0181.065] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.065] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.065] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fi\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb49e0 [0181.066] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.066] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.067] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.067] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.067] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.067] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.067] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.067] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.067] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.067] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.067] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.067] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0181.067] SetLastError (dwErrCode=0x0) [0181.067] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fi\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\fi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.070] GetLastError () returned 0x5 [0181.070] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.070] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.070] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.070] SetLastError (dwErrCode=0x0) [0181.070] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.071] GetLastError () returned 0x5 [0181.071] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.071] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.071] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fil\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4560 [0181.072] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.072] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.072] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.072] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.072] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.072] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.072] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.072] FindClose (in: hFindFile=0x665abb4560 | out: hFindFile=0x665abb4560) returned 1 [0181.073] SetLastError (dwErrCode=0x0) [0181.073] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fil\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\fil\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.075] GetLastError () returned 0x5 [0181.075] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.075] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.075] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.075] SetLastError (dwErrCode=0x0) [0181.075] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.076] GetLastError () returned 0x5 [0181.076] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.076] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.076] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fr\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4f20 [0181.083] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.083] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.083] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.083] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.083] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.083] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.084] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.084] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.084] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.084] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.084] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.084] FindClose (in: hFindFile=0x665abb4f20 | out: hFindFile=0x665abb4f20) returned 1 [0181.084] SetLastError (dwErrCode=0x0) [0181.085] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\fr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.088] GetLastError () returned 0x5 [0181.088] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.088] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.088] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.088] SetLastError (dwErrCode=0x0) [0181.088] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.088] GetLastError () returned 0x5 [0181.088] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.088] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.089] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ga\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb49e0 [0181.090] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.090] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.090] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.090] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.091] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.091] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.091] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.091] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0181.091] SetLastError (dwErrCode=0x0) [0181.091] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ga\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ga\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.095] GetLastError () returned 0x5 [0181.095] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.095] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.095] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.095] SetLastError (dwErrCode=0x0) [0181.095] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.096] GetLastError () returned 0x5 [0181.096] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.096] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.096] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gd\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb5460 [0181.097] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.097] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.097] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.097] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.098] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.098] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.098] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.098] FindClose (in: hFindFile=0x665abb5460 | out: hFindFile=0x665abb5460) returned 1 [0181.098] SetLastError (dwErrCode=0x0) [0181.098] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gd\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\gd\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.102] GetLastError () returned 0x5 [0181.102] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.102] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.102] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.102] SetLastError (dwErrCode=0x0) [0181.102] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.102] GetLastError () returned 0x5 [0181.102] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.102] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.103] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gl\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb56a0 [0181.106] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.106] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.106] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.106] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.106] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.106] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.106] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.106] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.106] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.106] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.106] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.107] FindClose (in: hFindFile=0x665abb56a0 | out: hFindFile=0x665abb56a0) returned 1 [0181.107] SetLastError (dwErrCode=0x0) [0181.107] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\gl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.111] GetLastError () returned 0x5 [0181.111] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.111] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.111] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.111] SetLastError (dwErrCode=0x0) [0181.111] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.111] GetLastError () returned 0x5 [0181.111] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.112] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.112] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gu\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb42c0 [0181.113] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.113] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.113] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.113] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.113] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.113] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.113] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.113] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0181.114] SetLastError (dwErrCode=0x0) [0181.114] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gu\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\gu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.118] GetLastError () returned 0x5 [0181.118] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.118] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.118] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.118] SetLastError (dwErrCode=0x0) [0181.118] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.118] GetLastError () returned 0x5 [0181.118] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.118] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.118] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\he\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb49e0 [0181.120] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.120] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.120] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.120] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.120] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.120] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.120] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.120] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.120] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.120] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.120] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.120] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0181.121] SetLastError (dwErrCode=0x0) [0181.121] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\he\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\he\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.124] GetLastError () returned 0x5 [0181.124] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.124] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.124] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.124] SetLastError (dwErrCode=0x0) [0181.124] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.124] GetLastError () returned 0x5 [0181.124] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.124] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.124] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hi\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4f20 [0181.126] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.126] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.126] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.126] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.126] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.126] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.126] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.126] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.126] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.126] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.126] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.126] FindClose (in: hFindFile=0x665abb4f20 | out: hFindFile=0x665abb4f20) returned 1 [0181.127] SetLastError (dwErrCode=0x0) [0181.127] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hi\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\hi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.129] GetLastError () returned 0x5 [0181.129] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.129] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.129] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.129] SetLastError (dwErrCode=0x0) [0181.129] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.130] GetLastError () returned 0x5 [0181.130] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.130] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.130] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hr\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb42c0 [0181.132] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.132] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.132] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.132] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.132] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.132] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.132] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.132] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.132] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.132] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.132] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.132] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0181.133] SetLastError (dwErrCode=0x0) [0181.133] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\hr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.136] GetLastError () returned 0x5 [0181.136] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.136] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.136] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.136] SetLastError (dwErrCode=0x0) [0181.137] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.137] GetLastError () returned 0x5 [0181.137] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.137] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.137] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hu\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4d40 [0181.139] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.139] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.139] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.139] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.140] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.140] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.140] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.140] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.140] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.140] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.140] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.140] FindClose (in: hFindFile=0x665abb4d40 | out: hFindFile=0x665abb4d40) returned 1 [0181.141] SetLastError (dwErrCode=0x0) [0181.141] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hu\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\hu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.143] GetLastError () returned 0x5 [0181.143] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.143] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.143] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.143] SetLastError (dwErrCode=0x0) [0181.144] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.144] GetLastError () returned 0x5 [0181.144] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.144] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.144] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hy\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4c80 [0181.145] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.145] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.145] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.145] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.145] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.145] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.145] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.145] FindClose (in: hFindFile=0x665abb4c80 | out: hFindFile=0x665abb4c80) returned 1 [0181.146] SetLastError (dwErrCode=0x0) [0181.146] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hy\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\hy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.148] GetLastError () returned 0x5 [0181.148] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.148] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.148] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.149] SetLastError (dwErrCode=0x0) [0181.149] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.149] GetLastError () returned 0x5 [0181.149] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.149] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.149] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\id\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb49e0 [0181.151] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.151] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.151] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.151] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.151] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.151] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.151] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.151] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.151] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.151] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.151] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.151] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0181.151] SetLastError (dwErrCode=0x0) [0181.151] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\id\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\id\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.154] GetLastError () returned 0x5 [0181.154] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.154] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.154] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.154] SetLastError (dwErrCode=0x0) [0181.154] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.154] GetLastError () returned 0x5 [0181.154] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.154] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.155] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\is\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb5040 [0181.156] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.156] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.156] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.156] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.156] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.156] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.156] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.156] FindClose (in: hFindFile=0x665abb5040 | out: hFindFile=0x665abb5040) returned 1 [0181.157] SetLastError (dwErrCode=0x0) [0181.157] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\is\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\is\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.159] GetLastError () returned 0x5 [0181.159] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.159] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.159] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.162] SetLastError (dwErrCode=0x0) [0181.162] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.162] GetLastError () returned 0x5 [0181.162] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.162] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.162] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\it\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4c80 [0181.165] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.165] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.165] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.165] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.165] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.165] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.165] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.165] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.165] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.166] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.166] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.166] FindClose (in: hFindFile=0x665abb4c80 | out: hFindFile=0x665abb4c80) returned 1 [0181.166] SetLastError (dwErrCode=0x0) [0181.166] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\it\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\it\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.170] GetLastError () returned 0x5 [0181.170] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.170] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.170] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.170] SetLastError (dwErrCode=0x0) [0181.170] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.171] GetLastError () returned 0x5 [0181.171] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.171] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.171] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ja\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4f20 [0181.173] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.173] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.173] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.173] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.173] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.173] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.173] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.173] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.173] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.173] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.173] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.173] FindClose (in: hFindFile=0x665abb4f20 | out: hFindFile=0x665abb4f20) returned 1 [0181.174] SetLastError (dwErrCode=0x0) [0181.174] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ja\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ja\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.177] GetLastError () returned 0x5 [0181.177] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.177] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.177] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.177] SetLastError (dwErrCode=0x0) [0181.177] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.178] GetLastError () returned 0x5 [0181.178] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.178] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.178] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ka\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4c80 [0181.179] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.179] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.179] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.179] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.179] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.179] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.179] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.180] FindClose (in: hFindFile=0x665abb4c80 | out: hFindFile=0x665abb4c80) returned 1 [0181.180] SetLastError (dwErrCode=0x0) [0181.180] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ka\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ka\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.184] GetLastError () returned 0x5 [0181.184] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.184] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.184] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.184] SetLastError (dwErrCode=0x0) [0181.184] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.184] GetLastError () returned 0x5 [0181.184] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.184] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.184] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kk\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb5520 [0181.187] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.187] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.187] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.187] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.187] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.187] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.187] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.187] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.187] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.187] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.187] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.187] FindClose (in: hFindFile=0x665abb5520 | out: hFindFile=0x665abb5520) returned 1 [0181.188] SetLastError (dwErrCode=0x0) [0181.188] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kk\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\kk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.190] GetLastError () returned 0x5 [0181.190] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.190] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.190] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.190] SetLastError (dwErrCode=0x0) [0181.190] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.191] GetLastError () returned 0x5 [0181.191] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.191] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.191] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\km\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb42c0 [0181.193] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.193] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.193] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.193] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.193] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.193] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.193] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.193] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0181.194] SetLastError (dwErrCode=0x0) [0181.194] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\km\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\km\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.197] GetLastError () returned 0x5 [0181.197] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.197] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.197] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.197] SetLastError (dwErrCode=0x0) [0181.197] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.197] GetLastError () returned 0x5 [0181.197] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.197] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.197] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kn\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb55e0 [0181.205] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.205] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.205] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.205] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.205] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.205] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.205] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.205] FindClose (in: hFindFile=0x665abb55e0 | out: hFindFile=0x665abb55e0) returned 1 [0181.206] SetLastError (dwErrCode=0x0) [0181.206] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kn\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\kn\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.210] GetLastError () returned 0x5 [0181.210] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.210] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.210] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.210] SetLastError (dwErrCode=0x0) [0181.210] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.210] GetLastError () returned 0x5 [0181.210] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.210] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.210] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ko\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb42c0 [0181.212] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.212] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.212] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.212] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.212] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.212] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.212] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.212] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.212] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.212] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.213] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.213] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0181.213] SetLastError (dwErrCode=0x0) [0181.213] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ko\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ko\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.216] GetLastError () returned 0x5 [0181.216] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.216] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.216] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.216] SetLastError (dwErrCode=0x0) [0181.217] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.217] GetLastError () returned 0x5 [0181.217] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.217] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.217] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kok\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb49e0 [0181.219] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.219] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.219] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.219] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.219] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.219] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.219] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.219] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0181.220] SetLastError (dwErrCode=0x0) [0181.220] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kok\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\kok\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.222] GetLastError () returned 0x5 [0181.222] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.222] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.222] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.222] SetLastError (dwErrCode=0x0) [0181.222] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.223] GetLastError () returned 0x5 [0181.223] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.223] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.223] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ky\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb42c0 [0181.225] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.225] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.225] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.225] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.225] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.225] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.225] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.225] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0181.225] SetLastError (dwErrCode=0x0) [0181.225] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ky\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ky\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.228] GetLastError () returned 0x5 [0181.228] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.228] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.228] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.228] SetLastError (dwErrCode=0x0) [0181.228] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.228] GetLastError () returned 0x5 [0181.228] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.228] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.228] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lb\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4c80 [0181.230] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.230] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.230] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.230] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.230] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.230] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.230] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.230] FindClose (in: hFindFile=0x665abb4c80 | out: hFindFile=0x665abb4c80) returned 1 [0181.231] SetLastError (dwErrCode=0x0) [0181.231] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lb\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\lb\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.234] GetLastError () returned 0x5 [0181.234] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.234] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.234] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.234] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.234] SetLastError (dwErrCode=0x0) [0181.234] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.234] GetLastError () returned 0x5 [0181.234] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.234] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.234] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lt\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb42c0 [0181.238] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.238] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.238] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.239] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.239] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.239] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.239] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.239] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.239] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.239] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.239] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.239] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0181.239] SetLastError (dwErrCode=0x0) [0181.239] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lt\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\lt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.242] GetLastError () returned 0x5 [0181.242] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.242] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.242] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.242] SetLastError (dwErrCode=0x0) [0181.242] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.242] GetLastError () returned 0x5 [0181.242] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.243] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.243] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lv\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb53a0 [0181.244] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.244] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.244] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.244] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.244] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.244] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.244] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.244] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.244] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.244] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.244] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.244] FindClose (in: hFindFile=0x665abb53a0 | out: hFindFile=0x665abb53a0) returned 1 [0181.245] SetLastError (dwErrCode=0x0) [0181.245] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lv\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\lv\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.248] GetLastError () returned 0x5 [0181.248] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.248] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.248] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.248] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.248] SetLastError (dwErrCode=0x0) [0181.248] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.248] GetLastError () returned 0x5 [0181.248] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.248] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.248] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mi\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb55e0 [0181.249] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.249] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.249] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.249] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.250] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.250] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.250] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.250] FindClose (in: hFindFile=0x665abb55e0 | out: hFindFile=0x665abb55e0) returned 1 [0181.250] SetLastError (dwErrCode=0x0) [0181.250] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mi\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\mi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.253] GetLastError () returned 0x5 [0181.253] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.253] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.253] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.253] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.253] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.253] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.253] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.253] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.253] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.253] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.253] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.253] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.253] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.253] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.253] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.253] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.253] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.254] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.254] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.254] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.254] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.254] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.254] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.254] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.254] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.254] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.254] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.254] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.254] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.254] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.254] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.254] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.254] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.254] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.254] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.254] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.254] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.254] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.254] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.254] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.254] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.254] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.254] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.254] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.254] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.254] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.254] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.254] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.254] SetLastError (dwErrCode=0x0) [0181.254] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.255] GetLastError () returned 0x5 [0181.255] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.255] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.255] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mk\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4f80 [0181.256] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.256] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.256] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.256] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.256] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.256] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.256] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.256] FindClose (in: hFindFile=0x665abb4f80 | out: hFindFile=0x665abb4f80) returned 1 [0181.257] SetLastError (dwErrCode=0x0) [0181.257] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mk\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\mk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.259] GetLastError () returned 0x5 [0181.259] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.260] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.260] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.260] SetLastError (dwErrCode=0x0) [0181.260] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.260] GetLastError () returned 0x5 [0181.260] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.260] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.260] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ml\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb45c0 [0181.262] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.262] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.262] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.262] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.262] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.262] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.262] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.262] FindClose (in: hFindFile=0x665abb45c0 | out: hFindFile=0x665abb45c0) returned 1 [0181.263] SetLastError (dwErrCode=0x0) [0181.263] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ml\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ml\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.266] GetLastError () returned 0x5 [0181.266] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.266] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.267] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.267] SetLastError (dwErrCode=0x0) [0181.267] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.267] GetLastError () returned 0x5 [0181.267] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.267] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.267] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mn\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4c80 [0181.269] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.269] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.269] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.269] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.269] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.269] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.269] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.269] FindClose (in: hFindFile=0x665abb4c80 | out: hFindFile=0x665abb4c80) returned 1 [0181.270] SetLastError (dwErrCode=0x0) [0181.270] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mn\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\mn\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.273] GetLastError () returned 0x5 [0181.273] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.273] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.273] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.273] SetLastError (dwErrCode=0x0) [0181.273] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.273] GetLastError () returned 0x5 [0181.273] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.273] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.273] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mr\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb42c0 [0181.275] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.275] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.275] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.275] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.275] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.275] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.275] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.275] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0181.276] SetLastError (dwErrCode=0x0) [0181.276] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\mr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.279] GetLastError () returned 0x5 [0181.279] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.279] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.279] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.279] SetLastError (dwErrCode=0x0) [0181.279] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.279] GetLastError () returned 0x5 [0181.279] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.279] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.279] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ms\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4c80 [0181.281] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.281] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.281] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.281] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.281] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.281] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.281] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.281] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.281] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.281] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.281] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.281] FindClose (in: hFindFile=0x665abb4c80 | out: hFindFile=0x665abb4c80) returned 1 [0181.282] SetLastError (dwErrCode=0x0) [0181.282] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ms\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ms\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.285] GetLastError () returned 0x5 [0181.285] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.285] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.285] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.285] SetLastError (dwErrCode=0x0) [0181.285] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.285] GetLastError () returned 0x5 [0181.285] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.285] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.285] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mt\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb43e0 [0181.287] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.287] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.287] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.287] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.287] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.287] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.287] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.287] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0181.288] SetLastError (dwErrCode=0x0) [0181.288] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mt\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\mt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.291] GetLastError () returned 0x5 [0181.291] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.291] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.291] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.291] SetLastError (dwErrCode=0x0) [0181.291] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.292] GetLastError () returned 0x5 [0181.292] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.292] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.292] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ne\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb56a0 [0181.294] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.294] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.294] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.294] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.294] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.294] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.294] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.294] FindClose (in: hFindFile=0x665abb56a0 | out: hFindFile=0x665abb56a0) returned 1 [0181.295] SetLastError (dwErrCode=0x0) [0181.295] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ne\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ne\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.298] GetLastError () returned 0x5 [0181.298] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.298] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.298] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.298] SetLastError (dwErrCode=0x0) [0181.298] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.298] GetLastError () returned 0x5 [0181.298] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.298] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.298] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\nl\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb43e0 [0181.300] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.300] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.300] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.300] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.300] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.300] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.300] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.300] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.300] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.300] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.300] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.300] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0181.301] SetLastError (dwErrCode=0x0) [0181.301] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\nl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\nl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.304] GetLastError () returned 0x5 [0181.304] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.304] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.304] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.304] SetLastError (dwErrCode=0x0) [0181.304] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.304] GetLastError () returned 0x5 [0181.304] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.304] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.304] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\nn-NO\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb49e0 [0181.305] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.305] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.305] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.305] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.305] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.305] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.305] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.305] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0181.306] SetLastError (dwErrCode=0x0) [0181.306] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\nn-NO\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\nn-no\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.309] GetLastError () returned 0x5 [0181.309] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.309] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.309] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.309] SetLastError (dwErrCode=0x0) [0181.309] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.309] GetLastError () returned 0x5 [0181.309] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.309] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.309] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\no\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb49e0 [0181.311] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.311] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.311] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.311] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.311] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.311] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.311] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.311] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.311] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.311] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.311] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.311] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0181.312] SetLastError (dwErrCode=0x0) [0181.312] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\no\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\no\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.315] GetLastError () returned 0x5 [0181.315] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.315] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.315] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.315] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.315] SetLastError (dwErrCode=0x0) [0181.315] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.315] GetLastError () returned 0x5 [0181.315] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.315] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.315] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\or\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb42c0 [0181.316] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.316] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.316] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.316] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.316] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.316] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.316] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.316] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0181.317] SetLastError (dwErrCode=0x0) [0181.317] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\or\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\or\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.320] GetLastError () returned 0x5 [0181.320] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.320] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.320] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.320] SetLastError (dwErrCode=0x0) [0181.320] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.320] GetLastError () returned 0x5 [0181.320] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.320] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.320] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pa\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4c80 [0181.322] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.322] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.322] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.322] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.322] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.322] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.322] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.322] FindClose (in: hFindFile=0x665abb4c80 | out: hFindFile=0x665abb4c80) returned 1 [0181.323] SetLastError (dwErrCode=0x0) [0181.323] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pa\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\pa\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.325] GetLastError () returned 0x5 [0181.325] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.325] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.325] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.325] SetLastError (dwErrCode=0x0) [0181.325] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.325] GetLastError () returned 0x5 [0181.326] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.326] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.326] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pl\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb42c0 [0181.328] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.328] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.328] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.328] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.328] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.328] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.328] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.328] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.328] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.328] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.328] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.328] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0181.328] SetLastError (dwErrCode=0x0) [0181.328] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\pl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.331] GetLastError () returned 0x5 [0181.331] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.331] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.331] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.331] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.331] SetLastError (dwErrCode=0x0) [0181.331] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.331] GetLastError () returned 0x5 [0181.331] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.332] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.332] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\prs-AF\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb53a0 [0181.333] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.333] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.333] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.333] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.333] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.333] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.333] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.333] FindClose (in: hFindFile=0x665abb53a0 | out: hFindFile=0x665abb53a0) returned 1 [0181.334] SetLastError (dwErrCode=0x0) [0181.334] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\prs-AF\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\prs-af\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.336] GetLastError () returned 0x5 [0181.336] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.336] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.336] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.336] SetLastError (dwErrCode=0x0) [0181.336] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.337] GetLastError () returned 0x5 [0181.337] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.337] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.337] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-BR\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb49e0 [0181.338] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.339] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.339] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.339] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.339] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.339] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.339] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.339] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.339] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.339] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.339] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.339] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0181.339] SetLastError (dwErrCode=0x0) [0181.339] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-BR\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\pt-br\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.342] GetLastError () returned 0x5 [0181.342] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.342] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.342] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.342] SetLastError (dwErrCode=0x0) [0181.342] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.343] GetLastError () returned 0x5 [0181.343] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.343] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.343] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-pt\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb49e0 [0181.344] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.344] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.345] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.345] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.345] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.345] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.345] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.345] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.345] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.345] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.345] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.345] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0181.345] SetLastError (dwErrCode=0x0) [0181.345] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-pt\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\pt-pt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.348] GetLastError () returned 0x5 [0181.348] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.348] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.348] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.348] SetLastError (dwErrCode=0x0) [0181.348] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.348] GetLastError () returned 0x5 [0181.348] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.348] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.348] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\quz\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4560 [0181.350] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.350] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.350] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.350] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.350] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.350] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.350] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.350] FindClose (in: hFindFile=0x665abb4560 | out: hFindFile=0x665abb4560) returned 1 [0181.350] SetLastError (dwErrCode=0x0) [0181.350] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\quz\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\quz\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.353] GetLastError () returned 0x5 [0181.353] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.353] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.353] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.353] SetLastError (dwErrCode=0x0) [0181.353] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.353] GetLastError () returned 0x5 [0181.353] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.353] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.354] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ro\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb42c0 [0181.355] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.355] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.355] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.355] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.355] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.355] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.355] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.355] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.355] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.355] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.355] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.355] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0181.356] SetLastError (dwErrCode=0x0) [0181.356] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ro\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ro\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.359] GetLastError () returned 0x5 [0181.359] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.359] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.359] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.359] SetLastError (dwErrCode=0x0) [0181.359] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.359] GetLastError () returned 0x5 [0181.359] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.359] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.359] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ru\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4440 [0181.361] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.361] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.361] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.361] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.361] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.361] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.361] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.361] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.361] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.361] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.361] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.361] FindClose (in: hFindFile=0x665abb4440 | out: hFindFile=0x665abb4440) returned 1 [0181.362] SetLastError (dwErrCode=0x0) [0181.362] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ru\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ru\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.365] GetLastError () returned 0x5 [0181.365] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.365] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.365] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.365] SetLastError (dwErrCode=0x0) [0181.365] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.365] GetLastError () returned 0x5 [0181.365] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.365] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.365] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sd-Arab-PK\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb42c0 [0181.366] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.366] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.366] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.366] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.367] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.367] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.367] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.367] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0181.367] SetLastError (dwErrCode=0x0) [0181.367] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sd-Arab-PK\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sd-arab-pk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.370] GetLastError () returned 0x5 [0181.370] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.370] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.370] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.370] SetLastError (dwErrCode=0x0) [0181.370] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.370] GetLastError () returned 0x5 [0181.370] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.370] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.370] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\si\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4c80 [0181.372] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.372] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.372] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.372] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.372] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.372] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.372] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.372] FindClose (in: hFindFile=0x665abb4c80 | out: hFindFile=0x665abb4c80) returned 1 [0181.373] SetLastError (dwErrCode=0x0) [0181.373] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\si\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\si\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.375] GetLastError () returned 0x5 [0181.375] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.376] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.376] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.376] SetLastError (dwErrCode=0x0) [0181.376] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.376] GetLastError () returned 0x5 [0181.376] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.376] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.376] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sk\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb49e0 [0181.378] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.378] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.378] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.378] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.378] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.378] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.378] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.378] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.378] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.378] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.378] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.378] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0181.379] SetLastError (dwErrCode=0x0) [0181.379] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sk\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.381] GetLastError () returned 0x5 [0181.381] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.381] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.381] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.381] SetLastError (dwErrCode=0x0) [0181.381] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.382] GetLastError () returned 0x5 [0181.382] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.382] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.382] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sl\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb43e0 [0181.383] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.383] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.383] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.384] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.384] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.384] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.384] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.384] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.384] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.384] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.384] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.384] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0181.384] SetLastError (dwErrCode=0x0) [0181.384] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.387] GetLastError () returned 0x5 [0181.387] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.387] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.387] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.387] SetLastError (dwErrCode=0x0) [0181.387] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.387] GetLastError () returned 0x5 [0181.387] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.387] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.388] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sq\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb49e0 [0181.389] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.389] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.389] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.389] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.389] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.389] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.389] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.389] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0181.390] SetLastError (dwErrCode=0x0) [0181.390] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sq\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sq\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.392] GetLastError () returned 0x5 [0181.392] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.392] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.392] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.393] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.393] SetLastError (dwErrCode=0x0) [0181.393] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.393] GetLastError () returned 0x5 [0181.393] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.393] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.393] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Cyrl\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4560 [0181.395] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.395] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.395] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.395] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.395] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.395] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.395] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.395] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.395] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.395] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.395] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.395] FindClose (in: hFindFile=0x665abb4560 | out: hFindFile=0x665abb4560) returned 1 [0181.396] SetLastError (dwErrCode=0x0) [0181.396] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Cyrl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sr-cyrl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.398] GetLastError () returned 0x5 [0181.398] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.399] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.399] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.399] SetLastError (dwErrCode=0x0) [0181.399] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.399] GetLastError () returned 0x5 [0181.399] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.399] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.399] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Cyrl-BA\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4f20 [0181.401] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.401] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.401] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.401] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.401] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.401] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.401] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.401] FindClose (in: hFindFile=0x665abb4f20 | out: hFindFile=0x665abb4f20) returned 1 [0181.401] SetLastError (dwErrCode=0x0) [0181.401] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Cyrl-BA\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sr-cyrl-ba\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.404] GetLastError () returned 0x5 [0181.404] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.404] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.404] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.404] SetLastError (dwErrCode=0x0) [0181.404] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.404] GetLastError () returned 0x5 [0181.404] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.404] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.404] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb53a0 [0181.406] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.406] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.406] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.406] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.406] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.406] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.406] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.406] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.406] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.406] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.406] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.406] FindClose (in: hFindFile=0x665abb53a0 | out: hFindFile=0x665abb53a0) returned 1 [0181.407] SetLastError (dwErrCode=0x0) [0181.407] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sr-latn\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.410] GetLastError () returned 0x5 [0181.410] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.410] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.410] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.410] SetLastError (dwErrCode=0x0) [0181.410] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.410] GetLastError () returned 0x5 [0181.410] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.410] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.410] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn-CS\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4c80 [0181.412] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.412] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.412] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.412] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.412] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.412] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.412] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.412] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.412] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.412] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.412] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.412] FindClose (in: hFindFile=0x665abb4c80 | out: hFindFile=0x665abb4c80) returned 1 [0181.413] SetLastError (dwErrCode=0x0) [0181.413] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn-CS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sr-latn-cs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.416] GetLastError () returned 0x5 [0181.416] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.416] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.416] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.416] SetLastError (dwErrCode=0x0) [0181.416] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.416] GetLastError () returned 0x5 [0181.416] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.416] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.416] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sv\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4c80 [0181.418] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.418] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.418] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.418] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.418] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.418] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.418] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.418] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.418] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.418] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.418] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.418] FindClose (in: hFindFile=0x665abb4c80 | out: hFindFile=0x665abb4c80) returned 1 [0181.419] SetLastError (dwErrCode=0x0) [0181.419] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sv\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sv\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.421] GetLastError () returned 0x5 [0181.421] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.421] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.421] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.421] SetLastError (dwErrCode=0x0) [0181.421] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.422] GetLastError () returned 0x5 [0181.422] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.422] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.422] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sw\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb45c0 [0181.425] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.425] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.425] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.425] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.425] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.425] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.425] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.425] FindClose (in: hFindFile=0x665abb45c0 | out: hFindFile=0x665abb45c0) returned 1 [0181.425] SetLastError (dwErrCode=0x0) [0181.425] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sw\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sw\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.428] GetLastError () returned 0x5 [0181.428] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.428] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.428] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.428] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.428] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.428] SetLastError (dwErrCode=0x0) [0181.428] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.428] GetLastError () returned 0x5 [0181.428] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.429] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.429] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ta\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb53a0 [0181.430] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.430] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.430] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.430] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.430] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.430] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.430] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.430] FindClose (in: hFindFile=0x665abb53a0 | out: hFindFile=0x665abb53a0) returned 1 [0181.431] SetLastError (dwErrCode=0x0) [0181.431] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ta\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ta\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.434] GetLastError () returned 0x5 [0181.434] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.434] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.434] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.434] SetLastError (dwErrCode=0x0) [0181.434] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.434] GetLastError () returned 0x5 [0181.434] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.434] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.434] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\te\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4f20 [0181.436] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.436] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.436] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.436] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.436] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.436] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.436] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.436] FindClose (in: hFindFile=0x665abb4f20 | out: hFindFile=0x665abb4f20) returned 1 [0181.437] SetLastError (dwErrCode=0x0) [0181.437] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\te\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\te\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.439] GetLastError () returned 0x5 [0181.439] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.439] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.440] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.440] SetLastError (dwErrCode=0x0) [0181.440] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.440] GetLastError () returned 0x5 [0181.440] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.440] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.440] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\th\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb5460 [0181.442] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.442] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.442] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.442] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.442] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.442] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.442] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.442] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.442] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.442] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.442] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.442] FindClose (in: hFindFile=0x665abb5460 | out: hFindFile=0x665abb5460) returned 1 [0181.443] SetLastError (dwErrCode=0x0) [0181.443] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\th\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\th\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.445] GetLastError () returned 0x5 [0181.445] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.445] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.445] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.445] SetLastError (dwErrCode=0x0) [0181.445] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.446] GetLastError () returned 0x5 [0181.446] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.446] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.446] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tk\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb53a0 [0181.447] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.448] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.448] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.448] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.448] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.448] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.448] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.448] FindClose (in: hFindFile=0x665abb53a0 | out: hFindFile=0x665abb53a0) returned 1 [0181.448] SetLastError (dwErrCode=0x0) [0181.448] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tk\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\tk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.451] GetLastError () returned 0x5 [0181.451] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.451] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.451] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.451] SetLastError (dwErrCode=0x0) [0181.451] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.451] GetLastError () returned 0x5 [0181.451] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.451] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.451] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tr\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb49e0 [0181.453] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.453] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.453] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.453] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.453] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.454] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.454] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.454] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.454] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.454] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.454] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.454] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0181.454] SetLastError (dwErrCode=0x0) [0181.454] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\tr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.457] GetLastError () returned 0x5 [0181.457] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.457] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.457] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.457] SetLastError (dwErrCode=0x0) [0181.457] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.457] GetLastError () returned 0x5 [0181.457] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.457] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.457] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tt\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4c80 [0181.459] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.459] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.459] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.459] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.459] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.459] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.459] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.459] FindClose (in: hFindFile=0x665abb4c80 | out: hFindFile=0x665abb4c80) returned 1 [0181.459] SetLastError (dwErrCode=0x0) [0181.459] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tt\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\tt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.462] GetLastError () returned 0x5 [0181.462] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.462] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.462] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.462] SetLastError (dwErrCode=0x0) [0181.462] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.463] GetLastError () returned 0x5 [0181.463] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.463] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.463] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ug\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4560 [0181.465] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.465] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.465] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.465] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.465] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.465] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.465] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.465] FindClose (in: hFindFile=0x665abb4560 | out: hFindFile=0x665abb4560) returned 1 [0181.466] SetLastError (dwErrCode=0x0) [0181.466] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ug\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ug\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.468] GetLastError () returned 0x5 [0181.468] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.469] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.469] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.469] SetLastError (dwErrCode=0x0) [0181.469] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.469] GetLastError () returned 0x5 [0181.469] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.469] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.469] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\uk\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb49e0 [0181.470] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.470] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.470] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.470] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.470] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.470] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.470] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.470] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.470] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.470] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.470] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.470] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0181.471] SetLastError (dwErrCode=0x0) [0181.471] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\uk\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\uk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.474] GetLastError () returned 0x5 [0181.474] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.474] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.474] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.474] SetLastError (dwErrCode=0x0) [0181.474] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.474] GetLastError () returned 0x5 [0181.474] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.474] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.474] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ur\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4560 [0181.476] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.476] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.476] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.476] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.476] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.476] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.476] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.476] FindClose (in: hFindFile=0x665abb4560 | out: hFindFile=0x665abb4560) returned 1 [0181.477] SetLastError (dwErrCode=0x0) [0181.477] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ur\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ur\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.479] GetLastError () returned 0x5 [0181.479] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.479] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.479] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.479] SetLastError (dwErrCode=0x0) [0181.480] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.480] GetLastError () returned 0x5 [0181.480] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.480] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.480] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\uz-Latn-UZ\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4f20 [0181.481] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.481] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.481] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.481] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.481] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.481] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.481] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.481] FindClose (in: hFindFile=0x665abb4f20 | out: hFindFile=0x665abb4f20) returned 1 [0181.482] SetLastError (dwErrCode=0x0) [0181.482] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\uz-Latn-UZ\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\uz-latn-uz\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.485] GetLastError () returned 0x5 [0181.485] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.485] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.485] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.485] SetLastError (dwErrCode=0x0) [0181.485] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.485] GetLastError () returned 0x5 [0181.485] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.485] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.485] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\vi\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb49e0 [0181.487] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.487] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.487] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.487] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.487] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.487] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.487] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.487] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.487] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.487] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.487] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.487] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0181.488] SetLastError (dwErrCode=0x0) [0181.488] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\vi\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\vi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.491] GetLastError () returned 0x5 [0181.491] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.491] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.491] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.491] SetLastError (dwErrCode=0x0) [0181.491] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.491] GetLastError () returned 0x5 [0181.491] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.491] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.491] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANS\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb5460 [0181.493] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.493] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.493] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.493] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.493] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.493] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.493] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.493] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.493] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.493] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.493] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.493] FindClose (in: hFindFile=0x665abb5460 | out: hFindFile=0x665abb5460) returned 1 [0181.494] SetLastError (dwErrCode=0x0) [0181.494] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\zh-hans\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.496] GetLastError () returned 0x5 [0181.496] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.497] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.497] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.497] SetLastError (dwErrCode=0x0) [0181.497] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.497] GetLastError () returned 0x5 [0181.497] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.497] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.497] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANT\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb56a0 [0181.499] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.499] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.499] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.499] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.499] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.499] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.499] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.499] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.499] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.499] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0181.499] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0181.499] FindClose (in: hFindFile=0x665abb56a0 | out: hFindFile=0x665abb56a0) returned 1 [0181.500] SetLastError (dwErrCode=0x0) [0181.500] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANT\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\zh-hant\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.502] GetLastError () returned 0x5 [0181.502] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0181.502] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.502] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0181.503] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0181.503] SetLastError (dwErrCode=0x0) [0181.503] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.503] GetLastError () returned 0x5 [0181.503] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.503] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.503] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0181.503] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0181.503] SetLastError (dwErrCode=0x0) [0181.503] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.503] GetLastError () returned 0x5 [0181.503] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0181.503] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.503] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0181.503] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0181.503] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0181.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\MSOSEC.XML", dwFileAttributes=0x80) returned 0 [0181.504] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\MSOSEC.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\msosec.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.504] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.504] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.505] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0181.505] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0181.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\MSSPC.ECF", dwFileAttributes=0x80) returned 0 [0181.505] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\MSSPC.ECF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\msspc.ecf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.505] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.505] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.506] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0181.506] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0181.506] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0181.506] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\OUTEX.ECF", dwFileAttributes=0x80) returned 0 [0181.506] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\OUTEX.ECF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\outex.ecf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.506] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.506] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.506] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0181.506] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0181.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\OUTEX2.ECF", dwFileAttributes=0x80) returned 0 [0181.507] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\OUTEX2.ECF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\outex2.ecf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.507] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.507] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.507] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0181.507] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0181.507] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0181.508] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PMAILEXT.ECF", dwFileAttributes=0x80) returned 0 [0181.508] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PMAILEXT.ECF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\pmailext.ecf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.508] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.508] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.508] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0181.508] SetLastError (dwErrCode=0x0) [0181.508] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.508] GetLastError () returned 0x5 [0181.508] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0181.509] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.509] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power Map Excel Add-in\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb42c0 [0181.510] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.510] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.510] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.510] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.510] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.510] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.510] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.510] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.510] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.510] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.510] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.510] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.511] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.511] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.511] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.511] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.511] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0181.511] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0181.511] SetLastError (dwErrCode=0x0) [0181.511] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power Map Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power map excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.514] GetLastError () returned 0x5 [0181.514] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0181.514] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.514] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0181.514] SetLastError (dwErrCode=0x0) [0181.514] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.514] GetLastError () returned 0x5 [0181.514] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0181.514] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.514] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4d40 [0181.516] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.517] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.517] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.517] SetLastError (dwErrCode=0x0) [0181.517] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.518] GetLastError () returned 0x5 [0181.518] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.518] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.518] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ar\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb5040 [0181.519] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.519] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.519] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.519] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.519] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.519] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.519] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.519] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0181.519] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ar\\PowerViewRes.ar.xap", dwFileAttributes=0x80) returned 0 [0181.520] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ar\\PowerViewRes.ar.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ar\\powerviewres.ar.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.520] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.520] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.520] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0181.520] FindClose (in: hFindFile=0x665abb5040 | out: hFindFile=0x665abb5040) returned 1 [0181.521] SetLastError (dwErrCode=0x0) [0181.521] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ar\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ar\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.523] GetLastError () returned 0x5 [0181.523] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.523] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.523] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.523] SetLastError (dwErrCode=0x0) [0181.524] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.524] GetLastError () returned 0x5 [0181.524] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.524] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.524] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\bg\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4f80 [0181.525] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.525] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.525] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.525] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.525] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.525] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.525] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.525] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0181.525] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\bg\\PowerViewRes.bg.xap", dwFileAttributes=0x80) returned 0 [0181.526] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\bg\\PowerViewRes.bg.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\bg\\powerviewres.bg.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.526] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.526] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.527] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0181.527] FindClose (in: hFindFile=0x665abb4f80 | out: hFindFile=0x665abb4f80) returned 1 [0181.527] SetLastError (dwErrCode=0x0) [0181.527] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\bg\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\bg\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.530] GetLastError () returned 0x5 [0181.530] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.530] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.530] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.530] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0181.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\BI-Report.png", dwFileAttributes=0x80) returned 0 [0181.531] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\BI-Report.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\bi-report.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.531] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.531] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.531] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.531] SetLastError (dwErrCode=0x0) [0181.531] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.532] GetLastError () returned 0x5 [0181.532] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.532] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.532] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ca\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb53a0 [0181.533] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.533] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.533] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.533] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.533] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.533] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.533] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.533] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0181.534] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ca\\PowerViewRes.ca.xap", dwFileAttributes=0x80) returned 0 [0181.534] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ca\\PowerViewRes.ca.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ca\\powerviewres.ca.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.535] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.535] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.535] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0181.535] FindClose (in: hFindFile=0x665abb53a0 | out: hFindFile=0x665abb53a0) returned 1 [0181.535] SetLastError (dwErrCode=0x0) [0181.535] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ca\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ca\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.538] GetLastError () returned 0x5 [0181.538] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.538] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.538] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.538] SetLastError (dwErrCode=0x0) [0181.538] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.538] GetLastError () returned 0x5 [0181.538] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.538] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.539] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\cs\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb45c0 [0181.540] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.540] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.540] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.540] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.540] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.540] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.540] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.540] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0181.541] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\cs\\PowerViewRes.cs.xap", dwFileAttributes=0x80) returned 0 [0181.541] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\cs\\PowerViewRes.cs.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\cs\\powerviewres.cs.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.541] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.541] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.541] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0181.541] FindClose (in: hFindFile=0x665abb45c0 | out: hFindFile=0x665abb45c0) returned 1 [0181.542] SetLastError (dwErrCode=0x0) [0181.542] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\cs\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\cs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.544] GetLastError () returned 0x5 [0181.545] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.545] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.545] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.545] SetLastError (dwErrCode=0x0) [0181.545] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.545] GetLastError () returned 0x5 [0181.545] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.545] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.545] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\da\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb5040 [0181.548] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.548] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.548] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.548] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.548] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.548] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.548] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.548] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0181.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\da\\PowerViewRes.da.xap", dwFileAttributes=0x80) returned 0 [0181.548] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\da\\PowerViewRes.da.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\da\\powerviewres.da.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.548] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.548] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.549] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0181.549] FindClose (in: hFindFile=0x665abb5040 | out: hFindFile=0x665abb5040) returned 1 [0181.549] SetLastError (dwErrCode=0x0) [0181.549] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\da\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\da\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.552] GetLastError () returned 0x5 [0181.552] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.552] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.552] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.552] SetLastError (dwErrCode=0x0) [0181.552] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.552] GetLastError () returned 0x5 [0181.552] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.552] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.552] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\de\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb42c0 [0181.554] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.554] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.554] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.554] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.554] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.554] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.554] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.554] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0181.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\de\\PowerViewRes.de.xap", dwFileAttributes=0x80) returned 0 [0181.555] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\de\\PowerViewRes.de.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\de\\powerviewres.de.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.555] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.555] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.555] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0181.556] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0181.556] SetLastError (dwErrCode=0x0) [0181.556] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\de\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\de\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.560] GetLastError () returned 0x5 [0181.560] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.560] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.560] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.560] SetLastError (dwErrCode=0x0) [0181.560] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.560] GetLastError () returned 0x5 [0181.560] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.560] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.560] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\el\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4920 [0181.563] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.563] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.563] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.563] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.563] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.563] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.563] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.563] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0181.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\el\\PowerViewRes.el.xap", dwFileAttributes=0x80) returned 0 [0181.564] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\el\\PowerViewRes.el.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\el\\powerviewres.el.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.565] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.565] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.565] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0181.565] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0181.566] SetLastError (dwErrCode=0x0) [0181.566] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\el\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\el\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.569] GetLastError () returned 0x5 [0181.569] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.569] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.569] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.569] SetLastError (dwErrCode=0x0) [0181.569] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.570] GetLastError () returned 0x5 [0181.570] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.570] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.570] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\es\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb56a0 [0181.572] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.572] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.572] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.572] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.572] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.572] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.572] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.572] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0181.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\es\\PowerViewRes.es.xap", dwFileAttributes=0x80) returned 0 [0181.573] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\es\\PowerViewRes.es.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\es\\powerviewres.es.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.573] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.573] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.573] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0181.574] FindClose (in: hFindFile=0x665abb56a0 | out: hFindFile=0x665abb56a0) returned 1 [0181.574] SetLastError (dwErrCode=0x0) [0181.574] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\es\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\es\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.578] GetLastError () returned 0x5 [0181.578] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.578] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.578] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.578] SetLastError (dwErrCode=0x0) [0181.578] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.578] GetLastError () returned 0x5 [0181.578] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.578] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.578] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\et\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4560 [0181.579] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.579] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.579] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.579] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.579] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.579] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.579] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.579] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0181.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\et\\PowerViewRes.et.xap", dwFileAttributes=0x80) returned 0 [0181.580] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\et\\PowerViewRes.et.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\et\\powerviewres.et.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.580] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.580] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.580] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0181.580] FindClose (in: hFindFile=0x665abb4560 | out: hFindFile=0x665abb4560) returned 1 [0181.581] SetLastError (dwErrCode=0x0) [0181.581] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\et\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\et\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.584] GetLastError () returned 0x5 [0181.584] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.584] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.584] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.584] SetLastError (dwErrCode=0x0) [0181.584] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.584] GetLastError () returned 0x5 [0181.584] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.584] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.584] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\eu\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4c20 [0181.586] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.586] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.586] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.586] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.586] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.586] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.586] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.586] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0181.586] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\eu\\PowerViewRes.eu.xap", dwFileAttributes=0x80) returned 0 [0181.587] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\eu\\PowerViewRes.eu.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\eu\\powerviewres.eu.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.587] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.587] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.587] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0181.587] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0181.588] SetLastError (dwErrCode=0x0) [0181.588] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\eu\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\eu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.590] GetLastError () returned 0x5 [0181.590] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.590] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.590] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.590] SetLastError (dwErrCode=0x0) [0181.591] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.591] GetLastError () returned 0x5 [0181.591] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.591] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.591] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fi\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4f20 [0181.593] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.593] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.593] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.593] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.593] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.593] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.593] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.593] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0181.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fi\\PowerViewRes.fi.xap", dwFileAttributes=0x80) returned 0 [0181.594] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fi\\PowerViewRes.fi.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\fi\\powerviewres.fi.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.594] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.594] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.594] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0181.594] FindClose (in: hFindFile=0x665abb4f20 | out: hFindFile=0x665abb4f20) returned 1 [0181.595] SetLastError (dwErrCode=0x0) [0181.595] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fi\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\fi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.598] GetLastError () returned 0x5 [0181.598] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.598] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.598] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.598] SetLastError (dwErrCode=0x0) [0181.598] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.598] GetLastError () returned 0x5 [0181.598] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.598] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.598] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fr\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4f20 [0181.600] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.600] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.600] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.600] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.600] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.600] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.600] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.600] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0181.600] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fr\\PowerViewRes.fr.xap", dwFileAttributes=0x80) returned 0 [0181.600] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fr\\PowerViewRes.fr.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\fr\\powerviewres.fr.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.601] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.601] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.601] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0181.601] FindClose (in: hFindFile=0x665abb4f20 | out: hFindFile=0x665abb4f20) returned 1 [0181.602] SetLastError (dwErrCode=0x0) [0181.602] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\fr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.604] GetLastError () returned 0x5 [0181.604] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.604] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.604] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.604] SetLastError (dwErrCode=0x0) [0181.604] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.604] GetLastError () returned 0x5 [0181.604] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.605] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.605] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\gl\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb49e0 [0181.606] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.606] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.606] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.606] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.606] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.606] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.606] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.606] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0181.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\gl\\PowerViewRes.gl.xap", dwFileAttributes=0x80) returned 0 [0181.607] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\gl\\PowerViewRes.gl.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\gl\\powerviewres.gl.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.607] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.607] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.607] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0181.607] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0181.608] SetLastError (dwErrCode=0x0) [0181.608] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\gl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\gl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.611] GetLastError () returned 0x5 [0181.611] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.611] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.611] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.611] SetLastError (dwErrCode=0x0) [0181.611] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.611] GetLastError () returned 0x5 [0181.611] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.611] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.611] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\he\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb5040 [0181.613] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.613] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.613] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.613] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.613] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.613] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.613] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.613] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0181.613] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\he\\PowerViewRes.he.xap", dwFileAttributes=0x80) returned 0 [0181.614] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\he\\PowerViewRes.he.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\he\\powerviewres.he.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.614] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.614] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.615] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0181.615] FindClose (in: hFindFile=0x665abb5040 | out: hFindFile=0x665abb5040) returned 1 [0181.615] SetLastError (dwErrCode=0x0) [0181.615] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\he\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\he\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.618] GetLastError () returned 0x5 [0181.618] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.618] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.618] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.618] SetLastError (dwErrCode=0x0) [0181.618] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.618] GetLastError () returned 0x5 [0181.618] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.618] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.618] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hi\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4920 [0181.620] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.620] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.620] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.620] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.620] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.620] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.620] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.620] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0181.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hi\\PowerViewRes.hi.xap", dwFileAttributes=0x80) returned 0 [0181.621] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hi\\PowerViewRes.hi.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\hi\\powerviewres.hi.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.621] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.621] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.622] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0181.622] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0181.622] SetLastError (dwErrCode=0x0) [0181.622] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hi\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\hi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.625] GetLastError () returned 0x5 [0181.625] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.625] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.625] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.625] SetLastError (dwErrCode=0x0) [0181.625] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.625] GetLastError () returned 0x5 [0181.625] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.625] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.626] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hr\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb53a0 [0181.627] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.627] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.627] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.627] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.627] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.627] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.627] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.627] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0181.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hr\\PowerViewRes.hr.xap", dwFileAttributes=0x80) returned 0 [0181.628] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hr\\PowerViewRes.hr.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\hr\\powerviewres.hr.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.628] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.628] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.629] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0181.629] FindClose (in: hFindFile=0x665abb53a0 | out: hFindFile=0x665abb53a0) returned 1 [0181.629] SetLastError (dwErrCode=0x0) [0181.629] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\hr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.633] GetLastError () returned 0x5 [0181.633] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.633] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.633] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.633] SetLastError (dwErrCode=0x0) [0181.633] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.633] GetLastError () returned 0x5 [0181.633] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.633] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.633] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hu\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb49e0 [0181.635] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.635] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.635] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.636] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.636] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.636] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.636] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.636] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0181.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hu\\PowerViewRes.hu.xap", dwFileAttributes=0x80) returned 0 [0181.636] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hu\\PowerViewRes.hu.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\hu\\powerviewres.hu.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.637] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.637] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.637] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0181.637] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0181.638] SetLastError (dwErrCode=0x0) [0181.638] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hu\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\hu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.641] GetLastError () returned 0x5 [0181.641] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.641] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.641] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.641] SetLastError (dwErrCode=0x0) [0181.641] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.641] GetLastError () returned 0x5 [0181.641] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.641] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.641] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\id\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb57c0 [0181.643] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.643] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.643] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.643] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.643] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.643] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.643] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.643] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0181.643] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\id\\PowerViewRes.id.xap", dwFileAttributes=0x80) returned 0 [0181.644] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\id\\PowerViewRes.id.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\id\\powerviewres.id.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.644] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.644] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.644] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0181.644] FindClose (in: hFindFile=0x665abb57c0 | out: hFindFile=0x665abb57c0) returned 1 [0181.645] SetLastError (dwErrCode=0x0) [0181.645] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\id\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\id\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.647] GetLastError () returned 0x5 [0181.647] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.647] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.648] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.648] SetLastError (dwErrCode=0x0) [0181.648] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.648] GetLastError () returned 0x5 [0181.648] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.648] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.648] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\it\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb5460 [0181.650] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.650] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.650] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.650] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.650] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.650] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.650] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.650] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0181.650] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\it\\PowerViewRes.it.xap", dwFileAttributes=0x80) returned 0 [0181.651] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\it\\PowerViewRes.it.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\it\\powerviewres.it.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.651] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.651] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.652] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0181.652] FindClose (in: hFindFile=0x665abb5460 | out: hFindFile=0x665abb5460) returned 1 [0181.652] SetLastError (dwErrCode=0x0) [0181.652] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\it\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\it\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.655] GetLastError () returned 0x5 [0181.655] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.655] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.655] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.655] SetLastError (dwErrCode=0x0) [0181.655] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.656] GetLastError () returned 0x5 [0181.656] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.656] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.656] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ja\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb42c0 [0181.657] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.657] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.657] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.657] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.657] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.657] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.657] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.658] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0181.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ja\\PowerViewRes.ja.xap", dwFileAttributes=0x80) returned 0 [0181.658] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ja\\PowerViewRes.ja.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ja\\powerviewres.ja.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.658] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.658] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.658] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0181.658] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0181.659] SetLastError (dwErrCode=0x0) [0181.659] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ja\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ja\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.662] GetLastError () returned 0x5 [0181.662] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.662] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.662] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.662] SetLastError (dwErrCode=0x0) [0181.662] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.662] GetLastError () returned 0x5 [0181.662] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.662] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.662] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\kk\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4920 [0181.664] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.664] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.664] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.664] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.664] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.664] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.664] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.664] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0181.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\kk\\PowerViewRes.kk.xap", dwFileAttributes=0x80) returned 0 [0181.664] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\kk\\PowerViewRes.kk.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\kk\\powerviewres.kk.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.665] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.665] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.665] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0181.665] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0181.666] SetLastError (dwErrCode=0x0) [0181.666] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\kk\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\kk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.668] GetLastError () returned 0x5 [0181.668] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.668] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.668] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.668] SetLastError (dwErrCode=0x0) [0181.668] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.668] GetLastError () returned 0x5 [0181.669] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.669] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.669] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ko\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb42c0 [0181.670] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.670] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.670] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.671] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.671] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.671] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.671] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.671] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0181.671] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ko\\PowerViewRes.ko.xap", dwFileAttributes=0x80) returned 0 [0181.672] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ko\\PowerViewRes.ko.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ko\\powerviewres.ko.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.672] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.672] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.672] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0181.672] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0181.673] SetLastError (dwErrCode=0x0) [0181.673] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ko\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ko\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.675] GetLastError () returned 0x5 [0181.675] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.675] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.675] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.675] SetLastError (dwErrCode=0x0) [0181.675] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.676] GetLastError () returned 0x5 [0181.676] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.676] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.676] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lt\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4560 [0181.677] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.677] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.677] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.677] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.678] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.678] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.678] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.678] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0181.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lt\\PowerViewRes.lt.xap", dwFileAttributes=0x80) returned 0 [0181.679] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lt\\PowerViewRes.lt.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\lt\\powerviewres.lt.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.679] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.679] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.679] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0181.679] FindClose (in: hFindFile=0x665abb4560 | out: hFindFile=0x665abb4560) returned 1 [0181.680] SetLastError (dwErrCode=0x0) [0181.680] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lt\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\lt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.682] GetLastError () returned 0x5 [0181.682] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.682] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.682] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.682] SetLastError (dwErrCode=0x0) [0181.682] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.683] GetLastError () returned 0x5 [0181.683] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.683] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.683] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lv\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb42c0 [0181.684] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.684] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.684] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.684] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.684] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.684] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.684] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.684] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0181.685] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lv\\PowerViewRes.lv.xap", dwFileAttributes=0x80) returned 0 [0181.685] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lv\\PowerViewRes.lv.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\lv\\powerviewres.lv.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.685] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.685] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.685] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0181.685] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0181.686] SetLastError (dwErrCode=0x0) [0181.686] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lv\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\lv\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.689] GetLastError () returned 0x5 [0181.689] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.689] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.689] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.689] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.689] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.689] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.689] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0181.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\Microsoft.Reporting.AdHoc.Shell.Bootstrapper.xap", dwFileAttributes=0x80) returned 0 [0181.690] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\Microsoft.Reporting.AdHoc.Shell.Bootstrapper.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\microsoft.reporting.adhoc.shell.bootstrapper.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.690] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.690] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.690] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.690] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.690] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.690] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.690] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.690] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.690] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.690] SetLastError (dwErrCode=0x0) [0181.690] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.690] GetLastError () returned 0x5 [0181.690] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.691] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.691] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ms\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb53a0 [0181.692] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.692] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.692] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.692] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.692] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.692] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.692] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.693] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0181.693] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ms\\PowerViewRes.ms.xap", dwFileAttributes=0x80) returned 0 [0181.693] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ms\\PowerViewRes.ms.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ms\\powerviewres.ms.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.693] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.693] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.693] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0181.693] FindClose (in: hFindFile=0x665abb53a0 | out: hFindFile=0x665abb53a0) returned 1 [0181.694] SetLastError (dwErrCode=0x0) [0181.694] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ms\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ms\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.697] GetLastError () returned 0x5 [0181.697] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.697] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.697] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.697] SetLastError (dwErrCode=0x0) [0181.697] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.697] GetLastError () returned 0x5 [0181.697] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.697] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.697] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\nl\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4da0 [0181.700] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.700] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.700] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.700] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.700] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.700] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.700] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.700] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0181.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\nl\\PowerViewRes.nl.xap", dwFileAttributes=0x80) returned 0 [0181.701] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\nl\\PowerViewRes.nl.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\nl\\powerviewres.nl.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.701] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.701] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.706] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0181.706] FindClose (in: hFindFile=0x665abb4da0 | out: hFindFile=0x665abb4da0) returned 1 [0181.707] SetLastError (dwErrCode=0x0) [0181.707] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\nl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\nl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.710] GetLastError () returned 0x5 [0181.710] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.710] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.710] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.710] SetLastError (dwErrCode=0x0) [0181.710] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.710] GetLastError () returned 0x5 [0181.710] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.710] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.710] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\no\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb53a0 [0181.712] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.712] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.712] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.712] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.712] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.712] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.712] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.712] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0181.712] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\no\\PowerViewRes.no.xap", dwFileAttributes=0x80) returned 0 [0181.712] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\no\\PowerViewRes.no.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\no\\powerviewres.no.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.713] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.713] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.713] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0181.713] FindClose (in: hFindFile=0x665abb53a0 | out: hFindFile=0x665abb53a0) returned 1 [0181.714] SetLastError (dwErrCode=0x0) [0181.714] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\no\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\no\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.716] GetLastError () returned 0x5 [0181.716] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.716] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.716] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.716] SetLastError (dwErrCode=0x0) [0181.716] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.717] GetLastError () returned 0x5 [0181.717] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.717] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.717] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pl\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4f20 [0181.718] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.718] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.718] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.718] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.718] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.718] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.718] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.718] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0181.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pl\\PowerViewRes.pl.xap", dwFileAttributes=0x80) returned 0 [0181.719] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pl\\PowerViewRes.pl.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\pl\\powerviewres.pl.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.719] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.719] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.720] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0181.720] FindClose (in: hFindFile=0x665abb4f20 | out: hFindFile=0x665abb4f20) returned 1 [0181.720] SetLastError (dwErrCode=0x0) [0181.720] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\pl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.723] GetLastError () returned 0x5 [0181.723] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.723] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.723] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.723] SetLastError (dwErrCode=0x0) [0181.723] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.723] GetLastError () returned 0x5 [0181.724] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.724] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.724] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4c20 [0181.725] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.725] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.725] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.725] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.725] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.725] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.725] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.725] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0181.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt\\PowerViewRes.pt.xap", dwFileAttributes=0x80) returned 0 [0181.726] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt\\PowerViewRes.pt.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\pt\\powerviewres.pt.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.727] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.727] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.727] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0181.727] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0181.728] SetLastError (dwErrCode=0x0) [0181.728] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\pt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.730] GetLastError () returned 0x5 [0181.730] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.730] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.730] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.730] SetLastError (dwErrCode=0x0) [0181.730] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.731] GetLastError () returned 0x5 [0181.731] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.731] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.731] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt-PT\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb53a0 [0181.732] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.732] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.733] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.733] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.733] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.733] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.733] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.733] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0181.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt-PT\\PowerViewRes.pt-PT.xap", dwFileAttributes=0x80) returned 0 [0181.733] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt-PT\\PowerViewRes.pt-PT.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\pt-pt\\powerviewres.pt-pt.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.734] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.734] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.734] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0181.734] FindClose (in: hFindFile=0x665abb53a0 | out: hFindFile=0x665abb53a0) returned 1 [0181.735] SetLastError (dwErrCode=0x0) [0181.735] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt-PT\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\pt-pt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.738] GetLastError () returned 0x5 [0181.738] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.738] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.738] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.738] SetLastError (dwErrCode=0x0) [0181.738] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.738] GetLastError () returned 0x5 [0181.738] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.738] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.738] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ro\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4920 [0181.740] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.740] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.740] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.740] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.740] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.740] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.740] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.740] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0181.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ro\\PowerViewRes.ro.xap", dwFileAttributes=0x80) returned 0 [0181.740] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ro\\PowerViewRes.ro.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ro\\powerviewres.ro.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.741] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.741] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.741] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0181.741] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0181.742] SetLastError (dwErrCode=0x0) [0181.742] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ro\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ro\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.744] GetLastError () returned 0x5 [0181.744] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.744] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.744] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.744] SetLastError (dwErrCode=0x0) [0181.745] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.745] GetLastError () returned 0x5 [0181.745] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.745] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.745] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ru\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb53a0 [0181.747] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.747] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.747] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.747] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.747] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.747] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.747] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.747] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0181.747] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ru\\PowerViewRes.ru.xap", dwFileAttributes=0x80) returned 0 [0181.747] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ru\\PowerViewRes.ru.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ru\\powerviewres.ru.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.747] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.747] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.748] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0181.748] FindClose (in: hFindFile=0x665abb53a0 | out: hFindFile=0x665abb53a0) returned 1 [0181.748] SetLastError (dwErrCode=0x0) [0181.749] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ru\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ru\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.751] GetLastError () returned 0x5 [0181.751] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.751] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.751] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.751] SetLastError (dwErrCode=0x0) [0181.751] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.751] GetLastError () returned 0x5 [0181.751] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.751] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.752] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sk\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4920 [0181.753] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.753] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.753] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.753] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.753] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.753] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.753] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.753] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0181.754] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sk\\PowerViewRes.sk.xap", dwFileAttributes=0x80) returned 0 [0181.754] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sk\\PowerViewRes.sk.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\sk\\powerviewres.sk.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.754] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.754] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.754] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0181.754] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0181.755] SetLastError (dwErrCode=0x0) [0181.755] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sk\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\sk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.758] GetLastError () returned 0x5 [0181.758] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.758] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.758] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.758] SetLastError (dwErrCode=0x0) [0181.758] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.758] GetLastError () returned 0x5 [0181.758] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.758] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.758] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sl\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4c20 [0181.759] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.759] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.759] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.759] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.759] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.759] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.759] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.759] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0181.760] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sl\\PowerViewRes.sl.xap", dwFileAttributes=0x80) returned 0 [0181.760] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sl\\PowerViewRes.sl.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\sl\\powerviewres.sl.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.760] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.760] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.761] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0181.761] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0181.762] SetLastError (dwErrCode=0x0) [0181.762] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\sl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.765] GetLastError () returned 0x5 [0181.765] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.765] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.765] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.765] SetLastError (dwErrCode=0x0) [0181.765] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.765] GetLastError () returned 0x5 [0181.765] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.765] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.765] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-cyrl\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4c20 [0181.767] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.767] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.767] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.767] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.767] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.767] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.767] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.767] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0181.768] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-cyrl\\PowerViewRes.sr-cyrl.xap", dwFileAttributes=0x80) returned 0 [0181.768] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-cyrl\\PowerViewRes.sr-cyrl.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\sr-cyrl\\powerviewres.sr-cyrl.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.768] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.768] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.768] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0181.768] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0181.769] SetLastError (dwErrCode=0x0) [0181.769] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-cyrl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\sr-cyrl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.772] GetLastError () returned 0x5 [0181.772] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.772] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.772] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.772] SetLastError (dwErrCode=0x0) [0181.772] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.772] GetLastError () returned 0x5 [0181.772] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.772] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.772] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-latn\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb56a0 [0181.774] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.774] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.774] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.774] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.774] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.774] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.774] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.774] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0181.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-latn\\PowerViewRes.sr-latn.xap", dwFileAttributes=0x80) returned 0 [0181.774] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-latn\\PowerViewRes.sr-latn.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\sr-latn\\powerviewres.sr-latn.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.775] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.775] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.775] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0181.775] FindClose (in: hFindFile=0x665abb56a0 | out: hFindFile=0x665abb56a0) returned 1 [0181.776] SetLastError (dwErrCode=0x0) [0181.776] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-latn\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\sr-latn\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.778] GetLastError () returned 0x5 [0181.778] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.778] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.778] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.778] SetLastError (dwErrCode=0x0) [0181.778] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.779] GetLastError () returned 0x5 [0181.779] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.779] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.779] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-Latn-CS\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4c20 [0181.779] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.779] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0181.779] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0181.779] SetLastError (dwErrCode=0x0) [0181.779] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-Latn-CS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\sr-latn-cs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.780] GetLastError () returned 0x5 [0181.780] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.780] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.780] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.780] SetLastError (dwErrCode=0x0) [0181.780] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.780] GetLastError () returned 0x5 [0181.780] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.780] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.780] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sv\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb57c0 [0181.782] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.782] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.782] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.782] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.782] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.782] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.782] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.782] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0181.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sv\\PowerViewRes.sv.xap", dwFileAttributes=0x80) returned 0 [0181.783] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sv\\PowerViewRes.sv.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\sv\\powerviewres.sv.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.783] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.783] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.783] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0181.783] FindClose (in: hFindFile=0x665abb57c0 | out: hFindFile=0x665abb57c0) returned 1 [0181.784] SetLastError (dwErrCode=0x0) [0181.784] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sv\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\sv\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.787] GetLastError () returned 0x5 [0181.787] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.787] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.787] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.787] SetLastError (dwErrCode=0x0) [0181.787] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.787] GetLastError () returned 0x5 [0181.787] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.787] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.787] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\th\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb43e0 [0181.789] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.789] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.789] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.789] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.789] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.789] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.789] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.789] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0181.790] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\th\\PowerViewRes.th.xap", dwFileAttributes=0x80) returned 0 [0181.791] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\th\\PowerViewRes.th.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\th\\powerviewres.th.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.791] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.791] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.791] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0181.791] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0181.792] SetLastError (dwErrCode=0x0) [0181.792] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\th\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\th\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.796] GetLastError () returned 0x5 [0181.796] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.796] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.796] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.796] SetLastError (dwErrCode=0x0) [0181.796] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.797] GetLastError () returned 0x5 [0181.797] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.797] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.797] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\tr\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4f20 [0181.798] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.798] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.799] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.799] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.799] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.799] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.799] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.799] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0181.799] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\tr\\PowerViewRes.tr.xap", dwFileAttributes=0x80) returned 0 [0181.799] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\tr\\PowerViewRes.tr.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\tr\\powerviewres.tr.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.799] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.799] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.800] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0181.800] FindClose (in: hFindFile=0x665abb4f20 | out: hFindFile=0x665abb4f20) returned 1 [0181.800] SetLastError (dwErrCode=0x0) [0181.800] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\tr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\tr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.803] GetLastError () returned 0x5 [0181.803] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.804] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.804] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.804] SetLastError (dwErrCode=0x0) [0181.804] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.804] GetLastError () returned 0x5 [0181.804] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.804] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.804] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\uk\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb5460 [0181.806] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.806] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.806] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.806] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.806] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.806] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.806] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.806] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0181.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\uk\\PowerViewRes.uk.xap", dwFileAttributes=0x80) returned 0 [0181.807] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\uk\\PowerViewRes.uk.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\uk\\powerviewres.uk.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.807] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.807] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.807] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0181.807] FindClose (in: hFindFile=0x665abb5460 | out: hFindFile=0x665abb5460) returned 1 [0181.808] SetLastError (dwErrCode=0x0) [0181.808] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\uk\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\uk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.810] GetLastError () returned 0x5 [0181.810] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.811] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.811] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.811] SetLastError (dwErrCode=0x0) [0181.811] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.811] GetLastError () returned 0x5 [0181.811] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.811] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.811] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\vi\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb43e0 [0181.813] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.813] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.813] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.813] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.813] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.813] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.813] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.813] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0181.813] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\vi\\PowerViewRes.vi.xap", dwFileAttributes=0x80) returned 0 [0181.814] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\vi\\PowerViewRes.vi.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\vi\\powerviewres.vi.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.814] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.814] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.814] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0181.814] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0181.815] SetLastError (dwErrCode=0x0) [0181.815] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\vi\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\vi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.817] GetLastError () returned 0x5 [0181.817] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.818] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.818] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.818] SetLastError (dwErrCode=0x0) [0181.818] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.818] GetLastError () returned 0x5 [0181.818] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.818] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.818] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHS\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb5760 [0181.820] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.820] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.820] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.820] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.820] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.820] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.820] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.820] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0181.820] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHS\\PowerViewRes.zh-CHS.xap", dwFileAttributes=0x80) returned 0 [0181.821] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHS\\PowerViewRes.zh-CHS.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\zh-chs\\powerviewres.zh-chs.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.821] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.821] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.821] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0181.821] FindClose (in: hFindFile=0x665abb5760 | out: hFindFile=0x665abb5760) returned 1 [0181.822] SetLastError (dwErrCode=0x0) [0181.822] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\zh-chs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.824] GetLastError () returned 0x5 [0181.824] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.824] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.824] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.824] SetLastError (dwErrCode=0x0) [0181.825] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.825] GetLastError () returned 0x5 [0181.825] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.825] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.825] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHT\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4920 [0181.826] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.826] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.826] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.826] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.826] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.826] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.826] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.826] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0181.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHT\\PowerViewRes.zh-CHT.xap", dwFileAttributes=0x80) returned 0 [0181.827] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHT\\PowerViewRes.zh-CHT.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\zh-cht\\powerviewres.zh-cht.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.827] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.827] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.827] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0181.827] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0181.828] SetLastError (dwErrCode=0x0) [0181.828] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHT\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\zh-cht\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.831] GetLastError () returned 0x5 [0181.831] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.831] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.831] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0181.831] FindClose (in: hFindFile=0x665abb4d40 | out: hFindFile=0x665abb4d40) returned 1 [0181.831] SetLastError (dwErrCode=0x0) [0181.831] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.831] GetLastError () returned 0x5 [0181.831] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0181.831] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.831] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0181.831] SetLastError (dwErrCode=0x0) [0181.831] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.831] GetLastError () returned 0x5 [0181.831] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0181.831] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.831] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb56a0 [0181.834] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.837] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.837] SetLastError (dwErrCode=0x0) [0181.837] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.837] GetLastError () returned 0x5 [0181.837] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.837] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.837] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb53a0 [0181.839] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.840] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.840] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0181.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0181.841] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ar\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.841] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.841] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.841] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.841] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.841] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.841] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.841] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.841] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.841] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.841] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.841] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.841] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.841] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.841] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.841] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.841] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.841] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.841] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.841] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.842] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.842] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.842] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.842] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.842] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0181.842] FindClose (in: hFindFile=0x665abb53a0 | out: hFindFile=0x665abb53a0) returned 1 [0181.843] SetLastError (dwErrCode=0x0) [0181.843] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ar\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.846] GetLastError () returned 0x5 [0181.846] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.846] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.846] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.846] SetLastError (dwErrCode=0x0) [0181.846] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.846] GetLastError () returned 0x5 [0181.846] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.846] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.846] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb45c0 [0181.847] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.849] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.849] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0181.849] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0181.850] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\bg\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.850] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.850] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.851] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.851] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.851] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.851] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.851] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.851] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.851] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.851] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.851] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.851] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.851] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.851] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.851] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.851] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.851] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.851] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.851] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.851] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.851] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.851] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.851] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.851] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0181.851] FindClose (in: hFindFile=0x665abb45c0 | out: hFindFile=0x665abb45c0) returned 1 [0181.852] SetLastError (dwErrCode=0x0) [0181.852] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\bg\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.854] GetLastError () returned 0x5 [0181.854] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.854] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.854] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.854] SetLastError (dwErrCode=0x0) [0181.854] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.855] GetLastError () returned 0x5 [0181.855] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.855] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.855] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb5040 [0181.856] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.857] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.857] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0181.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0181.862] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ca\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.862] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.862] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.862] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.862] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.862] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.862] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.862] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.862] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.862] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.862] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.862] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.862] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.862] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.862] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.862] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.862] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.862] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.863] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.863] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.863] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.863] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.863] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.863] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.863] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0181.863] FindClose (in: hFindFile=0x665abb5040 | out: hFindFile=0x665abb5040) returned 1 [0181.863] SetLastError (dwErrCode=0x0) [0181.863] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ca\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.866] GetLastError () returned 0x5 [0181.866] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.866] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.866] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.866] SetLastError (dwErrCode=0x0) [0181.866] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.866] GetLastError () returned 0x5 [0181.866] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.866] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.867] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb42c0 [0181.868] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.868] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.868] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0181.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\as80.xsl", dwFileAttributes=0x80) returned 0 [0181.869] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\as80.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\as80.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.869] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.869] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.870] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.870] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0181.870] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\as90.xsl", dwFileAttributes=0x80) returned 0 [0181.871] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\as90.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\as90.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.871] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.871] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.871] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.871] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0181.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\db2v0801.xsl", dwFileAttributes=0x80) returned 0 [0181.873] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\db2v0801.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\db2v0801.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.873] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.873] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.873] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.873] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0181.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\hive.xsl", dwFileAttributes=0x80) returned 0 [0181.878] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\hive.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\hive.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.878] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.878] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.879] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.879] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0181.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\Informix.xsl", dwFileAttributes=0x80) returned 0 [0181.880] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\Informix.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\informix.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.880] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.880] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.880] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.880] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0181.880] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\msjet.xsl", dwFileAttributes=0x80) returned 0 [0181.881] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\msjet.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\msjet.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.881] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.881] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.881] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.881] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0181.881] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\orcl7.xsl", dwFileAttributes=0x80) returned 0 [0181.881] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\orcl7.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\orcl7.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.882] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.882] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.882] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.882] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0181.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql120.xsl", dwFileAttributes=0x80) returned 0 [0181.882] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql120.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\sql120.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.882] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.883] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.883] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.883] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0181.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql2000.xsl", dwFileAttributes=0x80) returned 0 [0181.883] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql2000.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\sql2000.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.883] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.883] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.884] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.884] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0181.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql70.xsl", dwFileAttributes=0x80) returned 0 [0181.885] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql70.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\sql70.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.885] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.885] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.885] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.885] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0181.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql90.xsl", dwFileAttributes=0x80) returned 0 [0181.886] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql90.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\sql90.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.886] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.886] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.886] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.886] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0181.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sqlpdw.xsl", dwFileAttributes=0x80) returned 0 [0181.887] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sqlpdw.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\sqlpdw.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.887] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.887] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.888] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.888] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0181.888] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\Sybase.xsl", dwFileAttributes=0x80) returned 0 [0181.888] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\Sybase.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\sybase.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.888] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.888] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.889] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.889] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0181.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\trdtv2r41.xsl", dwFileAttributes=0x80) returned 0 [0181.889] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\trdtv2r41.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\trdtv2r41.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.890] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.890] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.890] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0181.890] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0181.891] SetLastError (dwErrCode=0x0) [0181.891] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.893] GetLastError () returned 0x5 [0181.893] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.893] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.893] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.893] SetLastError (dwErrCode=0x0) [0181.894] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.894] GetLastError () returned 0x5 [0181.894] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.894] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.894] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4c20 [0181.896] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.897] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.897] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0181.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0181.897] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cs\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.898] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.898] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.898] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.898] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.898] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.898] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.898] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.898] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.898] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.898] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.898] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.898] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.898] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.898] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.898] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.898] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.898] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.898] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.898] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.898] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.898] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.898] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.898] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.898] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0181.898] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0181.899] SetLastError (dwErrCode=0x0) [0181.899] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.902] GetLastError () returned 0x5 [0181.902] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.902] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.902] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.902] SetLastError (dwErrCode=0x0) [0181.902] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.902] GetLastError () returned 0x5 [0181.902] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.902] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.902] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4d40 [0181.904] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.907] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.907] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0181.908] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0181.908] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\da\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.908] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.908] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.908] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.908] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.909] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.909] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.909] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.909] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.909] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.909] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.909] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.909] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.909] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.909] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.909] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.909] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.909] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.909] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.909] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.909] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.909] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.909] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.909] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.909] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0181.909] FindClose (in: hFindFile=0x665abb4d40 | out: hFindFile=0x665abb4d40) returned 1 [0181.910] SetLastError (dwErrCode=0x0) [0181.910] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\da\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.913] GetLastError () returned 0x5 [0181.913] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.913] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.913] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.913] SetLastError (dwErrCode=0x0) [0181.913] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.913] GetLastError () returned 0x5 [0181.913] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.913] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.913] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb5760 [0181.915] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.916] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.916] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0181.916] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0181.917] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\de\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.917] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.917] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.917] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.917] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.917] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.917] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.917] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.917] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.917] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.917] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.917] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.918] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.918] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.918] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.918] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.918] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.918] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.918] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.918] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.918] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.918] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.918] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.918] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.918] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0181.918] FindClose (in: hFindFile=0x665abb5760 | out: hFindFile=0x665abb5760) returned 1 [0181.919] SetLastError (dwErrCode=0x0) [0181.919] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\de\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.922] GetLastError () returned 0x5 [0181.922] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.922] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.922] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.922] SetLastError (dwErrCode=0x0) [0181.922] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.922] GetLastError () returned 0x5 [0181.922] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.922] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.922] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4f20 [0181.924] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.925] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.925] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0181.926] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0181.928] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\el\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.928] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.928] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.928] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.928] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.928] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.928] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.928] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.928] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.928] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.929] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.929] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.929] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.929] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.929] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.929] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.929] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.929] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.929] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.929] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.929] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.929] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.929] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.929] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.929] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0181.929] FindClose (in: hFindFile=0x665abb4f20 | out: hFindFile=0x665abb4f20) returned 1 [0181.930] SetLastError (dwErrCode=0x0) [0181.930] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\el\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.933] GetLastError () returned 0x5 [0181.933] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.933] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.933] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.933] SetLastError (dwErrCode=0x0) [0181.933] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.933] GetLastError () returned 0x5 [0181.933] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.933] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.933] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\en\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb42c0 [0181.934] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.934] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.934] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0181.934] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\en\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0181.934] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\en\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\en\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.935] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.935] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.935] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0181.935] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0181.935] SetLastError (dwErrCode=0x0) [0181.935] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\en\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\en\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.935] GetLastError () returned 0x5 [0181.935] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.935] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.935] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.935] SetLastError (dwErrCode=0x0) [0181.935] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.935] GetLastError () returned 0x5 [0181.936] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.936] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.936] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb55e0 [0181.937] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.939] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.939] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0181.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0181.940] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\es\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.940] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.940] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.940] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.940] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.940] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.940] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.940] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.940] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.940] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.940] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.940] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.940] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.940] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.940] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.940] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.940] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.940] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.940] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.940] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.940] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.940] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.940] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.940] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.941] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0181.941] FindClose (in: hFindFile=0x665abb55e0 | out: hFindFile=0x665abb55e0) returned 1 [0181.941] SetLastError (dwErrCode=0x0) [0181.941] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\es\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.945] GetLastError () returned 0x5 [0181.945] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.945] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.945] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.945] SetLastError (dwErrCode=0x0) [0181.945] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.945] GetLastError () returned 0x5 [0181.945] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.945] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.945] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4920 [0181.947] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.949] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.949] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0181.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0181.950] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\et\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.950] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.950] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.950] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.950] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.950] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.950] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.950] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.950] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.950] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.950] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.950] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.950] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.950] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.950] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.950] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.950] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.950] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.950] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.951] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.951] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.951] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.951] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.951] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.951] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0181.951] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0181.952] SetLastError (dwErrCode=0x0) [0181.952] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\et\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.955] GetLastError () returned 0x5 [0181.955] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.955] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.955] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.955] SetLastError (dwErrCode=0x0) [0181.955] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.955] GetLastError () returned 0x5 [0181.955] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.955] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.955] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4c20 [0181.956] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.957] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.957] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0181.958] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0181.958] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\eu\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.959] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.959] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.959] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.959] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.959] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.959] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.959] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.959] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.959] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.959] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.959] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.959] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.959] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.959] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.959] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.959] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.959] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.959] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.959] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.959] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.959] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.959] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.959] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.959] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0181.959] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0181.960] SetLastError (dwErrCode=0x0) [0181.960] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\eu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.963] GetLastError () returned 0x5 [0181.963] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.963] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.963] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.963] SetLastError (dwErrCode=0x0) [0181.963] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.963] GetLastError () returned 0x5 [0181.963] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.963] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.963] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4920 [0181.965] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.966] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.966] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0181.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0181.967] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\fi\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.967] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.968] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.968] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.968] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.968] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.968] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.968] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.968] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.968] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.968] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.968] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.968] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.968] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.968] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.968] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.968] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.968] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.968] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.968] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.968] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.968] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.968] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.968] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.968] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0181.968] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0181.969] SetLastError (dwErrCode=0x0) [0181.969] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\fi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.972] GetLastError () returned 0x5 [0181.972] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.972] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.972] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.972] SetLastError (dwErrCode=0x0) [0181.972] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.972] GetLastError () returned 0x5 [0181.972] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.972] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.972] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4c20 [0181.974] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.975] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.975] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0181.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0181.975] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\fr\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.976] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.976] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.976] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.976] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.976] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.976] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.976] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.976] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.976] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.976] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.976] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.976] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.976] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.976] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.976] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.976] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.976] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.976] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.976] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.976] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.976] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.976] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.976] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.976] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0181.976] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0181.977] SetLastError (dwErrCode=0x0) [0181.977] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\fr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.980] GetLastError () returned 0x5 [0181.980] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.980] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.980] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.980] SetLastError (dwErrCode=0x0) [0181.980] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.980] GetLastError () returned 0x5 [0181.980] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.980] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.980] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb43e0 [0181.982] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.984] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.984] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0181.984] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0181.985] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\gl\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.985] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.985] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.985] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.985] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.985] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.985] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.985] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.985] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.985] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.985] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.985] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.985] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.985] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.985] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.985] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.985] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.985] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.985] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.985] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.985] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.986] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.986] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.986] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.986] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0181.986] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0181.986] SetLastError (dwErrCode=0x0) [0181.986] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\gl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.989] GetLastError () returned 0x5 [0181.989] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.989] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.989] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.989] SetLastError (dwErrCode=0x0) [0181.989] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.989] GetLastError () returned 0x5 [0181.989] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.989] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.989] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4560 [0181.991] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.992] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.992] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0181.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0181.993] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\he\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.993] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.993] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.993] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.993] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.993] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.993] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.993] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.993] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.993] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.993] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.993] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.993] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.993] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.993] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.993] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.993] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.993] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.993] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.993] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.993] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.993] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.993] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.993] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0181.993] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0181.993] FindClose (in: hFindFile=0x665abb4560 | out: hFindFile=0x665abb4560) returned 1 [0181.994] SetLastError (dwErrCode=0x0) [0181.994] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\he\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.997] GetLastError () returned 0x5 [0181.997] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.997] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.997] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0181.997] SetLastError (dwErrCode=0x0) [0181.997] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0181.997] GetLastError () returned 0x5 [0181.997] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0181.997] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0181.997] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4c80 [0181.999] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.001] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.001] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.001] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0182.001] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\hi\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.001] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.001] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.001] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.001] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.002] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.002] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.002] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.002] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.002] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.002] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.002] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.002] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.002] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.002] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.002] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.002] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.002] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.002] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.002] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.002] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.002] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.002] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.002] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.002] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0182.002] FindClose (in: hFindFile=0x665abb4c80 | out: hFindFile=0x665abb4c80) returned 1 [0182.003] SetLastError (dwErrCode=0x0) [0182.003] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\hi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.005] GetLastError () returned 0x5 [0182.005] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.005] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.005] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.005] SetLastError (dwErrCode=0x0) [0182.005] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.006] GetLastError () returned 0x5 [0182.006] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.006] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.006] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4f80 [0182.007] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.008] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.008] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.008] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0182.009] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\hr\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.009] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.009] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.009] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.009] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.009] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.009] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.009] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.009] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.009] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.009] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.009] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.009] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.009] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.009] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.009] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.009] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.009] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.009] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.009] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.009] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.009] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.009] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.009] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.009] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0182.009] FindClose (in: hFindFile=0x665abb4f80 | out: hFindFile=0x665abb4f80) returned 1 [0182.010] SetLastError (dwErrCode=0x0) [0182.010] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\hr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.013] GetLastError () returned 0x5 [0182.013] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.013] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.013] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.013] SetLastError (dwErrCode=0x0) [0182.013] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.013] GetLastError () returned 0x5 [0182.013] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.013] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.013] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb53a0 [0182.015] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.017] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.017] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0182.018] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\hu\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.018] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.018] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.018] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.018] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.018] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.018] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.018] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.018] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.018] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.018] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.018] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.018] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.018] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.018] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.018] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.018] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.019] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.019] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.019] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.019] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.019] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.019] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.019] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.019] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0182.019] FindClose (in: hFindFile=0x665abb53a0 | out: hFindFile=0x665abb53a0) returned 1 [0182.020] SetLastError (dwErrCode=0x0) [0182.020] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\hu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.023] GetLastError () returned 0x5 [0182.023] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.023] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.023] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.023] SetLastError (dwErrCode=0x0) [0182.023] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.023] GetLastError () returned 0x5 [0182.023] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.023] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.023] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4da0 [0182.025] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.026] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.026] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.027] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0182.027] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\id\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.028] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.028] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.028] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.028] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.028] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.028] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.028] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.028] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.028] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.028] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.028] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.028] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.028] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.028] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.028] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.028] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.028] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.028] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.028] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.028] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.028] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.028] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.028] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.028] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0182.028] FindClose (in: hFindFile=0x665abb4da0 | out: hFindFile=0x665abb4da0) returned 1 [0182.029] SetLastError (dwErrCode=0x0) [0182.029] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\id\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.032] GetLastError () returned 0x5 [0182.032] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.032] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.032] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.032] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.032] SetLastError (dwErrCode=0x0) [0182.032] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.032] GetLastError () returned 0x5 [0182.032] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.032] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.032] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\it\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb53a0 [0182.034] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.035] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.035] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.035] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\it\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0182.036] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\it\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\it\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.036] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.036] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.036] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.036] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.036] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.036] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.036] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.036] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.037] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.037] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.037] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.037] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.037] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.037] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.037] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.037] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.037] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.037] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.037] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.037] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.037] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.037] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.037] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.037] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0182.037] FindClose (in: hFindFile=0x665abb53a0 | out: hFindFile=0x665abb53a0) returned 1 [0182.038] SetLastError (dwErrCode=0x0) [0182.038] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\it\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\it\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.040] GetLastError () returned 0x5 [0182.040] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.040] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.040] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.040] SetLastError (dwErrCode=0x0) [0182.040] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.041] GetLastError () returned 0x5 [0182.041] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.041] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.041] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ja\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4f20 [0182.042] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.043] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.044] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.044] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ja\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0182.044] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ja\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ja\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.044] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.044] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.045] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.045] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.045] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.045] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.045] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.045] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.045] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.045] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.045] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.045] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.045] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.045] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.045] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.045] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.045] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.045] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.045] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.045] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.045] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.045] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.045] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.045] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0182.045] FindClose (in: hFindFile=0x665abb4f20 | out: hFindFile=0x665abb4f20) returned 1 [0182.046] SetLastError (dwErrCode=0x0) [0182.046] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ja\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ja\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.049] GetLastError () returned 0x5 [0182.049] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.049] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.049] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.049] SetLastError (dwErrCode=0x0) [0182.049] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.049] GetLastError () returned 0x5 [0182.049] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.049] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.049] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\kk\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4c20 [0182.052] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.053] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.053] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.053] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\kk\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0182.053] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\kk\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\kk\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.054] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.054] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.054] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.054] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.054] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.054] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.054] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.054] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.054] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.054] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.054] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.054] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.054] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.054] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.054] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.054] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.054] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.054] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.054] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.054] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.054] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.054] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.054] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.054] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0182.054] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0182.055] SetLastError (dwErrCode=0x0) [0182.055] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\kk\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\kk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.058] GetLastError () returned 0x5 [0182.058] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.058] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.058] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.058] SetLastError (dwErrCode=0x0) [0182.058] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.058] GetLastError () returned 0x5 [0182.058] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.058] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.058] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ko\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb53a0 [0182.059] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.060] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.060] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.061] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ko\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0182.061] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ko\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ko\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.061] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.061] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.061] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.061] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.061] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.062] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.062] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.062] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.062] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.062] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.062] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.062] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.062] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.062] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.062] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.062] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.062] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.062] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.062] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.062] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.062] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.062] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.062] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.062] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0182.062] FindClose (in: hFindFile=0x665abb53a0 | out: hFindFile=0x665abb53a0) returned 1 [0182.063] SetLastError (dwErrCode=0x0) [0182.063] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ko\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ko\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.065] GetLastError () returned 0x5 [0182.065] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.065] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.065] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.065] SetLastError (dwErrCode=0x0) [0182.065] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.066] GetLastError () returned 0x5 [0182.066] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.066] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.066] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lt\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4920 [0182.067] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.068] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.068] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.069] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lt\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0182.069] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lt\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\lt\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.069] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.069] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.069] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.069] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.069] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.069] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.070] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.070] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.070] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.070] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.070] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.070] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.070] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.070] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.070] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.070] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.070] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.070] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.070] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.070] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.070] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.070] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.070] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.070] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0182.070] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0182.071] SetLastError (dwErrCode=0x0) [0182.071] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lt\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\lt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.073] GetLastError () returned 0x5 [0182.073] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.073] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.073] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.073] SetLastError (dwErrCode=0x0) [0182.073] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.074] GetLastError () returned 0x5 [0182.074] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.074] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.074] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lv\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb53a0 [0182.075] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.076] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.076] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.077] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lv\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0182.077] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lv\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\lv\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.078] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.078] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.078] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.078] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.078] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.078] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.078] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.078] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.078] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.078] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.078] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.078] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.078] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.078] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.078] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.078] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.078] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.078] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.078] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.078] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.078] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.078] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.078] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.078] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0182.078] FindClose (in: hFindFile=0x665abb53a0 | out: hFindFile=0x665abb53a0) returned 1 [0182.079] SetLastError (dwErrCode=0x0) [0182.079] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lv\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\lv\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.082] GetLastError () returned 0x5 [0182.082] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.082] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.082] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.082] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.082] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.082] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.082] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.082] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.082] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.082] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.082] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.083] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.AnalysisServices.Modeler.UI.rll", dwFileAttributes=0x80) returned 0 [0182.084] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.AnalysisServices.Modeler.UI.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\microsoft.analysisservices.modeler.ui.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.084] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.084] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.084] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.084] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.084] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.084] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.084] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.084] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.084] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.084] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.084] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.085] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.085] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.085] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.085] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.085] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.085] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.085] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.085] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.085] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.085] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.085] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.085] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.085] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.Office.PowerPivot.ExcelAddIn.tlb", dwFileAttributes=0x80) returned 0 [0182.085] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.Office.PowerPivot.ExcelAddIn.tlb" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\microsoft.office.powerpivot.exceladdin.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.085] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.085] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.086] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.086] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.086] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.086] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.086] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.086] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.086] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.086] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.086] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.086] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.086] SetLastError (dwErrCode=0x0) [0182.086] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.086] GetLastError () returned 0x5 [0182.086] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.086] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.086] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ms\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4c20 [0182.088] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.089] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.089] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.089] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ms\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0182.089] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ms\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ms\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.089] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.089] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.090] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.090] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.090] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.090] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.090] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.090] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.090] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.090] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.090] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.090] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.090] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.090] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.090] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.090] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.090] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.090] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.090] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.090] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.090] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.090] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.090] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.090] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0182.090] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0182.091] SetLastError (dwErrCode=0x0) [0182.091] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ms\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ms\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.094] GetLastError () returned 0x5 [0182.094] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.094] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.094] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.094] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.094] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.094] SetLastError (dwErrCode=0x0) [0182.094] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.094] GetLastError () returned 0x5 [0182.094] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.094] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.094] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\nl\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4560 [0182.096] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.097] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.097] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.098] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\nl\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0182.098] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\nl\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\nl\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.098] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.098] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.098] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.098] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.098] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.098] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.098] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.098] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.098] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.098] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.098] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.099] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.099] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.099] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.099] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.099] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.099] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.099] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.099] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.099] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.099] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.099] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.099] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.099] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0182.099] FindClose (in: hFindFile=0x665abb4560 | out: hFindFile=0x665abb4560) returned 1 [0182.099] SetLastError (dwErrCode=0x0) [0182.100] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\nl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\nl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.102] GetLastError () returned 0x5 [0182.102] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.102] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.102] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.102] SetLastError (dwErrCode=0x0) [0182.102] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.102] GetLastError () returned 0x5 [0182.102] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.102] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.103] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\no\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb45c0 [0182.104] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.105] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.105] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\no\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0182.106] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\no\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\no\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.106] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.107] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.107] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.107] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.107] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.107] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.107] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.107] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.107] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.107] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.107] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.107] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.107] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.107] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.107] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.107] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.107] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.107] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.107] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.107] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.107] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.107] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.107] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.107] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0182.107] FindClose (in: hFindFile=0x665abb45c0 | out: hFindFile=0x665abb45c0) returned 1 [0182.108] SetLastError (dwErrCode=0x0) [0182.108] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\no\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\no\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.111] GetLastError () returned 0x5 [0182.111] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.111] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.111] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.111] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.111] SetLastError (dwErrCode=0x0) [0182.111] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.111] GetLastError () returned 0x5 [0182.111] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.111] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.111] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pl\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4da0 [0182.113] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.114] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.114] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.114] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pl\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0182.114] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pl\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\pl\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.115] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.115] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.115] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.115] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.115] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.115] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.115] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.115] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.115] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.115] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.115] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.115] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.115] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.115] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.115] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.115] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.115] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.115] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.115] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.115] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.115] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.115] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.115] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.115] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0182.115] FindClose (in: hFindFile=0x665abb4da0 | out: hFindFile=0x665abb4da0) returned 1 [0182.116] SetLastError (dwErrCode=0x0) [0182.116] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\pl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.119] GetLastError () returned 0x5 [0182.119] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.119] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.119] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.119] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.119] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\PowerPivotExcelClientAddIn.tlb", dwFileAttributes=0x80) returned 0 [0182.119] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\PowerPivotExcelClientAddIn.tlb" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\powerpivotexcelclientaddin.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.119] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.120] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.120] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.120] SetLastError (dwErrCode=0x0) [0182.120] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.120] GetLastError () returned 0x5 [0182.120] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.120] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.120] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4920 [0182.122] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.123] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.123] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.123] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0182.124] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\pt\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.124] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.124] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.124] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.124] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.124] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.124] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.124] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.124] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.124] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.125] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.125] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.125] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.125] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.125] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.125] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.125] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.125] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.125] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.125] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.125] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.125] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.125] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.125] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.125] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0182.125] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0182.126] SetLastError (dwErrCode=0x0) [0182.126] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\pt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.128] GetLastError () returned 0x5 [0182.128] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.129] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.129] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.129] SetLastError (dwErrCode=0x0) [0182.129] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.129] GetLastError () returned 0x5 [0182.129] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.129] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.129] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt-PT\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4560 [0182.131] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.132] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.132] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt-PT\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0182.132] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt-PT\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\pt-pt\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.132] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.132] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.133] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.133] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.133] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.133] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.133] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.133] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.133] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.133] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.133] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.133] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.133] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.133] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.133] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.133] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.133] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.133] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.133] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.133] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.133] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.133] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.133] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.133] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0182.133] FindClose (in: hFindFile=0x665abb4560 | out: hFindFile=0x665abb4560) returned 1 [0182.134] SetLastError (dwErrCode=0x0) [0182.134] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt-PT\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\pt-pt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.137] GetLastError () returned 0x5 [0182.137] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.137] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.137] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.137] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.137] SetLastError (dwErrCode=0x0) [0182.137] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.138] GetLastError () returned 0x5 [0182.138] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.138] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.138] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4f20 [0182.139] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.140] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.140] SetLastError (dwErrCode=0x0) [0182.140] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.140] GetLastError () returned 0x5 [0182.140] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.141] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.141] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1025\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb49e0 [0182.141] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.141] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.141] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.142] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1025\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0182.143] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1025\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1025\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.143] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.143] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.143] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0182.143] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0182.143] SetLastError (dwErrCode=0x0) [0182.143] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1025\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1025\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.144] GetLastError () returned 0x5 [0182.144] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.144] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.144] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.144] SetLastError (dwErrCode=0x0) [0182.144] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.144] GetLastError () returned 0x5 [0182.144] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.144] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.144] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1026\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4f80 [0182.144] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.144] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.144] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.145] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1026\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0182.145] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1026\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1026\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.145] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.146] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.146] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0182.146] FindClose (in: hFindFile=0x665abb4f80 | out: hFindFile=0x665abb4f80) returned 1 [0182.146] SetLastError (dwErrCode=0x0) [0182.146] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1026\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1026\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.146] GetLastError () returned 0x5 [0182.146] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.146] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.146] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.146] SetLastError (dwErrCode=0x0) [0182.146] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.146] GetLastError () returned 0x5 [0182.146] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.146] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.147] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\10266\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4d40 [0182.147] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.147] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.147] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.147] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\10266\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0182.148] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\10266\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\10266\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.148] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.148] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.149] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0182.149] FindClose (in: hFindFile=0x665abb4d40 | out: hFindFile=0x665abb4d40) returned 1 [0182.149] SetLastError (dwErrCode=0x0) [0182.149] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\10266\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\10266\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.149] GetLastError () returned 0x5 [0182.149] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.149] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.149] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.149] SetLastError (dwErrCode=0x0) [0182.149] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.149] GetLastError () returned 0x5 [0182.149] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.149] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.149] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1027\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb42c0 [0182.150] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.150] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.150] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1027\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0182.151] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1027\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1027\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.151] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.151] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.151] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0182.151] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0182.152] SetLastError (dwErrCode=0x0) [0182.152] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1027\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1027\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.152] GetLastError () returned 0x5 [0182.152] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.152] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.152] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.152] SetLastError (dwErrCode=0x0) [0182.152] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.152] GetLastError () returned 0x5 [0182.152] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.152] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.152] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1028\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb5040 [0182.154] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.154] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.154] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.154] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1028\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0182.154] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1028\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1028\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.154] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.154] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.155] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0182.156] FindClose (in: hFindFile=0x665abb5040 | out: hFindFile=0x665abb5040) returned 1 [0182.156] SetLastError (dwErrCode=0x0) [0182.156] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1028\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1028\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.156] GetLastError () returned 0x5 [0182.156] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.156] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.156] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.156] SetLastError (dwErrCode=0x0) [0182.156] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.156] GetLastError () returned 0x5 [0182.156] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.157] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.157] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1029\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4920 [0182.157] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.157] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.157] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.158] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1029\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0182.158] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1029\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1029\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.159] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.159] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.159] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0182.159] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0182.159] SetLastError (dwErrCode=0x0) [0182.159] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1029\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1029\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.159] GetLastError () returned 0x5 [0182.159] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.159] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.159] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.159] SetLastError (dwErrCode=0x0) [0182.159] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.159] GetLastError () returned 0x5 [0182.159] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.159] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.160] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1030\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4c20 [0182.160] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.160] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.160] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.160] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1030\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0182.162] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1030\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1030\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.162] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.162] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.162] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0182.162] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0182.162] SetLastError (dwErrCode=0x0) [0182.163] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1030\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1030\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.163] GetLastError () returned 0x5 [0182.163] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.163] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.163] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.163] SetLastError (dwErrCode=0x0) [0182.163] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.163] GetLastError () returned 0x5 [0182.163] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.163] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.163] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1031\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb5760 [0182.164] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.164] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.164] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.164] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1031\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0182.165] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1031\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1031\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.165] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.165] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.165] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0182.165] FindClose (in: hFindFile=0x665abb5760 | out: hFindFile=0x665abb5760) returned 1 [0182.165] SetLastError (dwErrCode=0x0) [0182.165] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1031\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1031\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.166] GetLastError () returned 0x5 [0182.166] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.166] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.166] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.166] SetLastError (dwErrCode=0x0) [0182.166] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.166] GetLastError () returned 0x5 [0182.166] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.166] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.166] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1032\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb55e0 [0182.170] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.170] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.170] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1032\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0182.171] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1032\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1032\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.171] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.171] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.171] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0182.171] FindClose (in: hFindFile=0x665abb55e0 | out: hFindFile=0x665abb55e0) returned 1 [0182.171] SetLastError (dwErrCode=0x0) [0182.171] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1032\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1032\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.172] GetLastError () returned 0x5 [0182.172] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.172] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.172] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.172] SetLastError (dwErrCode=0x0) [0182.172] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.172] GetLastError () returned 0x5 [0182.172] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.172] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.172] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1033\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb42c0 [0182.173] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.173] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.173] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.173] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1033\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0182.173] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1033\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1033\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.173] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.173] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.174] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0182.174] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0182.174] SetLastError (dwErrCode=0x0) [0182.174] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.174] GetLastError () returned 0x5 [0182.174] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.174] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.174] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.174] SetLastError (dwErrCode=0x0) [0182.174] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.174] GetLastError () returned 0x5 [0182.174] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.174] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.174] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1035\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb42c0 [0182.174] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.175] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.175] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.175] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1035\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0182.175] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1035\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1035\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.175] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.175] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.175] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0182.175] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0182.175] SetLastError (dwErrCode=0x0) [0182.176] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1035\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1035\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.176] GetLastError () returned 0x5 [0182.176] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.176] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.176] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.176] SetLastError (dwErrCode=0x0) [0182.176] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.176] GetLastError () returned 0x5 [0182.176] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.176] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.176] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1036\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4c20 [0182.177] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.177] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.177] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1036\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0182.178] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1036\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1036\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.178] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.178] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.179] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0182.179] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0182.179] SetLastError (dwErrCode=0x0) [0182.179] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1036\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1036\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.179] GetLastError () returned 0x5 [0182.179] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.179] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.179] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.179] SetLastError (dwErrCode=0x0) [0182.179] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.179] GetLastError () returned 0x5 [0182.179] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.179] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.179] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1037\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb53a0 [0182.180] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.180] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.180] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.180] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1037\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0182.181] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1037\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1037\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.181] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.181] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.181] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0182.181] FindClose (in: hFindFile=0x665abb53a0 | out: hFindFile=0x665abb53a0) returned 1 [0182.181] SetLastError (dwErrCode=0x0) [0182.181] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1037\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1037\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.182] GetLastError () returned 0x5 [0182.182] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.182] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.182] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.182] SetLastError (dwErrCode=0x0) [0182.182] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.182] GetLastError () returned 0x5 [0182.182] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.182] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.182] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1038\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb53a0 [0182.182] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.182] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.182] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1038\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0182.183] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1038\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1038\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.183] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.183] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.184] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0182.184] FindClose (in: hFindFile=0x665abb53a0 | out: hFindFile=0x665abb53a0) returned 1 [0182.184] SetLastError (dwErrCode=0x0) [0182.184] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1038\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1038\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.184] GetLastError () returned 0x5 [0182.184] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.184] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.184] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.184] SetLastError (dwErrCode=0x0) [0182.184] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.184] GetLastError () returned 0x5 [0182.184] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.184] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.185] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1040\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb45c0 [0182.186] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.186] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.186] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1040\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0182.188] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1040\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1040\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.188] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.188] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.188] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0182.188] FindClose (in: hFindFile=0x665abb45c0 | out: hFindFile=0x665abb45c0) returned 1 [0182.188] SetLastError (dwErrCode=0x0) [0182.189] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1040\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1040\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.189] GetLastError () returned 0x5 [0182.189] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.189] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.189] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.189] SetLastError (dwErrCode=0x0) [0182.189] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.189] GetLastError () returned 0x5 [0182.189] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.189] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.189] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1041\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb43e0 [0182.190] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.190] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.190] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.190] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1041\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0182.191] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1041\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1041\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.191] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.191] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.191] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0182.191] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0182.191] SetLastError (dwErrCode=0x0) [0182.191] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1041\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1041\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.192] GetLastError () returned 0x5 [0182.192] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.192] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.192] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.192] SetLastError (dwErrCode=0x0) [0182.192] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.192] GetLastError () returned 0x5 [0182.192] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.192] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.192] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1042\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4c20 [0182.192] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.192] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.192] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.193] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1042\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0182.193] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1042\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1042\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.193] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.193] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.194] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0182.194] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0182.194] SetLastError (dwErrCode=0x0) [0182.194] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1042\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1042\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.194] GetLastError () returned 0x5 [0182.194] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.194] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.194] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.194] SetLastError (dwErrCode=0x0) [0182.194] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.194] GetLastError () returned 0x5 [0182.194] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.194] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.195] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1043\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4c20 [0182.195] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.195] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.195] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.196] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1043\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0182.196] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1043\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1043\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.196] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.196] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.196] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0182.196] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0182.196] SetLastError (dwErrCode=0x0) [0182.196] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1043\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1043\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.197] GetLastError () returned 0x5 [0182.197] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.197] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.197] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.197] SetLastError (dwErrCode=0x0) [0182.197] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.197] GetLastError () returned 0x5 [0182.197] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.197] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.197] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1044\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb43e0 [0182.204] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.204] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.204] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.205] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1044\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0182.205] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1044\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1044\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.205] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.205] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.205] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0182.206] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0182.206] SetLastError (dwErrCode=0x0) [0182.206] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1044\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1044\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.206] GetLastError () returned 0x5 [0182.206] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.206] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.206] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.206] SetLastError (dwErrCode=0x0) [0182.206] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.206] GetLastError () returned 0x5 [0182.206] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.206] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.206] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1045\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb53a0 [0182.207] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.207] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.207] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.207] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1045\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0182.208] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1045\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1045\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.208] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.208] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.208] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0182.208] FindClose (in: hFindFile=0x665abb53a0 | out: hFindFile=0x665abb53a0) returned 1 [0182.208] SetLastError (dwErrCode=0x0) [0182.208] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1045\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1045\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.209] GetLastError () returned 0x5 [0182.209] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.209] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.209] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.209] SetLastError (dwErrCode=0x0) [0182.209] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.209] GetLastError () returned 0x5 [0182.209] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.209] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.209] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1046\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb42c0 [0182.210] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.210] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.210] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.210] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1046\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0182.210] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1046\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1046\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.211] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.211] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.211] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0182.211] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0182.211] SetLastError (dwErrCode=0x0) [0182.211] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1046\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1046\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.211] GetLastError () returned 0x5 [0182.211] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.211] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.211] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.211] SetLastError (dwErrCode=0x0) [0182.211] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.212] GetLastError () returned 0x5 [0182.212] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.212] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.212] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1048\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb42c0 [0182.212] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.212] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.212] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.213] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1048\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0182.214] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1048\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1048\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.214] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.214] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.214] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0182.214] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0182.214] SetLastError (dwErrCode=0x0) [0182.214] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1048\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1048\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.215] GetLastError () returned 0x5 [0182.215] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.215] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.215] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.215] SetLastError (dwErrCode=0x0) [0182.215] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.215] GetLastError () returned 0x5 [0182.215] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.215] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.215] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1049\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb53a0 [0182.216] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.216] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.216] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.216] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1049\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0182.217] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1049\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1049\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.218] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.218] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.218] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0182.218] FindClose (in: hFindFile=0x665abb53a0 | out: hFindFile=0x665abb53a0) returned 1 [0182.222] SetLastError (dwErrCode=0x0) [0182.222] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1049\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1049\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.222] GetLastError () returned 0x5 [0182.222] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.222] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.222] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.222] SetLastError (dwErrCode=0x0) [0182.222] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.223] GetLastError () returned 0x5 [0182.223] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.223] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.223] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1050\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4920 [0182.224] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.224] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.224] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.224] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1050\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0182.225] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1050\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1050\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.225] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.225] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.225] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0182.225] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0182.225] SetLastError (dwErrCode=0x0) [0182.225] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1050\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1050\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.225] GetLastError () returned 0x5 [0182.225] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.225] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.225] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.225] SetLastError (dwErrCode=0x0) [0182.226] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.226] GetLastError () returned 0x5 [0182.226] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.226] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.226] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1051\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4560 [0182.226] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.226] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.226] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.226] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1051\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0182.227] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1051\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1051\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.227] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.227] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.227] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0182.227] FindClose (in: hFindFile=0x665abb4560 | out: hFindFile=0x665abb4560) returned 1 [0182.227] SetLastError (dwErrCode=0x0) [0182.228] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1051\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1051\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.228] GetLastError () returned 0x5 [0182.228] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.228] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.228] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.228] SetLastError (dwErrCode=0x0) [0182.228] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.228] GetLastError () returned 0x5 [0182.228] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.228] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.228] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1053\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb53a0 [0182.229] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.229] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.229] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.229] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1053\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0182.229] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1053\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1053\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.229] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.229] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.230] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0182.230] FindClose (in: hFindFile=0x665abb53a0 | out: hFindFile=0x665abb53a0) returned 1 [0182.230] SetLastError (dwErrCode=0x0) [0182.230] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1053\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1053\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.230] GetLastError () returned 0x5 [0182.230] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.230] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.230] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.230] SetLastError (dwErrCode=0x0) [0182.230] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.230] GetLastError () returned 0x5 [0182.230] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.230] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.230] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1054\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb42c0 [0182.231] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.231] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.231] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.231] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1054\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0182.231] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1054\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1054\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.232] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.232] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.232] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0182.232] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0182.232] SetLastError (dwErrCode=0x0) [0182.232] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1054\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1054\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.232] GetLastError () returned 0x5 [0182.232] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.232] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.232] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.232] SetLastError (dwErrCode=0x0) [0182.232] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.232] GetLastError () returned 0x5 [0182.233] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.233] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.233] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1055\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4920 [0182.233] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.233] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.233] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.234] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1055\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0182.234] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1055\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1055\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.234] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.234] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.235] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0182.235] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0182.235] SetLastError (dwErrCode=0x0) [0182.235] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1055\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1055\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.235] GetLastError () returned 0x5 [0182.235] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.235] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.235] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.235] SetLastError (dwErrCode=0x0) [0182.235] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.235] GetLastError () returned 0x5 [0182.235] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.235] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.235] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1057\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb43e0 [0182.236] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.236] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.236] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.236] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1057\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0182.237] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1057\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1057\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.237] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.237] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.237] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0182.237] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0182.238] SetLastError (dwErrCode=0x0) [0182.238] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1057\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1057\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.238] GetLastError () returned 0x5 [0182.238] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.238] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.238] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.238] SetLastError (dwErrCode=0x0) [0182.238] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.238] GetLastError () returned 0x5 [0182.238] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.238] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.238] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1058\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4f80 [0182.239] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.239] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.239] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.239] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1058\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0182.240] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1058\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1058\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.240] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.240] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.240] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0182.240] FindClose (in: hFindFile=0x665abb4f80 | out: hFindFile=0x665abb4f80) returned 1 [0182.240] SetLastError (dwErrCode=0x0) [0182.241] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1058\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1058\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.241] GetLastError () returned 0x5 [0182.241] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.241] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.241] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.241] SetLastError (dwErrCode=0x0) [0182.241] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.241] GetLastError () returned 0x5 [0182.241] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.241] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.241] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1060\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4f80 [0182.242] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.242] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.242] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.242] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1060\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0182.243] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1060\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1060\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.243] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.243] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.243] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0182.244] FindClose (in: hFindFile=0x665abb4f80 | out: hFindFile=0x665abb4f80) returned 1 [0182.244] SetLastError (dwErrCode=0x0) [0182.244] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1060\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1060\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.244] GetLastError () returned 0x5 [0182.244] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.244] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.244] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.244] SetLastError (dwErrCode=0x0) [0182.244] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.244] GetLastError () returned 0x5 [0182.244] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.244] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.244] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1061\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb5520 [0182.245] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.245] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.245] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.245] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1061\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0182.246] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1061\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1061\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.246] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.246] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.246] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0182.246] FindClose (in: hFindFile=0x665abb5520 | out: hFindFile=0x665abb5520) returned 1 [0182.246] SetLastError (dwErrCode=0x0) [0182.246] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1061\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1061\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.246] GetLastError () returned 0x5 [0182.246] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.246] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.246] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.246] SetLastError (dwErrCode=0x0) [0182.247] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.247] GetLastError () returned 0x5 [0182.247] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.247] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.247] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1062\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4c20 [0182.247] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.247] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.247] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.248] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1062\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0182.249] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1062\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1062\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.250] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.250] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.250] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0182.250] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0182.250] SetLastError (dwErrCode=0x0) [0182.250] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1062\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1062\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.250] GetLastError () returned 0x5 [0182.250] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.250] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.250] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.250] SetLastError (dwErrCode=0x0) [0182.250] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.251] GetLastError () returned 0x5 [0182.251] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.251] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.251] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1063\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb53a0 [0182.251] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.251] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.251] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.252] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1063\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0182.252] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1063\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1063\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.253] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.253] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.253] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0182.253] FindClose (in: hFindFile=0x665abb53a0 | out: hFindFile=0x665abb53a0) returned 1 [0182.253] SetLastError (dwErrCode=0x0) [0182.253] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1063\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1063\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.253] GetLastError () returned 0x5 [0182.253] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.253] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.253] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.253] SetLastError (dwErrCode=0x0) [0182.253] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.254] GetLastError () returned 0x5 [0182.254] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.254] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.254] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1066\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4f80 [0182.254] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.254] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.254] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.255] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1066\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0182.255] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1066\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1066\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.255] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.255] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.255] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0182.255] FindClose (in: hFindFile=0x665abb4f80 | out: hFindFile=0x665abb4f80) returned 1 [0182.255] SetLastError (dwErrCode=0x0) [0182.255] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1066\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1066\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.256] GetLastError () returned 0x5 [0182.256] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.256] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.256] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.256] SetLastError (dwErrCode=0x0) [0182.256] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.256] GetLastError () returned 0x5 [0182.256] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.256] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.256] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1069\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4d40 [0182.257] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.257] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.257] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.257] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1069\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0182.257] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1069\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1069\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.257] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.257] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.258] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0182.258] FindClose (in: hFindFile=0x665abb4d40 | out: hFindFile=0x665abb4d40) returned 1 [0182.258] SetLastError (dwErrCode=0x0) [0182.258] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1069\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1069\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.258] GetLastError () returned 0x5 [0182.258] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.258] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.258] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.258] SetLastError (dwErrCode=0x0) [0182.258] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.258] GetLastError () returned 0x5 [0182.258] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.258] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.258] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1081\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4920 [0182.259] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.259] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.259] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.259] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1081\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0182.260] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1081\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1081\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.260] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.260] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.261] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0182.261] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0182.261] SetLastError (dwErrCode=0x0) [0182.261] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1081\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1081\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.261] GetLastError () returned 0x5 [0182.261] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.261] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.261] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.261] SetLastError (dwErrCode=0x0) [0182.261] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.262] GetLastError () returned 0x5 [0182.262] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.262] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.262] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1086\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb5760 [0182.266] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.266] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.266] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.266] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1086\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0182.267] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1086\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1086\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.267] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.267] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.267] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0182.267] FindClose (in: hFindFile=0x665abb5760 | out: hFindFile=0x665abb5760) returned 1 [0182.268] SetLastError (dwErrCode=0x0) [0182.268] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1086\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1086\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.268] GetLastError () returned 0x5 [0182.268] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.268] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.268] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.268] SetLastError (dwErrCode=0x0) [0182.268] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.268] GetLastError () returned 0x5 [0182.268] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.268] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.268] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1087\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4920 [0182.269] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.269] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.269] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.270] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1087\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0182.270] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1087\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1087\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.270] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.270] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.270] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0182.270] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0182.270] SetLastError (dwErrCode=0x0) [0182.271] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1087\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1087\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.271] GetLastError () returned 0x5 [0182.271] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.271] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.271] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.271] SetLastError (dwErrCode=0x0) [0182.271] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.271] GetLastError () returned 0x5 [0182.271] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.271] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.271] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1110\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb5040 [0182.271] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.272] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.272] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.272] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1110\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0182.273] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1110\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1110\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.273] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.273] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.273] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0182.273] FindClose (in: hFindFile=0x665abb5040 | out: hFindFile=0x665abb5040) returned 1 [0182.273] SetLastError (dwErrCode=0x0) [0182.273] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1110\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1110\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.273] GetLastError () returned 0x5 [0182.273] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.273] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.273] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.273] SetLastError (dwErrCode=0x0) [0182.273] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.274] GetLastError () returned 0x5 [0182.274] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.274] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.274] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2052\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb49e0 [0182.274] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.274] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.274] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.275] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2052\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0182.275] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2052\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\2052\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.275] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.275] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.275] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0182.275] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0182.275] SetLastError (dwErrCode=0x0) [0182.276] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2052\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\2052\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.276] GetLastError () returned 0x5 [0182.276] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.276] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.276] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.276] SetLastError (dwErrCode=0x0) [0182.276] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.276] GetLastError () returned 0x5 [0182.276] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.276] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.276] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2070\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4920 [0182.277] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.277] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.277] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.277] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2070\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0182.278] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2070\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\2070\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.278] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.278] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.278] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0182.278] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0182.278] SetLastError (dwErrCode=0x0) [0182.278] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2070\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\2070\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.279] GetLastError () returned 0x5 [0182.279] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.279] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.279] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.279] SetLastError (dwErrCode=0x0) [0182.279] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.279] GetLastError () returned 0x5 [0182.279] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.279] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.279] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2074\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb42c0 [0182.280] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.280] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0182.280] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0182.280] SetLastError (dwErrCode=0x0) [0182.280] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2074\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\2074\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.280] GetLastError () returned 0x5 [0182.280] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.280] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.281] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.281] SetLastError (dwErrCode=0x0) [0182.281] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.281] GetLastError () returned 0x5 [0182.281] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.281] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.281] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\3082\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb49e0 [0182.281] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.282] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.282] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\3082\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0182.282] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\3082\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\3082\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.282] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.282] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.282] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0182.282] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0182.283] SetLastError (dwErrCode=0x0) [0182.283] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\3082\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\3082\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.283] GetLastError () returned 0x5 [0182.283] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.283] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.283] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.283] SetLastError (dwErrCode=0x0) [0182.283] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.283] GetLastError () returned 0x5 [0182.283] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.283] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.283] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\9242\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4f80 [0182.284] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.284] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.284] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.284] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\9242\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0182.285] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\9242\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\9242\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.285] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.285] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.285] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0182.285] FindClose (in: hFindFile=0x665abb4f80 | out: hFindFile=0x665abb4f80) returned 1 [0182.285] SetLastError (dwErrCode=0x0) [0182.285] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\9242\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\9242\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.286] GetLastError () returned 0x5 [0182.286] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.286] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.286] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0182.286] FindClose (in: hFindFile=0x665abb4f20 | out: hFindFile=0x665abb4f20) returned 1 [0182.286] SetLastError (dwErrCode=0x0) [0182.286] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.286] GetLastError () returned 0x5 [0182.286] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.286] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.286] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.286] SetLastError (dwErrCode=0x0) [0182.286] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.286] GetLastError () returned 0x5 [0182.286] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.286] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.286] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ro\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb5760 [0182.288] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.289] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.289] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.289] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ro\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0182.290] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ro\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ro\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.291] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.291] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.291] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.291] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.291] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.291] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.291] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.291] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.291] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.291] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.291] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.291] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.291] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.291] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.291] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.291] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.291] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.291] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.291] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.291] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.291] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.291] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.292] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.292] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0182.292] FindClose (in: hFindFile=0x665abb5760 | out: hFindFile=0x665abb5760) returned 1 [0182.292] SetLastError (dwErrCode=0x0) [0182.293] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ro\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ro\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.296] GetLastError () returned 0x5 [0182.296] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.296] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.296] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.296] SetLastError (dwErrCode=0x0) [0182.296] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.297] GetLastError () returned 0x5 [0182.297] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.297] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.297] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ru\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4920 [0182.298] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.299] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.299] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.300] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ru\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0182.300] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ru\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ru\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.301] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.301] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.301] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.301] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.301] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.301] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.301] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.301] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.301] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.301] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.301] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.301] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.301] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.301] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.301] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.301] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.301] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.301] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.301] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.301] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.301] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.301] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.301] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.301] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0182.301] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0182.302] SetLastError (dwErrCode=0x0) [0182.302] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ru\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ru\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.305] GetLastError () returned 0x5 [0182.305] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.305] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.305] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.305] SetLastError (dwErrCode=0x0) [0182.305] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.305] GetLastError () returned 0x5 [0182.305] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.305] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.305] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sk\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb42c0 [0182.307] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.308] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.308] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.308] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sk\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0182.308] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sk\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\sk\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.309] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.309] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.309] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.309] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.309] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.309] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.309] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.309] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.309] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.309] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.309] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.309] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.309] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.309] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.309] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.309] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.309] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.309] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.309] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.309] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.309] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.309] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.309] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.309] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0182.309] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0182.310] SetLastError (dwErrCode=0x0) [0182.310] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sk\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\sk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.314] GetLastError () returned 0x5 [0182.314] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.315] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.315] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.315] SetLastError (dwErrCode=0x0) [0182.315] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.315] GetLastError () returned 0x5 [0182.315] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.315] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.315] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sl\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4c20 [0182.317] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.318] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.318] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.318] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sl\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0182.319] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sl\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\sl\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.319] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.319] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.319] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.319] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.319] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.319] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.319] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.319] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.319] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.319] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.320] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.320] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.320] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.320] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.320] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.320] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.320] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.320] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.320] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.320] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.320] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.320] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.320] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.320] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0182.320] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0182.320] SetLastError (dwErrCode=0x0) [0182.321] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\sl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.323] GetLastError () returned 0x5 [0182.323] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.323] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.323] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.323] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.323] SetLastError (dwErrCode=0x0) [0182.323] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.323] GetLastError () returned 0x5 [0182.323] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.324] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.324] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-cyrl\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb55e0 [0182.325] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.326] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.326] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.327] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-cyrl\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0182.327] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-cyrl\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\sr-cyrl\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.328] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.328] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.328] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.328] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.328] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.328] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.328] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.328] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.328] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.328] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.328] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.328] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.328] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.328] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.328] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.328] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.328] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.328] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.328] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.328] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.328] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.328] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.328] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.328] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0182.328] FindClose (in: hFindFile=0x665abb55e0 | out: hFindFile=0x665abb55e0) returned 1 [0182.329] SetLastError (dwErrCode=0x0) [0182.329] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-cyrl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\sr-cyrl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.332] GetLastError () returned 0x5 [0182.332] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.332] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.332] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.332] SetLastError (dwErrCode=0x0) [0182.332] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.332] GetLastError () returned 0x5 [0182.332] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.332] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.332] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-latn\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb53a0 [0182.334] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.335] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.335] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-latn\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0182.336] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-latn\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\sr-latn\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.336] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.336] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.336] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.336] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.336] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.336] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.336] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.336] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.336] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.336] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.336] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.336] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.336] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.336] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.336] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.336] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.336] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.336] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.336] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.336] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.336] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.337] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.337] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.337] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0182.337] FindClose (in: hFindFile=0x665abb53a0 | out: hFindFile=0x665abb53a0) returned 1 [0182.337] SetLastError (dwErrCode=0x0) [0182.337] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-latn\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\sr-latn\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.340] GetLastError () returned 0x5 [0182.340] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.340] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.340] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.340] SetLastError (dwErrCode=0x0) [0182.340] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.340] GetLastError () returned 0x5 [0182.340] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.340] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.340] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-Latn-CS\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb53a0 [0182.341] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.341] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0182.341] FindClose (in: hFindFile=0x665abb53a0 | out: hFindFile=0x665abb53a0) returned 1 [0182.341] SetLastError (dwErrCode=0x0) [0182.341] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-Latn-CS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\sr-latn-cs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.341] GetLastError () returned 0x5 [0182.341] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.341] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.341] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.341] SetLastError (dwErrCode=0x0) [0182.341] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.341] GetLastError () returned 0x5 [0182.341] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.341] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.341] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sv\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4920 [0182.345] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.346] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.346] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.346] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sv\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0182.346] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sv\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\sv\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.346] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.346] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.347] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.347] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.347] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.347] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.347] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.347] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.347] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.347] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.347] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.347] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.347] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.347] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.347] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.347] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.347] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.347] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.347] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.347] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.347] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.347] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.347] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.347] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0182.347] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0182.348] SetLastError (dwErrCode=0x0) [0182.348] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sv\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\sv\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.350] GetLastError () returned 0x5 [0182.350] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.350] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.350] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.350] SetLastError (dwErrCode=0x0) [0182.350] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.351] GetLastError () returned 0x5 [0182.351] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.351] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.351] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\th\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb5760 [0182.352] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.353] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.353] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.353] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\th\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0182.353] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\th\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\th\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.354] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.354] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.354] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.354] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.354] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.354] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.354] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.354] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.354] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.354] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.354] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.354] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.354] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.354] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.354] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.354] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.354] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.354] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.354] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.354] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.354] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.354] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.354] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.354] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0182.354] FindClose (in: hFindFile=0x665abb5760 | out: hFindFile=0x665abb5760) returned 1 [0182.355] SetLastError (dwErrCode=0x0) [0182.355] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\th\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\th\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.358] GetLastError () returned 0x5 [0182.358] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.358] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.358] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.358] SetLastError (dwErrCode=0x0) [0182.358] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.358] GetLastError () returned 0x5 [0182.358] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.358] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.358] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tr\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4560 [0182.359] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.360] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.360] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.361] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tr\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0182.361] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tr\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\tr\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.362] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.362] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.362] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.362] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.362] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.362] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.362] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.362] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.362] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.362] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.362] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.362] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.362] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.362] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.362] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.362] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.362] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.362] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.362] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.362] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.362] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.362] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.362] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.362] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0182.362] FindClose (in: hFindFile=0x665abb4560 | out: hFindFile=0x665abb4560) returned 1 [0182.363] SetLastError (dwErrCode=0x0) [0182.363] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\tr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.366] GetLastError () returned 0x5 [0182.366] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.366] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.366] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.366] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.366] SetLastError (dwErrCode=0x0) [0182.366] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.366] GetLastError () returned 0x5 [0182.366] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.366] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.366] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\uk\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4c20 [0182.368] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.369] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.369] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.369] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\uk\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0182.370] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\uk\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\uk\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.370] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.370] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.370] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.370] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.370] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.370] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.370] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.370] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.370] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.370] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.370] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.370] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.370] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.370] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.370] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.370] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.370] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.370] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.370] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.370] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.370] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.370] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.370] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.370] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0182.370] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0182.371] SetLastError (dwErrCode=0x0) [0182.371] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\uk\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\uk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.375] GetLastError () returned 0x5 [0182.375] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.375] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.375] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.375] SetLastError (dwErrCode=0x0) [0182.375] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.376] GetLastError () returned 0x5 [0182.376] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.376] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.376] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\vi\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4f20 [0182.377] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.378] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.378] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.379] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\vi\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0182.379] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\vi\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\vi\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.379] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.379] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.379] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.379] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.379] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.379] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.379] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.380] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.380] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.380] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.380] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.380] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.380] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.380] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.380] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.380] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.380] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.380] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.380] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.380] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.380] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.380] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.380] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.380] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0182.380] FindClose (in: hFindFile=0x665abb4f20 | out: hFindFile=0x665abb4f20) returned 1 [0182.381] SetLastError (dwErrCode=0x0) [0182.381] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\vi\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\vi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.383] GetLastError () returned 0x5 [0182.383] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.383] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.383] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.383] SetLastError (dwErrCode=0x0) [0182.383] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.384] GetLastError () returned 0x5 [0182.384] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.384] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.384] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHS\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4f20 [0182.385] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.386] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.386] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.386] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHS\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0182.387] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHS\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\zh-chs\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.387] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.387] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.387] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.387] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.387] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.387] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.387] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.387] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.387] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.387] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.387] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.387] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.387] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.388] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.388] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.388] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.388] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.388] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.388] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.388] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.388] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.388] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.388] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.388] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0182.388] FindClose (in: hFindFile=0x665abb4f20 | out: hFindFile=0x665abb4f20) returned 1 [0182.388] SetLastError (dwErrCode=0x0) [0182.389] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\zh-chs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.392] GetLastError () returned 0x5 [0182.392] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.392] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.392] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.392] SetLastError (dwErrCode=0x0) [0182.392] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.392] GetLastError () returned 0x5 [0182.392] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.392] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.392] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHT\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb49e0 [0182.394] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.395] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.395] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHT\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0182.396] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHT\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\zh-cht\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.396] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.396] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.396] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.397] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.397] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.397] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.397] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.397] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.397] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.397] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.397] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.397] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.397] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.397] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.397] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.397] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.397] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.397] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.397] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.397] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.397] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.397] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.397] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.397] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0182.397] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0182.398] SetLastError (dwErrCode=0x0) [0182.398] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHT\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\zh-cht\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.400] GetLastError () returned 0x5 [0182.400] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.400] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.400] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0182.400] FindClose (in: hFindFile=0x665abb56a0 | out: hFindFile=0x665abb56a0) returned 1 [0182.401] SetLastError (dwErrCode=0x0) [0182.401] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.401] GetLastError () returned 0x5 [0182.401] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0182.401] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.401] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.401] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0182.401] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0182.401] SetLastError (dwErrCode=0x0) [0182.401] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.401] GetLastError () returned 0x5 [0182.401] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0182.401] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.401] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.401] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.401] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.401] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.401] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.401] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.401] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.401] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.401] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.402] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.402] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.402] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.402] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.402] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.402] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.402] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.402] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.402] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.402] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.402] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.404] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.404] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.404] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.404] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.404] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.404] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.404] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.404] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.404] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.404] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.404] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.404] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.404] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.404] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.405] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.405] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.405] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.405] SetLastError (dwErrCode=0x0) [0182.405] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.405] GetLastError () returned 0x5 [0182.405] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0182.405] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.405] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AugLoop\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4f20 [0182.406] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.406] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.406] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.407] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AugLoop\\bundle.js", dwFileAttributes=0x80) returned 0 [0182.409] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AugLoop\\bundle.js" (normalized: "c:\\program files\\microsoft office\\root\\office16\\augloop\\bundle.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.410] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.410] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.410] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.410] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.410] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AugLoop\\third-party-notices.txt", dwFileAttributes=0x80) returned 0 [0182.411] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AugLoop\\third-party-notices.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\augloop\\third-party-notices.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.411] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.411] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.412] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0182.412] FindClose (in: hFindFile=0x665abb4f20 | out: hFindFile=0x665abb4f20) returned 1 [0182.412] SetLastError (dwErrCode=0x0) [0182.412] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AugLoop\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\augloop\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.412] GetLastError () returned 0x5 [0182.412] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0182.412] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.412] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.412] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.412] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.413] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\bdcmetadata.xsd", dwFileAttributes=0x80) returned 0 [0182.413] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\bdcmetadata.xsd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bdcmetadata.xsd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.414] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.414] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.414] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.414] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.414] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\bdcmetadataresource.xsd", dwFileAttributes=0x80) returned 0 [0182.415] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\bdcmetadataresource.xsd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bdcmetadataresource.xsd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.415] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.415] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.415] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.415] SetLastError (dwErrCode=0x0) [0182.415] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.416] GetLastError () returned 0x5 [0182.416] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0182.416] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.416] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb55e0 [0182.418] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.419] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.419] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.419] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Author2String.XSL", dwFileAttributes=0x80) returned 0 [0182.420] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Author2String.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\author2string.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.420] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.420] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.420] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.421] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.421] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Author2XML.XSL", dwFileAttributes=0x80) returned 0 [0182.422] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Author2XML.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\author2xml.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.422] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.422] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.422] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.422] SetLastError (dwErrCode=0x0) [0182.422] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.422] GetLastError () returned 0x5 [0182.422] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0182.423] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.423] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Sort\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4920 [0182.423] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.423] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.423] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.423] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Sort\\AUTHOR.XSL", dwFileAttributes=0x80) returned 0 [0182.423] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Sort\\AUTHOR.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\sort\\author.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.424] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.424] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.424] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.424] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.424] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Sort\\TAG.XSL", dwFileAttributes=0x80) returned 0 [0182.424] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Sort\\TAG.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\sort\\tag.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.425] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.425] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.425] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.425] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.425] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Sort\\TITLE.XSL", dwFileAttributes=0x80) returned 0 [0182.425] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Sort\\TITLE.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\sort\\title.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.425] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.425] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.426] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.426] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.426] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Sort\\YEAR.XSL", dwFileAttributes=0x80) returned 0 [0182.426] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Sort\\YEAR.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\sort\\year.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.426] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.426] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.426] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0182.427] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0182.427] SetLastError (dwErrCode=0x0) [0182.427] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Sort\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\sort\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.427] GetLastError () returned 0x5 [0182.427] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0182.427] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.427] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.427] SetLastError (dwErrCode=0x0) [0182.427] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.427] GetLastError () returned 0x5 [0182.427] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0182.427] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.427] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb42c0 [0182.429] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.429] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.429] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.429] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl", dwFileAttributes=0x80) returned 0 [0182.430] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\style\\apasixtheditionofficeonline.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.430] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.430] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.430] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.430] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.431] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\CHICAGO.XSL", dwFileAttributes=0x80) returned 0 [0182.431] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\CHICAGO.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\style\\chicago.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.431] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.431] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.431] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.431] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.431] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\GB.XSL", dwFileAttributes=0x80) returned 0 [0182.432] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\GB.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\style\\gb.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.432] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.432] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.432] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.432] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.432] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\GostName.XSL", dwFileAttributes=0x80) returned 0 [0182.433] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\GostName.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\style\\gostname.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.433] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.433] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.433] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.433] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.434] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\GostTitle.XSL", dwFileAttributes=0x80) returned 0 [0182.434] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\GostTitle.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\style\\gosttitle.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.434] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.434] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.434] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.434] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.434] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl", dwFileAttributes=0x80) returned 0 [0182.435] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\style\\harvardanglia2008officeonline.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.435] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.435] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.435] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.435] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.435] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl", dwFileAttributes=0x80) returned 0 [0182.436] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\style\\ieee2006officeonline.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.436] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.436] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.437] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.437] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.437] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\ISO690.XSL", dwFileAttributes=0x80) returned 0 [0182.438] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\ISO690.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\style\\iso690.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.438] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.438] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.438] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.438] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.438] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\ISO690Nmerical.XSL", dwFileAttributes=0x80) returned 0 [0182.438] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\ISO690Nmerical.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\style\\iso690nmerical.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.439] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.439] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.439] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.439] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.439] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl", dwFileAttributes=0x80) returned 0 [0182.439] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\style\\mlaseventheditionofficeonline.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.439] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.439] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.440] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.440] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.440] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\SIST02.XSL", dwFileAttributes=0x80) returned 0 [0182.440] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\SIST02.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\style\\sist02.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.440] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.440] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.440] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.440] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.441] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\TURABIAN.XSL", dwFileAttributes=0x80) returned 0 [0182.441] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\TURABIAN.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\style\\turabian.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.442] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.442] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.442] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0182.442] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0182.442] SetLastError (dwErrCode=0x0) [0182.442] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\style\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.445] GetLastError () returned 0x5 [0182.445] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0182.445] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.445] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0182.445] FindClose (in: hFindFile=0x665abb55e0 | out: hFindFile=0x665abb55e0) returned 1 [0182.445] SetLastError (dwErrCode=0x0) [0182.445] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.446] GetLastError () returned 0x5 [0182.446] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0182.446] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.446] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.446] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.446] SetLastError (dwErrCode=0x0) [0182.446] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.446] GetLastError () returned 0x5 [0182.446] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0182.446] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.446] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4f80 [0182.448] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.448] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.448] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.448] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART1.BDR", dwFileAttributes=0x80) returned 0 [0182.449] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART1.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\borders\\msart1.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.449] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.449] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.449] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.449] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART10.BDR", dwFileAttributes=0x80) returned 0 [0182.450] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART10.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\borders\\msart10.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.450] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.450] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.450] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.450] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.451] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART11.BDR", dwFileAttributes=0x80) returned 0 [0182.451] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART11.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\borders\\msart11.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.451] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.451] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.451] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.451] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.452] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART12.BDR", dwFileAttributes=0x80) returned 0 [0182.452] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART12.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\borders\\msart12.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.452] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.452] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.452] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.452] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.453] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART13.BDR", dwFileAttributes=0x80) returned 0 [0182.453] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART13.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\borders\\msart13.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.453] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.453] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.454] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.454] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.454] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART14.BDR", dwFileAttributes=0x80) returned 0 [0182.454] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART14.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\borders\\msart14.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.454] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.454] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.454] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.454] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.455] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART15.BDR", dwFileAttributes=0x80) returned 0 [0182.455] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART15.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\borders\\msart15.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.455] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.455] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.455] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.455] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.455] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART2.BDR", dwFileAttributes=0x80) returned 0 [0182.456] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART2.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\borders\\msart2.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.456] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.456] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.456] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.456] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.456] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART3.BDR", dwFileAttributes=0x80) returned 0 [0182.457] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART3.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\borders\\msart3.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.457] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.457] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.457] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.457] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.457] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART4.BDR", dwFileAttributes=0x80) returned 0 [0182.457] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART4.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\borders\\msart4.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.458] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.458] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.458] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.458] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.458] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART5.BDR", dwFileAttributes=0x80) returned 0 [0182.459] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART5.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\borders\\msart5.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.459] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.459] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.459] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.459] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.459] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART6.BDR", dwFileAttributes=0x80) returned 0 [0182.460] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART6.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\borders\\msart6.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.460] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.460] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.460] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.460] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.460] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART7.BDR", dwFileAttributes=0x80) returned 0 [0182.460] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART7.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\borders\\msart7.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.461] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.461] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.461] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.461] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.461] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART8.BDR", dwFileAttributes=0x80) returned 0 [0182.461] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART8.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\borders\\msart8.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.461] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.461] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.462] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.462] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.462] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART9.BDR", dwFileAttributes=0x80) returned 0 [0182.462] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART9.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\borders\\msart9.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.462] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.462] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.462] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0182.463] FindClose (in: hFindFile=0x665abb4f80 | out: hFindFile=0x665abb4f80) returned 1 [0182.463] SetLastError (dwErrCode=0x0) [0182.463] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\borders\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.466] GetLastError () returned 0x5 [0182.466] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0182.466] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.466] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.466] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.466] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.466] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.466] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.466] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.466] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.467] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.467] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.467] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.467] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.467] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CommunicatorContentBinApp.xap", dwFileAttributes=0x80) returned 0 [0182.468] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CommunicatorContentBinApp.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\communicatorcontentbinapp.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.468] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.468] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.468] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.468] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.468] SetLastError (dwErrCode=0x0) [0182.468] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.468] GetLastError () returned 0x5 [0182.468] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0182.468] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.468] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Configuration\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb53a0 [0182.470] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.470] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.470] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.470] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Configuration\\card_expiration_terms_dict.txt", dwFileAttributes=0x80) returned 0 [0182.471] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Configuration\\card_expiration_terms_dict.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\configuration\\card_expiration_terms_dict.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.471] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.471] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.471] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.471] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.471] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Configuration\\card_security_terms_dict.txt", dwFileAttributes=0x80) returned 0 [0182.471] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Configuration\\card_security_terms_dict.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\configuration\\card_security_terms_dict.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.472] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.472] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.472] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.472] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.472] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Configuration\\card_terms_dict.txt", dwFileAttributes=0x80) returned 0 [0182.472] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Configuration\\card_terms_dict.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\configuration\\card_terms_dict.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.473] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.473] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.473] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.473] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.473] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Configuration\\config.xml", dwFileAttributes=0x80) returned 0 [0182.473] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Configuration\\config.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\configuration\\config.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.473] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.474] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.474] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.474] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.474] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Configuration\\ssn_high_group_info.txt", dwFileAttributes=0x80) returned 0 [0182.474] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Configuration\\ssn_high_group_info.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\configuration\\ssn_high_group_info.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.474] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.474] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.475] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0182.475] FindClose (in: hFindFile=0x665abb53a0 | out: hFindFile=0x665abb53a0) returned 1 [0182.475] SetLastError (dwErrCode=0x0) [0182.475] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Configuration\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\configuration\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.478] GetLastError () returned 0x5 [0182.478] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0182.478] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.478] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.478] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.478] SetLastError (dwErrCode=0x0) [0182.478] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.478] GetLastError () returned 0x5 [0182.478] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0182.478] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.478] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb5460 [0182.479] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.479] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.480] SetLastError (dwErrCode=0x0) [0182.480] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.480] GetLastError () returned 0x5 [0182.480] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0182.480] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.480] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4d40 [0182.482] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.482] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.482] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\DELIMR.FAE", dwFileAttributes=0x80) returned 0 [0182.483] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\DELIMR.FAE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\1033\\delimr.fae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.484] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.484] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.484] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.484] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.484] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.484] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\OLADDR.FAE", dwFileAttributes=0x80) returned 0 [0182.485] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\OLADDR.FAE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\1033\\oladdr.fae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.485] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.485] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.485] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.485] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.485] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\OLAPPTR.FAE", dwFileAttributes=0x80) returned 0 [0182.486] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\OLAPPTR.FAE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\1033\\olapptr.fae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.486] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.486] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.486] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.486] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.486] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\OLJRNLR.FAE", dwFileAttributes=0x80) returned 0 [0182.486] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\OLJRNLR.FAE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\1033\\oljrnlr.fae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.487] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.487] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.487] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.487] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.487] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\OLMAILR.FAE", dwFileAttributes=0x80) returned 0 [0182.487] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\OLMAILR.FAE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\1033\\olmailr.fae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.487] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.487] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.488] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.488] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.488] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\OLNOTER.FAE", dwFileAttributes=0x80) returned 0 [0182.489] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\OLNOTER.FAE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\1033\\olnoter.fae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.489] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.489] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.489] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.489] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.489] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\OLR.SAM", dwFileAttributes=0x80) returned 0 [0182.490] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\OLR.SAM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\1033\\olr.sam"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.491] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.491] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.491] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.491] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.491] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\OLTASKR.FAE", dwFileAttributes=0x80) returned 0 [0182.492] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\OLTASKR.FAE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\1033\\oltaskr.fae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.492] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.492] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.492] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.492] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0182.492] FindClose (in: hFindFile=0x665abb4d40 | out: hFindFile=0x665abb4d40) returned 1 [0182.493] SetLastError (dwErrCode=0x0) [0182.493] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.496] GetLastError () returned 0x5 [0182.496] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0182.496] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.496] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.496] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.496] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\DELIMWIN.FAE", dwFileAttributes=0x80) returned 0 [0182.497] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\DELIMWIN.FAE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\delimwin.fae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.497] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.497] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.497] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.497] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\DESKSAM.SAM", dwFileAttributes=0x80) returned 0 [0182.498] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\DESKSAM.SAM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\desksam.sam"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.498] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.498] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.499] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.499] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\OL.SAM", dwFileAttributes=0x80) returned 0 [0182.499] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\OL.SAM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\ol.sam"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.499] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.499] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.500] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.500] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\OLADD.FAE", dwFileAttributes=0x80) returned 0 [0182.500] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\OLADD.FAE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\oladd.fae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.500] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.500] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.500] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.501] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.501] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\OLAPPT.FAE", dwFileAttributes=0x80) returned 0 [0182.501] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\OLAPPT.FAE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\olappt.fae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.501] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.501] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.502] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.502] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\OLJRNL.FAE", dwFileAttributes=0x80) returned 0 [0182.503] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\OLJRNL.FAE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\oljrnl.fae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.503] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.503] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.503] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.503] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.503] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\OLMAIL.FAE", dwFileAttributes=0x80) returned 0 [0182.503] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\OLMAIL.FAE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\olmail.fae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.504] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.504] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.504] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.504] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\OLNOTE.FAE", dwFileAttributes=0x80) returned 0 [0182.504] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\OLNOTE.FAE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\olnote.fae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.504] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.505] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.505] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.505] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\OLTASK.FAE", dwFileAttributes=0x80) returned 0 [0182.505] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\OLTASK.FAE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\oltask.fae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.505] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.505] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.506] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.506] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.506] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0182.506] FindClose (in: hFindFile=0x665abb5460 | out: hFindFile=0x665abb5460) returned 1 [0182.506] SetLastError (dwErrCode=0x0) [0182.506] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.506] GetLastError () returned 0x5 [0182.506] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0182.506] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.506] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.506] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.506] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.506] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.506] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.506] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.506] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.506] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.506] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.506] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Custom.propdesc", dwFileAttributes=0x80) returned 0 [0182.507] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Custom.propdesc" (normalized: "c:\\program files\\microsoft office\\root\\office16\\custom.propdesc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.507] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.507] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.507] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.507] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.507] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.507] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.507] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.507] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.507] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.507] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.507] SetLastError (dwErrCode=0x0) [0182.507] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.507] GetLastError () returned 0x5 [0182.507] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0182.507] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.507] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4f20 [0182.508] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.508] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.508] SetLastError (dwErrCode=0x0) [0182.508] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\document parts\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.508] GetLastError () returned 0x5 [0182.508] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0182.509] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.509] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\1033\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb42c0 [0182.509] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.509] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.509] SetLastError (dwErrCode=0x0) [0182.509] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\document parts\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.509] GetLastError () returned 0x5 [0182.509] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.509] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.509] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\1033\\16\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb5460 [0182.509] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.509] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.509] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\1033\\16\\Built-In Building Blocks.dotx", dwFileAttributes=0x80) returned 0 [0182.510] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\1033\\16\\Built-In Building Blocks.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\document parts\\1033\\16\\built-in building blocks.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.510] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.510] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.510] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0182.510] FindClose (in: hFindFile=0x665abb5460 | out: hFindFile=0x665abb5460) returned 1 [0182.510] SetLastError (dwErrCode=0x0) [0182.510] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\1033\\16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\document parts\\1033\\16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.510] GetLastError () returned 0x5 [0182.510] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.510] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.511] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0182.511] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0182.511] SetLastError (dwErrCode=0x0) [0182.511] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\document parts\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.511] GetLastError () returned 0x5 [0182.511] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0182.511] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.511] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0182.511] FindClose (in: hFindFile=0x665abb4f20 | out: hFindFile=0x665abb4f20) returned 1 [0182.511] SetLastError (dwErrCode=0x0) [0182.511] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\document parts\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.511] GetLastError () returned 0x5 [0182.511] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0182.511] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.511] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.511] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.511] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.511] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.511] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.511] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.511] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.511] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ELECTRICAL.VSL", dwFileAttributes=0x80) returned 0 [0182.514] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ELECTRICAL.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\electrical.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.515] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.515] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.515] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.515] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.517] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.517] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.517] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.517] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.517] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.517] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.517] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.517] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ERXIMP.ADD", dwFileAttributes=0x80) returned 0 [0182.518] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ERXIMP.ADD" (normalized: "c:\\program files\\microsoft office\\root\\office16\\erximp.add"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.518] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.518] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.518] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.518] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.518] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.518] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.519] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\EXCEL.VisualElementsManifest.xml", dwFileAttributes=0x80) returned 0 [0182.519] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\EXCEL.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\excel.visualelementsmanifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.519] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.519] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.519] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.519] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.519] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.519] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.519] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ExcelCtxUICellModel.bin", dwFileAttributes=0x80) returned 0 [0182.520] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ExcelCtxUICellModel.bin" (normalized: "c:\\program files\\microsoft office\\root\\office16\\excelctxuicellmodel.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.521] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.521] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.521] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.521] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.521] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ExtensibleApp.xap", dwFileAttributes=0x80) returned 0 [0182.521] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ExtensibleApp.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\extensibleapp.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.521] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.521] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.522] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.522] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.522] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.522] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.522] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.522] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\flat_officeFontsPreview.ttf", dwFileAttributes=0x80) returned 0 [0182.522] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\flat_officeFontsPreview.ttf" (normalized: "c:\\program files\\microsoft office\\root\\office16\\flat_officefontspreview.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.522] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.522] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.523] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.523] SetLastError (dwErrCode=0x0) [0182.523] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.523] GetLastError () returned 0x5 [0182.523] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0182.523] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.523] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4f80 [0182.524] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.524] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.524] SetLastError (dwErrCode=0x0) [0182.524] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.524] GetLastError () returned 0x5 [0182.524] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0182.524] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.524] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb5040 [0182.525] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.526] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.526] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\ACTIVITL.ICO", dwFileAttributes=0x80) returned 0 [0182.527] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\ACTIVITL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\activitl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.527] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.527] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.527] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.527] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\ACTIVITS.ICO", dwFileAttributes=0x80) returned 0 [0182.527] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\ACTIVITS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\activits.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.528] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.528] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.528] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.528] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\ACTIVITY.CFG", dwFileAttributes=0x80) returned 0 [0182.528] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\ACTIVITY.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\activity.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.528] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.529] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.529] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.529] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\APPT.CFG", dwFileAttributes=0x80) returned 0 [0182.529] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\APPT.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\appt.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.529] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.529] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.530] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.530] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\APPTL.ICO", dwFileAttributes=0x80) returned 0 [0182.530] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\APPTL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\apptl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.530] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.530] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.531] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.531] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\APPTS.ICO", dwFileAttributes=0x80) returned 0 [0182.531] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\APPTS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\appts.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.531] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.531] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.531] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.531] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.532] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\CNFNOT.CFG", dwFileAttributes=0x80) returned 0 [0182.532] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\CNFNOT.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\cnfnot.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.533] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.533] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.533] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.533] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\CNFNOT.ICO", dwFileAttributes=0x80) returned 0 [0182.534] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\CNFNOT.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\cnfnot.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.534] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.534] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.534] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.534] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.534] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\CNFRES.CFG", dwFileAttributes=0x80) returned 0 [0182.535] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\CNFRES.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\cnfres.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.535] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.535] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.535] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.535] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\CONFLICT.ICO", dwFileAttributes=0x80) returned 0 [0182.535] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\CONFLICT.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\conflict.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.536] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.536] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.536] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.536] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.536] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\CONTACT.CFG", dwFileAttributes=0x80) returned 0 [0182.537] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\CONTACT.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\contact.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.537] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.537] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.537] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.537] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.537] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\CONTACTL.ICO", dwFileAttributes=0x80) returned 0 [0182.538] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\CONTACTL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\contactl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.538] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.538] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.538] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.539] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.539] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\CONTACTS.ICO", dwFileAttributes=0x80) returned 0 [0182.539] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\CONTACTS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\contacts.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.539] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.539] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.539] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.539] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.540] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\DISTLIST.CFG", dwFileAttributes=0x80) returned 0 [0182.540] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\DISTLIST.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\distlist.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.540] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.540] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.540] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.540] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.540] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\DISTLSTL.ICO", dwFileAttributes=0x80) returned 0 [0182.541] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\DISTLSTL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\distlstl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.541] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.541] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.541] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.541] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.541] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\DISTLSTS.ICO", dwFileAttributes=0x80) returned 0 [0182.541] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\DISTLSTS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\distlsts.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.542] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.542] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.542] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.542] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.542] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\DOC.CFG", dwFileAttributes=0x80) returned 0 [0182.543] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\DOC.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\doc.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.543] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.543] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.543] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.543] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.543] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\DOCL.ICO", dwFileAttributes=0x80) returned 0 [0182.544] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\DOCL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\docl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.544] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.544] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.544] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.544] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.544] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\DOCS.ICO", dwFileAttributes=0x80) returned 0 [0182.544] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\DOCS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\docs.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.545] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.545] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.545] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.545] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\EXITEM.CFG", dwFileAttributes=0x80) returned 0 [0182.546] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\EXITEM.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\exitem.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.546] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.546] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.546] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.546] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\EXITEML.ICO", dwFileAttributes=0x80) returned 0 [0182.547] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\EXITEML.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\exiteml.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.548] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.548] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.548] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.548] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\EXITEMS.ICO", dwFileAttributes=0x80) returned 0 [0182.548] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\EXITEMS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\exitems.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.548] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.548] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.549] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.549] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\INFOMAIL.CFG", dwFileAttributes=0x80) returned 0 [0182.549] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\INFOMAIL.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\infomail.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.549] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.549] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.549] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.550] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\INFOML.ICO", dwFileAttributes=0x80) returned 0 [0182.550] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\INFOML.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\infoml.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.550] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.550] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.550] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.550] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.551] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\INFOMS.ICO", dwFileAttributes=0x80) returned 0 [0182.551] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\INFOMS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\infoms.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.551] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.551] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.551] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.551] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.551] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\IPM.CFG", dwFileAttributes=0x80) returned 0 [0182.552] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\IPM.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\ipm.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.552] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.552] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.552] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.552] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\IPML.ICO", dwFileAttributes=0x80) returned 0 [0182.553] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\IPML.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\ipml.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.553] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.553] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.553] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.553] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.553] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\IPMS.ICO", dwFileAttributes=0x80) returned 0 [0182.553] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\IPMS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\ipms.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.554] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.554] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.554] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.554] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\MMSL.ICO", dwFileAttributes=0x80) returned 0 [0182.555] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\MMSL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\mmsl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.555] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.555] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.555] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.555] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\MMSS.ICO", dwFileAttributes=0x80) returned 0 [0182.556] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\MMSS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\mmss.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.556] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.556] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.556] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.556] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\NOTE.CFG", dwFileAttributes=0x80) returned 0 [0182.556] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\NOTE.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\note.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.557] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.557] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.557] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.557] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\NOTEL.ICO", dwFileAttributes=0x80) returned 0 [0182.558] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\NOTEL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\notel.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.558] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.558] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.558] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.558] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.558] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\NOTES.ICO", dwFileAttributes=0x80) returned 0 [0182.559] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\NOTES.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\notes.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.559] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.559] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.559] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.559] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\OMSMMS.CFG", dwFileAttributes=0x80) returned 0 [0182.560] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\OMSMMS.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\omsmms.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.560] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.560] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.560] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.562] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\OMSSMS.CFG", dwFileAttributes=0x80) returned 0 [0182.563] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\OMSSMS.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\omssms.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.563] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.563] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.563] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.564] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.564] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\OOFL.ICO", dwFileAttributes=0x80) returned 0 [0182.564] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\OOFL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\oofl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.564] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.564] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.565] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.565] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.565] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\OOFS.ICO", dwFileAttributes=0x80) returned 0 [0182.565] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\OOFS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\oofs.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.565] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.566] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.566] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.566] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.566] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\OOFTMPL.CFG", dwFileAttributes=0x80) returned 0 [0182.566] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\OOFTMPL.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\ooftmpl.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.567] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.567] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.567] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.567] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.567] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\POST.CFG", dwFileAttributes=0x80) returned 0 [0182.568] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\POST.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\post.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.568] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.568] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.569] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.569] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.569] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\POSTIT.CFG", dwFileAttributes=0x80) returned 0 [0182.570] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\POSTIT.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\postit.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.570] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.570] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.570] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.570] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\POSTITL.ICO", dwFileAttributes=0x80) returned 0 [0182.571] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\POSTITL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\postitl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.571] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.571] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.571] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.571] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.572] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\POSTITS.ICO", dwFileAttributes=0x80) returned 0 [0182.572] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\POSTITS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\postits.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.572] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.572] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.573] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.573] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\POSTL.ICO", dwFileAttributes=0x80) returned 0 [0182.573] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\POSTL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\postl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.573] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.573] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.574] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.574] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\POSTS.ICO", dwFileAttributes=0x80) returned 0 [0182.575] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\POSTS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\posts.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.575] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.575] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.575] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.575] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.576] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RCLRPT.CFG", dwFileAttributes=0x80) returned 0 [0182.576] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RCLRPT.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\rclrpt.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.576] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.576] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.578] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.578] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REC.CFG", dwFileAttributes=0x80) returned 0 [0182.578] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REC.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\rec.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.578] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.578] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.579] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.579] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.579] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RECL.ICO", dwFileAttributes=0x80) returned 0 [0182.579] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RECL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\recl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.579] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.579] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.580] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.580] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RECS.ICO", dwFileAttributes=0x80) returned 0 [0182.580] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RECS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\recs.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.581] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.581] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.581] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.581] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.581] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REMOTE.CFG", dwFileAttributes=0x80) returned 0 [0182.582] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REMOTE.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\remote.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.582] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.582] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.583] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.583] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REMOTEL.ICO", dwFileAttributes=0x80) returned 0 [0182.583] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REMOTEL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\remotel.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.583] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.583] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.584] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.584] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REMOTES.ICO", dwFileAttributes=0x80) returned 0 [0182.584] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REMOTES.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\remotes.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.584] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.584] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.584] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.584] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.585] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REPLTMPL.CFG", dwFileAttributes=0x80) returned 0 [0182.585] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REPLTMPL.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\repltmpl.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.586] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.586] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.586] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.586] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.586] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REPORT.CFG", dwFileAttributes=0x80) returned 0 [0182.586] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REPORT.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\report.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.586] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.586] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.587] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.587] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REPORTL.ICO", dwFileAttributes=0x80) returned 0 [0182.587] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REPORTL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\reportl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.587] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.587] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.588] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.588] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.588] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REPORTS.ICO", dwFileAttributes=0x80) returned 0 [0182.588] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REPORTS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\reports.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.588] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.588] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.588] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.588] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RESEND.CFG", dwFileAttributes=0x80) returned 0 [0182.589] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RESEND.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\resend.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.589] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.589] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.589] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.589] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RESENDL.ICO", dwFileAttributes=0x80) returned 0 [0182.590] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RESENDL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\resendl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.590] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.590] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.590] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.590] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RESENDS.ICO", dwFileAttributes=0x80) returned 0 [0182.590] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RESENDS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\resends.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.591] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.591] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.591] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.591] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.591] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RSSITEM.CFG", dwFileAttributes=0x80) returned 0 [0182.592] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RSSITEM.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\rssitem.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.592] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.592] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.593] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.593] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RSSITEML.ICO", dwFileAttributes=0x80) returned 0 [0182.593] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RSSITEML.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\rssiteml.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.594] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.594] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.594] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.594] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.594] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RSSITEMS.ICO", dwFileAttributes=0x80) returned 0 [0182.594] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RSSITEMS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\rssitems.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.594] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.595] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.595] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.595] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.595] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDCNCLL.ICO", dwFileAttributes=0x80) returned 0 [0182.595] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDCNCLL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\scdcncll.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.595] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.595] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.596] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.596] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDCNCLS.ICO", dwFileAttributes=0x80) returned 0 [0182.596] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDCNCLS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\scdcncls.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.596] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.596] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.596] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.596] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.597] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDREQL.ICO", dwFileAttributes=0x80) returned 0 [0182.597] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDREQL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\scdreql.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.598] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.598] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.598] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.598] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.598] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDREQS.ICO", dwFileAttributes=0x80) returned 0 [0182.598] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDREQS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\scdreqs.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.598] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.599] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.599] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.599] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.599] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDRESNL.ICO", dwFileAttributes=0x80) returned 0 [0182.599] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDRESNL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\scdresnl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.599] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.599] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.600] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.600] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.600] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDRESNS.ICO", dwFileAttributes=0x80) returned 0 [0182.600] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDRESNS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\scdresns.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.600] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.600] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.600] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.600] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.601] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDRESPL.ICO", dwFileAttributes=0x80) returned 0 [0182.601] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDRESPL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\scdrespl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.601] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.601] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.601] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.602] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.602] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDRESPS.ICO", dwFileAttributes=0x80) returned 0 [0182.603] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDRESPS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\scdresps.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.603] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.603] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.603] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.603] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.603] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDRESTL.ICO", dwFileAttributes=0x80) returned 0 [0182.604] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDRESTL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\scdrestl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.604] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.604] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.604] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.604] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.604] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDRESTS.ICO", dwFileAttributes=0x80) returned 0 [0182.604] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDRESTS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\scdrests.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.605] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.605] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.605] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.605] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.605] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCHDCNCL.CFG", dwFileAttributes=0x80) returned 0 [0182.606] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCHDCNCL.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\schdcncl.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.606] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.606] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.606] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.607] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCHDREQ.CFG", dwFileAttributes=0x80) returned 0 [0182.607] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCHDREQ.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\schdreq.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.607] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.607] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.607] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.607] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.608] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCHDRESN.CFG", dwFileAttributes=0x80) returned 0 [0182.608] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCHDRESN.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\schdresn.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.608] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.608] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.609] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.609] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCHDRESP.CFG", dwFileAttributes=0x80) returned 0 [0182.609] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCHDRESP.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\schdresp.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.609] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.610] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.610] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.610] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCHDREST.CFG", dwFileAttributes=0x80) returned 0 [0182.610] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCHDREST.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\schdrest.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.611] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.611] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.611] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.611] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.611] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SECREC.CFG", dwFileAttributes=0x80) returned 0 [0182.611] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SECREC.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\secrec.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.612] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.612] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.612] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.612] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SECRECL.ICO", dwFileAttributes=0x80) returned 0 [0182.613] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SECRECL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\secrecl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.613] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.613] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.613] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.613] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.613] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SECRECS.ICO", dwFileAttributes=0x80) returned 0 [0182.614] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SECRECS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\secrecs.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.615] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.615] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.615] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.615] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.615] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SECURE.CFG", dwFileAttributes=0x80) returned 0 [0182.616] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SECURE.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\secure.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.616] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.616] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.617] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.617] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.617] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SECURL.ICO", dwFileAttributes=0x80) returned 0 [0182.617] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SECURL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\securl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.618] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.618] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.618] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.618] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.618] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SECURS.ICO", dwFileAttributes=0x80) returned 0 [0182.618] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SECURS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\securs.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.619] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.619] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.619] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.619] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SHARING.CFG", dwFileAttributes=0x80) returned 0 [0182.620] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SHARING.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\sharing.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.620] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.620] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.620] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.620] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SIGN.CFG", dwFileAttributes=0x80) returned 0 [0182.621] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SIGN.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\sign.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.621] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.621] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.621] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.621] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SIGNL.ICO", dwFileAttributes=0x80) returned 0 [0182.622] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SIGNL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\signl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.622] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.622] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.622] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.622] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.623] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SIGNS.ICO", dwFileAttributes=0x80) returned 0 [0182.623] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SIGNS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\signs.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.623] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.623] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.623] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.623] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SMIMEE.CFG", dwFileAttributes=0x80) returned 0 [0182.624] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SMIMEE.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\smimee.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.624] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.624] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.624] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.624] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SMIMES.CFG", dwFileAttributes=0x80) returned 0 [0182.625] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SMIMES.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\smimes.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.625] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.625] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.625] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.625] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SMSL.ICO", dwFileAttributes=0x80) returned 0 [0182.626] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SMSL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\smsl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.626] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.626] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.626] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.627] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SMSS.ICO", dwFileAttributes=0x80) returned 0 [0182.627] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SMSS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\smss.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.628] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.628] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.628] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.628] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASK.CFG", dwFileAttributes=0x80) returned 0 [0182.628] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASK.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\task.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.628] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.628] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.629] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.629] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKACC.CFG", dwFileAttributes=0x80) returned 0 [0182.629] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKACC.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\taskacc.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.629] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.629] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.630] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.630] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.630] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKACCL.ICO", dwFileAttributes=0x80) returned 0 [0182.630] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKACCL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\taskaccl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.630] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.630] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.630] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.630] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.631] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKACCS.ICO", dwFileAttributes=0x80) returned 0 [0182.631] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKACCS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\taskaccs.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.632] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.632] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.632] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.632] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKDEC.CFG", dwFileAttributes=0x80) returned 0 [0182.632] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKDEC.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\taskdec.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.632] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.633] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.633] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.633] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKDECL.ICO", dwFileAttributes=0x80) returned 0 [0182.633] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKDECL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\taskdecl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.633] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.633] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.634] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.634] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.634] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKDECS.ICO", dwFileAttributes=0x80) returned 0 [0182.634] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKDECS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\taskdecs.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.634] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.634] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.634] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.634] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKL.ICO", dwFileAttributes=0x80) returned 0 [0182.635] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\taskl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.635] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.635] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.635] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.635] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKREQ.CFG", dwFileAttributes=0x80) returned 0 [0182.636] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKREQ.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\taskreq.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.636] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.636] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.636] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.636] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKREQL.ICO", dwFileAttributes=0x80) returned 0 [0182.639] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKREQL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\taskreql.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.640] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.640] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.640] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.640] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.640] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKREQS.ICO", dwFileAttributes=0x80) returned 0 [0182.640] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKREQS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\taskreqs.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.640] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.640] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.641] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.641] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.641] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKS.ICO", dwFileAttributes=0x80) returned 0 [0182.642] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\tasks.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.642] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.642] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.642] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.642] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKUPD.CFG", dwFileAttributes=0x80) returned 0 [0182.642] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKUPD.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\taskupd.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.643] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.643] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.643] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0182.643] FindClose (in: hFindFile=0x665abb5040 | out: hFindFile=0x665abb5040) returned 1 [0182.644] SetLastError (dwErrCode=0x0) [0182.644] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.646] GetLastError () returned 0x5 [0182.646] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0182.646] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.646] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0182.646] FindClose (in: hFindFile=0x665abb4f80 | out: hFindFile=0x665abb4f80) returned 1 [0182.646] SetLastError (dwErrCode=0x0) [0182.646] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.647] GetLastError () returned 0x5 [0182.647] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0182.647] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.647] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.647] SetLastError (dwErrCode=0x0) [0182.647] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.649] GetLastError () returned 0x5 [0182.649] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0182.649] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.649] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f14\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4c20 [0182.649] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.649] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.649] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.650] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f14\\FA000000014", dwFileAttributes=0x80) returned 0 [0182.650] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f14\\FA000000014" (normalized: "c:\\program files\\microsoft office\\root\\office16\\fpa_f14\\fa000000014"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.651] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.651] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.651] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0182.651] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0182.651] SetLastError (dwErrCode=0x0) [0182.651] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f14\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\fpa_f14\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.651] GetLastError () returned 0x5 [0182.651] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0182.652] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.652] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.652] SetLastError (dwErrCode=0x0) [0182.652] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.652] GetLastError () returned 0x5 [0182.652] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0182.652] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.652] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f2\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4920 [0182.652] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.652] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.652] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.653] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f2\\FA000000002", dwFileAttributes=0x80) returned 0 [0182.653] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f2\\FA000000002" (normalized: "c:\\program files\\microsoft office\\root\\office16\\fpa_f2\\fa000000002"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.654] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.654] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.654] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0182.654] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0182.654] SetLastError (dwErrCode=0x0) [0182.654] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f2\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\fpa_f2\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.654] GetLastError () returned 0x5 [0182.654] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0182.654] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.654] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.654] SetLastError (dwErrCode=0x0) [0182.655] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.655] GetLastError () returned 0x5 [0182.655] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0182.655] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.655] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f3\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4560 [0182.655] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.655] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.655] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f3\\FA000000003", dwFileAttributes=0x80) returned 0 [0182.657] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f3\\FA000000003" (normalized: "c:\\program files\\microsoft office\\root\\office16\\fpa_f3\\fa000000003"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.657] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.657] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.657] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0182.657] FindClose (in: hFindFile=0x665abb4560 | out: hFindFile=0x665abb4560) returned 1 [0182.657] SetLastError (dwErrCode=0x0) [0182.657] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f3\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\fpa_f3\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.657] GetLastError () returned 0x5 [0182.657] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0182.658] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.658] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.658] SetLastError (dwErrCode=0x0) [0182.658] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.658] GetLastError () returned 0x5 [0182.658] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0182.658] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.658] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f4\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4f20 [0182.658] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.658] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.658] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f4\\FA000000005", dwFileAttributes=0x80) returned 0 [0182.659] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f4\\FA000000005" (normalized: "c:\\program files\\microsoft office\\root\\office16\\fpa_f4\\fa000000005"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.660] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.660] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.660] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0182.660] FindClose (in: hFindFile=0x665abb4f20 | out: hFindFile=0x665abb4f20) returned 1 [0182.660] SetLastError (dwErrCode=0x0) [0182.660] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f4\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\fpa_f4\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.660] GetLastError () returned 0x5 [0182.660] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0182.660] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.660] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.660] SetLastError (dwErrCode=0x0) [0182.660] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.661] GetLastError () returned 0x5 [0182.661] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0182.661] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.661] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f7\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb53a0 [0182.661] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.661] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.661] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f7\\FA000000007", dwFileAttributes=0x80) returned 0 [0182.662] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f7\\FA000000007" (normalized: "c:\\program files\\microsoft office\\root\\office16\\fpa_f7\\fa000000007"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.662] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.662] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.662] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0182.662] FindClose (in: hFindFile=0x665abb53a0 | out: hFindFile=0x665abb53a0) returned 1 [0182.662] SetLastError (dwErrCode=0x0) [0182.662] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f7\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\fpa_f7\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.663] GetLastError () returned 0x5 [0182.663] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0182.663] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.663] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.663] SetLastError (dwErrCode=0x0) [0182.663] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.663] GetLastError () returned 0x5 [0182.663] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0182.663] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.663] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_FA000000006\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4c80 [0182.663] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.663] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.663] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_FA000000006\\FA000000006", dwFileAttributes=0x80) returned 0 [0182.664] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_FA000000006\\FA000000006" (normalized: "c:\\program files\\microsoft office\\root\\office16\\fpa_fa000000006\\fa000000006"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.664] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.664] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.664] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0182.664] FindClose (in: hFindFile=0x665abb4c80 | out: hFindFile=0x665abb4c80) returned 1 [0182.665] SetLastError (dwErrCode=0x0) [0182.665] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_FA000000006\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\fpa_fa000000006\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.665] GetLastError () returned 0x5 [0182.665] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0182.665] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.665] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.665] SetLastError (dwErrCode=0x0) [0182.665] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.665] GetLastError () returned 0x5 [0182.665] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0182.665] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.665] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_FA000000008\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb5040 [0182.667] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.667] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.667] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_FA000000008\\FA000000008", dwFileAttributes=0x80) returned 0 [0182.667] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_FA000000008\\FA000000008" (normalized: "c:\\program files\\microsoft office\\root\\office16\\fpa_fa000000008\\fa000000008"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.668] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.668] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.668] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0182.668] FindClose (in: hFindFile=0x665abb5040 | out: hFindFile=0x665abb5040) returned 1 [0182.668] SetLastError (dwErrCode=0x0) [0182.668] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_FA000000008\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\fpa_fa000000008\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.668] GetLastError () returned 0x5 [0182.668] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0182.668] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.669] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.669] SetLastError (dwErrCode=0x0) [0182.669] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.669] GetLastError () returned 0x5 [0182.669] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0182.669] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.669] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_FA000000011\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4f80 [0182.669] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.669] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.669] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.669] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_FA000000011\\FA000000011", dwFileAttributes=0x80) returned 0 [0182.670] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_FA000000011\\FA000000011" (normalized: "c:\\program files\\microsoft office\\root\\office16\\fpa_fa000000011\\fa000000011"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.670] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.670] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.670] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0182.671] FindClose (in: hFindFile=0x665abb4f80 | out: hFindFile=0x665abb4f80) returned 1 [0182.671] SetLastError (dwErrCode=0x0) [0182.671] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_FA000000011\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\fpa_fa000000011\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.671] GetLastError () returned 0x5 [0182.671] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0182.671] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.671] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.671] SetLastError (dwErrCode=0x0) [0182.671] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.671] GetLastError () returned 0x5 [0182.671] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0182.671] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.671] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_w1\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4f80 [0182.671] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.671] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.671] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.672] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_w1\\WA104381125", dwFileAttributes=0x80) returned 0 [0182.672] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_w1\\WA104381125" (normalized: "c:\\program files\\microsoft office\\root\\office16\\fpa_w1\\wa104381125"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.673] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.673] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.673] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0182.673] FindClose (in: hFindFile=0x665abb4f80 | out: hFindFile=0x665abb4f80) returned 1 [0182.673] SetLastError (dwErrCode=0x0) [0182.673] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_w1\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\fpa_w1\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.673] GetLastError () returned 0x5 [0182.673] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0182.673] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.673] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.673] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.673] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.673] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.673] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.673] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.674] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.674] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.674] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.674] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GRAPH.ICO", dwFileAttributes=0x80) returned 0 [0182.675] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GRAPH.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\graph.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.675] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.675] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.675] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.675] SetLastError (dwErrCode=0x0) [0182.675] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.676] GetLastError () returned 0x5 [0182.676] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0182.676] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.676] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb45c0 [0182.677] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.677] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.677] SetLastError (dwErrCode=0x0) [0182.677] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.678] GetLastError () returned 0x5 [0182.678] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0182.678] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.678] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4a40 [0182.679] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.679] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.679] SetLastError (dwErrCode=0x0) [0182.679] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.679] GetLastError () returned 0x5 [0182.679] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.679] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.679] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb5040 [0182.680] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.680] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.680] SetLastError (dwErrCode=0x0) [0182.680] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\groove.net\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.680] GetLastError () returned 0x5 [0182.680] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.680] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.680] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Components\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb42c0 [0182.681] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.681] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.681] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Components\\SignedComponents.cer", dwFileAttributes=0x80) returned 0 [0182.682] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Components\\SignedComponents.cer" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\groove.net\\components\\signedcomponents.cer"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.682] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.682] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.682] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0182.682] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0182.683] SetLastError (dwErrCode=0x0) [0182.683] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Components\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\groove.net\\components\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.683] GetLastError () returned 0x5 [0182.683] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.683] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.683] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.683] SetLastError (dwErrCode=0x0) [0182.683] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\groove.net\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.683] GetLastError () returned 0x5 [0182.683] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.683] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.683] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\ManagedObjects\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4920 [0182.684] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.684] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.684] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.684] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\ManagedObjects\\SignedManagedObjects.cer", dwFileAttributes=0x80) returned 0 [0182.684] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\ManagedObjects\\SignedManagedObjects.cer" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\groove.net\\managedobjects\\signedmanagedobjects.cer"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.684] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.685] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.685] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0182.685] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0182.685] SetLastError (dwErrCode=0x0) [0182.685] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\ManagedObjects\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\groove.net\\managedobjects\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.685] GetLastError () returned 0x5 [0182.685] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.685] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.685] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.685] SetLastError (dwErrCode=0x0) [0182.685] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\groove.net\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.686] GetLastError () returned 0x5 [0182.686] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.686] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.686] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Servers\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4920 [0182.686] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.686] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.686] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Servers\\Management.cer", dwFileAttributes=0x80) returned 0 [0182.687] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Servers\\Management.cer" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\groove.net\\servers\\management.cer"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.687] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.687] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.687] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.687] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.688] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Servers\\RELAY.CER", dwFileAttributes=0x80) returned 0 [0182.688] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Servers\\RELAY.CER" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\groove.net\\servers\\relay.cer"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.688] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.688] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.688] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0182.689] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0182.689] SetLastError (dwErrCode=0x0) [0182.689] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Servers\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\groove.net\\servers\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.689] GetLastError () returned 0x5 [0182.689] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.689] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.689] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0182.689] FindClose (in: hFindFile=0x665abb5040 | out: hFindFile=0x665abb5040) returned 1 [0182.689] SetLastError (dwErrCode=0x0) [0182.689] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\groove.net\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.689] GetLastError () returned 0x5 [0182.689] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.689] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.690] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.690] SetLastError (dwErrCode=0x0) [0182.690] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.690] GetLastError () returned 0x5 [0182.690] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.690] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.690] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4560 [0182.691] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.691] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.691] SetLastError (dwErrCode=0x0) [0182.691] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\verisign\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.691] GetLastError () returned 0x5 [0182.691] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.691] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.691] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\Components\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb42c0 [0182.693] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.693] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.693] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.693] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Code_Signing_2001-4_CA.cer", dwFileAttributes=0x80) returned 0 [0182.693] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Code_Signing_2001-4_CA.cer" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\verisign\\components\\verisign_class_3_code_signing_2001-4_ca.cer"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.694] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.694] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.694] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.694] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Public_Primary_CA.cer", dwFileAttributes=0x80) returned 0 [0182.694] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Public_Primary_CA.cer" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\verisign\\components\\verisign_class_3_public_primary_ca.cer"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.695] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.695] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.695] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.695] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\Components\\VS_ComponentSigningIntermediate.cer", dwFileAttributes=0x80) returned 0 [0182.695] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\Components\\VS_ComponentSigningIntermediate.cer" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\verisign\\components\\vs_componentsigningintermediate.cer"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.695] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.696] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.696] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0182.696] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0182.696] SetLastError (dwErrCode=0x0) [0182.696] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\Components\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\verisign\\components\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.699] GetLastError () returned 0x5 [0182.699] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.699] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.699] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0182.699] FindClose (in: hFindFile=0x665abb4560 | out: hFindFile=0x665abb4560) returned 1 [0182.699] SetLastError (dwErrCode=0x0) [0182.699] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\verisign\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.699] GetLastError () returned 0x5 [0182.700] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.700] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.700] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0182.700] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0182.700] SetLastError (dwErrCode=0x0) [0182.700] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.700] GetLastError () returned 0x5 [0182.700] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0182.700] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.700] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.700] SetLastError (dwErrCode=0x0) [0182.700] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.700] GetLastError () returned 0x5 [0182.700] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0182.700] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.700] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4f80 [0182.700] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.700] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.701] SetLastError (dwErrCode=0x0) [0182.701] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.701] GetLastError () returned 0x5 [0182.701] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.701] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.701] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4f20 [0182.710] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.710] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.710] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.710] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\COUGH.WAV", dwFileAttributes=0x80) returned 0 [0182.711] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\COUGH.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\people\\cough.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.712] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.712] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.712] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.712] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.712] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\GIGGLE.WAV", dwFileAttributes=0x80) returned 0 [0182.713] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\GIGGLE.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\people\\giggle.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.713] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.713] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.714] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.714] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.714] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\HICCUP.WAV", dwFileAttributes=0x80) returned 0 [0182.714] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\HICCUP.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\people\\hiccup.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.714] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.714] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.715] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.715] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\MMHMM.WAV", dwFileAttributes=0x80) returned 0 [0182.716] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\MMHMM.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\people\\mmhmm.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.716] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.716] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.716] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.716] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.717] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\SNEEZE.WAV", dwFileAttributes=0x80) returned 0 [0182.717] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\SNEEZE.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\people\\sneeze.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.717] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.717] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.718] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.718] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\THROAT.WAV", dwFileAttributes=0x80) returned 0 [0182.719] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\THROAT.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\people\\throat.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.719] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.719] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.719] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.719] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.720] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\Whistling.wav", dwFileAttributes=0x80) returned 0 [0182.720] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\Whistling.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\people\\whistling.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.720] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.720] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.721] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0182.721] FindClose (in: hFindFile=0x665abb4f20 | out: hFindFile=0x665abb4f20) returned 1 [0182.721] SetLastError (dwErrCode=0x0) [0182.721] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\people\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.725] GetLastError () returned 0x5 [0182.725] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.725] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.725] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.725] SetLastError (dwErrCode=0x0) [0182.725] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.725] GetLastError () returned 0x5 [0182.725] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.725] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.725] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4920 [0182.727] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.727] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.727] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.727] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\ALARM.WAV", dwFileAttributes=0x80) returned 0 [0182.728] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\ALARM.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\places\\alarm.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.728] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.728] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.728] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.728] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\BUZZ.WAV", dwFileAttributes=0x80) returned 0 [0182.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\BUZZ.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\places\\buzz.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.729] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.729] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.729] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.729] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\LASER.WAV", dwFileAttributes=0x80) returned 0 [0182.730] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\LASER.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\places\\laser.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.730] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.730] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.730] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.730] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\RADAR.WAV", dwFileAttributes=0x80) returned 0 [0182.732] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\RADAR.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\places\\radar.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.732] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.732] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.732] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.732] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\TOOT.WAV", dwFileAttributes=0x80) returned 0 [0182.734] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\TOOT.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\places\\toot.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.734] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.734] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.734] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.734] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\VIBE.WAV", dwFileAttributes=0x80) returned 0 [0182.735] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\VIBE.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\places\\vibe.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.735] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.735] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.735] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.735] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.736] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\WARN.WAV", dwFileAttributes=0x80) returned 0 [0182.736] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\WARN.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\places\\warn.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.736] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.736] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.737] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0182.737] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0182.737] SetLastError (dwErrCode=0x0) [0182.738] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\places\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.741] GetLastError () returned 0x5 [0182.741] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.741] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.741] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.741] SetLastError (dwErrCode=0x0) [0182.741] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.741] GetLastError () returned 0x5 [0182.741] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.741] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.741] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb57c0 [0182.743] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.743] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.743] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.743] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\CAN.WAV", dwFileAttributes=0x80) returned 0 [0182.744] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\CAN.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\things\\can.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.744] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.744] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.744] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.744] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\COUPLER.WAV", dwFileAttributes=0x80) returned 0 [0182.744] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\COUPLER.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\things\\coupler.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.745] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.745] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.745] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.745] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\HORN.WAV", dwFileAttributes=0x80) returned 0 [0182.745] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\HORN.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\things\\horn.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.745] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.745] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.746] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.746] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\SHOT.WAV", dwFileAttributes=0x80) returned 0 [0182.746] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\SHOT.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\things\\shot.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.746] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.746] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.746] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.747] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.747] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\SHOVEL.WAV", dwFileAttributes=0x80) returned 0 [0182.747] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\SHOVEL.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\things\\shovel.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.747] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.747] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.747] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.747] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.748] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\SPLASH.WAV", dwFileAttributes=0x80) returned 0 [0182.748] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\SPLASH.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\things\\splash.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.748] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.748] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.748] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.748] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\WHOOSH.WAV", dwFileAttributes=0x80) returned 0 [0182.749] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\WHOOSH.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\things\\whoosh.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.749] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.750] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.750] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0182.750] FindClose (in: hFindFile=0x665abb57c0 | out: hFindFile=0x665abb57c0) returned 1 [0182.750] SetLastError (dwErrCode=0x0) [0182.750] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\things\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.753] GetLastError () returned 0x5 [0182.753] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.753] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.753] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0182.753] FindClose (in: hFindFile=0x665abb4f80 | out: hFindFile=0x665abb4f80) returned 1 [0182.753] SetLastError (dwErrCode=0x0) [0182.753] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.753] GetLastError () returned 0x5 [0182.753] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0182.754] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.754] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.754] SetLastError (dwErrCode=0x0) [0182.754] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.754] GetLastError () returned 0x5 [0182.754] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0182.754] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.754] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4920 [0182.755] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.756] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.756] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.756] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\DataListIconImages.jpg", dwFileAttributes=0x80) returned 0 [0182.757] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\DataListIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\datalisticonimages.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.757] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.757] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.757] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.757] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\DataListIconImagesMask.bmp", dwFileAttributes=0x80) returned 0 [0182.758] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\DataListIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\datalisticonimagesmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.758] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.758] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.758] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.758] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\GRIP.JPG", dwFileAttributes=0x80) returned 0 [0182.759] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\GRIP.JPG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\grip.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.759] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.759] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.759] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.759] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\GRIPMASK.BMP", dwFileAttributes=0x80) returned 0 [0182.760] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\GRIPMASK.BMP" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\gripmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.760] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.760] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.761] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.761] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.761] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\InformationIcon.jpg", dwFileAttributes=0x80) returned 0 [0182.761] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\InformationIcon.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\informationicon.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.761] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.761] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.761] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.761] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\InformationIconMask.bmp", dwFileAttributes=0x80) returned 0 [0182.762] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\InformationIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\informationiconmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.762] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.762] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.762] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.762] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\LoginDialogBackground.jpg", dwFileAttributes=0x80) returned 0 [0182.763] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\LoginDialogBackground.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\logindialogbackground.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.763] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.763] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.763] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.763] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.763] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\LoginTool24x24Images.jpg", dwFileAttributes=0x80) returned 0 [0182.763] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\LoginTool24x24Images.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\logintool24x24images.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.764] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.764] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.764] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.764] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\LoginTool24x24ImagesMask.bmp", dwFileAttributes=0x80) returned 0 [0182.765] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\LoginTool24x24ImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\logintool24x24imagesmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.765] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.765] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.765] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.765] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.765] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\MessageAttachmentIconImages.jpg", dwFileAttributes=0x80) returned 0 [0182.766] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\MessageAttachmentIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\messageattachmenticonimages.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.766] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.766] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.767] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.767] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\MessageAttachmentIconImagesMask.bmp", dwFileAttributes=0x80) returned 0 [0182.767] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\MessageAttachmentIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\messageattachmenticonimagesmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.767] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.767] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.767] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.768] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.768] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\MessageHistoryIconImages.jpg", dwFileAttributes=0x80) returned 0 [0182.768] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\MessageHistoryIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\messagehistoryiconimages.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.768] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.768] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.769] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.769] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.769] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\MessageHistoryIconImagesMask.bmp", dwFileAttributes=0x80) returned 0 [0182.770] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\MessageHistoryIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\messagehistoryiconimagesmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.770] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.770] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.770] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.770] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierBackground.jpg", dwFileAttributes=0x80) returned 0 [0182.770] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierBackground.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\notifierbackground.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.771] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.771] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.771] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.771] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.771] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierBackgroundRTL.jpg", dwFileAttributes=0x80) returned 0 [0182.771] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierBackgroundRTL.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\notifierbackgroundrtl.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.772] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.772] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.772] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.772] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.772] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierCloseButton.jpg", dwFileAttributes=0x80) returned 0 [0182.772] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierCloseButton.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\notifierclosebutton.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.772] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.772] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.773] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.773] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierDisableDownArrow.jpg", dwFileAttributes=0x80) returned 0 [0182.773] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierDisableDownArrow.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\notifierdisabledownarrow.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.773] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.773] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.774] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.774] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierDisableUpArrow.jpg", dwFileAttributes=0x80) returned 0 [0182.774] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierDisableUpArrow.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\notifierdisableuparrow.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.774] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.774] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.774] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.774] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.775] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierDownArrow.jpg", dwFileAttributes=0x80) returned 0 [0182.775] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierDownArrow.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\notifierdownarrow.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.775] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.775] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.775] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.775] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierUpArrow.jpg", dwFileAttributes=0x80) returned 0 [0182.776] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierUpArrow.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\notifieruparrow.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.776] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.777] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.777] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.777] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.777] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierWindowMask.bmp", dwFileAttributes=0x80) returned 0 [0182.778] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierWindowMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\notifierwindowmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.778] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.778] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.778] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.778] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.778] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierWindowMaskRTL.bmp", dwFileAttributes=0x80) returned 0 [0182.779] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierWindowMaskRTL.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\notifierwindowmaskrtl.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.779] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.779] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.779] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.779] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.779] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\OutofSyncIconImages.jpg", dwFileAttributes=0x80) returned 0 [0182.779] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\OutofSyncIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\outofsynciconimages.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.780] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.780] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.780] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.780] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\OutofSyncIconImagesMask.bmp", dwFileAttributes=0x80) returned 0 [0182.781] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\OutofSyncIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\outofsynciconimagesmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.781] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.781] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.782] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.782] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\QuestionIcon.jpg", dwFileAttributes=0x80) returned 0 [0182.782] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\QuestionIcon.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\questionicon.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.782] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.782] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.783] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.783] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\QuestionIconMask.bmp", dwFileAttributes=0x80) returned 0 [0182.783] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\QuestionIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\questioniconmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.783] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.783] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.784] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.784] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\Shared16x16Images.jpg", dwFileAttributes=0x80) returned 0 [0182.784] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\Shared16x16Images.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\shared16x16images.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.784] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.784] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.785] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.785] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.785] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\Shared16x16ImagesMask.bmp", dwFileAttributes=0x80) returned 0 [0182.785] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\Shared16x16ImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\shared16x16imagesmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.785] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.785] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.786] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.786] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.786] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\Shared24x24Images.jpg", dwFileAttributes=0x80) returned 0 [0182.786] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\Shared24x24Images.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\shared24x24images.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.786] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.786] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.786] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.786] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.787] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\Shared24x24ImagesMask.bmp", dwFileAttributes=0x80) returned 0 [0182.787] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\Shared24x24ImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\shared24x24imagesmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.788] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.788] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.788] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.788] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\STOPICON.JPG", dwFileAttributes=0x80) returned 0 [0182.789] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\STOPICON.JPG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\stopicon.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.789] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.789] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.789] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.789] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.789] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\StopIconMask.bmp", dwFileAttributes=0x80) returned 0 [0182.790] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\StopIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\stopiconmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.790] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.790] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.790] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.790] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.790] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\TaskbarIconImages256Colors.bmp", dwFileAttributes=0x80) returned 0 [0182.790] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\TaskbarIconImages256Colors.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\taskbariconimages256colors.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.791] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.791] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.791] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.791] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.791] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\TaskbarIconImagesMask256Colors.bmp", dwFileAttributes=0x80) returned 0 [0182.792] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\TaskbarIconImagesMask256Colors.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\taskbariconimagesmask256colors.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.792] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.792] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.792] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.792] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.792] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\TipsImage.jpg", dwFileAttributes=0x80) returned 0 [0182.793] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\TipsImage.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\tipsimage.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.793] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.793] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.793] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.793] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\TipsImageMask.bmp", dwFileAttributes=0x80) returned 0 [0182.793] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\TipsImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\tipsimagemask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.794] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.794] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.794] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.794] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.794] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\VeriSignLogo.jpg", dwFileAttributes=0x80) returned 0 [0182.794] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\VeriSignLogo.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\verisignlogo.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.794] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.794] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.795] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0182.795] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0182.796] SetLastError (dwErrCode=0x0) [0182.796] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.799] GetLastError () returned 0x5 [0182.799] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0182.799] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.799] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.799] SetLastError (dwErrCode=0x0) [0182.799] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.799] GetLastError () returned 0x5 [0182.799] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0182.799] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.799] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4920 [0182.799] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.799] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.799] SetLastError (dwErrCode=0x0) [0182.799] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.799] GetLastError () returned 0x5 [0182.799] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.799] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.800] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb49e0 [0182.800] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.800] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.800] SetLastError (dwErrCode=0x0) [0182.800] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.800] GetLastError () returned 0x5 [0182.800] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.800] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.800] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb56a0 [0182.801] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.802] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.802] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Auto.jpg", dwFileAttributes=0x80) returned 0 [0182.803] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Auto.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\alertimage_auto.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.803] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.803] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.803] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.803] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.804] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_AutoMask.bmp", dwFileAttributes=0x80) returned 0 [0182.804] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_AutoMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\alertimage_automask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.804] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.804] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.804] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.804] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHigh.jpg", dwFileAttributes=0x80) returned 0 [0182.805] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHigh.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\alertimage_contacthigh.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.806] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.806] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.806] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.806] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHighMask.bmp", dwFileAttributes=0x80) returned 0 [0182.807] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHighMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\alertimage_contacthighmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.807] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.807] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.807] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.807] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLow.jpg", dwFileAttributes=0x80) returned 0 [0182.808] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLow.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\alertimage_contactlow.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.808] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.808] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.808] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.808] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.809] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLowMask.bmp", dwFileAttributes=0x80) returned 0 [0182.809] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLowMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\alertimage_contactlowmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.810] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.810] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.810] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.810] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.810] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHigh.jpg", dwFileAttributes=0x80) returned 0 [0182.810] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHigh.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\alertimage_filehigh.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.810] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.811] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.811] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.811] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.811] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHighMask.bmp", dwFileAttributes=0x80) returned 0 [0182.811] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHighMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\alertimage_filehighmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.812] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.812] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.812] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.812] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.812] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOff.jpg", dwFileAttributes=0x80) returned 0 [0182.812] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOff.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\alertimage_fileoff.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.812] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.812] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.813] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.813] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.813] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOffMask.bmp", dwFileAttributes=0x80) returned 0 [0182.813] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOffMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\alertimage_fileoffmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.813] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.813] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.814] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.814] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_High.jpg", dwFileAttributes=0x80) returned 0 [0182.814] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_High.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\alertimage_high.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.814] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.814] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.815] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.815] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_HighMask.bmp", dwFileAttributes=0x80) returned 0 [0182.815] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_HighMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\alertimage_highmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.815] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.815] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.816] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.816] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Medium.jpg", dwFileAttributes=0x80) returned 0 [0182.817] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Medium.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\alertimage_medium.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.817] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.817] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.817] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.817] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_MediumMAsk.bmp", dwFileAttributes=0x80) returned 0 [0182.818] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_MediumMAsk.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\alertimage_mediummask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.818] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.818] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.819] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.819] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Off.jpg", dwFileAttributes=0x80) returned 0 [0182.819] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Off.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\alertimage_off.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.819] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.819] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.819] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.819] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.820] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_OffMask.bmp", dwFileAttributes=0x80) returned 0 [0182.820] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_OffMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\alertimage_offmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.820] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.820] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.820] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.820] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImage.jpg", dwFileAttributes=0x80) returned 0 [0182.821] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImage.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\commsincomingimage.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.821] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.821] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.821] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.821] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMask.bmp", dwFileAttributes=0x80) returned 0 [0182.822] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagemask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.822] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.822] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.822] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.822] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.822] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMaskSmall.bmp", dwFileAttributes=0x80) returned 0 [0182.822] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMaskSmall.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagemasksmall.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.823] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.823] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.823] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.823] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.823] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageSmall.jpg", dwFileAttributes=0x80) returned 0 [0182.823] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageSmall.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagesmall.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.823] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.824] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.824] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.824] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.824] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImage.jpg", dwFileAttributes=0x80) returned 0 [0182.824] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImage.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimage.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.824] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.824] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.825] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.825] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.825] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMask.bmp", dwFileAttributes=0x80) returned 0 [0182.825] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagemask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.825] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.825] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.825] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.826] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMaskSmall.bmp", dwFileAttributes=0x80) returned 0 [0182.826] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMaskSmall.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagemasksmall.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.827] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.827] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.827] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.827] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.827] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageSmall.jpg", dwFileAttributes=0x80) returned 0 [0182.827] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageSmall.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagesmall.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.828] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.828] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.828] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.828] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.828] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImages.jpg", dwFileAttributes=0x80) returned 0 [0182.828] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\messageboxiconimages.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.829] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.829] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.829] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.829] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImagesMask.bmp", dwFileAttributes=0x80) returned 0 [0182.830] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\messageboxiconimagesmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.830] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.830] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.830] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.830] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIcon.jpg", dwFileAttributes=0x80) returned 0 [0182.831] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIcon.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\unreadicon.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.831] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.831] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.831] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.831] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImages.jpg", dwFileAttributes=0x80) returned 0 [0182.831] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\unreadiconimages.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.832] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.832] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.832] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.832] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImagesMask.bmp", dwFileAttributes=0x80) returned 0 [0182.832] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\unreadiconimagesmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.833] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.833] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.833] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0182.833] FindClose (in: hFindFile=0x665abb56a0 | out: hFindFile=0x665abb56a0) returned 1 [0182.833] SetLastError (dwErrCode=0x0) [0182.833] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.836] GetLastError () returned 0x5 [0182.836] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.836] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.836] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0182.836] SetLastError (dwErrCode=0x0) [0182.836] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.836] GetLastError () returned 0x5 [0182.837] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.837] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.837] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\Computers\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4c20 [0182.837] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.837] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.837] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\Computers\\computericon.jpg", dwFileAttributes=0x80) returned 0 [0182.837] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\Computers\\computericon.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\computers\\computericon.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.837] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.837] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.838] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0182.838] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\Computers\\computericonMask.bmp", dwFileAttributes=0x80) returned 0 [0182.838] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\Computers\\computericonMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\computers\\computericonmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.838] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.838] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.839] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0182.839] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0182.839] SetLastError (dwErrCode=0x0) [0182.839] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\Computers\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\computers\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.839] GetLastError () returned 0x5 [0182.839] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0182.839] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.839] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0182.839] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0182.839] SetLastError (dwErrCode=0x0) [0182.839] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.839] GetLastError () returned 0x5 [0182.839] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0182.839] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.839] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0182.839] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0182.840] SetLastError (dwErrCode=0x0) [0182.840] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.840] GetLastError () returned 0x5 [0182.840] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0182.840] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.840] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.840] SetLastError (dwErrCode=0x0) [0182.840] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.840] GetLastError () returned 0x5 [0182.840] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0182.840] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.840] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4a40 [0182.841] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.842] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.842] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\ALERT.ICO", dwFileAttributes=0x80) returned 0 [0182.843] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\ALERT.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\alert.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.843] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.843] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.844] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.844] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\CHEVRON.ICO", dwFileAttributes=0x80) returned 0 [0182.845] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\CHEVRON.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\chevron.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.845] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.845] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.845] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.845] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\COMPUTER.ICO", dwFileAttributes=0x80) returned 0 [0182.846] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\COMPUTER.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\computer.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.846] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.846] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.846] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.846] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\ContactSelector.ico", dwFileAttributes=0x80) returned 0 [0182.847] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\ContactSelector.ico" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\contactselector.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.847] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.847] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.848] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.848] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\GWE.ICO", dwFileAttributes=0x80) returned 0 [0182.848] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\GWE.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\gwe.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.849] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.849] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.849] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.849] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.849] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\INCOMING.ICO", dwFileAttributes=0x80) returned 0 [0182.850] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\INCOMING.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\incoming.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.850] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.850] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.850] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.850] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.850] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\INDOMAIN.ICO", dwFileAttributes=0x80) returned 0 [0182.851] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\INDOMAIN.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\indomain.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.851] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.851] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.852] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.852] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\MAIL.ICO", dwFileAttributes=0x80) returned 0 [0182.852] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\MAIL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\mail.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.852] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.852] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.852] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.852] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\MANUAL.ICO", dwFileAttributes=0x80) returned 0 [0182.853] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\MANUAL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\manual.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.853] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.854] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.854] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.854] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\messageboxalert.ico", dwFileAttributes=0x80) returned 0 [0182.855] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\messageboxalert.ico" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\messageboxalert.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.855] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.855] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.855] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.855] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\messageboxerror.ico", dwFileAttributes=0x80) returned 0 [0182.856] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\messageboxerror.ico" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\messageboxerror.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.856] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.856] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.856] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.856] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\messageboxinfo.ico", dwFileAttributes=0x80) returned 0 [0182.857] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\messageboxinfo.ico" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\messageboxinfo.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.858] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.858] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.858] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.858] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\ModifiedTelespace.ico", dwFileAttributes=0x80) returned 0 [0182.859] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\ModifiedTelespace.ico" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\modifiedtelespace.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.859] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.859] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.859] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.859] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\OFFLINE.ICO", dwFileAttributes=0x80) returned 0 [0182.860] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\OFFLINE.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\offline.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.860] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.860] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.860] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.860] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\ONLINE.ICO", dwFileAttributes=0x80) returned 0 [0182.861] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\ONLINE.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\online.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.861] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.861] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.862] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.862] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\OnLineBusy.ico", dwFileAttributes=0x80) returned 0 [0182.862] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\OnLineBusy.ico" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\onlinebusy.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.862] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.862] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.862] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.862] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.863] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\OnLineIdle.ico", dwFileAttributes=0x80) returned 0 [0182.863] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\OnLineIdle.ico" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\onlineidle.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.863] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.863] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.864] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.864] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.864] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\OutDomain.ico", dwFileAttributes=0x80) returned 0 [0182.864] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\OutDomain.ico" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\outdomain.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.864] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.864] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.865] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.865] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.865] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\OUTGOING.ICO", dwFileAttributes=0x80) returned 0 [0182.865] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\OUTGOING.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\outgoing.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.866] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.866] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.866] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.866] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.866] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\OutSyncPC.ico", dwFileAttributes=0x80) returned 0 [0182.867] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\OutSyncPC.ico" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\outsyncpc.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.867] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.867] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.867] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.867] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\PersonalContact.ico", dwFileAttributes=0x80) returned 0 [0182.868] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\PersonalContact.ico" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\personalcontact.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.868] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.868] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.868] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.868] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\SessionMember.ico", dwFileAttributes=0x80) returned 0 [0182.869] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\SessionMember.ico" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\sessionmember.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.869] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.870] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.870] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.870] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.870] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\SessionOwner.ico", dwFileAttributes=0x80) returned 0 [0182.871] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\SessionOwner.ico" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\sessionowner.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.871] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.871] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.871] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.871] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.871] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\SpaceSelector.ico", dwFileAttributes=0x80) returned 0 [0182.872] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\SpaceSelector.ico" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\spaceselector.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.872] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.872] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.872] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.872] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\StatusAway.ico", dwFileAttributes=0x80) returned 0 [0182.873] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\StatusAway.ico" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\statusaway.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.873] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.873] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.873] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.874] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\StatusDoNotDisturb.ico", dwFileAttributes=0x80) returned 0 [0182.875] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\StatusDoNotDisturb.ico" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\statusdonotdisturb.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.875] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.875] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.875] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.875] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\StatusOnline.ico", dwFileAttributes=0x80) returned 0 [0182.876] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\StatusOnline.ico" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\statusonline.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.876] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.876] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.876] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.876] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\TOOLICON.ICO", dwFileAttributes=0x80) returned 0 [0182.877] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\TOOLICON.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\toolicon.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.877] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.877] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.878] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.878] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\WSS.ICO", dwFileAttributes=0x80) returned 0 [0182.878] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\WSS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\wss.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.878] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.878] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.878] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.878] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\WSS_DocLib.ico", dwFileAttributes=0x80) returned 0 [0182.880] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\WSS_DocLib.ico" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\wss_doclib.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.880] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.880] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.880] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0182.881] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0182.881] SetLastError (dwErrCode=0x0) [0182.881] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.884] GetLastError () returned 0x5 [0182.884] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0182.884] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.884] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0182.884] FindClose (in: hFindFile=0x665abb45c0 | out: hFindFile=0x665abb45c0) returned 1 [0182.884] SetLastError (dwErrCode=0x0) [0182.884] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.884] GetLastError () returned 0x5 [0182.884] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0182.884] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.884] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.884] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.884] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GROOVE.VisualElementsManifest.xml", dwFileAttributes=0x80) returned 0 [0182.885] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GROOVE.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove.visualelementsmanifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.885] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.885] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.885] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.885] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.885] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\HeaderPatterns.xml", dwFileAttributes=0x80) returned 0 [0182.886] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\HeaderPatterns.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\headerpatterns.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.887] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.887] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.887] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.887] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.887] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.887] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.887] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.887] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.887] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\IMDIMP.ADD", dwFileAttributes=0x80) returned 0 [0182.888] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\IMDIMP.ADD" (normalized: "c:\\program files\\microsoft office\\root\\office16\\imdimp.add"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.888] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.888] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.888] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.888] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.888] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.888] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.888] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Installed_resources16.xss", dwFileAttributes=0x80) returned 0 [0182.889] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Installed_resources16.xss" (normalized: "c:\\program files\\microsoft office\\root\\office16\\installed_resources16.xss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.889] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.889] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.890] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.890] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Installed_schemas16.xss", dwFileAttributes=0x80) returned 0 [0182.890] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Installed_schemas16.xss" (normalized: "c:\\program files\\microsoft office\\root\\office16\\installed_schemas16.xss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.890] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.890] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.890] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.890] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.890] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Interceptor.tlb", dwFileAttributes=0x80) returned 0 [0182.891] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Interceptor.tlb" (normalized: "c:\\program files\\microsoft office\\root\\office16\\interceptor.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.891] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.891] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.891] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.891] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.891] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.891] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\IXGENERC.PDL", dwFileAttributes=0x80) returned 0 [0182.892] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\IXGENERC.PDL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ixgenerc.pdl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.892] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.892] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.892] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.892] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\IXORACLE.PDL", dwFileAttributes=0x80) returned 0 [0182.893] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\IXORACLE.PDL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ixoracle.pdl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.893] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.893] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.894] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.894] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\IXSSRV.PDL", dwFileAttributes=0x80) returned 0 [0182.895] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\IXSSRV.PDL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ixssrv.pdl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.895] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.895] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.896] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.896] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.896] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.896] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.896] SetLastError (dwErrCode=0x0) [0182.896] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.896] GetLastError () returned 0x5 [0182.896] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0182.896] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.896] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4a40 [0182.896] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.896] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.896] SetLastError (dwErrCode=0x0) [0182.896] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\library\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.897] GetLastError () returned 0x5 [0182.897] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0182.897] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.897] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\Analysis\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4c20 [0182.899] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.899] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.899] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\Analysis\\ANALYS32.XLL", dwFileAttributes=0x80) returned 0 [0182.900] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\Analysis\\ANALYS32.XLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\library\\analysis\\analys32.xll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.900] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.900] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.900] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.900] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\Analysis\\ATPVBAEN.XLAM", dwFileAttributes=0x80) returned 0 [0182.901] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\Analysis\\ATPVBAEN.XLAM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\library\\analysis\\atpvbaen.xlam"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.901] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.902] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.902] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.902] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\Analysis\\FUNCRES.XLAM", dwFileAttributes=0x80) returned 0 [0182.902] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\Analysis\\FUNCRES.XLAM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\library\\analysis\\funcres.xlam"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.903] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.903] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.903] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.903] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.903] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\Analysis\\PROCDB.XLAM", dwFileAttributes=0x80) returned 0 [0182.903] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\Analysis\\PROCDB.XLAM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\library\\analysis\\procdb.xlam"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.903] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.903] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.904] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0182.904] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0182.904] SetLastError (dwErrCode=0x0) [0182.904] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\Analysis\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\library\\analysis\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.907] GetLastError () returned 0x5 [0182.907] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0182.907] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.907] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.907] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.908] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\EUROTOOL.XLAM", dwFileAttributes=0x80) returned 0 [0182.908] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\EUROTOOL.XLAM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\library\\eurotool.xlam"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.909] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.909] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.909] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.909] SetLastError (dwErrCode=0x0) [0182.909] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\library\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.909] GetLastError () returned 0x5 [0182.909] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0182.909] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.909] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\SOLVER\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4920 [0182.910] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.910] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.910] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.910] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\SOLVER\\SOLVER.XLAM", dwFileAttributes=0x80) returned 0 [0182.910] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\SOLVER\\SOLVER.XLAM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\library\\solver\\solver.xlam"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.911] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.911] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.911] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0182.911] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0182.911] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0182.911] SetLastError (dwErrCode=0x0) [0182.911] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\SOLVER\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\library\\solver\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.911] GetLastError () returned 0x5 [0182.911] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0182.911] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.911] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0182.911] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0182.911] SetLastError (dwErrCode=0x0) [0182.911] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\library\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.912] GetLastError () returned 0x5 [0182.912] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0182.912] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.912] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.912] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.913] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.913] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LOGMODEL.MDL", dwFileAttributes=0x80) returned 0 [0182.914] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LOGMODEL.MDL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logmodel.mdl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.914] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.914] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.914] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0182.914] SetLastError (dwErrCode=0x0) [0182.914] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.914] GetLastError () returned 0x5 [0182.914] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0182.914] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.914] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4f80 [0182.916] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.920] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.920] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.921] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-100.png", dwFileAttributes=0x80) returned 0 [0182.921] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.contrast-black_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.921] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.921] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.921] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.921] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.922] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-140.png", dwFileAttributes=0x80) returned 0 [0182.922] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.contrast-black_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.922] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.922] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.922] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.922] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.922] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-180.png", dwFileAttributes=0x80) returned 0 [0182.923] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.923] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.923] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.923] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.923] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.923] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-80.png", dwFileAttributes=0x80) returned 0 [0182.923] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.contrast-black_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.924] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.924] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.924] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.924] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.924] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-100.png", dwFileAttributes=0x80) returned 0 [0182.924] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.contrast-white_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.924] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.924] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.925] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.925] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.925] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-140.png", dwFileAttributes=0x80) returned 0 [0182.925] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.contrast-white_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.925] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.925] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.926] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.926] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.926] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-180.png", dwFileAttributes=0x80) returned 0 [0182.926] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.926] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.926] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.926] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.926] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.927] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-80.png", dwFileAttributes=0x80) returned 0 [0182.927] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.contrast-white_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.927] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.927] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.927] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.927] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.927] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-100.png", dwFileAttributes=0x80) returned 0 [0182.928] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.928] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.928] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.928] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.928] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.928] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-140.png", dwFileAttributes=0x80) returned 0 [0182.929] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.929] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.929] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.929] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.929] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.929] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-180.png", dwFileAttributes=0x80) returned 0 [0182.929] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.930] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.930] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.930] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.930] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.930] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-80.png", dwFileAttributes=0x80) returned 0 [0182.930] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.931] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.931] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.931] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.931] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.931] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-100.png", dwFileAttributes=0x80) returned 0 [0182.931] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-black_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.931] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.931] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.932] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.932] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.932] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-140.png", dwFileAttributes=0x80) returned 0 [0182.932] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-black_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.932] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.932] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.933] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.933] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.933] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-180.png", dwFileAttributes=0x80) returned 0 [0182.933] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.933] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.933] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.933] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.933] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.934] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-80.png", dwFileAttributes=0x80) returned 0 [0182.934] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-black_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.934] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.934] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.934] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.934] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.935] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-100.png", dwFileAttributes=0x80) returned 0 [0182.935] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-white_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.935] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.935] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.935] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.935] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.935] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-140.png", dwFileAttributes=0x80) returned 0 [0182.936] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-white_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.936] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.936] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.936] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.936] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.937] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-180.png", dwFileAttributes=0x80) returned 0 [0182.937] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.937] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.937] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.937] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.937] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.938] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-80.png", dwFileAttributes=0x80) returned 0 [0182.938] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-white_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.938] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.938] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.938] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.938] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.938] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-100.png", dwFileAttributes=0x80) returned 0 [0182.939] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.939] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.939] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.939] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.939] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-140.png", dwFileAttributes=0x80) returned 0 [0182.939] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.940] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.940] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.940] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.940] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.940] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-180.png", dwFileAttributes=0x80) returned 0 [0182.941] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.941] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.941] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.941] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.945] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.945] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-80.png", dwFileAttributes=0x80) returned 0 [0182.945] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.945] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.945] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.946] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.946] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-100.png", dwFileAttributes=0x80) returned 0 [0182.946] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-black_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.946] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.946] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.947] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.947] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.947] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-140.png", dwFileAttributes=0x80) returned 0 [0182.947] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-black_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.947] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.947] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.947] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.947] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.948] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-180.png", dwFileAttributes=0x80) returned 0 [0182.948] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.948] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.948] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.948] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.948] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-80.png", dwFileAttributes=0x80) returned 0 [0182.949] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-black_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.949] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.949] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.949] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.949] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-100.png", dwFileAttributes=0x80) returned 0 [0182.950] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-white_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.950] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.950] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.950] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.950] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.950] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-140.png", dwFileAttributes=0x80) returned 0 [0182.950] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-white_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.951] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.951] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.951] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.951] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.951] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-180.png", dwFileAttributes=0x80) returned 0 [0182.951] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.952] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.952] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.952] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.952] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.952] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-80.png", dwFileAttributes=0x80) returned 0 [0182.952] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-white_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.953] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.953] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.953] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.953] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.953] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-100.png", dwFileAttributes=0x80) returned 0 [0182.953] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.954] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.954] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.954] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.954] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.954] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-140.png", dwFileAttributes=0x80) returned 0 [0182.954] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.954] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.954] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.955] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.955] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.955] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-180.png", dwFileAttributes=0x80) returned 0 [0182.955] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.955] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.955] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.956] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.956] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.956] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-80.png", dwFileAttributes=0x80) returned 0 [0182.956] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.956] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.956] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.956] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.956] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.957] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-100.png", dwFileAttributes=0x80) returned 0 [0182.957] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-black_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.957] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.957] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.957] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.957] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.957] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-140.png", dwFileAttributes=0x80) returned 0 [0182.958] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-black_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.958] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.958] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.958] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.958] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.958] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-180.png", dwFileAttributes=0x80) returned 0 [0182.958] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.959] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.959] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.959] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.959] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.959] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-80.png", dwFileAttributes=0x80) returned 0 [0182.959] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-black_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.960] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.960] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.960] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.960] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.960] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-100.png", dwFileAttributes=0x80) returned 0 [0182.960] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-white_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.960] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.960] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.961] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.961] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.961] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-140.png", dwFileAttributes=0x80) returned 0 [0182.961] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-white_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.961] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.961] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.961] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.961] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-180.png", dwFileAttributes=0x80) returned 0 [0182.962] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.962] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.962] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.962] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.962] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-80.png", dwFileAttributes=0x80) returned 0 [0182.963] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-white_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.963] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.963] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.963] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.963] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.963] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-100.png", dwFileAttributes=0x80) returned 0 [0182.964] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.964] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.964] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.964] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.964] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.964] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-140.png", dwFileAttributes=0x80) returned 0 [0182.964] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.965] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.965] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.965] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.970] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-180.png", dwFileAttributes=0x80) returned 0 [0182.971] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.971] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.971] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.971] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.971] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.971] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-80.png", dwFileAttributes=0x80) returned 0 [0182.971] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.972] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.972] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.972] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.972] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.972] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-100.png", dwFileAttributes=0x80) returned 0 [0182.972] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-black_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.972] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.972] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.973] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.973] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-140.png", dwFileAttributes=0x80) returned 0 [0182.973] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-black_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.973] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.973] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.973] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.973] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.974] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-180.png", dwFileAttributes=0x80) returned 0 [0182.974] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.974] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.974] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.974] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.974] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-80.png", dwFileAttributes=0x80) returned 0 [0182.975] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-black_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.975] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.975] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.975] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.975] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-100.png", dwFileAttributes=0x80) returned 0 [0182.976] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-white_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.976] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.976] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.976] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.976] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-140.png", dwFileAttributes=0x80) returned 0 [0182.976] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-white_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.977] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.977] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.977] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.977] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-180.png", dwFileAttributes=0x80) returned 0 [0182.977] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.977] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.977] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.978] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.978] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-80.png", dwFileAttributes=0x80) returned 0 [0182.978] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-white_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.978] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.978] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.978] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.979] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-100.png", dwFileAttributes=0x80) returned 0 [0182.979] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.979] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.979] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.979] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.979] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.980] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-140.png", dwFileAttributes=0x80) returned 0 [0182.980] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.980] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.980] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.980] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.980] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.980] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-180.png", dwFileAttributes=0x80) returned 0 [0182.981] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.981] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.981] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.981] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.981] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.981] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-80.png", dwFileAttributes=0x80) returned 0 [0182.981] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.982] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.982] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.982] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.982] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.982] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-100.png", dwFileAttributes=0x80) returned 0 [0182.982] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-black_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.982] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.983] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.983] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.983] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.984] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-140.png", dwFileAttributes=0x80) returned 0 [0182.984] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-black_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.985] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.985] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.985] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.985] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.985] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-180.png", dwFileAttributes=0x80) returned 0 [0182.985] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.986] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.986] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.986] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.986] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.986] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-80.png", dwFileAttributes=0x80) returned 0 [0182.986] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-black_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.986] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.986] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.987] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.987] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-100.png", dwFileAttributes=0x80) returned 0 [0182.987] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-white_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.987] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.987] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.987] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.988] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-140.png", dwFileAttributes=0x80) returned 0 [0182.988] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-white_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.989] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.989] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.989] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.989] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.989] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-180.png", dwFileAttributes=0x80) returned 0 [0182.989] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.990] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.990] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.990] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.990] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-80.png", dwFileAttributes=0x80) returned 0 [0182.990] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-white_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.990] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.990] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.991] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.991] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.991] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-100.png", dwFileAttributes=0x80) returned 0 [0182.991] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.991] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.991] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.992] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.992] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-140.png", dwFileAttributes=0x80) returned 0 [0182.993] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.993] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.993] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.994] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.998] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0182.999] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-180.png", dwFileAttributes=0x80) returned 0 [0182.999] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.999] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0182.999] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.999] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0182.999] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.000] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-80.png", dwFileAttributes=0x80) returned 0 [0183.000] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.000] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.000] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.000] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.000] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.000] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-100.png", dwFileAttributes=0x80) returned 0 [0183.001] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-black_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.001] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.001] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.001] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.001] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.001] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-140.png", dwFileAttributes=0x80) returned 0 [0183.002] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-black_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.002] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.002] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.002] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.002] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-180.png", dwFileAttributes=0x80) returned 0 [0183.002] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.003] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.003] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.003] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.003] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.003] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-80.png", dwFileAttributes=0x80) returned 0 [0183.003] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-black_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.004] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.004] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.004] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.004] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.004] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-100.png", dwFileAttributes=0x80) returned 0 [0183.004] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-white_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.004] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.005] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.005] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.005] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.005] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-140.png", dwFileAttributes=0x80) returned 0 [0183.005] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-white_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.005] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.005] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.006] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.006] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.006] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-180.png", dwFileAttributes=0x80) returned 0 [0183.006] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.006] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.006] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.006] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.006] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.007] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-80.png", dwFileAttributes=0x80) returned 0 [0183.007] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-white_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.007] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.007] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.007] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.007] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.008] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-100.png", dwFileAttributes=0x80) returned 0 [0183.008] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.008] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.008] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.008] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.008] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.008] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-140.png", dwFileAttributes=0x80) returned 0 [0183.009] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.009] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.009] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.009] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.009] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.009] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-180.png", dwFileAttributes=0x80) returned 0 [0183.010] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.010] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.010] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.010] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.010] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.010] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-80.png", dwFileAttributes=0x80) returned 0 [0183.010] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.011] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.011] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.011] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.011] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.011] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-100.png", dwFileAttributes=0x80) returned 0 [0183.011] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-black_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.011] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.011] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.012] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.012] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-140.png", dwFileAttributes=0x80) returned 0 [0183.012] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-black_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.012] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.012] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.013] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.013] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.013] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-180.png", dwFileAttributes=0x80) returned 0 [0183.013] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.013] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.013] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.013] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.013] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.014] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-80.png", dwFileAttributes=0x80) returned 0 [0183.014] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-black_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.014] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.014] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.015] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.015] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.015] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-100.png", dwFileAttributes=0x80) returned 0 [0183.015] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-white_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.015] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.015] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.016] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.016] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.016] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-140.png", dwFileAttributes=0x80) returned 0 [0183.016] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-white_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.017] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.017] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.017] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.017] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-180.png", dwFileAttributes=0x80) returned 0 [0183.017] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.017] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.017] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.018] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.018] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.018] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-80.png", dwFileAttributes=0x80) returned 0 [0183.018] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-white_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.018] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.018] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.018] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.019] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.019] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-100.png", dwFileAttributes=0x80) returned 0 [0183.019] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.019] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.019] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.019] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.023] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.024] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-140.png", dwFileAttributes=0x80) returned 0 [0183.024] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.024] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.024] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.024] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.024] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.025] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-180.png", dwFileAttributes=0x80) returned 0 [0183.025] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.025] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.025] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.025] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.025] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.025] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-80.png", dwFileAttributes=0x80) returned 0 [0183.026] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.026] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.026] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.026] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.026] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.026] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-100.png", dwFileAttributes=0x80) returned 0 [0183.026] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-black_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.027] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.027] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.027] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.027] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.027] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-140.png", dwFileAttributes=0x80) returned 0 [0183.027] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-black_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.027] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.027] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.028] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.028] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.028] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-180.png", dwFileAttributes=0x80) returned 0 [0183.028] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.028] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.028] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.029] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.029] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.029] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-80.png", dwFileAttributes=0x80) returned 0 [0183.029] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-black_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.029] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.029] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.029] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.029] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.030] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-100.png", dwFileAttributes=0x80) returned 0 [0183.030] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-white_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.031] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.031] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.031] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.031] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.031] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-140.png", dwFileAttributes=0x80) returned 0 [0183.031] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-white_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.032] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.032] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.032] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.032] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.032] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-180.png", dwFileAttributes=0x80) returned 0 [0183.032] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.032] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.032] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.033] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.033] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-80.png", dwFileAttributes=0x80) returned 0 [0183.033] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-white_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.033] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.033] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.033] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.033] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.034] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-100.png", dwFileAttributes=0x80) returned 0 [0183.034] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.034] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.034] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.034] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.034] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.035] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-140.png", dwFileAttributes=0x80) returned 0 [0183.035] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.035] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.035] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.035] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.035] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.035] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-180.png", dwFileAttributes=0x80) returned 0 [0183.036] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.036] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.036] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.036] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.036] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.036] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-80.png", dwFileAttributes=0x80) returned 0 [0183.036] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.037] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.037] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.037] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.037] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.037] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-100.png", dwFileAttributes=0x80) returned 0 [0183.037] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-black_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.037] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.037] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.038] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.038] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.038] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-140.png", dwFileAttributes=0x80) returned 0 [0183.038] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-black_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.038] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.038] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.038] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.038] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.039] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-180.png", dwFileAttributes=0x80) returned 0 [0183.039] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.039] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.039] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.039] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.039] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.040] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-80.png", dwFileAttributes=0x80) returned 0 [0183.040] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-black_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.040] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.040] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.040] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.040] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.040] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-100.png", dwFileAttributes=0x80) returned 0 [0183.041] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-white_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.041] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.041] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.041] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.041] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.041] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-140.png", dwFileAttributes=0x80) returned 0 [0183.041] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-white_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.042] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.042] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.042] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.042] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.042] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-180.png", dwFileAttributes=0x80) returned 0 [0183.042] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.043] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.043] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.043] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.043] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.043] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-80.png", dwFileAttributes=0x80) returned 0 [0183.043] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-white_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.043] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.043] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.044] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.044] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.044] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-100.png", dwFileAttributes=0x80) returned 0 [0183.044] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.044] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.044] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.044] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.049] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.049] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-140.png", dwFileAttributes=0x80) returned 0 [0183.049] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.050] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.050] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.050] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.050] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.050] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-180.png", dwFileAttributes=0x80) returned 0 [0183.050] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.050] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.050] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.051] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.051] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.051] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-80.png", dwFileAttributes=0x80) returned 0 [0183.051] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.051] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.051] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.051] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.052] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.052] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-100.png", dwFileAttributes=0x80) returned 0 [0183.052] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-black_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.052] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.052] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.052] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.052] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.053] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-140.png", dwFileAttributes=0x80) returned 0 [0183.053] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-black_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.053] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.053] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.054] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.054] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.054] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-180.png", dwFileAttributes=0x80) returned 0 [0183.054] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.054] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.054] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.055] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.055] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.055] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-80.png", dwFileAttributes=0x80) returned 0 [0183.055] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-black_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.055] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.055] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.056] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.056] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.056] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-100.png", dwFileAttributes=0x80) returned 0 [0183.056] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-white_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.056] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.056] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.057] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.057] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.057] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-140.png", dwFileAttributes=0x80) returned 0 [0183.057] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-white_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.057] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.057] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.058] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.058] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.058] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-180.png", dwFileAttributes=0x80) returned 0 [0183.058] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.058] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.058] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.059] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.059] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.059] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-80.png", dwFileAttributes=0x80) returned 0 [0183.059] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-white_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.059] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.059] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.059] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.059] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.060] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-100.png", dwFileAttributes=0x80) returned 0 [0183.060] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.060] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.060] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.060] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.060] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.061] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-140.png", dwFileAttributes=0x80) returned 0 [0183.061] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.061] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.061] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.061] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.061] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.062] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-180.png", dwFileAttributes=0x80) returned 0 [0183.062] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.062] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.062] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.062] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.062] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.063] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-80.png", dwFileAttributes=0x80) returned 0 [0183.063] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.063] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.063] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.063] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.063] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.063] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-100.png", dwFileAttributes=0x80) returned 0 [0183.064] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-black_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.064] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.064] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.064] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.064] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.064] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-140.png", dwFileAttributes=0x80) returned 0 [0183.064] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-black_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.065] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.065] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.065] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.065] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.065] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-180.png", dwFileAttributes=0x80) returned 0 [0183.065] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.065] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.066] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.066] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.066] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.066] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-80.png", dwFileAttributes=0x80) returned 0 [0183.066] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-black_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.066] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.066] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.067] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.067] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.067] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-100.png", dwFileAttributes=0x80) returned 0 [0183.067] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-white_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.067] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.067] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.067] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.068] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.068] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-140.png", dwFileAttributes=0x80) returned 0 [0183.068] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-white_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.068] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.068] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.068] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.068] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.069] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-180.png", dwFileAttributes=0x80) returned 0 [0183.069] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.069] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.069] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.069] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.069] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.070] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-80.png", dwFileAttributes=0x80) returned 0 [0183.070] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-white_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.070] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.070] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.070] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.070] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.070] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-100.png", dwFileAttributes=0x80) returned 0 [0183.071] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.071] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.071] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.071] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.074] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.074] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-140.png", dwFileAttributes=0x80) returned 0 [0183.075] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.075] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.075] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.075] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.075] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.075] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-180.png", dwFileAttributes=0x80) returned 0 [0183.076] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.076] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.076] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.076] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.076] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.076] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-80.png", dwFileAttributes=0x80) returned 0 [0183.076] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.077] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.077] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.077] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.077] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.077] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-100.png", dwFileAttributes=0x80) returned 0 [0183.077] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-black_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.078] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.078] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.078] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.078] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.078] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-140.png", dwFileAttributes=0x80) returned 0 [0183.078] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-black_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.078] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.079] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.079] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.079] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.079] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-180.png", dwFileAttributes=0x80) returned 0 [0183.079] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.079] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.080] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.080] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.080] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.080] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-80.png", dwFileAttributes=0x80) returned 0 [0183.080] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-black_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.081] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.081] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.081] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.081] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.081] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-100.png", dwFileAttributes=0x80) returned 0 [0183.082] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-white_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.082] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.082] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.082] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.082] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.082] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-140.png", dwFileAttributes=0x80) returned 0 [0183.082] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-white_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.083] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.083] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.083] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.083] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.083] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-180.png", dwFileAttributes=0x80) returned 0 [0183.083] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.083] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.083] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.084] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.084] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.084] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-80.png", dwFileAttributes=0x80) returned 0 [0183.084] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-white_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.084] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.084] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.085] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.085] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.085] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-100.png", dwFileAttributes=0x80) returned 0 [0183.085] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.085] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.085] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.085] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.085] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.086] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-140.png", dwFileAttributes=0x80) returned 0 [0183.086] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.086] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.086] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.086] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.086] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.086] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-180.png", dwFileAttributes=0x80) returned 0 [0183.087] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.087] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.087] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.087] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.087] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.087] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-80.png", dwFileAttributes=0x80) returned 0 [0183.087] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.088] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.088] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.088] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.088] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.088] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-100.png", dwFileAttributes=0x80) returned 0 [0183.088] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.contrast-black_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.088] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.088] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.089] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.089] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.089] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-140.png", dwFileAttributes=0x80) returned 0 [0183.089] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.contrast-black_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.089] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.089] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.090] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.090] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.090] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-180.png", dwFileAttributes=0x80) returned 0 [0183.090] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.090] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.090] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.090] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.090] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.091] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-80.png", dwFileAttributes=0x80) returned 0 [0183.091] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.contrast-black_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.091] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.091] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.091] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.091] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.091] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-100.png", dwFileAttributes=0x80) returned 0 [0183.092] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.contrast-white_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.092] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.092] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.092] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.092] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.092] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-140.png", dwFileAttributes=0x80) returned 0 [0183.093] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.contrast-white_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.093] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.093] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.093] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.093] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.093] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-180.png", dwFileAttributes=0x80) returned 0 [0183.094] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.094] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.094] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.094] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.094] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.094] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-80.png", dwFileAttributes=0x80) returned 0 [0183.094] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.contrast-white_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.095] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.095] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.095] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.095] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.095] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.scale-100.png", dwFileAttributes=0x80) returned 0 [0183.095] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.095] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.095] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.096] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.099] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.099] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.scale-140.png", dwFileAttributes=0x80) returned 0 [0183.100] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.100] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.100] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.100] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.100] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.100] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.scale-180.png", dwFileAttributes=0x80) returned 0 [0183.101] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.101] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.101] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.101] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.101] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.101] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.scale-80.png", dwFileAttributes=0x80) returned 0 [0183.101] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.102] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.102] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.102] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.102] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.contrast-black_scale-100.png", dwFileAttributes=0x80) returned 0 [0183.102] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogo.contrast-black_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.102] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.102] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.103] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.103] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.contrast-black_scale-140.png", dwFileAttributes=0x80) returned 0 [0183.103] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogo.contrast-black_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.103] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.103] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.104] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.104] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.contrast-black_scale-180.png", dwFileAttributes=0x80) returned 0 [0183.104] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogo.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.104] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.104] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.105] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.105] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.105] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.contrast-black_scale-80.png", dwFileAttributes=0x80) returned 0 [0183.105] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogo.contrast-black_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.105] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.105] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.105] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.105] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.contrast-white_scale-100.png", dwFileAttributes=0x80) returned 0 [0183.106] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogo.contrast-white_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.106] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.106] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.106] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.106] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.107] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.contrast-white_scale-140.png", dwFileAttributes=0x80) returned 0 [0183.107] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogo.contrast-white_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.107] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.107] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.107] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.107] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.107] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.contrast-white_scale-180.png", dwFileAttributes=0x80) returned 0 [0183.108] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogo.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.108] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.108] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.108] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.108] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.contrast-white_scale-80.png", dwFileAttributes=0x80) returned 0 [0183.109] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogo.contrast-white_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.109] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.109] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.109] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.109] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.109] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.scale-100.png", dwFileAttributes=0x80) returned 0 [0183.110] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogo.scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.110] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.110] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.110] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.110] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.110] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.scale-140.png", dwFileAttributes=0x80) returned 0 [0183.110] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogo.scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.111] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.111] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.111] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.111] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.111] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.scale-180.png", dwFileAttributes=0x80) returned 0 [0183.111] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogo.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.111] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.111] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.112] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.112] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.112] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.scale-80.png", dwFileAttributes=0x80) returned 0 [0183.112] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogo.scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.112] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.112] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.112] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.112] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.113] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.contrast-black_scale-100.png", dwFileAttributes=0x80) returned 0 [0183.113] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogosmall.contrast-black_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.113] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.113] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.113] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.113] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.114] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.contrast-black_scale-140.png", dwFileAttributes=0x80) returned 0 [0183.114] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogosmall.contrast-black_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.114] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.114] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.114] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.114] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.114] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.contrast-black_scale-180.png", dwFileAttributes=0x80) returned 0 [0183.115] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogosmall.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.115] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.115] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.115] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.115] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.115] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.contrast-black_scale-80.png", dwFileAttributes=0x80) returned 0 [0183.115] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogosmall.contrast-black_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.116] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.116] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.116] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.116] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.116] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.contrast-white_scale-100.png", dwFileAttributes=0x80) returned 0 [0183.116] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogosmall.contrast-white_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.116] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.116] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.117] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.117] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.117] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.contrast-white_scale-140.png", dwFileAttributes=0x80) returned 0 [0183.117] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogosmall.contrast-white_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.117] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.117] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.118] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.118] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.118] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.contrast-white_scale-180.png", dwFileAttributes=0x80) returned 0 [0183.118] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogosmall.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.118] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.118] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.118] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.118] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.contrast-white_scale-80.png", dwFileAttributes=0x80) returned 0 [0183.119] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogosmall.contrast-white_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.119] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.119] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.119] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.125] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.scale-100.png", dwFileAttributes=0x80) returned 0 [0183.125] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogosmall.scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.126] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.126] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.126] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.126] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.126] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.scale-140.png", dwFileAttributes=0x80) returned 0 [0183.126] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogosmall.scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.127] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.127] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.127] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.127] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.scale-180.png", dwFileAttributes=0x80) returned 0 [0183.127] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogosmall.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.127] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.127] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.128] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.128] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.128] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.scale-80.png", dwFileAttributes=0x80) returned 0 [0183.128] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogosmall.scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.128] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.128] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.128] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.128] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.129] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.contrast-black_scale-100.png", dwFileAttributes=0x80) returned 0 [0183.129] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologo.contrast-black_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.129] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.129] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.129] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.129] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.129] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.contrast-black_scale-140.png", dwFileAttributes=0x80) returned 0 [0183.130] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologo.contrast-black_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.130] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.130] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.130] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.130] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.contrast-black_scale-180.png", dwFileAttributes=0x80) returned 0 [0183.131] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologo.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.131] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.131] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.131] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.131] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.131] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.contrast-black_scale-80.png", dwFileAttributes=0x80) returned 0 [0183.131] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologo.contrast-black_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.132] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.132] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.132] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.132] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.contrast-white_scale-100.png", dwFileAttributes=0x80) returned 0 [0183.132] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologo.contrast-white_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.133] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.133] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.133] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.133] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.133] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.contrast-white_scale-140.png", dwFileAttributes=0x80) returned 0 [0183.133] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologo.contrast-white_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.133] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.133] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.134] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.134] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.contrast-white_scale-180.png", dwFileAttributes=0x80) returned 0 [0183.134] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologo.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.134] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.134] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.134] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.134] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.contrast-white_scale-80.png", dwFileAttributes=0x80) returned 0 [0183.135] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologo.contrast-white_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.135] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.135] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.135] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.135] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.scale-100.png", dwFileAttributes=0x80) returned 0 [0183.136] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologo.scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.136] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.136] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.136] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.136] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.scale-140.png", dwFileAttributes=0x80) returned 0 [0183.137] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologo.scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.137] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.137] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.137] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.137] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.scale-180.png", dwFileAttributes=0x80) returned 0 [0183.138] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologo.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.138] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.138] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.138] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.138] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.138] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.scale-80.png", dwFileAttributes=0x80) returned 0 [0183.138] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologo.scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.139] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.139] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.139] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.139] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.139] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.contrast-black_scale-100.png", dwFileAttributes=0x80) returned 0 [0183.139] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologosmall.contrast-black_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.140] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.140] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.140] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.140] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.140] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.contrast-black_scale-140.png", dwFileAttributes=0x80) returned 0 [0183.140] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologosmall.contrast-black_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.141] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.141] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.141] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.141] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.141] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.contrast-black_scale-180.png", dwFileAttributes=0x80) returned 0 [0183.141] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologosmall.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.141] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.141] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.142] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.142] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.142] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.contrast-black_scale-80.png", dwFileAttributes=0x80) returned 0 [0183.142] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologosmall.contrast-black_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.142] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.142] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.143] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.143] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.contrast-white_scale-100.png", dwFileAttributes=0x80) returned 0 [0183.143] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologosmall.contrast-white_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.143] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.143] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.143] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.143] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.contrast-white_scale-140.png", dwFileAttributes=0x80) returned 0 [0183.144] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologosmall.contrast-white_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.144] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.144] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.144] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.144] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.145] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.contrast-white_scale-180.png", dwFileAttributes=0x80) returned 0 [0183.145] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologosmall.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.145] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.145] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.145] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.146] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.146] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.contrast-white_scale-80.png", dwFileAttributes=0x80) returned 0 [0183.146] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologosmall.contrast-white_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.146] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.146] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.147] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.152] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.scale-100.png", dwFileAttributes=0x80) returned 0 [0183.152] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologosmall.scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.152] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.152] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.152] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.152] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.scale-140.png", dwFileAttributes=0x80) returned 0 [0183.153] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologosmall.scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.153] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.153] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.153] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.153] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.154] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.scale-180.png", dwFileAttributes=0x80) returned 0 [0183.154] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologosmall.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.154] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.154] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.154] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.154] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.154] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.scale-80.png", dwFileAttributes=0x80) returned 0 [0183.155] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologosmall.scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.155] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.155] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.155] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.155] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.155] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.contrast-black_scale-100.png", dwFileAttributes=0x80) returned 0 [0183.156] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogo.contrast-black_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.156] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.156] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.156] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.156] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.contrast-black_scale-140.png", dwFileAttributes=0x80) returned 0 [0183.156] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogo.contrast-black_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.157] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.157] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.157] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.157] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.contrast-black_scale-180.png", dwFileAttributes=0x80) returned 0 [0183.157] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogo.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.158] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.158] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.158] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.158] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.158] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.contrast-black_scale-80.png", dwFileAttributes=0x80) returned 0 [0183.158] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogo.contrast-black_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.158] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.158] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.159] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.159] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.contrast-white_scale-100.png", dwFileAttributes=0x80) returned 0 [0183.159] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogo.contrast-white_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.159] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.159] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.159] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.159] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.160] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.contrast-white_scale-140.png", dwFileAttributes=0x80) returned 0 [0183.160] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogo.contrast-white_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.160] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.160] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.160] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.160] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.contrast-white_scale-180.png", dwFileAttributes=0x80) returned 0 [0183.161] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogo.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.161] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.161] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.161] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.161] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.contrast-white_scale-80.png", dwFileAttributes=0x80) returned 0 [0183.162] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogo.contrast-white_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.162] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.162] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.162] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.162] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.scale-100.png", dwFileAttributes=0x80) returned 0 [0183.162] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogo.scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.163] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.163] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.163] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.163] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.scale-140.png", dwFileAttributes=0x80) returned 0 [0183.163] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogo.scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.164] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.164] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.164] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.164] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.164] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.scale-180.png", dwFileAttributes=0x80) returned 0 [0183.164] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogo.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.164] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.164] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.165] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.165] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.scale-80.png", dwFileAttributes=0x80) returned 0 [0183.165] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogo.scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.165] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.165] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.165] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.165] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.166] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.contrast-black_scale-100.png", dwFileAttributes=0x80) returned 0 [0183.166] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogosmall.contrast-black_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.166] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.166] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.166] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.166] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.contrast-black_scale-140.png", dwFileAttributes=0x80) returned 0 [0183.167] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogosmall.contrast-black_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.167] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.167] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.167] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.167] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.contrast-black_scale-180.png", dwFileAttributes=0x80) returned 0 [0183.168] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogosmall.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.168] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.168] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.168] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.168] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.contrast-black_scale-80.png", dwFileAttributes=0x80) returned 0 [0183.169] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogosmall.contrast-black_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.169] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.169] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.169] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.169] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.169] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.contrast-white_scale-100.png", dwFileAttributes=0x80) returned 0 [0183.169] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogosmall.contrast-white_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.170] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.170] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.170] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.170] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.contrast-white_scale-140.png", dwFileAttributes=0x80) returned 0 [0183.171] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogosmall.contrast-white_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.171] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.171] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.171] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.171] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.172] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.contrast-white_scale-180.png", dwFileAttributes=0x80) returned 0 [0183.172] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogosmall.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.172] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.172] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.172] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.172] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.172] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.contrast-white_scale-80.png", dwFileAttributes=0x80) returned 0 [0183.173] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogosmall.contrast-white_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.173] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.173] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.173] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.176] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.177] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.scale-100.png", dwFileAttributes=0x80) returned 0 [0183.177] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogosmall.scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.177] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.177] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.177] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.177] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.scale-140.png", dwFileAttributes=0x80) returned 0 [0183.178] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogosmall.scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.178] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.178] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.178] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.178] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.scale-180.png", dwFileAttributes=0x80) returned 0 [0183.179] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogosmall.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.179] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.179] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.179] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.179] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.179] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.scale-80.png", dwFileAttributes=0x80) returned 0 [0183.179] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogosmall.scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.180] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.180] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.180] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.180] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.180] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogo.contrast-black_scale-100.png", dwFileAttributes=0x80) returned 0 [0183.180] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winwordlogo.contrast-black_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.180] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.181] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.181] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.181] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.181] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogo.contrast-black_scale-140.png", dwFileAttributes=0x80) returned 0 [0183.182] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogo.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winwordlogo.contrast-black_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.182] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.182] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.182] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.182] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogo.contrast-black_scale-180.png", dwFileAttributes=0x80) returned 0 [0183.183] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winwordlogo.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.183] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.183] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.183] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.183] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.183] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogo.contrast-black_scale-80.png", dwFileAttributes=0x80) returned 0 [0183.183] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogo.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winwordlogo.contrast-black_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.184] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.184] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.184] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.184] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.184] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogo.contrast-white_scale-100.png", dwFileAttributes=0x80) returned 0 [0183.184] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winwordlogo.contrast-white_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.184] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.184] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.185] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.185] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.185] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogo.contrast-white_scale-140.png", dwFileAttributes=0x80) returned 0 [0183.185] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogo.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winwordlogo.contrast-white_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.185] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.185] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.186] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.186] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.186] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogo.contrast-white_scale-180.png", dwFileAttributes=0x80) returned 0 [0183.186] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winwordlogo.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.186] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.186] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.187] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.187] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogo.contrast-white_scale-80.png", dwFileAttributes=0x80) returned 0 [0183.187] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogo.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winwordlogo.contrast-white_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.187] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.187] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.188] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.188] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.188] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogo.scale-100.png", dwFileAttributes=0x80) returned 0 [0183.188] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogo.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winwordlogo.scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.188] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.188] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.188] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.199] SetLastError (dwErrCode=0x0) [0183.199] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.208] GetLastError () returned 0x5 [0183.208] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0183.208] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.208] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.208] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.208] SetLastError (dwErrCode=0x0) [0183.208] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.208] GetLastError () returned 0x5 [0183.208] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0183.208] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.208] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb55e0 [0183.209] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.209] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.209] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.209] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\bundle.js", dwFileAttributes=0x80) returned 0 [0183.210] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\bundle.js" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\bundle.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.211] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.211] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.211] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.211] SetLastError (dwErrCode=0x0) [0183.211] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.211] GetLastError () returned 0x5 [0183.211] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.211] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.211] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb49e0 [0183.212] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.212] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.212] SetLastError (dwErrCode=0x0) [0183.212] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.212] GetLastError () returned 0x5 [0183.212] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0183.212] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.212] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb53a0 [0183.213] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0183.214] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0183.214] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.214] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\add.png", dwFileAttributes=0x80) returned 0 [0183.217] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\add.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\add.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.217] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.217] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.217] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0183.217] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.218] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\ArrowRight.png", dwFileAttributes=0x80) returned 0 [0183.218] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\ArrowRight.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\arrowright.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.218] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.218] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.218] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0183.218] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.218] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\attachment.png", dwFileAttributes=0x80) returned 0 [0183.219] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\attachment.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\attachment.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.219] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.219] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.219] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0183.219] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.219] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\cancel.png", dwFileAttributes=0x80) returned 0 [0183.219] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\cancel.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\cancel.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.220] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.220] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.220] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0183.220] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.220] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\chat.png", dwFileAttributes=0x80) returned 0 [0183.221] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\chat.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\chat.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.221] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.221] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.221] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0183.221] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.222] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\chat_small.png", dwFileAttributes=0x80) returned 0 [0183.222] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\chat_small.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\chat_small.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.222] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.222] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.223] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0183.223] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.223] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\checkmark.png", dwFileAttributes=0x80) returned 0 [0183.224] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\checkmark.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\checkmark.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.224] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.224] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.224] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0183.224] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.224] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\Completed.png", dwFileAttributes=0x80) returned 0 [0183.224] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\Completed.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\completed.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.225] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.225] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.225] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0183.225] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.225] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\DownChevron.png", dwFileAttributes=0x80) returned 0 [0183.225] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\DownChevron.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\downchevron.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.225] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.225] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.226] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0183.226] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.226] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\edit.png", dwFileAttributes=0x80) returned 0 [0183.226] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\edit.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\edit.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.226] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.226] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.226] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0183.226] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.227] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\file_blank.png", dwFileAttributes=0x80) returned 0 [0183.227] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\file_blank.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\file_blank.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.227] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.227] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.227] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0183.227] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.228] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\file_docx.png", dwFileAttributes=0x80) returned 0 [0183.228] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\file_docx.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\file_docx.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.228] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.228] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.228] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0183.228] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.228] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\file_eml.png", dwFileAttributes=0x80) returned 0 [0183.229] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\file_eml.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\file_eml.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.229] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.229] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.229] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0183.229] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.229] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\file_folder.png", dwFileAttributes=0x80) returned 0 [0183.229] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\file_folder.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\file_folder.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.230] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.230] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.230] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0183.230] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.230] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\file_html.png", dwFileAttributes=0x80) returned 0 [0183.230] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\file_html.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\file_html.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.230] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.231] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.231] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0183.231] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.231] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\file_jpg.png", dwFileAttributes=0x80) returned 0 [0183.232] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\file_jpg.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\file_jpg.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.232] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.232] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.232] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0183.232] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.232] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\file_onenote.png", dwFileAttributes=0x80) returned 0 [0183.233] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\file_onenote.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\file_onenote.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.233] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.233] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.234] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0183.234] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.234] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\file_pdf.png", dwFileAttributes=0x80) returned 0 [0183.234] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\file_pdf.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\file_pdf.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.234] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.234] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.234] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0183.234] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.235] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\file_pptx.png", dwFileAttributes=0x80) returned 0 [0183.235] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\file_pptx.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\file_pptx.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.235] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.235] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.235] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0183.235] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.236] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\file_visio.png", dwFileAttributes=0x80) returned 0 [0183.236] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\file_visio.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\file_visio.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.236] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.236] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.236] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0183.236] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.236] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\file_xlsx.png", dwFileAttributes=0x80) returned 0 [0183.237] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\file_xlsx.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\file_xlsx.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.237] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.237] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.237] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0183.237] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.237] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\file_xml.png", dwFileAttributes=0x80) returned 0 [0183.237] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\file_xml.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\file_xml.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.238] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.238] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.238] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0183.238] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.238] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\file_zip.png", dwFileAttributes=0x80) returned 0 [0183.238] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\file_zip.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\file_zip.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.238] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.239] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.239] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0183.239] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.239] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\LeftChevron.png", dwFileAttributes=0x80) returned 0 [0183.239] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\LeftChevron.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\leftchevron.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.239] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.239] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.240] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0183.240] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.240] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\linkedin_ghost_company.png", dwFileAttributes=0x80) returned 0 [0183.241] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\linkedin_ghost_company.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\linkedin_ghost_company.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.241] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.241] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.241] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0183.241] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.241] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\linkedin_ghost_profile.png", dwFileAttributes=0x80) returned 0 [0183.242] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\linkedin_ghost_profile.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\linkedin_ghost_profile.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.242] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.242] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.242] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0183.242] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.243] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\linkedin_ghost_profile_large.png", dwFileAttributes=0x80) returned 0 [0183.243] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\linkedin_ghost_profile_large.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\linkedin_ghost_profile_large.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.243] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.243] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.243] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0183.243] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.243] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\linkedin_ghost_school.png", dwFileAttributes=0x80) returned 0 [0183.244] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\linkedin_ghost_school.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\linkedin_ghost_school.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.244] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.244] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.244] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0183.244] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.244] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\linkedin_logo.png", dwFileAttributes=0x80) returned 0 [0183.245] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\linkedin_logo.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\linkedin_logo.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.245] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.245] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.245] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0183.245] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.246] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\linkedin_logo_large.png", dwFileAttributes=0x80) returned 0 [0183.246] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\linkedin_logo_large.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\linkedin_logo_large.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.246] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.246] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.246] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0183.246] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.246] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\linkedin_logo_small.png", dwFileAttributes=0x80) returned 0 [0183.247] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\linkedin_logo_small.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\linkedin_logo_small.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.247] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.247] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.248] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0183.248] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.248] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\location.png", dwFileAttributes=0x80) returned 0 [0183.249] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\location.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\location.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.249] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.249] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.249] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0183.249] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.249] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\mail.png", dwFileAttributes=0x80) returned 0 [0183.250] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\mail.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\mail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.250] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.250] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.250] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0183.250] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.250] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\mail_small.png", dwFileAttributes=0x80) returned 0 [0183.250] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\mail_small.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\mail_small.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.251] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.251] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.251] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0183.251] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.251] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\PersonaStatusAway.png", dwFileAttributes=0x80) returned 0 [0183.251] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\PersonaStatusAway.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\personastatusaway.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.252] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.252] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.252] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0183.252] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.252] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\PersonaStatusBlocked.png", dwFileAttributes=0x80) returned 0 [0183.253] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\PersonaStatusBlocked.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\personastatusblocked.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.253] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.253] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.253] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0183.253] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.253] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\PersonaStatusBusy.png", dwFileAttributes=0x80) returned 0 [0183.254] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\PersonaStatusBusy.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\personastatusbusy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.254] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.254] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.254] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0183.254] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.254] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\PersonaStatusDoNotDisturb.png", dwFileAttributes=0x80) returned 0 [0183.254] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\PersonaStatusDoNotDisturb.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\personastatusdonotdisturb.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.255] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.255] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.255] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0183.255] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.255] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\PersonaStatusOffline.png", dwFileAttributes=0x80) returned 0 [0183.256] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\PersonaStatusOffline.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\personastatusoffline.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.256] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.256] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.256] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0183.256] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.256] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\PersonaStatusOnline.png", dwFileAttributes=0x80) returned 0 [0183.257] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\PersonaStatusOnline.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\personastatusonline.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.257] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.257] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.257] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0183.257] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.258] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\phone.png", dwFileAttributes=0x80) returned 0 [0183.258] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\phone.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\phone.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.258] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.258] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.258] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0183.258] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.259] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\phone_small.png", dwFileAttributes=0x80) returned 0 [0183.259] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\phone_small.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\phone_small.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.259] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.259] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.260] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0183.260] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.260] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\RightChevron.png", dwFileAttributes=0x80) returned 0 [0183.260] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\RightChevron.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\rightchevron.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.260] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.260] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.260] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0183.260] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.261] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\shared.png", dwFileAttributes=0x80) returned 0 [0183.261] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\shared.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\shared.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.261] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.261] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.261] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0183.261] FindClose (in: hFindFile=0x665abb53a0 | out: hFindFile=0x665abb53a0) returned 1 [0183.262] SetLastError (dwErrCode=0x0) [0183.262] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.265] GetLastError () returned 0x5 [0183.265] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0183.265] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.265] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0183.265] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0183.265] SetLastError (dwErrCode=0x0) [0183.265] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.265] GetLastError () returned 0x5 [0183.265] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.265] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.265] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0183.266] FindClose (in: hFindFile=0x665abb55e0 | out: hFindFile=0x665abb55e0) returned 1 [0183.266] SetLastError (dwErrCode=0x0) [0183.266] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.266] GetLastError () returned 0x5 [0183.266] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0183.266] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.266] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.266] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.266] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpklegal.txt", dwFileAttributes=0x80) returned 0 [0183.267] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpklegal.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpklegal.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.267] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.267] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.267] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.267] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.267] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.267] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.267] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync.ico", dwFileAttributes=0x80) returned 0 [0183.268] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync.ico" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lync.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.268] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.268] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.268] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.268] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.269] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Lync2013_Third_Party_Notices.txt", dwFileAttributes=0x80) returned 0 [0183.269] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Lync2013_Third_Party_Notices.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lync2013_third_party_notices.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.269] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.269] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.269] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.269] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.269] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.269] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.269] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.269] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.269] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.269] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.270] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MANIFEST.XML", dwFileAttributes=0x80) returned 0 [0183.270] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MANIFEST.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\manifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.270] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.270] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.270] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.270] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.270] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.270] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.270] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.271] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\McePerfCtr.man", dwFileAttributes=0x80) returned 0 [0183.271] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\McePerfCtr.man" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mceperfctr.man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.271] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.271] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.272] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.272] SetLastError (dwErrCode=0x0) [0183.272] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.272] GetLastError () returned 0x5 [0183.272] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0183.272] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.272] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb5580 [0183.274] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.275] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.275] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.275] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\APPLAUSE.WAV", dwFileAttributes=0x80) returned 0 [0183.276] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\APPLAUSE.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\applause.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.276] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.276] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.276] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.276] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.276] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\ARROW.WAV", dwFileAttributes=0x80) returned 0 [0183.277] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\ARROW.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\arrow.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.277] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.277] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.278] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.278] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.278] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\BOMB.WAV", dwFileAttributes=0x80) returned 0 [0183.278] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\BOMB.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\bomb.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.278] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.278] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.278] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.278] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.279] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\BREEZE.WAV", dwFileAttributes=0x80) returned 0 [0183.279] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\BREEZE.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\breeze.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.280] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.280] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.280] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.280] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.280] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\CAMERA.WAV", dwFileAttributes=0x80) returned 0 [0183.280] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\CAMERA.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\camera.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.281] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.281] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.281] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.281] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.281] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\CASHREG.WAV", dwFileAttributes=0x80) returned 0 [0183.282] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\CASHREG.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\cashreg.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.282] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.282] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.282] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.283] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.283] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\CHIMES.WAV", dwFileAttributes=0x80) returned 0 [0183.283] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\CHIMES.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\chimes.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.283] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.283] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.283] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.283] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.284] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\CLICK.WAV", dwFileAttributes=0x80) returned 0 [0183.284] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\CLICK.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\click.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.284] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.284] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.284] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.284] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.284] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\COIN.WAV", dwFileAttributes=0x80) returned 0 [0183.285] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\COIN.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\coin.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.285] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.285] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.285] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.285] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.285] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\DefaultHold.wma", dwFileAttributes=0x80) returned 0 [0183.286] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\DefaultHold.wma" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\defaulthold.wma"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.286] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.286] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.286] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.286] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.286] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\DRUMROLL.WAV", dwFileAttributes=0x80) returned 0 [0183.286] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\DRUMROLL.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\drumroll.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.287] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.287] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.287] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.287] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.287] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\EXPLODE.WAV", dwFileAttributes=0x80) returned 0 [0183.288] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\EXPLODE.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\explode.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.288] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.288] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.288] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.288] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.289] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\HAMMER.WAV", dwFileAttributes=0x80) returned 0 [0183.289] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\HAMMER.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\hammer.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.289] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.289] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.289] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.289] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.289] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LASER.WAV", dwFileAttributes=0x80) returned 0 [0183.290] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LASER.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\laser.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.290] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.290] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.290] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.290] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.290] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_abbrdialtone.wav", dwFileAttributes=0x80) returned 0 [0183.290] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_abbrdialtone.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_abbrdialtone.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.291] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.291] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.291] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.291] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.291] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_ActivePresenterChange.wav", dwFileAttributes=0x80) returned 0 [0183.291] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_ActivePresenterChange.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_activepresenterchange.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.292] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.292] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.292] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.292] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.292] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_appinvite.wav", dwFileAttributes=0x80) returned 0 [0183.292] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_appinvite.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_appinvite.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.292] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.292] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.293] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.293] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.293] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_busy.wav", dwFileAttributes=0x80) returned 0 [0183.293] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_busy.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_busy.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.293] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.293] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.293] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.293] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.294] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_callended.wav", dwFileAttributes=0x80) returned 0 [0183.294] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_callended.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_callended.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.294] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.294] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.294] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.294] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.295] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_ChangeModality.wav", dwFileAttributes=0x80) returned 0 [0183.296] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_ChangeModality.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_changemodality.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.296] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.296] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.296] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.296] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.296] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_connecting.wav", dwFileAttributes=0x80) returned 0 [0183.297] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_connecting.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_connecting.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.297] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.297] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.297] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.297] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.297] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dialtone.wav", dwFileAttributes=0x80) returned 0 [0183.298] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dialtone.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_dialtone.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.298] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.298] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.298] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.298] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.298] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmf0.wav", dwFileAttributes=0x80) returned 0 [0183.299] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmf0.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_dtmf0.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.299] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.299] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.299] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.299] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.299] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmf1.wav", dwFileAttributes=0x80) returned 0 [0183.299] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmf1.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_dtmf1.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.300] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.300] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.300] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.300] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.300] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmf2.wav", dwFileAttributes=0x80) returned 0 [0183.301] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmf2.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_dtmf2.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.301] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.301] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.301] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.301] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.301] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmf3.wav", dwFileAttributes=0x80) returned 0 [0183.302] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmf3.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_dtmf3.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.302] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.302] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.302] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.302] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.302] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmf4.wav", dwFileAttributes=0x80) returned 0 [0183.303] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmf4.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_dtmf4.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.303] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.303] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.303] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.303] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmf5.wav", dwFileAttributes=0x80) returned 0 [0183.303] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmf5.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_dtmf5.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.304] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.304] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.304] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.304] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.304] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmf6.wav", dwFileAttributes=0x80) returned 0 [0183.304] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmf6.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_dtmf6.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.305] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.305] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.305] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.305] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.305] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmf7.wav", dwFileAttributes=0x80) returned 0 [0183.306] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmf7.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_dtmf7.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.306] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.306] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.306] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.306] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.306] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmf8.wav", dwFileAttributes=0x80) returned 0 [0183.307] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmf8.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_dtmf8.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.307] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.307] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.307] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.308] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.308] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmf9.wav", dwFileAttributes=0x80) returned 0 [0183.308] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmf9.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_dtmf9.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.309] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.309] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.309] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.309] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.309] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmfpound.wav", dwFileAttributes=0x80) returned 0 [0183.310] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmfpound.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_dtmfpound.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.310] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.310] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.310] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.310] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.310] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmfstar.wav", dwFileAttributes=0x80) returned 0 [0183.311] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmfstar.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_dtmfstar.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.311] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.311] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.311] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.312] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.312] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_fastbusy.wav", dwFileAttributes=0x80) returned 0 [0183.312] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_fastbusy.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_fastbusy.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.312] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.312] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.313] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.313] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.313] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_fsringing.wav", dwFileAttributes=0x80) returned 0 [0183.313] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_fsringing.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_fsringing.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.313] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.313] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.314] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.314] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.314] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_howler.wav", dwFileAttributes=0x80) returned 0 [0183.314] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_howler.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_howler.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.314] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.314] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.314] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.314] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.315] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_iminvite.wav", dwFileAttributes=0x80) returned 0 [0183.315] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_iminvite.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_iminvite.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.315] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.315] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.315] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.315] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.315] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_istyping.wav", dwFileAttributes=0x80) returned 0 [0183.316] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_istyping.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_istyping.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.316] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.316] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.317] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.317] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.317] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_joinedconference.wav", dwFileAttributes=0x80) returned 0 [0183.317] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_joinedconference.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_joinedconference.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.317] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.317] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.318] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.318] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.318] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_muting.wav", dwFileAttributes=0x80) returned 0 [0183.318] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_muting.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_muting.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.318] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.318] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.318] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.318] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.319] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_newim.wav", dwFileAttributes=0x80) returned 0 [0183.319] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_newim.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_newim.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.319] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.319] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.319] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.319] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.319] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_onhold.wav", dwFileAttributes=0x80) returned 0 [0183.320] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_onhold.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_onhold.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.320] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.320] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.320] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.320] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.320] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_presence.wav", dwFileAttributes=0x80) returned 0 [0183.321] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_presence.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_presence.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.321] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.321] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.321] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.321] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.321] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_redirect.wav", dwFileAttributes=0x80) returned 0 [0183.322] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_redirect.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_redirect.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.322] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.322] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.322] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.322] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_ringback.wav", dwFileAttributes=0x80) returned 0 [0183.323] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_ringback.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_ringback.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.323] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.323] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.323] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.323] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_ringing.wav", dwFileAttributes=0x80) returned 0 [0183.324] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_ringing.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_ringing.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.324] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.324] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.324] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.324] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.324] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_ringtone2.wav", dwFileAttributes=0x80) returned 0 [0183.324] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_ringtone2.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_ringtone2.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.325] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.325] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.325] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.325] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.325] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_ringtone3.wav", dwFileAttributes=0x80) returned 0 [0183.326] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_ringtone3.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_ringtone3.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.326] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.326] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.326] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.326] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.326] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_ringtone4.wav", dwFileAttributes=0x80) returned 0 [0183.327] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_ringtone4.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_ringtone4.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.327] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.327] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.327] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.327] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.327] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_ringtone5.wav", dwFileAttributes=0x80) returned 0 [0183.328] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_ringtone5.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_ringtone5.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.328] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.328] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.328] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.328] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.328] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_ringtone6.wav", dwFileAttributes=0x80) returned 0 [0183.329] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_ringtone6.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_ringtone6.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.329] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.329] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.329] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.329] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.329] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_ringtone7.wav", dwFileAttributes=0x80) returned 0 [0183.329] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_ringtone7.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_ringtone7.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.329] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.330] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.330] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.330] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.330] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_secondcall.wav", dwFileAttributes=0x80) returned 0 [0183.331] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_secondcall.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_secondcall.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.331] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.331] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.332] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.332] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.332] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_untag.wav", dwFileAttributes=0x80) returned 0 [0183.333] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_untag.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_untag.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.333] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.333] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.333] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.333] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_videoadded.wav", dwFileAttributes=0x80) returned 0 [0183.334] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_videoadded.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_videoadded.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.334] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.335] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.335] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.335] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_videocall.wav", dwFileAttributes=0x80) returned 0 [0183.335] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_videocall.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_videocall.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.335] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.335] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.336] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.336] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.336] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\PUSH.WAV", dwFileAttributes=0x80) returned 0 [0183.336] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\PUSH.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\push.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.336] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.336] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.336] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.336] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.337] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\SUCTION.WAV", dwFileAttributes=0x80) returned 0 [0183.338] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\SUCTION.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\suction.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.338] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.338] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.338] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.338] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.339] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\TYPE.WAV", dwFileAttributes=0x80) returned 0 [0183.339] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\TYPE.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\type.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.340] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.340] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.340] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.340] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.340] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\VOLTAGE.WAV", dwFileAttributes=0x80) returned 0 [0183.340] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\VOLTAGE.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\voltage.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.341] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.341] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.341] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.341] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.341] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\WHOOSH.WAV", dwFileAttributes=0x80) returned 0 [0183.341] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\WHOOSH.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\whoosh.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.341] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.341] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.342] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.342] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.342] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\WIND.WAV", dwFileAttributes=0x80) returned 0 [0183.342] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\WIND.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\wind.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.342] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.343] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.343] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0183.343] FindClose (in: hFindFile=0x665abb5580 | out: hFindFile=0x665abb5580) returned 1 [0183.343] SetLastError (dwErrCode=0x0) [0183.344] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.346] GetLastError () returned 0x5 [0183.346] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0183.346] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.346] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.346] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.346] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.346] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.346] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Model.zip", dwFileAttributes=0x80) returned 0 [0183.347] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Model.zip" (normalized: "c:\\program files\\microsoft office\\root\\office16\\microsoft.lync.model.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.347] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.348] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.348] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.348] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.348] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Utilities.Controls.zip", dwFileAttributes=0x80) returned 0 [0183.348] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Utilities.Controls.zip" (normalized: "c:\\program files\\microsoft office\\root\\office16\\microsoft.lync.utilities.controls.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.348] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.348] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.349] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.349] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.349] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Utilities.zip", dwFileAttributes=0x80) returned 0 [0183.349] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Utilities.zip" (normalized: "c:\\program files\\microsoft office\\root\\office16\\microsoft.lync.utilities.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.349] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.349] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.349] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.349] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.349] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.350] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.350] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.351] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.351] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.351] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.351] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.351] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.351] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MLCFG32.CPL", dwFileAttributes=0x80) returned 0 [0183.352] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MLCFG32.CPL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mlcfg32.cpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.352] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.352] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.352] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.352] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.353] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MML2OMML.XSL", dwFileAttributes=0x80) returned 0 [0183.353] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MML2OMML.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mml2omml.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.354] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.354] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.354] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.354] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.354] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.354] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.354] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.354] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSACC.OLB", dwFileAttributes=0x80) returned 0 [0183.354] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSACC.OLB" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msacc.olb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.354] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.354] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.355] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.355] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.355] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.355] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.355] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSACCESS.VisualElementsManifest.xml", dwFileAttributes=0x80) returned 0 [0183.356] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSACCESS.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msaccess.visualelementsmanifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.356] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.356] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.356] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.356] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.356] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.356] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.356] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mscss7cm_en.dub", dwFileAttributes=0x80) returned 0 [0183.358] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mscss7cm_en.dub" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mscss7cm_en.dub"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.358] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.358] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.358] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.358] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.358] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mscss7cm_es.dub", dwFileAttributes=0x80) returned 0 [0183.359] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mscss7cm_es.dub" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mscss7cm_es.dub"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.359] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.359] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.359] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.359] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.360] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mscss7cm_fr.dub", dwFileAttributes=0x80) returned 0 [0183.360] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mscss7cm_fr.dub" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mscss7cm_fr.dub"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.360] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.360] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.360] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.360] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.360] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.360] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.360] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.361] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mscss7wre_en.dub", dwFileAttributes=0x80) returned 0 [0183.361] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mscss7wre_en.dub" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mscss7wre_en.dub"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.361] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.361] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.361] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.361] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.361] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mscss7wre_es.dub", dwFileAttributes=0x80) returned 0 [0183.362] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mscss7wre_es.dub" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mscss7wre_es.dub"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.362] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.362] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.362] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.362] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.362] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mscss7wre_fr.dub", dwFileAttributes=0x80) returned 0 [0183.363] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mscss7wre_fr.dub" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mscss7wre_fr.dub"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.363] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.363] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.363] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.363] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.363] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.364] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mset7db.kic", dwFileAttributes=0x80) returned 0 [0183.365] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mset7db.kic" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mset7db.kic"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.365] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.365] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.365] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.365] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.365] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mset7en.kic", dwFileAttributes=0x80) returned 0 [0183.366] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mset7en.kic" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mset7en.kic"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.366] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.366] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.366] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.366] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.366] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mset7es.kic", dwFileAttributes=0x80) returned 0 [0183.367] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mset7es.kic" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mset7es.kic"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.367] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.367] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.367] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.367] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.367] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mset7fr.kic", dwFileAttributes=0x80) returned 0 [0183.368] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mset7fr.kic" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mset7fr.kic"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.368] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.368] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.368] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.368] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.369] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mset7ge.kic", dwFileAttributes=0x80) returned 0 [0183.369] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mset7ge.kic" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mset7ge.kic"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.369] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.369] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.369] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.369] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.369] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mset7jp.kic", dwFileAttributes=0x80) returned 0 [0183.370] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mset7jp.kic" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mset7jp.kic"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.370] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.370] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.370] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.370] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.370] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.371] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.371] SetLastError (dwErrCode=0x0) [0183.371] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.371] GetLastError () returned 0x5 [0183.371] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0183.371] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.371] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4920 [0183.373] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.373] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.373] SetLastError (dwErrCode=0x0) [0183.373] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.373] GetLastError () returned 0x5 [0183.373] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.374] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.374] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ar\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb53a0 [0183.374] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.374] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.374] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0183.374] FindClose (in: hFindFile=0x665abb53a0 | out: hFindFile=0x665abb53a0) returned 1 [0183.379] SetLastError (dwErrCode=0x0) [0183.379] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ar\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ar\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.380] GetLastError () returned 0x5 [0183.380] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.380] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.380] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.380] SetLastError (dwErrCode=0x0) [0183.380] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.380] GetLastError () returned 0x5 [0183.380] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.380] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.380] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\bg\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb53a0 [0183.381] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.381] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.381] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0183.381] FindClose (in: hFindFile=0x665abb53a0 | out: hFindFile=0x665abb53a0) returned 1 [0183.381] SetLastError (dwErrCode=0x0) [0183.381] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\bg\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\bg\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.381] GetLastError () returned 0x5 [0183.381] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.381] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.381] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.381] SetLastError (dwErrCode=0x0) [0183.381] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.381] GetLastError () returned 0x5 [0183.381] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.381] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.381] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ca\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb53a0 [0183.382] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.382] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.382] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0183.382] FindClose (in: hFindFile=0x665abb53a0 | out: hFindFile=0x665abb53a0) returned 1 [0183.382] SetLastError (dwErrCode=0x0) [0183.382] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ca\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ca\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.382] GetLastError () returned 0x5 [0183.382] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.382] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.382] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.382] SetLastError (dwErrCode=0x0) [0183.382] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.383] GetLastError () returned 0x5 [0183.383] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.383] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.383] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\cs\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb43e0 [0183.383] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.383] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.383] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0183.383] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0183.383] SetLastError (dwErrCode=0x0) [0183.383] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\cs\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\cs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.384] GetLastError () returned 0x5 [0183.384] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.384] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.384] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.384] SetLastError (dwErrCode=0x0) [0183.384] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.384] GetLastError () returned 0x5 [0183.384] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.384] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.384] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\da\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4d40 [0183.385] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.385] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.385] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0183.385] FindClose (in: hFindFile=0x665abb4d40 | out: hFindFile=0x665abb4d40) returned 1 [0183.385] SetLastError (dwErrCode=0x0) [0183.385] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\da\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\da\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.385] GetLastError () returned 0x5 [0183.385] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.385] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.385] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.385] SetLastError (dwErrCode=0x0) [0183.385] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.385] GetLastError () returned 0x5 [0183.385] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.385] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.385] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\de\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4f20 [0183.386] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.386] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.386] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0183.386] FindClose (in: hFindFile=0x665abb4f20 | out: hFindFile=0x665abb4f20) returned 1 [0183.386] SetLastError (dwErrCode=0x0) [0183.386] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\de\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\de\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.387] GetLastError () returned 0x5 [0183.387] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.387] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.387] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.387] SetLastError (dwErrCode=0x0) [0183.387] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.387] GetLastError () returned 0x5 [0183.387] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.387] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.387] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\el\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb49e0 [0183.388] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.388] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.388] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0183.388] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0183.388] SetLastError (dwErrCode=0x0) [0183.388] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\el\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\el\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.388] GetLastError () returned 0x5 [0183.388] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.388] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.388] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.388] SetLastError (dwErrCode=0x0) [0183.388] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.388] GetLastError () returned 0x5 [0183.388] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.388] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.388] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\en-us\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb56a0 [0183.389] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.389] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.389] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0183.389] FindClose (in: hFindFile=0x665abb56a0 | out: hFindFile=0x665abb56a0) returned 1 [0183.389] SetLastError (dwErrCode=0x0) [0183.389] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\en-us\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.389] GetLastError () returned 0x5 [0183.389] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.390] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.390] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.390] SetLastError (dwErrCode=0x0) [0183.390] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.390] GetLastError () returned 0x5 [0183.390] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.390] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.390] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\es\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb49e0 [0183.390] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.391] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.391] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0183.391] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0183.391] SetLastError (dwErrCode=0x0) [0183.391] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\es\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\es\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.391] GetLastError () returned 0x5 [0183.391] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.391] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.391] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.391] SetLastError (dwErrCode=0x0) [0183.391] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.391] GetLastError () returned 0x5 [0183.391] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.391] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.391] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\et\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4c20 [0183.392] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.392] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.392] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0183.392] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0183.392] SetLastError (dwErrCode=0x0) [0183.392] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\et\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\et\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.392] GetLastError () returned 0x5 [0183.392] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.392] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.392] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.392] SetLastError (dwErrCode=0x0) [0183.392] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.392] GetLastError () returned 0x5 [0183.393] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.393] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.393] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\eu\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb5040 [0183.393] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.393] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.393] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0183.393] FindClose (in: hFindFile=0x665abb5040 | out: hFindFile=0x665abb5040) returned 1 [0183.393] SetLastError (dwErrCode=0x0) [0183.393] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\eu\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\eu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.393] GetLastError () returned 0x5 [0183.393] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.393] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.393] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.393] SetLastError (dwErrCode=0x0) [0183.393] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.393] GetLastError () returned 0x5 [0183.393] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.393] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.393] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\fi\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb49e0 [0183.394] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.394] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.394] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0183.394] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0183.394] SetLastError (dwErrCode=0x0) [0183.394] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\fi\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\fi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.394] GetLastError () returned 0x5 [0183.394] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.395] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.395] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.395] SetLastError (dwErrCode=0x0) [0183.395] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.395] GetLastError () returned 0x5 [0183.395] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.395] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.395] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\fr\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb55e0 [0183.395] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.395] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.395] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0183.395] FindClose (in: hFindFile=0x665abb55e0 | out: hFindFile=0x665abb55e0) returned 1 [0183.395] SetLastError (dwErrCode=0x0) [0183.395] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\fr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\fr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.395] GetLastError () returned 0x5 [0183.395] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.395] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.395] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.395] SetLastError (dwErrCode=0x0) [0183.396] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.396] GetLastError () returned 0x5 [0183.396] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.396] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.396] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\gl\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb49e0 [0183.396] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.396] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.396] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0183.397] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0183.397] SetLastError (dwErrCode=0x0) [0183.397] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\gl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\gl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.397] GetLastError () returned 0x5 [0183.397] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.397] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.397] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.397] SetLastError (dwErrCode=0x0) [0183.397] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.397] GetLastError () returned 0x5 [0183.397] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.397] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.397] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\he\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4da0 [0183.398] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.398] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.398] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0183.398] FindClose (in: hFindFile=0x665abb4da0 | out: hFindFile=0x665abb4da0) returned 1 [0183.398] SetLastError (dwErrCode=0x0) [0183.398] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\he\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\he\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.398] GetLastError () returned 0x5 [0183.398] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.398] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.398] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.398] SetLastError (dwErrCode=0x0) [0183.398] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.399] GetLastError () returned 0x5 [0183.399] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.399] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.399] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hi\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb42c0 [0183.399] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.399] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.399] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0183.399] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0183.399] SetLastError (dwErrCode=0x0) [0183.399] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hi\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\hi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.400] GetLastError () returned 0x5 [0183.400] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.400] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.400] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.400] SetLastError (dwErrCode=0x0) [0183.400] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.400] GetLastError () returned 0x5 [0183.400] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.400] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.400] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hr\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb43e0 [0183.401] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.401] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.401] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0183.401] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0183.401] SetLastError (dwErrCode=0x0) [0183.401] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\hr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.401] GetLastError () returned 0x5 [0183.401] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.401] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.401] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.401] SetLastError (dwErrCode=0x0) [0183.401] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.402] GetLastError () returned 0x5 [0183.402] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.402] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.402] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hu\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4f80 [0183.402] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.402] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.402] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0183.402] FindClose (in: hFindFile=0x665abb4f80 | out: hFindFile=0x665abb4f80) returned 1 [0183.403] SetLastError (dwErrCode=0x0) [0183.403] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hu\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\hu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.403] GetLastError () returned 0x5 [0183.403] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.403] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.403] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.403] SetLastError (dwErrCode=0x0) [0183.403] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.403] GetLastError () returned 0x5 [0183.403] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.403] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.403] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\id\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb42c0 [0183.403] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.403] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.403] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0183.403] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0183.403] SetLastError (dwErrCode=0x0) [0183.404] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\id\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\id\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.404] GetLastError () returned 0x5 [0183.404] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.404] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.404] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.404] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.404] SetLastError (dwErrCode=0x0) [0183.404] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.404] GetLastError () returned 0x5 [0183.404] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.404] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.404] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\it\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb5040 [0183.405] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.405] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.405] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0183.405] FindClose (in: hFindFile=0x665abb5040 | out: hFindFile=0x665abb5040) returned 1 [0183.405] SetLastError (dwErrCode=0x0) [0183.405] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\it\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\it\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.405] GetLastError () returned 0x5 [0183.405] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.405] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.405] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.405] SetLastError (dwErrCode=0x0) [0183.405] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.406] GetLastError () returned 0x5 [0183.406] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.406] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.406] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ja\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb42c0 [0183.406] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.406] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.406] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0183.406] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0183.406] SetLastError (dwErrCode=0x0) [0183.406] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ja\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ja\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.406] GetLastError () returned 0x5 [0183.406] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.406] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.406] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.406] SetLastError (dwErrCode=0x0) [0183.406] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.407] GetLastError () returned 0x5 [0183.407] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.407] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.407] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\kk\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb43e0 [0183.407] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.407] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.407] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0183.407] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0183.408] SetLastError (dwErrCode=0x0) [0183.408] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\kk\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\kk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.408] GetLastError () returned 0x5 [0183.408] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.408] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.408] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.408] SetLastError (dwErrCode=0x0) [0183.408] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.408] GetLastError () returned 0x5 [0183.408] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.408] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.408] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ko\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb56a0 [0183.409] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.409] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.409] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0183.409] FindClose (in: hFindFile=0x665abb56a0 | out: hFindFile=0x665abb56a0) returned 1 [0183.409] SetLastError (dwErrCode=0x0) [0183.409] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ko\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ko\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.409] GetLastError () returned 0x5 [0183.409] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.409] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.409] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.409] SetLastError (dwErrCode=0x0) [0183.409] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.409] GetLastError () returned 0x5 [0183.409] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.410] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.410] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\lt\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb49e0 [0183.410] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.410] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.410] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0183.410] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0183.410] SetLastError (dwErrCode=0x0) [0183.410] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\lt\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\lt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.411] GetLastError () returned 0x5 [0183.411] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.411] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.411] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.411] SetLastError (dwErrCode=0x0) [0183.411] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.411] GetLastError () returned 0x5 [0183.411] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.411] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.411] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\lv\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb42c0 [0183.411] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.411] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.411] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0183.411] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0183.411] SetLastError (dwErrCode=0x0) [0183.411] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\lv\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\lv\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.411] GetLastError () returned 0x5 [0183.411] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.411] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.412] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.412] SetLastError (dwErrCode=0x0) [0183.412] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.412] GetLastError () returned 0x5 [0183.412] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.412] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.412] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ms\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4a40 [0183.412] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.413] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.413] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0183.413] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0183.413] SetLastError (dwErrCode=0x0) [0183.413] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ms\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ms\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.413] GetLastError () returned 0x5 [0183.413] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.413] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.413] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.413] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.413] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.413] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\MSIPCEvents.man", dwFileAttributes=0x80) returned 0 [0183.414] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\MSIPCEvents.man" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\msipcevents.man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.414] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.414] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.415] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.415] SetLastError (dwErrCode=0x0) [0183.415] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.415] GetLastError () returned 0x5 [0183.415] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.415] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.415] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\nl\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb42c0 [0183.415] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.416] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.416] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0183.416] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0183.416] SetLastError (dwErrCode=0x0) [0183.416] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\nl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\nl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.416] GetLastError () returned 0x5 [0183.416] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.416] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.416] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.416] SetLastError (dwErrCode=0x0) [0183.416] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.416] GetLastError () returned 0x5 [0183.416] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.416] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.416] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\no\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb55e0 [0183.417] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.417] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.417] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0183.417] FindClose (in: hFindFile=0x665abb55e0 | out: hFindFile=0x665abb55e0) returned 1 [0183.417] SetLastError (dwErrCode=0x0) [0183.417] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\no\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\no\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.417] GetLastError () returned 0x5 [0183.417] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.417] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.417] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.417] SetLastError (dwErrCode=0x0) [0183.417] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.418] GetLastError () returned 0x5 [0183.418] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.418] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.418] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pl\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb42c0 [0183.419] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.419] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.419] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0183.419] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0183.419] SetLastError (dwErrCode=0x0) [0183.419] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\pl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.419] GetLastError () returned 0x5 [0183.419] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.419] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.419] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.419] SetLastError (dwErrCode=0x0) [0183.419] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.419] GetLastError () returned 0x5 [0183.419] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.419] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.419] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pt\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb49e0 [0183.420] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.420] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.420] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0183.420] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0183.420] SetLastError (dwErrCode=0x0) [0183.420] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pt\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\pt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.420] GetLastError () returned 0x5 [0183.421] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.421] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.421] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.421] SetLastError (dwErrCode=0x0) [0183.421] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.421] GetLastError () returned 0x5 [0183.421] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.421] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.421] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pt-BR\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb42c0 [0183.422] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.422] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.422] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0183.422] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0183.422] SetLastError (dwErrCode=0x0) [0183.422] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pt-BR\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\pt-br\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.422] GetLastError () returned 0x5 [0183.422] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.422] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.422] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.422] SetLastError (dwErrCode=0x0) [0183.422] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.422] GetLastError () returned 0x5 [0183.422] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.422] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.422] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ro\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4c20 [0183.423] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.423] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.423] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0183.423] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0183.423] SetLastError (dwErrCode=0x0) [0183.423] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ro\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ro\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.424] GetLastError () returned 0x5 [0183.424] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.424] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.424] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.424] SetLastError (dwErrCode=0x0) [0183.424] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.424] GetLastError () returned 0x5 [0183.424] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.424] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.424] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ru\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb42c0 [0183.425] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.425] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.425] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0183.425] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0183.425] SetLastError (dwErrCode=0x0) [0183.425] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ru\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ru\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.425] GetLastError () returned 0x5 [0183.425] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.425] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.425] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.425] SetLastError (dwErrCode=0x0) [0183.425] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.425] GetLastError () returned 0x5 [0183.425] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.425] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.425] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sk\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb53a0 [0183.425] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.426] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.426] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0183.426] FindClose (in: hFindFile=0x665abb53a0 | out: hFindFile=0x665abb53a0) returned 1 [0183.426] SetLastError (dwErrCode=0x0) [0183.426] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sk\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\sk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.426] GetLastError () returned 0x5 [0183.426] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.426] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.426] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.426] SetLastError (dwErrCode=0x0) [0183.426] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.426] GetLastError () returned 0x5 [0183.426] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.426] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.426] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sl\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb55e0 [0183.426] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.427] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.427] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0183.427] FindClose (in: hFindFile=0x665abb55e0 | out: hFindFile=0x665abb55e0) returned 1 [0183.427] SetLastError (dwErrCode=0x0) [0183.427] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\sl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.427] GetLastError () returned 0x5 [0183.427] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.427] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.427] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.427] SetLastError (dwErrCode=0x0) [0183.427] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.427] GetLastError () returned 0x5 [0183.427] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.427] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.427] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Cyrl-BA\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4f80 [0183.428] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.428] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.428] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0183.428] FindClose (in: hFindFile=0x665abb4f80 | out: hFindFile=0x665abb4f80) returned 1 [0183.428] SetLastError (dwErrCode=0x0) [0183.428] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Cyrl-BA\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\sr-cyrl-ba\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.428] GetLastError () returned 0x5 [0183.428] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.428] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.428] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.428] SetLastError (dwErrCode=0x0) [0183.428] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.429] GetLastError () returned 0x5 [0183.429] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.429] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.429] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Cyrl-CS\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb45c0 [0183.429] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.429] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0183.429] FindClose (in: hFindFile=0x665abb45c0 | out: hFindFile=0x665abb45c0) returned 1 [0183.429] SetLastError (dwErrCode=0x0) [0183.429] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Cyrl-CS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\sr-cyrl-cs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.430] GetLastError () returned 0x5 [0183.430] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.430] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.430] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.430] SetLastError (dwErrCode=0x0) [0183.430] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.430] GetLastError () returned 0x5 [0183.430] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.430] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.430] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Cyrl-RS\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4c20 [0183.431] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.431] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.431] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0183.431] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0183.431] SetLastError (dwErrCode=0x0) [0183.431] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Cyrl-RS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\sr-cyrl-rs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.431] GetLastError () returned 0x5 [0183.431] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.431] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.431] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.431] SetLastError (dwErrCode=0x0) [0183.431] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.431] GetLastError () returned 0x5 [0183.431] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.431] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.431] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Latn-CS\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb42c0 [0183.432] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.432] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0183.432] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0183.432] SetLastError (dwErrCode=0x0) [0183.432] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Latn-CS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\sr-latn-cs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.432] GetLastError () returned 0x5 [0183.432] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.432] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.432] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.433] SetLastError (dwErrCode=0x0) [0183.433] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.433] GetLastError () returned 0x5 [0183.433] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.433] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.433] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Latn-RS\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4c20 [0183.433] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.434] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.434] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0183.434] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0183.434] SetLastError (dwErrCode=0x0) [0183.434] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Latn-RS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\sr-latn-rs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.434] GetLastError () returned 0x5 [0183.434] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.434] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.434] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.434] SetLastError (dwErrCode=0x0) [0183.434] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.434] GetLastError () returned 0x5 [0183.434] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.434] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.434] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sv\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb43e0 [0183.434] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.434] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.434] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0183.435] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0183.435] SetLastError (dwErrCode=0x0) [0183.435] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sv\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\sv\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.435] GetLastError () returned 0x5 [0183.435] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.435] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.435] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.435] SetLastError (dwErrCode=0x0) [0183.435] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.435] GetLastError () returned 0x5 [0183.435] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.435] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.435] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\th\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb56a0 [0183.436] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.436] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.436] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0183.436] FindClose (in: hFindFile=0x665abb56a0 | out: hFindFile=0x665abb56a0) returned 1 [0183.436] SetLastError (dwErrCode=0x0) [0183.436] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\th\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\th\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.436] GetLastError () returned 0x5 [0183.436] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.436] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.436] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.436] SetLastError (dwErrCode=0x0) [0183.437] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.437] GetLastError () returned 0x5 [0183.437] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.437] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.437] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\tr\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb43e0 [0183.437] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.437] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.437] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0183.437] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0183.438] SetLastError (dwErrCode=0x0) [0183.438] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\tr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\tr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.438] GetLastError () returned 0x5 [0183.438] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.438] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.438] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.438] SetLastError (dwErrCode=0x0) [0183.438] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.438] GetLastError () returned 0x5 [0183.438] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.438] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.438] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\uk\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb49e0 [0183.439] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.439] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.439] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0183.439] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0183.439] SetLastError (dwErrCode=0x0) [0183.439] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\uk\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\uk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.439] GetLastError () returned 0x5 [0183.439] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.439] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.439] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.439] SetLastError (dwErrCode=0x0) [0183.439] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.439] GetLastError () returned 0x5 [0183.439] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.440] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.440] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\vi\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb49e0 [0183.440] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.440] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.440] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0183.440] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0183.440] SetLastError (dwErrCode=0x0) [0183.440] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\vi\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\vi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.441] GetLastError () returned 0x5 [0183.441] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.441] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.441] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.441] SetLastError (dwErrCode=0x0) [0183.441] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.441] GetLastError () returned 0x5 [0183.441] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.441] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.441] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\zh-CN\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb42c0 [0183.442] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.442] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.442] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0183.442] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0183.442] SetLastError (dwErrCode=0x0) [0183.442] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\zh-CN\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\zh-cn\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.442] GetLastError () returned 0x5 [0183.442] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.442] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.442] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.442] SetLastError (dwErrCode=0x0) [0183.442] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.442] GetLastError () returned 0x5 [0183.442] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.443] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.443] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\zh-TW\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4a40 [0183.443] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.443] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.443] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0183.443] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0183.443] SetLastError (dwErrCode=0x0) [0183.443] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\zh-TW\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\zh-tw\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.444] GetLastError () returned 0x5 [0183.444] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.444] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.444] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0183.444] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0183.444] SetLastError (dwErrCode=0x0) [0183.444] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.444] GetLastError () returned 0x5 [0183.444] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0183.444] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.444] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.444] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.444] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.444] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSO0127.ACL", dwFileAttributes=0x80) returned 0 [0183.445] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSO0127.ACL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mso0127.acl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.445] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.445] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.446] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.446] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.446] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.446] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.446] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.446] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.446] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.446] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOCRRES.ORP", dwFileAttributes=0x80) returned 0 [0183.446] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOCRRES.ORP" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msocrres.orp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.446] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.446] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.446] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.446] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.447] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.447] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.447] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.447] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.447] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.447] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.447] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.447] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.447] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.447] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.447] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.447] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.447] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.447] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.447] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.447] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.447] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoutilstat.etw.man", dwFileAttributes=0x80) returned 0 [0183.447] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoutilstat.etw.man" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msoutilstat.etw.man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.447] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.447] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.448] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.448] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.448] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOUTL.OLB", dwFileAttributes=0x80) returned 0 [0183.449] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOUTL.OLB" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msoutl.olb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.449] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.449] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.449] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.449] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.449] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.449] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPPT.OLB", dwFileAttributes=0x80) returned 0 [0183.450] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPPT.OLB" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msppt.olb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.450] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.450] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.450] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.450] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.451] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPRJ.OLB", dwFileAttributes=0x80) returned 0 [0183.454] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPRJ.OLB" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msprj.olb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.455] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.455] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.455] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.455] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.456] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.456] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.456] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.456] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.456] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.TLB", dwFileAttributes=0x80) returned 0 [0183.457] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.TLB" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mspub.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.457] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.457] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.457] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.457] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.458] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.VisualElementsManifest.xml", dwFileAttributes=0x80) returned 0 [0183.458] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mspub.visualelementsmanifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.459] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.459] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.459] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.459] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.459] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.459] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.459] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.459] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.459] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.460] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSWORD.OLB", dwFileAttributes=0x80) returned 0 [0183.461] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSWORD.OLB" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msword.olb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.461] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.461] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.462] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.462] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.462] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.462] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSZIP.DIC", dwFileAttributes=0x80) returned 0 [0183.462] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSZIP.DIC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mszip.dic"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.462] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.462] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.463] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.463] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.463] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\muauth.cab", dwFileAttributes=0x80) returned 0 [0183.463] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\muauth.cab" (normalized: "c:\\program files\\microsoft office\\root\\office16\\muauth.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.464] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.464] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.464] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.464] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.464] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MYSL.ICO", dwFileAttributes=0x80) returned 0 [0183.464] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MYSL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mysl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.465] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.465] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.465] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.465] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.465] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.465] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.465] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.465] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.465] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\NativeHostAnnotationApp.xap", dwFileAttributes=0x80) returned 0 [0183.465] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\NativeHostAnnotationApp.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\nativehostannotationapp.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.465] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.465] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.466] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.466] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.466] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\NativeHostPollApp.xap", dwFileAttributes=0x80) returned 0 [0183.466] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\NativeHostPollApp.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\nativehostpollapp.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.466] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.466] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.466] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.466] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.466] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.466] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.467] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.467] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.467] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.467] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.467] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.467] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.467] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.467] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.467] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.467] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.467] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.467] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.467] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Ocomprivate.zip", dwFileAttributes=0x80) returned 0 [0183.467] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Ocomprivate.zip" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ocomprivate.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.468] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.468] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.468] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.468] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.468] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.468] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.468] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.468] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.468] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.468] SetLastError (dwErrCode=0x0) [0183.468] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.468] GetLastError () returned 0x5 [0183.468] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0183.468] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.468] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb5460 [0183.469] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.470] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.470] SetLastError (dwErrCode=0x0) [0183.470] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.470] GetLastError () returned 0x5 [0183.470] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.470] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.470] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Redshift\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4920 [0183.470] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.470] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.470] SetLastError (dwErrCode=0x0) [0183.470] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Redshift\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\redshift\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.470] GetLastError () returned 0x5 [0183.470] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0183.470] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.470] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Redshift\\lib\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb49e0 [0183.472] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0183.472] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0183.472] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0183.472] SetLastError (dwErrCode=0x0) [0183.472] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Redshift\\lib\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\redshift\\lib\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.472] GetLastError () returned 0x5 [0183.472] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0183.472] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.472] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Redshift\\lib\\OpenSSL64.DllA\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb43e0 [0183.473] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0183.473] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0183.473] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0183.473] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0183.473] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0183.473] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0183.473] SetLastError (dwErrCode=0x0) [0183.473] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Redshift\\lib\\OpenSSL64.DllA\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\redshift\\lib\\openssl64.dlla\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.473] GetLastError () returned 0x5 [0183.473] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0183.473] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.473] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0183.473] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0183.473] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0183.473] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0183.473] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0183.473] SetLastError (dwErrCode=0x0) [0183.473] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Redshift\\lib\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\redshift\\lib\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.473] GetLastError () returned 0x5 [0183.474] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0183.474] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.474] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0183.474] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0183.474] SetLastError (dwErrCode=0x0) [0183.474] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Redshift\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\redshift\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.474] GetLastError () returned 0x5 [0183.474] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.474] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.474] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.474] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.474] SetLastError (dwErrCode=0x0) [0183.474] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.474] GetLastError () returned 0x5 [0183.474] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.475] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.475] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4f80 [0183.475] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.475] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.475] SetLastError (dwErrCode=0x0) [0183.475] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\salesforce\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.475] GetLastError () returned 0x5 [0183.475] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0183.475] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.475] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4f20 [0183.477] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0183.477] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0183.477] SetLastError (dwErrCode=0x0) [0183.477] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\salesforce\\lib\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.477] GetLastError () returned 0x5 [0183.477] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0183.477] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.477] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\1033\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb5040 [0183.479] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0183.479] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0183.479] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.480] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\1033\\DSMESSAGES.XML", dwFileAttributes=0x80) returned 0 [0183.481] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\1033\\DSMESSAGES.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\salesforce\\lib\\1033\\dsmessages.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.482] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.482] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.482] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0183.482] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\1033\\ODBCMESSAGES.XML", dwFileAttributes=0x80) returned 0 [0183.483] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\1033\\ODBCMESSAGES.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\salesforce\\lib\\1033\\odbcmessages.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.483] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.484] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.484] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0183.484] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.484] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\1033\\PGOMESSAGES.XML", dwFileAttributes=0x80) returned 0 [0183.484] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\1033\\PGOMESSAGES.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\salesforce\\lib\\1033\\pgomessages.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.485] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.485] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.485] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0183.485] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.485] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\1033\\SFMESSAGES.XML", dwFileAttributes=0x80) returned 0 [0183.485] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\1033\\SFMESSAGES.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\salesforce\\lib\\1033\\sfmessages.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.486] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.486] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.486] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0183.486] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.486] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\1033\\SQLENGINEMESSAGES.XML", dwFileAttributes=0x80) returned 0 [0183.486] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\1033\\SQLENGINEMESSAGES.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\salesforce\\lib\\1033\\sqlenginemessages.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.487] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.487] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.487] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0183.487] FindClose (in: hFindFile=0x665abb5040 | out: hFindFile=0x665abb5040) returned 1 [0183.488] SetLastError (dwErrCode=0x0) [0183.488] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\salesforce\\lib\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.491] GetLastError () returned 0x5 [0183.491] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0183.491] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.491] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0183.491] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.492] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\cacerts.pem", dwFileAttributes=0x80) returned 0 [0183.493] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\cacerts.pem" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\salesforce\\lib\\cacerts.pem"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.493] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.493] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.493] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0183.493] SetLastError (dwErrCode=0x0) [0183.493] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\salesforce\\lib\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.494] GetLastError () returned 0x5 [0183.494] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0183.494] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.494] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\LibCurl64.DllA\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb45c0 [0183.494] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0183.494] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0183.494] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0183.494] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0183.494] FindClose (in: hFindFile=0x665abb45c0 | out: hFindFile=0x665abb45c0) returned 1 [0183.494] SetLastError (dwErrCode=0x0) [0183.494] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\LibCurl64.DllA\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\salesforce\\lib\\libcurl64.dlla\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.494] GetLastError () returned 0x5 [0183.494] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0183.494] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.495] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0183.495] SetLastError (dwErrCode=0x0) [0183.495] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\salesforce\\lib\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.495] GetLastError () returned 0x5 [0183.495] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0183.495] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.495] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\OpenSSL64.DllA\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb53a0 [0183.495] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0183.495] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0183.495] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0183.495] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0183.495] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0183.495] FindClose (in: hFindFile=0x665abb53a0 | out: hFindFile=0x665abb53a0) returned 1 [0183.495] SetLastError (dwErrCode=0x0) [0183.495] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\OpenSSL64.DllA\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\salesforce\\lib\\openssl64.dlla\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.496] GetLastError () returned 0x5 [0183.496] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0183.496] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.496] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0183.496] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0183.496] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0183.496] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0183.496] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0183.496] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0183.496] FindClose (in: hFindFile=0x665abb4f20 | out: hFindFile=0x665abb4f20) returned 1 [0183.496] SetLastError (dwErrCode=0x0) [0183.496] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\salesforce\\lib\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.496] GetLastError () returned 0x5 [0183.496] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0183.496] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.496] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0183.497] FindClose (in: hFindFile=0x665abb4f80 | out: hFindFile=0x665abb4f80) returned 1 [0183.497] SetLastError (dwErrCode=0x0) [0183.497] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\salesforce\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.497] GetLastError () returned 0x5 [0183.497] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.497] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.497] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.497] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0183.497] FindClose (in: hFindFile=0x665abb5460 | out: hFindFile=0x665abb5460) returned 1 [0183.497] SetLastError (dwErrCode=0x0) [0183.497] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.497] GetLastError () returned 0x5 [0183.497] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0183.498] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.498] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.498] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.498] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.498] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.498] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.498] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.498] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OFFSYM.TTF", dwFileAttributes=0x80) returned 0 [0183.499] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OFFSYM.TTF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\offsym.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.499] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.499] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.500] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.500] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OFFSYMB.TTF", dwFileAttributes=0x80) returned 0 [0183.500] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OFFSYMB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\offsymb.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.501] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.501] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.501] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.501] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.501] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OFFSYML.TTF", dwFileAttributes=0x80) returned 0 [0183.502] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OFFSYML.TTF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\offsyml.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.502] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.502] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.502] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.502] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OFFSYMSB.TTF", dwFileAttributes=0x80) returned 0 [0183.503] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OFFSYMSB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\offsymsb.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.503] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.503] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.503] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.503] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OFFSYMSL.TTF", dwFileAttributes=0x80) returned 0 [0183.504] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OFFSYMSL.TTF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\offsymsl.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.505] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.505] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.505] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.505] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OFFSYMXL.TTF", dwFileAttributes=0x80) returned 0 [0183.506] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OFFSYMXL.TTF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\offsymxl.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.506] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.506] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.506] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.506] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.506] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.506] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.506] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.506] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.506] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OMML2MML.XSL", dwFileAttributes=0x80) returned 0 [0183.507] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OMML2MML.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\omml2mml.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.508] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.508] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.508] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.508] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.508] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.508] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.508] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.510] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.510] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.510] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.510] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.510] SetLastError (dwErrCode=0x0) [0183.510] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.510] GetLastError () returned 0x5 [0183.510] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0183.510] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.510] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4560 [0183.512] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.512] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.512] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\prnms006.inf", dwFileAttributes=0x80) returned 0 [0183.512] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\prnms006.inf" (normalized: "c:\\program files\\microsoft office\\root\\office16\\onenote\\prnms006.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.513] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.513] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.513] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.513] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.513] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\prnSendToOneNote.cat", dwFileAttributes=0x80) returned 0 [0183.514] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\prnSendToOneNote.cat" (normalized: "c:\\program files\\microsoft office\\root\\office16\\onenote\\prnsendtoonenote.cat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.514] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.514] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.515] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.515] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.515] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\prnSendToOneNote_win7.cat", dwFileAttributes=0x80) returned 0 [0183.516] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\prnSendToOneNote_win7.cat" (normalized: "c:\\program files\\microsoft office\\root\\office16\\onenote\\prnsendtoonenote_win7.cat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.516] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.516] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.516] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.516] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.517] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\prnSendToOneNote_win7.inf", dwFileAttributes=0x80) returned 0 [0183.517] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\prnSendToOneNote_win7.inf" (normalized: "c:\\program files\\microsoft office\\root\\office16\\onenote\\prnsendtoonenote_win7.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.517] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.517] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.517] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.517] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.517] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.518] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\SendToOneNote-PipelineConfig.xml", dwFileAttributes=0x80) returned 0 [0183.519] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\SendToOneNote-PipelineConfig.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\onenote\\sendtoonenote-pipelineconfig.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.519] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.519] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.519] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.519] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\SendToOneNote.gpd", dwFileAttributes=0x80) returned 0 [0183.520] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\SendToOneNote.gpd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\onenote\\sendtoonenote.gpd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.521] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.521] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.521] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.521] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.521] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.521] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\SendToOneNoteNames.gpd", dwFileAttributes=0x80) returned 0 [0183.522] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\SendToOneNoteNames.gpd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\onenote\\sendtoonenotenames.gpd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.522] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.523] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.523] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0183.523] FindClose (in: hFindFile=0x665abb4560 | out: hFindFile=0x665abb4560) returned 1 [0183.524] SetLastError (dwErrCode=0x0) [0183.524] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\onenote\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.527] GetLastError () returned 0x5 [0183.527] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0183.527] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.527] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.527] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.527] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTE.VisualElementsManifest.xml", dwFileAttributes=0x80) returned 0 [0183.528] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTE.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\onenote.visualelementsmanifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.528] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.528] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.529] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.529] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.529] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.529] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.529] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.529] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.529] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.529] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.529] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.529] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.529] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.529] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.529] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.529] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.529] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ORMMODEL.MDL", dwFileAttributes=0x80) returned 0 [0183.531] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ORMMODEL.MDL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ormmodel.mdl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.531] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.531] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.531] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.531] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.531] SetLastError (dwErrCode=0x0) [0183.531] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.531] GetLastError () returned 0x5 [0183.531] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0183.532] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.532] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\osfFPA\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb54c0 [0183.532] FindNextFileW (in: hFindFile=0x665abb54c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.532] FindNextFileW (in: hFindFile=0x665abb54c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.532] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\osfFPA\\addins.xml", dwFileAttributes=0x80) returned 0 [0183.534] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\osfFPA\\addins.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\osffpa\\addins.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.534] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.534] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.534] FindNextFileW (in: hFindFile=0x665abb54c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0183.534] FindClose (in: hFindFile=0x665abb54c0 | out: hFindFile=0x665abb54c0) returned 1 [0183.534] SetLastError (dwErrCode=0x0) [0183.535] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\osfFPA\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\osffpa\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.535] GetLastError () returned 0x5 [0183.535] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0183.535] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.535] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.535] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.535] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.535] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.535] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.535] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.535] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLFLTR.DAT", dwFileAttributes=0x80) returned 0 [0183.538] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLFLTR.DAT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlfltr.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.538] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.538] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.538] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.538] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.538] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.538] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.538] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.539] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.539] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLOOK.VisualElementsManifest.xml", dwFileAttributes=0x80) returned 0 [0183.540] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLOOK.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlook.visualelementsmanifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.540] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.540] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.541] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.541] SetLastError (dwErrCode=0x0) [0183.541] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.541] GetLastError () returned 0x5 [0183.541] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0183.541] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.541] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4f20 [0183.543] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.544] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.544] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\AMERITECH.NET.XML", dwFileAttributes=0x80) returned 0 [0183.546] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\AMERITECH.NET.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\ameritech.net.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.546] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.546] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.547] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.547] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\BTINTERNET.NET.XML", dwFileAttributes=0x80) returned 0 [0183.548] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\BTINTERNET.NET.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\btinternet.net.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.548] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.548] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.548] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.548] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\BTOPENWORLD.COM.XML", dwFileAttributes=0x80) returned 0 [0183.550] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\BTOPENWORLD.COM.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\btopenworld.com.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.550] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.550] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.550] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.550] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\FLASH.NET.XML", dwFileAttributes=0x80) returned 0 [0183.551] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\FLASH.NET.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\flash.net.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.551] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.551] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.551] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.551] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.551] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\GMAIL.COM.XML", dwFileAttributes=0x80) returned 0 [0183.552] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\GMAIL.COM.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\gmail.com.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.553] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.553] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.553] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.553] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.553] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\NL.ROGERS.COM.XML", dwFileAttributes=0x80) returned 0 [0183.553] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\NL.ROGERS.COM.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\nl.rogers.com.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.554] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.554] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.554] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.554] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\NVBELL.NET.XML", dwFileAttributes=0x80) returned 0 [0183.557] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\NVBELL.NET.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\nvbell.net.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.557] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.557] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.557] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.557] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.558] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\PACBELL.NET.XML", dwFileAttributes=0x80) returned 0 [0183.558] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\PACBELL.NET.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\pacbell.net.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.558] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.558] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.558] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.558] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.558] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\PRODIGY.NET.XML", dwFileAttributes=0x80) returned 0 [0183.559] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\PRODIGY.NET.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\prodigy.net.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.559] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.559] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.559] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.559] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\ROGERS.COM.XML", dwFileAttributes=0x80) returned 0 [0183.560] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\ROGERS.COM.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\rogers.com.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.560] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.560] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.560] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.560] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\SBCGLOBAL.NET.XML", dwFileAttributes=0x80) returned 0 [0183.562] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\SBCGLOBAL.NET.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\sbcglobal.net.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.563] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.563] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.563] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.563] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\SNET.NET.XML", dwFileAttributes=0x80) returned 0 [0183.563] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\SNET.NET.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\snet.net.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.563] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.563] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.564] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.564] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.564] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\SWBELL.NET.XML", dwFileAttributes=0x80) returned 0 [0183.564] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\SWBELL.NET.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\swbell.net.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.564] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.564] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.564] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.565] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.565] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\TALK21.COM.XML", dwFileAttributes=0x80) returned 0 [0183.565] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\TALK21.COM.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\talk21.com.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.565] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.565] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.565] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.565] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.566] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\WANS.NET.XML", dwFileAttributes=0x80) returned 0 [0183.566] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\WANS.NET.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\wans.net.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.566] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.566] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.566] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.566] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.566] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.CA.XML", dwFileAttributes=0x80) returned 0 [0183.567] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.CA.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.ca.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.567] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.567] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.568] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.568] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.568] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.CO.ID.XML", dwFileAttributes=0x80) returned 0 [0183.569] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.CO.ID.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.co.id.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.569] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.569] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.569] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.569] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.570] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.CO.IN.XML", dwFileAttributes=0x80) returned 0 [0183.570] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.CO.IN.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.co.in.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.570] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.570] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.571] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.571] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.CO.JP.XML", dwFileAttributes=0x80) returned 0 [0183.571] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.CO.JP.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.co.jp.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.571] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.571] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.571] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.571] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.572] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.CO.KR.XML", dwFileAttributes=0x80) returned 0 [0183.572] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.CO.KR.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.co.kr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.572] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.573] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.573] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.573] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.CO.NZ.XML", dwFileAttributes=0x80) returned 0 [0183.573] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.CO.NZ.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.co.nz.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.573] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.573] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.574] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.574] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.CO.TH.XML", dwFileAttributes=0x80) returned 0 [0183.574] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.CO.TH.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.co.th.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.574] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.574] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.574] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.574] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.CO.UK.XML", dwFileAttributes=0x80) returned 0 [0183.575] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.CO.UK.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.co.uk.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.575] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.575] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.575] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.575] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.AR.XML", dwFileAttributes=0x80) returned 0 [0183.576] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.AR.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.com.ar.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.576] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.576] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.576] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.576] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.576] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.AU.XML", dwFileAttributes=0x80) returned 0 [0183.576] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.AU.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.com.au.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.577] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.577] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.577] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.577] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.577] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.BR.XML", dwFileAttributes=0x80) returned 0 [0183.577] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.BR.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.com.br.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.578] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.578] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.578] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.578] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.CN.XML", dwFileAttributes=0x80) returned 0 [0183.578] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.CN.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.com.cn.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.578] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.579] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.579] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.579] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.579] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.HK.XML", dwFileAttributes=0x80) returned 0 [0183.580] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.HK.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.com.hk.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.580] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.580] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.580] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.580] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.MX.XML", dwFileAttributes=0x80) returned 0 [0183.580] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.MX.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.com.mx.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.581] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.581] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.581] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.581] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.581] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.MY.XML", dwFileAttributes=0x80) returned 0 [0183.582] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.MY.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.com.my.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.582] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.582] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.582] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.582] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.582] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.PH.XML", dwFileAttributes=0x80) returned 0 [0183.584] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.PH.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.com.ph.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.584] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.584] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.585] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.585] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.585] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.SG.XML", dwFileAttributes=0x80) returned 0 [0183.586] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.SG.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.com.sg.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.586] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.586] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.586] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.586] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.586] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.TW.XML", dwFileAttributes=0x80) returned 0 [0183.586] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.TW.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.com.tw.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.587] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.587] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.587] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.587] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.VN.XML", dwFileAttributes=0x80) returned 0 [0183.587] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.VN.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.com.vn.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.587] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.588] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.588] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.588] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.588] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.XML", dwFileAttributes=0x80) returned 0 [0183.589] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.com.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.589] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.589] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.589] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.589] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.DE.XML", dwFileAttributes=0x80) returned 0 [0183.590] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.DE.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.de.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.590] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.590] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.590] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.591] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.591] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.ES.XML", dwFileAttributes=0x80) returned 0 [0183.591] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.ES.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.es.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.592] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.592] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.592] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.592] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.FR.XML", dwFileAttributes=0x80) returned 0 [0183.593] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.FR.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.fr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.593] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.593] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.593] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.593] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.594] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.HK.XML", dwFileAttributes=0x80) returned 0 [0183.594] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.HK.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.hk.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.594] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.594] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.594] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.594] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.595] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.IE.XML", dwFileAttributes=0x80) returned 0 [0183.595] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.IE.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.ie.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.595] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.595] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.595] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.595] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.IT.XML", dwFileAttributes=0x80) returned 0 [0183.596] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.IT.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.it.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.596] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.596] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.596] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.596] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.JP.XML", dwFileAttributes=0x80) returned 0 [0183.597] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.JP.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.jp.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.597] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.597] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.597] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.597] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.598] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.NO.XML", dwFileAttributes=0x80) returned 0 [0183.598] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.NO.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.no.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.598] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.598] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.598] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.598] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.598] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.PL.XML", dwFileAttributes=0x80) returned 0 [0183.599] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.PL.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.pl.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.599] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.599] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.599] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.599] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.599] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.SE.XML", dwFileAttributes=0x80) returned 0 [0183.600] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.SE.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.se.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.600] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.600] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.600] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0183.600] FindClose (in: hFindFile=0x665abb4f20 | out: hFindFile=0x665abb4f20) returned 1 [0183.601] SetLastError (dwErrCode=0x0) [0183.601] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.604] GetLastError () returned 0x5 [0183.604] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0183.604] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.604] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.604] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.604] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.604] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.604] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.604] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.604] SetLastError (dwErrCode=0x0) [0183.604] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.604] GetLastError () returned 0x5 [0183.604] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0183.605] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.605] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb5760 [0183.606] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.607] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.607] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL001.XML", dwFileAttributes=0x80) returned 0 [0183.607] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL001.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl001.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.607] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.607] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.608] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.608] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL002.XML", dwFileAttributes=0x80) returned 0 [0183.610] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL002.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl002.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.611] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.611] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.611] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.611] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.611] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL010.XML", dwFileAttributes=0x80) returned 0 [0183.612] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL010.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl010.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.612] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.613] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.613] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.613] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.613] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL011.XML", dwFileAttributes=0x80) returned 0 [0183.613] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL011.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl011.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.613] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.613] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.614] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.614] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.614] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL012.XML", dwFileAttributes=0x80) returned 0 [0183.615] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL012.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl012.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.615] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.615] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.615] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.615] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.615] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL016.XML", dwFileAttributes=0x80) returned 0 [0183.615] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL016.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl016.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.616] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.616] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.616] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.616] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL020.XML", dwFileAttributes=0x80) returned 0 [0183.616] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL020.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl020.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.616] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.616] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.617] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.617] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.617] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL022.XML", dwFileAttributes=0x80) returned 0 [0183.617] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL022.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl022.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.617] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.617] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.617] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.618] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.618] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL026.XML", dwFileAttributes=0x80) returned 0 [0183.618] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL026.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl026.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.618] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.618] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.618] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.618] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL027.XML", dwFileAttributes=0x80) returned 0 [0183.619] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL027.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl027.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.619] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.619] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.619] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.619] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL044.XML", dwFileAttributes=0x80) returned 0 [0183.620] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL044.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl044.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.620] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.620] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.620] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.620] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL048.XML", dwFileAttributes=0x80) returned 0 [0183.621] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL048.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl048.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.622] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.622] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.622] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.622] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL054.XML", dwFileAttributes=0x80) returned 0 [0183.622] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL054.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl054.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.623] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.623] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.623] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.623] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.623] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL058.XML", dwFileAttributes=0x80) returned 0 [0183.624] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL058.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl058.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.624] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.624] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.624] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.624] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL065.XML", dwFileAttributes=0x80) returned 0 [0183.625] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL065.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl065.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.625] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.625] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.625] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.625] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL075.XML", dwFileAttributes=0x80) returned 0 [0183.626] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL075.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl075.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.626] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.626] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.626] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.626] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL077.XML", dwFileAttributes=0x80) returned 0 [0183.627] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL077.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl077.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.627] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.627] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.627] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.627] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL078.XML", dwFileAttributes=0x80) returned 0 [0183.628] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL078.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl078.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.628] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.628] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.628] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.628] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL081.XML", dwFileAttributes=0x80) returned 0 [0183.629] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL081.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl081.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.630] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.630] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.630] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.630] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.630] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL082.XML", dwFileAttributes=0x80) returned 0 [0183.631] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL082.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl082.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.632] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.632] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.632] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.632] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL083.XML", dwFileAttributes=0x80) returned 0 [0183.632] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL083.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl083.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.633] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.633] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.633] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.633] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL086.XML", dwFileAttributes=0x80) returned 0 [0183.634] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL086.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl086.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.634] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.634] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.634] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.634] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.634] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL087.XML", dwFileAttributes=0x80) returned 0 [0183.635] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL087.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl087.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.635] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.635] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.635] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.635] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL089.XML", dwFileAttributes=0x80) returned 0 [0183.635] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL089.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl089.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.636] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.636] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.636] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.636] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL090.XML", dwFileAttributes=0x80) returned 0 [0183.636] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL090.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl090.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.636] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.636] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.637] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.637] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.637] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL092.XML", dwFileAttributes=0x80) returned 0 [0183.637] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL092.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl092.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.637] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.637] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.637] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.637] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.638] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL093.XML", dwFileAttributes=0x80) returned 0 [0183.638] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL093.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl093.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.638] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.638] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.638] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.638] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL095.XML", dwFileAttributes=0x80) returned 0 [0183.639] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL095.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl095.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.639] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.639] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.639] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.639] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.640] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL096.XML", dwFileAttributes=0x80) returned 0 [0183.640] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL096.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl096.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.640] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.641] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.641] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.641] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.641] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL097.XML", dwFileAttributes=0x80) returned 0 [0183.642] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL097.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl097.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.642] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.642] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.642] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.642] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL102.XML", dwFileAttributes=0x80) returned 0 [0183.643] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL102.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl102.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.643] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.643] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.643] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.643] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.644] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL103.XML", dwFileAttributes=0x80) returned 0 [0183.644] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL103.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl103.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.644] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.644] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.644] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.644] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.644] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL104.XML", dwFileAttributes=0x80) returned 0 [0183.645] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL104.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl104.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.645] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.645] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.645] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.646] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL105.XML", dwFileAttributes=0x80) returned 0 [0183.646] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL105.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl105.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.647] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.647] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.647] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.647] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL106.XML", dwFileAttributes=0x80) returned 0 [0183.647] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL106.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl106.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.647] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.647] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.648] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.648] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.648] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL107.XML", dwFileAttributes=0x80) returned 0 [0183.648] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL107.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl107.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.648] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.648] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.649] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.649] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.649] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL108.XML", dwFileAttributes=0x80) returned 0 [0183.649] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL108.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl108.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.650] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.650] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.650] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.650] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.650] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL109.XML", dwFileAttributes=0x80) returned 0 [0183.651] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL109.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl109.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.651] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.651] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.651] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.651] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL110.XML", dwFileAttributes=0x80) returned 0 [0183.652] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL110.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl110.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.652] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.652] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.652] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.652] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.652] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL111.XML", dwFileAttributes=0x80) returned 0 [0183.652] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL111.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl111.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.653] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.653] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.653] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.653] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.653] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL112.XML", dwFileAttributes=0x80) returned 0 [0183.653] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL112.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl112.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.654] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.654] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.654] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.654] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.654] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL115.XML", dwFileAttributes=0x80) returned 0 [0183.655] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL115.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl115.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.655] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.655] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.655] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.655] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL116.XML", dwFileAttributes=0x80) returned 0 [0183.657] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL116.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl116.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.657] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.657] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.657] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.657] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.657] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL117.XML", dwFileAttributes=0x80) returned 0 [0183.658] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL117.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl117.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.658] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.658] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.658] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.658] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL118.XML", dwFileAttributes=0x80) returned 0 [0183.660] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL118.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl118.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.660] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.660] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.660] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.660] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.660] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL119.XML", dwFileAttributes=0x80) returned 0 [0183.660] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL119.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl119.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.661] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.661] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.661] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.661] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL120.XML", dwFileAttributes=0x80) returned 0 [0183.662] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL120.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl120.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.662] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.662] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.662] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.662] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.663] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL121.XML", dwFileAttributes=0x80) returned 0 [0183.663] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL121.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl121.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.663] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.663] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.664] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.664] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN001.XML", dwFileAttributes=0x80) returned 0 [0183.664] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN001.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn001.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.664] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.664] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.665] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.665] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.665] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN002.XML", dwFileAttributes=0x80) returned 0 [0183.665] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN002.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn002.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.666] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.666] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.666] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.666] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN010.XML", dwFileAttributes=0x80) returned 0 [0183.666] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN010.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn010.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.667] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.667] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.667] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.667] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN011.XML", dwFileAttributes=0x80) returned 0 [0183.667] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN011.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn011.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.667] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.667] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.668] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.668] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN020.XML", dwFileAttributes=0x80) returned 0 [0183.668] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN020.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn020.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.668] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.668] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.668] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.668] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.669] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN022.XML", dwFileAttributes=0x80) returned 0 [0183.669] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN022.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn022.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.670] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.670] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.670] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.670] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.670] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN026.XML", dwFileAttributes=0x80) returned 0 [0183.671] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN026.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn026.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.671] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.671] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.672] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.672] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.672] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN027.XML", dwFileAttributes=0x80) returned 0 [0183.672] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN027.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn027.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.672] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.672] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.672] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.672] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN044.XML", dwFileAttributes=0x80) returned 0 [0183.673] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN044.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn044.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.673] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.673] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.673] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.673] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.674] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN048.XML", dwFileAttributes=0x80) returned 0 [0183.675] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN048.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn048.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.675] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.675] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.676] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.676] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.676] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN054.XML", dwFileAttributes=0x80) returned 0 [0183.677] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN054.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn054.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.677] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.677] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.677] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.677] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN058.XML", dwFileAttributes=0x80) returned 0 [0183.678] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN058.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn058.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.678] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.678] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.678] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.678] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN065.XML", dwFileAttributes=0x80) returned 0 [0183.679] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN065.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn065.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.679] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.679] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.679] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.679] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN075.XML", dwFileAttributes=0x80) returned 0 [0183.681] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN075.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn075.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.681] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.681] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.681] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.681] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN081.XML", dwFileAttributes=0x80) returned 0 [0183.682] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN081.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn081.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.682] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.682] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.683] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.683] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.683] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN082.XML", dwFileAttributes=0x80) returned 0 [0183.683] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN082.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn082.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.683] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.683] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.683] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.683] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.684] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN086.XML", dwFileAttributes=0x80) returned 0 [0183.684] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN086.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn086.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.685] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.685] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.685] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.685] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.685] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN089.XML", dwFileAttributes=0x80) returned 0 [0183.685] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN089.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn089.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.685] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.685] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.686] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.686] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.686] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN090.XML", dwFileAttributes=0x80) returned 0 [0183.687] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN090.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn090.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.687] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.687] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.687] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.687] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.688] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN092.XML", dwFileAttributes=0x80) returned 0 [0183.688] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN092.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn092.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.688] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.688] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.688] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.688] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN095.XML", dwFileAttributes=0x80) returned 0 [0183.689] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN095.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn095.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.689] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.689] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.689] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.689] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN096.XML", dwFileAttributes=0x80) returned 0 [0183.690] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN096.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn096.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.690] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.691] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.691] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.691] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN097.XML", dwFileAttributes=0x80) returned 0 [0183.692] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN097.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn097.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.693] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.693] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.693] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.693] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.693] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN102.XML", dwFileAttributes=0x80) returned 0 [0183.694] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN102.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn102.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.694] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.694] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.694] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.694] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN103.XML", dwFileAttributes=0x80) returned 0 [0183.695] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN103.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn103.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.695] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.695] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.695] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.695] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN105.XML", dwFileAttributes=0x80) returned 0 [0183.696] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN105.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn105.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.696] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.696] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.696] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.696] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.696] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN107.XML", dwFileAttributes=0x80) returned 0 [0183.696] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN107.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn107.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.697] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.697] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.697] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.697] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN108.XML", dwFileAttributes=0x80) returned 0 [0183.697] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN108.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn108.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.698] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.698] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.698] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.698] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.698] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN109.XML", dwFileAttributes=0x80) returned 0 [0183.698] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN109.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn109.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.698] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.698] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.699] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.699] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN110.XML", dwFileAttributes=0x80) returned 0 [0183.700] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN110.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn110.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.700] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.700] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.700] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.700] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN111.XML", dwFileAttributes=0x80) returned 0 [0183.701] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN111.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn111.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.701] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.701] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.701] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.701] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN114.XML", dwFileAttributes=0x80) returned 0 [0183.701] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN114.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn114.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.708] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.708] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.708] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.708] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.709] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN120.XML", dwFileAttributes=0x80) returned 0 [0183.709] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN120.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn120.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.710] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.710] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.710] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.710] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.710] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN121.XML", dwFileAttributes=0x80) returned 0 [0183.710] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN121.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn121.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.711] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.711] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.711] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.711] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PG_INDEX.XML", dwFileAttributes=0x80) returned 0 [0183.712] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PG_INDEX.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pg_index.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.712] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.712] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.712] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0183.712] FindClose (in: hFindFile=0x665abb5760 | out: hFindFile=0x665abb5760) returned 1 [0183.713] SetLastError (dwErrCode=0x0) [0183.713] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.715] GetLastError () returned 0x5 [0183.715] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0183.716] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.716] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.716] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.716] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.716] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.716] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.716] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.716] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.716] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.716] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\pkeyconfig-office.xrm-ms", dwFileAttributes=0x80) returned 0 [0183.718] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\pkeyconfig-office.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pkeyconfig-office.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.718] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.718] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.718] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.719] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\platform-bridge.win32.bundle", dwFileAttributes=0x80) returned 0 [0183.719] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\platform-bridge.win32.bundle" (normalized: "c:\\program files\\microsoft office\\root\\office16\\platform-bridge.win32.bundle"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.719] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.719] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.719] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.719] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.719] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.719] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.720] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\POWERPNT.VisualElementsManifest.xml", dwFileAttributes=0x80) returned 0 [0183.720] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\POWERPNT.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\powerpnt.visualelementsmanifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.721] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.721] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.721] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.721] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.721] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.721] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.721] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.721] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.721] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.721] SetLastError (dwErrCode=0x0) [0183.721] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.721] GetLastError () returned 0x5 [0183.721] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0183.721] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.721] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4560 [0183.723] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.723] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.723] SetLastError (dwErrCode=0x0) [0183.723] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.723] GetLastError () returned 0x5 [0183.723] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.724] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.724] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\1033\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb5040 [0183.724] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.724] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.724] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0183.724] FindClose (in: hFindFile=0x665abb5040 | out: hFindFile=0x665abb5040) returned 1 [0183.726] SetLastError (dwErrCode=0x0) [0183.726] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.726] GetLastError () returned 0x5 [0183.726] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.726] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.726] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.726] SetLastError (dwErrCode=0x0) [0183.726] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.726] GetLastError () returned 0x5 [0183.726] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.726] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.726] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\1036\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb42c0 [0183.727] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.727] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.727] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0183.727] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0183.727] SetLastError (dwErrCode=0x0) [0183.727] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\1036\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\1036\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.727] GetLastError () returned 0x5 [0183.727] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.728] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.728] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.728] SetLastError (dwErrCode=0x0) [0183.728] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.728] GetLastError () returned 0x5 [0183.728] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.728] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.728] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\3082\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb43e0 [0183.729] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.729] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0183.729] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0183.729] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0183.729] SetLastError (dwErrCode=0x0) [0183.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\3082\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\3082\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.729] GetLastError () returned 0x5 [0183.729] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0183.730] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.730] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.730] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\LTSHYPH_EN.LEX", dwFileAttributes=0x80) returned 0 [0183.731] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\LTSHYPH_EN.LEX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\ltshyph_en.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.731] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.731] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.732] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.732] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\LTSHYPH_ES.LEX", dwFileAttributes=0x80) returned 0 [0183.733] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\LTSHYPH_ES.LEX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\ltshyph_es.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.733] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.733] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.734] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.734] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\LTSHYPH_FR.LEX", dwFileAttributes=0x80) returned 0 [0183.735] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\LTSHYPH_FR.LEX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\ltshyph_fr.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.735] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.735] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.735] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.735] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\msgr8en.dub", dwFileAttributes=0x80) returned 0 [0183.736] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\msgr8en.dub" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\msgr8en.dub"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.736] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.736] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.736] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.736] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSGR8EN.LEX", dwFileAttributes=0x80) returned 0 [0183.738] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSGR8EN.LEX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\msgr8en.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.738] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.738] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.738] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.738] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\msgr8es.dub", dwFileAttributes=0x80) returned 0 [0183.739] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\msgr8es.dub" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\msgr8es.dub"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.739] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.739] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.739] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.739] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSGR8ES.LEX", dwFileAttributes=0x80) returned 0 [0183.740] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSGR8ES.LEX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\msgr8es.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.741] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.741] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.741] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.741] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\msgr8fr.dub", dwFileAttributes=0x80) returned 0 [0183.741] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\msgr8fr.dub" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\msgr8fr.dub"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.741] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.741] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.742] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.742] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSGR8FR.LEX", dwFileAttributes=0x80) returned 0 [0183.742] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSGR8FR.LEX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\msgr8fr.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.742] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.742] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.742] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.742] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.742] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.743] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSHY7EN.LEX", dwFileAttributes=0x80) returned 0 [0183.743] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSHY7EN.LEX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\mshy7en.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.744] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.744] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.744] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.744] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.744] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSHY7ES.LEX", dwFileAttributes=0x80) returned 0 [0183.745] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSHY7ES.LEX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\mshy7es.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.745] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.745] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.745] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.745] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.745] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSHY7FR.LEX", dwFileAttributes=0x80) returned 0 [0183.746] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSHY7FR.LEX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\mshy7fr.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.746] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.746] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.746] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.746] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSSP7EN.dub", dwFileAttributes=0x80) returned 0 [0183.748] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSSP7EN.dub" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\mssp7en.dub"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.748] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.748] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.749] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.749] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSSP7EN.LEX", dwFileAttributes=0x80) returned 0 [0183.750] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSSP7EN.LEX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\mssp7en.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.750] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.750] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.750] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.750] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.750] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSSP7ES.dub", dwFileAttributes=0x80) returned 0 [0183.751] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSSP7ES.dub" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\mssp7es.dub"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.751] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.751] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.751] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.751] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSSP7ES.LEX", dwFileAttributes=0x80) returned 0 [0183.752] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSSP7ES.LEX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\mssp7es.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.752] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.752] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.752] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.752] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSSP7FR.dub", dwFileAttributes=0x80) returned 0 [0183.753] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSSP7FR.dub" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\mssp7fr.dub"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.753] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.753] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.753] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.753] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSSP7FR.LEX", dwFileAttributes=0x80) returned 0 [0183.754] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSSP7FR.LEX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\mssp7fr.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.754] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.754] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.754] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.754] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.754] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.754] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.754] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\msth8EN.LEX", dwFileAttributes=0x80) returned 0 [0183.755] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\msth8EN.LEX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\msth8en.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.755] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.755] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.756] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.756] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.756] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.756] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\msth8ES.LEX", dwFileAttributes=0x80) returned 0 [0183.757] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\msth8ES.LEX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\msth8es.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.757] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.757] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.757] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.757] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.757] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\msth8FR.LEX", dwFileAttributes=0x80) returned 0 [0183.758] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\msth8FR.LEX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\msth8fr.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.758] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.758] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.758] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0183.758] FindClose (in: hFindFile=0x665abb4560 | out: hFindFile=0x665abb4560) returned 1 [0183.758] SetLastError (dwErrCode=0x0) [0183.758] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.759] GetLastError () returned 0x5 [0183.759] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0183.759] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.759] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.759] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.759] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.759] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.759] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.759] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.759] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.759] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.759] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.759] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.759] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.759] SetLastError (dwErrCode=0x0) [0183.759] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.760] GetLastError () returned 0x5 [0183.760] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0183.760] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.760] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb56a0 [0183.761] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.761] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.761] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.761] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB10.BDR", dwFileAttributes=0x80) returned 0 [0183.762] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB10.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubba\\mspub10.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.763] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.763] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.763] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.763] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.763] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB11.BDR", dwFileAttributes=0x80) returned 0 [0183.764] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB11.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubba\\mspub11.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.764] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.764] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.772] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.772] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB1A.BDR", dwFileAttributes=0x80) returned 0 [0183.773] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB1A.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubba\\mspub1a.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.773] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.773] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.773] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.773] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB1B.BDR", dwFileAttributes=0x80) returned 0 [0183.774] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB1B.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubba\\mspub1b.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.774] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.774] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.774] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.774] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB2A.BDR", dwFileAttributes=0x80) returned 0 [0183.774] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB2A.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubba\\mspub2a.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.775] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.775] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.775] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.775] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.775] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB2B.BDR", dwFileAttributes=0x80) returned 0 [0183.776] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB2B.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubba\\mspub2b.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.776] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.776] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.776] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.776] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB3A.BDR", dwFileAttributes=0x80) returned 0 [0183.777] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB3A.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubba\\mspub3a.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.777] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.777] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.778] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.778] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.778] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB3B.BDR", dwFileAttributes=0x80) returned 0 [0183.778] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB3B.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubba\\mspub3b.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.779] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.779] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.779] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.779] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.779] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB4.BDR", dwFileAttributes=0x80) returned 0 [0183.780] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB4.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubba\\mspub4.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.780] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.780] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.780] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.780] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB5A.BDR", dwFileAttributes=0x80) returned 0 [0183.781] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB5A.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubba\\mspub5a.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.781] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.781] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.782] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.782] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB5B.BDR", dwFileAttributes=0x80) returned 0 [0183.783] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB5B.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubba\\mspub5b.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.783] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.783] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.783] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.783] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB6.BDR", dwFileAttributes=0x80) returned 0 [0183.784] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB6.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubba\\mspub6.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.784] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.784] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.784] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.784] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB7.BDR", dwFileAttributes=0x80) returned 0 [0183.785] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB7.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubba\\mspub7.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.785] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.785] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.785] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.785] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.785] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB8.BDR", dwFileAttributes=0x80) returned 0 [0183.786] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB8.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubba\\mspub8.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.786] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.786] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.786] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.786] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.786] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB9.BDR", dwFileAttributes=0x80) returned 0 [0183.786] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB9.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubba\\mspub9.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.787] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.787] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.787] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0183.787] FindClose (in: hFindFile=0x665abb56a0 | out: hFindFile=0x665abb56a0) returned 1 [0183.787] SetLastError (dwErrCode=0x0) [0183.787] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubba\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.790] GetLastError () returned 0x5 [0183.790] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0183.790] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.790] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.790] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.790] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0183.790] SetLastError (dwErrCode=0x0) [0183.790] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.790] GetLastError () returned 0x5 [0183.790] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0183.790] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.791] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb42c0 [0183.793] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.793] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.793] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\ACCSBAR.POC", dwFileAttributes=0x80) returned 0 [0183.794] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\ACCSBAR.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\accsbar.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.794] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.794] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.794] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.794] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.794] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\ACCTBOX.POC", dwFileAttributes=0x80) returned 0 [0183.795] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\ACCTBOX.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\acctbox.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.795] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.795] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.795] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.795] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\AD.DPV", dwFileAttributes=0x80) returned 0 [0183.796] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\AD.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\ad.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.796] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.796] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.797] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.797] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.797] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\AD.XML", dwFileAttributes=0x80) returned 0 [0183.797] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\AD.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\ad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.797] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.797] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.797] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.797] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.798] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\AD98.POC", dwFileAttributes=0x80) returned 0 [0183.798] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\AD98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\ad98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.798] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.798] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.798] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.798] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.798] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\ADRESPEL.POC", dwFileAttributes=0x80) returned 0 [0183.799] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\ADRESPEL.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\adrespel.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.799] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.799] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.800] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.800] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.800] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\AIR98.POC", dwFileAttributes=0x80) returned 0 [0183.800] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\AIR98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\air98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.800] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.800] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.800] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.800] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\AWARDHM.POC", dwFileAttributes=0x80) returned 0 [0183.801] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\AWARDHM.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\awardhm.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.801] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.801] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.801] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.801] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.802] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BAN98.POC", dwFileAttributes=0x80) returned 0 [0183.802] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BAN98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\ban98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.802] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.802] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.802] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.802] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.802] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BANNER.DPV", dwFileAttributes=0x80) returned 0 [0183.803] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BANNER.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\banner.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.803] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.803] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.803] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.803] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BANNER.XML", dwFileAttributes=0x80) returned 0 [0183.803] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BANNER.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\banner.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.804] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.804] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.804] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.804] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.804] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BDRTKFUL.POC", dwFileAttributes=0x80) returned 0 [0183.804] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BDRTKFUL.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\bdrtkful.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.804] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.804] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.805] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.805] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BIZCARD.DPV", dwFileAttributes=0x80) returned 0 [0183.806] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BIZCARD.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\bizcard.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.806] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.806] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.807] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.807] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.807] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BIZCARD.XML", dwFileAttributes=0x80) returned 0 [0183.807] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BIZCARD.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\bizcard.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.807] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.807] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.807] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.807] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BIZFORM.DPV", dwFileAttributes=0x80) returned 0 [0183.808] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BIZFORM.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\bizform.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.808] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.808] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.808] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.808] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BIZFORM.XML", dwFileAttributes=0x80) returned 0 [0183.809] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BIZFORM.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\bizform.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.809] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.809] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.809] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.809] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.809] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BORDERBB.DPV", dwFileAttributes=0x80) returned 0 [0183.812] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BORDERBB.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\borderbb.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.812] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.812] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.812] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.812] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.813] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BORDERBB.POC", dwFileAttributes=0x80) returned 0 [0183.813] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BORDERBB.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\borderbb.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.813] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.814] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.814] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.814] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BRCH98SP.POC", dwFileAttributes=0x80) returned 0 [0183.814] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BRCH98SP.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\brch98sp.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.814] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.814] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.815] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.815] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BRCHUR11.POC", dwFileAttributes=0x80) returned 0 [0183.815] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BRCHUR11.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\brchur11.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.815] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.815] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.815] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.815] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BRCHUR98.POC", dwFileAttributes=0x80) returned 0 [0183.816] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BRCHUR98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\brchur98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.816] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.816] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.816] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.816] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BROCHURE.DPV", dwFileAttributes=0x80) returned 0 [0183.817] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BROCHURE.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\brochure.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.817] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.817] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.817] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.817] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.818] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BROCHURE.XML", dwFileAttributes=0x80) returned 0 [0183.818] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BROCHURE.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\brochure.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.818] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.818] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.818] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.818] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.818] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BS2BARB.POC", dwFileAttributes=0x80) returned 0 [0183.819] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BS2BARB.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\bs2barb.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.819] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.819] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.820] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.820] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.820] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BS4BOXES.POC", dwFileAttributes=0x80) returned 0 [0183.820] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BS4BOXES.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\bs4boxes.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.821] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.821] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.821] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.821] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BS53BOXS.POC", dwFileAttributes=0x80) returned 0 [0183.821] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BS53BOXS.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\bs53boxs.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.821] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.821] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.822] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.822] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.822] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BZCARD11.POC", dwFileAttributes=0x80) returned 0 [0183.822] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BZCARD11.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\bzcard11.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.822] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.822] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.823] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.823] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.823] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BZCARDHM.POC", dwFileAttributes=0x80) returned 0 [0183.823] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BZCARDHM.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\bzcardhm.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.823] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.823] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.823] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.823] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.824] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BZCD98SP.POC", dwFileAttributes=0x80) returned 0 [0183.824] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BZCD98SP.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\bzcd98sp.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.824] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.824] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.824] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.824] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.824] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BZCRD98.POC", dwFileAttributes=0x80) returned 0 [0183.825] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BZCRD98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\bzcrd98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.825] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.825] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.825] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.825] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.825] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CALENDAR.DPV", dwFileAttributes=0x80) returned 0 [0183.825] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CALENDAR.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\calendar.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.826] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.826] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.826] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.826] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CALENDAR.XML", dwFileAttributes=0x80) returned 0 [0183.826] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CALENDAR.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\calendar.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.826] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.826] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.827] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.827] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.827] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CALHM.POC", dwFileAttributes=0x80) returned 0 [0183.828] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CALHM.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\calhm.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.828] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.828] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.828] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.829] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CALNDR98.POC", dwFileAttributes=0x80) returned 0 [0183.830] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CALNDR98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\calndr98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.830] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.830] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.830] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.830] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CALSO11.POC", dwFileAttributes=0x80) returned 0 [0183.831] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CALSO11.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\calso11.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.831] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.831] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.831] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.831] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CALSO98.POC", dwFileAttributes=0x80) returned 0 [0183.832] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CALSO98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\calso98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.832] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.832] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.832] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.832] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CATALOG.DPV", dwFileAttributes=0x80) returned 0 [0183.833] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CATALOG.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\catalog.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.833] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.833] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.833] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.833] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CATALOG.XML", dwFileAttributes=0x80) returned 0 [0183.834] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CATALOG.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\catalog.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.834] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.834] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.834] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.835] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CATWIZ.POC", dwFileAttributes=0x80) returned 0 [0183.835] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CATWIZ.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\catwiz.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.835] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.835] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.835] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.835] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CATWIZ11.POC", dwFileAttributes=0x80) returned 0 [0183.836] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CATWIZ11.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\catwiz11.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.837] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.837] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.837] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.837] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CERT.DPV", dwFileAttributes=0x80) returned 0 [0183.838] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CERT.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\cert.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.838] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.838] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.838] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.838] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CERT.XML", dwFileAttributes=0x80) returned 0 [0183.839] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CERT.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\cert.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.839] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.839] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.839] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.839] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CERT98.POC", dwFileAttributes=0x80) returned 0 [0183.840] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CERT98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\cert98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.840] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.840] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.840] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.840] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CERT98SP.POC", dwFileAttributes=0x80) returned 0 [0183.841] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CERT98SP.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\cert98sp.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.841] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.841] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.841] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.841] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CHECKER.POC", dwFileAttributes=0x80) returned 0 [0183.842] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CHECKER.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\checker.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.842] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.842] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.844] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.844] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CONTACTINFOBB.DPV", dwFileAttributes=0x80) returned 0 [0183.845] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CONTACTINFOBB.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\contactinfobb.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.845] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.845] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.845] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.845] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CONTACTINFOBB.POC", dwFileAttributes=0x80) returned 0 [0183.845] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CONTACTINFOBB.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\contactinfobb.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.846] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.846] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.846] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.846] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.846] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\COUPON.POC", dwFileAttributes=0x80) returned 0 [0183.846] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\COUPON.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\coupon.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.847] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.847] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.847] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.847] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGACCBAR.DPV", dwFileAttributes=0x80) returned 0 [0183.847] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGACCBAR.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgaccbar.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.847] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.847] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.848] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.848] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGACCBAR.XML", dwFileAttributes=0x80) returned 0 [0183.849] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGACCBAR.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgaccbar.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.849] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.849] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.849] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.849] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.849] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGACCBOX.DPV", dwFileAttributes=0x80) returned 0 [0183.849] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGACCBOX.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgaccbox.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.850] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.850] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.850] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.850] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.850] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGACCBOX.XML", dwFileAttributes=0x80) returned 0 [0183.850] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGACCBOX.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgaccbox.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.850] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.851] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.851] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.851] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGAD.DPV", dwFileAttributes=0x80) returned 0 [0183.852] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGAD.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgad.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.852] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.852] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.852] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.852] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGAD.XML", dwFileAttributes=0x80) returned 0 [0183.853] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGAD.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.853] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.853] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.853] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.853] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGATNGET.DPV", dwFileAttributes=0x80) returned 0 [0183.854] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGATNGET.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgatnget.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.854] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.854] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.854] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.854] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGATNGET.XML", dwFileAttributes=0x80) returned 0 [0183.855] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGATNGET.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgatnget.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.855] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.855] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.856] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.856] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.856] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGBARBLL.DPV", dwFileAttributes=0x80) returned 0 [0183.856] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGBARBLL.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgbarbll.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.856] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.856] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.856] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.856] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGBARBLL.XML", dwFileAttributes=0x80) returned 0 [0183.857] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGBARBLL.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgbarbll.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.857] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.857] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.858] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.858] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGBORDER.DPV", dwFileAttributes=0x80) returned 0 [0183.858] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGBORDER.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgborder.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.858] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.858] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.859] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.859] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.859] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGBORDER.XML", dwFileAttributes=0x80) returned 0 [0183.859] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGBORDER.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgborder.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.859] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.859] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.859] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.859] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGBOXES.DPV", dwFileAttributes=0x80) returned 0 [0183.860] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGBOXES.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgboxes.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.860] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.860] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.860] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.860] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.861] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGBOXES.XML", dwFileAttributes=0x80) returned 0 [0183.861] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGBOXES.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgboxes.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.861] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.861] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.861] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.861] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.861] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGCAL.DPV", dwFileAttributes=0x80) returned 0 [0183.862] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGCAL.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgcal.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.862] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.862] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.862] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.862] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGCAL.XML", dwFileAttributes=0x80) returned 0 [0183.862] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGCAL.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgcal.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.863] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.863] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.863] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.863] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.863] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGCHKBRD.DPV", dwFileAttributes=0x80) returned 0 [0183.863] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGCHKBRD.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgchkbrd.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.863] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.863] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.864] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.864] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.864] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGCHKBRD.XML", dwFileAttributes=0x80) returned 0 [0183.864] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGCHKBRD.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgchkbrd.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.864] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.864] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.864] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.864] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.865] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGCINFO.XML", dwFileAttributes=0x80) returned 0 [0183.865] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGCINFO.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgcinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.866] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.866] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.866] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.866] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGCOUPON.DPV", dwFileAttributes=0x80) returned 0 [0183.867] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGCOUPON.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgcoupon.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.867] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.867] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.867] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.867] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGCOUPON.XML", dwFileAttributes=0x80) returned 0 [0183.868] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGCOUPON.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgcoupon.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.868] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.868] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.868] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.868] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.868] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGDOTS.DPV", dwFileAttributes=0x80) returned 0 [0183.869] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGDOTS.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgdots.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.870] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.870] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.870] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.870] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.870] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGDOTS.XML", dwFileAttributes=0x80) returned 0 [0183.871] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGDOTS.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgdots.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.871] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.871] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.871] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.871] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.871] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGHEADING.XML", dwFileAttributes=0x80) returned 0 [0183.872] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGHEADING.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgheading.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.872] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.872] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.872] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.872] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGLINACC.DPV", dwFileAttributes=0x80) returned 0 [0183.873] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGLINACC.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dglinacc.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.873] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.873] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.873] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.873] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGLINACC.XML", dwFileAttributes=0x80) returned 0 [0183.874] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGLINACC.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dglinacc.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.874] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.874] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.874] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.874] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGLOGO.DPV", dwFileAttributes=0x80) returned 0 [0183.875] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGLOGO.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dglogo.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.875] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.876] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.876] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.876] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.876] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGLOGO.XML", dwFileAttributes=0x80) returned 0 [0183.876] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGLOGO.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dglogo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.876] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.876] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.877] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.877] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGMAIN.XML", dwFileAttributes=0x80) returned 0 [0183.877] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGMAIN.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgmain.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.877] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.877] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.877] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.878] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGMARQ.DPV", dwFileAttributes=0x80) returned 0 [0183.878] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGMARQ.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgmarq.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.878] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.878] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.878] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.878] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGMARQ.XML", dwFileAttributes=0x80) returned 0 [0183.879] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGMARQ.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgmarq.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.880] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.880] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.880] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.880] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.880] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGMASTHD.DPV", dwFileAttributes=0x80) returned 0 [0183.880] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGMASTHD.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgmasthd.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.880] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.880] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.881] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.881] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.881] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGNAVBAR.DPV", dwFileAttributes=0x80) returned 0 [0183.881] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGNAVBAR.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgnavbar.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.881] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.881] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.881] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.881] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGNAVBAR.XML", dwFileAttributes=0x80) returned 0 [0183.882] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGNAVBAR.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgnavbar.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.883] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.883] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.883] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.883] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGPICCAP.DPV", dwFileAttributes=0x80) returned 0 [0183.884] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGPICCAP.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgpiccap.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.884] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.884] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.884] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.884] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGPICCAP.XML", dwFileAttributes=0x80) returned 0 [0183.884] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGPICCAP.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgpiccap.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.885] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.885] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.885] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.885] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGPQUOT.DPV", dwFileAttributes=0x80) returned 0 [0183.886] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGPQUOT.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgpquot.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.886] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.886] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.886] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.886] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGPQUOT.XML", dwFileAttributes=0x80) returned 0 [0183.887] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGPQUOT.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgpquot.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.887] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.887] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.887] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.887] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGPUNCT.DPV", dwFileAttributes=0x80) returned 0 [0183.887] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGPUNCT.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgpunct.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.888] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.888] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.888] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.888] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.888] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGPUNCT.XML", dwFileAttributes=0x80) returned 0 [0183.888] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGPUNCT.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgpunct.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.888] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.888] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.889] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.889] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGREPFRM.DPV", dwFileAttributes=0x80) returned 0 [0183.889] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGREPFRM.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgrepfrm.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.890] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.890] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.890] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.890] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGREPFRM.XML", dwFileAttributes=0x80) returned 0 [0183.891] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGREPFRM.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgrepfrm.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.891] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.891] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.891] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.891] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGSIDEBR.DPV", dwFileAttributes=0x80) returned 0 [0183.891] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGSIDEBR.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgsidebr.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.892] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.892] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.892] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.892] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGSIDEBR.XML", dwFileAttributes=0x80) returned 0 [0183.895] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGSIDEBR.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgsidebr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.895] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.895] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.895] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.895] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGSIDEBRV.XML", dwFileAttributes=0x80) returned 0 [0183.896] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGSIDEBRV.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgsidebrv.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.896] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.896] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.896] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.896] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGSTORY.XML", dwFileAttributes=0x80) returned 0 [0183.897] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGSTORY.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgstory.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.897] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.897] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.897] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.897] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGSTORYVERT.XML", dwFileAttributes=0x80) returned 0 [0183.898] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGSTORYVERT.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgstoryvert.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.898] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.898] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.898] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.898] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGTEAR.DPV", dwFileAttributes=0x80) returned 0 [0183.899] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGTEAR.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgtear.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.900] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.900] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.900] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.900] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGTOC.DPV", dwFileAttributes=0x80) returned 0 [0183.901] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGTOC.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgtoc.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.901] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.901] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.901] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.901] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGTOC.XML", dwFileAttributes=0x80) returned 0 [0183.902] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGTOC.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgtoc.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.902] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.902] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.903] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.903] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.903] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBAD.XML", dwFileAttributes=0x80) returned 0 [0183.903] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBAD.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgwebad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.903] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.903] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.903] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.904] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.904] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBBTN.DPV", dwFileAttributes=0x80) returned 0 [0183.904] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBBTN.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgwebbtn.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.904] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.904] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.904] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.904] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.905] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBBTN.XML", dwFileAttributes=0x80) returned 0 [0183.906] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBBTN.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgwebbtn.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.906] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.906] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.906] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.908] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.908] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBCAL.DPV", dwFileAttributes=0x80) returned 0 [0183.909] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBCAL.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgwebcal.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.909] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.909] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.909] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.909] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.909] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBCAL.XML", dwFileAttributes=0x80) returned 0 [0183.910] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBCAL.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgwebcal.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.910] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.910] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.910] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.910] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.912] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBHD.DPV", dwFileAttributes=0x80) returned 0 [0183.912] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBHD.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgwebhd.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.912] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.912] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.912] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.912] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.913] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBHD.XML", dwFileAttributes=0x80) returned 0 [0183.913] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBHD.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgwebhd.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.913] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.913] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.913] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.913] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.916] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBPQT.DPV", dwFileAttributes=0x80) returned 0 [0183.917] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBPQT.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgwebpqt.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.917] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.917] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.917] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.917] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.917] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBPQT.XML", dwFileAttributes=0x80) returned 0 [0183.917] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBPQT.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgwebpqt.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.918] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.918] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.918] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.918] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.918] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBREF.XML", dwFileAttributes=0x80) returned 0 [0183.919] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBREF.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgwebref.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.919] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.919] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.919] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.919] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.919] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBSBR.DPV", dwFileAttributes=0x80) returned 0 [0183.920] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBSBR.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgwebsbr.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.920] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.920] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.920] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.920] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.921] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBSBR.XML", dwFileAttributes=0x80) returned 0 [0183.921] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBSBR.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgwebsbr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.921] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.921] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.921] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.921] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.922] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGZIP.DPV", dwFileAttributes=0x80) returned 0 [0183.922] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGZIP.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgzip.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.922] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.922] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.922] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.922] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.923] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGZIPC.XML", dwFileAttributes=0x80) returned 0 [0183.923] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGZIPC.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgzipc.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.923] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.923] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.923] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.923] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.923] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DOTS.POC", dwFileAttributes=0x80) returned 0 [0183.924] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DOTS.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dots.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.924] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.924] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.924] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.924] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.924] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DVDHM.POC", dwFileAttributes=0x80) returned 0 [0183.924] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DVDHM.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dvdhm.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.925] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.925] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.925] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.925] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.925] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\EMAIL.DPV", dwFileAttributes=0x80) returned 0 [0183.925] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\EMAIL.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\email.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.925] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.926] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.926] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.926] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.926] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\EMAIL.XML", dwFileAttributes=0x80) returned 0 [0183.926] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\EMAIL.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\email.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.926] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.926] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.927] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.927] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.927] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\EMAIL11.POC", dwFileAttributes=0x80) returned 0 [0183.927] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\EMAIL11.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\email11.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.927] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.927] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.927] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.927] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.928] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\EMAILMOD.POC", dwFileAttributes=0x80) returned 0 [0183.929] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\EMAILMOD.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\emailmod.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.929] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.929] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.929] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.929] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.929] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\ENV11.POC", dwFileAttributes=0x80) returned 0 [0183.930] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\ENV11.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\env11.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.930] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.930] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.930] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.930] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.930] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\ENV98.POC", dwFileAttributes=0x80) returned 0 [0183.932] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\ENV98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\env98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.932] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.932] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.932] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.932] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.932] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\ENV98SP.POC", dwFileAttributes=0x80) returned 0 [0183.933] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\ENV98SP.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\env98sp.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.933] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.933] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.933] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.933] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.933] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\ENVELOPE.DPV", dwFileAttributes=0x80) returned 0 [0183.933] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\ENVELOPE.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\envelope.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.934] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.934] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.934] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.934] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.934] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\ENVELOPE.XML", dwFileAttributes=0x80) returned 0 [0183.934] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\ENVELOPE.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\envelope.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.934] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.935] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.935] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.935] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.935] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\ENVHM.POC", dwFileAttributes=0x80) returned 0 [0183.935] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\ENVHM.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\envhm.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.935] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.935] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.936] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.936] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.936] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FEZIP.POC", dwFileAttributes=0x80) returned 0 [0183.936] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FEZIP.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\fezip.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.936] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.936] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.936] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.936] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.937] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FLY98SP.POC", dwFileAttributes=0x80) returned 0 [0183.937] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FLY98SP.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\fly98sp.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.937] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.937] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.937] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.937] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.938] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FLYER.DPV", dwFileAttributes=0x80) returned 0 [0183.938] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FLYER.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\flyer.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.939] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.939] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.939] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.939] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FLYER.XML", dwFileAttributes=0x80) returned 0 [0183.939] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FLYER.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\flyer.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.939] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.939] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.940] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.940] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.940] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FLYER11.POC", dwFileAttributes=0x80) returned 0 [0183.940] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FLYER11.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\flyer11.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.940] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.940] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.941] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.941] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.941] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FLYER98.POC", dwFileAttributes=0x80) returned 0 [0183.941] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FLYER98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\flyer98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.941] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.941] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.941] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.942] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.942] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FLYERHM.POC", dwFileAttributes=0x80) returned 0 [0183.942] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FLYERHM.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\flyerhm.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.943] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.943] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.943] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.943] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.943] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FOLDPROJ.DPV", dwFileAttributes=0x80) returned 0 [0183.943] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FOLDPROJ.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\foldproj.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.944] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.944] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.944] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.944] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.944] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FOLDPROJ.XML", dwFileAttributes=0x80) returned 0 [0183.944] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FOLDPROJ.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\foldproj.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.945] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.945] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.945] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.945] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.945] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FORM98.POC", dwFileAttributes=0x80) returned 0 [0183.945] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FORM98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\form98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.945] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.945] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.946] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.946] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FORMCTL.POC", dwFileAttributes=0x80) returned 0 [0183.946] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FORMCTL.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\formctl.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.946] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.946] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.947] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.948] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.948] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FS3BOX.POC", dwFileAttributes=0x80) returned 0 [0183.949] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FS3BOX.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\fs3box.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.949] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.949] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.949] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.949] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\GIFT.DPV", dwFileAttributes=0x80) returned 0 [0183.951] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\GIFT.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\gift.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.951] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.951] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.951] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.951] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.952] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\GIFT.XML", dwFileAttributes=0x80) returned 0 [0183.952] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\GIFT.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\gift.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.953] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.953] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.953] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.953] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.953] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\GIFT98.POC", dwFileAttributes=0x80) returned 0 [0183.954] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\GIFT98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\gift98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.954] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.954] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.954] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.954] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.954] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\GREET11.POC", dwFileAttributes=0x80) returned 0 [0183.955] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\GREET11.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\greet11.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.955] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.955] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.955] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.955] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.955] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\GREETING.DPV", dwFileAttributes=0x80) returned 0 [0183.955] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\GREETING.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\greeting.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.956] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.956] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.956] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.956] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.956] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\GREETING.XML", dwFileAttributes=0x80) returned 0 [0183.956] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\GREETING.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\greeting.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.957] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.957] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.957] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.957] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.957] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\HEADINGBB.DPV", dwFileAttributes=0x80) returned 0 [0183.957] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\HEADINGBB.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\headingbb.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.957] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.957] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.958] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.958] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.958] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\HEADINGBB.POC", dwFileAttributes=0x80) returned 0 [0183.959] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\HEADINGBB.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\headingbb.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.959] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.960] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.960] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.960] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.960] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\INVITE.DPV", dwFileAttributes=0x80) returned 0 [0183.960] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\INVITE.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\invite.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.960] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.960] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.961] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.961] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.961] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\INVITE.XML", dwFileAttributes=0x80) returned 0 [0183.962] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\INVITE.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\invite.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.962] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.962] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.962] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.962] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\INVITE11.POC", dwFileAttributes=0x80) returned 0 [0183.962] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\INVITE11.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\invite11.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.963] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.963] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.963] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.963] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.963] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LABEL.DPV", dwFileAttributes=0x80) returned 0 [0183.963] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LABEL.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\label.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.963] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.963] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.964] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.964] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.964] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LABEL.XML", dwFileAttributes=0x80) returned 0 [0183.965] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LABEL.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\label.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.965] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.965] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.965] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.965] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LABEL98.POC", dwFileAttributes=0x80) returned 0 [0183.966] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LABEL98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\label98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.966] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.966] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.966] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.966] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LABELHM.POC", dwFileAttributes=0x80) returned 0 [0183.966] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LABELHM.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\labelhm.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.967] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.967] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.967] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.967] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.967] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LETTHEAD.DPV", dwFileAttributes=0x80) returned 0 [0183.968] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LETTHEAD.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\letthead.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.968] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.968] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.968] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.968] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.969] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LETTHEAD.XML", dwFileAttributes=0x80) returned 0 [0183.969] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LETTHEAD.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\letthead.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.969] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.969] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.969] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.969] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LINEACT.POC", dwFileAttributes=0x80) returned 0 [0183.970] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LINEACT.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\lineact.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.970] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.970] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.970] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.970] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LOGO98.POC", dwFileAttributes=0x80) returned 0 [0183.971] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LOGO98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\logo98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.971] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.971] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.971] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.971] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.971] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LTHD11.POC", dwFileAttributes=0x80) returned 0 [0183.971] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LTHD11.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\lthd11.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.972] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.972] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.972] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.972] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.972] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LTHD98.POC", dwFileAttributes=0x80) returned 0 [0183.972] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LTHD98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\lthd98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.973] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.973] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.973] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.973] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LTHD98SP.POC", dwFileAttributes=0x80) returned 0 [0183.973] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LTHD98SP.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\lthd98sp.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.973] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.973] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.974] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.974] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.974] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LTHDHM.POC", dwFileAttributes=0x80) returned 0 [0183.975] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LTHDHM.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\lthdhm.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.975] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.975] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.975] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.975] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\MAIN.XML", dwFileAttributes=0x80) returned 0 [0183.975] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\MAIN.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\main.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.976] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.976] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.976] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.976] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\MARQUEE.POC", dwFileAttributes=0x80) returned 0 [0183.977] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\MARQUEE.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\marquee.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.977] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.977] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.977] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.978] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\MENU.DPV", dwFileAttributes=0x80) returned 0 [0183.978] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\MENU.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\menu.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.978] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.978] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.978] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.978] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\MENU.XML", dwFileAttributes=0x80) returned 0 [0183.979] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\MENU.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\menu.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.979] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.979] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.979] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.979] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\MENU98.POC", dwFileAttributes=0x80) returned 0 [0183.980] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\MENU98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\menu98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.980] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.980] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.980] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.980] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.980] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\MSTHED98.POC", dwFileAttributes=0x80) returned 0 [0183.981] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\MSTHED98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\msthed98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.981] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.981] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.981] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.981] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.981] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\NAVBAR11.POC", dwFileAttributes=0x80) returned 0 [0183.982] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\NAVBAR11.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\navbar11.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.982] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.982] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.982] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.982] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.982] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\NAVBARV.POC", dwFileAttributes=0x80) returned 0 [0183.983] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\NAVBARV.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\navbarv.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.983] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.983] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.983] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.983] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\NAVBRPH1.POC", dwFileAttributes=0x80) returned 0 [0183.983] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\NAVBRPH1.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\navbrph1.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.983] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.984] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.984] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.984] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.984] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\NAVBRPH2.POC", dwFileAttributes=0x80) returned 0 [0183.984] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\NAVBRPH2.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\navbrph2.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.985] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.985] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.985] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.986] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.986] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\NEWS.DPV", dwFileAttributes=0x80) returned 0 [0183.987] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\NEWS.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\news.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.987] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.987] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.987] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.987] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\NEWS.XML", dwFileAttributes=0x80) returned 0 [0183.988] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\NEWS.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\news.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.988] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.988] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.988] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.988] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.989] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\NEWS11.POC", dwFileAttributes=0x80) returned 0 [0183.989] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\NEWS11.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\news11.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.989] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.989] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.989] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.989] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.989] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\NEWS98.POC", dwFileAttributes=0x80) returned 0 [0183.990] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\NEWS98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\news98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.990] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.990] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.990] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.990] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\NEWSHM.POC", dwFileAttributes=0x80) returned 0 [0183.990] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\NEWSHM.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\newshm.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.991] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.991] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.991] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.991] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.991] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\ORIG98.POC", dwFileAttributes=0x80) returned 0 [0183.992] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\ORIG98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\orig98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.992] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.992] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.992] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.992] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PICCAP98.POC", dwFileAttributes=0x80) returned 0 [0183.993] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PICCAP98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\piccap98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.993] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.993] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.994] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.994] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.994] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PICSTYLES.DPV", dwFileAttributes=0x80) returned 0 [0183.994] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PICSTYLES.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\picstyles.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.994] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.994] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.994] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.994] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.995] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PICTPH.POC", dwFileAttributes=0x80) returned 0 [0183.995] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PICTPH.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\pictph.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.995] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.995] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.995] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.995] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.996] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PNCTUATE.POC", dwFileAttributes=0x80) returned 0 [0183.996] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PNCTUATE.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\pnctuate.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.996] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.996] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.996] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.996] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.996] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\POST98SP.POC", dwFileAttributes=0x80) returned 0 [0183.997] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\POST98SP.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\post98sp.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.997] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.997] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.997] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.997] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\POSTCARD.DPV", dwFileAttributes=0x80) returned 0 [0183.997] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\POSTCARD.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\postcard.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.998] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.998] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.998] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.998] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.998] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\POSTCARD.XML", dwFileAttributes=0x80) returned 0 [0183.999] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\POSTCARD.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\postcard.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0183.999] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0183.999] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.999] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0183.999] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0183.999] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\POSTCD11.POC", dwFileAttributes=0x80) returned 0 [0184.000] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\POSTCD11.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\postcd11.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.001] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.001] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.001] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0184.001] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.001] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\POSTCD98.POC", dwFileAttributes=0x80) returned 0 [0184.001] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\POSTCD98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\postcd98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.001] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.001] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.002] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0184.002] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PROG98.POC", dwFileAttributes=0x80) returned 0 [0184.002] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PROG98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\prog98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.002] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.002] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.002] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0184.003] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.003] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PROGRAM.DPV", dwFileAttributes=0x80) returned 0 [0184.003] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PROGRAM.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\program.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.003] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.003] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.003] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0184.003] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.004] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PROGRAM.XML", dwFileAttributes=0x80) returned 0 [0184.004] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PROGRAM.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\program.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.004] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.004] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.004] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0184.004] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.004] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PS10TARG.POC", dwFileAttributes=0x80) returned 0 [0184.005] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PS10TARG.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\ps10targ.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.005] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.005] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.005] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0184.005] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.005] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PS2SWOOS.POC", dwFileAttributes=0x80) returned 0 [0184.005] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PS2SWOOS.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\ps2swoos.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.006] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.006] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.006] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0184.006] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.006] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PS9CRNRH.POC", dwFileAttributes=0x80) returned 0 [0184.007] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PS9CRNRH.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\ps9crnrh.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.007] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.007] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.007] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0184.007] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.007] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PULLQUOTEBB.DPV", dwFileAttributes=0x80) returned 0 [0184.008] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PULLQUOTEBB.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\pullquotebb.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.008] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.008] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.009] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0184.009] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.009] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PULLQUOTEBB.POC", dwFileAttributes=0x80) returned 0 [0184.009] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PULLQUOTEBB.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\pullquotebb.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.009] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.009] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.009] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0184.009] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.010] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PULQOT98.POC", dwFileAttributes=0x80) returned 0 [0184.010] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PULQOT98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\pulqot98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.010] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.010] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.010] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0184.010] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.010] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\QP.DPV", dwFileAttributes=0x80) returned 0 [0184.011] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\QP.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\qp.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.011] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.011] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.011] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0184.011] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.011] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\QP.XML", dwFileAttributes=0x80) returned 0 [0184.011] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\QP.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\qp.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.012] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.012] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.012] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0184.012] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\QUIKPUBS.POC", dwFileAttributes=0x80) returned 0 [0184.012] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\QUIKPUBS.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\quikpubs.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.012] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.012] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.013] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0184.013] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.013] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\REPTWIZ.POC", dwFileAttributes=0x80) returned 0 [0184.014] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\REPTWIZ.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\reptwiz.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.014] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.014] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.014] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0184.014] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.014] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\RES98.POC", dwFileAttributes=0x80) returned 0 [0184.014] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\RES98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\res98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.015] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.015] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.015] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0184.015] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.015] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\RESP98.POC", dwFileAttributes=0x80) returned 0 [0184.015] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\RESP98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\resp98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.016] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.016] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.016] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0184.016] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.016] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\RESUME.DPV", dwFileAttributes=0x80) returned 0 [0184.016] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\RESUME.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\resume.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.016] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.016] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.017] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0184.017] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\RESUME.XML", dwFileAttributes=0x80) returned 0 [0184.017] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\RESUME.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\resume.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.017] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.017] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.017] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0184.017] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.018] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\RSPMECH.POC", dwFileAttributes=0x80) returned 0 [0184.018] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\RSPMECH.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\rspmech.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.018] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.018] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.018] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0184.018] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.019] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\SIDBAR98.POC", dwFileAttributes=0x80) returned 0 [0184.019] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\SIDBAR98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\sidbar98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.019] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.019] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.019] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0184.020] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.020] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\SIDEBARBB.DPV", dwFileAttributes=0x80) returned 0 [0184.020] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\SIDEBARBB.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\sidebarbb.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.020] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.020] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.021] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0184.021] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.021] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\SIDEBARBB.POC", dwFileAttributes=0x80) returned 0 [0184.021] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\SIDEBARBB.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\sidebarbb.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.022] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.022] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.022] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0184.022] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.022] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\SIDEBARVERTBB.DPV", dwFileAttributes=0x80) returned 0 [0184.023] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\SIDEBARVERTBB.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\sidebarvertbb.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.023] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.023] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.023] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0184.023] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.023] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\SIDEBARVERTBB.POC", dwFileAttributes=0x80) returned 0 [0184.024] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\SIDEBARVERTBB.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\sidebarvertbb.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.024] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.024] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.024] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0184.024] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.024] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\SIGN.DPV", dwFileAttributes=0x80) returned 0 [0184.024] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\SIGN.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\sign.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.025] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.025] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.025] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0184.025] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.025] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\SIGN.XML", dwFileAttributes=0x80) returned 0 [0184.026] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\SIGN.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\sign.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.026] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.026] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.026] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0184.026] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.026] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\SIGN98.POC", dwFileAttributes=0x80) returned 0 [0184.027] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\SIGN98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\sign98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.027] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.027] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.027] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0184.027] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.027] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\SIGNHM.POC", dwFileAttributes=0x80) returned 0 [0184.027] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\SIGNHM.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\signhm.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.028] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.028] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.028] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0184.028] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.028] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\SNIPE.POC", dwFileAttributes=0x80) returned 0 [0184.029] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\SNIPE.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\snipe.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.029] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.029] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.029] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0184.029] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.029] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\STORYBB.DPV", dwFileAttributes=0x80) returned 0 [0184.030] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\STORYBB.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\storybb.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.030] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.030] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.030] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0184.030] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.030] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\STORYBB.POC", dwFileAttributes=0x80) returned 0 [0184.031] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\STORYBB.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\storybb.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.032] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.032] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.032] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0184.032] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.032] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\STORYVERTBB.DPV", dwFileAttributes=0x80) returned 0 [0184.032] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\STORYVERTBB.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\storyvertbb.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.032] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.033] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.033] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0184.033] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\STORYVERTBB.POC", dwFileAttributes=0x80) returned 0 [0184.033] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\STORYVERTBB.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\storyvertbb.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.033] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.033] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.034] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0184.034] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.034] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\STRBRST.POC", dwFileAttributes=0x80) returned 0 [0184.034] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\STRBRST.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\strbrst.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.034] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.034] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.034] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0184.034] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.035] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\TEAROFF.POC", dwFileAttributes=0x80) returned 0 [0184.035] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\TEAROFF.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\tearoff.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.035] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.035] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.035] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0184.035] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.036] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\TOC98.POC", dwFileAttributes=0x80) returned 0 [0184.036] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\TOC98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\toc98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.036] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.036] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.036] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0184.036] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.036] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WCOMP98.POC", dwFileAttributes=0x80) returned 0 [0184.037] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WCOMP98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\wcomp98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.037] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.037] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.037] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0184.037] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.037] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WEB11.POC", dwFileAttributes=0x80) returned 0 [0184.038] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WEB11.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\web11.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.038] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.038] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.038] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0184.039] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.039] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WEBCALSO.POC", dwFileAttributes=0x80) returned 0 [0184.039] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WEBCALSO.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\webcalso.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.039] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.039] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.039] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0184.039] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.040] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WEBEMAIL.POC", dwFileAttributes=0x80) returned 0 [0184.040] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WEBEMAIL.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\webemail.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.040] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.040] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.040] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0184.040] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.041] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WEBHED98.POC", dwFileAttributes=0x80) returned 0 [0184.041] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WEBHED98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\webhed98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.041] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.041] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.041] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0184.041] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.041] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WEBHOME.POC", dwFileAttributes=0x80) returned 0 [0184.042] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WEBHOME.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\webhome.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.042] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.042] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.042] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0184.042] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.042] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WEBLINK.POC", dwFileAttributes=0x80) returned 0 [0184.043] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WEBLINK.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\weblink.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.043] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.043] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.043] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0184.044] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.044] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WEBPAGE.DPV", dwFileAttributes=0x80) returned 0 [0184.044] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WEBPAGE.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\webpage.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.044] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.044] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.044] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0184.044] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.045] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WEBPAGE.XML", dwFileAttributes=0x80) returned 0 [0184.045] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WEBPAGE.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\webpage.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.046] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.046] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.046] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0184.046] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.046] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WITHCOMP.DPV", dwFileAttributes=0x80) returned 0 [0184.046] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WITHCOMP.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\withcomp.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.047] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.047] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.047] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0184.047] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.047] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WITHCOMP.XML", dwFileAttributes=0x80) returned 0 [0184.047] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WITHCOMP.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\withcomp.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.047] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.047] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.048] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0184.048] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.048] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WORDREP.DPV", dwFileAttributes=0x80) returned 0 [0184.048] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WORDREP.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\wordrep.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.048] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.048] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.049] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0184.049] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.049] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WORDREP.XML", dwFileAttributes=0x80) returned 0 [0184.049] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WORDREP.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\wordrep.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.049] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.049] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.049] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0184.049] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.050] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WPULQT98.POC", dwFileAttributes=0x80) returned 0 [0184.050] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WPULQT98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\wpulqt98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.050] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.050] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.050] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0184.050] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.050] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WSIDBR98.POC", dwFileAttributes=0x80) returned 0 [0184.051] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WSIDBR98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\wsidbr98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.051] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.051] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.051] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0184.051] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0184.052] SetLastError (dwErrCode=0x0) [0184.052] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.055] GetLastError () returned 0x5 [0184.055] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0184.055] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.055] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.055] SetLastError (dwErrCode=0x0) [0184.055] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.055] GetLastError () returned 0x5 [0184.055] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0184.055] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.055] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\QUERIES\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb42c0 [0184.056] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0184.056] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0184.056] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0184.056] SetLastError (dwErrCode=0x0) [0184.056] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\QUERIES\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\queries\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.056] GetLastError () returned 0x5 [0184.056] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0184.056] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.056] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.056] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.056] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.056] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.056] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.056] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.057] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\REMINDER.WAV", dwFileAttributes=0x80) returned 0 [0184.057] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\REMINDER.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\reminder.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.058] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.058] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.058] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.058] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.058] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.058] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Resources.pri", dwFileAttributes=0x80) returned 0 [0184.058] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Resources.pri" (normalized: "c:\\program files\\microsoft office\\root\\office16\\resources.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.059] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.059] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.059] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.059] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.059] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.059] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RSWOP.ICM", dwFileAttributes=0x80) returned 0 [0184.060] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RSWOP.ICM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\rswop.icm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.060] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.060] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.060] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.060] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.060] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.060] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.060] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.060] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.060] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.060] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.060] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.060] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.060] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.060] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.061] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\runtime-20.win32.bundle", dwFileAttributes=0x80) returned 0 [0184.062] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\runtime-20.win32.bundle" (normalized: "c:\\program files\\microsoft office\\root\\office16\\runtime-20.win32.bundle"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.062] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.062] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.062] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.062] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.063] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\runtime-99.win32.bundle", dwFileAttributes=0x80) returned 0 [0184.063] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\runtime-99.win32.bundle" (normalized: "c:\\program files\\microsoft office\\root\\office16\\runtime-99.win32.bundle"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.063] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.063] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.063] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.063] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.063] SetLastError (dwErrCode=0x0) [0184.063] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.064] GetLastError () returned 0x5 [0184.064] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0184.064] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.064] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SAMPLES\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4f20 [0184.064] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0184.064] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0184.064] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.064] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SAMPLES\\SOLVSAMP.XLS", dwFileAttributes=0x80) returned 0 [0184.064] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SAMPLES\\SOLVSAMP.XLS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\samples\\solvsamp.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.065] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.065] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.065] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0184.065] FindClose (in: hFindFile=0x665abb4f20 | out: hFindFile=0x665abb4f20) returned 1 [0184.065] SetLastError (dwErrCode=0x0) [0184.065] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SAMPLES\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\samples\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.065] GetLastError () returned 0x5 [0184.065] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0184.065] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.065] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.065] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.065] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.065] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.065] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.066] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.066] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.066] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.066] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.066] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.066] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.066] SetLastError (dwErrCode=0x0) [0184.066] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.066] GetLastError () returned 0x5 [0184.066] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0184.066] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.066] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\sdxs\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4f20 [0184.066] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0184.066] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0184.066] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.067] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\sdxs\\sdxs.xml", dwFileAttributes=0x80) returned 0 [0184.069] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\sdxs\\sdxs.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\sdxs\\sdxs.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.069] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.069] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.069] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0184.069] FindClose (in: hFindFile=0x665abb4f20 | out: hFindFile=0x665abb4f20) returned 1 [0184.069] SetLastError (dwErrCode=0x0) [0184.069] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\sdxs\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\sdxs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.070] GetLastError () returned 0x5 [0184.070] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0184.070] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.070] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.070] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.070] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.070] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.070] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.070] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.070] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.070] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.070] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.070] SetLastError (dwErrCode=0x0) [0184.070] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.070] GetLastError () returned 0x5 [0184.070] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0184.070] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.070] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SkypeSrv\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb49e0 [0184.071] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0184.071] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0184.071] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0184.071] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0184.072] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0184.072] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0184.072] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.072] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SkypeSrv\\SKYPESERVER.TLB", dwFileAttributes=0x80) returned 0 [0184.072] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SkypeSrv\\SKYPESERVER.TLB" (normalized: "c:\\program files\\microsoft office\\root\\office16\\skypesrv\\skypeserver.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.072] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.072] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.072] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0184.072] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0184.073] SetLastError (dwErrCode=0x0) [0184.073] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SkypeSrv\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\skypesrv\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.076] GetLastError () returned 0x5 [0184.076] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0184.076] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.076] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.076] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.076] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.076] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.076] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.076] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.076] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.076] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.076] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.076] SetLastError (dwErrCode=0x0) [0184.076] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.076] GetLastError () returned 0x5 [0184.076] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0184.076] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.076] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\STARTUP\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb5040 [0184.076] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0184.076] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0184.077] FindClose (in: hFindFile=0x665abb5040 | out: hFindFile=0x665abb5040) returned 1 [0184.077] SetLastError (dwErrCode=0x0) [0184.077] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\STARTUP\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\startup\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.077] GetLastError () returned 0x5 [0184.077] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0184.077] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.077] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.077] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.077] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.077] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.077] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.077] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.077] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.077] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.077] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.077] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.077] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.077] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.077] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.077] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.077] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.077] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.077] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.077] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.077] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.077] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.078] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\udf-host.win32.bundle", dwFileAttributes=0x80) returned 0 [0184.078] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\udf-host.win32.bundle" (normalized: "c:\\program files\\microsoft office\\root\\office16\\udf-host.win32.bundle"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.078] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.078] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.078] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.078] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.078] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.078] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.078] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.079] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBLZ0007.TLL", dwFileAttributes=0x80) returned 0 [0184.081] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBLZ0007.TLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\vblz0007.tll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.081] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.081] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.081] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.081] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.081] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBLZ0009.TLL", dwFileAttributes=0x80) returned 0 [0184.082] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBLZ0009.TLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\vblz0009.tll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.082] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.082] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.082] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.082] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.083] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBLZ000C.TLL", dwFileAttributes=0x80) returned 0 [0184.083] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBLZ000C.TLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\vblz000c.tll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.083] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.083] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.084] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.084] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.084] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBLZ0011.TLL", dwFileAttributes=0x80) returned 0 [0184.084] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBLZ0011.TLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\vblz0011.tll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.084] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.084] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.085] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.085] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.085] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBS2EXCL.XSL", dwFileAttributes=0x80) returned 0 [0184.086] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBS2EXCL.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\vbs2excl.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.086] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.086] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.086] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.086] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.087] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBS2WORD.XSL", dwFileAttributes=0x80) returned 0 [0184.087] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBS2WORD.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\vbs2word.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.087] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.087] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.087] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.087] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.087] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.087] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.087] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.087] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.087] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.087] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.087] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.087] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.087] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0184.087] SetLastError (dwErrCode=0x0) [0184.087] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.088] GetLastError () returned 0x5 [0184.088] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0184.088] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.088] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb49e0 [0184.088] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0184.088] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0184.088] SetLastError (dwErrCode=0x0) [0184.088] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.088] GetLastError () returned 0x5 [0184.088] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0184.088] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.088] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4920 [0184.090] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.097] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.097] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.097] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ACTDIR_M.VSTX", dwFileAttributes=0x80) returned 0 [0184.098] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ACTDIR_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\actdir_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.098] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.098] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.099] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.099] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.099] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ACTDIR_U.VSTX", dwFileAttributes=0x80) returned 0 [0184.100] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ACTDIR_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\actdir_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.100] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.100] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.100] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.100] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.100] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.100] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.100] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ADO_M.VSSX", dwFileAttributes=0x80) returned 0 [0184.101] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ADO_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\ado_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.101] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.101] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.101] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.101] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ADO_U.VSSX", dwFileAttributes=0x80) returned 0 [0184.102] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ADO_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\ado_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.103] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.103] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.103] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.103] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ADS_M.VSSX", dwFileAttributes=0x80) returned 0 [0184.104] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ADS_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\ads_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.104] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.104] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.104] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.104] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ADS_U.VSSX", dwFileAttributes=0x80) returned 0 [0184.104] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ADS_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\ads_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.105] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.105] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.105] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.105] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.105] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ALARM_M.VSSX", dwFileAttributes=0x80) returned 0 [0184.105] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ALARM_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\alarm_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.106] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.106] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.106] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.106] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ALARM_U.VSSX", dwFileAttributes=0x80) returned 0 [0184.106] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ALARM_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\alarm_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.106] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.106] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.107] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.107] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.107] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ANALYTICS_M.VSSX", dwFileAttributes=0x80) returned 0 [0184.108] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ANALYTICS_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\analytics_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.108] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.108] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.108] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.108] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ANALYTICS_U.VSSX", dwFileAttributes=0x80) returned 0 [0184.109] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ANALYTICS_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\analytics_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.109] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.110] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.110] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.110] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.110] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ANIMALS_M.VSSX", dwFileAttributes=0x80) returned 0 [0184.111] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ANIMALS_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\animals_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.111] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.111] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.111] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.111] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.111] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ANIMALS_U.VSSX", dwFileAttributes=0x80) returned 0 [0184.112] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ANIMALS_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\animals_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.112] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.112] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.113] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.113] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.113] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ANNOT_M.VSSX", dwFileAttributes=0x80) returned 0 [0184.114] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ANNOT_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\annot_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.114] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.114] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.114] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.114] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.114] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ANNOT_U.VSSX", dwFileAttributes=0x80) returned 0 [0184.115] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ANNOT_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\annot_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.115] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.115] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.116] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.116] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.116] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\APPAREL_M.VSSX", dwFileAttributes=0x80) returned 0 [0184.116] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\APPAREL_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\apparel_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.117] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.117] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.117] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.117] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.117] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\APPAREL_U.VSSX", dwFileAttributes=0x80) returned 0 [0184.118] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\APPAREL_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\apparel_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.118] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.118] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.118] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.118] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\APPL_M.VSSX", dwFileAttributes=0x80) returned 0 [0184.119] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\APPL_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\appl_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.119] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.119] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.120] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.120] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.120] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\APPL_U.VSSX", dwFileAttributes=0x80) returned 0 [0184.121] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\APPL_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\appl_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.121] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.121] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.121] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.121] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.121] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\APPL_VISIO2013_M.VSSX", dwFileAttributes=0x80) returned 0 [0184.122] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\APPL_VISIO2013_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\appl_visio2013_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.122] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.122] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.122] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.122] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.123] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\APPL_VISIO2013_U.VSSX", dwFileAttributes=0x80) returned 0 [0184.123] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\APPL_VISIO2013_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\appl_visio2013_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.123] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.123] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.124] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.124] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ARROWS2_M.VSSX", dwFileAttributes=0x80) returned 0 [0184.125] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ARROWS2_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\arrows2_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.125] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.125] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.125] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.125] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.126] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ARROWS2_U.VSSX", dwFileAttributes=0x80) returned 0 [0184.126] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ARROWS2_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\arrows2_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.126] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.126] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.126] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.126] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ARROWS_M.VSSX", dwFileAttributes=0x80) returned 0 [0184.127] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ARROWS_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\arrows_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.127] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.127] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.127] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.127] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ARROWS_U.VSSX", dwFileAttributes=0x80) returned 0 [0184.128] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ARROWS_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\arrows_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.128] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.128] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.128] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.128] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.128] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ARTS_M.VSSX", dwFileAttributes=0x80) returned 0 [0184.129] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ARTS_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\arts_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.130] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.130] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.130] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.130] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ARTS_U.VSSX", dwFileAttributes=0x80) returned 0 [0184.131] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ARTS_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\arts_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.131] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.131] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.131] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.131] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ASSOCIATIONS_UML_CLASS_M.VSTX", dwFileAttributes=0x80) returned 0 [0184.132] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ASSOCIATIONS_UML_CLASS_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\associations_uml_class_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.132] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.133] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.133] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.133] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.133] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ASSOCIATIONS_UML_CLASS_U.VSTX", dwFileAttributes=0x80) returned 0 [0184.134] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ASSOCIATIONS_UML_CLASS_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\associations_uml_class_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.134] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.134] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.134] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.138] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.139] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\AUDIT_DATAVISUALIZERPROCESSMAP.XLTX", dwFileAttributes=0x80) returned 0 [0184.139] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\AUDIT_DATAVISUALIZERPROCESSMAP.XLTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\audit_datavisualizerprocessmap.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.139] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.139] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.139] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.139] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.139] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\AUDIT_DATAVISUALIZER_M.VSTX", dwFileAttributes=0x80) returned 0 [0184.140] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\AUDIT_DATAVISUALIZER_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\audit_datavisualizer_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.140] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.140] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.140] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.140] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.141] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\AUDIT_DATAVISUALIZER_U.VSTX", dwFileAttributes=0x80) returned 0 [0184.141] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\AUDIT_DATAVISUALIZER_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\audit_datavisualizer_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.141] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.141] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.141] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.141] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.141] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\AUDIT_M.VSSX", dwFileAttributes=0x80) returned 0 [0184.142] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\AUDIT_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\audit_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.142] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.142] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.142] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.142] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.142] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\AUDIT_M.VSTX", dwFileAttributes=0x80) returned 0 [0184.142] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\AUDIT_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\audit_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.143] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.143] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.143] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.143] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\AUDIT_SEVERAL_OUTCOMES_M.VSTX", dwFileAttributes=0x80) returned 0 [0184.143] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\AUDIT_SEVERAL_OUTCOMES_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\audit_several_outcomes_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.143] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.144] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.144] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.144] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\AUDIT_SEVERAL_OUTCOMES_U.VSTX", dwFileAttributes=0x80) returned 0 [0184.144] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\AUDIT_SEVERAL_OUTCOMES_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\audit_several_outcomes_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.144] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.144] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.145] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.145] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.145] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\AUDIT_SUBPROCESS_M.VSTX", dwFileAttributes=0x80) returned 0 [0184.145] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\AUDIT_SUBPROCESS_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\audit_subprocess_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.145] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.145] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.145] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.145] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.146] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\AUDIT_SUBPROCESS_U.VSTX", dwFileAttributes=0x80) returned 0 [0184.146] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\AUDIT_SUBPROCESS_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\audit_subprocess_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.146] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.146] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.146] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.146] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.146] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\AUDIT_U.VSSX", dwFileAttributes=0x80) returned 0 [0184.148] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\AUDIT_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\audit_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.148] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.148] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.148] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.148] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.148] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\AUDIT_U.VSTX", dwFileAttributes=0x80) returned 0 [0184.149] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\AUDIT_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\audit_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.149] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.149] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.149] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.149] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASFLO_M.VSSX", dwFileAttributes=0x80) returned 0 [0184.150] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASFLO_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\basflo_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.150] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.150] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.150] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.150] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASFLO_M.VSTX", dwFileAttributes=0x80) returned 0 [0184.151] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASFLO_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\basflo_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.151] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.151] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.151] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.151] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.151] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASFLO_U.VSSX", dwFileAttributes=0x80) returned 0 [0184.153] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASFLO_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\basflo_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.154] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.154] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.154] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.154] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.154] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASFLO_U.VSTX", dwFileAttributes=0x80) returned 0 [0184.154] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASFLO_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\basflo_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.154] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.154] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.155] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.155] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.155] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASICCIRCUIT_DIAGRAM_M.VSTX", dwFileAttributes=0x80) returned 0 [0184.156] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASICCIRCUIT_DIAGRAM_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\basiccircuit_diagram_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.156] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.156] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.156] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.156] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASICCIRCUIT_DIAGRAM_U.VSTX", dwFileAttributes=0x80) returned 0 [0184.157] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASICCIRCUIT_DIAGRAM_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\basiccircuit_diagram_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.158] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.158] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.158] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.158] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.158] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASICD_M.VSTX", dwFileAttributes=0x80) returned 0 [0184.159] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASICD_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\basicd_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.159] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.159] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.159] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.159] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASICD_U.VSTX", dwFileAttributes=0x80) returned 0 [0184.160] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASICD_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\basicd_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.160] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.160] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.160] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.160] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.160] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASICELECTRICAL_DIAGRAM_M.VSTX", dwFileAttributes=0x80) returned 0 [0184.160] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASICELECTRICAL_DIAGRAM_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\basicelectrical_diagram_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.161] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.161] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.161] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.161] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASICELECTRICAL_DIAGRAM_U.VSTX", dwFileAttributes=0x80) returned 0 [0184.161] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASICELECTRICAL_DIAGRAM_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\basicelectrical_diagram_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.161] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.162] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.162] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.162] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASIC_AUDITDIAGRAM_M.VSTX", dwFileAttributes=0x80) returned 0 [0184.162] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASIC_AUDITDIAGRAM_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\basic_auditdiagram_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.162] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.162] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.163] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.163] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASIC_AUDITDIAGRAM_U.VSTX", dwFileAttributes=0x80) returned 0 [0184.163] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASIC_AUDITDIAGRAM_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\basic_auditdiagram_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.163] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.163] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.163] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.163] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.164] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASIC_GANTTCHART_M.VSTX", dwFileAttributes=0x80) returned 0 [0184.164] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASIC_GANTTCHART_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\basic_ganttchart_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.164] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.164] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.164] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.164] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.164] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASIC_GANTTCHART_U.VSTX", dwFileAttributes=0x80) returned 0 [0184.165] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASIC_GANTTCHART_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\basic_ganttchart_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.165] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.165] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.165] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.165] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASIC_HOME_NETWORK_M.VSTX", dwFileAttributes=0x80) returned 0 [0184.166] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASIC_HOME_NETWORK_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\basic_home_network_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.166] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.166] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.166] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.166] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.166] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASIC_HOME_NETWORK_U.VSTX", dwFileAttributes=0x80) returned 0 [0184.166] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASIC_HOME_NETWORK_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\basic_home_network_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.167] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.167] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.167] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.167] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASIC_M.VSSX", dwFileAttributes=0x80) returned 0 [0184.168] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASIC_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\basic_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.168] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.168] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.168] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.168] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASIC_U.VSSX", dwFileAttributes=0x80) returned 0 [0184.169] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASIC_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\basic_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.169] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.169] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.169] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.174] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.174] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASIC_UMLSEQUENCE_M.VSTX", dwFileAttributes=0x80) returned 0 [0184.174] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASIC_UMLSEQUENCE_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\basic_umlsequence_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.175] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.175] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.175] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.175] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.175] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASIC_UMLSEQUENCE_U.VSTX", dwFileAttributes=0x80) returned 0 [0184.175] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASIC_UMLSEQUENCE_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\basic_umlsequence_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.176] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.176] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.176] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.176] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.176] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BA_DEC_M.VSSX", dwFileAttributes=0x80) returned 0 [0184.177] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BA_DEC_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\ba_dec_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.177] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.177] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.177] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.177] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.177] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BA_DEC_U.VSSX", dwFileAttributes=0x80) returned 0 [0184.178] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BA_DEC_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\ba_dec_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.178] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.178] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.178] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.178] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BA_GRP_M.VSSX", dwFileAttributes=0x80) returned 0 [0184.179] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BA_GRP_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\ba_grp_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.179] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.179] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.179] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.179] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.179] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BA_GRP_U.VSSX", dwFileAttributes=0x80) returned 0 [0184.179] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BA_GRP_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\ba_grp_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.180] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.180] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.180] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.180] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.180] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BCKGRN_M.VSSX", dwFileAttributes=0x80) returned 0 [0184.181] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BCKGRN_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bckgrn_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.181] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.181] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.181] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.181] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.181] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BCKGRN_U.VSSX", dwFileAttributes=0x80) returned 0 [0184.182] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BCKGRN_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bckgrn_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.182] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.182] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.183] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.183] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.183] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BELTORGCHART_M.VSTX", dwFileAttributes=0x80) returned 0 [0184.183] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BELTORGCHART_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\beltorgchart_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.183] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.183] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.183] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.183] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.184] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BELTORGCHART_U.VSTX", dwFileAttributes=0x80) returned 0 [0184.184] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BELTORGCHART_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\beltorgchart_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.184] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.184] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.184] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.184] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.184] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BF_DATAVISUALIZERPROCESSMAP.XLTX", dwFileAttributes=0x80) returned 0 [0184.185] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BF_DATAVISUALIZERPROCESSMAP.XLTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bf_datavisualizerprocessmap.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.185] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.185] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.186] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.186] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.186] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BF_DATAVISUALIZER_M.VSTX", dwFileAttributes=0x80) returned 0 [0184.186] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BF_DATAVISUALIZER_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bf_datavisualizer_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.186] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.186] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.187] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.187] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BF_DATAVISUALIZER_U.VSTX", dwFileAttributes=0x80) returned 0 [0184.188] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BF_DATAVISUALIZER_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bf_datavisualizer_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.188] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.188] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.188] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.188] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.188] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLDCOR_M.VSSX", dwFileAttributes=0x80) returned 0 [0184.189] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLDCOR_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bldcor_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.189] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.189] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.189] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.189] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.189] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLDCOR_U.VSSX", dwFileAttributes=0x80) returned 0 [0184.190] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLDCOR_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bldcor_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.190] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.190] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.190] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.190] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.190] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLDCOR_VISIO2013_M.VSSX", dwFileAttributes=0x80) returned 0 [0184.192] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLDCOR_VISIO2013_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bldcor_visio2013_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.192] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.192] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.192] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.192] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.193] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLDCOR_VISIO2013_U.VSSX", dwFileAttributes=0x80) returned 0 [0184.193] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLDCOR_VISIO2013_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bldcor_visio2013_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.194] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.194] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.194] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.194] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.194] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLDGPLAN.DWG", dwFileAttributes=0x80) returned 0 [0184.195] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLDGPLAN.DWG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bldgplan.dwg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.196] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.196] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.196] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.196] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.196] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLDGPLAN.JPG", dwFileAttributes=0x80) returned 0 [0184.197] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLDGPLAN.JPG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bldgplan.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.197] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.197] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.197] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.197] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.197] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCK3_M.VSSX", dwFileAttributes=0x80) returned 0 [0184.199] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCK3_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\block3_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.199] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.199] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.199] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.199] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.199] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCK3_U.VSSX", dwFileAttributes=0x80) returned 0 [0184.200] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCK3_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\block3_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.200] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.200] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.200] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.200] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.200] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCKP_M.VSSX", dwFileAttributes=0x80) returned 0 [0184.201] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCKP_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\blockp_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.201] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.201] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.201] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.202] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.202] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCKP_M.VSTX", dwFileAttributes=0x80) returned 0 [0184.211] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCKP_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\blockp_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.211] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.211] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.211] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.212] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.212] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCKP_U.VSSX", dwFileAttributes=0x80) returned 0 [0184.214] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCKP_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\blockp_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.214] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.214] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.214] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.214] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.214] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCKP_U.VSTX", dwFileAttributes=0x80) returned 0 [0184.215] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCKP_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\blockp_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.216] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.216] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.216] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.216] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.216] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCKS.DWG", dwFileAttributes=0x80) returned 0 [0184.217] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCKS.DWG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\blocks.dwg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.217] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.217] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.217] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.217] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.217] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCK_M.VSSX", dwFileAttributes=0x80) returned 0 [0184.218] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCK_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\block_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.219] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.219] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.219] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.219] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.219] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCK_M.VSTX", dwFileAttributes=0x80) returned 0 [0184.220] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCK_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\block_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.221] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.221] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.221] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.221] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.221] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCK_U.VSSX", dwFileAttributes=0x80) returned 0 [0184.222] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCK_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\block_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.222] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.222] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.222] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.222] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.223] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCK_U.VSTX", dwFileAttributes=0x80) returned 0 [0184.223] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCK_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\block_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.223] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.223] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.224] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.224] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.224] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BORDRS_M.VSSX", dwFileAttributes=0x80) returned 0 [0184.225] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BORDRS_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bordrs_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.225] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.225] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.225] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.225] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.225] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BORDRS_U.VSSX", dwFileAttributes=0x80) returned 0 [0184.226] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BORDRS_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bordrs_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.226] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.226] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.226] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.232] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.232] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPMN_ADDRESS_CHANGE_PROCESS_M.VSTX", dwFileAttributes=0x80) returned 0 [0184.232] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPMN_ADDRESS_CHANGE_PROCESS_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bpmn_address_change_process_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.233] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.233] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.233] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.233] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.233] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPMN_ADDRESS_CHANGE_PROCESS_U.VSTX", dwFileAttributes=0x80) returned 0 [0184.233] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPMN_ADDRESS_CHANGE_PROCESS_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bpmn_address_change_process_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.233] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.233] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.234] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.234] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.234] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPMN_M.VSSX", dwFileAttributes=0x80) returned 0 [0184.235] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPMN_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bpmn_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.235] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.235] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.235] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.235] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.235] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPMN_M.VSTX", dwFileAttributes=0x80) returned 0 [0184.235] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPMN_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bpmn_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.236] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.236] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.236] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.236] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.236] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPMN_PROCESS_GATEWAY_M.VSTX", dwFileAttributes=0x80) returned 0 [0184.237] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPMN_PROCESS_GATEWAY_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bpmn_process_gateway_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.237] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.237] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.237] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.237] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.237] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPMN_PROCESS_GATEWAY_U.VSTX", dwFileAttributes=0x80) returned 0 [0184.238] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPMN_PROCESS_GATEWAY_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bpmn_process_gateway_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.238] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.238] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.239] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.239] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.239] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPMN_PROCESS_MULTIPLE_ROLES_M.VSTX", dwFileAttributes=0x80) returned 0 [0184.239] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPMN_PROCESS_MULTIPLE_ROLES_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bpmn_process_multiple_roles_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.239] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.239] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.239] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.239] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.240] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPMN_PROCESS_MULTIPLE_ROLES_U.VSTX", dwFileAttributes=0x80) returned 0 [0184.240] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPMN_PROCESS_MULTIPLE_ROLES_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bpmn_process_multiple_roles_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.240] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.240] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.240] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.240] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.241] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPMN_U.VSSX", dwFileAttributes=0x80) returned 0 [0184.241] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPMN_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bpmn_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.241] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.241] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.242] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.242] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.242] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPMN_U.VSTX", dwFileAttributes=0x80) returned 0 [0184.244] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPMN_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bpmn_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.244] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.244] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.244] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.244] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.245] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPRES_M.VSSX", dwFileAttributes=0x80) returned 0 [0184.246] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPRES_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bpres_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.246] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.246] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.246] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.246] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.247] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPRES_U.VSSX", dwFileAttributes=0x80) returned 0 [0184.247] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPRES_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bpres_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.248] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.248] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.248] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.248] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.248] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BRAINSTM.XML", dwFileAttributes=0x80) returned 0 [0184.249] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BRAINSTM.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\brainstm.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.249] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.249] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.249] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.249] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.250] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BSTORM_EXPL_M.VSTX", dwFileAttributes=0x80) returned 0 [0184.250] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BSTORM_EXPL_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bstorm_expl_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.250] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.250] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.250] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.250] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.251] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BSTORM_EXPL_U.VSTX", dwFileAttributes=0x80) returned 0 [0184.251] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BSTORM_EXPL_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bstorm_expl_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.251] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.252] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.252] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.252] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.252] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BSTORM_LGND_M.VSTX", dwFileAttributes=0x80) returned 0 [0184.252] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BSTORM_LGND_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bstorm_lgnd_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.252] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.252] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.253] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.253] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.253] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BSTORM_LGND_U.VSTX", dwFileAttributes=0x80) returned 0 [0184.253] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BSTORM_LGND_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bstorm_lgnd_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.253] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.253] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.253] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.253] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.254] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BSTORM_M.VSSX", dwFileAttributes=0x80) returned 0 [0184.255] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BSTORM_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bstorm_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.255] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.255] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.255] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.255] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.256] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BSTORM_M.VSTX", dwFileAttributes=0x80) returned 0 [0184.256] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BSTORM_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bstorm_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.257] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.257] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.257] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.257] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.257] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BSTORM_U.VSSX", dwFileAttributes=0x80) returned 0 [0184.258] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BSTORM_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bstorm_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.258] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.258] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.259] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.259] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.259] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BSTORM_U.VSTX", dwFileAttributes=0x80) returned 0 [0184.260] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BSTORM_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bstorm_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.260] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.260] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.260] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.260] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.260] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BTHKT_M.VSSX", dwFileAttributes=0x80) returned 0 [0184.261] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BTHKT_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bthkt_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.261] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.261] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.261] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.261] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.262] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BTHKT_U.VSSX", dwFileAttributes=0x80) returned 0 [0184.262] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BTHKT_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bthkt_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.262] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.262] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.262] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.262] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.262] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BTHKT_VISIO2013_M.VSSX", dwFileAttributes=0x80) returned 0 [0184.263] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BTHKT_VISIO2013_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bthkt_visio2013_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.263] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.263] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.263] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.263] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.263] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BTHKT_VISIO2013_U.VSSX", dwFileAttributes=0x80) returned 0 [0184.264] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BTHKT_VISIO2013_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bthkt_visio2013_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.264] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.264] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.264] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.264] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.265] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BUILDINGS_M.VSSX", dwFileAttributes=0x80) returned 0 [0184.267] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BUILDINGS_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\buildings_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.267] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.267] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.267] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.267] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.267] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BUILDINGS_U.VSSX", dwFileAttributes=0x80) returned 0 [0184.268] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BUILDINGS_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\buildings_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.268] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.269] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.269] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.269] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.269] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BUSINESS_M.VSSX", dwFileAttributes=0x80) returned 0 [0184.270] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BUSINESS_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\business_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.270] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.270] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.271] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.271] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.271] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BUSINESS_U.VSSX", dwFileAttributes=0x80) returned 0 [0184.271] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BUSINESS_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\business_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.271] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.271] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.272] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.272] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.272] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CABNT_M.VSSX", dwFileAttributes=0x80) returned 0 [0184.273] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CABNT_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\cabnt_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.273] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.273] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.273] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.278] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.279] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CABNT_U.VSSX", dwFileAttributes=0x80) returned 0 [0184.279] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CABNT_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\cabnt_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.280] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.280] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.280] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.280] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.280] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CABNT_VISIO2013_M.VSSX", dwFileAttributes=0x80) returned 0 [0184.280] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CABNT_VISIO2013_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\cabnt_visio2013_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.280] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.280] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.281] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.281] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.281] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CABNT_VISIO2013_U.VSSX", dwFileAttributes=0x80) returned 0 [0184.282] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CABNT_VISIO2013_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\cabnt_visio2013_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.282] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.282] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.282] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.282] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CALNDR_M.VSSX", dwFileAttributes=0x80) returned 0 [0184.284] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CALNDR_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\calndr_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.284] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.284] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.284] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.284] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.285] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CALNDR_M.VSTX", dwFileAttributes=0x80) returned 0 [0184.285] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CALNDR_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\calndr_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.285] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.285] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.285] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.285] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.285] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CALNDR_U.VSSX", dwFileAttributes=0x80) returned 0 [0184.286] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CALNDR_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\calndr_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.286] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.286] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.286] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.286] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.287] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CALNDR_U.VSTX", dwFileAttributes=0x80) returned 0 [0184.287] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CALNDR_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\calndr_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.288] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.288] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.288] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.288] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.288] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CALOUT_M.VSSX", dwFileAttributes=0x80) returned 0 [0184.289] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CALOUT_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\calout_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.289] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.289] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.290] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.290] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.290] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CALOUT_U.VSSX", dwFileAttributes=0x80) returned 0 [0184.291] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CALOUT_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\calout_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.291] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.291] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.291] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.291] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.291] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CAUSEF_M.VSSX", dwFileAttributes=0x80) returned 0 [0184.291] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CAUSEF_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\causef_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.292] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.292] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.292] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.292] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.292] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CAUSEF_M.VSTX", dwFileAttributes=0x80) returned 0 [0184.293] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CAUSEF_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\causef_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.293] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.293] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.293] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.293] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.293] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CAUSEF_U.VSSX", dwFileAttributes=0x80) returned 0 [0184.294] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CAUSEF_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\causef_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.294] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.294] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.294] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.294] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.294] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CAUSEF_U.VSTX", dwFileAttributes=0x80) returned 0 [0184.295] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CAUSEF_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\causef_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.295] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.295] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.295] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.295] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.296] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CEILPL_M.VSTX", dwFileAttributes=0x80) returned 0 [0184.298] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CEILPL_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\ceilpl_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.299] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.299] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.299] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.299] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.299] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CEILPL_U.VSTX", dwFileAttributes=0x80) returned 0 [0184.300] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CEILPL_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\ceilpl_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.300] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.300] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.300] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.300] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.300] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CELEBRATION_M.VSSX", dwFileAttributes=0x80) returned 0 [0184.301] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CELEBRATION_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\celebration_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.301] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.301] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.302] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.302] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.302] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CELEBRATION_U.VSSX", dwFileAttributes=0x80) returned 0 [0184.303] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CELEBRATION_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\celebration_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.303] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.303] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.303] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.303] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CFF_DATAVISUALIZERPROCESSMAP.XLTX", dwFileAttributes=0x80) returned 0 [0184.303] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CFF_DATAVISUALIZERPROCESSMAP.XLTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\cff_datavisualizerprocessmap.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.304] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.304] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.304] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.304] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.304] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CFF_DATAVISUALIZER_M.VSTX", dwFileAttributes=0x80) returned 0 [0184.304] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CFF_DATAVISUALIZER_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\cff_datavisualizer_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.305] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.305] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.305] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.305] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.305] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CFF_DATAVISUALIZER_U.VSTX", dwFileAttributes=0x80) returned 0 [0184.306] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CFF_DATAVISUALIZER_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\cff_datavisualizer_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.306] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.306] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.306] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.306] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.306] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CFF_HORIZONTAL_M.VSTX", dwFileAttributes=0x80) returned 0 [0184.306] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CFF_HORIZONTAL_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\cff_horizontal_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.307] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.307] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.307] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.307] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.307] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CFF_HORIZONTAL_U.VSTX", dwFileAttributes=0x80) returned 0 [0184.307] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CFF_HORIZONTAL_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\cff_horizontal_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.307] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.308] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.308] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.308] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.308] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CFF_SHAREDPROCESS_M.VSTX", dwFileAttributes=0x80) returned 0 [0184.308] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CFF_SHAREDPROCESS_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\cff_sharedprocess_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.308] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.308] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.309] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.309] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.309] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CFF_SHAREDPROCESS_U.VSTX", dwFileAttributes=0x80) returned 0 [0184.309] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CFF_SHAREDPROCESS_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\cff_sharedprocess_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.309] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.309] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.309] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.309] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.310] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CFF_VERTICAL_M.VSTX", dwFileAttributes=0x80) returned 0 [0184.310] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CFF_VERTICAL_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\cff_vertical_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.310] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.310] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.310] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.310] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.310] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CFF_VERTICAL_U.VSTX", dwFileAttributes=0x80) returned 0 [0184.311] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CFF_VERTICAL_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\cff_vertical_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.311] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.311] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.311] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.311] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.311] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CHART_M.VSSX", dwFileAttributes=0x80) returned 0 [0184.313] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CHART_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\chart_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.314] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.314] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.314] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.314] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.314] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CHART_M.VSTX", dwFileAttributes=0x80) returned 0 [0184.314] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CHART_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\chart_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.314] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.314] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.315] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.315] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.315] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CHART_U.VSSX", dwFileAttributes=0x80) returned 0 [0184.316] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CHART_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\chart_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.316] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.316] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.316] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.316] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.316] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CHART_U.VSTX", dwFileAttributes=0x80) returned 0 [0184.316] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CHART_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\chart_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.317] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.317] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.317] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.317] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.317] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CIRCULARORGCHART_M.VSTX", dwFileAttributes=0x80) returned 0 [0184.318] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CIRCULARORGCHART_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\circularorgchart_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.318] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.318] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.318] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.320] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.321] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CIRCULARORGCHART_U.VSTX", dwFileAttributes=0x80) returned 0 [0184.321] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CIRCULARORGCHART_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\circularorgchart_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.321] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.321] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.321] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.321] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.322] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMMERCE_M.VSSX", dwFileAttributes=0x80) returned 0 [0184.323] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMMERCE_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\commerce_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.324] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.324] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.324] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.324] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.324] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMMERCE_U.VSSX", dwFileAttributes=0x80) returned 0 [0184.325] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMMERCE_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\commerce_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.325] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.325] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.326] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.326] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.326] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMMUNICATION_M.VSSX", dwFileAttributes=0x80) returned 0 [0184.327] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMMUNICATION_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\communication_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.327] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.327] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.328] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.328] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.328] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMMUNICATION_U.VSSX", dwFileAttributes=0x80) returned 0 [0184.329] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMMUNICATION_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\communication_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.330] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.330] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.330] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.330] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.330] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMOLE_M.VSSX", dwFileAttributes=0x80) returned 0 [0184.331] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMOLE_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\comole_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.331] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.331] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.332] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.332] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.332] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMOLE_M.VSTX", dwFileAttributes=0x80) returned 0 [0184.332] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMOLE_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\comole_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.332] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.332] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.332] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.333] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.333] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMOLE_U.VSSX", dwFileAttributes=0x80) returned 0 [0184.333] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMOLE_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\comole_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.333] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.333] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.333] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.333] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMOLE_U.VSTX", dwFileAttributes=0x80) returned 0 [0184.334] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMOLE_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\comole_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.334] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.334] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.334] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.334] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMPLN_M.VSSX", dwFileAttributes=0x80) returned 0 [0184.336] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMPLN_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\compln_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.336] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.336] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.336] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.336] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.336] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMPLN_U.VSSX", dwFileAttributes=0x80) returned 0 [0184.337] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMPLN_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\compln_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.337] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.337] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.337] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.337] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.337] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMPME_M.VSSX", dwFileAttributes=0x80) returned 0 [0184.337] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMPME_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\compme_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.338] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.338] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.338] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.338] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.338] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMPME_U.VSSX", dwFileAttributes=0x80) returned 0 [0184.339] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMPME_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\compme_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.339] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.339] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.339] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.339] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.339] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMPS_M.VSSX", dwFileAttributes=0x80) returned 0 [0184.341] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMPS_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\comps_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.341] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.341] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.341] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.341] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.341] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMPS_U.VSSX", dwFileAttributes=0x80) returned 0 [0184.342] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMPS_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\comps_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.342] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.342] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.342] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.342] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.342] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CONLOG_M.VSTX", dwFileAttributes=0x80) returned 0 [0184.344] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CONLOG_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\conlog_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.344] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.344] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.344] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.344] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.344] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CONLOG_U.VSTX", dwFileAttributes=0x80) returned 0 [0184.344] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CONLOG_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\conlog_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.345] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.345] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.345] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.345] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.345] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CONNEC_M.VSSX", dwFileAttributes=0x80) returned 0 [0184.346] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CONNEC_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\connec_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.347] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.347] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.347] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.347] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.347] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CONNEC_U.VSSX", dwFileAttributes=0x80) returned 0 [0184.348] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CONNEC_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\connec_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.348] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.348] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.348] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.348] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.348] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CUBICL_M.VSSX", dwFileAttributes=0x80) returned 0 [0184.349] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CUBICL_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\cubicl_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.349] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.349] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.349] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.349] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.349] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CUBICL_U.VSSX", dwFileAttributes=0x80) returned 0 [0184.350] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CUBICL_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\cubicl_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.350] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.350] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.350] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.350] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.351] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CUBICL_VISIO2013_M.VSSX", dwFileAttributes=0x80) returned 0 [0184.351] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CUBICL_VISIO2013_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\cubicl_visio2013_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.351] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.352] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.352] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.352] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.352] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CUBICL_VISIO2013_U.VSSX", dwFileAttributes=0x80) returned 0 [0184.353] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CUBICL_VISIO2013_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\cubicl_visio2013_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.353] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.353] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.353] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.353] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.353] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CYCLEDIAG_M.VSSX", dwFileAttributes=0x80) returned 0 [0184.355] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CYCLEDIAG_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\cyclediag_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.355] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.355] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.356] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.356] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.356] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CYCLEDIAG_U.VSSX", dwFileAttributes=0x80) returned 0 [0184.357] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CYCLEDIAG_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\cyclediag_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.357] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.357] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.357] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.357] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.358] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DATAVISUALIZERPREVIEW_M.VSSX", dwFileAttributes=0x80) returned 0 [0184.358] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DATAVISUALIZERPREVIEW_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\datavisualizerpreview_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.359] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.359] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.359] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.359] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.359] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DATAVISUALIZERPREVIEW_U.VSSX", dwFileAttributes=0x80) returned 0 [0184.359] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DATAVISUALIZERPREVIEW_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\datavisualizerpreview_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.360] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.360] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.360] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.360] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.360] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DATAVISUALIZER_M.VSSX", dwFileAttributes=0x80) returned 0 [0184.361] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DATAVISUALIZER_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\datavisualizer_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.361] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.361] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.361] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.361] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.361] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DATAVISUALIZER_U.VSSX", dwFileAttributes=0x80) returned 0 [0184.363] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DATAVISUALIZER_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\datavisualizer_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.363] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.363] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.363] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.363] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.363] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DATFLO_M.VSSX", dwFileAttributes=0x80) returned 0 [0184.364] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DATFLO_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\datflo_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.364] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.364] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.364] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.364] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.365] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DATFLO_M.VSTX", dwFileAttributes=0x80) returned 0 [0184.365] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DATFLO_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\datflo_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.365] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.365] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.365] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.365] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.366] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DATFLO_U.VSSX", dwFileAttributes=0x80) returned 0 [0184.366] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DATFLO_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\datflo_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.366] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.366] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.366] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.370] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.370] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DATFLO_U.VSTX", dwFileAttributes=0x80) returned 0 [0184.370] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DATFLO_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\datflo_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.370] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.370] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.370] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.370] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.371] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DATMOD_M.VSTX", dwFileAttributes=0x80) returned 0 [0184.374] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DATMOD_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\datmod_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.374] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.374] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.374] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.374] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.374] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DATMOD_U.VSTX", dwFileAttributes=0x80) returned 0 [0184.375] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DATMOD_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\datmod_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.375] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.375] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.375] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.375] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.375] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBCHEN_M.VSSX", dwFileAttributes=0x80) returned 0 [0184.376] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBCHEN_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dbchen_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.376] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.376] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.377] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.377] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.377] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBCHEN_M.VSTX", dwFileAttributes=0x80) returned 0 [0184.377] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBCHEN_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dbchen_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.377] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.377] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.377] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.377] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBCHEN_U.VSSX", dwFileAttributes=0x80) returned 0 [0184.378] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBCHEN_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dbchen_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.378] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.378] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.378] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.378] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.379] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBCHEN_U.VSTX", dwFileAttributes=0x80) returned 0 [0184.379] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBCHEN_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dbchen_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.379] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.379] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.379] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.379] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.379] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBCROW_M.VSSX", dwFileAttributes=0x80) returned 0 [0184.380] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBCROW_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dbcrow_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.380] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.380] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.380] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.380] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.380] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBCROW_M.VSTX", dwFileAttributes=0x80) returned 0 [0184.380] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBCROW_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dbcrow_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.381] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.381] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.381] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.381] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.381] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBCROW_U.VSSX", dwFileAttributes=0x80) returned 0 [0184.384] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBCROW_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dbcrow_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.384] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.384] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.385] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.385] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.385] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBCROW_U.VSTX", dwFileAttributes=0x80) returned 0 [0184.386] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBCROW_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dbcrow_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.386] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.386] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.386] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.386] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.387] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBIDEF1X_M.VSSX", dwFileAttributes=0x80) returned 0 [0184.387] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBIDEF1X_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dbidef1x_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.387] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.387] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.387] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.387] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.388] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBIDEF1X_M.VSTX", dwFileAttributes=0x80) returned 0 [0184.388] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBIDEF1X_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dbidef1x_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.388] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.388] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.388] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.388] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.388] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBIDEF1X_U.VSSX", dwFileAttributes=0x80) returned 0 [0184.390] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBIDEF1X_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dbidef1x_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.390] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.390] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.390] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.392] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.393] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBIDEF1X_U.VSTX", dwFileAttributes=0x80) returned 0 [0184.393] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBIDEF1X_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dbidef1x_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.394] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.394] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.394] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.394] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBMODL_M.VSTX", dwFileAttributes=0x80) returned 0 [0184.396] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBMODL_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dbmodl_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.396] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.396] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.396] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.396] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.396] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBMODL_U.VSTX", dwFileAttributes=0x80) returned 0 [0184.396] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBMODL_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dbmodl_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.397] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.397] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.397] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.397] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.397] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBUML_M.VSSX", dwFileAttributes=0x80) returned 0 [0184.398] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBUML_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dbuml_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.398] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.398] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.398] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.398] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.399] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBUML_M.VSTX", dwFileAttributes=0x80) returned 0 [0184.399] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBUML_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dbuml_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.400] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.400] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.400] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.400] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.400] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBUML_U.VSSX", dwFileAttributes=0x80) returned 0 [0184.400] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBUML_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dbuml_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.400] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.401] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.401] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.401] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.401] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBUML_U.VSTX", dwFileAttributes=0x80) returned 0 [0184.401] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBUML_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dbuml_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.401] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.401] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.402] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.402] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.402] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DEPTORGCHART_M.VSTX", dwFileAttributes=0x80) returned 0 [0184.402] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DEPTORGCHART_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\deptorgchart_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.402] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.402] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.402] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.402] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.403] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DEPTORGCHART_U.VSTX", dwFileAttributes=0x80) returned 0 [0184.403] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DEPTORGCHART_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\deptorgchart_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.403] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.403] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.403] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.403] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.404] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DGICON_M.VSSX", dwFileAttributes=0x80) returned 0 [0184.405] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DGICON_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dgicon_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.406] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.408] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.408] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.408] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.408] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DGICON_U.VSSX", dwFileAttributes=0x80) returned 0 [0184.409] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DGICON_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dgicon_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.409] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.409] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.409] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.409] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.409] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DIMARC_U.VSSX", dwFileAttributes=0x80) returned 0 [0184.410] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DIMARC_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dimarc_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.411] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.411] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.411] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.411] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.411] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DIMENG_M.VSSX", dwFileAttributes=0x80) returned 0 [0184.413] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DIMENG_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dimeng_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.413] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.413] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.414] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.414] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.414] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DIMENG_U.VSSX", dwFileAttributes=0x80) returned 0 [0184.417] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DIMENG_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dimeng_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.417] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.417] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.417] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.417] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.418] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DOCUMENT_APPROVAL_WORKFLOW_M.VSTX", dwFileAttributes=0x80) returned 0 [0184.418] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DOCUMENT_APPROVAL_WORKFLOW_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\document_approval_workflow_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.418] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.418] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.419] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.419] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.419] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DOCUMENT_APPROVAL_WORKFLOW_U.VSTX", dwFileAttributes=0x80) returned 0 [0184.419] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DOCUMENT_APPROVAL_WORKFLOW_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\document_approval_workflow_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.419] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.419] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.420] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.420] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.420] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DRAWTL_M.VSSX", dwFileAttributes=0x80) returned 0 [0184.422] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DRAWTL_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\drawtl_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.422] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.422] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.422] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.422] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.423] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DRAWTL_U.VSSX", dwFileAttributes=0x80) returned 0 [0184.423] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DRAWTL_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\drawtl_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.423] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.423] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.424] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.426] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.427] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DRILLD_M.VSSX", dwFileAttributes=0x80) returned 0 [0184.428] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DRILLD_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\drilld_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.428] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.428] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.428] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.428] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.429] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DRILLD_M.VSTX", dwFileAttributes=0x80) returned 0 [0184.431] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DRILLD_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\drilld_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.431] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.431] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.432] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.432] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.432] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DRILLD_U.VSSX", dwFileAttributes=0x80) returned 0 [0184.433] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DRILLD_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\drilld_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.433] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.433] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.434] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.434] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.434] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DRILLD_U.VSTX", dwFileAttributes=0x80) returned 0 [0184.435] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DRILLD_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\drilld_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.435] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.435] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.435] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.435] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.436] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DTLNET_M.VSSX", dwFileAttributes=0x80) returned 0 [0184.436] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DTLNET_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dtlnet_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.437] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.437] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.437] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.437] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.438] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DTLNET_M.VSTX", dwFileAttributes=0x80) returned 0 [0184.438] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DTLNET_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dtlnet_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.438] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.438] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.439] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.439] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.439] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DTLNET_U.VSSX", dwFileAttributes=0x80) returned 0 [0184.440] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DTLNET_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dtlnet_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.440] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.440] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.441] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.441] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.441] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DTLNET_U.VSTX", dwFileAttributes=0x80) returned 0 [0184.441] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DTLNET_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dtlnet_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.441] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.441] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.442] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.442] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.442] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DTLNME_M.VSSX", dwFileAttributes=0x80) returned 0 [0184.442] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DTLNME_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dtlnme_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.443] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.443] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.443] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.443] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.443] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DTLNME_M.VSTX", dwFileAttributes=0x80) returned 0 [0184.444] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DTLNME_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dtlnme_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.445] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.445] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.445] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.445] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.445] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DTLNME_U.VSSX", dwFileAttributes=0x80) returned 0 [0184.446] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DTLNME_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dtlnme_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.446] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.447] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.447] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.447] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DTLNME_U.VSTX", dwFileAttributes=0x80) returned 0 [0184.447] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DTLNME_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dtlnme_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.448] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.448] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.448] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.448] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.448] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DVCALL_M.VSSX", dwFileAttributes=0x80) returned 0 [0184.450] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DVCALL_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dvcall_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.450] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.450] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.451] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.451] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.451] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DVCALL_U.VSSX", dwFileAttributes=0x80) returned 0 [0184.455] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DVCALL_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dvcall_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.456] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.456] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.456] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.456] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.456] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DWGCNV_M.VSTX", dwFileAttributes=0x80) returned 0 [0184.457] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DWGCNV_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dwgcnv_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.458] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.458] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.458] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.458] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.458] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DWGCNV_U.VSTX", dwFileAttributes=0x80) returned 0 [0184.459] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DWGCNV_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dwgcnv_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.459] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.459] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.459] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.459] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.460] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EDUCATION_M.VSSX", dwFileAttributes=0x80) returned 0 [0184.461] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EDUCATION_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\education_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.461] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.461] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.462] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.462] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.462] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EDUCATION_U.VSSX", dwFileAttributes=0x80) returned 0 [0184.462] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EDUCATION_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\education_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.463] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.463] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.463] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.463] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.463] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EDU_EECHIP_M.VSTX", dwFileAttributes=0x80) returned 0 [0184.464] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EDU_EECHIP_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\edu_eechip_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.464] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.464] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.465] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.465] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.465] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EECHIP_M.VSSX", dwFileAttributes=0x80) returned 0 [0184.467] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EECHIP_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eechip_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.468] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.468] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.468] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.468] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.469] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EECHIP_M.VSTX", dwFileAttributes=0x80) returned 0 [0184.470] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EECHIP_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eechip_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.470] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.470] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.471] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.471] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.471] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EECHIP_U.VSSX", dwFileAttributes=0x80) returned 0 [0184.471] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EECHIP_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eechip_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.471] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.472] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.472] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.472] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.472] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EECHIP_U.VSTX", dwFileAttributes=0x80) returned 0 [0184.472] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EECHIP_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eechip_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.473] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.473] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.473] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.473] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.473] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EECOMP_M.VSSX", dwFileAttributes=0x80) returned 0 [0184.476] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EECOMP_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eecomp_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.477] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.477] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.477] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.477] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.477] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EECOMP_U.VSSX", dwFileAttributes=0x80) returned 0 [0184.478] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EECOMP_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eecomp_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.478] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.478] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.478] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.478] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.479] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEFUND_M.VSSX", dwFileAttributes=0x80) returned 0 [0184.479] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEFUND_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eefund_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.479] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.479] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.480] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.480] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.480] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEFUND_U.VSSX", dwFileAttributes=0x80) returned 0 [0184.480] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEFUND_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eefund_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.480] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.480] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.481] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.481] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEFUND_VISIO2013_M.VSSX", dwFileAttributes=0x80) returned 0 [0184.481] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEFUND_VISIO2013_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eefund_visio2013_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.482] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.482] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.482] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.482] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEFUND_VISIO2013_U.VSSX", dwFileAttributes=0x80) returned 0 [0184.483] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEFUND_VISIO2013_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eefund_visio2013_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.483] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.483] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.484] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.484] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.484] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEGENR_M.VSTX", dwFileAttributes=0x80) returned 0 [0184.485] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEGENR_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eegenr_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.486] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.486] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.486] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.486] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.486] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEGENR_U.VSTX", dwFileAttributes=0x80) returned 0 [0184.487] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEGENR_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eegenr_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.487] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.487] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.488] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.488] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.488] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEICS_M.VSTX", dwFileAttributes=0x80) returned 0 [0184.490] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEICS_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eeics_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.490] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.490] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.491] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.491] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.491] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEICS_U.VSTX", dwFileAttributes=0x80) returned 0 [0184.491] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEICS_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eeics_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.491] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.491] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.492] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0184.497] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEMAIN_M.VSSX", dwFileAttributes=0x80) returned 0 [0184.498] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEMAIN_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eemain_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.498] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.498] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.499] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0184.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEMAIN_U.VSSX", dwFileAttributes=0x80) returned 0 [0184.499] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEMAIN_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eemain_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.500] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.500] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.059] SetLastError (dwErrCode=0x0) [0185.059] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.064] GetLastError () returned 0x5 [0185.064] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0185.064] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.064] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0185.064] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0185.065] SetLastError (dwErrCode=0x0) [0185.065] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.065] GetLastError () returned 0x5 [0185.065] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0185.065] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.065] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.065] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.065] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.065] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.065] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISIO.VisualElementsManifest.xml", dwFileAttributes=0x80) returned 0 [0185.067] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISIO.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio.visualelementsmanifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.067] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.068] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.068] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.068] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.068] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VisioCustom.propdesc", dwFileAttributes=0x80) returned 0 [0185.069] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VisioCustom.propdesc" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visiocustom.propdesc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.069] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.069] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.069] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.069] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.069] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.069] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.069] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.069] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.069] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.069] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.070] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.070] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.070] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.070] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.070] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.070] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.070] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.070] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.070] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINPROJ.VisualElementsManifest.xml", dwFileAttributes=0x80) returned 0 [0185.071] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINPROJ.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\winproj.visualelementsmanifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.071] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.071] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.071] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.071] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.071] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.072] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINWORD.VisualElementsManifest.xml", dwFileAttributes=0x80) returned 0 [0185.073] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINWORD.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\winword.visualelementsmanifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.073] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.073] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.074] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.074] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.074] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.074] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Wordcnvpxy.cnv", dwFileAttributes=0x80) returned 0 [0185.075] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Wordcnvpxy.cnv" (normalized: "c:\\program files\\microsoft office\\root\\office16\\wordcnvpxy.cnv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.076] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.076] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.076] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.076] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.076] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.076] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.076] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\wordEtw.man", dwFileAttributes=0x80) returned 0 [0185.076] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\wordEtw.man" (normalized: "c:\\program files\\microsoft office\\root\\office16\\wordetw.man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.077] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.077] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.077] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.077] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.077] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.077] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.077] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.077] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.077] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.077] SetLastError (dwErrCode=0x0) [0185.077] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.077] GetLastError () returned 0x5 [0185.077] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0185.077] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.077] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\XLSTART\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb56a0 [0185.077] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.078] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0185.078] FindClose (in: hFindFile=0x665abb56a0 | out: hFindFile=0x665abb56a0) returned 1 [0185.078] SetLastError (dwErrCode=0x0) [0185.078] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\XLSTART\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\xlstart\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.078] GetLastError () returned 0x5 [0185.078] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0185.078] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.078] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.078] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.078] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\XML2WORD.XSL", dwFileAttributes=0x80) returned 0 [0185.079] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\XML2WORD.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\xml2word.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.079] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.079] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.080] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0185.080] FindClose (in: hFindFile=0x665abb5160 | out: hFindFile=0x665abb5160) returned 1 [0185.080] SetLastError (dwErrCode=0x0) [0185.080] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.080] GetLastError () returned 0x5 [0185.080] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0185.080] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.080] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0185.080] SetLastError (dwErrCode=0x0) [0185.080] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.080] GetLastError () returned 0x5 [0185.080] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0185.080] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.081] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb42c0 [0185.083] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.084] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.084] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.084] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0185.085] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\access.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.085] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.085] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.085] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.085] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.085] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.tree.dat", dwFileAttributes=0x80) returned 0 [0185.086] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\access.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.086] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.086] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.087] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.087] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.087] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmui.msi.16.en-us.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0185.087] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\accessmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.087] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.087] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.087] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.087] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.088] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmui.msi.16.en-us.tree.dat", dwFileAttributes=0x80) returned 0 [0185.088] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\accessmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.089] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.089] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.089] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.089] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.089] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmuiset.msi.16.en-us.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0185.090] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmuiset.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\accessmuiset.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.090] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.090] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.090] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.090] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.090] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmuiset.msi.16.en-us.tree.dat", dwFileAttributes=0x80) returned 0 [0185.091] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmuiset.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\accessmuiset.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.091] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.091] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.092] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.092] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.092] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcf.x-none.msi.16.x-none.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0185.092] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcf.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\dcf.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.092] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.092] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.092] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.093] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.093] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcf.x-none.msi.16.x-none.tree.dat", dwFileAttributes=0x80) returned 0 [0185.093] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcf.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\dcf.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.093] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.093] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.094] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.094] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.094] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcfmui.msi.16.en-us.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0185.094] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcfmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\dcfmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.094] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.094] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.094] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.095] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.095] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcfmui.msi.16.en-us.tree.dat", dwFileAttributes=0x80) returned 0 [0185.095] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcfmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\dcfmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.096] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.096] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.096] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.096] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.096] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excel.x-none.msi.16.x-none.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0185.096] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excel.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\excel.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.096] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.096] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.097] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.097] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.097] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excel.x-none.msi.16.x-none.tree.dat", dwFileAttributes=0x80) returned 0 [0185.097] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excel.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\excel.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.097] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.097] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.098] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.098] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.098] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excelmui.msi.16.en-us.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0185.098] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excelmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\excelmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.098] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.098] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.098] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.098] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.099] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excelmui.msi.16.en-us.tree.dat", dwFileAttributes=0x80) returned 0 [0185.099] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excelmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\excelmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.099] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.099] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.100] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.100] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.100] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groove.x-none.msi.16.x-none.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0185.100] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groove.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\groove.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.100] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.100] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.101] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.101] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.101] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groove.x-none.msi.16.x-none.tree.dat", dwFileAttributes=0x80) returned 0 [0185.101] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groove.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\groove.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.101] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.101] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.101] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.101] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groovemui.msi.16.en-us.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0185.102] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groovemui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\groovemui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.102] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.102] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.102] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.102] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groovemui.msi.16.en-us.tree.dat", dwFileAttributes=0x80) returned 0 [0185.103] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groovemui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\groovemui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.103] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.103] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.104] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.104] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lync.x-none.msi.16.x-none.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0185.104] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lync.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\lync.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.104] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.104] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.104] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.104] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.105] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lync.x-none.msi.16.x-none.tree.dat", dwFileAttributes=0x80) returned 0 [0185.105] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lync.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\lync.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.105] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.105] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.105] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.105] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.105] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lyncmui.msi.16.en-us.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0185.106] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lyncmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\lyncmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.106] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.106] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.106] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.106] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lyncmui.msi.16.en-us.tree.dat", dwFileAttributes=0x80) returned 0 [0185.107] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lyncmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\lyncmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.107] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.107] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.107] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.107] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office.x-none.msi.16.x-none.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0185.108] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.108] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.108] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.108] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.109] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.110] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office.x-none.msi.16.x-none.tree.dat", dwFileAttributes=0x80) returned 0 [0185.110] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.110] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.110] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.110] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.110] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.111] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32mui.msi.16.en-us.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0185.112] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32mui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office32mui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.113] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.113] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.113] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.113] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.113] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32mui.msi.16.en-us.tree.dat", dwFileAttributes=0x80) returned 0 [0185.114] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32mui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office32mui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.114] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.114] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.114] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.114] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.114] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32ww.msi.16.x-none.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0185.115] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32ww.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office32ww.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.115] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.115] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.115] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.115] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.115] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32ww.msi.16.x-none.tree.dat", dwFileAttributes=0x80) returned 0 [0185.115] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32ww.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office32ww.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.116] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.116] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.116] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.116] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.116] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemui.msi.16.en-us.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0185.117] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\officemui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.117] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.117] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.117] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.117] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.118] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemui.msi.16.en-us.tree.dat", dwFileAttributes=0x80) returned 0 [0185.118] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\officemui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.118] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.118] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.119] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.119] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemuiset.msi.16.en-us.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0185.119] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemuiset.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\officemuiset.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.119] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.119] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.120] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.120] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.120] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemuiset.msi.16.en-us.tree.dat", dwFileAttributes=0x80) returned 0 [0185.120] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemuiset.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\officemuiset.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.120] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.120] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.120] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.121] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.121] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenote.x-none.msi.16.x-none.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0185.121] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenote.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\onenote.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.121] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.121] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.121] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.121] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.122] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenote.x-none.msi.16.x-none.tree.dat", dwFileAttributes=0x80) returned 0 [0185.122] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenote.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\onenote.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.122] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.122] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.122] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.122] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.123] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenotemui.msi.16.en-us.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0185.123] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenotemui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\onenotemui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.123] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.123] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.124] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.124] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenotemui.msi.16.en-us.tree.dat", dwFileAttributes=0x80) returned 0 [0185.125] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenotemui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\onenotemui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.125] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.125] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.125] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.125] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.126] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osm.x-none.msi.16.x-none.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0185.126] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osm.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osm.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.126] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.126] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.126] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.126] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osm.x-none.msi.16.x-none.tree.dat", dwFileAttributes=0x80) returned 0 [0185.127] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osm.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osm.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.127] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.127] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.127] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.127] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.128] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmmui.msi.16.en-us.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0185.128] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.128] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.129] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.129] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.129] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.129] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmmui.msi.16.en-us.tree.dat", dwFileAttributes=0x80) returned 0 [0185.130] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.130] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.130] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.130] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.130] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmux.x-none.msi.16.x-none.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0185.131] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmux.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmux.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.131] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.131] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.132] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.132] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmux.x-none.msi.16.x-none.tree.dat", dwFileAttributes=0x80) returned 0 [0185.133] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmux.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmux.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.133] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.133] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.133] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.133] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.133] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmuxmui.msi.16.en-us.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0185.134] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmuxmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmuxmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.135] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.135] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.135] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.135] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmuxmui.msi.16.en-us.tree.dat", dwFileAttributes=0x80) returned 0 [0185.136] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmuxmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmuxmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.136] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.136] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.136] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.136] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlook.x-none.msi.16.x-none.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0185.137] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlook.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\outlook.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.137] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.137] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.137] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.137] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlook.x-none.msi.16.x-none.tree.dat", dwFileAttributes=0x80) returned 0 [0185.137] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlook.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\outlook.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.138] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.138] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.138] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.138] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.138] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlookmui.msi.16.en-us.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0185.138] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlookmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\outlookmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.138] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.139] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.139] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.140] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.140] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlookmui.msi.16.en-us.tree.dat", dwFileAttributes=0x80) returned 0 [0185.140] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlookmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\outlookmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.141] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.141] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.141] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.141] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.141] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0185.142] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.142] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.142] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.143] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.143] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.tree.dat", dwFileAttributes=0x80) returned 0 [0185.143] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.143] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.143] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.144] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.144] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0185.144] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.144] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.144] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.144] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.144] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.145] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.tree.dat", dwFileAttributes=0x80) returned 0 [0185.145] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.145] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.145] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.145] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.145] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.146] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpointmui.msi.16.en-us.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0185.146] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpointmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpointmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.146] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.146] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.146] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.146] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.146] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpointmui.msi.16.en-us.tree.dat", dwFileAttributes=0x80) returned 0 [0185.147] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpointmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpointmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.147] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.147] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.148] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.148] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.148] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\project.x-none.msi.16.x-none.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0185.148] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\project.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\project.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.148] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.148] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.148] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.148] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.149] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\project.x-none.msi.16.x-none.tree.dat", dwFileAttributes=0x80) returned 0 [0185.149] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\project.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\project.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.149] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.149] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.149] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.149] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.149] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\projectmui.msi.16.en-us.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0185.150] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\projectmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\projectmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.150] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.150] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.151] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.151] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.151] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\projectmui.msi.16.en-us.tree.dat", dwFileAttributes=0x80) returned 0 [0185.151] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\projectmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\projectmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.151] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.151] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.151] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.151] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.en-us.msi.16.en-us.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0185.152] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.en-us.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.en-us.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.152] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.152] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.152] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.152] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.en-us.msi.16.en-us.tree.dat", dwFileAttributes=0x80) returned 0 [0185.153] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.en-us.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.en-us.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.153] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.153] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.154] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.154] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.154] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.es-es.msi.16.es-es.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0185.155] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.es-es.msi.16.es-es.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.es-es.msi.16.es-es.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.155] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.155] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.155] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.155] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.es-es.msi.16.es-es.tree.dat", dwFileAttributes=0x80) returned 0 [0185.157] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.es-es.msi.16.es-es.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.es-es.msi.16.es-es.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.157] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.157] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.157] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.157] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0185.162] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.162] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.162] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.162] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.162] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.tree.dat", dwFileAttributes=0x80) returned 0 [0185.163] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.163] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.163] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.163] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.163] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.164] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proofing.msi.16.en-us.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0185.166] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proofing.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proofing.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.166] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.166] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.166] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.166] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proofing.msi.16.en-us.tree.dat", dwFileAttributes=0x80) returned 0 [0185.167] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proofing.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proofing.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.167] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.167] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.167] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.167] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publisher.x-none.msi.16.x-none.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0185.168] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publisher.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\publisher.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.168] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.168] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.169] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.169] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.169] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publisher.x-none.msi.16.x-none.tree.dat", dwFileAttributes=0x80) returned 0 [0185.170] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publisher.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\publisher.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.170] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.170] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.170] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.170] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publishermui.msi.16.en-us.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0185.171] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publishermui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\publishermui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.171] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.171] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.172] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.172] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.172] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publishermui.msi.16.en-us.tree.dat", dwFileAttributes=0x80) returned 0 [0185.173] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publishermui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\publishermui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.173] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.173] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.173] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.173] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.173] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visio.x-none.msi.16.x-none.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0185.173] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visio.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\visio.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.174] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.174] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.174] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.174] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.174] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visio.x-none.msi.16.x-none.tree.dat", dwFileAttributes=0x80) returned 0 [0185.174] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visio.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\visio.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.175] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.175] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.175] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.175] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.175] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visiomui.msi.16.en-us.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0185.176] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visiomui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\visiomui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.176] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.176] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.176] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.176] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.176] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visiomui.msi.16.en-us.tree.dat", dwFileAttributes=0x80) returned 0 [0185.177] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visiomui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\visiomui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.177] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.177] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.177] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.178] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\word.x-none.msi.16.x-none.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0185.178] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\word.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\word.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.178] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.178] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.178] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.178] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.179] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\word.x-none.msi.16.x-none.tree.dat", dwFileAttributes=0x80) returned 0 [0185.179] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\word.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\word.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.179] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.179] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.179] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.179] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.179] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\wordmui.msi.16.en-us.boot.tree.dat", dwFileAttributes=0x80) returned 0 [0185.180] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\wordmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\wordmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.180] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.180] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.180] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.181] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.181] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\wordmui.msi.16.en-us.tree.dat", dwFileAttributes=0x80) returned 0 [0185.181] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\wordmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\wordmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.182] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.182] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.182] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0185.182] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0185.183] SetLastError (dwErrCode=0x0) [0185.183] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.185] GetLastError () returned 0x5 [0185.185] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0185.185] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.185] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0185.185] SetLastError (dwErrCode=0x0) [0185.185] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.186] GetLastError () returned 0x5 [0185.186] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0185.186] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.186] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb4920 [0185.186] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.186] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.186] SetLastError (dwErrCode=0x0) [0185.186] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.186] GetLastError () returned 0x5 [0185.186] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0185.186] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.186] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb56a0 [0185.188] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.188] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.188] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.188] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\CURRENCY.GIF", dwFileAttributes=0x80) returned 0 [0185.189] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\CURRENCY.GIF" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\currency.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.189] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.189] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.190] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.190] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.190] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\CURRENCY.HTM", dwFileAttributes=0x80) returned 0 [0185.190] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\CURRENCY.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\currency.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.190] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.190] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.190] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.190] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.191] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\DADSHIRT.GIF", dwFileAttributes=0x80) returned 0 [0185.191] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\DADSHIRT.GIF" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\dadshirt.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.191] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.191] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.191] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.191] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.192] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\DADSHIRT.HTM", dwFileAttributes=0x80) returned 0 [0185.192] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\DADSHIRT.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\dadshirt.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.192] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.192] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.193] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.193] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.193] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUDGESCH.GIF", dwFileAttributes=0x80) returned 0 [0185.193] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUDGESCH.GIF" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\judgesch.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.193] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.193] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.193] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.193] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.194] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUDGESCH.HTM", dwFileAttributes=0x80) returned 0 [0185.194] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUDGESCH.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\judgesch.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.194] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.194] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.194] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.194] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.195] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUNGLE.GIF", dwFileAttributes=0x80) returned 0 [0185.195] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUNGLE.GIF" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\jungle.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.195] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.195] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.195] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.195] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.195] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUNGLE.HTM", dwFileAttributes=0x80) returned 0 [0185.196] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUNGLE.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\jungle.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.196] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.196] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.196] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.196] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.196] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\NOTEBOOK.HTM", dwFileAttributes=0x80) returned 0 [0185.197] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\NOTEBOOK.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\notebook.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.197] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.197] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.197] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.197] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.197] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\NOTEBOOK.JPG", dwFileAttributes=0x80) returned 0 [0185.197] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\NOTEBOOK.JPG" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\notebook.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.198] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.198] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.198] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.198] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.198] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\OFFISUPP.GIF", dwFileAttributes=0x80) returned 0 [0185.198] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\OFFISUPP.GIF" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\offisupp.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.198] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.198] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.199] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.199] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.199] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\OFFISUPP.HTM", dwFileAttributes=0x80) returned 0 [0185.200] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\OFFISUPP.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\offisupp.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.200] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.200] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.201] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.201] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.201] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PAWPRINT.GIF", dwFileAttributes=0x80) returned 0 [0185.201] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PAWPRINT.GIF" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\pawprint.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.201] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.201] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.201] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.201] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.202] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PAWPRINT.HTM", dwFileAttributes=0x80) returned 0 [0185.202] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PAWPRINT.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\pawprint.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.202] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.202] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.202] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.202] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.203] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PINELUMB.HTM", dwFileAttributes=0x80) returned 0 [0185.209] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PINELUMB.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\pinelumb.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.209] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.209] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.209] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.209] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.209] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PINELUMB.JPG", dwFileAttributes=0x80) returned 0 [0185.211] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PINELUMB.JPG" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\pinelumb.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.211] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.211] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.212] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.212] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.212] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\SEAMARBL.HTM", dwFileAttributes=0x80) returned 0 [0185.212] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\SEAMARBL.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\seamarbl.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.212] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.212] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.212] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.212] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.213] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\SEAMARBL.JPG", dwFileAttributes=0x80) returned 0 [0185.213] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\SEAMARBL.JPG" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\seamarbl.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.213] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.213] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.213] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.213] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.213] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\TECHTOOL.GIF", dwFileAttributes=0x80) returned 0 [0185.214] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\TECHTOOL.GIF" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\techtool.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.214] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.214] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.214] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.214] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.214] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\TECHTOOL.HTM", dwFileAttributes=0x80) returned 0 [0185.214] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\TECHTOOL.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\techtool.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.215] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.215] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.215] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0185.215] FindClose (in: hFindFile=0x665abb56a0 | out: hFindFile=0x665abb56a0) returned 1 [0185.216] SetLastError (dwErrCode=0x0) [0185.216] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.218] GetLastError () returned 0x5 [0185.218] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0185.218] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.218] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0185.219] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0185.219] SetLastError (dwErrCode=0x0) [0185.219] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.219] GetLastError () returned 0x5 [0185.219] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0185.219] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.219] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0185.219] SetLastError (dwErrCode=0x0) [0185.219] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.219] GetLastError () returned 0x5 [0185.219] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0185.219] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.219] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb4920 [0185.219] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.219] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.219] SetLastError (dwErrCode=0x0) [0185.219] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.220] GetLastError () returned 0x5 [0185.220] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0185.220] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.220] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb5580 [0185.221] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.222] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.222] SetLastError (dwErrCode=0x0) [0185.222] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.223] GetLastError () returned 0x5 [0185.223] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0185.223] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.223] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb56a0 [0185.223] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.223] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.223] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.223] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\accessparts.xml", dwFileAttributes=0x80) returned 0 [0185.223] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\accessparts.xml" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\accessparts.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.223] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.224] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.224] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.224] SetLastError (dwErrCode=0x0) [0185.224] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.224] GetLastError () returned 0x5 [0185.224] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0185.224] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.224] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4c20 [0185.225] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.225] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.225] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.225] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\Address.accft", dwFileAttributes=0x80) returned 0 [0185.227] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\Address.accft" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\datatype\\address.accft"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.227] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.227] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.227] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.227] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.227] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\Category.accft", dwFileAttributes=0x80) returned 0 [0185.228] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\Category.accft" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\datatype\\category.accft"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.228] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.228] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.229] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.229] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.229] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\Name.accft", dwFileAttributes=0x80) returned 0 [0185.230] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\Name.accft" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\datatype\\name.accft"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.230] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.230] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.230] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.230] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.231] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\Payment Type.accft", dwFileAttributes=0x80) returned 0 [0185.231] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\Payment Type.accft" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\datatype\\payment type.accft"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.232] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.232] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.232] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.232] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.232] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\Phone.accft", dwFileAttributes=0x80) returned 0 [0185.232] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\Phone.accft" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\datatype\\phone.accft"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.232] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.232] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.233] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.233] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.233] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\Priority.accft", dwFileAttributes=0x80) returned 0 [0185.233] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\Priority.accft" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\datatype\\priority.accft"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.233] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.233] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.234] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.234] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.234] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\Start End Dates.accft", dwFileAttributes=0x80) returned 0 [0185.234] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\Start End Dates.accft" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\datatype\\start end dates.accft"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.234] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.235] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.235] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.235] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.235] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\Status.accft", dwFileAttributes=0x80) returned 0 [0185.236] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\Status.accft" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\datatype\\status.accft"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.236] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.236] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.236] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.236] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.236] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\Tags.accft", dwFileAttributes=0x80) returned 0 [0185.237] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\Tags.accft" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\datatype\\tags.accft"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.237] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.237] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.237] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0185.237] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0185.238] SetLastError (dwErrCode=0x0) [0185.238] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\datatype\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.240] GetLastError () returned 0x5 [0185.240] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0185.240] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.240] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.240] SetLastError (dwErrCode=0x0) [0185.240] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.241] GetLastError () returned 0x5 [0185.241] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0185.241] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.241] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb49e0 [0185.242] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.242] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.242] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.242] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\1 Right.accdt", dwFileAttributes=0x80) returned 0 [0185.243] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\1 Right.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\1 right.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.243] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.243] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.243] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.243] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.244] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\1 Top.accdt", dwFileAttributes=0x80) returned 0 [0185.244] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\1 Top.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\1 top.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.244] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.244] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.244] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.244] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.245] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\2 Right.accdt", dwFileAttributes=0x80) returned 0 [0185.246] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\2 Right.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\2 right.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.247] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.247] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.247] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.247] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.247] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\2 Top.accdt", dwFileAttributes=0x80) returned 0 [0185.248] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\2 Top.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\2 top.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.248] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.248] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.249] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.249] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.249] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Comments.accdt", dwFileAttributes=0x80) returned 0 [0185.249] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Comments.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\comments.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.249] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.249] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.250] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.250] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.250] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Contacts.accdt", dwFileAttributes=0x80) returned 0 [0185.250] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Contacts.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\contacts.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.250] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.250] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.251] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.251] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.251] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Details.accdt", dwFileAttributes=0x80) returned 0 [0185.251] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Details.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\details.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.251] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.251] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.252] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.252] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.252] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Dialog.accdt", dwFileAttributes=0x80) returned 0 [0185.253] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Dialog.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\dialog.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.253] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.253] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.253] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.253] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.253] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Issues.accdt", dwFileAttributes=0x80) returned 0 [0185.253] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Issues.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\issues.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.254] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.254] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.254] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.254] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.254] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\List.accdt", dwFileAttributes=0x80) returned 0 [0185.254] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\List.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\list.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.254] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.255] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.255] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.255] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.255] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Media.accdt", dwFileAttributes=0x80) returned 0 [0185.255] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Media.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\media.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.255] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.255] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.256] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.256] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.256] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Msgbox.accdt", dwFileAttributes=0x80) returned 0 [0185.256] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Msgbox.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\msgbox.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.256] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.256] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.256] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.256] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.257] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Tabs.accdt", dwFileAttributes=0x80) returned 0 [0185.257] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Tabs.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\tabs.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.257] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.257] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.257] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.257] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.258] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Tasks.accdt", dwFileAttributes=0x80) returned 0 [0185.258] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Tasks.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\tasks.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.258] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.258] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.258] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.258] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.258] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Users.accdt", dwFileAttributes=0x80) returned 0 [0185.259] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Users.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\users.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.259] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.259] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.259] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0185.259] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0185.260] SetLastError (dwErrCode=0x0) [0185.260] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.263] GetLastError () returned 0x5 [0185.263] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0185.263] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.263] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0185.263] FindClose (in: hFindFile=0x665abb56a0 | out: hFindFile=0x665abb56a0) returned 1 [0185.263] SetLastError (dwErrCode=0x0) [0185.263] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.263] GetLastError () returned 0x5 [0185.263] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0185.263] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.263] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.263] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.263] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyLetter.dotx", dwFileAttributes=0x80) returned 0 [0185.264] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyLetter.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adjacencyletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.264] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.264] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.264] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.264] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.265] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyReport.dotx", dwFileAttributes=0x80) returned 0 [0185.265] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyReport.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adjacencyreport.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.265] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.265] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.266] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.266] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.266] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyResume.dotx", dwFileAttributes=0x80) returned 0 [0185.267] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyResume.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adjacencyresume.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.267] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.267] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.268] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.268] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.268] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR1.XLT", dwFileAttributes=0x80) returned 0 [0185.268] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR1.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr1.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.268] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.268] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.268] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.268] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.269] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR10.XLT", dwFileAttributes=0x80) returned 0 [0185.269] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR10.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr10.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.269] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.270] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.270] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.270] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.270] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR2.XLT", dwFileAttributes=0x80) returned 0 [0185.271] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR2.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr2.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.271] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.271] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.271] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.271] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.271] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR3.XLT", dwFileAttributes=0x80) returned 0 [0185.271] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR3.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr3.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.272] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.272] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.272] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.272] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.272] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR4.XLT", dwFileAttributes=0x80) returned 0 [0185.272] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR4.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr4.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.272] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.273] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.273] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.273] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.273] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR5.XLT", dwFileAttributes=0x80) returned 0 [0185.273] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR5.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr5.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.273] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.273] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.274] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.274] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.274] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR6.XLT", dwFileAttributes=0x80) returned 0 [0185.274] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR6.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr6.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.274] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.274] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.274] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.274] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.275] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR7.XLT", dwFileAttributes=0x80) returned 0 [0185.275] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR7.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr7.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.275] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.275] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.275] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.275] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.275] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR8.XLT", dwFileAttributes=0x80) returned 0 [0185.276] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR8.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr8.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.276] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.276] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.276] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.276] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.276] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR9.XLT", dwFileAttributes=0x80) returned 0 [0185.276] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR9.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr9.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.277] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.277] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.277] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.277] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.277] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryLetter.dotx", dwFileAttributes=0x80) returned 0 [0185.278] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryLetter.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\apothecaryletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.278] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.278] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.278] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.278] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.279] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryNewsletter.dotx", dwFileAttributes=0x80) returned 0 [0185.279] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryNewsletter.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\apothecarynewsletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.280] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.280] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.280] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.280] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.280] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryResume.dotx", dwFileAttributes=0x80) returned 0 [0185.280] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryResume.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\apothecaryresume.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.280] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.280] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.281] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.281] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.281] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\BillingStatement.xltx", dwFileAttributes=0x80) returned 0 [0185.281] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\BillingStatement.xltx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\billingstatement.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.282] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.282] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.282] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.282] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Blog.dotx", dwFileAttributes=0x80) returned 0 [0185.282] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Blog.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\blog.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.282] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.282] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.283] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.283] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.283] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\BloodPressureTracker.xltx", dwFileAttributes=0x80) returned 0 [0185.283] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\BloodPressureTracker.xltx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\bloodpressuretracker.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.283] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.283] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.283] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.284] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.284] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ChronologicalLetter.dotx", dwFileAttributes=0x80) returned 0 [0185.284] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ChronologicalLetter.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\chronologicalletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.284] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.284] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.284] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.284] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.285] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ChronologicalResume.dotx", dwFileAttributes=0x80) returned 0 [0185.285] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ChronologicalResume.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\chronologicalresume.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.285] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.285] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.285] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.285] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.285] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ClassicPhotoAlbum.potx", dwFileAttributes=0x80) returned 0 [0185.286] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ClassicPhotoAlbum.potx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\classicphotoalbum.potx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.286] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.286] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.286] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.286] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.286] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ContemporaryPhotoAlbum.potx", dwFileAttributes=0x80) returned 0 [0185.286] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ContemporaryPhotoAlbum.potx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\contemporaryphotoalbum.potx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.287] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.287] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.287] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.287] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.287] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialLetter.dotx", dwFileAttributes=0x80) returned 0 [0185.288] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialLetter.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\essentialletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.288] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.288] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.288] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.288] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.288] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialReport.dotx", dwFileAttributes=0x80) returned 0 [0185.289] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialReport.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\essentialreport.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.289] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.289] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.289] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.289] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.289] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialResume.dotx", dwFileAttributes=0x80) returned 0 [0185.290] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialResume.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\essentialresume.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.290] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.290] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.290] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.290] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.290] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ExpenseReport.xltx", dwFileAttributes=0x80) returned 0 [0185.291] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ExpenseReport.xltx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\expensereport.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.291] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.291] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.291] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.291] SetLastError (dwErrCode=0x0) [0185.291] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.291] GetLastError () returned 0x5 [0185.291] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0185.292] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.292] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\GettingStarted16\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4da0 [0185.295] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.295] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.295] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0185.295] FindClose (in: hFindFile=0x665abb4da0 | out: hFindFile=0x665abb4da0) returned 1 [0185.295] SetLastError (dwErrCode=0x0) [0185.295] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\GettingStarted16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\gettingstarted16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.295] GetLastError () returned 0x5 [0185.295] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0185.295] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.295] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.295] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.296] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\LoanAmortization.xltx", dwFileAttributes=0x80) returned 0 [0185.297] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\LoanAmortization.xltx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\loanamortization.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.297] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.297] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.297] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.297] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.297] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\MAIL.OFT", dwFileAttributes=0x80) returned 0 [0185.297] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\MAIL.OFT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\mail.oft"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.298] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.298] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.298] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.298] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.298] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Office Word 2003 Look.dotx", dwFileAttributes=0x80) returned 0 [0185.298] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Office Word 2003 Look.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\office word 2003 look.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.298] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.299] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.299] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.299] SetLastError (dwErrCode=0x0) [0185.299] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.299] GetLastError () returned 0x5 [0185.299] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0185.299] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.299] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4440 [0185.299] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.299] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.299] SetLastError (dwErrCode=0x0) [0185.299] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.299] GetLastError () returned 0x5 [0185.299] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0185.299] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.300] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb42c0 [0185.300] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.300] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.300] SetLastError (dwErrCode=0x0) [0185.300] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.300] GetLastError () returned 0x5 [0185.300] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.300] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.300] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Notebook Templates\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4c20 [0185.300] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.300] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0185.300] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0185.300] SetLastError (dwErrCode=0x0) [0185.300] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Notebook Templates\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\notebook templates\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.301] GetLastError () returned 0x5 [0185.301] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.301] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.301] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.301] SetLastError (dwErrCode=0x0) [0185.301] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.301] GetLastError () returned 0x5 [0185.301] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.301] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.301] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb49e0 [0185.301] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.301] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.301] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.301] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\ACADEMIC.ONE", dwFileAttributes=0x80) returned 0 [0185.302] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\ACADEMIC.ONE" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\stationery\\academic.one"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.302] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.302] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.302] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.302] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.302] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\BLANK.ONE", dwFileAttributes=0x80) returned 0 [0185.302] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\BLANK.ONE" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\stationery\\blank.one"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.303] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.303] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.303] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.303] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\BUSINESS.ONE", dwFileAttributes=0x80) returned 0 [0185.303] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\BUSINESS.ONE" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\stationery\\business.one"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.303] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.303] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.304] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.304] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.304] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\DESIGNER.ONE", dwFileAttributes=0x80) returned 0 [0185.304] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\DESIGNER.ONE" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\stationery\\designer.one"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.304] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.304] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.304] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.304] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.305] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\PLANNERS.ONE", dwFileAttributes=0x80) returned 0 [0185.308] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\PLANNERS.ONE" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\stationery\\planners.one"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.308] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.308] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.308] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0185.308] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0185.308] SetLastError (dwErrCode=0x0) [0185.308] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\stationery\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.308] GetLastError () returned 0x5 [0185.308] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.308] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.308] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0185.308] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0185.308] SetLastError (dwErrCode=0x0) [0185.309] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.309] GetLastError () returned 0x5 [0185.309] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0185.309] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.309] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0185.309] FindClose (in: hFindFile=0x665abb4440 | out: hFindFile=0x665abb4440) returned 1 [0185.309] SetLastError (dwErrCode=0x0) [0185.309] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.309] GetLastError () returned 0x5 [0185.309] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0185.309] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.309] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.309] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.309] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginLetter.Dotx", dwFileAttributes=0x80) returned 0 [0185.310] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\originletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.310] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.310] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.311] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.311] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.311] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginReport.Dotx", dwFileAttributes=0x80) returned 0 [0185.311] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginReport.Dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\originreport.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.311] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.311] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.312] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.312] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.312] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginResume.Dotx", dwFileAttributes=0x80) returned 0 [0185.312] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginResume.Dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\originresume.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.312] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.312] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.312] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.312] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.313] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\PersonalMonthlyBudget.xltx", dwFileAttributes=0x80) returned 0 [0185.313] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\PersonalMonthlyBudget.xltx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\personalmonthlybudget.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.313] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.313] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.313] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.313] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.314] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Pitchbook.potx", dwFileAttributes=0x80) returned 0 [0185.314] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Pitchbook.potx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\pitchbook.potx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.314] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.314] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.315] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.315] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.315] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\PROJPLAN.XLTX", dwFileAttributes=0x80) returned 0 [0185.315] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\PROJPLAN.XLTX" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\projplan.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.315] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.315] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.315] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.315] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.316] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\QuizShow.potx", dwFileAttributes=0x80) returned 0 [0185.316] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\QuizShow.potx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\quizshow.potx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.317] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.317] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.317] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.317] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.317] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\RedAndBlackLetter.dotx", dwFileAttributes=0x80) returned 0 [0185.317] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\RedAndBlackLetter.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\redandblackletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.317] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.317] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.318] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.318] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.318] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\RedAndBlackReport.dotx", dwFileAttributes=0x80) returned 0 [0185.318] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\RedAndBlackReport.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\redandblackreport.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.318] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.318] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.318] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.319] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.319] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\SalesReport.xltx", dwFileAttributes=0x80) returned 0 [0185.319] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\SalesReport.xltx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\salesreport.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.319] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.319] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.319] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.319] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.320] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\StudentReport.dotx", dwFileAttributes=0x80) returned 0 [0185.320] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\StudentReport.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\studentreport.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.320] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.320] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.320] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.320] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.320] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TASKLIST.XLTX", dwFileAttributes=0x80) returned 0 [0185.321] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TASKLIST.XLTX" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\tasklist.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.321] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.321] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.321] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.321] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.321] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimeCard.xltx", dwFileAttributes=0x80) returned 0 [0185.322] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimeCard.xltx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\timecard.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.322] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.322] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.322] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.322] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessLetter.dotx", dwFileAttributes=0x80) returned 0 [0185.323] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessLetter.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\timelessletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.323] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.323] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.323] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.323] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessReport.dotx", dwFileAttributes=0x80) returned 0 [0185.324] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessReport.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\timelessreport.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.324] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.324] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.324] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.324] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.324] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessResume.dotx", dwFileAttributes=0x80) returned 0 [0185.325] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessResume.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\timelessresume.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.325] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.325] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.325] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.325] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.325] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.325] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\WidescreenPresentation.potx", dwFileAttributes=0x80) returned 0 [0185.326] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\WidescreenPresentation.potx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\widescreenpresentation.potx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.326] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.326] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.326] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.326] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.327] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Word 2010 look.dotx", dwFileAttributes=0x80) returned 0 [0185.327] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Word 2010 look.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\word 2010 look.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.327] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.327] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.327] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0185.327] FindClose (in: hFindFile=0x665abb5580 | out: hFindFile=0x665abb5580) returned 1 [0185.327] SetLastError (dwErrCode=0x0) [0185.327] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.327] GetLastError () returned 0x5 [0185.327] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0185.327] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.328] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.328] SetLastError (dwErrCode=0x0) [0185.328] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.328] GetLastError () returned 0x5 [0185.328] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0185.328] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.328] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\Presentation Designs\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4c20 [0185.329] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.329] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.329] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.330] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\Presentation Designs\\Maple.gif", dwFileAttributes=0x80) returned 0 [0185.330] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\Presentation Designs\\Maple.gif" (normalized: "c:\\program files\\microsoft office\\root\\templates\\presentation designs\\maple.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.330] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.330] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.330] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0185.330] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0185.330] SetLastError (dwErrCode=0x0) [0185.330] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\Presentation Designs\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\presentation designs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.330] GetLastError () returned 0x5 [0185.331] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0185.331] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.331] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0185.331] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0185.331] SetLastError (dwErrCode=0x0) [0185.331] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.331] GetLastError () returned 0x5 [0185.331] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0185.331] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.331] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0185.331] SetLastError (dwErrCode=0x0) [0185.331] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.331] GetLastError () returned 0x5 [0185.331] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0185.331] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.331] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb56a0 [0185.332] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.332] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.332] SetLastError (dwErrCode=0x0) [0185.332] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.332] GetLastError () returned 0x5 [0185.332] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0185.332] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.332] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb42c0 [0185.334] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.334] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.334] SetLastError (dwErrCode=0x0) [0185.334] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.334] GetLastError () returned 0x5 [0185.334] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0185.334] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.334] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4920 [0185.335] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.335] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.335] SetLastError (dwErrCode=0x0) [0185.335] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.335] GetLastError () returned 0x5 [0185.335] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0185.335] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.335] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb5760 [0185.336] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.336] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.336] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.337] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\AssetLibrary.ico", dwFileAttributes=0x80) returned 0 [0185.337] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\AssetLibrary.ico" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft\\office\\assetlibrary.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.338] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.338] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.338] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.338] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.338] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\DocumentRepository.ico", dwFileAttributes=0x80) returned 0 [0185.339] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\DocumentRepository.ico" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft\\office\\documentrepository.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.339] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.339] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.339] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.339] SetLastError (dwErrCode=0x0) [0185.339] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft\\office\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.339] GetLastError () returned 0x5 [0185.339] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.339] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.339] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\Heartbeat\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb49e0 [0185.340] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.340] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0185.340] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0185.340] SetLastError (dwErrCode=0x0) [0185.340] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\Heartbeat\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft\\office\\heartbeat\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.340] GetLastError () returned 0x5 [0185.340] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.340] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.340] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.340] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.340] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\MySharePoints.ico", dwFileAttributes=0x80) returned 0 [0185.341] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\MySharePoints.ico" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft\\office\\mysharepoints.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.341] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.341] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.341] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.341] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.342] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\MySite.ico", dwFileAttributes=0x80) returned 0 [0185.342] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\MySite.ico" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft\\office\\mysite.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.342] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.343] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.343] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.343] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.343] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\SharePointPortalSite.ico", dwFileAttributes=0x80) returned 0 [0185.346] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\SharePointPortalSite.ico" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft\\office\\sharepointportalsite.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.346] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.346] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.346] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.346] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.346] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\SharePointTeamSite.ico", dwFileAttributes=0x80) returned 0 [0185.347] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\SharePointTeamSite.ico" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft\\office\\sharepointteamsite.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.347] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.347] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.347] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0185.347] FindClose (in: hFindFile=0x665abb5760 | out: hFindFile=0x665abb5760) returned 1 [0185.347] SetLastError (dwErrCode=0x0) [0185.347] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft\\office\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.348] GetLastError () returned 0x5 [0185.348] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0185.348] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.348] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.348] SetLastError (dwErrCode=0x0) [0185.348] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.348] GetLastError () returned 0x5 [0185.348] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0185.348] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.348] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\VISIO\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4f20 [0185.349] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.349] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0185.349] FindClose (in: hFindFile=0x665abb4f20 | out: hFindFile=0x665abb4f20) returned 1 [0185.349] SetLastError (dwErrCode=0x0) [0185.349] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\VISIO\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft\\visio\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.350] GetLastError () returned 0x5 [0185.350] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0185.350] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.350] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0185.350] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0185.350] SetLastError (dwErrCode=0x0) [0185.350] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.350] GetLastError () returned 0x5 [0185.350] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0185.350] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.350] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.350] SetLastError (dwErrCode=0x0) [0185.350] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.350] GetLastError () returned 0x5 [0185.350] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0185.350] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.350] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb49e0 [0185.352] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.353] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.353] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.353] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.DATABASECOMPARE.16.1033.hxn", dwFileAttributes=0x80) returned 0 [0185.354] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.DATABASECOMPARE.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.databasecompare.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.354] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.354] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.354] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.354] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.354] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.EXCEL.16.1033.hxn", dwFileAttributes=0x80) returned 0 [0185.355] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.EXCEL.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.excel.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.355] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.355] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.355] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.355] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.356] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.GRAPH.16.1033.hxn", dwFileAttributes=0x80) returned 0 [0185.356] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.GRAPH.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.graph.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.356] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.356] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.356] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.356] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.357] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.GROOVE.16.1033.hxn", dwFileAttributes=0x80) returned 0 [0185.357] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.GROOVE.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.groove.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.357] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.357] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.358] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.358] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.358] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.LYNC.16.1033.hxn", dwFileAttributes=0x80) returned 0 [0185.359] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.LYNC.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.lync.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.359] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.359] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.359] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.359] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.360] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.LYNC_BASIC.16.1033.hxn", dwFileAttributes=0x80) returned 0 [0185.360] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.LYNC_BASIC.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.lync_basic.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.361] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.361] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.361] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.361] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.361] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.LYNC_ONLINE.16.1033.hxn", dwFileAttributes=0x80) returned 0 [0185.362] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.LYNC_ONLINE.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.lync_online.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.362] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.362] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.362] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.362] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.362] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.MSACCESS.16.1033.hxn", dwFileAttributes=0x80) returned 0 [0185.363] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.MSACCESS.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.msaccess.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.363] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.363] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.364] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.364] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.364] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.MSOUC.16.1033.hxn", dwFileAttributes=0x80) returned 0 [0185.364] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.MSOUC.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.msouc.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.364] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.364] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.364] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.364] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.365] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.MSPUB.16.1033.hxn", dwFileAttributes=0x80) returned 0 [0185.368] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.MSPUB.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.mspub.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.368] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.368] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.368] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.368] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.369] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.ONENOTE.16.1033.hxn", dwFileAttributes=0x80) returned 0 [0185.369] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.ONENOTE.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.onenote.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.370] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.370] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.370] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.370] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.370] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.OUTLOOK.16.1033.hxn", dwFileAttributes=0x80) returned 0 [0185.370] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.OUTLOOK.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.outlook.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.370] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.371] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.371] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.371] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.371] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.POWERPNT.16.1033.hxn", dwFileAttributes=0x80) returned 0 [0185.371] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.POWERPNT.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.powerpnt.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.371] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.371] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.372] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.372] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.372] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.SETLANG.16.1033.hxn", dwFileAttributes=0x80) returned 0 [0185.372] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.SETLANG.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.setlang.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.372] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.372] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.373] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.373] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.373] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.SKYPEFB.16.1033.hxn", dwFileAttributes=0x80) returned 0 [0185.373] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.SKYPEFB.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.skypefb.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.373] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.373] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.373] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.373] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.374] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.SKYPEFB_BASIC.16.1033.hxn", dwFileAttributes=0x80) returned 0 [0185.374] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.SKYPEFB_BASIC.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.skypefb_basic.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.374] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.374] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.374] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.374] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.375] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.SKYPEFB_ONLINE.16.1033.hxn", dwFileAttributes=0x80) returned 0 [0185.375] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.SKYPEFB_ONLINE.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.skypefb_online.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.375] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.375] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.376] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.376] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.376] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.SKYPEFB_ONLINEG.16.1033.hxn", dwFileAttributes=0x80) returned 0 [0185.376] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.SKYPEFB_ONLINEG.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.skypefb_onlineg.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.376] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.376] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.376] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.376] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.377] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.SPREADSHEETCOMPARE.16.1033.hxn", dwFileAttributes=0x80) returned 0 [0185.377] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.SPREADSHEETCOMPARE.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.spreadsheetcompare.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.377] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.377] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.377] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.377] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.VISIO.16.1033.hxn", dwFileAttributes=0x80) returned 0 [0185.378] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.VISIO.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.visio.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.378] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.378] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.378] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.378] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.379] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.VISIO_PRM.16.1033.hxn", dwFileAttributes=0x80) returned 0 [0185.379] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.VISIO_PRM.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.visio_prm.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.379] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.379] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.379] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.379] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.380] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.VISIO_STD.16.1033.hxn", dwFileAttributes=0x80) returned 0 [0185.380] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.VISIO_STD.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.visio_std.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.380] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.381] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.381] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.381] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.381] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.WINPROJ.16.1033.hxn", dwFileAttributes=0x80) returned 0 [0185.382] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.WINPROJ.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.winproj.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.382] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.382] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.382] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.382] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.382] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.WINPROJ_STD.16.1033.hxn", dwFileAttributes=0x80) returned 0 [0185.383] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.WINPROJ_STD.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.winproj_std.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.383] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.383] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.383] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.383] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.383] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.WINWORD.16.1033.hxn", dwFileAttributes=0x80) returned 0 [0185.384] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.WINWORD.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.winword.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.384] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.384] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.384] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.384] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.385] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\nslist.hxl", dwFileAttributes=0x80) returned 0 [0185.385] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\nslist.hxl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\nslist.hxl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.385] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.386] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.386] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0185.386] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0185.386] SetLastError (dwErrCode=0x0) [0185.386] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.389] GetLastError () returned 0x5 [0185.389] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0185.389] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.389] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0185.389] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0185.389] SetLastError (dwErrCode=0x0) [0185.389] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.390] GetLastError () returned 0x5 [0185.390] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0185.390] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.390] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.390] SetLastError (dwErrCode=0x0) [0185.390] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.390] GetLastError () returned 0x5 [0185.390] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0185.390] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.390] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common Programs\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4da0 [0185.391] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.392] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.392] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.392] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.392] SetLastError (dwErrCode=0x0) [0185.392] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common Programs\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common programs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.392] GetLastError () returned 0x5 [0185.392] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0185.392] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.392] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common Programs\\Microsoft Office 2016 Tools\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb42c0 [0185.393] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.393] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0185.393] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0185.393] SetLastError (dwErrCode=0x0) [0185.393] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common Programs\\Microsoft Office 2016 Tools\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common programs\\microsoft office 2016 tools\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.393] GetLastError () returned 0x5 [0185.393] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0185.393] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.393] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.393] SetLastError (dwErrCode=0x0) [0185.393] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common Programs\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common programs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.394] GetLastError () returned 0x5 [0185.394] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0185.394] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.394] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common Programs\\Microsoft Office Tools\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4c20 [0185.395] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.395] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.395] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.395] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.395] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.395] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.395] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.395] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.395] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.396] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0185.396] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0185.396] SetLastError (dwErrCode=0x0) [0185.396] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common Programs\\Microsoft Office Tools\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common programs\\microsoft office tools\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.399] GetLastError () returned 0x5 [0185.399] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0185.399] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.399] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.399] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.399] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.399] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.399] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.399] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.399] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.399] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.399] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.399] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0185.399] FindClose (in: hFindFile=0x665abb4da0 | out: hFindFile=0x665abb4da0) returned 1 [0185.399] SetLastError (dwErrCode=0x0) [0185.399] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common Programs\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common programs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.399] GetLastError () returned 0x5 [0185.399] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0185.399] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.399] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.399] SetLastError (dwErrCode=0x0) [0185.399] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.400] GetLastError () returned 0x5 [0185.400] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0185.400] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.400] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb5760 [0185.400] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.400] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.400] SetLastError (dwErrCode=0x0) [0185.400] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.400] GetLastError () returned 0x5 [0185.400] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0185.400] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.400] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb53a0 [0185.402] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.402] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.402] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.403] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\AGENCYB.TTF", dwFileAttributes=0x80) returned 0 [0185.403] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\AGENCYB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\agencyb.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.403] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.403] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.403] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.403] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.404] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\AGENCYR.TTF", dwFileAttributes=0x80) returned 0 [0185.404] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\AGENCYR.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\agencyr.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.404] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.404] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.404] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.404] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.405] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ALGER.TTF", dwFileAttributes=0x80) returned 0 [0185.405] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ALGER.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\alger.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.405] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.405] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.406] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.406] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ANTQUAB.TTF", dwFileAttributes=0x80) returned 0 [0185.406] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ANTQUAB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\antquab.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.407] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.407] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.407] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.407] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.407] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ANTQUABI.TTF", dwFileAttributes=0x80) returned 0 [0185.407] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ANTQUABI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\antquabi.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.407] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.407] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.408] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.408] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.408] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ANTQUAI.TTF", dwFileAttributes=0x80) returned 0 [0185.410] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ANTQUAI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\antquai.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.410] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.410] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.410] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.410] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.410] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ARIALN.TTF", dwFileAttributes=0x80) returned 0 [0185.410] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ARIALN.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\arialn.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.411] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.411] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.411] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.411] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.411] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ARIALNB.TTF", dwFileAttributes=0x80) returned 0 [0185.413] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ARIALNB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\arialnb.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.413] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.413] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.413] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.413] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.413] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ARIALNBI.TTF", dwFileAttributes=0x80) returned 0 [0185.413] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ARIALNBI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\arialnbi.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.414] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.414] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.414] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.414] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.414] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ARIALNI.TTF", dwFileAttributes=0x80) returned 0 [0185.414] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ARIALNI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\arialni.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.414] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.414] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.415] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.415] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.415] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ARLRDBD.TTF", dwFileAttributes=0x80) returned 0 [0185.416] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ARLRDBD.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\arlrdbd.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.416] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.416] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.416] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.416] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.416] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BASKVILL.TTF", dwFileAttributes=0x80) returned 0 [0185.417] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BASKVILL.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\baskvill.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.417] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.417] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.417] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.417] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.417] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BAUHS93.TTF", dwFileAttributes=0x80) returned 0 [0185.417] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BAUHS93.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\bauhs93.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.418] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.418] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.418] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.418] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.418] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BELL.TTF", dwFileAttributes=0x80) returned 0 [0185.419] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BELL.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\bell.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.419] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.419] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.419] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.419] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.420] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BELLB.TTF", dwFileAttributes=0x80) returned 0 [0185.420] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BELLB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\bellb.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.420] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.420] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.420] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.421] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.421] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BELLI.TTF", dwFileAttributes=0x80) returned 0 [0185.421] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BELLI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\belli.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.421] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.421] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.422] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.422] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.422] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BERNHC.TTF", dwFileAttributes=0x80) returned 0 [0185.422] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BERNHC.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\bernhc.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.422] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.422] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.423] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.423] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.423] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BKANT.TTF", dwFileAttributes=0x80) returned 0 [0185.423] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BKANT.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\bkant.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.423] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.423] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.423] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.423] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.424] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOD_B.TTF", dwFileAttributes=0x80) returned 0 [0185.424] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOD_B.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\bod_b.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.425] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.425] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.425] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.425] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.425] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOD_BI.TTF", dwFileAttributes=0x80) returned 0 [0185.425] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOD_BI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\bod_bi.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.425] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.425] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.426] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.426] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.426] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOD_BLAI.TTF", dwFileAttributes=0x80) returned 0 [0185.426] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOD_BLAI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\bod_blai.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.426] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.426] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.427] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.427] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.427] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOD_BLAR.TTF", dwFileAttributes=0x80) returned 0 [0185.427] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOD_BLAR.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\bod_blar.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.428] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.428] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.428] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.428] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.428] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOD_CB.TTF", dwFileAttributes=0x80) returned 0 [0185.429] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOD_CB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\bod_cb.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.429] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.429] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.430] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.430] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.430] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOD_CBI.TTF", dwFileAttributes=0x80) returned 0 [0185.430] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOD_CBI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\bod_cbi.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.431] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.431] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.431] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.431] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.431] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOD_CI.TTF", dwFileAttributes=0x80) returned 0 [0185.432] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOD_CI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\bod_ci.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.432] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.432] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.432] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.432] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOD_CR.TTF", dwFileAttributes=0x80) returned 0 [0185.433] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOD_CR.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\bod_cr.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.433] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.433] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.433] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.433] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.434] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOD_I.TTF", dwFileAttributes=0x80) returned 0 [0185.434] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOD_I.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\bod_i.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.435] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.435] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.435] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.435] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.435] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOD_PSTC.TTF", dwFileAttributes=0x80) returned 0 [0185.435] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOD_PSTC.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\bod_pstc.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.435] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.435] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.436] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.436] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.436] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOD_R.TTF", dwFileAttributes=0x80) returned 0 [0185.436] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOD_R.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\bod_r.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.436] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.436] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.437] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.437] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.437] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOOKOS.TTF", dwFileAttributes=0x80) returned 0 [0185.437] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOOKOS.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\bookos.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.437] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.438] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.438] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.438] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.438] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOOKOSB.TTF", dwFileAttributes=0x80) returned 0 [0185.439] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOOKOSB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\bookosb.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.439] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.439] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.439] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.439] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.439] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOOKOSBI.TTF", dwFileAttributes=0x80) returned 0 [0185.440] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOOKOSBI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\bookosbi.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.440] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.440] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.440] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.440] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.440] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOOKOSI.TTF", dwFileAttributes=0x80) returned 0 [0185.441] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOOKOSI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\bookosi.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.441] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.441] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.441] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.441] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.442] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BRADHITC.TTF", dwFileAttributes=0x80) returned 0 [0185.442] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BRADHITC.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\bradhitc.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.442] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.442] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.442] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.442] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.443] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BRITANIC.TTF", dwFileAttributes=0x80) returned 0 [0185.443] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BRITANIC.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\britanic.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.443] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.443] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.443] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.443] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.443] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BRLNSB.TTF", dwFileAttributes=0x80) returned 0 [0185.444] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BRLNSB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\brlnsb.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.444] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.444] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.444] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.444] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.445] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BRLNSDB.TTF", dwFileAttributes=0x80) returned 0 [0185.445] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BRLNSDB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\brlnsdb.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.445] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.445] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.445] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.445] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.445] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BRLNSR.TTF", dwFileAttributes=0x80) returned 0 [0185.446] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BRLNSR.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\brlnsr.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.446] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.446] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.447] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.447] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BROADW.TTF", dwFileAttributes=0x80) returned 0 [0185.447] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BROADW.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\broadw.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.448] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.448] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.448] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.448] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.448] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BRUSHSCI.TTF", dwFileAttributes=0x80) returned 0 [0185.448] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BRUSHSCI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\brushsci.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.448] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.449] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.449] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.449] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BSSYM7.TTF", dwFileAttributes=0x80) returned 0 [0185.449] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BSSYM7.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\bssym7.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.449] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.449] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.450] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.450] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.450] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CalibriL.ttf", dwFileAttributes=0x80) returned 0 [0185.450] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CalibriL.ttf" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\calibril.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.450] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.450] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.450] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.450] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.451] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CalibriLI.ttf", dwFileAttributes=0x80) returned 0 [0185.451] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CalibriLI.ttf" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\calibrili.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.452] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.452] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.452] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.452] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.452] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CALIFB.TTF", dwFileAttributes=0x80) returned 0 [0185.452] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CALIFB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\califb.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.452] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.452] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.453] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.453] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.453] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CALIFI.TTF", dwFileAttributes=0x80) returned 0 [0185.453] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CALIFI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\califi.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.453] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.454] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.454] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.454] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.454] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CALIFR.TTF", dwFileAttributes=0x80) returned 0 [0185.454] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CALIFR.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\califr.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.454] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.454] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.455] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.455] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.455] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CALIST.TTF", dwFileAttributes=0x80) returned 0 [0185.455] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CALIST.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\calist.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.455] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.455] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.455] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.455] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.456] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CALISTB.TTF", dwFileAttributes=0x80) returned 0 [0185.457] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CALISTB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\calistb.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.457] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.457] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.457] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.457] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.457] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CALISTBI.TTF", dwFileAttributes=0x80) returned 0 [0185.458] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CALISTBI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\calistbi.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.458] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.458] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.458] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.458] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.458] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CALISTI.TTF", dwFileAttributes=0x80) returned 0 [0185.458] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CALISTI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\calisti.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.459] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.459] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.459] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.459] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.459] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CASTELAR.TTF", dwFileAttributes=0x80) returned 0 [0185.459] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CASTELAR.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\castelar.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.459] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.459] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.460] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.460] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.460] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CENSCBK.TTF", dwFileAttributes=0x80) returned 0 [0185.462] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CENSCBK.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\censcbk.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.462] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.462] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.462] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.462] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.462] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CENTAUR.TTF", dwFileAttributes=0x80) returned 0 [0185.462] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CENTAUR.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\centaur.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.463] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.463] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.463] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.463] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.463] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CENTURY.TTF", dwFileAttributes=0x80) returned 0 [0185.463] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CENTURY.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\century.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.464] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.464] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.464] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.464] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.464] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CHILLER.TTF", dwFileAttributes=0x80) returned 0 [0185.464] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CHILLER.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\chiller.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.464] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.464] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.465] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.465] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.465] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\COLONNA.TTF", dwFileAttributes=0x80) returned 0 [0185.465] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\COLONNA.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\colonna.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.465] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.465] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.465] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.465] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.466] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\COOPBL.TTF", dwFileAttributes=0x80) returned 0 [0185.467] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\COOPBL.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\coopbl.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.467] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.467] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.467] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.468] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.468] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\COPRGTB.TTF", dwFileAttributes=0x80) returned 0 [0185.468] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\COPRGTB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\coprgtb.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.468] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.468] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.469] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.469] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.469] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\COPRGTL.TTF", dwFileAttributes=0x80) returned 0 [0185.469] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\COPRGTL.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\coprgtl.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.469] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.469] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.469] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.469] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.470] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CURLZ___.TTF", dwFileAttributes=0x80) returned 0 [0185.470] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CURLZ___.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\curlz___.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.470] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.470] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.470] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.470] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.471] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\DUBAI-BOLD.TTF", dwFileAttributes=0x80) returned 0 [0185.471] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\DUBAI-BOLD.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\dubai-bold.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.472] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.472] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.472] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.472] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.472] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\DUBAI-LIGHT.TTF", dwFileAttributes=0x80) returned 0 [0185.473] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\DUBAI-LIGHT.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\dubai-light.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.474] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.474] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.474] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.474] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.474] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\DUBAI-MEDIUM.TTF", dwFileAttributes=0x80) returned 0 [0185.474] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\DUBAI-MEDIUM.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\dubai-medium.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.474] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.474] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.475] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.475] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.475] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\DUBAI-REGULAR.TTF", dwFileAttributes=0x80) returned 0 [0185.477] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\DUBAI-REGULAR.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\dubai-regular.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.478] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.478] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.478] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.478] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.478] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ELEPHNT.TTF", dwFileAttributes=0x80) returned 0 [0185.478] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ELEPHNT.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\elephnt.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.478] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.478] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.479] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.479] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.479] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ELEPHNTI.TTF", dwFileAttributes=0x80) returned 0 [0185.480] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ELEPHNTI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\elephnti.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.480] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.480] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.480] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.481] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ENGR.TTF", dwFileAttributes=0x80) returned 0 [0185.481] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ENGR.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\engr.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.481] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.482] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.482] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.482] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ERASBD.TTF", dwFileAttributes=0x80) returned 0 [0185.482] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ERASBD.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\erasbd.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.482] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.482] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.483] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.483] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.483] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ERASDEMI.TTF", dwFileAttributes=0x80) returned 0 [0185.483] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ERASDEMI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\erasdemi.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.483] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.483] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.483] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.483] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.484] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ERASLGHT.TTF", dwFileAttributes=0x80) returned 0 [0185.484] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ERASLGHT.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\eraslght.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.484] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.484] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.484] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.485] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.485] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ERASMD.TTF", dwFileAttributes=0x80) returned 0 [0185.486] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ERASMD.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\erasmd.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.486] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.486] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.486] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.486] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.486] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FELIXTI.TTF", dwFileAttributes=0x80) returned 0 [0185.487] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FELIXTI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\felixti.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.487] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.487] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.487] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.487] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.487] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FORTE.TTF", dwFileAttributes=0x80) returned 0 [0185.488] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FORTE.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\forte.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.488] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.488] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.488] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.488] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.488] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FRABK.TTF", dwFileAttributes=0x80) returned 0 [0185.488] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FRABK.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\frabk.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.489] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.489] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.489] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.489] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.489] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FRABKIT.TTF", dwFileAttributes=0x80) returned 0 [0185.489] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FRABKIT.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\frabkit.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.489] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.490] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.490] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.490] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FRADM.TTF", dwFileAttributes=0x80) returned 0 [0185.490] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FRADM.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\fradm.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.490] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.490] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.491] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.491] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.491] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FRADMCN.TTF", dwFileAttributes=0x80) returned 0 [0185.491] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FRADMCN.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\fradmcn.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.491] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.491] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.491] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.491] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.492] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FRADMIT.TTF", dwFileAttributes=0x80) returned 0 [0185.492] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FRADMIT.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\fradmit.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.492] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.492] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.492] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.492] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.492] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FRAHV.TTF", dwFileAttributes=0x80) returned 0 [0185.493] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FRAHV.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\frahv.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.493] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.493] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.493] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.493] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.493] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FRAHVIT.TTF", dwFileAttributes=0x80) returned 0 [0185.493] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FRAHVIT.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\frahvit.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.494] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.494] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.494] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.494] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.494] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FRAMDCN.TTF", dwFileAttributes=0x80) returned 0 [0185.494] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FRAMDCN.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\framdcn.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.494] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.495] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.495] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.495] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.495] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FREESCPT.TTF", dwFileAttributes=0x80) returned 0 [0185.495] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FREESCPT.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\freescpt.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.495] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.495] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.496] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.496] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.496] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FRSCRIPT.TTF", dwFileAttributes=0x80) returned 0 [0185.496] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FRSCRIPT.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\frscript.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.496] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.496] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.496] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.496] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FTLTLT.TTF", dwFileAttributes=0x80) returned 0 [0185.497] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FTLTLT.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\ftltlt.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.497] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.497] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.497] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.497] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GABRIOLA.TTF", dwFileAttributes=0x80) returned 0 [0185.498] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GABRIOLA.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\gabriola.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.498] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.498] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.498] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.498] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GADUGI.TTF", dwFileAttributes=0x80) returned 0 [0185.499] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GADUGI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\gadugi.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.499] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.499] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.499] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.499] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GADUGIB.TTF", dwFileAttributes=0x80) returned 0 [0185.504] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GADUGIB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\gadugib.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.504] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.505] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.505] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.505] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GARA.TTF", dwFileAttributes=0x80) returned 0 [0185.505] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GARA.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\gara.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.505] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.505] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.506] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.506] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.506] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GARABD.TTF", dwFileAttributes=0x80) returned 0 [0185.506] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GARABD.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\garabd.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.506] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.506] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.507] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.507] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GARAIT.TTF", dwFileAttributes=0x80) returned 0 [0185.507] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GARAIT.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\garait.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.507] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.507] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.507] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.507] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.508] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GIGI.TTF", dwFileAttributes=0x80) returned 0 [0185.508] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GIGI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\gigi.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.508] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.508] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.508] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.508] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.508] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GILBI___.TTF", dwFileAttributes=0x80) returned 0 [0185.509] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GILBI___.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\gilbi___.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.509] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.509] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.509] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.509] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GILB____.TTF", dwFileAttributes=0x80) returned 0 [0185.509] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GILB____.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\gilb____.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.510] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.510] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.510] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.510] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GILC____.TTF", dwFileAttributes=0x80) returned 0 [0185.511] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GILC____.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\gilc____.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.512] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.512] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.512] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.512] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GILI____.TTF", dwFileAttributes=0x80) returned 0 [0185.512] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GILI____.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\gili____.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.513] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.513] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.513] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.513] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.513] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GILLUBCD.TTF", dwFileAttributes=0x80) returned 0 [0185.513] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GILLUBCD.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\gillubcd.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.513] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.513] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.514] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.514] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GILSANUB.TTF", dwFileAttributes=0x80) returned 0 [0185.514] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GILSANUB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\gilsanub.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.514] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.514] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.514] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.514] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.515] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GIL_____.TTF", dwFileAttributes=0x80) returned 0 [0185.515] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GIL_____.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\gil_____.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.515] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.515] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.516] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.516] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.516] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GLECB.TTF", dwFileAttributes=0x80) returned 0 [0185.517] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GLECB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\glecb.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.517] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.517] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.517] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.517] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.517] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GLSNECB.TTF", dwFileAttributes=0x80) returned 0 [0185.518] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GLSNECB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\glsnecb.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.518] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.518] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.518] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.519] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GOTHIC.TTF", dwFileAttributes=0x80) returned 0 [0185.520] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GOTHIC.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\gothic.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.520] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.520] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.520] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.520] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GOTHICB.TTF", dwFileAttributes=0x80) returned 0 [0185.521] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GOTHICB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\gothicb.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.521] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.521] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.521] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.521] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GOTHICBI.TTF", dwFileAttributes=0x80) returned 0 [0185.522] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GOTHICBI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\gothicbi.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.522] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.522] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.522] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.522] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GOTHICI.TTF", dwFileAttributes=0x80) returned 0 [0185.523] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GOTHICI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\gothici.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.523] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.523] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.523] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.523] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GOUDOS.TTF", dwFileAttributes=0x80) returned 0 [0185.524] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GOUDOS.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\goudos.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.524] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.524] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.524] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.524] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.524] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GOUDOSB.TTF", dwFileAttributes=0x80) returned 0 [0185.524] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GOUDOSB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\goudosb.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.525] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.525] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.525] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.525] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.525] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GOUDOSI.TTF", dwFileAttributes=0x80) returned 0 [0185.526] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GOUDOSI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\goudosi.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.526] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.526] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.526] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.526] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GOUDYSTO.TTF", dwFileAttributes=0x80) returned 0 [0185.527] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GOUDYSTO.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\goudysto.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.527] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.527] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.527] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.527] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\HARLOWSI.TTF", dwFileAttributes=0x80) returned 0 [0185.527] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\HARLOWSI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\harlowsi.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.528] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.528] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.528] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.528] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\HARNGTON.TTF", dwFileAttributes=0x80) returned 0 [0185.529] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\HARNGTON.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\harngton.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.529] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.529] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.529] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.529] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\HATTEN.TTF", dwFileAttributes=0x80) returned 0 [0185.530] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\HATTEN.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\hatten.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.530] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.530] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.530] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.530] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\HTOWERT.TTF", dwFileAttributes=0x80) returned 0 [0185.531] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\HTOWERT.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\htowert.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.531] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.531] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.531] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.531] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.532] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\HTOWERTI.TTF", dwFileAttributes=0x80) returned 0 [0185.532] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\HTOWERTI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\htowerti.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.532] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.532] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.532] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.532] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\IMPRISHA.TTF", dwFileAttributes=0x80) returned 0 [0185.533] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\IMPRISHA.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\imprisha.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.533] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.533] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.534] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.534] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.534] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\INFROMAN.TTF", dwFileAttributes=0x80) returned 0 [0185.534] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\INFROMAN.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\infroman.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.534] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.534] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.535] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.535] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ITCBLKAD.TTF", dwFileAttributes=0x80) returned 0 [0185.536] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ITCBLKAD.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\itcblkad.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.536] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.536] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.536] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.536] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.537] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ITCEDSCR.TTF", dwFileAttributes=0x80) returned 0 [0185.537] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ITCEDSCR.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\itcedscr.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.537] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.537] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.537] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.537] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.537] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ITCKRIST.TTF", dwFileAttributes=0x80) returned 0 [0185.538] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ITCKRIST.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\itckrist.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.538] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.538] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.538] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.538] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.538] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\JOKERMAN.TTF", dwFileAttributes=0x80) returned 0 [0185.538] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\JOKERMAN.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\jokerman.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.539] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.539] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.539] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.539] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.539] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\JUICE___.TTF", dwFileAttributes=0x80) returned 0 [0185.541] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\JUICE___.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\juice___.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.541] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.541] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.541] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.541] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.542] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\KUNSTLER.TTF", dwFileAttributes=0x80) returned 0 [0185.542] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\KUNSTLER.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\kunstler.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.542] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.542] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.542] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.542] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.542] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LATINWD.TTF", dwFileAttributes=0x80) returned 0 [0185.543] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LATINWD.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\latinwd.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.543] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.543] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.543] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.543] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.543] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LBRITE.TTF", dwFileAttributes=0x80) returned 0 [0185.543] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LBRITE.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\lbrite.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.544] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.544] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.544] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.544] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.544] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LBRITED.TTF", dwFileAttributes=0x80) returned 0 [0185.546] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LBRITED.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\lbrited.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.546] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.546] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.546] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.546] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LBRITEDI.TTF", dwFileAttributes=0x80) returned 0 [0185.547] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LBRITEDI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\lbritedi.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.547] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.547] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.547] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.547] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LBRITEI.TTF", dwFileAttributes=0x80) returned 0 [0185.548] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LBRITEI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\lbritei.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.548] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.548] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.548] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.548] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LCALLIG.TTF", dwFileAttributes=0x80) returned 0 [0185.549] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LCALLIG.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\lcallig.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.549] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.549] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.549] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.549] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LEELAWAD.TTF", dwFileAttributes=0x80) returned 0 [0185.550] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LEELAWAD.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\leelawad.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.550] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.550] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.550] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.550] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LEELAWDB.TTF", dwFileAttributes=0x80) returned 0 [0185.550] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LEELAWDB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\leelawdb.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.551] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.551] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.551] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.551] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.551] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LFAX.TTF", dwFileAttributes=0x80) returned 0 [0185.551] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LFAX.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\lfax.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.551] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.552] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.552] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.552] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LFAXD.TTF", dwFileAttributes=0x80) returned 0 [0185.552] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LFAXD.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\lfaxd.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.552] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.552] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.553] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.553] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.553] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LFAXDI.TTF", dwFileAttributes=0x80) returned 0 [0185.554] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LFAXDI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\lfaxdi.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.554] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.554] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.554] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.554] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LFAXI.TTF", dwFileAttributes=0x80) returned 0 [0185.555] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LFAXI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\lfaxi.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.555] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.555] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.556] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.556] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LHANDW.TTF", dwFileAttributes=0x80) returned 0 [0185.556] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LHANDW.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\lhandw.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.556] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.556] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.556] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.557] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.558] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LSANS.TTF", dwFileAttributes=0x80) returned 0 [0185.558] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LSANS.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\lsans.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.558] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.558] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.558] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.558] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.558] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LSANSD.TTF", dwFileAttributes=0x80) returned 0 [0185.559] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LSANSD.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\lsansd.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.559] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.559] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.559] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.559] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LSANSDI.TTF", dwFileAttributes=0x80) returned 0 [0185.560] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LSANSDI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\lsansdi.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.560] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.560] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.560] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.560] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LSANSI.TTF", dwFileAttributes=0x80) returned 0 [0185.561] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LSANSI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\lsansi.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.561] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.561] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.561] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.561] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LTYPE.TTF", dwFileAttributes=0x80) returned 0 [0185.562] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LTYPE.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\ltype.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.562] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.562] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.562] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.562] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LTYPEB.TTF", dwFileAttributes=0x80) returned 0 [0185.563] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LTYPEB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\ltypeb.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.563] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.563] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.564] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.564] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.564] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LTYPEBO.TTF", dwFileAttributes=0x80) returned 0 [0185.564] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LTYPEBO.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\ltypebo.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.564] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.564] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.565] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.565] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.565] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LTYPEO.TTF", dwFileAttributes=0x80) returned 0 [0185.565] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LTYPEO.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\ltypeo.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.565] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.565] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.565] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.565] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.566] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MAGNETOB.TTF", dwFileAttributes=0x80) returned 0 [0185.566] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MAGNETOB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\magnetob.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.566] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.566] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.566] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.566] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.567] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MAIAN.TTF", dwFileAttributes=0x80) returned 0 [0185.567] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MAIAN.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\maian.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.567] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.567] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.567] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.567] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.567] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MATURASC.TTF", dwFileAttributes=0x80) returned 0 [0185.568] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MATURASC.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\maturasc.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.568] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.568] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.568] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.568] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.568] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MISTRAL.TTF", dwFileAttributes=0x80) returned 0 [0185.568] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MISTRAL.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\mistral.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.569] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.569] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.569] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.569] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.569] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MOD20.TTF", dwFileAttributes=0x80) returned 0 [0185.569] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MOD20.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\mod20.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.570] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.570] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.570] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.570] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.570] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MSJH.TTC", dwFileAttributes=0x80) returned 0 [0185.571] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MSJH.TTC" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\msjh.ttc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.571] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.571] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.571] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.571] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MSJHBD.TTC", dwFileAttributes=0x80) returned 0 [0185.572] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MSJHBD.TTC" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\msjhbd.ttc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.572] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.572] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.572] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.572] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.572] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MSUIGHUB.TTF", dwFileAttributes=0x80) returned 0 [0185.573] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MSUIGHUB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\msuighub.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.573] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.573] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.573] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.573] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MSUIGHUR.TTF", dwFileAttributes=0x80) returned 0 [0185.574] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MSUIGHUR.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\msuighur.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.574] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.574] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.574] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.574] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MSYH.TTC", dwFileAttributes=0x80) returned 0 [0185.575] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MSYH.TTC" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\msyh.ttc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.575] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.575] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.575] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.575] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MSYHBD.TTC", dwFileAttributes=0x80) returned 0 [0185.576] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MSYHBD.TTC" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\msyhbd.ttc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.576] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.576] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.576] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.576] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.576] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MTCORSVA.TTF", dwFileAttributes=0x80) returned 0 [0185.577] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MTCORSVA.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\mtcorsva.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.577] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.577] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.577] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.577] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MTEXTRA.TTF", dwFileAttributes=0x80) returned 0 [0185.582] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MTEXTRA.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\mtextra.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.582] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.582] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.582] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.583] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\NIAGENG.TTF", dwFileAttributes=0x80) returned 0 [0185.583] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\NIAGENG.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\niageng.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.584] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.584] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.584] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.584] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\NIAGSOL.TTF", dwFileAttributes=0x80) returned 0 [0185.585] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\NIAGSOL.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\niagsol.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.585] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.585] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.585] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.585] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.586] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\NIRMALA.TTF", dwFileAttributes=0x80) returned 0 [0185.586] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\NIRMALA.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\nirmala.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.586] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.586] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.586] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.586] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.586] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\NIRMALAB.TTF", dwFileAttributes=0x80) returned 0 [0185.587] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\NIRMALAB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\nirmalab.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.587] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.587] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.587] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.587] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\OCRAEXT.TTF", dwFileAttributes=0x80) returned 0 [0185.588] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\OCRAEXT.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\ocraext.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.588] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.588] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.588] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.588] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\OLDENGL.TTF", dwFileAttributes=0x80) returned 0 [0185.589] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\OLDENGL.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\oldengl.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.589] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.589] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.589] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.589] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ONYX.TTF", dwFileAttributes=0x80) returned 0 [0185.590] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ONYX.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\onyx.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.590] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.590] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.590] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.590] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\OUTLOOK.TTF", dwFileAttributes=0x80) returned 0 [0185.591] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\OUTLOOK.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\outlook.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.591] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.591] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.592] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.592] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\PALSCRI.TTF", dwFileAttributes=0x80) returned 0 [0185.592] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\PALSCRI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\palscri.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.592] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.592] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.592] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.593] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\PAPYRUS.TTF", dwFileAttributes=0x80) returned 0 [0185.593] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\PAPYRUS.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\papyrus.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.593] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.593] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.594] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.594] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.594] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\PARCHM.TTF", dwFileAttributes=0x80) returned 0 [0185.594] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\PARCHM.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\parchm.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.594] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.594] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.594] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.594] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.595] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\PERBI___.TTF", dwFileAttributes=0x80) returned 0 [0185.595] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\PERBI___.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\perbi___.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.596] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.596] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.596] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.596] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\PERB____.TTF", dwFileAttributes=0x80) returned 0 [0185.596] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\PERB____.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\perb____.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.596] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.596] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.597] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.597] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.597] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\PERI____.TTF", dwFileAttributes=0x80) returned 0 [0185.598] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\PERI____.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\peri____.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.598] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.598] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.598] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.598] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.598] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\PERTIBD.TTF", dwFileAttributes=0x80) returned 0 [0185.598] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\PERTIBD.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\pertibd.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.599] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.599] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.599] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.599] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.599] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\PERTILI.TTF", dwFileAttributes=0x80) returned 0 [0185.599] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\PERTILI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\pertili.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.599] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.599] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.600] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.600] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.600] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\PER_____.TTF", dwFileAttributes=0x80) returned 0 [0185.600] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\PER_____.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\per_____.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.600] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.600] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.601] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.601] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.601] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\PLAYBILL.TTF", dwFileAttributes=0x80) returned 0 [0185.601] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\PLAYBILL.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\playbill.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.601] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.601] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.601] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.601] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.602] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\POORICH.TTF", dwFileAttributes=0x80) returned 0 [0185.602] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\POORICH.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\poorich.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.602] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.602] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.602] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.602] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.602] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\PRISTINA.TTF", dwFileAttributes=0x80) returned 0 [0185.603] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\PRISTINA.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\pristina.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.603] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.603] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.604] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.604] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.604] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\RAGE.TTF", dwFileAttributes=0x80) returned 0 [0185.604] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\RAGE.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\rage.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.604] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.604] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.604] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.604] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.605] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\RAVIE.TTF", dwFileAttributes=0x80) returned 0 [0185.605] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\RAVIE.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\ravie.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.605] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.605] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.605] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.605] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.605] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\REFSAN.TTF", dwFileAttributes=0x80) returned 0 [0185.606] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\REFSAN.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\refsan.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.606] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.606] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.606] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.606] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.606] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\REFSPCL.TTF", dwFileAttributes=0x80) returned 0 [0185.606] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\REFSPCL.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\refspcl.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.607] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.607] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.607] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.607] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ROCCB___.TTF", dwFileAttributes=0x80) returned 0 [0185.608] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ROCCB___.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\roccb___.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.608] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.608] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.608] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.608] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.608] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ROCC____.TTF", dwFileAttributes=0x80) returned 0 [0185.609] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ROCC____.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\rocc____.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.609] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.609] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.609] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.609] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ROCK.TTF", dwFileAttributes=0x80) returned 0 [0185.610] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ROCK.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\rock.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.610] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.610] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.610] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.610] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ROCKB.TTF", dwFileAttributes=0x80) returned 0 [0185.611] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ROCKB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\rockb.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.611] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.611] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.611] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.611] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.611] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ROCKBI.TTF", dwFileAttributes=0x80) returned 0 [0185.611] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ROCKBI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\rockbi.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.612] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.612] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.612] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.612] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ROCKEB.TTF", dwFileAttributes=0x80) returned 0 [0185.613] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ROCKEB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\rockeb.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.613] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.613] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.613] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.613] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.613] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ROCKI.TTF", dwFileAttributes=0x80) returned 0 [0185.614] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ROCKI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\rocki.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.614] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.614] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.614] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.614] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.614] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\SCHLBKB.TTF", dwFileAttributes=0x80) returned 0 [0185.615] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\SCHLBKB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\schlbkb.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.615] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.615] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.615] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.615] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.615] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\SCHLBKBI.TTF", dwFileAttributes=0x80) returned 0 [0185.615] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\SCHLBKBI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\schlbkbi.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.616] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.616] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.616] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.616] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\SCHLBKI.TTF", dwFileAttributes=0x80) returned 0 [0185.616] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\SCHLBKI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\schlbki.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.616] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.616] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.617] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.617] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.617] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\SCRIPTBL.TTF", dwFileAttributes=0x80) returned 0 [0185.618] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\SCRIPTBL.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\scriptbl.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.618] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.618] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.618] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.618] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.618] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\SEGOEUISL.TTF", dwFileAttributes=0x80) returned 0 [0185.618] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\SEGOEUISL.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\segoeuisl.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.619] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.619] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.619] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.619] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\SHOWG.TTF", dwFileAttributes=0x80) returned 0 [0185.619] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\SHOWG.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\showg.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.620] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.620] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.620] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.620] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\SNAP____.TTF", dwFileAttributes=0x80) returned 0 [0185.620] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\SNAP____.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\snap____.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.620] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.620] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.621] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.621] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.621] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\STENCIL.TTF", dwFileAttributes=0x80) returned 0 [0185.621] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\STENCIL.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\stencil.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.621] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.621] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.622] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.622] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\TCBI____.TTF", dwFileAttributes=0x80) returned 0 [0185.622] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\TCBI____.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\tcbi____.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.622] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.622] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.622] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.622] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.623] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\TCB_____.TTF", dwFileAttributes=0x80) returned 0 [0185.623] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\TCB_____.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\tcb_____.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.623] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.623] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.623] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.623] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\TCCB____.TTF", dwFileAttributes=0x80) returned 0 [0185.624] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\TCCB____.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\tccb____.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.624] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.624] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.624] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.624] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\TCCEB.TTF", dwFileAttributes=0x80) returned 0 [0185.626] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\TCCEB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\tcceb.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.626] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.626] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.626] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.626] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.626] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\TCCM____.TTF", dwFileAttributes=0x80) returned 0 [0185.626] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\TCCM____.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\tccm____.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.627] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.627] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.627] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.627] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\TCMI____.TTF", dwFileAttributes=0x80) returned 0 [0185.627] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\TCMI____.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\tcmi____.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.628] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.628] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.628] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.628] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\TCM_____.TTF", dwFileAttributes=0x80) returned 0 [0185.628] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\TCM_____.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\tcm_____.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.628] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.628] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.629] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.629] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\TEMPSITC.TTF", dwFileAttributes=0x80) returned 0 [0185.629] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\TEMPSITC.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\tempsitc.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.629] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.629] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.629] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.629] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.630] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\VINERITC.TTF", dwFileAttributes=0x80) returned 0 [0185.630] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\VINERITC.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\vineritc.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.630] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.630] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.630] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.630] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.631] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\VIVALDII.TTF", dwFileAttributes=0x80) returned 0 [0185.631] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\VIVALDII.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\vivaldii.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.631] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.631] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.631] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.631] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.631] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\VLADIMIR.TTF", dwFileAttributes=0x80) returned 0 [0185.632] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\VLADIMIR.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\vladimir.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.632] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.632] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.632] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.632] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\WINGDNG2.TTF", dwFileAttributes=0x80) returned 0 [0185.632] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\WINGDNG2.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\wingdng2.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.633] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.633] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.633] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.633] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\WINGDNG3.TTF", dwFileAttributes=0x80) returned 0 [0185.633] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\WINGDNG3.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\wingdng3.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.634] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.634] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.634] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0185.634] FindClose (in: hFindFile=0x665abb53a0 | out: hFindFile=0x665abb53a0) returned 1 [0185.635] SetLastError (dwErrCode=0x0) [0185.635] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.637] GetLastError () returned 0x5 [0185.637] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0185.637] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.637] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0185.637] FindClose (in: hFindFile=0x665abb5760 | out: hFindFile=0x665abb5760) returned 1 [0185.638] SetLastError (dwErrCode=0x0) [0185.638] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.638] GetLastError () returned 0x5 [0185.638] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0185.638] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.638] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0185.638] SetLastError (dwErrCode=0x0) [0185.638] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.638] GetLastError () returned 0x5 [0185.638] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0185.638] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.638] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4c20 [0185.638] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.638] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.638] SetLastError (dwErrCode=0x0) [0185.638] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.639] GetLastError () returned 0x5 [0185.639] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0185.639] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.639] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\DESIGNER\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4920 [0185.640] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.640] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.640] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\DESIGNER\\MSADDNDR.OLB", dwFileAttributes=0x80) returned 0 [0185.644] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\DESIGNER\\MSADDNDR.OLB" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\designer\\msaddndr.olb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.644] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.644] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.644] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0185.644] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0185.644] SetLastError (dwErrCode=0x0) [0185.644] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\DESIGNER\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\designer\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.645] GetLastError () returned 0x5 [0185.645] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0185.645] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.645] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0185.645] SetLastError (dwErrCode=0x0) [0185.645] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.645] GetLastError () returned 0x5 [0185.645] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0185.645] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.645] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb5460 [0185.645] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.645] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.645] SetLastError (dwErrCode=0x0) [0185.645] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.646] GetLastError () returned 0x5 [0185.646] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0185.646] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.646] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\DW\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4560 [0185.649] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.649] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.649] SetLastError (dwErrCode=0x0) [0185.649] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\DW\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\dw\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.649] GetLastError () returned 0x5 [0185.649] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.649] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.649] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\DW\\1033\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4da0 [0185.650] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.650] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0185.650] FindClose (in: hFindFile=0x665abb4da0 | out: hFindFile=0x665abb4da0) returned 1 [0185.650] SetLastError (dwErrCode=0x0) [0185.650] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\DW\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\dw\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.650] GetLastError () returned 0x5 [0185.650] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.650] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.650] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.650] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.650] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.650] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0185.650] FindClose (in: hFindFile=0x665abb4560 | out: hFindFile=0x665abb4560) returned 1 [0185.650] SetLastError (dwErrCode=0x0) [0185.650] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\DW\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\dw\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.650] GetLastError () returned 0x5 [0185.650] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0185.650] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.651] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.651] SetLastError (dwErrCode=0x0) [0185.651] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.651] GetLastError () returned 0x5 [0185.651] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0185.651] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.651] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\EQUATION\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4560 [0185.652] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.653] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.653] SetLastError (dwErrCode=0x0) [0185.653] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\EQUATION\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\equation\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.653] GetLastError () returned 0x5 [0185.653] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.653] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.654] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\EQUATION\\1033\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb43e0 [0185.654] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.654] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.654] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0185.654] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0185.654] SetLastError (dwErrCode=0x0) [0185.654] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\EQUATION\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\equation\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.655] GetLastError () returned 0x5 [0185.655] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.655] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.655] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.655] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.655] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.655] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.655] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.655] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.655] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.655] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.655] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.655] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.655] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.655] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.655] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.655] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.655] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.655] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.655] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.655] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.655] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.655] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.655] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.655] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.655] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.655] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.655] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.655] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.655] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.655] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.655] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.655] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.655] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.655] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.655] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.655] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0185.655] FindClose (in: hFindFile=0x665abb4560 | out: hFindFile=0x665abb4560) returned 1 [0185.655] SetLastError (dwErrCode=0x0) [0185.655] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\EQUATION\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\equation\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.656] GetLastError () returned 0x5 [0185.656] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0185.656] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.656] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.656] SetLastError (dwErrCode=0x0) [0185.656] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.656] GetLastError () returned 0x5 [0185.656] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0185.656] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.656] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\EURO\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb43e0 [0185.656] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.656] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.656] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0185.656] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0185.656] SetLastError (dwErrCode=0x0) [0185.657] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\EURO\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\euro\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.657] GetLastError () returned 0x5 [0185.657] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0185.657] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.657] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.657] SetLastError (dwErrCode=0x0) [0185.657] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.657] GetLastError () returned 0x5 [0185.657] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0185.657] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.657] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Filters\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4560 [0185.657] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.657] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.657] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.657] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.657] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.657] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0185.657] FindClose (in: hFindFile=0x665abb4560 | out: hFindFile=0x665abb4560) returned 1 [0185.658] SetLastError (dwErrCode=0x0) [0185.658] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Filters\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\filters\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.658] GetLastError () returned 0x5 [0185.658] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0185.658] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.658] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.658] SetLastError (dwErrCode=0x0) [0185.658] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.658] GetLastError () returned 0x5 [0185.658] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0185.658] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.658] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb5040 [0185.660] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.660] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.660] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.660] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", dwFileAttributes=0x80) returned 0 [0185.660] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\grphflt\\epsimp32.flt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.661] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.661] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.661] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.661] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", dwFileAttributes=0x80) returned 0 [0185.661] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\grphflt\\gifimp32.flt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.661] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.661] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.662] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.662] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", dwFileAttributes=0x80) returned 0 [0185.662] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\grphflt\\jpegim32.flt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.662] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.662] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.663] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.663] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.663] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\MS.EPS", dwFileAttributes=0x80) returned 0 [0185.663] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\MS.EPS" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\grphflt\\ms.eps"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.663] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.663] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.663] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.663] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\MS.GIF", dwFileAttributes=0x80) returned 0 [0185.664] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\MS.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\grphflt\\ms.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.665] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.665] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.665] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.665] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.665] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\MS.JPG", dwFileAttributes=0x80) returned 0 [0185.665] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\MS.JPG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\grphflt\\ms.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.665] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.665] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.666] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.666] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\MS.PNG", dwFileAttributes=0x80) returned 0 [0185.666] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\MS.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\grphflt\\ms.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.666] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.666] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.666] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.666] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\MS.WPG", dwFileAttributes=0x80) returned 0 [0185.667] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\MS.WPG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\grphflt\\ms.wpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.667] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.667] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.667] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.667] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", dwFileAttributes=0x80) returned 0 [0185.668] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\grphflt\\pictim32.flt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.668] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.668] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.668] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.668] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", dwFileAttributes=0x80) returned 0 [0185.669] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\PNG32.FLT" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\grphflt\\png32.flt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.669] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.669] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.669] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.669] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.669] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", dwFileAttributes=0x80) returned 0 [0185.670] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\grphflt\\wpgimp32.flt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.670] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.670] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.670] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0185.670] FindClose (in: hFindFile=0x665abb5040 | out: hFindFile=0x665abb5040) returned 1 [0185.671] SetLastError (dwErrCode=0x0) [0185.671] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\grphflt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.674] GetLastError () returned 0x5 [0185.674] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0185.674] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.674] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.674] SetLastError (dwErrCode=0x0) [0185.674] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.674] GetLastError () returned 0x5 [0185.674] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0185.674] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.674] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Help\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb5040 [0185.676] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.676] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.676] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.676] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Help\\Hx.HxC", dwFileAttributes=0x80) returned 0 [0185.676] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Help\\Hx.HxC" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\help\\hx.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.676] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.676] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.677] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.677] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Help\\Hx.HxT", dwFileAttributes=0x80) returned 0 [0185.678] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Help\\Hx.HxT" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\help\\hx.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.678] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.678] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.678] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.678] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.678] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Help\\HxRuntime.HxS", dwFileAttributes=0x80) returned 0 [0185.678] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Help\\HxRuntime.HxS" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\help\\hxruntime.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.679] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.679] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.679] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.679] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.679] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Help\\Keywords.HxK", dwFileAttributes=0x80) returned 0 [0185.680] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Help\\Keywords.HxK" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\help\\keywords.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.680] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.680] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.680] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.680] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.680] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Help\\NamedUrls.HxK", dwFileAttributes=0x80) returned 0 [0185.681] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Help\\NamedUrls.HxK" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\help\\namedurls.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.681] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.681] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.681] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0185.681] FindClose (in: hFindFile=0x665abb5040 | out: hFindFile=0x665abb5040) returned 1 [0185.682] SetLastError (dwErrCode=0x0) [0185.682] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Help\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\help\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.684] GetLastError () returned 0x5 [0185.685] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0185.685] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.685] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.685] SetLastError (dwErrCode=0x0) [0185.685] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.685] GetLastError () returned 0x5 [0185.685] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0185.685] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.685] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\MSClientDataMgr\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb55e0 [0185.686] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.686] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.686] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0185.686] FindClose (in: hFindFile=0x665abb55e0 | out: hFindFile=0x665abb55e0) returned 1 [0185.686] SetLastError (dwErrCode=0x0) [0185.686] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\MSClientDataMgr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\msclientdatamgr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.686] GetLastError () returned 0x5 [0185.686] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0185.686] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.686] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.686] SetLastError (dwErrCode=0x0) [0185.686] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.686] GetLastError () returned 0x5 [0185.686] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0185.686] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.686] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb5760 [0185.687] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.688] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.688] SetLastError (dwErrCode=0x0) [0185.688] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.688] GetLastError () returned 0x5 [0185.688] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.689] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.689] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\1033\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4f20 [0185.690] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.690] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.690] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.690] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.690] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.690] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\1033\\ADO210.CHM", dwFileAttributes=0x80) returned 0 [0185.690] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\1033\\ADO210.CHM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\1033\\ado210.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.691] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.691] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.691] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.691] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.691] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.691] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.691] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.691] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.691] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\1033\\osmdp32.msi", dwFileAttributes=0x80) returned 0 [0185.691] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\1033\\osmdp32.msi" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\1033\\osmdp32.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.692] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.692] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.692] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.692] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\1033\\osmdp64.msi", dwFileAttributes=0x80) returned 0 [0185.693] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\1033\\osmdp64.msi" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\1033\\osmdp64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.693] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.693] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.693] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.693] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.693] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\1033\\osmia32.msi", dwFileAttributes=0x80) returned 0 [0185.694] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\1033\\osmia32.msi" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\1033\\osmia32.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.694] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.694] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.694] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.694] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\1033\\osmia64.msi", dwFileAttributes=0x80) returned 0 [0185.695] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\1033\\osmia64.msi" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\1033\\osmia64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.695] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.695] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.695] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.695] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\1033\\README.HTM", dwFileAttributes=0x80) returned 0 [0185.695] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\1033\\README.HTM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\1033\\readme.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.696] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.696] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.696] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.696] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0185.696] FindClose (in: hFindFile=0x665abb4f20 | out: hFindFile=0x665abb4f20) returned 1 [0185.696] SetLastError (dwErrCode=0x0) [0185.696] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.699] GetLastError () returned 0x5 [0185.699] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.699] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.699] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.699] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.699] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.699] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.699] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.699] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.699] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.699] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.699] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.699] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.699] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.699] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.699] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.699] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.699] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.699] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.699] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.699] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.700] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.700] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.700] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\AirSpace.Etw.man", dwFileAttributes=0x80) returned 0 [0185.701] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\AirSpace.Etw.man" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\airspace.etw.man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.701] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.701] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.702] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.702] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.702] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.702] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.702] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.702] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.702] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.702] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.702] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.702] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.702] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.702] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.702] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.702] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.702] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.702] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.702] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.702] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.702] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.703] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.703] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.709] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.710] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.710] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.710] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.710] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.710] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.710] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.710] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.710] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.710] SetLastError (dwErrCode=0x0) [0185.710] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.710] GetLastError () returned 0x5 [0185.710] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.710] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.710] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Cultures\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4f80 [0185.710] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.710] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.710] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Cultures\\OFFICE.ODF", dwFileAttributes=0x80) returned 0 [0185.711] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Cultures\\OFFICE.ODF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\cultures\\office.odf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.711] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.711] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.711] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0185.711] FindClose (in: hFindFile=0x665abb4f80 | out: hFindFile=0x665abb4f80) returned 1 [0185.711] SetLastError (dwErrCode=0x0) [0185.711] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Cultures\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\cultures\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.712] GetLastError () returned 0x5 [0185.712] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.712] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.712] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.712] SetLastError (dwErrCode=0x0) [0185.712] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.712] GetLastError () returned 0x5 [0185.712] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.712] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.712] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4c80 [0185.714] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.714] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.714] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.714] SetLastError (dwErrCode=0x0) [0185.714] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\datamodel\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.715] GetLastError () returned 0x5 [0185.715] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0) returned 0 [0185.715] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.715] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665abb49e0 [0185.716] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0185.716] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0185.716] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.717] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\as80.xsl", dwFileAttributes=0x80) returned 0 [0185.717] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\as80.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\datamodel\\cartridges\\as80.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.718] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.718] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.718] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0185.718] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\as90.xsl", dwFileAttributes=0x80) returned 0 [0185.719] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\as90.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\datamodel\\cartridges\\as90.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.719] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.719] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.719] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0185.719] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.720] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\db2v0801.xsl", dwFileAttributes=0x80) returned 0 [0185.720] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\db2v0801.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\datamodel\\cartridges\\db2v0801.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.721] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.721] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.721] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0185.721] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\informix.xsl", dwFileAttributes=0x80) returned 0 [0185.721] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\informix.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\datamodel\\cartridges\\informix.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.722] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.722] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.722] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0185.722] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.722] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\msjet.xsl", dwFileAttributes=0x80) returned 0 [0185.722] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\msjet.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\datamodel\\cartridges\\msjet.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.722] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.722] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.723] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0185.723] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\orcl7.xsl", dwFileAttributes=0x80) returned 0 [0185.723] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\orcl7.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\datamodel\\cartridges\\orcl7.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.723] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.723] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.724] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0185.724] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.724] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\sql2000.xsl", dwFileAttributes=0x80) returned 0 [0185.724] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\sql2000.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\datamodel\\cartridges\\sql2000.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.724] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.724] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.724] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0185.724] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\sql70.xsl", dwFileAttributes=0x80) returned 0 [0185.725] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\sql70.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\datamodel\\cartridges\\sql70.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.725] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.725] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.725] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0185.725] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\sql90.xsl", dwFileAttributes=0x80) returned 0 [0185.726] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\sql90.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\datamodel\\cartridges\\sql90.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.726] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.726] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.726] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0185.726] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\sqlpdw.xsl", dwFileAttributes=0x80) returned 0 [0185.727] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\sqlpdw.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\datamodel\\cartridges\\sqlpdw.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.727] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.727] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.728] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0185.728] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\sybase.xsl", dwFileAttributes=0x80) returned 0 [0185.728] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\sybase.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\datamodel\\cartridges\\sybase.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.728] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.728] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.729] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0185.729] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\trdtv2r41.xsl", dwFileAttributes=0x80) returned 0 [0185.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\trdtv2r41.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\datamodel\\cartridges\\trdtv2r41.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.729] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.729] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.729] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0185.729] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0185.730] SetLastError (dwErrCode=0x0) [0185.730] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\datamodel\\cartridges\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.733] GetLastError () returned 0x5 [0185.733] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0) returned 0 [0185.733] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.733] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.733] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.733] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.733] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.733] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.733] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.733] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.733] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.733] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.733] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.733] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.733] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.733] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.733] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.733] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.733] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.733] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.733] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.733] SetLastError (dwErrCode=0x0) [0185.733] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\datamodel\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.734] GetLastError () returned 0x5 [0185.734] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0) returned 0 [0185.734] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.734] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Resources\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665abb4a40 [0185.734] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0185.734] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0185.734] SetLastError (dwErrCode=0x0) [0185.735] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\datamodel\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.735] GetLastError () returned 0x5 [0185.735] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0) returned 0 [0185.735] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.735] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Resources\\1033\\*.*", lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0x665abb42c0 [0185.735] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0185.735] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0185.735] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.736] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Resources\\1033\\msmdsrvi_xl.rll", dwFileAttributes=0x80) returned 0 [0185.737] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Resources\\1033\\msmdsrvi_xl.rll" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\datamodel\\resources\\1033\\msmdsrvi_xl.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.737] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.737] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.737] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0 [0185.737] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0185.737] SetLastError (dwErrCode=0x0) [0185.737] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Resources\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\datamodel\\resources\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.738] GetLastError () returned 0x5 [0185.738] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0) returned 0 [0185.738] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.738] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0185.738] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0185.738] SetLastError (dwErrCode=0x0) [0185.738] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\datamodel\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.738] GetLastError () returned 0x5 [0185.738] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0) returned 0 [0185.738] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.738] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.738] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.738] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.738] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.738] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.738] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.738] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.738] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.738] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0185.738] FindClose (in: hFindFile=0x665abb4c80 | out: hFindFile=0x665abb4c80) returned 1 [0185.738] SetLastError (dwErrCode=0x0) [0185.739] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\datamodel\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.739] GetLastError () returned 0x5 [0185.739] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.739] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.739] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.739] SetLastError (dwErrCode=0x0) [0185.739] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.739] GetLastError () returned 0x5 [0185.739] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.739] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.739] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\en-us\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb42c0 [0185.740] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.740] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.740] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0185.740] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0185.740] SetLastError (dwErrCode=0x0) [0185.740] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\en-us\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.740] GetLastError () returned 0x5 [0185.740] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.740] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.740] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.740] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.740] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.740] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.740] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.740] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\HeartbeatConfig.xml", dwFileAttributes=0x80) returned 0 [0185.741] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\HeartbeatConfig.xml" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\heartbeatconfig.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.741] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.741] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.741] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.741] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.742] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\InstallerMainShell.tlb", dwFileAttributes=0x80) returned 0 [0185.742] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\InstallerMainShell.tlb" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\installermainshell.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.742] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.742] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.742] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.742] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.742] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.742] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.743] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.743] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.743] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.743] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.743] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.743] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.743] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.743] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.743] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.743] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.743] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.743] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.743] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.743] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.743] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.743] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.743] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.743] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.743] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.743] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.743] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.743] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.743] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.743] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\MUAUTH.CAB", dwFileAttributes=0x80) returned 0 [0185.744] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\MUAUTH.CAB" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\muauth.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.744] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.744] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.744] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.744] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.744] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.745] SetLastError (dwErrCode=0x0) [0185.745] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.745] GetLastError () returned 0x5 [0185.745] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.745] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.745] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Office Setup Controller\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4920 [0185.745] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.746] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.746] SetLastError (dwErrCode=0x0) [0185.746] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Office Setup Controller\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\office setup controller\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.746] GetLastError () returned 0x5 [0185.746] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0) returned 0 [0185.746] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.746] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Office Setup Controller\\Office.en-us\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665abb4c80 [0185.747] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0185.747] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0185.747] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0185.747] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.747] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Office Setup Controller\\Office.en-us\\BRANDING.XML", dwFileAttributes=0x80) returned 0 [0185.748] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Office Setup Controller\\Office.en-us\\BRANDING.XML" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\office setup controller\\office.en-us\\branding.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.748] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.748] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.748] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0185.748] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", dwFileAttributes=0x80) returned 0 [0185.749] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Office Setup Controller\\Office.en-us\\PSS10O.CHM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\office setup controller\\office.en-us\\pss10o.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.749] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.750] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.750] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0185.750] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.750] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", dwFileAttributes=0x80) returned 0 [0185.750] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Office Setup Controller\\Office.en-us\\PSS10R.CHM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\office setup controller\\office.en-us\\pss10r.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.750] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.751] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.751] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0185.751] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Office Setup Controller\\Office.en-us\\SETUP.CHM", dwFileAttributes=0x80) returned 0 [0185.751] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Office Setup Controller\\Office.en-us\\SETUP.CHM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\office setup controller\\office.en-us\\setup.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.751] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.751] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.752] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0185.752] FindClose (in: hFindFile=0x665abb4c80 | out: hFindFile=0x665abb4c80) returned 1 [0185.752] SetLastError (dwErrCode=0x0) [0185.752] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Office Setup Controller\\Office.en-us\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\office setup controller\\office.en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.755] GetLastError () returned 0x5 [0185.755] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0) returned 0 [0185.755] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.755] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0185.755] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0185.755] SetLastError (dwErrCode=0x0) [0185.755] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Office Setup Controller\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\office setup controller\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.755] GetLastError () returned 0x5 [0185.755] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.756] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.756] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.756] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.756] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.756] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.756] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.756] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.756] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.756] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.756] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.756] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.756] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\OsfInstallerConfig.xml", dwFileAttributes=0x80) returned 0 [0185.756] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\OsfInstallerConfig.xml" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\osfinstallerconfig.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.756] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.756] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.757] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.757] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.757] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.757] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.757] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.757] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.757] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.757] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.757] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.757] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.757] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0185.757] FindClose (in: hFindFile=0x665abb5760 | out: hFindFile=0x665abb5760) returned 1 [0185.757] SetLastError (dwErrCode=0x0) [0185.757] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.757] GetLastError () returned 0x5 [0185.757] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0185.757] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.757] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.757] SetLastError (dwErrCode=0x0) [0185.757] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.757] GetLastError () returned 0x5 [0185.757] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0185.758] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.758] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\PROOF\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4f80 [0185.758] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.758] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.758] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.758] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", dwFileAttributes=0x80) returned 0 [0185.759] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\proof\\mswds_en.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.759] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.759] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.759] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.759] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", dwFileAttributes=0x80) returned 0 [0185.760] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\proof\\mswds_es.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.760] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.760] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.760] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.760] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.760] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", dwFileAttributes=0x80) returned 0 [0185.760] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\proof\\mswds_fr.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.761] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.761] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.761] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0185.761] FindClose (in: hFindFile=0x665abb4f80 | out: hFindFile=0x665abb4f80) returned 1 [0185.761] SetLastError (dwErrCode=0x0) [0185.761] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\PROOF\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\proof\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.761] GetLastError () returned 0x5 [0185.761] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0185.761] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.761] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.761] SetLastError (dwErrCode=0x0) [0185.761] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.761] GetLastError () returned 0x5 [0185.762] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0185.762] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.762] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb55e0 [0185.763] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.763] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.763] SetLastError (dwErrCode=0x0) [0185.763] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\smart tag\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.763] GetLastError () returned 0x5 [0185.763] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.763] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.763] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\1033\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb5160 [0185.764] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.764] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.764] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", dwFileAttributes=0x80) returned 0 [0185.767] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\smart tag\\1033\\mcabout.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.767] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.767] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.768] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.768] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0185.768] FindClose (in: hFindFile=0x665abb5160 | out: hFindFile=0x665abb5160) returned 1 [0185.768] SetLastError (dwErrCode=0x0) [0185.768] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\smart tag\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.768] GetLastError () returned 0x5 [0185.768] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.768] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.768] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.768] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.768] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.768] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.768] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.768] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.768] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.768] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.768] SetLastError (dwErrCode=0x0) [0185.768] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\smart tag\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.768] GetLastError () returned 0x5 [0185.768] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.768] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.768] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\LISTS\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4560 [0185.769] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.769] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.769] SetLastError (dwErrCode=0x0) [0185.769] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\LISTS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\smart tag\\lists\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.769] GetLastError () returned 0x5 [0185.769] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0) returned 0 [0185.769] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.769] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665abb4440 [0185.770] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0185.770] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0185.770] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", dwFileAttributes=0x80) returned 0 [0185.770] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\smart tag\\lists\\1033\\dates.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.770] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.770] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.771] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0185.771] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.771] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", dwFileAttributes=0x80) returned 0 [0185.771] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\smart tag\\lists\\1033\\phone.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.771] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.771] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.772] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0185.772] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.772] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", dwFileAttributes=0x80) returned 0 [0185.772] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\smart tag\\lists\\1033\\time.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.772] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.772] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.772] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0185.772] FindClose (in: hFindFile=0x665abb4440 | out: hFindFile=0x665abb4440) returned 1 [0185.773] SetLastError (dwErrCode=0x0) [0185.773] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\smart tag\\lists\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.773] GetLastError () returned 0x5 [0185.773] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0) returned 0 [0185.773] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.773] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.773] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", dwFileAttributes=0x80) returned 0 [0185.774] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\smart tag\\lists\\basmla.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.774] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.774] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.774] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0185.774] FindClose (in: hFindFile=0x665abb4560 | out: hFindFile=0x665abb4560) returned 1 [0185.774] SetLastError (dwErrCode=0x0) [0185.774] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\LISTS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\smart tag\\lists\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.775] GetLastError () returned 0x5 [0185.775] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.775] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.775] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.775] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.775] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.775] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\METCONV.TXT", dwFileAttributes=0x80) returned 0 [0185.775] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\METCONV.TXT" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\smart tag\\metconv.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.775] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.775] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.776] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.776] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.776] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", dwFileAttributes=0x80) returned 0 [0185.777] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\MSTAG.TLB" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\smart tag\\mstag.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.777] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.777] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.778] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.778] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0185.778] FindClose (in: hFindFile=0x665abb55e0 | out: hFindFile=0x665abb55e0) returned 1 [0185.778] SetLastError (dwErrCode=0x0) [0185.778] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\smart tag\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.778] GetLastError () returned 0x5 [0185.778] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0185.778] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.778] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.778] SetLastError (dwErrCode=0x0) [0185.778] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.778] GetLastError () returned 0x5 [0185.778] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0185.778] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.778] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Source Engine\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4920 [0185.779] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.779] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.779] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0185.779] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0185.779] SetLastError (dwErrCode=0x0) [0185.779] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Source Engine\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\source engine\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.780] GetLastError () returned 0x5 [0185.780] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0185.780] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.780] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.780] SetLastError (dwErrCode=0x0) [0185.780] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.780] GetLastError () returned 0x5 [0185.780] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0185.780] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.780] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TEXTCONV\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4440 [0185.780] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.780] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.780] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.780] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TEXTCONV\\RECOVR32.CNV", dwFileAttributes=0x80) returned 0 [0185.782] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TEXTCONV\\RECOVR32.CNV" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\textconv\\recovr32.cnv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.782] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.782] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.783] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.783] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TEXTCONV\\WPFT532.CNV", dwFileAttributes=0x80) returned 0 [0185.783] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TEXTCONV\\WPFT532.CNV" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\textconv\\wpft532.cnv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.783] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.783] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.783] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.783] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TEXTCONV\\WPFT632.CNV", dwFileAttributes=0x80) returned 0 [0185.784] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TEXTCONV\\WPFT632.CNV" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\textconv\\wpft632.cnv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.784] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.784] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.784] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0185.784] FindClose (in: hFindFile=0x665abb4440 | out: hFindFile=0x665abb4440) returned 1 [0185.784] SetLastError (dwErrCode=0x0) [0185.784] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TEXTCONV\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\textconv\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.785] GetLastError () returned 0x5 [0185.785] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0185.785] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.785] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0185.785] SetLastError (dwErrCode=0x0) [0185.785] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.785] GetLastError () returned 0x5 [0185.785] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0185.785] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.785] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4920 [0185.787] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.787] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.787] SetLastError (dwErrCode=0x0) [0185.787] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.788] GetLastError () returned 0x5 [0185.788] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.788] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.788] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AFTRNOON\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4f20 [0185.788] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.788] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.788] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.789] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AFTRNOON\\AFTRNOON.ELM", dwFileAttributes=0x80) returned 0 [0185.789] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AFTRNOON\\AFTRNOON.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\aftrnoon\\aftrnoon.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.790] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.790] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.790] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.790] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.790] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AFTRNOON\\AFTRNOON.INF", dwFileAttributes=0x80) returned 0 [0185.791] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AFTRNOON\\AFTRNOON.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\aftrnoon\\aftrnoon.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.791] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.791] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.791] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.791] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.792] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AFTRNOON\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0185.792] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AFTRNOON\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\aftrnoon\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.792] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.792] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.792] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.792] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AFTRNOON\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0185.793] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AFTRNOON\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\aftrnoon\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.793] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.793] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.793] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0185.793] FindClose (in: hFindFile=0x665abb4f20 | out: hFindFile=0x665abb4f20) returned 1 [0185.793] SetLastError (dwErrCode=0x0) [0185.793] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AFTRNOON\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\aftrnoon\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.794] GetLastError () returned 0x5 [0185.794] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.794] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.794] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.794] SetLastError (dwErrCode=0x0) [0185.794] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.794] GetLastError () returned 0x5 [0185.794] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.794] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.794] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ARCTIC\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb49e0 [0185.794] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.794] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.794] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ARCTIC\\ARCTIC.ELM", dwFileAttributes=0x80) returned 0 [0185.795] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ARCTIC\\ARCTIC.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\arctic\\arctic.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.795] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.795] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.795] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.795] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ARCTIC\\ARCTIC.INF", dwFileAttributes=0x80) returned 0 [0185.796] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ARCTIC\\ARCTIC.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\arctic\\arctic.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.796] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.796] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.796] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.796] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ARCTIC\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0185.797] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ARCTIC\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\arctic\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.797] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.797] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.797] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.797] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.797] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ARCTIC\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0185.798] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ARCTIC\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\arctic\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.798] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.798] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.799] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0185.799] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0185.799] SetLastError (dwErrCode=0x0) [0185.799] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ARCTIC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\arctic\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.799] GetLastError () returned 0x5 [0185.799] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.799] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.799] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.799] SetLastError (dwErrCode=0x0) [0185.799] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.799] GetLastError () returned 0x5 [0185.799] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.799] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.799] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AXIS\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb49e0 [0185.800] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.800] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.800] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.800] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AXIS\\AXIS.ELM", dwFileAttributes=0x80) returned 0 [0185.801] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AXIS\\AXIS.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\axis\\axis.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.801] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.801] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.802] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.802] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.802] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AXIS\\AXIS.INF", dwFileAttributes=0x80) returned 0 [0185.802] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AXIS\\AXIS.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\axis\\axis.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.802] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.802] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.802] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.802] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AXIS\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0185.803] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AXIS\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\axis\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.803] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.803] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.803] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.803] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.804] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AXIS\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0185.804] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AXIS\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\axis\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.804] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.804] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.804] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0185.804] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0185.804] SetLastError (dwErrCode=0x0) [0185.804] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AXIS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\axis\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.804] GetLastError () returned 0x5 [0185.805] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.805] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.805] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.805] SetLastError (dwErrCode=0x0) [0185.805] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.805] GetLastError () returned 0x5 [0185.805] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.805] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.805] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLENDS\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4da0 [0185.805] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.805] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.805] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLENDS\\BLENDS.ELM", dwFileAttributes=0x80) returned 0 [0185.806] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLENDS\\BLENDS.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\blends\\blends.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.806] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.806] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.807] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.807] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.807] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLENDS\\BLENDS.INF", dwFileAttributes=0x80) returned 0 [0185.807] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLENDS\\BLENDS.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\blends\\blends.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.807] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.807] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.807] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.807] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLENDS\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0185.808] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLENDS\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\blends\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.808] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.808] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.808] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.809] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.809] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLENDS\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0185.809] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLENDS\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\blends\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.809] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.809] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.810] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0185.810] FindClose (in: hFindFile=0x665abb4da0 | out: hFindFile=0x665abb4da0) returned 1 [0185.810] SetLastError (dwErrCode=0x0) [0185.810] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLENDS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\blends\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.810] GetLastError () returned 0x5 [0185.810] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.810] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.810] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.810] SetLastError (dwErrCode=0x0) [0185.810] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.810] GetLastError () returned 0x5 [0185.810] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.810] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.810] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUECALM\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4f80 [0185.811] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.811] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.811] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.811] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUECALM\\BLUECALM.ELM", dwFileAttributes=0x80) returned 0 [0185.811] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUECALM\\BLUECALM.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\bluecalm\\bluecalm.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.811] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.811] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.812] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.812] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.812] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUECALM\\BLUECALM.INF", dwFileAttributes=0x80) returned 0 [0185.813] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUECALM\\BLUECALM.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\bluecalm\\bluecalm.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.813] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.813] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.814] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.814] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUECALM\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0185.815] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUECALM\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\bluecalm\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.815] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.815] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.815] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.815] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUECALM\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0185.817] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUECALM\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\bluecalm\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.817] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.817] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.817] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0185.817] FindClose (in: hFindFile=0x665abb4f80 | out: hFindFile=0x665abb4f80) returned 1 [0185.817] SetLastError (dwErrCode=0x0) [0185.817] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUECALM\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\bluecalm\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.818] GetLastError () returned 0x5 [0185.818] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.818] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.818] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.818] SetLastError (dwErrCode=0x0) [0185.818] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.818] GetLastError () returned 0x5 [0185.818] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.818] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.818] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUEPRNT\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb42c0 [0185.819] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.819] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.819] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUEPRNT\\BLUEPRNT.ELM", dwFileAttributes=0x80) returned 0 [0185.820] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUEPRNT\\BLUEPRNT.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\blueprnt\\blueprnt.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.820] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.820] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.821] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.821] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUEPRNT\\BLUEPRNT.INF", dwFileAttributes=0x80) returned 0 [0185.821] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUEPRNT\\BLUEPRNT.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\blueprnt\\blueprnt.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.821] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.821] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.822] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.822] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.822] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUEPRNT\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0185.822] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUEPRNT\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\blueprnt\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.822] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.822] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.823] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.823] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.823] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUEPRNT\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0185.823] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUEPRNT\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\blueprnt\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.823] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.823] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.823] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0185.823] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0185.823] SetLastError (dwErrCode=0x0) [0185.824] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUEPRNT\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\blueprnt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.824] GetLastError () returned 0x5 [0185.824] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.824] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.824] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.824] SetLastError (dwErrCode=0x0) [0185.824] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.824] GetLastError () returned 0x5 [0185.824] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.824] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.824] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BOLDSTRI\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb49e0 [0185.824] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.824] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.824] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.825] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BOLDSTRI\\BOLDSTRI.ELM", dwFileAttributes=0x80) returned 0 [0185.825] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BOLDSTRI\\BOLDSTRI.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\boldstri\\boldstri.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.825] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.825] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.825] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.825] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.825] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BOLDSTRI\\BOLDSTRI.INF", dwFileAttributes=0x80) returned 0 [0185.826] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BOLDSTRI\\BOLDSTRI.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\boldstri\\boldstri.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.826] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.826] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.826] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.826] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BOLDSTRI\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0185.827] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BOLDSTRI\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\boldstri\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.827] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.827] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.827] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.827] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.827] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BOLDSTRI\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0185.828] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BOLDSTRI\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\boldstri\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.828] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.828] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.829] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0185.829] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0185.829] SetLastError (dwErrCode=0x0) [0185.829] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BOLDSTRI\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\boldstri\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.829] GetLastError () returned 0x5 [0185.829] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.829] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.829] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.829] SetLastError (dwErrCode=0x0) [0185.829] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.829] GetLastError () returned 0x5 [0185.829] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.829] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.829] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BREEZE\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb5760 [0185.830] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.830] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.830] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BREEZE\\BREEZE.ELM", dwFileAttributes=0x80) returned 0 [0185.830] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BREEZE\\BREEZE.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\breeze\\breeze.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.831] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.831] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.831] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.831] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BREEZE\\BREEZE.INF", dwFileAttributes=0x80) returned 0 [0185.831] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BREEZE\\BREEZE.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\breeze\\breeze.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.832] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.832] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.832] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.832] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BREEZE\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0185.832] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BREEZE\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\breeze\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.832] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.833] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.833] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.833] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BREEZE\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0185.833] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BREEZE\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\breeze\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.833] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.833] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.834] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0185.834] FindClose (in: hFindFile=0x665abb5760 | out: hFindFile=0x665abb5760) returned 1 [0185.834] SetLastError (dwErrCode=0x0) [0185.834] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BREEZE\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\breeze\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.834] GetLastError () returned 0x5 [0185.834] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.834] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.834] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.834] SetLastError (dwErrCode=0x0) [0185.834] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.834] GetLastError () returned 0x5 [0185.834] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.834] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.834] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CANYON\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb42c0 [0185.835] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.835] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.835] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CANYON\\CANYON.ELM", dwFileAttributes=0x80) returned 0 [0185.835] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CANYON\\CANYON.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\canyon\\canyon.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.835] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.835] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.835] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.836] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CANYON\\CANYON.INF", dwFileAttributes=0x80) returned 0 [0185.836] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CANYON\\CANYON.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\canyon\\canyon.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.836] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.836] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.836] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.836] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CANYON\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0185.837] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CANYON\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\canyon\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.837] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.837] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.837] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.837] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CANYON\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0185.838] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CANYON\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\canyon\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.838] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.838] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.838] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0185.838] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0185.838] SetLastError (dwErrCode=0x0) [0185.838] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CANYON\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\canyon\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.838] GetLastError () returned 0x5 [0185.838] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.839] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.839] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.839] SetLastError (dwErrCode=0x0) [0185.839] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.839] GetLastError () returned 0x5 [0185.839] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.839] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.839] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CAPSULES\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4c80 [0185.839] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.839] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.839] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CAPSULES\\CAPSULES.ELM", dwFileAttributes=0x80) returned 0 [0185.840] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CAPSULES\\CAPSULES.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\capsules\\capsules.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.840] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.840] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.840] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.840] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CAPSULES\\CAPSULES.INF", dwFileAttributes=0x80) returned 0 [0185.841] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CAPSULES\\CAPSULES.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\capsules\\capsules.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.841] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.841] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.841] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.841] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CAPSULES\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0185.842] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CAPSULES\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\capsules\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.842] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.842] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.843] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.843] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.843] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CAPSULES\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0185.844] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CAPSULES\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\capsules\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.844] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.844] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.844] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0185.844] FindClose (in: hFindFile=0x665abb4c80 | out: hFindFile=0x665abb4c80) returned 1 [0185.844] SetLastError (dwErrCode=0x0) [0185.844] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CAPSULES\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\capsules\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.845] GetLastError () returned 0x5 [0185.845] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.845] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.845] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.845] SetLastError (dwErrCode=0x0) [0185.845] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.845] GetLastError () returned 0x5 [0185.845] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.845] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.845] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CASCADE\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb5160 [0185.845] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.845] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.845] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CASCADE\\CASCADE.ELM", dwFileAttributes=0x80) returned 0 [0185.846] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CASCADE\\CASCADE.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\cascade\\cascade.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.846] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.846] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.846] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.846] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.846] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CASCADE\\CASCADE.INF", dwFileAttributes=0x80) returned 0 [0185.847] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CASCADE\\CASCADE.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\cascade\\cascade.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.847] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.847] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.847] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.847] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CASCADE\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0185.847] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CASCADE\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\cascade\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.848] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.848] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.848] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.848] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CASCADE\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0185.848] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CASCADE\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\cascade\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.849] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.849] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.849] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0185.849] FindClose (in: hFindFile=0x665abb5160 | out: hFindFile=0x665abb5160) returned 1 [0185.849] SetLastError (dwErrCode=0x0) [0185.849] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CASCADE\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\cascade\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.849] GetLastError () returned 0x5 [0185.849] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.849] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.849] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.849] SetLastError (dwErrCode=0x0) [0185.849] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.849] GetLastError () returned 0x5 [0185.850] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.850] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.850] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\COMPASS\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb43e0 [0185.850] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.850] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.850] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.850] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\COMPASS\\COMPASS.ELM", dwFileAttributes=0x80) returned 0 [0185.850] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\COMPASS\\COMPASS.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\compass\\compass.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.850] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.851] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.851] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.851] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\COMPASS\\COMPASS.INF", dwFileAttributes=0x80) returned 0 [0185.851] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\COMPASS\\COMPASS.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\compass\\compass.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.851] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.851] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.852] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.852] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\COMPASS\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0185.853] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\COMPASS\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\compass\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.853] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.853] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.853] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.853] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\COMPASS\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0185.853] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\COMPASS\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\compass\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.854] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.854] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.854] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0185.854] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0185.854] SetLastError (dwErrCode=0x0) [0185.854] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\COMPASS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\compass\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.854] GetLastError () returned 0x5 [0185.854] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.854] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.854] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.854] SetLastError (dwErrCode=0x0) [0185.854] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.855] GetLastError () returned 0x5 [0185.855] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.855] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.855] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CONCRETE\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4c80 [0185.855] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.856] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.856] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.856] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CONCRETE\\CONCRETE.ELM", dwFileAttributes=0x80) returned 0 [0185.856] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CONCRETE\\CONCRETE.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\concrete\\concrete.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.856] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.856] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.857] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.857] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CONCRETE\\CONCRETE.INF", dwFileAttributes=0x80) returned 0 [0185.858] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CONCRETE\\CONCRETE.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\concrete\\concrete.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.858] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.858] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.858] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.858] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CONCRETE\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0185.859] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CONCRETE\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\concrete\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.859] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.859] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.859] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.859] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.859] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CONCRETE\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0185.860] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CONCRETE\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\concrete\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.860] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.860] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.860] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0185.860] FindClose (in: hFindFile=0x665abb4c80 | out: hFindFile=0x665abb4c80) returned 1 [0185.860] SetLastError (dwErrCode=0x0) [0185.860] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CONCRETE\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\concrete\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.860] GetLastError () returned 0x5 [0185.860] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.860] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.861] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.861] SetLastError (dwErrCode=0x0) [0185.861] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.861] GetLastError () returned 0x5 [0185.861] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.861] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.861] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\DEEPBLUE\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb53a0 [0185.861] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.861] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.861] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.861] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\DEEPBLUE\\DEEPBLUE.ELM", dwFileAttributes=0x80) returned 0 [0185.861] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\DEEPBLUE\\DEEPBLUE.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\deepblue\\deepblue.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.862] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.862] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.862] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.862] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\DEEPBLUE\\DEEPBLUE.INF", dwFileAttributes=0x80) returned 0 [0185.862] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\DEEPBLUE\\DEEPBLUE.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\deepblue\\deepblue.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.863] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.863] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.863] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.863] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.863] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\DEEPBLUE\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0185.863] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\DEEPBLUE\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\deepblue\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.863] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.864] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.864] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.864] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.864] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\DEEPBLUE\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0185.864] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\DEEPBLUE\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\deepblue\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.864] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.864] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.865] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0185.865] FindClose (in: hFindFile=0x665abb53a0 | out: hFindFile=0x665abb53a0) returned 1 [0185.869] SetLastError (dwErrCode=0x0) [0185.869] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\DEEPBLUE\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\deepblue\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.869] GetLastError () returned 0x5 [0185.869] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.869] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.869] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.869] SetLastError (dwErrCode=0x0) [0185.869] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.870] GetLastError () returned 0x5 [0185.870] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.870] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.870] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECHO\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb42c0 [0185.870] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.870] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.870] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.871] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECHO\\ECHO.ELM", dwFileAttributes=0x80) returned 0 [0185.871] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECHO\\ECHO.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\echo\\echo.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.871] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.871] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.871] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.871] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECHO\\ECHO.INF", dwFileAttributes=0x80) returned 0 [0185.872] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECHO\\ECHO.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\echo\\echo.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.872] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.872] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.872] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.872] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECHO\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0185.873] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECHO\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\echo\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.873] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.873] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.874] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.874] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECHO\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0185.875] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECHO\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\echo\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.875] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.875] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.875] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0185.875] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0185.875] SetLastError (dwErrCode=0x0) [0185.875] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECHO\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\echo\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.876] GetLastError () returned 0x5 [0185.876] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.876] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.876] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.876] SetLastError (dwErrCode=0x0) [0185.876] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.876] GetLastError () returned 0x5 [0185.876] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.876] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.876] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECLIPSE\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb49e0 [0185.876] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.876] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.876] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECLIPSE\\ECLIPSE.ELM", dwFileAttributes=0x80) returned 0 [0185.877] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECLIPSE\\ECLIPSE.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\eclipse\\eclipse.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.878] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.878] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.878] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.878] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECLIPSE\\ECLIPSE.INF", dwFileAttributes=0x80) returned 0 [0185.878] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECLIPSE\\ECLIPSE.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\eclipse\\eclipse.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.879] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.879] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.879] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.879] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECLIPSE\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0185.880] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECLIPSE\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\eclipse\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.880] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.880] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.880] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.880] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.881] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECLIPSE\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0185.881] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECLIPSE\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\eclipse\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.881] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.881] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.882] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0185.882] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0185.882] SetLastError (dwErrCode=0x0) [0185.882] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECLIPSE\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\eclipse\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.882] GetLastError () returned 0x5 [0185.882] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.882] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.882] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.882] SetLastError (dwErrCode=0x0) [0185.882] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.882] GetLastError () returned 0x5 [0185.882] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.882] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.882] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EDGE\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb5160 [0185.883] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.883] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.883] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EDGE\\EDGE.ELM", dwFileAttributes=0x80) returned 0 [0185.883] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EDGE\\EDGE.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\edge\\edge.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.883] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.883] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.884] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.884] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EDGE\\EDGE.INF", dwFileAttributes=0x80) returned 0 [0185.884] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EDGE\\EDGE.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\edge\\edge.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.885] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.885] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.885] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.885] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EDGE\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0185.886] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EDGE\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\edge\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.886] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.886] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.886] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.886] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EDGE\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0185.887] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EDGE\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\edge\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.887] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.887] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.887] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0185.887] FindClose (in: hFindFile=0x665abb5160 | out: hFindFile=0x665abb5160) returned 1 [0185.888] SetLastError (dwErrCode=0x0) [0185.888] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EDGE\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\edge\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.888] GetLastError () returned 0x5 [0185.888] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.888] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.888] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.888] SetLastError (dwErrCode=0x0) [0185.888] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.888] GetLastError () returned 0x5 [0185.888] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.888] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.888] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EVRGREEN\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb49e0 [0185.891] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.891] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.891] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EVRGREEN\\EVRGREEN.ELM", dwFileAttributes=0x80) returned 0 [0185.892] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EVRGREEN\\EVRGREEN.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\evrgreen\\evrgreen.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.892] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.892] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.892] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.892] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EVRGREEN\\EVRGREEN.INF", dwFileAttributes=0x80) returned 0 [0185.893] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EVRGREEN\\EVRGREEN.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\evrgreen\\evrgreen.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.893] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.894] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.894] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.894] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EVRGREEN\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0185.894] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EVRGREEN\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\evrgreen\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.894] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.894] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.895] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.895] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EVRGREEN\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0185.895] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EVRGREEN\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\evrgreen\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.895] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.895] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.895] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0185.895] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0185.896] SetLastError (dwErrCode=0x0) [0185.896] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EVRGREEN\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\evrgreen\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.896] GetLastError () returned 0x5 [0185.896] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.896] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.896] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.896] SetLastError (dwErrCode=0x0) [0185.896] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.896] GetLastError () returned 0x5 [0185.896] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.896] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.896] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EXPEDITN\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4f80 [0185.896] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.896] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.897] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EXPEDITN\\EXPEDITN.ELM", dwFileAttributes=0x80) returned 0 [0185.897] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EXPEDITN\\EXPEDITN.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\expeditn\\expeditn.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.897] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.897] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.897] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.897] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EXPEDITN\\EXPEDITN.INF", dwFileAttributes=0x80) returned 0 [0185.898] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EXPEDITN\\EXPEDITN.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\expeditn\\expeditn.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.898] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.898] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.898] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.898] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EXPEDITN\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0185.899] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EXPEDITN\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\expeditn\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.899] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.899] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.899] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.899] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EXPEDITN\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0185.900] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EXPEDITN\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\expeditn\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.900] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.900] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.900] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0185.900] FindClose (in: hFindFile=0x665abb4f80 | out: hFindFile=0x665abb4f80) returned 1 [0185.900] SetLastError (dwErrCode=0x0) [0185.900] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EXPEDITN\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\expeditn\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.900] GetLastError () returned 0x5 [0185.900] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.900] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.900] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.901] SetLastError (dwErrCode=0x0) [0185.901] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.901] GetLastError () returned 0x5 [0185.901] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.901] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.901] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ICE\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb5520 [0185.901] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.901] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.901] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ICE\\ICE.ELM", dwFileAttributes=0x80) returned 0 [0185.901] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ICE\\ICE.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ice\\ice.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.902] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.902] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.902] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.902] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ICE\\ICE.INF", dwFileAttributes=0x80) returned 0 [0185.902] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ICE\\ICE.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ice\\ice.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.903] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.903] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.903] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.903] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.903] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ICE\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0185.904] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ICE\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ice\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.904] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.904] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.904] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.904] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.904] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ICE\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0185.905] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ICE\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ice\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.905] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.905] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.906] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0185.906] FindClose (in: hFindFile=0x665abb5520 | out: hFindFile=0x665abb5520) returned 1 [0185.906] SetLastError (dwErrCode=0x0) [0185.906] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ICE\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ice\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.906] GetLastError () returned 0x5 [0185.906] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.906] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.907] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.907] SetLastError (dwErrCode=0x0) [0185.907] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.907] GetLastError () returned 0x5 [0185.907] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.907] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.907] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\INDUST\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb53a0 [0185.908] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.908] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.908] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.908] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\INDUST\\INDUST.ELM", dwFileAttributes=0x80) returned 0 [0185.909] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\INDUST\\INDUST.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\indust\\indust.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.909] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.909] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.909] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.909] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.910] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\INDUST\\INDUST.INF", dwFileAttributes=0x80) returned 0 [0185.910] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\INDUST\\INDUST.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\indust\\indust.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.910] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.910] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.910] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.910] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.911] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\INDUST\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0185.911] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\INDUST\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\indust\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.911] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.911] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.912] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.912] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.912] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\INDUST\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0185.912] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\INDUST\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\indust\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.912] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.912] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.913] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0185.913] FindClose (in: hFindFile=0x665abb53a0 | out: hFindFile=0x665abb53a0) returned 1 [0185.913] SetLastError (dwErrCode=0x0) [0185.913] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\INDUST\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\indust\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.913] GetLastError () returned 0x5 [0185.913] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.913] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.913] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.913] SetLastError (dwErrCode=0x0) [0185.913] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.913] GetLastError () returned 0x5 [0185.913] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.913] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.913] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\IRIS\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4d40 [0185.914] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.914] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.914] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.914] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\IRIS\\IRIS.ELM", dwFileAttributes=0x80) returned 0 [0185.914] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\IRIS\\IRIS.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\iris\\iris.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.914] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.914] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.914] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.915] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.915] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\IRIS\\IRIS.INF", dwFileAttributes=0x80) returned 0 [0185.915] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\IRIS\\IRIS.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\iris\\iris.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.915] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.915] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.915] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.915] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.916] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\IRIS\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0185.916] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\IRIS\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\iris\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.916] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.916] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.916] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.916] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.916] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\IRIS\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0185.917] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\IRIS\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\iris\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.917] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.917] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.917] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0185.917] FindClose (in: hFindFile=0x665abb4d40 | out: hFindFile=0x665abb4d40) returned 1 [0185.917] SetLastError (dwErrCode=0x0) [0185.917] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\IRIS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\iris\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.917] GetLastError () returned 0x5 [0185.917] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.918] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.918] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.918] SetLastError (dwErrCode=0x0) [0185.918] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.918] GetLastError () returned 0x5 [0185.918] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.918] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.918] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\JOURNAL\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb5760 [0185.919] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.919] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.919] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.919] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\JOURNAL\\JOURNAL.ELM", dwFileAttributes=0x80) returned 0 [0185.920] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\JOURNAL\\JOURNAL.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\journal\\journal.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.920] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.920] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.920] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.920] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.920] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\JOURNAL\\JOURNAL.INF", dwFileAttributes=0x80) returned 0 [0185.921] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\JOURNAL\\JOURNAL.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\journal\\journal.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.921] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.921] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.922] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.922] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.922] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\JOURNAL\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0185.922] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\JOURNAL\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\journal\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.922] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.922] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.922] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.922] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.923] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\JOURNAL\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0185.923] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\JOURNAL\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\journal\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.923] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.923] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.923] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0185.923] FindClose (in: hFindFile=0x665abb5760 | out: hFindFile=0x665abb5760) returned 1 [0185.923] SetLastError (dwErrCode=0x0) [0185.924] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\JOURNAL\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\journal\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.924] GetLastError () returned 0x5 [0185.924] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.924] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.924] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.924] SetLastError (dwErrCode=0x0) [0185.924] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.924] GetLastError () returned 0x5 [0185.924] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.924] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.924] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LAYERS\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb5040 [0185.924] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.924] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.924] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.925] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LAYERS\\LAYERS.ELM", dwFileAttributes=0x80) returned 0 [0185.925] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LAYERS\\LAYERS.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\layers\\layers.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.925] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.925] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.925] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.925] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.925] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LAYERS\\LAYERS.INF", dwFileAttributes=0x80) returned 0 [0185.926] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LAYERS\\LAYERS.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\layers\\layers.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.926] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.926] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.926] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.926] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.926] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LAYERS\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0185.927] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LAYERS\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\layers\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.927] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.927] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.927] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.927] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.927] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LAYERS\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0185.928] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LAYERS\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\layers\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.928] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.928] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.928] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0185.928] FindClose (in: hFindFile=0x665abb5040 | out: hFindFile=0x665abb5040) returned 1 [0185.928] SetLastError (dwErrCode=0x0) [0185.928] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LAYERS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\layers\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.928] GetLastError () returned 0x5 [0185.928] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.928] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.929] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.929] SetLastError (dwErrCode=0x0) [0185.929] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.929] GetLastError () returned 0x5 [0185.929] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.929] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.929] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LEVEL\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb49e0 [0185.929] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.929] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.929] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.929] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LEVEL\\LEVEL.ELM", dwFileAttributes=0x80) returned 0 [0185.930] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LEVEL\\LEVEL.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\level\\level.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.930] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.930] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.930] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.930] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.930] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LEVEL\\LEVEL.INF", dwFileAttributes=0x80) returned 0 [0185.931] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LEVEL\\LEVEL.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\level\\level.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.932] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.932] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.932] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.932] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.932] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LEVEL\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0185.933] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LEVEL\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\level\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.933] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.933] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.933] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.933] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.933] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LEVEL\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0185.934] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LEVEL\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\level\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.934] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.934] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.935] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0185.935] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0185.935] SetLastError (dwErrCode=0x0) [0185.935] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LEVEL\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\level\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.935] GetLastError () returned 0x5 [0185.935] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.935] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.935] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.935] SetLastError (dwErrCode=0x0) [0185.935] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.935] GetLastError () returned 0x5 [0185.935] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.935] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.935] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\NETWORK\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb43e0 [0185.936] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.936] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.936] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.936] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\NETWORK\\NETWORK.ELM", dwFileAttributes=0x80) returned 0 [0185.936] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\NETWORK\\NETWORK.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\network\\network.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.936] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.936] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.936] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.936] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.937] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\NETWORK\\NETWORK.INF", dwFileAttributes=0x80) returned 0 [0185.938] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\NETWORK\\NETWORK.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\network\\network.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.938] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.938] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.938] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.938] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.938] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\NETWORK\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0185.939] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\NETWORK\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\network\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.939] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.939] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.939] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.939] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\NETWORK\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0185.939] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\NETWORK\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\network\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.940] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.940] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.940] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0185.940] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0185.940] SetLastError (dwErrCode=0x0) [0185.940] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\NETWORK\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\network\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.940] GetLastError () returned 0x5 [0185.940] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.940] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.940] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.940] SetLastError (dwErrCode=0x0) [0185.940] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.941] GetLastError () returned 0x5 [0185.941] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.941] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.941] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PAPYRUS\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb5040 [0185.941] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.941] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.941] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.941] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PAPYRUS\\PAPYRUS.ELM", dwFileAttributes=0x80) returned 0 [0185.941] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PAPYRUS\\PAPYRUS.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\papyrus\\papyrus.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.941] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.942] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.942] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.942] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.942] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PAPYRUS\\PAPYRUS.INF", dwFileAttributes=0x80) returned 0 [0185.942] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PAPYRUS\\PAPYRUS.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\papyrus\\papyrus.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.942] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.942] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.943] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.943] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.943] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PAPYRUS\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0185.943] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PAPYRUS\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\papyrus\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.943] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.943] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.943] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.944] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.944] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PAPYRUS\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0185.944] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PAPYRUS\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\papyrus\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.944] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.944] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.944] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0185.944] FindClose (in: hFindFile=0x665abb5040 | out: hFindFile=0x665abb5040) returned 1 [0185.945] SetLastError (dwErrCode=0x0) [0185.945] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PAPYRUS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\papyrus\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.945] GetLastError () returned 0x5 [0185.945] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.945] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.945] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.945] SetLastError (dwErrCode=0x0) [0185.945] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.945] GetLastError () returned 0x5 [0185.945] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.945] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.945] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PIXEL\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb5760 [0185.946] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.946] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.946] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PIXEL\\PIXEL.ELM", dwFileAttributes=0x80) returned 0 [0185.947] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PIXEL\\PIXEL.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\pixel\\pixel.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.947] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.947] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.947] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.947] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.948] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PIXEL\\PIXEL.INF", dwFileAttributes=0x80) returned 0 [0185.948] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PIXEL\\PIXEL.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\pixel\\pixel.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.948] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.948] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.948] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.948] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.948] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PIXEL\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0185.949] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PIXEL\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\pixel\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.949] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.949] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.949] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.949] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PIXEL\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0185.950] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PIXEL\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\pixel\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.950] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.950] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.950] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0185.951] FindClose (in: hFindFile=0x665abb5760 | out: hFindFile=0x665abb5760) returned 1 [0185.951] SetLastError (dwErrCode=0x0) [0185.951] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PIXEL\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\pixel\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.951] GetLastError () returned 0x5 [0185.951] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.951] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.951] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.951] SetLastError (dwErrCode=0x0) [0185.951] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.951] GetLastError () returned 0x5 [0185.951] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.951] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.951] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PROFILE\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4a40 [0185.951] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.951] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.951] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.952] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PROFILE\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0185.958] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PROFILE\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\profile\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.959] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.959] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.959] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.959] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.959] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PROFILE\\PROFILE.ELM", dwFileAttributes=0x80) returned 0 [0185.959] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PROFILE\\PROFILE.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\profile\\profile.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.960] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.960] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.960] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.960] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.960] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PROFILE\\PROFILE.INF", dwFileAttributes=0x80) returned 0 [0185.961] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PROFILE\\PROFILE.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\profile\\profile.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.961] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.961] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.961] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.961] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.961] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PROFILE\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0185.962] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PROFILE\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\profile\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.962] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.962] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.962] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0185.963] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0185.963] SetLastError (dwErrCode=0x0) [0185.963] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PROFILE\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\profile\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.963] GetLastError () returned 0x5 [0185.963] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.963] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.963] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.963] SetLastError (dwErrCode=0x0) [0185.963] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.963] GetLastError () returned 0x5 [0185.963] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.963] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.963] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\QUAD\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb45c0 [0185.964] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.964] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.964] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.964] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\QUAD\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0185.964] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\QUAD\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\quad\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.965] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.965] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.965] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.965] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\QUAD\\QUAD.ELM", dwFileAttributes=0x80) returned 0 [0185.966] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\QUAD\\QUAD.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\quad\\quad.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.966] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.966] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.966] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.966] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\QUAD\\QUAD.INF", dwFileAttributes=0x80) returned 0 [0185.967] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\QUAD\\QUAD.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\quad\\quad.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.967] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.967] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.968] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.968] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.968] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\QUAD\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0185.969] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\QUAD\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\quad\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.969] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.969] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.969] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0185.969] FindClose (in: hFindFile=0x665abb45c0 | out: hFindFile=0x665abb45c0) returned 1 [0185.969] SetLastError (dwErrCode=0x0) [0185.969] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\QUAD\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\quad\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.969] GetLastError () returned 0x5 [0185.969] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.969] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.969] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.969] SetLastError (dwErrCode=0x0) [0185.969] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.970] GetLastError () returned 0x5 [0185.970] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.970] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.970] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RADIAL\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4f20 [0185.970] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.970] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.970] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RADIAL\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0185.970] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RADIAL\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\radial\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.971] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.971] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.971] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.971] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.971] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RADIAL\\RADIAL.ELM", dwFileAttributes=0x80) returned 0 [0185.972] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RADIAL\\RADIAL.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\radial\\radial.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.972] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.972] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.972] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.972] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RADIAL\\RADIAL.INF", dwFileAttributes=0x80) returned 0 [0185.973] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RADIAL\\RADIAL.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\radial\\radial.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.973] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.973] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.973] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.973] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RADIAL\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0185.974] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RADIAL\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\radial\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.974] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.974] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.974] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0185.974] FindClose (in: hFindFile=0x665abb4f20 | out: hFindFile=0x665abb4f20) returned 1 [0185.974] SetLastError (dwErrCode=0x0) [0185.974] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RADIAL\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\radial\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.975] GetLastError () returned 0x5 [0185.975] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.975] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.975] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.975] SetLastError (dwErrCode=0x0) [0185.975] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.975] GetLastError () returned 0x5 [0185.975] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.975] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.975] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\REFINED\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4c80 [0185.975] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.975] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.975] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\REFINED\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0185.976] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\REFINED\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\refined\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.976] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.976] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.976] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.976] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\REFINED\\REFINED.ELM", dwFileAttributes=0x80) returned 0 [0185.977] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\REFINED\\REFINED.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\refined\\refined.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.977] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.977] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.977] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.977] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\REFINED\\REFINED.INF", dwFileAttributes=0x80) returned 0 [0185.977] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\REFINED\\REFINED.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\refined\\refined.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.978] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.978] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.978] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.978] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\REFINED\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0185.979] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\REFINED\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\refined\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.979] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.979] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.979] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0185.979] FindClose (in: hFindFile=0x665abb4c80 | out: hFindFile=0x665abb4c80) returned 1 [0185.979] SetLastError (dwErrCode=0x0) [0185.979] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\REFINED\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\refined\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.980] GetLastError () returned 0x5 [0185.980] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.980] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.980] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.980] SetLastError (dwErrCode=0x0) [0185.980] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.980] GetLastError () returned 0x5 [0185.980] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.980] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.980] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RICEPAPR\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4c80 [0185.981] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.981] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.981] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.981] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RICEPAPR\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0185.982] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RICEPAPR\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ricepapr\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.982] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.982] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.982] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.982] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.982] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RICEPAPR\\RICEPAPR.ELM", dwFileAttributes=0x80) returned 0 [0185.983] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RICEPAPR\\RICEPAPR.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ricepapr\\ricepapr.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.983] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.983] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.983] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.983] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RICEPAPR\\RICEPAPR.INF", dwFileAttributes=0x80) returned 0 [0185.984] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RICEPAPR\\RICEPAPR.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ricepapr\\ricepapr.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.984] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.984] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.985] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.985] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.985] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RICEPAPR\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0185.985] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RICEPAPR\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ricepapr\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.985] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.985] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.985] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0185.986] FindClose (in: hFindFile=0x665abb4c80 | out: hFindFile=0x665abb4c80) returned 1 [0185.986] SetLastError (dwErrCode=0x0) [0185.986] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RICEPAPR\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ricepapr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.986] GetLastError () returned 0x5 [0185.986] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.986] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.986] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.986] SetLastError (dwErrCode=0x0) [0185.986] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.986] GetLastError () returned 0x5 [0185.986] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.986] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.986] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RIPPLE\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb45c0 [0185.986] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.986] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.986] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RIPPLE\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0185.987] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RIPPLE\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ripple\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.987] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.987] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.987] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.987] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RIPPLE\\RIPPLE.ELM", dwFileAttributes=0x80) returned 0 [0185.988] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RIPPLE\\RIPPLE.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ripple\\ripple.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.988] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.988] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.988] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.988] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RIPPLE\\RIPPLE.INF", dwFileAttributes=0x80) returned 0 [0185.989] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RIPPLE\\RIPPLE.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ripple\\ripple.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.989] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.989] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.989] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.989] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.989] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RIPPLE\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0185.990] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RIPPLE\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ripple\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.990] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.990] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.990] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0185.990] FindClose (in: hFindFile=0x665abb45c0 | out: hFindFile=0x665abb45c0) returned 1 [0185.990] SetLastError (dwErrCode=0x0) [0185.990] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RIPPLE\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ripple\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.990] GetLastError () returned 0x5 [0185.990] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.990] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.990] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.990] SetLastError (dwErrCode=0x0) [0185.990] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.991] GetLastError () returned 0x5 [0185.991] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.991] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.991] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RMNSQUE\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb53a0 [0185.991] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.991] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.991] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.991] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RMNSQUE\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0185.991] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RMNSQUE\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\rmnsque\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.992] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.992] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.992] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.992] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RMNSQUE\\RMNSQUE.ELM", dwFileAttributes=0x80) returned 0 [0185.993] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RMNSQUE\\RMNSQUE.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\rmnsque\\rmnsque.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.993] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.993] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.994] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.994] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.994] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RMNSQUE\\RMNSQUE.INF", dwFileAttributes=0x80) returned 0 [0185.995] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RMNSQUE\\RMNSQUE.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\rmnsque\\rmnsque.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.995] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.995] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.995] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.995] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.995] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RMNSQUE\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0185.996] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RMNSQUE\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\rmnsque\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.996] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.996] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.996] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0185.996] FindClose (in: hFindFile=0x665abb53a0 | out: hFindFile=0x665abb53a0) returned 1 [0185.996] SetLastError (dwErrCode=0x0) [0185.996] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RMNSQUE\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\rmnsque\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.996] GetLastError () returned 0x5 [0185.996] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.996] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.996] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0185.996] SetLastError (dwErrCode=0x0) [0185.997] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.997] GetLastError () returned 0x5 [0185.997] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0185.997] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.997] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SATIN\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4c80 [0185.997] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.997] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.997] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SATIN\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0185.998] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SATIN\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\satin\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.998] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.998] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.998] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.998] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0185.999] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SATIN\\SATIN.ELM", dwFileAttributes=0x80) returned 0 [0185.999] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SATIN\\SATIN.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\satin\\satin.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.999] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0185.999] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.999] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0185.999] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.000] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SATIN\\SATIN.INF", dwFileAttributes=0x80) returned 0 [0186.000] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SATIN\\SATIN.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\satin\\satin.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.000] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.000] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.000] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.000] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.001] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SATIN\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0186.001] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SATIN\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\satin\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.001] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.001] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.001] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0186.001] FindClose (in: hFindFile=0x665abb4c80 | out: hFindFile=0x665abb4c80) returned 1 [0186.001] SetLastError (dwErrCode=0x0) [0186.001] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SATIN\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\satin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.002] GetLastError () returned 0x5 [0186.002] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.002] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.002] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.002] SetLastError (dwErrCode=0x0) [0186.002] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.002] GetLastError () returned 0x5 [0186.002] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.002] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.002] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SKY\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb42c0 [0186.002] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.002] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.002] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.003] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SKY\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0186.003] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SKY\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\sky\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.003] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.003] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.003] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.003] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.003] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SKY\\SKY.ELM", dwFileAttributes=0x80) returned 0 [0186.004] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SKY\\SKY.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\sky\\sky.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.004] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.004] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.004] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.004] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.004] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SKY\\SKY.INF", dwFileAttributes=0x80) returned 0 [0186.004] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SKY\\SKY.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\sky\\sky.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.005] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.005] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.005] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.005] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.005] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SKY\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0186.006] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SKY\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\sky\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.006] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.006] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.006] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0186.006] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0186.006] SetLastError (dwErrCode=0x0) [0186.006] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SKY\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\sky\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.007] GetLastError () returned 0x5 [0186.007] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.007] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.007] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.007] SetLastError (dwErrCode=0x0) [0186.007] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.007] GetLastError () returned 0x5 [0186.007] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.007] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.007] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SLATE\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb5040 [0186.008] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.008] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.008] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.008] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SLATE\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0186.009] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SLATE\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\slate\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.009] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.009] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.009] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.009] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.009] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SLATE\\SLATE.ELM", dwFileAttributes=0x80) returned 0 [0186.010] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SLATE\\SLATE.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\slate\\slate.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.010] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.010] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.010] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.010] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.010] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SLATE\\SLATE.INF", dwFileAttributes=0x80) returned 0 [0186.011] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SLATE\\SLATE.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\slate\\slate.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.011] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.011] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.011] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.011] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.011] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SLATE\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0186.011] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SLATE\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\slate\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.012] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.012] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.012] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0186.012] FindClose (in: hFindFile=0x665abb5040 | out: hFindFile=0x665abb5040) returned 1 [0186.012] SetLastError (dwErrCode=0x0) [0186.012] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SLATE\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\slate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.012] GetLastError () returned 0x5 [0186.012] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.012] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.012] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.012] SetLastError (dwErrCode=0x0) [0186.012] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.012] GetLastError () returned 0x5 [0186.012] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.013] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.013] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SONORA\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4c80 [0186.013] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.013] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.013] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.013] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SONORA\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0186.013] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SONORA\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\sonora\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.013] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.013] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.014] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.014] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.014] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SONORA\\SONORA.ELM", dwFileAttributes=0x80) returned 0 [0186.014] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SONORA\\SONORA.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\sonora\\sonora.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.014] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.014] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.015] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.015] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.015] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SONORA\\SONORA.INF", dwFileAttributes=0x80) returned 0 [0186.015] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SONORA\\SONORA.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\sonora\\sonora.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.015] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.015] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.016] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.016] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.016] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SONORA\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0186.016] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SONORA\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\sonora\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.016] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.016] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.017] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0186.017] FindClose (in: hFindFile=0x665abb4c80 | out: hFindFile=0x665abb4c80) returned 1 [0186.017] SetLastError (dwErrCode=0x0) [0186.017] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SONORA\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\sonora\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.017] GetLastError () returned 0x5 [0186.017] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.017] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.017] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.017] SetLastError (dwErrCode=0x0) [0186.017] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.017] GetLastError () returned 0x5 [0186.017] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.017] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.017] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SPRING\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb5160 [0186.018] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.018] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.018] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.018] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SPRING\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0186.018] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SPRING\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\spring\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.018] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.018] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.019] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.019] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.019] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SPRING\\SPRING.ELM", dwFileAttributes=0x80) returned 0 [0186.021] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SPRING\\SPRING.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\spring\\spring.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.022] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.022] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.022] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.022] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.022] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SPRING\\SPRING.INF", dwFileAttributes=0x80) returned 0 [0186.023] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SPRING\\SPRING.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\spring\\spring.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.023] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.023] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.023] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.023] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.024] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SPRING\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0186.024] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SPRING\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\spring\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.024] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.024] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.024] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0186.024] FindClose (in: hFindFile=0x665abb5160 | out: hFindFile=0x665abb5160) returned 1 [0186.024] SetLastError (dwErrCode=0x0) [0186.024] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SPRING\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\spring\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.025] GetLastError () returned 0x5 [0186.025] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.025] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.025] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.025] SetLastError (dwErrCode=0x0) [0186.025] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.025] GetLastError () returned 0x5 [0186.025] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.025] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.025] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STRTEDGE\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4560 [0186.025] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.025] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.025] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.025] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STRTEDGE\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0186.026] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STRTEDGE\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\strtedge\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.026] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.026] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.027] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.027] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.027] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STRTEDGE\\STRTEDGE.ELM", dwFileAttributes=0x80) returned 0 [0186.027] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STRTEDGE\\STRTEDGE.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\strtedge\\strtedge.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.027] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.027] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.028] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.028] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.028] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STRTEDGE\\STRTEDGE.INF", dwFileAttributes=0x80) returned 0 [0186.028] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STRTEDGE\\STRTEDGE.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\strtedge\\strtedge.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.028] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.028] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.029] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.029] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.029] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STRTEDGE\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0186.029] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STRTEDGE\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\strtedge\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.029] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.029] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.029] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0186.029] FindClose (in: hFindFile=0x665abb4560 | out: hFindFile=0x665abb4560) returned 1 [0186.029] SetLastError (dwErrCode=0x0) [0186.030] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STRTEDGE\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\strtedge\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.030] GetLastError () returned 0x5 [0186.030] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.030] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.030] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.030] SetLastError (dwErrCode=0x0) [0186.030] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.030] GetLastError () returned 0x5 [0186.030] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.030] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.030] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STUDIO\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb53a0 [0186.030] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.030] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.030] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.031] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STUDIO\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0186.031] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STUDIO\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\studio\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.031] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.031] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.032] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.032] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.032] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STUDIO\\STUDIO.ELM", dwFileAttributes=0x80) returned 0 [0186.032] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STUDIO\\STUDIO.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\studio\\studio.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.032] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.032] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.032] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.033] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STUDIO\\STUDIO.INF", dwFileAttributes=0x80) returned 0 [0186.033] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STUDIO\\STUDIO.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\studio\\studio.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.033] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.033] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.033] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.034] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.034] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STUDIO\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0186.035] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STUDIO\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\studio\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.035] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.035] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.035] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0186.035] FindClose (in: hFindFile=0x665abb53a0 | out: hFindFile=0x665abb53a0) returned 1 [0186.035] SetLastError (dwErrCode=0x0) [0186.035] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STUDIO\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\studio\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.035] GetLastError () returned 0x5 [0186.035] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.035] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.035] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.036] SetLastError (dwErrCode=0x0) [0186.036] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.036] GetLastError () returned 0x5 [0186.036] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.036] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.036] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SUMIPNTG\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb43e0 [0186.036] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.036] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.036] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.037] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SUMIPNTG\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0186.037] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SUMIPNTG\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\sumipntg\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.037] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.037] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.037] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.037] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.038] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SUMIPNTG\\SUMIPNTG.ELM", dwFileAttributes=0x80) returned 0 [0186.038] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SUMIPNTG\\SUMIPNTG.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\sumipntg\\sumipntg.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.038] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.038] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.038] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.038] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.038] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SUMIPNTG\\SUMIPNTG.INF", dwFileAttributes=0x80) returned 0 [0186.039] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SUMIPNTG\\SUMIPNTG.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\sumipntg\\sumipntg.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.039] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.039] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.039] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.039] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.039] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SUMIPNTG\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0186.039] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SUMIPNTG\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\sumipntg\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.040] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.040] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.040] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0186.040] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0186.040] SetLastError (dwErrCode=0x0) [0186.040] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SUMIPNTG\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\sumipntg\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.040] GetLastError () returned 0x5 [0186.040] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.040] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.040] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.040] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.041] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\THEMES.INF", dwFileAttributes=0x80) returned 0 [0186.041] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\THEMES.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\themes.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.041] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.041] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.041] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.041] SetLastError (dwErrCode=0x0) [0186.041] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.041] GetLastError () returned 0x5 [0186.041] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.041] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.042] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATER\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4c80 [0186.042] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.042] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.042] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.042] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATER\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0186.042] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATER\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\water\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.042] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.042] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.043] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.043] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.043] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATER\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0186.043] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATER\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\water\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.043] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.043] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.043] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.043] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.044] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATER\\WATER.ELM", dwFileAttributes=0x80) returned 0 [0186.044] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATER\\WATER.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\water\\water.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.044] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.044] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.044] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.044] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.044] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATER\\WATER.INF", dwFileAttributes=0x80) returned 0 [0186.045] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATER\\WATER.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\water\\water.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.045] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.045] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.045] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0186.045] FindClose (in: hFindFile=0x665abb4c80 | out: hFindFile=0x665abb4c80) returned 1 [0186.045] SetLastError (dwErrCode=0x0) [0186.045] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATER\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\water\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.045] GetLastError () returned 0x5 [0186.045] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.045] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.045] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.045] SetLastError (dwErrCode=0x0) [0186.046] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.046] GetLastError () returned 0x5 [0186.046] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.046] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.046] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATERMAR\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4560 [0186.047] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.047] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.047] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.047] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATERMAR\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0 [0186.047] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATERMAR\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\watermar\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.047] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.047] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.048] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.048] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.048] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATERMAR\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0 [0186.048] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATERMAR\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\watermar\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.048] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.048] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.048] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.048] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.049] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATERMAR\\WATERMAR.ELM", dwFileAttributes=0x80) returned 0 [0186.049] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATERMAR\\WATERMAR.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\watermar\\watermar.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.049] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.049] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.049] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.049] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.050] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATERMAR\\WATERMAR.INF", dwFileAttributes=0x80) returned 0 [0186.050] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATERMAR\\WATERMAR.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\watermar\\watermar.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.050] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.050] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.050] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0186.050] FindClose (in: hFindFile=0x665abb4560 | out: hFindFile=0x665abb4560) returned 1 [0186.050] SetLastError (dwErrCode=0x0) [0186.050] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATERMAR\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\watermar\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.051] GetLastError () returned 0x5 [0186.051] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.051] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.051] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0186.051] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0186.051] SetLastError (dwErrCode=0x0) [0186.051] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.051] GetLastError () returned 0x5 [0186.051] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0186.051] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.051] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0186.051] SetLastError (dwErrCode=0x0) [0186.051] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.051] GetLastError () returned 0x5 [0186.051] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0186.051] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.051] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb43e0 [0186.054] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.054] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.054] SetLastError (dwErrCode=0x0) [0186.054] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\translat\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.054] GetLastError () returned 0x5 [0186.054] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.054] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.054] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ENES\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb5760 [0186.055] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.055] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.055] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.055] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", dwFileAttributes=0x80) returned 0 [0186.055] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\translat\\enes\\msb1enes.its"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.055] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.055] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.056] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0186.056] FindClose (in: hFindFile=0x665abb5760 | out: hFindFile=0x665abb5760) returned 1 [0186.056] SetLastError (dwErrCode=0x0) [0186.056] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ENES\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\translat\\enes\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.056] GetLastError () returned 0x5 [0186.056] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.056] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.056] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.056] SetLastError (dwErrCode=0x0) [0186.056] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\translat\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.056] GetLastError () returned 0x5 [0186.056] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.056] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.056] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ENFR\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb42c0 [0186.057] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.057] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.057] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.057] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", dwFileAttributes=0x80) returned 0 [0186.057] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\translat\\enfr\\msb1enfr.its"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.057] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.057] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.057] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0186.057] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0186.058] SetLastError (dwErrCode=0x0) [0186.058] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ENFR\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\translat\\enfr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.058] GetLastError () returned 0x5 [0186.058] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.058] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.058] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.058] SetLastError (dwErrCode=0x0) [0186.058] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\translat\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.058] GetLastError () returned 0x5 [0186.058] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.058] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.058] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ESEN\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4f20 [0186.060] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.060] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.060] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.060] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.060] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS", dwFileAttributes=0x80) returned 0 [0186.060] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\translat\\esen\\msb1esen.its"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.060] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.061] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.061] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.061] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.061] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX", dwFileAttributes=0x80) returned 0 [0186.061] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\translat\\esen\\wt61es.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.061] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.061] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.062] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0186.062] FindClose (in: hFindFile=0x665abb4f20 | out: hFindFile=0x665abb4f20) returned 1 [0186.062] SetLastError (dwErrCode=0x0) [0186.062] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ESEN\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\translat\\esen\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.062] GetLastError () returned 0x5 [0186.062] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.062] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.062] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.062] SetLastError (dwErrCode=0x0) [0186.062] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\translat\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.063] GetLastError () returned 0x5 [0186.063] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.063] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.063] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\FREN\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4d40 [0186.063] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.063] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.063] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.063] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.064] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS", dwFileAttributes=0x80) returned 0 [0186.064] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\translat\\fren\\msb1fren.its"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.065] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.065] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.065] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.065] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.065] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX", dwFileAttributes=0x80) returned 0 [0186.065] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\translat\\fren\\wt61fr.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.065] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.066] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.066] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0186.066] FindClose (in: hFindFile=0x665abb4d40 | out: hFindFile=0x665abb4d40) returned 1 [0186.066] SetLastError (dwErrCode=0x0) [0186.066] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\FREN\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\translat\\fren\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.066] GetLastError () returned 0x5 [0186.066] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.066] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.066] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.066] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.066] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX", dwFileAttributes=0x80) returned 0 [0186.067] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\translat\\msb1cach.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.067] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.067] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.067] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.067] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.067] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0186.067] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0186.067] SetLastError (dwErrCode=0x0) [0186.067] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\translat\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.067] GetLastError () returned 0x5 [0186.067] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0186.067] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.068] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0186.068] SetLastError (dwErrCode=0x0) [0186.068] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.068] GetLastError () returned 0x5 [0186.068] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0186.068] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.068] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb5580 [0186.069] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.069] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.069] SetLastError (dwErrCode=0x0) [0186.069] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\vba\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.069] GetLastError () returned 0x5 [0186.069] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.069] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.069] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\VBA7.1\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb5760 [0186.069] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.069] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.069] SetLastError (dwErrCode=0x0) [0186.069] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\VBA7.1\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\vba\\vba7.1\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.069] GetLastError () returned 0x5 [0186.069] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0) returned 0 [0186.069] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.069] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\VBA7.1\\1033\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665abb5160 [0186.070] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.070] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.070] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.070] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0186.070] FindClose (in: hFindFile=0x665abb5160 | out: hFindFile=0x665abb5160) returned 1 [0186.070] SetLastError (dwErrCode=0x0) [0186.070] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\VBA7.1\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\vba\\vba7.1\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.070] GetLastError () returned 0x5 [0186.070] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0) returned 0 [0186.070] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.070] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.070] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.070] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.070] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0186.070] FindClose (in: hFindFile=0x665abb5760 | out: hFindFile=0x665abb5760) returned 1 [0186.070] SetLastError (dwErrCode=0x0) [0186.070] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\VBA7.1\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\vba\\vba7.1\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.070] GetLastError () returned 0x5 [0186.070] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.070] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.070] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0186.071] FindClose (in: hFindFile=0x665abb5580 | out: hFindFile=0x665abb5580) returned 1 [0186.071] SetLastError (dwErrCode=0x0) [0186.071] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\vba\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.071] GetLastError () returned 0x5 [0186.071] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0186.071] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.071] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0186.071] SetLastError (dwErrCode=0x0) [0186.071] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.071] GetLastError () returned 0x5 [0186.071] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0186.071] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.071] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb45c0 [0186.071] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.071] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.071] SetLastError (dwErrCode=0x0) [0186.071] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\visio shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.072] GetLastError () returned 0x5 [0186.072] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.072] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.072] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\Fonts\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4a40 [0186.075] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.075] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.075] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.075] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\Fonts\\BIGFONT.SHX", dwFileAttributes=0x80) returned 0 [0186.076] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\Fonts\\BIGFONT.SHX" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\visio shared\\fonts\\bigfont.shx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.076] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.076] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.076] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.076] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.076] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\Fonts\\CHINESET.SHX", dwFileAttributes=0x80) returned 0 [0186.077] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\Fonts\\CHINESET.SHX" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\visio shared\\fonts\\chineset.shx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.077] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.077] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.077] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.077] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.078] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\Fonts\\EXTFONT.SHX", dwFileAttributes=0x80) returned 0 [0186.078] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\Fonts\\EXTFONT.SHX" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\visio shared\\fonts\\extfont.shx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.078] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.078] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.079] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.079] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.079] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\Fonts\\GBCBIG.SHX", dwFileAttributes=0x80) returned 0 [0186.079] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\Fonts\\GBCBIG.SHX" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\visio shared\\fonts\\gbcbig.shx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.079] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.079] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.080] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.080] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.080] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\Fonts\\IC-TXT.SHX", dwFileAttributes=0x80) returned 0 [0186.080] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\Fonts\\IC-TXT.SHX" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\visio shared\\fonts\\ic-txt.shx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.080] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.080] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.081] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.081] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.081] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\Fonts\\ICAD.FMP", dwFileAttributes=0x80) returned 0 [0186.082] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\Fonts\\ICAD.FMP" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\visio shared\\fonts\\icad.fmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.082] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.082] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.082] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.082] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.083] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\Fonts\\WHGDTXT.SHX", dwFileAttributes=0x80) returned 0 [0186.083] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\Fonts\\WHGDTXT.SHX" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\visio shared\\fonts\\whgdtxt.shx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.083] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.083] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.083] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.083] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.084] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\Fonts\\WHGTXT.SHX", dwFileAttributes=0x80) returned 0 [0186.084] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\Fonts\\WHGTXT.SHX" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\visio shared\\fonts\\whgtxt.shx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.084] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.084] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.084] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.084] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.084] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\Fonts\\WHTGTXT.SHX", dwFileAttributes=0x80) returned 0 [0186.085] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\Fonts\\WHTGTXT.SHX" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\visio shared\\fonts\\whtgtxt.shx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.085] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.085] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.085] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.085] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.085] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\Fonts\\WHTMTXT.SHX", dwFileAttributes=0x80) returned 0 [0186.085] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\Fonts\\WHTMTXT.SHX" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\visio shared\\fonts\\whtmtxt.shx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.086] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.086] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.086] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0186.086] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0186.087] SetLastError (dwErrCode=0x0) [0186.087] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\Fonts\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\visio shared\\fonts\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.089] GetLastError () returned 0x5 [0186.089] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.089] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.089] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0186.089] FindClose (in: hFindFile=0x665abb45c0 | out: hFindFile=0x665abb45c0) returned 1 [0186.089] SetLastError (dwErrCode=0x0) [0186.089] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\visio shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.090] GetLastError () returned 0x5 [0186.090] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0186.090] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.090] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0186.090] SetLastError (dwErrCode=0x0) [0186.090] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.090] GetLastError () returned 0x5 [0186.090] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0186.090] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.090] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb42c0 [0186.091] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.091] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.091] SetLastError (dwErrCode=0x0) [0186.091] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\web server extensions\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.091] GetLastError () returned 0x5 [0186.091] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.091] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.091] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\16\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4c80 [0186.091] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.091] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.091] SetLastError (dwErrCode=0x0) [0186.091] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\web server extensions\\16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.092] GetLastError () returned 0x5 [0186.092] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0) returned 0 [0186.092] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.092] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\16\\BIN\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665abb5760 [0186.092] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.092] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.092] SetLastError (dwErrCode=0x0) [0186.092] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\16\\BIN\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\web server extensions\\16\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.092] GetLastError () returned 0x5 [0186.092] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0) returned 0 [0186.092] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.092] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\16\\BIN\\1033\\*.*", lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0x665abb53a0 [0186.093] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.093] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.093] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.093] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\16\\BIN\\1033\\FPEXT.MSG", dwFileAttributes=0x80) returned 0 [0186.093] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\16\\BIN\\1033\\FPEXT.MSG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\web server extensions\\16\\bin\\1033\\fpext.msg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.094] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.094] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.094] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0 [0186.094] FindClose (in: hFindFile=0x665abb53a0 | out: hFindFile=0x665abb53a0) returned 1 [0186.094] SetLastError (dwErrCode=0x0) [0186.094] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\16\\BIN\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\web server extensions\\16\\bin\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.094] GetLastError () returned 0x5 [0186.094] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0) returned 0 [0186.094] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.094] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.094] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.094] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0186.094] FindClose (in: hFindFile=0x665abb5760 | out: hFindFile=0x665abb5760) returned 1 [0186.094] SetLastError (dwErrCode=0x0) [0186.094] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\16\\BIN\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\web server extensions\\16\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.095] GetLastError () returned 0x5 [0186.095] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0) returned 0 [0186.095] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.095] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0186.095] FindClose (in: hFindFile=0x665abb4c80 | out: hFindFile=0x665abb4c80) returned 1 [0186.095] SetLastError (dwErrCode=0x0) [0186.095] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\web server extensions\\16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.095] GetLastError () returned 0x5 [0186.095] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.095] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.095] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0186.095] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0186.095] SetLastError (dwErrCode=0x0) [0186.095] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\web server extensions\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.095] GetLastError () returned 0x5 [0186.095] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0186.096] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.096] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0186.096] FindClose (in: hFindFile=0x665abb5460 | out: hFindFile=0x665abb5460) returned 1 [0186.096] SetLastError (dwErrCode=0x0) [0186.096] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.096] GetLastError () returned 0x5 [0186.096] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0186.096] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.096] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.096] SetLastError (dwErrCode=0x0) [0186.096] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.096] GetLastError () returned 0x5 [0186.096] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0186.096] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.096] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\ODBC\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb5160 [0186.099] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0186.099] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0186.099] SetLastError (dwErrCode=0x0) [0186.099] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\ODBC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\odbc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.100] GetLastError () returned 0x5 [0186.100] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0186.100] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.100] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\ODBC\\Data Sources\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4d40 [0186.100] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.100] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0186.100] FindClose (in: hFindFile=0x665abb4d40 | out: hFindFile=0x665abb4d40) returned 1 [0186.100] SetLastError (dwErrCode=0x0) [0186.100] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\ODBC\\Data Sources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\odbc\\data sources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.101] GetLastError () returned 0x5 [0186.101] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0186.101] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.101] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0186.101] FindClose (in: hFindFile=0x665abb5160 | out: hFindFile=0x665abb5160) returned 1 [0186.101] SetLastError (dwErrCode=0x0) [0186.101] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\ODBC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\odbc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.101] GetLastError () returned 0x5 [0186.101] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0186.101] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.101] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.101] SetLastError (dwErrCode=0x0) [0186.101] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.101] GetLastError () returned 0x5 [0186.101] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0186.101] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.101] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb43e0 [0186.102] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0186.102] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0186.102] SetLastError (dwErrCode=0x0) [0186.102] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\system\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.102] GetLastError () returned 0x5 [0186.102] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0186.102] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.102] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\MSMAPI\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb42c0 [0186.102] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.102] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.102] SetLastError (dwErrCode=0x0) [0186.103] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\MSMAPI\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\system\\msmapi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.103] GetLastError () returned 0x5 [0186.103] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.103] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.103] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\MSMAPI\\1033\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4c80 [0186.103] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.103] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.103] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0186.103] FindClose (in: hFindFile=0x665abb4c80 | out: hFindFile=0x665abb4c80) returned 1 [0186.103] SetLastError (dwErrCode=0x0) [0186.103] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\MSMAPI\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\system\\msmapi\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.103] GetLastError () returned 0x5 [0186.103] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.103] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.103] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0186.103] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0186.103] SetLastError (dwErrCode=0x0) [0186.104] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\MSMAPI\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\system\\msmapi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.104] GetLastError () returned 0x5 [0186.104] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0186.104] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.104] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0186.104] SetLastError (dwErrCode=0x0) [0186.104] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\system\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.104] GetLastError () returned 0x5 [0186.104] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0186.104] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.104] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\ole db\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4920 [0186.105] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.105] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.105] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.105] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0186.105] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0186.105] SetLastError (dwErrCode=0x0) [0186.105] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\ole db\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\system\\ole db\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.105] GetLastError () returned 0x5 [0186.105] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0186.105] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.105] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0186.105] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0186.105] SetLastError (dwErrCode=0x0) [0186.105] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\system\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.105] GetLastError () returned 0x5 [0186.105] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0186.106] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.106] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0186.106] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0186.106] SetLastError (dwErrCode=0x0) [0186.106] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.106] GetLastError () returned 0x5 [0186.106] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0186.106] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.106] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0186.106] SetLastError (dwErrCode=0x0) [0186.106] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.106] GetLastError () returned 0x5 [0186.106] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0186.106] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.106] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb53a0 [0186.107] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.108] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.108] SetLastError (dwErrCode=0x0) [0186.108] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.108] GetLastError () returned 0x5 [0186.108] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0186.108] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.108] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb5460 [0186.110] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0186.110] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0186.110] SetLastError (dwErrCode=0x0) [0186.110] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.110] GetLastError () returned 0x5 [0186.110] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0186.110] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.110] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\EQUATION\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb49e0 [0186.111] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.111] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.111] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.111] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.111] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.111] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0186.111] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0186.112] SetLastError (dwErrCode=0x0) [0186.112] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\EQUATION\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\equation\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.115] GetLastError () returned 0x5 [0186.115] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0186.115] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.115] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0186.115] SetLastError (dwErrCode=0x0) [0186.115] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.115] GetLastError () returned 0x5 [0186.115] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0186.115] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.115] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4a40 [0186.117] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.117] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.117] SetLastError (dwErrCode=0x0) [0186.117] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\help\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.117] GetLastError () returned 0x5 [0186.117] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.117] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.117] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1028\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb42c0 [0186.118] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.118] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0186.118] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0186.118] SetLastError (dwErrCode=0x0) [0186.118] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1028\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\help\\1028\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.118] GetLastError () returned 0x5 [0186.118] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.118] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.119] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.119] SetLastError (dwErrCode=0x0) [0186.119] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\help\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.119] GetLastError () returned 0x5 [0186.119] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.119] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.119] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1031\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4c20 [0186.119] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.120] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0186.120] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0186.120] SetLastError (dwErrCode=0x0) [0186.120] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1031\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\help\\1031\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.120] GetLastError () returned 0x5 [0186.120] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.120] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.120] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.120] SetLastError (dwErrCode=0x0) [0186.120] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\help\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.120] GetLastError () returned 0x5 [0186.120] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.120] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.120] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1033\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb42c0 [0186.121] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.121] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0186.121] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0186.121] SetLastError (dwErrCode=0x0) [0186.121] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\help\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.121] GetLastError () returned 0x5 [0186.121] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.121] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.121] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.121] SetLastError (dwErrCode=0x0) [0186.121] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\help\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.121] GetLastError () returned 0x5 [0186.121] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.121] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.121] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1036\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb54c0 [0186.121] FindNextFileW (in: hFindFile=0x665abb54c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.121] FindNextFileW (in: hFindFile=0x665abb54c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0186.122] FindClose (in: hFindFile=0x665abb54c0 | out: hFindFile=0x665abb54c0) returned 1 [0186.124] SetLastError (dwErrCode=0x0) [0186.124] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1036\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\help\\1036\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.124] GetLastError () returned 0x5 [0186.124] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.124] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.124] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.124] SetLastError (dwErrCode=0x0) [0186.124] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\help\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.124] GetLastError () returned 0x5 [0186.124] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.124] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.124] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1040\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4920 [0186.126] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.126] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0186.126] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0186.126] SetLastError (dwErrCode=0x0) [0186.126] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1040\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\help\\1040\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.126] GetLastError () returned 0x5 [0186.126] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.126] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.126] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.126] SetLastError (dwErrCode=0x0) [0186.126] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\help\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.126] GetLastError () returned 0x5 [0186.126] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.127] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.127] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1041\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4920 [0186.127] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.127] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0186.127] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0186.127] SetLastError (dwErrCode=0x0) [0186.127] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1041\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\help\\1041\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.127] GetLastError () returned 0x5 [0186.127] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.127] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.127] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.127] SetLastError (dwErrCode=0x0) [0186.127] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\help\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.127] GetLastError () returned 0x5 [0186.127] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.127] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.128] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1042\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4560 [0186.128] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.128] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0186.128] FindClose (in: hFindFile=0x665abb4560 | out: hFindFile=0x665abb4560) returned 1 [0186.128] SetLastError (dwErrCode=0x0) [0186.128] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1042\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\help\\1042\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.128] GetLastError () returned 0x5 [0186.128] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.128] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.128] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.128] SetLastError (dwErrCode=0x0) [0186.128] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\help\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.128] GetLastError () returned 0x5 [0186.128] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.128] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.128] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1046\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb42c0 [0186.129] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.129] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0186.129] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0186.129] SetLastError (dwErrCode=0x0) [0186.129] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1046\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\help\\1046\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.129] GetLastError () returned 0x5 [0186.129] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.129] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.129] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.129] SetLastError (dwErrCode=0x0) [0186.129] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\help\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.129] GetLastError () returned 0x5 [0186.129] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.129] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.129] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1049\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4440 [0186.130] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.130] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0186.130] FindClose (in: hFindFile=0x665abb4440 | out: hFindFile=0x665abb4440) returned 1 [0186.130] SetLastError (dwErrCode=0x0) [0186.130] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1049\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\help\\1049\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.130] GetLastError () returned 0x5 [0186.130] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.130] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.131] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.131] SetLastError (dwErrCode=0x0) [0186.131] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\help\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.131] GetLastError () returned 0x5 [0186.131] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.131] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.131] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\2052\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb42c0 [0186.132] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.132] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0186.132] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0186.132] SetLastError (dwErrCode=0x0) [0186.132] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\2052\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\help\\2052\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.132] GetLastError () returned 0x5 [0186.132] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.132] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.132] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.132] SetLastError (dwErrCode=0x0) [0186.132] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\help\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.132] GetLastError () returned 0x5 [0186.132] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.132] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.132] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\3082\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4c20 [0186.133] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.133] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0186.133] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0186.133] SetLastError (dwErrCode=0x0) [0186.133] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\3082\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\help\\3082\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.133] GetLastError () returned 0x5 [0186.133] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.133] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.133] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0186.133] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0186.133] SetLastError (dwErrCode=0x0) [0186.133] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\help\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.133] GetLastError () returned 0x5 [0186.133] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0186.134] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.134] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0186.134] SetLastError (dwErrCode=0x0) [0186.134] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.134] GetLastError () returned 0x5 [0186.134] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0186.134] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.134] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb49e0 [0186.135] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.137] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.137] SetLastError (dwErrCode=0x0) [0186.137] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.137] GetLastError () returned 0x5 [0186.137] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.137] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.137] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\1033\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb43e0 [0186.138] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.138] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.138] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.138] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0186.138] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0186.138] SetLastError (dwErrCode=0x0) [0186.138] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\office16\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.138] GetLastError () returned 0x5 [0186.138] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.138] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.138] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.138] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.138] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.138] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.138] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.138] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.138] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.138] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.138] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.138] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.138] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.138] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.138] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.138] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.138] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.138] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.138] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.138] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.138] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.139] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.139] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.139] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.139] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.139] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.139] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.139] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.139] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.139] SetLastError (dwErrCode=0x0) [0186.139] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.139] GetLastError () returned 0x5 [0186.139] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.139] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.139] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\Cultures\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4a40 [0186.139] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.139] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.139] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.140] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\Cultures\\OFFICE.ODF", dwFileAttributes=0x80) returned 0 [0186.141] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\Cultures\\OFFICE.ODF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\office16\\cultures\\office.odf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.142] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.142] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.142] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0186.142] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0186.142] SetLastError (dwErrCode=0x0) [0186.142] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\Cultures\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\office16\\cultures\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.142] GetLastError () returned 0x5 [0186.142] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.142] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.142] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.142] SetLastError (dwErrCode=0x0) [0186.142] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.143] GetLastError () returned 0x5 [0186.143] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.143] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.143] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\en-us\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb5160 [0186.143] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.143] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.144] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0186.144] FindClose (in: hFindFile=0x665abb5160 | out: hFindFile=0x665abb5160) returned 1 [0186.144] SetLastError (dwErrCode=0x0) [0186.144] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\en-us\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\office16\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.144] GetLastError () returned 0x5 [0186.144] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.144] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.144] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.144] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.144] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.144] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.144] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.144] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.144] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.144] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.144] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.144] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.144] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.144] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.144] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.144] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.144] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.144] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.144] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.144] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.144] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.144] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.144] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.144] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0186.144] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0186.145] SetLastError (dwErrCode=0x0) [0186.145] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.145] GetLastError () returned 0x5 [0186.145] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0186.145] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.145] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0186.145] SetLastError (dwErrCode=0x0) [0186.145] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.145] GetLastError () returned 0x5 [0186.145] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0186.145] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.145] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Portal\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4f20 [0186.145] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.145] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.145] SetLastError (dwErrCode=0x0) [0186.145] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Portal\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\portal\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.146] GetLastError () returned 0x5 [0186.146] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.146] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.146] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Portal\\1033\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb5520 [0186.146] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.146] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.146] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0186.146] FindClose (in: hFindFile=0x665abb5520 | out: hFindFile=0x665abb5520) returned 1 [0186.147] SetLastError (dwErrCode=0x0) [0186.147] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Portal\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\portal\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.147] GetLastError () returned 0x5 [0186.147] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.147] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.147] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.147] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0186.147] FindClose (in: hFindFile=0x665abb4f20 | out: hFindFile=0x665abb4f20) returned 1 [0186.147] SetLastError (dwErrCode=0x0) [0186.147] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Portal\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\portal\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.147] GetLastError () returned 0x5 [0186.147] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0186.147] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.147] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0186.147] SetLastError (dwErrCode=0x0) [0186.147] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.147] GetLastError () returned 0x5 [0186.148] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0186.148] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.148] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4920 [0186.148] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.148] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.148] SetLastError (dwErrCode=0x0) [0186.148] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\vba\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.148] GetLastError () returned 0x5 [0186.148] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.149] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.149] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA6\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb54c0 [0186.151] FindNextFileW (in: hFindFile=0x665abb54c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.151] FindNextFileW (in: hFindFile=0x665abb54c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.151] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA6\\VBE6EXT.OLB", dwFileAttributes=0x80) returned 0 [0186.153] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA6\\VBE6EXT.OLB" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\vba\\vba6\\vbe6ext.olb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.154] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.154] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.154] FindNextFileW (in: hFindFile=0x665abb54c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0186.154] FindClose (in: hFindFile=0x665abb54c0 | out: hFindFile=0x665abb54c0) returned 1 [0186.154] SetLastError (dwErrCode=0x0) [0186.154] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA6\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\vba\\vba6\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.154] GetLastError () returned 0x5 [0186.154] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.154] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.155] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.155] SetLastError (dwErrCode=0x0) [0186.155] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\vba\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.155] GetLastError () returned 0x5 [0186.155] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.155] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.155] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb54c0 [0186.155] FindNextFileW (in: hFindFile=0x665abb54c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.155] FindNextFileW (in: hFindFile=0x665abb54c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.155] SetLastError (dwErrCode=0x0) [0186.155] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\vba\\vba7.1\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.155] GetLastError () returned 0x5 [0186.155] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0) returned 0 [0186.155] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.156] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\1033\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665abb4c20 [0186.157] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.157] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.157] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.158] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\1033\\FM20.CHM", dwFileAttributes=0x80) returned 0 [0186.158] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\1033\\FM20.CHM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\vba\\vba7.1\\1033\\fm20.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.158] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.158] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.159] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.159] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\1033\\VBCN6.CHM", dwFileAttributes=0x80) returned 0 [0186.160] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\1033\\VBCN6.CHM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\vba\\vba7.1\\1033\\vbcn6.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.160] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.160] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.160] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.160] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\1033\\VBENDF98.CHM", dwFileAttributes=0x80) returned 0 [0186.161] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\1033\\VBENDF98.CHM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\vba\\vba7.1\\1033\\vbendf98.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.161] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.161] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.162] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.162] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\1033\\VBHW6.CHM", dwFileAttributes=0x80) returned 0 [0186.162] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\1033\\VBHW6.CHM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\vba\\vba7.1\\1033\\vbhw6.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.162] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.162] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.163] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.163] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\1033\\VBLR6.CHM", dwFileAttributes=0x80) returned 0 [0186.163] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\1033\\VBLR6.CHM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\vba\\vba7.1\\1033\\vblr6.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.163] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.164] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.164] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.164] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.164] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\1033\\VBOB6.CHM", dwFileAttributes=0x80) returned 0 [0186.165] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\1033\\VBOB6.CHM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\vba\\vba7.1\\1033\\vbob6.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.165] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.165] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.165] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.166] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.166] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\1033\\VBUI6.CHM", dwFileAttributes=0x80) returned 0 [0186.166] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\1033\\VBUI6.CHM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\vba\\vba7.1\\1033\\vbui6.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.166] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.166] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.167] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0186.167] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0186.167] SetLastError (dwErrCode=0x0) [0186.167] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\vba\\vba7.1\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.171] GetLastError () returned 0x5 [0186.171] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0) returned 0 [0186.171] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.171] FindNextFileW (in: hFindFile=0x665abb54c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0186.171] FindClose (in: hFindFile=0x665abb54c0 | out: hFindFile=0x665abb54c0) returned 1 [0186.171] SetLastError (dwErrCode=0x0) [0186.171] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\vba\\vba7.1\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.171] GetLastError () returned 0x5 [0186.171] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.171] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.171] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0186.171] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0186.172] SetLastError (dwErrCode=0x0) [0186.172] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\vba\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.172] GetLastError () returned 0x5 [0186.172] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0186.172] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.172] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0186.172] SetLastError (dwErrCode=0x0) [0186.172] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.172] GetLastError () returned 0x5 [0186.172] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0186.172] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.172] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Web Server Extensions\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4c20 [0186.173] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.173] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.173] SetLastError (dwErrCode=0x0) [0186.173] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Web Server Extensions\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\web server extensions\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.173] GetLastError () returned 0x5 [0186.173] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.173] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.173] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Web Server Extensions\\16\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4920 [0186.174] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.174] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.174] SetLastError (dwErrCode=0x0) [0186.174] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Web Server Extensions\\16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\web server extensions\\16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.174] GetLastError () returned 0x5 [0186.174] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0) returned 0 [0186.174] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.174] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Web Server Extensions\\16\\BIN\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665abb5760 [0186.174] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.174] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.174] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.174] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0186.175] FindClose (in: hFindFile=0x665abb5760 | out: hFindFile=0x665abb5760) returned 1 [0186.175] SetLastError (dwErrCode=0x0) [0186.175] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Web Server Extensions\\16\\BIN\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\web server extensions\\16\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.175] GetLastError () returned 0x5 [0186.175] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0) returned 0 [0186.175] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.175] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0186.175] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0186.175] SetLastError (dwErrCode=0x0) [0186.175] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Web Server Extensions\\16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\web server extensions\\16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.175] GetLastError () returned 0x5 [0186.175] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.175] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.175] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0186.176] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0186.176] SetLastError (dwErrCode=0x0) [0186.176] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Web Server Extensions\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\web server extensions\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.176] GetLastError () returned 0x5 [0186.176] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0186.176] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.176] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0186.176] FindClose (in: hFindFile=0x665abb5460 | out: hFindFile=0x665abb5460) returned 1 [0186.176] SetLastError (dwErrCode=0x0) [0186.176] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.176] GetLastError () returned 0x5 [0186.176] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0186.176] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.176] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.176] SetLastError (dwErrCode=0x0) [0186.177] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.177] GetLastError () returned 0x5 [0186.177] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0186.177] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.177] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\System\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4f20 [0186.178] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0186.178] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0186.178] SetLastError (dwErrCode=0x0) [0186.178] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\System\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\system\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.178] GetLastError () returned 0x5 [0186.178] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0186.178] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.178] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\System\\ole db\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb57c0 [0186.178] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.178] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.178] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.178] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0186.178] FindClose (in: hFindFile=0x665abb57c0 | out: hFindFile=0x665abb57c0) returned 1 [0186.178] SetLastError (dwErrCode=0x0) [0186.178] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\System\\ole db\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\system\\ole db\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.179] GetLastError () returned 0x5 [0186.179] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0186.179] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.179] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0186.179] FindClose (in: hFindFile=0x665abb4f20 | out: hFindFile=0x665abb4f20) returned 1 [0186.179] SetLastError (dwErrCode=0x0) [0186.179] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\System\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\system\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.179] GetLastError () returned 0x5 [0186.179] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0186.179] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.179] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0186.179] FindClose (in: hFindFile=0x665abb53a0 | out: hFindFile=0x665abb53a0) returned 1 [0186.179] SetLastError (dwErrCode=0x0) [0186.179] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.180] GetLastError () returned 0x5 [0186.180] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0186.180] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.180] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0186.180] SetLastError (dwErrCode=0x0) [0186.180] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.180] GetLastError () returned 0x5 [0186.180] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0186.180] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.180] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb43e0 [0186.181] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.181] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.181] SetLastError (dwErrCode=0x0) [0186.181] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.181] GetLastError () returned 0x5 [0186.181] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0186.181] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.181] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb5760 [0186.182] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0186.182] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0186.182] SetLastError (dwErrCode=0x0) [0186.182] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.182] GetLastError () returned 0x5 [0186.182] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0186.182] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.183] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4f20 [0186.183] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.183] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.183] SetLastError (dwErrCode=0x0) [0186.183] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.184] GetLastError () returned 0x5 [0186.184] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.184] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.184] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\110\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb42c0 [0186.185] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.185] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.185] SetLastError (dwErrCode=0x0) [0186.185] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\110\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\110\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.185] GetLastError () returned 0x5 [0186.185] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0) returned 0 [0186.186] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.186] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\110\\Cartridges\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665abb5460 [0186.186] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.186] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0186.186] FindClose (in: hFindFile=0x665abb5460 | out: hFindFile=0x665abb5460) returned 1 [0186.186] SetLastError (dwErrCode=0x0) [0186.186] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\110\\Cartridges\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\110\\cartridges\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.186] GetLastError () returned 0x5 [0186.186] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0) returned 0 [0186.186] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.186] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.186] SetLastError (dwErrCode=0x0) [0186.186] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\110\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\110\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.187] GetLastError () returned 0x5 [0186.187] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0) returned 0 [0186.187] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.187] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\110\\Resources\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665abb4920 [0186.187] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.187] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.187] SetLastError (dwErrCode=0x0) [0186.187] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\110\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\110\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.188] GetLastError () returned 0x5 [0186.188] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0) returned 0 [0186.188] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.188] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\110\\Resources\\1033\\*.*", lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0x665abb4440 [0186.188] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.188] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0 [0186.188] FindClose (in: hFindFile=0x665abb4440 | out: hFindFile=0x665abb4440) returned 1 [0186.188] SetLastError (dwErrCode=0x0) [0186.188] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\110\\Resources\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\110\\resources\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.188] GetLastError () returned 0x5 [0186.188] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0) returned 0 [0186.188] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.188] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0186.188] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0186.188] SetLastError (dwErrCode=0x0) [0186.189] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\110\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\110\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.189] GetLastError () returned 0x5 [0186.189] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0) returned 0 [0186.189] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.189] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0186.189] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0186.189] SetLastError (dwErrCode=0x0) [0186.189] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\110\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\110\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.189] GetLastError () returned 0x5 [0186.189] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.189] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.189] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.189] SetLastError (dwErrCode=0x0) [0186.189] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.190] GetLastError () returned 0x5 [0186.190] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.190] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.190] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb5040 [0186.191] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.191] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.191] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.191] SetLastError (dwErrCode=0x0) [0186.191] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\140\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.192] GetLastError () returned 0x5 [0186.192] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0) returned 0 [0186.192] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.192] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665abb45c0 [0186.194] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.194] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.194] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.195] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\as80.xsl", dwFileAttributes=0x80) returned 0 [0186.196] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\as80.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\140\\cartridges\\as80.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.196] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.196] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.196] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.196] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.196] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\as90.xsl", dwFileAttributes=0x80) returned 0 [0186.197] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\as90.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\140\\cartridges\\as90.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.197] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.197] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.197] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.197] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.198] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\db2v0801.xsl", dwFileAttributes=0x80) returned 0 [0186.198] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\db2v0801.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\140\\cartridges\\db2v0801.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.199] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.199] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.199] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.199] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.199] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\hive.xsl", dwFileAttributes=0x80) returned 0 [0186.200] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\hive.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\140\\cartridges\\hive.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.200] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.200] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.200] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.200] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.201] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\Informix.xsl", dwFileAttributes=0x80) returned 0 [0186.201] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\Informix.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\140\\cartridges\\informix.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.201] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.201] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.202] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.202] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.202] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\msjet.xsl", dwFileAttributes=0x80) returned 0 [0186.202] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\msjet.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\140\\cartridges\\msjet.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.202] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.202] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.210] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.210] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.211] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\msql.xsl", dwFileAttributes=0x80) returned 0 [0186.211] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\msql.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\140\\cartridges\\msql.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.211] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.212] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.212] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.212] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.212] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\orcl7.xsl", dwFileAttributes=0x80) returned 0 [0186.214] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\orcl7.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\140\\cartridges\\orcl7.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.214] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.214] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.214] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.214] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.215] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\sql120.xsl", dwFileAttributes=0x80) returned 0 [0186.215] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\sql120.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\140\\cartridges\\sql120.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.215] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.215] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.215] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.215] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.216] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\sql2000.xsl", dwFileAttributes=0x80) returned 0 [0186.216] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\sql2000.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\140\\cartridges\\sql2000.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.216] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.216] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.216] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.216] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.217] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\sql70.xsl", dwFileAttributes=0x80) returned 0 [0186.218] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\sql70.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\140\\cartridges\\sql70.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.218] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.218] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.218] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.218] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.219] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\sql90.xsl", dwFileAttributes=0x80) returned 0 [0186.220] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\sql90.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\140\\cartridges\\sql90.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.221] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.221] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.221] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.221] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.221] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\sqlpdw.xsl", dwFileAttributes=0x80) returned 0 [0186.222] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\sqlpdw.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\140\\cartridges\\sqlpdw.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.222] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.222] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.222] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.222] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.222] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\Sybase.xsl", dwFileAttributes=0x80) returned 0 [0186.223] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\Sybase.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\140\\cartridges\\sybase.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.223] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.223] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.223] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.223] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.224] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\trdtv2r41.xsl", dwFileAttributes=0x80) returned 0 [0186.224] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\trdtv2r41.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\140\\cartridges\\trdtv2r41.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.224] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.225] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.225] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0186.225] FindClose (in: hFindFile=0x665abb45c0 | out: hFindFile=0x665abb45c0) returned 1 [0186.225] SetLastError (dwErrCode=0x0) [0186.225] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\140\\cartridges\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.228] GetLastError () returned 0x5 [0186.228] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0) returned 0 [0186.228] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.228] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.228] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.228] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.228] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.228] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.228] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.228] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.228] SetLastError (dwErrCode=0x0) [0186.228] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\140\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.229] GetLastError () returned 0x5 [0186.229] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0) returned 0 [0186.229] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.229] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665abb4f80 [0186.229] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.229] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.229] SetLastError (dwErrCode=0x0) [0186.229] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\140\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.229] GetLastError () returned 0x5 [0186.229] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0) returned 0 [0186.229] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.229] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\1033\\*.*", lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0x665abb42c0 [0186.230] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.230] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.230] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.230] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\1033\\msmdsrv.rll", dwFileAttributes=0x80) returned 0 [0186.231] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\1033\\msmdsrv.rll" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\140\\resources\\1033\\msmdsrv.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.231] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.231] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.231] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.231] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.232] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\1033\\msmdsrvi.rll", dwFileAttributes=0x80) returned 0 [0186.232] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\1033\\msmdsrvi.rll" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\140\\resources\\1033\\msmdsrvi.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.232] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.232] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.233] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.233] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.233] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\1033\\msolui.rll", dwFileAttributes=0x80) returned 0 [0186.234] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\1033\\msolui.rll" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\140\\resources\\1033\\msolui.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.234] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.234] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.234] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0 [0186.234] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0186.234] SetLastError (dwErrCode=0x0) [0186.234] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\140\\resources\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.235] GetLastError () returned 0x5 [0186.235] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0) returned 0 [0186.235] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.235] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0186.235] FindClose (in: hFindFile=0x665abb4f80 | out: hFindFile=0x665abb4f80) returned 1 [0186.235] SetLastError (dwErrCode=0x0) [0186.235] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\140\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.235] GetLastError () returned 0x5 [0186.235] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0) returned 0 [0186.235] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.235] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.235] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.235] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0186.235] FindClose (in: hFindFile=0x665abb5040 | out: hFindFile=0x665abb5040) returned 1 [0186.235] SetLastError (dwErrCode=0x0) [0186.235] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\140\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.235] GetLastError () returned 0x5 [0186.236] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.236] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.236] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0186.236] FindClose (in: hFindFile=0x665abb4f20 | out: hFindFile=0x665abb4f20) returned 1 [0186.236] SetLastError (dwErrCode=0x0) [0186.236] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.236] GetLastError () returned 0x5 [0186.236] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0186.236] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.236] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0186.236] FindClose (in: hFindFile=0x665abb5760 | out: hFindFile=0x665abb5760) returned 1 [0186.236] SetLastError (dwErrCode=0x0) [0186.236] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft analysis services\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.236] GetLastError () returned 0x5 [0186.236] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0186.236] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.236] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.236] SetLastError (dwErrCode=0x0) [0186.236] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.237] GetLastError () returned 0x5 [0186.237] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0186.237] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.237] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Office\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb42c0 [0186.237] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0186.237] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0186.237] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0186.237] SetLastError (dwErrCode=0x0) [0186.237] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Office\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft office\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.237] GetLastError () returned 0x5 [0186.237] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0186.237] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.237] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.237] SetLastError (dwErrCode=0x0) [0186.237] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.238] GetLastError () returned 0x5 [0186.238] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0186.238] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.238] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb53a0 [0186.238] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0186.238] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0186.238] SetLastError (dwErrCode=0x0) [0186.238] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft sql server\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.239] GetLastError () returned 0x5 [0186.239] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0186.239] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.239] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\110\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4920 [0186.239] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.239] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.239] SetLastError (dwErrCode=0x0) [0186.239] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\110\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft sql server\\110\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.239] GetLastError () returned 0x5 [0186.239] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.239] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.239] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\110\\Shared\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb5160 [0186.239] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.239] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0186.239] FindClose (in: hFindFile=0x665abb5160 | out: hFindFile=0x665abb5160) returned 1 [0186.239] SetLastError (dwErrCode=0x0) [0186.239] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\110\\Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft sql server\\110\\shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.240] GetLastError () returned 0x5 [0186.240] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.240] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.240] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0186.240] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0186.240] SetLastError (dwErrCode=0x0) [0186.240] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\110\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft sql server\\110\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.240] GetLastError () returned 0x5 [0186.240] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0186.240] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.240] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0186.240] SetLastError (dwErrCode=0x0) [0186.240] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft sql server\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.240] GetLastError () returned 0x5 [0186.240] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0186.240] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.240] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\130\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4f20 [0186.241] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.241] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.241] SetLastError (dwErrCode=0x0) [0186.241] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\130\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft sql server\\130\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.241] GetLastError () returned 0x5 [0186.241] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.241] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.241] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\130\\Shared\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4c20 [0186.242] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.242] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.242] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0186.242] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0186.242] SetLastError (dwErrCode=0x0) [0186.242] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\130\\Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft sql server\\130\\shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.242] GetLastError () returned 0x5 [0186.242] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.242] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.242] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0186.242] FindClose (in: hFindFile=0x665abb4f20 | out: hFindFile=0x665abb4f20) returned 1 [0186.242] SetLastError (dwErrCode=0x0) [0186.242] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\130\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft sql server\\130\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.242] GetLastError () returned 0x5 [0186.242] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0186.242] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.242] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0186.242] SetLastError (dwErrCode=0x0) [0186.243] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft sql server\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.243] GetLastError () returned 0x5 [0186.243] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0186.243] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.243] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\140\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb5760 [0186.243] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.243] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.243] SetLastError (dwErrCode=0x0) [0186.243] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\140\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft sql server\\140\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.243] GetLastError () returned 0x5 [0186.243] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.243] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.243] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\140\\Shared\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb5160 [0186.243] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.243] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0186.244] FindClose (in: hFindFile=0x665abb5160 | out: hFindFile=0x665abb5160) returned 1 [0186.244] SetLastError (dwErrCode=0x0) [0186.244] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\140\\Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft sql server\\140\\shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.244] GetLastError () returned 0x5 [0186.244] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.244] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.244] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0186.244] FindClose (in: hFindFile=0x665abb5760 | out: hFindFile=0x665abb5760) returned 1 [0186.244] SetLastError (dwErrCode=0x0) [0186.244] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\140\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft sql server\\140\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.244] GetLastError () returned 0x5 [0186.244] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0186.244] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.244] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0186.244] FindClose (in: hFindFile=0x665abb53a0 | out: hFindFile=0x665abb53a0) returned 1 [0186.244] SetLastError (dwErrCode=0x0) [0186.244] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft sql server\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.245] GetLastError () returned 0x5 [0186.245] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0186.245] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.245] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.245] SetLastError (dwErrCode=0x0) [0186.245] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.245] GetLastError () returned 0x5 [0186.245] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0186.245] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.245] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft.NET\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4440 [0186.246] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0186.246] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0186.246] SetLastError (dwErrCode=0x0) [0186.246] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft.NET\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft.net\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.246] GetLastError () returned 0x5 [0186.246] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0186.246] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.246] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft.NET\\ADOMD.NET\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb42c0 [0186.246] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.246] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.246] SetLastError (dwErrCode=0x0) [0186.246] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft.NET\\ADOMD.NET\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft.net\\adomd.net\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.247] GetLastError () returned 0x5 [0186.247] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.247] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.247] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft.NET\\ADOMD.NET\\110\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4f20 [0186.247] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.247] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0186.247] FindClose (in: hFindFile=0x665abb4f20 | out: hFindFile=0x665abb4f20) returned 1 [0186.247] SetLastError (dwErrCode=0x0) [0186.247] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft.NET\\ADOMD.NET\\110\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft.net\\adomd.net\\110\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.247] GetLastError () returned 0x5 [0186.247] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.247] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.247] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.247] SetLastError (dwErrCode=0x0) [0186.247] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft.NET\\ADOMD.NET\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft.net\\adomd.net\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.247] GetLastError () returned 0x5 [0186.247] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.248] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.248] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft.NET\\ADOMD.NET\\130\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb53a0 [0186.248] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.248] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.248] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0186.248] FindClose (in: hFindFile=0x665abb53a0 | out: hFindFile=0x665abb53a0) returned 1 [0186.248] SetLastError (dwErrCode=0x0) [0186.248] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft.NET\\ADOMD.NET\\130\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft.net\\adomd.net\\130\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.248] GetLastError () returned 0x5 [0186.248] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.248] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.248] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.248] SetLastError (dwErrCode=0x0) [0186.248] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft.NET\\ADOMD.NET\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft.net\\adomd.net\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.248] GetLastError () returned 0x5 [0186.248] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.248] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.249] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft.NET\\ADOMD.NET\\140\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb53a0 [0186.249] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.249] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0186.249] FindClose (in: hFindFile=0x665abb53a0 | out: hFindFile=0x665abb53a0) returned 1 [0186.249] SetLastError (dwErrCode=0x0) [0186.249] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft.NET\\ADOMD.NET\\140\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft.net\\adomd.net\\140\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.249] GetLastError () returned 0x5 [0186.249] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.249] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.249] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0186.249] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0186.249] SetLastError (dwErrCode=0x0) [0186.249] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft.NET\\ADOMD.NET\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft.net\\adomd.net\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.250] GetLastError () returned 0x5 [0186.250] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0186.250] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.250] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0186.250] FindClose (in: hFindFile=0x665abb4440 | out: hFindFile=0x665abb4440) returned 1 [0186.250] SetLastError (dwErrCode=0x0) [0186.250] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft.NET\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\microsoft.net\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.250] GetLastError () returned 0x5 [0186.250] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0186.250] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.250] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0186.250] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0186.250] SetLastError (dwErrCode=0x0) [0186.250] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx64\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.251] GetLastError () returned 0x5 [0186.251] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0186.251] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.251] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0186.251] SetLastError (dwErrCode=0x0) [0186.251] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.251] GetLastError () returned 0x5 [0186.251] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0186.251] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.251] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4a40 [0186.253] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.253] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.253] SetLastError (dwErrCode=0x0) [0186.253] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.253] GetLastError () returned 0x5 [0186.253] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0186.253] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.253] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4c20 [0186.254] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0186.254] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0186.254] SetLastError (dwErrCode=0x0) [0186.254] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.255] GetLastError () returned 0x5 [0186.255] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0186.255] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.255] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4920 [0186.255] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.255] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.255] SetLastError (dwErrCode=0x0) [0186.255] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.255] GetLastError () returned 0x5 [0186.255] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.255] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.255] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\110\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb49e0 [0186.256] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.256] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.256] SetLastError (dwErrCode=0x0) [0186.256] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\110\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\110\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.257] GetLastError () returned 0x5 [0186.257] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0) returned 0 [0186.257] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.257] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\110\\Cartridges\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665abb4c80 [0186.257] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.257] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0186.257] FindClose (in: hFindFile=0x665abb4c80 | out: hFindFile=0x665abb4c80) returned 1 [0186.257] SetLastError (dwErrCode=0x0) [0186.257] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\110\\Cartridges\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\110\\cartridges\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.257] GetLastError () returned 0x5 [0186.257] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0) returned 0 [0186.257] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.257] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.257] SetLastError (dwErrCode=0x0) [0186.257] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\110\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\110\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.258] GetLastError () returned 0x5 [0186.258] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0) returned 0 [0186.258] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.258] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\110\\Resources\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665abb4c80 [0186.258] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.258] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.258] SetLastError (dwErrCode=0x0) [0186.258] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\110\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\110\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.259] GetLastError () returned 0x5 [0186.259] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0) returned 0 [0186.259] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.259] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\110\\Resources\\1033\\*.*", lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0x665abb4d40 [0186.259] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.259] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0 [0186.259] FindClose (in: hFindFile=0x665abb4d40 | out: hFindFile=0x665abb4d40) returned 1 [0186.259] SetLastError (dwErrCode=0x0) [0186.259] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\110\\Resources\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\110\\resources\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.259] GetLastError () returned 0x5 [0186.259] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0) returned 0 [0186.259] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.259] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0186.259] FindClose (in: hFindFile=0x665abb4c80 | out: hFindFile=0x665abb4c80) returned 1 [0186.259] SetLastError (dwErrCode=0x0) [0186.259] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\110\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\110\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.260] GetLastError () returned 0x5 [0186.260] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0) returned 0 [0186.260] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.260] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0186.260] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0186.260] SetLastError (dwErrCode=0x0) [0186.260] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\110\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\110\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.260] GetLastError () returned 0x5 [0186.260] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.260] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.260] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.260] SetLastError (dwErrCode=0x0) [0186.260] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.260] GetLastError () returned 0x5 [0186.260] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.260] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.260] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb5040 [0186.262] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.262] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.262] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.262] SetLastError (dwErrCode=0x0) [0186.262] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\140\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.263] GetLastError () returned 0x5 [0186.263] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0) returned 0 [0186.263] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.263] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665abb4560 [0186.264] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.264] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.264] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.264] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\as80.xsl", dwFileAttributes=0x80) returned 0 [0186.266] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\as80.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\140\\cartridges\\as80.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.266] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.266] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.266] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.266] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.267] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\as90.xsl", dwFileAttributes=0x80) returned 0 [0186.268] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\as90.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\140\\cartridges\\as90.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.268] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.268] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.269] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.269] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.269] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\db2v0801.xsl", dwFileAttributes=0x80) returned 0 [0186.270] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\db2v0801.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\140\\cartridges\\db2v0801.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.270] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.270] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.271] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.271] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.271] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\hive.xsl", dwFileAttributes=0x80) returned 0 [0186.272] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\hive.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\140\\cartridges\\hive.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.272] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.272] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.272] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.272] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.273] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\Informix.xsl", dwFileAttributes=0x80) returned 0 [0186.273] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\Informix.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\140\\cartridges\\informix.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.274] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.274] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.274] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.274] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.274] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\msjet.xsl", dwFileAttributes=0x80) returned 0 [0186.274] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\msjet.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\140\\cartridges\\msjet.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.275] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.275] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.275] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.275] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.275] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\msql.xsl", dwFileAttributes=0x80) returned 0 [0186.275] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\msql.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\140\\cartridges\\msql.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.275] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.275] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.276] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.276] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.276] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\orcl7.xsl", dwFileAttributes=0x80) returned 0 [0186.276] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\orcl7.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\140\\cartridges\\orcl7.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.276] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.276] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.277] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.277] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.277] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\sql120.xsl", dwFileAttributes=0x80) returned 0 [0186.277] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\sql120.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\140\\cartridges\\sql120.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.278] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.278] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.278] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.278] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.278] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\sql2000.xsl", dwFileAttributes=0x80) returned 0 [0186.279] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\sql2000.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\140\\cartridges\\sql2000.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.279] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.279] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.279] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.279] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.279] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\sql70.xsl", dwFileAttributes=0x80) returned 0 [0186.282] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\sql70.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\140\\cartridges\\sql70.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.282] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.282] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.282] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.282] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.283] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\sql90.xsl", dwFileAttributes=0x80) returned 0 [0186.283] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\sql90.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\140\\cartridges\\sql90.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.283] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.283] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.283] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.283] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.284] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\sqlpdw.xsl", dwFileAttributes=0x80) returned 0 [0186.284] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\sqlpdw.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\140\\cartridges\\sqlpdw.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.284] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.284] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.284] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.284] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.285] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\Sybase.xsl", dwFileAttributes=0x80) returned 0 [0186.286] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\Sybase.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\140\\cartridges\\sybase.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.286] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.286] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.287] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.287] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.287] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\trdtv2r41.xsl", dwFileAttributes=0x80) returned 0 [0186.287] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\trdtv2r41.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\140\\cartridges\\trdtv2r41.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.287] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.287] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.288] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0186.288] FindClose (in: hFindFile=0x665abb4560 | out: hFindFile=0x665abb4560) returned 1 [0186.288] SetLastError (dwErrCode=0x0) [0186.288] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\140\\cartridges\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.291] GetLastError () returned 0x5 [0186.291] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0) returned 0 [0186.291] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.291] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.291] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.291] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.291] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.291] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.291] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.291] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.291] SetLastError (dwErrCode=0x0) [0186.291] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\140\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.291] GetLastError () returned 0x5 [0186.291] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0) returned 0 [0186.292] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.292] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665abb4f20 [0186.292] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.292] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.292] SetLastError (dwErrCode=0x0) [0186.292] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\140\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.292] GetLastError () returned 0x5 [0186.292] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0) returned 0 [0186.292] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.292] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\1033\\*.*", lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0x665abb5520 [0186.292] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.292] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.292] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.293] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\1033\\msmdsrv.rll", dwFileAttributes=0x80) returned 0 [0186.293] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\1033\\msmdsrv.rll" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\140\\resources\\1033\\msmdsrv.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.294] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.294] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.294] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.294] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.294] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\1033\\msmdsrvi.rll", dwFileAttributes=0x80) returned 0 [0186.294] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\1033\\msmdsrvi.rll" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\140\\resources\\1033\\msmdsrvi.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.295] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.295] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.295] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.295] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.295] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\1033\\msolui.rll", dwFileAttributes=0x80) returned 0 [0186.295] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\1033\\msolui.rll" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\140\\resources\\1033\\msolui.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.296] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.296] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.296] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0 [0186.296] FindClose (in: hFindFile=0x665abb5520 | out: hFindFile=0x665abb5520) returned 1 [0186.296] SetLastError (dwErrCode=0x0) [0186.296] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\140\\resources\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.296] GetLastError () returned 0x5 [0186.296] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0) returned 0 [0186.296] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.297] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0186.297] FindClose (in: hFindFile=0x665abb4f20 | out: hFindFile=0x665abb4f20) returned 1 [0186.297] SetLastError (dwErrCode=0x0) [0186.297] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\140\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.297] GetLastError () returned 0x5 [0186.297] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0) returned 0 [0186.297] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.297] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.297] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.297] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0186.297] FindClose (in: hFindFile=0x665abb5040 | out: hFindFile=0x665abb5040) returned 1 [0186.297] SetLastError (dwErrCode=0x0) [0186.297] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\140\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.298] GetLastError () returned 0x5 [0186.298] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.298] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.298] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0186.298] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0186.298] SetLastError (dwErrCode=0x0) [0186.298] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.298] GetLastError () returned 0x5 [0186.298] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0186.298] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.298] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0186.298] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0186.298] SetLastError (dwErrCode=0x0) [0186.298] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft analysis services\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.298] GetLastError () returned 0x5 [0186.298] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0186.298] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.299] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.299] SetLastError (dwErrCode=0x0) [0186.299] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.299] GetLastError () returned 0x5 [0186.299] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0186.299] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.299] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb53a0 [0186.300] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0186.300] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0186.300] SetLastError (dwErrCode=0x0) [0186.300] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft office\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.300] GetLastError () returned 0x5 [0186.300] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0186.300] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.300] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4c20 [0186.302] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.303] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.303] SetLastError (dwErrCode=0x0) [0186.303] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft office\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.303] GetLastError () returned 0x5 [0186.303] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.303] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.303] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\1033\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb43e0 [0186.305] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.305] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.305] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.305] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.305] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.305] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.305] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.305] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.306] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\1033\\OWSHLP10.CHM", dwFileAttributes=0x80) returned 0 [0186.306] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\1033\\OWSHLP10.CHM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft office\\office16\\1033\\owshlp10.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.306] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.306] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.306] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.306] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.306] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.306] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.307] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\1033\\VBAOWS10.CHM", dwFileAttributes=0x80) returned 0 [0186.307] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\1033\\VBAOWS10.CHM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft office\\office16\\1033\\vbaows10.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.307] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.307] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.307] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.307] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0186.307] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0186.308] SetLastError (dwErrCode=0x0) [0186.308] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft office\\office16\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.310] GetLastError () returned 0x5 [0186.310] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.310] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.311] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.311] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.311] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.311] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.311] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.311] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.311] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.311] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.311] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.311] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.311] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.311] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.311] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.311] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.311] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.311] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.311] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.311] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.311] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.311] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.311] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.311] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.311] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.311] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.311] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.312] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.312] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.312] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.312] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.312] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.312] SetLastError (dwErrCode=0x0) [0186.312] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft office\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.312] GetLastError () returned 0x5 [0186.312] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.312] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.312] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4f20 [0186.315] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.317] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.317] SetLastError (dwErrCode=0x0) [0186.317] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft office\\office16\\dcf\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.317] GetLastError () returned 0x5 [0186.317] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0) returned 0 [0186.317] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.317] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\1033\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665abb4c80 [0186.318] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.318] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.318] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0186.318] FindClose (in: hFindFile=0x665abb4c80 | out: hFindFile=0x665abb4c80) returned 1 [0186.318] SetLastError (dwErrCode=0x0) [0186.318] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft office\\office16\\dcf\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.318] GetLastError () returned 0x5 [0186.318] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0) returned 0 [0186.318] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.318] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.318] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.318] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\AccessCompare.rdlc", dwFileAttributes=0x80) returned 0 [0186.319] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\AccessCompare.rdlc" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft office\\office16\\dcf\\accesscompare.rdlc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.319] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.319] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.319] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.319] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.319] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\AccessMessageDismissal.txt", dwFileAttributes=0x80) returned 0 [0186.320] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\AccessMessageDismissal.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft office\\office16\\dcf\\accessmessagedismissal.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.320] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.320] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.320] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.320] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.320] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.321] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.321] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.321] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.321] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.321] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.321] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.321] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.321] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.321] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.321] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.321] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.321] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.321] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.321] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.321] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.321] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\EmptyReport.rdlc", dwFileAttributes=0x80) returned 0 [0186.321] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\EmptyReport.rdlc" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft office\\office16\\dcf\\emptyreport.rdlc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.321] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.321] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.322] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.322] SetLastError (dwErrCode=0x0) [0186.322] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft office\\office16\\dcf\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.322] GetLastError () returned 0x5 [0186.322] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0) returned 0 [0186.322] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.322] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\en\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665abb45c0 [0186.324] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.324] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.324] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.324] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.324] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.324] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.324] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.324] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.325] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\en\\DatabaseCompare.HxS", dwFileAttributes=0x80) returned 0 [0186.325] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\en\\DatabaseCompare.HxS" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft office\\office16\\dcf\\en\\databasecompare.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.325] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.326] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.326] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.326] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.326] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\en\\DatabaseCompare_col.hxc", dwFileAttributes=0x80) returned 0 [0186.327] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\en\\DatabaseCompare_col.hxc" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft office\\office16\\dcf\\en\\databasecompare_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.327] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.327] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.327] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.327] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.327] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\en\\DatabaseCompare_col.hxt", dwFileAttributes=0x80) returned 0 [0186.328] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\en\\DatabaseCompare_col.hxt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft office\\office16\\dcf\\en\\databasecompare_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.328] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.328] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.328] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.328] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.329] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\en\\DatabaseCompare_f_col.hxk", dwFileAttributes=0x80) returned 0 [0186.329] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\en\\DatabaseCompare_f_col.hxk" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft office\\office16\\dcf\\en\\databasecompare_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.329] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.329] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.329] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.329] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.330] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\en\\DatabaseCompare_k_col.hxk", dwFileAttributes=0x80) returned 0 [0186.330] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\en\\DatabaseCompare_k_col.hxk" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft office\\office16\\dcf\\en\\databasecompare_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.330] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.330] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.330] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.330] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.330] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\en\\SpreadsheetCompare.HxS", dwFileAttributes=0x80) returned 0 [0186.333] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\en\\SpreadsheetCompare.HxS" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft office\\office16\\dcf\\en\\spreadsheetcompare.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.333] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.333] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.334] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.334] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\en\\SpreadsheetCompare_col.hxc", dwFileAttributes=0x80) returned 0 [0186.334] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\en\\SpreadsheetCompare_col.hxc" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft office\\office16\\dcf\\en\\spreadsheetcompare_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.334] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.334] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.335] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.335] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\en\\SpreadsheetCompare_col.hxt", dwFileAttributes=0x80) returned 0 [0186.335] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\en\\SpreadsheetCompare_col.hxt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft office\\office16\\dcf\\en\\spreadsheetcompare_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.335] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.335] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.336] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.336] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.336] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\en\\SpreadsheetCompare_f_col.hxk", dwFileAttributes=0x80) returned 0 [0186.336] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\en\\SpreadsheetCompare_f_col.hxk" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft office\\office16\\dcf\\en\\spreadsheetcompare_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.336] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.336] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.336] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.336] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.337] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\en\\SpreadsheetCompare_k_col.hxk", dwFileAttributes=0x80) returned 0 [0186.337] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\en\\SpreadsheetCompare_k_col.hxk" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft office\\office16\\dcf\\en\\spreadsheetcompare_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.337] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.337] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.337] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.337] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.337] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.337] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0186.337] FindClose (in: hFindFile=0x665abb45c0 | out: hFindFile=0x665abb45c0) returned 1 [0186.338] SetLastError (dwErrCode=0x0) [0186.338] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\en\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft office\\office16\\dcf\\en\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.341] GetLastError () returned 0x5 [0186.341] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0) returned 0 [0186.341] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.341] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.341] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.341] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\ExcelMessageDismissal.txt", dwFileAttributes=0x80) returned 0 [0186.341] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\ExcelMessageDismissal.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft office\\office16\\dcf\\excelmessagedismissal.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.342] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.342] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.342] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.342] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.342] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.342] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.342] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.342] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.342] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.342] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.342] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.342] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.342] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.342] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.342] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.342] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.342] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.342] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.342] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.342] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.342] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.342] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.342] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.342] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.342] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.342] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.342] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.342] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.343] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.343] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.343] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.343] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.343] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.346] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.346] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.346] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.346] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.346] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.346] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.346] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.346] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.346] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.346] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.346] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.346] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.346] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.346] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.346] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.346] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.346] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0186.346] FindClose (in: hFindFile=0x665abb4f20 | out: hFindFile=0x665abb4f20) returned 1 [0186.346] SetLastError (dwErrCode=0x0) [0186.346] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft office\\office16\\dcf\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.346] GetLastError () returned 0x5 [0186.347] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.347] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.347] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.347] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.347] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.347] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.347] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.347] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\Interceptor.tlb", dwFileAttributes=0x80) returned 0 [0186.353] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\Interceptor.tlb" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft office\\office16\\interceptor.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.353] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.353] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.353] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.353] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.353] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.353] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.353] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.353] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.353] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.353] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.353] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.354] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.354] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.354] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.354] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.354] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.354] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.354] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.354] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.354] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.354] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.354] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.354] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.354] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.354] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.354] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.354] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.354] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.354] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.354] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.354] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.354] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.354] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.354] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.354] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.354] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0186.354] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0186.354] SetLastError (dwErrCode=0x0) [0186.354] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft office\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.354] GetLastError () returned 0x5 [0186.354] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0186.354] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.355] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0186.355] FindClose (in: hFindFile=0x665abb53a0 | out: hFindFile=0x665abb53a0) returned 1 [0186.355] SetLastError (dwErrCode=0x0) [0186.355] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft office\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.355] GetLastError () returned 0x5 [0186.355] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0186.355] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.355] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.355] SetLastError (dwErrCode=0x0) [0186.355] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.356] GetLastError () returned 0x5 [0186.356] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0186.356] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.356] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb43e0 [0186.357] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0186.357] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0186.357] SetLastError (dwErrCode=0x0) [0186.357] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft sql server\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.357] GetLastError () returned 0x5 [0186.357] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0186.357] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.357] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\110\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4920 [0186.358] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.358] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.358] SetLastError (dwErrCode=0x0) [0186.358] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\110\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft sql server\\110\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.358] GetLastError () returned 0x5 [0186.358] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.358] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.358] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\110\\Shared\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb42c0 [0186.359] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.359] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0186.359] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0186.359] SetLastError (dwErrCode=0x0) [0186.359] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\110\\Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft sql server\\110\\shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.359] GetLastError () returned 0x5 [0186.359] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.359] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.359] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0186.359] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0186.359] SetLastError (dwErrCode=0x0) [0186.359] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\110\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft sql server\\110\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.360] GetLastError () returned 0x5 [0186.360] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0186.360] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.360] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0186.360] SetLastError (dwErrCode=0x0) [0186.360] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft sql server\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.360] GetLastError () returned 0x5 [0186.360] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0186.360] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.360] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\130\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb5760 [0186.360] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.360] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.360] SetLastError (dwErrCode=0x0) [0186.360] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\130\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft sql server\\130\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.360] GetLastError () returned 0x5 [0186.360] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.360] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.361] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\130\\Shared\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4c20 [0186.361] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.361] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.361] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0186.361] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0186.361] SetLastError (dwErrCode=0x0) [0186.361] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\130\\Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft sql server\\130\\shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.362] GetLastError () returned 0x5 [0186.362] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.362] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.362] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0186.362] FindClose (in: hFindFile=0x665abb5760 | out: hFindFile=0x665abb5760) returned 1 [0186.364] SetLastError (dwErrCode=0x0) [0186.364] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\130\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft sql server\\130\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.364] GetLastError () returned 0x5 [0186.364] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0186.364] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.364] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0186.364] SetLastError (dwErrCode=0x0) [0186.364] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft sql server\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.364] GetLastError () returned 0x5 [0186.364] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0186.364] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.364] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\140\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4f80 [0186.365] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.365] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.365] SetLastError (dwErrCode=0x0) [0186.365] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\140\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft sql server\\140\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.366] GetLastError () returned 0x5 [0186.366] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.366] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.366] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\140\\Shared\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb5040 [0186.366] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.366] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0186.366] FindClose (in: hFindFile=0x665abb5040 | out: hFindFile=0x665abb5040) returned 1 [0186.367] SetLastError (dwErrCode=0x0) [0186.367] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\140\\Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft sql server\\140\\shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.367] GetLastError () returned 0x5 [0186.367] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.367] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.367] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0186.367] FindClose (in: hFindFile=0x665abb4f80 | out: hFindFile=0x665abb4f80) returned 1 [0186.367] SetLastError (dwErrCode=0x0) [0186.367] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\140\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft sql server\\140\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.367] GetLastError () returned 0x5 [0186.367] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0186.367] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.367] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0186.367] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0186.367] SetLastError (dwErrCode=0x0) [0186.367] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft sql server\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.368] GetLastError () returned 0x5 [0186.368] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0186.368] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.368] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.368] SetLastError (dwErrCode=0x0) [0186.368] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.368] GetLastError () returned 0x5 [0186.368] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0186.368] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.368] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft.NET\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4920 [0186.369] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0186.369] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0186.369] SetLastError (dwErrCode=0x0) [0186.369] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft.NET\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft.net\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.369] GetLastError () returned 0x5 [0186.369] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0186.369] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.369] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft.NET\\ADOMD.NET\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4c20 [0186.369] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.369] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.369] SetLastError (dwErrCode=0x0) [0186.369] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft.NET\\ADOMD.NET\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft.net\\adomd.net\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.369] GetLastError () returned 0x5 [0186.369] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.370] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.370] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft.NET\\ADOMD.NET\\110\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4c80 [0186.370] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.370] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0186.370] FindClose (in: hFindFile=0x665abb4c80 | out: hFindFile=0x665abb4c80) returned 1 [0186.370] SetLastError (dwErrCode=0x0) [0186.370] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft.NET\\ADOMD.NET\\110\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft.net\\adomd.net\\110\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.371] GetLastError () returned 0x5 [0186.371] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.371] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.371] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.371] SetLastError (dwErrCode=0x0) [0186.371] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft.NET\\ADOMD.NET\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft.net\\adomd.net\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.371] GetLastError () returned 0x5 [0186.371] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.371] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.371] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft.NET\\ADOMD.NET\\130\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb5520 [0186.372] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.372] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.372] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0186.372] FindClose (in: hFindFile=0x665abb5520 | out: hFindFile=0x665abb5520) returned 1 [0186.372] SetLastError (dwErrCode=0x0) [0186.372] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft.NET\\ADOMD.NET\\130\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft.net\\adomd.net\\130\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.372] GetLastError () returned 0x5 [0186.372] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.372] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.372] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.372] SetLastError (dwErrCode=0x0) [0186.372] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft.NET\\ADOMD.NET\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft.net\\adomd.net\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.372] GetLastError () returned 0x5 [0186.372] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.372] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.372] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft.NET\\ADOMD.NET\\140\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb42c0 [0186.372] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.372] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0186.373] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0186.373] SetLastError (dwErrCode=0x0) [0186.373] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft.NET\\ADOMD.NET\\140\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft.net\\adomd.net\\140\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.373] GetLastError () returned 0x5 [0186.373] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.373] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.373] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0186.373] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0186.373] SetLastError (dwErrCode=0x0) [0186.373] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft.NET\\ADOMD.NET\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft.net\\adomd.net\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.373] GetLastError () returned 0x5 [0186.373] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0186.373] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.373] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0186.373] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0186.373] SetLastError (dwErrCode=0x0) [0186.373] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft.NET\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\microsoft.net\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.374] GetLastError () returned 0x5 [0186.374] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0186.374] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.374] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.374] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0186.374] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0186.374] SetLastError (dwErrCode=0x0) [0186.374] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilesx86\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.374] GetLastError () returned 0x5 [0186.374] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0186.374] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.374] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0186.374] SetLastError (dwErrCode=0x0) [0186.374] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.374] GetLastError () returned 0x5 [0186.374] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0186.374] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.374] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\System\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4f80 [0186.375] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.375] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.375] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.375] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.375] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.375] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.375] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.375] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.376] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.376] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.376] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.376] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.376] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.376] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.376] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.376] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.376] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.376] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.376] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.376] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.376] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.376] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.376] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\System\\MSCOMCTL.OCX", dwFileAttributes=0x80) returned 0 [0186.377] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\System\\MSCOMCTL.OCX" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\system\\mscomctl.ocx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.377] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.377] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.377] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.377] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.377] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.377] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.377] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.377] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.377] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.377] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.378] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.378] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.378] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.378] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.378] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\System\\VEN2232.OLB", dwFileAttributes=0x80) returned 0 [0186.378] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\System\\VEN2232.OLB" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\system\\ven2232.olb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.378] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.378] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.378] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0186.379] FindClose (in: hFindFile=0x665abb4f80 | out: hFindFile=0x665abb4f80) returned 1 [0186.379] SetLastError (dwErrCode=0x0) [0186.379] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\System\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\system\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.382] GetLastError () returned 0x5 [0186.382] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0186.382] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.382] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0186.382] SetLastError (dwErrCode=0x0) [0186.382] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.382] GetLastError () returned 0x5 [0186.382] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0186.382] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.382] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\SystemX86\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb5760 [0186.384] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.384] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.384] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.384] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.384] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.384] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.384] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.384] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.384] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.384] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.384] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.384] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.384] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.384] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.384] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.384] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.384] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.384] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.384] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\SystemX86\\mscomct2.ocx", dwFileAttributes=0x80) returned 0 [0186.385] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\SystemX86\\mscomct2.ocx" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\systemx86\\mscomct2.ocx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.385] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.385] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.385] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.385] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.385] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.385] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0186.385] FindClose (in: hFindFile=0x665abb5760 | out: hFindFile=0x665abb5760) returned 1 [0186.386] SetLastError (dwErrCode=0x0) [0186.386] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\SystemX86\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\systemx86\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.389] GetLastError () returned 0x5 [0186.389] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0186.389] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.389] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0186.389] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0186.389] FindClose (in: hFindFile=0x665abb56a0 | out: hFindFile=0x665abb56a0) returned 1 [0186.389] SetLastError (dwErrCode=0x0) [0186.389] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.389] GetLastError () returned 0x5 [0186.389] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0186.389] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.389] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0186.389] FindClose (in: hFindFile=0x665abb5340 | out: hFindFile=0x665abb5340) returned 1 [0186.389] SetLastError (dwErrCode=0x0) [0186.389] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.390] GetLastError () returned 0x5 [0186.390] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0186.390] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.390] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0186.390] SetLastError (dwErrCode=0x0) [0186.390] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.390] GetLastError () returned 0x5 [0186.390] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0186.390] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.390] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665abb5520 [0186.390] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0186.390] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0186.391] SetLastError (dwErrCode=0x0) [0186.391] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.391] GetLastError () returned 0x5 [0186.391] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0186.391] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.391] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Apply\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb5460 [0186.391] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0186.391] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0186.391] SetLastError (dwErrCode=0x0) [0186.391] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Apply\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\apply\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.391] GetLastError () returned 0x5 [0186.391] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0186.391] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.391] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Apply\\FilesInUse\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4920 [0186.391] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.392] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.392] SetLastError (dwErrCode=0x0) [0186.392] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Apply\\FilesInUse\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\apply\\filesinuse\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.392] GetLastError () returned 0x5 [0186.392] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0186.392] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.392] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Apply\\FilesInUse\\6EED28D1-CF58-4796-8953-FAA74D60E25C\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb55e0 [0186.392] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0186.392] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0186.392] FindClose (in: hFindFile=0x665abb55e0 | out: hFindFile=0x665abb55e0) returned 1 [0186.392] SetLastError (dwErrCode=0x0) [0186.392] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Apply\\FilesInUse\\6EED28D1-CF58-4796-8953-FAA74D60E25C\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\apply\\filesinuse\\6eed28d1-cf58-4796-8953-faa74d60e25c\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.392] GetLastError () returned 0x5 [0186.392] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0186.392] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.392] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.392] SetLastError (dwErrCode=0x0) [0186.392] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Apply\\FilesInUse\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\apply\\filesinuse\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.393] GetLastError () returned 0x5 [0186.393] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0186.393] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.393] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Apply\\FilesInUse\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4f80 [0186.393] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0186.393] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0186.393] FindClose (in: hFindFile=0x665abb4f80 | out: hFindFile=0x665abb4f80) returned 1 [0186.393] SetLastError (dwErrCode=0x0) [0186.393] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Apply\\FilesInUse\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\apply\\filesinuse\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.393] GetLastError () returned 0x5 [0186.393] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0186.393] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.393] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0186.393] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0186.393] SetLastError (dwErrCode=0x0) [0186.393] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Apply\\FilesInUse\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\apply\\filesinuse\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.394] GetLastError () returned 0x5 [0186.394] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0186.394] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.394] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0186.394] FindClose (in: hFindFile=0x665abb5460 | out: hFindFile=0x665abb5460) returned 1 [0186.394] SetLastError (dwErrCode=0x0) [0186.394] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Apply\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\apply\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.394] GetLastError () returned 0x5 [0186.394] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0186.394] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.394] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0186.394] SetLastError (dwErrCode=0x0) [0186.394] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.394] GetLastError () returned 0x5 [0186.394] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0186.394] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.394] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Detection\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb4c20 [0186.395] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0186.395] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0186.395] SetLastError (dwErrCode=0x0) [0186.395] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Detection\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\detection\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.395] GetLastError () returned 0x5 [0186.395] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0186.395] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.395] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Detection\\Version\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb49e0 [0186.397] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.397] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.397] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.397] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Detection\\Version\\v64.hash", dwFileAttributes=0x80) returned 0 [0186.398] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Detection\\Version\\v64.hash" (normalized: "c:\\program files\\microsoft office\\updates\\detection\\version\\v64.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.398] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.398] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.398] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.398] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0186.398] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Detection\\Version\\VersionDescriptor.xml", dwFileAttributes=0x80) returned 0 [0186.399] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Detection\\Version\\VersionDescriptor.xml" (normalized: "c:\\program files\\microsoft office\\updates\\detection\\version\\versiondescriptor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.399] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.399] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.399] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0186.399] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0186.400] SetLastError (dwErrCode=0x0) [0186.400] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Detection\\Version\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\detection\\version\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.402] GetLastError () returned 0x5 [0186.402] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0186.402] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.402] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0186.403] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0186.403] SetLastError (dwErrCode=0x0) [0186.403] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Detection\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\detection\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.403] GetLastError () returned 0x5 [0186.403] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0186.403] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.403] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0186.403] SetLastError (dwErrCode=0x0) [0186.403] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.403] GetLastError () returned 0x5 [0186.403] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0186.403] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.403] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb45c0 [0186.403] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0186.403] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0186.403] SetLastError (dwErrCode=0x0) [0186.403] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.404] GetLastError () returned 0x5 [0186.404] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0186.404] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.404] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4920 [0186.404] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.404] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0186.404] SetLastError (dwErrCode=0x0) [0186.404] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.404] GetLastError () returned 0x5 [0186.404] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0186.404] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.404] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb56a0 [0186.404] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0186.404] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0186.404] SetLastError (dwErrCode=0x0) [0186.404] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.405] GetLastError () returned 0x5 [0186.405] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0186.405] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.405] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb5340 [0186.406] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.406] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.406] SetLastError (dwErrCode=0x0) [0186.406] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.406] GetLastError () returned 0x5 [0186.406] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.406] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.406] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb53a0 [0186.407] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.407] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.407] SetLastError (dwErrCode=0x0) [0186.407] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.407] GetLastError () returned 0x5 [0186.407] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0) returned 0 [0186.408] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.408] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665abb49e0 [0186.408] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.408] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.408] SetLastError (dwErrCode=0x0) [0186.408] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.408] GetLastError () returned 0x5 [0186.408] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0) returned 0 [0186.408] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.408] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\*.*", lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0x665abb4a40 [0186.412] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.412] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.412] SetLastError (dwErrCode=0x0) [0186.412] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.412] GetLastError () returned 0x5 [0186.412] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.412] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.412] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\1033\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb57c0 [0186.413] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.413] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.413] SetLastError (dwErrCode=0x0) [0186.413] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.413] GetLastError () returned 0x5 [0186.413] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.413] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.413] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\1033\\msotelemetryintl.dll\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4c20 [0186.413] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.413] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.413] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0186.414] SetLastError (dwErrCode=0x0) [0186.414] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\1033\\msotelemetryintl.dll\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\1033\\msotelemetryintl.dll\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.414] GetLastError () returned 0x5 [0186.414] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.414] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.414] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.414] FindClose (in: hFindFile=0x665abb57c0 | out: hFindFile=0x665abb57c0) returned 1 [0186.414] SetLastError (dwErrCode=0x0) [0186.414] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.414] GetLastError () returned 0x5 [0186.414] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.414] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.414] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.414] SetLastError (dwErrCode=0x0) [0186.414] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.415] GetLastError () returned 0x5 [0186.415] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.415] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.415] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb4c20 [0186.416] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.416] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.416] SetLastError (dwErrCode=0x0) [0186.416] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.416] GetLastError () returned 0x5 [0186.416] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.416] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.416] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4c80 [0186.417] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.417] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.417] SetLastError (dwErrCode=0x0) [0186.417] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\microsoft power query for excel integrated\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.417] GetLastError () returned 0x5 [0186.417] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da78ec0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da78ec0, lpOverlapped=0x0) returned 0 [0186.417] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.417] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\*.*", lpFindFileData=0x665da78760 | out: lpFindFileData=0x665da78760) returned 0x665abb4d40 [0186.417] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da78760 | out: lpFindFileData=0x665da78760) returned 1 [0186.417] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da78760 | out: lpFindFileData=0x665da78760) returned 1 [0186.418] SetLastError (dwErrCode=0x0) [0186.418] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.418] GetLastError () returned 0x5 [0186.418] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da78710, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da78710, lpOverlapped=0x0) returned 0 [0186.418] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.418] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Document.XmlSerializers.dll\\*.*", lpFindFileData=0x665da77fb0 | out: lpFindFileData=0x665da77fb0) returned 0x665abb4da0 [0186.418] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da77fb0 | out: lpFindFileData=0x665da77fb0) returned 1 [0186.418] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da77fb0 | out: lpFindFileData=0x665da77fb0) returned 0 [0186.418] FindClose (in: hFindFile=0x665abb4da0 | out: hFindFile=0x665abb4da0) returned 1 [0186.418] SetLastError (dwErrCode=0x0) [0186.418] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Document.XmlSerializers.dll\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\microsoft.mashup.document.xmlserializers.dll\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.419] GetLastError () returned 0x5 [0186.419] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da78710, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da78710, lpOverlapped=0x0) returned 0 [0186.419] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.419] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da78760 | out: lpFindFileData=0x665da78760) returned 0 [0186.419] FindClose (in: hFindFile=0x665abb4d40 | out: hFindFile=0x665abb4d40) returned 1 [0186.419] SetLastError (dwErrCode=0x0) [0186.419] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.419] GetLastError () returned 0x5 [0186.419] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da78ec0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da78ec0, lpOverlapped=0x0) returned 0 [0186.419] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.419] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.419] FindClose (in: hFindFile=0x665abb4c80 | out: hFindFile=0x665abb4c80) returned 1 [0186.419] SetLastError (dwErrCode=0x0) [0186.419] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\microsoft power query for excel integrated\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.419] GetLastError () returned 0x5 [0186.419] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.420] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.420] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.420] SetLastError (dwErrCode=0x0) [0186.420] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.420] GetLastError () returned 0x5 [0186.420] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.420] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.420] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4c80 [0186.421] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.421] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.421] SetLastError (dwErrCode=0x0) [0186.421] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.421] GetLastError () returned 0x5 [0186.421] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da78ec0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da78ec0, lpOverlapped=0x0) returned 0 [0186.421] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.421] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\da\\*.*", lpFindFileData=0x665da78760 | out: lpFindFileData=0x665da78760) returned 0x665abb42c0 [0186.422] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da78760 | out: lpFindFileData=0x665da78760) returned 1 [0186.422] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da78760 | out: lpFindFileData=0x665da78760) returned 1 [0186.422] SetLastError (dwErrCode=0x0) [0186.422] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\da\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\power view excel add-in\\da\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.422] GetLastError () returned 0x5 [0186.422] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da78710, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da78710, lpOverlapped=0x0) returned 0 [0186.422] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.422] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\da\\AdHocReportingExcelClient.dll\\*.*", lpFindFileData=0x665da77fb0 | out: lpFindFileData=0x665da77fb0) returned 0x665abb4560 [0186.422] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da77fb0 | out: lpFindFileData=0x665da77fb0) returned 1 [0186.422] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da77fb0 | out: lpFindFileData=0x665da77fb0) returned 0 [0186.422] FindClose (in: hFindFile=0x665abb4560 | out: hFindFile=0x665abb4560) returned 1 [0186.422] SetLastError (dwErrCode=0x0) [0186.422] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\da\\AdHocReportingExcelClient.dll\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\power view excel add-in\\da\\adhocreportingexcelclient.dll\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.423] GetLastError () returned 0x5 [0186.423] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da78710, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da78710, lpOverlapped=0x0) returned 0 [0186.423] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.423] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da78760 | out: lpFindFileData=0x665da78760) returned 0 [0186.423] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0186.423] SetLastError (dwErrCode=0x0) [0186.423] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\da\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\power view excel add-in\\da\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.423] GetLastError () returned 0x5 [0186.423] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da78ec0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da78ec0, lpOverlapped=0x0) returned 0 [0186.423] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.423] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.423] SetLastError (dwErrCode=0x0) [0186.423] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.423] GetLastError () returned 0x5 [0186.423] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da78ec0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da78ec0, lpOverlapped=0x0) returned 0 [0186.423] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.423] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\et\\*.*", lpFindFileData=0x665da78760 | out: lpFindFileData=0x665da78760) returned 0x665abb4f80 [0186.424] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da78760 | out: lpFindFileData=0x665da78760) returned 1 [0186.424] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da78760 | out: lpFindFileData=0x665da78760) returned 1 [0186.424] SetLastError (dwErrCode=0x0) [0186.424] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\et\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\power view excel add-in\\et\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.424] GetLastError () returned 0x5 [0186.424] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da78710, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da78710, lpOverlapped=0x0) returned 0 [0186.424] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.424] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\et\\AdHocReportingExcelClient.dll\\*.*", lpFindFileData=0x665da77fb0 | out: lpFindFileData=0x665da77fb0) returned 0x665abb4560 [0186.425] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da77fb0 | out: lpFindFileData=0x665da77fb0) returned 1 [0186.425] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da77fb0 | out: lpFindFileData=0x665da77fb0) returned 0 [0186.425] FindClose (in: hFindFile=0x665abb4560 | out: hFindFile=0x665abb4560) returned 1 [0186.425] SetLastError (dwErrCode=0x0) [0186.425] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\et\\AdHocReportingExcelClient.dll\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\power view excel add-in\\et\\adhocreportingexcelclient.dll\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.425] GetLastError () returned 0x5 [0186.425] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da78710, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da78710, lpOverlapped=0x0) returned 0 [0186.425] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.425] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da78760 | out: lpFindFileData=0x665da78760) returned 0 [0186.425] FindClose (in: hFindFile=0x665abb4f80 | out: hFindFile=0x665abb4f80) returned 1 [0186.425] SetLastError (dwErrCode=0x0) [0186.425] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\et\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\power view excel add-in\\et\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.425] GetLastError () returned 0x5 [0186.425] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da78ec0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da78ec0, lpOverlapped=0x0) returned 0 [0186.425] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.425] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.425] SetLastError (dwErrCode=0x0) [0186.425] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.426] GetLastError () returned 0x5 [0186.426] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da78ec0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da78ec0, lpOverlapped=0x0) returned 0 [0186.426] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.426] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hu\\*.*", lpFindFileData=0x665da78760 | out: lpFindFileData=0x665da78760) returned 0x665abb4d40 [0186.426] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da78760 | out: lpFindFileData=0x665da78760) returned 1 [0186.426] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da78760 | out: lpFindFileData=0x665da78760) returned 1 [0186.426] SetLastError (dwErrCode=0x0) [0186.427] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hu\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\power view excel add-in\\hu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.427] GetLastError () returned 0x5 [0186.427] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da78710, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da78710, lpOverlapped=0x0) returned 0 [0186.427] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.427] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hu\\AdHocReportingExcelClient.dll\\*.*", lpFindFileData=0x665da77fb0 | out: lpFindFileData=0x665da77fb0) returned 0x665abb4f20 [0186.427] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da77fb0 | out: lpFindFileData=0x665da77fb0) returned 1 [0186.427] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da77fb0 | out: lpFindFileData=0x665da77fb0) returned 0 [0186.427] FindClose (in: hFindFile=0x665abb4f20 | out: hFindFile=0x665abb4f20) returned 1 [0186.427] SetLastError (dwErrCode=0x0) [0186.427] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hu\\AdHocReportingExcelClient.dll\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\power view excel add-in\\hu\\adhocreportingexcelclient.dll\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.427] GetLastError () returned 0x5 [0186.427] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da78710, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da78710, lpOverlapped=0x0) returned 0 [0186.427] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.427] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da78760 | out: lpFindFileData=0x665da78760) returned 0 [0186.427] FindClose (in: hFindFile=0x665abb4d40 | out: hFindFile=0x665abb4d40) returned 1 [0186.428] SetLastError (dwErrCode=0x0) [0186.428] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hu\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\power view excel add-in\\hu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.428] GetLastError () returned 0x5 [0186.428] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da78ec0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da78ec0, lpOverlapped=0x0) returned 0 [0186.428] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.428] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.428] SetLastError (dwErrCode=0x0) [0186.428] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.428] GetLastError () returned 0x5 [0186.428] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da78ec0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da78ec0, lpOverlapped=0x0) returned 0 [0186.428] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.428] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\tr\\*.*", lpFindFileData=0x665da78760 | out: lpFindFileData=0x665da78760) returned 0x665abb42c0 [0186.428] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da78760 | out: lpFindFileData=0x665da78760) returned 1 [0186.429] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da78760 | out: lpFindFileData=0x665da78760) returned 1 [0186.429] SetLastError (dwErrCode=0x0) [0186.429] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\tr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\power view excel add-in\\tr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.429] GetLastError () returned 0x5 [0186.429] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da78710, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da78710, lpOverlapped=0x0) returned 0 [0186.429] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.429] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\tr\\AdHocReportingExcelClient.dll\\*.*", lpFindFileData=0x665da77fb0 | out: lpFindFileData=0x665da77fb0) returned 0x665abb4f80 [0186.429] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da77fb0 | out: lpFindFileData=0x665da77fb0) returned 1 [0186.429] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da77fb0 | out: lpFindFileData=0x665da77fb0) returned 0 [0186.429] FindClose (in: hFindFile=0x665abb4f80 | out: hFindFile=0x665abb4f80) returned 1 [0186.429] SetLastError (dwErrCode=0x0) [0186.429] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\tr\\AdHocReportingExcelClient.dll\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\power view excel add-in\\tr\\adhocreportingexcelclient.dll\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.429] GetLastError () returned 0x5 [0186.429] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da78710, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da78710, lpOverlapped=0x0) returned 0 [0186.429] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.429] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da78760 | out: lpFindFileData=0x665da78760) returned 0 [0186.430] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0186.430] SetLastError (dwErrCode=0x0) [0186.430] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\tr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\power view excel add-in\\tr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.430] GetLastError () returned 0x5 [0186.430] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da78ec0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da78ec0, lpOverlapped=0x0) returned 0 [0186.430] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.430] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.430] SetLastError (dwErrCode=0x0) [0186.430] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.430] GetLastError () returned 0x5 [0186.430] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da78ec0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da78ec0, lpOverlapped=0x0) returned 0 [0186.430] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.430] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHT\\*.*", lpFindFileData=0x665da78760 | out: lpFindFileData=0x665da78760) returned 0x665abb5460 [0186.431] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da78760 | out: lpFindFileData=0x665da78760) returned 1 [0186.431] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da78760 | out: lpFindFileData=0x665da78760) returned 1 [0186.431] SetLastError (dwErrCode=0x0) [0186.431] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHT\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\power view excel add-in\\zh-cht\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.431] GetLastError () returned 0x5 [0186.431] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da78710, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da78710, lpOverlapped=0x0) returned 0 [0186.431] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.431] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHT\\AdHocReportingExcelClient.dll\\*.*", lpFindFileData=0x665da77fb0 | out: lpFindFileData=0x665da77fb0) returned 0x665abb4d40 [0186.431] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da77fb0 | out: lpFindFileData=0x665da77fb0) returned 1 [0186.431] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da77fb0 | out: lpFindFileData=0x665da77fb0) returned 0 [0186.432] FindClose (in: hFindFile=0x665abb4d40 | out: hFindFile=0x665abb4d40) returned 1 [0186.432] SetLastError (dwErrCode=0x0) [0186.432] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHT\\AdHocReportingExcelClient.dll\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\power view excel add-in\\zh-cht\\adhocreportingexcelclient.dll\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.432] GetLastError () returned 0x5 [0186.432] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da78710, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da78710, lpOverlapped=0x0) returned 0 [0186.432] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.432] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da78760 | out: lpFindFileData=0x665da78760) returned 0 [0186.432] FindClose (in: hFindFile=0x665abb5460 | out: hFindFile=0x665abb5460) returned 1 [0186.432] SetLastError (dwErrCode=0x0) [0186.432] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHT\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\power view excel add-in\\zh-cht\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.432] GetLastError () returned 0x5 [0186.432] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da78ec0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da78ec0, lpOverlapped=0x0) returned 0 [0186.432] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.432] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.432] FindClose (in: hFindFile=0x665abb4c80 | out: hFindFile=0x665abb4c80) returned 1 [0186.433] SetLastError (dwErrCode=0x0) [0186.433] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.433] GetLastError () returned 0x5 [0186.433] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.433] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.433] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.433] SetLastError (dwErrCode=0x0) [0186.433] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.433] GetLastError () returned 0x5 [0186.433] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.433] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.433] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4f20 [0186.433] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.433] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.433] SetLastError (dwErrCode=0x0) [0186.433] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.434] GetLastError () returned 0x5 [0186.434] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da78ec0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da78ec0, lpOverlapped=0x0) returned 0 [0186.434] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.434] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\*.*", lpFindFileData=0x665da78760 | out: lpFindFileData=0x665da78760) returned 0x665abb55e0 [0186.434] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da78760 | out: lpFindFileData=0x665da78760) returned 1 [0186.434] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da78760 | out: lpFindFileData=0x665da78760) returned 1 [0186.434] SetLastError (dwErrCode=0x0) [0186.435] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.435] GetLastError () returned 0x5 [0186.435] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da78710, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da78710, lpOverlapped=0x0) returned 0 [0186.435] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.435] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1049\\*.*", lpFindFileData=0x665da77fb0 | out: lpFindFileData=0x665da77fb0) returned 0x665abb4da0 [0186.435] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da77fb0 | out: lpFindFileData=0x665da77fb0) returned 1 [0186.435] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da77fb0 | out: lpFindFileData=0x665da77fb0) returned 1 [0186.435] SetLastError (dwErrCode=0x0) [0186.435] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1049\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1049\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.435] GetLastError () returned 0x5 [0186.435] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da77f60, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da77f60, lpOverlapped=0x0) returned 0 [0186.435] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.435] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1049\\PowerPivotExcelClientAddIn.rll\\*.*", lpFindFileData=0x665da77800 | out: lpFindFileData=0x665da77800) returned 0x665abb5160 [0186.436] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da77800 | out: lpFindFileData=0x665da77800) returned 1 [0186.436] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da77800 | out: lpFindFileData=0x665da77800) returned 0 [0186.436] FindClose (in: hFindFile=0x665abb5160 | out: hFindFile=0x665abb5160) returned 1 [0186.436] SetLastError (dwErrCode=0x0) [0186.436] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1049\\PowerPivotExcelClientAddIn.rll\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1049\\powerpivotexcelclientaddin.rll\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.436] GetLastError () returned 0x5 [0186.436] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da77f60, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da77f60, lpOverlapped=0x0) returned 0 [0186.436] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.436] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da77fb0 | out: lpFindFileData=0x665da77fb0) returned 0 [0186.436] FindClose (in: hFindFile=0x665abb4da0 | out: hFindFile=0x665abb4da0) returned 1 [0186.436] SetLastError (dwErrCode=0x0) [0186.436] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1049\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1049\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.436] GetLastError () returned 0x5 [0186.437] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da78710, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da78710, lpOverlapped=0x0) returned 0 [0186.437] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.437] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da78760 | out: lpFindFileData=0x665da78760) returned 1 [0186.437] SetLastError (dwErrCode=0x0) [0186.437] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.437] GetLastError () returned 0x5 [0186.437] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da78710, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da78710, lpOverlapped=0x0) returned 0 [0186.437] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.437] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1051\\*.*", lpFindFileData=0x665da77fb0 | out: lpFindFileData=0x665da77fb0) returned 0x665abb4f80 [0186.438] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da77fb0 | out: lpFindFileData=0x665da77fb0) returned 1 [0186.438] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da77fb0 | out: lpFindFileData=0x665da77fb0) returned 1 [0186.439] SetLastError (dwErrCode=0x0) [0186.439] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1051\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1051\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.439] GetLastError () returned 0x5 [0186.439] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da77f60, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da77f60, lpOverlapped=0x0) returned 0 [0186.439] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.439] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1051\\PowerPivotExcelClientAddIn.rll\\*.*", lpFindFileData=0x665da77800 | out: lpFindFileData=0x665da77800) returned 0x665abb4c80 [0186.439] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da77800 | out: lpFindFileData=0x665da77800) returned 1 [0186.439] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da77800 | out: lpFindFileData=0x665da77800) returned 0 [0186.439] FindClose (in: hFindFile=0x665abb4c80 | out: hFindFile=0x665abb4c80) returned 1 [0186.439] SetLastError (dwErrCode=0x0) [0186.439] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1051\\PowerPivotExcelClientAddIn.rll\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1051\\powerpivotexcelclientaddin.rll\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.440] GetLastError () returned 0x5 [0186.440] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da77f60, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da77f60, lpOverlapped=0x0) returned 0 [0186.440] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.440] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da77fb0 | out: lpFindFileData=0x665da77fb0) returned 0 [0186.440] FindClose (in: hFindFile=0x665abb4f80 | out: hFindFile=0x665abb4f80) returned 1 [0186.440] SetLastError (dwErrCode=0x0) [0186.440] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1051\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1051\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.440] GetLastError () returned 0x5 [0186.440] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da78710, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da78710, lpOverlapped=0x0) returned 0 [0186.440] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.440] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da78760 | out: lpFindFileData=0x665da78760) returned 0 [0186.440] FindClose (in: hFindFile=0x665abb55e0 | out: hFindFile=0x665abb55e0) returned 1 [0186.440] SetLastError (dwErrCode=0x0) [0186.440] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.440] GetLastError () returned 0x5 [0186.440] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da78ec0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da78ec0, lpOverlapped=0x0) returned 0 [0186.440] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.441] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.441] FindClose (in: hFindFile=0x665abb4f20 | out: hFindFile=0x665abb4f20) returned 1 [0186.441] SetLastError (dwErrCode=0x0) [0186.441] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.441] GetLastError () returned 0x5 [0186.441] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.441] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.441] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.441] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0186.441] SetLastError (dwErrCode=0x0) [0186.441] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\addins\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.441] GetLastError () returned 0x5 [0186.442] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.442] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.442] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.442] SetLastError (dwErrCode=0x0) [0186.442] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.442] GetLastError () returned 0x5 [0186.442] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.442] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.442] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\cpprestsdk.dll\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb5580 [0186.442] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.442] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.442] FindClose (in: hFindFile=0x665abb5580 | out: hFindFile=0x665abb5580) returned 1 [0186.442] SetLastError (dwErrCode=0x0) [0186.442] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\cpprestsdk.dll\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\cpprestsdk.dll\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.443] GetLastError () returned 0x5 [0186.443] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.443] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.443] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.443] SetLastError (dwErrCode=0x0) [0186.443] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.443] GetLastError () returned 0x5 [0186.443] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.443] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.443] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\IEAWSDC.DLL\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb4c20 [0186.444] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.444] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.444] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0186.444] SetLastError (dwErrCode=0x0) [0186.444] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\IEAWSDC.DLL\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\ieawsdc.dll\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.445] GetLastError () returned 0x5 [0186.445] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.445] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.445] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.445] SetLastError (dwErrCode=0x0) [0186.445] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.445] GetLastError () returned 0x5 [0186.445] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.445] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.445] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\microsoft.office.workflow.actions.proxy.dll\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb43e0 [0186.446] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.446] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.446] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0186.446] SetLastError (dwErrCode=0x0) [0186.446] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\microsoft.office.workflow.actions.proxy.dll\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\microsoft.office.workflow.actions.proxy.dll\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.446] GetLastError () returned 0x5 [0186.446] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.447] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.447] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.447] SetLastError (dwErrCode=0x0) [0186.447] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.447] GetLastError () returned 0x5 [0186.447] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.447] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.447] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\microsoft.sharepoint.workflowactions.proxy.dll\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb5460 [0186.447] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.447] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.447] FindClose (in: hFindFile=0x665abb5460 | out: hFindFile=0x665abb5460) returned 1 [0186.447] SetLastError (dwErrCode=0x0) [0186.448] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\microsoft.sharepoint.workflowactions.proxy.dll\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\microsoft.sharepoint.workflowactions.proxy.dll\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.448] GetLastError () returned 0x5 [0186.448] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.448] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.448] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.448] SetLastError (dwErrCode=0x0) [0186.448] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.448] GetLastError () returned 0x5 [0186.448] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.448] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.448] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\OMICAUT.DLL\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb5160 [0186.449] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.449] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.449] FindClose (in: hFindFile=0x665abb5160 | out: hFindFile=0x665abb5160) returned 1 [0186.449] SetLastError (dwErrCode=0x0) [0186.449] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\OMICAUT.DLL\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\omicaut.dll\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.449] GetLastError () returned 0x5 [0186.449] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.449] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.449] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.449] SetLastError (dwErrCode=0x0) [0186.449] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.450] GetLastError () returned 0x5 [0186.450] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.450] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.450] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\SignalRClient.dll\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb4d40 [0186.451] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.451] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.451] FindClose (in: hFindFile=0x665abb4d40 | out: hFindFile=0x665abb4d40) returned 1 [0186.451] SetLastError (dwErrCode=0x0) [0186.451] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\SignalRClient.dll\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\signalrclient.dll\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.451] GetLastError () returned 0x5 [0186.451] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.451] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.451] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0 [0186.451] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0186.451] SetLastError (dwErrCode=0x0) [0186.451] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.452] GetLastError () returned 0x5 [0186.452] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0) returned 0 [0186.452] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.452] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0186.452] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0186.452] SetLastError (dwErrCode=0x0) [0186.452] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.452] GetLastError () returned 0x5 [0186.452] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0) returned 0 [0186.452] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.452] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0186.452] FindClose (in: hFindFile=0x665abb53a0 | out: hFindFile=0x665abb53a0) returned 1 [0186.452] SetLastError (dwErrCode=0x0) [0186.452] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\delta\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.452] GetLastError () returned 0x5 [0186.452] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.453] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.453] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0186.453] FindClose (in: hFindFile=0x665abb5340 | out: hFindFile=0x665abb5340) returned 1 [0186.453] SetLastError (dwErrCode=0x0) [0186.453] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\data\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.453] GetLastError () returned 0x5 [0186.453] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0186.453] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.453] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0186.453] SetLastError (dwErrCode=0x0) [0186.453] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.454] GetLastError () returned 0x5 [0186.454] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0186.454] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.454] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\PackageManifests\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb49e0 [0186.454] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.454] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0186.454] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0186.454] SetLastError (dwErrCode=0x0) [0186.454] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\PackageManifests\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\packagemanifests\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.454] GetLastError () returned 0x5 [0186.454] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0186.454] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.454] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0186.454] SetLastError (dwErrCode=0x0) [0186.454] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.455] GetLastError () returned 0x5 [0186.455] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0186.455] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.455] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4560 [0186.457] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.457] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.457] SetLastError (dwErrCode=0x0) [0186.457] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.457] GetLastError () returned 0x5 [0186.457] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.457] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.457] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Client\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb49e0 [0186.458] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.458] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0186.458] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0186.458] SetLastError (dwErrCode=0x0) [0186.458] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Client\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\client\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.459] GetLastError () returned 0x5 [0186.459] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.459] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.459] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.459] SetLastError (dwErrCode=0x0) [0186.459] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.459] GetLastError () returned 0x5 [0186.459] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.459] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.459] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\CLIPART\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4da0 [0186.460] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.460] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.460] SetLastError (dwErrCode=0x0) [0186.460] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\CLIPART\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\clipart\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.460] GetLastError () returned 0x5 [0186.460] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0) returned 0 [0186.460] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.460] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\CLIPART\\PUB60COR\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665abb5460 [0186.461] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.461] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0186.461] FindClose (in: hFindFile=0x665abb5460 | out: hFindFile=0x665abb5460) returned 1 [0186.462] SetLastError (dwErrCode=0x0) [0186.462] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\CLIPART\\PUB60COR\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\clipart\\pub60cor\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.462] GetLastError () returned 0x5 [0186.462] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0) returned 0 [0186.462] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.462] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.462] SetLastError (dwErrCode=0x0) [0186.462] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\CLIPART\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\clipart\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.462] GetLastError () returned 0x5 [0186.462] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0) returned 0 [0186.462] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.462] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\CLIPART\\Publisher\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665abb55e0 [0186.463] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.463] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.463] SetLastError (dwErrCode=0x0) [0186.463] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\CLIPART\\Publisher\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\clipart\\publisher\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.463] GetLastError () returned 0x5 [0186.463] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0) returned 0 [0186.463] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.463] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\CLIPART\\Publisher\\Backgrounds\\*.*", lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0x665abb49e0 [0186.464] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.464] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0 [0186.464] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0186.464] SetLastError (dwErrCode=0x0) [0186.464] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\CLIPART\\Publisher\\Backgrounds\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\clipart\\publisher\\backgrounds\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.464] GetLastError () returned 0x5 [0186.464] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0) returned 0 [0186.464] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.464] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0186.464] FindClose (in: hFindFile=0x665abb55e0 | out: hFindFile=0x665abb55e0) returned 1 [0186.464] SetLastError (dwErrCode=0x0) [0186.464] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\CLIPART\\Publisher\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\clipart\\publisher\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.465] GetLastError () returned 0x5 [0186.465] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0) returned 0 [0186.465] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.465] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0186.465] FindClose (in: hFindFile=0x665abb4da0 | out: hFindFile=0x665abb4da0) returned 1 [0186.465] SetLastError (dwErrCode=0x0) [0186.465] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\CLIPART\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\clipart\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.465] GetLastError () returned 0x5 [0186.465] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.465] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.465] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.465] SetLastError (dwErrCode=0x0) [0186.465] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.466] GetLastError () returned 0x5 [0186.466] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.466] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.466] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Document Themes 16\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4f20 [0186.467] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.467] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.467] SetLastError (dwErrCode=0x0) [0186.467] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Document Themes 16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\document themes 16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.467] GetLastError () returned 0x5 [0186.467] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0) returned 0 [0186.467] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.467] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Document Themes 16\\Theme Colors\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665abb5460 [0186.468] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.469] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0186.469] FindClose (in: hFindFile=0x665abb5460 | out: hFindFile=0x665abb5460) returned 1 [0186.469] SetLastError (dwErrCode=0x0) [0186.469] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Document Themes 16\\Theme Colors\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\document themes 16\\theme colors\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.469] GetLastError () returned 0x5 [0186.469] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0) returned 0 [0186.469] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.469] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.469] SetLastError (dwErrCode=0x0) [0186.469] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Document Themes 16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\document themes 16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.469] GetLastError () returned 0x5 [0186.470] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0) returned 0 [0186.470] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.470] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Document Themes 16\\Theme Effects\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665abb4f80 [0186.470] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.470] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0186.470] FindClose (in: hFindFile=0x665abb4f80 | out: hFindFile=0x665abb4f80) returned 1 [0186.470] SetLastError (dwErrCode=0x0) [0186.470] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Document Themes 16\\Theme Effects\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\document themes 16\\theme effects\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.470] GetLastError () returned 0x5 [0186.470] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0) returned 0 [0186.470] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.470] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.470] SetLastError (dwErrCode=0x0) [0186.470] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Document Themes 16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\document themes 16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.471] GetLastError () returned 0x5 [0186.471] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0) returned 0 [0186.471] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.471] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Document Themes 16\\Theme Fonts\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665abb49e0 [0186.471] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.471] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0186.471] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0186.476] SetLastError (dwErrCode=0x0) [0186.476] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Document Themes 16\\Theme Fonts\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\document themes 16\\theme fonts\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.476] GetLastError () returned 0x5 [0186.476] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0) returned 0 [0186.476] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.477] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0186.477] FindClose (in: hFindFile=0x665abb4f20 | out: hFindFile=0x665abb4f20) returned 1 [0186.477] SetLastError (dwErrCode=0x0) [0186.477] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Document Themes 16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\document themes 16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.477] GetLastError () returned 0x5 [0186.477] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.477] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.477] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.477] SetLastError (dwErrCode=0x0) [0186.477] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.477] GetLastError () returned 0x5 [0186.477] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.477] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.477] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Flattener\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb49e0 [0186.478] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.478] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0186.478] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0186.478] SetLastError (dwErrCode=0x0) [0186.478] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Flattener\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\flattener\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.478] GetLastError () returned 0x5 [0186.479] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.479] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.479] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.479] SetLastError (dwErrCode=0x0) [0186.479] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.479] GetLastError () returned 0x5 [0186.479] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.479] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.479] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\fre\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb43e0 [0186.480] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.480] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0186.480] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0186.480] SetLastError (dwErrCode=0x0) [0186.480] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\fre\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\fre\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.480] GetLastError () returned 0x5 [0186.480] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.480] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.480] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.480] SetLastError (dwErrCode=0x0) [0186.480] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.480] GetLastError () returned 0x5 [0186.480] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.480] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.481] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Integration\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4f80 [0186.482] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.482] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0186.482] FindClose (in: hFindFile=0x665abb4f80 | out: hFindFile=0x665abb4f80) returned 1 [0186.482] SetLastError (dwErrCode=0x0) [0186.482] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Integration\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\integration\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.482] GetLastError () returned 0x5 [0186.482] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.482] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.482] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.482] SetLastError (dwErrCode=0x0) [0186.483] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.483] GetLastError () returned 0x5 [0186.483] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.483] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.483] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Licenses\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4f20 [0186.483] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.483] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0186.483] FindClose (in: hFindFile=0x665abb4f20 | out: hFindFile=0x665abb4f20) returned 1 [0186.483] SetLastError (dwErrCode=0x0) [0186.483] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Licenses\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\licenses\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.484] GetLastError () returned 0x5 [0186.484] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.484] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.484] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.484] SetLastError (dwErrCode=0x0) [0186.484] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.484] GetLastError () returned 0x5 [0186.484] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.484] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.484] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Licenses16\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb55e0 [0186.486] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.486] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0186.486] FindClose (in: hFindFile=0x665abb55e0 | out: hFindFile=0x665abb55e0) returned 1 [0186.486] SetLastError (dwErrCode=0x0) [0186.486] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Licenses16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\licenses16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.486] GetLastError () returned 0x5 [0186.486] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.486] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.487] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.487] SetLastError (dwErrCode=0x0) [0186.487] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.487] GetLastError () returned 0x5 [0186.487] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.487] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.487] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\loc\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb5760 [0186.488] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.488] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0186.488] FindClose (in: hFindFile=0x665abb5760 | out: hFindFile=0x665abb5760) returned 1 [0186.488] SetLastError (dwErrCode=0x0) [0186.488] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\loc\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\loc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.488] GetLastError () returned 0x5 [0186.488] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.488] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.488] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.488] SetLastError (dwErrCode=0x0) [0186.488] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.488] GetLastError () returned 0x5 [0186.488] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.488] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.488] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\mcxml\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb42c0 [0186.491] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.491] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.491] SetLastError (dwErrCode=0x0) [0186.491] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\mcxml\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\mcxml\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.492] GetLastError () returned 0x5 [0186.492] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0) returned 0 [0186.492] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.492] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\mcxml\\en-us\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665abb4f80 [0186.492] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.492] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0186.492] FindClose (in: hFindFile=0x665abb4f80 | out: hFindFile=0x665abb4f80) returned 1 [0186.492] SetLastError (dwErrCode=0x0) [0186.492] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\mcxml\\en-us\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\mcxml\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.492] GetLastError () returned 0x5 [0186.492] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0) returned 0 [0186.492] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.492] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.492] SetLastError (dwErrCode=0x0) [0186.492] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\mcxml\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\mcxml\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.493] GetLastError () returned 0x5 [0186.493] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0) returned 0 [0186.493] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.493] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\mcxml\\es-es\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665abb49e0 [0186.493] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.493] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0186.493] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0186.493] SetLastError (dwErrCode=0x0) [0186.493] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\mcxml\\es-es\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\mcxml\\es-es\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.493] GetLastError () returned 0x5 [0186.493] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0) returned 0 [0186.493] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.493] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.493] SetLastError (dwErrCode=0x0) [0186.493] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\mcxml\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\mcxml\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.494] GetLastError () returned 0x5 [0186.494] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0) returned 0 [0186.494] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.494] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\mcxml\\fr-fr\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665abb5760 [0186.494] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.494] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0186.494] FindClose (in: hFindFile=0x665abb5760 | out: hFindFile=0x665abb5760) returned 1 [0186.494] SetLastError (dwErrCode=0x0) [0186.494] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\mcxml\\fr-fr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\mcxml\\fr-fr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.494] GetLastError () returned 0x5 [0186.494] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0) returned 0 [0186.494] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.494] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.494] SetLastError (dwErrCode=0x0) [0186.494] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\mcxml\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\mcxml\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.494] GetLastError () returned 0x5 [0186.495] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0) returned 0 [0186.495] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.495] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\mcxml\\x-none\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665abb4c20 [0186.495] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.495] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0186.495] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0186.495] SetLastError (dwErrCode=0x0) [0186.495] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\mcxml\\x-none\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\mcxml\\x-none\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.495] GetLastError () returned 0x5 [0186.495] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0) returned 0 [0186.495] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.495] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0186.495] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0186.495] SetLastError (dwErrCode=0x0) [0186.495] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\mcxml\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\mcxml\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.496] GetLastError () returned 0x5 [0186.496] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.496] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.496] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.496] SetLastError (dwErrCode=0x0) [0186.496] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.496] GetLastError () returned 0x5 [0186.496] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.496] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.496] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office15\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb5340 [0186.496] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.496] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0186.496] FindClose (in: hFindFile=0x665abb5340 | out: hFindFile=0x665abb5340) returned 1 [0186.496] SetLastError (dwErrCode=0x0) [0186.496] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office15\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office15\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.497] GetLastError () returned 0x5 [0186.497] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.497] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.497] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0186.497] SetLastError (dwErrCode=0x0) [0186.497] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.497] GetLastError () returned 0x5 [0186.497] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0186.497] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.497] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4f20 [0186.500] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.506] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.506] SetLastError (dwErrCode=0x0) [0186.506] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.507] GetLastError () returned 0x5 [0186.507] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0) returned 0 [0186.507] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.507] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\1033\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665abb5160 [0186.510] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.511] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.511] SetLastError (dwErrCode=0x0) [0186.511] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.511] GetLastError () returned 0x5 [0186.511] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0) returned 0 [0186.511] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.511] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\1033\\Bibliography\\*.*", lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0x665abb4d40 [0186.512] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.512] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0 [0186.512] FindClose (in: hFindFile=0x665abb4d40 | out: hFindFile=0x665abb4d40) returned 1 [0186.512] SetLastError (dwErrCode=0x0) [0186.512] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\1033\\Bibliography\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\1033\\bibliography\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.512] GetLastError () returned 0x5 [0186.512] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0) returned 0 [0186.513] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.513] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.513] SetLastError (dwErrCode=0x0) [0186.513] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.513] GetLastError () returned 0x5 [0186.513] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0) returned 0 [0186.513] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.513] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\1033\\DataServices\\*.*", lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0x665abb43e0 [0186.513] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.513] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0 [0186.513] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0186.513] SetLastError (dwErrCode=0x0) [0186.513] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\1033\\DataServices\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\1033\\dataservices\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.513] GetLastError () returned 0x5 [0186.513] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0) returned 0 [0186.513] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.513] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.514] SetLastError (dwErrCode=0x0) [0186.514] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.514] GetLastError () returned 0x5 [0186.514] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0) returned 0 [0186.514] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.514] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\1033\\PUBFTSCM\\*.*", lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0x665abb5040 [0186.514] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.514] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0 [0186.514] FindClose (in: hFindFile=0x665abb5040 | out: hFindFile=0x665abb5040) returned 1 [0186.514] SetLastError (dwErrCode=0x0) [0186.514] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\1033\\PUBFTSCM\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\1033\\pubftscm\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.514] GetLastError () returned 0x5 [0186.514] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0) returned 0 [0186.514] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.514] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.514] SetLastError (dwErrCode=0x0) [0186.515] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.515] GetLastError () returned 0x5 [0186.515] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0) returned 0 [0186.515] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.515] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\1033\\PUBSPAPR\\*.*", lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0x665abb43e0 [0186.515] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.515] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0 [0186.515] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0186.515] SetLastError (dwErrCode=0x0) [0186.515] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\1033\\PUBSPAPR\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\1033\\pubspapr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.516] GetLastError () returned 0x5 [0186.516] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0) returned 0 [0186.516] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.516] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.516] SetLastError (dwErrCode=0x0) [0186.516] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.516] GetLastError () returned 0x5 [0186.516] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0) returned 0 [0186.516] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.516] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\1033\\QuickStyles\\*.*", lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0x665abb49e0 [0186.516] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.516] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0 [0186.516] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0186.516] SetLastError (dwErrCode=0x0) [0186.516] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\1033\\QuickStyles\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\1033\\quickstyles\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.517] GetLastError () returned 0x5 [0186.517] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0) returned 0 [0186.517] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.517] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0186.517] FindClose (in: hFindFile=0x665abb5160 | out: hFindFile=0x665abb5160) returned 1 [0186.517] SetLastError (dwErrCode=0x0) [0186.517] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.517] GetLastError () returned 0x5 [0186.517] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0) returned 0 [0186.517] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.517] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.517] SetLastError (dwErrCode=0x0) [0186.517] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.517] GetLastError () returned 0x5 [0186.517] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0) returned 0 [0186.518] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.518] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\1036\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665abb5040 [0186.518] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.518] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0186.518] FindClose (in: hFindFile=0x665abb5040 | out: hFindFile=0x665abb5040) returned 1 [0186.518] SetLastError (dwErrCode=0x0) [0186.518] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\1036\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\1036\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.518] GetLastError () returned 0x5 [0186.518] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0) returned 0 [0186.518] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.518] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.518] SetLastError (dwErrCode=0x0) [0186.518] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.519] GetLastError () returned 0x5 [0186.519] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0) returned 0 [0186.519] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.519] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\3082\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665abb49e0 [0186.519] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.519] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0186.519] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0186.519] SetLastError (dwErrCode=0x0) [0186.519] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\3082\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\3082\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.519] GetLastError () returned 0x5 [0186.519] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0) returned 0 [0186.519] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.519] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.519] SetLastError (dwErrCode=0x0) [0186.519] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.520] GetLastError () returned 0x5 [0186.520] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0) returned 0 [0186.520] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.520] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\AccessWeb\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665abb4a40 [0186.521] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.521] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0186.521] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0186.521] SetLastError (dwErrCode=0x0) [0186.521] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\AccessWeb\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\accessweb\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.522] GetLastError () returned 0x5 [0186.522] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0) returned 0 [0186.522] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.522] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.522] SetLastError (dwErrCode=0x0) [0186.522] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.522] GetLastError () returned 0x5 [0186.522] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0) returned 0 [0186.522] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.522] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ACCWIZ\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665abb42c0 [0186.522] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.522] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0186.522] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0186.522] SetLastError (dwErrCode=0x0) [0186.522] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ACCWIZ\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\accwiz\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.523] GetLastError () returned 0x5 [0186.523] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0) returned 0 [0186.523] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.523] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0186.523] SetLastError (dwErrCode=0x0) [0186.523] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.523] GetLastError () returned 0x5 [0186.523] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0) returned 0 [0186.523] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.523] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665abb42c0 [0186.526] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.526] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.526] SetLastError (dwErrCode=0x0) [0186.526] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.527] GetLastError () returned 0x5 [0186.527] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0) returned 0 [0186.527] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.527] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\*.*", lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0x665abb43e0 [0186.527] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.527] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.527] SetLastError (dwErrCode=0x0) [0186.527] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.527] GetLastError () returned 0x5 [0186.527] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.527] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.528] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb49e0 [0186.529] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.530] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.530] SetLastError (dwErrCode=0x0) [0186.530] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.531] GetLastError () returned 0x5 [0186.531] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.531] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.531] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\af\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4a40 [0186.531] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.531] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.531] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0186.531] SetLastError (dwErrCode=0x0) [0186.532] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\af\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\af\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.532] GetLastError () returned 0x5 [0186.532] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.532] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.532] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.532] SetLastError (dwErrCode=0x0) [0186.532] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.532] GetLastError () returned 0x5 [0186.532] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.532] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.532] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\am\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4a40 [0186.533] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.533] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.533] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0186.533] SetLastError (dwErrCode=0x0) [0186.533] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\am\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\am\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.534] GetLastError () returned 0x5 [0186.534] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.534] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.534] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.534] SetLastError (dwErrCode=0x0) [0186.534] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.534] GetLastError () returned 0x5 [0186.534] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.534] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.534] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ar\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4440 [0186.534] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.534] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.534] FindClose (in: hFindFile=0x665abb4440 | out: hFindFile=0x665abb4440) returned 1 [0186.534] SetLastError (dwErrCode=0x0) [0186.535] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ar\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ar\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.535] GetLastError () returned 0x5 [0186.535] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.535] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.535] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.535] SetLastError (dwErrCode=0x0) [0186.535] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.535] GetLastError () returned 0x5 [0186.535] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.535] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.535] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\as\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4440 [0186.535] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.535] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.535] FindClose (in: hFindFile=0x665abb4440 | out: hFindFile=0x665abb4440) returned 1 [0186.535] SetLastError (dwErrCode=0x0) [0186.536] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\as\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\as\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.536] GetLastError () returned 0x5 [0186.536] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.536] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.536] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.536] SetLastError (dwErrCode=0x0) [0186.536] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.536] GetLastError () returned 0x5 [0186.536] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.536] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.536] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\az-Latn-AZ\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4f80 [0186.536] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.536] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.536] FindClose (in: hFindFile=0x665abb4f80 | out: hFindFile=0x665abb4f80) returned 1 [0186.537] SetLastError (dwErrCode=0x0) [0186.537] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\az-Latn-AZ\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\az-latn-az\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.537] GetLastError () returned 0x5 [0186.537] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.537] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.537] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.537] SetLastError (dwErrCode=0x0) [0186.537] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.537] GetLastError () returned 0x5 [0186.537] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.537] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.537] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\be\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb5160 [0186.538] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.538] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.538] FindClose (in: hFindFile=0x665abb5160 | out: hFindFile=0x665abb5160) returned 1 [0186.538] SetLastError (dwErrCode=0x0) [0186.538] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\be\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\be\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.538] GetLastError () returned 0x5 [0186.538] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.538] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.538] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.538] SetLastError (dwErrCode=0x0) [0186.538] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.538] GetLastError () returned 0x5 [0186.538] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.539] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.539] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bg\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4a40 [0186.541] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.541] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.541] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0186.542] SetLastError (dwErrCode=0x0) [0186.542] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bg\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\bg\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.542] GetLastError () returned 0x5 [0186.542] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.542] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.542] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.542] SetLastError (dwErrCode=0x0) [0186.542] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.542] GetLastError () returned 0x5 [0186.542] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.542] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.542] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bn-BD\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb5160 [0186.543] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.543] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.543] FindClose (in: hFindFile=0x665abb5160 | out: hFindFile=0x665abb5160) returned 1 [0186.543] SetLastError (dwErrCode=0x0) [0186.543] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bn-BD\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\bn-bd\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.543] GetLastError () returned 0x5 [0186.543] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.543] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.543] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.543] SetLastError (dwErrCode=0x0) [0186.543] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.543] GetLastError () returned 0x5 [0186.543] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.543] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.543] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bn-IN\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb5340 [0186.544] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.544] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.544] FindClose (in: hFindFile=0x665abb5340 | out: hFindFile=0x665abb5340) returned 1 [0186.544] SetLastError (dwErrCode=0x0) [0186.544] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bn-IN\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\bn-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.544] GetLastError () returned 0x5 [0186.544] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.544] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.544] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.544] SetLastError (dwErrCode=0x0) [0186.544] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.544] GetLastError () returned 0x5 [0186.544] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.545] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.545] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bs-Latn-BA\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4a40 [0186.545] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.545] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.545] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0186.545] SetLastError (dwErrCode=0x0) [0186.545] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bs-Latn-BA\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\bs-latn-ba\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.545] GetLastError () returned 0x5 [0186.545] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.545] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.545] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.545] SetLastError (dwErrCode=0x0) [0186.545] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.546] GetLastError () returned 0x5 [0186.546] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.546] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.546] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ca\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb5460 [0186.546] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.546] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.546] FindClose (in: hFindFile=0x665abb5460 | out: hFindFile=0x665abb5460) returned 1 [0186.546] SetLastError (dwErrCode=0x0) [0186.546] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ca\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ca\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.546] GetLastError () returned 0x5 [0186.546] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.547] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.547] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.547] SetLastError (dwErrCode=0x0) [0186.547] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.547] GetLastError () returned 0x5 [0186.547] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.547] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.547] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ca-ES-valencia\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4c20 [0186.547] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.547] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.547] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0186.547] SetLastError (dwErrCode=0x0) [0186.547] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ca-ES-valencia\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ca-es-valencia\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.548] GetLastError () returned 0x5 [0186.548] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.548] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.548] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.548] SetLastError (dwErrCode=0x0) [0186.548] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.548] GetLastError () returned 0x5 [0186.548] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.548] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.548] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\cs\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb5340 [0186.548] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.549] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.549] FindClose (in: hFindFile=0x665abb5340 | out: hFindFile=0x665abb5340) returned 1 [0186.549] SetLastError (dwErrCode=0x0) [0186.549] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\cs\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\cs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.549] GetLastError () returned 0x5 [0186.549] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.549] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.549] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.549] SetLastError (dwErrCode=0x0) [0186.549] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.549] GetLastError () returned 0x5 [0186.549] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.549] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.549] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\cy\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4a40 [0186.550] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.550] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.550] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0186.550] SetLastError (dwErrCode=0x0) [0186.550] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\cy\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\cy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.550] GetLastError () returned 0x5 [0186.550] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.550] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.550] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.550] SetLastError (dwErrCode=0x0) [0186.550] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.550] GetLastError () returned 0x5 [0186.550] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.550] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.550] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\da\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4440 [0186.551] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.551] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.551] FindClose (in: hFindFile=0x665abb4440 | out: hFindFile=0x665abb4440) returned 1 [0186.551] SetLastError (dwErrCode=0x0) [0186.551] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\da\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\da\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.551] GetLastError () returned 0x5 [0186.551] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.551] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.551] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.551] SetLastError (dwErrCode=0x0) [0186.551] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.551] GetLastError () returned 0x5 [0186.551] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.552] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.552] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\de\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb5160 [0186.552] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.552] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.552] FindClose (in: hFindFile=0x665abb5160 | out: hFindFile=0x665abb5160) returned 1 [0186.552] SetLastError (dwErrCode=0x0) [0186.552] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\de\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\de\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.552] GetLastError () returned 0x5 [0186.552] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.552] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.552] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.552] SetLastError (dwErrCode=0x0) [0186.552] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.552] GetLastError () returned 0x5 [0186.553] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.553] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.553] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\el\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4a40 [0186.553] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.553] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.553] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0186.553] SetLastError (dwErrCode=0x0) [0186.553] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\el\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\el\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.553] GetLastError () returned 0x5 [0186.553] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.553] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.553] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.553] SetLastError (dwErrCode=0x0) [0186.553] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.553] GetLastError () returned 0x5 [0186.554] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.554] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.554] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\es\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb55e0 [0186.554] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.554] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.554] FindClose (in: hFindFile=0x665abb55e0 | out: hFindFile=0x665abb55e0) returned 1 [0186.554] SetLastError (dwErrCode=0x0) [0186.554] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\es\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\es\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.555] GetLastError () returned 0x5 [0186.555] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.555] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.555] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.555] SetLastError (dwErrCode=0x0) [0186.555] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.555] GetLastError () returned 0x5 [0186.555] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.555] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.555] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\et\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4c20 [0186.556] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.556] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.556] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0186.556] SetLastError (dwErrCode=0x0) [0186.556] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\et\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\et\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.557] GetLastError () returned 0x5 [0186.557] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.557] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.557] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.557] SetLastError (dwErrCode=0x0) [0186.557] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.557] GetLastError () returned 0x5 [0186.557] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.557] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.557] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\eu\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4a40 [0186.557] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.557] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.557] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0186.557] SetLastError (dwErrCode=0x0) [0186.557] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\eu\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\eu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.558] GetLastError () returned 0x5 [0186.558] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.558] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.558] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.558] SetLastError (dwErrCode=0x0) [0186.558] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.558] GetLastError () returned 0x5 [0186.558] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.558] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.558] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fa\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4440 [0186.559] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.559] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.559] FindClose (in: hFindFile=0x665abb4440 | out: hFindFile=0x665abb4440) returned 1 [0186.559] SetLastError (dwErrCode=0x0) [0186.559] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fa\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\fa\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.560] GetLastError () returned 0x5 [0186.560] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.560] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.560] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.560] SetLastError (dwErrCode=0x0) [0186.560] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.560] GetLastError () returned 0x5 [0186.560] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.560] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.560] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fi\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb5760 [0186.561] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.561] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.561] FindClose (in: hFindFile=0x665abb5760 | out: hFindFile=0x665abb5760) returned 1 [0186.561] SetLastError (dwErrCode=0x0) [0186.561] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fi\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\fi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.561] GetLastError () returned 0x5 [0186.561] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.561] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.561] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.561] SetLastError (dwErrCode=0x0) [0186.561] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.562] GetLastError () returned 0x5 [0186.562] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.562] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.562] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fil\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb5040 [0186.563] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.563] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.563] FindClose (in: hFindFile=0x665abb5040 | out: hFindFile=0x665abb5040) returned 1 [0186.563] SetLastError (dwErrCode=0x0) [0186.563] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fil\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\fil\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.563] GetLastError () returned 0x5 [0186.563] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.563] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.563] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.563] SetLastError (dwErrCode=0x0) [0186.563] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.563] GetLastError () returned 0x5 [0186.563] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.563] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.564] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fr\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4a40 [0186.564] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.564] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.564] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0186.565] SetLastError (dwErrCode=0x0) [0186.565] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\fr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.565] GetLastError () returned 0x5 [0186.565] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.565] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.565] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.565] SetLastError (dwErrCode=0x0) [0186.565] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.565] GetLastError () returned 0x5 [0186.565] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.565] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.565] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ga\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb55e0 [0186.566] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.566] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.566] FindClose (in: hFindFile=0x665abb55e0 | out: hFindFile=0x665abb55e0) returned 1 [0186.566] SetLastError (dwErrCode=0x0) [0186.566] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ga\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ga\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.566] GetLastError () returned 0x5 [0186.566] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.566] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.566] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.566] SetLastError (dwErrCode=0x0) [0186.566] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.567] GetLastError () returned 0x5 [0186.567] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.567] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.567] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gd\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4a40 [0186.567] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.568] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.568] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0186.568] SetLastError (dwErrCode=0x0) [0186.568] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gd\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\gd\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.568] GetLastError () returned 0x5 [0186.568] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.568] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.568] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.568] SetLastError (dwErrCode=0x0) [0186.568] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.568] GetLastError () returned 0x5 [0186.568] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.568] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.568] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gl\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4da0 [0186.569] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.569] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.569] FindClose (in: hFindFile=0x665abb4da0 | out: hFindFile=0x665abb4da0) returned 1 [0186.569] SetLastError (dwErrCode=0x0) [0186.569] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\gl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.569] GetLastError () returned 0x5 [0186.569] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.569] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.569] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.569] SetLastError (dwErrCode=0x0) [0186.570] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.570] GetLastError () returned 0x5 [0186.570] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.570] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.570] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gu\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4440 [0186.570] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.570] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.570] FindClose (in: hFindFile=0x665abb4440 | out: hFindFile=0x665abb4440) returned 1 [0186.570] SetLastError (dwErrCode=0x0) [0186.570] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gu\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\gu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.570] GetLastError () returned 0x5 [0186.570] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.571] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.571] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.571] SetLastError (dwErrCode=0x0) [0186.571] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.571] GetLastError () returned 0x5 [0186.571] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.571] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.571] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\he\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4440 [0186.574] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.574] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.574] FindClose (in: hFindFile=0x665abb4440 | out: hFindFile=0x665abb4440) returned 1 [0186.574] SetLastError (dwErrCode=0x0) [0186.574] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\he\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\he\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.574] GetLastError () returned 0x5 [0186.574] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.574] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.574] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.574] SetLastError (dwErrCode=0x0) [0186.574] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.575] GetLastError () returned 0x5 [0186.575] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.575] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.575] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hi\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4f80 [0186.576] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.576] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.576] FindClose (in: hFindFile=0x665abb4f80 | out: hFindFile=0x665abb4f80) returned 1 [0186.576] SetLastError (dwErrCode=0x0) [0186.576] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hi\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\hi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.576] GetLastError () returned 0x5 [0186.576] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.576] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.576] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.576] SetLastError (dwErrCode=0x0) [0186.576] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.576] GetLastError () returned 0x5 [0186.576] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.576] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.577] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hr\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4440 [0186.577] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.577] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.577] FindClose (in: hFindFile=0x665abb4440 | out: hFindFile=0x665abb4440) returned 1 [0186.577] SetLastError (dwErrCode=0x0) [0186.577] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\hr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.578] GetLastError () returned 0x5 [0186.578] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.578] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.578] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.578] SetLastError (dwErrCode=0x0) [0186.578] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.578] GetLastError () returned 0x5 [0186.578] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.578] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.578] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hu\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb5040 [0186.579] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.579] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.579] FindClose (in: hFindFile=0x665abb5040 | out: hFindFile=0x665abb5040) returned 1 [0186.580] SetLastError (dwErrCode=0x0) [0186.580] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hu\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\hu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.580] GetLastError () returned 0x5 [0186.580] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.580] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.580] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.580] SetLastError (dwErrCode=0x0) [0186.580] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.580] GetLastError () returned 0x5 [0186.580] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.580] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.580] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hy\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4440 [0186.581] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.581] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.581] FindClose (in: hFindFile=0x665abb4440 | out: hFindFile=0x665abb4440) returned 1 [0186.585] SetLastError (dwErrCode=0x0) [0186.585] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hy\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\hy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.585] GetLastError () returned 0x5 [0186.585] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.585] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.585] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.585] SetLastError (dwErrCode=0x0) [0186.585] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.585] GetLastError () returned 0x5 [0186.585] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.585] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.585] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\id\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4440 [0186.586] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.586] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.586] FindClose (in: hFindFile=0x665abb4440 | out: hFindFile=0x665abb4440) returned 1 [0186.586] SetLastError (dwErrCode=0x0) [0186.586] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\id\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\id\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.586] GetLastError () returned 0x5 [0186.586] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.586] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.586] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.586] SetLastError (dwErrCode=0x0) [0186.586] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.587] GetLastError () returned 0x5 [0186.587] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.587] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.587] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\is\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb5760 [0186.587] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.587] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.587] FindClose (in: hFindFile=0x665abb5760 | out: hFindFile=0x665abb5760) returned 1 [0186.587] SetLastError (dwErrCode=0x0) [0186.587] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\is\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\is\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.587] GetLastError () returned 0x5 [0186.587] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.587] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.587] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.587] SetLastError (dwErrCode=0x0) [0186.587] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.588] GetLastError () returned 0x5 [0186.588] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.588] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.588] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\it\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4a40 [0186.588] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.588] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.588] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0186.588] SetLastError (dwErrCode=0x0) [0186.588] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\it\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\it\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.588] GetLastError () returned 0x5 [0186.588] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.588] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.588] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.588] SetLastError (dwErrCode=0x0) [0186.588] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.589] GetLastError () returned 0x5 [0186.589] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.589] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.589] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ja\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4440 [0186.589] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.589] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.589] FindClose (in: hFindFile=0x665abb4440 | out: hFindFile=0x665abb4440) returned 1 [0186.589] SetLastError (dwErrCode=0x0) [0186.589] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ja\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ja\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.589] GetLastError () returned 0x5 [0186.589] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.589] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.589] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.590] SetLastError (dwErrCode=0x0) [0186.590] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.591] GetLastError () returned 0x5 [0186.591] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.591] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.591] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ka\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4a40 [0186.591] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.591] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.591] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0186.591] SetLastError (dwErrCode=0x0) [0186.591] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ka\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ka\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.592] GetLastError () returned 0x5 [0186.592] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.592] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.592] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.592] SetLastError (dwErrCode=0x0) [0186.592] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.592] GetLastError () returned 0x5 [0186.592] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.592] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.592] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kk\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb5760 [0186.593] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.593] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.593] FindClose (in: hFindFile=0x665abb5760 | out: hFindFile=0x665abb5760) returned 1 [0186.593] SetLastError (dwErrCode=0x0) [0186.593] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kk\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\kk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.593] GetLastError () returned 0x5 [0186.593] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.593] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.593] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.594] SetLastError (dwErrCode=0x0) [0186.594] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.594] GetLastError () returned 0x5 [0186.594] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.594] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.594] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\km\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4a40 [0186.594] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.594] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.595] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0186.595] SetLastError (dwErrCode=0x0) [0186.595] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\km\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\km\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.595] GetLastError () returned 0x5 [0186.595] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.595] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.595] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.595] SetLastError (dwErrCode=0x0) [0186.595] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.595] GetLastError () returned 0x5 [0186.595] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.595] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.595] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kn\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4a40 [0186.596] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.596] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.596] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0186.596] SetLastError (dwErrCode=0x0) [0186.596] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kn\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\kn\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.596] GetLastError () returned 0x5 [0186.596] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.596] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.596] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.596] SetLastError (dwErrCode=0x0) [0186.596] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.597] GetLastError () returned 0x5 [0186.597] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.597] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.597] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ko\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4440 [0186.597] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.597] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.597] FindClose (in: hFindFile=0x665abb4440 | out: hFindFile=0x665abb4440) returned 1 [0186.597] SetLastError (dwErrCode=0x0) [0186.597] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ko\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ko\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.597] GetLastError () returned 0x5 [0186.597] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.597] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.597] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.597] SetLastError (dwErrCode=0x0) [0186.597] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.598] GetLastError () returned 0x5 [0186.598] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.598] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.598] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kok\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb5760 [0186.598] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.598] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.598] FindClose (in: hFindFile=0x665abb5760 | out: hFindFile=0x665abb5760) returned 1 [0186.599] SetLastError (dwErrCode=0x0) [0186.599] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kok\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\kok\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.599] GetLastError () returned 0x5 [0186.599] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.599] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.599] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.599] SetLastError (dwErrCode=0x0) [0186.599] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.599] GetLastError () returned 0x5 [0186.599] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.599] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.599] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ky\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4440 [0186.599] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.599] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.599] FindClose (in: hFindFile=0x665abb4440 | out: hFindFile=0x665abb4440) returned 1 [0186.600] SetLastError (dwErrCode=0x0) [0186.600] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ky\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ky\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.600] GetLastError () returned 0x5 [0186.600] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.600] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.600] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.600] SetLastError (dwErrCode=0x0) [0186.600] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.600] GetLastError () returned 0x5 [0186.600] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.600] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.600] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lb\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb5580 [0186.600] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.600] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.601] FindClose (in: hFindFile=0x665abb5580 | out: hFindFile=0x665abb5580) returned 1 [0186.601] SetLastError (dwErrCode=0x0) [0186.601] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lb\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\lb\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.601] GetLastError () returned 0x5 [0186.601] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.601] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.601] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.601] SetLastError (dwErrCode=0x0) [0186.601] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.601] GetLastError () returned 0x5 [0186.601] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.601] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.601] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lt\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4c20 [0186.601] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.601] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.602] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0186.602] SetLastError (dwErrCode=0x0) [0186.602] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lt\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\lt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.602] GetLastError () returned 0x5 [0186.602] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.602] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.602] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.602] SetLastError (dwErrCode=0x0) [0186.602] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.602] GetLastError () returned 0x5 [0186.602] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.602] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.602] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lv\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4a40 [0186.602] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.602] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.603] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0186.603] SetLastError (dwErrCode=0x0) [0186.603] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lv\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\lv\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.603] GetLastError () returned 0x5 [0186.603] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.603] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.603] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.603] SetLastError (dwErrCode=0x0) [0186.603] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.603] GetLastError () returned 0x5 [0186.603] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.603] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.603] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mi\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4c20 [0186.603] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.604] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.604] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0186.604] SetLastError (dwErrCode=0x0) [0186.604] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mi\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\mi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.604] GetLastError () returned 0x5 [0186.604] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.604] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.604] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.604] SetLastError (dwErrCode=0x0) [0186.604] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.604] GetLastError () returned 0x5 [0186.604] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.604] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.604] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mk\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4f80 [0186.607] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.607] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.607] FindClose (in: hFindFile=0x665abb4f80 | out: hFindFile=0x665abb4f80) returned 1 [0186.607] SetLastError (dwErrCode=0x0) [0186.607] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mk\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\mk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.607] GetLastError () returned 0x5 [0186.607] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.607] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.607] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.607] SetLastError (dwErrCode=0x0) [0186.607] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.608] GetLastError () returned 0x5 [0186.608] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.608] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.608] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ml\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb57c0 [0186.608] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.608] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.608] FindClose (in: hFindFile=0x665abb57c0 | out: hFindFile=0x665abb57c0) returned 1 [0186.608] SetLastError (dwErrCode=0x0) [0186.608] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ml\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ml\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.608] GetLastError () returned 0x5 [0186.608] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.608] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.608] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.608] SetLastError (dwErrCode=0x0) [0186.608] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.609] GetLastError () returned 0x5 [0186.609] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.609] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.609] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mn\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb5760 [0186.609] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.609] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.609] FindClose (in: hFindFile=0x665abb5760 | out: hFindFile=0x665abb5760) returned 1 [0186.610] SetLastError (dwErrCode=0x0) [0186.610] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mn\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\mn\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.610] GetLastError () returned 0x5 [0186.610] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.610] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.610] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.610] SetLastError (dwErrCode=0x0) [0186.610] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.610] GetLastError () returned 0x5 [0186.610] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.610] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.610] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mr\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb5040 [0186.610] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.610] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.610] FindClose (in: hFindFile=0x665abb5040 | out: hFindFile=0x665abb5040) returned 1 [0186.610] SetLastError (dwErrCode=0x0) [0186.611] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\mr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.611] GetLastError () returned 0x5 [0186.611] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.611] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.611] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.611] SetLastError (dwErrCode=0x0) [0186.611] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.611] GetLastError () returned 0x5 [0186.611] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.611] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.611] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ms\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4a40 [0186.612] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.612] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.612] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0186.612] SetLastError (dwErrCode=0x0) [0186.612] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ms\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ms\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.612] GetLastError () returned 0x5 [0186.612] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.612] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.612] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.612] SetLastError (dwErrCode=0x0) [0186.612] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.612] GetLastError () returned 0x5 [0186.613] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.613] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.613] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mt\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4440 [0186.613] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.613] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.613] FindClose (in: hFindFile=0x665abb4440 | out: hFindFile=0x665abb4440) returned 1 [0186.613] SetLastError (dwErrCode=0x0) [0186.613] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mt\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\mt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.613] GetLastError () returned 0x5 [0186.613] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.613] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.613] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.613] SetLastError (dwErrCode=0x0) [0186.613] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.613] GetLastError () returned 0x5 [0186.613] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.614] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.614] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ne\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb5340 [0186.614] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.614] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.614] FindClose (in: hFindFile=0x665abb5340 | out: hFindFile=0x665abb5340) returned 1 [0186.614] SetLastError (dwErrCode=0x0) [0186.614] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ne\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ne\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.615] GetLastError () returned 0x5 [0186.615] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.615] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.615] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.615] SetLastError (dwErrCode=0x0) [0186.615] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.615] GetLastError () returned 0x5 [0186.615] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.615] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.615] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\nl\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb5040 [0186.615] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.615] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.615] FindClose (in: hFindFile=0x665abb5040 | out: hFindFile=0x665abb5040) returned 1 [0186.615] SetLastError (dwErrCode=0x0) [0186.615] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\nl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\nl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.616] GetLastError () returned 0x5 [0186.616] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.616] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.616] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.616] SetLastError (dwErrCode=0x0) [0186.616] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.616] GetLastError () returned 0x5 [0186.616] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.616] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.616] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\nn-NO\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4a40 [0186.617] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.617] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.617] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0186.617] SetLastError (dwErrCode=0x0) [0186.617] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\nn-NO\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\nn-no\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.617] GetLastError () returned 0x5 [0186.617] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.617] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.617] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.617] SetLastError (dwErrCode=0x0) [0186.617] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.617] GetLastError () returned 0x5 [0186.617] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.617] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.618] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\no\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4440 [0186.618] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.618] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.618] FindClose (in: hFindFile=0x665abb4440 | out: hFindFile=0x665abb4440) returned 1 [0186.618] SetLastError (dwErrCode=0x0) [0186.618] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\no\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\no\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.619] GetLastError () returned 0x5 [0186.619] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.619] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.619] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.619] SetLastError (dwErrCode=0x0) [0186.619] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.619] GetLastError () returned 0x5 [0186.619] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.619] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.619] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\or\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4a40 [0186.620] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.620] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.620] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0186.620] SetLastError (dwErrCode=0x0) [0186.620] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\or\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\or\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.621] GetLastError () returned 0x5 [0186.621] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.621] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.621] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.621] SetLastError (dwErrCode=0x0) [0186.621] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.621] GetLastError () returned 0x5 [0186.621] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.621] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.621] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pa\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4440 [0186.622] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.622] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.622] FindClose (in: hFindFile=0x665abb4440 | out: hFindFile=0x665abb4440) returned 1 [0186.622] SetLastError (dwErrCode=0x0) [0186.622] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pa\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\pa\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.622] GetLastError () returned 0x5 [0186.622] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.622] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.622] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.622] SetLastError (dwErrCode=0x0) [0186.622] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.622] GetLastError () returned 0x5 [0186.622] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.622] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.622] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pl\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb5340 [0186.623] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.623] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.623] FindClose (in: hFindFile=0x665abb5340 | out: hFindFile=0x665abb5340) returned 1 [0186.623] SetLastError (dwErrCode=0x0) [0186.623] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\pl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.623] GetLastError () returned 0x5 [0186.623] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.623] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.623] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.623] SetLastError (dwErrCode=0x0) [0186.623] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.623] GetLastError () returned 0x5 [0186.623] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.623] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.624] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\prs-AF\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4a40 [0186.624] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.624] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.624] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0186.624] SetLastError (dwErrCode=0x0) [0186.624] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\prs-AF\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\prs-af\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.625] GetLastError () returned 0x5 [0186.625] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.625] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.625] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.625] SetLastError (dwErrCode=0x0) [0186.625] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.625] GetLastError () returned 0x5 [0186.625] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.625] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.625] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-BR\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4da0 [0186.626] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.626] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.626] FindClose (in: hFindFile=0x665abb4da0 | out: hFindFile=0x665abb4da0) returned 1 [0186.626] SetLastError (dwErrCode=0x0) [0186.626] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-BR\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\pt-br\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.626] GetLastError () returned 0x5 [0186.626] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.626] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.626] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.626] SetLastError (dwErrCode=0x0) [0186.626] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.627] GetLastError () returned 0x5 [0186.627] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.627] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.627] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-pt\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4f80 [0186.627] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.627] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.627] FindClose (in: hFindFile=0x665abb4f80 | out: hFindFile=0x665abb4f80) returned 1 [0186.627] SetLastError (dwErrCode=0x0) [0186.628] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-pt\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\pt-pt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.628] GetLastError () returned 0x5 [0186.628] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.628] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.628] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.628] SetLastError (dwErrCode=0x0) [0186.628] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.628] GetLastError () returned 0x5 [0186.628] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.628] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.628] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\quz\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4440 [0186.628] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.628] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.628] FindClose (in: hFindFile=0x665abb4440 | out: hFindFile=0x665abb4440) returned 1 [0186.628] SetLastError (dwErrCode=0x0) [0186.629] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\quz\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\quz\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.629] GetLastError () returned 0x5 [0186.629] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.629] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.629] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.629] SetLastError (dwErrCode=0x0) [0186.629] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.629] GetLastError () returned 0x5 [0186.629] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.629] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.629] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ro\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4440 [0186.629] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.629] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.629] FindClose (in: hFindFile=0x665abb4440 | out: hFindFile=0x665abb4440) returned 1 [0186.629] SetLastError (dwErrCode=0x0) [0186.629] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ro\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ro\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.630] GetLastError () returned 0x5 [0186.630] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.630] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.630] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.630] SetLastError (dwErrCode=0x0) [0186.630] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.630] GetLastError () returned 0x5 [0186.630] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.630] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.630] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ru\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4c20 [0186.630] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.630] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.630] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0186.630] SetLastError (dwErrCode=0x0) [0186.630] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ru\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ru\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.631] GetLastError () returned 0x5 [0186.631] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.631] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.631] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.631] SetLastError (dwErrCode=0x0) [0186.631] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.631] GetLastError () returned 0x5 [0186.631] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.631] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.631] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sd-Arab-PK\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4a40 [0186.632] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.632] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.632] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0186.632] SetLastError (dwErrCode=0x0) [0186.632] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sd-Arab-PK\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sd-arab-pk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.632] GetLastError () returned 0x5 [0186.632] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.632] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.632] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.632] SetLastError (dwErrCode=0x0) [0186.632] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.632] GetLastError () returned 0x5 [0186.632] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.632] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.633] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\si\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4da0 [0186.633] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.633] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.633] FindClose (in: hFindFile=0x665abb4da0 | out: hFindFile=0x665abb4da0) returned 1 [0186.633] SetLastError (dwErrCode=0x0) [0186.633] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\si\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\si\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.634] GetLastError () returned 0x5 [0186.634] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.634] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.634] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.634] SetLastError (dwErrCode=0x0) [0186.634] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.634] GetLastError () returned 0x5 [0186.634] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.634] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.634] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sk\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4440 [0186.635] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.635] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.635] FindClose (in: hFindFile=0x665abb4440 | out: hFindFile=0x665abb4440) returned 1 [0186.635] SetLastError (dwErrCode=0x0) [0186.635] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sk\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.635] GetLastError () returned 0x5 [0186.635] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.635] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.635] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.635] SetLastError (dwErrCode=0x0) [0186.635] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.635] GetLastError () returned 0x5 [0186.635] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.636] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.636] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sl\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4440 [0186.636] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.636] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.636] FindClose (in: hFindFile=0x665abb4440 | out: hFindFile=0x665abb4440) returned 1 [0186.636] SetLastError (dwErrCode=0x0) [0186.636] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.636] GetLastError () returned 0x5 [0186.636] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.636] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.636] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.636] SetLastError (dwErrCode=0x0) [0186.636] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.637] GetLastError () returned 0x5 [0186.637] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.637] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.637] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sq\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4a40 [0186.637] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.637] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.638] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0186.638] SetLastError (dwErrCode=0x0) [0186.638] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sq\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sq\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.638] GetLastError () returned 0x5 [0186.638] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.638] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.638] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.638] SetLastError (dwErrCode=0x0) [0186.638] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.638] GetLastError () returned 0x5 [0186.638] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.639] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.639] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Cyrl\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb5580 [0186.639] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.639] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.639] FindClose (in: hFindFile=0x665abb5580 | out: hFindFile=0x665abb5580) returned 1 [0186.639] SetLastError (dwErrCode=0x0) [0186.639] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Cyrl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sr-cyrl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.639] GetLastError () returned 0x5 [0186.639] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.639] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.639] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.639] SetLastError (dwErrCode=0x0) [0186.639] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.640] GetLastError () returned 0x5 [0186.640] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.640] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.640] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Cyrl-BA\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4a40 [0186.641] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.641] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.641] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0186.641] SetLastError (dwErrCode=0x0) [0186.641] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Cyrl-BA\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sr-cyrl-ba\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.641] GetLastError () returned 0x5 [0186.641] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.641] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.641] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.641] SetLastError (dwErrCode=0x0) [0186.641] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.642] GetLastError () returned 0x5 [0186.642] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.642] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.642] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4a40 [0186.643] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.643] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.643] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0186.643] SetLastError (dwErrCode=0x0) [0186.643] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sr-latn\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.643] GetLastError () returned 0x5 [0186.643] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.643] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.643] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.643] SetLastError (dwErrCode=0x0) [0186.643] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.643] GetLastError () returned 0x5 [0186.644] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.644] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.644] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn-CS\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4440 [0186.644] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.644] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.644] FindClose (in: hFindFile=0x665abb4440 | out: hFindFile=0x665abb4440) returned 1 [0186.644] SetLastError (dwErrCode=0x0) [0186.644] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn-CS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sr-latn-cs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.645] GetLastError () returned 0x5 [0186.645] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.645] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.645] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.645] SetLastError (dwErrCode=0x0) [0186.645] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.645] GetLastError () returned 0x5 [0186.645] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.645] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.645] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sv\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb5160 [0186.646] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.646] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.646] FindClose (in: hFindFile=0x665abb5160 | out: hFindFile=0x665abb5160) returned 1 [0186.646] SetLastError (dwErrCode=0x0) [0186.646] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sv\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sv\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.646] GetLastError () returned 0x5 [0186.646] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.646] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.646] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.646] SetLastError (dwErrCode=0x0) [0186.646] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.647] GetLastError () returned 0x5 [0186.647] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.647] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.647] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sw\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4a40 [0186.647] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.647] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.647] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0186.648] SetLastError (dwErrCode=0x0) [0186.648] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sw\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sw\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.648] GetLastError () returned 0x5 [0186.648] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.648] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.648] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.648] SetLastError (dwErrCode=0x0) [0186.648] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.648] GetLastError () returned 0x5 [0186.648] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.648] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.648] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ta\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb55e0 [0186.649] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.649] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.649] FindClose (in: hFindFile=0x665abb55e0 | out: hFindFile=0x665abb55e0) returned 1 [0186.649] SetLastError (dwErrCode=0x0) [0186.649] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ta\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ta\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.649] GetLastError () returned 0x5 [0186.649] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.649] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.649] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.649] SetLastError (dwErrCode=0x0) [0186.649] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.649] GetLastError () returned 0x5 [0186.649] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.649] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.649] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\te\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4c20 [0186.650] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.650] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.650] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0186.650] SetLastError (dwErrCode=0x0) [0186.650] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\te\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\te\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.650] GetLastError () returned 0x5 [0186.651] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.651] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.651] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.651] SetLastError (dwErrCode=0x0) [0186.651] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.651] GetLastError () returned 0x5 [0186.651] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.651] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.651] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\th\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4a40 [0186.652] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.652] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.652] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0186.652] SetLastError (dwErrCode=0x0) [0186.652] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\th\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\th\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.652] GetLastError () returned 0x5 [0186.652] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.652] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.652] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.652] SetLastError (dwErrCode=0x0) [0186.652] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.652] GetLastError () returned 0x5 [0186.652] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.652] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.653] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tk\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4440 [0186.653] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.653] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.653] FindClose (in: hFindFile=0x665abb4440 | out: hFindFile=0x665abb4440) returned 1 [0186.653] SetLastError (dwErrCode=0x0) [0186.653] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tk\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\tk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.654] GetLastError () returned 0x5 [0186.654] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.654] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.654] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.654] SetLastError (dwErrCode=0x0) [0186.654] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.654] GetLastError () returned 0x5 [0186.654] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.654] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.654] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tr\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb5760 [0186.655] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.655] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.655] FindClose (in: hFindFile=0x665abb5760 | out: hFindFile=0x665abb5760) returned 1 [0186.655] SetLastError (dwErrCode=0x0) [0186.655] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\tr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.655] GetLastError () returned 0x5 [0186.655] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.655] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.655] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.655] SetLastError (dwErrCode=0x0) [0186.655] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.656] GetLastError () returned 0x5 [0186.656] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.656] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.656] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tt\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4da0 [0186.656] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.656] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.656] FindClose (in: hFindFile=0x665abb4da0 | out: hFindFile=0x665abb4da0) returned 1 [0186.656] SetLastError (dwErrCode=0x0) [0186.656] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tt\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\tt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.657] GetLastError () returned 0x5 [0186.657] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.657] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.657] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.657] SetLastError (dwErrCode=0x0) [0186.657] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.657] GetLastError () returned 0x5 [0186.657] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.657] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.657] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ug\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb5460 [0186.657] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.657] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.657] FindClose (in: hFindFile=0x665abb5460 | out: hFindFile=0x665abb5460) returned 1 [0186.657] SetLastError (dwErrCode=0x0) [0186.657] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ug\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ug\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.658] GetLastError () returned 0x5 [0186.658] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.658] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.658] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.658] SetLastError (dwErrCode=0x0) [0186.658] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.658] GetLastError () returned 0x5 [0186.658] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.658] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.658] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\uk\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4a40 [0186.658] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.658] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.658] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0186.662] SetLastError (dwErrCode=0x0) [0186.662] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\uk\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\uk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.662] GetLastError () returned 0x5 [0186.662] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.662] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.663] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.663] SetLastError (dwErrCode=0x0) [0186.663] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.664] GetLastError () returned 0x5 [0186.664] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.664] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.664] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ur\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4440 [0186.665] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.665] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.665] FindClose (in: hFindFile=0x665abb4440 | out: hFindFile=0x665abb4440) returned 1 [0186.665] SetLastError (dwErrCode=0x0) [0186.665] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ur\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ur\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.665] GetLastError () returned 0x5 [0186.665] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.665] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.665] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.665] SetLastError (dwErrCode=0x0) [0186.665] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.665] GetLastError () returned 0x5 [0186.665] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.665] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.665] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\uz-Latn-UZ\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4da0 [0186.666] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.666] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.666] FindClose (in: hFindFile=0x665abb4da0 | out: hFindFile=0x665abb4da0) returned 1 [0186.666] SetLastError (dwErrCode=0x0) [0186.666] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\uz-Latn-UZ\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\uz-latn-uz\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.666] GetLastError () returned 0x5 [0186.666] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.666] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.666] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.666] SetLastError (dwErrCode=0x0) [0186.666] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.666] GetLastError () returned 0x5 [0186.666] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.666] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.667] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\vi\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4440 [0186.667] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.667] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.667] FindClose (in: hFindFile=0x665abb4440 | out: hFindFile=0x665abb4440) returned 1 [0186.667] SetLastError (dwErrCode=0x0) [0186.667] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\vi\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\vi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.668] GetLastError () returned 0x5 [0186.668] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.668] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.668] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.668] SetLastError (dwErrCode=0x0) [0186.668] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.668] GetLastError () returned 0x5 [0186.668] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.668] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.668] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANS\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb5340 [0186.672] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.672] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.672] FindClose (in: hFindFile=0x665abb5340 | out: hFindFile=0x665abb5340) returned 1 [0186.672] SetLastError (dwErrCode=0x0) [0186.672] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\zh-hans\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.672] GetLastError () returned 0x5 [0186.672] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.672] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.672] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.672] SetLastError (dwErrCode=0x0) [0186.672] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.672] GetLastError () returned 0x5 [0186.673] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.673] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.673] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANT\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4440 [0186.673] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.673] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.673] FindClose (in: hFindFile=0x665abb4440 | out: hFindFile=0x665abb4440) returned 1 [0186.673] SetLastError (dwErrCode=0x0) [0186.673] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANT\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\zh-hant\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.673] GetLastError () returned 0x5 [0186.673] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.673] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.673] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.673] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0186.673] SetLastError (dwErrCode=0x0) [0186.673] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.674] GetLastError () returned 0x5 [0186.674] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.674] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.674] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0 [0186.674] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0186.674] SetLastError (dwErrCode=0x0) [0186.674] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\microsoft power query for excel integrated\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.674] GetLastError () returned 0x5 [0186.674] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0) returned 0 [0186.674] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.674] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.674] SetLastError (dwErrCode=0x0) [0186.674] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.674] GetLastError () returned 0x5 [0186.674] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0) returned 0 [0186.674] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.674] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power Map Excel Add-in\\*.*", lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0x665abb5040 [0186.675] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.675] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0 [0186.675] FindClose (in: hFindFile=0x665abb5040 | out: hFindFile=0x665abb5040) returned 1 [0186.675] SetLastError (dwErrCode=0x0) [0186.675] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power Map Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power map excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.675] GetLastError () returned 0x5 [0186.675] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0) returned 0 [0186.675] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.676] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.676] SetLastError (dwErrCode=0x0) [0186.676] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.676] GetLastError () returned 0x5 [0186.676] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0) returned 0 [0186.676] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.676] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\*.*", lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0x665abb49e0 [0186.677] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.678] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.678] SetLastError (dwErrCode=0x0) [0186.678] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.678] GetLastError () returned 0x5 [0186.678] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.678] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.678] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ar\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb5040 [0186.681] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.681] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.681] FindClose (in: hFindFile=0x665abb5040 | out: hFindFile=0x665abb5040) returned 1 [0186.681] SetLastError (dwErrCode=0x0) [0186.681] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ar\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ar\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.682] GetLastError () returned 0x5 [0186.682] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.682] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.682] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.682] SetLastError (dwErrCode=0x0) [0186.682] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.682] GetLastError () returned 0x5 [0186.682] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.682] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.682] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\bg\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb5160 [0186.683] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.683] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.683] FindClose (in: hFindFile=0x665abb5160 | out: hFindFile=0x665abb5160) returned 1 [0186.683] SetLastError (dwErrCode=0x0) [0186.683] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\bg\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\bg\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.683] GetLastError () returned 0x5 [0186.683] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.683] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.683] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.683] SetLastError (dwErrCode=0x0) [0186.683] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.683] GetLastError () returned 0x5 [0186.683] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.683] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.683] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ca\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb43e0 [0186.684] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.684] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.684] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0186.684] SetLastError (dwErrCode=0x0) [0186.684] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ca\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ca\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.684] GetLastError () returned 0x5 [0186.684] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.684] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.684] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.684] SetLastError (dwErrCode=0x0) [0186.685] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.685] GetLastError () returned 0x5 [0186.685] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.685] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.685] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\cs\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb4f80 [0186.685] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.686] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.686] FindClose (in: hFindFile=0x665abb4f80 | out: hFindFile=0x665abb4f80) returned 1 [0186.686] SetLastError (dwErrCode=0x0) [0186.686] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\cs\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\cs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.686] GetLastError () returned 0x5 [0186.686] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.686] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.686] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.686] SetLastError (dwErrCode=0x0) [0186.686] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.686] GetLastError () returned 0x5 [0186.686] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.686] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.686] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\da\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb43e0 [0186.686] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.686] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.687] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0186.687] SetLastError (dwErrCode=0x0) [0186.687] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\da\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\da\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.687] GetLastError () returned 0x5 [0186.687] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.687] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.687] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.687] SetLastError (dwErrCode=0x0) [0186.687] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.687] GetLastError () returned 0x5 [0186.687] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.687] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.687] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\de\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb5340 [0186.688] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.688] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.688] FindClose (in: hFindFile=0x665abb5340 | out: hFindFile=0x665abb5340) returned 1 [0186.688] SetLastError (dwErrCode=0x0) [0186.688] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\de\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\de\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.689] GetLastError () returned 0x5 [0186.689] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.689] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.689] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.689] SetLastError (dwErrCode=0x0) [0186.689] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.689] GetLastError () returned 0x5 [0186.689] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.689] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.689] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\el\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb43e0 [0186.690] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.690] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.690] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0186.690] SetLastError (dwErrCode=0x0) [0186.690] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\el\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\el\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.690] GetLastError () returned 0x5 [0186.690] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.690] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.690] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.690] SetLastError (dwErrCode=0x0) [0186.690] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.690] GetLastError () returned 0x5 [0186.690] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.690] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.690] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\es\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb5760 [0186.691] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.691] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.691] FindClose (in: hFindFile=0x665abb5760 | out: hFindFile=0x665abb5760) returned 1 [0186.691] SetLastError (dwErrCode=0x0) [0186.691] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\es\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\es\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.692] GetLastError () returned 0x5 [0186.692] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.692] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.692] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.692] SetLastError (dwErrCode=0x0) [0186.692] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.692] GetLastError () returned 0x5 [0186.692] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.692] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.692] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\et\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb4c20 [0186.692] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.692] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.692] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0186.692] SetLastError (dwErrCode=0x0) [0186.692] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\et\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\et\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.693] GetLastError () returned 0x5 [0186.693] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.693] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.693] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.693] SetLastError (dwErrCode=0x0) [0186.693] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.693] GetLastError () returned 0x5 [0186.693] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.693] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.693] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\eu\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb5760 [0186.694] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.694] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.694] FindClose (in: hFindFile=0x665abb5760 | out: hFindFile=0x665abb5760) returned 1 [0186.694] SetLastError (dwErrCode=0x0) [0186.694] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\eu\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\eu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.694] GetLastError () returned 0x5 [0186.694] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.694] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.694] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.694] SetLastError (dwErrCode=0x0) [0186.694] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.694] GetLastError () returned 0x5 [0186.694] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.694] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.695] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fi\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb4c80 [0186.695] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.695] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.695] FindClose (in: hFindFile=0x665abb4c80 | out: hFindFile=0x665abb4c80) returned 1 [0186.695] SetLastError (dwErrCode=0x0) [0186.695] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fi\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\fi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.696] GetLastError () returned 0x5 [0186.696] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.696] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.696] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.696] SetLastError (dwErrCode=0x0) [0186.696] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.696] GetLastError () returned 0x5 [0186.696] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.696] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.696] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fr\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb4c20 [0186.697] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.697] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.697] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0186.697] SetLastError (dwErrCode=0x0) [0186.697] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\fr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.697] GetLastError () returned 0x5 [0186.697] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.697] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.697] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.697] SetLastError (dwErrCode=0x0) [0186.697] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.697] GetLastError () returned 0x5 [0186.697] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.697] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.698] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\gl\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb4a40 [0186.698] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.698] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.698] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0186.698] SetLastError (dwErrCode=0x0) [0186.698] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\gl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\gl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.699] GetLastError () returned 0x5 [0186.699] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.699] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.699] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.699] SetLastError (dwErrCode=0x0) [0186.699] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.699] GetLastError () returned 0x5 [0186.699] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.699] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.699] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\he\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb4a40 [0186.700] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.700] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.700] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0186.700] SetLastError (dwErrCode=0x0) [0186.700] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\he\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\he\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.700] GetLastError () returned 0x5 [0186.700] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.700] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.700] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.700] SetLastError (dwErrCode=0x0) [0186.700] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.701] GetLastError () returned 0x5 [0186.701] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.701] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.701] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hi\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb5160 [0186.701] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.702] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.702] FindClose (in: hFindFile=0x665abb5160 | out: hFindFile=0x665abb5160) returned 1 [0186.702] SetLastError (dwErrCode=0x0) [0186.702] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hi\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\hi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.702] GetLastError () returned 0x5 [0186.702] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.702] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.702] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.702] SetLastError (dwErrCode=0x0) [0186.702] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.702] GetLastError () returned 0x5 [0186.702] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.702] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.702] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hr\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb4a40 [0186.710] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.710] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.710] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0186.710] SetLastError (dwErrCode=0x0) [0186.710] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\hr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.710] GetLastError () returned 0x5 [0186.710] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.710] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.710] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.710] SetLastError (dwErrCode=0x0) [0186.710] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.710] GetLastError () returned 0x5 [0186.710] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.710] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.711] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hu\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb5760 [0186.711] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.711] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.711] FindClose (in: hFindFile=0x665abb5760 | out: hFindFile=0x665abb5760) returned 1 [0186.711] SetLastError (dwErrCode=0x0) [0186.711] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hu\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\hu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.711] GetLastError () returned 0x5 [0186.711] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.711] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.711] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.711] SetLastError (dwErrCode=0x0) [0186.711] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.711] GetLastError () returned 0x5 [0186.711] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.711] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.711] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\id\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb55e0 [0186.712] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.712] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.712] FindClose (in: hFindFile=0x665abb55e0 | out: hFindFile=0x665abb55e0) returned 1 [0186.712] SetLastError (dwErrCode=0x0) [0186.712] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\id\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\id\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.713] GetLastError () returned 0x5 [0186.713] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.713] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.713] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.713] SetLastError (dwErrCode=0x0) [0186.713] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.713] GetLastError () returned 0x5 [0186.713] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.713] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.713] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\it\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb5340 [0186.714] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.714] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.714] FindClose (in: hFindFile=0x665abb5340 | out: hFindFile=0x665abb5340) returned 1 [0186.714] SetLastError (dwErrCode=0x0) [0186.714] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\it\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\it\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.714] GetLastError () returned 0x5 [0186.714] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.714] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.714] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.714] SetLastError (dwErrCode=0x0) [0186.714] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.714] GetLastError () returned 0x5 [0186.714] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.714] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.714] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ja\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb57c0 [0186.714] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.715] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.715] FindClose (in: hFindFile=0x665abb57c0 | out: hFindFile=0x665abb57c0) returned 1 [0186.715] SetLastError (dwErrCode=0x0) [0186.715] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ja\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ja\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.715] GetLastError () returned 0x5 [0186.715] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.715] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.715] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.715] SetLastError (dwErrCode=0x0) [0186.715] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.715] GetLastError () returned 0x5 [0186.715] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.715] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.715] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\kk\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb4a40 [0186.716] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.716] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.716] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0186.716] SetLastError (dwErrCode=0x0) [0186.716] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\kk\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\kk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.716] GetLastError () returned 0x5 [0186.716] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.716] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.716] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.716] SetLastError (dwErrCode=0x0) [0186.716] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.717] GetLastError () returned 0x5 [0186.717] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.717] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.717] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ko\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb5340 [0186.717] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.717] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.717] FindClose (in: hFindFile=0x665abb5340 | out: hFindFile=0x665abb5340) returned 1 [0186.717] SetLastError (dwErrCode=0x0) [0186.717] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ko\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ko\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.717] GetLastError () returned 0x5 [0186.717] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.717] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.717] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.717] SetLastError (dwErrCode=0x0) [0186.717] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.718] GetLastError () returned 0x5 [0186.718] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.718] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.718] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lt\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb43e0 [0186.719] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.719] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.719] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0186.719] SetLastError (dwErrCode=0x0) [0186.719] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lt\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\lt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.719] GetLastError () returned 0x5 [0186.719] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.719] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.719] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.719] SetLastError (dwErrCode=0x0) [0186.719] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.719] GetLastError () returned 0x5 [0186.719] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.719] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.719] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lv\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb43e0 [0186.720] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.720] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.720] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0186.720] SetLastError (dwErrCode=0x0) [0186.720] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lv\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\lv\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.720] GetLastError () returned 0x5 [0186.720] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.720] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.720] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.721] SetLastError (dwErrCode=0x0) [0186.721] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.721] GetLastError () returned 0x5 [0186.721] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.721] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.721] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ms\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb4a40 [0186.722] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.722] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.722] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0186.722] SetLastError (dwErrCode=0x0) [0186.722] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ms\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ms\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.722] GetLastError () returned 0x5 [0186.722] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.722] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.722] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.722] SetLastError (dwErrCode=0x0) [0186.722] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.722] GetLastError () returned 0x5 [0186.722] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.722] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.722] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\nl\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb4a40 [0186.723] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.723] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.723] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0186.723] SetLastError (dwErrCode=0x0) [0186.723] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\nl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\nl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.723] GetLastError () returned 0x5 [0186.723] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.723] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.723] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.723] SetLastError (dwErrCode=0x0) [0186.723] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.723] GetLastError () returned 0x5 [0186.723] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.723] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.723] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\no\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb43e0 [0186.724] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.724] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.724] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0186.724] SetLastError (dwErrCode=0x0) [0186.724] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\no\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\no\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.725] GetLastError () returned 0x5 [0186.725] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.725] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.725] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.725] SetLastError (dwErrCode=0x0) [0186.725] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.725] GetLastError () returned 0x5 [0186.725] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.725] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.725] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pl\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb5460 [0186.726] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.726] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.726] FindClose (in: hFindFile=0x665abb5460 | out: hFindFile=0x665abb5460) returned 1 [0186.726] SetLastError (dwErrCode=0x0) [0186.726] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\pl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.726] GetLastError () returned 0x5 [0186.726] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.726] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.726] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.726] SetLastError (dwErrCode=0x0) [0186.726] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.727] GetLastError () returned 0x5 [0186.727] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.727] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.727] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb4a40 [0186.727] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.727] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.727] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0186.728] SetLastError (dwErrCode=0x0) [0186.728] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\pt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.728] GetLastError () returned 0x5 [0186.728] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.728] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.728] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.728] SetLastError (dwErrCode=0x0) [0186.728] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.728] GetLastError () returned 0x5 [0186.728] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.728] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.728] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt-PT\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb4da0 [0186.729] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.729] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.729] FindClose (in: hFindFile=0x665abb4da0 | out: hFindFile=0x665abb4da0) returned 1 [0186.729] SetLastError (dwErrCode=0x0) [0186.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt-PT\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\pt-pt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.729] GetLastError () returned 0x5 [0186.729] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.729] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.729] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.729] SetLastError (dwErrCode=0x0) [0186.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.729] GetLastError () returned 0x5 [0186.729] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.729] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.729] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ro\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb4f80 [0186.730] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.730] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.730] FindClose (in: hFindFile=0x665abb4f80 | out: hFindFile=0x665abb4f80) returned 1 [0186.730] SetLastError (dwErrCode=0x0) [0186.730] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ro\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ro\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.731] GetLastError () returned 0x5 [0186.731] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.731] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.731] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.731] SetLastError (dwErrCode=0x0) [0186.731] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.731] GetLastError () returned 0x5 [0186.731] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.731] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.731] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ru\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb4c20 [0186.732] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.732] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.732] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0186.732] SetLastError (dwErrCode=0x0) [0186.732] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ru\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ru\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.733] GetLastError () returned 0x5 [0186.733] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.733] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.733] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.733] SetLastError (dwErrCode=0x0) [0186.733] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.733] GetLastError () returned 0x5 [0186.733] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.733] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.733] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sk\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb5460 [0186.737] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.737] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.737] FindClose (in: hFindFile=0x665abb5460 | out: hFindFile=0x665abb5460) returned 1 [0186.737] SetLastError (dwErrCode=0x0) [0186.737] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sk\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\sk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.737] GetLastError () returned 0x5 [0186.738] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.738] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.738] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.738] SetLastError (dwErrCode=0x0) [0186.738] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.738] GetLastError () returned 0x5 [0186.738] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.738] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.738] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sl\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb4c20 [0186.739] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.739] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.739] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0186.739] SetLastError (dwErrCode=0x0) [0186.739] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\sl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.739] GetLastError () returned 0x5 [0186.739] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.739] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.739] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.739] SetLastError (dwErrCode=0x0) [0186.739] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.740] GetLastError () returned 0x5 [0186.740] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.740] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.740] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-cyrl\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb53a0 [0186.740] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.740] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.740] FindClose (in: hFindFile=0x665abb53a0 | out: hFindFile=0x665abb53a0) returned 1 [0186.741] SetLastError (dwErrCode=0x0) [0186.741] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-cyrl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\sr-cyrl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.741] GetLastError () returned 0x5 [0186.741] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.741] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.741] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.741] SetLastError (dwErrCode=0x0) [0186.741] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.741] GetLastError () returned 0x5 [0186.741] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.741] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.741] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-latn\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb5340 [0186.742] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.742] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.742] FindClose (in: hFindFile=0x665abb5340 | out: hFindFile=0x665abb5340) returned 1 [0186.742] SetLastError (dwErrCode=0x0) [0186.742] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-latn\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\sr-latn\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.742] GetLastError () returned 0x5 [0186.742] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.742] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.742] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.742] SetLastError (dwErrCode=0x0) [0186.742] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.743] GetLastError () returned 0x5 [0186.743] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.743] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.743] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sv\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb5340 [0186.743] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.744] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.744] FindClose (in: hFindFile=0x665abb5340 | out: hFindFile=0x665abb5340) returned 1 [0186.744] SetLastError (dwErrCode=0x0) [0186.744] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sv\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\sv\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.744] GetLastError () returned 0x5 [0186.744] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.744] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.744] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.744] SetLastError (dwErrCode=0x0) [0186.744] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.744] GetLastError () returned 0x5 [0186.744] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.744] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.744] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\th\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb5460 [0186.745] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.745] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.745] FindClose (in: hFindFile=0x665abb5460 | out: hFindFile=0x665abb5460) returned 1 [0186.745] SetLastError (dwErrCode=0x0) [0186.745] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\th\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\th\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.745] GetLastError () returned 0x5 [0186.745] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.745] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.746] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.746] SetLastError (dwErrCode=0x0) [0186.746] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.746] GetLastError () returned 0x5 [0186.746] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.746] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.746] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\tr\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb5160 [0186.746] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.746] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.746] FindClose (in: hFindFile=0x665abb5160 | out: hFindFile=0x665abb5160) returned 1 [0186.746] SetLastError (dwErrCode=0x0) [0186.746] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\tr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\tr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.747] GetLastError () returned 0x5 [0186.747] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.747] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.747] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.747] SetLastError (dwErrCode=0x0) [0186.747] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.747] GetLastError () returned 0x5 [0186.747] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.747] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.747] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\uk\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb4c20 [0186.748] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.748] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.748] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0186.748] SetLastError (dwErrCode=0x0) [0186.748] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\uk\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\uk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.748] GetLastError () returned 0x5 [0186.748] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.748] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.748] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.748] SetLastError (dwErrCode=0x0) [0186.748] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.748] GetLastError () returned 0x5 [0186.748] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.748] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.749] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\vi\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb5760 [0186.749] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.749] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.749] FindClose (in: hFindFile=0x665abb5760 | out: hFindFile=0x665abb5760) returned 1 [0186.749] SetLastError (dwErrCode=0x0) [0186.749] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\vi\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\vi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.750] GetLastError () returned 0x5 [0186.750] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.750] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.750] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.750] SetLastError (dwErrCode=0x0) [0186.750] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.750] GetLastError () returned 0x5 [0186.750] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.750] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.751] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHS\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb4a40 [0186.751] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.751] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.751] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0186.751] SetLastError (dwErrCode=0x0) [0186.751] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\zh-chs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.752] GetLastError () returned 0x5 [0186.752] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.752] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.752] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.752] SetLastError (dwErrCode=0x0) [0186.752] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.752] GetLastError () returned 0x5 [0186.752] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.752] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.752] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHT\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb4a40 [0186.752] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.752] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.752] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0186.752] SetLastError (dwErrCode=0x0) [0186.752] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHT\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\zh-cht\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.753] GetLastError () returned 0x5 [0186.753] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.753] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.753] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0 [0186.753] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0186.753] SetLastError (dwErrCode=0x0) [0186.753] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.753] GetLastError () returned 0x5 [0186.753] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0) returned 0 [0186.753] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.753] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.753] SetLastError (dwErrCode=0x0) [0186.753] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.753] GetLastError () returned 0x5 [0186.754] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0) returned 0 [0186.754] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.754] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\*.*", lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0x665abb49e0 [0186.755] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.756] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.756] SetLastError (dwErrCode=0x0) [0186.756] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.757] GetLastError () returned 0x5 [0186.757] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.757] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.757] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb55e0 [0186.757] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.757] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.757] FindClose (in: hFindFile=0x665abb55e0 | out: hFindFile=0x665abb55e0) returned 1 [0186.757] SetLastError (dwErrCode=0x0) [0186.757] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ar\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.758] GetLastError () returned 0x5 [0186.758] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.758] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.758] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.758] SetLastError (dwErrCode=0x0) [0186.758] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.758] GetLastError () returned 0x5 [0186.758] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.758] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.758] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb4a40 [0186.759] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.759] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.759] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0186.759] SetLastError (dwErrCode=0x0) [0186.759] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\bg\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.759] GetLastError () returned 0x5 [0186.759] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.759] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.759] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.759] SetLastError (dwErrCode=0x0) [0186.759] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.760] GetLastError () returned 0x5 [0186.760] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.760] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.760] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb43e0 [0186.760] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.760] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.760] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0186.764] SetLastError (dwErrCode=0x0) [0186.764] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ca\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.765] GetLastError () returned 0x5 [0186.765] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.765] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.765] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.765] SetLastError (dwErrCode=0x0) [0186.765] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.765] GetLastError () returned 0x5 [0186.765] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.765] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.765] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb5460 [0186.766] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.766] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.766] FindClose (in: hFindFile=0x665abb5460 | out: hFindFile=0x665abb5460) returned 1 [0186.766] SetLastError (dwErrCode=0x0) [0186.766] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.766] GetLastError () returned 0x5 [0186.767] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.767] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.767] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.767] SetLastError (dwErrCode=0x0) [0186.767] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.767] GetLastError () returned 0x5 [0186.767] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.767] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.767] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb4a40 [0186.768] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.768] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.768] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0186.768] SetLastError (dwErrCode=0x0) [0186.768] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\cs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.768] GetLastError () returned 0x5 [0186.768] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.768] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.768] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.768] SetLastError (dwErrCode=0x0) [0186.768] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.768] GetLastError () returned 0x5 [0186.768] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.768] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.768] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb43e0 [0186.769] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.769] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.769] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0186.769] SetLastError (dwErrCode=0x0) [0186.769] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\da\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.770] GetLastError () returned 0x5 [0186.770] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.770] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.770] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.770] SetLastError (dwErrCode=0x0) [0186.770] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.770] GetLastError () returned 0x5 [0186.770] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.770] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.770] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb5040 [0186.771] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.771] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.771] FindClose (in: hFindFile=0x665abb5040 | out: hFindFile=0x665abb5040) returned 1 [0186.771] SetLastError (dwErrCode=0x0) [0186.771] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\de\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.771] GetLastError () returned 0x5 [0186.771] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.771] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.771] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.771] SetLastError (dwErrCode=0x0) [0186.771] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.771] GetLastError () returned 0x5 [0186.771] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.771] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.771] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb4a40 [0186.772] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.772] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.772] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0186.772] SetLastError (dwErrCode=0x0) [0186.772] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\el\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.772] GetLastError () returned 0x5 [0186.772] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.772] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.772] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.772] SetLastError (dwErrCode=0x0) [0186.772] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.773] GetLastError () returned 0x5 [0186.773] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.773] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.773] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\en\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb43e0 [0186.773] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.773] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.773] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0186.773] SetLastError (dwErrCode=0x0) [0186.773] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\en\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\en\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.773] GetLastError () returned 0x5 [0186.773] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.773] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.773] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.773] SetLastError (dwErrCode=0x0) [0186.773] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.774] GetLastError () returned 0x5 [0186.774] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.774] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.774] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb4a40 [0186.774] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.774] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.774] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0186.774] SetLastError (dwErrCode=0x0) [0186.774] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\es\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.775] GetLastError () returned 0x5 [0186.775] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.775] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.775] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.775] SetLastError (dwErrCode=0x0) [0186.775] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.775] GetLastError () returned 0x5 [0186.775] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.775] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.775] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb4a40 [0186.776] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.776] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.776] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0186.776] SetLastError (dwErrCode=0x0) [0186.776] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\et\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.776] GetLastError () returned 0x5 [0186.776] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.776] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.776] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.776] SetLastError (dwErrCode=0x0) [0186.776] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.776] GetLastError () returned 0x5 [0186.776] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.776] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.776] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb5580 [0186.778] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.778] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.778] FindClose (in: hFindFile=0x665abb5580 | out: hFindFile=0x665abb5580) returned 1 [0186.778] SetLastError (dwErrCode=0x0) [0186.778] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\eu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.778] GetLastError () returned 0x5 [0186.778] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.778] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.778] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.778] SetLastError (dwErrCode=0x0) [0186.778] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.778] GetLastError () returned 0x5 [0186.778] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.778] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.778] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb5040 [0186.779] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.779] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.779] FindClose (in: hFindFile=0x665abb5040 | out: hFindFile=0x665abb5040) returned 1 [0186.779] SetLastError (dwErrCode=0x0) [0186.779] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\fi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.779] GetLastError () returned 0x5 [0186.779] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.779] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.779] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.779] SetLastError (dwErrCode=0x0) [0186.779] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.780] GetLastError () returned 0x5 [0186.780] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.780] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.780] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb4a40 [0186.780] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.780] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.780] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0186.781] SetLastError (dwErrCode=0x0) [0186.781] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\fr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.781] GetLastError () returned 0x5 [0186.781] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.781] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.781] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.781] SetLastError (dwErrCode=0x0) [0186.781] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.781] GetLastError () returned 0x5 [0186.781] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.781] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.781] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb55e0 [0186.782] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.782] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.782] FindClose (in: hFindFile=0x665abb55e0 | out: hFindFile=0x665abb55e0) returned 1 [0186.782] SetLastError (dwErrCode=0x0) [0186.782] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\gl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.782] GetLastError () returned 0x5 [0186.782] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.782] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.782] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.782] SetLastError (dwErrCode=0x0) [0186.783] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.783] GetLastError () returned 0x5 [0186.783] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.783] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.783] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb43e0 [0186.783] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.783] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.783] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0186.784] SetLastError (dwErrCode=0x0) [0186.784] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\he\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.784] GetLastError () returned 0x5 [0186.784] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.784] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.784] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.784] SetLastError (dwErrCode=0x0) [0186.784] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.784] GetLastError () returned 0x5 [0186.784] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.784] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.784] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb4a40 [0186.785] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.785] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.785] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0186.785] SetLastError (dwErrCode=0x0) [0186.785] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\hi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.785] GetLastError () returned 0x5 [0186.785] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.785] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.785] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.785] SetLastError (dwErrCode=0x0) [0186.785] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.785] GetLastError () returned 0x5 [0186.786] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.786] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.786] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb5460 [0186.786] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.786] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.786] FindClose (in: hFindFile=0x665abb5460 | out: hFindFile=0x665abb5460) returned 1 [0186.786] SetLastError (dwErrCode=0x0) [0186.786] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\hr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.787] GetLastError () returned 0x5 [0186.787] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.787] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.787] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.787] SetLastError (dwErrCode=0x0) [0186.787] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.787] GetLastError () returned 0x5 [0186.787] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.787] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.787] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb4a40 [0186.788] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.788] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.788] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0186.788] SetLastError (dwErrCode=0x0) [0186.788] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\hu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.788] GetLastError () returned 0x5 [0186.788] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.788] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.788] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.788] SetLastError (dwErrCode=0x0) [0186.788] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.788] GetLastError () returned 0x5 [0186.788] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.788] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.788] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb4f80 [0186.789] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.789] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.789] FindClose (in: hFindFile=0x665abb4f80 | out: hFindFile=0x665abb4f80) returned 1 [0186.789] SetLastError (dwErrCode=0x0) [0186.789] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\id\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.789] GetLastError () returned 0x5 [0186.789] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.789] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.789] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.789] SetLastError (dwErrCode=0x0) [0186.789] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.790] GetLastError () returned 0x5 [0186.790] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.790] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.790] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\it\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb4d40 [0186.790] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.790] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.790] FindClose (in: hFindFile=0x665abb4d40 | out: hFindFile=0x665abb4d40) returned 1 [0186.790] SetLastError (dwErrCode=0x0) [0186.791] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\it\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\it\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.791] GetLastError () returned 0x5 [0186.791] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.791] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.791] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.791] SetLastError (dwErrCode=0x0) [0186.791] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.791] GetLastError () returned 0x5 [0186.791] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.791] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.791] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ja\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb43e0 [0186.792] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.792] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.792] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0186.792] SetLastError (dwErrCode=0x0) [0186.792] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ja\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ja\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.792] GetLastError () returned 0x5 [0186.792] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.792] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.792] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.792] SetLastError (dwErrCode=0x0) [0186.792] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.792] GetLastError () returned 0x5 [0186.792] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.792] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.793] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\kk\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb5040 [0186.793] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.793] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.793] FindClose (in: hFindFile=0x665abb5040 | out: hFindFile=0x665abb5040) returned 1 [0186.793] SetLastError (dwErrCode=0x0) [0186.793] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\kk\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\kk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.793] GetLastError () returned 0x5 [0186.793] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.794] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.794] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.794] SetLastError (dwErrCode=0x0) [0186.794] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.794] GetLastError () returned 0x5 [0186.794] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.794] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.794] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ko\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb43e0 [0186.795] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.795] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.795] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0186.795] SetLastError (dwErrCode=0x0) [0186.795] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ko\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ko\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.796] GetLastError () returned 0x5 [0186.796] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.796] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.796] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.796] SetLastError (dwErrCode=0x0) [0186.796] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.796] GetLastError () returned 0x5 [0186.796] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.796] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.796] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lt\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb4a40 [0186.797] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.797] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.797] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0186.797] SetLastError (dwErrCode=0x0) [0186.797] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lt\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\lt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.797] GetLastError () returned 0x5 [0186.797] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.797] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.797] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.797] SetLastError (dwErrCode=0x0) [0186.797] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.798] GetLastError () returned 0x5 [0186.798] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.798] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.798] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lv\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb5340 [0186.799] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.799] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.799] FindClose (in: hFindFile=0x665abb5340 | out: hFindFile=0x665abb5340) returned 1 [0186.799] SetLastError (dwErrCode=0x0) [0186.799] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lv\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\lv\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.799] GetLastError () returned 0x5 [0186.799] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.799] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.799] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.799] SetLastError (dwErrCode=0x0) [0186.799] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.799] GetLastError () returned 0x5 [0186.799] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.799] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.799] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ms\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb4a40 [0186.802] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.802] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.802] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0186.802] SetLastError (dwErrCode=0x0) [0186.802] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ms\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ms\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.802] GetLastError () returned 0x5 [0186.802] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.802] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.802] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.802] SetLastError (dwErrCode=0x0) [0186.802] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.803] GetLastError () returned 0x5 [0186.803] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.803] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.803] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\nl\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb43e0 [0186.803] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.803] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.803] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0186.803] SetLastError (dwErrCode=0x0) [0186.803] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\nl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\nl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.804] GetLastError () returned 0x5 [0186.804] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.804] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.804] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.804] SetLastError (dwErrCode=0x0) [0186.804] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.804] GetLastError () returned 0x5 [0186.804] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.804] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.804] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\no\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb5460 [0186.805] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.805] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.805] FindClose (in: hFindFile=0x665abb5460 | out: hFindFile=0x665abb5460) returned 1 [0186.805] SetLastError (dwErrCode=0x0) [0186.805] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\no\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\no\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.805] GetLastError () returned 0x5 [0186.805] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.805] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.805] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.805] SetLastError (dwErrCode=0x0) [0186.805] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.805] GetLastError () returned 0x5 [0186.805] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.806] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.806] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pl\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb4a40 [0186.806] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.806] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.806] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0186.806] SetLastError (dwErrCode=0x0) [0186.806] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\pl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.807] GetLastError () returned 0x5 [0186.807] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.807] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.807] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.807] SetLastError (dwErrCode=0x0) [0186.807] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.807] GetLastError () returned 0x5 [0186.807] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.807] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.807] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb4c20 [0186.808] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.808] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.808] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0186.808] SetLastError (dwErrCode=0x0) [0186.808] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\pt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.808] GetLastError () returned 0x5 [0186.808] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.808] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.808] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.808] SetLastError (dwErrCode=0x0) [0186.808] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.808] GetLastError () returned 0x5 [0186.808] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.808] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.809] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt-PT\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb4a40 [0186.809] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.809] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.809] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0186.809] SetLastError (dwErrCode=0x0) [0186.809] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt-PT\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\pt-pt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.809] GetLastError () returned 0x5 [0186.809] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.810] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.810] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.810] SetLastError (dwErrCode=0x0) [0186.810] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.810] GetLastError () returned 0x5 [0186.810] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.810] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.810] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb4a40 [0186.811] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.812] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.812] SetLastError (dwErrCode=0x0) [0186.812] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.813] GetLastError () returned 0x5 [0186.813] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.813] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.813] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1025\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb43e0 [0186.813] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.813] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.813] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0186.814] SetLastError (dwErrCode=0x0) [0186.814] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1025\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1025\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.814] GetLastError () returned 0x5 [0186.814] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.814] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.814] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.814] SetLastError (dwErrCode=0x0) [0186.814] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.814] GetLastError () returned 0x5 [0186.814] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.814] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.814] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1026\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4c80 [0186.814] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.814] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.814] FindClose (in: hFindFile=0x665abb4c80 | out: hFindFile=0x665abb4c80) returned 1 [0186.815] SetLastError (dwErrCode=0x0) [0186.815] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1026\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1026\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.815] GetLastError () returned 0x5 [0186.815] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.815] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.815] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.815] SetLastError (dwErrCode=0x0) [0186.815] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.815] GetLastError () returned 0x5 [0186.815] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.815] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.815] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\10266\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb43e0 [0186.815] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.815] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.815] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0186.816] SetLastError (dwErrCode=0x0) [0186.816] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\10266\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\10266\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.816] GetLastError () returned 0x5 [0186.816] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.816] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.816] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.816] SetLastError (dwErrCode=0x0) [0186.816] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.816] GetLastError () returned 0x5 [0186.816] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.816] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.816] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1027\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4c20 [0186.816] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.816] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.816] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0186.816] SetLastError (dwErrCode=0x0) [0186.816] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1027\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1027\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.817] GetLastError () returned 0x5 [0186.817] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.817] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.817] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.817] SetLastError (dwErrCode=0x0) [0186.817] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.817] GetLastError () returned 0x5 [0186.817] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.817] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.817] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1028\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb5160 [0186.818] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.818] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.818] FindClose (in: hFindFile=0x665abb5160 | out: hFindFile=0x665abb5160) returned 1 [0186.818] SetLastError (dwErrCode=0x0) [0186.818] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1028\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1028\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.818] GetLastError () returned 0x5 [0186.818] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.818] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.818] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.818] SetLastError (dwErrCode=0x0) [0186.818] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.819] GetLastError () returned 0x5 [0186.819] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.819] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.819] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1029\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4c20 [0186.819] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.819] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.819] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0186.819] SetLastError (dwErrCode=0x0) [0186.819] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1029\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1029\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.820] GetLastError () returned 0x5 [0186.820] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.820] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.820] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.820] SetLastError (dwErrCode=0x0) [0186.820] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.820] GetLastError () returned 0x5 [0186.820] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.820] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.820] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1030\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb55e0 [0186.824] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.824] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.824] FindClose (in: hFindFile=0x665abb55e0 | out: hFindFile=0x665abb55e0) returned 1 [0186.824] SetLastError (dwErrCode=0x0) [0186.824] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1030\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1030\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.825] GetLastError () returned 0x5 [0186.825] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.825] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.825] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.825] SetLastError (dwErrCode=0x0) [0186.825] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.825] GetLastError () returned 0x5 [0186.825] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.825] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.825] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1031\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb5160 [0186.826] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.826] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.826] FindClose (in: hFindFile=0x665abb5160 | out: hFindFile=0x665abb5160) returned 1 [0186.826] SetLastError (dwErrCode=0x0) [0186.826] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1031\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1031\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.827] GetLastError () returned 0x5 [0186.827] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.827] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.827] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.827] SetLastError (dwErrCode=0x0) [0186.827] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.827] GetLastError () returned 0x5 [0186.827] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.827] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.827] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1032\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb43e0 [0186.828] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.828] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.828] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0186.828] SetLastError (dwErrCode=0x0) [0186.828] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1032\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1032\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.828] GetLastError () returned 0x5 [0186.828] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.829] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.829] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.829] SetLastError (dwErrCode=0x0) [0186.829] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.829] GetLastError () returned 0x5 [0186.829] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.829] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.829] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1033\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4c20 [0186.829] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.829] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.829] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0186.829] SetLastError (dwErrCode=0x0) [0186.829] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.830] GetLastError () returned 0x5 [0186.830] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.830] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.830] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.830] SetLastError (dwErrCode=0x0) [0186.830] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.830] GetLastError () returned 0x5 [0186.830] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.830] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.830] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1035\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4c20 [0186.831] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.831] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.831] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0186.831] SetLastError (dwErrCode=0x0) [0186.831] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1035\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1035\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.831] GetLastError () returned 0x5 [0186.831] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.831] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.831] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.831] SetLastError (dwErrCode=0x0) [0186.831] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.831] GetLastError () returned 0x5 [0186.831] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.831] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.831] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1036\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4c20 [0186.832] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.832] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.832] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0186.832] SetLastError (dwErrCode=0x0) [0186.832] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1036\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1036\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.832] GetLastError () returned 0x5 [0186.832] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.832] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.832] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.832] SetLastError (dwErrCode=0x0) [0186.832] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.832] GetLastError () returned 0x5 [0186.832] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.832] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.833] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1037\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4f80 [0186.833] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.833] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.833] FindClose (in: hFindFile=0x665abb4f80 | out: hFindFile=0x665abb4f80) returned 1 [0186.833] SetLastError (dwErrCode=0x0) [0186.833] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1037\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1037\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.834] GetLastError () returned 0x5 [0186.834] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.834] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.834] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.834] SetLastError (dwErrCode=0x0) [0186.834] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.834] GetLastError () returned 0x5 [0186.834] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.834] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.834] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1038\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4c20 [0186.834] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.834] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.834] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0186.834] SetLastError (dwErrCode=0x0) [0186.834] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1038\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1038\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.835] GetLastError () returned 0x5 [0186.835] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.835] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.835] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.835] SetLastError (dwErrCode=0x0) [0186.835] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.835] GetLastError () returned 0x5 [0186.835] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.835] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.835] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1040\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4c20 [0186.835] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.835] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.835] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0186.835] SetLastError (dwErrCode=0x0) [0186.835] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1040\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1040\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.835] GetLastError () returned 0x5 [0186.835] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.836] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.836] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.836] SetLastError (dwErrCode=0x0) [0186.836] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.836] GetLastError () returned 0x5 [0186.836] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.836] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.836] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1041\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb53a0 [0186.836] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.836] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.836] FindClose (in: hFindFile=0x665abb53a0 | out: hFindFile=0x665abb53a0) returned 1 [0186.836] SetLastError (dwErrCode=0x0) [0186.836] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1041\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1041\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.836] GetLastError () returned 0x5 [0186.836] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.837] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.837] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.837] SetLastError (dwErrCode=0x0) [0186.837] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.837] GetLastError () returned 0x5 [0186.837] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.837] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.837] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1042\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4c20 [0186.837] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.838] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.838] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0186.838] SetLastError (dwErrCode=0x0) [0186.838] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1042\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1042\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.838] GetLastError () returned 0x5 [0186.838] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.838] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.838] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.838] SetLastError (dwErrCode=0x0) [0186.838] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.838] GetLastError () returned 0x5 [0186.838] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.838] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.838] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1043\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb5340 [0186.838] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.839] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.839] FindClose (in: hFindFile=0x665abb5340 | out: hFindFile=0x665abb5340) returned 1 [0186.839] SetLastError (dwErrCode=0x0) [0186.839] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1043\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1043\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.839] GetLastError () returned 0x5 [0186.839] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.839] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.839] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.839] SetLastError (dwErrCode=0x0) [0186.839] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.839] GetLastError () returned 0x5 [0186.839] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.839] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.839] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1044\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4c20 [0186.839] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.839] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.840] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0186.840] SetLastError (dwErrCode=0x0) [0186.840] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1044\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1044\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.840] GetLastError () returned 0x5 [0186.840] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.840] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.840] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.840] SetLastError (dwErrCode=0x0) [0186.840] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.840] GetLastError () returned 0x5 [0186.840] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.840] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.840] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1045\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb43e0 [0186.841] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.841] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.841] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0186.841] SetLastError (dwErrCode=0x0) [0186.841] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1045\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1045\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.841] GetLastError () returned 0x5 [0186.841] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.841] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.842] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.842] SetLastError (dwErrCode=0x0) [0186.842] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.842] GetLastError () returned 0x5 [0186.842] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.842] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.842] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1046\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4c20 [0186.842] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.842] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.842] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0186.842] SetLastError (dwErrCode=0x0) [0186.842] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1046\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1046\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.842] GetLastError () returned 0x5 [0186.843] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.843] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.843] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.843] SetLastError (dwErrCode=0x0) [0186.843] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.843] GetLastError () returned 0x5 [0186.843] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.843] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.843] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1048\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb5160 [0186.844] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.844] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.844] FindClose (in: hFindFile=0x665abb5160 | out: hFindFile=0x665abb5160) returned 1 [0186.844] SetLastError (dwErrCode=0x0) [0186.844] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1048\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1048\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.844] GetLastError () returned 0x5 [0186.844] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.844] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.844] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.844] SetLastError (dwErrCode=0x0) [0186.844] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.845] GetLastError () returned 0x5 [0186.845] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.845] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.845] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1049\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4c20 [0186.845] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.845] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.845] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0186.846] SetLastError (dwErrCode=0x0) [0186.846] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1049\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1049\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.846] GetLastError () returned 0x5 [0186.846] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.846] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.846] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.846] SetLastError (dwErrCode=0x0) [0186.846] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.846] GetLastError () returned 0x5 [0186.846] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.846] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.846] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1050\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4c20 [0186.846] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.846] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.846] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0186.851] SetLastError (dwErrCode=0x0) [0186.851] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1050\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1050\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.851] GetLastError () returned 0x5 [0186.851] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.851] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.851] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.851] SetLastError (dwErrCode=0x0) [0186.851] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.851] GetLastError () returned 0x5 [0186.851] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.851] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.851] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1051\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4c20 [0186.852] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.852] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.852] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0186.852] SetLastError (dwErrCode=0x0) [0186.852] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1051\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1051\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.852] GetLastError () returned 0x5 [0186.852] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.852] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.852] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.852] SetLastError (dwErrCode=0x0) [0186.852] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.852] GetLastError () returned 0x5 [0186.852] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.852] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.852] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1053\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4c20 [0186.853] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.853] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.853] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0186.853] SetLastError (dwErrCode=0x0) [0186.853] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1053\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1053\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.853] GetLastError () returned 0x5 [0186.853] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.853] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.853] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.853] SetLastError (dwErrCode=0x0) [0186.853] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.853] GetLastError () returned 0x5 [0186.853] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.853] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.853] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1054\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4c20 [0186.854] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.854] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.854] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0186.854] SetLastError (dwErrCode=0x0) [0186.854] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1054\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1054\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.854] GetLastError () returned 0x5 [0186.854] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.854] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.854] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.854] SetLastError (dwErrCode=0x0) [0186.854] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.854] GetLastError () returned 0x5 [0186.854] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.854] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.854] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1055\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4c20 [0186.855] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.855] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.855] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0186.855] SetLastError (dwErrCode=0x0) [0186.855] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1055\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1055\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.855] GetLastError () returned 0x5 [0186.855] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.855] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.855] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.855] SetLastError (dwErrCode=0x0) [0186.855] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.855] GetLastError () returned 0x5 [0186.855] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.855] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.855] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1057\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4da0 [0186.856] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.856] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.856] FindClose (in: hFindFile=0x665abb4da0 | out: hFindFile=0x665abb4da0) returned 1 [0186.856] SetLastError (dwErrCode=0x0) [0186.856] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1057\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1057\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.856] GetLastError () returned 0x5 [0186.856] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.856] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.857] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.857] SetLastError (dwErrCode=0x0) [0186.857] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.857] GetLastError () returned 0x5 [0186.857] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.857] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.857] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1058\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4f80 [0186.857] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.857] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.857] FindClose (in: hFindFile=0x665abb4f80 | out: hFindFile=0x665abb4f80) returned 1 [0186.857] SetLastError (dwErrCode=0x0) [0186.857] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1058\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1058\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.857] GetLastError () returned 0x5 [0186.857] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.858] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.858] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.858] SetLastError (dwErrCode=0x0) [0186.858] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.858] GetLastError () returned 0x5 [0186.858] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.858] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.858] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1060\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb57c0 [0186.858] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.858] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.858] FindClose (in: hFindFile=0x665abb57c0 | out: hFindFile=0x665abb57c0) returned 1 [0186.858] SetLastError (dwErrCode=0x0) [0186.858] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1060\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1060\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.858] GetLastError () returned 0x5 [0186.858] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.859] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.859] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.859] SetLastError (dwErrCode=0x0) [0186.859] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.859] GetLastError () returned 0x5 [0186.859] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.859] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.859] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1061\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb55e0 [0186.859] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.859] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.859] FindClose (in: hFindFile=0x665abb55e0 | out: hFindFile=0x665abb55e0) returned 1 [0186.859] SetLastError (dwErrCode=0x0) [0186.859] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1061\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1061\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.860] GetLastError () returned 0x5 [0186.860] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.860] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.860] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.860] SetLastError (dwErrCode=0x0) [0186.860] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.860] GetLastError () returned 0x5 [0186.860] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.860] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.860] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1062\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb43e0 [0186.860] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.860] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.860] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0186.860] SetLastError (dwErrCode=0x0) [0186.860] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1062\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1062\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.861] GetLastError () returned 0x5 [0186.861] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.861] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.861] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.861] SetLastError (dwErrCode=0x0) [0186.861] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.861] GetLastError () returned 0x5 [0186.861] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.861] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.861] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1063\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb5760 [0186.861] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.861] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.861] FindClose (in: hFindFile=0x665abb5760 | out: hFindFile=0x665abb5760) returned 1 [0186.861] SetLastError (dwErrCode=0x0) [0186.861] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1063\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1063\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.861] GetLastError () returned 0x5 [0186.861] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.861] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.862] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.862] SetLastError (dwErrCode=0x0) [0186.862] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.862] GetLastError () returned 0x5 [0186.862] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.862] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.862] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1066\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4f80 [0186.862] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.862] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.862] FindClose (in: hFindFile=0x665abb4f80 | out: hFindFile=0x665abb4f80) returned 1 [0186.862] SetLastError (dwErrCode=0x0) [0186.862] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1066\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1066\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.862] GetLastError () returned 0x5 [0186.862] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.862] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.862] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.862] SetLastError (dwErrCode=0x0) [0186.862] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.863] GetLastError () returned 0x5 [0186.863] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.863] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.863] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1069\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb43e0 [0186.863] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.863] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.863] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0186.863] SetLastError (dwErrCode=0x0) [0186.863] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1069\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1069\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.863] GetLastError () returned 0x5 [0186.863] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.863] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.863] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.863] SetLastError (dwErrCode=0x0) [0186.863] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.864] GetLastError () returned 0x5 [0186.864] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.864] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.864] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1081\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb5460 [0186.867] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.867] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.867] FindClose (in: hFindFile=0x665abb5460 | out: hFindFile=0x665abb5460) returned 1 [0186.867] SetLastError (dwErrCode=0x0) [0186.867] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1081\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1081\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.867] GetLastError () returned 0x5 [0186.867] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.867] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.867] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.867] SetLastError (dwErrCode=0x0) [0186.867] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.867] GetLastError () returned 0x5 [0186.867] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.867] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.867] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1086\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4f80 [0186.868] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.868] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.868] FindClose (in: hFindFile=0x665abb4f80 | out: hFindFile=0x665abb4f80) returned 1 [0186.868] SetLastError (dwErrCode=0x0) [0186.868] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1086\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1086\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.868] GetLastError () returned 0x5 [0186.868] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.868] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.868] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.868] SetLastError (dwErrCode=0x0) [0186.868] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.868] GetLastError () returned 0x5 [0186.868] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.868] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.868] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1087\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb43e0 [0186.869] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.869] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.869] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0186.869] SetLastError (dwErrCode=0x0) [0186.869] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1087\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1087\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.869] GetLastError () returned 0x5 [0186.869] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.869] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.869] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.869] SetLastError (dwErrCode=0x0) [0186.869] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.869] GetLastError () returned 0x5 [0186.869] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.869] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.869] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1110\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb43e0 [0186.870] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.870] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.870] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0186.870] SetLastError (dwErrCode=0x0) [0186.870] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1110\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1110\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.871] GetLastError () returned 0x5 [0186.871] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.871] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.871] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.871] SetLastError (dwErrCode=0x0) [0186.871] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.871] GetLastError () returned 0x5 [0186.871] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.871] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.871] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2052\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb5760 [0186.871] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.871] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.871] FindClose (in: hFindFile=0x665abb5760 | out: hFindFile=0x665abb5760) returned 1 [0186.871] SetLastError (dwErrCode=0x0) [0186.871] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2052\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\2052\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.872] GetLastError () returned 0x5 [0186.872] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.872] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.872] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.872] SetLastError (dwErrCode=0x0) [0186.872] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.872] GetLastError () returned 0x5 [0186.872] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.872] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.872] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2070\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4c20 [0186.872] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.872] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.872] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0186.872] SetLastError (dwErrCode=0x0) [0186.872] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2070\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\2070\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.873] GetLastError () returned 0x5 [0186.873] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.873] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.873] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.873] SetLastError (dwErrCode=0x0) [0186.873] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.873] GetLastError () returned 0x5 [0186.873] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.873] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.873] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\3082\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb4c20 [0186.873] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.873] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.873] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0186.873] SetLastError (dwErrCode=0x0) [0186.873] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\3082\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\3082\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.874] GetLastError () returned 0x5 [0186.874] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.874] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.874] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.874] SetLastError (dwErrCode=0x0) [0186.874] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.874] GetLastError () returned 0x5 [0186.874] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.874] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.874] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\9242\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665abb43e0 [0186.874] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0186.874] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0186.874] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0186.874] SetLastError (dwErrCode=0x0) [0186.874] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\9242\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\9242\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.875] GetLastError () returned 0x5 [0186.875] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0) returned 0 [0186.875] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.875] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.875] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0186.875] SetLastError (dwErrCode=0x0) [0186.875] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.875] GetLastError () returned 0x5 [0186.875] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.875] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.875] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.875] SetLastError (dwErrCode=0x0) [0186.875] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.875] GetLastError () returned 0x5 [0186.875] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.876] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.876] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ro\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb5760 [0186.877] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.877] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.877] FindClose (in: hFindFile=0x665abb5760 | out: hFindFile=0x665abb5760) returned 1 [0186.877] SetLastError (dwErrCode=0x0) [0186.877] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ro\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ro\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.877] GetLastError () returned 0x5 [0186.877] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.877] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.877] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.877] SetLastError (dwErrCode=0x0) [0186.878] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.878] GetLastError () returned 0x5 [0186.878] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.878] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.878] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ru\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb4c20 [0186.878] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.879] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.879] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0186.879] SetLastError (dwErrCode=0x0) [0186.879] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ru\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ru\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.879] GetLastError () returned 0x5 [0186.879] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.880] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.880] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0186.880] SetLastError (dwErrCode=0x0) [0186.880] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.880] GetLastError () returned 0x5 [0186.880] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0) returned 0 [0186.880] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0186.880] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sk\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665abb4c20 [0186.881] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0186.881] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0186.881] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0186.901] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0186.901] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0187.136] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml", dwFileAttributes=0x80) returned 0 [0187.138] CreateFileW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist\\frameworklist.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.138] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.138] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.139] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0187.139] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0187.139] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.139] SetFileAttributesW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml", dwFileAttributes=0x80) returned 0 [0187.140] CreateFileW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\winfxlist.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.140] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.140] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.141] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0187.141] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0187.144] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.145] SetFileAttributesW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\FrameworkList.xml", dwFileAttributes=0x80) returned 0 [0187.146] CreateFileW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\redistlist\\frameworklist.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.147] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.147] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.147] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0187.147] FindClose (in: hFindFile=0x665abb4f80 | out: hFindFile=0x665abb4f80) returned 1 [0187.154] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.154] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\1494870C-9912-C184-4CC9-B401-A53F4D8DE290.pdf", dwFileAttributes=0x80) returned 0 [0187.155] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\1494870C-9912-C184-4CC9-B401-A53F4D8DE290.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\1494870c-9912-c184-4cc9-b401-a53f4d8de290.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.155] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.155] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.155] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0187.155] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0187.155] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0187.158] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.159] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\AppCenter_R.aapp", dwFileAttributes=0x80) returned 0 [0187.159] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\AppCenter_R.aapp" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acroapp\\enu\\appcenter_r.aapp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.160] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.160] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.160] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0187.160] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.160] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Certificates_R.aapp", dwFileAttributes=0x80) returned 0 [0187.161] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Certificates_R.aapp" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acroapp\\enu\\certificates_r.aapp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.161] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.161] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.161] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0187.161] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.162] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\CollectSignatures.aapp", dwFileAttributes=0x80) returned 0 [0187.162] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\CollectSignatures.aapp" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acroapp\\enu\\collectsignatures.aapp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.162] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.162] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.162] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0187.162] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.163] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Combine_R_RHP.aapp", dwFileAttributes=0x80) returned 0 [0187.163] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Combine_R_RHP.aapp" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acroapp\\enu\\combine_r_rhp.aapp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.163] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.163] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.163] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0187.163] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.164] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Comments.aapp", dwFileAttributes=0x80) returned 0 [0187.164] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Comments.aapp" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acroapp\\enu\\comments.aapp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.164] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.165] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.165] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0187.165] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.165] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Compare_R_RHP.aapp", dwFileAttributes=0x80) returned 0 [0187.166] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Compare_R_RHP.aapp" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acroapp\\enu\\compare_r_rhp.aapp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.166] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.166] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.166] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0187.166] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.166] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\CPDF_Full.aapp", dwFileAttributes=0x80) returned 0 [0187.167] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\CPDF_Full.aapp" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acroapp\\enu\\cpdf_full.aapp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.167] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.167] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.168] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0187.168] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.168] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\CPDF_RHP.aapp", dwFileAttributes=0x80) returned 0 [0187.168] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\CPDF_RHP.aapp" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acroapp\\enu\\cpdf_rhp.aapp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.168] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.168] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.169] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0187.169] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.169] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Edit_R_Exp_RHP.aapp", dwFileAttributes=0x80) returned 0 [0187.169] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Edit_R_Exp_RHP.aapp" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acroapp\\enu\\edit_r_exp_rhp.aapp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.169] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.169] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.170] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0187.170] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.170] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Edit_R_Full.aapp", dwFileAttributes=0x80) returned 0 [0187.170] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Edit_R_Full.aapp" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acroapp\\enu\\edit_r_full.aapp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.170] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.170] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.171] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0187.171] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.171] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Edit_R_RHP.aapp", dwFileAttributes=0x80) returned 0 [0187.171] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Edit_R_RHP.aapp" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acroapp\\enu\\edit_r_rhp.aapp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.172] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.172] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.172] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0187.172] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.172] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\EPDF_Full.aapp", dwFileAttributes=0x80) returned 0 [0187.173] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\EPDF_Full.aapp" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acroapp\\enu\\epdf_full.aapp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.173] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.173] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.173] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0187.173] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.173] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\EPDF_RHP.aapp", dwFileAttributes=0x80) returned 0 [0187.173] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\EPDF_RHP.aapp" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acroapp\\enu\\epdf_rhp.aapp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.174] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.174] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.174] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0187.174] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.174] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\FillSign.aapp", dwFileAttributes=0x80) returned 0 [0187.174] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\FillSign.aapp" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acroapp\\enu\\fillsign.aapp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.175] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.175] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.175] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0187.175] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.175] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Home.aapp", dwFileAttributes=0x80) returned 0 [0187.175] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Home.aapp" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acroapp\\enu\\home.aapp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.175] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.175] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.176] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0187.176] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.176] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Measure.aapp", dwFileAttributes=0x80) returned 0 [0187.177] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Measure.aapp" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acroapp\\enu\\measure.aapp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.177] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.177] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.177] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0187.177] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.177] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\MoreTools.aapp", dwFileAttributes=0x80) returned 0 [0187.178] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\MoreTools.aapp" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acroapp\\enu\\moretools.aapp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.178] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.178] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.179] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0187.179] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.179] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\OptimizePDF_R_RHP.aapp", dwFileAttributes=0x80) returned 0 [0187.179] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\OptimizePDF_R_RHP.aapp" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acroapp\\enu\\optimizepdf_r_rhp.aapp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.180] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.180] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.180] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0187.180] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.180] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Pages_R_RHP.aapp", dwFileAttributes=0x80) returned 0 [0187.181] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Pages_R_RHP.aapp" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acroapp\\enu\\pages_r_rhp.aapp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.181] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.181] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.181] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0187.181] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.181] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Protect_R_RHP.aapp", dwFileAttributes=0x80) returned 0 [0187.182] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Protect_R_RHP.aapp" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acroapp\\enu\\protect_r_rhp.aapp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.182] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.182] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.182] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0187.182] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.182] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Redact_R_RHP.aapp", dwFileAttributes=0x80) returned 0 [0187.184] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Redact_R_RHP.aapp" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acroapp\\enu\\redact_r_rhp.aapp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.184] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.184] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.185] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0187.185] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.185] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Scan_R_RHP.aapp", dwFileAttributes=0x80) returned 0 [0187.186] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Scan_R_RHP.aapp" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acroapp\\enu\\scan_r_rhp.aapp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.186] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.186] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.186] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0187.186] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.186] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Stamp.aapp", dwFileAttributes=0x80) returned 0 [0187.187] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Stamp.aapp" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acroapp\\enu\\stamp.aapp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.187] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.187] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.189] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0187.189] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.189] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\TrackedSend.aapp", dwFileAttributes=0x80) returned 0 [0187.189] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\TrackedSend.aapp" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acroapp\\enu\\trackedsend.aapp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.190] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.190] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.190] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0187.190] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.190] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Viewer.aapp", dwFileAttributes=0x80) returned 0 [0187.190] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Viewer.aapp" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acroapp\\enu\\viewer.aapp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.191] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.191] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.191] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0187.191] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0187.196] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.196] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef.pak", dwFileAttributes=0x80) returned 0 [0187.197] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef.pak" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\cef.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.197] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.197] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.197] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0187.197] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.197] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_100_percent.pak", dwFileAttributes=0x80) returned 0 [0187.198] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_100_percent.pak" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\cef_100_percent.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.198] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.198] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.198] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0187.198] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.198] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_200_percent.pak", dwFileAttributes=0x80) returned 0 [0187.199] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_200_percent.pak" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\cef_200_percent.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.199] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.199] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.199] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0187.199] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.200] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_extensions.pak", dwFileAttributes=0x80) returned 0 [0187.200] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_extensions.pak" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\cef_extensions.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.200] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.200] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.200] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0187.200] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0187.200] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.201] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\COPYING.LGPLv2.1.txt", dwFileAttributes=0x80) returned 0 [0187.201] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\COPYING.LGPLv2.1.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\copying.lgplv2.1.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.201] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.201] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.201] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0187.201] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0187.201] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0187.201] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0187.201] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.202] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\icudtl.dat", dwFileAttributes=0x80) returned 0 [0187.202] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\icudtl.dat" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\icudtl.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.202] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.202] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.202] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0187.202] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0187.202] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0187.202] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0187.202] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.209] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\LICENSE.txt", dwFileAttributes=0x80) returned 0 [0187.209] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\LICENSE.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\license.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.209] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.209] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.210] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0187.211] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.211] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\locales\\en-US.pak", dwFileAttributes=0x80) returned 0 [0187.211] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\locales\\en-US.pak" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\locales\\en-us.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.211] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.211] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.211] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0187.212] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0187.212] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.212] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\natives_blob.bin", dwFileAttributes=0x80) returned 0 [0187.212] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\natives_blob.bin" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\natives_blob.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.212] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.213] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.213] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0187.213] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0187.213] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0187.213] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.213] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\snapshot_blob.bin", dwFileAttributes=0x80) returned 0 [0187.213] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\snapshot_blob.bin" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\snapshot_blob.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.213] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.213] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.214] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0187.214] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0187.214] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0187.214] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.214] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Adobe.Reader.Dependencies.manifest", dwFileAttributes=0x80) returned 0 [0187.215] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Adobe.Reader.Dependencies.manifest" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\adobe.reader.dependencies.manifest"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.215] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.215] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.215] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0187.215] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0187.215] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0187.215] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0187.216] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0187.216] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0187.216] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0187.216] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0187.216] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0187.217] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.218] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn\\manifest.json", dwFileAttributes=0x80) returned 0 [0187.219] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn\\manifest.json" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\browser\\wcchromeextn\\manifest.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.219] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.219] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.220] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0187.220] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0187.220] FindClose (in: hFindFile=0x665abb56a0 | out: hFindFile=0x665abb56a0) returned 1 [0187.221] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.221] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Click on 'Change' to select default PDF handler.pdf", dwFileAttributes=0x80) returned 0 [0187.221] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Click on 'Change' to select default PDF handler.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\click on 'change' to select default pdf handler.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.221] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.222] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.222] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0187.222] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0187.222] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0187.222] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.222] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\cryptocme.sig", dwFileAttributes=0x80) returned 0 [0187.222] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\cryptocme.sig" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\cryptocme.sig"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.222] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.223] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.223] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0187.223] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0187.223] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0187.223] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0187.223] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0187.223] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0187.224] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.224] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\AdobeID.pdf", dwFileAttributes=0x80) returned 0 [0187.225] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\idtemplates\\enu\\adobeid.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.225] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.225] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.225] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0187.225] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.226] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\DefaultID.pdf", dwFileAttributes=0x80) returned 0 [0187.226] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\idtemplates\\enu\\defaultid.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.226] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.226] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.226] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0187.226] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0187.228] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.228] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Javascripts\\JSByteCodeWin.bin", dwFileAttributes=0x80) returned 0 [0187.229] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Javascripts\\JSByteCodeWin.bin" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\javascripts\\jsbytecodewin.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.229] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.229] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.229] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0187.229] FindClose (in: hFindFile=0x665abb4d40 | out: hFindFile=0x665abb4d40) returned 1 [0187.230] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.231] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\ENU\\license.html", dwFileAttributes=0x80) returned 0 [0187.231] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\ENU\\license.html" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\legal\\enu\\license.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.231] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.231] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.231] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0187.231] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0187.232] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.233] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Locale\\en_US\\stopwords.ENU", dwFileAttributes=0x80) returned 0 [0187.233] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Locale\\en_US\\stopwords.ENU" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\locale\\en_us\\stopwords.enu"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.233] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.233] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.233] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0187.234] FindClose (in: hFindFile=0x665abb4440 | out: hFindFile=0x665abb4440) returned 1 [0187.234] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.234] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\PDFSigQFormalRep.pdf", dwFileAttributes=0x80) returned 0 [0187.235] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\PDFSigQFormalRep.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\pdfsigqformalrep.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.235] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.235] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.235] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0187.235] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0187.237] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.237] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Accessibility.api", dwFileAttributes=0x80) returned 0 [0187.238] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Accessibility.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\accessibility.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.238] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.238] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.238] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0187.239] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.239] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\adobepdf.xdc", dwFileAttributes=0x80) returned 0 [0187.240] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\adobepdf.xdc" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\acroform\\adobepdf.xdc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.240] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.240] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.240] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0187.240] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.241] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\PMP\\AdobePDF417.pmp", dwFileAttributes=0x80) returned 0 [0187.241] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\PMP\\AdobePDF417.pmp" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\acroform\\pmp\\adobepdf417.pmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.241] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.241] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.241] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0187.241] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.242] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\PMP\\DataMatrix.pmp", dwFileAttributes=0x80) returned 0 [0187.242] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\PMP\\DataMatrix.pmp" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\acroform\\pmp\\datamatrix.pmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.242] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.242] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.242] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0187.242] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.243] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\PMP\\QRCode.pmp", dwFileAttributes=0x80) returned 0 [0187.243] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\PMP\\QRCode.pmp" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\acroform\\pmp\\qrcode.pmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.243] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.243] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.243] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0187.243] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0187.244] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.244] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm.api", dwFileAttributes=0x80) returned 0 [0187.244] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\acroform.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.245] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.245] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.245] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0187.247] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.247] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf", dwFileAttributes=0x80) returned 0 [0187.247] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\annotations\\stamps\\enu\\dynamic.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.248] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.248] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.248] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0187.248] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.248] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf", dwFileAttributes=0x80) returned 0 [0187.249] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\annotations\\stamps\\enu\\signhere.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.249] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.249] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.249] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0187.249] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.249] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf", dwFileAttributes=0x80) returned 0 [0187.250] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\annotations\\stamps\\enu\\standardbusiness.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.250] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.250] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.250] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0187.250] FindClose (in: hFindFile=0x665abb4440 | out: hFindFile=0x665abb4440) returned 1 [0187.251] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.251] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf", dwFileAttributes=0x80) returned 0 [0187.251] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\annotations\\stamps\\words.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.251] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.251] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.252] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0187.252] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0187.252] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.252] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annots.api", dwFileAttributes=0x80) returned 0 [0187.253] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annots.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\annots.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.253] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.253] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.253] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0187.253] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.253] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Checkers.api", dwFileAttributes=0x80) returned 0 [0187.253] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Checkers.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\checkers.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.254] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.254] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.254] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0187.254] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.254] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DigSig.api", dwFileAttributes=0x80) returned 0 [0187.254] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DigSig.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\digsig.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.255] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.255] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.255] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0187.255] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.255] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DropboxStorage.api", dwFileAttributes=0x80) returned 0 [0187.258] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DropboxStorage.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\dropboxstorage.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.258] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.258] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.259] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0187.259] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.259] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DVA.api", dwFileAttributes=0x80) returned 0 [0187.259] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DVA.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\dva.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.259] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.259] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.260] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0187.260] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.260] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\eBook.api", dwFileAttributes=0x80) returned 0 [0187.261] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\eBook.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\ebook.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.261] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.261] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.261] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0187.261] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.261] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\EScript.api", dwFileAttributes=0x80) returned 0 [0187.262] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\EScript.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\escript.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.262] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.262] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.262] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0187.262] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.262] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\IA32.api", dwFileAttributes=0x80) returned 0 [0187.263] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\IA32.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\ia32.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.263] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.263] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.263] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0187.263] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.263] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\MakeAccessible.api", dwFileAttributes=0x80) returned 0 [0187.265] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\MakeAccessible.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\makeaccessible.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.265] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.265] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.265] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0187.266] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.266] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.mpp", dwFileAttributes=0x80) returned 0 [0187.267] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.mpp" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\multimedia\\mpp\\flash.mpp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.267] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.267] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.268] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0187.268] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.268] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.mpp", dwFileAttributes=0x80) returned 0 [0187.268] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.mpp" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.mpp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.268] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.268] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.269] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0187.269] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.269] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.mpp", dwFileAttributes=0x80) returned 0 [0187.269] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.mpp" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\multimedia\\mpp\\quicktime.mpp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.269] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.269] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.270] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0187.270] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0187.270] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0187.270] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.270] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia.api", dwFileAttributes=0x80) returned 0 [0187.271] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\multimedia.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.272] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.272] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.272] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0187.272] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.272] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\PDDom.api", dwFileAttributes=0x80) returned 0 [0187.274] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\PDDom.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\pddom.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.274] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.274] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.274] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0187.275] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.275] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\PPKLite.api", dwFileAttributes=0x80) returned 0 [0187.276] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\PPKLite.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\ppklite.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.276] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.276] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.277] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0187.277] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.277] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\ReadOutLoud.api", dwFileAttributes=0x80) returned 0 [0187.277] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\ReadOutLoud.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\readoutloud.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.277] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.277] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.277] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0187.278] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.278] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\reflow.api", dwFileAttributes=0x80) returned 0 [0187.281] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\reflow.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\reflow.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.281] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.281] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.282] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0187.282] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.282] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\SaveAsRTF.api", dwFileAttributes=0x80) returned 0 [0187.283] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\SaveAsRTF.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\saveasrtf.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.283] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.284] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.284] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0187.284] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.284] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Search.api", dwFileAttributes=0x80) returned 0 [0187.284] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Search.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\search.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.284] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.285] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.285] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0187.285] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.285] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\SendMail.api", dwFileAttributes=0x80) returned 0 [0187.285] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\SendMail.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\sendmail.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.285] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.285] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.286] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0187.286] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.286] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Spelling.api", dwFileAttributes=0x80) returned 0 [0187.286] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Spelling.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\spelling.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.286] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.286] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.287] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0187.287] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.287] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\StorageConnectors.api", dwFileAttributes=0x80) returned 0 [0187.287] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\StorageConnectors.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\storageconnectors.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.287] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.287] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.287] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0187.287] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.288] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Updater.api", dwFileAttributes=0x80) returned 0 [0187.288] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Updater.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\updater.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.288] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.288] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.288] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0187.288] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.289] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\weblink.api", dwFileAttributes=0x80) returned 0 [0187.289] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\weblink.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\weblink.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.289] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.289] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.289] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0187.289] FindClose (in: hFindFile=0x665abb5520 | out: hFindFile=0x665abb5520) returned 1 [0187.291] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.291] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\2d.x3d", dwFileAttributes=0x80) returned 0 [0187.292] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\2d.x3d" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins3d\\2d.x3d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.292] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.292] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.292] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0187.292] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.292] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\3difr.x3d", dwFileAttributes=0x80) returned 0 [0187.294] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\3difr.x3d" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins3d\\3difr.x3d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.294] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.294] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.294] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0187.294] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.294] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\drvDX9.x3d", dwFileAttributes=0x80) returned 0 [0187.294] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\drvDX9.x3d" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins3d\\drvdx9.x3d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.295] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.295] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.295] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0187.295] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.295] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\drvSOFT.x3d", dwFileAttributes=0x80) returned 0 [0187.295] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\drvSOFT.x3d" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins3d\\drvsoft.x3d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.296] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.296] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.296] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0187.297] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.297] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\prc\\MyriadCAD.otf", dwFileAttributes=0x80) returned 0 [0187.297] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\prc\\MyriadCAD.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins3d\\prc\\myriadcad.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.298] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.298] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.298] FindNextFileW (in: hFindFile=0x665abb54c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0187.298] FindClose (in: hFindFile=0x665abb54c0 | out: hFindFile=0x665abb54c0) returned 1 [0187.298] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.298] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\prcr.x3d", dwFileAttributes=0x80) returned 0 [0187.299] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\prcr.x3d" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins3d\\prcr.x3d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.299] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.299] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.299] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0187.299] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.299] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\tesselate.x3d", dwFileAttributes=0x80) returned 0 [0187.300] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\tesselate.x3d" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins3d\\tesselate.x3d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.300] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.300] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.301] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0187.301] FindClose (in: hFindFile=0x665abb56a0 | out: hFindFile=0x665abb56a0) returned 1 [0187.301] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.301] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\pmd.cer", dwFileAttributes=0x80) returned 0 [0187.302] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\pmd.cer" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\pmd.cer"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.302] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.302] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.302] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0187.302] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0187.302] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0187.302] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.303] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\RTC.der", dwFileAttributes=0x80) returned 0 [0187.303] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\RTC.der" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\rtc.der"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.303] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.303] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.303] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0187.303] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0187.303] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0187.306] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.307] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\add_reviewer.gif", dwFileAttributes=0x80) returned 0 [0187.307] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\add_reviewer.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\add_reviewer.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.307] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.307] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.307] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0187.308] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.308] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\bl.gif", dwFileAttributes=0x80) returned 0 [0187.308] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\bl.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\bl.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.308] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.308] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.308] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.309] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\br.gif", dwFileAttributes=0x80) returned 0 [0187.309] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\br.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\br.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.309] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.309] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.309] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.310] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\create_form.gif", dwFileAttributes=0x80) returned 0 [0187.310] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\create_form.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\create_form.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.311] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.311] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.311] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.311] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\distribute_form.gif", dwFileAttributes=0x80) returned 0 [0187.311] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\distribute_form.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\distribute_form.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.312] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.312] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.312] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.313] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\email_all.gif", dwFileAttributes=0x80) returned 0 [0187.313] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\email_all.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\email_all.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.313] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.313] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.313] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.314] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\ended_review_or_form.gif", dwFileAttributes=0x80) returned 0 [0187.314] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\ended_review_or_form.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\ended_review_or_form.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.315] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.315] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.315] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.315] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\end_review.gif", dwFileAttributes=0x80) returned 0 [0187.315] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\end_review.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\end_review.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.316] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.316] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.316] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.316] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_distributed.gif", dwFileAttributes=0x80) returned 0 [0187.316] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_distributed.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\forms_distributed.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.316] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.316] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.317] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.317] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_received.gif", dwFileAttributes=0x80) returned 0 [0187.318] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_received.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\forms_received.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.318] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.318] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.318] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.318] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_super.gif", dwFileAttributes=0x80) returned 0 [0187.318] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_super.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\forms_super.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.319] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.319] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.319] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.319] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\form_responses.gif", dwFileAttributes=0x80) returned 0 [0187.319] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\form_responses.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\form_responses.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.320] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.320] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.320] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.320] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\info.gif", dwFileAttributes=0x80) returned 0 [0187.320] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\info.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\info.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.320] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.321] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.321] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.321] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\main.css", dwFileAttributes=0x80) returned 0 [0187.321] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\main.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.321] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.321] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.322] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.322] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\open_original_form.gif", dwFileAttributes=0x80) returned 0 [0187.324] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\open_original_form.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\open_original_form.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.324] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.324] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.324] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.325] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\pdf.gif", dwFileAttributes=0x80) returned 0 [0187.325] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\pdf.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\pdf.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.325] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.325] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.326] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.326] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviewers.gif", dwFileAttributes=0x80) returned 0 [0187.327] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviewers.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\reviewers.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.327] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.327] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.327] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.328] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_joined.gif", dwFileAttributes=0x80) returned 0 [0187.328] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_joined.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\reviews_joined.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.328] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.328] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.329] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.329] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_sent.gif", dwFileAttributes=0x80) returned 0 [0187.330] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_sent.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\reviews_sent.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.330] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.330] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.330] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.330] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_super.gif", dwFileAttributes=0x80) returned 0 [0187.330] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_super.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\reviews_super.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.331] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.331] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.331] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.331] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_browser.gif", dwFileAttributes=0x80) returned 0 [0187.331] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_browser.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\review_browser.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.332] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.332] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.332] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.332] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_email.gif", dwFileAttributes=0x80) returned 0 [0187.332] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_email.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\review_email.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.332] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.333] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.333] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.333] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_same_reviewers.gif", dwFileAttributes=0x80) returned 0 [0187.333] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_same_reviewers.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\review_same_reviewers.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.334] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.334] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.334] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.334] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_shared.gif", dwFileAttributes=0x80) returned 0 [0187.334] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_shared.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\review_shared.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.335] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.335] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.335] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.335] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\rss.gif", dwFileAttributes=0x80) returned 0 [0187.336] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\rss.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\rss.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.336] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.336] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.336] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.336] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\server_issue.gif", dwFileAttributes=0x80) returned 0 [0187.337] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\server_issue.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\server_issue.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.337] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.337] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.337] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.338] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\server_lg.gif", dwFileAttributes=0x80) returned 0 [0187.339] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\server_lg.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\server_lg.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.339] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.339] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.339] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.339] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\server_ok.gif", dwFileAttributes=0x80) returned 0 [0187.340] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\server_ok.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\server_ok.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.340] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.340] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.340] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.341] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\stop_collection_data.gif", dwFileAttributes=0x80) returned 0 [0187.341] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\stop_collection_data.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\stop_collection_data.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.341] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.341] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.341] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.342] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\submission_history.gif", dwFileAttributes=0x80) returned 0 [0187.342] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\submission_history.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\submission_history.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.342] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.342] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.343] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.343] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\tl.gif", dwFileAttributes=0x80) returned 0 [0187.344] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\tl.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\tl.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.344] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.344] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.344] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.345] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\tr.gif", dwFileAttributes=0x80) returned 0 [0187.345] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\tr.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\tr.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.345] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.345] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.345] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.346] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\trash.gif", dwFileAttributes=0x80) returned 0 [0187.346] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\trash.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\trash.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.346] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.346] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.346] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.346] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOffNotificationInAcrobat.gif", dwFileAttributes=0x80) returned 0 [0187.347] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOffNotificationInAcrobat.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\turnoffnotificationinacrobat.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.347] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.347] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.347] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.347] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOffNotificationInTray.gif", dwFileAttributes=0x80) returned 0 [0187.348] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOffNotificationInTray.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\turnoffnotificationintray.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.348] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.348] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.349] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.349] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOnNotificationInAcrobat.gif", dwFileAttributes=0x80) returned 0 [0187.349] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOnNotificationInAcrobat.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\turnonnotificationinacrobat.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.349] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.349] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.349] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.350] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOnNotificationInTray.gif", dwFileAttributes=0x80) returned 0 [0187.350] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOnNotificationInTray.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\turnonnotificationintray.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.350] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.350] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.350] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.351] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\warning.gif", dwFileAttributes=0x80) returned 0 [0187.351] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\warning.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\warning.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.351] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.351] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.355] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.355] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\UIThemes\\DarkTheme.acrotheme", dwFileAttributes=0x80) returned 0 [0187.355] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\UIThemes\\DarkTheme.acrotheme" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\uithemes\\darktheme.acrotheme"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.355] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.355] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.356] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.356] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\UIThemes\\LightTheme.acrotheme", dwFileAttributes=0x80) returned 0 [0187.356] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\UIThemes\\LightTheme.acrotheme" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\uithemes\\lighttheme.acrotheme"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.356] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.356] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.360] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.361] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\base_uris.js", dwFileAttributes=0x80) returned 0 [0187.361] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\base_uris.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\base_uris.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.361] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.361] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.362] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.362] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\index.html", dwFileAttributes=0x80) returned 0 [0187.362] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\index.html" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\index.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.362] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.362] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.363] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.363] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\plugins.js", dwFileAttributes=0x80) returned 0 [0187.363] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\plugins.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\plugins.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.363] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.363] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.376] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.377] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-mac.css", dwFileAttributes=0x80) returned 0 [0187.377] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-mac.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\main-cef-mac.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.377] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.377] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.378] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.378] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-ui-theme.css", dwFileAttributes=0x80) returned 0 [0187.378] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-ui-theme.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\main-cef-ui-theme.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.378] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.378] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.379] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.379] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-win.css", dwFileAttributes=0x80) returned 0 [0187.379] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-win.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\main-cef-win.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.379] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.379] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.379] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.380] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-win8.css", dwFileAttributes=0x80) returned 0 [0187.380] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-win8.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\main-cef-win8.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.380] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.380] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.380] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.381] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef.css", dwFileAttributes=0x80) returned 0 [0187.381] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\main-cef.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.381] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.381] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.381] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.382] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-high-contrast.css", dwFileAttributes=0x80) returned 0 [0187.382] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-high-contrast.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\main-high-contrast.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.382] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.382] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.382] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.382] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main.css", dwFileAttributes=0x80) returned 0 [0187.383] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\main.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.383] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.383] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.388] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.389] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner.gif", dwFileAttributes=0x80) returned 0 [0187.389] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\a12_spinner.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.390] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.390] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.390] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.390] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_2x.gif", dwFileAttributes=0x80) returned 0 [0187.391] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\a12_spinner_2x.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.391] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.391] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.392] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.392] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_int.gif", dwFileAttributes=0x80) returned 0 [0187.392] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_int.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\a12_spinner_int.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.392] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.392] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.393] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.393] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_int_2x.gif", dwFileAttributes=0x80) returned 0 [0187.393] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_int_2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\a12_spinner_int_2x.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.393] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.393] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.393] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.394] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\adc_logo.png", dwFileAttributes=0x80) returned 0 [0187.394] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\adc_logo.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\adc_logo.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.394] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.394] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.394] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.395] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\adobe_spinner.gif", dwFileAttributes=0x80) returned 0 [0187.395] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\adobe_spinner.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\adobe_spinner.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.396] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.396] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.396] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.396] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-114x114-precomposed.png", dwFileAttributes=0x80) returned 0 [0187.397] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-114x114-precomposed.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\apple-touch-icon-114x114-precomposed.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.397] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.397] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.397] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.397] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-144x144-precomposed.png", dwFileAttributes=0x80) returned 0 [0187.398] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-144x144-precomposed.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\apple-touch-icon-144x144-precomposed.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.398] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.398] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.398] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.398] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-57x57-precomposed.png", dwFileAttributes=0x80) returned 0 [0187.399] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-57x57-precomposed.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\apple-touch-icon-57x57-precomposed.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.399] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.399] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.399] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.400] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-72x72-precomposed.png", dwFileAttributes=0x80) returned 0 [0187.400] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-72x72-precomposed.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\apple-touch-icon-72x72-precomposed.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.400] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.400] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.400] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.401] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ccloud.png", dwFileAttributes=0x80) returned 0 [0187.401] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ccloud.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\ccloud.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.402] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.402] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.402] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.402] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ccloud_retina.png", dwFileAttributes=0x80) returned 0 [0187.403] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ccloud_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\ccloud_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.403] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.403] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.403] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.404] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\close_x.png", dwFileAttributes=0x80) returned 0 [0187.404] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\close_x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\close_x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.404] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.404] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.405] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.405] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\core_icons.png", dwFileAttributes=0x80) returned 0 [0187.405] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\core_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\core_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.405] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.405] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.406] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.406] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\core_icons_retina.png", dwFileAttributes=0x80) returned 0 [0187.407] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\core_icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\core_icons_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.407] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.407] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.407] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.408] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\dd_arrow_small.png", dwFileAttributes=0x80) returned 0 [0187.408] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\dd_arrow_small.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\dd_arrow_small.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.408] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.408] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.408] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.409] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\favicon.ico", dwFileAttributes=0x80) returned 0 [0187.409] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\favicon.ico" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\favicon.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.409] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.409] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.412] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.412] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\aic_file_icons.png", dwFileAttributes=0x80) returned 0 [0187.413] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\aic_file_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\aic_file_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.413] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.413] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.413] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.414] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\aic_file_icons_retina_thumb.png", dwFileAttributes=0x80) returned 0 [0187.414] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\aic_file_icons_retina_thumb.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\aic_file_icons_retina_thumb.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.414] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.414] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.414] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.415] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\cloud_icon.png", dwFileAttributes=0x80) returned 0 [0187.415] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\cloud_icon.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\cloud_icon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.415] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.415] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.417] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.417] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hiContrast_bow.png", dwFileAttributes=0x80) returned 0 [0187.418] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hiContrast_bow.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hicontrast_bow.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.418] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.418] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.418] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.418] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hiContrast_wob.png", dwFileAttributes=0x80) returned 0 [0187.419] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hiContrast_wob.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hicontrast_wob.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.419] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.419] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.419] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.420] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_highcontrast.png", dwFileAttributes=0x80) returned 0 [0187.420] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_highcontrast.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_highcontrast.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.420] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.420] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.421] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.421] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highContrast_bow.png", dwFileAttributes=0x80) returned 0 [0187.422] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highContrast_bow.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highcontrast_bow.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.422] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.422] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.422] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.422] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highContrast_wob.png", dwFileAttributes=0x80) returned 0 [0187.423] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highContrast_wob.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highcontrast_wob.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.423] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.423] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.428] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.428] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons.png", dwFileAttributes=0x80) returned 0 [0187.429] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.430] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.430] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.430] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.430] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons_retina_thumb.png", dwFileAttributes=0x80) returned 0 [0187.431] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons_retina_thumb.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons_retina_thumb.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.431] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.431] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.431] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.431] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\cloud_icon.png", dwFileAttributes=0x80) returned 0 [0187.432] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\cloud_icon.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\themes\\dark\\cloud_icon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.432] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.432] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.437] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.438] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_hiContrast_bow.png", dwFileAttributes=0x80) returned 0 [0187.438] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_hiContrast_bow.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\hi_contrast\\core_icons_hicontrast_bow.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.439] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.439] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.439] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.440] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_hiContrast_wob.png", dwFileAttributes=0x80) returned 0 [0187.440] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_hiContrast_wob.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\hi_contrast\\core_icons_hicontrast_wob.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.440] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.440] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.440] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.441] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_highcontrast.png", dwFileAttributes=0x80) returned 0 [0187.441] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_highcontrast.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\hi_contrast\\core_icons_highcontrast.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.441] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.441] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.442] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.442] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_highcontrast_retina.png", dwFileAttributes=0x80) returned 0 [0187.442] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_highcontrast_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\hi_contrast\\core_icons_highcontrast_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.443] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.443] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.443] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.443] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons__retina_hiContrast_bow.png", dwFileAttributes=0x80) returned 0 [0187.444] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons__retina_hiContrast_bow.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\hi_contrast\\core_icons__retina_hicontrast_bow.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.444] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.444] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.444] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.445] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons__retina_hiContrast_wob.png", dwFileAttributes=0x80) returned 0 [0187.445] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons__retina_hiContrast_wob.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\hi_contrast\\core_icons__retina_hicontrast_wob.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.445] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.445] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.448] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.449] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\illustrations.png", dwFileAttributes=0x80) returned 0 [0187.449] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\illustrations.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\illustrations.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.449] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.449] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.449] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.450] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\illustrations_retina.png", dwFileAttributes=0x80) returned 0 [0187.450] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\illustrations_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\illustrations_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.450] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.450] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.450] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.451] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ind_prog.gif", dwFileAttributes=0x80) returned 0 [0187.451] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ind_prog.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\ind_prog.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.451] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.451] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.451] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.452] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\japanese_over.png", dwFileAttributes=0x80) returned 0 [0187.452] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\japanese_over.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\japanese_over.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.452] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.452] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.453] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.453] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\large_trefoil.png", dwFileAttributes=0x80) returned 0 [0187.454] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\large_trefoil.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\large_trefoil.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.454] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.454] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.454] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.455] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\large_trefoil_2x.png", dwFileAttributes=0x80) returned 0 [0187.455] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\large_trefoil_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\large_trefoil_2x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.456] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.456] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.457] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.457] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\logo_retina.png", dwFileAttributes=0x80) returned 0 [0187.457] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\logo_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\logo_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.458] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.458] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.458] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.459] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress-indeterminate.gif", dwFileAttributes=0x80) returned 0 [0187.459] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress-indeterminate.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\progress-indeterminate.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.459] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.459] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.460] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.460] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner.gif", dwFileAttributes=0x80) returned 0 [0187.460] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\progress_spinner.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.460] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.460] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.461] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.461] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner2x.gif", dwFileAttributes=0x80) returned 0 [0187.462] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\progress_spinner2x.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.462] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.462] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.462] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.462] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner_dark.gif", dwFileAttributes=0x80) returned 0 [0187.463] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner_dark.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\progress_spinner_dark.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.463] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.463] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.463] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.463] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner_dark2x.gif", dwFileAttributes=0x80) returned 0 [0187.464] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner_dark2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\progress_spinner_dark2x.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.464] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.464] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.464] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.464] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\RHP_icons.png", dwFileAttributes=0x80) returned 0 [0187.464] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\RHP_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\rhp_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.465] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.465] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.465] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.465] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\RHP_icons_2x.png", dwFileAttributes=0x80) returned 0 [0187.465] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\RHP_icons_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\rhp_icons_2x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.466] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.466] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.466] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.466] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\selection-actions.png", dwFileAttributes=0x80) returned 0 [0187.466] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\selection-actions.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\selection-actions.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.467] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.467] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.467] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.467] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\selection-actions2x.png", dwFileAttributes=0x80) returned 0 [0187.467] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\selection-actions2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\selection-actions2x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.468] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.468] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.471] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.471] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner.gif", dwFileAttributes=0x80) returned 0 [0187.472] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\a12_spinner.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.472] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.472] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.473] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.473] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_2x.gif", dwFileAttributes=0x80) returned 0 [0187.474] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\a12_spinner_2x.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.474] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.474] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.474] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.475] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_int.gif", dwFileAttributes=0x80) returned 0 [0187.475] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_int.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\a12_spinner_int.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.476] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.476] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.476] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.476] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_int_2x.gif", dwFileAttributes=0x80) returned 0 [0187.477] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_int_2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\a12_spinner_int_2x.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.477] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.477] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.477] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.478] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\adc_logo.png", dwFileAttributes=0x80) returned 0 [0187.478] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\adc_logo.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\adc_logo.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.478] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.478] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.478] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.479] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\adobe_spinner.gif", dwFileAttributes=0x80) returned 0 [0187.479] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\adobe_spinner.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\adobe_spinner.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.480] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.480] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.480] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.480] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-114x114-precomposed.png", dwFileAttributes=0x80) returned 0 [0187.481] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-114x114-precomposed.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\apple-touch-icon-114x114-precomposed.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.481] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.481] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.481] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.482] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-144x144-precomposed.png", dwFileAttributes=0x80) returned 0 [0187.482] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-144x144-precomposed.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\apple-touch-icon-144x144-precomposed.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.482] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.482] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.482] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.483] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-57x57-precomposed.png", dwFileAttributes=0x80) returned 0 [0187.483] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-57x57-precomposed.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\apple-touch-icon-57x57-precomposed.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.483] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.483] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.483] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.484] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-72x72-precomposed.png", dwFileAttributes=0x80) returned 0 [0187.484] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-72x72-precomposed.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\apple-touch-icon-72x72-precomposed.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.485] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.485] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.485] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.485] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ccloud.png", dwFileAttributes=0x80) returned 0 [0187.485] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ccloud.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\ccloud.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.485] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.486] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.486] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.486] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ccloud_retina.png", dwFileAttributes=0x80) returned 0 [0187.487] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ccloud_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\ccloud_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.487] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.487] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.487] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.487] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\close_x.png", dwFileAttributes=0x80) returned 0 [0187.488] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\close_x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\close_x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.488] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.488] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.488] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.488] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\core_icons.png", dwFileAttributes=0x80) returned 0 [0187.489] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\core_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\core_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.489] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.489] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.490] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.490] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\core_icons_retina.png", dwFileAttributes=0x80) returned 0 [0187.490] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\core_icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\core_icons_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.490] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.490] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.490] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.491] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\dd_arrow_small.png", dwFileAttributes=0x80) returned 0 [0187.491] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\dd_arrow_small.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\dd_arrow_small.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.491] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.491] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.491] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.492] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\favicon.ico", dwFileAttributes=0x80) returned 0 [0187.492] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\favicon.ico" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\favicon.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.492] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.492] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.492] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.492] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\illustrations.png", dwFileAttributes=0x80) returned 0 [0187.493] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\illustrations.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\illustrations.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.493] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.493] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.493] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.493] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\illustrations_retina.png", dwFileAttributes=0x80) returned 0 [0187.494] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\illustrations_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\illustrations_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.494] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.494] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.494] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.494] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ind_prog.gif", dwFileAttributes=0x80) returned 0 [0187.495] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ind_prog.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\ind_prog.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.495] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.495] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.495] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.496] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\japanese_over.png", dwFileAttributes=0x80) returned 0 [0187.496] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\japanese_over.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\japanese_over.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.496] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.496] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.496] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.497] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\large_trefoil.png", dwFileAttributes=0x80) returned 0 [0187.497] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\large_trefoil.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\large_trefoil.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.497] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.497] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.497] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.497] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\large_trefoil_2x.png", dwFileAttributes=0x80) returned 0 [0187.515] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\large_trefoil_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\large_trefoil_2x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.515] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.515] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.516] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.516] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\logo_retina.png", dwFileAttributes=0x80) returned 0 [0187.516] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\logo_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\logo_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.516] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.516] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.517] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.517] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress-indeterminate.gif", dwFileAttributes=0x80) returned 0 [0187.517] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress-indeterminate.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\progress-indeterminate.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.517] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.517] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.518] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.518] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner.gif", dwFileAttributes=0x80) returned 0 [0187.518] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\progress_spinner.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.518] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.518] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.518] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.519] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner2x.gif", dwFileAttributes=0x80) returned 0 [0187.519] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\progress_spinner2x.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.519] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.519] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.519] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.519] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner_dark.gif", dwFileAttributes=0x80) returned 0 [0187.520] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner_dark.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\progress_spinner_dark.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.520] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.520] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.520] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.520] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner_dark2x.gif", dwFileAttributes=0x80) returned 0 [0187.521] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner_dark2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\progress_spinner_dark2x.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.521] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.521] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.521] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.521] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\RHP_icons.png", dwFileAttributes=0x80) returned 0 [0187.521] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\RHP_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\rhp_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.522] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.522] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.522] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.522] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\RHP_icons_2x.png", dwFileAttributes=0x80) returned 0 [0187.522] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\RHP_icons_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\rhp_icons_2x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.522] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.522] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.523] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.523] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\selection-actions.png", dwFileAttributes=0x80) returned 0 [0187.523] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\selection-actions.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\selection-actions.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.523] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.523] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.524] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.524] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\selection-actions2x.png", dwFileAttributes=0x80) returned 0 [0187.524] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\selection-actions2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\selection-actions2x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.524] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.524] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.587] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.587] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-down.png", dwFileAttributes=0x80) returned 0 [0187.588] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-down.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\arrow-down.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.588] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.588] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.588] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.589] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-left.png", dwFileAttributes=0x80) returned 0 [0187.589] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-left.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\arrow-left.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.589] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.589] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.589] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.590] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-right.png", dwFileAttributes=0x80) returned 0 [0187.590] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-right.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\arrow-right.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.590] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.590] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.590] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.591] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-up.png", dwFileAttributes=0x80) returned 0 [0187.591] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-up.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\arrow-up.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.591] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.591] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.591] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.592] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\hscroll-thumb.png", dwFileAttributes=0x80) returned 0 [0187.592] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\hscroll-thumb.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\hscroll-thumb.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.592] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.592] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.596] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.597] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-down.png", dwFileAttributes=0x80) returned 0 [0187.598] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-down.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-down.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.598] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.598] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.599] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.599] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-left.png", dwFileAttributes=0x80) returned 0 [0187.599] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-left.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-left.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.599] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.599] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.600] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.600] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-right.png", dwFileAttributes=0x80) returned 0 [0187.600] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-right.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-right.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.600] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.600] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.601] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.601] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-up.png", dwFileAttributes=0x80) returned 0 [0187.601] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-up.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-up.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.601] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.601] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.602] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.602] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\hscroll-thumb.png", dwFileAttributes=0x80) returned 0 [0187.602] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\hscroll-thumb.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\themes\\dark\\hscroll-thumb.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.602] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.602] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.602] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.603] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\vscroll-thumb.png", dwFileAttributes=0x80) returned 0 [0187.603] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\vscroll-thumb.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\themes\\dark\\vscroll-thumb.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.603] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.603] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.607] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.607] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\vscroll-thumb.png", dwFileAttributes=0x80) returned 0 [0187.608] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\vscroll-thumb.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\vscroll-thumb.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.608] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.608] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.610] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.610] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-down-pressed.gif", dwFileAttributes=0x80) returned 0 [0187.612] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-down-pressed.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\arrow-down-pressed.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.612] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.612] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.613] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.613] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-down.gif", dwFileAttributes=0x80) returned 0 [0187.632] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-down.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\arrow-down.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.633] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.633] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.633] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.633] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-left-pressed.gif", dwFileAttributes=0x80) returned 0 [0187.634] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-left-pressed.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\arrow-left-pressed.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.634] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.634] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.634] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.635] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-left.gif", dwFileAttributes=0x80) returned 0 [0187.635] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-left.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\arrow-left.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.635] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.635] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.635] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.636] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-right-pressed.gif", dwFileAttributes=0x80) returned 0 [0187.636] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-right-pressed.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\arrow-right-pressed.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.636] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.636] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.637] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.637] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-right.gif", dwFileAttributes=0x80) returned 0 [0187.637] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-right.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\arrow-right.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.637] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.637] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.638] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.638] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-up-pressed.gif", dwFileAttributes=0x80) returned 0 [0187.638] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-up-pressed.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\arrow-up-pressed.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.639] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.639] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.639] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.639] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-up.gif", dwFileAttributes=0x80) returned 0 [0187.640] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-up.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\arrow-up.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.640] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.640] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.659] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.659] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-down-pressed.gif", dwFileAttributes=0x80) returned 0 [0187.659] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-down-pressed.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-down-pressed.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.660] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.660] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.660] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.660] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-down.gif", dwFileAttributes=0x80) returned 0 [0187.688] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-down.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-down.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.688] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.688] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.688] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.689] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-left-pressed.gif", dwFileAttributes=0x80) returned 0 [0187.689] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-left-pressed.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-left-pressed.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.689] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.689] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.689] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0187.690] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-left.gif", dwFileAttributes=0x80) returned 0 [0187.690] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-left.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-left.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0187.690] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0187.690] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0189.467] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ca20 | out: phKey=0x665da7ca20*=0x665ab9a2d0) returned 1 [0189.467] SetFilePointer (in: hFile=0x570, lDistanceToMove=4000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x3d0900 [0189.467] ReadFile (in: hFile=0x570, lpBuffer=0x665da7ca88, nNumberOfBytesToRead=0x10, lpNumberOfBytesRead=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca88*, lpNumberOfBytesRead=0x665da7ca58*=0x10, lpOverlapped=0x0) returned 1 [0189.469] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0189.469] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0189.469] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0189.469] ReadFile (in: hFile=0x570, lpBuffer=0x665da80000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesRead=0x665da7ca30*=0xf4240, lpOverlapped=0x0) returned 1 [0189.493] CryptEncrypt (in: hKey=0x665ab9a2d0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240) returned 1 [0189.494] CryptEncrypt (in: hKey=0x665ab9a2d0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x665da80000*, pdwDataLen=0x665da7ca28*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x665da80000*, pdwDataLen=0x665da7ca28*=0xf4240) returned 1 [0189.496] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0189.496] WriteFile (in: hFile=0x570, lpBuffer=0x665da80000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesWritten=0x665da7ca30*=0xf4240, lpOverlapped=0x0) returned 1 [0189.499] SetFilePointer (in: hFile=0x570, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0189.499] ReadFile (in: hFile=0x570, lpBuffer=0x665da80000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesRead=0x665da7ca30*=0xf4240, lpOverlapped=0x0) returned 1 [0189.528] CryptEncrypt (in: hKey=0x665ab9a2d0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240) returned 1 [0189.528] CryptEncrypt (in: hKey=0x665ab9a2d0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x665da80000*, pdwDataLen=0x665da7ca28*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x665da80000*, pdwDataLen=0x665da7ca28*=0xf4240) returned 1 [0189.530] SetFilePointer (in: hFile=0x570, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0189.530] WriteFile (in: hFile=0x570, lpBuffer=0x665da80000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesWritten=0x665da7ca30*=0xf4240, lpOverlapped=0x0) returned 1 [0189.534] SetFilePointer (in: hFile=0x570, lDistanceToMove=2000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1e8480 [0189.534] ReadFile (in: hFile=0x570, lpBuffer=0x665da80000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesRead=0x665da7ca30*=0xf4240, lpOverlapped=0x0) returned 1 [0189.571] CryptEncrypt (in: hKey=0x665ab9a2d0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240) returned 1 [0189.572] CryptEncrypt (in: hKey=0x665ab9a2d0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x665da80000*, pdwDataLen=0x665da7ca28*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x665da80000*, pdwDataLen=0x665da7ca28*=0xf4240) returned 1 [0189.574] SetFilePointer (in: hFile=0x570, lDistanceToMove=2000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1e8480 [0189.574] WriteFile (in: hFile=0x570, lpBuffer=0x665da80000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesWritten=0x665da7ca30*=0xf4240, lpOverlapped=0x0) returned 1 [0189.578] SetFilePointer (in: hFile=0x570, lDistanceToMove=3000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x2dc6c0 [0189.578] ReadFile (in: hFile=0x570, lpBuffer=0x665da80000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesRead=0x665da7ca30*=0xf4240, lpOverlapped=0x0) returned 1 [0189.596] CryptEncrypt (in: hKey=0x665ab9a2d0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240) returned 1 [0189.597] CryptEncrypt (in: hKey=0x665ab9a2d0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x665da80000*, pdwDataLen=0x665da7ca28*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x665da80000*, pdwDataLen=0x665da7ca28*=0xf4240) returned 1 [0189.599] SetFilePointer (in: hFile=0x570, lDistanceToMove=3000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x2dc6c0 [0189.599] WriteFile (in: hFile=0x570, lpBuffer=0x665da80000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesWritten=0x665da7ca30*=0xf4240, lpOverlapped=0x0) returned 1 [0189.602] SetFilePointer (in: hFile=0x570, lDistanceToMove=4000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x3d0900 [0189.602] ReadFile (in: hFile=0x570, lpBuffer=0x665da80000, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesRead=0x665da7ca30*=0x0, lpOverlapped=0x0) returned 1 [0189.602] CryptEncrypt (in: hKey=0x665ab9a2d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4250) returned 1 [0189.603] CryptEncrypt (in: hKey=0x665ab9a2d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665da80000*, pdwDataLen=0x665da7ca28*=0x0, dwBufLen=0xf4250 | out: pbData=0x665da80000*, pdwDataLen=0x665da7ca28*=0x10) returned 1 [0189.603] SetFilePointer (in: hFile=0x570, lDistanceToMove=4000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x3d0900 [0189.603] WriteFile (in: hFile=0x570, lpBuffer=0x665da80000*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesWritten=0x665da7ca30*=0x10, lpOverlapped=0x0) returned 1 [0189.603] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2 | out: lpNewFilePointer=0x0) returned 1 [0189.603] WriteFile (in: hFile=0x570, lpBuffer=0x665da7ca70*, nNumberOfBytesToWrite=0xa, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca70*, lpNumberOfBytesWritten=0x665da7ca34*=0xa, lpOverlapped=0x0) returned 1 [0189.603] CryptExportKey (in: hKey=0x665ab9a2d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ca40 | out: pbData=0x0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0189.603] CryptExportKey (in: hKey=0x665ab9a2d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7cac0, pdwDataLen=0x665da7ca40 | out: pbData=0x665da7cac0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0189.604] WriteFile (in: hFile=0x570, lpBuffer=0x665da7cac0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7cac0*, lpNumberOfBytesWritten=0x665da7ca34*=0x10c, lpOverlapped=0x0) returned 1 [0189.604] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2 | out: lpNewFilePointer=0x0) returned 1 [0189.604] WriteFile (in: hFile=0x570, lpBuffer=0x665da7ca88*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca88*, lpNumberOfBytesWritten=0x665da7ca58*=0x10, lpOverlapped=0x0) returned 1 [0189.604] CloseHandle (hObject=0x570) returned 1 [0189.875] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0189.879] CryptDestroyKey (hKey=0x665ab9a2d0) returned 1 [0189.879] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0189.880] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0189.880] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0189.880] FindClose (in: hFindFile=0x665abb4c80 | out: hFindFile=0x665abb4c80) returned 1 [0189.880] SetLastError (dwErrCode=0x0) [0189.880] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_17.012.20098\\RyukReadMe.txt" (normalized: "c:\\programdata\\adobe\\arm\\reader_17.012.20098\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0189.881] GetLastError () returned 0xb7 [0189.881] CloseHandle (hObject=0x47c) returned 1 [0189.881] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0189.881] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0189.881] SetLastError (dwErrCode=0x0) [0189.881] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\ARM\\RyukReadMe.txt" (normalized: "c:\\programdata\\adobe\\arm\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0189.881] GetLastError () returned 0xb7 [0189.881] CloseHandle (hObject=0x47c) returned 1 [0189.881] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\S\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb4920 [0189.882] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0189.882] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0189.882] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0189.882] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0189.882] SetLastError (dwErrCode=0x0) [0189.882] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\ARM\\S\\RyukReadMe.txt" (normalized: "c:\\programdata\\adobe\\arm\\s\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0189.883] GetLastError () returned 0xb7 [0189.883] CloseHandle (hObject=0x47c) returned 1 [0189.883] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0189.883] SetLastError (dwErrCode=0x0) [0189.883] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\ARM\\RyukReadMe.txt" (normalized: "c:\\programdata\\adobe\\arm\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0189.883] GetLastError () returned 0xb7 [0189.883] CloseHandle (hObject=0x47c) returned 1 [0189.883] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\{291AA914-A987-4CE9-BD63-AC0A92D435E5}\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb42c0 [0189.883] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0189.883] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0189.883] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0189.883] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0189.883] SetLastError (dwErrCode=0x0) [0189.883] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\ARM\\{291AA914-A987-4CE9-BD63-AC0A92D435E5}\\RyukReadMe.txt" (normalized: "c:\\programdata\\adobe\\arm\\{291aa914-a987-4ce9-bd63-ac0a92d435e5}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0189.884] GetLastError () returned 0xb7 [0189.884] CloseHandle (hObject=0x47c) returned 1 [0189.884] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0189.884] FindClose (in: hFindFile=0x665abb45c0 | out: hFindFile=0x665abb45c0) returned 1 [0189.884] SetLastError (dwErrCode=0x0) [0189.884] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\ARM\\RyukReadMe.txt" (normalized: "c:\\programdata\\adobe\\arm\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0189.884] GetLastError () returned 0xb7 [0189.884] CloseHandle (hObject=0x470) returned 1 [0189.884] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0189.884] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0189.884] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0189.884] SetLastError (dwErrCode=0x0) [0189.884] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\RyukReadMe.txt" (normalized: "c:\\programdata\\adobe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x430 [0189.885] GetLastError () returned 0xb7 [0189.885] CloseHandle (hObject=0x430) returned 1 [0189.885] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0189.885] SetLastError (dwErrCode=0x0) [0189.885] CreateFileW (lpFileName="C:\\ProgramData\\RyukReadMe.txt" (normalized: "c:\\programdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x430 [0189.885] GetLastError () returned 0xb7 [0189.885] CloseHandle (hObject=0x430) returned 1 [0189.885] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Application Data\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0xffffffffffffffff [0189.885] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0189.885] SetLastError (dwErrCode=0x0) [0189.885] CreateFileW (lpFileName="C:\\ProgramData\\Application Data\\RyukReadMe.txt" (normalized: "c:\\programdata\\application data\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x430 [0189.886] GetLastError () returned 0xb7 [0189.886] CloseHandle (hObject=0x430) returned 1 [0189.886] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0189.886] SetLastError (dwErrCode=0x0) [0189.886] CreateFileW (lpFileName="C:\\ProgramData\\RyukReadMe.txt" (normalized: "c:\\programdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x430 [0189.886] GetLastError () returned 0xb7 [0189.886] CloseHandle (hObject=0x430) returned 1 [0189.886] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Comms\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665abb4ec0 [0189.886] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0189.886] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0189.886] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0189.886] FindClose (in: hFindFile=0x665abb4ec0 | out: hFindFile=0x665abb4ec0) returned 1 [0189.886] SetLastError (dwErrCode=0x0) [0189.886] CreateFileW (lpFileName="C:\\ProgramData\\Comms\\RyukReadMe.txt" (normalized: "c:\\programdata\\comms\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x430 [0189.887] GetLastError () returned 0xb7 [0189.887] CloseHandle (hObject=0x430) returned 1 [0189.887] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0189.887] SetLastError (dwErrCode=0x0) [0189.887] CreateFileW (lpFileName="C:\\ProgramData\\RyukReadMe.txt" (normalized: "c:\\programdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x430 [0189.887] GetLastError () returned 0xb7 [0189.887] CloseHandle (hObject=0x430) returned 1 [0189.887] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Desktop\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0xffffffffffffffff [0189.887] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0189.887] SetLastError (dwErrCode=0x0) [0189.887] CreateFileW (lpFileName="C:\\ProgramData\\Desktop\\RyukReadMe.txt" (normalized: "c:\\programdata\\desktop\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.888] GetLastError () returned 0x5 [0189.888] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0189.888] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0189.888] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0189.888] SetLastError (dwErrCode=0x0) [0189.888] CreateFileW (lpFileName="C:\\ProgramData\\RyukReadMe.txt" (normalized: "c:\\programdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x430 [0189.888] GetLastError () returned 0xb7 [0189.888] CloseHandle (hObject=0x430) returned 1 [0189.888] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Documents\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0xffffffffffffffff [0189.888] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0189.888] SetLastError (dwErrCode=0x0) [0189.888] CreateFileW (lpFileName="C:\\ProgramData\\Documents\\RyukReadMe.txt" (normalized: "c:\\programdata\\documents\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x430 [0189.893] GetLastError () returned 0xb7 [0189.893] CloseHandle (hObject=0x430) returned 1 [0189.893] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0189.893] SetLastError (dwErrCode=0x0) [0189.894] CreateFileW (lpFileName="C:\\ProgramData\\RyukReadMe.txt" (normalized: "c:\\programdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x430 [0189.894] GetLastError () returned 0xb7 [0189.894] CloseHandle (hObject=0x430) returned 1 [0189.894] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665abb5460 [0189.894] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0189.894] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0189.894] SetLastError (dwErrCode=0x0) [0189.894] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.894] GetLastError () returned 0x5 [0189.894] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0189.894] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0189.894] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665abb5280 [0189.897] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0189.897] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0189.897] SetLastError (dwErrCode=0x0) [0189.898] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.898] GetLastError () returned 0x5 [0189.898] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0189.898] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0189.898] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb5520 [0189.900] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0189.900] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0189.900] SetLastError (dwErrCode=0x0) [0189.900] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\8c296b8e-6699-457c-9415-3d0647e1d775\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.900] GetLastError () returned 0x5 [0189.900] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0189.900] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0189.900] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\en-us.16\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb5340 [0189.902] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0189.902] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0189.902] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0189.902] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\en-us.16\\MasterDescriptor.en-us.xml", dwFileAttributes=0x80) returned 0 [0189.902] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\en-us.16\\MasterDescriptor.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\8c296b8e-6699-457c-9415-3d0647e1d775\\en-us.16\\masterdescriptor.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.902] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0189.902] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0189.903] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0189.903] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0189.903] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\en-us.16\\s641033.hash", dwFileAttributes=0x80) returned 0 [0189.903] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\en-us.16\\s641033.hash" (normalized: "c:\\programdata\\microsoft\\clicktorun\\8c296b8e-6699-457c-9415-3d0647e1d775\\en-us.16\\s641033.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.903] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0189.903] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0189.904] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0189.904] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0189.904] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\en-us.16\\stream.x64.en-us.man.dat", dwFileAttributes=0x80) returned 0 [0189.904] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\en-us.16\\stream.x64.en-us.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\8c296b8e-6699-457c-9415-3d0647e1d775\\en-us.16\\stream.x64.en-us.man.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.904] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0189.905] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0189.905] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0189.905] FindClose (in: hFindFile=0x665abb5340 | out: hFindFile=0x665abb5340) returned 1 [0189.905] SetLastError (dwErrCode=0x0) [0189.906] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\en-us.16\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\8c296b8e-6699-457c-9415-3d0647e1d775\\en-us.16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.908] GetLastError () returned 0x5 [0189.908] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0189.908] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0189.908] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0189.908] SetLastError (dwErrCode=0x0) [0189.908] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\8c296b8e-6699-457c-9415-3d0647e1d775\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.909] GetLastError () returned 0x5 [0189.909] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0189.909] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0189.909] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\x-none.16\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4920 [0189.910] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0189.910] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0189.910] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0189.910] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\x-none.16\\MasterDescriptor.x-none.xml", dwFileAttributes=0x80) returned 0 [0189.911] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\x-none.16\\MasterDescriptor.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\8c296b8e-6699-457c-9415-3d0647e1d775\\x-none.16\\masterdescriptor.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.911] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0189.911] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0189.911] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0189.911] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0189.912] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\x-none.16\\s640.hash", dwFileAttributes=0x80) returned 0 [0189.912] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\x-none.16\\s640.hash" (normalized: "c:\\programdata\\microsoft\\clicktorun\\8c296b8e-6699-457c-9415-3d0647e1d775\\x-none.16\\s640.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.912] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0189.912] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0189.912] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0189.912] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0189.912] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\x-none.16\\stream.x64.x-none.man.dat", dwFileAttributes=0x80) returned 0 [0189.913] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\x-none.16\\stream.x64.x-none.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\8c296b8e-6699-457c-9415-3d0647e1d775\\x-none.16\\stream.x64.x-none.man.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.913] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0189.913] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0189.913] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0189.913] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0189.914] SetLastError (dwErrCode=0x0) [0189.914] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\x-none.16\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\8c296b8e-6699-457c-9415-3d0647e1d775\\x-none.16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.917] GetLastError () returned 0x5 [0189.917] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0189.917] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0189.917] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0189.917] FindClose (in: hFindFile=0x665abb5520 | out: hFindFile=0x665abb5520) returned 1 [0189.917] SetLastError (dwErrCode=0x0) [0189.917] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\8c296b8e-6699-457c-9415-3d0647e1d775\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.918] GetLastError () returned 0x5 [0189.918] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0189.918] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0189.918] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0189.918] SetLastError (dwErrCode=0x0) [0189.918] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.918] GetLastError () returned 0x5 [0189.918] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0189.918] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0189.918] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb4ec0 [0189.918] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0189.918] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0189.918] SetLastError (dwErrCode=0x0) [0189.918] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\9d76938c-943d-439f-a135-26d02821ee05\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.921] GetLastError () returned 0x5 [0189.921] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0189.921] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0189.921] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\en-us.16\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb45c0 [0189.923] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0189.923] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0189.923] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0189.924] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\en-us.16\\MasterDescriptor.en-us.xml", dwFileAttributes=0x80) returned 0 [0189.925] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\en-us.16\\MasterDescriptor.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\9d76938c-943d-439f-a135-26d02821ee05\\en-us.16\\masterdescriptor.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.925] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0189.925] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0189.926] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0189.926] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0189.926] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\en-us.16\\s641033.hash", dwFileAttributes=0x80) returned 0 [0189.929] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\en-us.16\\s641033.hash" (normalized: "c:\\programdata\\microsoft\\clicktorun\\9d76938c-943d-439f-a135-26d02821ee05\\en-us.16\\s641033.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.929] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0189.929] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0189.930] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0189.930] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0189.931] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\en-us.16\\stream.x64.en-us.man.dat", dwFileAttributes=0x80) returned 0 [0189.931] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\en-us.16\\stream.x64.en-us.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\9d76938c-943d-439f-a135-26d02821ee05\\en-us.16\\stream.x64.en-us.man.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.932] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0189.932] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0189.932] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0189.932] FindClose (in: hFindFile=0x665abb45c0 | out: hFindFile=0x665abb45c0) returned 1 [0189.934] SetLastError (dwErrCode=0x0) [0189.934] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\en-us.16\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\9d76938c-943d-439f-a135-26d02821ee05\\en-us.16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.939] GetLastError () returned 0x5 [0189.939] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0189.939] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0189.939] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0189.939] SetLastError (dwErrCode=0x0) [0189.939] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\9d76938c-943d-439f-a135-26d02821ee05\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.939] GetLastError () returned 0x5 [0189.939] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0189.939] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0189.939] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\x-none.16\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb5760 [0189.941] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0189.941] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0189.941] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0189.942] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\x-none.16\\MasterDescriptor.x-none.xml", dwFileAttributes=0x80) returned 0 [0189.943] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\x-none.16\\MasterDescriptor.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\9d76938c-943d-439f-a135-26d02821ee05\\x-none.16\\masterdescriptor.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.944] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0189.944] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0189.944] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0189.944] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0189.945] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\x-none.16\\s640.hash", dwFileAttributes=0x80) returned 0 [0189.945] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\x-none.16\\s640.hash" (normalized: "c:\\programdata\\microsoft\\clicktorun\\9d76938c-943d-439f-a135-26d02821ee05\\x-none.16\\s640.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.945] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0189.946] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0189.946] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0189.946] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0189.947] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\x-none.16\\stream.x64.x-none.man.dat", dwFileAttributes=0x80) returned 0 [0189.948] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\x-none.16\\stream.x64.x-none.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\9d76938c-943d-439f-a135-26d02821ee05\\x-none.16\\stream.x64.x-none.man.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.948] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0189.948] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0189.950] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0189.950] FindClose (in: hFindFile=0x665abb5760 | out: hFindFile=0x665abb5760) returned 1 [0189.950] SetLastError (dwErrCode=0x0) [0189.950] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\x-none.16\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\9d76938c-943d-439f-a135-26d02821ee05\\x-none.16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.955] GetLastError () returned 0x5 [0189.955] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0189.955] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0189.955] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0189.956] FindClose (in: hFindFile=0x665abb4ec0 | out: hFindFile=0x665abb4ec0) returned 1 [0189.959] SetLastError (dwErrCode=0x0) [0189.959] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\9d76938c-943d-439f-a135-26d02821ee05\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.959] GetLastError () returned 0x5 [0189.959] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0189.959] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0189.959] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0189.959] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0189.960] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.0.xml", dwFileAttributes=0x80) returned 0 [0189.960] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.0.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\deploymentconfig.0.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.960] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0189.960] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0189.961] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0189.961] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0189.961] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.1.xml", dwFileAttributes=0x80) returned 0 [0189.961] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.1.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\deploymentconfig.1.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.962] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0189.962] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0189.962] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0189.962] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0189.963] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.2.xml", dwFileAttributes=0x80) returned 0 [0189.963] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.2.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\deploymentconfig.2.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.963] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0189.963] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0189.964] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0189.964] SetLastError (dwErrCode=0x0) [0189.964] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.964] GetLastError () returned 0x5 [0189.964] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0189.964] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0189.964] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb4560 [0189.964] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0189.964] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0189.964] SetLastError (dwErrCode=0x0) [0189.964] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.965] GetLastError () returned 0x5 [0189.965] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0189.965] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0189.965] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb5160 [0189.965] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0189.965] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0189.965] SetLastError (dwErrCode=0x0) [0189.965] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\catalog\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.965] GetLastError () returned 0x5 [0189.965] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0189.965] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0189.965] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb42c0 [0189.965] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0189.965] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0189.965] SetLastError (dwErrCode=0x0) [0189.966] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.966] GetLastError () returned 0x5 [0189.966] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0189.966] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0189.966] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb5340 [0189.966] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0189.966] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0189.966] SetLastError (dwErrCode=0x0) [0189.966] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.966] GetLastError () returned 0x5 [0189.966] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0189.966] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0189.967] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb43e0 [0189.967] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0189.967] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0189.967] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0189.968] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\DeploymentConfiguration.xml", dwFileAttributes=0x80) returned 0 [0189.968] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\DeploymentConfiguration.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\deploymentconfiguration.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.968] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0189.968] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0189.969] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0189.969] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0189.969] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\Manifest.xml", dwFileAttributes=0x80) returned 0 [0189.969] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\Manifest.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\manifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.969] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0189.970] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0189.970] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0189.970] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0189.970] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\UserDeploymentConfiguration.xml", dwFileAttributes=0x80) returned 0 [0189.970] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\UserDeploymentConfiguration.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\userdeploymentconfiguration.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.971] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0189.971] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0189.971] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0189.971] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0189.971] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\UserManifest.xml", dwFileAttributes=0x80) returned 0 [0189.972] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\UserManifest.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\usermanifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.972] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0189.972] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0189.972] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0189.972] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0189.972] SetLastError (dwErrCode=0x0) [0189.972] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.973] GetLastError () returned 0x5 [0189.973] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0189.973] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0189.973] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0189.973] FindClose (in: hFindFile=0x665abb5340 | out: hFindFile=0x665abb5340) returned 1 [0189.973] SetLastError (dwErrCode=0x0) [0189.973] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.973] GetLastError () returned 0x5 [0189.973] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0189.973] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0189.973] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0189.973] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0189.973] SetLastError (dwErrCode=0x0) [0189.973] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.973] GetLastError () returned 0x5 [0189.973] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0189.973] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0189.973] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0189.974] FindClose (in: hFindFile=0x665abb5160 | out: hFindFile=0x665abb5160) returned 1 [0189.974] SetLastError (dwErrCode=0x0) [0189.974] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\catalog\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.974] GetLastError () returned 0x5 [0189.974] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0189.974] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0189.974] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0189.974] SetLastError (dwErrCode=0x0) [0189.974] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.974] GetLastError () returned 0x5 [0189.974] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0189.974] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0189.974] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Integration\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb42c0 [0189.974] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0189.974] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0189.974] SetLastError (dwErrCode=0x0) [0189.974] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Integration\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\integration\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.975] GetLastError () returned 0x5 [0189.975] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0189.975] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0189.975] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Integration\\ShortcutBackups\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb43e0 [0189.975] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0189.975] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0189.975] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0189.975] SetLastError (dwErrCode=0x0) [0189.975] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Integration\\ShortcutBackups\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\integration\\shortcutbackups\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.975] GetLastError () returned 0x5 [0189.975] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0189.975] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0189.975] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0189.975] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0189.975] SetLastError (dwErrCode=0x0) [0189.975] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Integration\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\integration\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.976] GetLastError () returned 0x5 [0189.976] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0189.976] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0189.976] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0189.976] FindClose (in: hFindFile=0x665abb4560 | out: hFindFile=0x665abb4560) returned 1 [0189.976] SetLastError (dwErrCode=0x0) [0189.976] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.976] GetLastError () returned 0x5 [0189.976] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0189.976] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0189.976] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0189.976] SetLastError (dwErrCode=0x0) [0189.976] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.976] GetLastError () returned 0x5 [0189.976] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0189.976] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0189.976] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb5340 [0189.978] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0189.978] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0189.978] SetLastError (dwErrCode=0x0) [0189.978] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.979] GetLastError () returned 0x5 [0189.979] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0189.979] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0189.979] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4f80 [0189.979] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0189.979] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0189.979] SetLastError (dwErrCode=0x0) [0189.979] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\eda58a0b-ad79-496a-8530-618d08767e60\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.979] GetLastError () returned 0x5 [0189.980] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0189.980] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0189.980] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\en-us.16\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4c20 [0189.982] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0189.982] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0189.982] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0189.983] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\en-us.16\\MasterDescriptor.en-us.xml", dwFileAttributes=0x80) returned 0 [0189.984] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\en-us.16\\MasterDescriptor.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\eda58a0b-ad79-496a-8530-618d08767e60\\en-us.16\\masterdescriptor.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.984] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0189.984] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0189.984] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0189.984] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0189.985] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\en-us.16\\s641033.hash", dwFileAttributes=0x80) returned 0 [0189.985] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\en-us.16\\s641033.hash" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\eda58a0b-ad79-496a-8530-618d08767e60\\en-us.16\\s641033.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.985] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0189.985] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0189.986] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0189.986] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0189.986] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\en-us.16\\stream.Platform.Culture.man.xml", dwFileAttributes=0x80) returned 0 [0189.986] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\en-us.16\\stream.Platform.Culture.man.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\eda58a0b-ad79-496a-8530-618d08767e60\\en-us.16\\stream.platform.culture.man.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.987] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0189.987] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0189.987] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0189.987] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0189.987] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\en-us.16\\stream.x64.en-us.hash", dwFileAttributes=0x80) returned 0 [0189.987] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\en-us.16\\stream.x64.en-us.hash" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\eda58a0b-ad79-496a-8530-618d08767e60\\en-us.16\\stream.x64.en-us.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.988] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0189.988] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0189.988] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0189.988] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0189.988] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\en-us.16\\stream.x64.en-us.man.dat", dwFileAttributes=0x80) returned 0 [0189.989] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\en-us.16\\stream.x64.en-us.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\eda58a0b-ad79-496a-8530-618d08767e60\\en-us.16\\stream.x64.en-us.man.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.989] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0189.989] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0189.989] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0189.989] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0189.990] SetLastError (dwErrCode=0x0) [0189.990] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\en-us.16\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\eda58a0b-ad79-496a-8530-618d08767e60\\en-us.16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.993] GetLastError () returned 0x5 [0189.993] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0189.993] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0189.993] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0189.993] SetLastError (dwErrCode=0x0) [0189.993] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\eda58a0b-ad79-496a-8530-618d08767e60\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.993] GetLastError () returned 0x5 [0189.993] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0189.993] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0189.993] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\x-none.16\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb54c0 [0189.994] FindNextFileW (in: hFindFile=0x665abb54c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0189.994] FindNextFileW (in: hFindFile=0x665abb54c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0189.994] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0189.995] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\x-none.16\\MasterDescriptor.x-none.xml", dwFileAttributes=0x80) returned 0 [0189.995] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\x-none.16\\MasterDescriptor.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\eda58a0b-ad79-496a-8530-618d08767e60\\x-none.16\\masterdescriptor.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.995] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0189.995] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0189.995] FindNextFileW (in: hFindFile=0x665abb54c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0189.995] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0189.996] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\x-none.16\\s640.hash", dwFileAttributes=0x80) returned 0 [0189.996] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\x-none.16\\s640.hash" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\eda58a0b-ad79-496a-8530-618d08767e60\\x-none.16\\s640.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.996] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0189.996] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0189.996] FindNextFileW (in: hFindFile=0x665abb54c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0189.996] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0189.996] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\x-none.16\\stream.Platform.x-none.man.xml", dwFileAttributes=0x80) returned 0 [0189.997] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\x-none.16\\stream.Platform.x-none.man.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\eda58a0b-ad79-496a-8530-618d08767e60\\x-none.16\\stream.platform.x-none.man.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.997] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0189.997] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0189.997] FindNextFileW (in: hFindFile=0x665abb54c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0189.997] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0189.997] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\x-none.16\\stream.x64.x-none.hash", dwFileAttributes=0x80) returned 0 [0189.998] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\x-none.16\\stream.x64.x-none.hash" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\eda58a0b-ad79-496a-8530-618d08767e60\\x-none.16\\stream.x64.x-none.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.998] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0189.998] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0189.998] FindNextFileW (in: hFindFile=0x665abb54c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0189.998] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0189.998] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\x-none.16\\stream.x64.x-none.man.dat", dwFileAttributes=0x80) returned 0 [0189.998] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\x-none.16\\stream.x64.x-none.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\eda58a0b-ad79-496a-8530-618d08767e60\\x-none.16\\stream.x64.x-none.man.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.999] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0189.999] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0189.999] FindNextFileW (in: hFindFile=0x665abb54c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0189.999] FindClose (in: hFindFile=0x665abb54c0 | out: hFindFile=0x665abb54c0) returned 1 [0189.999] SetLastError (dwErrCode=0x0) [0189.999] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\x-none.16\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\eda58a0b-ad79-496a-8530-618d08767e60\\x-none.16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.002] GetLastError () returned 0x5 [0190.002] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0190.002] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.002] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0190.002] FindClose (in: hFindFile=0x665abb4f80 | out: hFindFile=0x665abb4f80) returned 1 [0190.002] SetLastError (dwErrCode=0x0) [0190.003] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\eda58a0b-ad79-496a-8530-618d08767e60\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.003] GetLastError () returned 0x5 [0190.003] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.003] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.003] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.003] SetLastError (dwErrCode=0x0) [0190.003] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.003] GetLastError () returned 0x5 [0190.003] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.003] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.003] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb42c0 [0190.004] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.004] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.004] SetLastError (dwErrCode=0x0) [0190.004] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.004] GetLastError () returned 0x5 [0190.004] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0190.004] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.004] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\en-us.16\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb43e0 [0190.005] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.005] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.005] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.006] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\en-us.16\\MasterDescriptor.en-us.xml", dwFileAttributes=0x80) returned 0 [0190.006] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\en-us.16\\MasterDescriptor.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\en-us.16\\masterdescriptor.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.006] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.006] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.006] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.006] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.007] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\en-us.16\\s641033.hash", dwFileAttributes=0x80) returned 0 [0190.007] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\en-us.16\\s641033.hash" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\en-us.16\\s641033.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.008] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.008] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.008] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.008] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.008] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\en-us.16\\Stream.Platform.Culture.man.xml", dwFileAttributes=0x80) returned 0 [0190.008] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\en-us.16\\Stream.Platform.Culture.man.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\en-us.16\\stream.platform.culture.man.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.009] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.009] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.009] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.009] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.009] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\en-us.16\\stream.x64.en-us.hash", dwFileAttributes=0x80) returned 0 [0190.010] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\en-us.16\\stream.x64.en-us.hash" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\en-us.16\\stream.x64.en-us.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.010] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.010] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.010] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.010] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.011] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\en-us.16\\stream.x64.en-us.man.dat", dwFileAttributes=0x80) returned 0 [0190.012] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\en-us.16\\stream.x64.en-us.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\en-us.16\\stream.x64.en-us.man.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.012] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.012] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.012] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0190.012] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0190.013] SetLastError (dwErrCode=0x0) [0190.013] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\en-us.16\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\en-us.16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.016] GetLastError () returned 0x5 [0190.016] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0190.016] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.016] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.016] SetLastError (dwErrCode=0x0) [0190.016] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.016] GetLastError () returned 0x5 [0190.016] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0190.016] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.016] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\x-none.16\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4560 [0190.018] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.018] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.018] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.018] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\x-none.16\\MasterDescriptor.x-none.xml", dwFileAttributes=0x80) returned 0 [0190.019] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\x-none.16\\MasterDescriptor.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\x-none.16\\masterdescriptor.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.019] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.019] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.019] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.019] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.020] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\x-none.16\\s640.hash", dwFileAttributes=0x80) returned 0 [0190.020] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\x-none.16\\s640.hash" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\x-none.16\\s640.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.020] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.020] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.020] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.020] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.020] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\x-none.16\\Stream.Platform.x-none.man.xml", dwFileAttributes=0x80) returned 0 [0190.021] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\x-none.16\\Stream.Platform.x-none.man.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\x-none.16\\stream.platform.x-none.man.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.021] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.021] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.022] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.022] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.022] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\x-none.16\\stream.x64.x-none.hash", dwFileAttributes=0x80) returned 0 [0190.022] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\x-none.16\\stream.x64.x-none.hash" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\x-none.16\\stream.x64.x-none.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.022] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.022] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.022] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.022] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.023] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\x-none.16\\stream.x64.x-none.man.dat", dwFileAttributes=0x80) returned 0 [0190.023] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\x-none.16\\stream.x64.x-none.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\x-none.16\\stream.x64.x-none.man.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.023] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.023] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.023] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0190.023] FindClose (in: hFindFile=0x665abb4560 | out: hFindFile=0x665abb4560) returned 1 [0190.024] SetLastError (dwErrCode=0x0) [0190.024] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\x-none.16\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\x-none.16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.027] GetLastError () returned 0x5 [0190.027] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0190.027] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.027] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0190.027] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0190.027] SetLastError (dwErrCode=0x0) [0190.027] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.028] GetLastError () returned 0x5 [0190.028] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.028] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.028] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0190.028] FindClose (in: hFindFile=0x665abb5340 | out: hFindFile=0x665abb5340) returned 1 [0190.028] SetLastError (dwErrCode=0x0) [0190.028] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.028] GetLastError () returned 0x5 [0190.028] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.028] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.028] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.028] SetLastError (dwErrCode=0x0) [0190.028] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.028] GetLastError () returned 0x5 [0190.028] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.028] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.028] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\UserData\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb4560 [0190.029] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.029] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0190.029] FindClose (in: hFindFile=0x665abb4560 | out: hFindFile=0x665abb4560) returned 1 [0190.029] SetLastError (dwErrCode=0x0) [0190.029] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\UserData\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\userdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.029] GetLastError () returned 0x5 [0190.029] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.029] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.029] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.029] SetLastError (dwErrCode=0x0) [0190.029] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.029] GetLastError () returned 0x5 [0190.029] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.029] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.029] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb49e0 [0190.031] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.033] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.033] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.033] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\AirSpace.Etw.man", dwFileAttributes=0x80) returned 0 [0190.034] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\AirSpace.Etw.man" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\airspace.etw.man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.034] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.034] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.034] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.034] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.034] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0190.035] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.access.access.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.035] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.035] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.035] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.035] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.035] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0190.036] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.accessmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.036] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.036] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.036] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.036] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.037] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmuiset.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0190.037] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmuiset.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.accessmuiset.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.037] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.038] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.038] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.038] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.038] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0190.038] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.dcf.dcf.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.038] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.038] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.039] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.039] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.039] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.dcfmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0190.040] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.dcfmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.dcfmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.040] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.040] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.040] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.040] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.040] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0190.041] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.excel.excel.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.041] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.041] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.041] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.041] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.041] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.excelmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0190.042] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.excelmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.excelmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.042] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.042] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.042] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.042] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.042] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0190.043] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.groove.groove.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.043] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.043] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.043] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.043] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.044] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.groovemui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0190.044] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.groovemui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.groovemui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.044] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.044] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.044] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.044] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.045] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0190.045] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.lync.lync.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.045] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.045] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.045] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.046] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.046] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.lyncmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0190.046] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.lyncmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.lyncmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.046] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.046] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.047] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.047] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.047] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32mui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0190.047] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32mui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.office32mui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.047] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.047] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.048] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.048] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.048] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32ww.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0190.048] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32ww.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.office32ww.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.049] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.049] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.049] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.049] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.049] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0190.049] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.officemui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.050] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.050] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.050] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.050] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.050] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemuiset.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0190.051] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemuiset.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.officemuiset.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.051] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.051] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.051] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.051] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.052] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0190.052] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.onenote.onenote.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.052] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.052] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.052] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.053] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.053] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.onenotemui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0190.053] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.onenotemui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.onenotemui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.053] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.054] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.054] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.054] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.054] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0190.054] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.osm.osm.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.055] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.055] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.055] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.055] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.055] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0190.056] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.osmmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.056] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.056] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.056] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.056] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.057] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0190.057] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.osmux.osmux.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.058] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.058] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.058] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.058] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.058] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmuxmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0190.059] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmuxmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.osmuxmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.059] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.059] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.059] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.060] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.060] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0190.061] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.outlook.outlook.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.061] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.061] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.061] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.061] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.062] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.outlookmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0190.062] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.outlookmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.outlookmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.062] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.062] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.062] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.062] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.063] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0190.063] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.powerpivot.powerpivot.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.063] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.063] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.064] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.064] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.064] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0190.064] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.powerpoint.powerpoint.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.065] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.065] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.065] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.065] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.065] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.powerpointmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0190.066] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.powerpointmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.powerpointmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.066] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.066] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.066] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.066] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.066] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0190.067] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.project.project.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.067] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.067] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.067] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.067] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.067] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.projectmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0190.068] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.projectmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.projectmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.068] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.068] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.068] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.068] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.068] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0190.069] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.proof.culture.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.069] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.069] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.069] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.069] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.069] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.es-es.xml", dwFileAttributes=0x80) returned 0 [0190.069] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.es-es.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.proof.culture.msi.16.es-es.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.070] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.070] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.070] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.070] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.070] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml", dwFileAttributes=0x80) returned 0 [0190.070] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.proof.culture.msi.16.fr-fr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.071] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.071] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.071] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.071] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.071] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.proofing.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0190.071] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.proofing.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.proofing.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.072] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.072] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.072] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.072] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.073] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0190.073] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.publisher.publisher.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.073] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.073] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.074] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.074] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.074] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.publishermui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0190.074] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.publishermui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.publishermui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.074] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.074] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.075] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.075] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.075] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0190.075] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.shared.office.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.075] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.076] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.076] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.076] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.076] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0190.076] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.visio.visio.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.077] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.077] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.077] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.077] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.077] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.visiomui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0190.078] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.visiomui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.visiomui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.078] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.078] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.078] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.078] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.078] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0190.079] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.word.word.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.079] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.079] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.079] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.080] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.080] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.wordmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0190.080] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.wordmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.wordmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.080] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.080] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.081] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.081] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.081] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.081] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeBackgroundTaskHandlerLogon.xml", dwFileAttributes=0x80) returned 0 [0190.081] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeBackgroundTaskHandlerLogon.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\microsoft_office_officebackgroundtaskhandlerlogon.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.082] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.082] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.082] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.082] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.083] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeBackgroundTaskHandlerRegistration.xml", dwFileAttributes=0x80) returned 0 [0190.084] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeBackgroundTaskHandlerRegistration.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\microsoft_office_officebackgroundtaskhandlerregistration.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.084] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.084] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.084] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.084] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.085] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeOsfInstaller.xml", dwFileAttributes=0x80) returned 0 [0190.085] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeOsfInstaller.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\microsoft_office_officeosfinstaller.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.085] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.085] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.085] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.086] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.086] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentFallBack2016.xml", dwFileAttributes=0x80) returned 0 [0190.087] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentFallBack2016.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\microsoft_office_officetelemetryagentfallback2016.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.087] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.087] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.087] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.087] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.089] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentLogOn2016.xml", dwFileAttributes=0x80) returned 0 [0190.089] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentLogOn2016.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\microsoft_office_officetelemetryagentlogon2016.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.090] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.090] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.090] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.090] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.091] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\msoutilstat.etw.man", dwFileAttributes=0x80) returned 0 [0190.091] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\msoutilstat.etw.man" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\msoutilstat.etw.man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.092] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.092] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.092] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.092] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.092] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\wordEtw.man", dwFileAttributes=0x80) returned 0 [0190.093] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\wordEtw.man" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\wordetw.man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.093] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.093] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.094] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0190.094] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0190.095] SetLastError (dwErrCode=0x0) [0190.095] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.100] GetLastError () returned 0x5 [0190.100] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.100] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.100] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0190.100] FindClose (in: hFindFile=0x665abb5280 | out: hFindFile=0x665abb5280) returned 1 [0190.100] SetLastError (dwErrCode=0x0) [0190.100] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.101] GetLastError () returned 0x5 [0190.101] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.101] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.101] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0190.101] SetLastError (dwErrCode=0x0) [0190.101] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.101] GetLastError () returned 0x5 [0190.101] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.101] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.101] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665abb42c0 [0190.101] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.101] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.101] SetLastError (dwErrCode=0x0) [0190.101] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\crypto\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.102] GetLastError () returned 0x5 [0190.102] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.102] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.102] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb4ec0 [0190.102] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.102] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.102] SetLastError (dwErrCode=0x0) [0190.102] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\crypto\\dss\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.102] GetLastError () returned 0x5 [0190.102] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.103] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.103] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb45c0 [0190.103] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.103] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.103] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0190.103] FindClose (in: hFindFile=0x665abb45c0 | out: hFindFile=0x665abb45c0) returned 1 [0190.103] SetLastError (dwErrCode=0x0) [0190.103] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\crypto\\dss\\machinekeys\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0190.103] GetLastError () returned 0xb7 [0190.103] CloseHandle (hObject=0x570) returned 1 [0190.104] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0190.104] FindClose (in: hFindFile=0x665abb4ec0 | out: hFindFile=0x665abb4ec0) returned 1 [0190.104] SetLastError (dwErrCode=0x0) [0190.104] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\crypto\\dss\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.104] GetLastError () returned 0x5 [0190.104] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.104] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.104] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.104] SetLastError (dwErrCode=0x0) [0190.104] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\crypto\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.105] GetLastError () returned 0x5 [0190.105] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.105] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.105] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\Keys\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb5160 [0190.105] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.105] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0190.105] FindClose (in: hFindFile=0x665abb5160 | out: hFindFile=0x665abb5160) returned 1 [0190.105] SetLastError (dwErrCode=0x0) [0190.105] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\Keys\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\crypto\\keys\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.105] GetLastError () returned 0x5 [0190.105] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.105] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.105] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.106] SetLastError (dwErrCode=0x0) [0190.106] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\crypto\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.106] GetLastError () returned 0x5 [0190.106] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.106] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.106] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\PCPKSP\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb5760 [0190.106] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.106] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.106] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0190.106] FindClose (in: hFindFile=0x665abb5760 | out: hFindFile=0x665abb5760) returned 1 [0190.106] SetLastError (dwErrCode=0x0) [0190.106] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\PCPKSP\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\crypto\\pcpksp\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.107] GetLastError () returned 0x5 [0190.107] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.107] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.107] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.107] SetLastError (dwErrCode=0x0) [0190.107] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\crypto\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.107] GetLastError () returned 0x5 [0190.107] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.107] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.107] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb43e0 [0190.108] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.108] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.108] SetLastError (dwErrCode=0x0) [0190.108] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.108] GetLastError () returned 0x5 [0190.108] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.108] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.108] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4da0 [0190.108] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.108] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.109] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.109] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\08e575673cce10c72090304839888e02_427a1946-e0ff-4097-8c9e-ca2c1e22780b", dwFileAttributes=0x80) returned 1 [0190.110] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\08e575673cce10c72090304839888e02_427a1946-e0ff-4097-8c9e-ca2c1e22780b" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\machinekeys\\08e575673cce10c72090304839888e02_427a1946-e0ff-4097-8c9e-ca2c1e22780b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x50c [0190.111] GetFileSizeEx (in: hFile=0x50c, lpFileSize=0x665da7c288 | out: lpFileSize=0x665da7c288*=338) returned 1 [0190.111] GetFileSizeEx (in: hFile=0x50c, lpFileSize=0x665da7c298 | out: lpFileSize=0x665da7c298*=338) returned 1 [0190.111] SetFilePointerEx (in: hFile=0x50c, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.111] ReadFile (in: hFile=0x50c, lpBuffer=0x665da7c2e8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7c2a8, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2e8*, lpNumberOfBytesRead=0x665da7c2a8*=0x19, lpOverlapped=0x0) returned 1 [0190.112] SetFilePointer (in: hFile=0x50c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0190.112] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7c270 | out: phKey=0x665da7c270*=0x665ab9ae30) returned 1 [0190.112] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0190.112] SetFilePointer (in: hFile=0x50c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0190.112] ReadFile (in: hFile=0x50c, lpBuffer=0x665da80000, nNumberOfBytesToRead=0x152, lpNumberOfBytesRead=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesRead=0x665da7c280*=0x152, lpOverlapped=0x0) returned 1 [0190.112] CryptEncrypt (in: hKey=0x665ab9ae30, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4250) returned 1 [0190.112] CryptEncrypt (in: hKey=0x665ab9ae30, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665da80000*, pdwDataLen=0x665da7c278*=0x152, dwBufLen=0xf4250 | out: pbData=0x665da80000*, pdwDataLen=0x665da7c278*=0x160) returned 1 [0190.112] SetFilePointer (in: hFile=0x50c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0190.112] WriteFile (in: hFile=0x50c, lpBuffer=0x665da80000*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesWritten=0x665da7c280*=0x160, lpOverlapped=0x0) returned 1 [0190.113] WriteFile (in: hFile=0x50c, lpBuffer=0x665da7c2c0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2c0*, lpNumberOfBytesWritten=0x665da7c284*=0x6, lpOverlapped=0x0) returned 1 [0190.113] CryptExportKey (in: hKey=0x665ab9ae30, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7c290 | out: pbData=0x0*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0190.113] CryptExportKey (in: hKey=0x665ab9ae30, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7c310, pdwDataLen=0x665da7c290 | out: pbData=0x665da7c310*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0190.113] WriteFile (in: hFile=0x50c, lpBuffer=0x665da7c310*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c310*, lpNumberOfBytesWritten=0x665da7c284*=0x10c, lpOverlapped=0x0) returned 1 [0190.114] CloseHandle (hObject=0x50c) returned 1 [0190.130] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.134] CryptDestroyKey (hKey=0x665ab9ae30) returned 1 [0190.134] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.135] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.135] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0190.135] FindClose (in: hFindFile=0x665abb4da0 | out: hFindFile=0x665abb4da0) returned 1 [0190.135] SetLastError (dwErrCode=0x0) [0190.135] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\machinekeys\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0190.136] GetLastError () returned 0xb7 [0190.136] CloseHandle (hObject=0x570) returned 1 [0190.136] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.136] SetLastError (dwErrCode=0x0) [0190.136] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.136] GetLastError () returned 0x5 [0190.136] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.136] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.136] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0xffffffffffffffff [0190.137] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0190.137] SetLastError (dwErrCode=0x0) [0190.137] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\s-1-5-18\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.137] GetLastError () returned 0x5 [0190.137] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.137] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.137] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0190.138] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0190.138] SetLastError (dwErrCode=0x0) [0190.138] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.138] GetLastError () returned 0x5 [0190.138] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.138] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.138] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.138] SetLastError (dwErrCode=0x0) [0190.138] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\crypto\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.138] GetLastError () returned 0x5 [0190.138] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.138] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.138] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\SystemKeys\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0xffffffffffffffff [0190.139] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0190.139] SetLastError (dwErrCode=0x0) [0190.139] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\SystemKeys\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\crypto\\systemkeys\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.139] GetLastError () returned 0x5 [0190.139] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.139] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.139] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0190.139] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0190.139] SetLastError (dwErrCode=0x0) [0190.139] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\crypto\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.139] GetLastError () returned 0x5 [0190.139] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.139] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.139] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0190.140] SetLastError (dwErrCode=0x0) [0190.140] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.140] GetLastError () returned 0x5 [0190.140] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.140] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.140] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\DataMart\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665abb5340 [0190.140] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.140] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.140] SetLastError (dwErrCode=0x0) [0190.140] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\DataMart\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\datamart\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.140] GetLastError () returned 0x5 [0190.140] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.141] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.141] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\DataMart\\PaidWiFi\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb42c0 [0190.141] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.141] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.141] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0190.141] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0190.141] SetLastError (dwErrCode=0x0) [0190.141] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\DataMart\\PaidWiFi\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\datamart\\paidwifi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0190.142] GetLastError () returned 0xb7 [0190.142] CloseHandle (hObject=0x47c) returned 1 [0190.142] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0190.142] FindClose (in: hFindFile=0x665abb5340 | out: hFindFile=0x665abb5340) returned 1 [0190.142] SetLastError (dwErrCode=0x0) [0190.142] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\DataMart\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\datamart\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.142] GetLastError () returned 0x5 [0190.142] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.142] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.142] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0190.142] SetLastError (dwErrCode=0x0) [0190.142] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.143] GetLastError () returned 0x5 [0190.143] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.143] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.143] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665abb42c0 [0190.143] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.143] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.144] SetLastError (dwErrCode=0x0) [0190.144] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\device stage\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.144] GetLastError () returned 0x5 [0190.144] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.144] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.144] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb4920 [0190.144] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.144] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.144] SetLastError (dwErrCode=0x0) [0190.144] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.144] GetLastError () returned 0x5 [0190.144] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.144] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.145] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4f20 [0190.146] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.146] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.146] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.147] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png", dwFileAttributes=0x80) returned 0 [0190.148] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.148] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.148] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.148] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.148] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.148] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml", dwFileAttributes=0x80) returned 0 [0190.149] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.149] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.149] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.149] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.149] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.150] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png", dwFileAttributes=0x80) returned 0 [0190.150] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.151] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.151] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.151] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.151] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.151] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png", dwFileAttributes=0x80) returned 0 [0190.152] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.152] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.152] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.152] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.152] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.153] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png", dwFileAttributes=0x80) returned 0 [0190.153] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.154] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.154] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.154] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0190.154] FindClose (in: hFindFile=0x665abb4f20 | out: hFindFile=0x665abb4f20) returned 1 [0190.155] SetLastError (dwErrCode=0x0) [0190.155] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.158] GetLastError () returned 0x5 [0190.158] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.158] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.158] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.158] SetLastError (dwErrCode=0x0) [0190.158] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.158] GetLastError () returned 0x5 [0190.158] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.158] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.158] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb43e0 [0190.158] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.159] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.159] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.159] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png", dwFileAttributes=0x80) returned 0 [0190.159] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.159] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.159] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.159] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.159] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.160] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml", dwFileAttributes=0x80) returned 0 [0190.160] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.160] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.160] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.160] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.160] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.161] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png", dwFileAttributes=0x80) returned 0 [0190.161] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.161] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.161] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.161] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0190.161] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0190.161] SetLastError (dwErrCode=0x0) [0190.161] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.161] GetLastError () returned 0x5 [0190.162] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.162] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.162] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0190.162] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0190.162] SetLastError (dwErrCode=0x0) [0190.162] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.162] GetLastError () returned 0x5 [0190.162] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.162] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.162] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.162] SetLastError (dwErrCode=0x0) [0190.162] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\device stage\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.162] GetLastError () returned 0x5 [0190.162] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.162] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.162] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb5040 [0190.163] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.163] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.163] SetLastError (dwErrCode=0x0) [0190.163] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.163] GetLastError () returned 0x5 [0190.163] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.163] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.163] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4f20 [0190.165] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.165] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.165] SetLastError (dwErrCode=0x0) [0190.165] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.165] GetLastError () returned 0x5 [0190.165] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0190.165] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.165] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb5160 [0190.165] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.165] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.165] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.165] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml", dwFileAttributes=0x80) returned 0 [0190.166] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\resource.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.166] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.166] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.166] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0190.166] FindClose (in: hFindFile=0x665abb5160 | out: hFindFile=0x665abb5160) returned 1 [0190.166] SetLastError (dwErrCode=0x0) [0190.166] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.169] GetLastError () returned 0x5 [0190.169] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0190.169] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.169] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.169] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.170] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico", dwFileAttributes=0x80) returned 0 [0190.171] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.171] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.171] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.172] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.172] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.172] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico", dwFileAttributes=0x80) returned 0 [0190.173] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.173] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.173] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.173] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.173] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.174] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico", dwFileAttributes=0x80) returned 0 [0190.174] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.174] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.174] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.174] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.174] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.175] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml", dwFileAttributes=0x80) returned 0 [0190.175] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.175] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.175] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.176] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.176] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.176] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico", dwFileAttributes=0x80) returned 0 [0190.177] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.177] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.177] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.177] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.177] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.178] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico", dwFileAttributes=0x80) returned 0 [0190.178] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.178] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.178] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.178] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.178] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.178] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico", dwFileAttributes=0x80) returned 0 [0190.179] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.179] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.179] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.179] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.179] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.179] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml", dwFileAttributes=0x80) returned 0 [0190.179] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.180] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.180] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.180] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.180] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.180] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico", dwFileAttributes=0x80) returned 0 [0190.181] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.181] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.181] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.181] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0190.181] FindClose (in: hFindFile=0x665abb4f20 | out: hFindFile=0x665abb4f20) returned 1 [0190.182] SetLastError (dwErrCode=0x0) [0190.182] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.182] GetLastError () returned 0x5 [0190.182] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.182] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.182] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.182] SetLastError (dwErrCode=0x0) [0190.182] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.182] GetLastError () returned 0x5 [0190.182] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.182] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.182] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb43e0 [0190.183] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.184] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.184] SetLastError (dwErrCode=0x0) [0190.184] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.184] GetLastError () returned 0x5 [0190.184] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0190.184] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.184] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb54c0 [0190.185] FindNextFileW (in: hFindFile=0x665abb54c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.185] FindNextFileW (in: hFindFile=0x665abb54c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.185] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.185] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml", dwFileAttributes=0x80) returned 0 [0190.185] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\resource.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.185] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.185] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.186] FindNextFileW (in: hFindFile=0x665abb54c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0190.186] FindClose (in: hFindFile=0x665abb54c0 | out: hFindFile=0x665abb54c0) returned 1 [0190.186] SetLastError (dwErrCode=0x0) [0190.186] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.186] GetLastError () returned 0x5 [0190.186] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0190.186] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.186] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.186] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.186] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico", dwFileAttributes=0x80) returned 0 [0190.186] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.187] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.187] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.187] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.187] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.187] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico", dwFileAttributes=0x80) returned 0 [0190.187] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.187] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.187] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.188] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.188] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.188] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico", dwFileAttributes=0x80) returned 0 [0190.188] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.189] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.189] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.189] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.189] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.189] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico", dwFileAttributes=0x80) returned 0 [0190.189] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.189] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.189] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.190] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.190] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.190] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico", dwFileAttributes=0x80) returned 0 [0190.190] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.190] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.190] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.190] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.190] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.191] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico", dwFileAttributes=0x80) returned 0 [0190.191] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.191] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.191] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.191] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.191] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.192] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico", dwFileAttributes=0x80) returned 0 [0190.192] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.193] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.193] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.193] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.193] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.193] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml", dwFileAttributes=0x80) returned 0 [0190.193] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.193] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.193] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.194] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0190.194] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0190.194] SetLastError (dwErrCode=0x0) [0190.194] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.194] GetLastError () returned 0x5 [0190.194] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.194] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.194] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0190.194] FindClose (in: hFindFile=0x665abb5040 | out: hFindFile=0x665abb5040) returned 1 [0190.194] SetLastError (dwErrCode=0x0) [0190.194] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.194] GetLastError () returned 0x5 [0190.194] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.194] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.194] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0190.194] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0190.195] SetLastError (dwErrCode=0x0) [0190.195] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\device stage\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.195] GetLastError () returned 0x5 [0190.195] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.195] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.195] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0190.195] SetLastError (dwErrCode=0x0) [0190.195] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.195] GetLastError () returned 0x5 [0190.195] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.195] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.195] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\DeviceSync\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665abb5340 [0190.195] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.195] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.195] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0190.195] FindClose (in: hFindFile=0x665abb5340 | out: hFindFile=0x665abb5340) returned 1 [0190.196] SetLastError (dwErrCode=0x0) [0190.196] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\DeviceSync\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\devicesync\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0190.196] GetLastError () returned 0xb7 [0190.196] CloseHandle (hObject=0x470) returned 1 [0190.196] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0190.196] SetLastError (dwErrCode=0x0) [0190.196] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.196] GetLastError () returned 0x5 [0190.196] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.196] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.196] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0xffffffffffffffff [0190.196] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0190.196] SetLastError (dwErrCode=0x0) [0190.196] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\diagnosis\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.200] GetLastError () returned 0x5 [0190.200] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.201] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.201] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0190.201] SetLastError (dwErrCode=0x0) [0190.201] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.201] GetLastError () returned 0x5 [0190.201] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.201] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.201] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665abb5280 [0190.202] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.202] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.202] SetLastError (dwErrCode=0x0) [0190.202] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\DRM\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\drm\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.202] GetLastError () returned 0x5 [0190.202] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.202] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.202] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\Server\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb4c20 [0190.202] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.202] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0190.202] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0190.202] SetLastError (dwErrCode=0x0) [0190.202] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\DRM\\Server\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\drm\\server\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.203] GetLastError () returned 0x5 [0190.203] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.203] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.203] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0190.203] FindClose (in: hFindFile=0x665abb5280 | out: hFindFile=0x665abb5280) returned 1 [0190.203] SetLastError (dwErrCode=0x0) [0190.203] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\DRM\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\drm\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.203] GetLastError () returned 0x5 [0190.203] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.203] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.203] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0190.203] SetLastError (dwErrCode=0x0) [0190.203] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.203] GetLastError () returned 0x5 [0190.203] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.203] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.203] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665abb4560 [0190.211] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.211] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.211] SetLastError (dwErrCode=0x0) [0190.211] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\event viewer\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.211] GetLastError () returned 0x5 [0190.211] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.211] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.211] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb4c20 [0190.214] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.214] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.214] SetLastError (dwErrCode=0x0) [0190.215] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\event viewer\\views\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.215] GetLastError () returned 0x5 [0190.215] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.215] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.215] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb56a0 [0190.215] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.215] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0190.216] FindClose (in: hFindFile=0x665abb56a0 | out: hFindFile=0x665abb56a0) returned 1 [0190.216] SetLastError (dwErrCode=0x0) [0190.216] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\event viewer\\views\\applicationviewsrootnode\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.216] GetLastError () returned 0x5 [0190.216] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.216] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.216] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0190.216] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0190.216] SetLastError (dwErrCode=0x0) [0190.216] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\event viewer\\views\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.216] GetLastError () returned 0x5 [0190.216] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.216] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.216] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0190.216] FindClose (in: hFindFile=0x665abb4560 | out: hFindFile=0x665abb4560) returned 1 [0190.216] SetLastError (dwErrCode=0x0) [0190.216] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\event viewer\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.217] GetLastError () returned 0x5 [0190.217] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.217] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.217] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0190.217] SetLastError (dwErrCode=0x0) [0190.217] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.217] GetLastError () returned 0x5 [0190.217] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.217] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.217] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665abb4c20 [0190.218] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.218] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.218] SetLastError (dwErrCode=0x0) [0190.218] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\identitycrl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.218] GetLastError () returned 0x5 [0190.218] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.218] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.218] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\INT\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb4560 [0190.218] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.218] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.218] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0190.218] FindClose (in: hFindFile=0x665abb4560 | out: hFindFile=0x665abb4560) returned 1 [0190.218] SetLastError (dwErrCode=0x0) [0190.218] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\INT\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\identitycrl\\int\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.219] GetLastError () returned 0x5 [0190.219] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.219] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.219] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.219] SetLastError (dwErrCode=0x0) [0190.219] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\identitycrl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.219] GetLastError () returned 0x5 [0190.219] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.219] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.219] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\production\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb4a40 [0190.219] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.219] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.219] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.219] SetLastError (dwErrCode=0x0) [0190.219] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\production\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\identitycrl\\production\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.220] GetLastError () returned 0x5 [0190.220] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.220] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.220] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\production\\temp\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb42c0 [0190.220] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.220] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0190.220] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0190.220] SetLastError (dwErrCode=0x0) [0190.220] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\production\\temp\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\identitycrl\\production\\temp\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.220] GetLastError () returned 0x5 [0190.220] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.220] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.220] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0190.220] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0190.220] SetLastError (dwErrCode=0x0) [0190.220] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\production\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\identitycrl\\production\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.221] GetLastError () returned 0x5 [0190.221] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.221] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.221] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0190.221] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0190.221] SetLastError (dwErrCode=0x0) [0190.221] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\identitycrl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.221] GetLastError () returned 0x5 [0190.221] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.221] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.221] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0190.221] SetLastError (dwErrCode=0x0) [0190.221] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.221] GetLastError () returned 0x5 [0190.221] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.221] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.221] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\MapData\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665abb5160 [0190.222] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.222] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0190.222] FindClose (in: hFindFile=0x665abb5160 | out: hFindFile=0x665abb5160) returned 1 [0190.222] SetLastError (dwErrCode=0x0) [0190.222] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\MapData\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\mapdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.222] GetLastError () returned 0x5 [0190.222] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.222] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.222] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0190.222] SetLastError (dwErrCode=0x0) [0190.222] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.222] GetLastError () returned 0x5 [0190.222] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.222] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.222] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\MF\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665abb5340 [0190.222] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.222] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.222] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.223] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\MF\\Active.GRL", dwFileAttributes=0x80) returned 1 [0190.223] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\MF\\Active.GRL" (normalized: "c:\\programdata\\microsoft\\mf\\active.grl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0190.223] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=15250) returned 1 [0190.223] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=15250) returned 1 [0190.223] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x3a70, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.223] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0190.225] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0190.225] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665ab9a9d0) returned 1 [0190.225] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0190.225] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0190.225] ReadFile (in: hFile=0x47c, lpBuffer=0x665da80000, nNumberOfBytesToRead=0x3b92, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesRead=0x665da7d1e0*=0x3b92, lpOverlapped=0x0) returned 1 [0190.226] CryptEncrypt (in: hKey=0x665ab9a9d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0190.226] CryptEncrypt (in: hKey=0x665ab9a9d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665da80000*, pdwDataLen=0x665da7d1d8*=0x3b92, dwBufLen=0xf4250 | out: pbData=0x665da80000*, pdwDataLen=0x665da7d1d8*=0x3ba0) returned 1 [0190.226] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0190.226] WriteFile (in: hFile=0x47c, lpBuffer=0x665da80000*, nNumberOfBytesToWrite=0x3ba0, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesWritten=0x665da7d1e0*=0x3ba0, lpOverlapped=0x0) returned 1 [0190.226] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0190.226] CryptExportKey (in: hKey=0x665ab9a9d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0190.226] CryptExportKey (in: hKey=0x665ab9a9d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0190.226] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0190.226] CloseHandle (hObject=0x47c) returned 1 [0190.247] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.252] CryptDestroyKey (hKey=0x665ab9a9d0) returned 1 [0190.252] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.253] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.253] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.253] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\MF\\Pending.GRL", dwFileAttributes=0x80) returned 1 [0190.254] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\MF\\Pending.GRL" (normalized: "c:\\programdata\\microsoft\\mf\\pending.grl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0190.254] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=15250) returned 1 [0190.254] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=15250) returned 1 [0190.254] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x3a70, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.254] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0190.256] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0190.256] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665ab9a030) returned 1 [0190.256] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0190.256] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0190.256] ReadFile (in: hFile=0x47c, lpBuffer=0x665da80000, nNumberOfBytesToRead=0x3b92, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesRead=0x665da7d1e0*=0x3b92, lpOverlapped=0x0) returned 1 [0190.257] CryptEncrypt (in: hKey=0x665ab9a030, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0190.257] CryptEncrypt (in: hKey=0x665ab9a030, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665da80000*, pdwDataLen=0x665da7d1d8*=0x3b92, dwBufLen=0xf4250 | out: pbData=0x665da80000*, pdwDataLen=0x665da7d1d8*=0x3ba0) returned 1 [0190.257] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0190.257] WriteFile (in: hFile=0x47c, lpBuffer=0x665da80000*, nNumberOfBytesToWrite=0x3ba0, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesWritten=0x665da7d1e0*=0x3ba0, lpOverlapped=0x0) returned 1 [0190.257] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0190.258] CryptExportKey (in: hKey=0x665ab9a030, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0190.258] CryptExportKey (in: hKey=0x665ab9a030, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0190.258] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0190.258] CloseHandle (hObject=0x47c) returned 1 [0190.274] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.279] CryptDestroyKey (hKey=0x665ab9a030) returned 1 [0190.279] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.280] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0190.280] FindClose (in: hFindFile=0x665abb5340 | out: hFindFile=0x665abb5340) returned 1 [0190.280] SetLastError (dwErrCode=0x0) [0190.280] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\MF\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\mf\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.280] GetLastError () returned 0x5 [0190.280] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.280] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.280] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0190.280] SetLastError (dwErrCode=0x0) [0190.280] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.281] GetLastError () returned 0x5 [0190.281] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.281] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.281] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665abb5280 [0190.281] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.281] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.281] SetLastError (dwErrCode=0x0) [0190.281] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\netframework\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.281] GetLastError () returned 0x5 [0190.281] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.281] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.281] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb42c0 [0190.282] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.282] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.282] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0190.282] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0190.282] SetLastError (dwErrCode=0x0) [0190.282] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\netframework\\breadcrumbstore\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.282] GetLastError () returned 0x5 [0190.282] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.282] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.283] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0190.283] FindClose (in: hFindFile=0x665abb5280 | out: hFindFile=0x665abb5280) returned 1 [0190.283] SetLastError (dwErrCode=0x0) [0190.283] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\netframework\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.283] GetLastError () returned 0x5 [0190.283] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.283] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.283] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0190.283] SetLastError (dwErrCode=0x0) [0190.283] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.283] GetLastError () returned 0x5 [0190.283] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.283] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.284] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665abb57c0 [0190.284] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.284] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.284] SetLastError (dwErrCode=0x0) [0190.284] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Network\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\network\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.284] GetLastError () returned 0x5 [0190.284] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.284] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.284] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Connections\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb42c0 [0190.284] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.284] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0190.284] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0190.285] SetLastError (dwErrCode=0x0) [0190.285] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Network\\Connections\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\network\\connections\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.285] GetLastError () returned 0x5 [0190.285] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.285] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.285] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.285] SetLastError (dwErrCode=0x0) [0190.285] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Network\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\network\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.285] GetLastError () returned 0x5 [0190.285] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.285] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.285] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0xffffffffffffffff [0190.286] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0190.286] SetLastError (dwErrCode=0x0) [0190.286] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\network\\downloader\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.286] GetLastError () returned 0x5 [0190.286] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.286] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.286] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0190.286] FindClose (in: hFindFile=0x665abb57c0 | out: hFindFile=0x665abb57c0) returned 1 [0190.286] SetLastError (dwErrCode=0x0) [0190.286] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Network\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\network\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.286] GetLastError () returned 0x5 [0190.286] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.286] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.287] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0190.287] SetLastError (dwErrCode=0x0) [0190.287] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.287] GetLastError () returned 0x5 [0190.287] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.287] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.287] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Office\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665abb4ec0 [0190.287] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.287] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.287] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.288] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Office\\ClickToRunPackageLocker", dwFileAttributes=0x80) returned 0 [0190.288] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Office\\ClickToRunPackageLocker" (normalized: "c:\\programdata\\microsoft\\office\\clicktorunpackagelocker"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.288] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.288] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.289] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0190.289] FindClose (in: hFindFile=0x665abb4ec0 | out: hFindFile=0x665abb4ec0) returned 1 [0190.289] SetLastError (dwErrCode=0x0) [0190.289] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Office\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\office\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.289] GetLastError () returned 0x5 [0190.289] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.289] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.289] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0190.289] SetLastError (dwErrCode=0x0) [0190.289] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.289] GetLastError () returned 0x5 [0190.289] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.289] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.290] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665abb43e0 [0190.291] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.291] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.291] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.292] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\countrytable.xml", dwFileAttributes=0x80) returned 0 [0190.293] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\countrytable.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\countrytable.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.293] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.293] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.293] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.293] SetLastError (dwErrCode=0x0) [0190.293] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.294] GetLastError () returned 0x5 [0190.294] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.294] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.294] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb4440 [0190.295] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.295] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.295] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.295] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\customizations.xml", dwFileAttributes=0x80) returned 0 [0190.295] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.296] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.296] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.296] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.296] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.296] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\MasterDatastore.xml", dwFileAttributes=0x80) returned 0 [0190.298] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\masterdatastore.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.298] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.298] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.298] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.298] SetLastError (dwErrCode=0x0) [0190.298] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.299] GetLastError () returned 0x5 [0190.299] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.299] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.299] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb42c0 [0190.299] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.299] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.299] SetLastError (dwErrCode=0x0) [0190.299] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.299] GetLastError () returned 0x5 [0190.299] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0190.299] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.299] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4560 [0190.300] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.300] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.300] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.300] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime\\Power_0.provxml", dwFileAttributes=0x80) returned 0 [0190.300] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime\\Power_0.provxml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\prov\\runtime\\power_0.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.301] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.301] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.301] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.301] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.301] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime\\Power_1.provxml", dwFileAttributes=0x80) returned 0 [0190.302] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime\\Power_1.provxml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\prov\\runtime\\power_1.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.302] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.302] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.302] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0190.302] FindClose (in: hFindFile=0x665abb4560 | out: hFindFile=0x665abb4560) returned 1 [0190.302] SetLastError (dwErrCode=0x0) [0190.302] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\prov\\runtime\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.303] GetLastError () returned 0x5 [0190.303] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0190.303] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.303] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.303] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.303] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime.xml", dwFileAttributes=0x80) returned 0 [0190.303] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\prov\\runtime.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.304] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.304] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.304] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0190.304] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0190.304] SetLastError (dwErrCode=0x0) [0190.304] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.305] GetLastError () returned 0x5 [0190.305] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.305] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.305] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0190.305] FindClose (in: hFindFile=0x665abb4440 | out: hFindFile=0x665abb4440) returned 1 [0190.305] SetLastError (dwErrCode=0x0) [0190.305] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.305] GetLastError () returned 0x5 [0190.305] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.305] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.305] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.305] SetLastError (dwErrCode=0x0) [0190.305] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.306] GetLastError () returned 0x5 [0190.306] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.306] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.306] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb57c0 [0190.306] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.306] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.306] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.306] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\customizations.xml", dwFileAttributes=0x80) returned 0 [0190.307] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.308] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.308] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.308] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.308] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.308] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\MasterDatastore.xml", dwFileAttributes=0x80) returned 0 [0190.309] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\masterdatastore.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.309] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.309] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.309] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.309] SetLastError (dwErrCode=0x0) [0190.309] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.310] GetLastError () returned 0x5 [0190.310] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.310] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.310] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb42c0 [0190.310] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.311] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.311] SetLastError (dwErrCode=0x0) [0190.311] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.311] GetLastError () returned 0x5 [0190.311] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0190.311] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.311] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4440 [0190.311] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.311] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.311] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.312] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime\\Power_0.provxml", dwFileAttributes=0x80) returned 0 [0190.312] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime\\Power_0.provxml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\prov\\runtime\\power_0.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.312] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.312] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.313] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.313] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.313] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime\\Power_1.provxml", dwFileAttributes=0x80) returned 0 [0190.314] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime\\Power_1.provxml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\prov\\runtime\\power_1.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.314] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.314] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.314] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0190.314] FindClose (in: hFindFile=0x665abb4440 | out: hFindFile=0x665abb4440) returned 1 [0190.318] SetLastError (dwErrCode=0x0) [0190.318] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\prov\\runtime\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.319] GetLastError () returned 0x5 [0190.319] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0190.319] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.319] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.319] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.319] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime.xml", dwFileAttributes=0x80) returned 0 [0190.319] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\prov\\runtime.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.320] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.320] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.320] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0190.320] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0190.320] SetLastError (dwErrCode=0x0) [0190.320] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.320] GetLastError () returned 0x5 [0190.320] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.321] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.321] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0190.321] FindClose (in: hFindFile=0x665abb57c0 | out: hFindFile=0x665abb57c0) returned 1 [0190.321] SetLastError (dwErrCode=0x0) [0190.321] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.321] GetLastError () returned 0x5 [0190.321] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.321] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.321] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.321] SetLastError (dwErrCode=0x0) [0190.321] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.321] GetLastError () returned 0x5 [0190.321] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.322] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.322] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb4f20 [0190.322] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.322] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.322] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.322] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\customizations.xml", dwFileAttributes=0x80) returned 0 [0190.323] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.324] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.324] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.324] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.324] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.325] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\MasterDatastore.xml", dwFileAttributes=0x80) returned 0 [0190.326] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\masterdatastore.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.326] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.326] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.326] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.326] SetLastError (dwErrCode=0x0) [0190.326] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.326] GetLastError () returned 0x5 [0190.327] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.327] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.327] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4c20 [0190.327] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.327] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.327] SetLastError (dwErrCode=0x0) [0190.327] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.327] GetLastError () returned 0x5 [0190.327] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0190.327] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.327] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb54c0 [0190.328] FindNextFileW (in: hFindFile=0x665abb54c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.328] FindNextFileW (in: hFindFile=0x665abb54c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.328] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.329] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime\\Power_0.provxml", dwFileAttributes=0x80) returned 0 [0190.330] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime\\Power_0.provxml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\prov\\runtime\\power_0.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.330] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.330] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.331] FindNextFileW (in: hFindFile=0x665abb54c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.331] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.331] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime\\Power_1.provxml", dwFileAttributes=0x80) returned 0 [0190.331] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime\\Power_1.provxml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\prov\\runtime\\power_1.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.332] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.332] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.332] FindNextFileW (in: hFindFile=0x665abb54c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0190.332] FindClose (in: hFindFile=0x665abb54c0 | out: hFindFile=0x665abb54c0) returned 1 [0190.332] SetLastError (dwErrCode=0x0) [0190.332] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\prov\\runtime\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.332] GetLastError () returned 0x5 [0190.332] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0190.333] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.333] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.333] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.333] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime.xml", dwFileAttributes=0x80) returned 0 [0190.333] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\prov\\runtime.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.333] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.334] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.334] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0190.334] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0190.334] SetLastError (dwErrCode=0x0) [0190.334] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.334] GetLastError () returned 0x5 [0190.334] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.334] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.334] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0190.334] FindClose (in: hFindFile=0x665abb4f20 | out: hFindFile=0x665abb4f20) returned 1 [0190.335] SetLastError (dwErrCode=0x0) [0190.335] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.335] GetLastError () returned 0x5 [0190.335] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.335] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.335] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.335] SetLastError (dwErrCode=0x0) [0190.335] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.335] GetLastError () returned 0x5 [0190.335] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.335] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.335] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb42c0 [0190.336] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.336] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.336] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.336] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\customizations.xml", dwFileAttributes=0x80) returned 0 [0190.336] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.337] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.337] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.337] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.337] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.337] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\MasterDatastore.xml", dwFileAttributes=0x80) returned 0 [0190.338] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\masterdatastore.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.338] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.338] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.338] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.338] SetLastError (dwErrCode=0x0) [0190.338] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.338] GetLastError () returned 0x5 [0190.339] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.339] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.339] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4440 [0190.339] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.339] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.339] SetLastError (dwErrCode=0x0) [0190.339] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.339] GetLastError () returned 0x5 [0190.339] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0190.339] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.339] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4ec0 [0190.340] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.340] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.340] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.340] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime\\Power_0.provxml", dwFileAttributes=0x80) returned 0 [0190.341] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime\\Power_0.provxml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\prov\\runtime\\power_0.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.341] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.341] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.341] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.341] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.342] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime\\Power_1.provxml", dwFileAttributes=0x80) returned 0 [0190.342] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime\\Power_1.provxml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\prov\\runtime\\power_1.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.342] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.342] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.343] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.343] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.343] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime\\Power_2.provxml", dwFileAttributes=0x80) returned 0 [0190.343] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime\\Power_2.provxml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\prov\\runtime\\power_2.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.343] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.343] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.344] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0190.344] FindClose (in: hFindFile=0x665abb4ec0 | out: hFindFile=0x665abb4ec0) returned 1 [0190.344] SetLastError (dwErrCode=0x0) [0190.344] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\prov\\runtime\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.344] GetLastError () returned 0x5 [0190.345] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0190.345] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.345] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.345] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.345] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime.xml", dwFileAttributes=0x80) returned 0 [0190.345] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\prov\\runtime.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.345] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.346] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.346] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0190.346] FindClose (in: hFindFile=0x665abb4440 | out: hFindFile=0x665abb4440) returned 1 [0190.346] SetLastError (dwErrCode=0x0) [0190.346] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.346] GetLastError () returned 0x5 [0190.346] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.346] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.346] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0190.346] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0190.347] SetLastError (dwErrCode=0x0) [0190.347] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.347] GetLastError () returned 0x5 [0190.347] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.347] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.347] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.347] SetLastError (dwErrCode=0x0) [0190.347] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.347] GetLastError () returned 0x5 [0190.347] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.347] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.347] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb42c0 [0190.348] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.348] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.348] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.349] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\customizations.xml", dwFileAttributes=0x80) returned 0 [0190.350] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.350] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.350] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.350] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.350] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.351] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\MasterDatastore.xml", dwFileAttributes=0x80) returned 0 [0190.351] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\masterdatastore.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.351] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.351] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.351] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.351] SetLastError (dwErrCode=0x0) [0190.351] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.352] GetLastError () returned 0x5 [0190.352] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.352] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.352] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb5340 [0190.352] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.352] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.352] SetLastError (dwErrCode=0x0) [0190.352] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.352] GetLastError () returned 0x5 [0190.352] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0190.352] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.352] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4f20 [0190.353] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.353] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.353] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.353] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime\\Power_0.provxml", dwFileAttributes=0x80) returned 0 [0190.353] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime\\Power_0.provxml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\prov\\runtime\\power_0.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.354] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.354] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.354] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.354] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.354] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime\\Power_1.provxml", dwFileAttributes=0x80) returned 0 [0190.355] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime\\Power_1.provxml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\prov\\runtime\\power_1.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.355] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.355] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.355] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.355] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.356] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime\\Power_2.provxml", dwFileAttributes=0x80) returned 0 [0190.356] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime\\Power_2.provxml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\prov\\runtime\\power_2.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.356] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.356] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.356] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0190.357] FindClose (in: hFindFile=0x665abb4f20 | out: hFindFile=0x665abb4f20) returned 1 [0190.357] SetLastError (dwErrCode=0x0) [0190.357] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\prov\\runtime\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.357] GetLastError () returned 0x5 [0190.357] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0190.357] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.357] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.357] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.357] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime.xml", dwFileAttributes=0x80) returned 0 [0190.358] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\prov\\runtime.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.358] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.358] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.358] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0190.358] FindClose (in: hFindFile=0x665abb5340 | out: hFindFile=0x665abb5340) returned 1 [0190.358] SetLastError (dwErrCode=0x0) [0190.358] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.359] GetLastError () returned 0x5 [0190.359] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.359] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.359] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0190.359] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0190.359] SetLastError (dwErrCode=0x0) [0190.359] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.359] GetLastError () returned 0x5 [0190.359] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.359] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.359] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.359] SetLastError (dwErrCode=0x0) [0190.359] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.360] GetLastError () returned 0x5 [0190.360] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.360] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.360] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb5760 [0190.360] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.361] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.361] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.361] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\customizations.xml", dwFileAttributes=0x80) returned 0 [0190.362] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.362] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.362] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.362] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.363] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.363] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\MasterDatastore.xml", dwFileAttributes=0x80) returned 0 [0190.363] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\masterdatastore.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.363] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.363] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.364] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.364] SetLastError (dwErrCode=0x0) [0190.364] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.364] GetLastError () returned 0x5 [0190.364] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.364] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.364] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4c20 [0190.365] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.365] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.365] SetLastError (dwErrCode=0x0) [0190.365] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.366] GetLastError () returned 0x5 [0190.366] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0190.366] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.366] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RunTime\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb5340 [0190.366] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.366] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.366] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.366] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RunTime\\Power_0.provxml", dwFileAttributes=0x80) returned 0 [0190.367] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RunTime\\Power_0.provxml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\prov\\runtime\\power_0.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.367] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.367] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.367] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0190.367] FindClose (in: hFindFile=0x665abb5340 | out: hFindFile=0x665abb5340) returned 1 [0190.368] SetLastError (dwErrCode=0x0) [0190.368] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RunTime\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\prov\\runtime\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.368] GetLastError () returned 0x5 [0190.368] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0190.368] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.368] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.368] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.368] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RunTime.xml", dwFileAttributes=0x80) returned 0 [0190.369] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\prov\\runtime.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.369] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.369] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.369] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0190.369] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0190.369] SetLastError (dwErrCode=0x0) [0190.369] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.370] GetLastError () returned 0x5 [0190.370] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.370] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.370] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0190.370] FindClose (in: hFindFile=0x665abb5760 | out: hFindFile=0x665abb5760) returned 1 [0190.370] SetLastError (dwErrCode=0x0) [0190.370] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.370] GetLastError () returned 0x5 [0190.370] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.370] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.370] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.370] SetLastError (dwErrCode=0x0) [0190.370] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.371] GetLastError () returned 0x5 [0190.371] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.371] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.371] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb5160 [0190.371] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.371] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.371] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.372] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\customizations.xml", dwFileAttributes=0x80) returned 0 [0190.372] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.372] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.372] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.372] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.372] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.373] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\MasterDatastore.xml", dwFileAttributes=0x80) returned 0 [0190.374] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\masterdatastore.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.374] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.374] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.374] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.374] SetLastError (dwErrCode=0x0) [0190.374] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.375] GetLastError () returned 0x5 [0190.375] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.375] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.375] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb54c0 [0190.375] FindNextFileW (in: hFindFile=0x665abb54c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.375] FindNextFileW (in: hFindFile=0x665abb54c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.375] SetLastError (dwErrCode=0x0) [0190.375] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.376] GetLastError () returned 0x5 [0190.376] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0190.376] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.376] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RunTime\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4920 [0190.377] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.377] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.377] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.377] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RunTime\\Power_0.provxml", dwFileAttributes=0x80) returned 0 [0190.378] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RunTime\\Power_0.provxml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\prov\\runtime\\power_0.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.378] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.378] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.379] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0190.379] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0190.379] SetLastError (dwErrCode=0x0) [0190.379] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RunTime\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\prov\\runtime\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.379] GetLastError () returned 0x5 [0190.379] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0190.379] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.379] FindNextFileW (in: hFindFile=0x665abb54c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.379] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.380] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RunTime.xml", dwFileAttributes=0x80) returned 0 [0190.381] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\prov\\runtime.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.381] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.381] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.381] FindNextFileW (in: hFindFile=0x665abb54c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0190.381] FindClose (in: hFindFile=0x665abb54c0 | out: hFindFile=0x665abb54c0) returned 1 [0190.381] SetLastError (dwErrCode=0x0) [0190.381] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.382] GetLastError () returned 0x5 [0190.382] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.382] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.382] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0190.382] FindClose (in: hFindFile=0x665abb5160 | out: hFindFile=0x665abb5160) returned 1 [0190.382] SetLastError (dwErrCode=0x0) [0190.382] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.382] GetLastError () returned 0x5 [0190.382] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.382] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.382] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.382] SetLastError (dwErrCode=0x0) [0190.382] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.383] GetLastError () returned 0x5 [0190.383] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.383] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.383] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb4560 [0190.383] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.383] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.383] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.383] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\customizations.xml", dwFileAttributes=0x80) returned 0 [0190.384] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.384] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.384] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.384] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.384] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.385] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\MasterDatastore.xml", dwFileAttributes=0x80) returned 0 [0190.385] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\masterdatastore.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.385] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.385] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.386] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.386] SetLastError (dwErrCode=0x0) [0190.386] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.386] GetLastError () returned 0x5 [0190.386] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.386] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.386] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4a40 [0190.386] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.386] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.386] SetLastError (dwErrCode=0x0) [0190.386] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.386] GetLastError () returned 0x5 [0190.387] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0190.387] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.387] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RunTime\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb42c0 [0190.387] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.387] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.387] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.387] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RunTime\\Power_0.provxml", dwFileAttributes=0x80) returned 0 [0190.388] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RunTime\\Power_0.provxml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\prov\\runtime\\power_0.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.388] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.388] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.388] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0190.388] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0190.388] SetLastError (dwErrCode=0x0) [0190.388] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RunTime\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\prov\\runtime\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.389] GetLastError () returned 0x5 [0190.389] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0190.389] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.389] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.389] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.389] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RunTime.xml", dwFileAttributes=0x80) returned 0 [0190.389] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\prov\\runtime.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.390] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.390] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.390] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0190.390] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0190.390] SetLastError (dwErrCode=0x0) [0190.390] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.390] GetLastError () returned 0x5 [0190.390] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.390] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.390] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0190.390] FindClose (in: hFindFile=0x665abb4560 | out: hFindFile=0x665abb4560) returned 1 [0190.391] SetLastError (dwErrCode=0x0) [0190.391] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.391] GetLastError () returned 0x5 [0190.391] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.391] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.391] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.392] SetLastError (dwErrCode=0x0) [0190.392] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.392] GetLastError () returned 0x5 [0190.392] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.392] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.392] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb42c0 [0190.393] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.393] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.393] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.393] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\customizations.xml", dwFileAttributes=0x80) returned 0 [0190.394] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.394] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.394] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.394] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.394] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.394] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\MasterDatastore.xml", dwFileAttributes=0x80) returned 0 [0190.395] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\masterdatastore.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.395] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.395] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.395] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.395] SetLastError (dwErrCode=0x0) [0190.395] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.396] GetLastError () returned 0x5 [0190.396] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.396] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.396] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4920 [0190.396] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.396] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.396] SetLastError (dwErrCode=0x0) [0190.396] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.396] GetLastError () returned 0x5 [0190.396] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0190.396] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.396] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb49e0 [0190.397] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.397] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.397] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.397] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime\\Power_0.provxml", dwFileAttributes=0x80) returned 0 [0190.398] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime\\Power_0.provxml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\prov\\runtime\\power_0.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.398] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.398] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.399] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.399] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.399] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime\\Power_1.provxml", dwFileAttributes=0x80) returned 0 [0190.399] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime\\Power_1.provxml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\prov\\runtime\\power_1.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.399] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.399] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.400] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0190.400] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0190.400] SetLastError (dwErrCode=0x0) [0190.400] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\prov\\runtime\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.400] GetLastError () returned 0x5 [0190.400] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0190.400] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.400] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.400] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.401] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime.xml", dwFileAttributes=0x80) returned 0 [0190.401] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\prov\\runtime.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.401] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.401] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.402] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0190.402] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0190.402] SetLastError (dwErrCode=0x0) [0190.402] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.402] GetLastError () returned 0x5 [0190.402] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.402] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.402] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0190.402] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0190.402] SetLastError (dwErrCode=0x0) [0190.402] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.403] GetLastError () returned 0x5 [0190.403] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.403] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.403] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.403] SetLastError (dwErrCode=0x0) [0190.403] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.403] GetLastError () returned 0x5 [0190.403] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.403] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.403] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb54c0 [0190.403] FindNextFileW (in: hFindFile=0x665abb54c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.403] FindNextFileW (in: hFindFile=0x665abb54c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.403] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.404] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\customizations.xml", dwFileAttributes=0x80) returned 0 [0190.404] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.404] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.404] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.405] FindNextFileW (in: hFindFile=0x665abb54c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.405] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.405] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\MasterDatastore.xml", dwFileAttributes=0x80) returned 0 [0190.405] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\masterdatastore.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.405] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.406] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.406] FindNextFileW (in: hFindFile=0x665abb54c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.406] SetLastError (dwErrCode=0x0) [0190.406] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.406] GetLastError () returned 0x5 [0190.406] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.406] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.406] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4920 [0190.407] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.408] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.408] SetLastError (dwErrCode=0x0) [0190.408] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.408] GetLastError () returned 0x5 [0190.408] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0190.408] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.408] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RunTime\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb5760 [0190.408] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.408] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.408] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.409] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RunTime\\Power_0.provxml", dwFileAttributes=0x80) returned 0 [0190.410] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RunTime\\Power_0.provxml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\prov\\runtime\\power_0.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.410] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.410] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.410] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0190.410] FindClose (in: hFindFile=0x665abb5760 | out: hFindFile=0x665abb5760) returned 1 [0190.411] SetLastError (dwErrCode=0x0) [0190.411] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RunTime\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\prov\\runtime\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.411] GetLastError () returned 0x5 [0190.411] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0190.411] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.411] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.411] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.411] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RunTime.xml", dwFileAttributes=0x80) returned 0 [0190.412] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\prov\\runtime.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.412] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.412] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.412] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0190.412] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0190.412] SetLastError (dwErrCode=0x0) [0190.412] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.413] GetLastError () returned 0x5 [0190.413] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.413] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.413] FindNextFileW (in: hFindFile=0x665abb54c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0190.413] FindClose (in: hFindFile=0x665abb54c0 | out: hFindFile=0x665abb54c0) returned 1 [0190.413] SetLastError (dwErrCode=0x0) [0190.413] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.413] GetLastError () returned 0x5 [0190.413] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.413] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.413] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.413] SetLastError (dwErrCode=0x0) [0190.413] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.414] GetLastError () returned 0x5 [0190.414] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.414] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.414] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb5040 [0190.414] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.414] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.414] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.415] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\customizations.xml", dwFileAttributes=0x80) returned 0 [0190.415] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.415] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.415] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.415] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.415] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.416] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\MasterDatastore.xml", dwFileAttributes=0x80) returned 0 [0190.417] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\masterdatastore.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.417] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.417] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.417] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.417] SetLastError (dwErrCode=0x0) [0190.417] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.418] GetLastError () returned 0x5 [0190.418] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.418] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.418] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4560 [0190.418] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.418] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.418] SetLastError (dwErrCode=0x0) [0190.418] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.418] GetLastError () returned 0x5 [0190.418] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0190.418] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.418] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\RunTime\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb5760 [0190.419] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.419] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.419] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.420] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\RunTime\\Power_0.provxml", dwFileAttributes=0x80) returned 0 [0190.420] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\RunTime\\Power_0.provxml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\prov\\runtime\\power_0.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.420] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.420] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.421] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0190.421] FindClose (in: hFindFile=0x665abb5760 | out: hFindFile=0x665abb5760) returned 1 [0190.421] SetLastError (dwErrCode=0x0) [0190.421] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\RunTime\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\prov\\runtime\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.421] GetLastError () returned 0x5 [0190.421] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0190.421] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.421] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.421] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.422] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\RunTime.xml", dwFileAttributes=0x80) returned 0 [0190.422] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\prov\\runtime.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.422] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.422] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.423] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0190.423] FindClose (in: hFindFile=0x665abb4560 | out: hFindFile=0x665abb4560) returned 1 [0190.423] SetLastError (dwErrCode=0x0) [0190.423] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.423] GetLastError () returned 0x5 [0190.423] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.423] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.423] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0190.423] FindClose (in: hFindFile=0x665abb5040 | out: hFindFile=0x665abb5040) returned 1 [0190.424] SetLastError (dwErrCode=0x0) [0190.424] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.424] GetLastError () returned 0x5 [0190.424] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.424] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.424] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.424] SetLastError (dwErrCode=0x0) [0190.424] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.424] GetLastError () returned 0x5 [0190.424] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.424] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.424] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb56a0 [0190.425] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.425] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.425] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.425] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\customizations.xml", dwFileAttributes=0x80) returned 0 [0190.426] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.426] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.426] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.427] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.427] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.427] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\MasterDatastore.xml", dwFileAttributes=0x80) returned 0 [0190.427] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\masterdatastore.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.428] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.428] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.428] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.428] SetLastError (dwErrCode=0x0) [0190.428] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.428] GetLastError () returned 0x5 [0190.428] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.428] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.428] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4920 [0190.429] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.429] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.429] SetLastError (dwErrCode=0x0) [0190.429] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.429] GetLastError () returned 0x5 [0190.429] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0190.429] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.429] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RunTime\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb57c0 [0190.429] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.429] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.429] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.430] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RunTime\\Power_0.provxml", dwFileAttributes=0x80) returned 0 [0190.430] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RunTime\\Power_0.provxml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\prov\\runtime\\power_0.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.430] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.430] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.431] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.431] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.431] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RunTime\\Power_1.provxml", dwFileAttributes=0x80) returned 0 [0190.431] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RunTime\\Power_1.provxml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\prov\\runtime\\power_1.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.431] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.432] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.432] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0190.432] FindClose (in: hFindFile=0x665abb57c0 | out: hFindFile=0x665abb57c0) returned 1 [0190.432] SetLastError (dwErrCode=0x0) [0190.432] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RunTime\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\prov\\runtime\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.432] GetLastError () returned 0x5 [0190.432] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0190.432] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.432] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.432] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.433] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RunTime.xml", dwFileAttributes=0x80) returned 0 [0190.433] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\prov\\runtime.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.433] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.433] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.434] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0190.434] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0190.434] SetLastError (dwErrCode=0x0) [0190.434] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.434] GetLastError () returned 0x5 [0190.434] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.434] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.434] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0190.434] FindClose (in: hFindFile=0x665abb56a0 | out: hFindFile=0x665abb56a0) returned 1 [0190.434] SetLastError (dwErrCode=0x0) [0190.434] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.435] GetLastError () returned 0x5 [0190.435] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.435] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.435] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.435] SetLastError (dwErrCode=0x0) [0190.435] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.435] GetLastError () returned 0x5 [0190.435] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.435] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.435] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb4920 [0190.436] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.436] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.436] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.436] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\customizations.xml", dwFileAttributes=0x80) returned 0 [0190.437] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.438] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.438] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.438] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.438] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.439] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\MasterDatastore.xml", dwFileAttributes=0x80) returned 0 [0190.439] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\masterdatastore.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.439] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.439] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.439] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.439] SetLastError (dwErrCode=0x0) [0190.440] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.440] GetLastError () returned 0x5 [0190.440] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.440] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.440] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb49e0 [0190.440] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.440] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.440] SetLastError (dwErrCode=0x0) [0190.440] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.440] GetLastError () returned 0x5 [0190.440] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0190.440] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.441] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4f20 [0190.442] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.442] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.442] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.443] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\Power_0.provxml", dwFileAttributes=0x80) returned 0 [0190.443] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\Power_0.provxml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\prov\\runtime\\power_0.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.443] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.443] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.443] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.443] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.444] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\Power_1.provxml", dwFileAttributes=0x80) returned 0 [0190.444] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\Power_1.provxml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\prov\\runtime\\power_1.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.444] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.444] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.445] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.445] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.445] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\Power_2.provxml", dwFileAttributes=0x80) returned 0 [0190.446] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\Power_2.provxml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\prov\\runtime\\power_2.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.446] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.446] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.447] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.447] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.447] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\Power_3.provxml", dwFileAttributes=0x80) returned 0 [0190.447] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\Power_3.provxml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\prov\\runtime\\power_3.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.447] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.447] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.448] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.448] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.448] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\Power_4.provxml", dwFileAttributes=0x80) returned 0 [0190.448] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\Power_4.provxml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\prov\\runtime\\power_4.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.449] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.449] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.449] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.449] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.449] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\Power_5.provxml", dwFileAttributes=0x80) returned 0 [0190.450] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\Power_5.provxml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\prov\\runtime\\power_5.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.450] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.450] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.450] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.450] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.451] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\Power_6.provxml", dwFileAttributes=0x80) returned 0 [0190.451] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\Power_6.provxml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\prov\\runtime\\power_6.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.452] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.452] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.452] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0190.452] FindClose (in: hFindFile=0x665abb4f20 | out: hFindFile=0x665abb4f20) returned 1 [0190.453] SetLastError (dwErrCode=0x0) [0190.453] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\prov\\runtime\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.457] GetLastError () returned 0x5 [0190.457] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0190.457] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.458] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.458] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.458] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime.xml", dwFileAttributes=0x80) returned 0 [0190.458] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\prov\\runtime.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.458] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.458] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.459] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0190.459] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0190.459] SetLastError (dwErrCode=0x0) [0190.459] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.459] GetLastError () returned 0x5 [0190.459] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.459] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.459] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0190.459] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0190.459] SetLastError (dwErrCode=0x0) [0190.459] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.459] GetLastError () returned 0x5 [0190.459] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.459] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.459] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0190.459] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0190.460] SetLastError (dwErrCode=0x0) [0190.460] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.460] GetLastError () returned 0x5 [0190.460] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.460] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.460] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0190.460] SetLastError (dwErrCode=0x0) [0190.460] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.460] GetLastError () returned 0x5 [0190.460] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.460] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.460] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665abb5160 [0190.460] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.460] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.461] SetLastError (dwErrCode=0x0) [0190.461] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Search\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\search\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.461] GetLastError () returned 0x5 [0190.461] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.461] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.461] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0xffffffffffffffff [0190.461] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0190.461] SetLastError (dwErrCode=0x0) [0190.461] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\search\\data\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.461] GetLastError () returned 0x5 [0190.461] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.461] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.461] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0190.461] FindClose (in: hFindFile=0x665abb5160 | out: hFindFile=0x665abb5160) returned 1 [0190.462] SetLastError (dwErrCode=0x0) [0190.462] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Search\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\search\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.462] GetLastError () returned 0x5 [0190.462] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.462] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.462] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0190.462] SetLastError (dwErrCode=0x0) [0190.462] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.462] GetLastError () returned 0x5 [0190.462] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.462] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.462] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\SmsRouter\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0xffffffffffffffff [0190.463] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0190.463] SetLastError (dwErrCode=0x0) [0190.463] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\SmsRouter\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\smsrouter\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.463] GetLastError () returned 0x5 [0190.463] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.464] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.464] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0190.464] SetLastError (dwErrCode=0x0) [0190.464] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.464] GetLastError () returned 0x5 [0190.464] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.464] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.464] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665abb5040 [0190.464] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.464] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.464] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.464] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.465] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\CIiHmnxMn6Ps.dat", dwFileAttributes=0x80) returned 1 [0190.465] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\CIiHmnxMn6Ps.dat" (normalized: "c:\\programdata\\microsoft\\user account pictures\\ciihmnxmn6ps.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0190.465] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=0) returned 1 [0190.465] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=0) returned 1 [0190.465] CloseHandle (hObject=0x47c) returned 1 [0190.465] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.466] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.466] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.466] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp", dwFileAttributes=0x80) returned 0 [0190.467] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\guest.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.467] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.467] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.467] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.468] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.468] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.png", dwFileAttributes=0x80) returned 0 [0190.468] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.png" (normalized: "c:\\programdata\\microsoft\\user account pictures\\guest.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.468] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.468] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.469] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.469] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.469] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.469] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-192.png", dwFileAttributes=0x80) returned 0 [0190.470] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-192.png" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user-192.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.470] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.470] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.470] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.470] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.470] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-32.png", dwFileAttributes=0x80) returned 0 [0190.471] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-32.png" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user-32.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.471] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.471] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.471] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.471] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.472] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-40.png", dwFileAttributes=0x80) returned 0 [0190.472] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-40.png" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user-40.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.472] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.472] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.472] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.472] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.473] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-48.png", dwFileAttributes=0x80) returned 0 [0190.473] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-48.png" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user-48.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.473] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.473] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.473] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.473] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.474] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp", dwFileAttributes=0x80) returned 0 [0190.474] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.474] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.474] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.474] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.475] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.475] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.png", dwFileAttributes=0x80) returned 0 [0190.475] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.png" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.475] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.475] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.476] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0190.476] FindClose (in: hFindFile=0x665abb5040 | out: hFindFile=0x665abb5040) returned 1 [0190.476] SetLastError (dwErrCode=0x0) [0190.476] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\user account pictures\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.476] GetLastError () returned 0x5 [0190.476] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.476] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.476] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0190.476] SetLastError (dwErrCode=0x0) [0190.476] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.477] GetLastError () returned 0x5 [0190.477] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.477] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.477] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Vault\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665abb42c0 [0190.477] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.477] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.477] SetLastError (dwErrCode=0x0) [0190.477] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Vault\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\vault\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.477] GetLastError () returned 0x5 [0190.477] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.477] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.477] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb5760 [0190.477] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.477] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.477] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.478] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204\\154E23D0-C644-4E6F-8CE6-5069272F999F.vsch", dwFileAttributes=0x80) returned 0 [0190.478] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204\\154E23D0-C644-4E6F-8CE6-5069272F999F.vsch" (normalized: "c:\\programdata\\microsoft\\vault\\ac658cb4-9126-49bd-b877-31eedab3f204\\154e23d0-c644-4e6f-8ce6-5069272f999f.vsch"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.478] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.478] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.479] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.479] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.479] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204\\2F1A6504-0641-44CF-8BB5-3612D865F2E5.vsch", dwFileAttributes=0x80) returned 0 [0190.479] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204\\2F1A6504-0641-44CF-8BB5-3612D865F2E5.vsch" (normalized: "c:\\programdata\\microsoft\\vault\\ac658cb4-9126-49bd-b877-31eedab3f204\\2f1a6504-0641-44cf-8bb5-3612d865f2e5.vsch"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.479] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.480] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.480] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.480] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.480] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204\\3CCD5499-87A8-4B10-A215-608888DD3B55.vsch", dwFileAttributes=0x80) returned 0 [0190.480] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204\\3CCD5499-87A8-4B10-A215-608888DD3B55.vsch" (normalized: "c:\\programdata\\microsoft\\vault\\ac658cb4-9126-49bd-b877-31eedab3f204\\3ccd5499-87a8-4b10-a215-608888dd3b55.vsch"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.481] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.481] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.481] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.481] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.481] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204\\Policy.vpol", dwFileAttributes=0x80) returned 0 [0190.482] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204\\Policy.vpol" (normalized: "c:\\programdata\\microsoft\\vault\\ac658cb4-9126-49bd-b877-31eedab3f204\\policy.vpol"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.482] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.482] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.482] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0190.482] FindClose (in: hFindFile=0x665abb5760 | out: hFindFile=0x665abb5760) returned 1 [0190.482] SetLastError (dwErrCode=0x0) [0190.482] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\vault\\ac658cb4-9126-49bd-b877-31eedab3f204\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.483] GetLastError () returned 0x5 [0190.483] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.483] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.483] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0190.483] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0190.483] SetLastError (dwErrCode=0x0) [0190.483] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Vault\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\vault\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.483] GetLastError () returned 0x5 [0190.483] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.483] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.483] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0190.483] SetLastError (dwErrCode=0x0) [0190.483] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.483] GetLastError () returned 0x5 [0190.483] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.484] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.484] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\WDF\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665abb42c0 [0190.484] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.484] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0190.484] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0190.484] SetLastError (dwErrCode=0x0) [0190.484] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\WDF\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\wdf\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.484] GetLastError () returned 0x5 [0190.484] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.484] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.484] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0190.484] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0190.484] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0190.484] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0190.484] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0190.484] SetLastError (dwErrCode=0x0) [0190.485] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.485] GetLastError () returned 0x5 [0190.485] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.485] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.485] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\WinMSIPC\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665abb4ec0 [0190.486] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.486] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.486] SetLastError (dwErrCode=0x0) [0190.486] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\WinMSIPC\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\winmsipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.486] GetLastError () returned 0x5 [0190.487] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.487] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.487] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\WinMSIPC\\Server\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb4920 [0190.487] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.487] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0190.487] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0190.487] SetLastError (dwErrCode=0x0) [0190.487] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\WinMSIPC\\Server\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\winmsipc\\server\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.487] GetLastError () returned 0x5 [0190.487] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.487] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.487] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0190.487] FindClose (in: hFindFile=0x665abb4ec0 | out: hFindFile=0x665abb4ec0) returned 1 [0190.487] SetLastError (dwErrCode=0x0) [0190.488] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\WinMSIPC\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\winmsipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.488] GetLastError () returned 0x5 [0190.488] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.488] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.488] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0190.488] SetLastError (dwErrCode=0x0) [0190.488] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.488] GetLastError () returned 0x5 [0190.488] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.488] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.488] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665abb5340 [0190.488] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.489] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.489] SetLastError (dwErrCode=0x0) [0190.489] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\wwansvc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.489] GetLastError () returned 0x5 [0190.489] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.489] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.489] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\DMProfiles\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb53a0 [0190.489] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.489] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0190.489] FindClose (in: hFindFile=0x665abb53a0 | out: hFindFile=0x665abb53a0) returned 1 [0190.489] SetLastError (dwErrCode=0x0) [0190.489] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\DMProfiles\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\wwansvc\\dmprofiles\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.490] GetLastError () returned 0x5 [0190.490] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.490] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.490] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.490] SetLastError (dwErrCode=0x0) [0190.490] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\wwansvc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.490] GetLastError () returned 0x5 [0190.490] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.490] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.490] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb5520 [0190.491] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.491] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0190.491] FindClose (in: hFindFile=0x665abb5520 | out: hFindFile=0x665abb5520) returned 1 [0190.491] SetLastError (dwErrCode=0x0) [0190.491] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\wwansvc\\profiles\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.491] GetLastError () returned 0x5 [0190.491] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.491] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.492] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0190.492] FindClose (in: hFindFile=0x665abb5340 | out: hFindFile=0x665abb5340) returned 1 [0190.492] SetLastError (dwErrCode=0x0) [0190.492] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\wwansvc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.492] GetLastError () returned 0x5 [0190.492] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.492] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.492] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0190.492] FindClose (in: hFindFile=0x665abb5460 | out: hFindFile=0x665abb5460) returned 1 [0190.492] SetLastError (dwErrCode=0x0) [0190.492] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.492] GetLastError () returned 0x5 [0190.492] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0190.493] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.493] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0190.493] SetLastError (dwErrCode=0x0) [0190.493] CreateFileW (lpFileName="C:\\ProgramData\\RyukReadMe.txt" (normalized: "c:\\programdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x430 [0190.493] GetLastError () returned 0xb7 [0190.493] CloseHandle (hObject=0x430) returned 1 [0190.493] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft OneDrive\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665abb4c20 [0190.493] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0190.493] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0190.493] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0190.493] SetLastError (dwErrCode=0x0) [0190.493] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft OneDrive\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft onedrive\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0190.494] GetLastError () returned 0xb7 [0190.494] CloseHandle (hObject=0x470) returned 1 [0190.494] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft OneDrive\\setup\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665abb5760 [0190.494] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.494] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.494] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0190.494] FindClose (in: hFindFile=0x665abb5760 | out: hFindFile=0x665abb5760) returned 1 [0190.494] SetLastError (dwErrCode=0x0) [0190.494] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft OneDrive\\setup\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft onedrive\\setup\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0190.494] GetLastError () returned 0xb7 [0190.494] CloseHandle (hObject=0x470) returned 1 [0190.495] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0190.495] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0190.495] SetLastError (dwErrCode=0x0) [0190.495] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft OneDrive\\RyukReadMe.txt" (normalized: "c:\\programdata\\microsoft onedrive\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x430 [0190.495] GetLastError () returned 0xb7 [0190.495] CloseHandle (hObject=0x430) returned 1 [0190.495] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0190.495] SetLastError (dwErrCode=0x0) [0190.495] CreateFileW (lpFileName="C:\\ProgramData\\RyukReadMe.txt" (normalized: "c:\\programdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x430 [0190.495] GetLastError () returned 0xb7 [0190.495] CloseHandle (hObject=0x430) returned 1 [0190.496] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Oracle\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665abb56a0 [0190.496] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0190.496] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0190.496] SetLastError (dwErrCode=0x0) [0190.496] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\RyukReadMe.txt" (normalized: "c:\\programdata\\oracle\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0190.496] GetLastError () returned 0xb7 [0190.496] CloseHandle (hObject=0x470) returned 1 [0190.496] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665abb4c20 [0190.497] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.497] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.497] SetLastError (dwErrCode=0x0) [0190.497] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\RyukReadMe.txt" (normalized: "c:\\programdata\\oracle\\java\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0190.498] GetLastError () returned 0xb7 [0190.498] CloseHandle (hObject=0x47c) returned 1 [0190.499] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\.oracle_jre_usage\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb4560 [0190.500] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.500] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.500] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.501] SetFileAttributesW (lpFileName="C:\\ProgramData\\Oracle\\Java\\.oracle_jre_usage\\17dfc292991c7c24.timestamp", dwFileAttributes=0x80) returned 1 [0190.501] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\.oracle_jre_usage\\17dfc292991c7c24.timestamp" (normalized: "c:\\programdata\\oracle\\java\\.oracle_jre_usage\\17dfc292991c7c24.timestamp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0190.502] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=338) returned 1 [0190.502] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=338) returned 1 [0190.502] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.502] ReadFile (in: hFile=0x570, lpBuffer=0x665da7ca98, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca98*, lpNumberOfBytesRead=0x665da7ca58*=0x19, lpOverlapped=0x0) returned 1 [0190.503] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0190.503] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ca20 | out: phKey=0x665da7ca20*=0x665ab9a5e0) returned 1 [0190.503] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0190.503] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0190.503] ReadFile (in: hFile=0x570, lpBuffer=0x665da80000, nNumberOfBytesToRead=0x152, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesRead=0x665da7ca30*=0x152, lpOverlapped=0x0) returned 1 [0190.503] CryptEncrypt (in: hKey=0x665ab9a5e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4250) returned 1 [0190.503] CryptEncrypt (in: hKey=0x665ab9a5e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665da80000*, pdwDataLen=0x665da7ca28*=0x152, dwBufLen=0xf4250 | out: pbData=0x665da80000*, pdwDataLen=0x665da7ca28*=0x160) returned 1 [0190.504] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0190.504] WriteFile (in: hFile=0x570, lpBuffer=0x665da80000*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesWritten=0x665da7ca30*=0x160, lpOverlapped=0x0) returned 1 [0190.504] WriteFile (in: hFile=0x570, lpBuffer=0x665da7ca70*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca70*, lpNumberOfBytesWritten=0x665da7ca34*=0x6, lpOverlapped=0x0) returned 1 [0190.504] CryptExportKey (in: hKey=0x665ab9a5e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ca40 | out: pbData=0x0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0190.504] CryptExportKey (in: hKey=0x665ab9a5e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7cac0, pdwDataLen=0x665da7ca40 | out: pbData=0x665da7cac0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0190.504] WriteFile (in: hFile=0x570, lpBuffer=0x665da7cac0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7cac0*, lpNumberOfBytesWritten=0x665da7ca34*=0x10c, lpOverlapped=0x0) returned 1 [0190.505] CloseHandle (hObject=0x570) returned 1 [0190.520] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.525] CryptDestroyKey (hKey=0x665ab9a5e0) returned 1 [0190.525] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.525] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.525] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0190.525] FindClose (in: hFindFile=0x665abb4560 | out: hFindFile=0x665abb4560) returned 1 [0190.529] SetLastError (dwErrCode=0x0) [0190.529] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\.oracle_jre_usage\\RyukReadMe.txt" (normalized: "c:\\programdata\\oracle\\java\\.oracle_jre_usage\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0190.529] GetLastError () returned 0xb7 [0190.529] CloseHandle (hObject=0x47c) returned 1 [0190.529] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.529] SetLastError (dwErrCode=0x0) [0190.529] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\RyukReadMe.txt" (normalized: "c:\\programdata\\oracle\\java\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0190.530] GetLastError () returned 0xb7 [0190.530] CloseHandle (hObject=0x47c) returned 1 [0190.530] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\installcache_x64\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb4ec0 [0190.530] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.530] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.530] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.530] SetFileAttributesW (lpFileName="C:\\ProgramData\\Oracle\\Java\\installcache_x64\\baseimagefam8", dwFileAttributes=0x80) returned 0 [0190.531] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\installcache_x64\\baseimagefam8" (normalized: "c:\\programdata\\oracle\\java\\installcache_x64\\baseimagefam8"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.532] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.532] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.532] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0190.532] FindClose (in: hFindFile=0x665abb4ec0 | out: hFindFile=0x665abb4ec0) returned 1 [0190.532] SetLastError (dwErrCode=0x0) [0190.532] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\installcache_x64\\RyukReadMe.txt" (normalized: "c:\\programdata\\oracle\\java\\installcache_x64\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.533] GetLastError () returned 0x5 [0190.533] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.533] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.533] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.533] SetLastError (dwErrCode=0x0) [0190.533] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\RyukReadMe.txt" (normalized: "c:\\programdata\\oracle\\java\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0190.533] GetLastError () returned 0xb7 [0190.533] CloseHandle (hObject=0x47c) returned 1 [0190.533] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb49e0 [0190.533] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.533] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.533] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.533] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.534] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0190.534] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0190.534] SetLastError (dwErrCode=0x0) [0190.534] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\RyukReadMe.txt" (normalized: "c:\\programdata\\oracle\\java\\javapath\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.534] GetLastError () returned 0x5 [0190.534] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.534] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.534] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.534] SetLastError (dwErrCode=0x0) [0190.534] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\RyukReadMe.txt" (normalized: "c:\\programdata\\oracle\\java\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0190.534] GetLastError () returned 0xb7 [0190.535] CloseHandle (hObject=0x47c) returned 1 [0190.535] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath_target_5923062\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb5160 [0190.535] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.535] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.535] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.535] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.535] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0190.535] FindClose (in: hFindFile=0x665abb5160 | out: hFindFile=0x665abb5160) returned 1 [0190.535] SetLastError (dwErrCode=0x0) [0190.535] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath_target_5923062\\RyukReadMe.txt" (normalized: "c:\\programdata\\oracle\\java\\javapath_target_5923062\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.535] GetLastError () returned 0x5 [0190.535] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.535] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.535] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.535] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0190.535] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0190.536] SetLastError (dwErrCode=0x0) [0190.536] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\RyukReadMe.txt" (normalized: "c:\\programdata\\oracle\\java\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0190.536] GetLastError () returned 0xb7 [0190.536] CloseHandle (hObject=0x470) returned 1 [0190.536] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0190.536] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0190.536] FindClose (in: hFindFile=0x665abb56a0 | out: hFindFile=0x665abb56a0) returned 1 [0190.536] SetLastError (dwErrCode=0x0) [0190.536] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\RyukReadMe.txt" (normalized: "c:\\programdata\\oracle\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x430 [0190.536] GetLastError () returned 0xb7 [0190.536] CloseHandle (hObject=0x430) returned 1 [0190.537] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0190.537] SetLastError (dwErrCode=0x0) [0190.537] CreateFileW (lpFileName="C:\\ProgramData\\RyukReadMe.txt" (normalized: "c:\\programdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x430 [0190.537] GetLastError () returned 0xb7 [0190.537] CloseHandle (hObject=0x430) returned 1 [0190.537] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665abb5160 [0190.540] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0190.540] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0190.540] SetLastError (dwErrCode=0x0) [0190.540] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.541] GetLastError () returned 0x5 [0190.541] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.541] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.541] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665abb42c0 [0190.541] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.541] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.541] SetLastError (dwErrCode=0x0) [0190.541] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.541] GetLastError () returned 0x5 [0190.541] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.541] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.541] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb56a0 [0190.542] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.542] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.542] SetLastError (dwErrCode=0x0) [0190.542] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.543] GetLastError () returned 0x5 [0190.543] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.543] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.543] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb43e0 [0190.543] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.543] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.543] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.543] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\cab1.cab", dwFileAttributes=0x80) returned 0 [0190.544] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.544] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.544] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.544] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.544] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0190.544] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0190.544] SetLastError (dwErrCode=0x0) [0190.544] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.545] GetLastError () returned 0x5 [0190.545] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.545] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.545] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0190.545] FindClose (in: hFindFile=0x665abb56a0 | out: hFindFile=0x665abb56a0) returned 1 [0190.545] SetLastError (dwErrCode=0x0) [0190.545] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.545] GetLastError () returned 0x5 [0190.545] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.545] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.545] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0190.545] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0190.545] SetLastError (dwErrCode=0x0) [0190.546] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.546] GetLastError () returned 0x5 [0190.546] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.546] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.546] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0190.546] SetLastError (dwErrCode=0x0) [0190.546] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.546] GetLastError () returned 0x5 [0190.546] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.546] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.546] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665abb5760 [0190.546] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.547] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.547] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.547] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm", dwFileAttributes=0x80) returned 0 [0190.547] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.548] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.548] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.548] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.548] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0190.548] FindClose (in: hFindFile=0x665abb5760 | out: hFindFile=0x665abb5760) returned 1 [0190.548] SetLastError (dwErrCode=0x0) [0190.548] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.549] GetLastError () returned 0x5 [0190.549] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.549] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.549] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0190.549] SetLastError (dwErrCode=0x0) [0190.549] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.549] GetLastError () returned 0x5 [0190.549] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.549] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.549] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665abb5760 [0190.549] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.549] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.549] SetLastError (dwErrCode=0x0) [0190.550] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.550] GetLastError () returned 0x5 [0190.550] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.550] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.550] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb42c0 [0190.550] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.550] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.550] SetLastError (dwErrCode=0x0) [0190.550] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.550] GetLastError () returned 0x5 [0190.550] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.550] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.551] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4ec0 [0190.551] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.551] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.551] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.551] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\cab1.cab", dwFileAttributes=0x80) returned 0 [0190.552] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.552] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.552] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.553] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.553] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.553] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi", dwFileAttributes=0x80) returned 0 [0190.553] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.553] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.554] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.554] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0190.554] FindClose (in: hFindFile=0x665abb4ec0 | out: hFindFile=0x665abb4ec0) returned 1 [0190.554] SetLastError (dwErrCode=0x0) [0190.554] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.554] GetLastError () returned 0x5 [0190.554] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.554] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.554] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0190.554] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0190.555] SetLastError (dwErrCode=0x0) [0190.555] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.555] GetLastError () returned 0x5 [0190.555] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.555] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.555] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0190.555] FindClose (in: hFindFile=0x665abb5760 | out: hFindFile=0x665abb5760) returned 1 [0190.555] SetLastError (dwErrCode=0x0) [0190.555] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.555] GetLastError () returned 0x5 [0190.555] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.555] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.555] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0190.555] SetLastError (dwErrCode=0x0) [0190.556] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.556] GetLastError () returned 0x5 [0190.556] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.556] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.556] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665abb4560 [0190.557] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.557] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.557] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.557] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm", dwFileAttributes=0x80) returned 0 [0190.558] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.558] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.558] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.559] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.559] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0190.559] FindClose (in: hFindFile=0x665abb4560 | out: hFindFile=0x665abb4560) returned 1 [0190.559] SetLastError (dwErrCode=0x0) [0190.559] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.559] GetLastError () returned 0x5 [0190.559] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.559] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.559] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0190.559] SetLastError (dwErrCode=0x0) [0190.559] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.559] GetLastError () returned 0x5 [0190.559] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.560] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.560] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{74d0e5db-b326-4dae-a6b2-445b9de1836e}\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665abb43e0 [0190.560] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.560] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.560] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.560] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{74d0e5db-b326-4dae-a6b2-445b9de1836e}\\state.rsm", dwFileAttributes=0x80) returned 0 [0190.561] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{74d0e5db-b326-4dae-a6b2-445b9de1836e}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{74d0e5db-b326-4dae-a6b2-445b9de1836e}\\state.rsm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.561] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.561] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.562] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.562] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0190.562] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0190.562] SetLastError (dwErrCode=0x0) [0190.562] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{74d0e5db-b326-4dae-a6b2-445b9de1836e}\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{74d0e5db-b326-4dae-a6b2-445b9de1836e}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.562] GetLastError () returned 0x5 [0190.562] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.562] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.562] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0190.562] SetLastError (dwErrCode=0x0) [0190.562] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.562] GetLastError () returned 0x5 [0190.562] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.563] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.563] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665abb42c0 [0190.564] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.564] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.564] SetLastError (dwErrCode=0x0) [0190.564] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.564] GetLastError () returned 0x5 [0190.564] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.564] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.564] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb4f20 [0190.564] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.564] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.564] SetLastError (dwErrCode=0x0) [0190.564] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.565] GetLastError () returned 0x5 [0190.565] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.565] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.565] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4560 [0190.565] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.566] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.566] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.566] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\cab1.cab", dwFileAttributes=0x80) returned 0 [0190.567] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.567] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.567] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.567] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.567] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0190.567] FindClose (in: hFindFile=0x665abb4560 | out: hFindFile=0x665abb4560) returned 1 [0190.568] SetLastError (dwErrCode=0x0) [0190.568] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.568] GetLastError () returned 0x5 [0190.568] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.568] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.568] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0190.568] FindClose (in: hFindFile=0x665abb4f20 | out: hFindFile=0x665abb4f20) returned 1 [0190.568] SetLastError (dwErrCode=0x0) [0190.568] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.568] GetLastError () returned 0x5 [0190.569] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.569] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.569] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0190.569] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0190.569] SetLastError (dwErrCode=0x0) [0190.569] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.569] GetLastError () returned 0x5 [0190.569] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.569] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.569] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0190.569] SetLastError (dwErrCode=0x0) [0190.569] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.569] GetLastError () returned 0x5 [0190.569] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.570] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.570] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665abb4ec0 [0190.570] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.570] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.570] SetLastError (dwErrCode=0x0) [0190.570] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.571] GetLastError () returned 0x5 [0190.571] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.571] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.571] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb42c0 [0190.571] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.571] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.571] SetLastError (dwErrCode=0x0) [0190.571] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.571] GetLastError () returned 0x5 [0190.571] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.571] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.572] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb43e0 [0190.572] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.572] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.572] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.572] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\cab1.cab", dwFileAttributes=0x80) returned 0 [0190.572] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.573] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.573] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.573] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.573] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.573] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi", dwFileAttributes=0x80) returned 0 [0190.574] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.574] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.574] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.575] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0190.575] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0190.575] SetLastError (dwErrCode=0x0) [0190.575] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.575] GetLastError () returned 0x5 [0190.575] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.575] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.575] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0190.575] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0190.575] SetLastError (dwErrCode=0x0) [0190.576] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.576] GetLastError () returned 0x5 [0190.576] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.576] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.576] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0190.576] FindClose (in: hFindFile=0x665abb4ec0 | out: hFindFile=0x665abb4ec0) returned 1 [0190.576] SetLastError (dwErrCode=0x0) [0190.576] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.576] GetLastError () returned 0x5 [0190.576] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.576] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.576] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0190.576] SetLastError (dwErrCode=0x0) [0190.576] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.577] GetLastError () returned 0x5 [0190.577] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.577] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.577] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A2563E55-3BEC-3828-8D67-E5E8B9E8B675}v14.0.23026\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665abb42c0 [0190.577] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.577] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.577] SetLastError (dwErrCode=0x0) [0190.577] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{A2563E55-3BEC-3828-8D67-E5E8B9E8B675}v14.0.23026\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{a2563e55-3bec-3828-8d67-e5e8b9e8b675}v14.0.23026\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.577] GetLastError () returned 0x5 [0190.577] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.577] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.578] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A2563E55-3BEC-3828-8D67-E5E8B9E8B675}v14.0.23026\\packages\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb43e0 [0190.578] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.578] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.578] SetLastError (dwErrCode=0x0) [0190.578] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{A2563E55-3BEC-3828-8D67-E5E8B9E8B675}v14.0.23026\\packages\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{a2563e55-3bec-3828-8d67-e5e8b9e8b675}v14.0.23026\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.579] GetLastError () returned 0x5 [0190.579] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.579] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.579] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A2563E55-3BEC-3828-8D67-E5E8B9E8B675}v14.0.23026\\packages\\vcRuntimeMinimum_x86\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4ec0 [0190.579] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.579] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.579] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.580] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{A2563E55-3BEC-3828-8D67-E5E8B9E8B675}v14.0.23026\\packages\\vcRuntimeMinimum_x86\\cab1.cab", dwFileAttributes=0x80) returned 0 [0190.580] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{A2563E55-3BEC-3828-8D67-E5E8B9E8B675}v14.0.23026\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{a2563e55-3bec-3828-8d67-e5e8b9e8b675}v14.0.23026\\packages\\vcruntimeminimum_x86\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.580] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.580] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.581] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.581] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0190.581] FindClose (in: hFindFile=0x665abb4ec0 | out: hFindFile=0x665abb4ec0) returned 1 [0190.581] SetLastError (dwErrCode=0x0) [0190.581] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{A2563E55-3BEC-3828-8D67-E5E8B9E8B675}v14.0.23026\\packages\\vcRuntimeMinimum_x86\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{a2563e55-3bec-3828-8d67-e5e8b9e8b675}v14.0.23026\\packages\\vcruntimeminimum_x86\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.581] GetLastError () returned 0x5 [0190.581] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.581] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.581] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0190.581] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0190.581] SetLastError (dwErrCode=0x0) [0190.581] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{A2563E55-3BEC-3828-8D67-E5E8B9E8B675}v14.0.23026\\packages\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{a2563e55-3bec-3828-8d67-e5e8b9e8b675}v14.0.23026\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.582] GetLastError () returned 0x5 [0190.582] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.582] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.582] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0190.582] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0190.582] SetLastError (dwErrCode=0x0) [0190.582] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{A2563E55-3BEC-3828-8D67-E5E8B9E8B675}v14.0.23026\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{a2563e55-3bec-3828-8d67-e5e8b9e8b675}v14.0.23026\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.582] GetLastError () returned 0x5 [0190.582] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.582] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.582] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0190.582] SetLastError (dwErrCode=0x0) [0190.582] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.583] GetLastError () returned 0x5 [0190.583] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.583] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.583] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665abb42c0 [0190.583] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.583] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.583] SetLastError (dwErrCode=0x0) [0190.583] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.583] GetLastError () returned 0x5 [0190.583] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.583] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.583] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb45c0 [0190.584] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.584] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.584] SetLastError (dwErrCode=0x0) [0190.584] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.584] GetLastError () returned 0x5 [0190.584] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.584] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.584] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb43e0 [0190.584] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.584] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.584] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.585] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\cab1.cab", dwFileAttributes=0x80) returned 0 [0190.585] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.585] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.585] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.585] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.585] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0190.586] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0190.586] SetLastError (dwErrCode=0x0) [0190.586] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.586] GetLastError () returned 0x5 [0190.586] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.586] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.586] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0190.586] FindClose (in: hFindFile=0x665abb45c0 | out: hFindFile=0x665abb45c0) returned 1 [0190.586] SetLastError (dwErrCode=0x0) [0190.586] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.586] GetLastError () returned 0x5 [0190.587] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.587] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.587] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0190.587] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0190.587] SetLastError (dwErrCode=0x0) [0190.587] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.587] GetLastError () returned 0x5 [0190.587] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.587] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.587] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0190.587] SetLastError (dwErrCode=0x0) [0190.587] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.587] GetLastError () returned 0x5 [0190.587] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.588] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.588] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665abb54c0 [0190.588] FindNextFileW (in: hFindFile=0x665abb54c0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.588] FindNextFileW (in: hFindFile=0x665abb54c0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.588] SetLastError (dwErrCode=0x0) [0190.588] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.589] GetLastError () returned 0x5 [0190.589] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.589] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.589] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb5340 [0190.589] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.589] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.589] SetLastError (dwErrCode=0x0) [0190.589] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.590] GetLastError () returned 0x5 [0190.590] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.590] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.590] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4ec0 [0190.590] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.590] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.590] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.590] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\cab1.cab", dwFileAttributes=0x80) returned 0 [0190.591] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.591] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.591] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.591] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.591] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.592] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi", dwFileAttributes=0x80) returned 0 [0190.592] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.592] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.592] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.592] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0190.592] FindClose (in: hFindFile=0x665abb4ec0 | out: hFindFile=0x665abb4ec0) returned 1 [0190.593] SetLastError (dwErrCode=0x0) [0190.593] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.593] GetLastError () returned 0x5 [0190.593] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.593] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.593] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0190.593] FindClose (in: hFindFile=0x665abb5340 | out: hFindFile=0x665abb5340) returned 1 [0190.593] SetLastError (dwErrCode=0x0) [0190.593] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.593] GetLastError () returned 0x5 [0190.594] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.594] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.594] FindNextFileW (in: hFindFile=0x665abb54c0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0190.594] FindClose (in: hFindFile=0x665abb54c0 | out: hFindFile=0x665abb54c0) returned 1 [0190.594] SetLastError (dwErrCode=0x0) [0190.594] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.594] GetLastError () returned 0x5 [0190.594] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.594] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.595] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0190.595] SetLastError (dwErrCode=0x0) [0190.595] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.595] GetLastError () returned 0x5 [0190.595] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.595] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.595] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665abb4f80 [0190.595] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.595] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.595] SetLastError (dwErrCode=0x0) [0190.595] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.596] GetLastError () returned 0x5 [0190.596] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.596] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.596] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb4c80 [0190.596] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.596] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.596] SetLastError (dwErrCode=0x0) [0190.596] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.596] GetLastError () returned 0x5 [0190.596] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.596] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.596] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4920 [0190.596] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.597] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.597] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.597] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\cab1.cab", dwFileAttributes=0x80) returned 0 [0190.598] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.598] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.598] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.599] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.599] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0190.599] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0190.599] SetLastError (dwErrCode=0x0) [0190.599] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.599] GetLastError () returned 0x5 [0190.599] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.599] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.599] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0190.599] FindClose (in: hFindFile=0x665abb4c80 | out: hFindFile=0x665abb4c80) returned 1 [0190.599] SetLastError (dwErrCode=0x0) [0190.599] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.600] GetLastError () returned 0x5 [0190.600] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.600] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.600] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0190.600] FindClose (in: hFindFile=0x665abb4f80 | out: hFindFile=0x665abb4f80) returned 1 [0190.600] SetLastError (dwErrCode=0x0) [0190.600] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.600] GetLastError () returned 0x5 [0190.600] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.600] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.600] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0190.600] SetLastError (dwErrCode=0x0) [0190.600] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.601] GetLastError () returned 0x5 [0190.601] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.601] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.601] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BE960C1C-7BAD-3DE6-8B1A-2616FE532845}v14.0.23026\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665abb4560 [0190.601] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.601] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.601] SetLastError (dwErrCode=0x0) [0190.601] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{BE960C1C-7BAD-3DE6-8B1A-2616FE532845}v14.0.23026\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{be960c1c-7bad-3de6-8b1a-2616fe532845}v14.0.23026\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.601] GetLastError () returned 0x5 [0190.601] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.601] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.601] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BE960C1C-7BAD-3DE6-8B1A-2616FE532845}v14.0.23026\\packages\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb4d40 [0190.601] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.602] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.602] SetLastError (dwErrCode=0x0) [0190.602] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{BE960C1C-7BAD-3DE6-8B1A-2616FE532845}v14.0.23026\\packages\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{be960c1c-7bad-3de6-8b1a-2616fe532845}v14.0.23026\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.602] GetLastError () returned 0x5 [0190.602] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.602] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.602] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BE960C1C-7BAD-3DE6-8B1A-2616FE532845}v14.0.23026\\packages\\vcRuntimeAdditional_x86\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb42c0 [0190.602] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.602] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.602] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.603] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{BE960C1C-7BAD-3DE6-8B1A-2616FE532845}v14.0.23026\\packages\\vcRuntimeAdditional_x86\\cab1.cab", dwFileAttributes=0x80) returned 0 [0190.603] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{BE960C1C-7BAD-3DE6-8B1A-2616FE532845}v14.0.23026\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{be960c1c-7bad-3de6-8b1a-2616fe532845}v14.0.23026\\packages\\vcruntimeadditional_x86\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.603] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.603] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.603] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.603] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.604] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{BE960C1C-7BAD-3DE6-8B1A-2616FE532845}v14.0.23026\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi", dwFileAttributes=0x80) returned 0 [0190.604] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{BE960C1C-7BAD-3DE6-8B1A-2616FE532845}v14.0.23026\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\programdata\\package cache\\{be960c1c-7bad-3de6-8b1a-2616fe532845}v14.0.23026\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.604] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.604] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.605] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0190.605] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0190.605] SetLastError (dwErrCode=0x0) [0190.605] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{BE960C1C-7BAD-3DE6-8B1A-2616FE532845}v14.0.23026\\packages\\vcRuntimeAdditional_x86\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{be960c1c-7bad-3de6-8b1a-2616fe532845}v14.0.23026\\packages\\vcruntimeadditional_x86\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.605] GetLastError () returned 0x5 [0190.605] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.605] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.605] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0190.605] FindClose (in: hFindFile=0x665abb4d40 | out: hFindFile=0x665abb4d40) returned 1 [0190.605] SetLastError (dwErrCode=0x0) [0190.605] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{BE960C1C-7BAD-3DE6-8B1A-2616FE532845}v14.0.23026\\packages\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{be960c1c-7bad-3de6-8b1a-2616fe532845}v14.0.23026\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.605] GetLastError () returned 0x5 [0190.606] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.606] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.606] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0190.606] FindClose (in: hFindFile=0x665abb4560 | out: hFindFile=0x665abb4560) returned 1 [0190.606] SetLastError (dwErrCode=0x0) [0190.606] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{BE960C1C-7BAD-3DE6-8B1A-2616FE532845}v14.0.23026\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{be960c1c-7bad-3de6-8b1a-2616fe532845}v14.0.23026\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.606] GetLastError () returned 0x5 [0190.606] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.606] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.606] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0190.606] SetLastError (dwErrCode=0x0) [0190.606] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.606] GetLastError () returned 0x5 [0190.606] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.606] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.607] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665abb4c20 [0190.607] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.607] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.607] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.608] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm", dwFileAttributes=0x80) returned 0 [0190.609] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.609] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.609] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.609] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.609] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0190.609] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0190.609] SetLastError (dwErrCode=0x0) [0190.609] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.610] GetLastError () returned 0x5 [0190.610] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.610] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.610] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0190.610] SetLastError (dwErrCode=0x0) [0190.610] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.610] GetLastError () returned 0x5 [0190.611] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.611] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.611] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665abb5340 [0190.611] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.611] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.611] SetLastError (dwErrCode=0x0) [0190.611] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.611] GetLastError () returned 0x5 [0190.611] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.611] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.611] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb4920 [0190.611] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.612] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.612] SetLastError (dwErrCode=0x0) [0190.612] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.612] GetLastError () returned 0x5 [0190.612] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.612] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.612] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb5280 [0190.612] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.612] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.612] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.613] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\cab1.cab", dwFileAttributes=0x80) returned 0 [0190.613] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.613] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.613] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.613] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.613] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0190.613] FindClose (in: hFindFile=0x665abb5280 | out: hFindFile=0x665abb5280) returned 1 [0190.614] SetLastError (dwErrCode=0x0) [0190.614] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.614] GetLastError () returned 0x5 [0190.614] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.614] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.614] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0190.614] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0190.614] SetLastError (dwErrCode=0x0) [0190.614] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.614] GetLastError () returned 0x5 [0190.614] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.615] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.615] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0190.615] FindClose (in: hFindFile=0x665abb5340 | out: hFindFile=0x665abb5340) returned 1 [0190.615] SetLastError (dwErrCode=0x0) [0190.615] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.615] GetLastError () returned 0x5 [0190.615] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.615] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.615] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0190.615] SetLastError (dwErrCode=0x0) [0190.615] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.615] GetLastError () returned 0x5 [0190.615] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.615] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.615] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665abb5760 [0190.616] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.616] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.616] SetLastError (dwErrCode=0x0) [0190.616] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.616] GetLastError () returned 0x5 [0190.616] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.616] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.616] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb4c20 [0190.616] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.616] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.616] SetLastError (dwErrCode=0x0) [0190.616] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.617] GetLastError () returned 0x5 [0190.617] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.617] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.617] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4560 [0190.617] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.617] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.617] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.617] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\cab1.cab", dwFileAttributes=0x80) returned 0 [0190.618] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.618] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.618] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.618] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.618] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.619] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi", dwFileAttributes=0x80) returned 0 [0190.619] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.619] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.619] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.619] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0190.619] FindClose (in: hFindFile=0x665abb4560 | out: hFindFile=0x665abb4560) returned 1 [0190.620] SetLastError (dwErrCode=0x0) [0190.620] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.620] GetLastError () returned 0x5 [0190.620] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.620] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.620] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0190.620] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0190.620] SetLastError (dwErrCode=0x0) [0190.620] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.620] GetLastError () returned 0x5 [0190.620] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.620] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.620] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0190.621] FindClose (in: hFindFile=0x665abb5760 | out: hFindFile=0x665abb5760) returned 1 [0190.621] SetLastError (dwErrCode=0x0) [0190.621] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.621] GetLastError () returned 0x5 [0190.621] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.621] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.621] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0190.621] SetLastError (dwErrCode=0x0) [0190.621] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.621] GetLastError () returned 0x5 [0190.621] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.621] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.621] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665abb4920 [0190.622] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.622] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.622] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.622] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm", dwFileAttributes=0x80) returned 0 [0190.623] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.623] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.623] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.624] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.624] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0190.624] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0190.624] SetLastError (dwErrCode=0x0) [0190.624] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.624] GetLastError () returned 0x5 [0190.624] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.624] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.624] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0190.624] SetLastError (dwErrCode=0x0) [0190.624] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.624] GetLastError () returned 0x5 [0190.624] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.624] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.625] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665abb42c0 [0190.625] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.626] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.626] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.626] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm", dwFileAttributes=0x80) returned 0 [0190.627] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.627] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.627] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.627] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.627] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0190.628] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0190.628] SetLastError (dwErrCode=0x0) [0190.628] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.628] GetLastError () returned 0x5 [0190.628] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.628] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.628] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0190.628] SetLastError (dwErrCode=0x0) [0190.628] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.628] GetLastError () returned 0x5 [0190.628] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.628] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.628] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665abb5280 [0190.629] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.629] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.629] SetLastError (dwErrCode=0x0) [0190.629] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.629] GetLastError () returned 0x5 [0190.629] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.629] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.629] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb42c0 [0190.629] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.629] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.629] SetLastError (dwErrCode=0x0) [0190.629] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.630] GetLastError () returned 0x5 [0190.630] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.630] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.630] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4da0 [0190.630] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.630] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.630] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.630] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\cab1.cab", dwFileAttributes=0x80) returned 0 [0190.631] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.631] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.631] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.631] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.631] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.632] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi", dwFileAttributes=0x80) returned 0 [0190.632] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.633] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.633] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.633] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0190.633] FindClose (in: hFindFile=0x665abb4da0 | out: hFindFile=0x665abb4da0) returned 1 [0190.633] SetLastError (dwErrCode=0x0) [0190.633] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.633] GetLastError () returned 0x5 [0190.634] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.634] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.634] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0190.634] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0190.634] SetLastError (dwErrCode=0x0) [0190.634] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.634] GetLastError () returned 0x5 [0190.634] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.634] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.634] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0190.634] FindClose (in: hFindFile=0x665abb5280 | out: hFindFile=0x665abb5280) returned 1 [0190.634] SetLastError (dwErrCode=0x0) [0190.634] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.635] GetLastError () returned 0x5 [0190.635] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.635] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.635] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0190.635] FindClose (in: hFindFile=0x665abb5160 | out: hFindFile=0x665abb5160) returned 1 [0190.635] SetLastError (dwErrCode=0x0) [0190.635] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\RyukReadMe.txt" (normalized: "c:\\programdata\\package cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.635] GetLastError () returned 0x5 [0190.635] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0190.635] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.635] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0190.635] SetLastError (dwErrCode=0x0) [0190.635] CreateFileW (lpFileName="C:\\ProgramData\\RyukReadMe.txt" (normalized: "c:\\programdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x430 [0190.636] GetLastError () returned 0xb7 [0190.636] CloseHandle (hObject=0x430) returned 1 [0190.636] FindFirstFileW (in: lpFileName="C:\\ProgramData\\regid.1991-06.com.microsoft\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665abb45c0 [0190.637] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0190.637] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0190.637] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.638] SetFileAttributesW (lpFileName="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag", dwFileAttributes=0x80) returned 0 [0190.639] CreateFileW (lpFileName="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag" (normalized: "c:\\programdata\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft office 16 click-to-run extensibility component.swidtag"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.639] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.639] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.639] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0190.639] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.640] SetFileAttributesW (lpFileName="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag", dwFileAttributes=0x80) returned 0 [0190.640] CreateFileW (lpFileName="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag" (normalized: "c:\\programdata\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft office 16 click-to-run licensing component.swidtag"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.640] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.640] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.640] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0190.640] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.641] SetFileAttributesW (lpFileName="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag", dwFileAttributes=0x80) returned 0 [0190.641] CreateFileW (lpFileName="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag" (normalized: "c:\\programdata\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft office 16 click-to-run localization component.swidtag"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.642] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.642] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.642] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0190.642] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0190.642] FindClose (in: hFindFile=0x665abb45c0 | out: hFindFile=0x665abb45c0) returned 1 [0190.643] SetLastError (dwErrCode=0x0) [0190.643] CreateFileW (lpFileName="C:\\ProgramData\\regid.1991-06.com.microsoft\\RyukReadMe.txt" (normalized: "c:\\programdata\\regid.1991-06.com.microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.646] GetLastError () returned 0x5 [0190.646] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0190.646] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.646] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0190.646] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0190.646] SetLastError (dwErrCode=0x0) [0190.646] CreateFileW (lpFileName="C:\\ProgramData\\RyukReadMe.txt" (normalized: "c:\\programdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x430 [0190.647] GetLastError () returned 0xb7 [0190.647] CloseHandle (hObject=0x430) returned 1 [0190.647] FindFirstFileW (in: lpFileName="C:\\ProgramData\\SoftwareDistribution\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665abb5760 [0190.647] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0190.647] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0190.647] FindClose (in: hFindFile=0x665abb5760 | out: hFindFile=0x665abb5760) returned 1 [0190.647] SetLastError (dwErrCode=0x0) [0190.647] CreateFileW (lpFileName="C:\\ProgramData\\SoftwareDistribution\\RyukReadMe.txt" (normalized: "c:\\programdata\\softwaredistribution\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.647] GetLastError () returned 0x5 [0190.647] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0190.647] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.648] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0190.648] SetLastError (dwErrCode=0x0) [0190.648] CreateFileW (lpFileName="C:\\ProgramData\\RyukReadMe.txt" (normalized: "c:\\programdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x430 [0190.648] GetLastError () returned 0xb7 [0190.648] CloseHandle (hObject=0x430) returned 1 [0190.648] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Start Menu\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0xffffffffffffffff [0190.648] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0190.648] SetLastError (dwErrCode=0x0) [0190.648] CreateFileW (lpFileName="C:\\ProgramData\\Start Menu\\RyukReadMe.txt" (normalized: "c:\\programdata\\start menu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.649] GetLastError () returned 0x5 [0190.649] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0190.649] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.649] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0190.649] SetLastError (dwErrCode=0x0) [0190.649] CreateFileW (lpFileName="C:\\ProgramData\\RyukReadMe.txt" (normalized: "c:\\programdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x430 [0190.649] GetLastError () returned 0xb7 [0190.649] CloseHandle (hObject=0x430) returned 1 [0190.649] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Templates\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0xffffffffffffffff [0190.649] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0190.649] SetLastError (dwErrCode=0x0) [0190.649] CreateFileW (lpFileName="C:\\ProgramData\\Templates\\RyukReadMe.txt" (normalized: "c:\\programdata\\templates\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.650] GetLastError () returned 0x5 [0190.650] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0190.650] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.650] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0190.650] SetLastError (dwErrCode=0x0) [0190.650] CreateFileW (lpFileName="C:\\ProgramData\\RyukReadMe.txt" (normalized: "c:\\programdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x430 [0190.650] GetLastError () returned 0xb7 [0190.650] CloseHandle (hObject=0x430) returned 1 [0190.650] FindFirstFileW (in: lpFileName="C:\\ProgramData\\USOPrivate\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665abb4f20 [0190.651] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0190.651] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0190.651] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0190.651] SetLastError (dwErrCode=0x0) [0190.651] CreateFileW (lpFileName="C:\\ProgramData\\USOPrivate\\RyukReadMe.txt" (normalized: "c:\\programdata\\usoprivate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0190.651] GetLastError () returned 0xb7 [0190.651] CloseHandle (hObject=0x470) returned 1 [0190.651] FindFirstFileW (in: lpFileName="C:\\ProgramData\\USOPrivate\\UpdateStore\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665abb5040 [0190.653] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.653] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.653] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.653] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.653] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOPrivate\\UpdateStore\\updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml", dwFileAttributes=0x80) returned 0 [0190.654] CreateFileW (lpFileName="C:\\ProgramData\\USOPrivate\\UpdateStore\\updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml" (normalized: "c:\\programdata\\usoprivate\\updatestore\\updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.654] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.654] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.654] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0190.654] FindClose (in: hFindFile=0x665abb5040 | out: hFindFile=0x665abb5040) returned 1 [0190.655] SetLastError (dwErrCode=0x0) [0190.655] CreateFileW (lpFileName="C:\\ProgramData\\USOPrivate\\UpdateStore\\RyukReadMe.txt" (normalized: "c:\\programdata\\usoprivate\\updatestore\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0190.658] GetLastError () returned 0xb7 [0190.658] CloseHandle (hObject=0x470) returned 1 [0190.658] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0190.658] FindClose (in: hFindFile=0x665abb4f20 | out: hFindFile=0x665abb4f20) returned 1 [0190.658] SetLastError (dwErrCode=0x0) [0190.658] CreateFileW (lpFileName="C:\\ProgramData\\USOPrivate\\RyukReadMe.txt" (normalized: "c:\\programdata\\usoprivate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x430 [0190.658] GetLastError () returned 0xb7 [0190.658] CloseHandle (hObject=0x430) returned 1 [0190.659] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0190.659] SetLastError (dwErrCode=0x0) [0190.659] CreateFileW (lpFileName="C:\\ProgramData\\RyukReadMe.txt" (normalized: "c:\\programdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x430 [0190.659] GetLastError () returned 0xb7 [0190.659] CloseHandle (hObject=0x430) returned 1 [0190.659] FindFirstFileW (in: lpFileName="C:\\ProgramData\\USOShared\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665abb42c0 [0190.659] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0190.659] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0190.659] SetLastError (dwErrCode=0x0) [0190.659] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\RyukReadMe.txt" (normalized: "c:\\programdata\\usoshared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0190.660] GetLastError () returned 0xb7 [0190.660] CloseHandle (hObject=0x470) returned 1 [0190.660] FindFirstFileW (in: lpFileName="C:\\ProgramData\\USOShared\\Logs\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665abb5040 [0190.662] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.663] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.663] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.663] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.663] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.001.etl", dwFileAttributes=0x80) returned 0 [0190.664] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.001.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.001.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.664] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.664] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.664] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.664] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.665] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.002.etl", dwFileAttributes=0x80) returned 0 [0190.666] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.002.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.002.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.666] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.666] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.666] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.666] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.667] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.003.etl", dwFileAttributes=0x80) returned 0 [0190.668] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.003.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.003.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.668] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.669] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.669] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.669] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.669] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.004.etl", dwFileAttributes=0x80) returned 0 [0190.670] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.004.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.004.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.670] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.670] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.671] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.671] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.671] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.005.etl", dwFileAttributes=0x80) returned 0 [0190.671] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.005.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.005.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.671] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.671] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.672] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.672] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.672] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.006.etl", dwFileAttributes=0x80) returned 0 [0190.673] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.006.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.006.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.673] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.673] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.673] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.673] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.674] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.007.etl", dwFileAttributes=0x80) returned 0 [0190.674] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.007.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.007.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.674] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.674] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.674] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.674] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.675] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.008.etl", dwFileAttributes=0x80) returned 0 [0190.675] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.008.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.008.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.675] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.675] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.676] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.676] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.676] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.009.etl", dwFileAttributes=0x80) returned 0 [0190.676] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.009.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.009.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.676] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.676] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.677] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.677] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.677] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.010.etl", dwFileAttributes=0x80) returned 0 [0190.678] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.010.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.010.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.678] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.678] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.679] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.679] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.679] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.011.etl", dwFileAttributes=0x80) returned 0 [0190.679] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.011.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.011.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.679] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.679] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.680] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.680] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.680] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.012.etl", dwFileAttributes=0x80) returned 0 [0190.681] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.012.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.012.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.681] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.681] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.682] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.682] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.682] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.013.etl", dwFileAttributes=0x80) returned 0 [0190.682] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.013.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.013.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.682] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.683] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.683] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.683] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.683] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.014.etl", dwFileAttributes=0x80) returned 0 [0190.683] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.014.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.014.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.684] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.684] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.684] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.684] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.684] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.015.etl", dwFileAttributes=0x80) returned 0 [0190.685] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.015.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.015.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.685] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.686] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.686] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.686] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.686] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.016.etl", dwFileAttributes=0x80) returned 0 [0190.686] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.016.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.016.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.687] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.687] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.687] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.687] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.687] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.017.etl", dwFileAttributes=0x80) returned 0 [0190.688] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.017.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.017.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.688] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.688] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.689] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.689] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.689] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.018.etl", dwFileAttributes=0x80) returned 0 [0190.690] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.018.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.018.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.691] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.691] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.691] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.691] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.691] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.019.etl", dwFileAttributes=0x80) returned 0 [0190.692] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.019.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.019.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.692] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.692] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.692] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.692] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.692] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateUx.001.etl", dwFileAttributes=0x80) returned 1 [0190.696] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateUx.001.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updateux.001.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0190.697] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=4386) returned 1 [0190.697] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=4386) returned 1 [0190.697] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x1000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.697] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0190.698] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0190.698] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665ab9a500) returned 1 [0190.698] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0190.698] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0190.698] ReadFile (in: hFile=0x47c, lpBuffer=0x665da80000, nNumberOfBytesToRead=0x1122, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesRead=0x665da7d1e0*=0x1122, lpOverlapped=0x0) returned 1 [0190.699] CryptEncrypt (in: hKey=0x665ab9a500, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0190.699] CryptEncrypt (in: hKey=0x665ab9a500, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665da80000*, pdwDataLen=0x665da7d1d8*=0x1122, dwBufLen=0xf4250 | out: pbData=0x665da80000*, pdwDataLen=0x665da7d1d8*=0x1130) returned 1 [0190.699] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0190.699] WriteFile (in: hFile=0x47c, lpBuffer=0x665da80000*, nNumberOfBytesToWrite=0x1130, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesWritten=0x665da7d1e0*=0x1130, lpOverlapped=0x0) returned 1 [0190.699] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0190.699] CryptExportKey (in: hKey=0x665ab9a500, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0190.699] CryptExportKey (in: hKey=0x665ab9a500, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0190.700] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0190.700] CloseHandle (hObject=0x47c) returned 1 [0190.715] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.721] CryptDestroyKey (hKey=0x665ab9a500) returned 1 [0190.721] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.721] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0190.721] FindClose (in: hFindFile=0x665abb5040 | out: hFindFile=0x665abb5040) returned 1 [0190.722] SetLastError (dwErrCode=0x0) [0190.722] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\RyukReadMe.txt" (normalized: "c:\\programdata\\usoshared\\logs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0190.722] GetLastError () returned 0xb7 [0190.722] CloseHandle (hObject=0x470) returned 1 [0190.722] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0190.722] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0190.722] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0190.722] SetLastError (dwErrCode=0x0) [0190.722] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\RyukReadMe.txt" (normalized: "c:\\programdata\\usoshared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x430 [0190.722] GetLastError () returned 0xb7 [0190.722] CloseHandle (hObject=0x430) returned 1 [0190.723] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 0 [0190.723] FindClose (in: hFindFile=0x665abb55e0 | out: hFindFile=0x665abb55e0) returned 1 [0190.723] SetLastError (dwErrCode=0x0) [0190.723] CreateFileW (lpFileName="C:\\ProgramData\\RyukReadMe.txt" (normalized: "c:\\programdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x688 [0190.723] GetLastError () returned 0xb7 [0190.723] CloseHandle (hObject=0x688) returned 1 [0190.723] FindNextFileW (in: hFindFile=0x665abb47a0, lpFindFileData=0x665da7eb50 | out: lpFindFileData=0x665da7eb50) returned 1 [0190.723] SetLastError (dwErrCode=0x0) [0190.723] CreateFileW (lpFileName="C:\\RyukReadMe.txt" (normalized: "c:\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.723] GetLastError () returned 0x5 [0190.723] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7eb00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7eb00, lpOverlapped=0x0) returned 0 [0190.724] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.724] FindFirstFileW (in: lpFileName="C:\\Recovery\\*.*", lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 0xffffffffffffffff [0190.724] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0190.724] SetLastError (dwErrCode=0x0) [0190.724] CreateFileW (lpFileName="C:\\Recovery\\RyukReadMe.txt" (normalized: "c:\\recovery\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.724] GetLastError () returned 0x5 [0190.724] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7eb00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7eb00, lpOverlapped=0x0) returned 0 [0190.724] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.724] FindNextFileW (in: hFindFile=0x665abb47a0, lpFindFileData=0x665da7eb50 | out: lpFindFileData=0x665da7eb50) returned 1 [0190.724] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.725] SetFileAttributesW (lpFileName="C:\\swapfile.sys", dwFileAttributes=0x80) returned 0 [0190.725] CreateFileW (lpFileName="C:\\swapfile.sys" (normalized: "c:\\swapfile.sys"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.725] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.725] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.725] FindNextFileW (in: hFindFile=0x665abb47a0, lpFindFileData=0x665da7eb50 | out: lpFindFileData=0x665da7eb50) returned 1 [0190.725] SetLastError (dwErrCode=0x0) [0190.726] CreateFileW (lpFileName="C:\\RyukReadMe.txt" (normalized: "c:\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.726] GetLastError () returned 0x5 [0190.726] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7eb00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7eb00, lpOverlapped=0x0) returned 0 [0190.726] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.726] FindFirstFileW (in: lpFileName="C:\\System Volume Information\\*.*", lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 0xffffffffffffffff [0190.726] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0190.726] SetLastError (dwErrCode=0x0) [0190.726] CreateFileW (lpFileName="C:\\System Volume Information\\RyukReadMe.txt" (normalized: "c:\\system volume information\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.726] GetLastError () returned 0x5 [0190.726] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7eb00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7eb00, lpOverlapped=0x0) returned 0 [0190.726] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.726] FindNextFileW (in: hFindFile=0x665abb47a0, lpFindFileData=0x665da7eb50 | out: lpFindFileData=0x665da7eb50) returned 1 [0190.726] SetLastError (dwErrCode=0x0) [0190.727] CreateFileW (lpFileName="C:\\RyukReadMe.txt" (normalized: "c:\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.727] GetLastError () returned 0x5 [0190.727] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7eb00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7eb00, lpOverlapped=0x0) returned 0 [0190.727] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.727] FindFirstFileW (in: lpFileName="C:\\Users\\*.*", lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 0x665abb43e0 [0190.727] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0190.727] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0190.727] SetLastError (dwErrCode=0x0) [0190.727] CreateFileW (lpFileName="C:\\Users\\RyukReadMe.txt" (normalized: "c:\\users\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.727] GetLastError () returned 0x5 [0190.727] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0190.727] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.727] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665abb4440 [0190.728] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0190.728] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0190.728] SetLastError (dwErrCode=0x0) [0190.728] CreateFileW (lpFileName="C:\\Users\\All Users\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0190.728] GetLastError () returned 0xb7 [0190.728] CloseHandle (hObject=0x470) returned 1 [0190.728] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665abb42c0 [0190.729] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.729] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.729] SetLastError (dwErrCode=0x0) [0190.729] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\adobe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0190.729] GetLastError () returned 0xb7 [0190.729] CloseHandle (hObject=0x47c) returned 1 [0190.729] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb45c0 [0190.729] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.730] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.730] SetLastError (dwErrCode=0x0) [0190.730] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\adobe\\arm\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0190.730] GetLastError () returned 0xb7 [0190.730] CloseHandle (hObject=0x570) returned 1 [0190.730] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_15.007.20033\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4560 [0190.730] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.730] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.730] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0190.730] FindClose (in: hFindFile=0x665abb4560 | out: hFindFile=0x665abb4560) returned 1 [0190.731] SetLastError (dwErrCode=0x0) [0190.731] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_15.007.20033\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\adobe\\arm\\reader_15.007.20033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0190.731] GetLastError () returned 0xb7 [0190.731] CloseHandle (hObject=0x570) returned 1 [0190.731] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.731] SetLastError (dwErrCode=0x0) [0190.731] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\adobe\\arm\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0190.732] GetLastError () returned 0xb7 [0190.732] CloseHandle (hObject=0x570) returned 1 [0190.732] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_15.023.20070\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4920 [0190.732] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.732] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.732] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0190.732] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0190.732] SetLastError (dwErrCode=0x0) [0190.732] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_15.023.20070\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\adobe\\arm\\reader_15.023.20070\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0190.733] GetLastError () returned 0xb7 [0190.733] CloseHandle (hObject=0x570) returned 1 [0190.733] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.733] SetLastError (dwErrCode=0x0) [0190.733] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\adobe\\arm\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0190.733] GetLastError () returned 0xb7 [0190.733] CloseHandle (hObject=0x570) returned 1 [0190.733] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_17.009.20058\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4560 [0190.734] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.734] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.734] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0190.734] FindClose (in: hFindFile=0x665abb4560 | out: hFindFile=0x665abb4560) returned 1 [0190.734] SetLastError (dwErrCode=0x0) [0190.734] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_17.009.20058\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\adobe\\arm\\reader_17.009.20058\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0190.734] GetLastError () returned 0xb7 [0190.734] CloseHandle (hObject=0x570) returned 1 [0190.734] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.734] SetLastError (dwErrCode=0x0) [0190.734] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\adobe\\arm\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0190.743] GetLastError () returned 0xb7 [0190.743] CloseHandle (hObject=0x570) returned 1 [0190.743] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_17.012.20098\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb5460 [0190.743] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.743] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.743] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.744] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_17.012.20098\\AcroRdrDCUpd1800920044_incr.msp", dwFileAttributes=0x80) returned 1 [0190.744] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_17.012.20098\\AcroRdrDCUpd1800920044_incr.msp" (normalized: "c:\\users\\all users\\adobe\\arm\\reader_17.012.20098\\acrordrdcupd1800920044_incr.msp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x50c [0190.745] GetFileSizeEx (in: hFile=0x50c, lpFileSize=0x665da7c288 | out: lpFileSize=0x665da7c288*=23507532) returned 1 [0190.745] GetFileSizeEx (in: hFile=0x50c, lpFileSize=0x665da7c298 | out: lpFileSize=0x665da7c298*=23507532) returned 1 [0190.745] SetFilePointerEx (in: hFile=0x50c, liDistanceToMove=0x166b12a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.745] ReadFile (in: hFile=0x50c, lpBuffer=0x665da7c2e8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7c2a8, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2e8*, lpNumberOfBytesRead=0x665da7c2a8*=0x19, lpOverlapped=0x0) returned 1 [0190.745] CloseHandle (hObject=0x50c) returned 1 [0190.745] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.746] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.746] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0190.746] FindClose (in: hFindFile=0x665abb5460 | out: hFindFile=0x665abb5460) returned 1 [0190.746] SetLastError (dwErrCode=0x0) [0190.746] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_17.012.20098\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\adobe\\arm\\reader_17.012.20098\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0190.746] GetLastError () returned 0xb7 [0190.746] CloseHandle (hObject=0x570) returned 1 [0190.746] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.746] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.746] SetLastError (dwErrCode=0x0) [0190.747] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\adobe\\arm\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0190.747] GetLastError () returned 0xb7 [0190.747] CloseHandle (hObject=0x570) returned 1 [0190.747] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\S\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4920 [0190.747] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.747] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.747] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0190.747] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0190.747] SetLastError (dwErrCode=0x0) [0190.748] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\S\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\adobe\\arm\\s\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0190.748] GetLastError () returned 0xb7 [0190.748] CloseHandle (hObject=0x570) returned 1 [0190.748] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.748] SetLastError (dwErrCode=0x0) [0190.748] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\adobe\\arm\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0190.749] GetLastError () returned 0xb7 [0190.749] CloseHandle (hObject=0x570) returned 1 [0190.749] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\{291AA914-A987-4CE9-BD63-AC0A92D435E5}\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb5040 [0190.749] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.749] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.749] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0190.749] FindClose (in: hFindFile=0x665abb5040 | out: hFindFile=0x665abb5040) returned 1 [0190.749] SetLastError (dwErrCode=0x0) [0190.749] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\{291AA914-A987-4CE9-BD63-AC0A92D435E5}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\adobe\\arm\\{291aa914-a987-4ce9-bd63-ac0a92d435e5}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0190.750] GetLastError () returned 0xb7 [0190.750] CloseHandle (hObject=0x570) returned 1 [0190.750] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0190.750] FindClose (in: hFindFile=0x665abb45c0 | out: hFindFile=0x665abb45c0) returned 1 [0190.750] SetLastError (dwErrCode=0x0) [0190.750] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\adobe\\arm\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0190.751] GetLastError () returned 0xb7 [0190.751] CloseHandle (hObject=0x47c) returned 1 [0190.751] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.751] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0190.751] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0190.751] SetLastError (dwErrCode=0x0) [0190.751] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\adobe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0190.752] GetLastError () returned 0xb7 [0190.752] CloseHandle (hObject=0x470) returned 1 [0190.752] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0190.752] SetLastError (dwErrCode=0x0) [0190.752] CreateFileW (lpFileName="C:\\Users\\All Users\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0190.752] GetLastError () returned 0xb7 [0190.752] CloseHandle (hObject=0x470) returned 1 [0190.753] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Application Data\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0xffffffffffffffff [0190.753] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0190.753] SetLastError (dwErrCode=0x0) [0190.753] CreateFileW (lpFileName="C:\\Users\\All Users\\Application Data\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\application data\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0190.753] GetLastError () returned 0xb7 [0190.753] CloseHandle (hObject=0x470) returned 1 [0190.754] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0190.754] SetLastError (dwErrCode=0x0) [0190.754] CreateFileW (lpFileName="C:\\Users\\All Users\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0190.754] GetLastError () returned 0xb7 [0190.754] CloseHandle (hObject=0x470) returned 1 [0190.754] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Comms\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665abb5340 [0190.754] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.754] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.754] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0190.754] FindClose (in: hFindFile=0x665abb5340 | out: hFindFile=0x665abb5340) returned 1 [0190.755] SetLastError (dwErrCode=0x0) [0190.755] CreateFileW (lpFileName="C:\\Users\\All Users\\Comms\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\comms\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0190.755] GetLastError () returned 0xb7 [0190.755] CloseHandle (hObject=0x470) returned 1 [0190.755] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0190.755] SetLastError (dwErrCode=0x0) [0190.755] CreateFileW (lpFileName="C:\\Users\\All Users\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0190.756] GetLastError () returned 0xb7 [0190.756] CloseHandle (hObject=0x470) returned 1 [0190.756] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Desktop\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0xffffffffffffffff [0190.756] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0190.756] SetLastError (dwErrCode=0x0) [0190.756] CreateFileW (lpFileName="C:\\Users\\All Users\\Desktop\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\desktop\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.757] GetLastError () returned 0x5 [0190.757] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0190.757] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.757] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0190.757] SetLastError (dwErrCode=0x0) [0190.757] CreateFileW (lpFileName="C:\\Users\\All Users\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0190.757] GetLastError () returned 0xb7 [0190.757] CloseHandle (hObject=0x470) returned 1 [0190.757] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Documents\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0xffffffffffffffff [0190.758] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0190.758] SetLastError (dwErrCode=0x0) [0190.758] CreateFileW (lpFileName="C:\\Users\\All Users\\Documents\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\documents\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0190.758] GetLastError () returned 0xb7 [0190.758] CloseHandle (hObject=0x470) returned 1 [0190.758] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0190.758] SetLastError (dwErrCode=0x0) [0190.758] CreateFileW (lpFileName="C:\\Users\\All Users\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0190.759] GetLastError () returned 0xb7 [0190.759] CloseHandle (hObject=0x470) returned 1 [0190.759] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665abb4560 [0190.759] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.759] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.759] SetLastError (dwErrCode=0x0) [0190.759] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.760] GetLastError () returned 0x5 [0190.760] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.760] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.760] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb4ec0 [0190.760] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.760] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.760] SetLastError (dwErrCode=0x0) [0190.760] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.761] GetLastError () returned 0x5 [0190.761] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.761] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.761] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb5760 [0190.761] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.761] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.761] SetLastError (dwErrCode=0x0) [0190.761] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\8c296b8e-6699-457c-9415-3d0647e1d775\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.761] GetLastError () returned 0x5 [0190.761] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0190.761] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.762] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\en-us.16\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb56a0 [0190.762] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.762] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.762] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.763] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\en-us.16\\MasterDescriptor.en-us.xml", dwFileAttributes=0x80) returned 0 [0190.763] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\en-us.16\\MasterDescriptor.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\8c296b8e-6699-457c-9415-3d0647e1d775\\en-us.16\\masterdescriptor.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.764] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.764] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.764] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.764] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.764] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\en-us.16\\s641033.hash", dwFileAttributes=0x80) returned 0 [0190.765] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\en-us.16\\s641033.hash" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\8c296b8e-6699-457c-9415-3d0647e1d775\\en-us.16\\s641033.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.765] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.766] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.766] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.766] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.767] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\en-us.16\\stream.x64.en-us.man.dat", dwFileAttributes=0x80) returned 0 [0190.768] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\en-us.16\\stream.x64.en-us.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\8c296b8e-6699-457c-9415-3d0647e1d775\\en-us.16\\stream.x64.en-us.man.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.768] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.768] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.769] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0190.769] FindClose (in: hFindFile=0x665abb56a0 | out: hFindFile=0x665abb56a0) returned 1 [0190.769] SetLastError (dwErrCode=0x0) [0190.770] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\en-us.16\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\8c296b8e-6699-457c-9415-3d0647e1d775\\en-us.16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.774] GetLastError () returned 0x5 [0190.774] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0190.775] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.775] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.775] SetLastError (dwErrCode=0x0) [0190.775] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\8c296b8e-6699-457c-9415-3d0647e1d775\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.775] GetLastError () returned 0x5 [0190.775] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0190.775] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.775] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\x-none.16\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb5340 [0190.776] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.776] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.776] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.777] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\x-none.16\\MasterDescriptor.x-none.xml", dwFileAttributes=0x80) returned 0 [0190.777] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\x-none.16\\MasterDescriptor.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\8c296b8e-6699-457c-9415-3d0647e1d775\\x-none.16\\masterdescriptor.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.777] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.777] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.778] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.778] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.778] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\x-none.16\\s640.hash", dwFileAttributes=0x80) returned 0 [0190.779] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\x-none.16\\s640.hash" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\8c296b8e-6699-457c-9415-3d0647e1d775\\x-none.16\\s640.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.779] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.779] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.779] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.779] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.780] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\x-none.16\\stream.x64.x-none.man.dat", dwFileAttributes=0x80) returned 0 [0190.780] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\x-none.16\\stream.x64.x-none.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\8c296b8e-6699-457c-9415-3d0647e1d775\\x-none.16\\stream.x64.x-none.man.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.781] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.781] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.781] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0190.781] FindClose (in: hFindFile=0x665abb5340 | out: hFindFile=0x665abb5340) returned 1 [0190.782] SetLastError (dwErrCode=0x0) [0190.782] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\x-none.16\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\8c296b8e-6699-457c-9415-3d0647e1d775\\x-none.16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.786] GetLastError () returned 0x5 [0190.786] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0190.786] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.787] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0190.787] FindClose (in: hFindFile=0x665abb5760 | out: hFindFile=0x665abb5760) returned 1 [0190.787] SetLastError (dwErrCode=0x0) [0190.787] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\8C296B8E-6699-457C-9415-3D0647E1D775\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\8c296b8e-6699-457c-9415-3d0647e1d775\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.787] GetLastError () returned 0x5 [0190.787] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.787] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.787] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.787] SetLastError (dwErrCode=0x0) [0190.787] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.788] GetLastError () returned 0x5 [0190.788] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.788] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.788] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb5520 [0190.788] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.788] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.788] SetLastError (dwErrCode=0x0) [0190.788] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\9d76938c-943d-439f-a135-26d02821ee05\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.788] GetLastError () returned 0x5 [0190.788] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0190.788] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.789] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\en-us.16\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb54c0 [0190.789] FindNextFileW (in: hFindFile=0x665abb54c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.789] FindNextFileW (in: hFindFile=0x665abb54c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.789] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.790] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\en-us.16\\MasterDescriptor.en-us.xml", dwFileAttributes=0x80) returned 0 [0190.790] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\en-us.16\\MasterDescriptor.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\9d76938c-943d-439f-a135-26d02821ee05\\en-us.16\\masterdescriptor.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.791] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.791] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.791] FindNextFileW (in: hFindFile=0x665abb54c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.791] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.792] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\en-us.16\\s641033.hash", dwFileAttributes=0x80) returned 0 [0190.792] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\en-us.16\\s641033.hash" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\9d76938c-943d-439f-a135-26d02821ee05\\en-us.16\\s641033.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.793] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.793] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.793] FindNextFileW (in: hFindFile=0x665abb54c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.793] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.793] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\en-us.16\\stream.x64.en-us.man.dat", dwFileAttributes=0x80) returned 0 [0190.794] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\en-us.16\\stream.x64.en-us.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\9d76938c-943d-439f-a135-26d02821ee05\\en-us.16\\stream.x64.en-us.man.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.794] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.794] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.795] FindNextFileW (in: hFindFile=0x665abb54c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0190.795] FindClose (in: hFindFile=0x665abb54c0 | out: hFindFile=0x665abb54c0) returned 1 [0190.796] SetLastError (dwErrCode=0x0) [0190.796] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\en-us.16\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\9d76938c-943d-439f-a135-26d02821ee05\\en-us.16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.801] GetLastError () returned 0x5 [0190.801] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0190.801] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.801] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.801] SetLastError (dwErrCode=0x0) [0190.801] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\9d76938c-943d-439f-a135-26d02821ee05\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.802] GetLastError () returned 0x5 [0190.802] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0190.802] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.802] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\x-none.16\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4c20 [0190.803] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.803] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.803] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.803] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\x-none.16\\MasterDescriptor.x-none.xml", dwFileAttributes=0x80) returned 0 [0190.804] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\x-none.16\\MasterDescriptor.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\9d76938c-943d-439f-a135-26d02821ee05\\x-none.16\\masterdescriptor.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.804] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.804] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.805] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.805] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.805] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\x-none.16\\s640.hash", dwFileAttributes=0x80) returned 0 [0190.805] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\x-none.16\\s640.hash" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\9d76938c-943d-439f-a135-26d02821ee05\\x-none.16\\s640.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.806] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.806] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.806] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.806] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.806] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\x-none.16\\stream.x64.x-none.man.dat", dwFileAttributes=0x80) returned 0 [0190.807] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\x-none.16\\stream.x64.x-none.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\9d76938c-943d-439f-a135-26d02821ee05\\x-none.16\\stream.x64.x-none.man.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.807] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.808] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.808] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0190.808] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0190.809] SetLastError (dwErrCode=0x0) [0190.809] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\x-none.16\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\9d76938c-943d-439f-a135-26d02821ee05\\x-none.16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.814] GetLastError () returned 0x5 [0190.814] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0190.814] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.814] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0190.814] FindClose (in: hFindFile=0x665abb5520 | out: hFindFile=0x665abb5520) returned 1 [0190.814] SetLastError (dwErrCode=0x0) [0190.814] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9D76938C-943D-439F-A135-26D02821EE05\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\9d76938c-943d-439f-a135-26d02821ee05\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.815] GetLastError () returned 0x5 [0190.815] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.815] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.815] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.815] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.815] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\DeploymentConfig.0.xml", dwFileAttributes=0x80) returned 0 [0190.816] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\DeploymentConfig.0.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\deploymentconfig.0.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.816] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.816] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.817] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.817] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.817] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\DeploymentConfig.1.xml", dwFileAttributes=0x80) returned 0 [0190.817] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\DeploymentConfig.1.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\deploymentconfig.1.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.818] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.818] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.818] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.818] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.819] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\DeploymentConfig.2.xml", dwFileAttributes=0x80) returned 0 [0190.819] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\DeploymentConfig.2.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\deploymentconfig.2.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.819] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.819] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.820] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.820] SetLastError (dwErrCode=0x0) [0190.820] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.820] GetLastError () returned 0x5 [0190.820] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.820] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.820] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4c20 [0190.821] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.821] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.821] SetLastError (dwErrCode=0x0) [0190.821] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.821] GetLastError () returned 0x5 [0190.821] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0190.821] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.821] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb42c0 [0190.821] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.821] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.821] SetLastError (dwErrCode=0x0) [0190.821] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\catalog\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.822] GetLastError () returned 0x5 [0190.822] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0190.822] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.822] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4f20 [0190.822] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0190.822] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0190.822] SetLastError (dwErrCode=0x0) [0190.822] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.823] GetLastError () returned 0x5 [0190.823] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0190.823] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.823] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb56a0 [0190.823] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0190.823] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0190.823] SetLastError (dwErrCode=0x0) [0190.823] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.823] GetLastError () returned 0x5 [0190.824] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0) returned 0 [0190.824] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.824] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665abb45c0 [0190.824] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0190.824] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0190.824] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.824] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\DeploymentConfiguration.xml", dwFileAttributes=0x80) returned 0 [0190.825] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\DeploymentConfiguration.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\deploymentconfiguration.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.825] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.825] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.826] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0190.826] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.826] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\Manifest.xml", dwFileAttributes=0x80) returned 0 [0190.826] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\Manifest.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\manifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.827] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.827] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.827] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0190.827] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.828] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\UserDeploymentConfiguration.xml", dwFileAttributes=0x80) returned 0 [0190.828] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\UserDeploymentConfiguration.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\userdeploymentconfiguration.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.829] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.829] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.829] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0190.829] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.830] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\UserManifest.xml", dwFileAttributes=0x80) returned 0 [0190.830] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\UserManifest.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\usermanifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.831] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.831] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.831] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0190.831] FindClose (in: hFindFile=0x665abb45c0 | out: hFindFile=0x665abb45c0) returned 1 [0190.831] SetLastError (dwErrCode=0x0) [0190.831] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.832] GetLastError () returned 0x5 [0190.832] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0) returned 0 [0190.832] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.832] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0190.832] FindClose (in: hFindFile=0x665abb56a0 | out: hFindFile=0x665abb56a0) returned 1 [0190.832] SetLastError (dwErrCode=0x0) [0190.832] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.833] GetLastError () returned 0x5 [0190.833] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0190.833] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.833] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0190.833] FindClose (in: hFindFile=0x665abb4f20 | out: hFindFile=0x665abb4f20) returned 1 [0190.833] SetLastError (dwErrCode=0x0) [0190.833] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.833] GetLastError () returned 0x5 [0190.833] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0190.833] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.834] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0190.834] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0190.834] SetLastError (dwErrCode=0x0) [0190.834] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\catalog\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.834] GetLastError () returned 0x5 [0190.834] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0190.834] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.834] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.834] SetLastError (dwErrCode=0x0) [0190.834] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.835] GetLastError () returned 0x5 [0190.835] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0190.835] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.835] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Integration\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb57c0 [0190.835] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.835] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.835] SetLastError (dwErrCode=0x0) [0190.835] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Integration\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\integration\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.835] GetLastError () returned 0x5 [0190.835] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0190.836] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.836] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Integration\\ShortcutBackups\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb5760 [0190.836] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0190.836] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0190.836] FindClose (in: hFindFile=0x665abb5760 | out: hFindFile=0x665abb5760) returned 1 [0190.836] SetLastError (dwErrCode=0x0) [0190.836] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Integration\\ShortcutBackups\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\integration\\shortcutbackups\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.836] GetLastError () returned 0x5 [0190.836] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0190.836] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.836] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0190.837] FindClose (in: hFindFile=0x665abb57c0 | out: hFindFile=0x665abb57c0) returned 1 [0190.837] SetLastError (dwErrCode=0x0) [0190.837] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Integration\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\integration\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.837] GetLastError () returned 0x5 [0190.837] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0190.837] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.837] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0190.837] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0190.837] SetLastError (dwErrCode=0x0) [0190.837] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.838] GetLastError () returned 0x5 [0190.838] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.838] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.838] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.838] SetLastError (dwErrCode=0x0) [0190.838] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.838] GetLastError () returned 0x5 [0190.838] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.838] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.838] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb45c0 [0190.839] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.839] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.839] SetLastError (dwErrCode=0x0) [0190.839] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.839] GetLastError () returned 0x5 [0190.839] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0190.839] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.839] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4f20 [0190.839] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.839] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.839] SetLastError (dwErrCode=0x0) [0190.839] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\eda58a0b-ad79-496a-8530-618d08767e60\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.840] GetLastError () returned 0x5 [0190.840] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0190.840] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.840] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\en-us.16\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb5040 [0190.841] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0190.841] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0190.841] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.841] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\en-us.16\\MasterDescriptor.en-us.xml", dwFileAttributes=0x80) returned 0 [0190.842] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\en-us.16\\MasterDescriptor.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\eda58a0b-ad79-496a-8530-618d08767e60\\en-us.16\\masterdescriptor.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.842] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.842] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.843] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0190.843] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.843] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\en-us.16\\s641033.hash", dwFileAttributes=0x80) returned 0 [0190.843] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\en-us.16\\s641033.hash" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\eda58a0b-ad79-496a-8530-618d08767e60\\en-us.16\\s641033.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.844] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.844] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.844] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0190.844] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.845] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\en-us.16\\stream.Platform.Culture.man.xml", dwFileAttributes=0x80) returned 0 [0190.845] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\en-us.16\\stream.Platform.Culture.man.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\eda58a0b-ad79-496a-8530-618d08767e60\\en-us.16\\stream.platform.culture.man.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.846] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.846] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.846] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0190.846] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.846] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\en-us.16\\stream.x64.en-us.hash", dwFileAttributes=0x80) returned 0 [0190.847] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\en-us.16\\stream.x64.en-us.hash" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\eda58a0b-ad79-496a-8530-618d08767e60\\en-us.16\\stream.x64.en-us.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.847] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.847] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.848] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0190.848] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.848] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\en-us.16\\stream.x64.en-us.man.dat", dwFileAttributes=0x80) returned 0 [0190.848] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\en-us.16\\stream.x64.en-us.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\eda58a0b-ad79-496a-8530-618d08767e60\\en-us.16\\stream.x64.en-us.man.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.849] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.849] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.849] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0190.849] FindClose (in: hFindFile=0x665abb5040 | out: hFindFile=0x665abb5040) returned 1 [0190.850] SetLastError (dwErrCode=0x0) [0190.850] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\en-us.16\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\eda58a0b-ad79-496a-8530-618d08767e60\\en-us.16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.855] GetLastError () returned 0x5 [0190.855] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0190.855] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.855] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.855] SetLastError (dwErrCode=0x0) [0190.855] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\eda58a0b-ad79-496a-8530-618d08767e60\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.855] GetLastError () returned 0x5 [0190.856] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0190.856] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.856] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\x-none.16\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4a40 [0190.856] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0190.857] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0190.857] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.857] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\x-none.16\\MasterDescriptor.x-none.xml", dwFileAttributes=0x80) returned 0 [0190.858] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\x-none.16\\MasterDescriptor.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\eda58a0b-ad79-496a-8530-618d08767e60\\x-none.16\\masterdescriptor.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.858] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.858] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.858] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0190.858] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.859] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\x-none.16\\s640.hash", dwFileAttributes=0x80) returned 0 [0190.859] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\x-none.16\\s640.hash" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\eda58a0b-ad79-496a-8530-618d08767e60\\x-none.16\\s640.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.860] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.860] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.860] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0190.860] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.861] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\x-none.16\\stream.Platform.x-none.man.xml", dwFileAttributes=0x80) returned 0 [0190.861] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\x-none.16\\stream.Platform.x-none.man.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\eda58a0b-ad79-496a-8530-618d08767e60\\x-none.16\\stream.platform.x-none.man.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.861] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.862] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.862] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0190.862] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.862] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\x-none.16\\stream.x64.x-none.hash", dwFileAttributes=0x80) returned 0 [0190.863] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\x-none.16\\stream.x64.x-none.hash" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\eda58a0b-ad79-496a-8530-618d08767e60\\x-none.16\\stream.x64.x-none.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.863] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.863] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.863] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0190.863] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.864] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\x-none.16\\stream.x64.x-none.man.dat", dwFileAttributes=0x80) returned 0 [0190.864] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\x-none.16\\stream.x64.x-none.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\eda58a0b-ad79-496a-8530-618d08767e60\\x-none.16\\stream.x64.x-none.man.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.865] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.865] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.865] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0190.865] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0190.866] SetLastError (dwErrCode=0x0) [0190.866] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\x-none.16\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\eda58a0b-ad79-496a-8530-618d08767e60\\x-none.16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.871] GetLastError () returned 0x5 [0190.871] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0190.871] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.871] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0190.871] FindClose (in: hFindFile=0x665abb4f20 | out: hFindFile=0x665abb4f20) returned 1 [0190.871] SetLastError (dwErrCode=0x0) [0190.872] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\EDA58A0B-AD79-496A-8530-618D08767E60\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\eda58a0b-ad79-496a-8530-618d08767e60\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.872] GetLastError () returned 0x5 [0190.872] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0190.872] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.872] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.872] SetLastError (dwErrCode=0x0) [0190.872] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.873] GetLastError () returned 0x5 [0190.873] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0190.873] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.873] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb56a0 [0190.873] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.873] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.873] SetLastError (dwErrCode=0x0) [0190.873] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.873] GetLastError () returned 0x5 [0190.873] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0190.873] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.874] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\en-us.16\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4da0 [0190.874] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0190.874] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0190.874] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.875] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\en-us.16\\MasterDescriptor.en-us.xml", dwFileAttributes=0x80) returned 0 [0190.875] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\en-us.16\\MasterDescriptor.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\en-us.16\\masterdescriptor.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.876] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.876] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.876] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0190.876] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.877] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\en-us.16\\s641033.hash", dwFileAttributes=0x80) returned 0 [0190.877] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\en-us.16\\s641033.hash" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\en-us.16\\s641033.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.878] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.878] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.878] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0190.878] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.878] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\en-us.16\\Stream.Platform.Culture.man.xml", dwFileAttributes=0x80) returned 0 [0190.879] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\en-us.16\\Stream.Platform.Culture.man.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\en-us.16\\stream.platform.culture.man.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.879] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.879] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.880] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0190.880] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.880] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\en-us.16\\stream.x64.en-us.hash", dwFileAttributes=0x80) returned 0 [0190.881] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\en-us.16\\stream.x64.en-us.hash" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\en-us.16\\stream.x64.en-us.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.882] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.882] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.882] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0190.882] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.882] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\en-us.16\\stream.x64.en-us.man.dat", dwFileAttributes=0x80) returned 0 [0190.883] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\en-us.16\\stream.x64.en-us.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\en-us.16\\stream.x64.en-us.man.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.883] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.883] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.884] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0190.884] FindClose (in: hFindFile=0x665abb4da0 | out: hFindFile=0x665abb4da0) returned 1 [0190.885] SetLastError (dwErrCode=0x0) [0190.885] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\en-us.16\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\en-us.16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.890] GetLastError () returned 0x5 [0190.890] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0190.890] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.890] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.890] SetLastError (dwErrCode=0x0) [0190.890] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.890] GetLastError () returned 0x5 [0190.890] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0190.890] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.890] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\x-none.16\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4920 [0190.892] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0190.892] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0190.892] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.892] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\x-none.16\\MasterDescriptor.x-none.xml", dwFileAttributes=0x80) returned 0 [0190.892] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\x-none.16\\MasterDescriptor.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\x-none.16\\masterdescriptor.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.893] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.893] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.893] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0190.893] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.894] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\x-none.16\\s640.hash", dwFileAttributes=0x80) returned 0 [0190.894] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\x-none.16\\s640.hash" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\x-none.16\\s640.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.895] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.895] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.895] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0190.895] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.895] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\x-none.16\\Stream.Platform.x-none.man.xml", dwFileAttributes=0x80) returned 0 [0190.896] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\x-none.16\\Stream.Platform.x-none.man.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\x-none.16\\stream.platform.x-none.man.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.896] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.896] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.897] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0190.897] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.897] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\x-none.16\\stream.x64.x-none.hash", dwFileAttributes=0x80) returned 0 [0190.897] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\x-none.16\\stream.x64.x-none.hash" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\x-none.16\\stream.x64.x-none.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.898] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.898] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.898] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0190.898] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.898] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\x-none.16\\stream.x64.x-none.man.dat", dwFileAttributes=0x80) returned 0 [0190.899] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\x-none.16\\stream.x64.x-none.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\x-none.16\\stream.x64.x-none.man.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.899] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.899] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.900] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0190.900] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0190.901] SetLastError (dwErrCode=0x0) [0190.901] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\x-none.16\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\x-none.16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.906] GetLastError () returned 0x5 [0190.906] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0190.906] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.906] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0190.906] FindClose (in: hFindFile=0x665abb56a0 | out: hFindFile=0x665abb56a0) returned 1 [0190.906] SetLastError (dwErrCode=0x0) [0190.906] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.907] GetLastError () returned 0x5 [0190.907] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0190.907] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.907] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0190.907] FindClose (in: hFindFile=0x665abb45c0 | out: hFindFile=0x665abb45c0) returned 1 [0190.907] SetLastError (dwErrCode=0x0) [0190.907] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.908] GetLastError () returned 0x5 [0190.908] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.908] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.908] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.908] SetLastError (dwErrCode=0x0) [0190.908] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.908] GetLastError () returned 0x5 [0190.908] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.908] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.908] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\UserData\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4c20 [0190.909] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.909] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0190.909] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0190.909] SetLastError (dwErrCode=0x0) [0190.909] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\UserData\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\userdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.909] GetLastError () returned 0x5 [0190.909] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.909] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.909] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.909] SetLastError (dwErrCode=0x0) [0190.909] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.910] GetLastError () returned 0x5 [0190.910] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.910] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.910] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4f20 [0190.911] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.911] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.911] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.912] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\AirSpace.Etw.man", dwFileAttributes=0x80) returned 0 [0190.912] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\AirSpace.Etw.man" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\airspace.etw.man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.912] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.913] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.913] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.913] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.913] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0190.914] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.access.access.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.914] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.914] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.914] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.915] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.915] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0190.915] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.accessmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.915] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.916] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.916] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.916] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.916] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmuiset.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0190.916] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmuiset.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.accessmuiset.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.917] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.917] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.917] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.917] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.917] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0190.918] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.dcf.dcf.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.918] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.918] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.918] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.918] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.919] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.dcfmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0190.919] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.dcfmui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.dcfmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.920] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.920] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.920] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.920] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.920] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0190.921] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.excel.excel.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.921] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.921] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.921] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.922] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.922] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.excelmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0190.923] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.excelmui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.excelmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.923] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.923] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.923] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.923] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.924] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0190.924] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.groove.groove.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.925] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.925] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.925] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.925] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.925] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.groovemui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0190.926] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.groovemui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.groovemui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.926] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.926] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.926] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.926] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.927] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0190.927] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.lync.lync.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.928] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.928] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.928] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.928] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.928] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.lyncmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0190.929] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.lyncmui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.lyncmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.929] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.929] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.930] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.930] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.930] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32mui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0190.931] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32mui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.office32mui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.931] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.931] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.931] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.931] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.932] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32ww.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0190.932] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32ww.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.office32ww.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.933] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.933] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.933] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.933] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.933] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0190.934] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.officemui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.934] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.934] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.934] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.934] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.935] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemuiset.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0190.935] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemuiset.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.officemuiset.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.936] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.936] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.936] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.936] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.936] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0190.937] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.onenote.onenote.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.937] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.937] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.938] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.938] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.938] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.onenotemui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0190.939] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.onenotemui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.onenotemui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.939] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.940] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.940] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.940] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.940] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0190.941] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.osm.osm.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.941] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.941] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.941] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.941] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.942] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0190.942] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmmui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.osmmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.943] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.943] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.943] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.943] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.943] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0190.944] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.osmux.osmux.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.944] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.944] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.945] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.945] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.945] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmuxmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0190.945] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmuxmui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.osmuxmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.946] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.946] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.946] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.946] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.947] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0190.947] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.outlook.outlook.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.948] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.948] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.948] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.948] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.948] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.outlookmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0190.949] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.outlookmui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.outlookmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.949] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.949] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.950] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.950] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.950] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0190.950] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.powerpivot.powerpivot.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.951] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.951] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.951] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.951] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.951] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0190.952] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.powerpoint.powerpoint.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.952] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.952] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.953] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.953] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.953] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.powerpointmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0190.954] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.powerpointmui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.powerpointmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.954] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.954] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.955] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.955] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.955] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0190.956] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.project.project.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.956] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.956] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.956] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.956] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.957] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.projectmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0190.957] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.projectmui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.projectmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.958] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.958] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.958] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.958] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.958] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0190.959] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.proof.culture.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.959] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.959] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.959] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.959] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.960] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.es-es.xml", dwFileAttributes=0x80) returned 0 [0190.960] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.es-es.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.proof.culture.msi.16.es-es.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.961] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.961] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.961] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.961] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.961] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml", dwFileAttributes=0x80) returned 0 [0190.962] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.proof.culture.msi.16.fr-fr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.962] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.962] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.963] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.963] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.963] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.proofing.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0190.964] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.proofing.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.proofing.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.964] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.964] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.964] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.964] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.965] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0190.965] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.publisher.publisher.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.966] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.966] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.966] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.966] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.966] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.publishermui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0190.967] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.publishermui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.publishermui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.967] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.967] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.967] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.968] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.968] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0190.968] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.shared.office.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.969] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.969] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.969] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.970] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.970] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0190.970] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.visio.visio.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.971] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.971] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.971] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.971] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.972] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.visiomui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0190.972] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.visiomui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.visiomui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.972] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.973] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.973] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.973] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.973] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0 [0190.974] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.word.word.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.974] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.974] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.974] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.974] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.975] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.wordmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0190.975] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.wordmui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.wordmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.975] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.976] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.976] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.976] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.976] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.976] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeBackgroundTaskHandlerLogon.xml", dwFileAttributes=0x80) returned 0 [0190.977] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeBackgroundTaskHandlerLogon.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\microsoft_office_officebackgroundtaskhandlerlogon.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.977] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.977] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.977] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.977] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.978] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeBackgroundTaskHandlerRegistration.xml", dwFileAttributes=0x80) returned 0 [0190.978] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeBackgroundTaskHandlerRegistration.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\microsoft_office_officebackgroundtaskhandlerregistration.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.979] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.979] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.979] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.979] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.979] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeOsfInstaller.xml", dwFileAttributes=0x80) returned 0 [0190.980] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeOsfInstaller.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\microsoft_office_officeosfinstaller.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.980] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.980] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.981] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.981] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.981] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentFallBack2016.xml", dwFileAttributes=0x80) returned 0 [0190.981] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentFallBack2016.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\microsoft_office_officetelemetryagentfallback2016.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.982] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.982] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.982] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.982] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.982] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentLogOn2016.xml", dwFileAttributes=0x80) returned 0 [0190.983] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentLogOn2016.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\microsoft_office_officetelemetryagentlogon2016.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.983] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.983] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.983] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.983] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.984] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\msoutilstat.etw.man", dwFileAttributes=0x80) returned 0 [0190.984] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\msoutilstat.etw.man" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\msoutilstat.etw.man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.985] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.985] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.985] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.985] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0190.986] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\wordEtw.man", dwFileAttributes=0x80) returned 0 [0190.986] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\wordEtw.man" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\wordetw.man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.987] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.987] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.987] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0190.987] FindClose (in: hFindFile=0x665abb4f20 | out: hFindFile=0x665abb4f20) returned 1 [0190.988] SetLastError (dwErrCode=0x0) [0190.988] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.993] GetLastError () returned 0x5 [0190.993] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.993] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.993] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0190.993] FindClose (in: hFindFile=0x665abb4ec0 | out: hFindFile=0x665abb4ec0) returned 1 [0190.993] SetLastError (dwErrCode=0x0) [0190.993] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.994] GetLastError () returned 0x5 [0190.994] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.994] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.994] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0190.994] SetLastError (dwErrCode=0x0) [0190.994] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.994] GetLastError () returned 0x5 [0190.994] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0190.994] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.995] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb5520 [0190.995] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.995] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.995] SetLastError (dwErrCode=0x0) [0190.995] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.995] GetLastError () returned 0x5 [0190.995] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.995] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.995] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb54c0 [0190.995] FindNextFileW (in: hFindFile=0x665abb54c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.996] FindNextFileW (in: hFindFile=0x665abb54c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.996] SetLastError (dwErrCode=0x0) [0190.996] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\dss\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.996] GetLastError () returned 0x5 [0190.996] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0190.996] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.996] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4920 [0190.996] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.996] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0190.996] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0190.996] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0190.996] SetLastError (dwErrCode=0x0) [0190.996] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\dss\\machinekeys\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x50c [0190.997] GetLastError () returned 0xb7 [0190.997] CloseHandle (hObject=0x50c) returned 1 [0190.997] FindNextFileW (in: hFindFile=0x665abb54c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0190.997] FindClose (in: hFindFile=0x665abb54c0 | out: hFindFile=0x665abb54c0) returned 1 [0190.997] SetLastError (dwErrCode=0x0) [0190.997] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\dss\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.998] GetLastError () returned 0x5 [0190.998] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.998] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.998] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.998] SetLastError (dwErrCode=0x0) [0190.998] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.998] GetLastError () returned 0x5 [0190.998] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.998] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.998] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb54c0 [0190.998] FindNextFileW (in: hFindFile=0x665abb54c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0190.998] FindNextFileW (in: hFindFile=0x665abb54c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0190.999] FindClose (in: hFindFile=0x665abb54c0 | out: hFindFile=0x665abb54c0) returned 1 [0190.999] SetLastError (dwErrCode=0x0) [0190.999] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\keys\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.999] GetLastError () returned 0x5 [0190.999] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0190.999] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0190.999] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0190.999] SetLastError (dwErrCode=0x0) [0190.999] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.000] GetLastError () returned 0x5 [0191.000] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.000] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.000] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\PCPKSP\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb45c0 [0191.000] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.000] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.000] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0191.000] FindClose (in: hFindFile=0x665abb45c0 | out: hFindFile=0x665abb45c0) returned 1 [0191.000] SetLastError (dwErrCode=0x0) [0191.000] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\PCPKSP\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\pcpksp\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.001] GetLastError () returned 0x5 [0191.001] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.001] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.001] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.001] SetLastError (dwErrCode=0x0) [0191.001] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.001] GetLastError () returned 0x5 [0191.002] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.002] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.002] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4920 [0191.002] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.002] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.002] SetLastError (dwErrCode=0x0) [0191.002] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.002] GetLastError () returned 0x5 [0191.002] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0191.002] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.002] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4d40 [0191.003] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.003] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.003] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.003] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys\\08e575673cce10c72090304839888e02_427a1946-e0ff-4097-8c9e-ca2c1e22780b", dwFileAttributes=0x80) returned 1 [0191.004] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys\\08e575673cce10c72090304839888e02_427a1946-e0ff-4097-8c9e-ca2c1e22780b" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\machinekeys\\08e575673cce10c72090304839888e02_427a1946-e0ff-4097-8c9e-ca2c1e22780b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x670 [0191.004] GetFileSizeEx (in: hFile=0x670, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=626) returned 1 [0191.004] GetFileSizeEx (in: hFile=0x670, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=626) returned 1 [0191.004] SetFilePointerEx (in: hFile=0x670, liDistanceToMove=0x150, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.004] ReadFile (in: hFile=0x670, lpBuffer=0x665da7bb38, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7baf8, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb38*, lpNumberOfBytesRead=0x665da7baf8*=0x19, lpOverlapped=0x0) returned 1 [0191.004] CloseHandle (hObject=0x670) returned 1 [0191.005] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.005] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.005] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0191.005] FindClose (in: hFindFile=0x665abb4d40 | out: hFindFile=0x665abb4d40) returned 1 [0191.005] SetLastError (dwErrCode=0x0) [0191.005] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\machinekeys\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x50c [0191.006] GetLastError () returned 0xb7 [0191.006] CloseHandle (hObject=0x50c) returned 1 [0191.006] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.006] SetLastError (dwErrCode=0x0) [0191.006] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.006] GetLastError () returned 0x5 [0191.006] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0191.006] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.006] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0xffffffffffffffff [0191.007] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0191.007] SetLastError (dwErrCode=0x0) [0191.007] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\s-1-5-18\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.007] GetLastError () returned 0x5 [0191.007] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0191.007] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.007] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0191.007] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0191.007] SetLastError (dwErrCode=0x0) [0191.007] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.008] GetLastError () returned 0x5 [0191.008] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.008] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.008] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.008] SetLastError (dwErrCode=0x0) [0191.008] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.008] GetLastError () returned 0x5 [0191.008] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.008] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.008] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\SystemKeys\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0xffffffffffffffff [0191.008] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0191.009] SetLastError (dwErrCode=0x0) [0191.009] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\SystemKeys\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\systemkeys\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.009] GetLastError () returned 0x5 [0191.009] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.009] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.009] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0191.009] FindClose (in: hFindFile=0x665abb5520 | out: hFindFile=0x665abb5520) returned 1 [0191.009] SetLastError (dwErrCode=0x0) [0191.009] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.010] GetLastError () returned 0x5 [0191.010] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.010] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.010] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0191.010] SetLastError (dwErrCode=0x0) [0191.010] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.010] GetLastError () returned 0x5 [0191.010] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.010] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.010] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DataMart\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb5340 [0191.010] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.010] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.010] SetLastError (dwErrCode=0x0) [0191.011] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\DataMart\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\datamart\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.011] GetLastError () returned 0x5 [0191.011] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.011] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.011] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DataMart\\PaidWiFi\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4d40 [0191.011] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.011] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.011] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0191.011] FindClose (in: hFindFile=0x665abb4d40 | out: hFindFile=0x665abb4d40) returned 1 [0191.011] SetLastError (dwErrCode=0x0) [0191.011] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\DataMart\\PaidWiFi\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\datamart\\paidwifi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0191.012] GetLastError () returned 0xb7 [0191.012] CloseHandle (hObject=0x570) returned 1 [0191.012] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0191.012] FindClose (in: hFindFile=0x665abb5340 | out: hFindFile=0x665abb5340) returned 1 [0191.012] SetLastError (dwErrCode=0x0) [0191.012] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\DataMart\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\datamart\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.012] GetLastError () returned 0x5 [0191.013] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.013] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.013] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0191.013] SetLastError (dwErrCode=0x0) [0191.013] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.013] GetLastError () returned 0x5 [0191.013] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.013] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.013] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb5520 [0191.013] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.014] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.014] SetLastError (dwErrCode=0x0) [0191.014] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\device stage\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.014] GetLastError () returned 0x5 [0191.014] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.014] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.014] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4920 [0191.014] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.014] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.014] SetLastError (dwErrCode=0x0) [0191.014] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.015] GetLastError () returned 0x5 [0191.015] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0191.015] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.015] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb45c0 [0191.016] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.017] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.017] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.017] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png", dwFileAttributes=0x80) returned 0 [0191.018] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.018] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.018] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.019] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.019] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.019] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml", dwFileAttributes=0x80) returned 0 [0191.019] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.020] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.020] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.020] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.020] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.021] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png", dwFileAttributes=0x80) returned 0 [0191.021] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.021] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.022] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.022] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.022] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.022] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png", dwFileAttributes=0x80) returned 0 [0191.023] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.023] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.023] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.023] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.023] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.024] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png", dwFileAttributes=0x80) returned 0 [0191.024] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.024] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.025] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.025] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0191.025] FindClose (in: hFindFile=0x665abb45c0 | out: hFindFile=0x665abb45c0) returned 1 [0191.026] SetLastError (dwErrCode=0x0) [0191.026] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.031] GetLastError () returned 0x5 [0191.031] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0191.031] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.031] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.031] SetLastError (dwErrCode=0x0) [0191.031] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.031] GetLastError () returned 0x5 [0191.031] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0191.031] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.031] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb45c0 [0191.031] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.032] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.032] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.032] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png", dwFileAttributes=0x80) returned 0 [0191.033] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.033] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.033] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.033] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.033] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.034] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml", dwFileAttributes=0x80) returned 0 [0191.034] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.035] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.035] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.035] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.035] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.035] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png", dwFileAttributes=0x80) returned 0 [0191.036] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.036] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.036] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.036] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0191.036] FindClose (in: hFindFile=0x665abb45c0 | out: hFindFile=0x665abb45c0) returned 1 [0191.036] SetLastError (dwErrCode=0x0) [0191.036] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.037] GetLastError () returned 0x5 [0191.037] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0191.037] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.037] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0191.037] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0191.037] SetLastError (dwErrCode=0x0) [0191.037] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.038] GetLastError () returned 0x5 [0191.038] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.038] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.038] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.038] SetLastError (dwErrCode=0x0) [0191.038] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\device stage\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.038] GetLastError () returned 0x5 [0191.038] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.038] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.038] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4da0 [0191.038] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.038] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.038] SetLastError (dwErrCode=0x0) [0191.038] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.039] GetLastError () returned 0x5 [0191.039] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0191.039] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.039] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb42c0 [0191.039] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.039] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.039] SetLastError (dwErrCode=0x0) [0191.039] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.040] GetLastError () returned 0x5 [0191.040] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0191.040] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.040] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb5040 [0191.040] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0191.040] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0191.040] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.040] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml", dwFileAttributes=0x80) returned 0 [0191.041] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\resource.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.041] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.041] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.041] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0191.042] FindClose (in: hFindFile=0x665abb5040 | out: hFindFile=0x665abb5040) returned 1 [0191.042] SetLastError (dwErrCode=0x0) [0191.042] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.042] GetLastError () returned 0x5 [0191.042] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0191.042] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.042] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.042] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.043] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico", dwFileAttributes=0x80) returned 0 [0191.043] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.043] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.043] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.044] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.044] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.044] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico", dwFileAttributes=0x80) returned 0 [0191.044] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.045] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.045] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.045] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.045] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.045] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico", dwFileAttributes=0x80) returned 0 [0191.046] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.046] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.046] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.046] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.046] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.046] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml", dwFileAttributes=0x80) returned 0 [0191.047] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.047] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.047] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.047] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.048] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.048] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico", dwFileAttributes=0x80) returned 0 [0191.048] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.049] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.049] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.049] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.049] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.049] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico", dwFileAttributes=0x80) returned 0 [0191.050] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.050] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.050] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.051] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.051] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.051] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico", dwFileAttributes=0x80) returned 0 [0191.051] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.052] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.052] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.052] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.052] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.052] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml", dwFileAttributes=0x80) returned 0 [0191.053] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.053] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.053] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.054] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.054] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.054] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico", dwFileAttributes=0x80) returned 0 [0191.054] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.055] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.055] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.055] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0191.055] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0191.055] SetLastError (dwErrCode=0x0) [0191.055] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.056] GetLastError () returned 0x5 [0191.056] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0191.056] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.056] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.056] SetLastError (dwErrCode=0x0) [0191.056] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.056] GetLastError () returned 0x5 [0191.056] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0191.056] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.056] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4c20 [0191.057] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.057] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.057] SetLastError (dwErrCode=0x0) [0191.057] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.057] GetLastError () returned 0x5 [0191.057] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0191.057] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.057] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4920 [0191.057] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0191.057] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0191.057] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.058] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml", dwFileAttributes=0x80) returned 0 [0191.058] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\resource.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.059] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.059] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.059] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0191.059] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0191.059] SetLastError (dwErrCode=0x0) [0191.059] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.059] GetLastError () returned 0x5 [0191.060] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0191.060] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.060] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.060] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.060] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico", dwFileAttributes=0x80) returned 0 [0191.060] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.061] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.061] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.061] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.061] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.061] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico", dwFileAttributes=0x80) returned 0 [0191.062] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.062] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.062] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.063] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.063] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.063] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico", dwFileAttributes=0x80) returned 0 [0191.064] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.064] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.064] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.065] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.065] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.065] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico", dwFileAttributes=0x80) returned 0 [0191.065] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.066] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.066] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.066] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.066] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.066] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico", dwFileAttributes=0x80) returned 0 [0191.067] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.067] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.067] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.067] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.067] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.068] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico", dwFileAttributes=0x80) returned 0 [0191.068] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.069] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.069] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.069] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.069] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.069] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico", dwFileAttributes=0x80) returned 0 [0191.070] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.070] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.070] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.070] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.070] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.071] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml", dwFileAttributes=0x80) returned 0 [0191.071] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.072] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.072] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.072] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0191.072] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0191.072] SetLastError (dwErrCode=0x0) [0191.072] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.072] GetLastError () returned 0x5 [0191.073] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0191.073] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.073] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0191.073] FindClose (in: hFindFile=0x665abb4da0 | out: hFindFile=0x665abb4da0) returned 1 [0191.073] SetLastError (dwErrCode=0x0) [0191.073] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.073] GetLastError () returned 0x5 [0191.073] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.073] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.073] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0191.073] FindClose (in: hFindFile=0x665abb5520 | out: hFindFile=0x665abb5520) returned 1 [0191.073] SetLastError (dwErrCode=0x0) [0191.073] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\device stage\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.074] GetLastError () returned 0x5 [0191.074] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.074] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.074] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0191.074] SetLastError (dwErrCode=0x0) [0191.074] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.074] GetLastError () returned 0x5 [0191.074] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.075] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.075] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DeviceSync\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb42c0 [0191.075] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.075] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.075] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0191.075] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0191.075] SetLastError (dwErrCode=0x0) [0191.075] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\DeviceSync\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\devicesync\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0191.075] GetLastError () returned 0xb7 [0191.075] CloseHandle (hObject=0x47c) returned 1 [0191.075] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0191.075] SetLastError (dwErrCode=0x0) [0191.076] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.076] GetLastError () returned 0x5 [0191.076] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.076] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.076] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0xffffffffffffffff [0191.076] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0191.076] SetLastError (dwErrCode=0x0) [0191.076] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.082] GetLastError () returned 0x5 [0191.082] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.082] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.082] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0191.082] SetLastError (dwErrCode=0x0) [0191.082] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.082] GetLastError () returned 0x5 [0191.082] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.082] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.082] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb4920 [0191.083] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.083] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.083] SetLastError (dwErrCode=0x0) [0191.083] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\drm\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.083] GetLastError () returned 0x5 [0191.083] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.083] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.083] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\Server\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb56a0 [0191.083] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.083] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0191.083] FindClose (in: hFindFile=0x665abb56a0 | out: hFindFile=0x665abb56a0) returned 1 [0191.084] SetLastError (dwErrCode=0x0) [0191.084] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\Server\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\drm\\server\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.084] GetLastError () returned 0x5 [0191.084] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.084] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.084] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0191.084] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0191.084] SetLastError (dwErrCode=0x0) [0191.084] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\drm\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.085] GetLastError () returned 0x5 [0191.085] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.085] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.085] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0191.085] SetLastError (dwErrCode=0x0) [0191.085] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.085] GetLastError () returned 0x5 [0191.085] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.085] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.085] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb45c0 [0191.085] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.086] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.086] SetLastError (dwErrCode=0x0) [0191.086] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\event viewer\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.086] GetLastError () returned 0x5 [0191.086] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.086] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.086] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb5160 [0191.086] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.086] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.086] SetLastError (dwErrCode=0x0) [0191.086] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\event viewer\\views\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.087] GetLastError () returned 0x5 [0191.087] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0191.087] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.087] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4920 [0191.087] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.087] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0191.087] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0191.087] SetLastError (dwErrCode=0x0) [0191.087] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\event viewer\\views\\applicationviewsrootnode\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.088] GetLastError () returned 0x5 [0191.088] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0191.088] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.088] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0191.088] FindClose (in: hFindFile=0x665abb5160 | out: hFindFile=0x665abb5160) returned 1 [0191.088] SetLastError (dwErrCode=0x0) [0191.088] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\event viewer\\views\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.088] GetLastError () returned 0x5 [0191.088] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.088] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.088] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0191.088] FindClose (in: hFindFile=0x665abb45c0 | out: hFindFile=0x665abb45c0) returned 1 [0191.088] SetLastError (dwErrCode=0x0) [0191.088] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\event viewer\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.089] GetLastError () returned 0x5 [0191.089] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.089] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.089] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0191.089] SetLastError (dwErrCode=0x0) [0191.089] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.089] GetLastError () returned 0x5 [0191.090] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.090] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.090] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb5040 [0191.090] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.090] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.090] SetLastError (dwErrCode=0x0) [0191.090] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.090] GetLastError () returned 0x5 [0191.090] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.090] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.090] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\INT\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb5340 [0191.090] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.091] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.091] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0191.091] FindClose (in: hFindFile=0x665abb5340 | out: hFindFile=0x665abb5340) returned 1 [0191.091] SetLastError (dwErrCode=0x0) [0191.091] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\INT\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\int\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.091] GetLastError () returned 0x5 [0191.091] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.091] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.091] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.091] SetLastError (dwErrCode=0x0) [0191.091] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.092] GetLastError () returned 0x5 [0191.092] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.092] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.092] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\production\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4920 [0191.092] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.092] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.092] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.092] SetLastError (dwErrCode=0x0) [0191.092] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\production\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\production\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.092] GetLastError () returned 0x5 [0191.092] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0191.093] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.093] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\production\\temp\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb42c0 [0191.093] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.093] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0191.093] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0191.093] SetLastError (dwErrCode=0x0) [0191.093] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\production\\temp\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\production\\temp\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.093] GetLastError () returned 0x5 [0191.093] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0191.093] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.093] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0191.093] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0191.094] SetLastError (dwErrCode=0x0) [0191.094] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\production\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\production\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.094] GetLastError () returned 0x5 [0191.094] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.094] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.094] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0191.094] FindClose (in: hFindFile=0x665abb5040 | out: hFindFile=0x665abb5040) returned 1 [0191.095] SetLastError (dwErrCode=0x0) [0191.095] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.095] GetLastError () returned 0x5 [0191.095] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.095] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.095] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0191.095] SetLastError (dwErrCode=0x0) [0191.095] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.095] GetLastError () returned 0x5 [0191.096] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.096] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.096] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MapData\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb4c80 [0191.096] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.096] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0191.096] FindClose (in: hFindFile=0x665abb4c80 | out: hFindFile=0x665abb4c80) returned 1 [0191.096] SetLastError (dwErrCode=0x0) [0191.096] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\MapData\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\mapdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.096] GetLastError () returned 0x5 [0191.096] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.096] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.096] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0191.096] SetLastError (dwErrCode=0x0) [0191.097] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.097] GetLastError () returned 0x5 [0191.097] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.097] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.097] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb5340 [0191.097] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.097] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.097] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.098] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\Active.GRL", dwFileAttributes=0x80) returned 1 [0191.098] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\Active.GRL" (normalized: "c:\\users\\all users\\microsoft\\mf\\active.grl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0191.099] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=15538) returned 1 [0191.099] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=15538) returned 1 [0191.099] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x3b90, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.099] ReadFile (in: hFile=0x570, lpBuffer=0x665da7ca98, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca98*, lpNumberOfBytesRead=0x665da7ca58*=0x19, lpOverlapped=0x0) returned 1 [0191.099] CloseHandle (hObject=0x570) returned 1 [0191.099] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.099] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.099] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.100] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\Pending.GRL", dwFileAttributes=0x80) returned 1 [0191.100] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\Pending.GRL" (normalized: "c:\\users\\all users\\microsoft\\mf\\pending.grl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0191.101] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=15538) returned 1 [0191.101] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=15538) returned 1 [0191.101] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x3b90, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.101] ReadFile (in: hFile=0x570, lpBuffer=0x665da7ca98, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca98*, lpNumberOfBytesRead=0x665da7ca58*=0x19, lpOverlapped=0x0) returned 1 [0191.101] CloseHandle (hObject=0x570) returned 1 [0191.101] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.101] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0191.101] FindClose (in: hFindFile=0x665abb5340 | out: hFindFile=0x665abb5340) returned 1 [0191.101] SetLastError (dwErrCode=0x0) [0191.101] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\mf\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.102] GetLastError () returned 0x5 [0191.102] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.102] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.102] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0191.102] SetLastError (dwErrCode=0x0) [0191.102] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.102] GetLastError () returned 0x5 [0191.102] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.102] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.102] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb4ec0 [0191.103] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.103] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.103] SetLastError (dwErrCode=0x0) [0191.103] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\netframework\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.103] GetLastError () returned 0x5 [0191.103] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.103] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.103] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb45c0 [0191.103] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.103] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.103] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0191.104] FindClose (in: hFindFile=0x665abb45c0 | out: hFindFile=0x665abb45c0) returned 1 [0191.104] SetLastError (dwErrCode=0x0) [0191.104] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\netframework\\breadcrumbstore\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.104] GetLastError () returned 0x5 [0191.104] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.104] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.104] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0191.104] FindClose (in: hFindFile=0x665abb4ec0 | out: hFindFile=0x665abb4ec0) returned 1 [0191.104] SetLastError (dwErrCode=0x0) [0191.104] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\netframework\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.105] GetLastError () returned 0x5 [0191.105] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.105] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.105] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0191.105] SetLastError (dwErrCode=0x0) [0191.105] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.105] GetLastError () returned 0x5 [0191.105] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.105] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.105] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb5760 [0191.106] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.106] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.106] SetLastError (dwErrCode=0x0) [0191.106] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\network\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.106] GetLastError () returned 0x5 [0191.106] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.106] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.106] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb56a0 [0191.106] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.106] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0191.106] FindClose (in: hFindFile=0x665abb56a0 | out: hFindFile=0x665abb56a0) returned 1 [0191.107] SetLastError (dwErrCode=0x0) [0191.107] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\network\\connections\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.107] GetLastError () returned 0x5 [0191.107] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.107] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.107] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.107] SetLastError (dwErrCode=0x0) [0191.107] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\network\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.108] GetLastError () returned 0x5 [0191.108] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.108] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.108] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0xffffffffffffffff [0191.108] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0191.108] SetLastError (dwErrCode=0x0) [0191.108] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.108] GetLastError () returned 0x5 [0191.108] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.108] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.108] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0191.108] FindClose (in: hFindFile=0x665abb5760 | out: hFindFile=0x665abb5760) returned 1 [0191.108] SetLastError (dwErrCode=0x0) [0191.109] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\network\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.109] GetLastError () returned 0x5 [0191.109] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.109] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.109] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0191.109] SetLastError (dwErrCode=0x0) [0191.109] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.109] GetLastError () returned 0x5 [0191.109] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.110] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.110] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Office\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb4c20 [0191.110] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.110] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.111] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.111] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Office\\ClickToRunPackageLocker", dwFileAttributes=0x80) returned 0 [0191.111] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Office\\ClickToRunPackageLocker" (normalized: "c:\\users\\all users\\microsoft\\office\\clicktorunpackagelocker"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.112] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.112] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.112] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0191.112] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0191.112] SetLastError (dwErrCode=0x0) [0191.112] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Office\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\office\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.112] GetLastError () returned 0x5 [0191.113] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.113] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.113] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0191.113] SetLastError (dwErrCode=0x0) [0191.113] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.113] GetLastError () returned 0x5 [0191.113] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.113] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.113] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb5280 [0191.113] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.113] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.113] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.114] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\countrytable.xml", dwFileAttributes=0x80) returned 0 [0191.114] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\countrytable.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\countrytable.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.115] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.115] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.115] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.115] SetLastError (dwErrCode=0x0) [0191.115] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.115] GetLastError () returned 0x5 [0191.115] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.115] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.115] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb45c0 [0191.116] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.116] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.116] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.116] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\customizations.xml", dwFileAttributes=0x80) returned 0 [0191.116] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.117] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.117] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.117] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.117] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.117] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\MasterDatastore.xml", dwFileAttributes=0x80) returned 0 [0191.118] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\masterdatastore.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.118] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.118] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.119] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.119] SetLastError (dwErrCode=0x0) [0191.119] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.119] GetLastError () returned 0x5 [0191.119] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0191.119] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.119] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4c20 [0191.119] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.119] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.119] SetLastError (dwErrCode=0x0) [0191.119] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.120] GetLastError () returned 0x5 [0191.120] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0191.120] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.120] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb56a0 [0191.120] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0191.120] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0191.120] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.120] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime\\Power_0.provxml", dwFileAttributes=0x80) returned 0 [0191.121] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime\\Power_0.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\prov\\runtime\\power_0.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.121] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.121] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.122] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0191.122] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.122] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime\\Power_1.provxml", dwFileAttributes=0x80) returned 0 [0191.122] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime\\Power_1.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\prov\\runtime\\power_1.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.123] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.123] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.123] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0191.123] FindClose (in: hFindFile=0x665abb56a0 | out: hFindFile=0x665abb56a0) returned 1 [0191.123] SetLastError (dwErrCode=0x0) [0191.123] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\prov\\runtime\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.124] GetLastError () returned 0x5 [0191.124] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0191.124] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.124] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.124] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.124] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime.xml", dwFileAttributes=0x80) returned 0 [0191.125] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\prov\\runtime.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.125] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.125] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.126] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0191.126] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0191.126] SetLastError (dwErrCode=0x0) [0191.126] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.126] GetLastError () returned 0x5 [0191.126] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0191.127] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.127] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0191.127] FindClose (in: hFindFile=0x665abb45c0 | out: hFindFile=0x665abb45c0) returned 1 [0191.127] SetLastError (dwErrCode=0x0) [0191.127] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.127] GetLastError () returned 0x5 [0191.127] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.127] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.127] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.127] SetLastError (dwErrCode=0x0) [0191.127] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.128] GetLastError () returned 0x5 [0191.128] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.128] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.128] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4920 [0191.128] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.128] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.128] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.128] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\customizations.xml", dwFileAttributes=0x80) returned 0 [0191.129] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.129] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.129] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.130] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.130] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.130] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\MasterDatastore.xml", dwFileAttributes=0x80) returned 0 [0191.130] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\masterdatastore.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.131] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.131] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.131] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.131] SetLastError (dwErrCode=0x0) [0191.131] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.131] GetLastError () returned 0x5 [0191.131] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0191.131] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.132] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4ec0 [0191.132] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.132] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.132] SetLastError (dwErrCode=0x0) [0191.132] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.132] GetLastError () returned 0x5 [0191.132] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0191.132] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.132] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb5340 [0191.132] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0191.132] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0191.133] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.133] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime\\Power_0.provxml", dwFileAttributes=0x80) returned 0 [0191.133] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime\\Power_0.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\prov\\runtime\\power_0.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.134] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.134] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.134] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0191.134] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.134] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime\\Power_1.provxml", dwFileAttributes=0x80) returned 0 [0191.135] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime\\Power_1.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\prov\\runtime\\power_1.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.135] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.135] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.135] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0191.135] FindClose (in: hFindFile=0x665abb5340 | out: hFindFile=0x665abb5340) returned 1 [0191.135] SetLastError (dwErrCode=0x0) [0191.136] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\prov\\runtime\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.136] GetLastError () returned 0x5 [0191.136] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0191.136] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.136] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.136] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.136] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime.xml", dwFileAttributes=0x80) returned 0 [0191.137] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\prov\\runtime.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.137] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.137] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.137] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0191.137] FindClose (in: hFindFile=0x665abb4ec0 | out: hFindFile=0x665abb4ec0) returned 1 [0191.138] SetLastError (dwErrCode=0x0) [0191.138] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.138] GetLastError () returned 0x5 [0191.138] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0191.138] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.138] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0191.138] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0191.138] SetLastError (dwErrCode=0x0) [0191.138] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.139] GetLastError () returned 0x5 [0191.139] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.139] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.139] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.139] SetLastError (dwErrCode=0x0) [0191.139] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.139] GetLastError () returned 0x5 [0191.139] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.139] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.139] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb42c0 [0191.139] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.140] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.140] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.140] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\customizations.xml", dwFileAttributes=0x80) returned 0 [0191.140] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.141] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.141] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.141] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.141] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.142] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\MasterDatastore.xml", dwFileAttributes=0x80) returned 0 [0191.142] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\masterdatastore.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.143] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.143] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.143] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.143] SetLastError (dwErrCode=0x0) [0191.143] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.143] GetLastError () returned 0x5 [0191.143] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0191.143] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.143] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4920 [0191.144] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.144] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.144] SetLastError (dwErrCode=0x0) [0191.144] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.144] GetLastError () returned 0x5 [0191.144] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0191.144] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.144] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb45c0 [0191.144] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0191.144] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0191.144] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.145] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime\\Power_0.provxml", dwFileAttributes=0x80) returned 0 [0191.145] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime\\Power_0.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\prov\\runtime\\power_0.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.145] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.145] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.146] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0191.146] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.146] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime\\Power_1.provxml", dwFileAttributes=0x80) returned 0 [0191.146] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime\\Power_1.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\prov\\runtime\\power_1.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.147] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.147] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.147] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0191.147] FindClose (in: hFindFile=0x665abb45c0 | out: hFindFile=0x665abb45c0) returned 1 [0191.147] SetLastError (dwErrCode=0x0) [0191.147] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\prov\\runtime\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.148] GetLastError () returned 0x5 [0191.148] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0191.148] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.148] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.148] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.148] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime.xml", dwFileAttributes=0x80) returned 0 [0191.149] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\prov\\runtime.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.149] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.149] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.149] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0191.149] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0191.149] SetLastError (dwErrCode=0x0) [0191.150] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.150] GetLastError () returned 0x5 [0191.150] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0191.150] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.150] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0191.150] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0191.150] SetLastError (dwErrCode=0x0) [0191.150] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.151] GetLastError () returned 0x5 [0191.151] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.151] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.151] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.151] SetLastError (dwErrCode=0x0) [0191.151] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.151] GetLastError () returned 0x5 [0191.151] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.151] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.151] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb57c0 [0191.151] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.151] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.151] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.152] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\customizations.xml", dwFileAttributes=0x80) returned 0 [0191.152] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.153] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.153] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.153] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.153] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.153] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\MasterDatastore.xml", dwFileAttributes=0x80) returned 0 [0191.154] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\masterdatastore.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.154] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.154] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.154] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.154] SetLastError (dwErrCode=0x0) [0191.154] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.155] GetLastError () returned 0x5 [0191.155] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0191.155] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.155] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb42c0 [0191.155] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.155] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.155] SetLastError (dwErrCode=0x0) [0191.155] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.156] GetLastError () returned 0x5 [0191.156] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0191.156] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.156] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb56a0 [0191.156] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0191.156] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0191.156] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.156] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime\\Power_0.provxml", dwFileAttributes=0x80) returned 0 [0191.157] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime\\Power_0.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\prov\\runtime\\power_0.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.158] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.158] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.158] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0191.158] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.159] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime\\Power_1.provxml", dwFileAttributes=0x80) returned 0 [0191.159] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime\\Power_1.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\prov\\runtime\\power_1.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.159] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.159] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.160] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0191.160] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.160] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime\\Power_2.provxml", dwFileAttributes=0x80) returned 0 [0191.160] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime\\Power_2.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\prov\\runtime\\power_2.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.161] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.161] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.161] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0191.161] FindClose (in: hFindFile=0x665abb56a0 | out: hFindFile=0x665abb56a0) returned 1 [0191.161] SetLastError (dwErrCode=0x0) [0191.161] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\prov\\runtime\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.162] GetLastError () returned 0x5 [0191.162] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0191.162] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.162] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.162] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.162] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime.xml", dwFileAttributes=0x80) returned 0 [0191.163] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\prov\\runtime.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.163] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.163] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.163] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0191.163] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0191.163] SetLastError (dwErrCode=0x0) [0191.163] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.164] GetLastError () returned 0x5 [0191.164] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0191.164] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.164] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0191.164] FindClose (in: hFindFile=0x665abb57c0 | out: hFindFile=0x665abb57c0) returned 1 [0191.164] SetLastError (dwErrCode=0x0) [0191.164] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.165] GetLastError () returned 0x5 [0191.165] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.165] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.165] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.165] SetLastError (dwErrCode=0x0) [0191.165] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.165] GetLastError () returned 0x5 [0191.165] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.165] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.165] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb5460 [0191.165] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.166] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.166] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.166] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\customizations.xml", dwFileAttributes=0x80) returned 0 [0191.166] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.167] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.167] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.167] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.167] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.167] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\MasterDatastore.xml", dwFileAttributes=0x80) returned 0 [0191.168] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\masterdatastore.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.168] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.168] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.169] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.169] SetLastError (dwErrCode=0x0) [0191.169] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.169] GetLastError () returned 0x5 [0191.169] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0191.169] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.169] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4ec0 [0191.169] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.169] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.169] SetLastError (dwErrCode=0x0) [0191.169] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.170] GetLastError () returned 0x5 [0191.170] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0191.170] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.170] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb56a0 [0191.170] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0191.170] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0191.170] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.171] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime\\Power_0.provxml", dwFileAttributes=0x80) returned 0 [0191.171] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime\\Power_0.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\prov\\runtime\\power_0.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.171] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.171] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.172] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0191.172] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.172] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime\\Power_1.provxml", dwFileAttributes=0x80) returned 0 [0191.173] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime\\Power_1.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\prov\\runtime\\power_1.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.173] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.173] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.173] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0191.174] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.174] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime\\Power_2.provxml", dwFileAttributes=0x80) returned 0 [0191.174] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime\\Power_2.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\prov\\runtime\\power_2.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.175] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.175] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.175] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0191.175] FindClose (in: hFindFile=0x665abb56a0 | out: hFindFile=0x665abb56a0) returned 1 [0191.175] SetLastError (dwErrCode=0x0) [0191.175] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\prov\\runtime\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.175] GetLastError () returned 0x5 [0191.175] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0191.175] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.175] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.175] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.176] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime.xml", dwFileAttributes=0x80) returned 0 [0191.176] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\prov\\runtime.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.176] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.176] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.177] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0191.177] FindClose (in: hFindFile=0x665abb4ec0 | out: hFindFile=0x665abb4ec0) returned 1 [0191.177] SetLastError (dwErrCode=0x0) [0191.177] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.177] GetLastError () returned 0x5 [0191.177] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0191.177] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.177] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0191.177] FindClose (in: hFindFile=0x665abb5460 | out: hFindFile=0x665abb5460) returned 1 [0191.177] SetLastError (dwErrCode=0x0) [0191.177] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.178] GetLastError () returned 0x5 [0191.178] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.178] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.178] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.178] SetLastError (dwErrCode=0x0) [0191.178] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.178] GetLastError () returned 0x5 [0191.178] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.178] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.178] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb42c0 [0191.179] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.179] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.179] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.179] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\customizations.xml", dwFileAttributes=0x80) returned 0 [0191.179] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.180] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.180] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.180] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.180] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.181] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\MasterDatastore.xml", dwFileAttributes=0x80) returned 0 [0191.181] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\masterdatastore.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.181] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.181] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.182] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.182] SetLastError (dwErrCode=0x0) [0191.182] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.182] GetLastError () returned 0x5 [0191.182] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0191.182] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.182] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb45c0 [0191.183] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.183] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.183] SetLastError (dwErrCode=0x0) [0191.183] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.183] GetLastError () returned 0x5 [0191.183] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0191.183] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.183] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RunTime\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4a40 [0191.183] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0191.183] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0191.183] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.184] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RunTime\\Power_0.provxml", dwFileAttributes=0x80) returned 0 [0191.184] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RunTime\\Power_0.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\prov\\runtime\\power_0.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.185] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.185] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.185] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0191.185] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0191.185] SetLastError (dwErrCode=0x0) [0191.185] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RunTime\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\prov\\runtime\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.186] GetLastError () returned 0x5 [0191.186] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0191.186] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.186] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.186] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.186] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RunTime.xml", dwFileAttributes=0x80) returned 0 [0191.186] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\prov\\runtime.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.187] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.187] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.187] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0191.187] FindClose (in: hFindFile=0x665abb45c0 | out: hFindFile=0x665abb45c0) returned 1 [0191.187] SetLastError (dwErrCode=0x0) [0191.187] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.188] GetLastError () returned 0x5 [0191.188] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0191.188] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.188] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0191.188] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0191.188] SetLastError (dwErrCode=0x0) [0191.188] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.189] GetLastError () returned 0x5 [0191.189] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.189] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.189] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.189] SetLastError (dwErrCode=0x0) [0191.189] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.190] GetLastError () returned 0x5 [0191.190] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.190] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.190] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4c20 [0191.190] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.190] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.190] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.190] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\customizations.xml", dwFileAttributes=0x80) returned 0 [0191.191] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.191] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.191] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.191] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.191] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.192] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\MasterDatastore.xml", dwFileAttributes=0x80) returned 0 [0191.192] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\masterdatastore.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.193] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.193] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.193] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.193] SetLastError (dwErrCode=0x0) [0191.193] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.193] GetLastError () returned 0x5 [0191.193] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0191.193] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.194] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb5340 [0191.194] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.194] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.194] SetLastError (dwErrCode=0x0) [0191.194] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.194] GetLastError () returned 0x5 [0191.194] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0191.194] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.194] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RunTime\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4f80 [0191.194] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0191.195] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0191.195] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.195] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RunTime\\Power_0.provxml", dwFileAttributes=0x80) returned 0 [0191.195] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RunTime\\Power_0.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\prov\\runtime\\power_0.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.196] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.196] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.196] FindNextFileW (in: hFindFile=0x665abb4f80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0191.196] FindClose (in: hFindFile=0x665abb4f80 | out: hFindFile=0x665abb4f80) returned 1 [0191.196] SetLastError (dwErrCode=0x0) [0191.196] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RunTime\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\prov\\runtime\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.197] GetLastError () returned 0x5 [0191.197] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0191.197] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.197] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.197] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.197] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RunTime.xml", dwFileAttributes=0x80) returned 0 [0191.198] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\prov\\runtime.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.198] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.198] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.198] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0191.198] FindClose (in: hFindFile=0x665abb5340 | out: hFindFile=0x665abb5340) returned 1 [0191.198] SetLastError (dwErrCode=0x0) [0191.198] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.199] GetLastError () returned 0x5 [0191.199] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0191.199] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.199] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0191.199] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0191.199] SetLastError (dwErrCode=0x0) [0191.199] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.199] GetLastError () returned 0x5 [0191.199] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.200] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.200] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.200] SetLastError (dwErrCode=0x0) [0191.200] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.200] GetLastError () returned 0x5 [0191.200] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.200] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.200] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb5160 [0191.200] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.200] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.200] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.201] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\customizations.xml", dwFileAttributes=0x80) returned 0 [0191.201] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.202] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.202] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.202] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.202] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.202] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\MasterDatastore.xml", dwFileAttributes=0x80) returned 0 [0191.203] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\masterdatastore.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.203] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.203] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.203] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.203] SetLastError (dwErrCode=0x0) [0191.203] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.210] GetLastError () returned 0x5 [0191.210] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0191.210] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.210] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb54c0 [0191.211] FindNextFileW (in: hFindFile=0x665abb54c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.211] FindNextFileW (in: hFindFile=0x665abb54c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.211] SetLastError (dwErrCode=0x0) [0191.211] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.211] GetLastError () returned 0x5 [0191.211] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0191.211] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.211] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RunTime\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb5340 [0191.211] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0191.211] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0191.211] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.212] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RunTime\\Power_0.provxml", dwFileAttributes=0x80) returned 0 [0191.212] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RunTime\\Power_0.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\prov\\runtime\\power_0.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.212] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.212] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.213] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0191.213] FindClose (in: hFindFile=0x665abb5340 | out: hFindFile=0x665abb5340) returned 1 [0191.213] SetLastError (dwErrCode=0x0) [0191.213] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RunTime\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\prov\\runtime\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.213] GetLastError () returned 0x5 [0191.213] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0191.213] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.213] FindNextFileW (in: hFindFile=0x665abb54c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.214] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.214] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RunTime.xml", dwFileAttributes=0x80) returned 0 [0191.214] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\prov\\runtime.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.215] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.215] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.215] FindNextFileW (in: hFindFile=0x665abb54c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0191.215] FindClose (in: hFindFile=0x665abb54c0 | out: hFindFile=0x665abb54c0) returned 1 [0191.215] SetLastError (dwErrCode=0x0) [0191.215] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.216] GetLastError () returned 0x5 [0191.216] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0191.216] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.216] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0191.216] FindClose (in: hFindFile=0x665abb5160 | out: hFindFile=0x665abb5160) returned 1 [0191.216] SetLastError (dwErrCode=0x0) [0191.216] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.216] GetLastError () returned 0x5 [0191.216] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.216] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.216] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.216] SetLastError (dwErrCode=0x0) [0191.216] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.217] GetLastError () returned 0x5 [0191.217] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.217] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.217] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb56a0 [0191.217] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.217] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.217] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.218] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\customizations.xml", dwFileAttributes=0x80) returned 0 [0191.218] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.218] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.218] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.219] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.219] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.219] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\MasterDatastore.xml", dwFileAttributes=0x80) returned 0 [0191.220] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\masterdatastore.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.220] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.220] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.220] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.220] SetLastError (dwErrCode=0x0) [0191.220] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.221] GetLastError () returned 0x5 [0191.221] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0191.221] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.221] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4c80 [0191.221] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.221] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.221] SetLastError (dwErrCode=0x0) [0191.221] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.222] GetLastError () returned 0x5 [0191.222] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0191.222] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.222] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4920 [0191.222] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0191.222] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0191.222] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.222] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime\\Power_0.provxml", dwFileAttributes=0x80) returned 0 [0191.223] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime\\Power_0.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\prov\\runtime\\power_0.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.223] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.223] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.223] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0191.223] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.224] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime\\Power_1.provxml", dwFileAttributes=0x80) returned 0 [0191.224] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime\\Power_1.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\prov\\runtime\\power_1.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.224] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.224] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.224] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0191.224] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0191.225] SetLastError (dwErrCode=0x0) [0191.225] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\prov\\runtime\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.225] GetLastError () returned 0x5 [0191.225] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0191.225] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.225] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.225] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.225] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime.xml", dwFileAttributes=0x80) returned 0 [0191.226] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\prov\\runtime.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.226] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.226] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.226] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0191.226] FindClose (in: hFindFile=0x665abb4c80 | out: hFindFile=0x665abb4c80) returned 1 [0191.226] SetLastError (dwErrCode=0x0) [0191.226] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.226] GetLastError () returned 0x5 [0191.226] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0191.227] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.227] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0191.227] FindClose (in: hFindFile=0x665abb56a0 | out: hFindFile=0x665abb56a0) returned 1 [0191.227] SetLastError (dwErrCode=0x0) [0191.227] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.227] GetLastError () returned 0x5 [0191.227] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.227] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.227] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.227] SetLastError (dwErrCode=0x0) [0191.227] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.227] GetLastError () returned 0x5 [0191.227] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.228] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.228] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4d40 [0191.228] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.228] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.228] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.228] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\customizations.xml", dwFileAttributes=0x80) returned 0 [0191.228] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.229] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.229] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.229] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.229] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.229] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\MasterDatastore.xml", dwFileAttributes=0x80) returned 0 [0191.229] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\masterdatastore.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.230] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.230] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.230] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.230] SetLastError (dwErrCode=0x0) [0191.230] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.230] GetLastError () returned 0x5 [0191.230] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0191.230] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.230] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb5580 [0191.230] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.231] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.231] SetLastError (dwErrCode=0x0) [0191.231] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.231] GetLastError () returned 0x5 [0191.231] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0191.231] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.231] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RunTime\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb45c0 [0191.231] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0191.231] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0191.231] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.231] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RunTime\\Power_0.provxml", dwFileAttributes=0x80) returned 0 [0191.232] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RunTime\\Power_0.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\prov\\runtime\\power_0.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.232] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.232] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.232] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0191.232] FindClose (in: hFindFile=0x665abb45c0 | out: hFindFile=0x665abb45c0) returned 1 [0191.232] SetLastError (dwErrCode=0x0) [0191.232] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RunTime\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\prov\\runtime\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.233] GetLastError () returned 0x5 [0191.233] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0191.233] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.233] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.233] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.233] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RunTime.xml", dwFileAttributes=0x80) returned 0 [0191.233] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\prov\\runtime.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.234] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.234] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.234] FindNextFileW (in: hFindFile=0x665abb5580, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0191.234] FindClose (in: hFindFile=0x665abb5580 | out: hFindFile=0x665abb5580) returned 1 [0191.234] SetLastError (dwErrCode=0x0) [0191.234] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.234] GetLastError () returned 0x5 [0191.234] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0191.234] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.234] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0191.234] FindClose (in: hFindFile=0x665abb4d40 | out: hFindFile=0x665abb4d40) returned 1 [0191.234] SetLastError (dwErrCode=0x0) [0191.234] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.235] GetLastError () returned 0x5 [0191.235] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.235] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.235] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.235] SetLastError (dwErrCode=0x0) [0191.235] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.236] GetLastError () returned 0x5 [0191.236] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.236] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.236] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb5340 [0191.236] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.236] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.236] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.236] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\customizations.xml", dwFileAttributes=0x80) returned 0 [0191.236] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.237] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.237] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.237] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.237] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.237] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\MasterDatastore.xml", dwFileAttributes=0x80) returned 0 [0191.237] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\masterdatastore.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.238] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.238] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.238] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.238] SetLastError (dwErrCode=0x0) [0191.238] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.238] GetLastError () returned 0x5 [0191.238] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0191.238] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.238] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4c20 [0191.238] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.239] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.239] SetLastError (dwErrCode=0x0) [0191.239] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.239] GetLastError () returned 0x5 [0191.239] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0191.239] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.239] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\RunTime\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4c80 [0191.239] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0191.239] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0191.239] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.239] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\RunTime\\Power_0.provxml", dwFileAttributes=0x80) returned 0 [0191.240] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\RunTime\\Power_0.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\prov\\runtime\\power_0.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.240] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.240] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.240] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0191.240] FindClose (in: hFindFile=0x665abb4c80 | out: hFindFile=0x665abb4c80) returned 1 [0191.240] SetLastError (dwErrCode=0x0) [0191.240] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\RunTime\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\prov\\runtime\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.241] GetLastError () returned 0x5 [0191.241] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0191.241] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.241] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.241] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.241] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\RunTime.xml", dwFileAttributes=0x80) returned 0 [0191.241] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\prov\\runtime.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.242] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.242] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.242] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0191.242] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0191.242] SetLastError (dwErrCode=0x0) [0191.242] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.242] GetLastError () returned 0x5 [0191.242] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0191.242] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.242] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0191.242] FindClose (in: hFindFile=0x665abb5340 | out: hFindFile=0x665abb5340) returned 1 [0191.242] SetLastError (dwErrCode=0x0) [0191.243] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.243] GetLastError () returned 0x5 [0191.243] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.243] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.243] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.243] SetLastError (dwErrCode=0x0) [0191.243] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.243] GetLastError () returned 0x5 [0191.243] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.243] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.243] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4ec0 [0191.243] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.244] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.244] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.244] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\customizations.xml", dwFileAttributes=0x80) returned 0 [0191.244] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.244] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.244] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.245] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.245] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.245] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\MasterDatastore.xml", dwFileAttributes=0x80) returned 0 [0191.245] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\masterdatastore.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.246] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.246] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.246] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.246] SetLastError (dwErrCode=0x0) [0191.246] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.246] GetLastError () returned 0x5 [0191.246] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0191.246] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.246] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb56a0 [0191.246] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.246] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.246] SetLastError (dwErrCode=0x0) [0191.246] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.247] GetLastError () returned 0x5 [0191.247] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0191.247] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.247] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RunTime\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4920 [0191.247] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0191.247] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0191.247] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.247] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RunTime\\Power_0.provxml", dwFileAttributes=0x80) returned 0 [0191.247] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RunTime\\Power_0.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\prov\\runtime\\power_0.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.248] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.248] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.248] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0191.248] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.248] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RunTime\\Power_1.provxml", dwFileAttributes=0x80) returned 0 [0191.249] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RunTime\\Power_1.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\prov\\runtime\\power_1.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.249] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.249] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.249] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0191.249] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0191.249] SetLastError (dwErrCode=0x0) [0191.250] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RunTime\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\prov\\runtime\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.250] GetLastError () returned 0x5 [0191.250] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0191.250] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.250] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.250] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.250] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RunTime.xml", dwFileAttributes=0x80) returned 0 [0191.251] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\prov\\runtime.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.251] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.251] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.252] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0191.252] FindClose (in: hFindFile=0x665abb56a0 | out: hFindFile=0x665abb56a0) returned 1 [0191.252] SetLastError (dwErrCode=0x0) [0191.252] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.252] GetLastError () returned 0x5 [0191.252] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0191.252] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.252] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0191.253] FindClose (in: hFindFile=0x665abb4ec0 | out: hFindFile=0x665abb4ec0) returned 1 [0191.253] SetLastError (dwErrCode=0x0) [0191.253] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.253] GetLastError () returned 0x5 [0191.253] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.253] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.253] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.253] SetLastError (dwErrCode=0x0) [0191.253] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.254] GetLastError () returned 0x5 [0191.254] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.254] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.254] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb42c0 [0191.254] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.254] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.254] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.254] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\customizations.xml", dwFileAttributes=0x80) returned 0 [0191.255] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.255] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.255] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.256] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.256] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.256] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\MasterDatastore.xml", dwFileAttributes=0x80) returned 0 [0191.256] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\masterdatastore.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.257] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.257] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.257] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.257] SetLastError (dwErrCode=0x0) [0191.257] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.257] GetLastError () returned 0x5 [0191.257] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0191.258] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.258] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb56a0 [0191.258] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.258] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.258] SetLastError (dwErrCode=0x0) [0191.258] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.258] GetLastError () returned 0x5 [0191.258] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0191.258] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.258] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb45c0 [0191.259] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0191.259] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0191.259] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.260] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\Power_0.provxml", dwFileAttributes=0x80) returned 0 [0191.260] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\Power_0.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\prov\\runtime\\power_0.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.260] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.260] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.261] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0191.261] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.261] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\Power_1.provxml", dwFileAttributes=0x80) returned 0 [0191.261] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\Power_1.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\prov\\runtime\\power_1.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.261] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.261] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.262] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0191.262] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.262] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\Power_2.provxml", dwFileAttributes=0x80) returned 0 [0191.262] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\Power_2.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\prov\\runtime\\power_2.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.263] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.263] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.263] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0191.263] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.263] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\Power_3.provxml", dwFileAttributes=0x80) returned 0 [0191.263] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\Power_3.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\prov\\runtime\\power_3.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.264] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.264] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.264] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0191.264] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.264] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\Power_4.provxml", dwFileAttributes=0x80) returned 0 [0191.264] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\Power_4.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\prov\\runtime\\power_4.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.265] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.265] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.265] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0191.265] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.265] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\Power_5.provxml", dwFileAttributes=0x80) returned 0 [0191.266] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\Power_5.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\prov\\runtime\\power_5.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.266] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.266] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.266] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0191.266] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.267] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\Power_6.provxml", dwFileAttributes=0x80) returned 0 [0191.267] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\Power_6.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\prov\\runtime\\power_6.provxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.267] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.267] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.267] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0191.267] FindClose (in: hFindFile=0x665abb45c0 | out: hFindFile=0x665abb45c0) returned 1 [0191.268] SetLastError (dwErrCode=0x0) [0191.268] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\prov\\runtime\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.272] GetLastError () returned 0x5 [0191.272] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0191.272] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.272] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.272] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.272] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime.xml", dwFileAttributes=0x80) returned 0 [0191.273] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\prov\\runtime.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.273] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.273] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.273] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0191.273] FindClose (in: hFindFile=0x665abb56a0 | out: hFindFile=0x665abb56a0) returned 1 [0191.273] SetLastError (dwErrCode=0x0) [0191.273] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\prov\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.274] GetLastError () returned 0x5 [0191.274] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0191.274] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.274] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0191.274] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0191.274] SetLastError (dwErrCode=0x0) [0191.274] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.274] GetLastError () returned 0x5 [0191.274] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.274] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.274] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0191.274] FindClose (in: hFindFile=0x665abb5280 | out: hFindFile=0x665abb5280) returned 1 [0191.274] SetLastError (dwErrCode=0x0) [0191.275] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.275] GetLastError () returned 0x5 [0191.275] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.275] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.275] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0191.275] SetLastError (dwErrCode=0x0) [0191.275] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.275] GetLastError () returned 0x5 [0191.275] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.275] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.275] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb4920 [0191.275] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.276] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.276] SetLastError (dwErrCode=0x0) [0191.276] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\search\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.276] GetLastError () returned 0x5 [0191.276] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.276] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.276] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0xffffffffffffffff [0191.276] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0191.276] SetLastError (dwErrCode=0x0) [0191.276] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.276] GetLastError () returned 0x5 [0191.276] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.276] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.277] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0191.277] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0191.277] SetLastError (dwErrCode=0x0) [0191.277] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\search\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.277] GetLastError () returned 0x5 [0191.277] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.277] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.277] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0191.277] SetLastError (dwErrCode=0x0) [0191.277] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.277] GetLastError () returned 0x5 [0191.277] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.277] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.278] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0xffffffffffffffff [0191.278] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0191.278] SetLastError (dwErrCode=0x0) [0191.278] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\smsrouter\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.278] GetLastError () returned 0x5 [0191.278] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.278] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.278] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0191.278] SetLastError (dwErrCode=0x0) [0191.278] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.278] GetLastError () returned 0x5 [0191.278] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.278] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.278] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb5040 [0191.279] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.279] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.279] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.279] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.279] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\CIiHmnxMn6Ps.dat", dwFileAttributes=0x80) returned 1 [0191.279] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\CIiHmnxMn6Ps.dat" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\ciihmnxmn6ps.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0191.280] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=0) returned 1 [0191.280] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=0) returned 1 [0191.280] CloseHandle (hObject=0x570) returned 1 [0191.280] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.280] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.280] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.280] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.bmp", dwFileAttributes=0x80) returned 0 [0191.281] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\guest.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.281] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.281] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.281] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.281] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.281] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.png", dwFileAttributes=0x80) returned 0 [0191.282] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.png" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\guest.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.282] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.282] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.283] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.283] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.283] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.283] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-192.png", dwFileAttributes=0x80) returned 0 [0191.283] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-192.png" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user-192.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.283] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.283] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.284] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.284] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.284] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-32.png", dwFileAttributes=0x80) returned 0 [0191.284] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-32.png" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user-32.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.284] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.284] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.285] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.285] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.285] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-40.png", dwFileAttributes=0x80) returned 0 [0191.285] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-40.png" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user-40.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.286] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.286] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.286] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.286] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.286] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-48.png", dwFileAttributes=0x80) returned 0 [0191.286] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-48.png" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user-48.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.287] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.287] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.287] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.287] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.287] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.bmp", dwFileAttributes=0x80) returned 0 [0191.288] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.288] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.288] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.288] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.288] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.288] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.png", dwFileAttributes=0x80) returned 0 [0191.289] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.png" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.289] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.289] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.289] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0191.289] FindClose (in: hFindFile=0x665abb5040 | out: hFindFile=0x665abb5040) returned 1 [0191.289] SetLastError (dwErrCode=0x0) [0191.289] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.290] GetLastError () returned 0x5 [0191.290] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.290] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.290] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0191.290] SetLastError (dwErrCode=0x0) [0191.290] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.290] GetLastError () returned 0x5 [0191.290] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.290] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.290] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Vault\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb42c0 [0191.290] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.290] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.290] SetLastError (dwErrCode=0x0) [0191.290] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Vault\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\vault\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.291] GetLastError () returned 0x5 [0191.291] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.291] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.291] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4da0 [0191.291] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.291] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.291] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.291] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204\\154E23D0-C644-4E6F-8CE6-5069272F999F.vsch", dwFileAttributes=0x80) returned 0 [0191.292] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204\\154E23D0-C644-4E6F-8CE6-5069272F999F.vsch" (normalized: "c:\\users\\all users\\microsoft\\vault\\ac658cb4-9126-49bd-b877-31eedab3f204\\154e23d0-c644-4e6f-8ce6-5069272f999f.vsch"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.292] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.292] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.292] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.292] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.292] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204\\2F1A6504-0641-44CF-8BB5-3612D865F2E5.vsch", dwFileAttributes=0x80) returned 0 [0191.293] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204\\2F1A6504-0641-44CF-8BB5-3612D865F2E5.vsch" (normalized: "c:\\users\\all users\\microsoft\\vault\\ac658cb4-9126-49bd-b877-31eedab3f204\\2f1a6504-0641-44cf-8bb5-3612d865f2e5.vsch"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.293] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.293] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.293] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.293] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.294] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204\\3CCD5499-87A8-4B10-A215-608888DD3B55.vsch", dwFileAttributes=0x80) returned 0 [0191.294] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204\\3CCD5499-87A8-4B10-A215-608888DD3B55.vsch" (normalized: "c:\\users\\all users\\microsoft\\vault\\ac658cb4-9126-49bd-b877-31eedab3f204\\3ccd5499-87a8-4b10-a215-608888dd3b55.vsch"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.294] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.294] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.294] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.294] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.295] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204\\Policy.vpol", dwFileAttributes=0x80) returned 0 [0191.295] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204\\Policy.vpol" (normalized: "c:\\users\\all users\\microsoft\\vault\\ac658cb4-9126-49bd-b877-31eedab3f204\\policy.vpol"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.295] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.295] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.295] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0191.296] FindClose (in: hFindFile=0x665abb4da0 | out: hFindFile=0x665abb4da0) returned 1 [0191.296] SetLastError (dwErrCode=0x0) [0191.296] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\vault\\ac658cb4-9126-49bd-b877-31eedab3f204\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.296] GetLastError () returned 0x5 [0191.296] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.296] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.296] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0191.296] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0191.296] SetLastError (dwErrCode=0x0) [0191.296] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Vault\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\vault\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.296] GetLastError () returned 0x5 [0191.296] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.297] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.297] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0191.297] SetLastError (dwErrCode=0x0) [0191.297] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.297] GetLastError () returned 0x5 [0191.297] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.297] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.297] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WDF\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb57c0 [0191.297] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.297] FindNextFileW (in: hFindFile=0x665abb57c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0191.297] FindClose (in: hFindFile=0x665abb57c0 | out: hFindFile=0x665abb57c0) returned 1 [0191.298] SetLastError (dwErrCode=0x0) [0191.298] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\WDF\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\wdf\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.298] GetLastError () returned 0x5 [0191.298] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.298] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.298] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0191.298] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0191.298] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0191.298] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0191.298] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0191.298] SetLastError (dwErrCode=0x0) [0191.298] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.298] GetLastError () returned 0x5 [0191.298] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.298] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.298] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WinMSIPC\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb55e0 [0191.299] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.299] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.299] SetLastError (dwErrCode=0x0) [0191.299] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\WinMSIPC\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\winmsipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.299] GetLastError () returned 0x5 [0191.299] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.299] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.299] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WinMSIPC\\Server\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4920 [0191.299] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.299] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0191.299] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0191.299] SetLastError (dwErrCode=0x0) [0191.299] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\WinMSIPC\\Server\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\winmsipc\\server\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.300] GetLastError () returned 0x5 [0191.300] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.300] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.300] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0191.300] FindClose (in: hFindFile=0x665abb55e0 | out: hFindFile=0x665abb55e0) returned 1 [0191.300] SetLastError (dwErrCode=0x0) [0191.300] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\WinMSIPC\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\winmsipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.300] GetLastError () returned 0x5 [0191.300] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.300] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.300] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0191.300] SetLastError (dwErrCode=0x0) [0191.300] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.301] GetLastError () returned 0x5 [0191.301] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.301] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.301] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb4a40 [0191.301] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.301] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.301] SetLastError (dwErrCode=0x0) [0191.301] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\wwansvc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.301] GetLastError () returned 0x5 [0191.301] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.301] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.301] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\DMProfiles\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4920 [0191.301] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.301] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0191.301] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0191.301] SetLastError (dwErrCode=0x0) [0191.301] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\DMProfiles\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\wwansvc\\dmprofiles\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.302] GetLastError () returned 0x5 [0191.302] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.302] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.302] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.302] SetLastError (dwErrCode=0x0) [0191.302] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\wwansvc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.302] GetLastError () returned 0x5 [0191.302] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.302] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.302] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb42c0 [0191.302] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.302] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0191.302] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0191.303] SetLastError (dwErrCode=0x0) [0191.303] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\wwansvc\\profiles\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.303] GetLastError () returned 0x5 [0191.303] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.303] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.303] FindNextFileW (in: hFindFile=0x665abb4a40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0191.303] FindClose (in: hFindFile=0x665abb4a40 | out: hFindFile=0x665abb4a40) returned 1 [0191.303] SetLastError (dwErrCode=0x0) [0191.303] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\wwansvc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.303] GetLastError () returned 0x5 [0191.303] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.303] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.303] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0191.303] FindClose (in: hFindFile=0x665abb4560 | out: hFindFile=0x665abb4560) returned 1 [0191.304] SetLastError (dwErrCode=0x0) [0191.304] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.304] GetLastError () returned 0x5 [0191.304] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0191.304] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.304] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0191.304] SetLastError (dwErrCode=0x0) [0191.304] CreateFileW (lpFileName="C:\\Users\\All Users\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0191.304] GetLastError () returned 0xb7 [0191.304] CloseHandle (hObject=0x470) returned 1 [0191.304] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft OneDrive\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665abb4ec0 [0191.305] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0191.305] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0191.305] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0191.305] SetLastError (dwErrCode=0x0) [0191.305] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft OneDrive\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft onedrive\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0191.305] GetLastError () returned 0xb7 [0191.305] CloseHandle (hObject=0x47c) returned 1 [0191.305] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft OneDrive\\setup\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb4920 [0191.305] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.305] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.305] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0191.305] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0191.305] SetLastError (dwErrCode=0x0) [0191.305] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft OneDrive\\setup\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft onedrive\\setup\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0191.306] GetLastError () returned 0xb7 [0191.306] CloseHandle (hObject=0x47c) returned 1 [0191.306] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0191.306] FindClose (in: hFindFile=0x665abb4ec0 | out: hFindFile=0x665abb4ec0) returned 1 [0191.306] SetLastError (dwErrCode=0x0) [0191.306] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft OneDrive\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\microsoft onedrive\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0191.306] GetLastError () returned 0xb7 [0191.306] CloseHandle (hObject=0x470) returned 1 [0191.306] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0191.306] SetLastError (dwErrCode=0x0) [0191.306] CreateFileW (lpFileName="C:\\Users\\All Users\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0191.307] GetLastError () returned 0xb7 [0191.307] CloseHandle (hObject=0x470) returned 1 [0191.307] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Oracle\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665abb4c20 [0191.307] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0191.307] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0191.307] SetLastError (dwErrCode=0x0) [0191.307] CreateFileW (lpFileName="C:\\Users\\All Users\\Oracle\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\oracle\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0191.307] GetLastError () returned 0xb7 [0191.307] CloseHandle (hObject=0x47c) returned 1 [0191.307] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Oracle\\Java\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb4560 [0191.307] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.307] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.308] SetLastError (dwErrCode=0x0) [0191.308] CreateFileW (lpFileName="C:\\Users\\All Users\\Oracle\\Java\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\oracle\\java\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0191.308] GetLastError () returned 0xb7 [0191.308] CloseHandle (hObject=0x570) returned 1 [0191.308] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Oracle\\Java\\.oracle_jre_usage\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb5160 [0191.308] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.308] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.308] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.308] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Oracle\\Java\\.oracle_jre_usage\\17dfc292991c7c24.timestamp", dwFileAttributes=0x80) returned 1 [0191.309] CreateFileW (lpFileName="C:\\Users\\All Users\\Oracle\\Java\\.oracle_jre_usage\\17dfc292991c7c24.timestamp" (normalized: "c:\\users\\all users\\oracle\\java\\.oracle_jre_usage\\17dfc292991c7c24.timestamp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x50c [0191.309] GetFileSizeEx (in: hFile=0x50c, lpFileSize=0x665da7c288 | out: lpFileSize=0x665da7c288*=626) returned 1 [0191.309] GetFileSizeEx (in: hFile=0x50c, lpFileSize=0x665da7c298 | out: lpFileSize=0x665da7c298*=626) returned 1 [0191.309] SetFilePointerEx (in: hFile=0x50c, liDistanceToMove=0x150, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.309] ReadFile (in: hFile=0x50c, lpBuffer=0x665da7c2e8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7c2a8, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2e8*, lpNumberOfBytesRead=0x665da7c2a8*=0x19, lpOverlapped=0x0) returned 1 [0191.309] CloseHandle (hObject=0x50c) returned 1 [0191.310] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.310] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.310] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0191.310] FindClose (in: hFindFile=0x665abb5160 | out: hFindFile=0x665abb5160) returned 1 [0191.310] SetLastError (dwErrCode=0x0) [0191.310] CreateFileW (lpFileName="C:\\Users\\All Users\\Oracle\\Java\\.oracle_jre_usage\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\oracle\\java\\.oracle_jre_usage\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0191.310] GetLastError () returned 0xb7 [0191.310] CloseHandle (hObject=0x570) returned 1 [0191.310] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.310] SetLastError (dwErrCode=0x0) [0191.310] CreateFileW (lpFileName="C:\\Users\\All Users\\Oracle\\Java\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\oracle\\java\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0191.311] GetLastError () returned 0xb7 [0191.311] CloseHandle (hObject=0x570) returned 1 [0191.311] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Oracle\\Java\\installcache_x64\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4f20 [0191.311] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.311] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.311] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.311] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Oracle\\Java\\installcache_x64\\baseimagefam8", dwFileAttributes=0x80) returned 0 [0191.311] CreateFileW (lpFileName="C:\\Users\\All Users\\Oracle\\Java\\installcache_x64\\baseimagefam8" (normalized: "c:\\users\\all users\\oracle\\java\\installcache_x64\\baseimagefam8"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.312] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.312] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.312] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0191.312] FindClose (in: hFindFile=0x665abb4f20 | out: hFindFile=0x665abb4f20) returned 1 [0191.312] SetLastError (dwErrCode=0x0) [0191.312] CreateFileW (lpFileName="C:\\Users\\All Users\\Oracle\\Java\\installcache_x64\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\oracle\\java\\installcache_x64\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.312] GetLastError () returned 0x5 [0191.312] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.313] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.313] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.313] SetLastError (dwErrCode=0x0) [0191.313] CreateFileW (lpFileName="C:\\Users\\All Users\\Oracle\\Java\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\oracle\\java\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0191.313] GetLastError () returned 0xb7 [0191.313] CloseHandle (hObject=0x570) returned 1 [0191.313] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Oracle\\Java\\javapath\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb5460 [0191.313] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.313] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.314] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.314] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.314] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0191.314] FindClose (in: hFindFile=0x665abb5460 | out: hFindFile=0x665abb5460) returned 1 [0191.314] SetLastError (dwErrCode=0x0) [0191.314] CreateFileW (lpFileName="C:\\Users\\All Users\\Oracle\\Java\\javapath\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\oracle\\java\\javapath\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.314] GetLastError () returned 0x5 [0191.314] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.314] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.314] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.314] SetLastError (dwErrCode=0x0) [0191.314] CreateFileW (lpFileName="C:\\Users\\All Users\\Oracle\\Java\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\oracle\\java\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0191.315] GetLastError () returned 0xb7 [0191.315] CloseHandle (hObject=0x570) returned 1 [0191.315] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Oracle\\Java\\javapath_target_5923062\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb5040 [0191.315] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.315] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.315] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.315] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.315] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0191.315] FindClose (in: hFindFile=0x665abb5040 | out: hFindFile=0x665abb5040) returned 1 [0191.315] SetLastError (dwErrCode=0x0) [0191.315] CreateFileW (lpFileName="C:\\Users\\All Users\\Oracle\\Java\\javapath_target_5923062\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\oracle\\java\\javapath_target_5923062\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.315] GetLastError () returned 0x5 [0191.315] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.315] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.315] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.315] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0191.315] FindClose (in: hFindFile=0x665abb4560 | out: hFindFile=0x665abb4560) returned 1 [0191.315] SetLastError (dwErrCode=0x0) [0191.316] CreateFileW (lpFileName="C:\\Users\\All Users\\Oracle\\Java\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\oracle\\java\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0191.316] GetLastError () returned 0xb7 [0191.316] CloseHandle (hObject=0x47c) returned 1 [0191.316] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0191.316] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0191.316] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0191.316] SetLastError (dwErrCode=0x0) [0191.316] CreateFileW (lpFileName="C:\\Users\\All Users\\Oracle\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\oracle\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0191.316] GetLastError () returned 0xb7 [0191.316] CloseHandle (hObject=0x470) returned 1 [0191.316] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0191.317] SetLastError (dwErrCode=0x0) [0191.317] CreateFileW (lpFileName="C:\\Users\\All Users\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0191.317] GetLastError () returned 0xb7 [0191.317] CloseHandle (hObject=0x470) returned 1 [0191.317] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665abb5040 [0191.317] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0191.317] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0191.317] SetLastError (dwErrCode=0x0) [0191.317] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.317] GetLastError () returned 0x5 [0191.317] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.317] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.318] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb5160 [0191.318] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.318] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.318] SetLastError (dwErrCode=0x0) [0191.318] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.318] GetLastError () returned 0x5 [0191.318] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.318] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.318] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb42c0 [0191.318] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.318] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.318] SetLastError (dwErrCode=0x0) [0191.318] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.319] GetLastError () returned 0x5 [0191.319] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0191.319] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.319] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb5760 [0191.319] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.319] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.319] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.319] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\cab1.cab", dwFileAttributes=0x80) returned 0 [0191.320] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.320] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.320] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.320] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.320] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0191.320] FindClose (in: hFindFile=0x665abb5760 | out: hFindFile=0x665abb5760) returned 1 [0191.320] SetLastError (dwErrCode=0x0) [0191.320] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.321] GetLastError () returned 0x5 [0191.321] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0191.321] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.321] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0191.321] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0191.321] SetLastError (dwErrCode=0x0) [0191.321] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.321] GetLastError () returned 0x5 [0191.321] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.321] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.321] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0191.321] FindClose (in: hFindFile=0x665abb5160 | out: hFindFile=0x665abb5160) returned 1 [0191.321] SetLastError (dwErrCode=0x0) [0191.322] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.322] GetLastError () returned 0x5 [0191.322] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.322] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.322] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0191.322] SetLastError (dwErrCode=0x0) [0191.322] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.322] GetLastError () returned 0x5 [0191.322] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.322] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.322] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb4560 [0191.322] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.322] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.322] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.323] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm", dwFileAttributes=0x80) returned 0 [0191.323] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm" (normalized: "c:\\users\\all users\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.323] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.323] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.324] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.324] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0191.324] FindClose (in: hFindFile=0x665abb4560 | out: hFindFile=0x665abb4560) returned 1 [0191.324] SetLastError (dwErrCode=0x0) [0191.324] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.324] GetLastError () returned 0x5 [0191.324] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.324] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.324] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0191.324] SetLastError (dwErrCode=0x0) [0191.324] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.324] GetLastError () returned 0x5 [0191.324] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.325] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.325] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb5520 [0191.325] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.325] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.325] SetLastError (dwErrCode=0x0) [0191.325] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.325] GetLastError () returned 0x5 [0191.325] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.325] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.325] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb5280 [0191.325] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.325] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.325] SetLastError (dwErrCode=0x0) [0191.325] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.326] GetLastError () returned 0x5 [0191.326] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0191.326] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.326] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4c20 [0191.326] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.326] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.326] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.326] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\cab1.cab", dwFileAttributes=0x80) returned 0 [0191.327] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.327] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.327] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.327] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.327] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.327] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi", dwFileAttributes=0x80) returned 0 [0191.328] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.328] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.328] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.328] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0191.328] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0191.329] SetLastError (dwErrCode=0x0) [0191.329] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.329] GetLastError () returned 0x5 [0191.329] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0191.329] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.329] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0191.329] FindClose (in: hFindFile=0x665abb5280 | out: hFindFile=0x665abb5280) returned 1 [0191.329] SetLastError (dwErrCode=0x0) [0191.329] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.330] GetLastError () returned 0x5 [0191.330] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.330] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.330] FindNextFileW (in: hFindFile=0x665abb5520, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0191.330] FindClose (in: hFindFile=0x665abb5520 | out: hFindFile=0x665abb5520) returned 1 [0191.330] SetLastError (dwErrCode=0x0) [0191.330] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.330] GetLastError () returned 0x5 [0191.330] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.330] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.330] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0191.330] SetLastError (dwErrCode=0x0) [0191.330] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.331] GetLastError () returned 0x5 [0191.331] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.331] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.331] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb4ec0 [0191.331] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.331] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.331] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.331] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm", dwFileAttributes=0x80) returned 0 [0191.332] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm" (normalized: "c:\\users\\all users\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.332] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.332] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.332] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.332] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0191.332] FindClose (in: hFindFile=0x665abb4ec0 | out: hFindFile=0x665abb4ec0) returned 1 [0191.332] SetLastError (dwErrCode=0x0) [0191.332] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.333] GetLastError () returned 0x5 [0191.333] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.333] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.333] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0191.333] SetLastError (dwErrCode=0x0) [0191.333] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.333] GetLastError () returned 0x5 [0191.333] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.333] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.334] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{74d0e5db-b326-4dae-a6b2-445b9de1836e}\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb42c0 [0191.334] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.334] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.334] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.334] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Package Cache\\{74d0e5db-b326-4dae-a6b2-445b9de1836e}\\state.rsm", dwFileAttributes=0x80) returned 0 [0191.334] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{74d0e5db-b326-4dae-a6b2-445b9de1836e}\\state.rsm" (normalized: "c:\\users\\all users\\package cache\\{74d0e5db-b326-4dae-a6b2-445b9de1836e}\\state.rsm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.335] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.335] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.335] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.335] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0191.335] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0191.335] SetLastError (dwErrCode=0x0) [0191.335] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{74d0e5db-b326-4dae-a6b2-445b9de1836e}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\{74d0e5db-b326-4dae-a6b2-445b9de1836e}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.336] GetLastError () returned 0x5 [0191.336] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.336] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.336] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0191.336] SetLastError (dwErrCode=0x0) [0191.336] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.337] GetLastError () returned 0x5 [0191.337] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.337] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.337] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb5760 [0191.337] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.337] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.337] SetLastError (dwErrCode=0x0) [0191.337] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.337] GetLastError () returned 0x5 [0191.337] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.337] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.337] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4c20 [0191.338] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.338] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.338] SetLastError (dwErrCode=0x0) [0191.338] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.338] GetLastError () returned 0x5 [0191.338] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0191.338] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.338] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4560 [0191.338] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.338] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.338] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.339] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\cab1.cab", dwFileAttributes=0x80) returned 0 [0191.339] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.339] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.340] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.340] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.340] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0191.340] FindClose (in: hFindFile=0x665abb4560 | out: hFindFile=0x665abb4560) returned 1 [0191.340] SetLastError (dwErrCode=0x0) [0191.340] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.341] GetLastError () returned 0x5 [0191.341] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0191.341] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.341] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0191.341] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0191.341] SetLastError (dwErrCode=0x0) [0191.341] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.341] GetLastError () returned 0x5 [0191.341] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.341] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.341] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0191.341] FindClose (in: hFindFile=0x665abb5760 | out: hFindFile=0x665abb5760) returned 1 [0191.342] SetLastError (dwErrCode=0x0) [0191.342] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.342] GetLastError () returned 0x5 [0191.342] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.342] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.342] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0191.342] SetLastError (dwErrCode=0x0) [0191.342] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.342] GetLastError () returned 0x5 [0191.342] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.342] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.342] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb4560 [0191.343] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.343] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.343] SetLastError (dwErrCode=0x0) [0191.343] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.343] GetLastError () returned 0x5 [0191.343] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.343] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.343] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4920 [0191.343] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.343] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.343] SetLastError (dwErrCode=0x0) [0191.343] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.344] GetLastError () returned 0x5 [0191.344] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0191.344] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.344] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4d40 [0191.344] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.344] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.344] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.345] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\cab1.cab", dwFileAttributes=0x80) returned 0 [0191.345] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.346] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.346] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.346] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.346] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.346] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi", dwFileAttributes=0x80) returned 0 [0191.347] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.347] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.347] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.347] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0191.347] FindClose (in: hFindFile=0x665abb4d40 | out: hFindFile=0x665abb4d40) returned 1 [0191.347] SetLastError (dwErrCode=0x0) [0191.347] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.348] GetLastError () returned 0x5 [0191.348] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0191.348] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.348] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0191.348] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0191.348] SetLastError (dwErrCode=0x0) [0191.348] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.348] GetLastError () returned 0x5 [0191.348] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.349] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.349] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0191.349] FindClose (in: hFindFile=0x665abb4560 | out: hFindFile=0x665abb4560) returned 1 [0191.349] SetLastError (dwErrCode=0x0) [0191.349] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.349] GetLastError () returned 0x5 [0191.349] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.349] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.349] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0191.349] SetLastError (dwErrCode=0x0) [0191.349] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.350] GetLastError () returned 0x5 [0191.350] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.350] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.350] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A2563E55-3BEC-3828-8D67-E5E8B9E8B675}v14.0.23026\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb4ec0 [0191.350] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.350] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.350] SetLastError (dwErrCode=0x0) [0191.350] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{A2563E55-3BEC-3828-8D67-E5E8B9E8B675}v14.0.23026\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\{a2563e55-3bec-3828-8d67-e5e8b9e8b675}v14.0.23026\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.350] GetLastError () returned 0x5 [0191.350] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.350] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.351] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A2563E55-3BEC-3828-8D67-E5E8B9E8B675}v14.0.23026\\packages\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb56a0 [0191.351] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.351] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.351] SetLastError (dwErrCode=0x0) [0191.351] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{A2563E55-3BEC-3828-8D67-E5E8B9E8B675}v14.0.23026\\packages\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\{a2563e55-3bec-3828-8d67-e5e8b9e8b675}v14.0.23026\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.351] GetLastError () returned 0x5 [0191.351] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0191.351] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.351] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A2563E55-3BEC-3828-8D67-E5E8B9E8B675}v14.0.23026\\packages\\vcRuntimeMinimum_x86\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb42c0 [0191.351] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.351] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.352] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.352] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Package Cache\\{A2563E55-3BEC-3828-8D67-E5E8B9E8B675}v14.0.23026\\packages\\vcRuntimeMinimum_x86\\cab1.cab", dwFileAttributes=0x80) returned 0 [0191.352] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{A2563E55-3BEC-3828-8D67-E5E8B9E8B675}v14.0.23026\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{a2563e55-3bec-3828-8d67-e5e8b9e8b675}v14.0.23026\\packages\\vcruntimeminimum_x86\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.353] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.353] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.353] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.353] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0191.353] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0191.353] SetLastError (dwErrCode=0x0) [0191.353] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{A2563E55-3BEC-3828-8D67-E5E8B9E8B675}v14.0.23026\\packages\\vcRuntimeMinimum_x86\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\{a2563e55-3bec-3828-8d67-e5e8b9e8b675}v14.0.23026\\packages\\vcruntimeminimum_x86\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.354] GetLastError () returned 0x5 [0191.354] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0191.354] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.354] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0191.354] FindClose (in: hFindFile=0x665abb56a0 | out: hFindFile=0x665abb56a0) returned 1 [0191.354] SetLastError (dwErrCode=0x0) [0191.354] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{A2563E55-3BEC-3828-8D67-E5E8B9E8B675}v14.0.23026\\packages\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\{a2563e55-3bec-3828-8d67-e5e8b9e8b675}v14.0.23026\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.354] GetLastError () returned 0x5 [0191.354] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.354] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.354] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0191.354] FindClose (in: hFindFile=0x665abb4ec0 | out: hFindFile=0x665abb4ec0) returned 1 [0191.354] SetLastError (dwErrCode=0x0) [0191.355] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{A2563E55-3BEC-3828-8D67-E5E8B9E8B675}v14.0.23026\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\{a2563e55-3bec-3828-8d67-e5e8b9e8b675}v14.0.23026\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.355] GetLastError () returned 0x5 [0191.355] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.355] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.355] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0191.355] SetLastError (dwErrCode=0x0) [0191.355] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.355] GetLastError () returned 0x5 [0191.355] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.355] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.355] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb4f20 [0191.355] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.356] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.356] SetLastError (dwErrCode=0x0) [0191.356] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.356] GetLastError () returned 0x5 [0191.356] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.356] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.356] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb5460 [0191.356] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.356] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.356] SetLastError (dwErrCode=0x0) [0191.356] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.356] GetLastError () returned 0x5 [0191.357] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0191.357] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.357] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4c20 [0191.357] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.357] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.357] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.357] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\cab1.cab", dwFileAttributes=0x80) returned 0 [0191.358] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.358] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.358] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.358] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.358] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0191.358] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0191.358] SetLastError (dwErrCode=0x0) [0191.358] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.359] GetLastError () returned 0x5 [0191.359] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0191.359] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.359] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0191.359] FindClose (in: hFindFile=0x665abb5460 | out: hFindFile=0x665abb5460) returned 1 [0191.359] SetLastError (dwErrCode=0x0) [0191.359] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.359] GetLastError () returned 0x5 [0191.359] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.359] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.359] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0191.359] FindClose (in: hFindFile=0x665abb4f20 | out: hFindFile=0x665abb4f20) returned 1 [0191.360] SetLastError (dwErrCode=0x0) [0191.360] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.360] GetLastError () returned 0x5 [0191.360] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.360] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.360] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0191.360] SetLastError (dwErrCode=0x0) [0191.360] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.361] GetLastError () returned 0x5 [0191.361] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.361] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.361] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb4920 [0191.361] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.361] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.361] SetLastError (dwErrCode=0x0) [0191.361] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.361] GetLastError () returned 0x5 [0191.361] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.361] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.361] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb5760 [0191.361] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.362] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.362] SetLastError (dwErrCode=0x0) [0191.362] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.362] GetLastError () returned 0x5 [0191.362] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0191.362] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.362] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb42c0 [0191.362] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.362] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.362] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.362] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\cab1.cab", dwFileAttributes=0x80) returned 0 [0191.363] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.363] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.363] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.364] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.364] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.364] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi", dwFileAttributes=0x80) returned 0 [0191.364] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.365] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.365] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.365] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0191.365] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0191.365] SetLastError (dwErrCode=0x0) [0191.365] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.365] GetLastError () returned 0x5 [0191.365] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0191.365] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.365] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0191.366] FindClose (in: hFindFile=0x665abb5760 | out: hFindFile=0x665abb5760) returned 1 [0191.366] SetLastError (dwErrCode=0x0) [0191.366] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.366] GetLastError () returned 0x5 [0191.366] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.366] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.366] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0191.366] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0191.366] SetLastError (dwErrCode=0x0) [0191.366] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.367] GetLastError () returned 0x5 [0191.367] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.367] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.367] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0191.367] SetLastError (dwErrCode=0x0) [0191.367] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.367] GetLastError () returned 0x5 [0191.367] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.367] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.367] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb4560 [0191.367] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.367] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.367] SetLastError (dwErrCode=0x0) [0191.367] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.368] GetLastError () returned 0x5 [0191.368] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.368] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.368] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb45c0 [0191.368] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.368] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.368] SetLastError (dwErrCode=0x0) [0191.368] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.368] GetLastError () returned 0x5 [0191.368] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0191.368] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.368] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb5760 [0191.368] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.369] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.369] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.369] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\cab1.cab", dwFileAttributes=0x80) returned 0 [0191.369] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.370] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.370] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.370] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.370] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0191.370] FindClose (in: hFindFile=0x665abb5760 | out: hFindFile=0x665abb5760) returned 1 [0191.370] SetLastError (dwErrCode=0x0) [0191.370] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.371] GetLastError () returned 0x5 [0191.371] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0191.371] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.371] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0191.371] FindClose (in: hFindFile=0x665abb45c0 | out: hFindFile=0x665abb45c0) returned 1 [0191.371] SetLastError (dwErrCode=0x0) [0191.371] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.371] GetLastError () returned 0x5 [0191.371] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.371] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.371] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0191.371] FindClose (in: hFindFile=0x665abb4560 | out: hFindFile=0x665abb4560) returned 1 [0191.371] SetLastError (dwErrCode=0x0) [0191.371] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.372] GetLastError () returned 0x5 [0191.372] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.372] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.372] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0191.372] SetLastError (dwErrCode=0x0) [0191.372] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.372] GetLastError () returned 0x5 [0191.372] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.372] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.372] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BE960C1C-7BAD-3DE6-8B1A-2616FE532845}v14.0.23026\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb4da0 [0191.372] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.372] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.372] SetLastError (dwErrCode=0x0) [0191.372] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{BE960C1C-7BAD-3DE6-8B1A-2616FE532845}v14.0.23026\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\{be960c1c-7bad-3de6-8b1a-2616fe532845}v14.0.23026\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.373] GetLastError () returned 0x5 [0191.373] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.373] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.373] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BE960C1C-7BAD-3DE6-8B1A-2616FE532845}v14.0.23026\\packages\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb56a0 [0191.373] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.373] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.373] SetLastError (dwErrCode=0x0) [0191.373] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{BE960C1C-7BAD-3DE6-8B1A-2616FE532845}v14.0.23026\\packages\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\{be960c1c-7bad-3de6-8b1a-2616fe532845}v14.0.23026\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.373] GetLastError () returned 0x5 [0191.373] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0191.373] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.374] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BE960C1C-7BAD-3DE6-8B1A-2616FE532845}v14.0.23026\\packages\\vcRuntimeAdditional_x86\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4ec0 [0191.374] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.374] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.374] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.374] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Package Cache\\{BE960C1C-7BAD-3DE6-8B1A-2616FE532845}v14.0.23026\\packages\\vcRuntimeAdditional_x86\\cab1.cab", dwFileAttributes=0x80) returned 0 [0191.374] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{BE960C1C-7BAD-3DE6-8B1A-2616FE532845}v14.0.23026\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{be960c1c-7bad-3de6-8b1a-2616fe532845}v14.0.23026\\packages\\vcruntimeadditional_x86\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.375] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.375] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.375] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.375] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.375] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Package Cache\\{BE960C1C-7BAD-3DE6-8B1A-2616FE532845}v14.0.23026\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi", dwFileAttributes=0x80) returned 0 [0191.376] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{BE960C1C-7BAD-3DE6-8B1A-2616FE532845}v14.0.23026\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\users\\all users\\package cache\\{be960c1c-7bad-3de6-8b1a-2616fe532845}v14.0.23026\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.376] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.376] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.377] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0191.377] FindClose (in: hFindFile=0x665abb4ec0 | out: hFindFile=0x665abb4ec0) returned 1 [0191.377] SetLastError (dwErrCode=0x0) [0191.377] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{BE960C1C-7BAD-3DE6-8B1A-2616FE532845}v14.0.23026\\packages\\vcRuntimeAdditional_x86\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\{be960c1c-7bad-3de6-8b1a-2616fe532845}v14.0.23026\\packages\\vcruntimeadditional_x86\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.377] GetLastError () returned 0x5 [0191.377] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0191.377] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.377] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0191.377] FindClose (in: hFindFile=0x665abb56a0 | out: hFindFile=0x665abb56a0) returned 1 [0191.377] SetLastError (dwErrCode=0x0) [0191.377] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{BE960C1C-7BAD-3DE6-8B1A-2616FE532845}v14.0.23026\\packages\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\{be960c1c-7bad-3de6-8b1a-2616fe532845}v14.0.23026\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.378] GetLastError () returned 0x5 [0191.378] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.378] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.378] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0191.378] FindClose (in: hFindFile=0x665abb4da0 | out: hFindFile=0x665abb4da0) returned 1 [0191.378] SetLastError (dwErrCode=0x0) [0191.378] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{BE960C1C-7BAD-3DE6-8B1A-2616FE532845}v14.0.23026\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\{be960c1c-7bad-3de6-8b1a-2616fe532845}v14.0.23026\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.378] GetLastError () returned 0x5 [0191.378] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.378] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.378] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0191.378] SetLastError (dwErrCode=0x0) [0191.378] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.379] GetLastError () returned 0x5 [0191.379] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.379] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.379] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb55e0 [0191.379] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.379] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.379] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.380] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm", dwFileAttributes=0x80) returned 0 [0191.380] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm" (normalized: "c:\\users\\all users\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.380] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.380] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.381] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.381] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0191.381] FindClose (in: hFindFile=0x665abb55e0 | out: hFindFile=0x665abb55e0) returned 1 [0191.381] SetLastError (dwErrCode=0x0) [0191.381] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.381] GetLastError () returned 0x5 [0191.381] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.381] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.381] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0191.381] SetLastError (dwErrCode=0x0) [0191.381] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.382] GetLastError () returned 0x5 [0191.382] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.382] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.382] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb42c0 [0191.382] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.382] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.382] SetLastError (dwErrCode=0x0) [0191.382] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.383] GetLastError () returned 0x5 [0191.383] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.383] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.383] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4ec0 [0191.383] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.383] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.383] SetLastError (dwErrCode=0x0) [0191.383] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.383] GetLastError () returned 0x5 [0191.383] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0191.383] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.383] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4da0 [0191.384] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.384] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.384] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.384] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\cab1.cab", dwFileAttributes=0x80) returned 0 [0191.385] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.385] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.385] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.385] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.385] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0191.385] FindClose (in: hFindFile=0x665abb4da0 | out: hFindFile=0x665abb4da0) returned 1 [0191.386] SetLastError (dwErrCode=0x0) [0191.386] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.386] GetLastError () returned 0x5 [0191.386] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0191.386] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.386] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0191.386] FindClose (in: hFindFile=0x665abb4ec0 | out: hFindFile=0x665abb4ec0) returned 1 [0191.386] SetLastError (dwErrCode=0x0) [0191.386] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.387] GetLastError () returned 0x5 [0191.387] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.387] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.387] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0191.387] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0191.387] SetLastError (dwErrCode=0x0) [0191.387] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.388] GetLastError () returned 0x5 [0191.388] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.388] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.388] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0191.388] SetLastError (dwErrCode=0x0) [0191.388] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.388] GetLastError () returned 0x5 [0191.388] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.388] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.388] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb4920 [0191.388] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.388] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.388] SetLastError (dwErrCode=0x0) [0191.388] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.389] GetLastError () returned 0x5 [0191.389] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.389] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.389] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4c20 [0191.389] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.389] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.389] SetLastError (dwErrCode=0x0) [0191.389] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.390] GetLastError () returned 0x5 [0191.390] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0191.390] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.390] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb5460 [0191.390] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.390] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.390] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.390] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\cab1.cab", dwFileAttributes=0x80) returned 0 [0191.391] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.392] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.392] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.392] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.392] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.392] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi", dwFileAttributes=0x80) returned 0 [0191.393] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.393] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.393] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.394] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0191.394] FindClose (in: hFindFile=0x665abb5460 | out: hFindFile=0x665abb5460) returned 1 [0191.394] SetLastError (dwErrCode=0x0) [0191.394] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.394] GetLastError () returned 0x5 [0191.394] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0191.395] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.395] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0191.395] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0191.395] SetLastError (dwErrCode=0x0) [0191.395] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.395] GetLastError () returned 0x5 [0191.395] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.395] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.395] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0191.395] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0191.395] SetLastError (dwErrCode=0x0) [0191.396] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.396] GetLastError () returned 0x5 [0191.396] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.396] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.396] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0191.396] SetLastError (dwErrCode=0x0) [0191.396] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.396] GetLastError () returned 0x5 [0191.396] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.397] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.397] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb42c0 [0191.397] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.397] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.397] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.397] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm", dwFileAttributes=0x80) returned 0 [0191.398] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm" (normalized: "c:\\users\\all users\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.398] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.398] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.398] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.398] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0191.398] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0191.398] SetLastError (dwErrCode=0x0) [0191.399] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.399] GetLastError () returned 0x5 [0191.399] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.399] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.399] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0191.399] SetLastError (dwErrCode=0x0) [0191.399] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.399] GetLastError () returned 0x5 [0191.400] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.400] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.400] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb5160 [0191.400] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.400] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.400] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.400] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm", dwFileAttributes=0x80) returned 0 [0191.401] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm" (normalized: "c:\\users\\all users\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.401] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.401] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.401] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.401] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0191.401] FindClose (in: hFindFile=0x665abb5160 | out: hFindFile=0x665abb5160) returned 1 [0191.402] SetLastError (dwErrCode=0x0) [0191.402] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.402] GetLastError () returned 0x5 [0191.402] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.402] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.402] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0191.402] SetLastError (dwErrCode=0x0) [0191.402] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.403] GetLastError () returned 0x5 [0191.403] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.403] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.403] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb4ec0 [0191.403] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.403] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.403] SetLastError (dwErrCode=0x0) [0191.403] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.403] GetLastError () returned 0x5 [0191.403] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.403] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.403] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb5340 [0191.404] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.404] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.404] SetLastError (dwErrCode=0x0) [0191.404] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.404] GetLastError () returned 0x5 [0191.404] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0191.404] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.404] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4920 [0191.404] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.404] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.404] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.405] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\cab1.cab", dwFileAttributes=0x80) returned 0 [0191.405] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.406] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.406] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.406] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.406] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.406] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi", dwFileAttributes=0x80) returned 0 [0191.407] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.408] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.408] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.408] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0191.408] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0191.408] SetLastError (dwErrCode=0x0) [0191.409] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.409] GetLastError () returned 0x5 [0191.409] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0191.409] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.409] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0191.409] FindClose (in: hFindFile=0x665abb5340 | out: hFindFile=0x665abb5340) returned 1 [0191.409] SetLastError (dwErrCode=0x0) [0191.409] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.410] GetLastError () returned 0x5 [0191.410] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0191.410] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.410] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0191.410] FindClose (in: hFindFile=0x665abb4ec0 | out: hFindFile=0x665abb4ec0) returned 1 [0191.410] SetLastError (dwErrCode=0x0) [0191.410] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.410] GetLastError () returned 0x5 [0191.410] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0191.410] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.410] FindNextFileW (in: hFindFile=0x665abb5040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0191.410] FindClose (in: hFindFile=0x665abb5040 | out: hFindFile=0x665abb5040) returned 1 [0191.411] SetLastError (dwErrCode=0x0) [0191.411] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\package cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.411] GetLastError () returned 0x5 [0191.411] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0191.411] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.411] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0191.411] SetLastError (dwErrCode=0x0) [0191.411] CreateFileW (lpFileName="C:\\Users\\All Users\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0191.412] GetLastError () returned 0xb7 [0191.412] CloseHandle (hObject=0x470) returned 1 [0191.412] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\regid.1991-06.com.microsoft\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665abb4920 [0191.413] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0191.413] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0191.413] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.413] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag", dwFileAttributes=0x80) returned 0 [0191.414] CreateFileW (lpFileName="C:\\Users\\All Users\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag" (normalized: "c:\\users\\all users\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft office 16 click-to-run extensibility component.swidtag"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.414] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.414] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.414] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0191.414] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.415] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag", dwFileAttributes=0x80) returned 0 [0191.415] CreateFileW (lpFileName="C:\\Users\\All Users\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag" (normalized: "c:\\users\\all users\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft office 16 click-to-run licensing component.swidtag"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.416] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.416] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.416] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0191.416] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.416] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag", dwFileAttributes=0x80) returned 0 [0191.417] CreateFileW (lpFileName="C:\\Users\\All Users\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag" (normalized: "c:\\users\\all users\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft office 16 click-to-run localization component.swidtag"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.417] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.417] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.417] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0191.417] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0191.417] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0191.418] SetLastError (dwErrCode=0x0) [0191.418] CreateFileW (lpFileName="C:\\Users\\All Users\\regid.1991-06.com.microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\regid.1991-06.com.microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.423] GetLastError () returned 0x5 [0191.423] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0191.424] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.424] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0191.424] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0191.424] SetLastError (dwErrCode=0x0) [0191.424] CreateFileW (lpFileName="C:\\Users\\All Users\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0191.424] GetLastError () returned 0xb7 [0191.424] CloseHandle (hObject=0x470) returned 1 [0191.424] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\SoftwareDistribution\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665abb4560 [0191.424] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0191.424] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0191.424] FindClose (in: hFindFile=0x665abb4560 | out: hFindFile=0x665abb4560) returned 1 [0191.425] SetLastError (dwErrCode=0x0) [0191.425] CreateFileW (lpFileName="C:\\Users\\All Users\\SoftwareDistribution\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\softwaredistribution\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.425] GetLastError () returned 0x5 [0191.425] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0191.425] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.425] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0191.425] SetLastError (dwErrCode=0x0) [0191.425] CreateFileW (lpFileName="C:\\Users\\All Users\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0191.426] GetLastError () returned 0xb7 [0191.426] CloseHandle (hObject=0x470) returned 1 [0191.426] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Start Menu\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0xffffffffffffffff [0191.426] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0191.426] SetLastError (dwErrCode=0x0) [0191.426] CreateFileW (lpFileName="C:\\Users\\All Users\\Start Menu\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\start menu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.426] GetLastError () returned 0x5 [0191.426] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0191.426] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.426] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0191.427] SetLastError (dwErrCode=0x0) [0191.427] CreateFileW (lpFileName="C:\\Users\\All Users\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0191.427] GetLastError () returned 0xb7 [0191.427] CloseHandle (hObject=0x470) returned 1 [0191.427] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Templates\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0xffffffffffffffff [0191.427] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0191.427] SetLastError (dwErrCode=0x0) [0191.427] CreateFileW (lpFileName="C:\\Users\\All Users\\Templates\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\templates\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.428] GetLastError () returned 0x5 [0191.428] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0191.428] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.428] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0191.428] SetLastError (dwErrCode=0x0) [0191.428] CreateFileW (lpFileName="C:\\Users\\All Users\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0191.428] GetLastError () returned 0xb7 [0191.428] CloseHandle (hObject=0x470) returned 1 [0191.428] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\USOPrivate\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665abb5760 [0191.429] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0191.429] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0191.429] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0191.429] SetLastError (dwErrCode=0x0) [0191.429] CreateFileW (lpFileName="C:\\Users\\All Users\\USOPrivate\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\usoprivate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0191.429] GetLastError () returned 0xb7 [0191.429] CloseHandle (hObject=0x47c) returned 1 [0191.429] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\USOPrivate\\UpdateStore\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb56a0 [0191.429] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.429] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.429] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.429] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.430] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\USOPrivate\\UpdateStore\\updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml", dwFileAttributes=0x80) returned 0 [0191.430] CreateFileW (lpFileName="C:\\Users\\All Users\\USOPrivate\\UpdateStore\\updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml" (normalized: "c:\\users\\all users\\usoprivate\\updatestore\\updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.431] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.431] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.431] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0191.431] FindClose (in: hFindFile=0x665abb56a0 | out: hFindFile=0x665abb56a0) returned 1 [0191.431] SetLastError (dwErrCode=0x0) [0191.431] CreateFileW (lpFileName="C:\\Users\\All Users\\USOPrivate\\UpdateStore\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\usoprivate\\updatestore\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0191.432] GetLastError () returned 0xb7 [0191.432] CloseHandle (hObject=0x47c) returned 1 [0191.432] FindNextFileW (in: hFindFile=0x665abb5760, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0191.432] FindClose (in: hFindFile=0x665abb5760 | out: hFindFile=0x665abb5760) returned 1 [0191.432] SetLastError (dwErrCode=0x0) [0191.432] CreateFileW (lpFileName="C:\\Users\\All Users\\USOPrivate\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\usoprivate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0191.432] GetLastError () returned 0xb7 [0191.432] CloseHandle (hObject=0x470) returned 1 [0191.433] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0191.433] SetLastError (dwErrCode=0x0) [0191.433] CreateFileW (lpFileName="C:\\Users\\All Users\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0191.433] GetLastError () returned 0xb7 [0191.433] CloseHandle (hObject=0x470) returned 1 [0191.433] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\USOShared\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665abb5340 [0191.433] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0191.433] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0191.433] SetLastError (dwErrCode=0x0) [0191.433] CreateFileW (lpFileName="C:\\Users\\All Users\\USOShared\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\usoshared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0191.434] GetLastError () returned 0xb7 [0191.434] CloseHandle (hObject=0x47c) returned 1 [0191.434] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\USOShared\\Logs\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb53a0 [0191.434] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.434] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.434] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.434] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.434] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\USOShared\\Logs\\UpdateSessionOrchestration.001.etl", dwFileAttributes=0x80) returned 0 [0191.435] CreateFileW (lpFileName="C:\\Users\\All Users\\USOShared\\Logs\\UpdateSessionOrchestration.001.etl" (normalized: "c:\\users\\all users\\usoshared\\logs\\updatesessionorchestration.001.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.435] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.435] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.436] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.436] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.436] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\USOShared\\Logs\\UpdateSessionOrchestration.002.etl", dwFileAttributes=0x80) returned 0 [0191.436] CreateFileW (lpFileName="C:\\Users\\All Users\\USOShared\\Logs\\UpdateSessionOrchestration.002.etl" (normalized: "c:\\users\\all users\\usoshared\\logs\\updatesessionorchestration.002.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.437] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.437] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.437] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.437] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.438] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\USOShared\\Logs\\UpdateSessionOrchestration.003.etl", dwFileAttributes=0x80) returned 0 [0191.439] CreateFileW (lpFileName="C:\\Users\\All Users\\USOShared\\Logs\\UpdateSessionOrchestration.003.etl" (normalized: "c:\\users\\all users\\usoshared\\logs\\updatesessionorchestration.003.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.439] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.439] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.439] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.439] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.440] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\USOShared\\Logs\\UpdateSessionOrchestration.004.etl", dwFileAttributes=0x80) returned 0 [0191.440] CreateFileW (lpFileName="C:\\Users\\All Users\\USOShared\\Logs\\UpdateSessionOrchestration.004.etl" (normalized: "c:\\users\\all users\\usoshared\\logs\\updatesessionorchestration.004.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.440] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.441] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.441] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.441] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.441] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\USOShared\\Logs\\UpdateSessionOrchestration.005.etl", dwFileAttributes=0x80) returned 0 [0191.442] CreateFileW (lpFileName="C:\\Users\\All Users\\USOShared\\Logs\\UpdateSessionOrchestration.005.etl" (normalized: "c:\\users\\all users\\usoshared\\logs\\updatesessionorchestration.005.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.442] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.442] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.442] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.442] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.443] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\USOShared\\Logs\\UpdateSessionOrchestration.006.etl", dwFileAttributes=0x80) returned 0 [0191.443] CreateFileW (lpFileName="C:\\Users\\All Users\\USOShared\\Logs\\UpdateSessionOrchestration.006.etl" (normalized: "c:\\users\\all users\\usoshared\\logs\\updatesessionorchestration.006.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.443] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.444] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.444] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.444] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.444] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\USOShared\\Logs\\UpdateSessionOrchestration.007.etl", dwFileAttributes=0x80) returned 0 [0191.445] CreateFileW (lpFileName="C:\\Users\\All Users\\USOShared\\Logs\\UpdateSessionOrchestration.007.etl" (normalized: "c:\\users\\all users\\usoshared\\logs\\updatesessionorchestration.007.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.445] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.445] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.445] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.445] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.446] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\USOShared\\Logs\\UpdateSessionOrchestration.008.etl", dwFileAttributes=0x80) returned 0 [0191.446] CreateFileW (lpFileName="C:\\Users\\All Users\\USOShared\\Logs\\UpdateSessionOrchestration.008.etl" (normalized: "c:\\users\\all users\\usoshared\\logs\\updatesessionorchestration.008.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.446] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.447] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.447] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.447] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.447] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\USOShared\\Logs\\UpdateSessionOrchestration.009.etl", dwFileAttributes=0x80) returned 0 [0191.448] CreateFileW (lpFileName="C:\\Users\\All Users\\USOShared\\Logs\\UpdateSessionOrchestration.009.etl" (normalized: "c:\\users\\all users\\usoshared\\logs\\updatesessionorchestration.009.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.448] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.448] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.448] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.448] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.449] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\USOShared\\Logs\\UpdateSessionOrchestration.010.etl", dwFileAttributes=0x80) returned 0 [0191.449] CreateFileW (lpFileName="C:\\Users\\All Users\\USOShared\\Logs\\UpdateSessionOrchestration.010.etl" (normalized: "c:\\users\\all users\\usoshared\\logs\\updatesessionorchestration.010.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.449] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.449] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.450] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.450] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.450] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\USOShared\\Logs\\UpdateSessionOrchestration.011.etl", dwFileAttributes=0x80) returned 0 [0191.451] CreateFileW (lpFileName="C:\\Users\\All Users\\USOShared\\Logs\\UpdateSessionOrchestration.011.etl" (normalized: "c:\\users\\all users\\usoshared\\logs\\updatesessionorchestration.011.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.451] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.451] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.451] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.451] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.452] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\USOShared\\Logs\\UpdateSessionOrchestration.012.etl", dwFileAttributes=0x80) returned 0 [0191.452] CreateFileW (lpFileName="C:\\Users\\All Users\\USOShared\\Logs\\UpdateSessionOrchestration.012.etl" (normalized: "c:\\users\\all users\\usoshared\\logs\\updatesessionorchestration.012.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.452] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.453] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.453] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.453] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.453] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\USOShared\\Logs\\UpdateSessionOrchestration.013.etl", dwFileAttributes=0x80) returned 0 [0191.454] CreateFileW (lpFileName="C:\\Users\\All Users\\USOShared\\Logs\\UpdateSessionOrchestration.013.etl" (normalized: "c:\\users\\all users\\usoshared\\logs\\updatesessionorchestration.013.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.454] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.454] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.455] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.455] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.455] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\USOShared\\Logs\\UpdateSessionOrchestration.014.etl", dwFileAttributes=0x80) returned 0 [0191.456] CreateFileW (lpFileName="C:\\Users\\All Users\\USOShared\\Logs\\UpdateSessionOrchestration.014.etl" (normalized: "c:\\users\\all users\\usoshared\\logs\\updatesessionorchestration.014.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.456] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.456] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.456] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.456] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.457] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\USOShared\\Logs\\UpdateSessionOrchestration.015.etl", dwFileAttributes=0x80) returned 0 [0191.457] CreateFileW (lpFileName="C:\\Users\\All Users\\USOShared\\Logs\\UpdateSessionOrchestration.015.etl" (normalized: "c:\\users\\all users\\usoshared\\logs\\updatesessionorchestration.015.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.458] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.458] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.458] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.458] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.458] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\USOShared\\Logs\\UpdateSessionOrchestration.016.etl", dwFileAttributes=0x80) returned 0 [0191.459] CreateFileW (lpFileName="C:\\Users\\All Users\\USOShared\\Logs\\UpdateSessionOrchestration.016.etl" (normalized: "c:\\users\\all users\\usoshared\\logs\\updatesessionorchestration.016.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.459] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.459] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.459] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.459] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.460] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\USOShared\\Logs\\UpdateSessionOrchestration.017.etl", dwFileAttributes=0x80) returned 0 [0191.460] CreateFileW (lpFileName="C:\\Users\\All Users\\USOShared\\Logs\\UpdateSessionOrchestration.017.etl" (normalized: "c:\\users\\all users\\usoshared\\logs\\updatesessionorchestration.017.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.461] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.461] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.461] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.461] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.461] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\USOShared\\Logs\\UpdateSessionOrchestration.018.etl", dwFileAttributes=0x80) returned 0 [0191.462] CreateFileW (lpFileName="C:\\Users\\All Users\\USOShared\\Logs\\UpdateSessionOrchestration.018.etl" (normalized: "c:\\users\\all users\\usoshared\\logs\\updatesessionorchestration.018.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.462] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.462] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.462] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.462] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.463] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\USOShared\\Logs\\UpdateSessionOrchestration.019.etl", dwFileAttributes=0x80) returned 0 [0191.463] CreateFileW (lpFileName="C:\\Users\\All Users\\USOShared\\Logs\\UpdateSessionOrchestration.019.etl" (normalized: "c:\\users\\all users\\usoshared\\logs\\updatesessionorchestration.019.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.464] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.464] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.464] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.464] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.464] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\USOShared\\Logs\\UpdateUx.001.etl", dwFileAttributes=0x80) returned 1 [0191.465] CreateFileW (lpFileName="C:\\Users\\All Users\\USOShared\\Logs\\UpdateUx.001.etl" (normalized: "c:\\users\\all users\\usoshared\\logs\\updateux.001.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0191.465] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=4674) returned 1 [0191.466] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=4674) returned 1 [0191.466] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x1120, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.466] ReadFile (in: hFile=0x570, lpBuffer=0x665da7ca98, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca98*, lpNumberOfBytesRead=0x665da7ca58*=0x19, lpOverlapped=0x0) returned 1 [0191.466] CloseHandle (hObject=0x570) returned 1 [0191.466] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.466] FindNextFileW (in: hFindFile=0x665abb53a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0191.466] FindClose (in: hFindFile=0x665abb53a0 | out: hFindFile=0x665abb53a0) returned 1 [0191.466] SetLastError (dwErrCode=0x0) [0191.466] CreateFileW (lpFileName="C:\\Users\\All Users\\USOShared\\Logs\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\usoshared\\logs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0191.467] GetLastError () returned 0xb7 [0191.467] CloseHandle (hObject=0x47c) returned 1 [0191.467] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0191.467] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0191.467] FindClose (in: hFindFile=0x665abb5340 | out: hFindFile=0x665abb5340) returned 1 [0191.467] SetLastError (dwErrCode=0x0) [0191.467] CreateFileW (lpFileName="C:\\Users\\All Users\\USOShared\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\usoshared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0191.467] GetLastError () returned 0xb7 [0191.468] CloseHandle (hObject=0x470) returned 1 [0191.468] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0191.468] FindClose (in: hFindFile=0x665abb4440 | out: hFindFile=0x665abb4440) returned 1 [0191.468] SetLastError (dwErrCode=0x0) [0191.468] CreateFileW (lpFileName="C:\\Users\\All Users\\RyukReadMe.txt" (normalized: "c:\\users\\all users\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x430 [0191.468] GetLastError () returned 0xb7 [0191.468] CloseHandle (hObject=0x430) returned 1 [0191.468] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0191.468] SetLastError (dwErrCode=0x0) [0191.468] CreateFileW (lpFileName="C:\\Users\\RyukReadMe.txt" (normalized: "c:\\users\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.469] GetLastError () returned 0x5 [0191.469] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0191.469] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0191.469] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665abb5280 [0191.469] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0191.469] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0191.469] SetLastError (dwErrCode=0x0) [0191.469] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0191.470] GetLastError () returned 0xb7 [0191.470] CloseHandle (hObject=0x470) returned 1 [0191.470] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665abb4da0 [0191.470] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0191.470] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0191.470] SetLastError (dwErrCode=0x0) [0191.470] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0191.471] GetLastError () returned 0xb7 [0191.471] CloseHandle (hObject=0x47c) returned 1 [0191.471] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665abb5160 [0191.471] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.471] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0191.471] SetLastError (dwErrCode=0x0) [0191.471] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0191.472] GetLastError () returned 0xb7 [0191.472] CloseHandle (hObject=0x570) returned 1 [0191.472] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb4ec0 [0191.473] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.473] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.473] SetLastError (dwErrCode=0x0) [0191.473] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x50c [0191.473] GetLastError () returned 0xb7 [0191.473] CloseHandle (hObject=0x50c) returned 1 [0191.474] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb5460 [0191.474] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.474] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.474] SetLastError (dwErrCode=0x0) [0191.474] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x670 [0191.475] GetLastError () returned 0xb7 [0191.475] CloseHandle (hObject=0x670) returned 1 [0191.475] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4920 [0191.476] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0191.476] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0191.476] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.477] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt15.lst", dwFileAttributes=0x80) returned 1 [0191.478] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt15.lst" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\adobecmapfnt15.lst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x40c [0191.478] GetFileSizeEx (in: hFile=0x40c, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=1314) returned 1 [0191.478] GetFileSizeEx (in: hFile=0x40c, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=1314) returned 1 [0191.478] SetFilePointerEx (in: hFile=0x40c, liDistanceToMove=0x400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.478] ReadFile (in: hFile=0x40c, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0191.480] SetFilePointer (in: hFile=0x40c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0191.480] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9ad50) returned 1 [0191.480] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0191.480] SetFilePointer (in: hFile=0x40c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0191.480] ReadFile (in: hFile=0x40c, lpBuffer=0x665da80000, nNumberOfBytesToRead=0x522, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesRead=0x665da7b320*=0x522, lpOverlapped=0x0) returned 1 [0191.481] CryptEncrypt (in: hKey=0x665ab9ad50, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0191.481] CryptEncrypt (in: hKey=0x665ab9ad50, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665da80000*, pdwDataLen=0x665da7b318*=0x522, dwBufLen=0xf4250 | out: pbData=0x665da80000*, pdwDataLen=0x665da7b318*=0x530) returned 1 [0191.481] SetFilePointer (in: hFile=0x40c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0191.481] WriteFile (in: hFile=0x40c, lpBuffer=0x665da80000*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesWritten=0x665da7b320*=0x530, lpOverlapped=0x0) returned 1 [0191.481] WriteFile (in: hFile=0x40c, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0191.481] CryptExportKey (in: hKey=0x665ab9ad50, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0191.481] CryptExportKey (in: hKey=0x665ab9ad50, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0191.481] WriteFile (in: hFile=0x40c, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0191.481] CloseHandle (hObject=0x40c) returned 1 [0191.497] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.502] CryptDestroyKey (hKey=0x665ab9ad50) returned 1 [0191.502] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.503] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0191.503] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.503] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt17.lst", dwFileAttributes=0x80) returned 1 [0191.504] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt17.lst" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\adobecmapfnt17.lst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x40c [0191.504] GetFileSizeEx (in: hFile=0x40c, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=818) returned 1 [0191.504] GetFileSizeEx (in: hFile=0x40c, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=818) returned 1 [0191.504] SetFilePointerEx (in: hFile=0x40c, liDistanceToMove=0x210, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.504] ReadFile (in: hFile=0x40c, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0191.506] CloseHandle (hObject=0x40c) returned 1 [0191.506] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.506] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0191.506] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.507] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt15.lst", dwFileAttributes=0x80) returned 1 [0191.507] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt15.lst" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\adobesysfnt15.lst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x40c [0191.507] GetFileSizeEx (in: hFile=0x40c, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=90706) returned 1 [0191.508] GetFileSizeEx (in: hFile=0x40c, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=90706) returned 1 [0191.508] SetFilePointerEx (in: hFile=0x40c, liDistanceToMove=0x16130, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.508] ReadFile (in: hFile=0x40c, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0191.509] SetFilePointer (in: hFile=0x40c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0191.509] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9a9d0) returned 1 [0191.509] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0191.510] SetFilePointer (in: hFile=0x40c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0191.510] ReadFile (in: hFile=0x40c, lpBuffer=0x665da80000, nNumberOfBytesToRead=0x16252, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesRead=0x665da7b320*=0x16252, lpOverlapped=0x0) returned 1 [0191.513] CryptEncrypt (in: hKey=0x665ab9a9d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0191.513] CryptEncrypt (in: hKey=0x665ab9a9d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665da80000*, pdwDataLen=0x665da7b318*=0x16252, dwBufLen=0xf4250 | out: pbData=0x665da80000*, pdwDataLen=0x665da7b318*=0x16260) returned 1 [0191.513] SetFilePointer (in: hFile=0x40c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0191.513] WriteFile (in: hFile=0x40c, lpBuffer=0x665da80000*, nNumberOfBytesToWrite=0x16260, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesWritten=0x665da7b320*=0x16260, lpOverlapped=0x0) returned 1 [0191.514] WriteFile (in: hFile=0x40c, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0191.514] CryptExportKey (in: hKey=0x665ab9a9d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0191.514] CryptExportKey (in: hKey=0x665ab9a9d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0191.514] WriteFile (in: hFile=0x40c, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0191.514] CloseHandle (hObject=0x40c) returned 1 [0191.528] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.532] CryptDestroyKey (hKey=0x665ab9a9d0) returned 1 [0191.532] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.532] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0191.532] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.532] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt17.lst", dwFileAttributes=0x80) returned 1 [0191.533] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt17.lst" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\adobesysfnt17.lst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x40c [0191.533] GetFileSizeEx (in: hFile=0x40c, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=150642) returned 1 [0191.533] GetFileSizeEx (in: hFile=0x40c, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=150642) returned 1 [0191.533] SetFilePointerEx (in: hFile=0x40c, liDistanceToMove=0x24b50, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.533] ReadFile (in: hFile=0x40c, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0191.534] SetFilePointer (in: hFile=0x40c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0191.534] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9a0a0) returned 1 [0191.534] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0191.535] SetFilePointer (in: hFile=0x40c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0191.535] ReadFile (in: hFile=0x40c, lpBuffer=0x665da80000, nNumberOfBytesToRead=0x24c72, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesRead=0x665da7b320*=0x24c72, lpOverlapped=0x0) returned 1 [0191.538] CryptEncrypt (in: hKey=0x665ab9a0a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0191.538] CryptEncrypt (in: hKey=0x665ab9a0a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665da80000*, pdwDataLen=0x665da7b318*=0x24c72, dwBufLen=0xf4250 | out: pbData=0x665da80000*, pdwDataLen=0x665da7b318*=0x24c80) returned 1 [0191.538] SetFilePointer (in: hFile=0x40c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0191.538] WriteFile (in: hFile=0x40c, lpBuffer=0x665da80000*, nNumberOfBytesToWrite=0x24c80, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesWritten=0x665da7b320*=0x24c80, lpOverlapped=0x0) returned 1 [0191.539] WriteFile (in: hFile=0x40c, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0191.539] CryptExportKey (in: hKey=0x665ab9a0a0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0191.539] CryptExportKey (in: hKey=0x665ab9a0a0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0191.539] WriteFile (in: hFile=0x40c, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0191.539] CloseHandle (hObject=0x40c) returned 1 [0191.554] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.559] CryptDestroyKey (hKey=0x665ab9a0a0) returned 1 [0191.560] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.560] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0191.560] SetLastError (dwErrCode=0x0) [0191.560] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x40c [0191.567] GetLastError () returned 0xb7 [0191.567] CloseHandle (hObject=0x40c) returned 1 [0191.567] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb56a0 [0191.568] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0191.568] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0191.569] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.569] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt15.lst", dwFileAttributes=0x80) returned 1 [0191.570] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt15.lst" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\cache\\acrofnt15.lst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0191.570] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=9842) returned 1 [0191.570] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=9842) returned 1 [0191.570] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x2550, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.570] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0191.571] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0191.572] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a9d0) returned 1 [0191.572] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0191.572] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0191.572] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da80000, nNumberOfBytesToRead=0x2672, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesRead=0x665da7ab70*=0x2672, lpOverlapped=0x0) returned 1 [0191.573] CryptEncrypt (in: hKey=0x665ab9a9d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0191.573] CryptEncrypt (in: hKey=0x665ab9a9d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665da80000*, pdwDataLen=0x665da7ab68*=0x2672, dwBufLen=0xf4250 | out: pbData=0x665da80000*, pdwDataLen=0x665da7ab68*=0x2680) returned 1 [0191.573] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0191.573] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da80000*, nNumberOfBytesToWrite=0x2680, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesWritten=0x665da7ab70*=0x2680, lpOverlapped=0x0) returned 1 [0191.573] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0191.573] CryptExportKey (in: hKey=0x665ab9a9d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0191.573] CryptExportKey (in: hKey=0x665ab9a9d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0191.573] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0191.573] CloseHandle (hObject=0x3e8) returned 1 [0191.587] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.591] CryptDestroyKey (hKey=0x665ab9a9d0) returned 1 [0191.591] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.591] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0191.591] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.592] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt17.lst", dwFileAttributes=0x80) returned 1 [0191.592] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt17.lst" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\cache\\acrofnt17.lst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0191.592] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=9566) returned 1 [0191.593] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=9566) returned 1 [0191.593] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x243c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.593] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0191.594] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0191.594] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a2d0) returned 1 [0191.594] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0191.595] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0191.595] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da80000, nNumberOfBytesToRead=0x255e, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesRead=0x665da7ab70*=0x255e, lpOverlapped=0x0) returned 1 [0191.595] CryptEncrypt (in: hKey=0x665ab9a2d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0191.595] CryptEncrypt (in: hKey=0x665ab9a2d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665da80000*, pdwDataLen=0x665da7ab68*=0x255e, dwBufLen=0xf4250 | out: pbData=0x665da80000*, pdwDataLen=0x665da7ab68*=0x2560) returned 1 [0191.595] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0191.595] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da80000*, nNumberOfBytesToWrite=0x2560, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesWritten=0x665da7ab70*=0x2560, lpOverlapped=0x0) returned 1 [0191.596] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0191.596] CryptExportKey (in: hKey=0x665ab9a2d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0191.596] CryptExportKey (in: hKey=0x665ab9a2d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0191.596] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0191.596] CloseHandle (hObject=0x3e8) returned 1 [0191.612] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.616] CryptDestroyKey (hKey=0x665ab9a2d0) returned 1 [0191.616] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.616] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0191.616] FindClose (in: hFindFile=0x665abb56a0 | out: hFindFile=0x665abb56a0) returned 1 [0191.616] SetLastError (dwErrCode=0x0) [0191.616] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x40c [0191.617] GetLastError () returned 0x0 [0191.617] WriteFile (in: hFile=0x40c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0191.617] CloseHandle (hObject=0x40c) returned 1 [0191.618] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0191.618] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.618] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr.dat", dwFileAttributes=0x80) returned 1 [0191.619] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\iconcacherdr.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x40c [0191.619] GetFileSizeEx (in: hFile=0x40c, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=53574) returned 1 [0191.619] GetFileSizeEx (in: hFile=0x40c, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=53574) returned 1 [0191.619] SetFilePointerEx (in: hFile=0x40c, liDistanceToMove=0xd024, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.619] ReadFile (in: hFile=0x40c, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0191.620] SetFilePointer (in: hFile=0x40c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0191.620] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9a0a0) returned 1 [0191.621] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0191.621] SetFilePointer (in: hFile=0x40c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0191.621] ReadFile (in: hFile=0x40c, lpBuffer=0x665da80000, nNumberOfBytesToRead=0xd146, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesRead=0x665da7b320*=0xd146, lpOverlapped=0x0) returned 1 [0191.622] CryptEncrypt (in: hKey=0x665ab9a0a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0191.622] CryptEncrypt (in: hKey=0x665ab9a0a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665da80000*, pdwDataLen=0x665da7b318*=0xd146, dwBufLen=0xf4250 | out: pbData=0x665da80000*, pdwDataLen=0x665da7b318*=0xd150) returned 1 [0191.623] SetFilePointer (in: hFile=0x40c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0191.623] WriteFile (in: hFile=0x40c, lpBuffer=0x665da80000*, nNumberOfBytesToWrite=0xd150, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesWritten=0x665da7b320*=0xd150, lpOverlapped=0x0) returned 1 [0191.623] WriteFile (in: hFile=0x40c, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0191.623] CryptExportKey (in: hKey=0x665ab9a0a0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0191.623] CryptExportKey (in: hKey=0x665ab9a0a0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0191.623] WriteFile (in: hFile=0x40c, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0191.623] CloseHandle (hObject=0x40c) returned 1 [0191.637] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.643] CryptDestroyKey (hKey=0x665ab9a0a0) returned 1 [0191.643] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.643] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0191.643] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.644] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr65536.dat", dwFileAttributes=0x80) returned 1 [0191.645] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr65536.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\iconcacherdr65536.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x40c [0191.645] GetFileSizeEx (in: hFile=0x40c, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=186947) returned 1 [0191.645] GetFileSizeEx (in: hFile=0x40c, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=186947) returned 1 [0191.646] SetFilePointerEx (in: hFile=0x40c, liDistanceToMove=0x2d921, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.646] ReadFile (in: hFile=0x40c, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0191.647] SetFilePointer (in: hFile=0x40c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0191.647] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9ae30) returned 1 [0191.647] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0191.647] SetFilePointer (in: hFile=0x40c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0191.648] ReadFile (in: hFile=0x40c, lpBuffer=0x665da80000, nNumberOfBytesToRead=0x2da43, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesRead=0x665da7b320*=0x2da43, lpOverlapped=0x0) returned 1 [0191.652] CryptEncrypt (in: hKey=0x665ab9ae30, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0191.652] CryptEncrypt (in: hKey=0x665ab9ae30, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665da80000*, pdwDataLen=0x665da7b318*=0x2da43, dwBufLen=0xf4250 | out: pbData=0x665da80000*, pdwDataLen=0x665da7b318*=0x2da50) returned 1 [0191.653] SetFilePointer (in: hFile=0x40c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0191.653] WriteFile (in: hFile=0x40c, lpBuffer=0x665da80000*, nNumberOfBytesToWrite=0x2da50, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesWritten=0x665da7b320*=0x2da50, lpOverlapped=0x0) returned 1 [0191.654] WriteFile (in: hFile=0x40c, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0191.654] CryptExportKey (in: hKey=0x665ab9ae30, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0191.654] CryptExportKey (in: hKey=0x665ab9ae30, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0191.654] WriteFile (in: hFile=0x40c, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0191.654] CloseHandle (hObject=0x40c) returned 1 [0191.674] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.679] CryptDestroyKey (hKey=0x665ab9ae30) returned 1 [0191.679] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.679] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0191.679] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0191.679] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.679] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\SharedDataEvents", dwFileAttributes=0x80) returned 1 [0191.681] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\SharedDataEvents" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\shareddataevents"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x40c [0191.681] GetFileSizeEx (in: hFile=0x40c, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=6144) returned 1 [0191.681] GetFileSizeEx (in: hFile=0x40c, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=6144) returned 1 [0191.681] SetFilePointerEx (in: hFile=0x40c, liDistanceToMove=0x16de, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.681] ReadFile (in: hFile=0x40c, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0191.682] SetFilePointer (in: hFile=0x40c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0191.682] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9a9d0) returned 1 [0191.682] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0191.683] SetFilePointer (in: hFile=0x40c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0191.683] ReadFile (in: hFile=0x40c, lpBuffer=0x665da80000, nNumberOfBytesToRead=0x1800, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesRead=0x665da7b320*=0x1800, lpOverlapped=0x0) returned 1 [0191.683] CryptEncrypt (in: hKey=0x665ab9a9d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0191.683] CryptEncrypt (in: hKey=0x665ab9a9d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665da80000*, pdwDataLen=0x665da7b318*=0x1800, dwBufLen=0xf4250 | out: pbData=0x665da80000*, pdwDataLen=0x665da7b318*=0x1810) returned 1 [0191.683] SetFilePointer (in: hFile=0x40c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0191.683] WriteFile (in: hFile=0x40c, lpBuffer=0x665da80000*, nNumberOfBytesToWrite=0x1810, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesWritten=0x665da7b320*=0x1810, lpOverlapped=0x0) returned 1 [0191.683] WriteFile (in: hFile=0x40c, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0191.683] CryptExportKey (in: hKey=0x665ab9a9d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0191.684] CryptExportKey (in: hKey=0x665ab9a9d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0191.684] WriteFile (in: hFile=0x40c, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0191.684] CloseHandle (hObject=0x40c) returned 1 [0191.696] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.700] CryptDestroyKey (hKey=0x665ab9a9d0) returned 1 [0191.700] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.700] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0191.700] SetLastError (dwErrCode=0x0) [0191.700] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x40c [0191.701] GetLastError () returned 0xb7 [0191.701] CloseHandle (hObject=0x40c) returned 1 [0191.701] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\ToolsSearchCacheRdr\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb4c80 [0191.701] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0191.702] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0191.702] FindClose (in: hFindFile=0x665abb4c80 | out: hFindFile=0x665abb4c80) returned 1 [0191.702] SetLastError (dwErrCode=0x0) [0191.702] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\ToolsSearchCacheRdr\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\toolssearchcacherdr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x40c [0191.702] GetLastError () returned 0x0 [0191.702] WriteFile (in: hFile=0x40c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0191.703] CloseHandle (hObject=0x40c) returned 1 [0191.703] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0191.703] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.703] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\UserCache.bin", dwFileAttributes=0x80) returned 1 [0191.704] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\UserCache.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\usercache.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x40c [0191.704] GetFileSizeEx (in: hFile=0x40c, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=63413) returned 1 [0191.704] GetFileSizeEx (in: hFile=0x40c, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=63413) returned 1 [0191.704] SetFilePointerEx (in: hFile=0x40c, liDistanceToMove=0xf693, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.705] ReadFile (in: hFile=0x40c, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0191.706] SetFilePointer (in: hFile=0x40c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0191.706] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9a0a0) returned 1 [0191.706] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0191.706] SetFilePointer (in: hFile=0x40c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0191.706] ReadFile (in: hFile=0x40c, lpBuffer=0x665da80000, nNumberOfBytesToRead=0xf7b5, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesRead=0x665da7b320*=0xf7b5, lpOverlapped=0x0) returned 1 [0191.708] CryptEncrypt (in: hKey=0x665ab9a0a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0191.708] CryptEncrypt (in: hKey=0x665ab9a0a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665da80000*, pdwDataLen=0x665da7b318*=0xf7b5, dwBufLen=0xf4250 | out: pbData=0x665da80000*, pdwDataLen=0x665da7b318*=0xf7c0) returned 1 [0191.708] SetFilePointer (in: hFile=0x40c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0191.708] WriteFile (in: hFile=0x40c, lpBuffer=0x665da80000*, nNumberOfBytesToWrite=0xf7c0, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesWritten=0x665da7b320*=0xf7c0, lpOverlapped=0x0) returned 1 [0191.709] WriteFile (in: hFile=0x40c, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0191.709] CryptExportKey (in: hKey=0x665ab9a0a0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0191.709] CryptExportKey (in: hKey=0x665ab9a0a0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0191.709] WriteFile (in: hFile=0x40c, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0191.709] CloseHandle (hObject=0x40c) returned 1 [0191.724] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.729] CryptDestroyKey (hKey=0x665ab9a0a0) returned 1 [0191.729] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.730] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0191.730] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0191.730] SetLastError (dwErrCode=0x0) [0191.730] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x670 [0191.730] GetLastError () returned 0xb7 [0191.730] CloseHandle (hObject=0x670) returned 1 [0191.730] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.730] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0191.730] FindClose (in: hFindFile=0x665abb5460 | out: hFindFile=0x665abb5460) returned 1 [0191.731] SetLastError (dwErrCode=0x0) [0191.731] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x50c [0191.731] GetLastError () returned 0xb7 [0191.731] CloseHandle (hObject=0x50c) returned 1 [0191.731] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.731] SetLastError (dwErrCode=0x0) [0191.731] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x50c [0191.731] GetLastError () returned 0xb7 [0191.731] CloseHandle (hObject=0x50c) returned 1 [0191.731] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4920 [0191.732] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.732] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.732] SetLastError (dwErrCode=0x0) [0191.732] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x670 [0191.732] GetLastError () returned 0x0 [0191.732] WriteFile (in: hFile=0x670, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0191.733] CloseHandle (hObject=0x670) returned 1 [0191.733] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4f20 [0191.733] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0191.733] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0191.733] SetLastError (dwErrCode=0x0) [0191.734] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x40c [0191.734] GetLastError () returned 0x0 [0191.734] WriteFile (in: hFile=0x40c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0191.741] CloseHandle (hObject=0x40c) returned 1 [0191.741] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665abb49e0 [0191.744] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0191.744] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0191.745] SetLastError (dwErrCode=0x0) [0191.745] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0191.745] GetLastError () returned 0x0 [0191.745] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7ad80*=0x324, lpOverlapped=0x0) returned 1 [0191.746] CloseHandle (hObject=0x3e8) returned 1 [0191.746] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665abb4c20 [0191.748] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0191.748] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0191.748] SetLastError (dwErrCode=0x0) [0191.748] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0191.748] GetLastError () returned 0x0 [0191.748] WriteFile (in: hFile=0x654, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7a5d0*=0x324, lpOverlapped=0x0) returned 1 [0191.749] CloseHandle (hObject=0x654) returned 1 [0191.749] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\*.*", lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0x665abb5460 [0191.756] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0191.756] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0191.756] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.757] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_0", dwFileAttributes=0x80) returned 1 [0191.757] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\cache\\data_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x494 [0191.757] GetFileSizeEx (in: hFile=0x494, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=8192) returned 1 [0191.758] GetFileSizeEx (in: hFile=0x494, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=8192) returned 1 [0191.758] SetFilePointerEx (in: hFile=0x494, liDistanceToMove=0x1ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.758] ReadFile (in: hFile=0x494, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0191.759] SetFilePointer (in: hFile=0x494, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0191.759] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a9d0) returned 1 [0191.759] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0191.759] SetFilePointer (in: hFile=0x494, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0191.760] ReadFile (in: hFile=0x494, lpBuffer=0x665da80000, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesRead=0x665da79c10*=0x2000, lpOverlapped=0x0) returned 1 [0191.760] CryptEncrypt (in: hKey=0x665ab9a9d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0191.760] CryptEncrypt (in: hKey=0x665ab9a9d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665da80000*, pdwDataLen=0x665da79c08*=0x2000, dwBufLen=0xf4250 | out: pbData=0x665da80000*, pdwDataLen=0x665da79c08*=0x2010) returned 1 [0191.760] SetFilePointer (in: hFile=0x494, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0191.760] WriteFile (in: hFile=0x494, lpBuffer=0x665da80000*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesWritten=0x665da79c10*=0x2010, lpOverlapped=0x0) returned 1 [0191.761] WriteFile (in: hFile=0x494, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0191.761] CryptExportKey (in: hKey=0x665ab9a9d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0191.761] CryptExportKey (in: hKey=0x665ab9a9d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0191.761] WriteFile (in: hFile=0x494, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0191.761] CloseHandle (hObject=0x494) returned 1 [0191.776] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.781] CryptDestroyKey (hKey=0x665ab9a9d0) returned 1 [0191.781] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.781] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0191.781] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.784] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_1", dwFileAttributes=0x80) returned 1 [0191.787] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\cache\\data_1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x494 [0191.787] GetFileSizeEx (in: hFile=0x494, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=270336) returned 1 [0191.787] GetFileSizeEx (in: hFile=0x494, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=270336) returned 1 [0191.787] SetFilePointerEx (in: hFile=0x494, liDistanceToMove=0x41ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.788] ReadFile (in: hFile=0x494, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0191.788] SetFilePointer (in: hFile=0x494, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0191.789] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9ab90) returned 1 [0191.789] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0191.789] SetFilePointer (in: hFile=0x494, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0191.789] ReadFile (in: hFile=0x494, lpBuffer=0x665da80000, nNumberOfBytesToRead=0x42000, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesRead=0x665da79c10*=0x42000, lpOverlapped=0x0) returned 1 [0191.797] CryptEncrypt (in: hKey=0x665ab9ab90, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0191.797] CryptEncrypt (in: hKey=0x665ab9ab90, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665da80000*, pdwDataLen=0x665da79c08*=0x42000, dwBufLen=0xf4250 | out: pbData=0x665da80000*, pdwDataLen=0x665da79c08*=0x42010) returned 1 [0191.798] SetFilePointer (in: hFile=0x494, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0191.798] WriteFile (in: hFile=0x494, lpBuffer=0x665da80000*, nNumberOfBytesToWrite=0x42010, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesWritten=0x665da79c10*=0x42010, lpOverlapped=0x0) returned 1 [0191.799] WriteFile (in: hFile=0x494, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0191.800] CryptExportKey (in: hKey=0x665ab9ab90, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0191.800] CryptExportKey (in: hKey=0x665ab9ab90, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0191.800] WriteFile (in: hFile=0x494, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0191.800] CloseHandle (hObject=0x494) returned 1 [0191.818] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.823] CryptDestroyKey (hKey=0x665ab9ab90) returned 1 [0191.823] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.823] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0191.823] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.824] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_2", dwFileAttributes=0x80) returned 1 [0191.824] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\cache\\data_2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x494 [0191.825] GetFileSizeEx (in: hFile=0x494, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=8192) returned 1 [0191.825] GetFileSizeEx (in: hFile=0x494, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=8192) returned 1 [0191.825] SetFilePointerEx (in: hFile=0x494, liDistanceToMove=0x1ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.825] ReadFile (in: hFile=0x494, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0191.826] SetFilePointer (in: hFile=0x494, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0191.826] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9ad50) returned 1 [0191.826] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0191.827] SetFilePointer (in: hFile=0x494, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0191.827] ReadFile (in: hFile=0x494, lpBuffer=0x665da80000, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesRead=0x665da79c10*=0x2000, lpOverlapped=0x0) returned 1 [0191.828] CryptEncrypt (in: hKey=0x665ab9ad50, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0191.828] CryptEncrypt (in: hKey=0x665ab9ad50, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665da80000*, pdwDataLen=0x665da79c08*=0x2000, dwBufLen=0xf4250 | out: pbData=0x665da80000*, pdwDataLen=0x665da79c08*=0x2010) returned 1 [0191.828] SetFilePointer (in: hFile=0x494, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0191.828] WriteFile (in: hFile=0x494, lpBuffer=0x665da80000*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesWritten=0x665da79c10*=0x2010, lpOverlapped=0x0) returned 1 [0191.828] WriteFile (in: hFile=0x494, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0191.828] CryptExportKey (in: hKey=0x665ab9ad50, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0191.829] CryptExportKey (in: hKey=0x665ab9ad50, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0191.829] WriteFile (in: hFile=0x494, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0191.829] CloseHandle (hObject=0x494) returned 1 [0191.843] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.849] CryptDestroyKey (hKey=0x665ab9ad50) returned 1 [0191.849] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.849] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0191.849] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.850] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_3", dwFileAttributes=0x80) returned 1 [0191.850] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\cache\\data_3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x494 [0191.851] GetFileSizeEx (in: hFile=0x494, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=8192) returned 1 [0191.851] GetFileSizeEx (in: hFile=0x494, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=8192) returned 1 [0191.851] SetFilePointerEx (in: hFile=0x494, liDistanceToMove=0x1ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.851] ReadFile (in: hFile=0x494, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0191.852] SetFilePointer (in: hFile=0x494, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0191.852] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a9d0) returned 1 [0191.852] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0191.853] SetFilePointer (in: hFile=0x494, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0191.853] ReadFile (in: hFile=0x494, lpBuffer=0x665da80000, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesRead=0x665da79c10*=0x2000, lpOverlapped=0x0) returned 1 [0191.853] CryptEncrypt (in: hKey=0x665ab9a9d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0191.853] CryptEncrypt (in: hKey=0x665ab9a9d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665da80000*, pdwDataLen=0x665da79c08*=0x2000, dwBufLen=0xf4250 | out: pbData=0x665da80000*, pdwDataLen=0x665da79c08*=0x2010) returned 1 [0191.854] SetFilePointer (in: hFile=0x494, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0191.854] WriteFile (in: hFile=0x494, lpBuffer=0x665da80000*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesWritten=0x665da79c10*=0x2010, lpOverlapped=0x0) returned 1 [0191.854] WriteFile (in: hFile=0x494, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0191.854] CryptExportKey (in: hKey=0x665ab9a9d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0191.854] CryptExportKey (in: hKey=0x665ab9a9d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0191.854] WriteFile (in: hFile=0x494, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0191.855] CloseHandle (hObject=0x494) returned 1 [0191.872] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.878] CryptDestroyKey (hKey=0x665ab9a9d0) returned 1 [0191.878] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.878] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0191.878] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.879] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\index", dwFileAttributes=0x80) returned 1 [0191.879] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\cache\\index"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x494 [0191.880] GetFileSizeEx (in: hFile=0x494, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=524656) returned 1 [0191.880] GetFileSizeEx (in: hFile=0x494, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=524656) returned 1 [0191.880] SetFilePointerEx (in: hFile=0x494, liDistanceToMove=0x8004e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.880] ReadFile (in: hFile=0x494, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0191.881] SetFilePointer (in: hFile=0x494, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0191.881] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a030) returned 1 [0191.881] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0191.881] SetFilePointer (in: hFile=0x494, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0191.881] ReadFile (in: hFile=0x494, lpBuffer=0x665da80000, nNumberOfBytesToRead=0x80170, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesRead=0x665da79c10*=0x80170, lpOverlapped=0x0) returned 1 [0191.895] CryptEncrypt (in: hKey=0x665ab9a030, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0191.895] CryptEncrypt (in: hKey=0x665ab9a030, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665da80000*, pdwDataLen=0x665da79c08*=0x80170, dwBufLen=0xf4250 | out: pbData=0x665da80000*, pdwDataLen=0x665da79c08*=0x80180) returned 1 [0191.896] SetFilePointer (in: hFile=0x494, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0191.896] WriteFile (in: hFile=0x494, lpBuffer=0x665da80000*, nNumberOfBytesToWrite=0x80180, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesWritten=0x665da79c10*=0x80180, lpOverlapped=0x0) returned 1 [0191.898] WriteFile (in: hFile=0x494, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0191.898] CryptExportKey (in: hKey=0x665ab9a030, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0191.898] CryptExportKey (in: hKey=0x665ab9a030, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0191.898] WriteFile (in: hFile=0x494, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0191.898] CloseHandle (hObject=0x494) returned 1 [0191.914] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.918] CryptDestroyKey (hKey=0x665ab9a030) returned 1 [0191.918] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.919] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0 [0191.919] FindClose (in: hFindFile=0x665abb5460 | out: hFindFile=0x665abb5460) returned 1 [0191.919] SetLastError (dwErrCode=0x0) [0191.919] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0191.921] GetLastError () returned 0x0 [0191.921] WriteFile (in: hFile=0x654, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7a5d0*=0x324, lpOverlapped=0x0) returned 1 [0191.921] CloseHandle (hObject=0x654) returned 1 [0191.922] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0191.922] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.922] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Visited Links", dwFileAttributes=0x80) returned 1 [0191.922] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Visited Links" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\visited links"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0191.923] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7a3c8 | out: lpFileSize=0x665da7a3c8*=131072) returned 1 [0191.923] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7a3d8 | out: lpFileSize=0x665da7a3d8*=131072) returned 1 [0191.923] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x1fede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.923] ReadFile (in: hFile=0x654, lpBuffer=0x665da7a428, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7a3e8, lpOverlapped=0x0 | out: lpBuffer=0x665da7a428*, lpNumberOfBytesRead=0x665da7a3e8*=0x19, lpOverlapped=0x0) returned 1 [0191.924] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0191.924] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7a3b0 | out: phKey=0x665da7a3b0*=0x665ab9a500) returned 1 [0191.924] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0191.924] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0191.924] ReadFile (in: hFile=0x654, lpBuffer=0x665da80000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x665da7a3c0, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesRead=0x665da7a3c0*=0x20000, lpOverlapped=0x0) returned 1 [0191.927] CryptEncrypt (in: hKey=0x665ab9a500, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7a3bc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7a3bc*=0xf4250) returned 1 [0191.927] CryptEncrypt (in: hKey=0x665ab9a500, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665da80000*, pdwDataLen=0x665da7a3b8*=0x20000, dwBufLen=0xf4250 | out: pbData=0x665da80000*, pdwDataLen=0x665da7a3b8*=0x20010) returned 1 [0191.928] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0191.928] WriteFile (in: hFile=0x654, lpBuffer=0x665da80000*, nNumberOfBytesToWrite=0x20010, lpNumberOfBytesWritten=0x665da7a3c0, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesWritten=0x665da7a3c0*=0x20010, lpOverlapped=0x0) returned 1 [0191.928] WriteFile (in: hFile=0x654, lpBuffer=0x665da7a400*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7a3c4, lpOverlapped=0x0 | out: lpBuffer=0x665da7a400*, lpNumberOfBytesWritten=0x665da7a3c4*=0x6, lpOverlapped=0x0) returned 1 [0191.928] CryptExportKey (in: hKey=0x665ab9a500, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7a3d0 | out: pbData=0x0*, pdwDataLen=0x665da7a3d0*=0x10c) returned 1 [0191.928] CryptExportKey (in: hKey=0x665ab9a500, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7a450, pdwDataLen=0x665da7a3d0 | out: pbData=0x665da7a450*, pdwDataLen=0x665da7a3d0*=0x10c) returned 1 [0191.929] WriteFile (in: hFile=0x654, lpBuffer=0x665da7a450*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7a3c4, lpOverlapped=0x0 | out: lpBuffer=0x665da7a450*, lpNumberOfBytesWritten=0x665da7a3c4*=0x10c, lpOverlapped=0x0) returned 1 [0191.929] CloseHandle (hObject=0x654) returned 1 [0191.943] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.948] CryptDestroyKey (hKey=0x665ab9a500) returned 1 [0191.948] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.949] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0191.949] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0191.949] SetLastError (dwErrCode=0x0) [0191.949] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0191.949] GetLastError () returned 0xb7 [0191.949] CloseHandle (hObject=0x3e8) returned 1 [0191.949] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0191.950] SetLastError (dwErrCode=0x0) [0191.950] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0191.950] GetLastError () returned 0xb7 [0191.950] CloseHandle (hObject=0x3e8) returned 1 [0191.950] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665abb5340 [0191.950] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0191.950] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0191.950] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.951] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies", dwFileAttributes=0x80) returned 1 [0191.952] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cookie\\cookies"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0191.952] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7a3c8 | out: lpFileSize=0x665da7a3c8*=7168) returned 1 [0191.952] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7a3d8 | out: lpFileSize=0x665da7a3d8*=7168) returned 1 [0191.952] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x1ade, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.952] ReadFile (in: hFile=0x654, lpBuffer=0x665da7a428, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7a3e8, lpOverlapped=0x0 | out: lpBuffer=0x665da7a428*, lpNumberOfBytesRead=0x665da7a3e8*=0x19, lpOverlapped=0x0) returned 1 [0191.954] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0191.954] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7a3b0 | out: phKey=0x665da7a3b0*=0x665ab9a9d0) returned 1 [0191.954] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0191.954] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0191.954] ReadFile (in: hFile=0x654, lpBuffer=0x665da80000, nNumberOfBytesToRead=0x1c00, lpNumberOfBytesRead=0x665da7a3c0, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesRead=0x665da7a3c0*=0x1c00, lpOverlapped=0x0) returned 1 [0191.955] CryptEncrypt (in: hKey=0x665ab9a9d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7a3bc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7a3bc*=0xf4250) returned 1 [0191.955] CryptEncrypt (in: hKey=0x665ab9a9d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665da80000*, pdwDataLen=0x665da7a3b8*=0x1c00, dwBufLen=0xf4250 | out: pbData=0x665da80000*, pdwDataLen=0x665da7a3b8*=0x1c10) returned 1 [0191.955] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0191.955] WriteFile (in: hFile=0x654, lpBuffer=0x665da80000*, nNumberOfBytesToWrite=0x1c10, lpNumberOfBytesWritten=0x665da7a3c0, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesWritten=0x665da7a3c0*=0x1c10, lpOverlapped=0x0) returned 1 [0191.955] WriteFile (in: hFile=0x654, lpBuffer=0x665da7a400*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7a3c4, lpOverlapped=0x0 | out: lpBuffer=0x665da7a400*, lpNumberOfBytesWritten=0x665da7a3c4*=0x6, lpOverlapped=0x0) returned 1 [0191.955] CryptExportKey (in: hKey=0x665ab9a9d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7a3d0 | out: pbData=0x0*, pdwDataLen=0x665da7a3d0*=0x10c) returned 1 [0191.955] CryptExportKey (in: hKey=0x665ab9a9d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7a450, pdwDataLen=0x665da7a3d0 | out: pbData=0x665da7a450*, pdwDataLen=0x665da7a3d0*=0x10c) returned 1 [0191.956] WriteFile (in: hFile=0x654, lpBuffer=0x665da7a450*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7a3c4, lpOverlapped=0x0 | out: lpBuffer=0x665da7a450*, lpNumberOfBytesWritten=0x665da7a3c4*=0x10c, lpOverlapped=0x0) returned 1 [0191.956] CloseHandle (hObject=0x654) returned 1 [0191.968] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.972] CryptDestroyKey (hKey=0x665ab9a9d0) returned 1 [0191.972] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.972] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0191.972] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.973] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies-journal", dwFileAttributes=0x80) returned 1 [0191.973] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cookie\\cookies-journal"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0191.973] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7a3c8 | out: lpFileSize=0x665da7a3c8*=0) returned 1 [0191.973] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7a3d8 | out: lpFileSize=0x665da7a3d8*=0) returned 1 [0191.974] CloseHandle (hObject=0x654) returned 1 [0191.974] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.974] FindNextFileW (in: hFindFile=0x665abb5340, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0191.974] FindClose (in: hFindFile=0x665abb5340 | out: hFindFile=0x665abb5340) returned 1 [0191.974] SetLastError (dwErrCode=0x0) [0191.974] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cookie\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0191.974] GetLastError () returned 0x0 [0191.974] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7ad80*=0x324, lpOverlapped=0x0) returned 1 [0191.975] CloseHandle (hObject=0x3e8) returned 1 [0191.975] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0191.975] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0191.975] SetLastError (dwErrCode=0x0) [0191.975] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x40c [0191.976] GetLastError () returned 0xb7 [0191.976] CloseHandle (hObject=0x40c) returned 1 [0191.976] FindNextFileW (in: hFindFile=0x665abb4f20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0191.976] FindClose (in: hFindFile=0x665abb4f20 | out: hFindFile=0x665abb4f20) returned 1 [0191.976] SetLastError (dwErrCode=0x0) [0191.976] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x670 [0191.976] GetLastError () returned 0xb7 [0191.976] CloseHandle (hObject=0x670) returned 1 [0191.976] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0191.976] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0191.976] SetLastError (dwErrCode=0x0) [0191.976] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x50c [0191.977] GetLastError () returned 0xb7 [0191.977] CloseHandle (hObject=0x50c) returned 1 [0191.977] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0191.977] SetLastError (dwErrCode=0x0) [0191.977] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x50c [0191.977] GetLastError () returned 0xb7 [0191.977] CloseHandle (hObject=0x50c) returned 1 [0191.977] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4560 [0191.977] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.977] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0191.977] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0191.978] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\ACECache11.lst", dwFileAttributes=0x80) returned 1 [0191.979] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\ACECache11.lst" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\color\\acecache11.lst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x670 [0191.979] GetFileSizeEx (in: hFile=0x670, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=1164) returned 1 [0191.979] GetFileSizeEx (in: hFile=0x670, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=1164) returned 1 [0191.979] SetFilePointerEx (in: hFile=0x670, liDistanceToMove=0x36a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.979] ReadFile (in: hFile=0x670, lpBuffer=0x665da7bb38, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7baf8, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb38*, lpNumberOfBytesRead=0x665da7baf8*=0x19, lpOverlapped=0x0) returned 1 [0191.980] SetFilePointer (in: hFile=0x670, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0191.980] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7bac0 | out: phKey=0x665da7bac0*=0x665ab9adc0) returned 1 [0191.980] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0191.981] SetFilePointer (in: hFile=0x670, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0191.981] ReadFile (in: hFile=0x670, lpBuffer=0x665da80000, nNumberOfBytesToRead=0x48c, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesRead=0x665da7bad0*=0x48c, lpOverlapped=0x0) returned 1 [0191.981] CryptEncrypt (in: hKey=0x665ab9adc0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4250) returned 1 [0191.981] CryptEncrypt (in: hKey=0x665ab9adc0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665da80000*, pdwDataLen=0x665da7bac8*=0x48c, dwBufLen=0xf4250 | out: pbData=0x665da80000*, pdwDataLen=0x665da7bac8*=0x490) returned 1 [0191.981] SetFilePointer (in: hFile=0x670, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0191.981] WriteFile (in: hFile=0x670, lpBuffer=0x665da80000*, nNumberOfBytesToWrite=0x490, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesWritten=0x665da7bad0*=0x490, lpOverlapped=0x0) returned 1 [0191.981] WriteFile (in: hFile=0x670, lpBuffer=0x665da7bb10*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb10*, lpNumberOfBytesWritten=0x665da7bad4*=0x6, lpOverlapped=0x0) returned 1 [0191.981] CryptExportKey (in: hKey=0x665ab9adc0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7bae0 | out: pbData=0x0*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0191.981] CryptExportKey (in: hKey=0x665ab9adc0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7bb60, pdwDataLen=0x665da7bae0 | out: pbData=0x665da7bb60*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0191.981] WriteFile (in: hFile=0x670, lpBuffer=0x665da7bb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb60*, lpNumberOfBytesWritten=0x665da7bad4*=0x10c, lpOverlapped=0x0) returned 1 [0191.981] CloseHandle (hObject=0x670) returned 1 [0191.997] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0192.001] CryptDestroyKey (hKey=0x665ab9adc0) returned 1 [0192.001] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0192.001] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0192.001] SetLastError (dwErrCode=0x0) [0192.001] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\color\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x670 [0192.002] GetLastError () returned 0x0 [0192.002] WriteFile (in: hFile=0x670, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0192.002] CloseHandle (hObject=0x670) returned 1 [0192.003] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb45c0 [0192.005] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0192.005] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0192.005] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0192.005] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc", dwFileAttributes=0x80) returned 1 [0192.006] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\color\\profiles\\wscrgb.icc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x40c [0192.006] GetFileSizeEx (in: hFile=0x40c, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=66208) returned 1 [0192.006] GetFileSizeEx (in: hFile=0x40c, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=66208) returned 1 [0192.006] SetFilePointerEx (in: hFile=0x40c, liDistanceToMove=0x1017e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.006] ReadFile (in: hFile=0x40c, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0192.008] SetFilePointer (in: hFile=0x40c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0192.008] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9ad50) returned 1 [0192.008] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0192.008] SetFilePointer (in: hFile=0x40c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0192.008] ReadFile (in: hFile=0x40c, lpBuffer=0x665da80000, nNumberOfBytesToRead=0x102a0, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesRead=0x665da7b320*=0x102a0, lpOverlapped=0x0) returned 1 [0192.011] CryptEncrypt (in: hKey=0x665ab9ad50, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0192.011] CryptEncrypt (in: hKey=0x665ab9ad50, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665da80000*, pdwDataLen=0x665da7b318*=0x102a0, dwBufLen=0xf4250 | out: pbData=0x665da80000*, pdwDataLen=0x665da7b318*=0x102b0) returned 1 [0192.011] SetFilePointer (in: hFile=0x40c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0192.011] WriteFile (in: hFile=0x40c, lpBuffer=0x665da80000*, nNumberOfBytesToWrite=0x102b0, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesWritten=0x665da7b320*=0x102b0, lpOverlapped=0x0) returned 1 [0192.011] WriteFile (in: hFile=0x40c, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0192.011] CryptExportKey (in: hKey=0x665ab9ad50, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0192.011] CryptExportKey (in: hKey=0x665ab9ad50, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0192.011] WriteFile (in: hFile=0x40c, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0192.011] CloseHandle (hObject=0x40c) returned 1 [0192.024] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0192.028] CryptDestroyKey (hKey=0x665ab9ad50) returned 1 [0192.028] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0192.028] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0192.028] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0192.029] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc", dwFileAttributes=0x80) returned 1 [0192.029] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\color\\profiles\\wsrgb.icc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x40c [0192.029] GetFileSizeEx (in: hFile=0x40c, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=2676) returned 1 [0192.029] GetFileSizeEx (in: hFile=0x40c, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=2676) returned 1 [0192.029] SetFilePointerEx (in: hFile=0x40c, liDistanceToMove=0x952, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.030] ReadFile (in: hFile=0x40c, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0192.031] SetFilePointer (in: hFile=0x40c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0192.031] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9aea0) returned 1 [0192.031] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0192.032] SetFilePointer (in: hFile=0x40c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0192.032] ReadFile (in: hFile=0x40c, lpBuffer=0x665da80000, nNumberOfBytesToRead=0xa74, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesRead=0x665da7b320*=0xa74, lpOverlapped=0x0) returned 1 [0192.032] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0192.032] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665da80000*, pdwDataLen=0x665da7b318*=0xa74, dwBufLen=0xf4250 | out: pbData=0x665da80000*, pdwDataLen=0x665da7b318*=0xa80) returned 1 [0192.032] SetFilePointer (in: hFile=0x40c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0192.032] WriteFile (in: hFile=0x40c, lpBuffer=0x665da80000*, nNumberOfBytesToWrite=0xa80, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesWritten=0x665da7b320*=0xa80, lpOverlapped=0x0) returned 1 [0192.032] WriteFile (in: hFile=0x40c, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0192.032] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0192.032] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0192.033] WriteFile (in: hFile=0x40c, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0192.033] CloseHandle (hObject=0x40c) returned 1 [0192.048] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0192.052] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0192.052] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0192.052] FindNextFileW (in: hFindFile=0x665abb45c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0192.052] FindClose (in: hFindFile=0x665abb45c0 | out: hFindFile=0x665abb45c0) returned 1 [0192.052] SetLastError (dwErrCode=0x0) [0192.052] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\color\\profiles\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x670 [0192.053] GetLastError () returned 0x0 [0192.053] WriteFile (in: hFile=0x670, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0192.053] CloseHandle (hObject=0x670) returned 1 [0192.054] FindNextFileW (in: hFindFile=0x665abb4560, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0192.054] FindClose (in: hFindFile=0x665abb4560 | out: hFindFile=0x665abb4560) returned 1 [0192.054] SetLastError (dwErrCode=0x0) [0192.054] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\color\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x50c [0192.054] GetLastError () returned 0xb7 [0192.054] CloseHandle (hObject=0x50c) returned 1 [0192.054] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0192.054] FindNextFileW (in: hFindFile=0x665abb4ec0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0192.054] FindClose (in: hFindFile=0x665abb4ec0 | out: hFindFile=0x665abb4ec0) returned 1 [0192.054] SetLastError (dwErrCode=0x0) [0192.054] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0192.055] GetLastError () returned 0xb7 [0192.055] CloseHandle (hObject=0x570) returned 1 [0192.055] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0192.055] SetLastError (dwErrCode=0x0) [0192.055] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0192.055] GetLastError () returned 0xb7 [0192.055] CloseHandle (hObject=0x570) returned 1 [0192.055] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Application Data\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0xffffffffffffffff [0192.055] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0192.055] SetLastError (dwErrCode=0x0) [0192.055] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Application Data\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\application data\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0192.055] GetLastError () returned 0xb7 [0192.055] CloseHandle (hObject=0x570) returned 1 [0192.056] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0192.056] SetLastError (dwErrCode=0x0) [0192.056] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0192.056] GetLastError () returned 0xb7 [0192.056] CloseHandle (hObject=0x570) returned 1 [0192.056] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\CEF\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb49e0 [0192.057] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0192.057] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0192.057] SetLastError (dwErrCode=0x0) [0192.057] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\CEF\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\cef\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x50c [0192.057] GetLastError () returned 0x0 [0192.057] WriteFile (in: hFile=0x50c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7c490*=0x324, lpOverlapped=0x0) returned 1 [0192.058] CloseHandle (hObject=0x50c) returned 1 [0192.058] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\CEF\\User Data\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb56a0 [0192.058] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0192.058] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0192.058] SetLastError (dwErrCode=0x0) [0192.058] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\CEF\\User Data\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\cef\\user data\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x670 [0192.059] GetLastError () returned 0x0 [0192.059] WriteFile (in: hFile=0x670, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0192.059] CloseHandle (hObject=0x670) returned 1 [0192.059] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\CEF\\User Data\\Dictionaries\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4920 [0192.060] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0192.060] FindNextFileW (in: hFindFile=0x665abb4920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0192.060] FindClose (in: hFindFile=0x665abb4920 | out: hFindFile=0x665abb4920) returned 1 [0192.060] SetLastError (dwErrCode=0x0) [0192.060] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\CEF\\User Data\\Dictionaries\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\cef\\user data\\dictionaries\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x670 [0192.060] GetLastError () returned 0x0 [0192.060] WriteFile (in: hFile=0x670, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0192.061] CloseHandle (hObject=0x670) returned 1 [0192.061] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0192.061] FindClose (in: hFindFile=0x665abb56a0 | out: hFindFile=0x665abb56a0) returned 1 [0192.061] SetLastError (dwErrCode=0x0) [0192.061] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\CEF\\User Data\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\cef\\user data\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x50c [0192.061] GetLastError () returned 0xb7 [0192.061] CloseHandle (hObject=0x50c) returned 1 [0192.061] FindNextFileW (in: hFindFile=0x665abb49e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0192.062] FindClose (in: hFindFile=0x665abb49e0 | out: hFindFile=0x665abb49e0) returned 1 [0192.062] SetLastError (dwErrCode=0x0) [0192.062] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\CEF\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\cef\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0192.062] GetLastError () returned 0xb7 [0192.062] CloseHandle (hObject=0x570) returned 1 [0192.062] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0192.062] SetLastError (dwErrCode=0x0) [0192.062] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0192.062] GetLastError () returned 0xb7 [0192.062] CloseHandle (hObject=0x570) returned 1 [0192.062] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb42c0 [0192.063] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0192.063] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0192.063] SetLastError (dwErrCode=0x0) [0192.063] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x50c [0192.064] GetLastError () returned 0x0 [0192.064] WriteFile (in: hFile=0x50c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7c490*=0x324, lpOverlapped=0x0) returned 1 [0192.065] CloseHandle (hObject=0x50c) returned 1 [0192.065] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Temp\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4c80 [0192.066] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0192.066] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0192.066] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0192.066] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Temp\\CalendarCache.dat", dwFileAttributes=0x80) returned 1 [0192.066] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Temp\\CalendarCache.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\temp\\calendarcache.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x670 [0192.067] GetFileSizeEx (in: hFile=0x670, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=20) returned 1 [0192.067] GetFileSizeEx (in: hFile=0x670, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=20) returned 1 [0192.067] CloseHandle (hObject=0x670) returned 1 [0192.067] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0192.067] FindNextFileW (in: hFindFile=0x665abb4c80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0192.067] FindClose (in: hFindFile=0x665abb4c80 | out: hFindFile=0x665abb4c80) returned 1 [0192.067] SetLastError (dwErrCode=0x0) [0192.067] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Temp\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\temp\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x50c [0192.072] GetLastError () returned 0x0 [0192.072] WriteFile (in: hFile=0x50c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7c490*=0x324, lpOverlapped=0x0) returned 1 [0192.073] CloseHandle (hObject=0x50c) returned 1 [0192.073] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0192.073] SetLastError (dwErrCode=0x0) [0192.073] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x50c [0192.073] GetLastError () returned 0xb7 [0192.073] CloseHandle (hObject=0x50c) returned 1 [0192.073] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Unistore\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4440 [0192.074] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0192.074] FindNextFileW (in: hFindFile=0x665abb4440, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0192.074] FindClose (in: hFindFile=0x665abb4440 | out: hFindFile=0x665abb4440) returned 1 [0192.074] SetLastError (dwErrCode=0x0) [0192.074] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Unistore\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistore\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x50c [0192.075] GetLastError () returned 0x0 [0192.075] WriteFile (in: hFile=0x50c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7c490*=0x324, lpOverlapped=0x0) returned 1 [0192.075] CloseHandle (hObject=0x50c) returned 1 [0192.076] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0192.076] SetLastError (dwErrCode=0x0) [0192.076] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x50c [0192.076] GetLastError () returned 0xb7 [0192.076] CloseHandle (hObject=0x50c) returned 1 [0192.076] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4d40 [0192.077] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0192.077] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0192.077] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0192.078] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\store.vol", dwFileAttributes=0x80) returned 1 [0192.079] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\store.vol" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\store.vol"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x670 [0192.079] GetFileSizeEx (in: hFile=0x670, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=6291456) returned 1 [0192.079] GetFileSizeEx (in: hFile=0x670, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=6291456) returned 1 [0192.079] SetFilePointerEx (in: hFile=0x670, liDistanceToMove=0x5ffede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.079] ReadFile (in: hFile=0x670, lpBuffer=0x665da7bb38, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7baf8, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb38*, lpNumberOfBytesRead=0x665da7baf8*=0x19, lpOverlapped=0x0) returned 1 [0192.081] SetFilePointer (in: hFile=0x670, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0192.081] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7bac0 | out: phKey=0x665da7bac0*=0x665ab9ab90) returned 1 [0192.081] SetFilePointer (in: hFile=0x670, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0192.081] ReadFile (in: hFile=0x670, lpBuffer=0x665da7bb28, nNumberOfBytesToRead=0x10, lpNumberOfBytesRead=0x665da7baf8, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb28*, lpNumberOfBytesRead=0x665da7baf8*=0x10, lpOverlapped=0x0) returned 1 [0192.082] SetFilePointer (in: hFile=0x670, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0192.082] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0192.082] SetFilePointer (in: hFile=0x670, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0192.082] ReadFile (in: hFile=0x670, lpBuffer=0x665da80000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesRead=0x665da7bad0*=0xf4240, lpOverlapped=0x0) returned 1 [0192.153] CryptEncrypt (in: hKey=0x665ab9ab90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240) returned 1 [0192.153] CryptEncrypt (in: hKey=0x665ab9ab90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x665da80000*, pdwDataLen=0x665da7bac8*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x665da80000*, pdwDataLen=0x665da7bac8*=0xf4240) returned 1 [0192.155] SetFilePointer (in: hFile=0x670, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0192.155] WriteFile (in: hFile=0x670, lpBuffer=0x665da80000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesWritten=0x665da7bad0*=0xf4240, lpOverlapped=0x0) returned 1 [0192.158] SetFilePointer (in: hFile=0x670, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0192.158] ReadFile (in: hFile=0x670, lpBuffer=0x665da80000, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesRead=0x665da7bad0*=0x0, lpOverlapped=0x0) returned 1 [0192.158] CryptEncrypt (in: hKey=0x665ab9ab90, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4250) returned 1 [0192.158] CryptEncrypt (in: hKey=0x665ab9ab90, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665da80000*, pdwDataLen=0x665da7bac8*=0x0, dwBufLen=0xf4250 | out: pbData=0x665da80000*, pdwDataLen=0x665da7bac8*=0x10) returned 1 [0192.158] SetFilePointer (in: hFile=0x670, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0192.158] WriteFile (in: hFile=0x670, lpBuffer=0x665da80000*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesWritten=0x665da7bad0*=0x10, lpOverlapped=0x0) returned 1 [0192.158] SetFilePointerEx (in: hFile=0x670, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2 | out: lpNewFilePointer=0x0) returned 1 [0192.158] WriteFile (in: hFile=0x670, lpBuffer=0x665da7bb10*, nNumberOfBytesToWrite=0xa, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb10*, lpNumberOfBytesWritten=0x665da7bad4*=0xa, lpOverlapped=0x0) returned 1 [0192.167] CryptExportKey (in: hKey=0x665ab9ab90, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7bae0 | out: pbData=0x0*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0192.167] CryptExportKey (in: hKey=0x665ab9ab90, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7bb60, pdwDataLen=0x665da7bae0 | out: pbData=0x665da7bb60*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0192.167] WriteFile (in: hFile=0x670, lpBuffer=0x665da7bb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb60*, lpNumberOfBytesWritten=0x665da7bad4*=0x10c, lpOverlapped=0x0) returned 1 [0192.167] SetFilePointerEx (in: hFile=0x670, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2 | out: lpNewFilePointer=0x0) returned 1 [0192.167] WriteFile (in: hFile=0x670, lpBuffer=0x665da7bb28*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x665da7baf8, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb28*, lpNumberOfBytesWritten=0x665da7baf8*=0x10, lpOverlapped=0x0) returned 1 [0192.167] CloseHandle (hObject=0x670) returned 1 [0192.487] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0192.493] CryptDestroyKey (hKey=0x665ab9ab90) returned 1 [0192.493] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0192.494] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0192.494] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0192.494] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.chk", dwFileAttributes=0x80) returned 1 [0192.495] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.chk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\uss.chk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x670 [0192.495] GetFileSizeEx (in: hFile=0x670, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=8192) returned 1 [0192.495] GetFileSizeEx (in: hFile=0x670, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=8192) returned 1 [0192.495] SetFilePointerEx (in: hFile=0x670, liDistanceToMove=0x1ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.495] ReadFile (in: hFile=0x670, lpBuffer=0x665da7bb38, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7baf8, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb38*, lpNumberOfBytesRead=0x665da7baf8*=0x19, lpOverlapped=0x0) returned 1 [0192.497] SetFilePointer (in: hFile=0x670, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0192.497] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7bac0 | out: phKey=0x665da7bac0*=0x665ab9a810) returned 1 [0192.497] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0192.497] SetFilePointer (in: hFile=0x670, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0192.497] ReadFile (in: hFile=0x670, lpBuffer=0x665da80000, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesRead=0x665da7bad0*=0x2000, lpOverlapped=0x0) returned 1 [0192.498] CryptEncrypt (in: hKey=0x665ab9a810, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4250) returned 1 [0192.498] CryptEncrypt (in: hKey=0x665ab9a810, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665da80000*, pdwDataLen=0x665da7bac8*=0x2000, dwBufLen=0xf4250 | out: pbData=0x665da80000*, pdwDataLen=0x665da7bac8*=0x2010) returned 1 [0192.498] SetFilePointer (in: hFile=0x670, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0192.498] WriteFile (in: hFile=0x670, lpBuffer=0x665da80000*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesWritten=0x665da7bad0*=0x2010, lpOverlapped=0x0) returned 1 [0192.498] WriteFile (in: hFile=0x670, lpBuffer=0x665da7bb10*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb10*, lpNumberOfBytesWritten=0x665da7bad4*=0x6, lpOverlapped=0x0) returned 1 [0192.498] CryptExportKey (in: hKey=0x665ab9a810, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7bae0 | out: pbData=0x0*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0192.498] CryptExportKey (in: hKey=0x665ab9a810, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7bb60, pdwDataLen=0x665da7bae0 | out: pbData=0x665da7bb60*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0192.498] WriteFile (in: hFile=0x670, lpBuffer=0x665da7bb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb60*, lpNumberOfBytesWritten=0x665da7bad4*=0x10c, lpOverlapped=0x0) returned 1 [0192.498] CloseHandle (hObject=0x670) returned 1 [0192.510] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0192.515] CryptDestroyKey (hKey=0x665ab9a810) returned 1 [0192.515] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0192.515] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0192.515] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0192.516] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.log", dwFileAttributes=0x80) returned 1 [0192.517] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\uss.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x670 [0192.518] GetFileSizeEx (in: hFile=0x670, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=3145728) returned 1 [0192.518] GetFileSizeEx (in: hFile=0x670, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=3145728) returned 1 [0192.518] SetFilePointerEx (in: hFile=0x670, liDistanceToMove=0x2ffede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.518] ReadFile (in: hFile=0x670, lpBuffer=0x665da7bb38, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7baf8, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb38*, lpNumberOfBytesRead=0x665da7baf8*=0x19, lpOverlapped=0x0) returned 1 [0192.519] SetFilePointer (in: hFile=0x670, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0192.519] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7bac0 | out: phKey=0x665da7bac0*=0x665ab9ad50) returned 1 [0192.519] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0192.520] SetFilePointer (in: hFile=0x670, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0192.520] ReadFile (in: hFile=0x670, lpBuffer=0x665da80000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesRead=0x665da7bad0*=0xf4240, lpOverlapped=0x0) returned 1 [0192.544] CryptEncrypt (in: hKey=0x665ab9ad50, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240) returned 1 [0192.545] CryptEncrypt (in: hKey=0x665ab9ad50, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x665da80000*, pdwDataLen=0x665da7bac8*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x665da80000*, pdwDataLen=0x665da7bac8*=0xf4240) returned 1 [0192.547] SetFilePointer (in: hFile=0x670, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0192.547] WriteFile (in: hFile=0x670, lpBuffer=0x665da80000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesWritten=0x665da7bad0*=0xf4240, lpOverlapped=0x0) returned 1 [0192.550] SetFilePointer (in: hFile=0x670, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0192.550] ReadFile (in: hFile=0x670, lpBuffer=0x665da80000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesRead=0x665da7bad0*=0xf4240, lpOverlapped=0x0) returned 1 [0192.596] CryptEncrypt (in: hKey=0x665ab9ad50, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240) returned 1 [0192.597] CryptEncrypt (in: hKey=0x665ab9ad50, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x665da80000*, pdwDataLen=0x665da7bac8*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x665da80000*, pdwDataLen=0x665da7bac8*=0xf4240) returned 1 [0192.598] SetFilePointer (in: hFile=0x670, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0192.598] WriteFile (in: hFile=0x670, lpBuffer=0x665da80000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesWritten=0x665da7bad0*=0xf4240, lpOverlapped=0x0) returned 1 [0192.602] SetFilePointer (in: hFile=0x670, lDistanceToMove=2000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1e8480 [0192.602] ReadFile (in: hFile=0x670, lpBuffer=0x665da80000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesRead=0x665da7bad0*=0xf4240, lpOverlapped=0x0) returned 1 [0192.645] CryptEncrypt (in: hKey=0x665ab9ad50, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240) returned 1 [0192.646] CryptEncrypt (in: hKey=0x665ab9ad50, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x665da80000*, pdwDataLen=0x665da7bac8*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x665da80000*, pdwDataLen=0x665da7bac8*=0xf4240) returned 1 [0192.647] SetFilePointer (in: hFile=0x670, lDistanceToMove=2000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1e8480 [0192.648] WriteFile (in: hFile=0x670, lpBuffer=0x665da80000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesWritten=0x665da7bad0*=0xf4240, lpOverlapped=0x0) returned 1 [0192.651] SetFilePointer (in: hFile=0x670, lDistanceToMove=3000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x2dc6c0 [0192.651] ReadFile (in: hFile=0x670, lpBuffer=0x665da80000, nNumberOfBytesToRead=0x23940, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesRead=0x665da7bad0*=0x23940, lpOverlapped=0x0) returned 1 [0192.651] CryptEncrypt (in: hKey=0x665ab9ad50, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4250) returned 1 [0192.651] CryptEncrypt (in: hKey=0x665ab9ad50, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665da80000*, pdwDataLen=0x665da7bac8*=0x23940, dwBufLen=0xf4250 | out: pbData=0x665da80000*, pdwDataLen=0x665da7bac8*=0x23950) returned 1 [0192.651] SetFilePointer (in: hFile=0x670, lDistanceToMove=3000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x2dc6c0 [0192.651] WriteFile (in: hFile=0x670, lpBuffer=0x665da80000*, nNumberOfBytesToWrite=0x23950, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesWritten=0x665da7bad0*=0x23950, lpOverlapped=0x0) returned 1 [0192.661] WriteFile (in: hFile=0x670, lpBuffer=0x665da7bb10*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb10*, lpNumberOfBytesWritten=0x665da7bad4*=0x6, lpOverlapped=0x0) returned 1 [0192.661] CryptExportKey (in: hKey=0x665ab9ad50, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7bae0 | out: pbData=0x0*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0192.661] CryptExportKey (in: hKey=0x665ab9ad50, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7bb60, pdwDataLen=0x665da7bae0 | out: pbData=0x665da7bb60*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0192.661] WriteFile (in: hFile=0x670, lpBuffer=0x665da7bb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb60*, lpNumberOfBytesWritten=0x665da7bad4*=0x10c, lpOverlapped=0x0) returned 1 [0192.661] CloseHandle (hObject=0x670) returned 1 [0192.787] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0192.791] CryptDestroyKey (hKey=0x665ab9ad50) returned 1 [0192.791] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0192.791] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0192.791] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0192.791] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00001.jrs", dwFileAttributes=0x80) returned 1 [0192.792] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00001.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\ussres00001.jrs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x670 [0192.792] GetFileSizeEx (in: hFile=0x670, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=3145728) returned 1 [0192.792] GetFileSizeEx (in: hFile=0x670, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=3145728) returned 1 [0192.792] SetFilePointerEx (in: hFile=0x670, liDistanceToMove=0x2ffede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.792] ReadFile (in: hFile=0x670, lpBuffer=0x665da7bb38, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7baf8, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb38*, lpNumberOfBytesRead=0x665da7baf8*=0x19, lpOverlapped=0x0) returned 1 [0192.793] SetFilePointer (in: hFile=0x670, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0192.793] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7bac0 | out: phKey=0x665da7bac0*=0x665ab9a500) returned 1 [0192.793] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0192.793] SetFilePointer (in: hFile=0x670, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0192.793] ReadFile (in: hFile=0x670, lpBuffer=0x665da80000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesRead=0x665da7bad0*=0xf4240, lpOverlapped=0x0) returned 1 [0192.822] CryptEncrypt (in: hKey=0x665ab9a500, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240) returned 1 [0192.822] CryptEncrypt (in: hKey=0x665ab9a500, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x665da80000*, pdwDataLen=0x665da7bac8*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x665da80000*, pdwDataLen=0x665da7bac8*=0xf4240) returned 1 [0192.824] SetFilePointer (in: hFile=0x670, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0192.824] WriteFile (in: hFile=0x670, lpBuffer=0x665da80000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesWritten=0x665da7bad0*=0xf4240, lpOverlapped=0x0) returned 1 [0192.826] SetFilePointer (in: hFile=0x670, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0192.827] ReadFile (in: hFile=0x670, lpBuffer=0x665da80000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesRead=0x665da7bad0*=0xf4240, lpOverlapped=0x0) returned 1 [0192.866] CryptEncrypt (in: hKey=0x665ab9a500, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240) returned 1 [0192.866] CryptEncrypt (in: hKey=0x665ab9a500, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x665da80000*, pdwDataLen=0x665da7bac8*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x665da80000*, pdwDataLen=0x665da7bac8*=0xf4240) returned 1 [0192.868] SetFilePointer (in: hFile=0x670, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0192.869] WriteFile (in: hFile=0x670, lpBuffer=0x665da80000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesWritten=0x665da7bad0*=0xf4240, lpOverlapped=0x0) returned 1 [0192.873] SetFilePointer (in: hFile=0x670, lDistanceToMove=2000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1e8480 [0192.873] ReadFile (in: hFile=0x670, lpBuffer=0x665da80000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesRead=0x665da7bad0*=0xf4240, lpOverlapped=0x0) returned 1 [0192.901] CryptEncrypt (in: hKey=0x665ab9a500, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240) returned 1 [0192.901] CryptEncrypt (in: hKey=0x665ab9a500, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x665da80000*, pdwDataLen=0x665da7bac8*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x665da80000*, pdwDataLen=0x665da7bac8*=0xf4240) returned 1 [0192.903] SetFilePointer (in: hFile=0x670, lDistanceToMove=2000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1e8480 [0192.903] WriteFile (in: hFile=0x670, lpBuffer=0x665da80000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesWritten=0x665da7bad0*=0xf4240, lpOverlapped=0x0) returned 1 [0192.912] SetFilePointer (in: hFile=0x670, lDistanceToMove=3000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x2dc6c0 [0192.912] ReadFile (in: hFile=0x670, lpBuffer=0x665da80000, nNumberOfBytesToRead=0x23940, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesRead=0x665da7bad0*=0x23940, lpOverlapped=0x0) returned 1 [0192.912] CryptEncrypt (in: hKey=0x665ab9a500, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4250) returned 1 [0192.912] CryptEncrypt (in: hKey=0x665ab9a500, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665da80000*, pdwDataLen=0x665da7bac8*=0x23940, dwBufLen=0xf4250 | out: pbData=0x665da80000*, pdwDataLen=0x665da7bac8*=0x23950) returned 1 [0192.913] SetFilePointer (in: hFile=0x670, lDistanceToMove=3000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x2dc6c0 [0192.913] WriteFile (in: hFile=0x670, lpBuffer=0x665da80000*, nNumberOfBytesToWrite=0x23950, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesWritten=0x665da7bad0*=0x23950, lpOverlapped=0x0) returned 1 [0192.923] WriteFile (in: hFile=0x670, lpBuffer=0x665da7bb10*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb10*, lpNumberOfBytesWritten=0x665da7bad4*=0x6, lpOverlapped=0x0) returned 1 [0192.923] CryptExportKey (in: hKey=0x665ab9a500, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7bae0 | out: pbData=0x0*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0192.923] CryptExportKey (in: hKey=0x665ab9a500, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7bb60, pdwDataLen=0x665da7bae0 | out: pbData=0x665da7bb60*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0192.924] WriteFile (in: hFile=0x670, lpBuffer=0x665da7bb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb60*, lpNumberOfBytesWritten=0x665da7bad4*=0x10c, lpOverlapped=0x0) returned 1 [0192.924] CloseHandle (hObject=0x670) returned 1 [0193.023] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0193.220] CryptDestroyKey (hKey=0x665ab9a500) returned 1 [0193.220] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0193.220] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0193.220] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0193.220] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00002.jrs", dwFileAttributes=0x80) returned 1 [0193.221] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00002.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\ussres00002.jrs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0193.221] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=3145728) returned 1 [0193.221] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=3145728) returned 1 [0193.221] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x2ffede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.221] ReadFile (in: hFile=0x618, lpBuffer=0x665da7bb38, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7baf8, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb38*, lpNumberOfBytesRead=0x665da7baf8*=0x19, lpOverlapped=0x0) returned 1 [0193.222] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0193.222] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7bac0 | out: phKey=0x665da7bac0*=0x665ab9a030) returned 1 [0193.222] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0193.222] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0193.222] ReadFile (in: hFile=0x618, lpBuffer=0x665da80000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesRead=0x665da7bad0*=0xf4240, lpOverlapped=0x0) returned 1 [0193.243] CryptEncrypt (in: hKey=0x665ab9a030, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240) returned 1 [0193.243] CryptEncrypt (in: hKey=0x665ab9a030, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x665da80000*, pdwDataLen=0x665da7bac8*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x665da80000*, pdwDataLen=0x665da7bac8*=0xf4240) returned 1 [0193.244] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0193.244] WriteFile (in: hFile=0x618, lpBuffer=0x665da80000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesWritten=0x665da7bad0*=0xf4240, lpOverlapped=0x0) returned 1 [0193.247] SetFilePointer (in: hFile=0x618, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0193.247] ReadFile (in: hFile=0x618, lpBuffer=0x665da80000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesRead=0x665da7bad0*=0xf4240, lpOverlapped=0x0) returned 1 [0193.270] CryptEncrypt (in: hKey=0x665ab9a030, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240) returned 1 [0193.270] CryptEncrypt (in: hKey=0x665ab9a030, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x665da80000*, pdwDataLen=0x665da7bac8*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x665da80000*, pdwDataLen=0x665da7bac8*=0xf4240) returned 1 [0193.272] SetFilePointer (in: hFile=0x618, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0193.272] WriteFile (in: hFile=0x618, lpBuffer=0x665da80000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesWritten=0x665da7bad0*=0xf4240, lpOverlapped=0x0) returned 1 [0193.275] SetFilePointer (in: hFile=0x618, lDistanceToMove=2000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1e8480 [0193.275] ReadFile (in: hFile=0x618, lpBuffer=0x665da80000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesRead=0x665da7bad0*=0xf4240, lpOverlapped=0x0) returned 1 [0193.297] CryptEncrypt (in: hKey=0x665ab9a030, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240) returned 1 [0193.297] CryptEncrypt (in: hKey=0x665ab9a030, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x665da80000*, pdwDataLen=0x665da7bac8*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x665da80000*, pdwDataLen=0x665da7bac8*=0xf4240) returned 1 [0193.299] SetFilePointer (in: hFile=0x618, lDistanceToMove=2000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1e8480 [0193.299] WriteFile (in: hFile=0x618, lpBuffer=0x665da80000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesWritten=0x665da7bad0*=0xf4240, lpOverlapped=0x0) returned 1 [0193.302] SetFilePointer (in: hFile=0x618, lDistanceToMove=3000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x2dc6c0 [0193.302] ReadFile (in: hFile=0x618, lpBuffer=0x665da80000, nNumberOfBytesToRead=0x23940, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesRead=0x665da7bad0*=0x23940, lpOverlapped=0x0) returned 1 [0193.302] CryptEncrypt (in: hKey=0x665ab9a030, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4250) returned 1 [0193.302] CryptEncrypt (in: hKey=0x665ab9a030, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665da80000*, pdwDataLen=0x665da7bac8*=0x23940, dwBufLen=0xf4250 | out: pbData=0x665da80000*, pdwDataLen=0x665da7bac8*=0x23950) returned 1 [0193.302] SetFilePointer (in: hFile=0x618, lDistanceToMove=3000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x2dc6c0 [0193.302] WriteFile (in: hFile=0x618, lpBuffer=0x665da80000*, nNumberOfBytesToWrite=0x23950, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesWritten=0x665da7bad0*=0x23950, lpOverlapped=0x0) returned 1 [0193.312] WriteFile (in: hFile=0x618, lpBuffer=0x665da7bb10*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb10*, lpNumberOfBytesWritten=0x665da7bad4*=0x6, lpOverlapped=0x0) returned 1 [0193.312] CryptExportKey (in: hKey=0x665ab9a030, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7bae0 | out: pbData=0x0*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0193.312] CryptExportKey (in: hKey=0x665ab9a030, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7bb60, pdwDataLen=0x665da7bae0 | out: pbData=0x665da7bb60*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0193.312] WriteFile (in: hFile=0x618, lpBuffer=0x665da7bb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb60*, lpNumberOfBytesWritten=0x665da7bad4*=0x10c, lpOverlapped=0x0) returned 1 [0193.312] CloseHandle (hObject=0x618) returned 1 [0193.413] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0193.493] CryptDestroyKey (hKey=0x665ab9a030) returned 1 [0193.493] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0193.494] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0193.494] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0193.494] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USStmp.log", dwFileAttributes=0x80) returned 1 [0193.494] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USStmp.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\usstmp.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0193.495] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=3145728) returned 1 [0193.495] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=3145728) returned 1 [0193.495] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x2ffede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.495] ReadFile (in: hFile=0x618, lpBuffer=0x665da7bb38, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7baf8, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb38*, lpNumberOfBytesRead=0x665da7baf8*=0x19, lpOverlapped=0x0) returned 1 [0193.496] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0193.496] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7bac0 | out: phKey=0x665da7bac0*=0x665ab9a3b0) returned 1 [0193.496] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0193.496] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0193.497] ReadFile (in: hFile=0x618, lpBuffer=0x665da80000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesRead=0x665da7bad0*=0xf4240, lpOverlapped=0x0) returned 1 [0193.519] CryptEncrypt (in: hKey=0x665ab9a3b0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240) returned 1 [0193.519] CryptEncrypt (in: hKey=0x665ab9a3b0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x665da80000*, pdwDataLen=0x665da7bac8*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x665da80000*, pdwDataLen=0x665da7bac8*=0xf4240) returned 1 [0193.521] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0193.521] WriteFile (in: hFile=0x618, lpBuffer=0x665da80000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesWritten=0x665da7bad0*=0xf4240, lpOverlapped=0x0) returned 1 [0193.524] SetFilePointer (in: hFile=0x618, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0193.524] ReadFile (in: hFile=0x618, lpBuffer=0x665da80000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesRead=0x665da7bad0*=0xf4240, lpOverlapped=0x0) returned 1 [0193.576] CryptEncrypt (in: hKey=0x665ab9a3b0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240) returned 1 [0193.576] CryptEncrypt (in: hKey=0x665ab9a3b0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x665da80000*, pdwDataLen=0x665da7bac8*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x665da80000*, pdwDataLen=0x665da7bac8*=0xf4240) returned 1 [0193.578] SetFilePointer (in: hFile=0x618, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0193.578] WriteFile (in: hFile=0x618, lpBuffer=0x665da80000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesWritten=0x665da7bad0*=0xf4240, lpOverlapped=0x0) returned 1 [0193.582] SetFilePointer (in: hFile=0x618, lDistanceToMove=2000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1e8480 [0193.582] ReadFile (in: hFile=0x618, lpBuffer=0x665da80000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesRead=0x665da7bad0*=0xf4240, lpOverlapped=0x0) returned 1 [0193.641] CryptEncrypt (in: hKey=0x665ab9a3b0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240) returned 1 [0193.641] CryptEncrypt (in: hKey=0x665ab9a3b0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x665da80000*, pdwDataLen=0x665da7bac8*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x665da80000*, pdwDataLen=0x665da7bac8*=0xf4240) returned 1 [0193.642] SetFilePointer (in: hFile=0x618, lDistanceToMove=2000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1e8480 [0193.643] WriteFile (in: hFile=0x618, lpBuffer=0x665da80000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesWritten=0x665da7bad0*=0xf4240, lpOverlapped=0x0) returned 1 [0193.646] SetFilePointer (in: hFile=0x618, lDistanceToMove=3000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x2dc6c0 [0193.646] ReadFile (in: hFile=0x618, lpBuffer=0x665da80000, nNumberOfBytesToRead=0x23940, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesRead=0x665da7bad0*=0x23940, lpOverlapped=0x0) returned 1 [0193.647] CryptEncrypt (in: hKey=0x665ab9a3b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4250) returned 1 [0193.647] CryptEncrypt (in: hKey=0x665ab9a3b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665da80000*, pdwDataLen=0x665da7bac8*=0x23940, dwBufLen=0xf4250 | out: pbData=0x665da80000*, pdwDataLen=0x665da7bac8*=0x23950) returned 1 [0193.647] SetFilePointer (in: hFile=0x618, lDistanceToMove=3000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x2dc6c0 [0193.647] WriteFile (in: hFile=0x618, lpBuffer=0x665da80000*, nNumberOfBytesToWrite=0x23950, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesWritten=0x665da7bad0*=0x23950, lpOverlapped=0x0) returned 1 [0193.743] WriteFile (in: hFile=0x618, lpBuffer=0x665da7bb10*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb10*, lpNumberOfBytesWritten=0x665da7bad4*=0x6, lpOverlapped=0x0) returned 1 [0193.743] CryptExportKey (in: hKey=0x665ab9a3b0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7bae0 | out: pbData=0x0*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0193.743] CryptExportKey (in: hKey=0x665ab9a3b0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7bb60, pdwDataLen=0x665da7bae0 | out: pbData=0x665da7bb60*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0193.743] WriteFile (in: hFile=0x618, lpBuffer=0x665da7bb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb60*, lpNumberOfBytesWritten=0x665da7bad4*=0x10c, lpOverlapped=0x0) returned 1 [0193.743] CloseHandle (hObject=0x618) returned 1 [0194.971] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0194.975] CryptDestroyKey (hKey=0x665ab9a3b0) returned 1 [0194.975] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0194.976] FindNextFileW (in: hFindFile=0x665abb4d40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0194.976] FindClose (in: hFindFile=0x665abb4d40 | out: hFindFile=0x665abb4d40) returned 1 [0194.976] SetLastError (dwErrCode=0x0) [0194.976] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x50c [0194.976] GetLastError () returned 0x0 [0194.976] WriteFile (in: hFile=0x50c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7c490*=0x324, lpOverlapped=0x0) returned 1 [0194.977] CloseHandle (hObject=0x50c) returned 1 [0194.978] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0194.978] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0194.978] SetLastError (dwErrCode=0x0) [0194.978] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0194.979] GetLastError () returned 0xb7 [0194.980] CloseHandle (hObject=0x570) returned 1 [0194.980] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0194.980] SetLastError (dwErrCode=0x0) [0194.980] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0194.980] GetLastError () returned 0xb7 [0194.980] CloseHandle (hObject=0x570) returned 1 [0194.980] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb5460 [0195.137] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0195.137] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0195.137] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0195.137] SetLastError (dwErrCode=0x0) [0195.137] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x50c [0195.137] GetLastError () returned 0x0 [0195.137] WriteFile (in: hFile=0x50c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7c490*=0x324, lpOverlapped=0x0) returned 1 [0195.138] CloseHandle (hObject=0x50c) returned 1 [0195.139] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\CrashReports\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4500 [0195.139] FindNextFileW (in: hFindFile=0x665abb4500, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0195.139] FindNextFileW (in: hFindFile=0x665abb4500, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0195.139] FindClose (in: hFindFile=0x665abb4500 | out: hFindFile=0x665abb4500) returned 1 [0195.139] SetLastError (dwErrCode=0x0) [0195.139] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\CrashReports\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\crashreports\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x50c [0195.140] GetLastError () returned 0x0 [0195.140] WriteFile (in: hFile=0x50c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7c490*=0x324, lpOverlapped=0x0) returned 1 [0195.141] CloseHandle (hObject=0x50c) returned 1 [0195.141] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0195.141] FindClose (in: hFindFile=0x665abb5460 | out: hFindFile=0x665abb5460) returned 1 [0195.141] SetLastError (dwErrCode=0x0) [0195.141] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0195.141] GetLastError () returned 0xb7 [0195.141] CloseHandle (hObject=0x570) returned 1 [0195.141] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0195.141] SetLastError (dwErrCode=0x0) [0195.141] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0195.142] GetLastError () returned 0xb7 [0195.142] CloseHandle (hObject=0x570) returned 1 [0195.142] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\History\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0xffffffffffffffff [0195.142] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0195.142] SetLastError (dwErrCode=0x0) [0195.142] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\History\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\history\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0195.143] GetLastError () returned 0x0 [0195.143] WriteFile (in: hFile=0x570, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7cc40*=0x324, lpOverlapped=0x0) returned 1 [0195.144] CloseHandle (hObject=0x570) returned 1 [0195.144] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0195.144] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0195.145] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\IconCache.db", dwFileAttributes=0x80) returned 1 [0195.146] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\IconCache.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\iconcache.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0195.146] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=125250) returned 1 [0195.146] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=125250) returned 1 [0195.146] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x1e820, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.146] ReadFile (in: hFile=0x570, lpBuffer=0x665da7ca98, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca98*, lpNumberOfBytesRead=0x665da7ca58*=0x19, lpOverlapped=0x0) returned 1 [0195.147] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0195.147] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ca20 | out: phKey=0x665da7ca20*=0x665ab9a180) returned 1 [0195.147] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0195.147] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0195.147] ReadFile (in: hFile=0x570, lpBuffer=0x665da80000, nNumberOfBytesToRead=0x1e942, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesRead=0x665da7ca30*=0x1e942, lpOverlapped=0x0) returned 1 [0195.148] CryptEncrypt (in: hKey=0x665ab9a180, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4250) returned 1 [0195.148] CryptEncrypt (in: hKey=0x665ab9a180, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665da80000*, pdwDataLen=0x665da7ca28*=0x1e942, dwBufLen=0xf4250 | out: pbData=0x665da80000*, pdwDataLen=0x665da7ca28*=0x1e950) returned 1 [0195.149] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0195.149] WriteFile (in: hFile=0x570, lpBuffer=0x665da80000*, nNumberOfBytesToWrite=0x1e950, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesWritten=0x665da7ca30*=0x1e950, lpOverlapped=0x0) returned 1 [0195.149] WriteFile (in: hFile=0x570, lpBuffer=0x665da7ca70*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca70*, lpNumberOfBytesWritten=0x665da7ca34*=0x6, lpOverlapped=0x0) returned 1 [0195.149] CryptExportKey (in: hKey=0x665ab9a180, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ca40 | out: pbData=0x0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0195.149] CryptExportKey (in: hKey=0x665ab9a180, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7cac0, pdwDataLen=0x665da7ca40 | out: pbData=0x665da7cac0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0195.149] WriteFile (in: hFile=0x570, lpBuffer=0x665da7cac0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7cac0*, lpNumberOfBytesWritten=0x665da7ca34*=0x10c, lpOverlapped=0x0) returned 1 [0195.149] CloseHandle (hObject=0x570) returned 1 [0195.169] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0195.175] CryptDestroyKey (hKey=0x665ab9a180) returned 1 [0195.175] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0195.175] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0195.175] SetLastError (dwErrCode=0x0) [0195.175] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0195.175] GetLastError () returned 0xb7 [0195.175] CloseHandle (hObject=0x570) returned 1 [0195.175] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665abb56a0 [0195.176] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0195.176] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0195.176] SetLastError (dwErrCode=0x0) [0195.176] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x650 [0195.202] GetLastError () returned 0x0 [0195.202] WriteFile (in: hFile=0x650, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7c490*=0x324, lpOverlapped=0x0) returned 1 [0195.203] CloseHandle (hObject=0x650) returned 1 [0195.204] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v2.0\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb5460 [0195.205] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0195.205] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0195.205] SetLastError (dwErrCode=0x0) [0195.205] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v2.0\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v2.0\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x64c [0195.205] GetLastError () returned 0x0 [0195.205] WriteFile (in: hFile=0x64c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0195.206] CloseHandle (hObject=0x64c) returned 1 [0195.206] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb55e0 [0195.211] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0195.211] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0195.211] FindNextFileW (in: hFindFile=0x665abb55e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0195.211] FindClose (in: hFindFile=0x665abb55e0 | out: hFindFile=0x665abb55e0) returned 1 [0195.211] SetLastError (dwErrCode=0x0) [0195.211] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v2.0\\usagelogs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x64c [0195.212] GetLastError () returned 0x0 [0195.212] WriteFile (in: hFile=0x64c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0195.213] CloseHandle (hObject=0x64c) returned 1 [0195.213] FindNextFileW (in: hFindFile=0x665abb5460, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0195.213] FindClose (in: hFindFile=0x665abb5460 | out: hFindFile=0x665abb5460) returned 1 [0195.213] SetLastError (dwErrCode=0x0) [0195.213] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v2.0\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v2.0\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x650 [0195.214] GetLastError () returned 0xb7 [0195.214] CloseHandle (hObject=0x650) returned 1 [0195.214] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0195.214] SetLastError (dwErrCode=0x0) [0195.214] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x650 [0195.214] GetLastError () returned 0xb7 [0195.214] CloseHandle (hObject=0x650) returned 1 [0195.215] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4260 [0195.218] FindNextFileW (in: hFindFile=0x665abb4260, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0195.218] FindNextFileW (in: hFindFile=0x665abb4260, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0195.218] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0195.219] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\ngen.log", dwFileAttributes=0x80) returned 1 [0195.220] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\ngen.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0\\ngen.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x64c [0195.220] GetFileSizeEx (in: hFile=0x64c, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=756) returned 1 [0195.220] GetFileSizeEx (in: hFile=0x64c, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=756) returned 1 [0195.220] SetFilePointerEx (in: hFile=0x64c, liDistanceToMove=0x1d2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.220] ReadFile (in: hFile=0x64c, lpBuffer=0x665da7bb38, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7baf8, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb38*, lpNumberOfBytesRead=0x665da7baf8*=0x19, lpOverlapped=0x0) returned 1 [0195.222] SetFilePointer (in: hFile=0x64c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0195.222] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7bac0 | out: phKey=0x665da7bac0*=0x665ab9a650) returned 1 [0195.222] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0195.222] SetFilePointer (in: hFile=0x64c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0195.222] ReadFile (in: hFile=0x64c, lpBuffer=0x665da80000, nNumberOfBytesToRead=0x2f4, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesRead=0x665da7bad0*=0x2f4, lpOverlapped=0x0) returned 1 [0195.222] CryptEncrypt (in: hKey=0x665ab9a650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4250) returned 1 [0195.222] CryptEncrypt (in: hKey=0x665ab9a650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665da80000*, pdwDataLen=0x665da7bac8*=0x2f4, dwBufLen=0xf4250 | out: pbData=0x665da80000*, pdwDataLen=0x665da7bac8*=0x300) returned 1 [0195.222] SetFilePointer (in: hFile=0x64c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0195.222] WriteFile (in: hFile=0x64c, lpBuffer=0x665da80000*, nNumberOfBytesToWrite=0x300, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesWritten=0x665da7bad0*=0x300, lpOverlapped=0x0) returned 1 [0195.223] WriteFile (in: hFile=0x64c, lpBuffer=0x665da7bb10*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb10*, lpNumberOfBytesWritten=0x665da7bad4*=0x6, lpOverlapped=0x0) returned 1 [0195.223] CryptExportKey (in: hKey=0x665ab9a650, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7bae0 | out: pbData=0x0*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0195.223] CryptExportKey (in: hKey=0x665ab9a650, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7bb60, pdwDataLen=0x665da7bae0 | out: pbData=0x665da7bb60*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0195.223] WriteFile (in: hFile=0x64c, lpBuffer=0x665da7bb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb60*, lpNumberOfBytesWritten=0x665da7bad4*=0x10c, lpOverlapped=0x0) returned 1 [0195.223] CloseHandle (hObject=0x64c) returned 1 [0195.235] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0195.239] CryptDestroyKey (hKey=0x665ab9a650) returned 1 [0195.239] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0195.239] FindNextFileW (in: hFindFile=0x665abb4260, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0195.239] SetLastError (dwErrCode=0x0) [0195.239] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x64c [0195.240] GetLastError () returned 0x0 [0195.240] WriteFile (in: hFile=0x64c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0195.241] CloseHandle (hObject=0x64c) returned 1 [0195.241] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb42c0 [0195.243] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0195.243] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0195.243] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0195.243] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0195.243] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0195.243] FindNextFileW (in: hFindFile=0x665abb42c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0195.243] FindClose (in: hFindFile=0x665abb42c0 | out: hFindFile=0x665abb42c0) returned 1 [0195.244] SetLastError (dwErrCode=0x0) [0195.244] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x64c [0195.248] GetLastError () returned 0x0 [0195.248] WriteFile (in: hFile=0x64c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0195.249] CloseHandle (hObject=0x64c) returned 1 [0195.249] FindNextFileW (in: hFindFile=0x665abb4260, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0195.249] FindClose (in: hFindFile=0x665abb4260 | out: hFindFile=0x665abb4260) returned 1 [0195.249] SetLastError (dwErrCode=0x0) [0195.249] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x650 [0195.250] GetLastError () returned 0xb7 [0195.250] CloseHandle (hObject=0x650) returned 1 [0195.250] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0195.250] SetLastError (dwErrCode=0x0) [0195.250] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x650 [0195.250] GetLastError () returned 0xb7 [0195.250] CloseHandle (hObject=0x650) returned 1 [0195.250] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665abb4740 [0195.250] FindNextFileW (in: hFindFile=0x665abb4740, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0195.250] FindNextFileW (in: hFindFile=0x665abb4740, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0195.250] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0195.251] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\ngen.log", dwFileAttributes=0x80) returned 1 [0195.251] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\ngen.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0_32\\ngen.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x64c [0195.252] GetFileSizeEx (in: hFile=0x64c, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=751) returned 1 [0195.252] GetFileSizeEx (in: hFile=0x64c, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=751) returned 1 [0195.252] SetFilePointerEx (in: hFile=0x64c, liDistanceToMove=0x1cd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.252] ReadFile (in: hFile=0x64c, lpBuffer=0x665da7bb38, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7baf8, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb38*, lpNumberOfBytesRead=0x665da7baf8*=0x19, lpOverlapped=0x0) returned 1 [0195.254] SetFilePointer (in: hFile=0x64c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0195.254] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7bac0 | out: phKey=0x665da7bac0*=0x665ab9a810) returned 1 [0195.254] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0195.254] SetFilePointer (in: hFile=0x64c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0195.254] ReadFile (in: hFile=0x64c, lpBuffer=0x665da80000, nNumberOfBytesToRead=0x2ef, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesRead=0x665da7bad0*=0x2ef, lpOverlapped=0x0) returned 1 [0195.254] CryptEncrypt (in: hKey=0x665ab9a810, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4250) returned 1 [0195.254] CryptEncrypt (in: hKey=0x665ab9a810, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665da80000*, pdwDataLen=0x665da7bac8*=0x2ef, dwBufLen=0xf4250 | out: pbData=0x665da80000*, pdwDataLen=0x665da7bac8*=0x2f0) returned 1 [0195.254] SetFilePointer (in: hFile=0x64c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0195.254] WriteFile (in: hFile=0x64c, lpBuffer=0x665da80000*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesWritten=0x665da7bad0*=0x2f0, lpOverlapped=0x0) returned 1 [0195.254] WriteFile (in: hFile=0x64c, lpBuffer=0x665da7bb10*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb10*, lpNumberOfBytesWritten=0x665da7bad4*=0x6, lpOverlapped=0x0) returned 1 [0195.255] CryptExportKey (in: hKey=0x665ab9a810, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7bae0 | out: pbData=0x0*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0195.255] CryptExportKey (in: hKey=0x665ab9a810, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7bb60, pdwDataLen=0x665da7bae0 | out: pbData=0x665da7bb60*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0195.255] WriteFile (in: hFile=0x64c, lpBuffer=0x665da7bb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb60*, lpNumberOfBytesWritten=0x665da7bad4*=0x10c, lpOverlapped=0x0) returned 1 [0195.255] CloseHandle (hObject=0x64c) returned 1 [0195.270] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0195.274] CryptDestroyKey (hKey=0x665ab9a810) returned 1 [0195.274] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0195.274] FindNextFileW (in: hFindFile=0x665abb4740, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0195.274] SetLastError (dwErrCode=0x0) [0195.274] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0_32\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x64c [0195.279] GetLastError () returned 0x0 [0195.279] WriteFile (in: hFile=0x64c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0195.280] CloseHandle (hObject=0x64c) returned 1 [0195.280] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665abb4c20 [0195.298] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0195.298] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0195.298] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0195.298] FindNextFileW (in: hFindFile=0x665abb4c20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0195.298] FindClose (in: hFindFile=0x665abb4c20 | out: hFindFile=0x665abb4c20) returned 1 [0195.298] SetLastError (dwErrCode=0x0) [0195.298] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0_32\\usagelogs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x434 [0195.311] GetLastError () returned 0x0 [0195.311] WriteFile (in: hFile=0x434, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0195.312] CloseHandle (hObject=0x434) returned 1 [0195.312] FindNextFileW (in: hFindFile=0x665abb4740, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0195.312] FindClose (in: hFindFile=0x665abb4740 | out: hFindFile=0x665abb4740) returned 1 [0195.313] SetLastError (dwErrCode=0x0) [0195.313] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0_32\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x650 [0195.313] GetLastError () returned 0xb7 [0195.313] CloseHandle (hObject=0x650) returned 1 [0195.313] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0195.313] SetLastError (dwErrCode=0x0) [0195.313] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x650 [0195.313] GetLastError () returned 0xb7 [0195.313] CloseHandle (hObject=0x650) returned 1 [0195.313] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Credentials\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90cb60 [0195.328] FindNextFileW (in: hFindFile=0x665d90cb60, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0195.328] FindNextFileW (in: hFindFile=0x665d90cb60, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0195.328] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0195.328] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Credentials\\DFBE70A7E5CC19A398EBF1B96859CE5D", dwFileAttributes=0x80) returned 1 [0195.329] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Credentials\\DFBE70A7E5CC19A398EBF1B96859CE5D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\credentials\\dfbe70a7e5cc19a398ebf1b96859ce5d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x604 [0195.330] GetFileSizeEx (in: hFile=0x604, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=11264) returned 1 [0195.330] GetFileSizeEx (in: hFile=0x604, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=11264) returned 1 [0195.330] SetFilePointerEx (in: hFile=0x604, liDistanceToMove=0x2ade, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.330] ReadFile (in: hFile=0x604, lpBuffer=0x665da7bb38, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7baf8, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb38*, lpNumberOfBytesRead=0x665da7baf8*=0x19, lpOverlapped=0x0) returned 1 [0195.331] SetFilePointer (in: hFile=0x604, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0195.331] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7bac0 | out: phKey=0x665da7bac0*=0x665ab612c0) returned 1 [0195.331] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0195.332] SetFilePointer (in: hFile=0x604, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0195.332] ReadFile (in: hFile=0x604, lpBuffer=0x665da80000, nNumberOfBytesToRead=0x2c00, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesRead=0x665da7bad0*=0x2c00, lpOverlapped=0x0) returned 1 [0195.332] CryptEncrypt (in: hKey=0x665ab612c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4250) returned 1 [0195.332] CryptEncrypt (in: hKey=0x665ab612c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665da80000*, pdwDataLen=0x665da7bac8*=0x2c00, dwBufLen=0xf4250 | out: pbData=0x665da80000*, pdwDataLen=0x665da7bac8*=0x2c10) returned 1 [0195.332] SetFilePointer (in: hFile=0x604, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0195.332] WriteFile (in: hFile=0x604, lpBuffer=0x665da80000*, nNumberOfBytesToWrite=0x2c10, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesWritten=0x665da7bad0*=0x2c10, lpOverlapped=0x0) returned 1 [0195.332] WriteFile (in: hFile=0x604, lpBuffer=0x665da7bb10*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb10*, lpNumberOfBytesWritten=0x665da7bad4*=0x6, lpOverlapped=0x0) returned 1 [0195.333] CryptExportKey (in: hKey=0x665ab612c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7bae0 | out: pbData=0x0*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0195.333] CryptExportKey (in: hKey=0x665ab612c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7bb60, pdwDataLen=0x665da7bae0 | out: pbData=0x665da7bb60*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0195.333] WriteFile (in: hFile=0x604, lpBuffer=0x665da7bb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb60*, lpNumberOfBytesWritten=0x665da7bad4*=0x10c, lpOverlapped=0x0) returned 1 [0195.333] CloseHandle (hObject=0x604) returned 1 [0195.344] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0195.348] CryptDestroyKey (hKey=0x665ab612c0) returned 1 [0195.348] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0195.349] FindNextFileW (in: hFindFile=0x665d90cb60, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0195.349] FindClose (in: hFindFile=0x665d90cb60 | out: hFindFile=0x665d90cb60) returned 1 [0195.349] SetLastError (dwErrCode=0x0) [0195.349] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Credentials\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\credentials\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x650 [0195.349] GetLastError () returned 0x0 [0195.349] WriteFile (in: hFile=0x650, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7c490*=0x324, lpOverlapped=0x0) returned 1 [0195.351] CloseHandle (hObject=0x650) returned 1 [0195.351] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0195.351] SetLastError (dwErrCode=0x0) [0195.351] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x650 [0195.351] GetLastError () returned 0xb7 [0195.351] CloseHandle (hObject=0x650) returned 1 [0195.351] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Event Viewer\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c800 [0195.353] FindNextFileW (in: hFindFile=0x665d90c800, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0195.353] FindNextFileW (in: hFindFile=0x665d90c800, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0195.353] FindClose (in: hFindFile=0x665d90c800 | out: hFindFile=0x665d90c800) returned 1 [0195.353] SetLastError (dwErrCode=0x0) [0195.353] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Event Viewer\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\event viewer\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x650 [0195.353] GetLastError () returned 0x0 [0195.353] WriteFile (in: hFile=0x650, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7c490*=0x324, lpOverlapped=0x0) returned 1 [0195.357] CloseHandle (hObject=0x650) returned 1 [0195.358] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0195.358] SetLastError (dwErrCode=0x0) [0195.358] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x650 [0195.358] GetLastError () returned 0xb7 [0195.358] CloseHandle (hObject=0x650) returned 1 [0195.358] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90bf00 [0195.377] FindNextFileW (in: hFindFile=0x665d90bf00, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0195.377] FindNextFileW (in: hFindFile=0x665d90bf00, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0195.377] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0195.377] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\FeedsStore.feedsdb-ms", dwFileAttributes=0x80) returned 1 [0195.380] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\FeedsStore.feedsdb-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\feeds\\feedsstore.feedsdb-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x538 [0195.380] GetFileSizeEx (in: hFile=0x538, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=5120) returned 1 [0195.380] GetFileSizeEx (in: hFile=0x538, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=5120) returned 1 [0195.380] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x12de, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.381] ReadFile (in: hFile=0x538, lpBuffer=0x665da7bb38, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7baf8, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb38*, lpNumberOfBytesRead=0x665da7baf8*=0x19, lpOverlapped=0x0) returned 1 [0195.382] SetFilePointer (in: hFile=0x538, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0195.382] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7bac0 | out: phKey=0x665da7bac0*=0x665abb9440) returned 1 [0195.382] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0195.382] SetFilePointer (in: hFile=0x538, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0195.382] ReadFile (in: hFile=0x538, lpBuffer=0x665da80000, nNumberOfBytesToRead=0x1400, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesRead=0x665da7bad0*=0x1400, lpOverlapped=0x0) returned 1 [0195.383] CryptEncrypt (in: hKey=0x665abb9440, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4250) returned 1 [0195.383] CryptEncrypt (in: hKey=0x665abb9440, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665da80000*, pdwDataLen=0x665da7bac8*=0x1400, dwBufLen=0xf4250 | out: pbData=0x665da80000*, pdwDataLen=0x665da7bac8*=0x1410) returned 1 [0195.383] SetFilePointer (in: hFile=0x538, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0195.383] WriteFile (in: hFile=0x538, lpBuffer=0x665da80000*, nNumberOfBytesToWrite=0x1410, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesWritten=0x665da7bad0*=0x1410, lpOverlapped=0x0) returned 1 [0195.383] WriteFile (in: hFile=0x538, lpBuffer=0x665da7bb10*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb10*, lpNumberOfBytesWritten=0x665da7bad4*=0x6, lpOverlapped=0x0) returned 1 [0195.383] CryptExportKey (in: hKey=0x665abb9440, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7bae0 | out: pbData=0x0*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0195.383] CryptExportKey (in: hKey=0x665abb9440, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7bb60, pdwDataLen=0x665da7bae0 | out: pbData=0x665da7bb60*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0195.383] WriteFile (in: hFile=0x538, lpBuffer=0x665da7bb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb60*, lpNumberOfBytesWritten=0x665da7bad4*=0x10c, lpOverlapped=0x0) returned 1 [0195.384] CloseHandle (hObject=0x538) returned 1 [0195.396] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0195.400] CryptDestroyKey (hKey=0x665abb9440) returned 1 [0195.400] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0195.400] FindNextFileW (in: hFindFile=0x665d90bf00, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0195.400] SetLastError (dwErrCode=0x0) [0195.400] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\feeds\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x538 [0195.403] GetLastError () returned 0x0 [0195.403] WriteFile (in: hFile=0x538, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0195.404] CloseHandle (hObject=0x538) returned 1 [0195.404] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c980 [0195.404] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0195.404] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0195.404] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0195.404] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Internet Explorer Suggested Sites~.feed-ms", dwFileAttributes=0x80) returned 1 [0195.405] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Internet Explorer Suggested Sites~.feed-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\internet explorer suggested sites~.feed-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x628 [0195.405] GetFileSizeEx (in: hFile=0x628, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=28672) returned 1 [0195.405] GetFileSizeEx (in: hFile=0x628, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=28672) returned 1 [0195.405] SetFilePointerEx (in: hFile=0x628, liDistanceToMove=0x6ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.405] ReadFile (in: hFile=0x628, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0195.406] SetFilePointer (in: hFile=0x628, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0195.407] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665abb92f0) returned 1 [0195.407] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0195.407] SetFilePointer (in: hFile=0x628, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0195.407] ReadFile (in: hFile=0x628, lpBuffer=0x665da80000, nNumberOfBytesToRead=0x7000, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesRead=0x665da7b320*=0x7000, lpOverlapped=0x0) returned 1 [0195.408] CryptEncrypt (in: hKey=0x665abb92f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0195.408] CryptEncrypt (in: hKey=0x665abb92f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665da80000*, pdwDataLen=0x665da7b318*=0x7000, dwBufLen=0xf4250 | out: pbData=0x665da80000*, pdwDataLen=0x665da7b318*=0x7010) returned 1 [0195.408] SetFilePointer (in: hFile=0x628, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0195.408] WriteFile (in: hFile=0x628, lpBuffer=0x665da80000*, nNumberOfBytesToWrite=0x7010, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesWritten=0x665da7b320*=0x7010, lpOverlapped=0x0) returned 1 [0195.409] WriteFile (in: hFile=0x628, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0195.409] CryptExportKey (in: hKey=0x665abb92f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0195.409] CryptExportKey (in: hKey=0x665abb92f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0195.409] WriteFile (in: hFile=0x628, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0195.409] CloseHandle (hObject=0x628) returned 1 [0195.431] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0195.436] CryptDestroyKey (hKey=0x665abb92f0) returned 1 [0195.436] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0195.437] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0195.437] FindClose (in: hFindFile=0x665d90c980 | out: hFindFile=0x665d90c980) returned 1 [0195.437] SetLastError (dwErrCode=0x0) [0195.437] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x538 [0195.438] GetLastError () returned 0x0 [0195.438] WriteFile (in: hFile=0x538, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0195.439] CloseHandle (hObject=0x538) returned 1 [0195.439] FindNextFileW (in: hFindFile=0x665d90bf00, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0195.439] FindClose (in: hFindFile=0x665d90bf00 | out: hFindFile=0x665d90bf00) returned 1 [0195.439] SetLastError (dwErrCode=0x0) [0195.439] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\feeds\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0195.439] GetLastError () returned 0xb7 [0195.439] CloseHandle (hObject=0x60c) returned 1 [0195.439] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0195.439] SetLastError (dwErrCode=0x0) [0195.440] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0195.440] GetLastError () returned 0xb7 [0195.440] CloseHandle (hObject=0x60c) returned 1 [0195.440] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90cc20 [0195.442] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0195.442] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0195.442] SetLastError (dwErrCode=0x0) [0195.442] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\feeds cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x538 [0195.443] GetLastError () returned 0x0 [0195.443] WriteFile (in: hFile=0x538, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0195.444] CloseHandle (hObject=0x538) returned 1 [0195.444] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\6YGNCJW8\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c740 [0195.445] FindNextFileW (in: hFindFile=0x665d90c740, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0195.445] FindNextFileW (in: hFindFile=0x665d90c740, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0195.445] FindClose (in: hFindFile=0x665d90c740 | out: hFindFile=0x665d90c740) returned 1 [0195.445] SetLastError (dwErrCode=0x0) [0195.445] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\6YGNCJW8\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\feeds cache\\6ygncjw8\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x538 [0195.447] GetLastError () returned 0x0 [0195.447] WriteFile (in: hFile=0x538, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0195.448] CloseHandle (hObject=0x538) returned 1 [0195.448] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0195.448] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0195.449] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\container.dat", dwFileAttributes=0x80) returned 1 [0195.450] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\feeds cache\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x538 [0195.451] GetFileSizeEx (in: hFile=0x538, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=0) returned 1 [0195.451] GetFileSizeEx (in: hFile=0x538, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=0) returned 1 [0195.451] CloseHandle (hObject=0x538) returned 1 [0195.451] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0195.451] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0195.451] SetLastError (dwErrCode=0x0) [0195.451] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\feeds cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x538 [0195.451] GetLastError () returned 0xb7 [0195.451] CloseHandle (hObject=0x538) returned 1 [0195.452] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\FZW2QEOY\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d100 [0195.452] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0195.452] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0195.452] FindClose (in: hFindFile=0x665d90d100 | out: hFindFile=0x665d90d100) returned 1 [0195.452] SetLastError (dwErrCode=0x0) [0195.452] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\FZW2QEOY\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\feeds cache\\fzw2qeoy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x538 [0195.452] GetLastError () returned 0x0 [0195.452] WriteFile (in: hFile=0x538, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0195.453] CloseHandle (hObject=0x538) returned 1 [0195.453] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0195.454] SetLastError (dwErrCode=0x0) [0195.454] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\feeds cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x538 [0195.454] GetLastError () returned 0xb7 [0195.454] CloseHandle (hObject=0x538) returned 1 [0195.454] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\O593F7EE\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90cda0 [0195.455] FindNextFileW (in: hFindFile=0x665d90cda0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0195.455] FindNextFileW (in: hFindFile=0x665d90cda0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0195.455] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0195.455] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\O593F7EE\\ieonlinews.microsoft[1]", dwFileAttributes=0x80) returned 1 [0195.457] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\O593F7EE\\ieonlinews.microsoft[1]" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\feeds cache\\o593f7ee\\ieonlinews.microsoft[1]"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0195.457] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=0) returned 1 [0195.457] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=0) returned 1 [0195.457] CloseHandle (hObject=0x624) returned 1 [0195.457] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0195.458] FindNextFileW (in: hFindFile=0x665d90cda0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0195.458] FindClose (in: hFindFile=0x665d90cda0 | out: hFindFile=0x665d90cda0) returned 1 [0195.458] SetLastError (dwErrCode=0x0) [0195.458] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\O593F7EE\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\feeds cache\\o593f7ee\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x538 [0195.458] GetLastError () returned 0x0 [0195.458] WriteFile (in: hFile=0x538, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0195.459] CloseHandle (hObject=0x538) returned 1 [0195.459] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0195.459] SetLastError (dwErrCode=0x0) [0195.459] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\feeds cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x538 [0195.460] GetLastError () returned 0xb7 [0195.460] CloseHandle (hObject=0x538) returned 1 [0195.460] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\PJ5H3B54\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c500 [0195.460] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0195.460] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0195.460] FindClose (in: hFindFile=0x665d90c500 | out: hFindFile=0x665d90c500) returned 1 [0195.460] SetLastError (dwErrCode=0x0) [0195.460] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\PJ5H3B54\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\feeds cache\\pj5h3b54\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x538 [0195.460] GetLastError () returned 0x0 [0195.460] WriteFile (in: hFile=0x538, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0195.461] CloseHandle (hObject=0x538) returned 1 [0195.462] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0195.462] FindClose (in: hFindFile=0x665d90cc20 | out: hFindFile=0x665d90cc20) returned 1 [0195.462] SetLastError (dwErrCode=0x0) [0195.462] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\feeds cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0195.462] GetLastError () returned 0xb7 [0195.462] CloseHandle (hObject=0x60c) returned 1 [0195.462] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0195.462] SetLastError (dwErrCode=0x0) [0195.462] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0195.462] GetLastError () returned 0xb7 [0195.462] CloseHandle (hObject=0x60c) returned 1 [0195.463] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\FORMS\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90ce60 [0195.463] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0195.463] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0195.463] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0195.464] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\FORMS\\FRMDATA64.DAT", dwFileAttributes=0x80) returned 1 [0195.465] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\FORMS\\FRMDATA64.DAT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\forms\\frmdata64.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x538 [0195.465] GetFileSizeEx (in: hFile=0x538, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=254900) returned 1 [0195.465] GetFileSizeEx (in: hFile=0x538, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=254900) returned 1 [0195.465] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x3e292, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.465] ReadFile (in: hFile=0x538, lpBuffer=0x665da7bb38, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7baf8, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb38*, lpNumberOfBytesRead=0x665da7baf8*=0x19, lpOverlapped=0x0) returned 1 [0195.467] SetFilePointer (in: hFile=0x538, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0195.467] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7bac0 | out: phKey=0x665da7bac0*=0x665abb92f0) returned 1 [0195.467] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0195.467] SetFilePointer (in: hFile=0x538, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0195.467] ReadFile (in: hFile=0x538, lpBuffer=0x665da80000, nNumberOfBytesToRead=0x3e3b4, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesRead=0x665da7bad0*=0x3e3b4, lpOverlapped=0x0) returned 1 [0195.474] CryptEncrypt (in: hKey=0x665abb92f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4250) returned 1 [0195.474] CryptEncrypt (in: hKey=0x665abb92f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665da80000*, pdwDataLen=0x665da7bac8*=0x3e3b4, dwBufLen=0xf4250 | out: pbData=0x665da80000*, pdwDataLen=0x665da7bac8*=0x3e3c0) returned 1 [0195.474] SetFilePointer (in: hFile=0x538, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0195.474] WriteFile (in: hFile=0x538, lpBuffer=0x665da80000*, nNumberOfBytesToWrite=0x3e3c0, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesWritten=0x665da7bad0*=0x3e3c0, lpOverlapped=0x0) returned 1 [0195.475] WriteFile (in: hFile=0x538, lpBuffer=0x665da7bb10*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb10*, lpNumberOfBytesWritten=0x665da7bad4*=0x6, lpOverlapped=0x0) returned 1 [0195.475] CryptExportKey (in: hKey=0x665abb92f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7bae0 | out: pbData=0x0*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0195.475] CryptExportKey (in: hKey=0x665abb92f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7bb60, pdwDataLen=0x665da7bae0 | out: pbData=0x665da7bb60*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0195.475] WriteFile (in: hFile=0x538, lpBuffer=0x665da7bb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb60*, lpNumberOfBytesWritten=0x665da7bad4*=0x10c, lpOverlapped=0x0) returned 1 [0195.476] CloseHandle (hObject=0x538) returned 1 [0195.491] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0195.497] CryptDestroyKey (hKey=0x665abb92f0) returned 1 [0195.497] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0195.497] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0195.497] FindClose (in: hFindFile=0x665d90ce60 | out: hFindFile=0x665d90ce60) returned 1 [0195.497] SetLastError (dwErrCode=0x0) [0195.497] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\FORMS\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\forms\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0195.498] GetLastError () returned 0x0 [0195.499] WriteFile (in: hFile=0x60c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7c490*=0x324, lpOverlapped=0x0) returned 1 [0195.499] CloseHandle (hObject=0x60c) returned 1 [0195.500] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0195.500] SetLastError (dwErrCode=0x0) [0195.500] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0195.500] GetLastError () returned 0xb7 [0195.500] CloseHandle (hObject=0x60c) returned 1 [0195.500] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\GameDVR\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c080 [0195.500] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0195.500] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0195.500] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0195.501] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\GameDVR\\KnownGameList.bin", dwFileAttributes=0x80) returned 1 [0195.502] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\GameDVR\\KnownGameList.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\gamedvr\\knowngamelist.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0195.502] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0195.502] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0195.502] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0195.502] FindClose (in: hFindFile=0x665d90c080 | out: hFindFile=0x665d90c080) returned 1 [0195.502] SetLastError (dwErrCode=0x0) [0195.502] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\GameDVR\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\gamedvr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0195.503] GetLastError () returned 0x0 [0195.503] WriteFile (in: hFile=0x60c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7c490*=0x324, lpOverlapped=0x0) returned 1 [0195.504] CloseHandle (hObject=0x60c) returned 1 [0195.505] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0195.505] SetLastError (dwErrCode=0x0) [0195.505] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0195.505] GetLastError () returned 0xb7 [0195.505] CloseHandle (hObject=0x60c) returned 1 [0195.505] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\InputPersonalization\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c500 [0195.505] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0195.505] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0195.505] SetLastError (dwErrCode=0x0) [0195.505] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\InputPersonalization\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\inputpersonalization\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x538 [0195.506] GetLastError () returned 0x0 [0195.506] WriteFile (in: hFile=0x538, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0195.507] CloseHandle (hObject=0x538) returned 1 [0195.507] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90cfe0 [0195.508] FindNextFileW (in: hFindFile=0x665d90cfe0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0195.508] FindNextFileW (in: hFindFile=0x665d90cfe0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0195.508] FindClose (in: hFindFile=0x665d90cfe0 | out: hFindFile=0x665d90cfe0) returned 1 [0195.508] SetLastError (dwErrCode=0x0) [0195.508] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\inputpersonalization\\traineddatastore\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x538 [0195.509] GetLastError () returned 0x0 [0195.509] WriteFile (in: hFile=0x538, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0195.510] CloseHandle (hObject=0x538) returned 1 [0195.510] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0195.510] FindClose (in: hFindFile=0x665d90c500 | out: hFindFile=0x665d90c500) returned 1 [0195.510] SetLastError (dwErrCode=0x0) [0195.510] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\InputPersonalization\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\inputpersonalization\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0195.511] GetLastError () returned 0xb7 [0195.511] CloseHandle (hObject=0x60c) returned 1 [0195.511] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0195.511] SetLastError (dwErrCode=0x0) [0195.511] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0195.511] GetLastError () returned 0xb7 [0195.511] CloseHandle (hObject=0x60c) returned 1 [0195.511] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c020 [0195.512] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0195.512] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0195.512] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0195.512] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt", dwFileAttributes=0x80) returned 1 [0195.513] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x538 [0195.513] GetFileSizeEx (in: hFile=0x538, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=6583) returned 1 [0195.513] GetFileSizeEx (in: hFile=0x538, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=6583) returned 1 [0195.513] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x1895, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.513] ReadFile (in: hFile=0x538, lpBuffer=0x665da7bb38, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7baf8, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb38*, lpNumberOfBytesRead=0x665da7baf8*=0x19, lpOverlapped=0x0) returned 1 [0195.516] SetFilePointer (in: hFile=0x538, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0195.516] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7bac0 | out: phKey=0x665da7bac0*=0x665abb98a0) returned 1 [0195.516] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0195.517] SetFilePointer (in: hFile=0x538, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0195.517] ReadFile (in: hFile=0x538, lpBuffer=0x665da80000, nNumberOfBytesToRead=0x19b7, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesRead=0x665da7bad0*=0x19b7, lpOverlapped=0x0) returned 1 [0195.517] CryptEncrypt (in: hKey=0x665abb98a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4250) returned 1 [0195.517] CryptEncrypt (in: hKey=0x665abb98a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665da80000*, pdwDataLen=0x665da7bac8*=0x19b7, dwBufLen=0xf4250 | out: pbData=0x665da80000*, pdwDataLen=0x665da7bac8*=0x19c0) returned 1 [0195.517] SetFilePointer (in: hFile=0x538, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0195.518] WriteFile (in: hFile=0x538, lpBuffer=0x665da80000*, nNumberOfBytesToWrite=0x19c0, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesWritten=0x665da7bad0*=0x19c0, lpOverlapped=0x0) returned 1 [0195.518] WriteFile (in: hFile=0x538, lpBuffer=0x665da7bb10*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb10*, lpNumberOfBytesWritten=0x665da7bad4*=0x6, lpOverlapped=0x0) returned 1 [0195.518] CryptExportKey (in: hKey=0x665abb98a0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7bae0 | out: pbData=0x0*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0195.518] CryptExportKey (in: hKey=0x665abb98a0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7bb60, pdwDataLen=0x665da7bae0 | out: pbData=0x665da7bb60*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0195.518] WriteFile (in: hFile=0x538, lpBuffer=0x665da7bb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb60*, lpNumberOfBytesWritten=0x665da7bad4*=0x10c, lpOverlapped=0x0) returned 1 [0195.518] CloseHandle (hObject=0x538) returned 1 [0195.533] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0195.538] CryptDestroyKey (hKey=0x665abb98a0) returned 1 [0195.538] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0195.539] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0195.539] SetLastError (dwErrCode=0x0) [0195.539] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x538 [0195.540] GetLastError () returned 0x0 [0195.540] WriteFile (in: hFile=0x538, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0195.541] CloseHandle (hObject=0x538) returned 1 [0195.542] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DomainSuggestions\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d280 [0195.547] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0195.547] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0195.547] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0195.548] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DomainSuggestions\\en-US.1", dwFileAttributes=0x80) returned 1 [0195.548] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DomainSuggestions\\en-US.1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\domainsuggestions\\en-us.1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0195.549] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=18176) returned 1 [0195.549] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=18176) returned 1 [0195.549] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x45de, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.549] ReadFile (in: hFile=0x624, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0195.550] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0195.550] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665abb98a0) returned 1 [0195.550] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0195.551] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0195.551] ReadFile (in: hFile=0x624, lpBuffer=0x665da80000, nNumberOfBytesToRead=0x4700, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesRead=0x665da7b320*=0x4700, lpOverlapped=0x0) returned 1 [0195.552] CryptEncrypt (in: hKey=0x665abb98a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0195.552] CryptEncrypt (in: hKey=0x665abb98a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665da80000*, pdwDataLen=0x665da7b318*=0x4700, dwBufLen=0xf4250 | out: pbData=0x665da80000*, pdwDataLen=0x665da7b318*=0x4710) returned 1 [0195.552] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0195.552] WriteFile (in: hFile=0x624, lpBuffer=0x665da80000*, nNumberOfBytesToWrite=0x4710, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesWritten=0x665da7b320*=0x4710, lpOverlapped=0x0) returned 1 [0195.552] WriteFile (in: hFile=0x624, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0195.552] CryptExportKey (in: hKey=0x665abb98a0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0195.552] CryptExportKey (in: hKey=0x665abb98a0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0195.552] WriteFile (in: hFile=0x624, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0195.552] CloseHandle (hObject=0x624) returned 1 [0195.570] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0195.576] CryptDestroyKey (hKey=0x665abb98a0) returned 1 [0195.576] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0195.576] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0195.576] FindClose (in: hFindFile=0x665d90d280 | out: hFindFile=0x665d90d280) returned 1 [0195.576] SetLastError (dwErrCode=0x0) [0195.576] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DomainSuggestions\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\domainsuggestions\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x538 [0195.577] GetLastError () returned 0x0 [0195.577] WriteFile (in: hFile=0x538, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0195.578] CloseHandle (hObject=0x538) returned 1 [0195.578] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0195.578] SetLastError (dwErrCode=0x0) [0195.578] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x538 [0195.578] GetLastError () returned 0xb7 [0195.578] CloseHandle (hObject=0x538) returned 1 [0195.578] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90cce0 [0195.579] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0195.579] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0195.579] SetLastError (dwErrCode=0x0) [0195.579] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\domstore\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0195.581] GetLastError () returned 0x0 [0195.581] WriteFile (in: hFile=0x624, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0195.582] CloseHandle (hObject=0x624) returned 1 [0195.582] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\37JGORX3\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90cd40 [0195.583] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0195.583] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0195.583] FindClose (in: hFindFile=0x665d90cd40 | out: hFindFile=0x665d90cd40) returned 1 [0195.583] SetLastError (dwErrCode=0x0) [0195.583] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\37JGORX3\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\domstore\\37jgorx3\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0195.583] GetLastError () returned 0x0 [0195.583] WriteFile (in: hFile=0x624, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0195.584] CloseHandle (hObject=0x624) returned 1 [0195.584] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0195.584] SetLastError (dwErrCode=0x0) [0195.585] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\domstore\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0195.585] GetLastError () returned 0xb7 [0195.585] CloseHandle (hObject=0x624) returned 1 [0195.585] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\52UK17NV\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90cf20 [0195.586] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0195.586] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0195.586] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0195.586] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\52UK17NV\\www.google[1].xml", dwFileAttributes=0x80) returned 1 [0195.588] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\52UK17NV\\www.google[1].xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\domstore\\52uk17nv\\www.google[1].xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x628 [0195.588] GetFileSizeEx (in: hFile=0x628, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=13) returned 1 [0195.588] GetFileSizeEx (in: hFile=0x628, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=13) returned 1 [0195.588] CloseHandle (hObject=0x628) returned 1 [0195.588] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0195.589] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0195.589] FindClose (in: hFindFile=0x665d90cf20 | out: hFindFile=0x665d90cf20) returned 1 [0195.589] SetLastError (dwErrCode=0x0) [0195.589] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\52UK17NV\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\domstore\\52uk17nv\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0195.590] GetLastError () returned 0x0 [0195.590] WriteFile (in: hFile=0x624, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0195.591] CloseHandle (hObject=0x624) returned 1 [0195.591] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0195.591] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0195.592] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\container.dat", dwFileAttributes=0x80) returned 1 [0195.592] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\domstore\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0195.593] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=0) returned 1 [0195.593] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=0) returned 1 [0195.593] CloseHandle (hObject=0x624) returned 1 [0195.593] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0195.593] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0195.593] SetLastError (dwErrCode=0x0) [0195.593] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\domstore\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0195.593] GetLastError () returned 0xb7 [0195.593] CloseHandle (hObject=0x624) returned 1 [0195.594] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\L8OQST1L\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90d040 [0195.594] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0195.594] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0195.594] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0195.594] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\L8OQST1L\\consent.google[1].xml", dwFileAttributes=0x80) returned 1 [0195.595] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\L8OQST1L\\consent.google[1].xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\domstore\\l8oqst1l\\consent.google[1].xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x628 [0195.596] GetFileSizeEx (in: hFile=0x628, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=13) returned 1 [0195.596] GetFileSizeEx (in: hFile=0x628, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=13) returned 1 [0195.596] CloseHandle (hObject=0x628) returned 1 [0195.596] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0195.596] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0195.596] FindClose (in: hFindFile=0x665d90d040 | out: hFindFile=0x665d90d040) returned 1 [0195.596] SetLastError (dwErrCode=0x0) [0195.596] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\L8OQST1L\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\domstore\\l8oqst1l\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0195.597] GetLastError () returned 0x0 [0195.597] WriteFile (in: hFile=0x624, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0195.598] CloseHandle (hObject=0x624) returned 1 [0195.598] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0195.598] SetLastError (dwErrCode=0x0) [0195.598] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\domstore\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0195.598] GetLastError () returned 0xb7 [0195.598] CloseHandle (hObject=0x624) returned 1 [0195.598] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\Q6TJEFY5\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90d280 [0195.599] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0195.599] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0195.599] FindClose (in: hFindFile=0x665d90d280 | out: hFindFile=0x665d90d280) returned 1 [0195.602] SetLastError (dwErrCode=0x0) [0195.602] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\Q6TJEFY5\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\domstore\\q6tjefy5\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0195.602] GetLastError () returned 0x0 [0195.602] WriteFile (in: hFile=0x624, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0195.603] CloseHandle (hObject=0x624) returned 1 [0195.603] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0195.603] FindClose (in: hFindFile=0x665d90cce0 | out: hFindFile=0x665d90cce0) returned 1 [0195.603] SetLastError (dwErrCode=0x0) [0195.604] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\domstore\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x538 [0195.604] GetLastError () returned 0xb7 [0195.604] CloseHandle (hObject=0x538) returned 1 [0195.604] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0195.604] SetLastError (dwErrCode=0x0) [0195.604] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x538 [0195.604] GetLastError () returned 0xb7 [0195.604] CloseHandle (hObject=0x538) returned 1 [0195.605] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieBrowserModeList\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c380 [0195.605] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0195.605] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0195.605] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0195.606] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieBrowserModeList\\container.dat", dwFileAttributes=0x80) returned 1 [0195.607] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieBrowserModeList\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\emiebrowsermodelist\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0195.607] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=0) returned 1 [0195.607] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=0) returned 1 [0195.607] CloseHandle (hObject=0x624) returned 1 [0195.608] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0195.608] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0195.608] FindClose (in: hFindFile=0x665d90c380 | out: hFindFile=0x665d90c380) returned 1 [0195.608] SetLastError (dwErrCode=0x0) [0195.608] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieBrowserModeList\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\emiebrowsermodelist\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x538 [0195.608] GetLastError () returned 0x0 [0195.608] WriteFile (in: hFile=0x538, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0195.609] CloseHandle (hObject=0x538) returned 1 [0195.609] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0195.609] SetLastError (dwErrCode=0x0) [0195.609] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x538 [0195.610] GetLastError () returned 0xb7 [0195.610] CloseHandle (hObject=0x538) returned 1 [0195.610] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieSiteList\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bc00 [0195.610] FindNextFileW (in: hFindFile=0x665d90bc00, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0195.610] FindNextFileW (in: hFindFile=0x665d90bc00, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0195.610] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0195.610] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieSiteList\\container.dat", dwFileAttributes=0x80) returned 1 [0195.613] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieSiteList\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\emiesitelist\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0195.613] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=0) returned 1 [0195.613] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=0) returned 1 [0195.613] CloseHandle (hObject=0x624) returned 1 [0195.613] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0195.613] FindNextFileW (in: hFindFile=0x665d90bc00, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0195.613] FindClose (in: hFindFile=0x665d90bc00 | out: hFindFile=0x665d90bc00) returned 1 [0195.613] SetLastError (dwErrCode=0x0) [0195.613] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieSiteList\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\emiesitelist\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x538 [0195.614] GetLastError () returned 0x0 [0195.614] WriteFile (in: hFile=0x538, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0195.615] CloseHandle (hObject=0x538) returned 1 [0195.615] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0195.615] SetLastError (dwErrCode=0x0) [0195.615] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x538 [0195.615] GetLastError () returned 0xb7 [0195.615] CloseHandle (hObject=0x538) returned 1 [0195.616] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieUserList\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90ca40 [0195.616] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0195.616] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0195.616] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0195.616] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieUserList\\container.dat", dwFileAttributes=0x80) returned 1 [0195.617] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieUserList\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\emieuserlist\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0195.617] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=0) returned 1 [0195.617] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=0) returned 1 [0195.617] CloseHandle (hObject=0x624) returned 1 [0195.617] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0195.617] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0195.617] FindClose (in: hFindFile=0x665d90ca40 | out: hFindFile=0x665d90ca40) returned 1 [0195.617] SetLastError (dwErrCode=0x0) [0195.617] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieUserList\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\emieuserlist\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x538 [0195.618] GetLastError () returned 0x0 [0195.618] WriteFile (in: hFile=0x538, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0195.619] CloseHandle (hObject=0x538) returned 1 [0195.619] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0195.619] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0195.619] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0195.619] SetLastError (dwErrCode=0x0) [0195.619] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x538 [0195.619] GetLastError () returned 0xb7 [0195.619] CloseHandle (hObject=0x538) returned 1 [0195.619] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IECompatData\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bc60 [0195.620] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0195.620] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0195.620] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0195.621] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IECompatData\\iecompatdata.xml", dwFileAttributes=0x80) returned 1 [0195.621] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IECompatData\\iecompatdata.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\iecompatdata\\iecompatdata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0195.621] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=3088) returned 1 [0195.621] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=3088) returned 1 [0195.621] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xaee, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.621] ReadFile (in: hFile=0x624, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0195.623] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0195.623] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665abb9670) returned 1 [0195.623] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0195.623] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0195.623] ReadFile (in: hFile=0x624, lpBuffer=0x665da80000, nNumberOfBytesToRead=0xc10, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesRead=0x665da7b320*=0xc10, lpOverlapped=0x0) returned 1 [0195.623] CryptEncrypt (in: hKey=0x665abb9670, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0195.623] CryptEncrypt (in: hKey=0x665abb9670, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665da80000*, pdwDataLen=0x665da7b318*=0xc10, dwBufLen=0xf4250 | out: pbData=0x665da80000*, pdwDataLen=0x665da7b318*=0xc20) returned 1 [0195.623] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0195.623] WriteFile (in: hFile=0x624, lpBuffer=0x665da80000*, nNumberOfBytesToWrite=0xc20, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesWritten=0x665da7b320*=0xc20, lpOverlapped=0x0) returned 1 [0195.624] WriteFile (in: hFile=0x624, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0195.624] CryptExportKey (in: hKey=0x665abb9670, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0195.624] CryptExportKey (in: hKey=0x665abb9670, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0195.624] WriteFile (in: hFile=0x624, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0195.624] CloseHandle (hObject=0x624) returned 1 [0195.636] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0195.640] CryptDestroyKey (hKey=0x665abb9670) returned 1 [0195.640] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0195.640] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0195.640] FindClose (in: hFindFile=0x665d90bc60 | out: hFindFile=0x665d90bc60) returned 1 [0195.640] SetLastError (dwErrCode=0x0) [0195.640] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IECompatData\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\iecompatdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x538 [0195.641] GetLastError () returned 0x0 [0195.641] WriteFile (in: hFile=0x538, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0195.641] CloseHandle (hObject=0x538) returned 1 [0195.642] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0195.642] SetLastError (dwErrCode=0x0) [0195.642] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x538 [0195.642] GetLastError () returned 0xb7 [0195.642] CloseHandle (hObject=0x538) returned 1 [0195.642] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IEFlipAheadCache\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bde0 [0195.643] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0195.643] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0195.643] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0195.643] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IEFlipAheadCache\\container.dat", dwFileAttributes=0x80) returned 1 [0195.643] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IEFlipAheadCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\ieflipaheadcache\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0195.644] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=0) returned 1 [0195.644] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=0) returned 1 [0195.644] CloseHandle (hObject=0x624) returned 1 [0195.644] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0195.644] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0195.644] FindClose (in: hFindFile=0x665d90bde0 | out: hFindFile=0x665d90bde0) returned 1 [0195.644] SetLastError (dwErrCode=0x0) [0195.644] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IEFlipAheadCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\ieflipaheadcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x538 [0195.645] GetLastError () returned 0x0 [0195.645] WriteFile (in: hFile=0x538, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0195.647] CloseHandle (hObject=0x538) returned 1 [0195.647] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0195.647] SetLastError (dwErrCode=0x0) [0195.647] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x538 [0195.647] GetLastError () returned 0xb7 [0195.647] CloseHandle (hObject=0x538) returned 1 [0195.647] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90cb00 [0195.647] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0195.647] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0195.647] SetLastError (dwErrCode=0x0) [0195.647] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\imagestore\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0195.648] GetLastError () returned 0x0 [0195.648] WriteFile (in: hFile=0x624, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0195.649] CloseHandle (hObject=0x624) returned 1 [0195.649] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\dc8m5rh\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c080 [0195.649] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0195.650] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0195.650] FindClose (in: hFindFile=0x665d90c080 | out: hFindFile=0x665d90c080) returned 1 [0195.650] SetLastError (dwErrCode=0x0) [0195.650] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\dc8m5rh\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\imagestore\\dc8m5rh\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0195.650] GetLastError () returned 0x0 [0195.650] WriteFile (in: hFile=0x624, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0195.652] CloseHandle (hObject=0x624) returned 1 [0195.652] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0195.652] SetLastError (dwErrCode=0x0) [0195.652] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\imagestore\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0195.653] GetLastError () returned 0xb7 [0195.653] CloseHandle (hObject=0x624) returned 1 [0195.653] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\sl72e5n\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c260 [0195.653] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0195.654] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0195.654] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0195.654] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\sl72e5n\\imagestore.dat", dwFileAttributes=0x80) returned 1 [0195.654] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\sl72e5n\\imagestore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\imagestore\\sl72e5n\\imagestore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x628 [0195.655] GetFileSizeEx (in: hFile=0x628, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=5652) returned 1 [0195.655] GetFileSizeEx (in: hFile=0x628, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=5652) returned 1 [0195.655] SetFilePointerEx (in: hFile=0x628, liDistanceToMove=0x14f2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.655] ReadFile (in: hFile=0x628, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0195.656] SetFilePointer (in: hFile=0x628, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0195.656] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665abb92f0) returned 1 [0195.656] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0195.656] SetFilePointer (in: hFile=0x628, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0195.656] ReadFile (in: hFile=0x628, lpBuffer=0x665da80000, nNumberOfBytesToRead=0x1614, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesRead=0x665da7ab70*=0x1614, lpOverlapped=0x0) returned 1 [0195.657] CryptEncrypt (in: hKey=0x665abb92f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0195.657] CryptEncrypt (in: hKey=0x665abb92f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665da80000*, pdwDataLen=0x665da7ab68*=0x1614, dwBufLen=0xf4250 | out: pbData=0x665da80000*, pdwDataLen=0x665da7ab68*=0x1620) returned 1 [0195.657] SetFilePointer (in: hFile=0x628, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0195.657] WriteFile (in: hFile=0x628, lpBuffer=0x665da80000*, nNumberOfBytesToWrite=0x1620, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesWritten=0x665da7ab70*=0x1620, lpOverlapped=0x0) returned 1 [0195.657] WriteFile (in: hFile=0x628, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0195.657] CryptExportKey (in: hKey=0x665abb92f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0195.657] CryptExportKey (in: hKey=0x665abb92f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0195.657] WriteFile (in: hFile=0x628, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0195.658] CloseHandle (hObject=0x628) returned 1 [0195.669] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0195.673] CryptDestroyKey (hKey=0x665abb92f0) returned 1 [0195.673] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0195.674] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0195.674] FindClose (in: hFindFile=0x665d90c260 | out: hFindFile=0x665d90c260) returned 1 [0195.674] SetLastError (dwErrCode=0x0) [0195.674] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\sl72e5n\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\imagestore\\sl72e5n\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0195.674] GetLastError () returned 0x0 [0195.674] WriteFile (in: hFile=0x624, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0195.675] CloseHandle (hObject=0x624) returned 1 [0195.675] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0195.675] FindClose (in: hFindFile=0x665d90cb00 | out: hFindFile=0x665d90cb00) returned 1 [0195.675] SetLastError (dwErrCode=0x0) [0195.675] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\imagestore\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x538 [0195.676] GetLastError () returned 0xb7 [0195.676] CloseHandle (hObject=0x538) returned 1 [0195.676] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0195.676] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0195.676] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\MSIMGSIZ.DAT", dwFileAttributes=0x80) returned 1 [0195.677] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\MSIMGSIZ.DAT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\msimgsiz.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x538 [0195.677] GetFileSizeEx (in: hFile=0x538, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=49120) returned 1 [0195.677] GetFileSizeEx (in: hFile=0x538, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=49120) returned 1 [0195.677] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0xbebe, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.677] ReadFile (in: hFile=0x538, lpBuffer=0x665da7bb38, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7baf8, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb38*, lpNumberOfBytesRead=0x665da7baf8*=0x19, lpOverlapped=0x0) returned 1 [0195.678] SetFilePointer (in: hFile=0x538, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0195.678] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7bac0 | out: phKey=0x665da7bac0*=0x665abb98a0) returned 1 [0195.678] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0195.678] SetFilePointer (in: hFile=0x538, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0195.678] ReadFile (in: hFile=0x538, lpBuffer=0x665da80000, nNumberOfBytesToRead=0xbfe0, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesRead=0x665da7bad0*=0xbfe0, lpOverlapped=0x0) returned 1 [0195.680] CryptEncrypt (in: hKey=0x665abb98a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4250) returned 1 [0195.680] CryptEncrypt (in: hKey=0x665abb98a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665da80000*, pdwDataLen=0x665da7bac8*=0xbfe0, dwBufLen=0xf4250 | out: pbData=0x665da80000*, pdwDataLen=0x665da7bac8*=0xbff0) returned 1 [0195.680] SetFilePointer (in: hFile=0x538, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0195.680] WriteFile (in: hFile=0x538, lpBuffer=0x665da80000*, nNumberOfBytesToWrite=0xbff0, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesWritten=0x665da7bad0*=0xbff0, lpOverlapped=0x0) returned 1 [0195.680] WriteFile (in: hFile=0x538, lpBuffer=0x665da7bb10*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb10*, lpNumberOfBytesWritten=0x665da7bad4*=0x6, lpOverlapped=0x0) returned 1 [0195.680] CryptExportKey (in: hKey=0x665abb98a0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7bae0 | out: pbData=0x0*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0195.680] CryptExportKey (in: hKey=0x665abb98a0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7bb60, pdwDataLen=0x665da7bae0 | out: pbData=0x665da7bb60*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0195.680] WriteFile (in: hFile=0x538, lpBuffer=0x665da7bb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb60*, lpNumberOfBytesWritten=0x665da7bad4*=0x10c, lpOverlapped=0x0) returned 1 [0195.680] CloseHandle (hObject=0x538) returned 1 [0195.693] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0195.698] CryptDestroyKey (hKey=0x665abb98a0) returned 1 [0195.698] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0195.698] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0195.698] SetLastError (dwErrCode=0x0) [0195.698] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x538 [0195.699] GetLastError () returned 0xb7 [0195.699] CloseHandle (hObject=0x538) returned 1 [0195.699] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bfc0 [0195.699] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0195.699] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0195.699] SetLastError (dwErrCode=0x0) [0195.699] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\recovery\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0195.700] GetLastError () returned 0x0 [0195.700] WriteFile (in: hFile=0x624, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0195.701] CloseHandle (hObject=0x624) returned 1 [0195.701] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90d0a0 [0195.701] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0195.701] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0195.701] FindClose (in: hFindFile=0x665d90d0a0 | out: hFindFile=0x665d90d0a0) returned 1 [0195.701] SetLastError (dwErrCode=0x0) [0195.701] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\recovery\\active\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0195.702] GetLastError () returned 0x0 [0195.702] WriteFile (in: hFile=0x624, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0195.703] CloseHandle (hObject=0x624) returned 1 [0195.703] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0195.703] SetLastError (dwErrCode=0x0) [0195.703] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\recovery\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0195.703] GetLastError () returned 0xb7 [0195.703] CloseHandle (hObject=0x624) returned 1 [0195.704] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c2c0 [0195.706] FindNextFileW (in: hFindFile=0x665d90c2c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0195.706] FindNextFileW (in: hFindFile=0x665d90c2c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0195.706] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0195.706] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\RecoveryStore.{63E26EB7-6816-11E7-9BD2-C40142ECDE47}.dat", dwFileAttributes=0x80) returned 1 [0195.707] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\RecoveryStore.{63E26EB7-6816-11E7-9BD2-C40142ECDE47}.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\recoverystore.{63e26eb7-6816-11e7-9bd2-c40142ecde47}.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x628 [0195.707] GetFileSizeEx (in: hFile=0x628, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=6656) returned 1 [0195.707] GetFileSizeEx (in: hFile=0x628, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=6656) returned 1 [0195.707] SetFilePointerEx (in: hFile=0x628, liDistanceToMove=0x18de, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.707] ReadFile (in: hFile=0x628, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0195.709] SetFilePointer (in: hFile=0x628, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0195.709] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665abb98a0) returned 1 [0195.709] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0195.709] SetFilePointer (in: hFile=0x628, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0195.709] ReadFile (in: hFile=0x628, lpBuffer=0x665da80000, nNumberOfBytesToRead=0x1a00, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesRead=0x665da7ab70*=0x1a00, lpOverlapped=0x0) returned 1 [0195.710] CryptEncrypt (in: hKey=0x665abb98a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0195.710] CryptEncrypt (in: hKey=0x665abb98a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665da80000*, pdwDataLen=0x665da7ab68*=0x1a00, dwBufLen=0xf4250 | out: pbData=0x665da80000*, pdwDataLen=0x665da7ab68*=0x1a10) returned 1 [0195.710] SetFilePointer (in: hFile=0x628, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0195.710] WriteFile (in: hFile=0x628, lpBuffer=0x665da80000*, nNumberOfBytesToWrite=0x1a10, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesWritten=0x665da7ab70*=0x1a10, lpOverlapped=0x0) returned 1 [0195.710] WriteFile (in: hFile=0x628, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0195.711] CryptExportKey (in: hKey=0x665abb98a0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0195.711] CryptExportKey (in: hKey=0x665abb98a0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0195.711] WriteFile (in: hFile=0x628, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0195.711] CloseHandle (hObject=0x628) returned 1 [0195.726] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0195.731] CryptDestroyKey (hKey=0x665abb98a0) returned 1 [0195.731] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0195.732] FindNextFileW (in: hFindFile=0x665d90c2c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0195.732] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0195.732] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\{94C50253-C9AC-11E7-9BDD-C40142ECDE47}.dat", dwFileAttributes=0x80) returned 1 [0195.733] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\{94C50253-C9AC-11E7-9BDD-C40142ECDE47}.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\{94c50253-c9ac-11e7-9bdd-c40142ecde47}.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x628 [0195.733] GetFileSizeEx (in: hFile=0x628, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=12800) returned 1 [0195.733] GetFileSizeEx (in: hFile=0x628, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=12800) returned 1 [0195.733] SetFilePointerEx (in: hFile=0x628, liDistanceToMove=0x30de, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.733] ReadFile (in: hFile=0x628, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0195.735] SetFilePointer (in: hFile=0x628, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0195.735] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665abb92f0) returned 1 [0195.735] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0195.735] SetFilePointer (in: hFile=0x628, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0195.735] ReadFile (in: hFile=0x628, lpBuffer=0x665da80000, nNumberOfBytesToRead=0x3200, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesRead=0x665da7ab70*=0x3200, lpOverlapped=0x0) returned 1 [0195.736] CryptEncrypt (in: hKey=0x665abb92f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0195.736] CryptEncrypt (in: hKey=0x665abb92f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665da80000*, pdwDataLen=0x665da7ab68*=0x3200, dwBufLen=0xf4250 | out: pbData=0x665da80000*, pdwDataLen=0x665da7ab68*=0x3210) returned 1 [0195.736] SetFilePointer (in: hFile=0x628, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0195.736] WriteFile (in: hFile=0x628, lpBuffer=0x665da80000*, nNumberOfBytesToWrite=0x3210, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesWritten=0x665da7ab70*=0x3210, lpOverlapped=0x0) returned 1 [0195.736] WriteFile (in: hFile=0x628, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0195.736] CryptExportKey (in: hKey=0x665abb92f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0195.736] CryptExportKey (in: hKey=0x665abb92f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0195.737] WriteFile (in: hFile=0x628, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0195.737] CloseHandle (hObject=0x628) returned 1 [0195.756] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0195.761] CryptDestroyKey (hKey=0x665abb92f0) returned 1 [0195.761] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0195.762] FindNextFileW (in: hFindFile=0x665d90c2c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0195.762] FindClose (in: hFindFile=0x665d90c2c0 | out: hFindFile=0x665d90c2c0) returned 1 [0195.762] SetLastError (dwErrCode=0x0) [0195.762] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0195.762] GetLastError () returned 0x0 [0195.762] WriteFile (in: hFile=0x624, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0195.763] CloseHandle (hObject=0x624) returned 1 [0195.764] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0195.764] FindClose (in: hFindFile=0x665d90bfc0 | out: hFindFile=0x665d90bfc0) returned 1 [0195.764] SetLastError (dwErrCode=0x0) [0195.764] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\recovery\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x538 [0195.764] GetLastError () returned 0xb7 [0195.764] CloseHandle (hObject=0x538) returned 1 [0195.764] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0195.764] SetLastError (dwErrCode=0x0) [0195.764] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x538 [0195.765] GetLastError () returned 0xb7 [0195.765] CloseHandle (hObject=0x538) returned 1 [0195.765] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\TabRoaming\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bd80 [0195.765] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0195.765] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0195.765] FindClose (in: hFindFile=0x665d90bd80 | out: hFindFile=0x665d90bd80) returned 1 [0195.765] SetLastError (dwErrCode=0x0) [0195.765] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\TabRoaming\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\tabroaming\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x538 [0195.767] GetLastError () returned 0x0 [0195.767] WriteFile (in: hFile=0x538, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0195.768] CloseHandle (hObject=0x538) returned 1 [0195.768] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0195.768] SetLastError (dwErrCode=0x0) [0195.768] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x538 [0195.768] GetLastError () returned 0xb7 [0195.768] CloseHandle (hObject=0x538) returned 1 [0195.768] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d0a0 [0195.769] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0195.769] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0195.769] SetLastError (dwErrCode=0x0) [0195.769] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\tiles\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0195.770] GetLastError () returned 0x0 [0195.770] WriteFile (in: hFile=0x624, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0195.771] CloseHandle (hObject=0x624) returned 1 [0195.772] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin-314712940\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c1a0 [0195.772] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0195.772] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0195.772] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0195.772] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin-314712940\\msapplication.xml", dwFileAttributes=0x80) returned 1 [0195.773] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin-314712940\\msapplication.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\tiles\\pin-314712940\\msapplication.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x628 [0195.773] GetFileSizeEx (in: hFile=0x628, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=417) returned 1 [0195.773] GetFileSizeEx (in: hFile=0x628, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=417) returned 1 [0195.773] SetFilePointerEx (in: hFile=0x628, liDistanceToMove=0x7f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.773] ReadFile (in: hFile=0x628, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0195.775] SetFilePointer (in: hFile=0x628, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0195.775] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665abb92f0) returned 1 [0195.775] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0195.775] SetFilePointer (in: hFile=0x628, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0195.775] ReadFile (in: hFile=0x628, lpBuffer=0x665da80000, nNumberOfBytesToRead=0x1a1, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesRead=0x665da7ab70*=0x1a1, lpOverlapped=0x0) returned 1 [0195.775] CryptEncrypt (in: hKey=0x665abb92f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0195.775] CryptEncrypt (in: hKey=0x665abb92f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665da80000*, pdwDataLen=0x665da7ab68*=0x1a1, dwBufLen=0xf4250 | out: pbData=0x665da80000*, pdwDataLen=0x665da7ab68*=0x1b0) returned 1 [0195.775] SetFilePointer (in: hFile=0x628, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0195.775] WriteFile (in: hFile=0x628, lpBuffer=0x665da80000*, nNumberOfBytesToWrite=0x1b0, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesWritten=0x665da7ab70*=0x1b0, lpOverlapped=0x0) returned 1 [0195.775] WriteFile (in: hFile=0x628, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0195.776] CryptExportKey (in: hKey=0x665abb92f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0195.776] CryptExportKey (in: hKey=0x665abb92f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0195.776] WriteFile (in: hFile=0x628, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0196.108] CloseHandle (hObject=0x628) returned 1 [0196.128] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0196.134] CryptDestroyKey (hKey=0x665abb92f0) returned 1 [0196.134] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0196.134] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0196.134] FindClose (in: hFindFile=0x665d90c1a0 | out: hFindFile=0x665d90c1a0) returned 1 [0196.134] SetLastError (dwErrCode=0x0) [0196.134] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin-314712940\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\tiles\\pin-314712940\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0196.135] GetLastError () returned 0x0 [0196.135] WriteFile (in: hFile=0x624, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0196.136] CloseHandle (hObject=0x624) returned 1 [0196.137] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0196.137] SetLastError (dwErrCode=0x0) [0196.137] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\tiles\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0196.137] GetLastError () returned 0xb7 [0196.137] CloseHandle (hObject=0x624) returned 1 [0196.137] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin7226654530\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c4a0 [0196.138] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0196.138] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0196.138] FindClose (in: hFindFile=0x665d90c4a0 | out: hFindFile=0x665d90c4a0) returned 1 [0196.138] SetLastError (dwErrCode=0x0) [0196.139] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin7226654530\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\tiles\\pin7226654530\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0196.140] GetLastError () returned 0x0 [0196.140] WriteFile (in: hFile=0x624, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0196.141] CloseHandle (hObject=0x624) returned 1 [0196.142] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0196.142] FindClose (in: hFindFile=0x665d90d0a0 | out: hFindFile=0x665d90d0a0) returned 1 [0196.142] SetLastError (dwErrCode=0x0) [0196.142] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\tiles\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x538 [0196.142] GetLastError () returned 0xb7 [0196.142] CloseHandle (hObject=0x538) returned 1 [0196.142] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0196.142] SetLastError (dwErrCode=0x0) [0196.142] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x538 [0196.143] GetLastError () returned 0xb7 [0196.143] CloseHandle (hObject=0x538) returned 1 [0196.143] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tracking Protection\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bfc0 [0196.144] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0196.144] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0196.144] FindClose (in: hFindFile=0x665d90bfc0 | out: hFindFile=0x665d90bfc0) returned 1 [0196.144] SetLastError (dwErrCode=0x0) [0196.144] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tracking Protection\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\tracking protection\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x538 [0196.145] GetLastError () returned 0x0 [0196.145] WriteFile (in: hFile=0x538, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0196.146] CloseHandle (hObject=0x538) returned 1 [0196.146] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0196.146] SetLastError (dwErrCode=0x0) [0196.146] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x538 [0196.146] GetLastError () returned 0xb7 [0196.146] CloseHandle (hObject=0x538) returned 1 [0196.146] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\VersionManager\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bd80 [0196.210] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0196.210] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0196.210] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0196.210] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\VersionManager\\versionlist.xml", dwFileAttributes=0x80) returned 1 [0196.211] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\VersionManager\\versionlist.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\versionmanager\\versionlist.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0196.211] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=14438) returned 1 [0196.211] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=14438) returned 1 [0196.212] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x3744, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.212] ReadFile (in: hFile=0x654, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0196.214] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0196.214] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9aea0) returned 1 [0196.214] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665da80000 [0196.214] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0196.214] ReadFile (in: hFile=0x654, lpBuffer=0x665da80000, nNumberOfBytesToRead=0x3866, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesRead=0x665da7b320*=0x3866, lpOverlapped=0x0) returned 1 [0196.215] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0196.215] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665da80000*, pdwDataLen=0x665da7b318*=0x3866, dwBufLen=0xf4250 | out: pbData=0x665da80000*, pdwDataLen=0x665da7b318*=0x3870) returned 1 [0196.215] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0196.215] WriteFile (in: hFile=0x654, lpBuffer=0x665da80000*, nNumberOfBytesToWrite=0x3870, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665da80000*, lpNumberOfBytesWritten=0x665da7b320*=0x3870, lpOverlapped=0x0) returned 1 [0196.216] WriteFile (in: hFile=0x654, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0196.216] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0196.216] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0196.216] WriteFile (in: hFile=0x654, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0196.216] CloseHandle (hObject=0x654) returned 1 [0196.239] VirtualFree (lpAddress=0x665da80000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0196.284] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0196.284] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0196.284] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0196.285] FindClose (in: hFindFile=0x665d90bd80 | out: hFindFile=0x665d90bd80) returned 1 [0196.285] SetLastError (dwErrCode=0x0) [0196.285] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\VersionManager\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\versionmanager\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0196.299] GetLastError () returned 0x0 [0196.299] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0196.299] CloseHandle (hObject=0x620) returned 1 [0196.300] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0196.300] FindClose (in: hFindFile=0x665d90c020 | out: hFindFile=0x665d90c020) returned 1 [0196.300] SetLastError (dwErrCode=0x0) [0196.300] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0196.300] GetLastError () returned 0xb7 [0196.300] CloseHandle (hObject=0x60c) returned 1 [0196.300] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0196.300] SetLastError (dwErrCode=0x0) [0196.300] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0196.301] GetLastError () returned 0xb7 [0196.301] CloseHandle (hObject=0x60c) returned 1 [0196.301] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90ca40 [0196.301] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0196.301] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0196.301] SetLastError (dwErrCode=0x0) [0196.301] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0196.322] GetLastError () returned 0x0 [0196.322] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0196.322] CloseHandle (hObject=0x620) returned 1 [0196.323] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d280 [0196.323] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0196.323] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0196.323] SetLastError (dwErrCode=0x0) [0196.323] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0196.323] GetLastError () returned 0x0 [0196.324] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0196.324] CloseHandle (hObject=0x3e8) returned 1 [0196.324] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90d2e0 [0196.325] FindNextFileW (in: hFindFile=0x665d90d2e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0196.325] FindNextFileW (in: hFindFile=0x665d90d2e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0196.325] SetLastError (dwErrCode=0x0) [0196.325] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0196.326] GetLastError () returned 0x0 [0196.326] WriteFile (in: hFile=0x654, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7ad80*=0x324, lpOverlapped=0x0) returned 1 [0196.326] CloseHandle (hObject=0x654) returned 1 [0196.327] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665d90c680 [0196.328] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0196.328] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0196.328] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0196.328] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\01_Music_auto_rated_at_5_stars.wpl", dwFileAttributes=0x80) returned 1 [0196.329] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\01_Music_auto_rated_at_5_stars.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\01_music_auto_rated_at_5_stars.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0196.329] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x665da7a3c8 | out: lpFileSize=0x665da7a3c8*=1044) returned 1 [0196.329] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x665da7a3d8 | out: lpFileSize=0x665da7a3d8*=1044) returned 1 [0196.329] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x2f2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.329] ReadFile (in: hFile=0x440, lpBuffer=0x665da7a428, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7a3e8, lpOverlapped=0x0 | out: lpBuffer=0x665da7a428*, lpNumberOfBytesRead=0x665da7a3e8*=0x19, lpOverlapped=0x0) returned 1 [0196.330] SetFilePointer (in: hFile=0x440, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0196.330] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7a3b0 | out: phKey=0x665da7a3b0*=0x665ab9aea0) returned 1 [0196.330] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0196.331] SetFilePointer (in: hFile=0x440, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0196.331] ReadFile (in: hFile=0x440, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x414, lpNumberOfBytesRead=0x665da7a3c0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7a3c0*=0x414, lpOverlapped=0x0) returned 1 [0196.331] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7a3bc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7a3bc*=0xf4250) returned 1 [0196.331] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7a3b8*=0x414, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7a3b8*=0x420) returned 1 [0196.331] SetFilePointer (in: hFile=0x440, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0196.331] WriteFile (in: hFile=0x440, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x420, lpNumberOfBytesWritten=0x665da7a3c0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7a3c0*=0x420, lpOverlapped=0x0) returned 1 [0196.331] WriteFile (in: hFile=0x440, lpBuffer=0x665da7a400*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7a3c4, lpOverlapped=0x0 | out: lpBuffer=0x665da7a400*, lpNumberOfBytesWritten=0x665da7a3c4*=0x6, lpOverlapped=0x0) returned 1 [0196.331] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7a3d0 | out: pbData=0x0*, pdwDataLen=0x665da7a3d0*=0x10c) returned 1 [0196.331] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7a450, pdwDataLen=0x665da7a3d0 | out: pbData=0x665da7a450*, pdwDataLen=0x665da7a3d0*=0x10c) returned 1 [0196.331] WriteFile (in: hFile=0x440, lpBuffer=0x665da7a450*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7a3c4, lpOverlapped=0x0 | out: lpBuffer=0x665da7a450*, lpNumberOfBytesWritten=0x665da7a3c4*=0x10c, lpOverlapped=0x0) returned 1 [0196.331] CloseHandle (hObject=0x440) returned 1 [0196.345] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0196.349] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0196.349] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0196.349] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0196.349] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0196.350] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\02_Music_added_in_the_last_month.wpl", dwFileAttributes=0x80) returned 1 [0196.350] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\02_Music_added_in_the_last_month.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\02_music_added_in_the_last_month.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0196.350] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x665da7a3c8 | out: lpFileSize=0x665da7a3c8*=1279) returned 1 [0196.351] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x665da7a3d8 | out: lpFileSize=0x665da7a3d8*=1279) returned 1 [0196.351] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x3dd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.351] ReadFile (in: hFile=0x440, lpBuffer=0x665da7a428, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7a3e8, lpOverlapped=0x0 | out: lpBuffer=0x665da7a428*, lpNumberOfBytesRead=0x665da7a3e8*=0x19, lpOverlapped=0x0) returned 1 [0196.352] SetFilePointer (in: hFile=0x440, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0196.352] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7a3b0 | out: phKey=0x665da7a3b0*=0x665ab9aea0) returned 1 [0196.352] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0196.352] SetFilePointer (in: hFile=0x440, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0196.352] ReadFile (in: hFile=0x440, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x4ff, lpNumberOfBytesRead=0x665da7a3c0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7a3c0*=0x4ff, lpOverlapped=0x0) returned 1 [0196.352] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7a3bc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7a3bc*=0xf4250) returned 1 [0196.352] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7a3b8*=0x4ff, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7a3b8*=0x500) returned 1 [0196.353] SetFilePointer (in: hFile=0x440, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0196.353] WriteFile (in: hFile=0x440, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x500, lpNumberOfBytesWritten=0x665da7a3c0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7a3c0*=0x500, lpOverlapped=0x0) returned 1 [0196.353] WriteFile (in: hFile=0x440, lpBuffer=0x665da7a400*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7a3c4, lpOverlapped=0x0 | out: lpBuffer=0x665da7a400*, lpNumberOfBytesWritten=0x665da7a3c4*=0x6, lpOverlapped=0x0) returned 1 [0196.353] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7a3d0 | out: pbData=0x0*, pdwDataLen=0x665da7a3d0*=0x10c) returned 1 [0196.353] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7a450, pdwDataLen=0x665da7a3d0 | out: pbData=0x665da7a450*, pdwDataLen=0x665da7a3d0*=0x10c) returned 1 [0196.353] WriteFile (in: hFile=0x440, lpBuffer=0x665da7a450*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7a3c4, lpOverlapped=0x0 | out: lpBuffer=0x665da7a450*, lpNumberOfBytesWritten=0x665da7a3c4*=0x10c, lpOverlapped=0x0) returned 1 [0196.353] CloseHandle (hObject=0x440) returned 1 [0196.370] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0196.375] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0196.375] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0196.376] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0196.376] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0196.376] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\03_Music_rated_at_4_or_5_stars.wpl", dwFileAttributes=0x80) returned 1 [0196.378] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\03_Music_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\03_music_rated_at_4_or_5_stars.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0196.378] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x665da7a3c8 | out: lpFileSize=0x665da7a3c8*=1267) returned 1 [0196.378] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x665da7a3d8 | out: lpFileSize=0x665da7a3d8*=1267) returned 1 [0196.378] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x3d1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.378] ReadFile (in: hFile=0x440, lpBuffer=0x665da7a428, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7a3e8, lpOverlapped=0x0 | out: lpBuffer=0x665da7a428*, lpNumberOfBytesRead=0x665da7a3e8*=0x19, lpOverlapped=0x0) returned 1 [0196.380] SetFilePointer (in: hFile=0x440, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0196.380] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7a3b0 | out: phKey=0x665da7a3b0*=0x665ab9ab20) returned 1 [0196.380] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0196.381] SetFilePointer (in: hFile=0x440, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0196.381] ReadFile (in: hFile=0x440, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x4f3, lpNumberOfBytesRead=0x665da7a3c0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7a3c0*=0x4f3, lpOverlapped=0x0) returned 1 [0196.381] CryptEncrypt (in: hKey=0x665ab9ab20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7a3bc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7a3bc*=0xf4250) returned 1 [0196.381] CryptEncrypt (in: hKey=0x665ab9ab20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7a3b8*=0x4f3, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7a3b8*=0x500) returned 1 [0196.381] SetFilePointer (in: hFile=0x440, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0196.381] WriteFile (in: hFile=0x440, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x500, lpNumberOfBytesWritten=0x665da7a3c0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7a3c0*=0x500, lpOverlapped=0x0) returned 1 [0196.381] WriteFile (in: hFile=0x440, lpBuffer=0x665da7a400*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7a3c4, lpOverlapped=0x0 | out: lpBuffer=0x665da7a400*, lpNumberOfBytesWritten=0x665da7a3c4*=0x6, lpOverlapped=0x0) returned 1 [0196.381] CryptExportKey (in: hKey=0x665ab9ab20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7a3d0 | out: pbData=0x0*, pdwDataLen=0x665da7a3d0*=0x10c) returned 1 [0196.381] CryptExportKey (in: hKey=0x665ab9ab20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7a450, pdwDataLen=0x665da7a3d0 | out: pbData=0x665da7a450*, pdwDataLen=0x665da7a3d0*=0x10c) returned 1 [0196.382] WriteFile (in: hFile=0x440, lpBuffer=0x665da7a450*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7a3c4, lpOverlapped=0x0 | out: lpBuffer=0x665da7a450*, lpNumberOfBytesWritten=0x665da7a3c4*=0x10c, lpOverlapped=0x0) returned 1 [0196.382] CloseHandle (hObject=0x440) returned 1 [0196.405] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0196.410] CryptDestroyKey (hKey=0x665ab9ab20) returned 1 [0196.410] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0196.410] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0196.410] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0196.410] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\04_Music_played_in_the_last_month.wpl", dwFileAttributes=0x80) returned 1 [0196.411] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\04_Music_played_in_the_last_month.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\04_music_played_in_the_last_month.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0196.411] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x665da7a3c8 | out: lpFileSize=0x665da7a3c8*=1284) returned 1 [0196.411] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x665da7a3d8 | out: lpFileSize=0x665da7a3d8*=1284) returned 1 [0196.411] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x3e2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.411] ReadFile (in: hFile=0x440, lpBuffer=0x665da7a428, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7a3e8, lpOverlapped=0x0 | out: lpBuffer=0x665da7a428*, lpNumberOfBytesRead=0x665da7a3e8*=0x19, lpOverlapped=0x0) returned 1 [0196.413] SetFilePointer (in: hFile=0x440, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0196.413] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7a3b0 | out: phKey=0x665da7a3b0*=0x665ab9a6c0) returned 1 [0196.413] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0196.413] SetFilePointer (in: hFile=0x440, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0196.413] ReadFile (in: hFile=0x440, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x504, lpNumberOfBytesRead=0x665da7a3c0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7a3c0*=0x504, lpOverlapped=0x0) returned 1 [0196.413] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7a3bc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7a3bc*=0xf4250) returned 1 [0196.413] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7a3b8*=0x504, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7a3b8*=0x510) returned 1 [0196.413] SetFilePointer (in: hFile=0x440, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0196.413] WriteFile (in: hFile=0x440, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x510, lpNumberOfBytesWritten=0x665da7a3c0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7a3c0*=0x510, lpOverlapped=0x0) returned 1 [0196.413] WriteFile (in: hFile=0x440, lpBuffer=0x665da7a400*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7a3c4, lpOverlapped=0x0 | out: lpBuffer=0x665da7a400*, lpNumberOfBytesWritten=0x665da7a3c4*=0x6, lpOverlapped=0x0) returned 1 [0196.413] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7a3d0 | out: pbData=0x0*, pdwDataLen=0x665da7a3d0*=0x10c) returned 1 [0196.413] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7a450, pdwDataLen=0x665da7a3d0 | out: pbData=0x665da7a450*, pdwDataLen=0x665da7a3d0*=0x10c) returned 1 [0196.413] WriteFile (in: hFile=0x440, lpBuffer=0x665da7a450*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7a3c4, lpOverlapped=0x0 | out: lpBuffer=0x665da7a450*, lpNumberOfBytesWritten=0x665da7a3c4*=0x10c, lpOverlapped=0x0) returned 1 [0196.414] CloseHandle (hObject=0x440) returned 1 [0196.434] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0196.438] CryptDestroyKey (hKey=0x665ab9a6c0) returned 1 [0196.438] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0196.439] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0196.439] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0196.439] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\05_Pictures_taken_in_the_last_month.wpl", dwFileAttributes=0x80) returned 1 [0196.440] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\05_Pictures_taken_in_the_last_month.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\05_pictures_taken_in_the_last_month.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0196.440] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x665da7a3c8 | out: lpFileSize=0x665da7a3c8*=797) returned 1 [0196.440] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x665da7a3d8 | out: lpFileSize=0x665da7a3d8*=797) returned 1 [0196.440] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x1fb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.440] ReadFile (in: hFile=0x440, lpBuffer=0x665da7a428, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7a3e8, lpOverlapped=0x0 | out: lpBuffer=0x665da7a428*, lpNumberOfBytesRead=0x665da7a3e8*=0x19, lpOverlapped=0x0) returned 1 [0196.441] SetFilePointer (in: hFile=0x440, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0196.441] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7a3b0 | out: phKey=0x665da7a3b0*=0x665ab9a420) returned 1 [0196.441] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0196.442] SetFilePointer (in: hFile=0x440, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0196.442] ReadFile (in: hFile=0x440, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x31d, lpNumberOfBytesRead=0x665da7a3c0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7a3c0*=0x31d, lpOverlapped=0x0) returned 1 [0196.442] CryptEncrypt (in: hKey=0x665ab9a420, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7a3bc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7a3bc*=0xf4250) returned 1 [0196.442] CryptEncrypt (in: hKey=0x665ab9a420, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7a3b8*=0x31d, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7a3b8*=0x320) returned 1 [0196.442] SetFilePointer (in: hFile=0x440, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0196.442] WriteFile (in: hFile=0x440, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x320, lpNumberOfBytesWritten=0x665da7a3c0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7a3c0*=0x320, lpOverlapped=0x0) returned 1 [0196.442] WriteFile (in: hFile=0x440, lpBuffer=0x665da7a400*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7a3c4, lpOverlapped=0x0 | out: lpBuffer=0x665da7a400*, lpNumberOfBytesWritten=0x665da7a3c4*=0x6, lpOverlapped=0x0) returned 1 [0196.442] CryptExportKey (in: hKey=0x665ab9a420, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7a3d0 | out: pbData=0x0*, pdwDataLen=0x665da7a3d0*=0x10c) returned 1 [0196.442] CryptExportKey (in: hKey=0x665ab9a420, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7a450, pdwDataLen=0x665da7a3d0 | out: pbData=0x665da7a450*, pdwDataLen=0x665da7a3d0*=0x10c) returned 1 [0196.442] WriteFile (in: hFile=0x440, lpBuffer=0x665da7a450*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7a3c4, lpOverlapped=0x0 | out: lpBuffer=0x665da7a450*, lpNumberOfBytesWritten=0x665da7a3c4*=0x10c, lpOverlapped=0x0) returned 1 [0196.442] CloseHandle (hObject=0x440) returned 1 [0196.461] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0196.465] CryptDestroyKey (hKey=0x665ab9a420) returned 1 [0196.465] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0196.466] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0196.466] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0196.466] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\06_Pictures_rated_4_or_5_stars.wpl", dwFileAttributes=0x80) returned 1 [0196.467] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\06_Pictures_rated_4_or_5_stars.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\06_pictures_rated_4_or_5_stars.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0196.467] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x665da7a3c8 | out: lpFileSize=0x665da7a3c8*=785) returned 1 [0196.467] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x665da7a3d8 | out: lpFileSize=0x665da7a3d8*=785) returned 1 [0196.467] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x1ef, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.467] ReadFile (in: hFile=0x440, lpBuffer=0x665da7a428, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7a3e8, lpOverlapped=0x0 | out: lpBuffer=0x665da7a428*, lpNumberOfBytesRead=0x665da7a3e8*=0x19, lpOverlapped=0x0) returned 1 [0196.471] SetFilePointer (in: hFile=0x440, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0196.471] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7a3b0 | out: phKey=0x665da7a3b0*=0x665ab9a340) returned 1 [0196.471] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0196.471] SetFilePointer (in: hFile=0x440, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0196.471] ReadFile (in: hFile=0x440, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x311, lpNumberOfBytesRead=0x665da7a3c0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7a3c0*=0x311, lpOverlapped=0x0) returned 1 [0196.471] CryptEncrypt (in: hKey=0x665ab9a340, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7a3bc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7a3bc*=0xf4250) returned 1 [0196.471] CryptEncrypt (in: hKey=0x665ab9a340, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7a3b8*=0x311, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7a3b8*=0x320) returned 1 [0196.471] SetFilePointer (in: hFile=0x440, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0196.471] WriteFile (in: hFile=0x440, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x320, lpNumberOfBytesWritten=0x665da7a3c0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7a3c0*=0x320, lpOverlapped=0x0) returned 1 [0196.472] WriteFile (in: hFile=0x440, lpBuffer=0x665da7a400*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7a3c4, lpOverlapped=0x0 | out: lpBuffer=0x665da7a400*, lpNumberOfBytesWritten=0x665da7a3c4*=0x6, lpOverlapped=0x0) returned 1 [0196.472] CryptExportKey (in: hKey=0x665ab9a340, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7a3d0 | out: pbData=0x0*, pdwDataLen=0x665da7a3d0*=0x10c) returned 1 [0196.472] CryptExportKey (in: hKey=0x665ab9a340, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7a450, pdwDataLen=0x665da7a3d0 | out: pbData=0x665da7a450*, pdwDataLen=0x665da7a3d0*=0x10c) returned 1 [0196.472] WriteFile (in: hFile=0x440, lpBuffer=0x665da7a450*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7a3c4, lpOverlapped=0x0 | out: lpBuffer=0x665da7a450*, lpNumberOfBytesWritten=0x665da7a3c4*=0x10c, lpOverlapped=0x0) returned 1 [0196.472] CloseHandle (hObject=0x440) returned 1 [0196.491] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0196.495] CryptDestroyKey (hKey=0x665ab9a340) returned 1 [0196.495] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0196.495] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0196.495] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0196.495] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\07_TV_recorded_in_the_last_week.wpl", dwFileAttributes=0x80) returned 1 [0196.497] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\07_TV_recorded_in_the_last_week.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\07_tv_recorded_in_the_last_week.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0196.497] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x665da7a3c8 | out: lpFileSize=0x665da7a3c8*=1040) returned 1 [0196.497] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x665da7a3d8 | out: lpFileSize=0x665da7a3d8*=1040) returned 1 [0196.497] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x2ee, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.497] ReadFile (in: hFile=0x440, lpBuffer=0x665da7a428, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7a3e8, lpOverlapped=0x0 | out: lpBuffer=0x665da7a428*, lpNumberOfBytesRead=0x665da7a3e8*=0x19, lpOverlapped=0x0) returned 1 [0196.498] SetFilePointer (in: hFile=0x440, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0196.498] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7a3b0 | out: phKey=0x665da7a3b0*=0x665ab9a340) returned 1 [0196.498] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0196.498] SetFilePointer (in: hFile=0x440, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0196.499] ReadFile (in: hFile=0x440, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x410, lpNumberOfBytesRead=0x665da7a3c0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7a3c0*=0x410, lpOverlapped=0x0) returned 1 [0196.499] CryptEncrypt (in: hKey=0x665ab9a340, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7a3bc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7a3bc*=0xf4250) returned 1 [0196.499] CryptEncrypt (in: hKey=0x665ab9a340, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7a3b8*=0x410, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7a3b8*=0x420) returned 1 [0196.499] SetFilePointer (in: hFile=0x440, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0196.499] WriteFile (in: hFile=0x440, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x420, lpNumberOfBytesWritten=0x665da7a3c0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7a3c0*=0x420, lpOverlapped=0x0) returned 1 [0196.499] WriteFile (in: hFile=0x440, lpBuffer=0x665da7a400*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7a3c4, lpOverlapped=0x0 | out: lpBuffer=0x665da7a400*, lpNumberOfBytesWritten=0x665da7a3c4*=0x6, lpOverlapped=0x0) returned 1 [0196.499] CryptExportKey (in: hKey=0x665ab9a340, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7a3d0 | out: pbData=0x0*, pdwDataLen=0x665da7a3d0*=0x10c) returned 1 [0196.499] CryptExportKey (in: hKey=0x665ab9a340, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7a450, pdwDataLen=0x665da7a3d0 | out: pbData=0x665da7a450*, pdwDataLen=0x665da7a3d0*=0x10c) returned 1 [0196.499] WriteFile (in: hFile=0x440, lpBuffer=0x665da7a450*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7a3c4, lpOverlapped=0x0 | out: lpBuffer=0x665da7a450*, lpNumberOfBytesWritten=0x665da7a3c4*=0x10c, lpOverlapped=0x0) returned 1 [0196.499] CloseHandle (hObject=0x440) returned 1 [0196.519] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0196.523] CryptDestroyKey (hKey=0x665ab9a340) returned 1 [0196.523] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0196.524] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0196.524] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0196.524] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\08_Video_rated_at_4_or_5_stars.wpl", dwFileAttributes=0x80) returned 1 [0196.525] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\08_Video_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\08_video_rated_at_4_or_5_stars.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0196.525] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x665da7a3c8 | out: lpFileSize=0x665da7a3c8*=1020) returned 1 [0196.525] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x665da7a3d8 | out: lpFileSize=0x665da7a3d8*=1020) returned 1 [0196.525] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x2da, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.525] ReadFile (in: hFile=0x440, lpBuffer=0x665da7a428, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7a3e8, lpOverlapped=0x0 | out: lpBuffer=0x665da7a428*, lpNumberOfBytesRead=0x665da7a3e8*=0x19, lpOverlapped=0x0) returned 1 [0196.526] SetFilePointer (in: hFile=0x440, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0196.526] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7a3b0 | out: phKey=0x665da7a3b0*=0x665ab9aab0) returned 1 [0196.526] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0196.527] SetFilePointer (in: hFile=0x440, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0196.527] ReadFile (in: hFile=0x440, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x3fc, lpNumberOfBytesRead=0x665da7a3c0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7a3c0*=0x3fc, lpOverlapped=0x0) returned 1 [0196.527] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7a3bc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7a3bc*=0xf4250) returned 1 [0196.527] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7a3b8*=0x3fc, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7a3b8*=0x400) returned 1 [0196.527] SetFilePointer (in: hFile=0x440, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0196.527] WriteFile (in: hFile=0x440, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x665da7a3c0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7a3c0*=0x400, lpOverlapped=0x0) returned 1 [0196.527] WriteFile (in: hFile=0x440, lpBuffer=0x665da7a400*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7a3c4, lpOverlapped=0x0 | out: lpBuffer=0x665da7a400*, lpNumberOfBytesWritten=0x665da7a3c4*=0x6, lpOverlapped=0x0) returned 1 [0196.527] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7a3d0 | out: pbData=0x0*, pdwDataLen=0x665da7a3d0*=0x10c) returned 1 [0196.527] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7a450, pdwDataLen=0x665da7a3d0 | out: pbData=0x665da7a450*, pdwDataLen=0x665da7a3d0*=0x10c) returned 1 [0196.527] WriteFile (in: hFile=0x440, lpBuffer=0x665da7a450*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7a3c4, lpOverlapped=0x0 | out: lpBuffer=0x665da7a450*, lpNumberOfBytesWritten=0x665da7a3c4*=0x10c, lpOverlapped=0x0) returned 1 [0196.527] CloseHandle (hObject=0x440) returned 1 [0196.546] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0196.550] CryptDestroyKey (hKey=0x665ab9aab0) returned 1 [0196.550] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0196.550] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0196.550] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0196.550] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\09_Music_played_the_most.wpl", dwFileAttributes=0x80) returned 1 [0196.551] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\09_Music_played_the_most.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\09_music_played_the_most.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0196.551] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x665da7a3c8 | out: lpFileSize=0x665da7a3c8*=1025) returned 1 [0196.551] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x665da7a3d8 | out: lpFileSize=0x665da7a3d8*=1025) returned 1 [0196.551] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x2df, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.551] ReadFile (in: hFile=0x440, lpBuffer=0x665da7a428, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7a3e8, lpOverlapped=0x0 | out: lpBuffer=0x665da7a428*, lpNumberOfBytesRead=0x665da7a3e8*=0x19, lpOverlapped=0x0) returned 1 [0196.553] SetFilePointer (in: hFile=0x440, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0196.553] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7a3b0 | out: phKey=0x665da7a3b0*=0x665ab9a340) returned 1 [0196.553] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0196.553] SetFilePointer (in: hFile=0x440, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0196.553] ReadFile (in: hFile=0x440, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x401, lpNumberOfBytesRead=0x665da7a3c0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7a3c0*=0x401, lpOverlapped=0x0) returned 1 [0196.553] CryptEncrypt (in: hKey=0x665ab9a340, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7a3bc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7a3bc*=0xf4250) returned 1 [0196.553] CryptEncrypt (in: hKey=0x665ab9a340, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7a3b8*=0x401, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7a3b8*=0x410) returned 1 [0196.553] SetFilePointer (in: hFile=0x440, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0196.553] WriteFile (in: hFile=0x440, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x410, lpNumberOfBytesWritten=0x665da7a3c0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7a3c0*=0x410, lpOverlapped=0x0) returned 1 [0196.553] WriteFile (in: hFile=0x440, lpBuffer=0x665da7a400*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7a3c4, lpOverlapped=0x0 | out: lpBuffer=0x665da7a400*, lpNumberOfBytesWritten=0x665da7a3c4*=0x6, lpOverlapped=0x0) returned 1 [0196.554] CryptExportKey (in: hKey=0x665ab9a340, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7a3d0 | out: pbData=0x0*, pdwDataLen=0x665da7a3d0*=0x10c) returned 1 [0196.554] CryptExportKey (in: hKey=0x665ab9a340, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7a450, pdwDataLen=0x665da7a3d0 | out: pbData=0x665da7a450*, pdwDataLen=0x665da7a3d0*=0x10c) returned 1 [0196.554] WriteFile (in: hFile=0x440, lpBuffer=0x665da7a450*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7a3c4, lpOverlapped=0x0 | out: lpBuffer=0x665da7a450*, lpNumberOfBytesWritten=0x665da7a3c4*=0x10c, lpOverlapped=0x0) returned 1 [0196.554] CloseHandle (hObject=0x440) returned 1 [0196.574] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0196.578] CryptDestroyKey (hKey=0x665ab9a340) returned 1 [0196.578] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0196.578] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0196.578] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0196.579] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\10_All_Music.wpl", dwFileAttributes=0x80) returned 1 [0196.579] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\10_All_Music.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\10_all_music.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0196.580] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x665da7a3c8 | out: lpFileSize=0x665da7a3c8*=1063) returned 1 [0196.580] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x665da7a3d8 | out: lpFileSize=0x665da7a3d8*=1063) returned 1 [0196.580] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x305, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.580] ReadFile (in: hFile=0x440, lpBuffer=0x665da7a428, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7a3e8, lpOverlapped=0x0 | out: lpBuffer=0x665da7a428*, lpNumberOfBytesRead=0x665da7a3e8*=0x19, lpOverlapped=0x0) returned 1 [0196.581] SetFilePointer (in: hFile=0x440, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0196.581] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7a3b0 | out: phKey=0x665da7a3b0*=0x665ab9aea0) returned 1 [0196.581] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0196.582] SetFilePointer (in: hFile=0x440, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0196.582] ReadFile (in: hFile=0x440, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x427, lpNumberOfBytesRead=0x665da7a3c0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7a3c0*=0x427, lpOverlapped=0x0) returned 1 [0196.582] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7a3bc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7a3bc*=0xf4250) returned 1 [0196.582] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7a3b8*=0x427, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7a3b8*=0x430) returned 1 [0196.582] SetFilePointer (in: hFile=0x440, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0196.582] WriteFile (in: hFile=0x440, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x430, lpNumberOfBytesWritten=0x665da7a3c0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7a3c0*=0x430, lpOverlapped=0x0) returned 1 [0196.582] WriteFile (in: hFile=0x440, lpBuffer=0x665da7a400*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7a3c4, lpOverlapped=0x0 | out: lpBuffer=0x665da7a400*, lpNumberOfBytesWritten=0x665da7a3c4*=0x6, lpOverlapped=0x0) returned 1 [0196.582] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7a3d0 | out: pbData=0x0*, pdwDataLen=0x665da7a3d0*=0x10c) returned 1 [0196.582] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7a450, pdwDataLen=0x665da7a3d0 | out: pbData=0x665da7a450*, pdwDataLen=0x665da7a3d0*=0x10c) returned 1 [0196.582] WriteFile (in: hFile=0x440, lpBuffer=0x665da7a450*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7a3c4, lpOverlapped=0x0 | out: lpBuffer=0x665da7a450*, lpNumberOfBytesWritten=0x665da7a3c4*=0x10c, lpOverlapped=0x0) returned 1 [0196.582] CloseHandle (hObject=0x440) returned 1 [0196.602] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0196.607] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0196.607] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0196.607] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0196.607] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0196.607] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\11_All_Pictures.wpl", dwFileAttributes=0x80) returned 1 [0196.608] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\11_All_Pictures.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\11_all_pictures.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0196.608] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x665da7a3c8 | out: lpFileSize=0x665da7a3c8*=585) returned 1 [0196.608] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x665da7a3d8 | out: lpFileSize=0x665da7a3d8*=585) returned 1 [0196.608] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x127, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.608] ReadFile (in: hFile=0x440, lpBuffer=0x665da7a428, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7a3e8, lpOverlapped=0x0 | out: lpBuffer=0x665da7a428*, lpNumberOfBytesRead=0x665da7a3e8*=0x19, lpOverlapped=0x0) returned 1 [0196.610] SetFilePointer (in: hFile=0x440, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0196.610] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7a3b0 | out: phKey=0x665da7a3b0*=0x665ab9a0a0) returned 1 [0196.610] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0196.610] SetFilePointer (in: hFile=0x440, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0196.610] ReadFile (in: hFile=0x440, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x249, lpNumberOfBytesRead=0x665da7a3c0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7a3c0*=0x249, lpOverlapped=0x0) returned 1 [0196.610] CryptEncrypt (in: hKey=0x665ab9a0a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7a3bc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7a3bc*=0xf4250) returned 1 [0196.610] CryptEncrypt (in: hKey=0x665ab9a0a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7a3b8*=0x249, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7a3b8*=0x250) returned 1 [0196.610] SetFilePointer (in: hFile=0x440, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0196.610] WriteFile (in: hFile=0x440, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x250, lpNumberOfBytesWritten=0x665da7a3c0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7a3c0*=0x250, lpOverlapped=0x0) returned 1 [0196.610] WriteFile (in: hFile=0x440, lpBuffer=0x665da7a400*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7a3c4, lpOverlapped=0x0 | out: lpBuffer=0x665da7a400*, lpNumberOfBytesWritten=0x665da7a3c4*=0x6, lpOverlapped=0x0) returned 1 [0196.617] CryptExportKey (in: hKey=0x665ab9a0a0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7a3d0 | out: pbData=0x0*, pdwDataLen=0x665da7a3d0*=0x10c) returned 1 [0196.617] CryptExportKey (in: hKey=0x665ab9a0a0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7a450, pdwDataLen=0x665da7a3d0 | out: pbData=0x665da7a450*, pdwDataLen=0x665da7a3d0*=0x10c) returned 1 [0196.617] WriteFile (in: hFile=0x440, lpBuffer=0x665da7a450*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7a3c4, lpOverlapped=0x0 | out: lpBuffer=0x665da7a450*, lpNumberOfBytesWritten=0x665da7a3c4*=0x10c, lpOverlapped=0x0) returned 1 [0196.617] CloseHandle (hObject=0x440) returned 1 [0196.635] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0196.639] CryptDestroyKey (hKey=0x665ab9a0a0) returned 1 [0196.639] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0196.639] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0196.639] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0196.639] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\12_All_Video.wpl", dwFileAttributes=0x80) returned 1 [0196.640] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\12_All_Video.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\12_all_video.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0196.640] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x665da7a3c8 | out: lpFileSize=0x665da7a3c8*=1079) returned 1 [0196.640] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x665da7a3d8 | out: lpFileSize=0x665da7a3d8*=1079) returned 1 [0196.640] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x315, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.640] ReadFile (in: hFile=0x440, lpBuffer=0x665da7a428, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7a3e8, lpOverlapped=0x0 | out: lpBuffer=0x665da7a428*, lpNumberOfBytesRead=0x665da7a3e8*=0x19, lpOverlapped=0x0) returned 1 [0196.641] SetFilePointer (in: hFile=0x440, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0196.641] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7a3b0 | out: phKey=0x665da7a3b0*=0x665ab9aea0) returned 1 [0196.642] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0196.642] SetFilePointer (in: hFile=0x440, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0196.642] ReadFile (in: hFile=0x440, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x437, lpNumberOfBytesRead=0x665da7a3c0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7a3c0*=0x437, lpOverlapped=0x0) returned 1 [0196.642] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7a3bc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7a3bc*=0xf4250) returned 1 [0196.642] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7a3b8*=0x437, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7a3b8*=0x440) returned 1 [0196.642] SetFilePointer (in: hFile=0x440, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0196.642] WriteFile (in: hFile=0x440, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x440, lpNumberOfBytesWritten=0x665da7a3c0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7a3c0*=0x440, lpOverlapped=0x0) returned 1 [0196.642] WriteFile (in: hFile=0x440, lpBuffer=0x665da7a400*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7a3c4, lpOverlapped=0x0 | out: lpBuffer=0x665da7a400*, lpNumberOfBytesWritten=0x665da7a3c4*=0x6, lpOverlapped=0x0) returned 1 [0196.642] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7a3d0 | out: pbData=0x0*, pdwDataLen=0x665da7a3d0*=0x10c) returned 1 [0196.642] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7a450, pdwDataLen=0x665da7a3d0 | out: pbData=0x665da7a450*, pdwDataLen=0x665da7a3d0*=0x10c) returned 1 [0196.642] WriteFile (in: hFile=0x440, lpBuffer=0x665da7a450*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7a3c4, lpOverlapped=0x0 | out: lpBuffer=0x665da7a450*, lpNumberOfBytesWritten=0x665da7a3c4*=0x10c, lpOverlapped=0x0) returned 1 [0196.642] CloseHandle (hObject=0x440) returned 1 [0196.662] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0196.666] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0196.666] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0196.666] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0196.666] FindClose (in: hFindFile=0x665d90c680 | out: hFindFile=0x665d90c680) returned 1 [0196.666] SetLastError (dwErrCode=0x0) [0196.666] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0196.667] GetLastError () returned 0x0 [0196.667] WriteFile (in: hFile=0x654, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7ad80*=0x324, lpOverlapped=0x0) returned 1 [0196.668] CloseHandle (hObject=0x654) returned 1 [0196.668] FindNextFileW (in: hFindFile=0x665d90d2e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0196.668] FindClose (in: hFindFile=0x665d90d2e0 | out: hFindFile=0x665d90d2e0) returned 1 [0196.668] SetLastError (dwErrCode=0x0) [0196.668] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0196.668] GetLastError () returned 0xb7 [0196.668] CloseHandle (hObject=0x3e8) returned 1 [0196.668] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0196.668] FindClose (in: hFindFile=0x665d90d280 | out: hFindFile=0x665d90d280) returned 1 [0196.669] SetLastError (dwErrCode=0x0) [0196.669] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0196.669] GetLastError () returned 0xb7 [0196.669] CloseHandle (hObject=0x620) returned 1 [0196.669] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0196.669] SetLastError (dwErrCode=0x0) [0196.669] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0196.669] GetLastError () returned 0xb7 [0196.669] CloseHandle (hObject=0x620) returned 1 [0196.669] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90cb60 [0196.670] FindNextFileW (in: hFindFile=0x665d90cb60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0196.670] FindNextFileW (in: hFindFile=0x665d90cb60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0196.670] FindClose (in: hFindFile=0x665d90cb60 | out: hFindFile=0x665d90cb60) returned 1 [0196.670] SetLastError (dwErrCode=0x0) [0196.670] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\transcoded files cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0196.671] GetLastError () returned 0x0 [0196.671] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0196.671] CloseHandle (hObject=0x620) returned 1 [0196.672] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0196.672] FindClose (in: hFindFile=0x665d90ca40 | out: hFindFile=0x665d90ca40) returned 1 [0196.672] SetLastError (dwErrCode=0x0) [0196.672] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0196.672] GetLastError () returned 0xb7 [0196.672] CloseHandle (hObject=0x60c) returned 1 [0196.672] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0196.672] SetLastError (dwErrCode=0x0) [0196.672] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0196.672] GetLastError () returned 0xb7 [0196.672] CloseHandle (hObject=0x60c) returned 1 [0196.673] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c500 [0196.673] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0196.673] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0196.673] SetLastError (dwErrCode=0x0) [0196.673] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0196.674] GetLastError () returned 0x0 [0196.675] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0196.675] CloseHandle (hObject=0x620) returned 1 [0196.676] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d280 [0196.676] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0196.676] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0196.676] SetLastError (dwErrCode=0x0) [0196.676] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0196.677] GetLastError () returned 0x0 [0196.677] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0196.678] CloseHandle (hObject=0x3e8) returned 1 [0196.679] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\BackstageInAppNavCache\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c6e0 [0196.680] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0196.680] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0196.680] SetLastError (dwErrCode=0x0) [0196.680] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\BackstageInAppNavCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\backstageinappnavcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0196.680] GetLastError () returned 0x0 [0196.680] WriteFile (in: hFile=0x654, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7ad80*=0x324, lpOverlapped=0x0) returned 1 [0196.681] CloseHandle (hObject=0x654) returned 1 [0196.681] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\BackstageInAppNavCache\\MyComputer\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665d90c1a0 [0196.682] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0196.682] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0196.682] FindClose (in: hFindFile=0x665d90c1a0 | out: hFindFile=0x665d90c1a0) returned 1 [0196.683] SetLastError (dwErrCode=0x0) [0196.683] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\BackstageInAppNavCache\\MyComputer\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\backstageinappnavcache\\mycomputer\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0196.684] GetLastError () returned 0x0 [0196.684] WriteFile (in: hFile=0x654, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7ad80*=0x324, lpOverlapped=0x0) returned 1 [0196.685] CloseHandle (hObject=0x654) returned 1 [0196.685] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0196.685] FindClose (in: hFindFile=0x665d90c6e0 | out: hFindFile=0x665d90c6e0) returned 1 [0196.685] SetLastError (dwErrCode=0x0) [0196.685] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\BackstageInAppNavCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\backstageinappnavcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0196.685] GetLastError () returned 0xb7 [0196.685] CloseHandle (hObject=0x3e8) returned 1 [0196.686] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0196.686] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0196.686] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0196.686] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0196.686] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0196.686] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0196.686] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0196.686] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0196.686] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0196.686] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0196.686] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0196.686] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0196.686] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0196.686] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0196.686] SetLastError (dwErrCode=0x0) [0196.686] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0196.686] GetLastError () returned 0xb7 [0196.686] CloseHandle (hObject=0x3e8) returned 1 [0196.686] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c260 [0196.687] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0196.687] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0196.687] SetLastError (dwErrCode=0x0) [0196.687] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0196.687] GetLastError () returned 0x0 [0196.687] WriteFile (in: hFile=0x654, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7ad80*=0x324, lpOverlapped=0x0) returned 1 [0196.688] CloseHandle (hObject=0x654) returned 1 [0196.688] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665d90bd20 [0196.689] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0196.690] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0196.690] SetLastError (dwErrCode=0x0) [0196.690] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0196.690] GetLastError () returned 0x0 [0196.690] WriteFile (in: hFile=0x440, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7a5d0*=0x324, lpOverlapped=0x0) returned 1 [0196.691] CloseHandle (hObject=0x440) returned 1 [0196.691] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\cdn.odc.officeapps.live.com\\*.*", lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0x665d90caa0 [0196.693] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0196.693] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0196.693] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0196.693] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\cdn.odc.officeapps.live.com\\29598952-6912-4B4E-8754-D3E714F498C3", dwFileAttributes=0x80) returned 1 [0196.694] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\cdn.odc.officeapps.live.com\\29598952-6912-4B4E-8754-D3E714F498C3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\cdn.odc.officeapps.live.com\\29598952-6912-4b4e-8754-d3e714f498c3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x450 [0196.694] GetFileSizeEx (in: hFile=0x450, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=705) returned 1 [0196.694] GetFileSizeEx (in: hFile=0x450, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=705) returned 1 [0196.694] SetFilePointerEx (in: hFile=0x450, liDistanceToMove=0x19f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.694] ReadFile (in: hFile=0x450, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0196.695] SetFilePointer (in: hFile=0x450, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0196.695] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a3b0) returned 1 [0196.695] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0196.696] SetFilePointer (in: hFile=0x450, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0196.696] ReadFile (in: hFile=0x450, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x2c1, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x2c1, lpOverlapped=0x0) returned 1 [0196.696] CryptEncrypt (in: hKey=0x665ab9a3b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0196.696] CryptEncrypt (in: hKey=0x665ab9a3b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x2c1, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x2d0) returned 1 [0196.696] SetFilePointer (in: hFile=0x450, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0196.696] WriteFile (in: hFile=0x450, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x2d0, lpOverlapped=0x0) returned 1 [0196.696] WriteFile (in: hFile=0x450, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0196.696] CryptExportKey (in: hKey=0x665ab9a3b0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0196.696] CryptExportKey (in: hKey=0x665ab9a3b0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0196.696] WriteFile (in: hFile=0x450, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0196.696] CloseHandle (hObject=0x450) returned 1 [0196.719] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0196.725] CryptDestroyKey (hKey=0x665ab9a3b0) returned 1 [0196.725] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0196.725] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0 [0196.725] FindClose (in: hFindFile=0x665d90caa0 | out: hFindFile=0x665d90caa0) returned 1 [0196.725] SetLastError (dwErrCode=0x0) [0196.725] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\cdn.odc.officeapps.live.com\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\cdn.odc.officeapps.live.com\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0196.728] GetLastError () returned 0x0 [0196.728] WriteFile (in: hFile=0x440, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7a5d0*=0x324, lpOverlapped=0x0) returned 1 [0196.730] CloseHandle (hObject=0x440) returned 1 [0196.730] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0196.730] SetLastError (dwErrCode=0x0) [0196.730] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0196.730] GetLastError () returned 0xb7 [0196.730] CloseHandle (hObject=0x440) returned 1 [0196.731] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\*.*", lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0x665d90cc80 [0196.734] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0196.736] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0196.736] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0196.737] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\01A0C0A0-84FB-4EB4-A9A1-4BCABE4EFC24", dwFileAttributes=0x80) returned 1 [0196.738] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\01A0C0A0-84FB-4EB4-A9A1-4BCABE4EFC24" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\01a0c0a0-84fb-4eb4-a9a1-4bcabe4efc24"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0196.738] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=19457) returned 1 [0196.738] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=19457) returned 1 [0196.738] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x4adf, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.738] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0196.740] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0196.740] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9aab0) returned 1 [0196.740] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0196.741] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0196.741] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x4c01, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x4c01, lpOverlapped=0x0) returned 1 [0196.742] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0196.742] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x4c01, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x4c10) returned 1 [0196.742] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0196.742] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x4c10, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4c10, lpOverlapped=0x0) returned 1 [0196.742] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0196.743] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0196.743] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0196.743] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0196.743] CloseHandle (hObject=0x5cc) returned 1 [0196.765] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0196.771] CryptDestroyKey (hKey=0x665ab9aab0) returned 1 [0196.771] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0196.771] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0196.771] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0196.772] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\04A54DF6-2C68-43B6-89EB-3B7958597AC7", dwFileAttributes=0x80) returned 1 [0196.773] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\04A54DF6-2C68-43B6-89EB-3B7958597AC7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\04a54df6-2c68-43b6-89eb-3b7958597ac7"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0196.774] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=4570) returned 1 [0196.774] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=4570) returned 1 [0196.774] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x10b8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.774] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0196.775] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0196.776] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9aab0) returned 1 [0196.776] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0196.776] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0196.776] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x11da, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x11da, lpOverlapped=0x0) returned 1 [0196.777] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0196.777] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x11da, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x11e0) returned 1 [0196.777] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0196.778] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x11e0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x11e0, lpOverlapped=0x0) returned 1 [0196.778] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0196.778] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0196.778] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0196.778] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0196.778] CloseHandle (hObject=0x5cc) returned 1 [0196.802] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0196.808] CryptDestroyKey (hKey=0x665ab9aab0) returned 1 [0196.808] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0196.809] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0196.809] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0196.809] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\0552393D-14EB-4F89-8C21-8959A49968D2", dwFileAttributes=0x80) returned 1 [0196.811] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\0552393D-14EB-4F89-8C21-8959A49968D2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\0552393d-14eb-4f89-8c21-8959a49968d2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0196.811] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=14181) returned 1 [0196.811] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=14181) returned 1 [0196.811] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x3643, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.811] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0196.813] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0196.813] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a490) returned 1 [0196.813] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0196.813] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0196.813] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x3765, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x3765, lpOverlapped=0x0) returned 1 [0196.814] CryptEncrypt (in: hKey=0x665ab9a490, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0196.814] CryptEncrypt (in: hKey=0x665ab9a490, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x3765, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x3770) returned 1 [0196.814] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0196.815] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x3770, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3770, lpOverlapped=0x0) returned 1 [0196.815] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0196.815] CryptExportKey (in: hKey=0x665ab9a490, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0196.815] CryptExportKey (in: hKey=0x665ab9a490, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0196.815] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0196.815] CloseHandle (hObject=0x5cc) returned 1 [0196.840] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0196.845] CryptDestroyKey (hKey=0x665ab9a490) returned 1 [0196.845] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0196.845] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0196.845] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0196.846] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\07EC9290-11A1-4B7B-8542-424076F02838", dwFileAttributes=0x80) returned 1 [0196.848] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\07EC9290-11A1-4B7B-8542-424076F02838" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\07ec9290-11a1-4b7b-8542-424076f02838"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0196.848] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=13385) returned 1 [0196.848] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=13385) returned 1 [0196.848] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x3327, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.848] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0196.850] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0196.851] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a6c0) returned 1 [0196.851] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0196.851] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0196.851] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x3449, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x3449, lpOverlapped=0x0) returned 1 [0196.852] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0196.852] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x3449, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x3450) returned 1 [0196.852] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0196.852] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x3450, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3450, lpOverlapped=0x0) returned 1 [0196.853] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0196.853] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0196.853] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0196.853] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0196.853] CloseHandle (hObject=0x5cc) returned 1 [0196.888] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0196.894] CryptDestroyKey (hKey=0x665ab9a6c0) returned 1 [0196.894] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0196.894] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0196.894] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0196.895] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\18E43682-B084-475D-AA0F-B94BD8888B3D", dwFileAttributes=0x80) returned 1 [0196.896] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\18E43682-B084-475D-AA0F-B94BD8888B3D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\18e43682-b084-475d-aa0f-b94bd8888b3d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0196.897] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=25684) returned 1 [0196.897] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=25684) returned 1 [0196.897] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x6332, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.897] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0196.898] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0196.899] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a110) returned 1 [0196.899] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0196.899] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0196.899] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x6454, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x6454, lpOverlapped=0x0) returned 1 [0196.901] CryptEncrypt (in: hKey=0x665ab9a110, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0196.901] CryptEncrypt (in: hKey=0x665ab9a110, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x6454, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x6460) returned 1 [0196.901] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0196.901] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x6460, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x6460, lpOverlapped=0x0) returned 1 [0196.901] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0196.901] CryptExportKey (in: hKey=0x665ab9a110, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0196.902] CryptExportKey (in: hKey=0x665ab9a110, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0196.902] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0196.902] CloseHandle (hObject=0x5cc) returned 1 [0196.925] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0196.930] CryptDestroyKey (hKey=0x665ab9a110) returned 1 [0196.930] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0196.931] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0196.931] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0196.931] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2378B1B3-B054-41CE-B565-01C50DF64F3A", dwFileAttributes=0x80) returned 1 [0196.933] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2378B1B3-B054-41CE-B565-01C50DF64F3A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\2378b1b3-b054-41ce-b565-01c50df64f3a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0196.934] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=19008) returned 1 [0196.934] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=19008) returned 1 [0196.934] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x491e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.934] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0196.935] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0196.935] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a0a0) returned 1 [0196.935] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0196.936] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0196.936] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x4a40, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x4a40, lpOverlapped=0x0) returned 1 [0196.937] CryptEncrypt (in: hKey=0x665ab9a0a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0196.937] CryptEncrypt (in: hKey=0x665ab9a0a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x4a40, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x4a50) returned 1 [0196.937] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0196.937] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x4a50, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4a50, lpOverlapped=0x0) returned 1 [0196.937] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0196.937] CryptExportKey (in: hKey=0x665ab9a0a0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0196.938] CryptExportKey (in: hKey=0x665ab9a0a0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0196.938] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0196.938] CloseHandle (hObject=0x5cc) returned 1 [0196.962] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0196.967] CryptDestroyKey (hKey=0x665ab9a0a0) returned 1 [0196.967] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0196.968] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0196.968] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0196.968] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\24E98DA1-B779-4FAC-9144-3233D1979336", dwFileAttributes=0x80) returned 1 [0196.972] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\24E98DA1-B779-4FAC-9144-3233D1979336" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\24e98da1-b779-4fac-9144-3233d1979336"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0196.973] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=26452) returned 1 [0196.973] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=26452) returned 1 [0196.973] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x6632, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.973] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0196.975] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0196.975] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a730) returned 1 [0196.975] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0196.976] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0196.976] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x6754, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x6754, lpOverlapped=0x0) returned 1 [0196.977] CryptEncrypt (in: hKey=0x665ab9a730, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0196.977] CryptEncrypt (in: hKey=0x665ab9a730, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x6754, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x6760) returned 1 [0196.977] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0196.977] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x6760, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x6760, lpOverlapped=0x0) returned 1 [0196.977] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0196.978] CryptExportKey (in: hKey=0x665ab9a730, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0196.978] CryptExportKey (in: hKey=0x665ab9a730, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0196.978] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0196.978] CloseHandle (hObject=0x5cc) returned 1 [0196.999] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0197.003] CryptDestroyKey (hKey=0x665ab9a730) returned 1 [0197.004] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0197.004] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0197.004] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0197.004] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2A9BD5FC-A11E-42DF-A867-B07EE85C6137", dwFileAttributes=0x80) returned 1 [0197.005] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2A9BD5FC-A11E-42DF-A867-B07EE85C6137" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\2a9bd5fc-a11e-42df-a867-b07ee85c6137"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0197.006] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=28545) returned 1 [0197.006] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=28545) returned 1 [0197.006] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x6e5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.006] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0197.007] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.007] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a880) returned 1 [0197.007] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0197.007] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.007] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x6f81, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x6f81, lpOverlapped=0x0) returned 1 [0197.009] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0197.009] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x6f81, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x6f90) returned 1 [0197.009] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.009] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x6f90, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x6f90, lpOverlapped=0x0) returned 1 [0197.009] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0197.009] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0197.009] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0197.009] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0197.009] CloseHandle (hObject=0x5cc) returned 1 [0197.029] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0197.033] CryptDestroyKey (hKey=0x665ab9a880) returned 1 [0197.033] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0197.033] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0197.034] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0197.034] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\3ECE84BD-CF61-4B84-85B4-BB9C029B1D34", dwFileAttributes=0x80) returned 1 [0197.035] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\3ECE84BD-CF61-4B84-85B4-BB9C029B1D34" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\3ece84bd-cf61-4b84-85b4-bb9c029b1d34"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0197.035] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=23881) returned 1 [0197.035] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=23881) returned 1 [0197.036] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x5c27, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.036] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0197.040] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.040] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9af10) returned 1 [0197.041] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0197.041] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.041] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x5d49, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x5d49, lpOverlapped=0x0) returned 1 [0197.042] CryptEncrypt (in: hKey=0x665ab9af10, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0197.042] CryptEncrypt (in: hKey=0x665ab9af10, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x5d49, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x5d50) returned 1 [0197.042] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.042] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x5d50, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x5d50, lpOverlapped=0x0) returned 1 [0197.043] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0197.043] CryptExportKey (in: hKey=0x665ab9af10, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0197.043] CryptExportKey (in: hKey=0x665ab9af10, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0197.043] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0197.043] CloseHandle (hObject=0x5cc) returned 1 [0197.062] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0197.066] CryptDestroyKey (hKey=0x665ab9af10) returned 1 [0197.066] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0197.067] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0197.067] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0197.067] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\41D65FE9-AE28-4485-82A5-B9D59D0A0019", dwFileAttributes=0x80) returned 1 [0197.068] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\41D65FE9-AE28-4485-82A5-B9D59D0A0019" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\41d65fe9-ae28-4485-82a5-b9d59d0a0019"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0197.068] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=20394) returned 1 [0197.068] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=20394) returned 1 [0197.068] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x4e88, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.068] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0197.069] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.069] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9af10) returned 1 [0197.069] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0197.069] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.070] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x4faa, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x4faa, lpOverlapped=0x0) returned 1 [0197.070] CryptEncrypt (in: hKey=0x665ab9af10, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0197.071] CryptEncrypt (in: hKey=0x665ab9af10, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x4faa, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x4fb0) returned 1 [0197.071] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.071] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x4fb0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4fb0, lpOverlapped=0x0) returned 1 [0197.071] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0197.071] CryptExportKey (in: hKey=0x665ab9af10, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0197.071] CryptExportKey (in: hKey=0x665ab9af10, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0197.071] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0197.071] CloseHandle (hObject=0x5cc) returned 1 [0197.094] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0197.098] CryptDestroyKey (hKey=0x665ab9af10) returned 1 [0197.098] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0197.098] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0197.098] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0197.098] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\4558EE3B-BE9E-4DDA-A9E5-D74AA0D2D069", dwFileAttributes=0x80) returned 1 [0197.099] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\4558EE3B-BE9E-4DDA-A9E5-D74AA0D2D069" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\4558ee3b-be9e-4dda-a9e5-d74aa0d2d069"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0197.099] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=2415) returned 1 [0197.099] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=2415) returned 1 [0197.099] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x84d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.099] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0197.100] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.101] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9aea0) returned 1 [0197.101] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0197.101] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.101] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x96f, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x96f, lpOverlapped=0x0) returned 1 [0197.101] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0197.101] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x96f, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x970) returned 1 [0197.101] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.101] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x970, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x970, lpOverlapped=0x0) returned 1 [0197.101] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0197.101] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0197.101] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0197.102] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0197.102] CloseHandle (hObject=0x5cc) returned 1 [0197.126] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0197.130] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0197.130] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0197.131] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0197.131] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0197.131] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\46DE614E-0C9B-46EB-84F0-89F985E8C156", dwFileAttributes=0x80) returned 1 [0197.134] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\46DE614E-0C9B-46EB-84F0-89F985E8C156" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\46de614e-0c9b-46eb-84f0-89f985e8c156"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0197.134] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=21140) returned 1 [0197.134] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=21140) returned 1 [0197.134] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x5172, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.134] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0197.135] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.135] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a180) returned 1 [0197.135] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0197.136] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.136] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x5294, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x5294, lpOverlapped=0x0) returned 1 [0197.137] CryptEncrypt (in: hKey=0x665ab9a180, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0197.137] CryptEncrypt (in: hKey=0x665ab9a180, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x5294, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x52a0) returned 1 [0197.137] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.137] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x52a0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x52a0, lpOverlapped=0x0) returned 1 [0197.137] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0197.137] CryptExportKey (in: hKey=0x665ab9a180, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0197.137] CryptExportKey (in: hKey=0x665ab9a180, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0197.137] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0197.137] CloseHandle (hObject=0x5cc) returned 1 [0197.207] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0197.211] CryptDestroyKey (hKey=0x665ab9a180) returned 1 [0197.211] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0197.211] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0197.211] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0197.211] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\488F2960-8DBA-42A5-A6F9-DF66073E536D", dwFileAttributes=0x80) returned 1 [0197.212] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\488F2960-8DBA-42A5-A6F9-DF66073E536D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\488f2960-8dba-42a5-a6f9-df66073e536d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0197.212] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=24285) returned 1 [0197.212] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=24285) returned 1 [0197.212] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x5dbb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.213] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0197.214] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.214] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9af10) returned 1 [0197.214] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0197.214] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.214] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x5edd, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x5edd, lpOverlapped=0x0) returned 1 [0197.235] CryptEncrypt (in: hKey=0x665ab9af10, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0197.235] CryptEncrypt (in: hKey=0x665ab9af10, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x5edd, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x5ee0) returned 1 [0197.235] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.235] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x5ee0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x5ee0, lpOverlapped=0x0) returned 1 [0197.235] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0197.235] CryptExportKey (in: hKey=0x665ab9af10, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0197.235] CryptExportKey (in: hKey=0x665ab9af10, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0197.236] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0197.236] CloseHandle (hObject=0x5cc) returned 1 [0197.255] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0197.259] CryptDestroyKey (hKey=0x665ab9af10) returned 1 [0197.259] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0197.259] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0197.259] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0197.260] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\542AE9EC-2AAB-4A8D-86CE-BF36E018A365", dwFileAttributes=0x80) returned 1 [0197.264] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\542AE9EC-2AAB-4A8D-86CE-BF36E018A365" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\542ae9ec-2aab-4a8d-86ce-bf36e018a365"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0197.264] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=5381) returned 1 [0197.264] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=5381) returned 1 [0197.264] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x13e3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.265] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0197.266] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.266] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a880) returned 1 [0197.266] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0197.266] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.266] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x1505, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x1505, lpOverlapped=0x0) returned 1 [0197.267] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0197.267] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x1505, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x1510) returned 1 [0197.267] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.267] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x1510, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x1510, lpOverlapped=0x0) returned 1 [0197.267] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0197.267] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0197.267] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0197.267] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0197.267] CloseHandle (hObject=0x5cc) returned 1 [0197.284] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0197.288] CryptDestroyKey (hKey=0x665ab9a880) returned 1 [0197.288] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0197.288] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0197.288] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0197.289] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5B8C44D4-2A63-481E-A1AB-5E6CF4501F02", dwFileAttributes=0x80) returned 1 [0197.290] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5B8C44D4-2A63-481E-A1AB-5E6CF4501F02" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\5b8c44d4-2a63-481e-a1ab-5e6cf4501f02"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0197.290] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=23994) returned 1 [0197.290] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=23994) returned 1 [0197.290] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x5c98, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.290] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0197.292] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.292] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9aea0) returned 1 [0197.292] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0197.292] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.292] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x5dba, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x5dba, lpOverlapped=0x0) returned 1 [0197.293] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0197.293] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x5dba, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x5dc0) returned 1 [0197.293] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.293] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x5dc0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x5dc0, lpOverlapped=0x0) returned 1 [0197.294] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0197.294] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0197.294] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0197.294] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0197.294] CloseHandle (hObject=0x5cc) returned 1 [0197.312] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0197.316] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0197.317] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0197.317] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0197.317] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0197.317] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5EABD895-1369-4673-B65E-C121C8F05C93", dwFileAttributes=0x80) returned 1 [0197.319] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5EABD895-1369-4673-B65E-C121C8F05C93" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\5eabd895-1369-4673-b65e-c121c8f05c93"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0197.319] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=17577) returned 1 [0197.319] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=17577) returned 1 [0197.319] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x4387, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.319] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0197.321] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.321] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9aab0) returned 1 [0197.321] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0197.321] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.321] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x44a9, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x44a9, lpOverlapped=0x0) returned 1 [0197.322] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0197.323] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x44a9, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x44b0) returned 1 [0197.323] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.323] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x44b0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x44b0, lpOverlapped=0x0) returned 1 [0197.323] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0197.323] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0197.323] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0197.323] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0197.323] CloseHandle (hObject=0x5cc) returned 1 [0197.344] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0197.348] CryptDestroyKey (hKey=0x665ab9aab0) returned 1 [0197.348] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0197.349] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0197.349] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0197.349] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66172C59-AA66-47DE-BD2B-1B908C570062", dwFileAttributes=0x80) returned 1 [0197.350] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66172C59-AA66-47DE-BD2B-1B908C570062" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\66172c59-aa66-47de-bd2b-1b908c570062"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0197.350] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=33933) returned 1 [0197.350] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=33933) returned 1 [0197.350] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x836b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.350] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0197.352] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.352] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a180) returned 1 [0197.352] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0197.352] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.352] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x848d, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x848d, lpOverlapped=0x0) returned 1 [0197.353] CryptEncrypt (in: hKey=0x665ab9a180, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0197.353] CryptEncrypt (in: hKey=0x665ab9a180, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x848d, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x8490) returned 1 [0197.354] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.354] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x8490, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x8490, lpOverlapped=0x0) returned 1 [0197.354] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0197.354] CryptExportKey (in: hKey=0x665ab9a180, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0197.354] CryptExportKey (in: hKey=0x665ab9a180, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0197.354] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0197.354] CloseHandle (hObject=0x5cc) returned 1 [0197.373] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0197.377] CryptDestroyKey (hKey=0x665ab9a180) returned 1 [0197.377] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0197.378] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0197.378] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0197.378] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66408A6E-F696-44FA-B896-9073D83C9463", dwFileAttributes=0x80) returned 1 [0197.379] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66408A6E-F696-44FA-B896-9073D83C9463" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\66408a6e-f696-44fa-b896-9073d83c9463"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0197.379] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=18011) returned 1 [0197.379] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=18011) returned 1 [0197.379] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x4539, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.379] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0197.380] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.380] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9aea0) returned 1 [0197.380] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0197.381] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.381] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x465b, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x465b, lpOverlapped=0x0) returned 1 [0197.382] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0197.382] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x465b, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x4660) returned 1 [0197.382] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.382] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x4660, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4660, lpOverlapped=0x0) returned 1 [0197.382] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0197.383] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0197.383] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0197.383] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0197.383] CloseHandle (hObject=0x5cc) returned 1 [0197.404] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0197.409] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0197.409] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0197.410] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0197.410] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0197.410] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\683C6C51-6FBE-4F12-8495-5B218743CC76", dwFileAttributes=0x80) returned 1 [0197.412] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\683C6C51-6FBE-4F12-8495-5B218743CC76" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\683c6c51-6fbe-4f12-8495-5b218743cc76"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0197.412] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=23241) returned 1 [0197.412] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=23241) returned 1 [0197.412] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x59a7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.412] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0197.413] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.413] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a880) returned 1 [0197.413] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0197.414] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.414] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x5ac9, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x5ac9, lpOverlapped=0x0) returned 1 [0197.415] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0197.415] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x5ac9, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x5ad0) returned 1 [0197.415] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.415] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x5ad0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x5ad0, lpOverlapped=0x0) returned 1 [0197.415] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0197.415] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0197.415] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0197.415] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0197.415] CloseHandle (hObject=0x5cc) returned 1 [0197.438] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0197.444] CryptDestroyKey (hKey=0x665ab9a880) returned 1 [0197.444] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0197.444] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0197.444] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0197.445] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\77FD6918-29A5-4F0B-B1A7-EDEADD0A695F", dwFileAttributes=0x80) returned 1 [0197.446] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\77FD6918-29A5-4F0B-B1A7-EDEADD0A695F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\77fd6918-29a5-4f0b-b1a7-edeadd0a695f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0197.446] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=18935) returned 1 [0197.446] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=18935) returned 1 [0197.447] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x48d5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.447] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0197.449] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.449] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9aab0) returned 1 [0197.449] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0197.449] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.450] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x49f7, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x49f7, lpOverlapped=0x0) returned 1 [0197.451] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0197.451] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x49f7, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x4a00) returned 1 [0197.451] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.451] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x4a00, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4a00, lpOverlapped=0x0) returned 1 [0197.451] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0197.451] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0197.451] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0197.452] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0197.452] CloseHandle (hObject=0x5cc) returned 1 [0197.476] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0197.482] CryptDestroyKey (hKey=0x665ab9aab0) returned 1 [0197.482] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0197.482] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0197.483] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0197.483] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\797D396D-AC42-4AB5-A395-D4C7890DB4E6", dwFileAttributes=0x80) returned 1 [0197.484] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\797D396D-AC42-4AB5-A395-D4C7890DB4E6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\797d396d-ac42-4ab5-a395-d4c7890db4e6"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0197.484] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=4923) returned 1 [0197.484] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=4923) returned 1 [0197.484] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x1219, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.484] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0197.486] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.486] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a110) returned 1 [0197.486] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0197.486] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.486] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x133b, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x133b, lpOverlapped=0x0) returned 1 [0197.487] CryptEncrypt (in: hKey=0x665ab9a110, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0197.487] CryptEncrypt (in: hKey=0x665ab9a110, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x133b, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x1340) returned 1 [0197.487] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.487] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x1340, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x1340, lpOverlapped=0x0) returned 1 [0197.488] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0197.488] CryptExportKey (in: hKey=0x665ab9a110, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0197.488] CryptExportKey (in: hKey=0x665ab9a110, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0197.488] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0197.488] CloseHandle (hObject=0x5cc) returned 1 [0197.511] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0197.516] CryptDestroyKey (hKey=0x665ab9a110) returned 1 [0197.516] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0197.517] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0197.517] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0197.517] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7A123EA5-56EE-4596-A54E-8E612EE6B11E", dwFileAttributes=0x80) returned 1 [0197.520] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7A123EA5-56EE-4596-A54E-8E612EE6B11E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\7a123ea5-56ee-4596-a54e-8e612ee6b11e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0197.520] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=237355) returned 1 [0197.520] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=237355) returned 1 [0197.520] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x39e09, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.520] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0197.522] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.522] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9aea0) returned 1 [0197.522] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0197.522] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.522] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x39f2b, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x39f2b, lpOverlapped=0x0) returned 1 [0197.570] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0197.570] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x39f2b, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x39f30) returned 1 [0197.570] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.570] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x39f30, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x39f30, lpOverlapped=0x0) returned 1 [0197.571] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0197.571] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0197.571] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0197.571] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0197.571] CloseHandle (hObject=0x5cc) returned 1 [0197.585] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0197.589] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0197.589] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0197.590] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0197.590] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0197.590] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7CDC9D9C-BADA-4EA1-8A7A-91189CBCBB42", dwFileAttributes=0x80) returned 1 [0197.592] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7CDC9D9C-BADA-4EA1-8A7A-91189CBCBB42" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\7cdc9d9c-bada-4ea1-8a7a-91189cbcbb42"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0197.592] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=24207) returned 1 [0197.592] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=24207) returned 1 [0197.592] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x5d6d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.592] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0197.594] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.594] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9aea0) returned 1 [0197.594] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0197.594] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.594] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x5e8f, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x5e8f, lpOverlapped=0x0) returned 1 [0197.595] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0197.595] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x5e8f, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x5e90) returned 1 [0197.595] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.595] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x5e90, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x5e90, lpOverlapped=0x0) returned 1 [0197.595] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0197.595] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0197.595] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0197.596] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0197.596] CloseHandle (hObject=0x5cc) returned 1 [0197.615] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0197.619] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0197.619] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0197.619] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0197.621] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0197.621] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E661E9F-0FFD-4BF6-A6A9-A33E185C9131", dwFileAttributes=0x80) returned 1 [0197.625] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E661E9F-0FFD-4BF6-A6A9-A33E185C9131" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\7e661e9f-0ffd-4bf6-a6a9-a33e185c9131"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0197.625] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=14190) returned 1 [0197.625] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=14190) returned 1 [0197.625] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x364c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.625] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0197.627] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.627] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9ab20) returned 1 [0197.627] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0197.627] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.627] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x376e, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x376e, lpOverlapped=0x0) returned 1 [0197.628] CryptEncrypt (in: hKey=0x665ab9ab20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0197.628] CryptEncrypt (in: hKey=0x665ab9ab20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x376e, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x3770) returned 1 [0197.628] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.628] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x3770, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3770, lpOverlapped=0x0) returned 1 [0197.628] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0197.628] CryptExportKey (in: hKey=0x665ab9ab20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0197.628] CryptExportKey (in: hKey=0x665ab9ab20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0197.628] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0197.628] CloseHandle (hObject=0x5cc) returned 1 [0197.649] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0197.654] CryptDestroyKey (hKey=0x665ab9ab20) returned 1 [0197.654] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0197.654] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0197.654] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0197.655] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E7F2D4D-7FEC-45D5-9242-391C5BBDCE7E", dwFileAttributes=0x80) returned 1 [0197.656] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E7F2D4D-7FEC-45D5-9242-391C5BBDCE7E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\7e7f2d4d-7fec-45d5-9242-391c5bbdce7e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0197.657] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=12186) returned 1 [0197.657] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=12186) returned 1 [0197.657] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x2e78, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.657] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0197.658] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.658] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9af10) returned 1 [0197.658] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0197.659] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.659] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x2f9a, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x2f9a, lpOverlapped=0x0) returned 1 [0197.660] CryptEncrypt (in: hKey=0x665ab9af10, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0197.660] CryptEncrypt (in: hKey=0x665ab9af10, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x2f9a, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x2fa0) returned 1 [0197.660] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.660] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2fa0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x2fa0, lpOverlapped=0x0) returned 1 [0197.660] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0197.660] CryptExportKey (in: hKey=0x665ab9af10, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0197.660] CryptExportKey (in: hKey=0x665ab9af10, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0197.660] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0197.660] CloseHandle (hObject=0x5cc) returned 1 [0197.679] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0197.684] CryptDestroyKey (hKey=0x665ab9af10) returned 1 [0197.684] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0197.684] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0197.684] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0197.684] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\804C4A29-C626-4EB0-9A5A-CEC3A687FD1B", dwFileAttributes=0x80) returned 1 [0197.685] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\804C4A29-C626-4EB0-9A5A-CEC3A687FD1B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\804c4a29-c626-4eb0-9a5a-cec3a687fd1b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0197.685] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=100788) returned 1 [0197.685] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=100788) returned 1 [0197.685] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x18892, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.685] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0197.686] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.687] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a340) returned 1 [0197.687] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0197.687] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.687] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x189b4, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x189b4, lpOverlapped=0x0) returned 1 [0197.691] CryptEncrypt (in: hKey=0x665ab9a340, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0197.691] CryptEncrypt (in: hKey=0x665ab9a340, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x189b4, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x189c0) returned 1 [0197.691] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.691] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x189c0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x189c0, lpOverlapped=0x0) returned 1 [0197.692] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0197.692] CryptExportKey (in: hKey=0x665ab9a340, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0197.692] CryptExportKey (in: hKey=0x665ab9a340, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0197.692] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0197.692] CloseHandle (hObject=0x5cc) returned 1 [0197.712] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0197.717] CryptDestroyKey (hKey=0x665ab9a340) returned 1 [0197.717] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0197.718] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0197.718] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0197.718] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8377A58B-6BB9-496C-A6DF-9A7A076B4B41", dwFileAttributes=0x80) returned 1 [0197.719] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8377A58B-6BB9-496C-A6DF-9A7A076B4B41" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\8377a58b-6bb9-496c-a6df-9a7a076b4b41"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0197.719] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=27721) returned 1 [0197.719] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=27721) returned 1 [0197.719] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x6b27, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.719] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0197.721] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.721] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a110) returned 1 [0197.721] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0197.721] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.721] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x6c49, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x6c49, lpOverlapped=0x0) returned 1 [0197.723] CryptEncrypt (in: hKey=0x665ab9a110, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0197.723] CryptEncrypt (in: hKey=0x665ab9a110, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x6c49, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x6c50) returned 1 [0197.723] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.723] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x6c50, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x6c50, lpOverlapped=0x0) returned 1 [0197.724] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0197.724] CryptExportKey (in: hKey=0x665ab9a110, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0197.724] CryptExportKey (in: hKey=0x665ab9a110, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0197.724] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0197.724] CloseHandle (hObject=0x5cc) returned 1 [0197.745] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0197.750] CryptDestroyKey (hKey=0x665ab9a110) returned 1 [0197.750] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0197.750] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0197.750] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0197.750] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8BE6D37C-5753-4A96-817E-B3C94B03A82D", dwFileAttributes=0x80) returned 1 [0197.751] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8BE6D37C-5753-4A96-817E-B3C94B03A82D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\8be6d37c-5753-4a96-817e-b3c94b03a82d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0197.751] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=19669) returned 1 [0197.751] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=19669) returned 1 [0197.751] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x4bb3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.751] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0197.755] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.755] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a340) returned 1 [0197.755] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0197.756] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.756] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x4cd5, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x4cd5, lpOverlapped=0x0) returned 1 [0197.757] CryptEncrypt (in: hKey=0x665ab9a340, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0197.757] CryptEncrypt (in: hKey=0x665ab9a340, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x4cd5, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x4ce0) returned 1 [0197.757] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.757] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x4ce0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4ce0, lpOverlapped=0x0) returned 1 [0197.757] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0197.757] CryptExportKey (in: hKey=0x665ab9a340, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0197.757] CryptExportKey (in: hKey=0x665ab9a340, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0197.757] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0197.757] CloseHandle (hObject=0x5cc) returned 1 [0197.777] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0197.781] CryptDestroyKey (hKey=0x665ab9a340) returned 1 [0197.781] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0197.781] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0197.781] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0197.781] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C065BBF-7AD9-42C4-9735-9EEE5F756EA9", dwFileAttributes=0x80) returned 1 [0197.782] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C065BBF-7AD9-42C4-9735-9EEE5F756EA9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\8c065bbf-7ad9-42c4-9735-9eee5f756ea9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0197.782] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=16299) returned 1 [0197.782] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=16299) returned 1 [0197.782] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x3e89, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.782] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0197.784] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.784] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9aea0) returned 1 [0197.784] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0197.784] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.784] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x3fab, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x3fab, lpOverlapped=0x0) returned 1 [0197.785] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0197.785] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x3fab, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x3fb0) returned 1 [0197.785] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.785] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x3fb0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3fb0, lpOverlapped=0x0) returned 1 [0197.785] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0197.785] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0197.785] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0197.785] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0197.785] CloseHandle (hObject=0x5cc) returned 1 [0197.810] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0197.815] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0197.816] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0197.816] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0197.816] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0197.816] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C607B24-1BCC-4C57-8CE9-EC64CDD7114B", dwFileAttributes=0x80) returned 1 [0197.821] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C607B24-1BCC-4C57-8CE9-EC64CDD7114B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\8c607b24-1bcc-4c57-8ce9-ec64cdd7114b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0197.821] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=12993) returned 1 [0197.821] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=12993) returned 1 [0197.821] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x319f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.821] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0197.823] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.823] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a1f0) returned 1 [0197.823] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0197.824] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.824] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x32c1, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x32c1, lpOverlapped=0x0) returned 1 [0197.825] CryptEncrypt (in: hKey=0x665ab9a1f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0197.825] CryptEncrypt (in: hKey=0x665ab9a1f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x32c1, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x32d0) returned 1 [0197.825] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.825] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x32d0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x32d0, lpOverlapped=0x0) returned 1 [0197.825] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0197.825] CryptExportKey (in: hKey=0x665ab9a1f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0197.825] CryptExportKey (in: hKey=0x665ab9a1f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0197.825] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0197.826] CloseHandle (hObject=0x5cc) returned 1 [0197.848] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0197.853] CryptDestroyKey (hKey=0x665ab9a1f0) returned 1 [0197.853] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0197.854] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0197.854] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0197.863] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9403D050-B4D3-428F-920D-D3B5F01FD272", dwFileAttributes=0x80) returned 1 [0197.864] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9403D050-B4D3-428F-920D-D3B5F01FD272" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\9403d050-b4d3-428f-920d-d3b5f01fd272"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0197.865] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=16720) returned 1 [0197.865] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=16720) returned 1 [0197.865] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x402e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.865] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0197.866] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.866] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a110) returned 1 [0197.867] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0197.867] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.867] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x4150, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x4150, lpOverlapped=0x0) returned 1 [0197.868] CryptEncrypt (in: hKey=0x665ab9a110, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0197.868] CryptEncrypt (in: hKey=0x665ab9a110, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x4150, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x4160) returned 1 [0197.868] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.868] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x4160, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4160, lpOverlapped=0x0) returned 1 [0197.869] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0197.869] CryptExportKey (in: hKey=0x665ab9a110, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0197.869] CryptExportKey (in: hKey=0x665ab9a110, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0197.869] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0197.869] CloseHandle (hObject=0x5cc) returned 1 [0197.895] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0197.900] CryptDestroyKey (hKey=0x665ab9a110) returned 1 [0197.900] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0197.901] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0197.901] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0197.901] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\94D14502-E144-414C-89AE-0998D2709D89", dwFileAttributes=0x80) returned 1 [0197.902] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\94D14502-E144-414C-89AE-0998D2709D89" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\94d14502-e144-414c-89ae-0998d2709d89"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0197.902] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=98312) returned 1 [0197.902] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=98312) returned 1 [0197.902] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x17ee6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.903] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0197.904] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.904] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a500) returned 1 [0197.904] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0197.905] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.905] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x18008, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x18008, lpOverlapped=0x0) returned 1 [0197.908] CryptEncrypt (in: hKey=0x665ab9a500, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0197.908] CryptEncrypt (in: hKey=0x665ab9a500, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x18008, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x18010) returned 1 [0197.909] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.909] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x18010, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x18010, lpOverlapped=0x0) returned 1 [0197.909] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0197.909] CryptExportKey (in: hKey=0x665ab9a500, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0197.909] CryptExportKey (in: hKey=0x665ab9a500, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0197.909] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0197.910] CloseHandle (hObject=0x5cc) returned 1 [0197.958] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0197.963] CryptDestroyKey (hKey=0x665ab9a500) returned 1 [0197.963] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0197.963] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0197.963] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0197.964] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9854EE7B-727A-4189-BCA8-C1A2F7C3ED6D", dwFileAttributes=0x80) returned 1 [0197.965] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9854EE7B-727A-4189-BCA8-C1A2F7C3ED6D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\9854ee7b-727a-4189-bca8-c1a2f7c3ed6d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0197.966] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=8872) returned 1 [0197.966] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=8872) returned 1 [0197.966] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x2186, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.966] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0197.967] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.967] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9aab0) returned 1 [0197.967] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0197.968] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.968] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x22a8, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x22a8, lpOverlapped=0x0) returned 1 [0197.969] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0197.969] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x22a8, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x22b0) returned 1 [0197.969] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.969] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x22b0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x22b0, lpOverlapped=0x0) returned 1 [0197.969] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0197.969] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0197.969] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0197.969] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0197.969] CloseHandle (hObject=0x5cc) returned 1 [0197.990] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0197.994] CryptDestroyKey (hKey=0x665ab9aab0) returned 1 [0197.994] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0197.995] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0197.995] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0197.995] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9B5E72BE-B516-4DBE-8414-EC40CCF98DF5", dwFileAttributes=0x80) returned 1 [0197.996] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9B5E72BE-B516-4DBE-8414-EC40CCF98DF5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\9b5e72be-b516-4dbe-8414-ec40ccf98df5"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0197.996] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=15826) returned 1 [0197.996] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=15826) returned 1 [0197.996] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x3cb0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.996] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0197.998] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.998] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9aab0) returned 1 [0197.998] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0197.998] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.998] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x3dd2, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x3dd2, lpOverlapped=0x0) returned 1 [0197.999] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0197.999] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x3dd2, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x3de0) returned 1 [0197.999] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0197.999] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x3de0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3de0, lpOverlapped=0x0) returned 1 [0197.999] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0197.999] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0197.999] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0197.999] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0198.000] CloseHandle (hObject=0x5cc) returned 1 [0198.018] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0198.022] CryptDestroyKey (hKey=0x665ab9aab0) returned 1 [0198.022] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0198.022] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0198.022] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0198.022] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9CDDC916-A2AC-41E6-B1B9-CA1B9971F195", dwFileAttributes=0x80) returned 1 [0198.024] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9CDDC916-A2AC-41E6-B1B9-CA1B9971F195" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\9cddc916-a2ac-41e6-b1b9-ca1b9971f195"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0198.024] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=54729) returned 1 [0198.024] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=54729) returned 1 [0198.024] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0xd4a7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.024] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0198.025] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.025] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a490) returned 1 [0198.025] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0198.026] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.026] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0xd5c9, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0xd5c9, lpOverlapped=0x0) returned 1 [0198.028] CryptEncrypt (in: hKey=0x665ab9a490, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0198.028] CryptEncrypt (in: hKey=0x665ab9a490, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0xd5c9, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0xd5d0) returned 1 [0198.028] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.028] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0xd5d0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0xd5d0, lpOverlapped=0x0) returned 1 [0198.028] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0198.028] CryptExportKey (in: hKey=0x665ab9a490, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0198.028] CryptExportKey (in: hKey=0x665ab9a490, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0198.028] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0198.028] CloseHandle (hObject=0x5cc) returned 1 [0198.051] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0198.055] CryptDestroyKey (hKey=0x665ab9a490) returned 1 [0198.055] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0198.056] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0198.056] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0198.056] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A20B85A3-C624-401C-946D-7F2C8C9E0EB0", dwFileAttributes=0x80) returned 1 [0198.057] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A20B85A3-C624-401C-946D-7F2C8C9E0EB0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\a20b85a3-c624-401c-946d-7f2c8c9e0eb0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0198.057] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=123030) returned 1 [0198.057] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=123030) returned 1 [0198.058] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x1df74, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.058] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0198.059] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.059] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a6c0) returned 1 [0198.059] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0198.059] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.059] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x1e096, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x1e096, lpOverlapped=0x0) returned 1 [0198.063] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0198.063] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x1e096, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x1e0a0) returned 1 [0198.063] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.063] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x1e0a0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x1e0a0, lpOverlapped=0x0) returned 1 [0198.064] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0198.064] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0198.064] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0198.064] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0198.064] CloseHandle (hObject=0x5cc) returned 1 [0198.100] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0198.105] CryptDestroyKey (hKey=0x665ab9a6c0) returned 1 [0198.105] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0198.106] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0198.106] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0198.106] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A3899EB7-943F-45BF-9B62-7976C872C7D6", dwFileAttributes=0x80) returned 1 [0198.107] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A3899EB7-943F-45BF-9B62-7976C872C7D6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\a3899eb7-943f-45bf-9b62-7976c872c7d6"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0198.107] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=59115) returned 1 [0198.107] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=59115) returned 1 [0198.107] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0xe5c9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.107] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0198.109] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.109] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a110) returned 1 [0198.109] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0198.109] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.109] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0xe6eb, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0xe6eb, lpOverlapped=0x0) returned 1 [0198.112] CryptEncrypt (in: hKey=0x665ab9a110, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0198.112] CryptEncrypt (in: hKey=0x665ab9a110, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0xe6eb, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0xe6f0) returned 1 [0198.112] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.112] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0xe6f0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0xe6f0, lpOverlapped=0x0) returned 1 [0198.112] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0198.112] CryptExportKey (in: hKey=0x665ab9a110, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0198.112] CryptExportKey (in: hKey=0x665ab9a110, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0198.112] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0198.112] CloseHandle (hObject=0x5cc) returned 1 [0198.134] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0198.139] CryptDestroyKey (hKey=0x665ab9a110) returned 1 [0198.139] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0198.139] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0198.139] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0198.140] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A590259A-C20F-4378-9A6C-F9556FC0CBA6", dwFileAttributes=0x80) returned 1 [0198.141] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A590259A-C20F-4378-9A6C-F9556FC0CBA6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\a590259a-c20f-4378-9a6c-f9556fc0cba6"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0198.141] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=6599) returned 1 [0198.141] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=6599) returned 1 [0198.141] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x18a5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.141] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0198.143] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.143] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a0a0) returned 1 [0198.143] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0198.143] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.143] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x19c7, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x19c7, lpOverlapped=0x0) returned 1 [0198.147] CryptEncrypt (in: hKey=0x665ab9a0a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0198.147] CryptEncrypt (in: hKey=0x665ab9a0a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x19c7, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x19d0) returned 1 [0198.147] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.147] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x19d0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x19d0, lpOverlapped=0x0) returned 1 [0198.147] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0198.147] CryptExportKey (in: hKey=0x665ab9a0a0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0198.147] CryptExportKey (in: hKey=0x665ab9a0a0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0198.148] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0198.148] CloseHandle (hObject=0x5cc) returned 1 [0198.186] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0198.191] CryptDestroyKey (hKey=0x665ab9a0a0) returned 1 [0198.191] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0198.191] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0198.191] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0198.192] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A6B97942-B79F-460B-AEB5-87B754D40071", dwFileAttributes=0x80) returned 1 [0198.193] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A6B97942-B79F-460B-AEB5-87B754D40071" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\a6b97942-b79f-460b-aeb5-87b754d40071"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0198.193] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=53333) returned 1 [0198.193] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=53333) returned 1 [0198.193] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0xcf33, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.193] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0198.194] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.195] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a730) returned 1 [0198.195] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0198.195] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.195] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0xd055, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0xd055, lpOverlapped=0x0) returned 1 [0198.197] CryptEncrypt (in: hKey=0x665ab9a730, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0198.197] CryptEncrypt (in: hKey=0x665ab9a730, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0xd055, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0xd060) returned 1 [0198.198] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.198] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0xd060, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0xd060, lpOverlapped=0x0) returned 1 [0198.198] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0198.198] CryptExportKey (in: hKey=0x665ab9a730, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0198.198] CryptExportKey (in: hKey=0x665ab9a730, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0198.198] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0198.198] CloseHandle (hObject=0x5cc) returned 1 [0198.221] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0198.226] CryptDestroyKey (hKey=0x665ab9a730) returned 1 [0198.226] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0198.227] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0198.227] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0198.227] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\AD0C61F1-C301-4A56-8793-549CFDE8A507", dwFileAttributes=0x80) returned 1 [0198.228] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\AD0C61F1-C301-4A56-8793-549CFDE8A507" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\ad0c61f1-c301-4a56-8793-549cfde8a507"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0198.228] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=20492) returned 1 [0198.228] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=20492) returned 1 [0198.228] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x4eea, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.228] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0198.230] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.230] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a880) returned 1 [0198.230] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0198.231] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.231] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x500c, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x500c, lpOverlapped=0x0) returned 1 [0198.232] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0198.232] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x500c, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x5010) returned 1 [0198.232] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.232] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x5010, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x5010, lpOverlapped=0x0) returned 1 [0198.233] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0198.233] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0198.233] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0198.233] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0198.233] CloseHandle (hObject=0x5cc) returned 1 [0198.255] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0198.260] CryptDestroyKey (hKey=0x665ab9a880) returned 1 [0198.260] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0198.260] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0198.260] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0198.261] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\B8FFF45C-0C8F-4785-B42F-24711207C09E", dwFileAttributes=0x80) returned 1 [0198.261] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\B8FFF45C-0C8F-4785-B42F-24711207C09E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\b8fff45c-0c8f-4785-b42f-24711207c09e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0198.262] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=27232) returned 1 [0198.262] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=27232) returned 1 [0198.262] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x693e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.262] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0198.263] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.263] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9af10) returned 1 [0198.264] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0198.264] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.264] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x6a60, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x6a60, lpOverlapped=0x0) returned 1 [0198.265] CryptEncrypt (in: hKey=0x665ab9af10, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0198.266] CryptEncrypt (in: hKey=0x665ab9af10, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x6a60, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x6a70) returned 1 [0198.266] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.266] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x6a70, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x6a70, lpOverlapped=0x0) returned 1 [0198.266] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0198.266] CryptExportKey (in: hKey=0x665ab9af10, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0198.266] CryptExportKey (in: hKey=0x665ab9af10, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0198.266] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0198.266] CloseHandle (hObject=0x5cc) returned 1 [0198.288] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0198.293] CryptDestroyKey (hKey=0x665ab9af10) returned 1 [0198.293] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0198.293] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0198.293] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0198.294] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BA1A7D9C-8B77-4E7D-97E6-EFCC062E7F93", dwFileAttributes=0x80) returned 1 [0198.295] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BA1A7D9C-8B77-4E7D-97E6-EFCC062E7F93" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\ba1a7d9c-8b77-4e7d-97e6-efcc062e7f93"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0198.295] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=172403) returned 1 [0198.295] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=172403) returned 1 [0198.295] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x2a051, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.295] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0198.297] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.297] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9af10) returned 1 [0198.297] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0198.297] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.297] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x2a173, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x2a173, lpOverlapped=0x0) returned 1 [0198.303] CryptEncrypt (in: hKey=0x665ab9af10, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0198.303] CryptEncrypt (in: hKey=0x665ab9af10, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x2a173, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x2a180) returned 1 [0198.303] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.303] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2a180, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x2a180, lpOverlapped=0x0) returned 1 [0198.304] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0198.304] CryptExportKey (in: hKey=0x665ab9af10, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0198.304] CryptExportKey (in: hKey=0x665ab9af10, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0198.304] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0198.304] CloseHandle (hObject=0x5cc) returned 1 [0198.332] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0198.337] CryptDestroyKey (hKey=0x665ab9af10) returned 1 [0198.337] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0198.338] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0198.338] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0198.338] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BAB84B72-0292-47C4-A0B3-39B2FB0A440D", dwFileAttributes=0x80) returned 1 [0198.339] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BAB84B72-0292-47C4-A0B3-39B2FB0A440D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\bab84b72-0292-47c4-a0b3-39b2fb0a440d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0198.340] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=78291) returned 1 [0198.340] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=78291) returned 1 [0198.340] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x130b1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.340] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0198.342] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.342] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9aea0) returned 1 [0198.342] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0198.342] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.343] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x131d3, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x131d3, lpOverlapped=0x0) returned 1 [0198.346] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0198.346] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x131d3, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x131e0) returned 1 [0198.346] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.346] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x131e0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x131e0, lpOverlapped=0x0) returned 1 [0198.347] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0198.347] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0198.347] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0198.347] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0198.347] CloseHandle (hObject=0x5cc) returned 1 [0198.370] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0198.375] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0198.375] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0198.375] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0198.375] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0198.376] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BCBCE985-2A13-4141-A7A2-2395FC5BAD3E", dwFileAttributes=0x80) returned 1 [0198.377] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BCBCE985-2A13-4141-A7A2-2395FC5BAD3E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\bcbce985-2a13-4141-a7a2-2395fc5bad3e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0198.378] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=15081) returned 1 [0198.378] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=15081) returned 1 [0198.378] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x39c7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.378] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0198.379] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.380] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a180) returned 1 [0198.380] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0198.380] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.380] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x3ae9, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x3ae9, lpOverlapped=0x0) returned 1 [0198.381] CryptEncrypt (in: hKey=0x665ab9a180, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0198.381] CryptEncrypt (in: hKey=0x665ab9a180, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x3ae9, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x3af0) returned 1 [0198.381] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.381] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x3af0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3af0, lpOverlapped=0x0) returned 1 [0198.382] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0198.382] CryptExportKey (in: hKey=0x665ab9a180, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0198.382] CryptExportKey (in: hKey=0x665ab9a180, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0198.382] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0198.382] CloseHandle (hObject=0x5cc) returned 1 [0198.405] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0198.411] CryptDestroyKey (hKey=0x665ab9a180) returned 1 [0198.411] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0198.411] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0198.411] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0198.411] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\C8E2BE08-3214-419E-98CF-7DB7BAFDF7AF", dwFileAttributes=0x80) returned 1 [0198.413] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\C8E2BE08-3214-419E-98CF-7DB7BAFDF7AF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\c8e2be08-3214-419e-98cf-7db7bafdf7af"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0198.413] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=21327) returned 1 [0198.413] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=21327) returned 1 [0198.413] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x522d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.413] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0198.415] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.415] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9af10) returned 1 [0198.415] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0198.415] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.415] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x534f, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x534f, lpOverlapped=0x0) returned 1 [0198.417] CryptEncrypt (in: hKey=0x665ab9af10, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0198.417] CryptEncrypt (in: hKey=0x665ab9af10, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x534f, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x5350) returned 1 [0198.417] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.417] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x5350, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x5350, lpOverlapped=0x0) returned 1 [0198.417] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0198.417] CryptExportKey (in: hKey=0x665ab9af10, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0198.417] CryptExportKey (in: hKey=0x665ab9af10, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0198.417] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0198.418] CloseHandle (hObject=0x5cc) returned 1 [0198.440] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0198.445] CryptDestroyKey (hKey=0x665ab9af10) returned 1 [0198.445] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0198.445] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0198.445] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0198.446] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\CA21D7B1-0D7B-41BF-A409-4B77C898A44F", dwFileAttributes=0x80) returned 1 [0198.446] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\CA21D7B1-0D7B-41BF-A409-4B77C898A44F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\ca21d7b1-0d7b-41bf-a409-4b77c898a44f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0198.447] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=6767) returned 1 [0198.447] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=6767) returned 1 [0198.447] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x194d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.447] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0198.449] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.449] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a880) returned 1 [0198.449] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0198.450] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.450] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x1a6f, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x1a6f, lpOverlapped=0x0) returned 1 [0198.451] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0198.451] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x1a6f, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x1a70) returned 1 [0198.451] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.451] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x1a70, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x1a70, lpOverlapped=0x0) returned 1 [0198.451] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0198.451] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0198.451] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0198.451] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0198.451] CloseHandle (hObject=0x5cc) returned 1 [0198.473] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0198.478] CryptDestroyKey (hKey=0x665ab9a880) returned 1 [0198.478] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0198.478] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0198.478] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0198.479] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\CF1CC7BF-A425-4541-8A36-51BFF9F38CBF", dwFileAttributes=0x80) returned 1 [0198.479] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\CF1CC7BF-A425-4541-8A36-51BFF9F38CBF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\cf1cc7bf-a425-4541-8a36-51bff9f38cbf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0198.480] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=2129) returned 1 [0198.480] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=2129) returned 1 [0198.480] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x72f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.480] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0198.481] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.481] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9aea0) returned 1 [0198.481] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0198.481] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.481] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x851, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x851, lpOverlapped=0x0) returned 1 [0198.482] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0198.482] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x851, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x860) returned 1 [0198.482] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.482] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x860, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x860, lpOverlapped=0x0) returned 1 [0198.482] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0198.482] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0198.482] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0198.482] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0198.482] CloseHandle (hObject=0x5cc) returned 1 [0198.500] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0198.504] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0198.504] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0198.504] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0198.505] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0198.505] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D377C338-B3B0-4E63-9CD5-EE0A4AFF13CD", dwFileAttributes=0x80) returned 1 [0198.506] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D377C338-B3B0-4E63-9CD5-EE0A4AFF13CD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\d377c338-b3b0-4e63-9cd5-ee0a4aff13cd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0198.506] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=8800) returned 1 [0198.506] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=8800) returned 1 [0198.506] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x213e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.506] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0198.508] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.508] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9aab0) returned 1 [0198.508] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0198.508] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.508] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x2260, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x2260, lpOverlapped=0x0) returned 1 [0198.509] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0198.509] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x2260, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x2270) returned 1 [0198.509] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.509] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2270, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x2270, lpOverlapped=0x0) returned 1 [0198.509] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0198.509] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0198.509] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0198.510] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0198.510] CloseHandle (hObject=0x5cc) returned 1 [0198.528] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0198.532] CryptDestroyKey (hKey=0x665ab9aab0) returned 1 [0198.532] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0198.533] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0198.533] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0198.533] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D99D1198-2688-447D-9BF2-F9F9C1375AFD", dwFileAttributes=0x80) returned 1 [0198.534] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D99D1198-2688-447D-9BF2-F9F9C1375AFD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\d99d1198-2688-447d-9bf2-f9f9c1375afd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0198.534] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=36413) returned 1 [0198.534] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=36413) returned 1 [0198.534] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x8d1b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.534] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0198.537] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.537] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a180) returned 1 [0198.537] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0198.538] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.538] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x8e3d, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x8e3d, lpOverlapped=0x0) returned 1 [0198.539] CryptEncrypt (in: hKey=0x665ab9a180, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0198.539] CryptEncrypt (in: hKey=0x665ab9a180, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x8e3d, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x8e40) returned 1 [0198.539] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.539] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x8e40, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x8e40, lpOverlapped=0x0) returned 1 [0198.539] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0198.539] CryptExportKey (in: hKey=0x665ab9a180, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0198.539] CryptExportKey (in: hKey=0x665ab9a180, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0198.539] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0198.540] CloseHandle (hObject=0x5cc) returned 1 [0198.558] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0198.563] CryptDestroyKey (hKey=0x665ab9a180) returned 1 [0198.563] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0198.563] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0198.563] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0198.563] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D9C1BAAC-9EDD-4EBD-BD8A-5B53E9904C13", dwFileAttributes=0x80) returned 1 [0198.564] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D9C1BAAC-9EDD-4EBD-BD8A-5B53E9904C13" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\d9c1baac-9edd-4ebd-bd8a-5b53e9904c13"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0198.564] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=43220) returned 1 [0198.564] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=43220) returned 1 [0198.564] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0xa7b2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.565] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0198.566] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.566] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9aea0) returned 1 [0198.566] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0198.566] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.566] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0xa8d4, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0xa8d4, lpOverlapped=0x0) returned 1 [0198.568] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0198.568] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0xa8d4, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0xa8e0) returned 1 [0198.568] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.568] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0xa8e0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0xa8e0, lpOverlapped=0x0) returned 1 [0198.568] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0198.568] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0198.568] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0198.569] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0198.569] CloseHandle (hObject=0x5cc) returned 1 [0198.587] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0198.591] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0198.591] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0198.592] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0198.592] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0198.592] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E00BE78D-CFF7-47B9-8E8C-37ADF516B28A", dwFileAttributes=0x80) returned 1 [0198.593] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E00BE78D-CFF7-47B9-8E8C-37ADF516B28A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\e00be78d-cff7-47b9-8e8c-37adf516b28a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0198.593] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=20148) returned 1 [0198.593] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=20148) returned 1 [0198.593] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x4d92, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.593] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0198.595] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.595] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a880) returned 1 [0198.595] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0198.596] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.596] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x4eb4, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x4eb4, lpOverlapped=0x0) returned 1 [0198.598] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0198.598] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x4eb4, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x4ec0) returned 1 [0198.598] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.598] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x4ec0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4ec0, lpOverlapped=0x0) returned 1 [0198.598] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0198.598] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0198.598] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0198.598] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0198.598] CloseHandle (hObject=0x5cc) returned 1 [0198.627] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0198.632] CryptDestroyKey (hKey=0x665ab9a880) returned 1 [0198.632] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0198.632] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0198.632] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0198.633] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E164F0A7-B014-475B-BC5C-1C1285127D5A", dwFileAttributes=0x80) returned 1 [0198.634] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E164F0A7-B014-475B-BC5C-1C1285127D5A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\e164f0a7-b014-475b-bc5c-1c1285127d5a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0198.634] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=21649) returned 1 [0198.634] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=21649) returned 1 [0198.634] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x536f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.634] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0198.636] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.636] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9aab0) returned 1 [0198.636] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0198.636] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.636] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x5491, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x5491, lpOverlapped=0x0) returned 1 [0198.638] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0198.638] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x5491, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x54a0) returned 1 [0198.638] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.638] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x54a0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x54a0, lpOverlapped=0x0) returned 1 [0198.638] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0198.638] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0198.638] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0198.638] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0198.639] CloseHandle (hObject=0x5cc) returned 1 [0198.662] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0198.668] CryptDestroyKey (hKey=0x665ab9aab0) returned 1 [0198.668] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0198.669] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0198.669] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0198.669] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E277E429-138B-4461-B716-C03D493C22D0", dwFileAttributes=0x80) returned 1 [0198.670] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E277E429-138B-4461-B716-C03D493C22D0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\e277e429-138b-4461-b716-c03d493c22d0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0198.670] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=19805) returned 1 [0198.670] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=19805) returned 1 [0198.671] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x4c3b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.671] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0198.672] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.672] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a110) returned 1 [0198.672] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0198.673] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.673] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x4d5d, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x4d5d, lpOverlapped=0x0) returned 1 [0198.674] CryptEncrypt (in: hKey=0x665ab9a110, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0198.674] CryptEncrypt (in: hKey=0x665ab9a110, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x4d5d, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x4d60) returned 1 [0198.674] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.674] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x4d60, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4d60, lpOverlapped=0x0) returned 1 [0198.674] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0198.674] CryptExportKey (in: hKey=0x665ab9a110, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0198.675] CryptExportKey (in: hKey=0x665ab9a110, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0198.675] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0198.675] CloseHandle (hObject=0x5cc) returned 1 [0198.699] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0198.705] CryptDestroyKey (hKey=0x665ab9a110) returned 1 [0198.705] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0198.705] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0198.705] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0198.706] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E4FDC49F-730A-46D4-9B3E-AE4CD4D8873A", dwFileAttributes=0x80) returned 1 [0198.706] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E4FDC49F-730A-46D4-9B3E-AE4CD4D8873A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\e4fdc49f-730a-46d4-9b3e-ae4cd4d8873a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0198.707] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=11510) returned 1 [0198.707] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=11510) returned 1 [0198.707] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x2bd4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.707] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0198.709] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.709] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9aea0) returned 1 [0198.709] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0198.709] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.709] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x2cf6, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x2cf6, lpOverlapped=0x0) returned 1 [0198.710] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0198.710] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x2cf6, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x2d00) returned 1 [0198.710] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.710] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2d00, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x2d00, lpOverlapped=0x0) returned 1 [0198.710] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0198.711] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0198.711] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0198.711] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0198.711] CloseHandle (hObject=0x5cc) returned 1 [0198.735] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0198.740] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0198.740] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0198.741] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0198.741] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0198.741] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F1AC218A-8D02-402C-876E-4B0E2A662BFA", dwFileAttributes=0x80) returned 1 [0198.742] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F1AC218A-8D02-402C-876E-4B0E2A662BFA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\f1ac218a-8d02-402c-876e-4b0e2a662bfa"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0198.742] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=21198) returned 1 [0198.743] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=21198) returned 1 [0198.743] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x51ac, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.743] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0198.744] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.744] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9aea0) returned 1 [0198.744] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0198.745] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.745] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x52ce, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x52ce, lpOverlapped=0x0) returned 1 [0198.747] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0198.747] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x52ce, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x52d0) returned 1 [0198.747] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.747] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x52d0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x52d0, lpOverlapped=0x0) returned 1 [0198.747] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0198.747] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0198.747] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0198.747] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0198.747] CloseHandle (hObject=0x5cc) returned 1 [0198.771] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0198.777] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0198.777] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0198.777] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0198.778] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0198.778] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F442332F-BE2E-45C6-B52A-9FA2F82F4F72", dwFileAttributes=0x80) returned 1 [0198.780] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F442332F-BE2E-45C6-B52A-9FA2F82F4F72" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\f442332f-be2e-45c6-b52a-9fa2f82f4f72"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0198.780] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=20213) returned 1 [0198.780] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=20213) returned 1 [0198.780] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x4dd3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.780] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0198.782] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.782] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9ab20) returned 1 [0198.782] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0198.783] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.783] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x4ef5, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x4ef5, lpOverlapped=0x0) returned 1 [0198.784] CryptEncrypt (in: hKey=0x665ab9ab20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0198.784] CryptEncrypt (in: hKey=0x665ab9ab20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x4ef5, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x4f00) returned 1 [0198.784] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.784] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x4f00, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4f00, lpOverlapped=0x0) returned 1 [0198.785] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0198.785] CryptExportKey (in: hKey=0x665ab9ab20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0198.785] CryptExportKey (in: hKey=0x665ab9ab20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0198.785] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0198.785] CloseHandle (hObject=0x5cc) returned 1 [0198.809] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0198.814] CryptDestroyKey (hKey=0x665ab9ab20) returned 1 [0198.814] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0198.815] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0198.815] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0198.815] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F85AB5DD-848A-4CA1-A9F0-ECCF7052094F", dwFileAttributes=0x80) returned 1 [0198.816] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F85AB5DD-848A-4CA1-A9F0-ECCF7052094F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\f85ab5dd-848a-4ca1-a9f0-eccf7052094f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0198.817] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=30582) returned 1 [0198.817] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=30582) returned 1 [0198.817] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x7654, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.817] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0198.826] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.826] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9af10) returned 1 [0198.826] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0198.827] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.827] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x7776, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x7776, lpOverlapped=0x0) returned 1 [0198.828] CryptEncrypt (in: hKey=0x665ab9af10, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0198.828] CryptEncrypt (in: hKey=0x665ab9af10, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x7776, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x7780) returned 1 [0198.828] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.828] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x7780, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x7780, lpOverlapped=0x0) returned 1 [0198.834] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0198.834] CryptExportKey (in: hKey=0x665ab9af10, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0198.834] CryptExportKey (in: hKey=0x665ab9af10, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0198.834] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0198.834] CloseHandle (hObject=0x5cc) returned 1 [0198.853] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0198.865] CryptDestroyKey (hKey=0x665ab9af10) returned 1 [0198.865] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0198.866] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0198.866] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0198.866] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\FA975BDF-A96C-4D1C-A93C-60FD5D97AC90", dwFileAttributes=0x80) returned 1 [0198.867] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\FA975BDF-A96C-4D1C-A93C-60FD5D97AC90" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\fa975bdf-a96c-4d1c-a93c-60fd5d97ac90"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0198.867] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=43308) returned 1 [0198.867] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=43308) returned 1 [0198.867] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0xa80a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.867] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0198.868] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.868] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a340) returned 1 [0198.868] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0198.869] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.869] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0xa92c, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0xa92c, lpOverlapped=0x0) returned 1 [0198.871] CryptEncrypt (in: hKey=0x665ab9a340, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0198.871] CryptEncrypt (in: hKey=0x665ab9a340, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0xa92c, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0xa930) returned 1 [0198.871] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.871] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0xa930, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0xa930, lpOverlapped=0x0) returned 1 [0198.871] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0198.871] CryptExportKey (in: hKey=0x665ab9a340, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0198.871] CryptExportKey (in: hKey=0x665ab9a340, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0198.871] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0198.871] CloseHandle (hObject=0x5cc) returned 1 [0198.891] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0198.896] CryptDestroyKey (hKey=0x665ab9a340) returned 1 [0198.896] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0198.896] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0 [0198.897] FindClose (in: hFindFile=0x665d90cc80 | out: hFindFile=0x665d90cc80) returned 1 [0198.897] SetLastError (dwErrCode=0x0) [0198.897] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0198.898] GetLastError () returned 0x0 [0198.898] WriteFile (in: hFile=0x440, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7a5d0*=0x324, lpOverlapped=0x0) returned 1 [0198.899] CloseHandle (hObject=0x440) returned 1 [0198.899] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0198.899] SetLastError (dwErrCode=0x0) [0198.899] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0198.900] GetLastError () returned 0xb7 [0198.900] CloseHandle (hObject=0x440) returned 1 [0198.900] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\*.*", lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0x665d90d2e0 [0198.903] FindNextFileW (in: hFindFile=0x665d90d2e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0198.903] FindNextFileW (in: hFindFile=0x665d90d2e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0198.903] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0198.903] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\03E95D48-EBA7-4D0E-895B-1582FC40EC0D", dwFileAttributes=0x80) returned 1 [0198.908] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\03E95D48-EBA7-4D0E-895B-1582FC40EC0D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\officeclient.microsoft.com\\03e95d48-eba7-4d0e-895b-1582fc40ec0d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0198.909] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=65389) returned 1 [0198.909] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=65389) returned 1 [0198.909] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0xfe4b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.909] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0198.910] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.910] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a6c0) returned 1 [0198.910] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0198.911] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.911] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0xff6d, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0xff6d, lpOverlapped=0x0) returned 1 [0198.913] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0198.913] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0xff6d, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0xff70) returned 1 [0198.913] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.913] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0xff70, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0xff70, lpOverlapped=0x0) returned 1 [0198.913] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0198.913] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0198.913] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0198.914] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0198.914] CloseHandle (hObject=0x5cc) returned 1 [0198.938] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0198.942] CryptDestroyKey (hKey=0x665ab9a6c0) returned 1 [0198.942] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0198.943] FindNextFileW (in: hFindFile=0x665d90d2e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0198.943] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0198.943] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\82BD62FD-974C-42F4-866A-5C738238984B", dwFileAttributes=0x80) returned 1 [0198.944] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\82BD62FD-974C-42F4-866A-5C738238984B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\officeclient.microsoft.com\\82bd62fd-974c-42f4-866a-5c738238984b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0198.944] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=64197) returned 1 [0198.944] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=64197) returned 1 [0198.944] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0xf9a3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.944] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0198.945] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.945] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a880) returned 1 [0198.945] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0198.946] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.946] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0xfac5, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0xfac5, lpOverlapped=0x0) returned 1 [0198.948] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0198.948] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0xfac5, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0xfad0) returned 1 [0198.949] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0198.949] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0xfad0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0xfad0, lpOverlapped=0x0) returned 1 [0198.949] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0198.949] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0198.949] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0198.949] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0198.949] CloseHandle (hObject=0x5cc) returned 1 [0199.003] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0199.008] CryptDestroyKey (hKey=0x665ab9a880) returned 1 [0199.008] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0199.008] FindNextFileW (in: hFindFile=0x665d90d2e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0199.008] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0199.008] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\8BD876A5-9C43-4F45-9565-3FAF3AC71A0B", dwFileAttributes=0x80) returned 1 [0199.009] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\8BD876A5-9C43-4F45-9565-3FAF3AC71A0B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\officeclient.microsoft.com\\8bd876a5-9c43-4f45-9565-3faf3ac71a0b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0199.010] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=65547) returned 1 [0199.010] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=65547) returned 1 [0199.010] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0xfee9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.010] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0199.011] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.011] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a6c0) returned 1 [0199.011] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0199.012] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.012] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x1000b, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x1000b, lpOverlapped=0x0) returned 1 [0199.017] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0199.017] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x1000b, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x10010) returned 1 [0199.018] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.018] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x10010, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x10010, lpOverlapped=0x0) returned 1 [0199.018] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0199.018] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0199.018] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0199.018] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0199.018] CloseHandle (hObject=0x5cc) returned 1 [0199.039] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0199.044] CryptDestroyKey (hKey=0x665ab9a6c0) returned 1 [0199.045] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0199.045] FindNextFileW (in: hFindFile=0x665d90d2e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0199.045] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0199.045] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\9097A298-E9C2-4AFF-8C46-428E8A30E31C", dwFileAttributes=0x80) returned 1 [0199.047] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\9097A298-E9C2-4AFF-8C46-428E8A30E31C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\officeclient.microsoft.com\\9097a298-e9c2-4aff-8c46-428e8a30e31c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0199.047] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=65547) returned 1 [0199.047] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=65547) returned 1 [0199.047] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0xfee9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.047] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0199.048] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.048] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a1f0) returned 1 [0199.049] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0199.049] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.049] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x1000b, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x1000b, lpOverlapped=0x0) returned 1 [0199.053] CryptEncrypt (in: hKey=0x665ab9a1f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0199.053] CryptEncrypt (in: hKey=0x665ab9a1f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x1000b, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x10010) returned 1 [0199.053] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.053] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x10010, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x10010, lpOverlapped=0x0) returned 1 [0199.053] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0199.053] CryptExportKey (in: hKey=0x665ab9a1f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0199.053] CryptExportKey (in: hKey=0x665ab9a1f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0199.054] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0199.054] CloseHandle (hObject=0x5cc) returned 1 [0199.076] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0199.081] CryptDestroyKey (hKey=0x665ab9a1f0) returned 1 [0199.081] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0199.082] FindNextFileW (in: hFindFile=0x665d90d2e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0199.082] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0199.082] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\C246F9AB-D3D8-41D6-AD9F-FDA8F3368F67", dwFileAttributes=0x80) returned 1 [0199.084] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\C246F9AB-D3D8-41D6-AD9F-FDA8F3368F67" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\officeclient.microsoft.com\\c246f9ab-d3d8-41d6-ad9f-fda8f3368f67"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0199.085] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=73138) returned 1 [0199.085] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=73138) returned 1 [0199.085] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x11c90, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.085] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0199.086] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.086] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9af10) returned 1 [0199.086] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0199.087] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.087] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x11db2, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x11db2, lpOverlapped=0x0) returned 1 [0199.090] CryptEncrypt (in: hKey=0x665ab9af10, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0199.090] CryptEncrypt (in: hKey=0x665ab9af10, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x11db2, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x11dc0) returned 1 [0199.090] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.090] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x11dc0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x11dc0, lpOverlapped=0x0) returned 1 [0199.091] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0199.091] CryptExportKey (in: hKey=0x665ab9af10, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0199.091] CryptExportKey (in: hKey=0x665ab9af10, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0199.091] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0199.091] CloseHandle (hObject=0x5cc) returned 1 [0199.113] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0199.117] CryptDestroyKey (hKey=0x665ab9af10) returned 1 [0199.117] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0199.118] FindNextFileW (in: hFindFile=0x665d90d2e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0 [0199.118] FindClose (in: hFindFile=0x665d90d2e0 | out: hFindFile=0x665d90d2e0) returned 1 [0199.118] SetLastError (dwErrCode=0x0) [0199.118] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\officeclient.microsoft.com\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0199.118] GetLastError () returned 0x0 [0199.118] WriteFile (in: hFile=0x440, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7a5d0*=0x324, lpOverlapped=0x0) returned 1 [0199.120] CloseHandle (hObject=0x440) returned 1 [0199.120] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0199.120] FindClose (in: hFindFile=0x665d90bd20 | out: hFindFile=0x665d90bd20) returned 1 [0199.121] SetLastError (dwErrCode=0x0) [0199.121] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0199.121] GetLastError () returned 0xb7 [0199.121] CloseHandle (hObject=0x654) returned 1 [0199.121] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0199.121] FindClose (in: hFindFile=0x665d90c260 | out: hFindFile=0x665d90c260) returned 1 [0199.121] SetLastError (dwErrCode=0x0) [0199.121] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0199.122] GetLastError () returned 0xb7 [0199.122] CloseHandle (hObject=0x3e8) returned 1 [0199.122] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.122] SetLastError (dwErrCode=0x0) [0199.122] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0199.122] GetLastError () returned 0xb7 [0199.122] CloseHandle (hObject=0x3e8) returned 1 [0199.122] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\Wef\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c5c0 [0199.125] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0199.125] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0199.125] SetLastError (dwErrCode=0x0) [0199.125] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\Wef\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\wef\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0199.126] GetLastError () returned 0x0 [0199.126] WriteFile (in: hFile=0x654, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7ad80*=0x324, lpOverlapped=0x0) returned 1 [0199.127] CloseHandle (hObject=0x654) returned 1 [0199.127] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\Wef\\AppCommands\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665d90cb60 [0199.128] FindNextFileW (in: hFindFile=0x665d90cb60, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0199.128] FindNextFileW (in: hFindFile=0x665d90cb60, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0199.129] FindClose (in: hFindFile=0x665d90cb60 | out: hFindFile=0x665d90cb60) returned 1 [0199.129] SetLastError (dwErrCode=0x0) [0199.129] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\Wef\\AppCommands\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\wef\\appcommands\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0199.129] GetLastError () returned 0x0 [0199.129] WriteFile (in: hFile=0x654, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7ad80*=0x324, lpOverlapped=0x0) returned 1 [0199.130] CloseHandle (hObject=0x654) returned 1 [0199.130] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0199.131] FindClose (in: hFindFile=0x665d90c5c0 | out: hFindFile=0x665d90c5c0) returned 1 [0199.131] SetLastError (dwErrCode=0x0) [0199.131] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\Wef\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\wef\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0199.131] GetLastError () returned 0xb7 [0199.131] CloseHandle (hObject=0x3e8) returned 1 [0199.131] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.131] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.131] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0199.131] FindClose (in: hFindFile=0x665d90d280 | out: hFindFile=0x665d90d280) returned 1 [0199.131] SetLastError (dwErrCode=0x0) [0199.131] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0199.132] GetLastError () returned 0xb7 [0199.132] CloseHandle (hObject=0x620) returned 1 [0199.132] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0199.132] SetLastError (dwErrCode=0x0) [0199.132] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0199.132] GetLastError () returned 0xb7 [0199.132] CloseHandle (hObject=0x620) returned 1 [0199.132] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\OTele\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d0a0 [0199.133] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.133] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0199.133] FindClose (in: hFindFile=0x665d90d0a0 | out: hFindFile=0x665d90d0a0) returned 1 [0199.133] SetLastError (dwErrCode=0x0) [0199.133] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\OTele\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\otele\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0199.134] GetLastError () returned 0x0 [0199.134] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0199.136] CloseHandle (hObject=0x620) returned 1 [0199.136] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0199.136] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0199.136] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\PowerP16.customUI", dwFileAttributes=0x80) returned 1 [0199.138] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\PowerP16.customUI" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\powerp16.customui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0199.138] GetFileSizeEx (in: hFile=0x620, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=3524) returned 1 [0199.138] GetFileSizeEx (in: hFile=0x620, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=3524) returned 1 [0199.138] SetFilePointerEx (in: hFile=0x620, liDistanceToMove=0xca2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.138] ReadFile (in: hFile=0x620, lpBuffer=0x665da7bb38, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7baf8, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb38*, lpNumberOfBytesRead=0x665da7baf8*=0x19, lpOverlapped=0x0) returned 1 [0199.140] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.140] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7bac0 | out: phKey=0x665da7bac0*=0x665ab9a500) returned 1 [0199.140] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0199.140] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.140] ReadFile (in: hFile=0x620, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0xdc4, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7bad0*=0xdc4, lpOverlapped=0x0) returned 1 [0199.140] CryptEncrypt (in: hKey=0x665ab9a500, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4250) returned 1 [0199.140] CryptEncrypt (in: hKey=0x665ab9a500, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7bac8*=0xdc4, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7bac8*=0xdd0) returned 1 [0199.140] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.141] WriteFile (in: hFile=0x620, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0xdd0, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7bad0*=0xdd0, lpOverlapped=0x0) returned 1 [0199.141] WriteFile (in: hFile=0x620, lpBuffer=0x665da7bb10*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb10*, lpNumberOfBytesWritten=0x665da7bad4*=0x6, lpOverlapped=0x0) returned 1 [0199.141] CryptExportKey (in: hKey=0x665ab9a500, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7bae0 | out: pbData=0x0*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0199.141] CryptExportKey (in: hKey=0x665ab9a500, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7bb60, pdwDataLen=0x665da7bae0 | out: pbData=0x665da7bb60*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0199.141] WriteFile (in: hFile=0x620, lpBuffer=0x665da7bb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb60*, lpNumberOfBytesWritten=0x665da7bad4*=0x10c, lpOverlapped=0x0) returned 1 [0199.141] CloseHandle (hObject=0x620) returned 1 [0199.174] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0199.180] CryptDestroyKey (hKey=0x665ab9a500) returned 1 [0199.180] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0199.180] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0199.180] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0199.180] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\Word16.customUI", dwFileAttributes=0x80) returned 1 [0199.181] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\Word16.customUI" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\word16.customui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0199.181] GetFileSizeEx (in: hFile=0x620, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=3514) returned 1 [0199.182] GetFileSizeEx (in: hFile=0x620, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=3514) returned 1 [0199.182] SetFilePointerEx (in: hFile=0x620, liDistanceToMove=0xc98, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.182] ReadFile (in: hFile=0x620, lpBuffer=0x665da7bb38, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7baf8, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb38*, lpNumberOfBytesRead=0x665da7baf8*=0x19, lpOverlapped=0x0) returned 1 [0199.183] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.183] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7bac0 | out: phKey=0x665da7bac0*=0x665ab9a880) returned 1 [0199.183] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0199.184] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.184] ReadFile (in: hFile=0x620, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0xdba, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7bad0*=0xdba, lpOverlapped=0x0) returned 1 [0199.184] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4250) returned 1 [0199.184] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7bac8*=0xdba, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7bac8*=0xdc0) returned 1 [0199.184] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.184] WriteFile (in: hFile=0x620, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0xdc0, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7bad0*=0xdc0, lpOverlapped=0x0) returned 1 [0199.184] WriteFile (in: hFile=0x620, lpBuffer=0x665da7bb10*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb10*, lpNumberOfBytesWritten=0x665da7bad4*=0x6, lpOverlapped=0x0) returned 1 [0199.184] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7bae0 | out: pbData=0x0*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0199.185] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7bb60, pdwDataLen=0x665da7bae0 | out: pbData=0x665da7bb60*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0199.185] WriteFile (in: hFile=0x620, lpBuffer=0x665da7bb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb60*, lpNumberOfBytesWritten=0x665da7bad4*=0x10c, lpOverlapped=0x0) returned 1 [0199.185] CloseHandle (hObject=0x620) returned 1 [0199.207] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0199.211] CryptDestroyKey (hKey=0x665ab9a880) returned 1 [0199.211] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0199.211] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0199.211] FindClose (in: hFindFile=0x665d90c500 | out: hFindFile=0x665d90c500) returned 1 [0199.211] SetLastError (dwErrCode=0x0) [0199.211] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0199.212] GetLastError () returned 0xb7 [0199.212] CloseHandle (hObject=0x60c) returned 1 [0199.212] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0199.212] SetLastError (dwErrCode=0x0) [0199.212] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0199.212] GetLastError () returned 0xb7 [0199.212] CloseHandle (hObject=0x60c) returned 1 [0199.212] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c500 [0199.214] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0199.214] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0199.214] SetLastError (dwErrCode=0x0) [0199.214] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0199.215] GetLastError () returned 0x0 [0199.215] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0199.216] CloseHandle (hObject=0x620) returned 1 [0199.216] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c620 [0199.219] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.219] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.219] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0199.219] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayLogo.png", dwFileAttributes=0x80) returned 1 [0199.220] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayLogo.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\autoplaylogo.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0199.220] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=4668) returned 1 [0199.220] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=4668) returned 1 [0199.220] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x111a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.220] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0199.221] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.222] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9a880) returned 1 [0199.222] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0199.222] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.222] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x123c, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0x123c, lpOverlapped=0x0) returned 1 [0199.223] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0199.223] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x123c, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x1240) returned 1 [0199.223] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.223] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x1240, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0x1240, lpOverlapped=0x0) returned 1 [0199.223] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0199.223] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0199.223] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0199.223] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0199.224] CloseHandle (hObject=0x3e8) returned 1 [0199.246] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0199.252] CryptDestroyKey (hKey=0x665ab9a880) returned 1 [0199.252] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0199.252] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.252] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0199.252] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.gif", dwFileAttributes=0x80) returned 1 [0199.255] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\autoplayoptin.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0199.256] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=383222) returned 1 [0199.256] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=383222) returned 1 [0199.256] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x5d7d4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.256] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0199.257] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.257] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9a490) returned 1 [0199.257] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0199.258] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.258] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x5d8f6, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0x5d8f6, lpOverlapped=0x0) returned 1 [0199.272] CryptEncrypt (in: hKey=0x665ab9a490, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0199.272] CryptEncrypt (in: hKey=0x665ab9a490, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x5d8f6, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x5d900) returned 1 [0199.273] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.273] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x5d900, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0x5d900, lpOverlapped=0x0) returned 1 [0199.274] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0199.274] CryptExportKey (in: hKey=0x665ab9a490, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0199.274] CryptExportKey (in: hKey=0x665ab9a490, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0199.274] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0199.274] CloseHandle (hObject=0x3e8) returned 1 [0199.294] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0199.300] CryptDestroyKey (hKey=0x665ab9a490) returned 1 [0199.300] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0199.300] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.300] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0199.301] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.png", dwFileAttributes=0x80) returned 1 [0199.302] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\autoplayoptin.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0199.302] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=10226) returned 1 [0199.302] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=10226) returned 1 [0199.302] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x26d0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.302] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0199.304] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.304] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9af10) returned 1 [0199.304] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0199.304] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.304] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x27f2, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0x27f2, lpOverlapped=0x0) returned 1 [0199.305] CryptEncrypt (in: hKey=0x665ab9af10, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0199.305] CryptEncrypt (in: hKey=0x665ab9af10, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x27f2, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2800) returned 1 [0199.305] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.306] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0x2800, lpOverlapped=0x0) returned 1 [0199.306] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0199.306] CryptExportKey (in: hKey=0x665ab9af10, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0199.306] CryptExportKey (in: hKey=0x665ab9af10, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0199.306] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0199.306] CloseHandle (hObject=0x3e8) returned 1 [0199.330] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0199.335] CryptDestroyKey (hKey=0x665ab9af10) returned 1 [0199.335] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0199.336] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.336] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0199.336] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\CollectOneDriveLogs.bat", dwFileAttributes=0x80) returned 1 [0199.338] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\CollectOneDriveLogs.bat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\collectonedrivelogs.bat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0199.338] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=5850) returned 1 [0199.338] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=5850) returned 1 [0199.338] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x15b8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.338] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0199.340] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.340] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9a880) returned 1 [0199.340] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0199.340] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.340] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x16da, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0x16da, lpOverlapped=0x0) returned 1 [0199.341] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0199.341] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x16da, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x16e0) returned 1 [0199.341] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.341] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x16e0, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0x16e0, lpOverlapped=0x0) returned 1 [0199.341] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0199.341] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0199.341] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0199.341] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0199.341] CloseHandle (hObject=0x3e8) returned 1 [0199.363] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0199.369] CryptDestroyKey (hKey=0x665ab9a880) returned 1 [0199.369] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0199.369] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.369] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.369] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0199.369] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ExclusionList.xml", dwFileAttributes=0x80) returned 1 [0199.371] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ExclusionList.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\exclusionlist.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0199.371] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=20063) returned 1 [0199.372] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=20063) returned 1 [0199.372] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x4d3d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.372] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0199.373] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.373] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9aab0) returned 1 [0199.373] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0199.374] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.374] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x4e5f, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0x4e5f, lpOverlapped=0x0) returned 1 [0199.375] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0199.375] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x4e5f, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x4e60) returned 1 [0199.375] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.375] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x4e60, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0x4e60, lpOverlapped=0x0) returned 1 [0199.375] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0199.375] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0199.376] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0199.376] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0199.376] CloseHandle (hObject=0x3e8) returned 1 [0199.396] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0199.400] CryptDestroyKey (hKey=0x665ab9aab0) returned 1 [0199.400] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0199.401] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.401] SetLastError (dwErrCode=0x0) [0199.401] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0199.402] GetLastError () returned 0x0 [0199.402] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0199.403] CloseHandle (hObject=0x3e8) returned 1 [0199.403] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\is\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c320 [0199.404] FindNextFileW (in: hFindFile=0x665d90c320, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0199.404] FindNextFileW (in: hFindFile=0x665d90c320, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0199.404] FindNextFileW (in: hFindFile=0x665d90c320, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0199.404] FindClose (in: hFindFile=0x665d90c320 | out: hFindFile=0x665d90c320) returned 1 [0199.404] SetLastError (dwErrCode=0x0) [0199.404] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\is\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\is\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0199.404] GetLastError () returned 0x0 [0199.404] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0199.405] CloseHandle (hObject=0x3e8) returned 1 [0199.405] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.405] SetLastError (dwErrCode=0x0) [0199.405] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0199.405] GetLastError () returned 0xb7 [0199.406] CloseHandle (hObject=0x3e8) returned 1 [0199.406] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\it\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c6e0 [0199.406] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0199.406] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0199.406] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0199.406] FindClose (in: hFindFile=0x665d90c6e0 | out: hFindFile=0x665d90c6e0) returned 1 [0199.407] SetLastError (dwErrCode=0x0) [0199.407] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\it\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\it\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0199.407] GetLastError () returned 0x0 [0199.408] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0199.408] CloseHandle (hObject=0x3e8) returned 1 [0199.408] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.409] SetLastError (dwErrCode=0x0) [0199.409] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0199.409] GetLastError () returned 0xb7 [0199.409] CloseHandle (hObject=0x3e8) returned 1 [0199.409] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ja\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90ce60 [0199.409] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0199.409] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0199.409] FindClose (in: hFindFile=0x665d90ce60 | out: hFindFile=0x665d90ce60) returned 1 [0199.409] SetLastError (dwErrCode=0x0) [0199.409] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ja\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\ja\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0199.410] GetLastError () returned 0x0 [0199.410] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0199.410] CloseHandle (hObject=0x3e8) returned 1 [0199.411] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0199.411] FindClose (in: hFindFile=0x665d90c620 | out: hFindFile=0x665d90c620) returned 1 [0199.411] SetLastError (dwErrCode=0x0) [0199.411] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0199.411] GetLastError () returned 0xb7 [0199.411] CloseHandle (hObject=0x620) returned 1 [0199.411] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0199.411] SetLastError (dwErrCode=0x0) [0199.411] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0199.411] GetLastError () returned 0xb7 [0199.411] CloseHandle (hObject=0x620) returned 1 [0199.412] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c0e0 [0199.413] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.414] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.414] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0199.414] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayLogo.png", dwFileAttributes=0x80) returned 1 [0199.415] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayLogo.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\autoplaylogo.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0199.415] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=4668) returned 1 [0199.415] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=4668) returned 1 [0199.416] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x111a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.416] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0199.417] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.417] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9a0a0) returned 1 [0199.417] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0199.418] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.418] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x123c, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0x123c, lpOverlapped=0x0) returned 1 [0199.418] CryptEncrypt (in: hKey=0x665ab9a0a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0199.418] CryptEncrypt (in: hKey=0x665ab9a0a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x123c, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x1240) returned 1 [0199.418] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.418] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x1240, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0x1240, lpOverlapped=0x0) returned 1 [0199.419] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0199.419] CryptExportKey (in: hKey=0x665ab9a0a0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0199.419] CryptExportKey (in: hKey=0x665ab9a0a0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0199.419] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0199.419] CloseHandle (hObject=0x3e8) returned 1 [0199.437] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0199.441] CryptDestroyKey (hKey=0x665ab9a0a0) returned 1 [0199.441] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0199.441] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.441] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0199.441] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.gif", dwFileAttributes=0x80) returned 1 [0199.443] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\autoplayoptin.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0199.443] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=383222) returned 1 [0199.443] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=383222) returned 1 [0199.443] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x5d7d4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.443] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0199.444] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.444] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9a6c0) returned 1 [0199.444] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0199.445] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.445] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x5d8f6, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0x5d8f6, lpOverlapped=0x0) returned 1 [0199.456] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0199.456] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x5d8f6, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x5d900) returned 1 [0199.457] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.457] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x5d900, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0x5d900, lpOverlapped=0x0) returned 1 [0199.458] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0199.458] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0199.458] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0199.458] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0199.458] CloseHandle (hObject=0x3e8) returned 1 [0199.482] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0199.487] CryptDestroyKey (hKey=0x665ab9a6c0) returned 1 [0199.487] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0199.487] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.487] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0199.488] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.png", dwFileAttributes=0x80) returned 1 [0199.489] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\autoplayoptin.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0199.490] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=10226) returned 1 [0199.490] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=10226) returned 1 [0199.490] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x26d0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.490] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0199.491] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.491] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9a340) returned 1 [0199.491] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0199.492] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.492] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x27f2, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0x27f2, lpOverlapped=0x0) returned 1 [0199.493] CryptEncrypt (in: hKey=0x665ab9a340, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0199.493] CryptEncrypt (in: hKey=0x665ab9a340, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x27f2, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2800) returned 1 [0199.493] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.493] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0x2800, lpOverlapped=0x0) returned 1 [0199.493] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0199.493] CryptExportKey (in: hKey=0x665ab9a340, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0199.493] CryptExportKey (in: hKey=0x665ab9a340, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0199.493] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0199.493] CloseHandle (hObject=0x3e8) returned 1 [0199.511] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0199.515] CryptDestroyKey (hKey=0x665ab9a340) returned 1 [0199.515] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0199.515] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.515] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0199.516] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\CollectOneDriveLogs.bat", dwFileAttributes=0x80) returned 1 [0199.517] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\CollectOneDriveLogs.bat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\collectonedrivelogs.bat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0199.517] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=5850) returned 1 [0199.517] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=5850) returned 1 [0199.517] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x15b8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.517] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0199.518] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.518] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9aab0) returned 1 [0199.519] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0199.519] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.519] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x16da, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0x16da, lpOverlapped=0x0) returned 1 [0199.520] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0199.520] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x16da, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x16e0) returned 1 [0199.520] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.520] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x16e0, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0x16e0, lpOverlapped=0x0) returned 1 [0199.520] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0199.520] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0199.520] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0199.520] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0199.520] CloseHandle (hObject=0x3e8) returned 1 [0199.546] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0199.551] CryptDestroyKey (hKey=0x665ab9aab0) returned 1 [0199.551] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0199.552] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.552] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.552] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0199.552] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ExclusionList.xml", dwFileAttributes=0x80) returned 1 [0199.554] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ExclusionList.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\exclusionlist.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0199.554] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=20063) returned 1 [0199.554] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=20063) returned 1 [0199.554] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x4d3d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.554] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0199.556] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.556] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9a6c0) returned 1 [0199.556] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0199.556] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.556] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x4e5f, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0x4e5f, lpOverlapped=0x0) returned 1 [0199.558] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0199.558] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x4e5f, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x4e60) returned 1 [0199.558] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.558] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x4e60, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0x4e60, lpOverlapped=0x0) returned 1 [0199.558] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0199.558] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0199.558] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0199.558] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0199.558] CloseHandle (hObject=0x3e8) returned 1 [0199.581] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0199.586] CryptDestroyKey (hKey=0x665ab9a6c0) returned 1 [0199.586] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0199.587] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.587] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.587] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.587] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.587] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.587] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.587] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.587] SetLastError (dwErrCode=0x0) [0199.587] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0199.589] GetLastError () returned 0x0 [0199.589] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0199.590] CloseHandle (hObject=0x3e8) returned 1 [0199.590] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\is\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bea0 [0199.590] FindNextFileW (in: hFindFile=0x665d90bea0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0199.590] FindNextFileW (in: hFindFile=0x665d90bea0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0199.590] FindNextFileW (in: hFindFile=0x665d90bea0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0199.590] FindClose (in: hFindFile=0x665d90bea0 | out: hFindFile=0x665d90bea0) returned 1 [0199.590] SetLastError (dwErrCode=0x0) [0199.590] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\is\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\is\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0199.591] GetLastError () returned 0x0 [0199.591] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0199.592] CloseHandle (hObject=0x3e8) returned 1 [0199.592] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.592] SetLastError (dwErrCode=0x0) [0199.592] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0199.593] GetLastError () returned 0xb7 [0199.593] CloseHandle (hObject=0x3e8) returned 1 [0199.593] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\it\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90d040 [0199.593] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0199.593] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0199.593] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0199.593] FindClose (in: hFindFile=0x665d90d040 | out: hFindFile=0x665d90d040) returned 1 [0199.593] SetLastError (dwErrCode=0x0) [0199.593] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\it\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\it\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0199.594] GetLastError () returned 0x0 [0199.595] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0199.595] CloseHandle (hObject=0x3e8) returned 1 [0199.596] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.596] SetLastError (dwErrCode=0x0) [0199.596] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0199.596] GetLastError () returned 0xb7 [0199.596] CloseHandle (hObject=0x3e8) returned 1 [0199.596] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ja\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c620 [0199.596] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0199.597] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0199.597] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0199.597] FindClose (in: hFindFile=0x665d90c620 | out: hFindFile=0x665d90c620) returned 1 [0199.597] SetLastError (dwErrCode=0x0) [0199.597] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ja\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\ja\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0199.597] GetLastError () returned 0x0 [0199.597] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0199.598] CloseHandle (hObject=0x3e8) returned 1 [0199.599] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.599] SetLastError (dwErrCode=0x0) [0199.599] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0199.599] GetLastError () returned 0xb7 [0199.599] CloseHandle (hObject=0x3e8) returned 1 [0199.599] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ka\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90cda0 [0199.599] FindNextFileW (in: hFindFile=0x665d90cda0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0199.599] FindNextFileW (in: hFindFile=0x665d90cda0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0199.599] FindNextFileW (in: hFindFile=0x665d90cda0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0199.600] FindClose (in: hFindFile=0x665d90cda0 | out: hFindFile=0x665d90cda0) returned 1 [0199.600] SetLastError (dwErrCode=0x0) [0199.600] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ka\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\ka\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0199.601] GetLastError () returned 0x0 [0199.601] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0199.602] CloseHandle (hObject=0x3e8) returned 1 [0199.603] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.603] SetLastError (dwErrCode=0x0) [0199.603] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0199.603] GetLastError () returned 0xb7 [0199.603] CloseHandle (hObject=0x3e8) returned 1 [0199.603] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\kk\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90d280 [0199.604] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0199.604] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0199.604] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0199.604] FindClose (in: hFindFile=0x665d90d280 | out: hFindFile=0x665d90d280) returned 1 [0199.605] SetLastError (dwErrCode=0x0) [0199.605] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\kk\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\kk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0199.605] GetLastError () returned 0x0 [0199.605] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0199.606] CloseHandle (hObject=0x3e8) returned 1 [0199.606] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.607] SetLastError (dwErrCode=0x0) [0199.607] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0199.607] GetLastError () returned 0xb7 [0199.607] CloseHandle (hObject=0x3e8) returned 1 [0199.607] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\km-kh\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bfc0 [0199.613] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0199.613] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0199.613] FindClose (in: hFindFile=0x665d90bfc0 | out: hFindFile=0x665d90bfc0) returned 1 [0199.614] SetLastError (dwErrCode=0x0) [0199.614] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\km-kh\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\km-kh\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0199.615] GetLastError () returned 0x0 [0199.615] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0199.616] CloseHandle (hObject=0x3e8) returned 1 [0199.616] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0199.616] FindClose (in: hFindFile=0x665d90c0e0 | out: hFindFile=0x665d90c0e0) returned 1 [0199.616] SetLastError (dwErrCode=0x0) [0199.616] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0199.617] GetLastError () returned 0xb7 [0199.617] CloseHandle (hObject=0x620) returned 1 [0199.617] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0199.617] SetLastError (dwErrCode=0x0) [0199.617] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0199.617] GetLastError () returned 0xb7 [0199.617] CloseHandle (hObject=0x620) returned 1 [0199.617] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90caa0 [0199.618] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.621] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.621] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.621] SetLastError (dwErrCode=0x0) [0199.621] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0199.622] GetLastError () returned 0x0 [0199.622] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0199.623] CloseHandle (hObject=0x3e8) returned 1 [0199.623] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90cb60 [0199.625] FindNextFileW (in: hFindFile=0x665d90cb60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0199.625] FindNextFileW (in: hFindFile=0x665d90cb60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0199.625] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0199.625] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.adml", dwFileAttributes=0x80) returned 1 [0199.627] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.adml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\adm\\onedrive.adml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0199.627] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=19614) returned 1 [0199.627] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=19614) returned 1 [0199.627] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x4b7c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.627] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0199.629] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.629] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9aab0) returned 1 [0199.629] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0199.629] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.629] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x4c9e, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x4c9e, lpOverlapped=0x0) returned 1 [0199.631] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0199.631] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x4c9e, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x4ca0) returned 1 [0199.631] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.631] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x4ca0, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x4ca0, lpOverlapped=0x0) returned 1 [0199.631] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0199.631] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0199.631] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0199.631] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0199.631] CloseHandle (hObject=0x654) returned 1 [0199.657] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0199.662] CryptDestroyKey (hKey=0x665ab9aab0) returned 1 [0199.662] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0199.662] FindNextFileW (in: hFindFile=0x665d90cb60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0199.662] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0199.663] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.admx", dwFileAttributes=0x80) returned 1 [0199.663] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.admx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\adm\\onedrive.admx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0199.664] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=9836) returned 1 [0199.664] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=9836) returned 1 [0199.664] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x254a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.664] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0199.665] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.665] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a880) returned 1 [0199.666] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0199.666] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.666] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x266c, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x266c, lpOverlapped=0x0) returned 1 [0199.667] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0199.667] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x266c, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x2670) returned 1 [0199.667] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.667] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2670, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x2670, lpOverlapped=0x0) returned 1 [0199.668] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0199.668] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0199.668] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0199.668] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0199.668] CloseHandle (hObject=0x654) returned 1 [0199.693] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0199.699] CryptDestroyKey (hKey=0x665ab9a880) returned 1 [0199.699] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0199.699] FindNextFileW (in: hFindFile=0x665d90cb60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0199.699] FindClose (in: hFindFile=0x665d90cb60 | out: hFindFile=0x665d90cb60) returned 1 [0199.699] SetLastError (dwErrCode=0x0) [0199.699] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\adm\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0199.701] GetLastError () returned 0x0 [0199.701] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0199.702] CloseHandle (hObject=0x3e8) returned 1 [0199.702] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.702] SetLastError (dwErrCode=0x0) [0199.702] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0199.702] GetLastError () returned 0xb7 [0199.702] CloseHandle (hObject=0x3e8) returned 1 [0199.702] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\af\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bde0 [0199.703] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0199.703] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0199.703] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0199.704] FindClose (in: hFindFile=0x665d90bde0 | out: hFindFile=0x665d90bde0) returned 1 [0199.704] SetLastError (dwErrCode=0x0) [0199.704] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\af\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\af\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0199.704] GetLastError () returned 0x0 [0199.704] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0199.706] CloseHandle (hObject=0x3e8) returned 1 [0199.706] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.706] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0199.706] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\alertIcon.png", dwFileAttributes=0x80) returned 1 [0199.710] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\alertIcon.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\alerticon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0199.710] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=718) returned 1 [0199.710] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=718) returned 1 [0199.710] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x1ac, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.710] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0199.712] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.712] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9a6c0) returned 1 [0199.712] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0199.712] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.712] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x2ce, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0x2ce, lpOverlapped=0x0) returned 1 [0199.713] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0199.713] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2ce, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2d0) returned 1 [0199.713] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.713] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0x2d0, lpOverlapped=0x0) returned 1 [0199.713] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0199.713] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0199.713] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0199.714] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0199.714] CloseHandle (hObject=0x3e8) returned 1 [0199.736] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0199.741] CryptDestroyKey (hKey=0x665ab9a6c0) returned 1 [0199.741] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0199.742] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.742] SetLastError (dwErrCode=0x0) [0199.742] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0199.742] GetLastError () returned 0xb7 [0199.742] CloseHandle (hObject=0x3e8) returned 1 [0199.742] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\am-et\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c1a0 [0199.743] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0199.743] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0199.743] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0199.743] FindClose (in: hFindFile=0x665d90c1a0 | out: hFindFile=0x665d90c1a0) returned 1 [0199.743] SetLastError (dwErrCode=0x0) [0199.743] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\am-et\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\am-et\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0199.744] GetLastError () returned 0x0 [0199.744] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0199.746] CloseHandle (hObject=0x3e8) returned 1 [0199.746] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.746] SetLastError (dwErrCode=0x0) [0199.746] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0199.746] GetLastError () returned 0xb7 [0199.746] CloseHandle (hObject=0x3e8) returned 1 [0199.746] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90cc80 [0199.747] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0199.747] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0199.747] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0199.747] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0199.747] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0199.747] FindClose (in: hFindFile=0x665d90cc80 | out: hFindFile=0x665d90cc80) returned 1 [0199.747] SetLastError (dwErrCode=0x0) [0199.747] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\amd64\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0199.747] GetLastError () returned 0x0 [0199.747] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0199.748] CloseHandle (hObject=0x3e8) returned 1 [0199.749] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.749] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.749] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.749] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.749] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.749] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.749] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.749] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.749] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.749] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.749] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.749] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.749] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.749] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.749] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.749] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.749] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.749] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.749] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.749] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.750] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.750] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.750] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.750] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.750] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.750] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.750] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.750] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.750] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.750] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.750] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.750] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.750] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.750] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.750] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.750] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.750] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.751] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.751] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.751] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.751] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.751] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0199.751] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppBlue.png", dwFileAttributes=0x80) returned 1 [0199.753] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppBlue.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\appblue.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0199.754] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=5499) returned 1 [0199.754] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=5499) returned 1 [0199.754] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x1459, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.754] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0199.755] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.755] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9a1f0) returned 1 [0199.755] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0199.756] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.756] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x157b, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0x157b, lpOverlapped=0x0) returned 1 [0199.757] CryptEncrypt (in: hKey=0x665ab9a1f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0199.757] CryptEncrypt (in: hKey=0x665ab9a1f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x157b, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x1580) returned 1 [0199.757] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.757] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x1580, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0x1580, lpOverlapped=0x0) returned 1 [0199.757] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0199.757] CryptExportKey (in: hKey=0x665ab9a1f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0199.757] CryptExportKey (in: hKey=0x665ab9a1f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0199.757] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0199.757] CloseHandle (hObject=0x3e8) returned 1 [0199.782] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0199.787] CryptDestroyKey (hKey=0x665ab9a1f0) returned 1 [0199.787] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0199.787] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.787] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0199.788] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorBlue.png", dwFileAttributes=0x80) returned 1 [0199.789] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorBlue.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\apperrorblue.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0199.789] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=7574) returned 1 [0199.789] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=7574) returned 1 [0199.789] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x1c74, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.789] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0199.791] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.791] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9aab0) returned 1 [0199.791] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0199.791] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.791] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x1d96, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0x1d96, lpOverlapped=0x0) returned 1 [0199.792] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0199.792] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x1d96, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x1da0) returned 1 [0199.793] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.793] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x1da0, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0x1da0, lpOverlapped=0x0) returned 1 [0199.793] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0199.793] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0199.793] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0199.793] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0199.793] CloseHandle (hObject=0x3e8) returned 1 [0199.815] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0199.821] CryptDestroyKey (hKey=0x665ab9aab0) returned 1 [0199.821] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0199.821] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.821] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0199.821] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorWhite.png", dwFileAttributes=0x80) returned 1 [0199.822] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorWhite.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\apperrorwhite.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0199.822] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=8290) returned 1 [0199.823] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=8290) returned 1 [0199.823] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x1f40, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.823] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0199.825] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.825] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9a180) returned 1 [0199.825] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0199.825] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.825] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x2062, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0x2062, lpOverlapped=0x0) returned 1 [0199.826] CryptEncrypt (in: hKey=0x665ab9a180, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0199.826] CryptEncrypt (in: hKey=0x665ab9a180, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2062, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2070) returned 1 [0199.826] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.826] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2070, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0x2070, lpOverlapped=0x0) returned 1 [0199.826] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0199.827] CryptExportKey (in: hKey=0x665ab9a180, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0199.827] CryptExportKey (in: hKey=0x665ab9a180, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0199.827] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0199.827] CloseHandle (hObject=0x3e8) returned 1 [0199.849] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0199.864] CryptDestroyKey (hKey=0x665ab9a180) returned 1 [0199.864] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0199.864] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.864] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0199.865] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppWhite.png", dwFileAttributes=0x80) returned 1 [0199.867] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppWhite.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\appwhite.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0199.867] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=3051) returned 1 [0199.867] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=3051) returned 1 [0199.867] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xac9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.867] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0199.869] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.869] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9aea0) returned 1 [0199.869] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0199.869] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.869] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0xbeb, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0xbeb, lpOverlapped=0x0) returned 1 [0199.870] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0199.870] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0xbeb, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0xbf0) returned 1 [0199.870] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.870] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0xbf0, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0xbf0, lpOverlapped=0x0) returned 1 [0199.870] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0199.870] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0199.870] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0199.870] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0199.870] CloseHandle (hObject=0x3e8) returned 1 [0199.893] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0199.898] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0199.898] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0199.898] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.898] SetLastError (dwErrCode=0x0) [0199.898] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0199.899] GetLastError () returned 0xb7 [0199.899] CloseHandle (hObject=0x3e8) returned 1 [0199.899] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ar\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c560 [0199.899] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0199.899] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0199.899] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0199.899] FindClose (in: hFindFile=0x665d90c560 | out: hFindFile=0x665d90c560) returned 1 [0199.900] SetLastError (dwErrCode=0x0) [0199.900] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ar\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ar\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0199.900] GetLastError () returned 0x0 [0199.900] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0199.902] CloseHandle (hObject=0x3e8) returned 1 [0199.904] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.907] SetLastError (dwErrCode=0x0) [0199.907] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0199.907] GetLastError () returned 0xb7 [0199.907] CloseHandle (hObject=0x3e8) returned 1 [0199.907] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\as-in\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c560 [0199.908] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0199.908] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0199.908] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0199.908] FindClose (in: hFindFile=0x665d90c560 | out: hFindFile=0x665d90c560) returned 1 [0199.908] SetLastError (dwErrCode=0x0) [0199.908] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\as-in\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\as-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0199.909] GetLastError () returned 0x0 [0199.909] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0199.910] CloseHandle (hObject=0x3e8) returned 1 [0199.910] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.910] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0199.911] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.gif", dwFileAttributes=0x80) returned 1 [0199.911] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\autoplayoptin.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0199.912] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=383222) returned 1 [0199.912] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=383222) returned 1 [0199.912] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x5d7d4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.912] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0199.913] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.913] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9a490) returned 1 [0199.913] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0199.914] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.914] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x5d8f6, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0x5d8f6, lpOverlapped=0x0) returned 1 [0199.932] CryptEncrypt (in: hKey=0x665ab9a490, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0199.932] CryptEncrypt (in: hKey=0x665ab9a490, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x5d8f6, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x5d900) returned 1 [0199.932] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.933] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x5d900, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0x5d900, lpOverlapped=0x0) returned 1 [0199.934] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0199.934] CryptExportKey (in: hKey=0x665ab9a490, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0199.934] CryptExportKey (in: hKey=0x665ab9a490, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0199.934] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0199.934] CloseHandle (hObject=0x3e8) returned 1 [0199.964] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0199.969] CryptDestroyKey (hKey=0x665ab9a490) returned 1 [0199.970] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0199.970] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0199.970] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0199.970] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.png", dwFileAttributes=0x80) returned 1 [0199.971] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\autoplayoptin.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0199.971] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=10226) returned 1 [0199.972] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=10226) returned 1 [0199.972] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x26d0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.972] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0199.973] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.973] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9a490) returned 1 [0199.973] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0199.974] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.974] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x27f2, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0x27f2, lpOverlapped=0x0) returned 1 [0199.975] CryptEncrypt (in: hKey=0x665ab9a490, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0199.975] CryptEncrypt (in: hKey=0x665ab9a490, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x27f2, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2800) returned 1 [0199.975] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0199.975] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0x2800, lpOverlapped=0x0) returned 1 [0199.975] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0199.975] CryptExportKey (in: hKey=0x665ab9a490, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0199.975] CryptExportKey (in: hKey=0x665ab9a490, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0199.976] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0199.976] CloseHandle (hObject=0x3e8) returned 1 [0200.005] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0200.012] CryptDestroyKey (hKey=0x665ab9a490) returned 1 [0200.012] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0200.013] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0200.013] SetLastError (dwErrCode=0x0) [0200.013] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.015] GetLastError () returned 0xb7 [0200.015] CloseHandle (hObject=0x3e8) returned 1 [0200.015] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\az-latn-az\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c380 [0200.015] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.015] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.015] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0200.015] FindClose (in: hFindFile=0x665d90c380 | out: hFindFile=0x665d90c380) returned 1 [0200.015] SetLastError (dwErrCode=0x0) [0200.015] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\az-latn-az\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\az-latn-az\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.017] GetLastError () returned 0x0 [0200.017] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0200.018] CloseHandle (hObject=0x3e8) returned 1 [0200.018] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0200.018] SetLastError (dwErrCode=0x0) [0200.018] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.019] GetLastError () returned 0xb7 [0200.019] CloseHandle (hObject=0x3e8) returned 1 [0200.019] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\be\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90d040 [0200.020] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.020] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.020] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0200.020] FindClose (in: hFindFile=0x665d90d040 | out: hFindFile=0x665d90d040) returned 1 [0200.020] SetLastError (dwErrCode=0x0) [0200.020] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\be\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\be\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.021] GetLastError () returned 0x0 [0200.021] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0200.022] CloseHandle (hObject=0x3e8) returned 1 [0200.023] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0200.023] SetLastError (dwErrCode=0x0) [0200.023] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.023] GetLastError () returned 0xb7 [0200.023] CloseHandle (hObject=0x3e8) returned 1 [0200.023] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bg\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c8c0 [0200.025] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.025] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.025] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0200.025] FindClose (in: hFindFile=0x665d90c8c0 | out: hFindFile=0x665d90c8c0) returned 1 [0200.025] SetLastError (dwErrCode=0x0) [0200.025] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bg\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\bg\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.026] GetLastError () returned 0x0 [0200.026] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0200.027] CloseHandle (hObject=0x3e8) returned 1 [0200.028] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0200.028] SetLastError (dwErrCode=0x0) [0200.028] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.028] GetLastError () returned 0xb7 [0200.028] CloseHandle (hObject=0x3e8) returned 1 [0200.028] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-bd\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90d100 [0200.028] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.028] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.029] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0200.029] FindClose (in: hFindFile=0x665d90d100 | out: hFindFile=0x665d90d100) returned 1 [0200.029] SetLastError (dwErrCode=0x0) [0200.029] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-bd\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\bn-bd\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.029] GetLastError () returned 0x0 [0200.029] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0200.030] CloseHandle (hObject=0x3e8) returned 1 [0200.030] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0200.030] SetLastError (dwErrCode=0x0) [0200.030] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.031] GetLastError () returned 0xb7 [0200.031] CloseHandle (hObject=0x3e8) returned 1 [0200.031] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-in\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c080 [0200.032] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.032] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.032] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0200.032] FindClose (in: hFindFile=0x665d90c080 | out: hFindFile=0x665d90c080) returned 1 [0200.032] SetLastError (dwErrCode=0x0) [0200.032] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-in\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\bn-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.033] GetLastError () returned 0x0 [0200.033] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0200.034] CloseHandle (hObject=0x3e8) returned 1 [0200.035] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0200.035] SetLastError (dwErrCode=0x0) [0200.035] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.035] GetLastError () returned 0xb7 [0200.035] CloseHandle (hObject=0x3e8) returned 1 [0200.035] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bs-latn-ba\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90d280 [0200.036] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.036] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.036] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0200.036] FindClose (in: hFindFile=0x665d90d280 | out: hFindFile=0x665d90d280) returned 1 [0200.037] SetLastError (dwErrCode=0x0) [0200.037] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bs-latn-ba\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\bs-latn-ba\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.037] GetLastError () returned 0x0 [0200.037] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0200.038] CloseHandle (hObject=0x3e8) returned 1 [0200.038] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0200.038] SetLastError (dwErrCode=0x0) [0200.039] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.039] GetLastError () returned 0xb7 [0200.039] CloseHandle (hObject=0x3e8) returned 1 [0200.039] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c080 [0200.040] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.040] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.040] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0200.040] FindClose (in: hFindFile=0x665d90c080 | out: hFindFile=0x665d90c080) returned 1 [0200.041] SetLastError (dwErrCode=0x0) [0200.041] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ca\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.042] GetLastError () returned 0x0 [0200.042] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0200.043] CloseHandle (hObject=0x3e8) returned 1 [0200.043] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0200.043] SetLastError (dwErrCode=0x0) [0200.043] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.044] GetLastError () returned 0xb7 [0200.044] CloseHandle (hObject=0x3e8) returned 1 [0200.044] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca-es-valencia\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c560 [0200.044] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.044] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.044] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0200.044] FindClose (in: hFindFile=0x665d90c560 | out: hFindFile=0x665d90c560) returned 1 [0200.044] SetLastError (dwErrCode=0x0) [0200.044] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca-es-valencia\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ca-es-valencia\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.046] GetLastError () returned 0x0 [0200.046] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0200.047] CloseHandle (hObject=0x3e8) returned 1 [0200.047] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0200.047] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0200.048] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\CollectSyncLogs.bat", dwFileAttributes=0x80) returned 1 [0200.048] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\CollectSyncLogs.bat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\collectsynclogs.bat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.049] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=6420) returned 1 [0200.049] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=6420) returned 1 [0200.049] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x17f2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.049] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0200.050] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0200.050] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9aea0) returned 1 [0200.050] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0200.051] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0200.051] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x1914, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0x1914, lpOverlapped=0x0) returned 1 [0200.052] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0200.052] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x1914, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x1920) returned 1 [0200.052] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0200.052] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x1920, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0x1920, lpOverlapped=0x0) returned 1 [0200.052] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0200.052] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0200.052] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0200.052] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0200.052] CloseHandle (hObject=0x3e8) returned 1 [0200.080] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0200.085] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0200.086] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0200.086] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0200.086] SetLastError (dwErrCode=0x0) [0200.086] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.086] GetLastError () returned 0xb7 [0200.086] CloseHandle (hObject=0x3e8) returned 1 [0200.087] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cs\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90d100 [0200.088] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.088] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.088] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0200.088] FindClose (in: hFindFile=0x665d90d100 | out: hFindFile=0x665d90d100) returned 1 [0200.089] SetLastError (dwErrCode=0x0) [0200.089] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cs\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\cs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.089] GetLastError () returned 0x0 [0200.090] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0200.091] CloseHandle (hObject=0x3e8) returned 1 [0200.091] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0200.091] SetLastError (dwErrCode=0x0) [0200.091] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.091] GetLastError () returned 0xb7 [0200.091] CloseHandle (hObject=0x3e8) returned 1 [0200.091] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cy-gb\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90d040 [0200.092] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.092] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.092] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0200.093] FindClose (in: hFindFile=0x665d90d040 | out: hFindFile=0x665d90d040) returned 1 [0200.093] SetLastError (dwErrCode=0x0) [0200.093] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cy-gb\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\cy-gb\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.094] GetLastError () returned 0x0 [0200.094] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0200.095] CloseHandle (hObject=0x3e8) returned 1 [0200.096] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0200.096] SetLastError (dwErrCode=0x0) [0200.096] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.096] GetLastError () returned 0xb7 [0200.096] CloseHandle (hObject=0x3e8) returned 1 [0200.096] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\da\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90cda0 [0200.097] FindNextFileW (in: hFindFile=0x665d90cda0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.097] FindNextFileW (in: hFindFile=0x665d90cda0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.097] FindNextFileW (in: hFindFile=0x665d90cda0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0200.097] FindClose (in: hFindFile=0x665d90cda0 | out: hFindFile=0x665d90cda0) returned 1 [0200.097] SetLastError (dwErrCode=0x0) [0200.097] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\da\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\da\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.098] GetLastError () returned 0x0 [0200.098] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0200.099] CloseHandle (hObject=0x3e8) returned 1 [0200.099] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0200.099] SetLastError (dwErrCode=0x0) [0200.099] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.100] GetLastError () returned 0xb7 [0200.100] CloseHandle (hObject=0x3e8) returned 1 [0200.100] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\de\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90d040 [0200.101] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.101] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.101] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0200.101] FindClose (in: hFindFile=0x665d90d040 | out: hFindFile=0x665d90d040) returned 1 [0200.101] SetLastError (dwErrCode=0x0) [0200.101] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\de\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\de\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.103] GetLastError () returned 0x0 [0200.103] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0200.104] CloseHandle (hObject=0x3e8) returned 1 [0200.105] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0200.105] SetLastError (dwErrCode=0x0) [0200.105] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.105] GetLastError () returned 0xb7 [0200.105] CloseHandle (hObject=0x3e8) returned 1 [0200.105] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\el\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c6e0 [0200.106] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.106] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.106] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0200.106] FindClose (in: hFindFile=0x665d90c6e0 | out: hFindFile=0x665d90c6e0) returned 1 [0200.106] SetLastError (dwErrCode=0x0) [0200.107] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\el\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\el\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.108] GetLastError () returned 0x0 [0200.108] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0200.109] CloseHandle (hObject=0x3e8) returned 1 [0200.109] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0200.109] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0200.110] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppBlue.png", dwFileAttributes=0x80) returned 1 [0200.111] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppBlue.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\elevatedappblue.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.111] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=7383) returned 1 [0200.111] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=7383) returned 1 [0200.111] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x1bb5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.112] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0200.113] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0200.113] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9a6c0) returned 1 [0200.113] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0200.114] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0200.114] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x1cd7, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0x1cd7, lpOverlapped=0x0) returned 1 [0200.114] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0200.115] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x1cd7, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x1ce0) returned 1 [0200.115] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0200.115] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x1ce0, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0x1ce0, lpOverlapped=0x0) returned 1 [0200.115] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0200.115] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0200.115] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0200.115] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0200.115] CloseHandle (hObject=0x3e8) returned 1 [0200.139] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0200.145] CryptDestroyKey (hKey=0x665ab9a6c0) returned 1 [0200.145] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0200.145] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0200.145] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0200.146] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppWhite.png", dwFileAttributes=0x80) returned 1 [0200.147] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppWhite.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\elevatedappwhite.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.147] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=5068) returned 1 [0200.148] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=5068) returned 1 [0200.148] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x12aa, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.148] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0200.151] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0200.151] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9a340) returned 1 [0200.151] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0200.152] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0200.152] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x13cc, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0x13cc, lpOverlapped=0x0) returned 1 [0200.153] CryptEncrypt (in: hKey=0x665ab9a340, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0200.153] CryptEncrypt (in: hKey=0x665ab9a340, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x13cc, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x13d0) returned 1 [0200.153] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0200.153] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x13d0, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0x13d0, lpOverlapped=0x0) returned 1 [0200.153] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0200.154] CryptExportKey (in: hKey=0x665ab9a340, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0200.154] CryptExportKey (in: hKey=0x665ab9a340, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0200.154] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0200.154] CloseHandle (hObject=0x3e8) returned 1 [0200.214] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0200.219] CryptDestroyKey (hKey=0x665ab9a340) returned 1 [0200.219] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0200.219] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0200.219] SetLastError (dwErrCode=0x0) [0200.219] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.220] GetLastError () returned 0xb7 [0200.220] CloseHandle (hObject=0x3e8) returned 1 [0200.220] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90ce60 [0200.221] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.221] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.221] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0200.221] FindClose (in: hFindFile=0x665d90ce60 | out: hFindFile=0x665d90ce60) returned 1 [0200.221] SetLastError (dwErrCode=0x0) [0200.221] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\en\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.222] GetLastError () returned 0x0 [0200.222] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0200.223] CloseHandle (hObject=0x3e8) returned 1 [0200.223] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0200.223] SetLastError (dwErrCode=0x0) [0200.223] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.223] GetLastError () returned 0xb7 [0200.223] CloseHandle (hObject=0x3e8) returned 1 [0200.224] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en-gb\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90cce0 [0200.224] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.225] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.225] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0200.225] FindClose (in: hFindFile=0x665d90cce0 | out: hFindFile=0x665d90cce0) returned 1 [0200.225] SetLastError (dwErrCode=0x0) [0200.225] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en-gb\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\en-gb\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.226] GetLastError () returned 0x0 [0200.226] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0200.227] CloseHandle (hObject=0x3e8) returned 1 [0200.227] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0200.228] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0200.228] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Error.png", dwFileAttributes=0x80) returned 1 [0200.229] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Error.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\error.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.229] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=7780) returned 1 [0200.229] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=7780) returned 1 [0200.229] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x1d42, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.229] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0200.231] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0200.231] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9aea0) returned 1 [0200.231] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0200.231] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0200.231] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x1e64, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0x1e64, lpOverlapped=0x0) returned 1 [0200.232] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0200.232] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x1e64, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x1e70) returned 1 [0200.232] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0200.232] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x1e70, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0x1e70, lpOverlapped=0x0) returned 1 [0200.232] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0200.233] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0200.233] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0200.233] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0200.233] CloseHandle (hObject=0x3e8) returned 1 [0200.257] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0200.262] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0200.262] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0200.263] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0200.263] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0200.263] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ErrorPage.html", dwFileAttributes=0x80) returned 1 [0200.264] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ErrorPage.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\errorpage.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.264] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=5060) returned 1 [0200.264] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=5060) returned 1 [0200.264] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x12a2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.264] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0200.267] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0200.267] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9a340) returned 1 [0200.267] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0200.267] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0200.267] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x13c4, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0x13c4, lpOverlapped=0x0) returned 1 [0200.268] CryptEncrypt (in: hKey=0x665ab9a340, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0200.268] CryptEncrypt (in: hKey=0x665ab9a340, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x13c4, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x13d0) returned 1 [0200.268] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0200.268] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x13d0, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0x13d0, lpOverlapped=0x0) returned 1 [0200.268] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0200.269] CryptExportKey (in: hKey=0x665ab9a340, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0200.269] CryptExportKey (in: hKey=0x665ab9a340, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0200.269] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0200.269] CloseHandle (hObject=0x3e8) returned 1 [0200.292] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0200.297] CryptDestroyKey (hKey=0x665ab9a340) returned 1 [0200.297] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0200.297] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0200.297] SetLastError (dwErrCode=0x0) [0200.297] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.298] GetLastError () returned 0xb7 [0200.298] CloseHandle (hObject=0x3e8) returned 1 [0200.298] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\es\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90d0a0 [0200.299] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.299] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.299] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0200.299] FindClose (in: hFindFile=0x665d90d0a0 | out: hFindFile=0x665d90d0a0) returned 1 [0200.299] SetLastError (dwErrCode=0x0) [0200.299] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\es\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\es\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.300] GetLastError () returned 0x0 [0200.300] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0200.301] CloseHandle (hObject=0x3e8) returned 1 [0200.301] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0200.301] SetLastError (dwErrCode=0x0) [0200.301] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.302] GetLastError () returned 0xb7 [0200.302] CloseHandle (hObject=0x3e8) returned 1 [0200.302] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\et\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c200 [0200.303] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.303] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.303] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0200.303] FindClose (in: hFindFile=0x665d90c200 | out: hFindFile=0x665d90c200) returned 1 [0200.303] SetLastError (dwErrCode=0x0) [0200.303] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\et\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\et\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.304] GetLastError () returned 0x0 [0200.304] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0200.305] CloseHandle (hObject=0x3e8) returned 1 [0200.306] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0200.306] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0200.306] SetLastError (dwErrCode=0x0) [0200.306] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.307] GetLastError () returned 0xb7 [0200.307] CloseHandle (hObject=0x3e8) returned 1 [0200.307] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\eu\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bc60 [0200.308] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.308] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.308] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0200.308] FindClose (in: hFindFile=0x665d90bc60 | out: hFindFile=0x665d90bc60) returned 1 [0200.308] SetLastError (dwErrCode=0x0) [0200.308] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\eu\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\eu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.308] GetLastError () returned 0x0 [0200.308] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0200.317] CloseHandle (hObject=0x3e8) returned 1 [0200.318] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0200.318] SetLastError (dwErrCode=0x0) [0200.318] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.318] GetLastError () returned 0xb7 [0200.318] CloseHandle (hObject=0x3e8) returned 1 [0200.318] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fa\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90ca40 [0200.319] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.319] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.319] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0200.319] FindClose (in: hFindFile=0x665d90ca40 | out: hFindFile=0x665d90ca40) returned 1 [0200.320] SetLastError (dwErrCode=0x0) [0200.320] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fa\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\fa\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.321] GetLastError () returned 0x0 [0200.321] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0200.322] CloseHandle (hObject=0x3e8) returned 1 [0200.322] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0200.323] SetLastError (dwErrCode=0x0) [0200.323] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.323] GetLastError () returned 0xb7 [0200.323] CloseHandle (hObject=0x3e8) returned 1 [0200.323] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fi\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c020 [0200.324] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.324] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.324] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0200.324] FindClose (in: hFindFile=0x665d90c020 | out: hFindFile=0x665d90c020) returned 1 [0200.324] SetLastError (dwErrCode=0x0) [0200.324] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fi\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\fi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.325] GetLastError () returned 0x0 [0200.325] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0200.325] CloseHandle (hObject=0x3e8) returned 1 [0200.326] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0200.326] SetLastError (dwErrCode=0x0) [0200.326] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.326] GetLastError () returned 0xb7 [0200.326] CloseHandle (hObject=0x3e8) returned 1 [0200.326] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fil-ph\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c6e0 [0200.327] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.327] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.327] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0200.327] FindClose (in: hFindFile=0x665d90c6e0 | out: hFindFile=0x665d90c6e0) returned 1 [0200.327] SetLastError (dwErrCode=0x0) [0200.327] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fil-ph\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\fil-ph\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.328] GetLastError () returned 0x0 [0200.328] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0200.329] CloseHandle (hObject=0x3e8) returned 1 [0200.329] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0200.329] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0200.330] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0200.330] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0200.330] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0200.330] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0200.330] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0200.330] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0200.330] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0200.330] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0200.330] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0200.330] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0200.330] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0200.331] SetLastError (dwErrCode=0x0) [0200.331] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.331] GetLastError () returned 0xb7 [0200.331] CloseHandle (hObject=0x3e8) returned 1 [0200.331] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fr\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c4a0 [0200.332] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.332] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.332] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0200.332] FindClose (in: hFindFile=0x665d90c4a0 | out: hFindFile=0x665d90c4a0) returned 1 [0200.332] SetLastError (dwErrCode=0x0) [0200.332] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fr\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\fr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.333] GetLastError () returned 0x0 [0200.333] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0200.334] CloseHandle (hObject=0x3e8) returned 1 [0200.334] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0200.334] SetLastError (dwErrCode=0x0) [0200.334] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.335] GetLastError () returned 0xb7 [0200.335] CloseHandle (hObject=0x3e8) returned 1 [0200.335] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ga-ie\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c260 [0200.336] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.336] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.336] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0200.336] FindClose (in: hFindFile=0x665d90c260 | out: hFindFile=0x665d90c260) returned 1 [0200.337] SetLastError (dwErrCode=0x0) [0200.337] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ga-ie\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ga-ie\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.339] GetLastError () returned 0x0 [0200.339] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0200.340] CloseHandle (hObject=0x3e8) returned 1 [0200.341] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0200.341] SetLastError (dwErrCode=0x0) [0200.341] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.341] GetLastError () returned 0xb7 [0200.341] CloseHandle (hObject=0x3e8) returned 1 [0200.341] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gd-latn\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bc60 [0200.342] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.342] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.342] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0200.342] FindClose (in: hFindFile=0x665d90bc60 | out: hFindFile=0x665d90bc60) returned 1 [0200.343] SetLastError (dwErrCode=0x0) [0200.343] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gd-latn\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\gd-latn\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.343] GetLastError () returned 0x0 [0200.343] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0200.344] CloseHandle (hObject=0x3e8) returned 1 [0200.344] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0200.344] SetLastError (dwErrCode=0x0) [0200.344] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.345] GetLastError () returned 0xb7 [0200.345] CloseHandle (hObject=0x3e8) returned 1 [0200.345] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gl\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c4a0 [0200.346] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.346] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.346] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0200.346] FindClose (in: hFindFile=0x665d90c4a0 | out: hFindFile=0x665d90c4a0) returned 1 [0200.346] SetLastError (dwErrCode=0x0) [0200.346] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gl\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\gl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.347] GetLastError () returned 0x0 [0200.347] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0200.348] CloseHandle (hObject=0x3e8) returned 1 [0200.348] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0200.349] SetLastError (dwErrCode=0x0) [0200.349] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.349] GetLastError () returned 0xb7 [0200.349] CloseHandle (hObject=0x3e8) returned 1 [0200.349] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gu\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c440 [0200.350] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.350] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.350] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0200.350] FindClose (in: hFindFile=0x665d90c440 | out: hFindFile=0x665d90c440) returned 1 [0200.350] SetLastError (dwErrCode=0x0) [0200.350] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gu\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\gu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.351] GetLastError () returned 0x0 [0200.351] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0200.352] CloseHandle (hObject=0x3e8) returned 1 [0200.352] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0200.352] SetLastError (dwErrCode=0x0) [0200.352] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.352] GetLastError () returned 0xb7 [0200.352] CloseHandle (hObject=0x3e8) returned 1 [0200.353] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ha-latn-ng\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90cb60 [0200.353] FindNextFileW (in: hFindFile=0x665d90cb60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.353] FindNextFileW (in: hFindFile=0x665d90cb60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.353] FindNextFileW (in: hFindFile=0x665d90cb60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0200.353] FindClose (in: hFindFile=0x665d90cb60 | out: hFindFile=0x665d90cb60) returned 1 [0200.353] SetLastError (dwErrCode=0x0) [0200.353] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ha-latn-ng\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ha-latn-ng\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.355] GetLastError () returned 0x0 [0200.355] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0200.356] CloseHandle (hObject=0x3e8) returned 1 [0200.356] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0200.356] SetLastError (dwErrCode=0x0) [0200.356] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.356] GetLastError () returned 0xb7 [0200.356] CloseHandle (hObject=0x3e8) returned 1 [0200.357] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\he\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90cb60 [0200.357] FindNextFileW (in: hFindFile=0x665d90cb60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.358] FindNextFileW (in: hFindFile=0x665d90cb60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.358] FindNextFileW (in: hFindFile=0x665d90cb60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0200.358] FindClose (in: hFindFile=0x665d90cb60 | out: hFindFile=0x665d90cb60) returned 1 [0200.358] SetLastError (dwErrCode=0x0) [0200.358] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\he\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\he\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.358] GetLastError () returned 0x0 [0200.358] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0200.359] CloseHandle (hObject=0x3e8) returned 1 [0200.359] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0200.359] SetLastError (dwErrCode=0x0) [0200.359] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.360] GetLastError () returned 0xb7 [0200.360] CloseHandle (hObject=0x3e8) returned 1 [0200.360] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hi\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c380 [0200.361] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.361] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.361] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0200.361] FindClose (in: hFindFile=0x665d90c380 | out: hFindFile=0x665d90c380) returned 1 [0200.361] SetLastError (dwErrCode=0x0) [0200.361] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hi\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\hi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.362] GetLastError () returned 0x0 [0200.362] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0200.363] CloseHandle (hObject=0x3e8) returned 1 [0200.363] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0200.363] SetLastError (dwErrCode=0x0) [0200.363] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.364] GetLastError () returned 0xb7 [0200.364] CloseHandle (hObject=0x3e8) returned 1 [0200.364] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hr\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90cf20 [0200.366] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.366] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.366] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0200.366] FindClose (in: hFindFile=0x665d90cf20 | out: hFindFile=0x665d90cf20) returned 1 [0200.366] SetLastError (dwErrCode=0x0) [0200.366] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hr\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\hr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.367] GetLastError () returned 0x0 [0200.367] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0200.368] CloseHandle (hObject=0x3e8) returned 1 [0200.369] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0200.369] SetLastError (dwErrCode=0x0) [0200.369] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.369] GetLastError () returned 0xb7 [0200.369] CloseHandle (hObject=0x3e8) returned 1 [0200.369] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hu\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c740 [0200.370] FindNextFileW (in: hFindFile=0x665d90c740, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.370] FindNextFileW (in: hFindFile=0x665d90c740, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.370] FindNextFileW (in: hFindFile=0x665d90c740, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0200.370] FindClose (in: hFindFile=0x665d90c740 | out: hFindFile=0x665d90c740) returned 1 [0200.370] SetLastError (dwErrCode=0x0) [0200.370] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hu\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\hu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.371] GetLastError () returned 0x0 [0200.371] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0200.372] CloseHandle (hObject=0x3e8) returned 1 [0200.373] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0200.373] SetLastError (dwErrCode=0x0) [0200.373] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.373] GetLastError () returned 0xb7 [0200.373] CloseHandle (hObject=0x3e8) returned 1 [0200.374] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hy\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90d0a0 [0200.375] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.375] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.375] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0200.375] FindClose (in: hFindFile=0x665d90d0a0 | out: hFindFile=0x665d90d0a0) returned 1 [0200.375] SetLastError (dwErrCode=0x0) [0200.375] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\hy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.376] GetLastError () returned 0x0 [0200.376] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0200.377] CloseHandle (hObject=0x3e8) returned 1 [0200.377] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0200.377] SetLastError (dwErrCode=0x0) [0200.377] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.377] GetLastError () returned 0xb7 [0200.378] CloseHandle (hObject=0x3e8) returned 1 [0200.378] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\id\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90d0a0 [0200.379] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.379] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.379] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0200.379] FindClose (in: hFindFile=0x665d90d0a0 | out: hFindFile=0x665d90d0a0) returned 1 [0200.379] SetLastError (dwErrCode=0x0) [0200.379] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\id\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\id\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.380] GetLastError () returned 0x0 [0200.380] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0200.381] CloseHandle (hObject=0x3e8) returned 1 [0200.382] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0200.382] SetLastError (dwErrCode=0x0) [0200.382] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.382] GetLastError () returned 0xb7 [0200.382] CloseHandle (hObject=0x3e8) returned 1 [0200.382] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ig-ng\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90cb00 [0200.384] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.384] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.384] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0200.384] FindClose (in: hFindFile=0x665d90cb00 | out: hFindFile=0x665d90cb00) returned 1 [0200.384] SetLastError (dwErrCode=0x0) [0200.384] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ig-ng\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ig-ng\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.385] GetLastError () returned 0x0 [0200.385] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0200.386] CloseHandle (hObject=0x3e8) returned 1 [0200.387] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0200.387] SetLastError (dwErrCode=0x0) [0200.387] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.387] GetLastError () returned 0xb7 [0200.387] CloseHandle (hObject=0x3e8) returned 1 [0200.387] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90d040 [0200.388] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.388] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.388] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.388] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0200.388] FindClose (in: hFindFile=0x665d90d040 | out: hFindFile=0x665d90d040) returned 1 [0200.389] SetLastError (dwErrCode=0x0) [0200.389] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\imageformats\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.390] GetLastError () returned 0x0 [0200.390] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0200.391] CloseHandle (hObject=0x3e8) returned 1 [0200.391] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0200.391] SetLastError (dwErrCode=0x0) [0200.391] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0200.392] GetLastError () returned 0xb7 [0200.392] CloseHandle (hObject=0x3e8) returned 1 [0200.392] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90d2e0 [0200.394] FindNextFileW (in: hFindFile=0x665d90d2e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.395] FindNextFileW (in: hFindFile=0x665d90d2e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.395] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0200.396] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\acmDismissIcon.svg", dwFileAttributes=0x80) returned 1 [0200.396] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\acmDismissIcon.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\acmdismissicon.svg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0200.397] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=2289) returned 1 [0200.397] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=2289) returned 1 [0200.397] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x7cf, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.397] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0200.398] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0200.398] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a6c0) returned 1 [0200.398] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0200.399] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0200.399] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x8f1, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x8f1, lpOverlapped=0x0) returned 1 [0200.399] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0200.399] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x8f1, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x900) returned 1 [0200.399] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0200.399] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x900, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x900, lpOverlapped=0x0) returned 1 [0200.400] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0200.400] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0200.400] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0200.400] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0200.400] CloseHandle (hObject=0x654) returned 1 [0200.421] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0200.427] CryptDestroyKey (hKey=0x665ab9a6c0) returned 1 [0200.427] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0200.427] FindNextFileW (in: hFindFile=0x665d90d2e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.427] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0200.427] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\blurrect.png", dwFileAttributes=0x80) returned 1 [0200.429] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\blurrect.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\blurrect.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0200.429] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=801) returned 1 [0200.429] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=801) returned 1 [0200.429] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x1ff, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.429] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0200.432] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0200.432] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a420) returned 1 [0200.432] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0200.432] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0200.432] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x321, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x321, lpOverlapped=0x0) returned 1 [0200.433] CryptEncrypt (in: hKey=0x665ab9a420, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0200.433] CryptEncrypt (in: hKey=0x665ab9a420, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x321, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x330) returned 1 [0200.433] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0200.433] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x330, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x330, lpOverlapped=0x0) returned 1 [0200.433] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0200.433] CryptExportKey (in: hKey=0x665ab9a420, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0200.433] CryptExportKey (in: hKey=0x665ab9a420, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0200.433] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0200.433] CloseHandle (hObject=0x654) returned 1 [0200.447] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0200.451] CryptDestroyKey (hKey=0x665ab9a420) returned 1 [0200.451] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0200.452] FindNextFileW (in: hFindFile=0x665d90d2e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.452] FindNextFileW (in: hFindFile=0x665d90d2e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.452] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0200.452] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_hovered.svg", dwFileAttributes=0x80) returned 1 [0200.453] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_hovered.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_hovered.svg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0200.453] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=390) returned 1 [0200.454] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=390) returned 1 [0200.454] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x64, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.454] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0200.455] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0200.455] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9af10) returned 1 [0200.455] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0200.455] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0200.455] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x186, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x186, lpOverlapped=0x0) returned 1 [0200.455] CryptEncrypt (in: hKey=0x665ab9af10, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0200.455] CryptEncrypt (in: hKey=0x665ab9af10, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x186, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x190) returned 1 [0200.455] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0200.455] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x190, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x190, lpOverlapped=0x0) returned 1 [0200.455] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0200.455] CryptExportKey (in: hKey=0x665ab9af10, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0200.455] CryptExportKey (in: hKey=0x665ab9af10, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0200.456] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0200.625] CloseHandle (hObject=0x654) returned 1 [0200.645] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0200.651] CryptDestroyKey (hKey=0x665ab9af10) returned 1 [0200.651] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0200.651] FindNextFileW (in: hFindFile=0x665d90d2e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.651] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0200.652] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", dwFileAttributes=0x80) returned 1 [0200.653] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0200.653] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=391) returned 1 [0200.653] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=391) returned 1 [0200.653] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x65, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.653] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0200.654] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0200.654] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9aab0) returned 1 [0200.654] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0200.655] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0200.655] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x187, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x187, lpOverlapped=0x0) returned 1 [0200.655] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0200.655] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x187, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x190) returned 1 [0200.655] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0200.655] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x190, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x190, lpOverlapped=0x0) returned 1 [0200.655] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0200.655] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0200.656] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0200.656] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0200.742] CloseHandle (hObject=0x654) returned 1 [0200.762] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0200.767] CryptDestroyKey (hKey=0x665ab9aab0) returned 1 [0200.767] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0200.767] FindNextFileW (in: hFindFile=0x665d90d2e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.768] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0200.768] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_selected.svg", dwFileAttributes=0x80) returned 1 [0200.769] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_selected.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_selected.svg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0200.770] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=388) returned 1 [0200.770] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=388) returned 1 [0200.770] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x62, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.770] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0200.771] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0200.771] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9aea0) returned 1 [0200.771] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0200.772] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0200.772] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x184, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x184, lpOverlapped=0x0) returned 1 [0200.772] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0200.772] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x184, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x190) returned 1 [0200.772] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0200.772] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x190, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x190, lpOverlapped=0x0) returned 1 [0200.772] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0200.772] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0200.772] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0200.773] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0200.774] CloseHandle (hObject=0x654) returned 1 [0200.794] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0200.799] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0200.799] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0200.799] FindNextFileW (in: hFindFile=0x665d90d2e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.799] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0200.800] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevron.svg", dwFileAttributes=0x80) returned 1 [0200.801] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevron.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\chevron.svg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0200.802] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=295) returned 1 [0200.802] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=295) returned 1 [0200.802] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.802] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0200.803] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0200.803] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9aea0) returned 1 [0200.803] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0200.803] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0200.803] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x127, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x127, lpOverlapped=0x0) returned 1 [0200.803] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0200.804] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x127, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x130) returned 1 [0200.804] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0200.804] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x130, lpOverlapped=0x0) returned 1 [0200.804] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0200.804] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0200.804] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0200.804] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0200.804] CloseHandle (hObject=0x654) returned 1 [0200.826] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0200.831] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0200.831] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0200.832] FindNextFileW (in: hFindFile=0x665d90d2e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.832] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0200.832] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevronUp.svg", dwFileAttributes=0x80) returned 1 [0200.833] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevronUp.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\chevronup.svg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0200.833] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=264) returned 1 [0200.833] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=264) returned 1 [0200.833] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a880) returned 1 [0200.833] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0200.834] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0200.834] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x108, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x108, lpOverlapped=0x0) returned 1 [0200.835] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0200.835] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x108, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x110) returned 1 [0200.835] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0200.835] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x110, lpOverlapped=0x0) returned 1 [0200.836] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0200.836] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0200.836] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0200.836] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0200.836] CloseHandle (hObject=0x654) returned 1 [0200.858] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0200.863] CryptDestroyKey (hKey=0x665ab9a880) returned 1 [0200.863] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0200.863] FindNextFileW (in: hFindFile=0x665d90d2e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.863] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0200.864] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\cloud.svg", dwFileAttributes=0x80) returned 1 [0200.878] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\cloud.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\cloud.svg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0200.879] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=1735) returned 1 [0200.879] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=1735) returned 1 [0200.879] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x5a5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.879] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0200.880] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0200.880] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9aea0) returned 1 [0200.880] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0200.881] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0200.881] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x6c7, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x6c7, lpOverlapped=0x0) returned 1 [0200.881] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0200.881] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x6c7, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x6d0) returned 1 [0200.881] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0200.881] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x6d0, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x6d0, lpOverlapped=0x0) returned 1 [0200.881] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0200.881] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0200.881] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0200.882] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0200.882] CloseHandle (hObject=0x654) returned 1 [0200.906] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0200.911] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0200.911] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0200.912] FindNextFileW (in: hFindFile=0x665d90d2e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.912] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0200.912] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\done_graphic.svg", dwFileAttributes=0x80) returned 1 [0200.913] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\done_graphic.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\done_graphic.svg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0200.914] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=32373) returned 1 [0200.914] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=32373) returned 1 [0200.914] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x7d53, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.914] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0200.916] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0200.916] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9ab20) returned 1 [0200.916] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0200.916] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0200.916] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x7e75, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x7e75, lpOverlapped=0x0) returned 1 [0200.918] CryptEncrypt (in: hKey=0x665ab9ab20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0200.918] CryptEncrypt (in: hKey=0x665ab9ab20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x7e75, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x7e80) returned 1 [0200.918] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0200.918] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x7e80, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x7e80, lpOverlapped=0x0) returned 1 [0200.919] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0200.919] CryptExportKey (in: hKey=0x665ab9ab20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0200.919] CryptExportKey (in: hKey=0x665ab9ab20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0200.919] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0200.919] CloseHandle (hObject=0x654) returned 1 [0200.941] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0200.946] CryptDestroyKey (hKey=0x665ab9ab20) returned 1 [0200.946] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0200.947] FindNextFileW (in: hFindFile=0x665d90d2e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.947] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0200.947] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\errorIcon.svg", dwFileAttributes=0x80) returned 1 [0200.949] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\errorIcon.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\erroricon.svg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0200.949] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=797) returned 1 [0200.949] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=797) returned 1 [0200.949] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x1fb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.949] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0200.951] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0200.951] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a880) returned 1 [0200.951] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0200.952] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0200.952] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x31d, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x31d, lpOverlapped=0x0) returned 1 [0200.952] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0200.952] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x31d, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x320) returned 1 [0200.952] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0200.952] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x320, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x320, lpOverlapped=0x0) returned 1 [0200.952] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0200.952] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0200.952] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0200.953] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0200.953] CloseHandle (hObject=0x654) returned 1 [0200.975] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0200.981] CryptDestroyKey (hKey=0x665ab9a880) returned 1 [0200.981] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0200.981] FindNextFileW (in: hFindFile=0x665d90d2e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0200.981] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0200.981] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder.svg", dwFileAttributes=0x80) returned 1 [0200.982] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\folder.svg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0200.983] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=291) returned 1 [0200.983] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=291) returned 1 [0200.983] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.983] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0200.984] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0200.984] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a880) returned 1 [0200.984] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0200.985] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0200.985] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x123, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x123, lpOverlapped=0x0) returned 1 [0200.985] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0200.985] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x123, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x130) returned 1 [0200.985] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0200.985] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x130, lpOverlapped=0x0) returned 1 [0200.985] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0200.985] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0200.985] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0200.985] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0200.985] CloseHandle (hObject=0x654) returned 1 [0201.007] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0201.013] CryptDestroyKey (hKey=0x665ab9a880) returned 1 [0201.013] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0201.014] FindNextFileW (in: hFindFile=0x665d90d2e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.014] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0201.014] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_desktop.svg", dwFileAttributes=0x80) returned 1 [0201.015] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_desktop.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\folder_image_desktop.svg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0201.015] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=1947) returned 1 [0201.015] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=1947) returned 1 [0201.015] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x679, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.016] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0201.017] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0201.017] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9af10) returned 1 [0201.017] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0201.018] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0201.018] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x79b, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x79b, lpOverlapped=0x0) returned 1 [0201.018] CryptEncrypt (in: hKey=0x665ab9af10, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0201.018] CryptEncrypt (in: hKey=0x665ab9af10, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x79b, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x7a0) returned 1 [0201.018] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0201.018] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x7a0, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x7a0, lpOverlapped=0x0) returned 1 [0201.018] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0201.018] CryptExportKey (in: hKey=0x665ab9af10, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0201.018] CryptExportKey (in: hKey=0x665ab9af10, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0201.018] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0201.019] CloseHandle (hObject=0x654) returned 1 [0201.041] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0201.046] CryptDestroyKey (hKey=0x665ab9af10) returned 1 [0201.046] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0201.047] FindNextFileW (in: hFindFile=0x665d90d2e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.047] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0201.047] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_documents.svg", dwFileAttributes=0x80) returned 1 [0201.048] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_documents.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\folder_image_documents.svg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0201.048] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=20529) returned 1 [0201.048] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=20529) returned 1 [0201.048] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x4f0f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.049] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0201.051] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0201.051] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9aab0) returned 1 [0201.051] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0201.051] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0201.051] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x5031, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x5031, lpOverlapped=0x0) returned 1 [0201.053] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0201.053] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x5031, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x5040) returned 1 [0201.053] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0201.053] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x5040, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x5040, lpOverlapped=0x0) returned 1 [0201.053] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0201.053] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0201.053] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0201.053] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0201.054] CloseHandle (hObject=0x654) returned 1 [0201.084] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0201.092] CryptDestroyKey (hKey=0x665ab9aab0) returned 1 [0201.092] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0201.092] FindNextFileW (in: hFindFile=0x665d90d2e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.092] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0201.093] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_pictures.svg", dwFileAttributes=0x80) returned 1 [0201.094] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_pictures.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\folder_image_pictures.svg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0201.095] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=12544) returned 1 [0201.095] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=12544) returned 1 [0201.095] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x2fde, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.095] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0201.096] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0201.096] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a3b0) returned 1 [0201.096] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0201.097] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0201.097] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x3100, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x3100, lpOverlapped=0x0) returned 1 [0201.098] CryptEncrypt (in: hKey=0x665ab9a3b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0201.098] CryptEncrypt (in: hKey=0x665ab9a3b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x3100, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x3110) returned 1 [0201.098] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0201.098] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x3110, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x3110, lpOverlapped=0x0) returned 1 [0201.098] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0201.098] CryptExportKey (in: hKey=0x665ab9a3b0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0201.098] CryptExportKey (in: hKey=0x665ab9a3b0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0201.099] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0201.099] CloseHandle (hObject=0x654) returned 1 [0201.121] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0201.127] CryptDestroyKey (hKey=0x665ab9a3b0) returned 1 [0201.127] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0201.128] FindNextFileW (in: hFindFile=0x665d90d2e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.128] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0201.128] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\iceBucket.svg", dwFileAttributes=0x80) returned 1 [0201.129] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\iceBucket.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\icebucket.svg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0201.129] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=5934) returned 1 [0201.129] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=5934) returned 1 [0201.129] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x160c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.129] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0201.131] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0201.131] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9ab20) returned 1 [0201.131] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0201.131] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0201.131] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x172e, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x172e, lpOverlapped=0x0) returned 1 [0201.132] CryptEncrypt (in: hKey=0x665ab9ab20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0201.132] CryptEncrypt (in: hKey=0x665ab9ab20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x172e, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x1730) returned 1 [0201.132] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0201.132] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x1730, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x1730, lpOverlapped=0x0) returned 1 [0201.133] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0201.133] CryptExportKey (in: hKey=0x665ab9ab20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0201.133] CryptExportKey (in: hKey=0x665ab9ab20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0201.133] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0201.133] CloseHandle (hObject=0x654) returned 1 [0201.155] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0201.161] CryptDestroyKey (hKey=0x665ab9ab20) returned 1 [0201.161] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0201.162] FindNextFileW (in: hFindFile=0x665d90d2e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.162] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0201.162] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading.svg", dwFileAttributes=0x80) returned 1 [0201.163] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\loading.svg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0201.163] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=718) returned 1 [0201.163] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=718) returned 1 [0201.164] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x1ac, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.164] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0201.165] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0201.165] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9aab0) returned 1 [0201.165] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0201.165] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0201.165] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x2ce, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x2ce, lpOverlapped=0x0) returned 1 [0201.166] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0201.166] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x2ce, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x2d0) returned 1 [0201.166] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0201.166] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x2d0, lpOverlapped=0x0) returned 1 [0201.166] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0201.166] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0201.166] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0201.166] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0201.168] CloseHandle (hObject=0x654) returned 1 [0201.242] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0201.248] CryptDestroyKey (hKey=0x665ab9aab0) returned 1 [0201.248] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0201.248] FindNextFileW (in: hFindFile=0x665d90d2e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.248] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0201.249] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading_spinner.svg", dwFileAttributes=0x80) returned 1 [0201.250] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading_spinner.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\loading_spinner.svg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0201.250] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=432) returned 1 [0201.250] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=432) returned 1 [0201.250] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x8e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.251] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0201.252] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0201.252] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a340) returned 1 [0201.252] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0201.253] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0201.253] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x1b0, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x1b0, lpOverlapped=0x0) returned 1 [0201.253] CryptEncrypt (in: hKey=0x665ab9a340, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0201.253] CryptEncrypt (in: hKey=0x665ab9a340, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x1b0, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x1c0) returned 1 [0201.253] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0201.253] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x1c0, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x1c0, lpOverlapped=0x0) returned 1 [0201.253] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0201.253] CryptExportKey (in: hKey=0x665ab9a340, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0201.253] CryptExportKey (in: hKey=0x665ab9a340, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0201.254] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0201.255] CloseHandle (hObject=0x654) returned 1 [0201.277] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0201.283] CryptDestroyKey (hKey=0x665ab9a340) returned 1 [0201.283] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0201.283] FindNextFileW (in: hFindFile=0x665d90d2e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.283] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0201.283] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandFiles.svg", dwFileAttributes=0x80) returned 1 [0201.285] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandFiles.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\ondemandfiles.svg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0201.285] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=7504) returned 1 [0201.285] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=7504) returned 1 [0201.285] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x1c2e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.286] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0201.287] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0201.287] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a500) returned 1 [0201.287] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0201.288] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0201.288] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x1d50, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x1d50, lpOverlapped=0x0) returned 1 [0201.288] CryptEncrypt (in: hKey=0x665ab9a500, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0201.288] CryptEncrypt (in: hKey=0x665ab9a500, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x1d50, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x1d60) returned 1 [0201.288] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0201.289] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x1d60, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x1d60, lpOverlapped=0x0) returned 1 [0201.289] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0201.289] CryptExportKey (in: hKey=0x665ab9a500, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0201.289] CryptExportKey (in: hKey=0x665ab9a500, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0201.289] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0201.289] CloseHandle (hObject=0x654) returned 1 [0201.310] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0201.316] CryptDestroyKey (hKey=0x665ab9a500) returned 1 [0201.316] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0201.316] FindNextFileW (in: hFindFile=0x665d90d2e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.316] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0201.317] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandSelectiveSync.svg", dwFileAttributes=0x80) returned 1 [0201.318] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandSelectiveSync.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\ondemandselectivesync.svg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0201.318] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=2644) returned 1 [0201.318] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=2644) returned 1 [0201.318] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x932, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.318] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0201.320] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0201.320] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9aea0) returned 1 [0201.320] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0201.321] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0201.321] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0xa54, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0xa54, lpOverlapped=0x0) returned 1 [0201.321] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0201.321] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0xa54, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0xa60) returned 1 [0201.321] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0201.321] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0xa60, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0xa60, lpOverlapped=0x0) returned 1 [0201.321] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0201.322] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0201.322] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0201.322] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0201.322] CloseHandle (hObject=0x654) returned 1 [0201.348] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0201.354] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0201.354] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0201.354] FindNextFileW (in: hFindFile=0x665d90d2e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.354] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0201.354] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onedrivePremium.svg", dwFileAttributes=0x80) returned 1 [0201.355] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onedrivePremium.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\onedrivepremium.svg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0201.356] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=1132) returned 1 [0201.356] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=1132) returned 1 [0201.356] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x34a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.356] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0201.357] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0201.357] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9aab0) returned 1 [0201.357] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0201.358] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0201.358] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x46c, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x46c, lpOverlapped=0x0) returned 1 [0201.358] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0201.358] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x46c, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x470) returned 1 [0201.358] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0201.358] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x470, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x470, lpOverlapped=0x0) returned 1 [0201.358] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0201.359] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0201.359] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0201.359] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0201.359] CloseHandle (hObject=0x654) returned 1 [0201.380] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0201.386] CryptDestroyKey (hKey=0x665ab9aab0) returned 1 [0201.386] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0201.386] FindNextFileW (in: hFindFile=0x665d90d2e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.386] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0201.387] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIcon.svg", dwFileAttributes=0x80) returned 1 [0201.388] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIcon.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\overflowicon.svg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0201.388] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=987) returned 1 [0201.388] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=987) returned 1 [0201.388] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x2b9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.388] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0201.390] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0201.390] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9aab0) returned 1 [0201.390] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0201.390] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0201.390] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x3db, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x3db, lpOverlapped=0x0) returned 1 [0201.391] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0201.391] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x3db, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x3e0) returned 1 [0201.391] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0201.391] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x3e0, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x3e0, lpOverlapped=0x0) returned 1 [0201.391] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0201.391] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0201.391] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0201.391] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0201.391] CloseHandle (hObject=0x654) returned 1 [0201.413] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0201.418] CryptDestroyKey (hKey=0x665ab9aab0) returned 1 [0201.418] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0201.419] FindNextFileW (in: hFindFile=0x665d90d2e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.419] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0201.419] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIconWhite.svg", dwFileAttributes=0x80) returned 1 [0201.420] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIconWhite.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\overflowiconwhite.svg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0201.420] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=912) returned 1 [0201.421] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=912) returned 1 [0201.421] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x26e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.421] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0201.423] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0201.423] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a420) returned 1 [0201.423] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0201.423] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0201.423] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x390, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x390, lpOverlapped=0x0) returned 1 [0201.423] CryptEncrypt (in: hKey=0x665ab9a420, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0201.423] CryptEncrypt (in: hKey=0x665ab9a420, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x390, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x3a0) returned 1 [0201.423] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0201.423] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x3a0, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x3a0, lpOverlapped=0x0) returned 1 [0201.424] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0201.424] CryptExportKey (in: hKey=0x665ab9a420, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0201.424] CryptExportKey (in: hKey=0x665ab9a420, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0201.424] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0201.424] CloseHandle (hObject=0x654) returned 1 [0201.444] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0201.449] CryptDestroyKey (hKey=0x665ab9a420) returned 1 [0201.449] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0201.450] FindNextFileW (in: hFindFile=0x665d90d2e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.450] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0201.450] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\partiallyFreezing.svg", dwFileAttributes=0x80) returned 1 [0201.452] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\partiallyFreezing.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\partiallyfreezing.svg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0201.452] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=4407) returned 1 [0201.452] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=4407) returned 1 [0201.452] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x1015, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.452] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0201.454] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0201.454] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9aab0) returned 1 [0201.454] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0201.455] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0201.455] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x1137, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x1137, lpOverlapped=0x0) returned 1 [0201.455] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0201.456] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x1137, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x1140) returned 1 [0201.456] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0201.456] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x1140, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x1140, lpOverlapped=0x0) returned 1 [0201.456] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0201.456] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0201.456] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0201.456] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0201.456] CloseHandle (hObject=0x654) returned 1 [0201.480] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0201.486] CryptDestroyKey (hKey=0x665ab9aab0) returned 1 [0201.486] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0201.486] FindNextFileW (in: hFindFile=0x665d90d2e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.486] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0201.486] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settings.svg", dwFileAttributes=0x80) returned 1 [0201.487] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settings.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\settings.svg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0201.488] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=1389) returned 1 [0201.488] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=1389) returned 1 [0201.488] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x44b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.488] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0201.489] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0201.489] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9aea0) returned 1 [0201.489] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0201.490] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0201.490] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x56d, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x56d, lpOverlapped=0x0) returned 1 [0201.490] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0201.490] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x56d, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x570) returned 1 [0201.490] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0201.490] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x570, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x570, lpOverlapped=0x0) returned 1 [0201.490] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0201.490] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0201.490] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0201.490] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0201.491] CloseHandle (hObject=0x654) returned 1 [0201.512] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0201.518] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0201.518] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0201.519] FindNextFileW (in: hFindFile=0x665d90d2e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.519] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0201.519] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settingsdisabled.svg", dwFileAttributes=0x80) returned 1 [0201.520] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settingsdisabled.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\settingsdisabled.svg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0201.520] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=1391) returned 1 [0201.520] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=1391) returned 1 [0201.520] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x44d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.521] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0201.522] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0201.522] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a340) returned 1 [0201.522] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0201.523] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0201.523] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x56f, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x56f, lpOverlapped=0x0) returned 1 [0201.523] CryptEncrypt (in: hKey=0x665ab9a340, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0201.523] CryptEncrypt (in: hKey=0x665ab9a340, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x56f, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x570) returned 1 [0201.523] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0201.523] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x570, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x570, lpOverlapped=0x0) returned 1 [0201.523] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0201.523] CryptExportKey (in: hKey=0x665ab9a340, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0201.524] CryptExportKey (in: hKey=0x665ab9a340, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0201.524] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0201.524] CloseHandle (hObject=0x654) returned 1 [0201.549] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0201.554] CryptDestroyKey (hKey=0x665ab9a340) returned 1 [0201.554] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0201.555] FindNextFileW (in: hFindFile=0x665d90d2e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.555] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0201.555] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\signIn.svg", dwFileAttributes=0x80) returned 1 [0201.556] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\signIn.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\signin.svg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0201.556] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=10932) returned 1 [0201.556] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=10932) returned 1 [0201.556] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x2992, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.556] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0201.558] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0201.558] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a6c0) returned 1 [0201.558] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0201.559] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0201.559] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x2ab4, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x2ab4, lpOverlapped=0x0) returned 1 [0201.560] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0201.560] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x2ab4, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x2ac0) returned 1 [0201.560] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0201.560] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2ac0, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x2ac0, lpOverlapped=0x0) returned 1 [0201.560] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0201.560] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0201.560] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0201.561] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0201.561] CloseHandle (hObject=0x654) returned 1 [0201.584] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0201.589] CryptDestroyKey (hKey=0x665ab9a6c0) returned 1 [0201.590] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0201.590] FindNextFileW (in: hFindFile=0x665d90d2e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.590] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0201.590] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\stackedIceCubes.svg", dwFileAttributes=0x80) returned 1 [0201.591] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\stackedIceCubes.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\stackedicecubes.svg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0201.591] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=4807) returned 1 [0201.591] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=4807) returned 1 [0201.591] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x11a5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.591] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0201.593] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0201.593] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a730) returned 1 [0201.593] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0201.594] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0201.594] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x12c7, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x12c7, lpOverlapped=0x0) returned 1 [0201.595] CryptEncrypt (in: hKey=0x665ab9a730, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0201.595] CryptEncrypt (in: hKey=0x665ab9a730, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x12c7, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x12d0) returned 1 [0201.595] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0201.595] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x12d0, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x12d0, lpOverlapped=0x0) returned 1 [0201.595] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0201.595] CryptExportKey (in: hKey=0x665ab9a730, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0201.595] CryptExportKey (in: hKey=0x665ab9a730, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0201.595] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0201.595] CloseHandle (hObject=0x654) returned 1 [0201.612] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0201.617] CryptDestroyKey (hKey=0x665ab9a730) returned 1 [0201.617] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0201.617] FindNextFileW (in: hFindFile=0x665d90d2e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.617] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0201.617] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\waterGlass.svg", dwFileAttributes=0x80) returned 1 [0201.618] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\waterGlass.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\waterglass.svg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0201.618] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=1837) returned 1 [0201.618] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=1837) returned 1 [0201.618] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x60b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.618] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0201.619] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0201.619] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9aea0) returned 1 [0201.620] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0201.620] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0201.620] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x72d, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x72d, lpOverlapped=0x0) returned 1 [0201.620] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0201.620] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x72d, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x730) returned 1 [0201.620] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0201.620] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x730, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x730, lpOverlapped=0x0) returned 1 [0201.620] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0201.620] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0201.620] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0201.621] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0201.621] CloseHandle (hObject=0x654) returned 1 [0201.642] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0201.647] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0201.647] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0201.647] FindNextFileW (in: hFindFile=0x665d90d2e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0201.647] FindClose (in: hFindFile=0x665d90d2e0 | out: hFindFile=0x665d90d2e0) returned 1 [0201.648] SetLastError (dwErrCode=0x0) [0201.648] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.649] GetLastError () returned 0x0 [0201.649] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0201.650] CloseHandle (hObject=0x3e8) returned 1 [0201.651] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0201.651] SetLastError (dwErrCode=0x0) [0201.651] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.651] GetLastError () returned 0xb7 [0201.651] CloseHandle (hObject=0x3e8) returned 1 [0201.651] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\is\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c980 [0201.652] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.652] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.652] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0201.652] FindClose (in: hFindFile=0x665d90c980 | out: hFindFile=0x665d90c980) returned 1 [0201.652] SetLastError (dwErrCode=0x0) [0201.652] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\is\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\is\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.653] GetLastError () returned 0x0 [0201.653] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0201.654] CloseHandle (hObject=0x3e8) returned 1 [0201.654] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0201.655] SetLastError (dwErrCode=0x0) [0201.655] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.655] GetLastError () returned 0xb7 [0201.655] CloseHandle (hObject=0x3e8) returned 1 [0201.655] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\it\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90cb00 [0201.655] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.655] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.655] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0201.655] FindClose (in: hFindFile=0x665d90cb00 | out: hFindFile=0x665d90cb00) returned 1 [0201.656] SetLastError (dwErrCode=0x0) [0201.656] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\it\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\it\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.656] GetLastError () returned 0x0 [0201.656] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0201.657] CloseHandle (hObject=0x3e8) returned 1 [0201.658] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0201.658] SetLastError (dwErrCode=0x0) [0201.658] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.658] GetLastError () returned 0xb7 [0201.658] CloseHandle (hObject=0x3e8) returned 1 [0201.658] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ja\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c800 [0201.659] FindNextFileW (in: hFindFile=0x665d90c800, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.659] FindNextFileW (in: hFindFile=0x665d90c800, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.659] FindNextFileW (in: hFindFile=0x665d90c800, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0201.659] FindClose (in: hFindFile=0x665d90c800 | out: hFindFile=0x665d90c800) returned 1 [0201.659] SetLastError (dwErrCode=0x0) [0201.659] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ja\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ja\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.660] GetLastError () returned 0x0 [0201.660] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0201.661] CloseHandle (hObject=0x3e8) returned 1 [0201.662] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0201.662] SetLastError (dwErrCode=0x0) [0201.662] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.662] GetLastError () returned 0xb7 [0201.662] CloseHandle (hObject=0x3e8) returned 1 [0201.662] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ka\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90cf20 [0201.662] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.662] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.662] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0201.662] FindClose (in: hFindFile=0x665d90cf20 | out: hFindFile=0x665d90cf20) returned 1 [0201.663] SetLastError (dwErrCode=0x0) [0201.663] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ka\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ka\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.663] GetLastError () returned 0x0 [0201.663] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0201.664] CloseHandle (hObject=0x3e8) returned 1 [0201.665] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0201.665] SetLastError (dwErrCode=0x0) [0201.665] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.665] GetLastError () returned 0xb7 [0201.665] CloseHandle (hObject=0x3e8) returned 1 [0201.665] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kk\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bf60 [0201.665] FindNextFileW (in: hFindFile=0x665d90bf60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.666] FindNextFileW (in: hFindFile=0x665d90bf60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.666] FindNextFileW (in: hFindFile=0x665d90bf60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0201.666] FindClose (in: hFindFile=0x665d90bf60 | out: hFindFile=0x665d90bf60) returned 1 [0201.666] SetLastError (dwErrCode=0x0) [0201.666] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kk\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\kk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.667] GetLastError () returned 0x0 [0201.667] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0201.668] CloseHandle (hObject=0x3e8) returned 1 [0201.668] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0201.668] SetLastError (dwErrCode=0x0) [0201.668] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.669] GetLastError () returned 0xb7 [0201.669] CloseHandle (hObject=0x3e8) returned 1 [0201.669] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\km-kh\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90d100 [0201.669] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.669] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.669] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0201.669] FindClose (in: hFindFile=0x665d90d100 | out: hFindFile=0x665d90d100) returned 1 [0201.669] SetLastError (dwErrCode=0x0) [0201.669] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\km-kh\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\km-kh\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.670] GetLastError () returned 0x0 [0201.670] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0201.671] CloseHandle (hObject=0x3e8) returned 1 [0201.672] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0201.672] SetLastError (dwErrCode=0x0) [0201.672] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.672] GetLastError () returned 0xb7 [0201.672] CloseHandle (hObject=0x3e8) returned 1 [0201.672] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kn\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90cda0 [0201.673] FindNextFileW (in: hFindFile=0x665d90cda0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.673] FindNextFileW (in: hFindFile=0x665d90cda0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.673] FindNextFileW (in: hFindFile=0x665d90cda0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0201.673] FindClose (in: hFindFile=0x665d90cda0 | out: hFindFile=0x665d90cda0) returned 1 [0201.673] SetLastError (dwErrCode=0x0) [0201.673] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kn\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\kn\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.674] GetLastError () returned 0x0 [0201.674] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0201.675] CloseHandle (hObject=0x3e8) returned 1 [0201.676] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0201.676] SetLastError (dwErrCode=0x0) [0201.676] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.676] GetLastError () returned 0xb7 [0201.676] CloseHandle (hObject=0x3e8) returned 1 [0201.676] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ko\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c680 [0201.676] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.677] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.677] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0201.677] FindClose (in: hFindFile=0x665d90c680 | out: hFindFile=0x665d90c680) returned 1 [0201.677] SetLastError (dwErrCode=0x0) [0201.677] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ko\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ko\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.677] GetLastError () returned 0x0 [0201.677] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0201.678] CloseHandle (hObject=0x3e8) returned 1 [0201.679] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0201.679] SetLastError (dwErrCode=0x0) [0201.679] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.679] GetLastError () returned 0xb7 [0201.679] CloseHandle (hObject=0x3e8) returned 1 [0201.679] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kok\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c6e0 [0201.679] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.679] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.679] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0201.679] FindClose (in: hFindFile=0x665d90c6e0 | out: hFindFile=0x665d90c6e0) returned 1 [0201.680] SetLastError (dwErrCode=0x0) [0201.680] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kok\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\kok\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.684] GetLastError () returned 0x0 [0201.684] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0201.685] CloseHandle (hObject=0x3e8) returned 1 [0201.688] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0201.688] SetLastError (dwErrCode=0x0) [0201.688] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.689] GetLastError () returned 0xb7 [0201.689] CloseHandle (hObject=0x3e8) returned 1 [0201.689] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ku-arab\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90cd40 [0201.689] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.689] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.689] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0201.689] FindClose (in: hFindFile=0x665d90cd40 | out: hFindFile=0x665d90cd40) returned 1 [0201.689] SetLastError (dwErrCode=0x0) [0201.690] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ku-arab\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ku-arab\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.690] GetLastError () returned 0x0 [0201.690] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0201.691] CloseHandle (hObject=0x3e8) returned 1 [0201.691] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0201.691] SetLastError (dwErrCode=0x0) [0201.691] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.692] GetLastError () returned 0xb7 [0201.692] CloseHandle (hObject=0x3e8) returned 1 [0201.692] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ky\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c680 [0201.692] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.692] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.692] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0201.692] FindClose (in: hFindFile=0x665d90c680 | out: hFindFile=0x665d90c680) returned 1 [0201.692] SetLastError (dwErrCode=0x0) [0201.692] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ky\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ky\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.694] GetLastError () returned 0x0 [0201.694] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0201.695] CloseHandle (hObject=0x3e8) returned 1 [0201.695] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0201.695] SetLastError (dwErrCode=0x0) [0201.695] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.696] GetLastError () returned 0xb7 [0201.696] CloseHandle (hObject=0x3e8) returned 1 [0201.696] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lb-lu\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90cc20 [0201.696] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.696] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.696] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0201.696] FindClose (in: hFindFile=0x665d90cc20 | out: hFindFile=0x665d90cc20) returned 1 [0201.696] SetLastError (dwErrCode=0x0) [0201.696] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lb-lu\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\lb-lu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.697] GetLastError () returned 0x0 [0201.697] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0201.698] CloseHandle (hObject=0x3e8) returned 1 [0201.698] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0201.698] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0201.698] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0201.699] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0201.700] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0201.700] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoadingPage.html", dwFileAttributes=0x80) returned 1 [0201.701] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoadingPage.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\loadingpage.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.701] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=6400) returned 1 [0201.701] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=6400) returned 1 [0201.701] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x17de, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.701] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0201.703] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0201.703] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9a880) returned 1 [0201.703] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0201.703] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0201.704] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x1900, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0x1900, lpOverlapped=0x0) returned 1 [0201.704] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0201.704] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x1900, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x1910) returned 1 [0201.704] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0201.705] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x1910, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0x1910, lpOverlapped=0x0) returned 1 [0201.705] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0201.705] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0201.705] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0201.705] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0201.705] CloseHandle (hObject=0x3e8) returned 1 [0201.731] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0201.738] CryptDestroyKey (hKey=0x665ab9a880) returned 1 [0201.738] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0201.739] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0201.739] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0201.739] SetLastError (dwErrCode=0x0) [0201.739] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.740] GetLastError () returned 0xb7 [0201.740] CloseHandle (hObject=0x3e8) returned 1 [0201.740] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lt\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c560 [0201.740] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.740] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.740] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0201.740] FindClose (in: hFindFile=0x665d90c560 | out: hFindFile=0x665d90c560) returned 1 [0201.741] SetLastError (dwErrCode=0x0) [0201.741] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lt\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\lt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.748] GetLastError () returned 0x0 [0201.748] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0201.749] CloseHandle (hObject=0x3e8) returned 1 [0201.750] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0201.750] SetLastError (dwErrCode=0x0) [0201.750] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.751] GetLastError () returned 0xb7 [0201.751] CloseHandle (hObject=0x3e8) returned 1 [0201.751] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lv\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c6e0 [0201.751] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.751] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.751] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0201.751] FindClose (in: hFindFile=0x665d90c6e0 | out: hFindFile=0x665d90c6e0) returned 1 [0201.751] SetLastError (dwErrCode=0x0) [0201.751] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lv\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\lv\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.752] GetLastError () returned 0x0 [0201.752] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0201.753] CloseHandle (hObject=0x3e8) returned 1 [0201.753] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0201.753] SetLastError (dwErrCode=0x0) [0201.753] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.754] GetLastError () returned 0xb7 [0201.754] CloseHandle (hObject=0x3e8) returned 1 [0201.754] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mi-nz\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c260 [0201.754] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.754] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.754] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0201.754] FindClose (in: hFindFile=0x665d90c260 | out: hFindFile=0x665d90c260) returned 1 [0201.754] SetLastError (dwErrCode=0x0) [0201.754] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mi-nz\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\mi-nz\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.756] GetLastError () returned 0x0 [0201.756] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0201.757] CloseHandle (hObject=0x3e8) returned 1 [0201.758] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0201.758] SetLastError (dwErrCode=0x0) [0201.758] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.758] GetLastError () returned 0xb7 [0201.758] CloseHandle (hObject=0x3e8) returned 1 [0201.758] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mk\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90d280 [0201.758] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.758] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.759] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0201.759] FindClose (in: hFindFile=0x665d90d280 | out: hFindFile=0x665d90d280) returned 1 [0201.759] SetLastError (dwErrCode=0x0) [0201.759] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mk\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\mk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.759] GetLastError () returned 0x0 [0201.759] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0201.760] CloseHandle (hObject=0x3e8) returned 1 [0201.761] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0201.761] SetLastError (dwErrCode=0x0) [0201.761] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.761] GetLastError () returned 0xb7 [0201.761] CloseHandle (hObject=0x3e8) returned 1 [0201.761] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ml-in\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c980 [0201.761] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.761] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.761] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0201.761] FindClose (in: hFindFile=0x665d90c980 | out: hFindFile=0x665d90c980) returned 1 [0201.762] SetLastError (dwErrCode=0x0) [0201.762] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ml-in\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ml-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.763] GetLastError () returned 0x0 [0201.763] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0201.764] CloseHandle (hObject=0x3e8) returned 1 [0201.764] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0201.764] SetLastError (dwErrCode=0x0) [0201.764] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.765] GetLastError () returned 0xb7 [0201.765] CloseHandle (hObject=0x3e8) returned 1 [0201.765] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mn\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c980 [0201.765] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.765] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.765] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0201.765] FindClose (in: hFindFile=0x665d90c980 | out: hFindFile=0x665d90c980) returned 1 [0201.766] SetLastError (dwErrCode=0x0) [0201.766] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mn\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\mn\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.766] GetLastError () returned 0x0 [0201.766] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0201.767] CloseHandle (hObject=0x3e8) returned 1 [0201.768] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0201.768] SetLastError (dwErrCode=0x0) [0201.768] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.768] GetLastError () returned 0xb7 [0201.768] CloseHandle (hObject=0x3e8) returned 1 [0201.768] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mr\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c920 [0201.769] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.769] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.769] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0201.769] FindClose (in: hFindFile=0x665d90c920 | out: hFindFile=0x665d90c920) returned 1 [0201.770] SetLastError (dwErrCode=0x0) [0201.770] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mr\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\mr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.771] GetLastError () returned 0x0 [0201.771] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0201.772] CloseHandle (hObject=0x3e8) returned 1 [0201.772] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0201.772] SetLastError (dwErrCode=0x0) [0201.772] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.772] GetLastError () returned 0xb7 [0201.773] CloseHandle (hObject=0x3e8) returned 1 [0201.773] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ms\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c0e0 [0201.774] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.774] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.774] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0201.774] FindClose (in: hFindFile=0x665d90c0e0 | out: hFindFile=0x665d90c0e0) returned 1 [0201.774] SetLastError (dwErrCode=0x0) [0201.774] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ms\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ms\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.774] GetLastError () returned 0x0 [0201.774] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0201.775] CloseHandle (hObject=0x3e8) returned 1 [0201.776] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0201.776] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0201.776] SetLastError (dwErrCode=0x0) [0201.776] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.776] GetLastError () returned 0xb7 [0201.776] CloseHandle (hObject=0x3e8) returned 1 [0201.776] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mt-mt\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c440 [0201.777] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.777] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.777] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0201.777] FindClose (in: hFindFile=0x665d90c440 | out: hFindFile=0x665d90c440) returned 1 [0201.777] SetLastError (dwErrCode=0x0) [0201.777] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mt-mt\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\mt-mt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.778] GetLastError () returned 0x0 [0201.778] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0201.779] CloseHandle (hObject=0x3e8) returned 1 [0201.779] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0201.779] SetLastError (dwErrCode=0x0) [0201.779] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.780] GetLastError () returned 0xb7 [0201.780] CloseHandle (hObject=0x3e8) returned 1 [0201.780] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nb-no\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90cc20 [0201.781] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.781] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.781] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0201.781] FindClose (in: hFindFile=0x665d90cc20 | out: hFindFile=0x665d90cc20) returned 1 [0201.781] SetLastError (dwErrCode=0x0) [0201.781] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nb-no\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\nb-no\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.782] GetLastError () returned 0x0 [0201.782] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0201.782] CloseHandle (hObject=0x3e8) returned 1 [0201.783] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0201.783] SetLastError (dwErrCode=0x0) [0201.783] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.783] GetLastError () returned 0xb7 [0201.783] CloseHandle (hObject=0x3e8) returned 1 [0201.783] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ne-np\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c800 [0201.783] FindNextFileW (in: hFindFile=0x665d90c800, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.783] FindNextFileW (in: hFindFile=0x665d90c800, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.783] FindNextFileW (in: hFindFile=0x665d90c800, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0201.783] FindClose (in: hFindFile=0x665d90c800 | out: hFindFile=0x665d90c800) returned 1 [0201.784] SetLastError (dwErrCode=0x0) [0201.784] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ne-np\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ne-np\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.785] GetLastError () returned 0x0 [0201.785] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0201.786] CloseHandle (hObject=0x3e8) returned 1 [0201.786] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0201.786] SetLastError (dwErrCode=0x0) [0201.786] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.786] GetLastError () returned 0xb7 [0201.786] CloseHandle (hObject=0x3e8) returned 1 [0201.786] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nl\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90cb00 [0201.787] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.787] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.787] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0201.787] FindClose (in: hFindFile=0x665d90cb00 | out: hFindFile=0x665d90cb00) returned 1 [0201.787] SetLastError (dwErrCode=0x0) [0201.787] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nl\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\nl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.787] GetLastError () returned 0x0 [0201.788] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0201.788] CloseHandle (hObject=0x3e8) returned 1 [0201.789] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0201.789] SetLastError (dwErrCode=0x0) [0201.789] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.789] GetLastError () returned 0xb7 [0201.789] CloseHandle (hObject=0x3e8) returned 1 [0201.789] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nn-no\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bd80 [0201.790] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.790] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.791] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0201.791] FindClose (in: hFindFile=0x665d90bd80 | out: hFindFile=0x665d90bd80) returned 1 [0201.791] SetLastError (dwErrCode=0x0) [0201.791] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nn-no\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\nn-no\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.792] GetLastError () returned 0x0 [0201.792] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0201.793] CloseHandle (hObject=0x3e8) returned 1 [0201.793] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0201.793] SetLastError (dwErrCode=0x0) [0201.793] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.793] GetLastError () returned 0xb7 [0201.793] CloseHandle (hObject=0x3e8) returned 1 [0201.793] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nso-za\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bfc0 [0201.794] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.794] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.794] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0201.794] FindClose (in: hFindFile=0x665d90bfc0 | out: hFindFile=0x665d90bfc0) returned 1 [0201.794] SetLastError (dwErrCode=0x0) [0201.794] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nso-za\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\nso-za\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.794] GetLastError () returned 0x0 [0201.794] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0201.795] CloseHandle (hObject=0x3e8) returned 1 [0201.796] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0201.796] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0201.796] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveLogo.png", dwFileAttributes=0x80) returned 1 [0201.798] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveLogo.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\onedrivelogo.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.798] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=4668) returned 1 [0201.798] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=4668) returned 1 [0201.798] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x111a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.798] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0201.800] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0201.800] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9af10) returned 1 [0201.800] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0201.800] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0201.800] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x123c, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0x123c, lpOverlapped=0x0) returned 1 [0201.801] CryptEncrypt (in: hKey=0x665ab9af10, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0201.801] CryptEncrypt (in: hKey=0x665ab9af10, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x123c, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x1240) returned 1 [0201.801] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0201.801] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x1240, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0x1240, lpOverlapped=0x0) returned 1 [0201.802] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0201.802] CryptExportKey (in: hKey=0x665ab9af10, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0201.802] CryptExportKey (in: hKey=0x665ab9af10, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0201.802] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0201.802] CloseHandle (hObject=0x3e8) returned 1 [0201.821] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0201.825] CryptDestroyKey (hKey=0x665ab9af10) returned 1 [0201.825] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0201.826] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0201.826] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0201.826] SetLastError (dwErrCode=0x0) [0201.826] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.826] GetLastError () returned 0xb7 [0201.826] CloseHandle (hObject=0x3e8) returned 1 [0201.827] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\or-in\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bc60 [0201.830] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.831] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.831] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0201.831] FindClose (in: hFindFile=0x665d90bc60 | out: hFindFile=0x665d90bc60) returned 1 [0201.831] SetLastError (dwErrCode=0x0) [0201.831] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\or-in\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\or-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.832] GetLastError () returned 0x0 [0201.832] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0201.833] CloseHandle (hObject=0x3e8) returned 1 [0201.834] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0201.834] SetLastError (dwErrCode=0x0) [0201.834] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.834] GetLastError () returned 0xb7 [0201.834] CloseHandle (hObject=0x3e8) returned 1 [0201.834] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90d040 [0201.835] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.835] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.835] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0201.835] FindClose (in: hFindFile=0x665d90d040 | out: hFindFile=0x665d90d040) returned 1 [0201.835] SetLastError (dwErrCode=0x0) [0201.835] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\pa\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.835] GetLastError () returned 0x0 [0201.835] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0201.837] CloseHandle (hObject=0x3e8) returned 1 [0201.837] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0201.837] SetLastError (dwErrCode=0x0) [0201.837] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.837] GetLastError () returned 0xb7 [0201.837] CloseHandle (hObject=0x3e8) returned 1 [0201.838] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa-arab\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c560 [0201.839] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.839] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.839] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0201.839] FindClose (in: hFindFile=0x665d90c560 | out: hFindFile=0x665d90c560) returned 1 [0201.839] SetLastError (dwErrCode=0x0) [0201.839] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa-arab\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\pa-arab\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.840] GetLastError () returned 0x0 [0201.840] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0201.841] CloseHandle (hObject=0x3e8) returned 1 [0201.841] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0201.841] SetLastError (dwErrCode=0x0) [0201.841] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.842] GetLastError () returned 0xb7 [0201.842] CloseHandle (hObject=0x3e8) returned 1 [0201.842] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pl\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c980 [0201.842] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.842] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.842] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0201.842] FindClose (in: hFindFile=0x665d90c980 | out: hFindFile=0x665d90c980) returned 1 [0201.842] SetLastError (dwErrCode=0x0) [0201.843] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pl\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\pl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.843] GetLastError () returned 0x0 [0201.843] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0201.844] CloseHandle (hObject=0x3e8) returned 1 [0201.845] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0201.845] SetLastError (dwErrCode=0x0) [0201.845] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.845] GetLastError () returned 0xb7 [0201.845] CloseHandle (hObject=0x3e8) returned 1 [0201.845] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\platforms\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c4a0 [0201.846] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.846] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.846] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0201.846] FindClose (in: hFindFile=0x665d90c4a0 | out: hFindFile=0x665d90c4a0) returned 1 [0201.846] SetLastError (dwErrCode=0x0) [0201.847] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\platforms\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\platforms\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.848] GetLastError () returned 0x0 [0201.848] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0201.849] CloseHandle (hObject=0x3e8) returned 1 [0201.849] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0201.849] SetLastError (dwErrCode=0x0) [0201.849] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.849] GetLastError () returned 0xb7 [0201.849] CloseHandle (hObject=0x3e8) returned 1 [0201.849] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\prs-af\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90ca40 [0201.850] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.850] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.850] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0201.850] FindClose (in: hFindFile=0x665d90ca40 | out: hFindFile=0x665d90ca40) returned 1 [0201.850] SetLastError (dwErrCode=0x0) [0201.850] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\prs-af\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\prs-af\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.850] GetLastError () returned 0x0 [0201.850] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0201.851] CloseHandle (hObject=0x3e8) returned 1 [0201.851] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0201.851] SetLastError (dwErrCode=0x0) [0201.851] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.852] GetLastError () returned 0xb7 [0201.852] CloseHandle (hObject=0x3e8) returned 1 [0201.852] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-br\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c980 [0201.853] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.853] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.853] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0201.853] FindClose (in: hFindFile=0x665d90c980 | out: hFindFile=0x665d90c980) returned 1 [0201.853] SetLastError (dwErrCode=0x0) [0201.853] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-br\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\pt-br\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.854] GetLastError () returned 0x0 [0201.854] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0201.855] CloseHandle (hObject=0x3e8) returned 1 [0201.855] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0201.855] SetLastError (dwErrCode=0x0) [0201.855] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.856] GetLastError () returned 0xb7 [0201.856] CloseHandle (hObject=0x3e8) returned 1 [0201.856] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-pt\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c1a0 [0201.856] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.856] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.856] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0201.856] FindClose (in: hFindFile=0x665d90c1a0 | out: hFindFile=0x665d90c1a0) returned 1 [0201.856] SetLastError (dwErrCode=0x0) [0201.856] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-pt\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\pt-pt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.857] GetLastError () returned 0x0 [0201.857] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0201.858] CloseHandle (hObject=0x3e8) returned 1 [0201.858] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0201.858] SetLastError (dwErrCode=0x0) [0201.858] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0201.858] GetLastError () returned 0xb7 [0201.858] CloseHandle (hObject=0x3e8) returned 1 [0201.859] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bc60 [0201.860] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.860] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.860] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0201.860] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\fabricmdl2.ttf", dwFileAttributes=0x80) returned 1 [0201.861] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\fabricmdl2.ttf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\fabricmdl2.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0201.861] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=106588) returned 1 [0201.861] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=106588) returned 1 [0201.861] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x19f3a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.861] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0201.863] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0201.863] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a6c0) returned 1 [0201.863] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0201.863] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0201.863] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x1a05c, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x1a05c, lpOverlapped=0x0) returned 1 [0201.878] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0201.878] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x1a05c, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x1a060) returned 1 [0201.878] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0201.878] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x1a060, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x1a060, lpOverlapped=0x0) returned 1 [0201.879] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0201.879] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0201.879] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0201.879] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0201.879] CloseHandle (hObject=0x654) returned 1 [0201.898] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0201.904] CryptDestroyKey (hKey=0x665ab9a6c0) returned 1 [0201.904] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0201.904] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0201.904] SetLastError (dwErrCode=0x0) [0201.904] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0201.906] GetLastError () returned 0x0 [0201.906] WriteFile (in: hFile=0x654, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7ad80*=0x324, lpOverlapped=0x0) returned 1 [0201.907] CloseHandle (hObject=0x654) returned 1 [0201.907] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665d90bcc0 [0201.909] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0201.909] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0201.909] SetLastError (dwErrCode=0x0) [0201.909] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0201.910] GetLastError () returned 0x0 [0201.910] WriteFile (in: hFile=0x440, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7a5d0*=0x324, lpOverlapped=0x0) returned 1 [0201.911] CloseHandle (hObject=0x440) returned 1 [0201.911] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\*.*", lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0x665d90bd20 [0201.912] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0201.912] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0201.912] SetLastError (dwErrCode=0x0) [0201.912] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0201.913] GetLastError () returned 0x0 [0201.913] WriteFile (in: hFile=0x5cc, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da79e20*=0x324, lpOverlapped=0x0) returned 1 [0201.914] CloseHandle (hObject=0x5cc) returned 1 [0201.914] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665d90d0a0 [0201.915] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0201.915] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0201.915] SetLastError (dwErrCode=0x0) [0201.915] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls\\styles\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0201.915] GetLastError () returned 0x0 [0201.915] WriteFile (in: hFile=0x410, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da79670*=0x324, lpOverlapped=0x0) returned 1 [0201.916] CloseHandle (hObject=0x410) returned 1 [0201.917] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665d90d040 [0201.918] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0201.918] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0201.918] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0201.918] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\qmldir", dwFileAttributes=0x80) returned 1 [0201.919] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls\\styles\\flat\\qmldir"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x450 [0201.919] GetFileSizeEx (in: hFile=0x450, lpFileSize=0x665da78cb8 | out: lpFileSize=0x665da78cb8*=106) returned 1 [0201.919] GetFileSizeEx (in: hFile=0x450, lpFileSize=0x665da78cc8 | out: lpFileSize=0x665da78cc8*=106) returned 1 [0201.919] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da78ca0 | out: phKey=0x665da78ca0*=0x665ab9a880) returned 1 [0201.920] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0201.920] SetFilePointer (in: hFile=0x450, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0201.920] ReadFile (in: hFile=0x450, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x6a, lpNumberOfBytesRead=0x665da78cb0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da78cb0*=0x6a, lpOverlapped=0x0) returned 1 [0201.922] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da78cac*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da78cac*=0xf4250) returned 1 [0201.922] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da78ca8*=0x6a, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da78ca8*=0x70) returned 1 [0201.922] SetFilePointer (in: hFile=0x450, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0201.922] WriteFile (in: hFile=0x450, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x665da78cb0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da78cb0*=0x70, lpOverlapped=0x0) returned 1 [0201.923] WriteFile (in: hFile=0x450, lpBuffer=0x665da78cf0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da78cb4, lpOverlapped=0x0 | out: lpBuffer=0x665da78cf0*, lpNumberOfBytesWritten=0x665da78cb4*=0x6, lpOverlapped=0x0) returned 1 [0201.923] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da78cc0 | out: pbData=0x0*, pdwDataLen=0x665da78cc0*=0x10c) returned 1 [0201.923] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da78d40, pdwDataLen=0x665da78cc0 | out: pbData=0x665da78d40*, pdwDataLen=0x665da78cc0*=0x10c) returned 1 [0201.923] WriteFile (in: hFile=0x450, lpBuffer=0x665da78d40*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da78cb4, lpOverlapped=0x0 | out: lpBuffer=0x665da78d40*, lpNumberOfBytesWritten=0x665da78cb4*=0x10c, lpOverlapped=0x0) returned 1 [0201.923] CloseHandle (hObject=0x450) returned 1 [0201.940] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0201.944] CryptDestroyKey (hKey=0x665ab9a880) returned 1 [0201.944] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0201.944] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0201.944] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0201.944] FindClose (in: hFindFile=0x665d90d040 | out: hFindFile=0x665d90d040) returned 1 [0201.945] SetLastError (dwErrCode=0x0) [0201.945] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls\\styles\\flat\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0201.946] GetLastError () returned 0x0 [0201.946] WriteFile (in: hFile=0x410, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da79670*=0x324, lpOverlapped=0x0) returned 1 [0201.946] CloseHandle (hObject=0x410) returned 1 [0201.947] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0201.947] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0201.947] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\qmldir", dwFileAttributes=0x80) returned 1 [0201.948] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls\\styles\\qmldir"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0201.949] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=1575) returned 1 [0201.949] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=1575) returned 1 [0201.949] SetFilePointerEx (in: hFile=0x410, liDistanceToMove=0x505, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.949] ReadFile (in: hFile=0x410, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0201.950] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0201.950] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665ab9a6c0) returned 1 [0201.950] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0201.951] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0201.951] ReadFile (in: hFile=0x410, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x627, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79460*=0x627, lpOverlapped=0x0) returned 1 [0201.951] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0201.951] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x627, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x630) returned 1 [0201.951] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0201.951] WriteFile (in: hFile=0x410, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x630, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79460*=0x630, lpOverlapped=0x0) returned 1 [0201.951] WriteFile (in: hFile=0x410, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0201.951] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0201.952] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0201.952] WriteFile (in: hFile=0x410, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0201.952] CloseHandle (hObject=0x410) returned 1 [0201.972] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0201.976] CryptDestroyKey (hKey=0x665ab9a6c0) returned 1 [0201.976] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0201.976] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0201.976] FindClose (in: hFindFile=0x665d90d0a0 | out: hFindFile=0x665d90d0a0) returned 1 [0201.976] SetLastError (dwErrCode=0x0) [0201.976] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls\\styles\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0201.977] GetLastError () returned 0xb7 [0201.977] CloseHandle (hObject=0x5cc) returned 1 [0201.977] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0 [0201.977] FindClose (in: hFindFile=0x665d90bd20 | out: hFindFile=0x665d90bd20) returned 1 [0201.977] SetLastError (dwErrCode=0x0) [0201.977] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0201.977] GetLastError () returned 0xb7 [0201.977] CloseHandle (hObject=0x440) returned 1 [0201.978] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0201.978] SetLastError (dwErrCode=0x0) [0201.978] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0201.978] GetLastError () returned 0xb7 [0201.978] CloseHandle (hObject=0x440) returned 1 [0201.978] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\*.*", lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0x665d90c6e0 [0201.979] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0201.979] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0201.979] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0201.980] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\Button.qml", dwFileAttributes=0x80) returned 1 [0201.980] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\Button.qml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\button.qml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0201.981] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=3584) returned 1 [0201.981] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=3584) returned 1 [0201.981] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0xcde, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.981] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0201.982] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0201.982] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9aab0) returned 1 [0201.982] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0201.982] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0201.982] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0xe00, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0xe00, lpOverlapped=0x0) returned 1 [0201.983] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0201.983] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0xe00, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0xe10) returned 1 [0201.983] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0201.983] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0xe10, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0xe10, lpOverlapped=0x0) returned 1 [0201.983] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0201.983] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0201.983] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0201.983] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0201.983] CloseHandle (hObject=0x5cc) returned 1 [0202.001] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0202.006] CryptDestroyKey (hKey=0x665ab9aab0) returned 1 [0202.006] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0202.006] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0202.006] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0202.006] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\Menu.qml", dwFileAttributes=0x80) returned 1 [0202.007] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\Menu.qml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\menu.qml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0202.007] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=2865) returned 1 [0202.007] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=2865) returned 1 [0202.007] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0xa0f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.007] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0202.009] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0202.009] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9aea0) returned 1 [0202.009] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0202.009] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0202.009] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0xb31, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0xb31, lpOverlapped=0x0) returned 1 [0202.009] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0202.009] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0xb31, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0xb40) returned 1 [0202.009] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0202.009] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0xb40, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0xb40, lpOverlapped=0x0) returned 1 [0202.009] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0202.009] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0202.009] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0202.009] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0202.010] CloseHandle (hObject=0x5cc) returned 1 [0202.029] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0202.033] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0202.033] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0202.034] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0202.034] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0202.034] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\MenuItem.qml", dwFileAttributes=0x80) returned 1 [0202.035] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\MenuItem.qml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\menuitem.qml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0202.036] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=3646) returned 1 [0202.036] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=3646) returned 1 [0202.036] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0xd1c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.036] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0202.037] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0202.037] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9aea0) returned 1 [0202.037] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0202.037] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0202.037] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0xe3e, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0xe3e, lpOverlapped=0x0) returned 1 [0202.037] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0202.038] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0xe3e, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0xe40) returned 1 [0202.038] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0202.038] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0xe40, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0xe40, lpOverlapped=0x0) returned 1 [0202.038] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0202.038] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0202.038] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0202.038] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0202.038] CloseHandle (hObject=0x5cc) returned 1 [0202.059] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0202.064] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0202.064] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0202.064] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0202.064] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0202.065] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\plugins.qmltypes", dwFileAttributes=0x80) returned 1 [0202.065] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\plugins.qmltypes" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\plugins.qmltypes"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0202.066] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=70711) returned 1 [0202.066] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=70711) returned 1 [0202.066] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x11315, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.066] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0202.067] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0202.067] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a340) returned 1 [0202.067] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0202.067] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0202.067] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x11437, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x11437, lpOverlapped=0x0) returned 1 [0202.070] CryptEncrypt (in: hKey=0x665ab9a340, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0202.070] CryptEncrypt (in: hKey=0x665ab9a340, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x11437, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x11440) returned 1 [0202.070] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0202.070] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x11440, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x11440, lpOverlapped=0x0) returned 1 [0202.070] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0202.070] CryptExportKey (in: hKey=0x665ab9a340, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0202.070] CryptExportKey (in: hKey=0x665ab9a340, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0202.070] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0202.070] CloseHandle (hObject=0x5cc) returned 1 [0202.092] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0202.098] CryptDestroyKey (hKey=0x665ab9a340) returned 1 [0202.098] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0202.098] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0202.098] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0202.098] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ProgressBar.qml", dwFileAttributes=0x80) returned 1 [0202.100] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ProgressBar.qml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\progressbar.qml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0202.101] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=2791) returned 1 [0202.101] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=2791) returned 1 [0202.101] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x9c5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.101] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0202.103] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0202.103] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9af10) returned 1 [0202.103] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0202.103] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0202.103] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0xae7, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0xae7, lpOverlapped=0x0) returned 1 [0202.103] CryptEncrypt (in: hKey=0x665ab9af10, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0202.103] CryptEncrypt (in: hKey=0x665ab9af10, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0xae7, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0xaf0) returned 1 [0202.103] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0202.103] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0xaf0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0xaf0, lpOverlapped=0x0) returned 1 [0202.104] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0202.104] CryptExportKey (in: hKey=0x665ab9af10, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0202.104] CryptExportKey (in: hKey=0x665ab9af10, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0202.104] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0202.104] CloseHandle (hObject=0x5cc) returned 1 [0202.125] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0202.130] CryptDestroyKey (hKey=0x665ab9af10) returned 1 [0202.130] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0202.131] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0202.131] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0202.131] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\qmldir", dwFileAttributes=0x80) returned 1 [0202.132] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\qmldir"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0202.132] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=140) returned 1 [0202.132] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=140) returned 1 [0202.133] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a110) returned 1 [0202.133] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0202.133] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0202.133] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x8c, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x8c, lpOverlapped=0x0) returned 1 [0202.141] CryptEncrypt (in: hKey=0x665ab9a110, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0202.141] CryptEncrypt (in: hKey=0x665ab9a110, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x8c, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x90) returned 1 [0202.141] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0202.141] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x90, lpOverlapped=0x0) returned 1 [0202.141] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0202.141] CryptExportKey (in: hKey=0x665ab9a110, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0202.141] CryptExportKey (in: hKey=0x665ab9a110, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0202.141] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0202.141] CloseHandle (hObject=0x5cc) returned 1 [0202.164] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0202.169] CryptDestroyKey (hKey=0x665ab9a110) returned 1 [0202.169] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0202.170] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0202.170] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0202.170] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0202.170] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ScrollBar.qml", dwFileAttributes=0x80) returned 1 [0202.171] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ScrollBar.qml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\scrollbar.qml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0202.219] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=3130) returned 1 [0202.219] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=3130) returned 1 [0202.219] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0xb18, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.219] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0202.221] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0202.221] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9aab0) returned 1 [0202.221] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0202.222] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0202.222] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0xc3a, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0xc3a, lpOverlapped=0x0) returned 1 [0202.222] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0202.222] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0xc3a, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0xc40) returned 1 [0202.222] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0202.222] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0xc40, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0xc40, lpOverlapped=0x0) returned 1 [0202.222] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0202.222] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0202.222] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0202.222] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0202.222] CloseHandle (hObject=0x5cc) returned 1 [0202.241] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0202.247] CryptDestroyKey (hKey=0x665ab9aab0) returned 1 [0202.247] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0202.247] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0202.247] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0202.248] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ScrollIndicator.qml", dwFileAttributes=0x80) returned 1 [0202.248] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ScrollIndicator.qml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\scrollindicator.qml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0202.249] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=2981) returned 1 [0202.249] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=2981) returned 1 [0202.249] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0xa83, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.249] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0202.251] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0202.251] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9aab0) returned 1 [0202.251] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0202.251] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0202.251] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0xba5, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0xba5, lpOverlapped=0x0) returned 1 [0202.251] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0202.252] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0xba5, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0xbb0) returned 1 [0202.252] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0202.252] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0xbb0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0xbb0, lpOverlapped=0x0) returned 1 [0202.252] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0202.252] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0202.252] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0202.252] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0202.252] CloseHandle (hObject=0x5cc) returned 1 [0202.276] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0202.282] CryptDestroyKey (hKey=0x665ab9aab0) returned 1 [0202.282] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0202.282] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0 [0202.282] FindClose (in: hFindFile=0x665d90c6e0 | out: hFindFile=0x665d90c6e0) returned 1 [0202.283] SetLastError (dwErrCode=0x0) [0202.283] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0202.283] GetLastError () returned 0x0 [0202.283] WriteFile (in: hFile=0x440, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7a5d0*=0x324, lpOverlapped=0x0) returned 1 [0202.284] CloseHandle (hObject=0x440) returned 1 [0202.285] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0202.285] SetLastError (dwErrCode=0x0) [0202.285] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0202.285] GetLastError () returned 0xb7 [0202.285] CloseHandle (hObject=0x440) returned 1 [0202.285] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\*.*", lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0x665d90c6e0 [0202.287] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0202.287] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0202.287] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0202.287] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\plugins.qmltypes", dwFileAttributes=0x80) returned 1 [0202.288] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\plugins.qmltypes" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\extras\\plugins.qmltypes"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0202.288] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=29879) returned 1 [0202.288] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=29879) returned 1 [0202.288] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x7395, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.288] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0202.290] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0202.290] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a3b0) returned 1 [0202.290] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0202.290] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0202.290] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x74b7, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x74b7, lpOverlapped=0x0) returned 1 [0202.292] CryptEncrypt (in: hKey=0x665ab9a3b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0202.292] CryptEncrypt (in: hKey=0x665ab9a3b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x74b7, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x74c0) returned 1 [0202.292] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0202.292] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x74c0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x74c0, lpOverlapped=0x0) returned 1 [0202.293] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0202.293] CryptExportKey (in: hKey=0x665ab9a3b0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0202.293] CryptExportKey (in: hKey=0x665ab9a3b0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0202.293] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0202.293] CloseHandle (hObject=0x5cc) returned 1 [0202.314] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0202.318] CryptDestroyKey (hKey=0x665ab9a3b0) returned 1 [0202.318] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0202.319] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0202.319] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0202.319] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\qmldir", dwFileAttributes=0x80) returned 1 [0202.321] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\extras\\qmldir"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0202.321] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=144) returned 1 [0202.321] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=144) returned 1 [0202.321] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a880) returned 1 [0202.321] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0202.321] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0202.322] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x90, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x90, lpOverlapped=0x0) returned 1 [0202.323] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0202.323] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x90, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0xa0) returned 1 [0202.323] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0202.323] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0xa0, lpOverlapped=0x0) returned 1 [0202.323] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0202.323] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0202.323] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0202.323] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0202.323] CloseHandle (hObject=0x5cc) returned 1 [0202.342] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0202.347] CryptDestroyKey (hKey=0x665ab9a880) returned 1 [0202.347] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0202.347] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0202.347] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0 [0202.347] FindClose (in: hFindFile=0x665d90c6e0 | out: hFindFile=0x665d90c6e0) returned 1 [0202.347] SetLastError (dwErrCode=0x0) [0202.347] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\extras\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0202.366] GetLastError () returned 0x0 [0202.366] WriteFile (in: hFile=0x440, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7a5d0*=0x324, lpOverlapped=0x0) returned 1 [0202.367] CloseHandle (hObject=0x440) returned 1 [0202.368] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0202.368] SetLastError (dwErrCode=0x0) [0202.368] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0202.368] GetLastError () returned 0xb7 [0202.368] CloseHandle (hObject=0x440) returned 1 [0202.368] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\*.*", lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0x665d90ce60 [0202.368] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0202.368] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0202.369] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0202.369] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\plugins.qmltypes", dwFileAttributes=0x80) returned 1 [0202.370] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\plugins.qmltypes" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\layouts\\plugins.qmltypes"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0202.370] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=3790) returned 1 [0202.370] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=3790) returned 1 [0202.370] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0xdac, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.370] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0202.372] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0202.372] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a6c0) returned 1 [0202.372] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0202.372] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0202.372] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0xece, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0xece, lpOverlapped=0x0) returned 1 [0202.373] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0202.373] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0xece, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0xed0) returned 1 [0202.373] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0202.373] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0xed0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0xed0, lpOverlapped=0x0) returned 1 [0202.373] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0202.373] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0202.373] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0202.373] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0202.373] CloseHandle (hObject=0x5cc) returned 1 [0202.394] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0202.399] CryptDestroyKey (hKey=0x665ab9a6c0) returned 1 [0202.399] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0202.399] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0202.399] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0202.400] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\qmldir", dwFileAttributes=0x80) returned 1 [0202.401] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\layouts\\qmldir"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0202.402] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=130) returned 1 [0202.402] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=130) returned 1 [0202.402] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9aea0) returned 1 [0202.402] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0202.402] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0202.402] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x82, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x82, lpOverlapped=0x0) returned 1 [0202.404] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0202.404] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x82, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x90) returned 1 [0202.404] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0202.404] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x90, lpOverlapped=0x0) returned 1 [0202.404] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0202.404] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0202.404] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0202.404] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0202.404] CloseHandle (hObject=0x5cc) returned 1 [0202.428] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0202.432] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0202.432] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0202.433] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0202.433] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0 [0202.433] FindClose (in: hFindFile=0x665d90ce60 | out: hFindFile=0x665d90ce60) returned 1 [0202.433] SetLastError (dwErrCode=0x0) [0202.433] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\layouts\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0202.435] GetLastError () returned 0x0 [0202.435] WriteFile (in: hFile=0x440, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7a5d0*=0x324, lpOverlapped=0x0) returned 1 [0202.436] CloseHandle (hObject=0x440) returned 1 [0202.436] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0202.436] SetLastError (dwErrCode=0x0) [0202.436] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0202.437] GetLastError () returned 0xb7 [0202.437] CloseHandle (hObject=0x440) returned 1 [0202.437] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\*.*", lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0x665d90bd20 [0202.439] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0202.439] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0202.439] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0202.439] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\plugins.qmltypes", dwFileAttributes=0x80) returned 1 [0202.441] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\plugins.qmltypes" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\templates.2\\plugins.qmltypes"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0202.441] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=51242) returned 1 [0202.441] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=51242) returned 1 [0202.441] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0xc708, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.441] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0202.443] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0202.443] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a6c0) returned 1 [0202.443] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0202.443] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0202.444] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0xc82a, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0xc82a, lpOverlapped=0x0) returned 1 [0202.446] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0202.446] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0xc82a, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0xc830) returned 1 [0202.446] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0202.446] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0xc830, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0xc830, lpOverlapped=0x0) returned 1 [0202.446] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0202.446] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0202.446] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0202.446] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0202.447] CloseHandle (hObject=0x5cc) returned 1 [0202.464] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0202.468] CryptDestroyKey (hKey=0x665ab9a6c0) returned 1 [0202.468] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0202.469] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0202.469] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0202.469] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\qmldir", dwFileAttributes=0x80) returned 1 [0202.471] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\templates.2\\qmldir"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0202.471] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=121) returned 1 [0202.471] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=121) returned 1 [0202.471] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a0a0) returned 1 [0202.471] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0202.472] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0202.472] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x79, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x79, lpOverlapped=0x0) returned 1 [0202.473] CryptEncrypt (in: hKey=0x665ab9a0a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0202.473] CryptEncrypt (in: hKey=0x665ab9a0a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x79, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x80) returned 1 [0202.473] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0202.473] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x80, lpOverlapped=0x0) returned 1 [0202.473] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0202.473] CryptExportKey (in: hKey=0x665ab9a0a0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0202.474] CryptExportKey (in: hKey=0x665ab9a0a0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0202.474] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0202.474] CloseHandle (hObject=0x5cc) returned 1 [0202.495] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0202.500] CryptDestroyKey (hKey=0x665ab9a0a0) returned 1 [0202.501] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0202.501] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0202.501] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0 [0202.501] FindClose (in: hFindFile=0x665d90bd20 | out: hFindFile=0x665d90bd20) returned 1 [0202.501] SetLastError (dwErrCode=0x0) [0202.501] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\templates.2\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0202.503] GetLastError () returned 0x0 [0202.503] WriteFile (in: hFile=0x440, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7a5d0*=0x324, lpOverlapped=0x0) returned 1 [0202.504] CloseHandle (hObject=0x440) returned 1 [0202.504] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0202.504] SetLastError (dwErrCode=0x0) [0202.504] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0202.505] GetLastError () returned 0xb7 [0202.505] CloseHandle (hObject=0x440) returned 1 [0202.505] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\*.*", lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0x665d90c020 [0202.505] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0202.505] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0202.505] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0202.506] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\plugins.qmltypes", dwFileAttributes=0x80) returned 1 [0202.507] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\plugins.qmltypes" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\window.2\\plugins.qmltypes"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0202.508] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=11772) returned 1 [0202.508] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=11772) returned 1 [0202.508] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x2cda, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.508] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0202.509] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0202.509] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9aea0) returned 1 [0202.509] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0202.510] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0202.510] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x2dfc, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x2dfc, lpOverlapped=0x0) returned 1 [0202.511] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0202.511] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x2dfc, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x2e00) returned 1 [0202.511] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0202.511] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2e00, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x2e00, lpOverlapped=0x0) returned 1 [0202.511] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0202.512] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0202.512] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0202.512] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0202.512] CloseHandle (hObject=0x5cc) returned 1 [0202.534] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0202.539] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0202.539] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0202.539] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0202.539] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0202.540] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\qmldir", dwFileAttributes=0x80) returned 1 [0202.540] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\window.2\\qmldir"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0202.541] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=122) returned 1 [0202.541] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=122) returned 1 [0202.541] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a340) returned 1 [0202.541] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0202.541] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0202.541] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x7a, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x7a, lpOverlapped=0x0) returned 1 [0202.543] CryptEncrypt (in: hKey=0x665ab9a340, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0202.543] CryptEncrypt (in: hKey=0x665ab9a340, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x7a, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x80) returned 1 [0202.543] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0202.543] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x80, lpOverlapped=0x0) returned 1 [0202.543] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0202.543] CryptExportKey (in: hKey=0x665ab9a340, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0202.543] CryptExportKey (in: hKey=0x665ab9a340, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0202.543] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0202.543] CloseHandle (hObject=0x5cc) returned 1 [0202.570] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0202.575] CryptDestroyKey (hKey=0x665ab9a340) returned 1 [0202.575] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0202.576] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0202.576] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0 [0202.576] FindClose (in: hFindFile=0x665d90c020 | out: hFindFile=0x665d90c020) returned 1 [0202.576] SetLastError (dwErrCode=0x0) [0202.576] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\window.2\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0202.592] GetLastError () returned 0x0 [0202.592] WriteFile (in: hFile=0x440, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7a5d0*=0x324, lpOverlapped=0x0) returned 1 [0202.594] CloseHandle (hObject=0x440) returned 1 [0202.594] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0202.594] FindClose (in: hFindFile=0x665d90bcc0 | out: hFindFile=0x665d90bcc0) returned 1 [0202.594] SetLastError (dwErrCode=0x0) [0202.594] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0202.595] GetLastError () returned 0xb7 [0202.595] CloseHandle (hObject=0x654) returned 1 [0202.595] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0202.595] SetLastError (dwErrCode=0x0) [0202.595] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0202.595] GetLastError () returned 0xb7 [0202.595] CloseHandle (hObject=0x654) returned 1 [0202.595] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665d90d280 [0202.596] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0202.596] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0202.596] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0202.596] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\plugins.qmltypes", dwFileAttributes=0x80) returned 1 [0202.597] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\plugins.qmltypes" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick.2\\plugins.qmltypes"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0202.597] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x665da7a3c8 | out: lpFileSize=0x665da7a3c8*=185682) returned 1 [0202.597] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x665da7a3d8 | out: lpFileSize=0x665da7a3d8*=185682) returned 1 [0202.597] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x2d430, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.597] ReadFile (in: hFile=0x440, lpBuffer=0x665da7a428, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7a3e8, lpOverlapped=0x0 | out: lpBuffer=0x665da7a428*, lpNumberOfBytesRead=0x665da7a3e8*=0x19, lpOverlapped=0x0) returned 1 [0202.599] SetFilePointer (in: hFile=0x440, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0202.599] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7a3b0 | out: phKey=0x665da7a3b0*=0x665ab9a5e0) returned 1 [0202.599] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0202.599] SetFilePointer (in: hFile=0x440, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0202.599] ReadFile (in: hFile=0x440, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x2d552, lpNumberOfBytesRead=0x665da7a3c0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7a3c0*=0x2d552, lpOverlapped=0x0) returned 1 [0202.606] CryptEncrypt (in: hKey=0x665ab9a5e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7a3bc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7a3bc*=0xf4250) returned 1 [0202.606] CryptEncrypt (in: hKey=0x665ab9a5e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7a3b8*=0x2d552, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7a3b8*=0x2d560) returned 1 [0202.606] SetFilePointer (in: hFile=0x440, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0202.606] WriteFile (in: hFile=0x440, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2d560, lpNumberOfBytesWritten=0x665da7a3c0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7a3c0*=0x2d560, lpOverlapped=0x0) returned 1 [0202.607] WriteFile (in: hFile=0x440, lpBuffer=0x665da7a400*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7a3c4, lpOverlapped=0x0 | out: lpBuffer=0x665da7a400*, lpNumberOfBytesWritten=0x665da7a3c4*=0x6, lpOverlapped=0x0) returned 1 [0202.607] CryptExportKey (in: hKey=0x665ab9a5e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7a3d0 | out: pbData=0x0*, pdwDataLen=0x665da7a3d0*=0x10c) returned 1 [0202.607] CryptExportKey (in: hKey=0x665ab9a5e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7a450, pdwDataLen=0x665da7a3d0 | out: pbData=0x665da7a450*, pdwDataLen=0x665da7a3d0*=0x10c) returned 1 [0202.607] WriteFile (in: hFile=0x440, lpBuffer=0x665da7a450*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7a3c4, lpOverlapped=0x0 | out: lpBuffer=0x665da7a450*, lpNumberOfBytesWritten=0x665da7a3c4*=0x10c, lpOverlapped=0x0) returned 1 [0202.607] CloseHandle (hObject=0x440) returned 1 [0202.627] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0202.633] CryptDestroyKey (hKey=0x665ab9a5e0) returned 1 [0202.633] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0202.633] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0202.633] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0202.633] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\qmldir", dwFileAttributes=0x80) returned 1 [0202.634] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick.2\\qmldir"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0202.635] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x665da7a3c8 | out: lpFileSize=0x665da7a3c8*=111) returned 1 [0202.635] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x665da7a3d8 | out: lpFileSize=0x665da7a3d8*=111) returned 1 [0202.635] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7a3b0 | out: phKey=0x665da7a3b0*=0x665ab9aab0) returned 1 [0202.635] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0202.635] SetFilePointer (in: hFile=0x440, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0202.635] ReadFile (in: hFile=0x440, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x6f, lpNumberOfBytesRead=0x665da7a3c0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7a3c0*=0x6f, lpOverlapped=0x0) returned 1 [0202.636] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7a3bc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7a3bc*=0xf4250) returned 1 [0202.636] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7a3b8*=0x6f, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7a3b8*=0x70) returned 1 [0202.636] SetFilePointer (in: hFile=0x440, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0202.637] WriteFile (in: hFile=0x440, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x665da7a3c0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7a3c0*=0x70, lpOverlapped=0x0) returned 1 [0202.637] WriteFile (in: hFile=0x440, lpBuffer=0x665da7a400*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7a3c4, lpOverlapped=0x0 | out: lpBuffer=0x665da7a400*, lpNumberOfBytesWritten=0x665da7a3c4*=0x6, lpOverlapped=0x0) returned 1 [0202.637] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7a3d0 | out: pbData=0x0*, pdwDataLen=0x665da7a3d0*=0x10c) returned 1 [0202.637] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7a450, pdwDataLen=0x665da7a3d0 | out: pbData=0x665da7a450*, pdwDataLen=0x665da7a3d0*=0x10c) returned 1 [0202.637] WriteFile (in: hFile=0x440, lpBuffer=0x665da7a450*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7a3c4, lpOverlapped=0x0 | out: lpBuffer=0x665da7a450*, lpNumberOfBytesWritten=0x665da7a3c4*=0x10c, lpOverlapped=0x0) returned 1 [0202.637] CloseHandle (hObject=0x440) returned 1 [0202.660] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0202.665] CryptDestroyKey (hKey=0x665ab9aab0) returned 1 [0202.665] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0202.666] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0202.666] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0202.666] FindClose (in: hFindFile=0x665d90d280 | out: hFindFile=0x665d90d280) returned 1 [0202.666] SetLastError (dwErrCode=0x0) [0202.666] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick.2\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0202.669] GetLastError () returned 0x0 [0202.669] WriteFile (in: hFile=0x654, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7ad80*=0x324, lpOverlapped=0x0) returned 1 [0202.670] CloseHandle (hObject=0x654) returned 1 [0202.671] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0202.671] FindClose (in: hFindFile=0x665d90bc60 | out: hFindFile=0x665d90bc60) returned 1 [0202.671] SetLastError (dwErrCode=0x0) [0202.671] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0202.671] GetLastError () returned 0xb7 [0202.671] CloseHandle (hObject=0x3e8) returned 1 [0202.671] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0202.672] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0202.672] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0202.672] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0202.672] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0202.672] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0202.672] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0202.672] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0202.673] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0202.673] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0202.673] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0202.673] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0202.673] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0202.673] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0202.674] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaCritical.png", dwFileAttributes=0x80) returned 1 [0202.675] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaCritical.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\quotacritical.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0202.675] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=8806) returned 1 [0202.675] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=8806) returned 1 [0202.675] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x2144, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.675] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0202.677] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0202.677] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9a730) returned 1 [0202.677] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0202.678] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0202.678] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x2266, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0x2266, lpOverlapped=0x0) returned 1 [0202.679] CryptEncrypt (in: hKey=0x665ab9a730, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0202.679] CryptEncrypt (in: hKey=0x665ab9a730, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2266, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2270) returned 1 [0202.679] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0202.679] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2270, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0x2270, lpOverlapped=0x0) returned 1 [0202.679] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0202.679] CryptExportKey (in: hKey=0x665ab9a730, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0202.679] CryptExportKey (in: hKey=0x665ab9a730, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0202.679] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0202.679] CloseHandle (hObject=0x3e8) returned 1 [0202.702] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0202.707] CryptDestroyKey (hKey=0x665ab9a730) returned 1 [0202.707] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0202.708] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0202.708] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0202.708] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaError.png", dwFileAttributes=0x80) returned 1 [0202.709] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaError.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\quotaerror.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0202.709] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=9290) returned 1 [0202.709] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=9290) returned 1 [0202.710] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x2328, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.710] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0202.711] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0202.711] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9aea0) returned 1 [0202.711] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0202.712] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0202.712] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x244a, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0x244a, lpOverlapped=0x0) returned 1 [0202.713] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0202.713] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x244a, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2450) returned 1 [0202.713] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0202.713] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2450, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0x2450, lpOverlapped=0x0) returned 1 [0202.714] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0202.714] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0202.714] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0202.714] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0202.714] CloseHandle (hObject=0x3e8) returned 1 [0202.732] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0202.736] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0202.736] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0202.737] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0202.737] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0202.737] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaNearing.png", dwFileAttributes=0x80) returned 1 [0202.738] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaNearing.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\quotanearing.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0202.738] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=7513) returned 1 [0202.738] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=7513) returned 1 [0202.738] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x1c37, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.738] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0202.740] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0202.740] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9a110) returned 1 [0202.740] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0202.740] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0202.740] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x1d59, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0x1d59, lpOverlapped=0x0) returned 1 [0202.741] CryptEncrypt (in: hKey=0x665ab9a110, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0202.741] CryptEncrypt (in: hKey=0x665ab9a110, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x1d59, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x1d60) returned 1 [0202.741] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0202.741] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x1d60, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0x1d60, lpOverlapped=0x0) returned 1 [0202.741] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0202.741] CryptExportKey (in: hKey=0x665ab9a110, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0202.741] CryptExportKey (in: hKey=0x665ab9a110, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0202.741] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0202.742] CloseHandle (hObject=0x3e8) returned 1 [0202.762] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0202.766] CryptDestroyKey (hKey=0x665ab9a110) returned 1 [0202.766] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0202.767] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0202.767] SetLastError (dwErrCode=0x0) [0202.767] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0202.767] GetLastError () returned 0xb7 [0202.767] CloseHandle (hObject=0x3e8) returned 1 [0202.768] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qut-latn\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90cce0 [0202.768] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0202.768] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0202.768] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0202.768] FindClose (in: hFindFile=0x665d90cce0 | out: hFindFile=0x665d90cce0) returned 1 [0202.768] SetLastError (dwErrCode=0x0) [0202.768] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qut-latn\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qut-latn\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0202.769] GetLastError () returned 0x0 [0202.769] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0202.770] CloseHandle (hObject=0x3e8) returned 1 [0202.770] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0202.770] SetLastError (dwErrCode=0x0) [0202.770] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0202.771] GetLastError () returned 0xb7 [0202.771] CloseHandle (hObject=0x3e8) returned 1 [0202.771] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\quz-pe\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bcc0 [0202.772] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0202.772] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0202.772] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0202.772] FindClose (in: hFindFile=0x665d90bcc0 | out: hFindFile=0x665d90bcc0) returned 1 [0202.772] SetLastError (dwErrCode=0x0) [0202.772] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\quz-pe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\quz-pe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0202.774] GetLastError () returned 0x0 [0202.774] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0202.775] CloseHandle (hObject=0x3e8) returned 1 [0202.775] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0202.775] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0202.775] SetLastError (dwErrCode=0x0) [0202.775] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0202.775] GetLastError () returned 0xb7 [0202.775] CloseHandle (hObject=0x3e8) returned 1 [0202.776] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ro\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c800 [0202.776] FindNextFileW (in: hFindFile=0x665d90c800, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0202.776] FindNextFileW (in: hFindFile=0x665d90c800, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0202.776] FindNextFileW (in: hFindFile=0x665d90c800, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0202.776] FindClose (in: hFindFile=0x665d90c800 | out: hFindFile=0x665d90c800) returned 1 [0202.776] SetLastError (dwErrCode=0x0) [0202.776] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ro\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ro\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0202.777] GetLastError () returned 0x0 [0202.777] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0202.778] CloseHandle (hObject=0x3e8) returned 1 [0202.778] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0202.778] SetLastError (dwErrCode=0x0) [0202.778] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0202.778] GetLastError () returned 0xb7 [0202.778] CloseHandle (hObject=0x3e8) returned 1 [0202.779] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ru\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bf60 [0202.780] FindNextFileW (in: hFindFile=0x665d90bf60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0202.780] FindNextFileW (in: hFindFile=0x665d90bf60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0202.780] FindNextFileW (in: hFindFile=0x665d90bf60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0202.780] FindClose (in: hFindFile=0x665d90bf60 | out: hFindFile=0x665d90bf60) returned 1 [0202.780] SetLastError (dwErrCode=0x0) [0202.780] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ru\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ru\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0202.782] GetLastError () returned 0x0 [0202.782] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0202.783] CloseHandle (hObject=0x3e8) returned 1 [0202.783] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0202.783] SetLastError (dwErrCode=0x0) [0202.783] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0202.784] GetLastError () returned 0xb7 [0202.784] CloseHandle (hObject=0x3e8) returned 1 [0202.784] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\rw\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c260 [0202.784] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0202.784] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0202.784] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0202.784] FindClose (in: hFindFile=0x665d90c260 | out: hFindFile=0x665d90c260) returned 1 [0202.785] SetLastError (dwErrCode=0x0) [0202.785] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\rw\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\rw\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0202.785] GetLastError () returned 0x0 [0202.785] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0202.786] CloseHandle (hObject=0x3e8) returned 1 [0202.786] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0202.786] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0202.786] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0202.787] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\SaveApplicationEventLogs.wsf", dwFileAttributes=0x80) returned 1 [0202.787] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\SaveApplicationEventLogs.wsf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\saveapplicationeventlogs.wsf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0202.788] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=1493) returned 1 [0202.788] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=1493) returned 1 [0202.788] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x4b3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.788] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0202.790] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0202.790] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9a6c0) returned 1 [0202.790] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0202.790] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0202.790] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x5d5, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0x5d5, lpOverlapped=0x0) returned 1 [0202.790] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0202.790] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x5d5, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x5e0) returned 1 [0202.790] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0202.790] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x5e0, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0x5e0, lpOverlapped=0x0) returned 1 [0202.790] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0202.790] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0202.791] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0202.791] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0202.791] CloseHandle (hObject=0x3e8) returned 1 [0202.808] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0202.813] CryptDestroyKey (hKey=0x665ab9a6c0) returned 1 [0202.813] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0202.813] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0202.813] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0202.814] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ScreenshotOptIn.gif", dwFileAttributes=0x80) returned 1 [0202.814] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ScreenshotOptIn.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\screenshotoptin.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0202.815] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=243489) returned 1 [0202.815] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=243489) returned 1 [0202.815] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x3b5ff, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.815] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0202.816] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0202.816] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9a5e0) returned 1 [0202.816] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0202.816] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0202.817] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x3b721, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0x3b721, lpOverlapped=0x0) returned 1 [0202.823] CryptEncrypt (in: hKey=0x665ab9a5e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0202.823] CryptEncrypt (in: hKey=0x665ab9a5e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x3b721, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x3b730) returned 1 [0202.823] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0202.824] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x3b730, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0x3b730, lpOverlapped=0x0) returned 1 [0202.824] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0202.824] CryptExportKey (in: hKey=0x665ab9a5e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0202.824] CryptExportKey (in: hKey=0x665ab9a5e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0202.824] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0202.825] CloseHandle (hObject=0x3e8) returned 1 [0202.840] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0202.845] CryptDestroyKey (hKey=0x665ab9a5e0) returned 1 [0202.845] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0202.846] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0202.846] SetLastError (dwErrCode=0x0) [0202.846] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0202.846] GetLastError () returned 0xb7 [0202.846] CloseHandle (hObject=0x3e8) returned 1 [0202.846] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sd-arab\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90ca40 [0202.847] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0202.847] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0202.847] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0202.847] FindClose (in: hFindFile=0x665d90ca40 | out: hFindFile=0x665d90ca40) returned 1 [0202.847] SetLastError (dwErrCode=0x0) [0202.847] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sd-arab\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sd-arab\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0202.848] GetLastError () returned 0x0 [0202.848] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0202.849] CloseHandle (hObject=0x3e8) returned 1 [0202.850] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0202.850] SetLastError (dwErrCode=0x0) [0202.850] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0202.850] GetLastError () returned 0xb7 [0202.850] CloseHandle (hObject=0x3e8) returned 1 [0202.850] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\si-lk\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90ca40 [0202.850] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0202.850] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0202.850] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0202.850] FindClose (in: hFindFile=0x665d90ca40 | out: hFindFile=0x665d90ca40) returned 1 [0202.851] SetLastError (dwErrCode=0x0) [0202.851] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\si-lk\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\si-lk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0202.851] GetLastError () returned 0x0 [0202.851] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0202.852] CloseHandle (hObject=0x3e8) returned 1 [0202.852] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0202.852] SetLastError (dwErrCode=0x0) [0202.852] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0202.852] GetLastError () returned 0xb7 [0202.852] CloseHandle (hObject=0x3e8) returned 1 [0202.853] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sk\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90d100 [0202.853] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0202.853] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0202.853] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0202.853] FindClose (in: hFindFile=0x665d90d100 | out: hFindFile=0x665d90d100) returned 1 [0202.854] SetLastError (dwErrCode=0x0) [0202.854] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sk\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0202.854] GetLastError () returned 0x0 [0202.854] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0202.855] CloseHandle (hObject=0x3e8) returned 1 [0202.856] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0202.856] SetLastError (dwErrCode=0x0) [0202.856] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0202.856] GetLastError () returned 0xb7 [0202.856] CloseHandle (hObject=0x3e8) returned 1 [0202.856] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sl\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c320 [0202.856] FindNextFileW (in: hFindFile=0x665d90c320, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0202.856] FindNextFileW (in: hFindFile=0x665d90c320, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0202.856] FindNextFileW (in: hFindFile=0x665d90c320, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0202.856] FindClose (in: hFindFile=0x665d90c320 | out: hFindFile=0x665d90c320) returned 1 [0202.856] SetLastError (dwErrCode=0x0) [0202.857] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sl\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0202.857] GetLastError () returned 0x0 [0202.857] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0202.858] CloseHandle (hObject=0x3e8) returned 1 [0202.858] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0202.858] SetLastError (dwErrCode=0x0) [0202.858] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0202.858] GetLastError () returned 0xb7 [0202.858] CloseHandle (hObject=0x3e8) returned 1 [0202.859] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sq\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c6e0 [0202.860] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0202.860] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0202.860] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0202.860] FindClose (in: hFindFile=0x665d90c6e0 | out: hFindFile=0x665d90c6e0) returned 1 [0202.860] SetLastError (dwErrCode=0x0) [0202.860] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sq\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sq\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0202.861] GetLastError () returned 0x0 [0202.861] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0202.862] CloseHandle (hObject=0x3e8) returned 1 [0202.862] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0202.862] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0202.862] SetLastError (dwErrCode=0x0) [0202.862] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0202.863] GetLastError () returned 0xb7 [0202.863] CloseHandle (hObject=0x3e8) returned 1 [0202.863] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-ba\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90ce60 [0202.863] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0202.863] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0202.863] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0202.863] FindClose (in: hFindFile=0x665d90ce60 | out: hFindFile=0x665d90ce60) returned 1 [0202.863] SetLastError (dwErrCode=0x0) [0202.863] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-ba\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sr-cyrl-ba\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0202.864] GetLastError () returned 0x0 [0202.864] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0202.864] CloseHandle (hObject=0x3e8) returned 1 [0202.865] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0202.865] SetLastError (dwErrCode=0x0) [0202.865] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0202.865] GetLastError () returned 0xb7 [0202.865] CloseHandle (hObject=0x3e8) returned 1 [0202.865] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-rs\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bc60 [0202.872] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0202.872] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0202.872] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0202.872] FindClose (in: hFindFile=0x665d90bc60 | out: hFindFile=0x665d90bc60) returned 1 [0202.872] SetLastError (dwErrCode=0x0) [0202.873] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-rs\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sr-cyrl-rs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0202.874] GetLastError () returned 0x0 [0202.874] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0202.874] CloseHandle (hObject=0x3e8) returned 1 [0202.875] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0202.875] SetLastError (dwErrCode=0x0) [0202.876] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0202.876] GetLastError () returned 0xb7 [0202.876] CloseHandle (hObject=0x3e8) returned 1 [0202.876] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-latn-rs\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90d340 [0202.876] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0202.876] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0202.876] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0202.877] FindClose (in: hFindFile=0x665d90d340 | out: hFindFile=0x665d90d340) returned 1 [0202.877] SetLastError (dwErrCode=0x0) [0202.877] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-latn-rs\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sr-latn-rs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0202.877] GetLastError () returned 0x0 [0202.877] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0202.878] CloseHandle (hObject=0x3e8) returned 1 [0202.878] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0202.878] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0202.878] SetLastError (dwErrCode=0x0) [0202.878] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0202.878] GetLastError () returned 0xb7 [0202.878] CloseHandle (hObject=0x3e8) returned 1 [0202.879] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sv\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90d340 [0202.879] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0202.879] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0202.879] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0202.879] FindClose (in: hFindFile=0x665d90d340 | out: hFindFile=0x665d90d340) returned 1 [0202.879] SetLastError (dwErrCode=0x0) [0202.879] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sv\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sv\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0202.880] GetLastError () returned 0x0 [0202.880] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0202.881] CloseHandle (hObject=0x3e8) returned 1 [0202.881] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0202.881] SetLastError (dwErrCode=0x0) [0202.881] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0202.882] GetLastError () returned 0xb7 [0202.882] CloseHandle (hObject=0x3e8) returned 1 [0202.882] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sw\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c560 [0202.882] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0202.882] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0202.882] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0202.882] FindClose (in: hFindFile=0x665d90c560 | out: hFindFile=0x665d90c560) returned 1 [0202.882] SetLastError (dwErrCode=0x0) [0202.882] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sw\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sw\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0202.883] GetLastError () returned 0x0 [0202.883] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0202.883] CloseHandle (hObject=0x3e8) returned 1 [0202.884] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0202.884] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0202.884] SetLastError (dwErrCode=0x0) [0202.884] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0202.884] GetLastError () returned 0xb7 [0202.884] CloseHandle (hObject=0x3e8) returned 1 [0202.884] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ta\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c6e0 [0202.885] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0202.885] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0202.885] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0202.885] FindClose (in: hFindFile=0x665d90c6e0 | out: hFindFile=0x665d90c6e0) returned 1 [0202.885] SetLastError (dwErrCode=0x0) [0202.885] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ta\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ta\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0202.886] GetLastError () returned 0x0 [0202.886] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0202.887] CloseHandle (hObject=0x3e8) returned 1 [0202.887] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0202.887] SetLastError (dwErrCode=0x0) [0202.887] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0202.888] GetLastError () returned 0xb7 [0202.888] CloseHandle (hObject=0x3e8) returned 1 [0202.888] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\te\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c020 [0202.888] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0202.888] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0202.888] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0202.888] FindClose (in: hFindFile=0x665d90c020 | out: hFindFile=0x665d90c020) returned 1 [0202.888] SetLastError (dwErrCode=0x0) [0202.888] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\te\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\te\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0202.889] GetLastError () returned 0x0 [0202.889] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0202.890] CloseHandle (hObject=0x3e8) returned 1 [0202.890] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0202.890] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0202.890] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0202.891] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\TestSharePage.html", dwFileAttributes=0x80) returned 1 [0202.891] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\TestSharePage.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\testsharepage.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0202.891] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=1156) returned 1 [0202.892] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=1156) returned 1 [0202.892] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x362, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.892] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0202.893] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0202.893] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9a500) returned 1 [0202.893] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0202.894] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0202.894] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x484, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0x484, lpOverlapped=0x0) returned 1 [0202.894] CryptEncrypt (in: hKey=0x665ab9a500, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0202.894] CryptEncrypt (in: hKey=0x665ab9a500, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x484, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x490) returned 1 [0202.894] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0202.894] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x490, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0x490, lpOverlapped=0x0) returned 1 [0202.894] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0202.894] CryptExportKey (in: hKey=0x665ab9a500, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0202.894] CryptExportKey (in: hKey=0x665ab9a500, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0202.894] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0202.894] CloseHandle (hObject=0x3e8) returned 1 [0202.915] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0202.920] CryptDestroyKey (hKey=0x665ab9a500) returned 1 [0202.920] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0202.921] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0202.921] SetLastError (dwErrCode=0x0) [0202.921] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0202.921] GetLastError () returned 0xb7 [0202.921] CloseHandle (hObject=0x3e8) returned 1 [0202.923] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tg-cyrl\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bd80 [0202.924] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0202.924] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0202.924] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0202.924] FindClose (in: hFindFile=0x665d90bd80 | out: hFindFile=0x665d90bd80) returned 1 [0202.924] SetLastError (dwErrCode=0x0) [0202.924] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tg-cyrl\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\tg-cyrl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0202.926] GetLastError () returned 0x0 [0202.926] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0202.926] CloseHandle (hObject=0x3e8) returned 1 [0202.927] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0202.927] SetLastError (dwErrCode=0x0) [0202.927] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0202.927] GetLastError () returned 0xb7 [0202.927] CloseHandle (hObject=0x3e8) returned 1 [0202.928] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\th\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c560 [0202.929] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0202.929] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0202.929] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0202.929] FindClose (in: hFindFile=0x665d90c560 | out: hFindFile=0x665d90c560) returned 1 [0202.929] SetLastError (dwErrCode=0x0) [0202.929] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\th\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\th\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0202.930] GetLastError () returned 0x0 [0202.930] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0202.931] CloseHandle (hObject=0x3e8) returned 1 [0202.931] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0202.931] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0202.931] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", dwFileAttributes=0x80) returned 1 [0202.932] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0202.932] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=49129) returned 1 [0202.932] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=49129) returned 1 [0202.933] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xbec7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.933] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0202.934] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0202.934] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9aea0) returned 1 [0202.934] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0202.935] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0202.935] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0xbfe9, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0xbfe9, lpOverlapped=0x0) returned 1 [0202.936] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0202.937] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0xbfe9, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0xbff0) returned 1 [0202.937] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0202.937] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0xbff0, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0xbff0, lpOverlapped=0x0) returned 1 [0202.937] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0202.937] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0202.937] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0202.937] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0202.938] CloseHandle (hObject=0x3e8) returned 1 [0202.958] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0202.962] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0202.962] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0202.963] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0202.963] SetLastError (dwErrCode=0x0) [0202.963] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0202.963] GetLastError () returned 0xb7 [0202.963] CloseHandle (hObject=0x3e8) returned 1 [0202.963] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ti\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90d040 [0202.964] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0202.964] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0202.965] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0202.965] FindClose (in: hFindFile=0x665d90d040 | out: hFindFile=0x665d90d040) returned 1 [0202.965] SetLastError (dwErrCode=0x0) [0202.965] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ti\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ti\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0202.966] GetLastError () returned 0x0 [0202.966] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0202.967] CloseHandle (hObject=0x3e8) returned 1 [0202.967] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0202.967] SetLastError (dwErrCode=0x0) [0202.968] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0202.968] GetLastError () returned 0xb7 [0202.968] CloseHandle (hObject=0x3e8) returned 1 [0202.968] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tk-tm\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c620 [0202.968] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0202.968] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0202.969] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0202.969] FindClose (in: hFindFile=0x665d90c620 | out: hFindFile=0x665d90c620) returned 1 [0202.969] SetLastError (dwErrCode=0x0) [0202.969] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tk-tm\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\tk-tm\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0202.969] GetLastError () returned 0x0 [0202.969] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0202.970] CloseHandle (hObject=0x3e8) returned 1 [0202.970] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0202.970] SetLastError (dwErrCode=0x0) [0202.970] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0202.971] GetLastError () returned 0xb7 [0202.971] CloseHandle (hObject=0x3e8) returned 1 [0202.971] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tn-za\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90cda0 [0202.971] FindNextFileW (in: hFindFile=0x665d90cda0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0202.971] FindNextFileW (in: hFindFile=0x665d90cda0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0202.971] FindNextFileW (in: hFindFile=0x665d90cda0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0202.971] FindClose (in: hFindFile=0x665d90cda0 | out: hFindFile=0x665d90cda0) returned 1 [0202.972] SetLastError (dwErrCode=0x0) [0202.972] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tn-za\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\tn-za\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0202.973] GetLastError () returned 0x0 [0202.973] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0202.974] CloseHandle (hObject=0x3e8) returned 1 [0202.974] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0202.974] SetLastError (dwErrCode=0x0) [0202.974] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0202.975] GetLastError () returned 0xb7 [0202.975] CloseHandle (hObject=0x3e8) returned 1 [0202.975] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tr\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90d280 [0202.976] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0202.976] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0202.976] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0202.976] FindClose (in: hFindFile=0x665d90d280 | out: hFindFile=0x665d90d280) returned 1 [0202.977] SetLastError (dwErrCode=0x0) [0202.977] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tr\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\tr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0202.977] GetLastError () returned 0x0 [0202.977] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0202.978] CloseHandle (hObject=0x3e8) returned 1 [0202.979] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0202.979] SetLastError (dwErrCode=0x0) [0202.979] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0202.979] GetLastError () returned 0xb7 [0202.979] CloseHandle (hObject=0x3e8) returned 1 [0202.979] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tt\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bfc0 [0202.980] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0202.980] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0202.980] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0202.980] FindClose (in: hFindFile=0x665d90bfc0 | out: hFindFile=0x665d90bfc0) returned 1 [0202.980] SetLastError (dwErrCode=0x0) [0202.980] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tt\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\tt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0202.982] GetLastError () returned 0x0 [0202.982] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0202.983] CloseHandle (hObject=0x3e8) returned 1 [0202.983] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0202.983] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0202.983] SetLastError (dwErrCode=0x0) [0202.983] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0202.984] GetLastError () returned 0xb7 [0202.984] CloseHandle (hObject=0x3e8) returned 1 [0202.984] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ug-arab\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90d2e0 [0202.985] FindNextFileW (in: hFindFile=0x665d90d2e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0202.985] FindNextFileW (in: hFindFile=0x665d90d2e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0202.985] FindNextFileW (in: hFindFile=0x665d90d2e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0202.985] FindClose (in: hFindFile=0x665d90d2e0 | out: hFindFile=0x665d90d2e0) returned 1 [0202.985] SetLastError (dwErrCode=0x0) [0202.985] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ug-arab\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ug-arab\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0202.985] GetLastError () returned 0x0 [0202.985] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0202.986] CloseHandle (hObject=0x3e8) returned 1 [0202.986] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0202.986] SetLastError (dwErrCode=0x0) [0202.986] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0202.987] GetLastError () returned 0xb7 [0202.987] CloseHandle (hObject=0x3e8) returned 1 [0202.987] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uk\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90cb60 [0202.987] FindNextFileW (in: hFindFile=0x665d90cb60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0202.987] FindNextFileW (in: hFindFile=0x665d90cb60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0202.987] FindNextFileW (in: hFindFile=0x665d90cb60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0202.987] FindClose (in: hFindFile=0x665d90cb60 | out: hFindFile=0x665d90cb60) returned 1 [0202.987] SetLastError (dwErrCode=0x0) [0202.987] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uk\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\uk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0202.988] GetLastError () returned 0x0 [0202.988] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0202.989] CloseHandle (hObject=0x3e8) returned 1 [0202.989] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0202.989] SetLastError (dwErrCode=0x0) [0202.989] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0202.990] GetLastError () returned 0xb7 [0202.990] CloseHandle (hObject=0x3e8) returned 1 [0202.990] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ur\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90ca40 [0202.991] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0202.991] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0202.991] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0202.991] FindClose (in: hFindFile=0x665d90ca40 | out: hFindFile=0x665d90ca40) returned 1 [0202.991] SetLastError (dwErrCode=0x0) [0202.991] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ur\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ur\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0202.991] GetLastError () returned 0x0 [0202.991] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0202.992] CloseHandle (hObject=0x3e8) returned 1 [0202.992] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0202.992] SetLastError (dwErrCode=0x0) [0202.992] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0202.993] GetLastError () returned 0xb7 [0202.993] CloseHandle (hObject=0x3e8) returned 1 [0202.993] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uz-latn-uz\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90d280 [0202.993] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0202.993] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0202.993] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0202.993] FindClose (in: hFindFile=0x665d90d280 | out: hFindFile=0x665d90d280) returned 1 [0202.994] SetLastError (dwErrCode=0x0) [0202.994] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uz-latn-uz\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\uz-latn-uz\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0202.994] GetLastError () returned 0x0 [0202.994] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0202.995] CloseHandle (hObject=0x3e8) returned 1 [0202.995] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0202.995] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0202.995] SetLastError (dwErrCode=0x0) [0202.995] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0202.996] GetLastError () returned 0xb7 [0202.996] CloseHandle (hObject=0x3e8) returned 1 [0202.996] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vi\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c800 [0202.996] FindNextFileW (in: hFindFile=0x665d90c800, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0202.996] FindNextFileW (in: hFindFile=0x665d90c800, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0202.996] FindNextFileW (in: hFindFile=0x665d90c800, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0202.996] FindClose (in: hFindFile=0x665d90c800 | out: hFindFile=0x665d90c800) returned 1 [0202.996] SetLastError (dwErrCode=0x0) [0202.996] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vi\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\vi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0202.997] GetLastError () returned 0x0 [0202.997] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0202.998] CloseHandle (hObject=0x3e8) returned 1 [0202.998] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0202.998] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0202.999] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Warning.png", dwFileAttributes=0x80) returned 1 [0203.000] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Warning.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\warning.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0203.000] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=2593) returned 1 [0203.000] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=2593) returned 1 [0203.001] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x8ff, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.001] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0203.002] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0203.002] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9aab0) returned 1 [0203.002] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0203.003] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0203.003] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0xa21, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0xa21, lpOverlapped=0x0) returned 1 [0203.003] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0203.003] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0xa21, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0xa30) returned 1 [0203.003] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0203.003] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0xa30, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0xa30, lpOverlapped=0x0) returned 1 [0203.003] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0203.003] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0203.003] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0203.004] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0203.004] CloseHandle (hObject=0x3e8) returned 1 [0203.024] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0203.028] CryptDestroyKey (hKey=0x665ab9aab0) returned 1 [0203.028] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0203.028] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0203.028] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0203.029] SetLastError (dwErrCode=0x0) [0203.029] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0203.029] GetLastError () returned 0xb7 [0203.029] CloseHandle (hObject=0x3e8) returned 1 [0203.029] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\wo\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c560 [0203.030] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0203.030] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0203.030] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0203.030] FindClose (in: hFindFile=0x665d90c560 | out: hFindFile=0x665d90c560) returned 1 [0203.030] SetLastError (dwErrCode=0x0) [0203.030] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\wo\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\wo\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0203.031] GetLastError () returned 0x0 [0203.031] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0203.032] CloseHandle (hObject=0x3e8) returned 1 [0203.032] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0203.032] SetLastError (dwErrCode=0x0) [0203.033] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0203.033] GetLastError () returned 0xb7 [0203.033] CloseHandle (hObject=0x3e8) returned 1 [0203.033] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\xh-za\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90d280 [0203.033] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0203.033] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0203.033] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0203.033] FindClose (in: hFindFile=0x665d90d280 | out: hFindFile=0x665d90d280) returned 1 [0203.033] SetLastError (dwErrCode=0x0) [0203.033] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\xh-za\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\xh-za\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0203.034] GetLastError () returned 0x0 [0203.034] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0203.035] CloseHandle (hObject=0x3e8) returned 1 [0203.035] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0203.035] SetLastError (dwErrCode=0x0) [0203.035] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0203.035] GetLastError () returned 0xb7 [0203.035] CloseHandle (hObject=0x3e8) returned 1 [0203.036] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\yo-ng\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c1a0 [0203.036] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0203.036] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0203.036] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0203.036] FindClose (in: hFindFile=0x665d90c1a0 | out: hFindFile=0x665d90c1a0) returned 1 [0203.037] SetLastError (dwErrCode=0x0) [0203.037] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\yo-ng\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\yo-ng\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0203.038] GetLastError () returned 0x0 [0203.038] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0203.039] CloseHandle (hObject=0x3e8) returned 1 [0203.039] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0203.039] SetLastError (dwErrCode=0x0) [0203.039] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0203.039] GetLastError () returned 0xb7 [0203.039] CloseHandle (hObject=0x3e8) returned 1 [0203.039] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-cn\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90cc80 [0203.040] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0203.040] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0203.040] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0203.040] FindClose (in: hFindFile=0x665d90cc80 | out: hFindFile=0x665d90cc80) returned 1 [0203.040] SetLastError (dwErrCode=0x0) [0203.040] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-cn\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\zh-cn\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0203.041] GetLastError () returned 0x0 [0203.041] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0203.042] CloseHandle (hObject=0x3e8) returned 1 [0203.042] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0203.042] SetLastError (dwErrCode=0x0) [0203.042] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0203.042] GetLastError () returned 0xb7 [0203.042] CloseHandle (hObject=0x3e8) returned 1 [0203.042] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-tw\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bd80 [0203.043] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0203.043] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0203.043] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0203.043] FindClose (in: hFindFile=0x665d90bd80 | out: hFindFile=0x665d90bd80) returned 1 [0203.043] SetLastError (dwErrCode=0x0) [0203.043] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-tw\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\zh-tw\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0203.044] GetLastError () returned 0x0 [0203.044] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0203.045] CloseHandle (hObject=0x3e8) returned 1 [0203.045] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0203.045] SetLastError (dwErrCode=0x0) [0203.045] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0203.046] GetLastError () returned 0xb7 [0203.046] CloseHandle (hObject=0x3e8) returned 1 [0203.046] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zu-za\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c440 [0203.046] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0203.046] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0203.046] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0203.046] FindClose (in: hFindFile=0x665d90c440 | out: hFindFile=0x665d90c440) returned 1 [0203.046] SetLastError (dwErrCode=0x0) [0203.046] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zu-za\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\zu-za\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0203.047] GetLastError () returned 0x0 [0203.047] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0203.048] CloseHandle (hObject=0x3e8) returned 1 [0203.048] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0203.048] FindClose (in: hFindFile=0x665d90caa0 | out: hFindFile=0x665d90caa0) returned 1 [0203.048] SetLastError (dwErrCode=0x0) [0203.048] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0203.049] GetLastError () returned 0xb7 [0203.049] CloseHandle (hObject=0x620) returned 1 [0203.049] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0203.049] SetLastError (dwErrCode=0x0) [0203.049] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0203.049] GetLastError () returned 0xb7 [0203.049] CloseHandle (hObject=0x620) returned 1 [0203.049] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c680 [0203.050] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0203.050] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0203.050] SetLastError (dwErrCode=0x0) [0203.050] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0203.051] GetLastError () returned 0x0 [0203.051] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0203.051] CloseHandle (hObject=0x3e8) returned 1 [0203.052] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c200 [0203.054] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0203.054] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0203.054] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0203.054] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-12.641.736.1.odl", dwFileAttributes=0x80) returned 1 [0203.055] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-12.641.736.1.odl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-7-12.641.736.1.odl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0203.056] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=15267) returned 1 [0203.056] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=15267) returned 1 [0203.056] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x3a81, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.056] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0203.057] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0203.057] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9aea0) returned 1 [0203.057] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0203.058] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0203.058] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x3ba3, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x3ba3, lpOverlapped=0x0) returned 1 [0203.059] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0203.059] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x3ba3, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x3bb0) returned 1 [0203.059] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0203.059] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x3bb0, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x3bb0, lpOverlapped=0x0) returned 1 [0203.059] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0203.059] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0203.059] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0203.059] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0203.059] CloseHandle (hObject=0x654) returned 1 [0203.077] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0203.081] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0203.081] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0203.082] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0203.082] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0203.082] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.114.4068.1.odl", dwFileAttributes=0x80) returned 1 [0203.083] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.114.4068.1.odl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-7-13.114.4068.1.odl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0203.083] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=11280) returned 1 [0203.083] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=11280) returned 1 [0203.083] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x2aee, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.083] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0203.085] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0203.085] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9aab0) returned 1 [0203.085] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0203.085] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0203.085] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x2c10, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x2c10, lpOverlapped=0x0) returned 1 [0203.086] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0203.086] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x2c10, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x2c20) returned 1 [0203.086] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0203.086] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2c20, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x2c20, lpOverlapped=0x0) returned 1 [0203.086] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0203.086] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0203.086] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0203.087] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0203.087] CloseHandle (hObject=0x654) returned 1 [0203.105] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0203.109] CryptDestroyKey (hKey=0x665ab9aab0) returned 1 [0203.109] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0203.109] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0203.110] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0203.110] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.2154.3480.1.odl", dwFileAttributes=0x80) returned 1 [0203.111] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.2154.3480.1.odl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-7-13.2154.3480.1.odl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0203.111] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=11280) returned 1 [0203.111] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=11280) returned 1 [0203.111] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x2aee, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.112] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0203.113] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0203.113] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a0a0) returned 1 [0203.113] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0203.113] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0203.113] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x2c10, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x2c10, lpOverlapped=0x0) returned 1 [0203.114] CryptEncrypt (in: hKey=0x665ab9a0a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0203.114] CryptEncrypt (in: hKey=0x665ab9a0a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x2c10, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x2c20) returned 1 [0203.114] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0203.114] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2c20, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x2c20, lpOverlapped=0x0) returned 1 [0203.114] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0203.115] CryptExportKey (in: hKey=0x665ab9a0a0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0203.115] CryptExportKey (in: hKey=0x665ab9a0a0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0203.115] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0203.115] CloseHandle (hObject=0x654) returned 1 [0203.132] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0203.137] CryptDestroyKey (hKey=0x665ab9a0a0) returned 1 [0203.137] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0203.137] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0203.137] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0203.138] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-18.2324.2928.1.odl", dwFileAttributes=0x80) returned 1 [0203.139] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-18.2324.2928.1.odl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-7-18.2324.2928.1.odl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0203.139] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=11280) returned 1 [0203.139] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=11280) returned 1 [0203.139] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x2aee, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.139] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0203.141] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0203.141] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9aea0) returned 1 [0203.141] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0203.141] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0203.141] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x2c10, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x2c10, lpOverlapped=0x0) returned 1 [0203.142] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0203.142] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x2c10, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x2c20) returned 1 [0203.143] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0203.143] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2c20, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x2c20, lpOverlapped=0x0) returned 1 [0203.143] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0203.143] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0203.143] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0203.143] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0203.143] CloseHandle (hObject=0x654) returned 1 [0203.161] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0203.166] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0203.166] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0203.166] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0203.166] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0203.166] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-21.155.3700.1.odl", dwFileAttributes=0x80) returned 1 [0203.167] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-21.155.3700.1.odl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-7-21.155.3700.1.odl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0203.167] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=11280) returned 1 [0203.167] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=11280) returned 1 [0203.167] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x2aee, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.167] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0203.168] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0203.168] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9aab0) returned 1 [0203.169] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0203.169] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0203.169] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x2c10, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x2c10, lpOverlapped=0x0) returned 1 [0203.170] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0203.170] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x2c10, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x2c20) returned 1 [0203.170] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0203.170] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2c20, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x2c20, lpOverlapped=0x0) returned 1 [0203.170] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0203.170] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0203.170] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0203.170] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0203.170] CloseHandle (hObject=0x654) returned 1 [0203.233] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0203.238] CryptDestroyKey (hKey=0x665ab9aab0) returned 1 [0203.238] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0203.238] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0203.238] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0203.238] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.2241.1252.1.odl", dwFileAttributes=0x80) returned 1 [0203.239] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.2241.1252.1.odl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-9-26.2241.1252.1.odl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0203.239] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=10965) returned 1 [0203.239] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=10965) returned 1 [0203.239] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x29b3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.239] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0203.241] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0203.241] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9aea0) returned 1 [0203.241] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0203.241] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0203.241] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x2ad5, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x2ad5, lpOverlapped=0x0) returned 1 [0203.242] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0203.242] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x2ad5, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x2ae0) returned 1 [0203.242] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0203.242] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2ae0, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x2ae0, lpOverlapped=0x0) returned 1 [0203.242] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0203.242] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0203.242] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0203.242] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0203.242] CloseHandle (hObject=0x654) returned 1 [0203.260] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0203.265] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0203.265] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0203.265] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0203.265] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0203.266] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.63.3668.1.odl", dwFileAttributes=0x80) returned 1 [0203.268] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.63.3668.1.odl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-9-26.63.3668.1.odl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0203.268] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=15598) returned 1 [0203.268] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=15598) returned 1 [0203.268] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x3bcc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.268] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0203.270] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0203.270] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9aea0) returned 1 [0203.270] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0203.270] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0203.270] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x3cee, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x3cee, lpOverlapped=0x0) returned 1 [0203.271] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0203.271] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x3cee, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x3cf0) returned 1 [0203.271] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0203.271] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x3cf0, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x3cf0, lpOverlapped=0x0) returned 1 [0203.271] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0203.271] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0203.271] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0203.272] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0203.272] CloseHandle (hObject=0x654) returned 1 [0203.291] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0203.295] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0203.295] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0203.295] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0203.295] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0203.295] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc", dwFileAttributes=0x80) returned 1 [0203.296] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdatertelemetrycache.otc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0203.296] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=20480) returned 1 [0203.296] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=20480) returned 1 [0203.296] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x4ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.296] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0203.298] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0203.298] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a340) returned 1 [0203.298] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0203.298] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0203.298] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x5000, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x5000, lpOverlapped=0x0) returned 1 [0203.299] CryptEncrypt (in: hKey=0x665ab9a340, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0203.299] CryptEncrypt (in: hKey=0x665ab9a340, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x5000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x5010) returned 1 [0203.299] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0203.299] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x5010, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x5010, lpOverlapped=0x0) returned 1 [0203.300] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0203.300] CryptExportKey (in: hKey=0x665ab9a340, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0203.300] CryptExportKey (in: hKey=0x665ab9a340, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0203.300] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0203.300] CloseHandle (hObject=0x654) returned 1 [0203.318] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0203.322] CryptDestroyKey (hKey=0x665ab9a340) returned 1 [0203.322] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0203.322] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0203.322] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0203.323] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc.session", dwFileAttributes=0x80) returned 1 [0203.323] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc.session" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdatertelemetrycache.otc.session"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0203.324] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=20480) returned 1 [0203.324] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=20480) returned 1 [0203.324] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x4ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.324] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0203.325] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0203.325] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9af10) returned 1 [0203.325] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0203.326] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0203.326] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x5000, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x5000, lpOverlapped=0x0) returned 1 [0203.327] CryptEncrypt (in: hKey=0x665ab9af10, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0203.327] CryptEncrypt (in: hKey=0x665ab9af10, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x5000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x5010) returned 1 [0203.327] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0203.327] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x5010, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x5010, lpOverlapped=0x0) returned 1 [0203.327] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0203.327] CryptExportKey (in: hKey=0x665ab9af10, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0203.327] CryptExportKey (in: hKey=0x665ab9af10, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0203.328] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0203.328] CloseHandle (hObject=0x654) returned 1 [0203.346] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0203.351] CryptDestroyKey (hKey=0x665ab9af10) returned 1 [0203.351] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0203.352] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0203.352] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0203.352] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc", dwFileAttributes=0x80) returned 1 [0203.354] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\telemetrycache.otc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0203.355] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=10516920) returned 1 [0203.355] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=10516920) returned 1 [0203.355] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0xa07896, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.355] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0203.356] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0203.356] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a110) returned 1 [0203.356] SetFilePointer (in: hFile=0x654, lDistanceToMove=2000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1e8480 [0203.356] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abc8, nNumberOfBytesToRead=0x10, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abc8*, lpNumberOfBytesRead=0x665da7ab98*=0x10, lpOverlapped=0x0) returned 1 [0203.357] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0203.357] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0203.358] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0203.358] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0xf4240, lpOverlapped=0x0) returned 1 [0203.394] CryptEncrypt (in: hKey=0x665ab9a110, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240) returned 1 [0203.394] CryptEncrypt (in: hKey=0x665ab9a110, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0xf4240) returned 1 [0203.396] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0203.396] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0xf4240, lpOverlapped=0x0) returned 1 [0203.399] SetFilePointer (in: hFile=0x654, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0203.399] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0xf4240, lpOverlapped=0x0) returned 1 [0204.105] CryptEncrypt (in: hKey=0x665ab9a110, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240) returned 1 [0204.106] CryptEncrypt (in: hKey=0x665ab9a110, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0xf4240) returned 1 [0204.107] SetFilePointer (in: hFile=0x654, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0204.107] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0xf4240, lpOverlapped=0x0) returned 1 [0204.110] SetFilePointer (in: hFile=0x654, lDistanceToMove=2000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1e8480 [0204.110] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x0, lpOverlapped=0x0) returned 1 [0204.111] CryptEncrypt (in: hKey=0x665ab9a110, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0204.111] CryptEncrypt (in: hKey=0x665ab9a110, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x0, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x10) returned 1 [0204.111] SetFilePointer (in: hFile=0x654, lDistanceToMove=2000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1e8480 [0204.111] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x10, lpOverlapped=0x0) returned 1 [0204.111] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2 | out: lpNewFilePointer=0x0) returned 1 [0204.111] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0xa, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0xa, lpOverlapped=0x0) returned 1 [0204.119] CryptExportKey (in: hKey=0x665ab9a110, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0204.119] CryptExportKey (in: hKey=0x665ab9a110, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0204.120] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0204.120] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2 | out: lpNewFilePointer=0x0) returned 1 [0204.120] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abc8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abc8*, lpNumberOfBytesWritten=0x665da7ab98*=0x10, lpOverlapped=0x0) returned 1 [0204.120] CloseHandle (hObject=0x654) returned 1 [0204.538] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0204.543] CryptDestroyKey (hKey=0x665ab9a110) returned 1 [0204.543] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0204.544] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0204.544] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0204.544] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc.session", dwFileAttributes=0x80) returned 1 [0204.545] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc.session" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\telemetrycache.otc.session"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0204.545] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=66168) returned 1 [0204.545] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=66168) returned 1 [0204.545] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x10156, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0204.545] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0204.547] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0204.547] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9aab0) returned 1 [0204.547] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0204.548] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0204.548] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x10278, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x10278, lpOverlapped=0x0) returned 1 [0204.550] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0204.550] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x10278, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x10280) returned 1 [0204.550] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0204.550] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x10280, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x10280, lpOverlapped=0x0) returned 1 [0204.550] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0204.551] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0204.551] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0204.551] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0204.551] CloseHandle (hObject=0x654) returned 1 [0204.573] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0204.577] CryptDestroyKey (hKey=0x665ab9aab0) returned 1 [0204.577] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0204.578] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0204.578] FindClose (in: hFindFile=0x665d90c200 | out: hFindFile=0x665d90c200) returned 1 [0204.578] SetLastError (dwErrCode=0x0) [0204.578] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0204.579] GetLastError () returned 0x0 [0204.579] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0204.580] CloseHandle (hObject=0x3e8) returned 1 [0204.580] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0204.580] SetLastError (dwErrCode=0x0) [0204.580] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0204.580] GetLastError () returned 0xb7 [0204.580] CloseHandle (hObject=0x3e8) returned 1 [0204.581] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90cda0 [0204.582] FindNextFileW (in: hFindFile=0x665d90cda0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0204.582] FindNextFileW (in: hFindFile=0x665d90cda0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0204.582] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0204.583] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.5892.0626-0.etl", dwFileAttributes=0x80) returned 1 [0204.584] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.5892.0626-0.etl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\personal\\tracearchive.5892.0626-0.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0204.584] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=8192) returned 1 [0204.584] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=8192) returned 1 [0204.584] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x1ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0204.584] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0204.586] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0204.586] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a3b0) returned 1 [0204.586] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0204.586] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0204.586] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x2000, lpOverlapped=0x0) returned 1 [0204.587] CryptEncrypt (in: hKey=0x665ab9a3b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0204.587] CryptEncrypt (in: hKey=0x665ab9a3b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x2000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x2010) returned 1 [0204.587] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0204.587] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x2010, lpOverlapped=0x0) returned 1 [0204.588] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0204.588] CryptExportKey (in: hKey=0x665ab9a3b0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0204.588] CryptExportKey (in: hKey=0x665ab9a3b0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0204.588] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0204.588] CloseHandle (hObject=0x654) returned 1 [0204.611] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0204.616] CryptDestroyKey (hKey=0x665ab9a3b0) returned 1 [0204.616] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0204.616] FindNextFileW (in: hFindFile=0x665d90cda0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0204.616] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0204.617] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.6917.0607-1.etl", dwFileAttributes=0x80) returned 1 [0204.618] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.6917.0607-1.etl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\personal\\tracearchive.6917.0607-1.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0204.618] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=8192) returned 1 [0204.618] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=8192) returned 1 [0204.618] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x1ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0204.618] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0204.619] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0204.619] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a3b0) returned 1 [0204.620] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0204.620] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0204.620] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x2000, lpOverlapped=0x0) returned 1 [0204.621] CryptEncrypt (in: hKey=0x665ab9a3b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0204.621] CryptEncrypt (in: hKey=0x665ab9a3b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x2000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x2010) returned 1 [0204.621] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0204.621] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x2010, lpOverlapped=0x0) returned 1 [0204.621] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0204.621] CryptExportKey (in: hKey=0x665ab9a3b0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0204.621] CryptExportKey (in: hKey=0x665ab9a3b0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0204.621] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0204.621] CloseHandle (hObject=0x654) returned 1 [0204.641] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0204.646] CryptDestroyKey (hKey=0x665ab9a3b0) returned 1 [0204.646] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0204.647] FindNextFileW (in: hFindFile=0x665d90cda0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0204.647] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0204.647] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceCurrent.6998.0830.etl", dwFileAttributes=0x80) returned 1 [0204.648] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceCurrent.6998.0830.etl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\personal\\tracecurrent.6998.0830.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0204.648] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=8192) returned 1 [0204.648] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=8192) returned 1 [0204.648] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x1ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0204.648] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0204.650] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0204.650] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a880) returned 1 [0204.650] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0204.650] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0204.650] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x2000, lpOverlapped=0x0) returned 1 [0204.651] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0204.651] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x2000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x2010) returned 1 [0204.651] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0204.651] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x2010, lpOverlapped=0x0) returned 1 [0204.652] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0204.652] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0204.652] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0204.652] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0204.652] CloseHandle (hObject=0x654) returned 1 [0204.675] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0204.681] CryptDestroyKey (hKey=0x665ab9a880) returned 1 [0204.681] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0204.682] FindNextFileW (in: hFindFile=0x665d90cda0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0204.682] FindClose (in: hFindFile=0x665d90cda0 | out: hFindFile=0x665d90cda0) returned 1 [0204.682] SetLastError (dwErrCode=0x0) [0204.682] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\personal\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0204.705] GetLastError () returned 0x0 [0204.705] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0204.706] CloseHandle (hObject=0x3e8) returned 1 [0204.706] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0204.706] FindClose (in: hFindFile=0x665d90c680 | out: hFindFile=0x665d90c680) returned 1 [0204.706] SetLastError (dwErrCode=0x0) [0204.706] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0204.707] GetLastError () returned 0xb7 [0204.707] CloseHandle (hObject=0x620) returned 1 [0204.707] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0204.707] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0204.707] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0204.707] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDrivePersonal.cmd", dwFileAttributes=0x80) returned 1 [0204.708] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDrivePersonal.cmd" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\onedrivepersonal.cmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0204.709] GetFileSizeEx (in: hFile=0x620, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=77) returned 1 [0204.709] GetFileSizeEx (in: hFile=0x620, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=77) returned 1 [0204.709] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7bac0 | out: phKey=0x665da7bac0*=0x665ab9aea0) returned 1 [0204.709] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0204.709] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0204.709] ReadFile (in: hFile=0x620, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x4d, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7bad0*=0x4d, lpOverlapped=0x0) returned 1 [0204.711] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4250) returned 1 [0204.711] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7bac8*=0x4d, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7bac8*=0x50) returned 1 [0204.711] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0204.711] WriteFile (in: hFile=0x620, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7bad0*=0x50, lpOverlapped=0x0) returned 1 [0204.711] WriteFile (in: hFile=0x620, lpBuffer=0x665da7bb10*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb10*, lpNumberOfBytesWritten=0x665da7bad4*=0x6, lpOverlapped=0x0) returned 1 [0204.711] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7bae0 | out: pbData=0x0*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0204.711] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7bb60, pdwDataLen=0x665da7bae0 | out: pbData=0x665da7bb60*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0204.711] WriteFile (in: hFile=0x620, lpBuffer=0x665da7bb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb60*, lpNumberOfBytesWritten=0x665da7bad4*=0x10c, lpOverlapped=0x0) returned 1 [0204.711] CloseHandle (hObject=0x620) returned 1 [0204.726] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0204.731] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0204.732] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0204.732] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0204.732] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0204.732] SetLastError (dwErrCode=0x0) [0204.732] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0204.732] GetLastError () returned 0xb7 [0204.732] CloseHandle (hObject=0x620) returned 1 [0204.733] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d040 [0204.733] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0204.733] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0204.733] SetLastError (dwErrCode=0x0) [0204.733] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0204.735] GetLastError () returned 0x0 [0204.735] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0204.736] CloseHandle (hObject=0x3e8) returned 1 [0204.736] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90d0a0 [0204.738] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0204.738] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0204.738] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0204.739] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121120_934-848.log", dwFileAttributes=0x80) returned 1 [0204.740] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121120_934-848.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_121120_934-848.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0204.740] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=9360) returned 1 [0204.740] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=9360) returned 1 [0204.740] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x236e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0204.740] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0204.742] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0204.742] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9aea0) returned 1 [0204.742] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0204.742] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0204.742] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x2490, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x2490, lpOverlapped=0x0) returned 1 [0204.743] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0204.743] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x2490, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x24a0) returned 1 [0204.743] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0204.743] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x24a0, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x24a0, lpOverlapped=0x0) returned 1 [0204.744] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0204.744] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0204.744] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0204.744] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0204.744] CloseHandle (hObject=0x654) returned 1 [0204.761] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0204.767] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0204.767] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0204.767] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0204.767] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0204.768] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121121_d68-ddc.log", dwFileAttributes=0x80) returned 1 [0204.768] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121121_d68-ddc.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_121121_d68-ddc.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0204.769] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=8714) returned 1 [0204.769] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=8714) returned 1 [0204.769] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x20e8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0204.769] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0204.770] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0204.771] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a6c0) returned 1 [0204.771] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0204.771] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0204.771] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x220a, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x220a, lpOverlapped=0x0) returned 1 [0204.772] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0204.772] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x220a, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x2210) returned 1 [0204.772] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0204.772] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2210, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x2210, lpOverlapped=0x0) returned 1 [0204.772] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0204.772] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0204.772] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0204.773] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0204.773] CloseHandle (hObject=0x654) returned 1 [0204.795] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0204.800] CryptDestroyKey (hKey=0x665ab9a6c0) returned 1 [0204.800] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0204.801] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0204.801] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0204.801] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123817_760-808.log", dwFileAttributes=0x80) returned 1 [0204.802] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123817_760-808.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_123817_760-808.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0204.803] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=9360) returned 1 [0204.803] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=9360) returned 1 [0204.803] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x236e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0204.803] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0204.805] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0204.805] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a0a0) returned 1 [0204.805] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0204.805] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0204.805] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x2490, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x2490, lpOverlapped=0x0) returned 1 [0204.806] CryptEncrypt (in: hKey=0x665ab9a0a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0204.806] CryptEncrypt (in: hKey=0x665ab9a0a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x2490, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x24a0) returned 1 [0204.806] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0204.806] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x24a0, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x24a0, lpOverlapped=0x0) returned 1 [0204.806] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0204.806] CryptExportKey (in: hKey=0x665ab9a0a0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0204.806] CryptExportKey (in: hKey=0x665ab9a0a0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0204.807] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0204.807] CloseHandle (hObject=0x654) returned 1 [0204.829] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0204.834] CryptDestroyKey (hKey=0x665ab9a0a0) returned 1 [0204.834] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0204.834] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0204.835] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0204.835] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123818_e38-824.log", dwFileAttributes=0x80) returned 1 [0204.836] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123818_e38-824.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_123818_e38-824.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0204.836] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=8714) returned 1 [0204.836] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=8714) returned 1 [0204.836] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x20e8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0204.836] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0204.838] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0204.838] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9aea0) returned 1 [0204.838] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0204.838] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0204.838] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x220a, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x220a, lpOverlapped=0x0) returned 1 [0204.839] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0204.839] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x220a, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x2210) returned 1 [0204.839] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0204.839] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2210, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x2210, lpOverlapped=0x0) returned 1 [0204.840] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0204.840] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0204.840] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0204.840] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0204.840] CloseHandle (hObject=0x654) returned 1 [0204.866] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0204.871] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0204.871] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0204.871] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0204.871] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0204.871] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_864-704.log", dwFileAttributes=0x80) returned 1 [0204.872] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_864-704.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_133220_864-704.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0204.873] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=9374) returned 1 [0204.873] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=9374) returned 1 [0204.873] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x237c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0204.873] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0204.883] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0204.883] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a420) returned 1 [0204.883] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0204.884] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0204.884] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x249e, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x249e, lpOverlapped=0x0) returned 1 [0204.885] CryptEncrypt (in: hKey=0x665ab9a420, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0204.885] CryptEncrypt (in: hKey=0x665ab9a420, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x249e, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x24a0) returned 1 [0204.885] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0204.885] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x24a0, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x24a0, lpOverlapped=0x0) returned 1 [0204.885] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0204.885] CryptExportKey (in: hKey=0x665ab9a420, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0204.885] CryptExportKey (in: hKey=0x665ab9a420, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0204.885] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0204.885] CloseHandle (hObject=0x654) returned 1 [0204.911] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0204.916] CryptDestroyKey (hKey=0x665ab9a420) returned 1 [0204.916] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0204.916] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0204.916] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0204.917] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_ae0-29c.log", dwFileAttributes=0x80) returned 1 [0204.918] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_ae0-29c.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_133220_ae0-29c.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0204.919] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=8696) returned 1 [0204.919] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=8696) returned 1 [0204.919] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x20d6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0204.919] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0204.920] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0204.920] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a3b0) returned 1 [0204.921] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0204.921] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0204.921] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x21f8, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x21f8, lpOverlapped=0x0) returned 1 [0204.922] CryptEncrypt (in: hKey=0x665ab9a3b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0204.922] CryptEncrypt (in: hKey=0x665ab9a3b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x21f8, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x2200) returned 1 [0204.922] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0204.922] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2200, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x2200, lpOverlapped=0x0) returned 1 [0204.923] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0204.923] CryptExportKey (in: hKey=0x665ab9a3b0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0204.923] CryptExportKey (in: hKey=0x665ab9a3b0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0204.923] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0204.923] CloseHandle (hObject=0x654) returned 1 [0204.946] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0204.951] CryptDestroyKey (hKey=0x665ab9a3b0) returned 1 [0204.951] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0204.951] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0204.951] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0204.952] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-05-24_104601_b30-494.log", dwFileAttributes=0x80) returned 1 [0204.953] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-05-24_104601_b30-494.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2017-05-24_104601_b30-494.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0204.954] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=464652) returned 1 [0204.954] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=464652) returned 1 [0204.954] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x715ea, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0204.954] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0204.956] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0204.956] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9aab0) returned 1 [0204.956] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0204.956] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0204.956] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x7170c, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x7170c, lpOverlapped=0x0) returned 1 [0204.974] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0204.974] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x7170c, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x71710) returned 1 [0204.975] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0204.975] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x71710, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x71710, lpOverlapped=0x0) returned 1 [0204.987] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0204.987] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0204.987] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0204.987] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0204.987] CloseHandle (hObject=0x654) returned 1 [0205.011] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0205.018] CryptDestroyKey (hKey=0x665ab9aab0) returned 1 [0205.018] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0205.018] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0205.018] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0205.018] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-07-12_164141_b14-7f0.log", dwFileAttributes=0x80) returned 1 [0205.020] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-07-12_164141_b14-7f0.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2017-07-12_164141_b14-7f0.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0205.020] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=578260) returned 1 [0205.020] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=578260) returned 1 [0205.020] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x8d1b2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.020] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0205.022] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0205.022] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a6c0) returned 1 [0205.022] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0205.022] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0205.022] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x8d2d4, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x8d2d4, lpOverlapped=0x0) returned 1 [0205.059] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0205.059] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x8d2d4, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x8d2e0) returned 1 [0205.060] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0205.060] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x8d2e0, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x8d2e0, lpOverlapped=0x0) returned 1 [0205.062] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0205.062] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0205.062] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0205.062] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0205.062] CloseHandle (hObject=0x654) returned 1 [0205.079] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0205.084] CryptDestroyKey (hKey=0x665ab9a6c0) returned 1 [0205.084] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0205.085] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0205.085] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0205.085] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-09-26_160326_bb4-8e8.log", dwFileAttributes=0x80) returned 1 [0205.086] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-09-26_160326_bb4-8e8.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2017-09-26_160326_bb4-8e8.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0205.086] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=604364) returned 1 [0205.086] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=604364) returned 1 [0205.086] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x937aa, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.086] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0205.088] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0205.088] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a180) returned 1 [0205.088] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0205.088] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0205.088] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x938cc, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x938cc, lpOverlapped=0x0) returned 1 [0205.135] CryptEncrypt (in: hKey=0x665ab9a180, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0205.135] CryptEncrypt (in: hKey=0x665ab9a180, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x938cc, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x938d0) returned 1 [0205.136] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0205.136] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x938d0, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x938d0, lpOverlapped=0x0) returned 1 [0205.141] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0205.141] CryptExportKey (in: hKey=0x665ab9a180, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0205.141] CryptExportKey (in: hKey=0x665ab9a180, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0205.141] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0205.141] CloseHandle (hObject=0x654) returned 1 [0205.235] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0205.240] CryptDestroyKey (hKey=0x665ab9a180) returned 1 [0205.240] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0205.240] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0205.240] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0205.241] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-05-24_104600_528-57c.log", dwFileAttributes=0x80) returned 1 [0205.242] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-05-24_104600_528-57c.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2017-05-24_104600_528-57c.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0205.242] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=93926) returned 1 [0205.242] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=93926) returned 1 [0205.242] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x16dc4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.242] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0205.244] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0205.244] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a880) returned 1 [0205.244] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0205.244] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0205.244] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x16ee6, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x16ee6, lpOverlapped=0x0) returned 1 [0205.248] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0205.248] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x16ee6, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x16ef0) returned 1 [0205.248] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0205.248] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x16ef0, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x16ef0, lpOverlapped=0x0) returned 1 [0205.248] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0205.248] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0205.249] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0205.249] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0205.249] CloseHandle (hObject=0x654) returned 1 [0205.266] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0205.270] CryptDestroyKey (hKey=0x665ab9a880) returned 1 [0205.270] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0205.270] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0205.270] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0205.270] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-07-12_164138_904-4d0.log", dwFileAttributes=0x80) returned 1 [0205.271] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-07-12_164138_904-4d0.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2017-07-12_164138_904-4d0.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0205.271] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=112794) returned 1 [0205.271] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=112794) returned 1 [0205.271] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x1b778, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.271] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0205.273] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0205.273] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9aea0) returned 1 [0205.273] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0205.273] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0205.273] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x1b89a, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x1b89a, lpOverlapped=0x0) returned 1 [0205.277] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0205.277] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x1b89a, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x1b8a0) returned 1 [0205.277] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0205.277] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x1b8a0, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x1b8a0, lpOverlapped=0x0) returned 1 [0205.277] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0205.277] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0205.278] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0205.278] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0205.278] CloseHandle (hObject=0x654) returned 1 [0205.295] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0205.300] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0205.300] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0205.300] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0205.300] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0205.300] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-09-26_160323_3a0-354.log", dwFileAttributes=0x80) returned 1 [0205.301] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-09-26_160323_3a0-354.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2017-09-26_160323_3a0-354.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0205.302] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=119520) returned 1 [0205.302] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=119520) returned 1 [0205.302] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x1d1be, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.302] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0205.303] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0205.303] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a0a0) returned 1 [0205.303] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0205.304] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0205.304] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x1d2e0, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x1d2e0, lpOverlapped=0x0) returned 1 [0205.308] CryptEncrypt (in: hKey=0x665ab9a0a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0205.308] CryptEncrypt (in: hKey=0x665ab9a0a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x1d2e0, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x1d2f0) returned 1 [0205.308] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0205.308] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x1d2f0, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x1d2f0, lpOverlapped=0x0) returned 1 [0205.309] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0205.309] CryptExportKey (in: hKey=0x665ab9a0a0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0205.309] CryptExportKey (in: hKey=0x665ab9a0a0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0205.309] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0205.309] CloseHandle (hObject=0x654) returned 1 [0205.329] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0205.333] CryptDestroyKey (hKey=0x665ab9a0a0) returned 1 [0205.333] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0205.333] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0205.333] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0205.334] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc", dwFileAttributes=0x80) returned 1 [0205.334] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\parenttelemetrycache.otc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0205.335] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=20480) returned 1 [0205.335] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=20480) returned 1 [0205.335] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x4ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.335] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0205.336] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0205.336] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9aab0) returned 1 [0205.336] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0205.336] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0205.336] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x5000, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x5000, lpOverlapped=0x0) returned 1 [0205.338] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0205.338] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x5000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x5010) returned 1 [0205.338] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0205.338] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x5010, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x5010, lpOverlapped=0x0) returned 1 [0205.339] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0205.339] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0205.339] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0205.339] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0205.339] CloseHandle (hObject=0x654) returned 1 [0205.355] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0205.361] CryptDestroyKey (hKey=0x665ab9aab0) returned 1 [0205.361] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0205.361] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0205.361] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0205.361] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc.session", dwFileAttributes=0x80) returned 1 [0205.362] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc.session" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\parenttelemetrycache.otc.session"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0205.362] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=20480) returned 1 [0205.363] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=20480) returned 1 [0205.363] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x4ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.363] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0205.364] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0205.364] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a880) returned 1 [0205.364] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0205.364] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0205.364] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x5000, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x5000, lpOverlapped=0x0) returned 1 [0205.365] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0205.365] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x5000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x5010) returned 1 [0205.365] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0205.366] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x5010, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x5010, lpOverlapped=0x0) returned 1 [0205.366] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0205.366] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0205.366] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0205.366] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0205.366] CloseHandle (hObject=0x654) returned 1 [0205.394] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0205.399] CryptDestroyKey (hKey=0x665ab9a880) returned 1 [0205.399] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0205.399] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0205.399] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0205.399] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-12_164130_2e0-2c8.log", dwFileAttributes=0x80) returned 1 [0205.400] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-12_164130_2e0-2c8.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-07-12_164130_2e0-2c8.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0205.401] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=4318) returned 1 [0205.401] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=4318) returned 1 [0205.401] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0xfbc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.401] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0205.402] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0205.402] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9aab0) returned 1 [0205.402] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0205.403] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0205.403] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x10de, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x10de, lpOverlapped=0x0) returned 1 [0205.404] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0205.404] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x10de, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x10e0) returned 1 [0205.404] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0205.404] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x10e0, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x10e0, lpOverlapped=0x0) returned 1 [0205.404] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0205.405] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0205.405] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0205.405] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0205.405] CloseHandle (hObject=0x654) returned 1 [0205.426] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0205.433] CryptDestroyKey (hKey=0x665ab9aab0) returned 1 [0205.433] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0205.433] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0205.434] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0205.434] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-13_111425_fe4-f74.log", dwFileAttributes=0x80) returned 1 [0205.436] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-13_111425_fe4-f74.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-07-13_111425_fe4-f74.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0205.437] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=2004) returned 1 [0205.437] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=2004) returned 1 [0205.437] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x6b2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.437] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0205.439] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0205.439] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a880) returned 1 [0205.439] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0205.440] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0205.440] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x7d4, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x7d4, lpOverlapped=0x0) returned 1 [0205.440] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0205.440] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x7d4, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x7e0) returned 1 [0205.440] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0205.440] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x7e0, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x7e0, lpOverlapped=0x0) returned 1 [0205.440] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0205.440] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0205.440] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0205.440] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0205.441] CloseHandle (hObject=0x654) returned 1 [0205.468] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0205.473] CryptDestroyKey (hKey=0x665ab9a880) returned 1 [0205.473] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0205.473] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0205.473] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0205.474] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-14_075507_d98-d94.log", dwFileAttributes=0x80) returned 1 [0205.474] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-14_075507_d98-d94.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-07-14_075507_d98-d94.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0205.475] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=2006) returned 1 [0205.475] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=2006) returned 1 [0205.475] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x6b4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.475] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0205.478] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0205.478] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a340) returned 1 [0205.478] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0205.478] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0205.478] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x7d6, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x7d6, lpOverlapped=0x0) returned 1 [0205.478] CryptEncrypt (in: hKey=0x665ab9a340, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0205.478] CryptEncrypt (in: hKey=0x665ab9a340, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x7d6, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x7e0) returned 1 [0205.479] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0205.479] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x7e0, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x7e0, lpOverlapped=0x0) returned 1 [0205.479] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0205.479] CryptExportKey (in: hKey=0x665ab9a340, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0205.479] CryptExportKey (in: hKey=0x665ab9a340, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0205.479] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0205.479] CloseHandle (hObject=0x654) returned 1 [0205.507] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0205.512] CryptDestroyKey (hKey=0x665ab9a340) returned 1 [0205.512] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0205.513] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0205.513] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0205.513] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-19_092447_b70-3a8.log", dwFileAttributes=0x80) returned 1 [0205.514] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-19_092447_b70-3a8.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-07-19_092447_b70-3a8.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0205.515] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=2006) returned 1 [0205.515] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=2006) returned 1 [0205.515] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x6b4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.515] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0205.516] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0205.517] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9aea0) returned 1 [0205.517] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0205.517] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0205.517] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x7d6, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x7d6, lpOverlapped=0x0) returned 1 [0205.517] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0205.517] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x7d6, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x7e0) returned 1 [0205.517] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0205.517] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x7e0, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x7e0, lpOverlapped=0x0) returned 1 [0205.518] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0205.518] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0205.518] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0205.518] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0205.518] CloseHandle (hObject=0x654) returned 1 [0205.542] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0205.548] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0205.548] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0205.548] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0205.548] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0205.549] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-21_115555_e74-e78.log", dwFileAttributes=0x80) returned 1 [0205.549] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-21_115555_e74-e78.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-07-21_115555_e74-e78.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0205.550] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=2006) returned 1 [0205.550] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=2006) returned 1 [0205.550] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x6b4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.550] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0205.551] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0205.551] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a880) returned 1 [0205.552] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0205.552] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0205.552] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x7d6, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x7d6, lpOverlapped=0x0) returned 1 [0205.552] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0205.552] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x7d6, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x7e0) returned 1 [0205.552] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0205.552] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x7e0, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x7e0, lpOverlapped=0x0) returned 1 [0205.553] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0205.553] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0205.553] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0205.553] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0205.553] CloseHandle (hObject=0x654) returned 1 [0205.577] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0205.582] CryptDestroyKey (hKey=0x665ab9a880) returned 1 [0205.582] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0205.582] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0205.582] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0205.583] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-09-26_160311_e54-e58.log", dwFileAttributes=0x80) returned 1 [0205.583] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-09-26_160311_e54-e58.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-09-26_160311_e54-e58.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0205.584] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=4302) returned 1 [0205.584] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=4302) returned 1 [0205.584] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0xfac, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.584] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0205.585] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0205.585] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a730) returned 1 [0205.586] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0205.586] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0205.586] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x10ce, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x10ce, lpOverlapped=0x0) returned 1 [0205.587] CryptEncrypt (in: hKey=0x665ab9a730, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0205.587] CryptEncrypt (in: hKey=0x665ab9a730, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x10ce, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x10d0) returned 1 [0205.587] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0205.587] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x10d0, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x10d0, lpOverlapped=0x0) returned 1 [0205.587] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0205.587] CryptExportKey (in: hKey=0x665ab9a730, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0205.587] CryptExportKey (in: hKey=0x665ab9a730, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0205.587] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0205.587] CloseHandle (hObject=0x654) returned 1 [0205.609] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0205.615] CryptDestroyKey (hKey=0x665ab9a730) returned 1 [0205.615] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0205.615] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0205.615] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0205.615] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-09-27_084159_4e4-594.log", dwFileAttributes=0x80) returned 1 [0205.616] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-09-27_084159_4e4-594.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-09-27_084159_4e4-594.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0205.617] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=2008) returned 1 [0205.617] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=2008) returned 1 [0205.617] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x6b6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.617] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0205.618] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0205.618] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a880) returned 1 [0205.618] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0205.619] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0205.619] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x7d8, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x7d8, lpOverlapped=0x0) returned 1 [0205.619] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0205.619] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x7d8, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x7e0) returned 1 [0205.619] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0205.619] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x7e0, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x7e0, lpOverlapped=0x0) returned 1 [0205.619] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0205.620] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0205.620] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0205.620] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0205.620] CloseHandle (hObject=0x654) returned 1 [0205.647] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0205.652] CryptDestroyKey (hKey=0x665ab9a880) returned 1 [0205.652] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0205.652] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0205.652] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0205.653] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc", dwFileAttributes=0x80) returned 1 [0205.654] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\usertelemetrycache.otc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0205.655] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=20480) returned 1 [0205.655] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=20480) returned 1 [0205.655] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x4ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.655] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0205.656] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0205.656] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a6c0) returned 1 [0205.656] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0205.657] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0205.657] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x5000, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x5000, lpOverlapped=0x0) returned 1 [0205.658] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0205.658] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x5000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x5010) returned 1 [0205.658] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0205.658] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x5010, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x5010, lpOverlapped=0x0) returned 1 [0205.659] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0205.659] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0205.659] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0205.659] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0205.659] CloseHandle (hObject=0x654) returned 1 [0205.681] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0205.687] CryptDestroyKey (hKey=0x665ab9a6c0) returned 1 [0205.687] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0205.687] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0205.687] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0205.688] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc.session", dwFileAttributes=0x80) returned 1 [0205.690] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc.session" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\usertelemetrycache.otc.session"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0205.690] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=20480) returned 1 [0205.690] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=20480) returned 1 [0205.690] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x4ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.691] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0205.692] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0205.692] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a500) returned 1 [0205.692] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0205.692] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0205.692] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x5000, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x5000, lpOverlapped=0x0) returned 1 [0205.695] CryptEncrypt (in: hKey=0x665ab9a500, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0205.695] CryptEncrypt (in: hKey=0x665ab9a500, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x5000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x5010) returned 1 [0205.695] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0205.696] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x5010, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x5010, lpOverlapped=0x0) returned 1 [0205.696] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0205.696] CryptExportKey (in: hKey=0x665ab9a500, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0205.696] CryptExportKey (in: hKey=0x665ab9a500, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0205.696] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0205.696] CloseHandle (hObject=0x654) returned 1 [0205.722] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0205.727] CryptDestroyKey (hKey=0x665ab9a500) returned 1 [0205.727] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0205.727] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0205.727] FindClose (in: hFindFile=0x665d90d0a0 | out: hFindFile=0x665d90d0a0) returned 1 [0205.727] SetLastError (dwErrCode=0x0) [0205.727] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0205.730] GetLastError () returned 0x0 [0205.730] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0205.731] CloseHandle (hObject=0x3e8) returned 1 [0205.732] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0205.732] FindClose (in: hFindFile=0x665d90d040 | out: hFindFile=0x665d90d040) returned 1 [0205.732] SetLastError (dwErrCode=0x0) [0205.732] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0205.733] GetLastError () returned 0xb7 [0205.733] CloseHandle (hObject=0x620) returned 1 [0205.733] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0205.733] SetLastError (dwErrCode=0x0) [0205.733] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0205.733] GetLastError () returned 0xb7 [0205.733] CloseHandle (hObject=0x620) returned 1 [0205.733] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bf60 [0205.734] FindNextFileW (in: hFindFile=0x665d90bf60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0205.734] FindNextFileW (in: hFindFile=0x665d90bf60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0205.734] FindNextFileW (in: hFindFile=0x665d90bf60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0205.734] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0205.734] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\Update.xml", dwFileAttributes=0x80) returned 1 [0205.735] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\Update.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\standaloneupdater\\update.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0205.735] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=387) returned 1 [0205.735] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=387) returned 1 [0205.735] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x61, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.735] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0205.736] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0205.736] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9a0a0) returned 1 [0205.736] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0205.736] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0205.736] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x183, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0x183, lpOverlapped=0x0) returned 1 [0205.737] CryptEncrypt (in: hKey=0x665ab9a0a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0205.737] CryptEncrypt (in: hKey=0x665ab9a0a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x183, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x190) returned 1 [0205.737] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0205.737] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x190, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0x190, lpOverlapped=0x0) returned 1 [0205.737] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0205.737] CryptExportKey (in: hKey=0x665ab9a0a0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0205.737] CryptExportKey (in: hKey=0x665ab9a0a0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0205.737] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0205.737] CloseHandle (hObject=0x3e8) returned 1 [0205.758] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0205.762] CryptDestroyKey (hKey=0x665ab9a0a0) returned 1 [0205.762] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0205.762] FindNextFileW (in: hFindFile=0x665d90bf60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0205.762] FindClose (in: hFindFile=0x665d90bf60 | out: hFindFile=0x665d90bf60) returned 1 [0205.762] SetLastError (dwErrCode=0x0) [0205.762] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\standaloneupdater\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0205.766] GetLastError () returned 0x0 [0205.766] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0205.767] CloseHandle (hObject=0x620) returned 1 [0205.767] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0205.767] FindClose (in: hFindFile=0x665d90c500 | out: hFindFile=0x665d90c500) returned 1 [0205.767] SetLastError (dwErrCode=0x0) [0205.767] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0205.768] GetLastError () returned 0xb7 [0205.768] CloseHandle (hObject=0x60c) returned 1 [0205.768] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0205.768] SetLastError (dwErrCode=0x0) [0205.768] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0205.768] GetLastError () returned 0xb7 [0205.768] CloseHandle (hObject=0x60c) returned 1 [0205.768] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90d040 [0205.769] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0205.769] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0205.769] SetLastError (dwErrCode=0x0) [0205.769] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0205.770] GetLastError () returned 0x0 [0205.770] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0205.771] CloseHandle (hObject=0x620) returned 1 [0205.771] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d0a0 [0205.772] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0205.772] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0205.772] SetLastError (dwErrCode=0x0) [0205.772] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0205.773] GetLastError () returned 0x0 [0205.773] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0205.774] CloseHandle (hObject=0x3e8) returned 1 [0205.774] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\Backup\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90d100 [0205.775] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0205.775] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0205.775] FindClose (in: hFindFile=0x665d90d100 | out: hFindFile=0x665d90d100) returned 1 [0205.775] SetLastError (dwErrCode=0x0) [0205.775] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\Backup\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\backup\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0205.776] GetLastError () returned 0x0 [0205.776] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0205.777] CloseHandle (hObject=0x3e8) returned 1 [0205.777] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0205.777] SetLastError (dwErrCode=0x0) [0205.777] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0205.777] GetLastError () returned 0xb7 [0205.777] CloseHandle (hObject=0x3e8) returned 1 [0205.778] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90d100 [0205.780] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0205.780] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0205.780] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0205.781] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000000.bin", dwFileAttributes=0x80) returned 1 [0205.782] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000000.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000000.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0205.782] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=12288) returned 1 [0205.782] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=12288) returned 1 [0205.782] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x2ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.782] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0205.784] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0205.784] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9aab0) returned 1 [0205.784] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0205.784] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0205.784] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x3000, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x3000, lpOverlapped=0x0) returned 1 [0205.785] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0205.785] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x3000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x3010) returned 1 [0205.785] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0205.785] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x3010, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x3010, lpOverlapped=0x0) returned 1 [0205.786] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0205.786] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0205.786] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0205.786] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0205.786] CloseHandle (hObject=0x654) returned 1 [0205.808] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0205.812] CryptDestroyKey (hKey=0x665ab9aab0) returned 1 [0205.812] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0205.812] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0205.813] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0205.813] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000001.bin", dwFileAttributes=0x80) returned 1 [0205.814] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000001.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000001.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0205.814] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=20480) returned 1 [0205.814] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=20480) returned 1 [0205.815] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x4ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.815] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0205.864] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0205.864] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a340) returned 1 [0205.864] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0205.864] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0205.864] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x5000, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x5000, lpOverlapped=0x0) returned 1 [0206.685] CryptEncrypt (in: hKey=0x665ab9a340, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0206.686] CryptEncrypt (in: hKey=0x665ab9a340, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x5000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x5010) returned 1 [0206.686] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0206.686] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x5010, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x5010, lpOverlapped=0x0) returned 1 [0206.686] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0206.687] CryptExportKey (in: hKey=0x665ab9a340, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0206.687] CryptExportKey (in: hKey=0x665ab9a340, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0206.687] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0206.687] CloseHandle (hObject=0x654) returned 1 [0206.704] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0206.708] CryptDestroyKey (hKey=0x665ab9a340) returned 1 [0206.709] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0206.709] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0206.709] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0206.709] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000004.bin", dwFileAttributes=0x80) returned 1 [0206.711] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000004.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000004.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0206.712] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=14458) returned 1 [0206.712] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=14458) returned 1 [0206.712] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x3758, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.712] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0206.714] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0206.714] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a500) returned 1 [0206.714] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0206.714] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0206.714] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x387a, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x387a, lpOverlapped=0x0) returned 1 [0206.715] CryptEncrypt (in: hKey=0x665ab9a500, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0206.715] CryptEncrypt (in: hKey=0x665ab9a500, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x387a, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x3880) returned 1 [0206.715] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0206.715] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x3880, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x3880, lpOverlapped=0x0) returned 1 [0206.716] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0206.716] CryptExportKey (in: hKey=0x665ab9a500, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0206.716] CryptExportKey (in: hKey=0x665ab9a500, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0206.716] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0206.716] CloseHandle (hObject=0x654) returned 1 [0206.734] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0206.738] CryptDestroyKey (hKey=0x665ab9a500) returned 1 [0206.738] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0206.739] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0206.739] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0206.739] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000005.bin", dwFileAttributes=0x80) returned 1 [0206.740] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000005.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000005.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0206.740] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=19235) returned 1 [0206.740] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=19235) returned 1 [0206.740] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x4a01, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.740] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0206.741] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0206.741] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9aea0) returned 1 [0206.741] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0206.742] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0206.742] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x4b23, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x4b23, lpOverlapped=0x0) returned 1 [0206.743] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0206.743] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x4b23, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x4b30) returned 1 [0206.743] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0206.743] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x4b30, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x4b30, lpOverlapped=0x0) returned 1 [0206.743] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0206.743] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0206.743] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0206.743] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0206.743] CloseHandle (hObject=0x654) returned 1 [0206.762] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0206.767] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0206.767] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0206.768] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0206.768] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0206.768] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000006.bin", dwFileAttributes=0x80) returned 1 [0206.769] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000006.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000006.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0206.770] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=1604) returned 1 [0206.770] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=1604) returned 1 [0206.770] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x522, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.770] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0206.771] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0206.771] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9aab0) returned 1 [0206.771] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0206.772] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0206.772] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x644, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x644, lpOverlapped=0x0) returned 1 [0206.772] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0206.772] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x644, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x650) returned 1 [0206.772] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0206.772] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x650, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x650, lpOverlapped=0x0) returned 1 [0206.772] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0206.772] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0206.772] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0206.772] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0206.772] CloseHandle (hObject=0x654) returned 1 [0206.792] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0206.797] CryptDestroyKey (hKey=0x665ab9aab0) returned 1 [0206.797] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0206.798] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0206.798] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0206.798] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000007.bin", dwFileAttributes=0x80) returned 1 [0206.799] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000007.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000007.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0206.800] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=2232) returned 1 [0206.800] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=2232) returned 1 [0206.800] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x796, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.800] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0206.802] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0206.802] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9aab0) returned 1 [0206.802] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0206.802] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0206.802] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x8b8, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x8b8, lpOverlapped=0x0) returned 1 [0206.802] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0206.802] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x8b8, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x8c0) returned 1 [0206.802] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0206.802] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x8c0, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x8c0, lpOverlapped=0x0) returned 1 [0206.803] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0206.803] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0206.803] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0206.803] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0206.803] CloseHandle (hObject=0x654) returned 1 [0206.824] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0206.830] CryptDestroyKey (hKey=0x665ab9aab0) returned 1 [0206.830] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0206.830] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0206.830] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0206.830] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000008.bin", dwFileAttributes=0x80) returned 1 [0206.831] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000008.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000008.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0206.832] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=3679) returned 1 [0206.832] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=3679) returned 1 [0206.832] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0xd3d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.832] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0206.834] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0206.834] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a420) returned 1 [0206.834] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0206.834] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0206.834] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0xe5f, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0xe5f, lpOverlapped=0x0) returned 1 [0206.834] CryptEncrypt (in: hKey=0x665ab9a420, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0206.834] CryptEncrypt (in: hKey=0x665ab9a420, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0xe5f, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0xe60) returned 1 [0206.834] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0206.834] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0xe60, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0xe60, lpOverlapped=0x0) returned 1 [0206.835] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0206.835] CryptExportKey (in: hKey=0x665ab9a420, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0206.835] CryptExportKey (in: hKey=0x665ab9a420, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0206.835] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0206.835] CloseHandle (hObject=0x654) returned 1 [0206.860] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0206.864] CryptDestroyKey (hKey=0x665ab9a420) returned 1 [0206.864] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0206.865] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0206.865] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0206.865] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000009.bin", dwFileAttributes=0x80) returned 1 [0206.866] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000009.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000009.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0206.867] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=13030) returned 1 [0206.867] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=13030) returned 1 [0206.867] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x31c4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.867] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0206.868] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0206.868] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9aab0) returned 1 [0206.868] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0206.869] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0206.869] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x32e6, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x32e6, lpOverlapped=0x0) returned 1 [0206.870] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0206.870] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x32e6, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x32f0) returned 1 [0206.870] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0206.870] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x32f0, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x32f0, lpOverlapped=0x0) returned 1 [0206.871] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0206.871] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0206.871] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0206.871] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0206.871] CloseHandle (hObject=0x654) returned 1 [0206.906] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0206.911] CryptDestroyKey (hKey=0x665ab9aab0) returned 1 [0206.911] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0206.911] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0206.911] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0206.912] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000C.bin", dwFileAttributes=0x80) returned 1 [0206.927] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000C.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000c.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0206.927] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=5386) returned 1 [0206.927] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=5386) returned 1 [0206.927] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x13e8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.927] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0206.929] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0206.929] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9aea0) returned 1 [0206.929] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0206.929] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0206.929] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x150a, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x150a, lpOverlapped=0x0) returned 1 [0206.930] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0206.930] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x150a, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x1510) returned 1 [0206.930] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0206.930] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x1510, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x1510, lpOverlapped=0x0) returned 1 [0206.930] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0206.930] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0206.930] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0206.930] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0206.931] CloseHandle (hObject=0x654) returned 1 [0206.947] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0206.952] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0206.952] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0206.952] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0206.952] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0206.953] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000D.bin", dwFileAttributes=0x80) returned 1 [0206.953] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000D.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000d.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0206.954] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=7374) returned 1 [0206.954] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=7374) returned 1 [0206.954] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x1bac, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.954] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0206.955] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0206.955] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a340) returned 1 [0206.955] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0206.956] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0206.956] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x1cce, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x1cce, lpOverlapped=0x0) returned 1 [0206.957] CryptEncrypt (in: hKey=0x665ab9a340, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0206.957] CryptEncrypt (in: hKey=0x665ab9a340, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x1cce, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x1cd0) returned 1 [0206.957] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0206.957] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x1cd0, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x1cd0, lpOverlapped=0x0) returned 1 [0206.957] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0206.957] CryptExportKey (in: hKey=0x665ab9a340, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0206.957] CryptExportKey (in: hKey=0x665ab9a340, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0206.957] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0206.957] CloseHandle (hObject=0x654) returned 1 [0206.976] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0206.981] CryptDestroyKey (hKey=0x665ab9a340) returned 1 [0206.981] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0206.981] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0206.981] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0206.982] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000F.bin", dwFileAttributes=0x80) returned 1 [0206.983] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000F.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000f.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0206.984] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=4847) returned 1 [0206.984] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=4847) returned 1 [0206.984] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x11cd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.984] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0206.985] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0206.985] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a6c0) returned 1 [0206.985] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0206.985] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0206.985] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x12ef, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x12ef, lpOverlapped=0x0) returned 1 [0206.986] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0206.986] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x12ef, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x12f0) returned 1 [0206.986] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0206.986] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x12f0, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x12f0, lpOverlapped=0x0) returned 1 [0206.987] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0206.987] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0206.987] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0206.987] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0206.987] CloseHandle (hObject=0x654) returned 1 [0207.007] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0207.011] CryptDestroyKey (hKey=0x665ab9a6c0) returned 1 [0207.011] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0207.012] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0207.012] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0207.012] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000G.bin", dwFileAttributes=0x80) returned 1 [0207.012] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000G.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000g.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0207.013] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=2210) returned 1 [0207.013] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=2210) returned 1 [0207.013] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x780, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.013] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0207.014] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.014] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a730) returned 1 [0207.014] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0207.015] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.015] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x8a2, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x8a2, lpOverlapped=0x0) returned 1 [0207.015] CryptEncrypt (in: hKey=0x665ab9a730, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0207.015] CryptEncrypt (in: hKey=0x665ab9a730, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x8a2, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x8b0) returned 1 [0207.015] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.015] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x8b0, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x8b0, lpOverlapped=0x0) returned 1 [0207.015] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0207.015] CryptExportKey (in: hKey=0x665ab9a730, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0207.015] CryptExportKey (in: hKey=0x665ab9a730, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0207.015] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0207.015] CloseHandle (hObject=0x654) returned 1 [0207.033] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0207.037] CryptDestroyKey (hKey=0x665ab9a730) returned 1 [0207.037] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0207.037] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0207.037] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0207.037] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000H.bin", dwFileAttributes=0x80) returned 1 [0207.039] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000H.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000h.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0207.039] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=1657) returned 1 [0207.039] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=1657) returned 1 [0207.039] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x557, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.039] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0207.040] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.040] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9aea0) returned 1 [0207.040] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0207.041] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.041] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x679, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x679, lpOverlapped=0x0) returned 1 [0207.041] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0207.041] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x679, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x680) returned 1 [0207.041] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.041] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x680, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x680, lpOverlapped=0x0) returned 1 [0207.041] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0207.041] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0207.041] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0207.041] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0207.041] CloseHandle (hObject=0x654) returned 1 [0207.061] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0207.066] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0207.066] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0207.066] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0207.066] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0207.066] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000I.bin", dwFileAttributes=0x80) returned 1 [0207.067] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000I.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000i.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0207.068] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=3879) returned 1 [0207.068] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=3879) returned 1 [0207.068] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0xe05, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.068] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0207.069] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.069] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a730) returned 1 [0207.069] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0207.070] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.070] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0xf27, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0xf27, lpOverlapped=0x0) returned 1 [0207.070] CryptEncrypt (in: hKey=0x665ab9a730, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0207.070] CryptEncrypt (in: hKey=0x665ab9a730, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0xf27, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0xf30) returned 1 [0207.070] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.070] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0xf30, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0xf30, lpOverlapped=0x0) returned 1 [0207.070] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0207.071] CryptExportKey (in: hKey=0x665ab9a730, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0207.071] CryptExportKey (in: hKey=0x665ab9a730, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0207.071] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0207.071] CloseHandle (hObject=0x654) returned 1 [0207.096] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0207.102] CryptDestroyKey (hKey=0x665ab9a730) returned 1 [0207.102] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0207.102] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0207.102] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0207.102] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000J.bin", dwFileAttributes=0x80) returned 1 [0207.103] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000J.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000j.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0207.103] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=13084) returned 1 [0207.104] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=13084) returned 1 [0207.104] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x31fa, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.104] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0207.105] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.105] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a180) returned 1 [0207.105] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0207.106] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.106] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x331c, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x331c, lpOverlapped=0x0) returned 1 [0207.107] CryptEncrypt (in: hKey=0x665ab9a180, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0207.107] CryptEncrypt (in: hKey=0x665ab9a180, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x331c, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x3320) returned 1 [0207.107] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.107] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x3320, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x3320, lpOverlapped=0x0) returned 1 [0207.107] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0207.107] CryptExportKey (in: hKey=0x665ab9a180, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0207.107] CryptExportKey (in: hKey=0x665ab9a180, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0207.107] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0207.108] CloseHandle (hObject=0x654) returned 1 [0207.130] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0207.135] CryptDestroyKey (hKey=0x665ab9a180) returned 1 [0207.135] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0207.135] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0207.135] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0207.136] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000L.bin", dwFileAttributes=0x80) returned 1 [0207.137] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000L.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000l.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0207.138] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=2332) returned 1 [0207.138] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=2332) returned 1 [0207.138] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x7fa, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.138] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0207.139] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.139] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a180) returned 1 [0207.139] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0207.140] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.140] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x91c, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x91c, lpOverlapped=0x0) returned 1 [0207.140] CryptEncrypt (in: hKey=0x665ab9a180, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0207.140] CryptEncrypt (in: hKey=0x665ab9a180, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x91c, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x920) returned 1 [0207.140] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.140] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x920, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x920, lpOverlapped=0x0) returned 1 [0207.140] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0207.140] CryptExportKey (in: hKey=0x665ab9a180, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0207.140] CryptExportKey (in: hKey=0x665ab9a180, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0207.140] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0207.140] CloseHandle (hObject=0x654) returned 1 [0207.160] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0207.165] CryptDestroyKey (hKey=0x665ab9a180) returned 1 [0207.165] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0207.165] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0207.165] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0207.165] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000M.bin", dwFileAttributes=0x80) returned 1 [0207.167] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000M.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000m.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0207.167] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=4181) returned 1 [0207.167] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=4181) returned 1 [0207.167] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0xf33, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.167] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0207.169] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.169] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9aab0) returned 1 [0207.169] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0207.169] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.169] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x1055, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x1055, lpOverlapped=0x0) returned 1 [0207.170] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0207.170] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x1055, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x1060) returned 1 [0207.170] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.171] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x1060, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x1060, lpOverlapped=0x0) returned 1 [0207.171] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0207.171] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0207.171] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0207.171] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0207.171] CloseHandle (hObject=0x654) returned 1 [0207.192] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0207.197] CryptDestroyKey (hKey=0x665ab9aab0) returned 1 [0207.197] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0207.198] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0207.198] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0207.198] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000N.bin", dwFileAttributes=0x80) returned 1 [0207.200] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000N.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000n.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0207.242] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=22634) returned 1 [0207.242] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=22634) returned 1 [0207.242] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x5748, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.242] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0207.244] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.244] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9aea0) returned 1 [0207.244] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0207.244] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.244] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x586a, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x586a, lpOverlapped=0x0) returned 1 [0207.246] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0207.246] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x586a, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x5870) returned 1 [0207.246] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.246] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x5870, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x5870, lpOverlapped=0x0) returned 1 [0207.246] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0207.246] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0207.246] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0207.247] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0207.247] CloseHandle (hObject=0x654) returned 1 [0207.268] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0207.272] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0207.272] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0207.272] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0207.272] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0207.273] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000O.bin", dwFileAttributes=0x80) returned 1 [0207.274] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000O.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000o.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0207.274] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=16003) returned 1 [0207.274] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=16003) returned 1 [0207.274] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x3d61, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.274] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0207.276] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.276] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a3b0) returned 1 [0207.276] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0207.277] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.277] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x3e83, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x3e83, lpOverlapped=0x0) returned 1 [0207.277] CryptEncrypt (in: hKey=0x665ab9a3b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0207.278] CryptEncrypt (in: hKey=0x665ab9a3b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x3e83, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x3e90) returned 1 [0207.278] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.278] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x3e90, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x3e90, lpOverlapped=0x0) returned 1 [0207.278] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0207.278] CryptExportKey (in: hKey=0x665ab9a3b0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0207.278] CryptExportKey (in: hKey=0x665ab9a3b0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0207.278] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0207.279] CloseHandle (hObject=0x654) returned 1 [0207.299] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0207.303] CryptDestroyKey (hKey=0x665ab9a3b0) returned 1 [0207.303] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0207.304] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0207.304] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0207.304] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000P.bin", dwFileAttributes=0x80) returned 1 [0207.305] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000P.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000p.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0207.305] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=17289) returned 1 [0207.305] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=17289) returned 1 [0207.305] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x4267, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.305] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0207.307] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.307] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a180) returned 1 [0207.307] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0207.307] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.307] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x4389, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x4389, lpOverlapped=0x0) returned 1 [0207.308] CryptEncrypt (in: hKey=0x665ab9a180, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0207.308] CryptEncrypt (in: hKey=0x665ab9a180, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x4389, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x4390) returned 1 [0207.308] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.308] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x4390, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x4390, lpOverlapped=0x0) returned 1 [0207.309] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0207.309] CryptExportKey (in: hKey=0x665ab9a180, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0207.309] CryptExportKey (in: hKey=0x665ab9a180, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0207.309] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0207.309] CloseHandle (hObject=0x654) returned 1 [0207.327] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0207.331] CryptDestroyKey (hKey=0x665ab9a180) returned 1 [0207.331] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0207.331] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0207.331] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0207.332] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000Q.bin", dwFileAttributes=0x80) returned 1 [0207.333] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000Q.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000q.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0207.333] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=4490) returned 1 [0207.333] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=4490) returned 1 [0207.333] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x1068, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.333] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0207.335] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.335] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a880) returned 1 [0207.335] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0207.335] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.335] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x118a, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x118a, lpOverlapped=0x0) returned 1 [0207.336] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0207.336] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x118a, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x1190) returned 1 [0207.336] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.336] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x1190, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x1190, lpOverlapped=0x0) returned 1 [0207.336] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0207.336] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0207.336] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0207.336] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0207.336] CloseHandle (hObject=0x654) returned 1 [0207.354] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0207.358] CryptDestroyKey (hKey=0x665ab9a880) returned 1 [0207.358] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0207.358] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0207.358] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0207.359] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000R.bin", dwFileAttributes=0x80) returned 1 [0207.360] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000R.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000r.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0207.360] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=8184) returned 1 [0207.360] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=8184) returned 1 [0207.360] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x1ed6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.360] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0207.361] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.362] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a340) returned 1 [0207.362] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0207.362] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.362] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x1ff8, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x1ff8, lpOverlapped=0x0) returned 1 [0207.363] CryptEncrypt (in: hKey=0x665ab9a340, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0207.363] CryptEncrypt (in: hKey=0x665ab9a340, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x1ff8, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x2000) returned 1 [0207.363] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.363] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x2000, lpOverlapped=0x0) returned 1 [0207.363] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0207.363] CryptExportKey (in: hKey=0x665ab9a340, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0207.363] CryptExportKey (in: hKey=0x665ab9a340, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0207.363] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0207.363] CloseHandle (hObject=0x654) returned 1 [0207.380] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0207.385] CryptDestroyKey (hKey=0x665ab9a340) returned 1 [0207.385] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0207.385] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0207.385] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0207.385] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000S.bin", dwFileAttributes=0x80) returned 1 [0207.386] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000S.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000s.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0207.386] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=4181) returned 1 [0207.386] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=4181) returned 1 [0207.386] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0xf33, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.386] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0207.387] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.387] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a5e0) returned 1 [0207.388] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0207.388] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.388] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x1055, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x1055, lpOverlapped=0x0) returned 1 [0207.389] CryptEncrypt (in: hKey=0x665ab9a5e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0207.389] CryptEncrypt (in: hKey=0x665ab9a5e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x1055, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x1060) returned 1 [0207.389] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.389] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x1060, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x1060, lpOverlapped=0x0) returned 1 [0207.389] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0207.389] CryptExportKey (in: hKey=0x665ab9a5e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0207.389] CryptExportKey (in: hKey=0x665ab9a5e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0207.389] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0207.389] CloseHandle (hObject=0x654) returned 1 [0207.406] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0207.410] CryptDestroyKey (hKey=0x665ab9a5e0) returned 1 [0207.410] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0207.410] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0207.410] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0207.410] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000T.bin", dwFileAttributes=0x80) returned 1 [0207.411] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000T.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000t.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0207.411] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=4190) returned 1 [0207.411] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=4190) returned 1 [0207.411] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0xf3c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.411] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0207.412] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.412] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9aea0) returned 1 [0207.412] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0207.413] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.413] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x105e, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x105e, lpOverlapped=0x0) returned 1 [0207.413] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0207.413] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x105e, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x1060) returned 1 [0207.413] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.413] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x1060, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x1060, lpOverlapped=0x0) returned 1 [0207.414] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0207.414] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0207.414] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0207.414] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0207.414] CloseHandle (hObject=0x654) returned 1 [0207.430] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0207.435] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0207.435] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0207.436] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0207.436] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0207.436] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000U.bin", dwFileAttributes=0x80) returned 1 [0207.437] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000U.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000u.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0207.437] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=13737) returned 1 [0207.437] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=13737) returned 1 [0207.437] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x3487, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.437] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0207.439] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.439] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a5e0) returned 1 [0207.439] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0207.439] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.439] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x35a9, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x35a9, lpOverlapped=0x0) returned 1 [0207.440] CryptEncrypt (in: hKey=0x665ab9a5e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0207.440] CryptEncrypt (in: hKey=0x665ab9a5e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x35a9, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x35b0) returned 1 [0207.440] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.440] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x35b0, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x35b0, lpOverlapped=0x0) returned 1 [0207.440] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0207.440] CryptExportKey (in: hKey=0x665ab9a5e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0207.440] CryptExportKey (in: hKey=0x665ab9a5e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0207.440] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0207.441] CloseHandle (hObject=0x654) returned 1 [0207.457] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0207.461] CryptDestroyKey (hKey=0x665ab9a5e0) returned 1 [0207.461] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0207.461] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0207.461] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0207.461] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000V.bin", dwFileAttributes=0x80) returned 1 [0207.462] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000V.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000v.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0207.462] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=4081) returned 1 [0207.462] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=4081) returned 1 [0207.462] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0xecf, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.462] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0207.464] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.464] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a0a0) returned 1 [0207.464] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0207.464] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.464] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0xff1, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0xff1, lpOverlapped=0x0) returned 1 [0207.464] CryptEncrypt (in: hKey=0x665ab9a0a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0207.464] CryptEncrypt (in: hKey=0x665ab9a0a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0xff1, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x1000) returned 1 [0207.464] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.464] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x1000, lpOverlapped=0x0) returned 1 [0207.464] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0207.465] CryptExportKey (in: hKey=0x665ab9a0a0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0207.465] CryptExportKey (in: hKey=0x665ab9a0a0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0207.465] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0207.465] CloseHandle (hObject=0x654) returned 1 [0207.481] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0207.485] CryptDestroyKey (hKey=0x665ab9a0a0) returned 1 [0207.485] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0207.486] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0207.486] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0207.486] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000010.bin", dwFileAttributes=0x80) returned 1 [0207.486] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000010.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000010.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0207.487] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=1924) returned 1 [0207.487] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=1924) returned 1 [0207.487] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x662, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.487] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0207.488] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.488] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a0a0) returned 1 [0207.488] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0207.489] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.489] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x784, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x784, lpOverlapped=0x0) returned 1 [0207.489] CryptEncrypt (in: hKey=0x665ab9a0a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0207.489] CryptEncrypt (in: hKey=0x665ab9a0a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x784, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x790) returned 1 [0207.489] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.489] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x790, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x790, lpOverlapped=0x0) returned 1 [0207.489] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0207.489] CryptExportKey (in: hKey=0x665ab9a0a0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0207.489] CryptExportKey (in: hKey=0x665ab9a0a0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0207.489] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0207.489] CloseHandle (hObject=0x654) returned 1 [0207.509] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0207.514] CryptDestroyKey (hKey=0x665ab9a0a0) returned 1 [0207.514] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0207.515] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0207.515] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0207.515] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000011.bin", dwFileAttributes=0x80) returned 1 [0207.516] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000011.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000011.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0207.517] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=2599) returned 1 [0207.517] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=2599) returned 1 [0207.517] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x905, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.517] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0207.518] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.518] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a110) returned 1 [0207.519] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0207.519] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.519] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0xa27, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0xa27, lpOverlapped=0x0) returned 1 [0207.519] CryptEncrypt (in: hKey=0x665ab9a110, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0207.519] CryptEncrypt (in: hKey=0x665ab9a110, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0xa27, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0xa30) returned 1 [0207.519] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.519] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0xa30, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0xa30, lpOverlapped=0x0) returned 1 [0207.520] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0207.520] CryptExportKey (in: hKey=0x665ab9a110, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0207.520] CryptExportKey (in: hKey=0x665ab9a110, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0207.520] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0207.520] CloseHandle (hObject=0x654) returned 1 [0207.543] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0207.548] CryptDestroyKey (hKey=0x665ab9a110) returned 1 [0207.548] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0207.549] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0207.549] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0207.549] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000012.bin", dwFileAttributes=0x80) returned 1 [0207.550] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000012.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000012.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0207.550] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=11449) returned 1 [0207.550] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=11449) returned 1 [0207.550] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x2b97, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.550] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0207.552] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.552] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9aea0) returned 1 [0207.552] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0207.553] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.553] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x2cb9, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x2cb9, lpOverlapped=0x0) returned 1 [0207.554] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0207.554] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x2cb9, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x2cc0) returned 1 [0207.554] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.554] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2cc0, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x2cc0, lpOverlapped=0x0) returned 1 [0207.554] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0207.554] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0207.555] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0207.555] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0207.555] CloseHandle (hObject=0x654) returned 1 [0207.579] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0207.584] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0207.584] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0207.584] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0207.584] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0207.585] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000013.bin", dwFileAttributes=0x80) returned 1 [0207.586] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000013.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000013.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0207.586] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=14553) returned 1 [0207.586] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=14553) returned 1 [0207.587] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x37b7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.587] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0207.588] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.588] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9aea0) returned 1 [0207.588] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0207.589] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.589] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x38d9, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x38d9, lpOverlapped=0x0) returned 1 [0207.590] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0207.590] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x38d9, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x38e0) returned 1 [0207.590] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.590] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x38e0, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x38e0, lpOverlapped=0x0) returned 1 [0207.590] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0207.590] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0207.590] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0207.590] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0207.590] CloseHandle (hObject=0x654) returned 1 [0207.613] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0207.617] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0207.617] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0207.618] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0207.618] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0207.618] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000014.bin", dwFileAttributes=0x80) returned 1 [0207.618] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000014.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000014.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0207.619] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=11332) returned 1 [0207.619] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=11332) returned 1 [0207.619] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x2b22, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.619] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0207.620] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.620] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9ab20) returned 1 [0207.620] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0207.621] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.621] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x2c44, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x2c44, lpOverlapped=0x0) returned 1 [0207.621] CryptEncrypt (in: hKey=0x665ab9ab20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0207.621] CryptEncrypt (in: hKey=0x665ab9ab20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x2c44, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x2c50) returned 1 [0207.622] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.622] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2c50, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x2c50, lpOverlapped=0x0) returned 1 [0207.622] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0207.622] CryptExportKey (in: hKey=0x665ab9ab20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0207.622] CryptExportKey (in: hKey=0x665ab9ab20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0207.622] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0207.622] CloseHandle (hObject=0x654) returned 1 [0207.645] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0207.650] CryptDestroyKey (hKey=0x665ab9ab20) returned 1 [0207.651] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0207.651] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0207.651] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0207.651] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000015.bin", dwFileAttributes=0x80) returned 1 [0207.653] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000015.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000015.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0207.653] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=13241) returned 1 [0207.654] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=13241) returned 1 [0207.654] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x3297, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.654] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0207.656] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.656] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a500) returned 1 [0207.656] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0207.656] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.656] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x33b9, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x33b9, lpOverlapped=0x0) returned 1 [0207.657] CryptEncrypt (in: hKey=0x665ab9a500, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0207.657] CryptEncrypt (in: hKey=0x665ab9a500, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x33b9, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x33c0) returned 1 [0207.657] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.657] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x33c0, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x33c0, lpOverlapped=0x0) returned 1 [0207.658] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0207.658] CryptExportKey (in: hKey=0x665ab9a500, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0207.658] CryptExportKey (in: hKey=0x665ab9a500, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0207.658] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0207.658] CloseHandle (hObject=0x654) returned 1 [0207.680] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0207.685] CryptDestroyKey (hKey=0x665ab9a500) returned 1 [0207.685] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0207.685] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0207.685] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0207.686] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000016.bin", dwFileAttributes=0x80) returned 1 [0207.687] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000016.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000016.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0207.687] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=1570) returned 1 [0207.687] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=1570) returned 1 [0207.687] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x500, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.687] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0207.689] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.689] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a3b0) returned 1 [0207.689] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0207.690] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.690] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x622, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x622, lpOverlapped=0x0) returned 1 [0207.690] CryptEncrypt (in: hKey=0x665ab9a3b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0207.690] CryptEncrypt (in: hKey=0x665ab9a3b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x622, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x630) returned 1 [0207.690] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.690] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x630, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x630, lpOverlapped=0x0) returned 1 [0207.690] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0207.691] CryptExportKey (in: hKey=0x665ab9a3b0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0207.691] CryptExportKey (in: hKey=0x665ab9a3b0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0207.691] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0207.691] CloseHandle (hObject=0x654) returned 1 [0207.713] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0207.718] CryptDestroyKey (hKey=0x665ab9a3b0) returned 1 [0207.719] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0207.719] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0207.719] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0207.720] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000017.bin", dwFileAttributes=0x80) returned 1 [0207.721] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000017.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000017.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0207.722] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=11886) returned 1 [0207.722] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=11886) returned 1 [0207.722] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x2d4c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.722] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0207.724] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.724] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a730) returned 1 [0207.724] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0207.725] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.725] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x2e6e, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x2e6e, lpOverlapped=0x0) returned 1 [0207.726] CryptEncrypt (in: hKey=0x665ab9a730, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0207.726] CryptEncrypt (in: hKey=0x665ab9a730, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x2e6e, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x2e70) returned 1 [0207.726] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.726] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2e70, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x2e70, lpOverlapped=0x0) returned 1 [0207.726] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0207.727] CryptExportKey (in: hKey=0x665ab9a730, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0207.727] CryptExportKey (in: hKey=0x665ab9a730, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0207.727] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0207.727] CloseHandle (hObject=0x654) returned 1 [0207.752] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0207.757] CryptDestroyKey (hKey=0x665ab9a730) returned 1 [0207.757] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0207.758] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0207.758] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0207.758] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000018.bin", dwFileAttributes=0x80) returned 1 [0207.759] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000018.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000018.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0207.759] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=2270) returned 1 [0207.759] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=2270) returned 1 [0207.759] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x7bc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.759] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0207.762] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.762] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9aea0) returned 1 [0207.762] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0207.763] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.763] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x8de, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x8de, lpOverlapped=0x0) returned 1 [0207.764] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0207.764] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x8de, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x8e0) returned 1 [0207.764] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.764] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x8e0, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x8e0, lpOverlapped=0x0) returned 1 [0207.764] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0207.764] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0207.764] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0207.764] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0207.765] CloseHandle (hObject=0x654) returned 1 [0207.788] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0207.794] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0207.794] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0207.795] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0207.795] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0207.795] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003K.bin", dwFileAttributes=0x80) returned 1 [0207.799] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003K.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000003k.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0207.800] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=12288) returned 1 [0207.800] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=12288) returned 1 [0207.800] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x2ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.800] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0207.811] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.811] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a110) returned 1 [0207.811] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0207.811] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.811] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x3000, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x3000, lpOverlapped=0x0) returned 1 [0207.813] CryptEncrypt (in: hKey=0x665ab9a110, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0207.813] CryptEncrypt (in: hKey=0x665ab9a110, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x3000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x3010) returned 1 [0207.813] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.813] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x3010, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x3010, lpOverlapped=0x0) returned 1 [0207.813] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0207.814] CryptExportKey (in: hKey=0x665ab9a110, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0207.814] CryptExportKey (in: hKey=0x665ab9a110, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0207.814] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0207.814] CloseHandle (hObject=0x654) returned 1 [0207.837] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0207.843] CryptDestroyKey (hKey=0x665ab9a110) returned 1 [0207.843] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0207.843] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0207.843] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0207.843] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003L.bin", dwFileAttributes=0x80) returned 1 [0207.844] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003L.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000003l.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0207.845] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=8192) returned 1 [0207.845] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=8192) returned 1 [0207.845] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x1ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.845] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0207.847] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.847] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9aea0) returned 1 [0207.847] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0207.848] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.848] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x2000, lpOverlapped=0x0) returned 1 [0207.849] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0207.849] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x2000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x2010) returned 1 [0207.849] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.849] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x2010, lpOverlapped=0x0) returned 1 [0207.850] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0207.850] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0207.850] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0207.850] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0207.850] CloseHandle (hObject=0x654) returned 1 [0207.872] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0207.880] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0207.880] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0207.880] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0207.880] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0207.881] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003M.bin", dwFileAttributes=0x80) returned 1 [0207.881] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003M.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000003m.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0207.882] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=4096) returned 1 [0207.882] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=4096) returned 1 [0207.882] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0xede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.882] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0207.884] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.884] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a880) returned 1 [0207.884] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0207.884] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.884] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x1000, lpOverlapped=0x0) returned 1 [0207.885] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0207.885] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x1000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x1010) returned 1 [0207.885] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.885] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x1010, lpOverlapped=0x0) returned 1 [0207.885] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0207.885] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0207.885] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0207.885] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0207.886] CloseHandle (hObject=0x654) returned 1 [0207.916] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0207.922] CryptDestroyKey (hKey=0x665ab9a880) returned 1 [0207.922] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0207.922] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0207.922] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0207.922] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003N.bin", dwFileAttributes=0x80) returned 1 [0207.923] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003N.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000003n.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0207.924] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=32768) returned 1 [0207.924] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=32768) returned 1 [0207.924] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x7ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.924] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0207.925] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.926] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a490) returned 1 [0207.926] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0207.926] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.926] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x8000, lpOverlapped=0x0) returned 1 [0207.928] CryptEncrypt (in: hKey=0x665ab9a490, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0207.928] CryptEncrypt (in: hKey=0x665ab9a490, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x8000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x8010) returned 1 [0207.928] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.928] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x8010, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x8010, lpOverlapped=0x0) returned 1 [0207.929] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0207.929] CryptExportKey (in: hKey=0x665ab9a490, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0207.929] CryptExportKey (in: hKey=0x665ab9a490, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0207.929] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0207.929] CloseHandle (hObject=0x654) returned 1 [0207.950] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0207.956] CryptDestroyKey (hKey=0x665ab9a490) returned 1 [0207.956] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0207.956] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0207.956] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0207.957] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000048.bin", dwFileAttributes=0x80) returned 1 [0207.958] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000048.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000048.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0207.958] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=49152) returned 1 [0207.958] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=49152) returned 1 [0207.958] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0xbede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.958] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0207.960] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.960] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9af10) returned 1 [0207.960] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0207.960] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.960] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0xc000, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0xc000, lpOverlapped=0x0) returned 1 [0207.962] CryptEncrypt (in: hKey=0x665ab9af10, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0207.962] CryptEncrypt (in: hKey=0x665ab9af10, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0xc000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0xc010) returned 1 [0207.963] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.963] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0xc010, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0xc010, lpOverlapped=0x0) returned 1 [0207.963] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0207.964] CryptExportKey (in: hKey=0x665ab9af10, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0207.964] CryptExportKey (in: hKey=0x665ab9af10, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0207.964] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0207.964] CloseHandle (hObject=0x654) returned 1 [0207.985] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0207.990] CryptDestroyKey (hKey=0x665ab9af10) returned 1 [0207.990] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0207.990] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0207.991] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0207.991] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000004U.bin", dwFileAttributes=0x80) returned 1 [0207.992] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000004U.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000004u.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0207.992] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=4096) returned 1 [0207.992] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=4096) returned 1 [0207.992] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0xede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.992] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0207.994] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.994] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a880) returned 1 [0207.994] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0207.994] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.994] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x1000, lpOverlapped=0x0) returned 1 [0207.995] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0207.995] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x1000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x1010) returned 1 [0207.995] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0207.995] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x1010, lpOverlapped=0x0) returned 1 [0207.995] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0207.995] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0207.995] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0207.995] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0207.995] CloseHandle (hObject=0x654) returned 1 [0208.017] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0208.022] CryptDestroyKey (hKey=0x665ab9a880) returned 1 [0208.022] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0208.023] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0208.023] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0208.023] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\header", dwFileAttributes=0x80) returned 1 [0208.025] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\header" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\header"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0208.025] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=72) returned 1 [0208.025] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=72) returned 1 [0208.025] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9aab0) returned 1 [0208.025] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0208.026] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0208.026] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x48, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x48, lpOverlapped=0x0) returned 1 [0208.027] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0208.027] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x48, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x50) returned 1 [0208.028] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0208.028] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x50, lpOverlapped=0x0) returned 1 [0208.028] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0208.028] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0208.028] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0208.028] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0208.028] CloseHandle (hObject=0x654) returned 1 [0208.050] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0208.055] CryptDestroyKey (hKey=0x665ab9aab0) returned 1 [0208.055] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0208.055] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0208.055] SetLastError (dwErrCode=0x0) [0208.056] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0208.057] GetLastError () returned 0x0 [0208.057] WriteFile (in: hFile=0x654, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7ad80*=0x324, lpOverlapped=0x0) returned 1 [0208.058] CloseHandle (hObject=0x654) returned 1 [0208.058] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\tmp\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665d90c320 [0208.061] FindNextFileW (in: hFindFile=0x665d90c320, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0208.061] FindNextFileW (in: hFindFile=0x665d90c320, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0208.061] FindClose (in: hFindFile=0x665d90c320 | out: hFindFile=0x665d90c320) returned 1 [0208.061] SetLastError (dwErrCode=0x0) [0208.061] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\tmp\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\tmp\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0208.062] GetLastError () returned 0x0 [0208.062] WriteFile (in: hFile=0x654, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7ad80*=0x324, lpOverlapped=0x0) returned 1 [0208.063] CloseHandle (hObject=0x654) returned 1 [0208.063] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0208.063] FindClose (in: hFindFile=0x665d90d100 | out: hFindFile=0x665d90d100) returned 1 [0208.063] SetLastError (dwErrCode=0x0) [0208.063] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0208.063] GetLastError () returned 0xb7 [0208.064] CloseHandle (hObject=0x3e8) returned 1 [0208.064] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0208.064] FindClose (in: hFindFile=0x665d90d0a0 | out: hFindFile=0x665d90d0a0) returned 1 [0208.064] SetLastError (dwErrCode=0x0) [0208.064] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0208.064] GetLastError () returned 0xb7 [0208.064] CloseHandle (hObject=0x620) returned 1 [0208.064] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0208.064] FindClose (in: hFindFile=0x665d90d040 | out: hFindFile=0x665d90d040) returned 1 [0208.064] SetLastError (dwErrCode=0x0) [0208.064] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0208.064] GetLastError () returned 0xb7 [0208.064] CloseHandle (hObject=0x60c) returned 1 [0208.065] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0208.065] SetLastError (dwErrCode=0x0) [0208.065] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0208.065] GetLastError () returned 0xb7 [0208.065] CloseHandle (hObject=0x60c) returned 1 [0208.065] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Outlook\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90bcc0 [0208.065] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0208.065] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0208.065] SetLastError (dwErrCode=0x0) [0208.065] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Outlook\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\outlook\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0208.066] GetLastError () returned 0x0 [0208.066] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0208.067] CloseHandle (hObject=0x620) returned 1 [0208.067] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Outlook\\Gliding\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90cd40 [0208.067] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0208.067] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0208.067] FindClose (in: hFindFile=0x665d90cd40 | out: hFindFile=0x665d90cd40) returned 1 [0208.068] SetLastError (dwErrCode=0x0) [0208.068] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Outlook\\Gliding\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\outlook\\gliding\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0208.068] GetLastError () returned 0x0 [0208.068] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0208.069] CloseHandle (hObject=0x620) returned 1 [0208.069] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0208.069] FindClose (in: hFindFile=0x665d90bcc0 | out: hFindFile=0x665d90bcc0) returned 1 [0208.069] SetLastError (dwErrCode=0x0) [0208.069] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Outlook\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\outlook\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0208.070] GetLastError () returned 0xb7 [0208.070] CloseHandle (hObject=0x60c) returned 1 [0208.070] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0208.070] SetLastError (dwErrCode=0x0) [0208.070] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0208.070] GetLastError () returned 0xb7 [0208.070] CloseHandle (hObject=0x60c) returned 1 [0208.070] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\PlayReady\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c980 [0208.072] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0208.072] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0208.072] SetLastError (dwErrCode=0x0) [0208.072] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\PlayReady\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\playready\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0208.079] GetLastError () returned 0x0 [0208.079] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0208.080] CloseHandle (hObject=0x620) returned 1 [0208.080] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\PlayReady\\Internet Explorer\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90cc20 [0208.080] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0208.080] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0208.080] SetLastError (dwErrCode=0x0) [0208.080] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\PlayReady\\Internet Explorer\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\playready\\internet explorer\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0208.081] GetLastError () returned 0x0 [0208.081] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0208.082] CloseHandle (hObject=0x3e8) returned 1 [0208.082] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\PlayReady\\Internet Explorer\\Desktop\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bd20 [0208.082] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0208.082] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0208.083] FindClose (in: hFindFile=0x665d90bd20 | out: hFindFile=0x665d90bd20) returned 1 [0208.083] SetLastError (dwErrCode=0x0) [0208.083] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\PlayReady\\Internet Explorer\\Desktop\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\playready\\internet explorer\\desktop\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0208.084] GetLastError () returned 0x0 [0208.084] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0208.085] CloseHandle (hObject=0x3e8) returned 1 [0208.085] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0208.085] FindClose (in: hFindFile=0x665d90cc20 | out: hFindFile=0x665d90cc20) returned 1 [0208.085] SetLastError (dwErrCode=0x0) [0208.085] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\PlayReady\\Internet Explorer\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\playready\\internet explorer\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0208.086] GetLastError () returned 0xb7 [0208.086] CloseHandle (hObject=0x620) returned 1 [0208.086] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0208.086] FindClose (in: hFindFile=0x665d90c980 | out: hFindFile=0x665d90c980) returned 1 [0208.086] SetLastError (dwErrCode=0x0) [0208.086] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\PlayReady\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\playready\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0208.086] GetLastError () returned 0xb7 [0208.086] CloseHandle (hObject=0x60c) returned 1 [0208.086] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0208.086] SetLastError (dwErrCode=0x0) [0208.086] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0208.087] GetLastError () returned 0xb7 [0208.087] CloseHandle (hObject=0x60c) returned 1 [0208.087] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Publisher\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c0e0 [0208.087] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0208.087] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0208.087] FindClose (in: hFindFile=0x665d90c0e0 | out: hFindFile=0x665d90c0e0) returned 1 [0208.087] SetLastError (dwErrCode=0x0) [0208.087] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Publisher\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\publisher\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0208.088] GetLastError () returned 0x0 [0208.088] WriteFile (in: hFile=0x60c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7c490*=0x324, lpOverlapped=0x0) returned 1 [0208.088] CloseHandle (hObject=0x60c) returned 1 [0208.089] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0208.089] SetLastError (dwErrCode=0x0) [0208.089] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0208.089] GetLastError () returned 0xb7 [0208.089] CloseHandle (hObject=0x60c) returned 1 [0208.089] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TaskSchedulerConfig\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c1a0 [0208.090] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0208.090] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0208.090] FindClose (in: hFindFile=0x665d90c1a0 | out: hFindFile=0x665d90c1a0) returned 1 [0208.090] SetLastError (dwErrCode=0x0) [0208.090] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TaskSchedulerConfig\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\taskschedulerconfig\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0208.091] GetLastError () returned 0x0 [0208.091] WriteFile (in: hFile=0x60c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7c490*=0x324, lpOverlapped=0x0) returned 1 [0208.092] CloseHandle (hObject=0x60c) returned 1 [0208.092] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0208.092] SetLastError (dwErrCode=0x0) [0208.092] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0208.092] GetLastError () returned 0xb7 [0208.092] CloseHandle (hObject=0x60c) returned 1 [0208.092] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TokenBroker\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c0e0 [0208.093] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0208.093] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0208.093] SetLastError (dwErrCode=0x0) [0208.093] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TokenBroker\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\tokenbroker\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0208.093] GetLastError () returned 0x0 [0208.093] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0208.094] CloseHandle (hObject=0x620) returned 1 [0208.094] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TokenBroker\\Cache\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c260 [0208.094] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0208.094] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0208.094] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0208.095] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TokenBroker\\Cache\\8d68c2e8263ce2da4efc5fc5f9a0c85c16c38ae4.tbres", dwFileAttributes=0x80) returned 1 [0208.095] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TokenBroker\\Cache\\8d68c2e8263ce2da4efc5fc5f9a0c85c16c38ae4.tbres" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\tokenbroker\\cache\\8d68c2e8263ce2da4efc5fc5f9a0c85c16c38ae4.tbres"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0208.095] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=1956) returned 1 [0208.095] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=1956) returned 1 [0208.095] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x682, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.095] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0208.097] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0208.097] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9a880) returned 1 [0208.097] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0208.097] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0208.097] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x7a4, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0x7a4, lpOverlapped=0x0) returned 1 [0208.097] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0208.097] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x7a4, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x7b0) returned 1 [0208.097] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0208.097] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x7b0, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0x7b0, lpOverlapped=0x0) returned 1 [0208.098] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0208.098] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0208.098] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0208.098] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0208.098] CloseHandle (hObject=0x3e8) returned 1 [0208.113] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0208.117] CryptDestroyKey (hKey=0x665ab9a880) returned 1 [0208.117] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0208.118] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0208.118] FindClose (in: hFindFile=0x665d90c260 | out: hFindFile=0x665d90c260) returned 1 [0208.118] SetLastError (dwErrCode=0x0) [0208.118] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TokenBroker\\Cache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\tokenbroker\\cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0208.119] GetLastError () returned 0x0 [0208.119] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0208.119] CloseHandle (hObject=0x620) returned 1 [0208.119] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0208.119] FindClose (in: hFindFile=0x665d90c0e0 | out: hFindFile=0x665d90c0e0) returned 1 [0208.120] SetLastError (dwErrCode=0x0) [0208.120] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TokenBroker\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\tokenbroker\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0208.120] GetLastError () returned 0xb7 [0208.120] CloseHandle (hObject=0x60c) returned 1 [0208.120] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0208.120] SetLastError (dwErrCode=0x0) [0208.120] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0208.121] GetLastError () returned 0xb7 [0208.121] CloseHandle (hObject=0x60c) returned 1 [0208.121] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90bc60 [0208.122] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0208.122] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0208.122] SetLastError (dwErrCode=0x0) [0208.123] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\vault\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0208.125] GetLastError () returned 0x0 [0208.125] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0208.125] CloseHandle (hObject=0x620) returned 1 [0208.126] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\4BF4C442-9B8A-41A0-B380-DD4A704DDB28\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c920 [0208.126] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0208.126] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0208.126] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0208.126] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\4BF4C442-9B8A-41A0-B380-DD4A704DDB28\\Policy.vpol", dwFileAttributes=0x80) returned 1 [0208.127] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\4BF4C442-9B8A-41A0-B380-DD4A704DDB28\\Policy.vpol" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\vault\\4bf4c442-9b8a-41a0-b380-dd4a704ddb28\\policy.vpol"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0208.127] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=436) returned 1 [0208.127] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=436) returned 1 [0208.127] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x92, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.127] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0208.128] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0208.128] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9aea0) returned 1 [0208.128] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0208.128] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0208.128] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x1b4, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0x1b4, lpOverlapped=0x0) returned 1 [0208.128] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0208.129] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x1b4, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x1c0) returned 1 [0208.129] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0208.129] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x1c0, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0x1c0, lpOverlapped=0x0) returned 1 [0208.129] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0208.129] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0208.129] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0208.129] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0208.140] CloseHandle (hObject=0x3e8) returned 1 [0208.155] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0208.159] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0208.160] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0208.160] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0208.160] FindClose (in: hFindFile=0x665d90c920 | out: hFindFile=0x665d90c920) returned 1 [0208.160] SetLastError (dwErrCode=0x0) [0208.160] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\4BF4C442-9B8A-41A0-B380-DD4A704DDB28\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\vault\\4bf4c442-9b8a-41a0-b380-dd4a704ddb28\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0208.162] GetLastError () returned 0x0 [0208.162] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0208.163] CloseHandle (hObject=0x620) returned 1 [0208.163] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0208.163] SetLastError (dwErrCode=0x0) [0208.163] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\vault\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0208.163] GetLastError () returned 0xb7 [0208.163] CloseHandle (hObject=0x620) returned 1 [0208.163] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\UserProfileRoaming\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90cc20 [0208.164] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0208.164] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0208.164] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0208.164] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\UserProfileRoaming\\Latest.dat", dwFileAttributes=0x80) returned 1 [0208.165] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\UserProfileRoaming\\Latest.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\vault\\userprofileroaming\\latest.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0208.165] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=1) returned 1 [0208.165] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=1) returned 1 [0208.165] CloseHandle (hObject=0x3e8) returned 1 [0208.165] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0208.165] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0208.165] FindClose (in: hFindFile=0x665d90cc20 | out: hFindFile=0x665d90cc20) returned 1 [0208.166] SetLastError (dwErrCode=0x0) [0208.166] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\UserProfileRoaming\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\vault\\userprofileroaming\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0208.167] GetLastError () returned 0x0 [0208.167] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0208.167] CloseHandle (hObject=0x620) returned 1 [0208.168] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0208.168] FindClose (in: hFindFile=0x665d90bc60 | out: hFindFile=0x665d90bc60) returned 1 [0208.168] SetLastError (dwErrCode=0x0) [0208.168] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\vault\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0208.168] GetLastError () returned 0xb7 [0208.168] CloseHandle (hObject=0x60c) returned 1 [0208.168] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0208.168] SetLastError (dwErrCode=0x0) [0208.168] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0208.168] GetLastError () returned 0xb7 [0208.168] CloseHandle (hObject=0x60c) returned 1 [0208.169] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Visio\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90d280 [0208.170] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0208.170] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0208.170] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0208.170] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Visio\\content16.dat", dwFileAttributes=0x80) returned 1 [0208.171] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Visio\\content16.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\visio\\content16.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0208.171] GetFileSizeEx (in: hFile=0x620, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=275840) returned 1 [0208.171] GetFileSizeEx (in: hFile=0x620, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=275840) returned 1 [0208.171] SetFilePointerEx (in: hFile=0x620, liDistanceToMove=0x4345e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.171] ReadFile (in: hFile=0x620, lpBuffer=0x665da7bb38, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7baf8, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb38*, lpNumberOfBytesRead=0x665da7baf8*=0x19, lpOverlapped=0x0) returned 1 [0208.172] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0208.172] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7bac0 | out: phKey=0x665da7bac0*=0x665ab9aea0) returned 1 [0208.172] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0208.173] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0208.173] ReadFile (in: hFile=0x620, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x43580, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7bad0*=0x43580, lpOverlapped=0x0) returned 1 [0208.237] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4250) returned 1 [0208.237] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7bac8*=0x43580, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7bac8*=0x43590) returned 1 [0208.237] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0208.237] WriteFile (in: hFile=0x620, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x43590, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7bad0*=0x43590, lpOverlapped=0x0) returned 1 [0208.238] WriteFile (in: hFile=0x620, lpBuffer=0x665da7bb10*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb10*, lpNumberOfBytesWritten=0x665da7bad4*=0x6, lpOverlapped=0x0) returned 1 [0208.238] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7bae0 | out: pbData=0x0*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0208.238] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7bb60, pdwDataLen=0x665da7bae0 | out: pbData=0x665da7bb60*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0208.238] WriteFile (in: hFile=0x620, lpBuffer=0x665da7bb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb60*, lpNumberOfBytesWritten=0x665da7bad4*=0x10c, lpOverlapped=0x0) returned 1 [0208.239] CloseHandle (hObject=0x620) returned 1 [0208.251] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0208.257] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0208.257] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0208.257] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0208.257] FindClose (in: hFindFile=0x665d90d280 | out: hFindFile=0x665d90d280) returned 1 [0208.257] SetLastError (dwErrCode=0x0) [0208.257] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Visio\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\visio\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0208.258] GetLastError () returned 0x0 [0208.258] WriteFile (in: hFile=0x60c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7c490*=0x324, lpOverlapped=0x0) returned 1 [0208.259] CloseHandle (hObject=0x60c) returned 1 [0208.259] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0208.259] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0208.259] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0208.259] FindNextFileW (in: hFindFile=0x665abb56a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0208.259] FindClose (in: hFindFile=0x665abb56a0 | out: hFindFile=0x665abb56a0) returned 1 [0208.259] SetLastError (dwErrCode=0x0) [0208.259] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0208.260] GetLastError () returned 0xb7 [0208.260] CloseHandle (hObject=0x570) returned 1 [0208.260] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0208.260] SetLastError (dwErrCode=0x0) [0208.260] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0208.260] GetLastError () returned 0xb7 [0208.260] CloseHandle (hObject=0x570) returned 1 [0208.260] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90bc60 [0208.260] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0208.261] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0208.261] SetLastError (dwErrCode=0x0) [0208.261] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0208.261] GetLastError () returned 0x0 [0208.261] WriteFile (in: hFile=0x60c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7c490*=0x324, lpOverlapped=0x0) returned 1 [0208.262] CloseHandle (hObject=0x60c) returned 1 [0208.262] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90ca40 [0208.263] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0208.264] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0208.264] SetLastError (dwErrCode=0x0) [0208.264] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0208.268] GetLastError () returned 0x0 [0208.268] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0208.269] CloseHandle (hObject=0x620) returned 1 [0208.269] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c020 [0208.270] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0208.270] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0208.270] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0208.270] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata\\container.dat", dwFileAttributes=0x80) returned 1 [0208.271] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_bingpagedata\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0208.272] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=0) returned 1 [0208.272] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=0) returned 1 [0208.272] CloseHandle (hObject=0x3e8) returned 1 [0208.272] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0208.272] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0208.272] FindClose (in: hFindFile=0x665d90c020 | out: hFindFile=0x665d90c020) returned 1 [0208.272] SetLastError (dwErrCode=0x0) [0208.272] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_bingpagedata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0208.273] GetLastError () returned 0x0 [0208.273] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0208.274] CloseHandle (hObject=0x620) returned 1 [0208.274] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0208.274] SetLastError (dwErrCode=0x0) [0208.274] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0208.274] GetLastError () returned 0xb7 [0208.274] CloseHandle (hObject=0x620) returned 1 [0208.274] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c0e0 [0208.275] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0208.275] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0208.275] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0208.275] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException\\container.dat", dwFileAttributes=0x80) returned 1 [0208.276] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_dntexception\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0208.276] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=0) returned 1 [0208.276] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=0) returned 1 [0208.276] CloseHandle (hObject=0x3e8) returned 1 [0208.276] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0208.277] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0208.277] FindClose (in: hFindFile=0x665d90c0e0 | out: hFindFile=0x665d90c0e0) returned 1 [0208.277] SetLastError (dwErrCode=0x0) [0208.277] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_dntexception\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0208.279] GetLastError () returned 0x0 [0208.279] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0208.280] CloseHandle (hObject=0x620) returned 1 [0208.280] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0208.280] SetLastError (dwErrCode=0x0) [0208.280] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0208.280] GetLastError () returned 0xb7 [0208.281] CloseHandle (hObject=0x620) returned 1 [0208.281] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bf60 [0208.281] FindNextFileW (in: hFindFile=0x665d90bf60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0208.281] FindNextFileW (in: hFindFile=0x665d90bf60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0208.281] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0208.281] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\container.dat", dwFileAttributes=0x80) returned 1 [0208.282] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompat\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0208.282] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=0) returned 1 [0208.282] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=0) returned 1 [0208.282] CloseHandle (hObject=0x3e8) returned 1 [0208.282] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0208.283] FindNextFileW (in: hFindFile=0x665d90bf60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0208.283] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0208.283] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\IECompatData.xml", dwFileAttributes=0x80) returned 1 [0208.284] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\IECompatData.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompat\\iecompatdata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0208.284] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=82095) returned 1 [0208.284] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=82095) returned 1 [0208.284] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x13f8d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.284] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0208.286] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0208.286] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9a0a0) returned 1 [0208.286] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0208.286] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0208.286] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x140af, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0x140af, lpOverlapped=0x0) returned 1 [0208.389] CryptEncrypt (in: hKey=0x665ab9a0a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0208.389] CryptEncrypt (in: hKey=0x665ab9a0a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x140af, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x140b0) returned 1 [0208.389] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0208.389] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x140b0, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0x140b0, lpOverlapped=0x0) returned 1 [0208.390] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0208.390] CryptExportKey (in: hKey=0x665ab9a0a0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0208.390] CryptExportKey (in: hKey=0x665ab9a0a0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0208.390] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0208.390] CloseHandle (hObject=0x3e8) returned 1 [0208.401] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0208.405] CryptDestroyKey (hKey=0x665ab9a0a0) returned 1 [0208.405] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0208.405] FindNextFileW (in: hFindFile=0x665d90bf60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0208.405] FindClose (in: hFindFile=0x665d90bf60 | out: hFindFile=0x665d90bf60) returned 1 [0208.406] SetLastError (dwErrCode=0x0) [0208.406] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompat\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0208.409] GetLastError () returned 0x0 [0208.409] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0208.410] CloseHandle (hObject=0x620) returned 1 [0208.410] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0208.410] SetLastError (dwErrCode=0x0) [0208.410] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0208.411] GetLastError () returned 0xb7 [0208.411] CloseHandle (hObject=0x620) returned 1 [0208.411] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c1a0 [0208.411] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0208.411] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0208.411] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0208.412] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua\\container.dat", dwFileAttributes=0x80) returned 1 [0208.412] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompatua\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0208.413] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=0) returned 1 [0208.413] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=0) returned 1 [0208.413] CloseHandle (hObject=0x3e8) returned 1 [0208.413] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0208.413] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0208.413] FindClose (in: hFindFile=0x665d90c1a0 | out: hFindFile=0x665d90c1a0) returned 1 [0208.413] SetLastError (dwErrCode=0x0) [0208.413] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompatua\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0208.414] GetLastError () returned 0x0 [0208.414] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0208.418] CloseHandle (hObject=0x620) returned 1 [0208.419] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0208.419] SetLastError (dwErrCode=0x0) [0208.419] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0208.420] GetLastError () returned 0xb7 [0208.420] CloseHandle (hObject=0x620) returned 1 [0208.420] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c1a0 [0208.420] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0208.420] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0208.420] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0208.421] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead\\container.dat", dwFileAttributes=0x80) returned 1 [0208.421] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_ieflipahead\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0208.422] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=0) returned 1 [0208.422] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=0) returned 1 [0208.422] CloseHandle (hObject=0x3e8) returned 1 [0208.422] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0208.422] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0208.422] FindClose (in: hFindFile=0x665d90c1a0 | out: hFindFile=0x665d90c1a0) returned 1 [0208.422] SetLastError (dwErrCode=0x0) [0208.422] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_ieflipahead\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0208.424] GetLastError () returned 0x0 [0208.424] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0208.425] CloseHandle (hObject=0x620) returned 1 [0208.425] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0208.425] FindClose (in: hFindFile=0x665d90ca40 | out: hFindFile=0x665d90ca40) returned 1 [0208.425] SetLastError (dwErrCode=0x0) [0208.426] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0208.426] GetLastError () returned 0xb7 [0208.426] CloseHandle (hObject=0x60c) returned 1 [0208.426] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0208.426] SetLastError (dwErrCode=0x0) [0208.426] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0208.426] GetLastError () returned 0xb7 [0208.426] CloseHandle (hObject=0x60c) returned 1 [0208.426] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\User\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c440 [0208.427] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0208.427] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0208.427] SetLastError (dwErrCode=0x0) [0208.427] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\User\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\user\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0208.428] GetLastError () returned 0x0 [0208.428] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0208.429] CloseHandle (hObject=0x620) returned 1 [0208.429] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\User\\Default\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90cf20 [0208.429] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0208.429] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0208.430] FindClose (in: hFindFile=0x665d90cf20 | out: hFindFile=0x665d90cf20) returned 1 [0208.430] SetLastError (dwErrCode=0x0) [0208.430] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\User\\Default\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\user\\default\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0208.431] GetLastError () returned 0x0 [0208.431] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0208.432] CloseHandle (hObject=0x620) returned 1 [0208.432] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0208.432] FindClose (in: hFindFile=0x665d90c440 | out: hFindFile=0x665d90c440) returned 1 [0208.432] SetLastError (dwErrCode=0x0) [0208.432] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\User\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\user\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0208.432] GetLastError () returned 0xb7 [0208.432] CloseHandle (hObject=0x60c) returned 1 [0208.433] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0208.433] FindClose (in: hFindFile=0x665d90bc60 | out: hFindFile=0x665d90bc60) returned 1 [0208.433] SetLastError (dwErrCode=0x0) [0208.433] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0208.433] GetLastError () returned 0xb7 [0208.433] CloseHandle (hObject=0x570) returned 1 [0208.433] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0208.433] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0208.433] SetLastError (dwErrCode=0x0) [0208.433] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0208.434] GetLastError () returned 0xb7 [0208.434] CloseHandle (hObject=0x570) returned 1 [0208.434] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90bcc0 [0208.434] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0208.435] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0208.435] SetLastError (dwErrCode=0x0) [0208.435] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0208.436] GetLastError () returned 0x0 [0208.436] WriteFile (in: hFile=0x60c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7c490*=0x324, lpOverlapped=0x0) returned 1 [0208.437] CloseHandle (hObject=0x60c) returned 1 [0208.437] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90bd20 [0208.485] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0208.485] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0208.485] SetLastError (dwErrCode=0x0) [0208.486] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0208.486] GetLastError () returned 0x0 [0208.486] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0208.487] CloseHandle (hObject=0x620) returned 1 [0208.488] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AC\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d0a0 [0208.491] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0208.491] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0208.491] SetLastError (dwErrCode=0x0) [0208.491] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0208.492] GetLastError () returned 0x0 [0208.492] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0208.494] CloseHandle (hObject=0x3e8) returned 1 [0208.494] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AC\\INetCache\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90d040 [0208.495] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0208.495] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0208.495] FindClose (in: hFindFile=0x665d90d040 | out: hFindFile=0x665d90d040) returned 1 [0208.495] SetLastError (dwErrCode=0x0) [0208.496] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AC\\INetCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\ac\\inetcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0208.496] GetLastError () returned 0x0 [0208.496] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0208.497] CloseHandle (hObject=0x3e8) returned 1 [0208.498] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0208.498] SetLastError (dwErrCode=0x0) [0208.498] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0208.498] GetLastError () returned 0xb7 [0208.498] CloseHandle (hObject=0x3e8) returned 1 [0208.498] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AC\\INetCookies\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90ca40 [0208.498] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0208.498] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0208.498] FindClose (in: hFindFile=0x665d90ca40 | out: hFindFile=0x665d90ca40) returned 1 [0208.499] SetLastError (dwErrCode=0x0) [0208.499] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AC\\INetCookies\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\ac\\inetcookies\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0208.500] GetLastError () returned 0x0 [0208.500] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0208.501] CloseHandle (hObject=0x3e8) returned 1 [0208.501] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0208.501] SetLastError (dwErrCode=0x0) [0208.501] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0208.501] GetLastError () returned 0xb7 [0208.501] CloseHandle (hObject=0x3e8) returned 1 [0208.502] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AC\\INetHistory\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bc60 [0208.502] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0208.502] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0208.502] FindClose (in: hFindFile=0x665d90bc60 | out: hFindFile=0x665d90bc60) returned 1 [0208.502] SetLastError (dwErrCode=0x0) [0208.502] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AC\\INetHistory\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\ac\\inethistory\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0208.503] GetLastError () returned 0x0 [0208.503] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0208.504] CloseHandle (hObject=0x3e8) returned 1 [0208.504] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0208.504] SetLastError (dwErrCode=0x0) [0208.504] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0208.504] GetLastError () returned 0xb7 [0208.504] CloseHandle (hObject=0x3e8) returned 1 [0208.504] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AC\\Temp\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c500 [0208.504] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0208.504] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0208.504] FindClose (in: hFindFile=0x665d90c500 | out: hFindFile=0x665d90c500) returned 1 [0208.504] SetLastError (dwErrCode=0x0) [0208.505] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AC\\Temp\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\ac\\temp\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0208.505] GetLastError () returned 0x0 [0208.505] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0208.506] CloseHandle (hObject=0x3e8) returned 1 [0208.506] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0208.506] FindClose (in: hFindFile=0x665d90d0a0 | out: hFindFile=0x665d90d0a0) returned 1 [0208.506] SetLastError (dwErrCode=0x0) [0208.506] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0208.507] GetLastError () returned 0xb7 [0208.507] CloseHandle (hObject=0x620) returned 1 [0208.507] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0208.507] SetLastError (dwErrCode=0x0) [0208.507] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0208.507] GetLastError () returned 0xb7 [0208.507] CloseHandle (hObject=0x620) returned 1 [0208.507] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AppData\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d0a0 [0208.508] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0208.508] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0208.508] FindClose (in: hFindFile=0x665d90d0a0 | out: hFindFile=0x665d90d0a0) returned 1 [0208.508] SetLastError (dwErrCode=0x0) [0208.508] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AppData\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\appdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0208.509] GetLastError () returned 0x0 [0208.509] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0208.510] CloseHandle (hObject=0x620) returned 1 [0208.510] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0208.511] SetLastError (dwErrCode=0x0) [0208.511] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0208.511] GetLastError () returned 0xb7 [0208.511] CloseHandle (hObject=0x620) returned 1 [0208.511] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\LocalCache\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c1a0 [0208.511] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0208.511] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0208.511] FindClose (in: hFindFile=0x665d90c1a0 | out: hFindFile=0x665d90c1a0) returned 1 [0208.511] SetLastError (dwErrCode=0x0) [0208.511] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\LocalCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\localcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0208.512] GetLastError () returned 0x0 [0208.512] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0208.513] CloseHandle (hObject=0x620) returned 1 [0208.514] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0208.514] SetLastError (dwErrCode=0x0) [0208.514] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0208.514] GetLastError () returned 0xb7 [0208.514] CloseHandle (hObject=0x620) returned 1 [0208.514] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\LocalState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90cb60 [0208.514] FindNextFileW (in: hFindFile=0x665d90cb60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0208.514] FindNextFileW (in: hFindFile=0x665d90cb60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0208.514] FindClose (in: hFindFile=0x665d90cb60 | out: hFindFile=0x665d90cb60) returned 1 [0208.515] SetLastError (dwErrCode=0x0) [0208.515] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\LocalState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\localstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0208.515] GetLastError () returned 0x0 [0208.515] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0208.516] CloseHandle (hObject=0x620) returned 1 [0208.516] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0208.516] SetLastError (dwErrCode=0x0) [0208.516] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0208.517] GetLastError () returned 0xb7 [0208.517] CloseHandle (hObject=0x620) returned 1 [0208.517] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bc60 [0208.518] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0208.518] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0208.518] SetLastError (dwErrCode=0x0) [0208.518] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\microsoft.3dbuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0208.521] GetLastError () returned 0x0 [0208.521] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0208.522] CloseHandle (hObject=0x3e8) returned 1 [0208.522] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c980 [0208.527] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0208.527] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0208.527] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0208.527] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", dwFileAttributes=0x80) returned 1 [0208.529] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\microsoft.3dbuilder_10.0.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0208.530] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=16384) returned 1 [0208.530] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=16384) returned 1 [0208.530] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x3ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.530] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0208.531] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0208.531] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a340) returned 1 [0208.531] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0208.531] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0208.531] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x4000, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x4000, lpOverlapped=0x0) returned 1 [0208.532] CryptEncrypt (in: hKey=0x665ab9a340, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0208.532] CryptEncrypt (in: hKey=0x665ab9a340, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x4000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x4010) returned 1 [0208.532] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0208.532] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x4010, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x4010, lpOverlapped=0x0) returned 1 [0208.533] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0208.533] CryptExportKey (in: hKey=0x665ab9a340, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0208.533] CryptExportKey (in: hKey=0x665ab9a340, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0208.533] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0208.533] CloseHandle (hObject=0x654) returned 1 [0208.549] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0208.554] CryptDestroyKey (hKey=0x665ab9a340) returned 1 [0208.554] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0208.555] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0208.555] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0208.555] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", dwFileAttributes=0x80) returned 1 [0208.555] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\microsoft.3dbuilder_10.0.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0208.556] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=12288) returned 1 [0208.556] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=12288) returned 1 [0208.556] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x2ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.556] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0208.564] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0208.564] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9aab0) returned 1 [0208.564] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0208.564] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0208.564] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x3000, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x3000, lpOverlapped=0x0) returned 1 [0208.565] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0208.565] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x3000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x3010) returned 1 [0208.565] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0208.566] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x3010, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x3010, lpOverlapped=0x0) returned 1 [0208.566] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0208.566] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0208.566] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0208.566] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0208.566] CloseHandle (hObject=0x654) returned 1 [0208.581] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0208.585] CryptDestroyKey (hKey=0x665ab9aab0) returned 1 [0208.585] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0208.585] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0208.585] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0208.585] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", dwFileAttributes=0x80) returned 1 [0208.586] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\microsoft.3dbuilder_10.0.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0208.586] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=0) returned 1 [0208.586] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=0) returned 1 [0208.586] CloseHandle (hObject=0x654) returned 1 [0208.586] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0208.587] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0208.587] FindClose (in: hFindFile=0x665d90c980 | out: hFindFile=0x665d90c980) returned 1 [0208.587] SetLastError (dwErrCode=0x0) [0208.587] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\microsoft.3dbuilder_10.0.0.0_x64__8wekyb3d8bbwe\\activationstore\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0208.587] GetLastError () returned 0x0 [0208.587] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0208.588] CloseHandle (hObject=0x3e8) returned 1 [0208.588] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0208.588] FindClose (in: hFindFile=0x665d90bc60 | out: hFindFile=0x665d90bc60) returned 1 [0208.588] SetLastError (dwErrCode=0x0) [0208.588] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\microsoft.3dbuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0208.589] GetLastError () returned 0xb7 [0208.589] CloseHandle (hObject=0x620) returned 1 [0208.589] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0208.589] SetLastError (dwErrCode=0x0) [0208.589] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0208.589] GetLastError () returned 0xb7 [0208.589] CloseHandle (hObject=0x620) returned 1 [0208.589] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\RoamingState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d100 [0208.591] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0208.591] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0208.592] FindClose (in: hFindFile=0x665d90d100 | out: hFindFile=0x665d90d100) returned 1 [0208.592] SetLastError (dwErrCode=0x0) [0208.592] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\RoamingState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\roamingstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0208.592] GetLastError () returned 0x0 [0208.592] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0208.594] CloseHandle (hObject=0x620) returned 1 [0208.594] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0208.594] SetLastError (dwErrCode=0x0) [0208.594] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0208.594] GetLastError () returned 0xb7 [0208.594] CloseHandle (hObject=0x620) returned 1 [0208.594] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Settings\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c320 [0208.595] FindNextFileW (in: hFindFile=0x665d90c320, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0208.595] FindNextFileW (in: hFindFile=0x665d90c320, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0208.595] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0208.595] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Settings\\roaming.lock", dwFileAttributes=0x80) returned 1 [0208.596] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0208.596] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=0) returned 1 [0208.596] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=0) returned 1 [0208.596] CloseHandle (hObject=0x3e8) returned 1 [0208.596] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0208.597] FindNextFileW (in: hFindFile=0x665d90c320, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0208.597] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0208.597] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Settings\\settings.dat", dwFileAttributes=0x80) returned 1 [0208.597] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0208.598] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=8192) returned 1 [0208.598] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=8192) returned 1 [0208.598] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x1ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.598] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0208.600] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0208.600] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9aea0) returned 1 [0208.600] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0208.600] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0208.600] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0x2000, lpOverlapped=0x0) returned 1 [0208.601] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0208.601] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2010) returned 1 [0208.601] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0208.601] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0x2010, lpOverlapped=0x0) returned 1 [0208.602] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0208.602] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0208.602] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0208.602] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0208.602] CloseHandle (hObject=0x3e8) returned 1 [0208.622] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0208.628] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0208.628] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0208.628] FindNextFileW (in: hFindFile=0x665d90c320, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0208.628] FindClose (in: hFindFile=0x665d90c320 | out: hFindFile=0x665d90c320) returned 1 [0208.628] SetLastError (dwErrCode=0x0) [0208.628] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Settings\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\settings\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0208.629] GetLastError () returned 0x0 [0208.629] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0208.630] CloseHandle (hObject=0x620) returned 1 [0208.630] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0208.630] SetLastError (dwErrCode=0x0) [0208.630] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0208.631] GetLastError () returned 0xb7 [0208.631] CloseHandle (hObject=0x620) returned 1 [0208.631] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\SystemAppData\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c680 [0208.631] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0208.631] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0208.631] FindClose (in: hFindFile=0x665d90c680 | out: hFindFile=0x665d90c680) returned 1 [0208.631] SetLastError (dwErrCode=0x0) [0208.631] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\SystemAppData\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\systemappdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0208.632] GetLastError () returned 0x0 [0208.632] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0208.633] CloseHandle (hObject=0x620) returned 1 [0208.633] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0208.633] SetLastError (dwErrCode=0x0) [0208.633] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0208.634] GetLastError () returned 0xb7 [0208.634] CloseHandle (hObject=0x620) returned 1 [0208.634] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\TempState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90cc20 [0208.634] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0208.634] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0208.634] FindClose (in: hFindFile=0x665d90cc20 | out: hFindFile=0x665d90cc20) returned 1 [0208.634] SetLastError (dwErrCode=0x0) [0208.634] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\TempState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\tempstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0208.635] GetLastError () returned 0x0 [0208.635] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0208.636] CloseHandle (hObject=0x620) returned 1 [0208.636] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0208.636] FindClose (in: hFindFile=0x665d90bd20 | out: hFindFile=0x665d90bd20) returned 1 [0208.636] SetLastError (dwErrCode=0x0) [0208.636] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0208.636] GetLastError () returned 0xb7 [0208.636] CloseHandle (hObject=0x60c) returned 1 [0208.637] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0208.637] SetLastError (dwErrCode=0x0) [0208.637] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0208.637] GetLastError () returned 0xb7 [0208.637] CloseHandle (hObject=0x60c) returned 1 [0208.637] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90ca40 [0208.637] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0208.637] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0208.637] SetLastError (dwErrCode=0x0) [0208.637] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0208.639] GetLastError () returned 0x0 [0208.639] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0208.640] CloseHandle (hObject=0x620) returned 1 [0208.640] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c800 [0208.641] FindNextFileW (in: hFindFile=0x665d90c800, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0208.641] FindNextFileW (in: hFindFile=0x665d90c800, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0208.641] SetLastError (dwErrCode=0x0) [0208.641] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0208.642] GetLastError () returned 0x0 [0208.642] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0208.643] CloseHandle (hObject=0x3e8) returned 1 [0208.643] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\INetCache\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c860 [0208.644] FindNextFileW (in: hFindFile=0x665d90c860, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0208.644] FindNextFileW (in: hFindFile=0x665d90c860, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0208.645] FindClose (in: hFindFile=0x665d90c860 | out: hFindFile=0x665d90c860) returned 1 [0208.645] SetLastError (dwErrCode=0x0) [0208.645] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\INetCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\ac\\inetcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0208.646] GetLastError () returned 0x0 [0208.646] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0208.647] CloseHandle (hObject=0x3e8) returned 1 [0208.647] FindNextFileW (in: hFindFile=0x665d90c800, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0208.647] SetLastError (dwErrCode=0x0) [0208.647] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0208.648] GetLastError () returned 0xb7 [0208.648] CloseHandle (hObject=0x3e8) returned 1 [0208.648] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\INetCookies\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90d1c0 [0208.648] FindNextFileW (in: hFindFile=0x665d90d1c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0208.648] FindNextFileW (in: hFindFile=0x665d90d1c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0208.648] FindClose (in: hFindFile=0x665d90d1c0 | out: hFindFile=0x665d90d1c0) returned 1 [0208.648] SetLastError (dwErrCode=0x0) [0208.648] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\INetCookies\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\ac\\inetcookies\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0208.649] GetLastError () returned 0x0 [0208.649] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0208.650] CloseHandle (hObject=0x3e8) returned 1 [0208.650] FindNextFileW (in: hFindFile=0x665d90c800, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0208.650] SetLastError (dwErrCode=0x0) [0208.650] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0208.650] GetLastError () returned 0xb7 [0208.650] CloseHandle (hObject=0x3e8) returned 1 [0208.651] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\INetHistory\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90be40 [0208.651] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0208.651] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0208.651] FindClose (in: hFindFile=0x665d90be40 | out: hFindFile=0x665d90be40) returned 1 [0208.651] SetLastError (dwErrCode=0x0) [0208.651] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\INetHistory\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\ac\\inethistory\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0208.652] GetLastError () returned 0x0 [0208.652] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0208.653] CloseHandle (hObject=0x3e8) returned 1 [0208.653] FindNextFileW (in: hFindFile=0x665d90c800, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0208.653] SetLastError (dwErrCode=0x0) [0208.653] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0208.653] GetLastError () returned 0xb7 [0208.653] CloseHandle (hObject=0x3e8) returned 1 [0208.654] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\Temp\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c860 [0208.657] FindNextFileW (in: hFindFile=0x665d90c860, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0208.657] FindNextFileW (in: hFindFile=0x665d90c860, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0208.657] FindClose (in: hFindFile=0x665d90c860 | out: hFindFile=0x665d90c860) returned 1 [0208.657] SetLastError (dwErrCode=0x0) [0208.657] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\Temp\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\ac\\temp\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0208.658] GetLastError () returned 0x0 [0208.658] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0208.659] CloseHandle (hObject=0x3e8) returned 1 [0208.659] FindNextFileW (in: hFindFile=0x665d90c800, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0208.659] FindClose (in: hFindFile=0x665d90c800 | out: hFindFile=0x665d90c800) returned 1 [0208.659] SetLastError (dwErrCode=0x0) [0208.659] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0208.659] GetLastError () returned 0xb7 [0208.659] CloseHandle (hObject=0x620) returned 1 [0208.659] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0208.659] SetLastError (dwErrCode=0x0) [0208.659] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0208.660] GetLastError () returned 0xb7 [0208.660] CloseHandle (hObject=0x620) returned 1 [0208.660] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AppData\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c980 [0208.661] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0208.661] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0208.661] FindClose (in: hFindFile=0x665d90c980 | out: hFindFile=0x665d90c980) returned 1 [0208.661] SetLastError (dwErrCode=0x0) [0208.661] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AppData\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\appdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0208.662] GetLastError () returned 0x0 [0208.662] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0208.663] CloseHandle (hObject=0x620) returned 1 [0208.663] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0208.663] SetLastError (dwErrCode=0x0) [0208.663] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0208.664] GetLastError () returned 0xb7 [0208.664] CloseHandle (hObject=0x620) returned 1 [0208.664] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\LocalCache\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c980 [0208.664] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0208.664] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0208.664] FindClose (in: hFindFile=0x665d90c980 | out: hFindFile=0x665d90c980) returned 1 [0208.664] SetLastError (dwErrCode=0x0) [0208.664] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\LocalCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\localcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0208.666] GetLastError () returned 0x0 [0208.666] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0208.667] CloseHandle (hObject=0x620) returned 1 [0208.667] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0208.667] SetLastError (dwErrCode=0x0) [0208.667] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0208.668] GetLastError () returned 0xb7 [0208.668] CloseHandle (hObject=0x620) returned 1 [0208.668] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\LocalState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c920 [0208.668] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0208.668] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0208.668] FindClose (in: hFindFile=0x665d90c920 | out: hFindFile=0x665d90c920) returned 1 [0208.668] SetLastError (dwErrCode=0x0) [0208.668] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\LocalState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\localstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0208.669] GetLastError () returned 0x0 [0208.669] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0208.670] CloseHandle (hObject=0x620) returned 1 [0208.671] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0208.671] SetLastError (dwErrCode=0x0) [0208.671] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0208.671] GetLastError () returned 0xb7 [0208.671] CloseHandle (hObject=0x620) returned 1 [0208.671] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c0e0 [0208.672] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0208.672] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0208.672] SetLastError (dwErrCode=0x0) [0208.672] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\microsoft.aad.brokerplugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0208.675] GetLastError () returned 0x0 [0208.676] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0208.677] CloseHandle (hObject=0x3e8) returned 1 [0208.677] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c440 [0208.679] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0208.679] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0208.679] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0208.679] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", dwFileAttributes=0x80) returned 1 [0208.681] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\microsoft.aad.brokerplugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0208.682] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=16384) returned 1 [0208.682] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=16384) returned 1 [0208.682] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x3ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.682] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0208.683] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0208.683] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a730) returned 1 [0208.683] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0208.684] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0208.684] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x4000, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x4000, lpOverlapped=0x0) returned 1 [0208.685] CryptEncrypt (in: hKey=0x665ab9a730, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0208.685] CryptEncrypt (in: hKey=0x665ab9a730, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x4000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x4010) returned 1 [0208.685] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0208.685] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x4010, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x4010, lpOverlapped=0x0) returned 1 [0208.686] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0208.686] CryptExportKey (in: hKey=0x665ab9a730, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0208.686] CryptExportKey (in: hKey=0x665ab9a730, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0208.686] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0208.686] CloseHandle (hObject=0x654) returned 1 [0208.705] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0208.710] CryptDestroyKey (hKey=0x665ab9a730) returned 1 [0208.710] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0208.711] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0208.711] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0208.711] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", dwFileAttributes=0x80) returned 1 [0208.712] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\microsoft.aad.brokerplugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0208.712] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=16384) returned 1 [0208.712] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=16384) returned 1 [0208.712] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x3ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.712] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0208.714] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0208.714] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9aea0) returned 1 [0208.714] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0208.715] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0208.715] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x4000, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x4000, lpOverlapped=0x0) returned 1 [0208.716] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0208.716] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x4000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x4010) returned 1 [0208.716] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0208.716] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x4010, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x4010, lpOverlapped=0x0) returned 1 [0208.717] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0208.717] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0208.717] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0208.717] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0208.717] CloseHandle (hObject=0x654) returned 1 [0208.737] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0208.743] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0208.743] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0208.743] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0208.743] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0208.744] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", dwFileAttributes=0x80) returned 1 [0208.744] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\microsoft.aad.brokerplugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0208.745] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=0) returned 1 [0208.745] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=0) returned 1 [0208.745] CloseHandle (hObject=0x654) returned 1 [0208.745] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0208.745] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0208.745] FindClose (in: hFindFile=0x665d90c440 | out: hFindFile=0x665d90c440) returned 1 [0208.745] SetLastError (dwErrCode=0x0) [0208.745] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\microsoft.aad.brokerplugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0208.746] GetLastError () returned 0x0 [0208.746] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0208.748] CloseHandle (hObject=0x3e8) returned 1 [0208.748] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0208.748] FindClose (in: hFindFile=0x665d90c0e0 | out: hFindFile=0x665d90c0e0) returned 1 [0208.748] SetLastError (dwErrCode=0x0) [0208.748] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\microsoft.aad.brokerplugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0208.748] GetLastError () returned 0xb7 [0208.748] CloseHandle (hObject=0x620) returned 1 [0208.749] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0208.749] SetLastError (dwErrCode=0x0) [0208.749] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0208.749] GetLastError () returned 0xb7 [0208.749] CloseHandle (hObject=0x620) returned 1 [0208.749] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\RoamingState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d2e0 [0208.749] FindNextFileW (in: hFindFile=0x665d90d2e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0208.749] FindNextFileW (in: hFindFile=0x665d90d2e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0208.749] FindClose (in: hFindFile=0x665d90d2e0 | out: hFindFile=0x665d90d2e0) returned 1 [0208.749] SetLastError (dwErrCode=0x0) [0208.749] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\RoamingState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\roamingstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0208.750] GetLastError () returned 0x0 [0208.750] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0208.751] CloseHandle (hObject=0x620) returned 1 [0208.751] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0208.751] SetLastError (dwErrCode=0x0) [0208.751] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0208.752] GetLastError () returned 0xb7 [0208.752] CloseHandle (hObject=0x620) returned 1 [0208.752] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90cb60 [0208.754] FindNextFileW (in: hFindFile=0x665d90cb60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0208.754] FindNextFileW (in: hFindFile=0x665d90cb60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0208.754] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0208.754] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\roaming.lock", dwFileAttributes=0x80) returned 1 [0208.755] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0208.755] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=0) returned 1 [0208.755] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=0) returned 1 [0208.755] CloseHandle (hObject=0x3e8) returned 1 [0208.756] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0208.756] FindNextFileW (in: hFindFile=0x665d90cb60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0208.756] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0208.756] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat", dwFileAttributes=0x80) returned 1 [0208.757] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0208.757] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=8192) returned 1 [0208.757] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=8192) returned 1 [0208.757] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x1ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.757] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0208.759] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0208.759] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9a6c0) returned 1 [0208.759] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0208.759] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0208.759] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0x2000, lpOverlapped=0x0) returned 1 [0208.760] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0208.760] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2010) returned 1 [0208.760] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0208.760] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0x2010, lpOverlapped=0x0) returned 1 [0208.761] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0208.761] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0208.761] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0208.761] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0208.761] CloseHandle (hObject=0x3e8) returned 1 [0208.783] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0208.788] CryptDestroyKey (hKey=0x665ab9a6c0) returned 1 [0208.788] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0208.788] FindNextFileW (in: hFindFile=0x665d90cb60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0208.788] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0208.789] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", dwFileAttributes=0x80) returned 1 [0208.789] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0208.790] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=8192) returned 1 [0208.790] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=8192) returned 1 [0208.790] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x1ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.790] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0208.792] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0208.792] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9a3b0) returned 1 [0208.792] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0208.792] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0208.792] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0x2000, lpOverlapped=0x0) returned 1 [0208.793] CryptEncrypt (in: hKey=0x665ab9a3b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0208.793] CryptEncrypt (in: hKey=0x665ab9a3b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2010) returned 1 [0208.793] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0208.793] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0x2010, lpOverlapped=0x0) returned 1 [0208.794] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0208.794] CryptExportKey (in: hKey=0x665ab9a3b0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0208.794] CryptExportKey (in: hKey=0x665ab9a3b0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0208.794] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0208.795] CloseHandle (hObject=0x3e8) returned 1 [0208.819] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0208.824] CryptDestroyKey (hKey=0x665ab9a3b0) returned 1 [0208.824] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0208.824] FindNextFileW (in: hFindFile=0x665d90cb60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0208.825] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0208.825] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", dwFileAttributes=0x80) returned 1 [0208.826] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0208.827] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=0) returned 1 [0208.827] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=0) returned 1 [0208.827] CloseHandle (hObject=0x3e8) returned 1 [0208.827] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0208.827] FindNextFileW (in: hFindFile=0x665d90cb60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0208.827] FindClose (in: hFindFile=0x665d90cb60 | out: hFindFile=0x665d90cb60) returned 1 [0208.827] SetLastError (dwErrCode=0x0) [0208.827] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\settings\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0208.828] GetLastError () returned 0x0 [0208.828] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0208.829] CloseHandle (hObject=0x620) returned 1 [0208.829] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0208.829] SetLastError (dwErrCode=0x0) [0208.829] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0208.829] GetLastError () returned 0xb7 [0208.829] CloseHandle (hObject=0x620) returned 1 [0208.830] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\SystemAppData\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bc60 [0208.830] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0208.830] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0208.830] FindClose (in: hFindFile=0x665d90bc60 | out: hFindFile=0x665d90bc60) returned 1 [0208.830] SetLastError (dwErrCode=0x0) [0208.830] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\SystemAppData\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\systemappdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0208.831] GetLastError () returned 0x0 [0208.831] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0208.832] CloseHandle (hObject=0x620) returned 1 [0208.832] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0208.832] SetLastError (dwErrCode=0x0) [0208.832] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0208.832] GetLastError () returned 0xb7 [0208.832] CloseHandle (hObject=0x620) returned 1 [0208.832] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\TempState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c4a0 [0208.832] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0208.832] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0208.832] FindClose (in: hFindFile=0x665d90c4a0 | out: hFindFile=0x665d90c4a0) returned 1 [0208.832] SetLastError (dwErrCode=0x0) [0208.833] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\TempState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\tempstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0208.833] GetLastError () returned 0x0 [0208.833] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0208.834] CloseHandle (hObject=0x620) returned 1 [0208.834] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0208.834] FindClose (in: hFindFile=0x665d90ca40 | out: hFindFile=0x665d90ca40) returned 1 [0208.834] SetLastError (dwErrCode=0x0) [0208.834] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0208.835] GetLastError () returned 0xb7 [0208.835] CloseHandle (hObject=0x60c) returned 1 [0208.835] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0208.835] SetLastError (dwErrCode=0x0) [0208.835] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0208.835] GetLastError () returned 0xb7 [0208.835] CloseHandle (hObject=0x60c) returned 1 [0208.835] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c1a0 [0208.837] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0208.837] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0208.838] SetLastError (dwErrCode=0x0) [0208.838] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0208.839] GetLastError () returned 0x0 [0208.839] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0208.840] CloseHandle (hObject=0x620) returned 1 [0208.840] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90cb60 [0208.855] FindNextFileW (in: hFindFile=0x665d90cb60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0208.855] FindNextFileW (in: hFindFile=0x665d90cb60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0208.855] SetLastError (dwErrCode=0x0) [0208.855] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0208.856] GetLastError () returned 0x0 [0208.856] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0208.857] CloseHandle (hObject=0x3e8) returned 1 [0208.858] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\INetCache\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c500 [0208.859] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0208.859] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0208.859] FindClose (in: hFindFile=0x665d90c500 | out: hFindFile=0x665d90c500) returned 1 [0208.859] SetLastError (dwErrCode=0x0) [0208.859] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\INetCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\ac\\inetcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0208.859] GetLastError () returned 0x0 [0208.859] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0208.861] CloseHandle (hObject=0x3e8) returned 1 [0208.861] FindNextFileW (in: hFindFile=0x665d90cb60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0208.861] SetLastError (dwErrCode=0x0) [0208.861] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0208.861] GetLastError () returned 0xb7 [0208.861] CloseHandle (hObject=0x3e8) returned 1 [0208.861] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\INetCookies\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bc60 [0208.861] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0208.862] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0208.862] FindClose (in: hFindFile=0x665d90bc60 | out: hFindFile=0x665d90bc60) returned 1 [0208.862] SetLastError (dwErrCode=0x0) [0208.862] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\INetCookies\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\ac\\inetcookies\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0208.863] GetLastError () returned 0x0 [0208.863] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0208.864] CloseHandle (hObject=0x3e8) returned 1 [0208.864] FindNextFileW (in: hFindFile=0x665d90cb60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0208.864] SetLastError (dwErrCode=0x0) [0208.864] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0208.865] GetLastError () returned 0xb7 [0208.865] CloseHandle (hObject=0x3e8) returned 1 [0208.865] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\INetHistory\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bd20 [0208.865] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0208.865] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0208.865] FindClose (in: hFindFile=0x665d90bd20 | out: hFindFile=0x665d90bd20) returned 1 [0208.865] SetLastError (dwErrCode=0x0) [0208.865] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\INetHistory\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\ac\\inethistory\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0208.866] GetLastError () returned 0x0 [0208.866] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0208.867] CloseHandle (hObject=0x3e8) returned 1 [0208.867] FindNextFileW (in: hFindFile=0x665d90cb60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0208.867] SetLastError (dwErrCode=0x0) [0208.867] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0208.867] GetLastError () returned 0xb7 [0208.867] CloseHandle (hObject=0x3e8) returned 1 [0208.867] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\Temp\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bfc0 [0208.867] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0208.867] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0208.868] FindClose (in: hFindFile=0x665d90bfc0 | out: hFindFile=0x665d90bfc0) returned 1 [0208.868] SetLastError (dwErrCode=0x0) [0208.868] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\Temp\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\ac\\temp\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0208.868] GetLastError () returned 0x0 [0208.868] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0208.869] CloseHandle (hObject=0x3e8) returned 1 [0208.869] FindNextFileW (in: hFindFile=0x665d90cb60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0208.869] FindClose (in: hFindFile=0x665d90cb60 | out: hFindFile=0x665d90cb60) returned 1 [0208.869] SetLastError (dwErrCode=0x0) [0208.869] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0208.870] GetLastError () returned 0xb7 [0208.870] CloseHandle (hObject=0x620) returned 1 [0208.870] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0208.870] SetLastError (dwErrCode=0x0) [0208.870] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0208.870] GetLastError () returned 0xb7 [0208.870] CloseHandle (hObject=0x620) returned 1 [0208.870] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AppData\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d0a0 [0208.871] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0208.871] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0208.871] FindClose (in: hFindFile=0x665d90d0a0 | out: hFindFile=0x665d90d0a0) returned 1 [0208.871] SetLastError (dwErrCode=0x0) [0208.871] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AppData\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\appdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0208.873] GetLastError () returned 0x0 [0208.873] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0208.874] CloseHandle (hObject=0x620) returned 1 [0208.874] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0208.874] SetLastError (dwErrCode=0x0) [0208.874] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0208.874] GetLastError () returned 0xb7 [0208.874] CloseHandle (hObject=0x620) returned 1 [0208.875] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\LocalCache\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d0a0 [0208.875] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0208.875] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0208.875] FindClose (in: hFindFile=0x665d90d0a0 | out: hFindFile=0x665d90d0a0) returned 1 [0208.875] SetLastError (dwErrCode=0x0) [0208.875] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\LocalCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\localcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0208.876] GetLastError () returned 0x0 [0208.876] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0208.877] CloseHandle (hObject=0x620) returned 1 [0208.877] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0208.877] SetLastError (dwErrCode=0x0) [0208.877] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0208.877] GetLastError () returned 0xb7 [0208.877] CloseHandle (hObject=0x620) returned 1 [0208.877] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\LocalState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90cb00 [0208.877] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0208.878] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0208.878] FindClose (in: hFindFile=0x665d90cb00 | out: hFindFile=0x665d90cb00) returned 1 [0208.878] SetLastError (dwErrCode=0x0) [0208.878] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\LocalState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\localstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0208.878] GetLastError () returned 0x0 [0208.878] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0208.879] CloseHandle (hObject=0x620) returned 1 [0208.879] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0208.879] SetLastError (dwErrCode=0x0) [0208.879] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0208.880] GetLastError () returned 0xb7 [0208.880] CloseHandle (hObject=0x620) returned 1 [0208.880] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d040 [0208.881] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0208.881] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0208.881] SetLastError (dwErrCode=0x0) [0208.881] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\microsoft.accountscontrol_10.0.10240.16384_neutral__cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0208.885] GetLastError () returned 0x0 [0208.885] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0208.886] CloseHandle (hObject=0x3e8) returned 1 [0208.886] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c560 [0208.888] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0208.888] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0208.888] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0208.889] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", dwFileAttributes=0x80) returned 1 [0208.890] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\microsoft.accountscontrol_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0208.891] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=65536) returned 1 [0208.891] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=65536) returned 1 [0208.891] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0xfede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.891] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0208.892] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0208.892] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9aea0) returned 1 [0208.892] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0208.892] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0208.892] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x10000, lpOverlapped=0x0) returned 1 [0208.895] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0208.895] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x10000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x10010) returned 1 [0208.895] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0208.895] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x10010, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x10010, lpOverlapped=0x0) returned 1 [0208.896] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0208.896] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0208.896] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0208.896] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0208.896] CloseHandle (hObject=0x654) returned 1 [0208.925] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0208.930] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0208.930] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0208.931] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0208.931] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0208.931] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", dwFileAttributes=0x80) returned 1 [0208.932] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\microsoft.accountscontrol_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0208.932] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=49152) returned 1 [0208.933] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=49152) returned 1 [0208.933] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0xbede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.933] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0208.960] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0208.960] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a880) returned 1 [0208.961] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0208.961] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0208.961] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0xc000, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0xc000, lpOverlapped=0x0) returned 1 [0208.993] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0208.993] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0xc000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0xc010) returned 1 [0208.993] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0208.993] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0xc010, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0xc010, lpOverlapped=0x0) returned 1 [0208.994] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0208.994] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0208.994] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0208.994] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0208.994] CloseHandle (hObject=0x654) returned 1 [0209.011] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0209.017] CryptDestroyKey (hKey=0x665ab9a880) returned 1 [0209.017] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0209.017] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0209.017] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0209.017] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", dwFileAttributes=0x80) returned 1 [0209.018] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\microsoft.accountscontrol_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0209.018] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=0) returned 1 [0209.018] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=0) returned 1 [0209.019] CloseHandle (hObject=0x654) returned 1 [0209.019] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0209.019] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0209.019] FindClose (in: hFindFile=0x665d90c560 | out: hFindFile=0x665d90c560) returned 1 [0209.019] SetLastError (dwErrCode=0x0) [0209.019] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\microsoft.accountscontrol_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0209.020] GetLastError () returned 0x0 [0209.020] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0209.021] CloseHandle (hObject=0x3e8) returned 1 [0209.021] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0209.022] FindClose (in: hFindFile=0x665d90d040 | out: hFindFile=0x665d90d040) returned 1 [0209.022] SetLastError (dwErrCode=0x0) [0209.022] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\microsoft.accountscontrol_10.0.10240.16384_neutral__cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.022] GetLastError () returned 0xb7 [0209.022] CloseHandle (hObject=0x620) returned 1 [0209.022] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0209.022] SetLastError (dwErrCode=0x0) [0209.022] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.022] GetLastError () returned 0xb7 [0209.022] CloseHandle (hObject=0x620) returned 1 [0209.023] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\RoamingState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c2c0 [0209.023] FindNextFileW (in: hFindFile=0x665d90c2c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.023] FindNextFileW (in: hFindFile=0x665d90c2c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0209.023] FindClose (in: hFindFile=0x665d90c2c0 | out: hFindFile=0x665d90c2c0) returned 1 [0209.023] SetLastError (dwErrCode=0x0) [0209.023] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\RoamingState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\roamingstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.023] GetLastError () returned 0x0 [0209.024] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0209.025] CloseHandle (hObject=0x620) returned 1 [0209.025] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0209.025] SetLastError (dwErrCode=0x0) [0209.025] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.025] GetLastError () returned 0xb7 [0209.025] CloseHandle (hObject=0x620) returned 1 [0209.025] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c380 [0209.027] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.027] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.027] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0209.027] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\roaming.lock", dwFileAttributes=0x80) returned 1 [0209.028] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0209.029] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=0) returned 1 [0209.029] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=0) returned 1 [0209.029] CloseHandle (hObject=0x3e8) returned 1 [0209.029] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0209.029] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.029] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0209.030] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat", dwFileAttributes=0x80) returned 1 [0209.030] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0209.031] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=8192) returned 1 [0209.031] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=8192) returned 1 [0209.031] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x1ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0209.031] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0209.032] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0209.032] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9a5e0) returned 1 [0209.032] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0209.033] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0209.033] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0x2000, lpOverlapped=0x0) returned 1 [0209.034] CryptEncrypt (in: hKey=0x665ab9a5e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0209.034] CryptEncrypt (in: hKey=0x665ab9a5e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2010) returned 1 [0209.034] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0209.034] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0x2010, lpOverlapped=0x0) returned 1 [0209.034] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0209.035] CryptExportKey (in: hKey=0x665ab9a5e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0209.035] CryptExportKey (in: hKey=0x665ab9a5e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0209.035] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0209.035] CloseHandle (hObject=0x3e8) returned 1 [0209.056] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0209.061] CryptDestroyKey (hKey=0x665ab9a5e0) returned 1 [0209.061] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0209.062] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.062] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0209.062] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", dwFileAttributes=0x80) returned 1 [0209.063] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0209.064] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=8192) returned 1 [0209.064] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=8192) returned 1 [0209.064] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x1ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0209.064] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0209.066] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0209.066] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9aab0) returned 1 [0209.066] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0209.067] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0209.067] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0x2000, lpOverlapped=0x0) returned 1 [0209.067] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0209.068] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2010) returned 1 [0209.068] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0209.068] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0x2010, lpOverlapped=0x0) returned 1 [0209.068] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0209.068] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0209.068] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0209.068] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0209.069] CloseHandle (hObject=0x3e8) returned 1 [0209.089] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0209.095] CryptDestroyKey (hKey=0x665ab9aab0) returned 1 [0209.095] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0209.095] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.095] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0209.096] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", dwFileAttributes=0x80) returned 1 [0209.096] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0209.097] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=0) returned 1 [0209.097] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=0) returned 1 [0209.097] CloseHandle (hObject=0x3e8) returned 1 [0209.097] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0209.097] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0209.097] FindClose (in: hFindFile=0x665d90c380 | out: hFindFile=0x665d90c380) returned 1 [0209.097] SetLastError (dwErrCode=0x0) [0209.097] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\settings\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.099] GetLastError () returned 0x0 [0209.099] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0209.099] CloseHandle (hObject=0x620) returned 1 [0209.099] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0209.100] SetLastError (dwErrCode=0x0) [0209.100] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.100] GetLastError () returned 0xb7 [0209.100] CloseHandle (hObject=0x620) returned 1 [0209.100] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\SystemAppData\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d280 [0209.100] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.100] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0209.100] FindClose (in: hFindFile=0x665d90d280 | out: hFindFile=0x665d90d280) returned 1 [0209.100] SetLastError (dwErrCode=0x0) [0209.100] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\SystemAppData\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\systemappdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.101] GetLastError () returned 0x0 [0209.101] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0209.102] CloseHandle (hObject=0x620) returned 1 [0209.102] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0209.102] SetLastError (dwErrCode=0x0) [0209.102] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.102] GetLastError () returned 0xb7 [0209.102] CloseHandle (hObject=0x620) returned 1 [0209.102] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\TempState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d1c0 [0209.102] FindNextFileW (in: hFindFile=0x665d90d1c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.102] FindNextFileW (in: hFindFile=0x665d90d1c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0209.102] FindClose (in: hFindFile=0x665d90d1c0 | out: hFindFile=0x665d90d1c0) returned 1 [0209.102] SetLastError (dwErrCode=0x0) [0209.102] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\TempState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\tempstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.104] GetLastError () returned 0x0 [0209.104] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0209.105] CloseHandle (hObject=0x620) returned 1 [0209.105] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0209.105] FindClose (in: hFindFile=0x665d90c1a0 | out: hFindFile=0x665d90c1a0) returned 1 [0209.105] SetLastError (dwErrCode=0x0) [0209.105] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0209.105] GetLastError () returned 0xb7 [0209.105] CloseHandle (hObject=0x60c) returned 1 [0209.105] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0209.105] SetLastError (dwErrCode=0x0) [0209.105] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0209.106] GetLastError () returned 0xb7 [0209.106] CloseHandle (hObject=0x60c) returned 1 [0209.106] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90ce60 [0209.137] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0209.137] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0209.137] SetLastError (dwErrCode=0x0) [0209.138] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.138] GetLastError () returned 0x0 [0209.138] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0209.139] CloseHandle (hObject=0x620) returned 1 [0209.139] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AC\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d280 [0209.165] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.165] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.166] SetLastError (dwErrCode=0x0) [0209.166] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0209.167] GetLastError () returned 0x0 [0209.167] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0209.168] CloseHandle (hObject=0x3e8) returned 1 [0209.168] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AC\\INetCache\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c680 [0209.169] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0209.169] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0209.169] FindClose (in: hFindFile=0x665d90c680 | out: hFindFile=0x665d90c680) returned 1 [0209.169] SetLastError (dwErrCode=0x0) [0209.169] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AC\\INetCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\ac\\inetcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0209.170] GetLastError () returned 0x0 [0209.170] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0209.171] CloseHandle (hObject=0x3e8) returned 1 [0209.171] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.171] SetLastError (dwErrCode=0x0) [0209.171] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0209.171] GetLastError () returned 0xb7 [0209.171] CloseHandle (hObject=0x3e8) returned 1 [0209.171] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AC\\INetCookies\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90cc20 [0209.172] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0209.172] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0209.172] FindClose (in: hFindFile=0x665d90cc20 | out: hFindFile=0x665d90cc20) returned 1 [0209.172] SetLastError (dwErrCode=0x0) [0209.172] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AC\\INetCookies\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\ac\\inetcookies\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0209.173] GetLastError () returned 0x0 [0209.173] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0209.174] CloseHandle (hObject=0x3e8) returned 1 [0209.174] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.174] SetLastError (dwErrCode=0x0) [0209.174] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0209.174] GetLastError () returned 0xb7 [0209.174] CloseHandle (hObject=0x3e8) returned 1 [0209.175] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AC\\INetHistory\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c800 [0209.177] FindNextFileW (in: hFindFile=0x665d90c800, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0209.177] FindNextFileW (in: hFindFile=0x665d90c800, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0209.177] FindClose (in: hFindFile=0x665d90c800 | out: hFindFile=0x665d90c800) returned 1 [0209.177] SetLastError (dwErrCode=0x0) [0209.177] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AC\\INetHistory\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\ac\\inethistory\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0209.178] GetLastError () returned 0x0 [0209.178] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0209.179] CloseHandle (hObject=0x3e8) returned 1 [0209.179] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.179] SetLastError (dwErrCode=0x0) [0209.179] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0209.179] GetLastError () returned 0xb7 [0209.179] CloseHandle (hObject=0x3e8) returned 1 [0209.179] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AC\\Temp\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c800 [0209.179] FindNextFileW (in: hFindFile=0x665d90c800, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0209.179] FindNextFileW (in: hFindFile=0x665d90c800, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0209.180] FindClose (in: hFindFile=0x665d90c800 | out: hFindFile=0x665d90c800) returned 1 [0209.180] SetLastError (dwErrCode=0x0) [0209.180] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AC\\Temp\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\ac\\temp\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0209.181] GetLastError () returned 0x0 [0209.181] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0209.181] CloseHandle (hObject=0x3e8) returned 1 [0209.182] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0209.182] FindClose (in: hFindFile=0x665d90d280 | out: hFindFile=0x665d90d280) returned 1 [0209.182] SetLastError (dwErrCode=0x0) [0209.182] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.182] GetLastError () returned 0xb7 [0209.182] CloseHandle (hObject=0x620) returned 1 [0209.182] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0209.182] SetLastError (dwErrCode=0x0) [0209.182] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.182] GetLastError () returned 0xb7 [0209.182] CloseHandle (hObject=0x620) returned 1 [0209.182] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AppData\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c1a0 [0209.183] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.183] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0209.183] FindClose (in: hFindFile=0x665d90c1a0 | out: hFindFile=0x665d90c1a0) returned 1 [0209.183] SetLastError (dwErrCode=0x0) [0209.183] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AppData\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\appdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.184] GetLastError () returned 0x0 [0209.184] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0209.185] CloseHandle (hObject=0x620) returned 1 [0209.185] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0209.185] SetLastError (dwErrCode=0x0) [0209.185] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.185] GetLastError () returned 0xb7 [0209.185] CloseHandle (hObject=0x620) returned 1 [0209.185] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\LocalCache\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c0e0 [0209.185] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.185] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0209.185] FindClose (in: hFindFile=0x665d90c0e0 | out: hFindFile=0x665d90c0e0) returned 1 [0209.186] SetLastError (dwErrCode=0x0) [0209.186] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\LocalCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\localcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.186] GetLastError () returned 0x0 [0209.186] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0209.187] CloseHandle (hObject=0x620) returned 1 [0209.187] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0209.187] SetLastError (dwErrCode=0x0) [0209.187] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.188] GetLastError () returned 0xb7 [0209.188] CloseHandle (hObject=0x620) returned 1 [0209.188] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\LocalState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c5c0 [0209.188] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.188] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0209.188] FindClose (in: hFindFile=0x665d90c5c0 | out: hFindFile=0x665d90c5c0) returned 1 [0209.188] SetLastError (dwErrCode=0x0) [0209.188] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\LocalState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\localstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.189] GetLastError () returned 0x0 [0209.189] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0209.189] CloseHandle (hObject=0x620) returned 1 [0209.189] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0209.189] SetLastError (dwErrCode=0x0) [0209.190] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.190] GetLastError () returned 0xb7 [0209.190] CloseHandle (hObject=0x620) returned 1 [0209.190] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c860 [0209.190] FindNextFileW (in: hFindFile=0x665d90c860, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.190] FindNextFileW (in: hFindFile=0x665d90c860, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.190] SetLastError (dwErrCode=0x0) [0209.190] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0209.191] GetLastError () returned 0x0 [0209.191] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0209.191] CloseHandle (hObject=0x3e8) returned 1 [0209.191] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c980 [0209.239] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0209.239] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0209.239] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0209.240] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", dwFileAttributes=0x80) returned 1 [0209.242] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0209.242] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=16384) returned 1 [0209.242] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=16384) returned 1 [0209.242] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x3ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0209.242] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0209.243] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0209.243] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a340) returned 1 [0209.243] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0209.243] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0209.244] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x4000, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x4000, lpOverlapped=0x0) returned 1 [0209.279] CryptEncrypt (in: hKey=0x665ab9a340, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0209.279] CryptEncrypt (in: hKey=0x665ab9a340, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x4000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x4010) returned 1 [0209.279] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0209.279] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x4010, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x4010, lpOverlapped=0x0) returned 1 [0209.279] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0209.280] CryptExportKey (in: hKey=0x665ab9a340, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0209.280] CryptExportKey (in: hKey=0x665ab9a340, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0209.280] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0209.280] CloseHandle (hObject=0x654) returned 1 [0209.291] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0209.295] CryptDestroyKey (hKey=0x665ab9a340) returned 1 [0209.295] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0209.296] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0209.296] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0209.296] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", dwFileAttributes=0x80) returned 1 [0209.296] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0209.297] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=12288) returned 1 [0209.297] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=12288) returned 1 [0209.297] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x2ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0209.297] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0209.298] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0209.298] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9aea0) returned 1 [0209.298] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0209.299] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0209.299] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x3000, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x3000, lpOverlapped=0x0) returned 1 [0209.299] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0209.299] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x3000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x3010) returned 1 [0209.299] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0209.300] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x3010, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x3010, lpOverlapped=0x0) returned 1 [0209.300] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0209.300] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0209.300] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0209.300] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0209.300] CloseHandle (hObject=0x654) returned 1 [0209.314] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0209.318] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0209.318] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0209.318] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0209.318] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0209.319] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", dwFileAttributes=0x80) returned 1 [0209.320] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0209.320] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=0) returned 1 [0209.320] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=0) returned 1 [0209.320] CloseHandle (hObject=0x654) returned 1 [0209.320] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0209.320] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0209.320] FindClose (in: hFindFile=0x665d90c980 | out: hFindFile=0x665d90c980) returned 1 [0209.320] SetLastError (dwErrCode=0x0) [0209.321] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\activationstore\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0209.321] GetLastError () returned 0x0 [0209.321] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0209.322] CloseHandle (hObject=0x3e8) returned 1 [0209.322] FindNextFileW (in: hFindFile=0x665d90c860, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0209.322] FindClose (in: hFindFile=0x665d90c860 | out: hFindFile=0x665d90c860) returned 1 [0209.322] SetLastError (dwErrCode=0x0) [0209.322] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.322] GetLastError () returned 0xb7 [0209.322] CloseHandle (hObject=0x620) returned 1 [0209.322] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0209.322] SetLastError (dwErrCode=0x0) [0209.322] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.323] GetLastError () returned 0xb7 [0209.323] CloseHandle (hObject=0x620) returned 1 [0209.323] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\RoamingState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d040 [0209.323] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.323] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0209.323] FindClose (in: hFindFile=0x665d90d040 | out: hFindFile=0x665d90d040) returned 1 [0209.323] SetLastError (dwErrCode=0x0) [0209.323] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\RoamingState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\roamingstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.324] GetLastError () returned 0x0 [0209.324] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0209.324] CloseHandle (hObject=0x620) returned 1 [0209.324] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0209.324] SetLastError (dwErrCode=0x0) [0209.324] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.325] GetLastError () returned 0xb7 [0209.325] CloseHandle (hObject=0x620) returned 1 [0209.325] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Settings\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d040 [0209.325] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.325] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.325] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0209.326] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Settings\\roaming.lock", dwFileAttributes=0x80) returned 1 [0209.326] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0209.326] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=0) returned 1 [0209.326] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=0) returned 1 [0209.326] CloseHandle (hObject=0x3e8) returned 1 [0209.326] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0209.327] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.327] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0209.327] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Settings\\settings.dat", dwFileAttributes=0x80) returned 1 [0209.327] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0209.328] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=8192) returned 1 [0209.328] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=8192) returned 1 [0209.328] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x1ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0209.328] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0209.329] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0209.329] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9aea0) returned 1 [0209.329] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0209.330] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0209.330] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0x2000, lpOverlapped=0x0) returned 1 [0209.330] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0209.330] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2010) returned 1 [0209.330] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0209.330] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0x2010, lpOverlapped=0x0) returned 1 [0209.331] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0209.331] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0209.331] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0209.331] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0209.331] CloseHandle (hObject=0x3e8) returned 1 [0209.348] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0209.352] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0209.352] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0209.352] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0209.352] FindClose (in: hFindFile=0x665d90d040 | out: hFindFile=0x665d90d040) returned 1 [0209.353] SetLastError (dwErrCode=0x0) [0209.353] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Settings\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\settings\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.353] GetLastError () returned 0x0 [0209.353] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0209.354] CloseHandle (hObject=0x620) returned 1 [0209.354] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0209.354] SetLastError (dwErrCode=0x0) [0209.354] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.354] GetLastError () returned 0xb7 [0209.354] CloseHandle (hObject=0x620) returned 1 [0209.354] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\SystemAppData\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90cb60 [0209.355] FindNextFileW (in: hFindFile=0x665d90cb60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.355] FindNextFileW (in: hFindFile=0x665d90cb60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0209.355] FindClose (in: hFindFile=0x665d90cb60 | out: hFindFile=0x665d90cb60) returned 1 [0209.355] SetLastError (dwErrCode=0x0) [0209.355] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\SystemAppData\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\systemappdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.355] GetLastError () returned 0x0 [0209.355] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0209.356] CloseHandle (hObject=0x620) returned 1 [0209.356] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0209.356] SetLastError (dwErrCode=0x0) [0209.356] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.357] GetLastError () returned 0xb7 [0209.357] CloseHandle (hObject=0x620) returned 1 [0209.357] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\TempState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90ca40 [0209.357] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.357] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0209.357] FindClose (in: hFindFile=0x665d90ca40 | out: hFindFile=0x665d90ca40) returned 1 [0209.357] SetLastError (dwErrCode=0x0) [0209.357] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\TempState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\tempstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.358] GetLastError () returned 0x0 [0209.358] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0209.359] CloseHandle (hObject=0x620) returned 1 [0209.359] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0209.359] FindClose (in: hFindFile=0x665d90ce60 | out: hFindFile=0x665d90ce60) returned 1 [0209.359] SetLastError (dwErrCode=0x0) [0209.359] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0209.359] GetLastError () returned 0xb7 [0209.359] CloseHandle (hObject=0x60c) returned 1 [0209.359] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0209.359] SetLastError (dwErrCode=0x0) [0209.359] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0209.359] GetLastError () returned 0xb7 [0209.359] CloseHandle (hObject=0x60c) returned 1 [0209.359] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90d040 [0209.361] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0209.361] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0209.361] SetLastError (dwErrCode=0x0) [0209.361] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.362] GetLastError () returned 0x0 [0209.362] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0209.363] CloseHandle (hObject=0x620) returned 1 [0209.363] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AC\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c800 [0209.365] FindNextFileW (in: hFindFile=0x665d90c800, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.365] FindNextFileW (in: hFindFile=0x665d90c800, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.365] SetLastError (dwErrCode=0x0) [0209.365] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0209.367] GetLastError () returned 0x0 [0209.367] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0209.368] CloseHandle (hObject=0x3e8) returned 1 [0209.368] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AC\\INetCache\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c4a0 [0209.369] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0209.369] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0209.369] FindClose (in: hFindFile=0x665d90c4a0 | out: hFindFile=0x665d90c4a0) returned 1 [0209.369] SetLastError (dwErrCode=0x0) [0209.369] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AC\\INetCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\ac\\inetcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0209.369] GetLastError () returned 0x0 [0209.369] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0209.373] CloseHandle (hObject=0x3e8) returned 1 [0209.373] FindNextFileW (in: hFindFile=0x665d90c800, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.373] SetLastError (dwErrCode=0x0) [0209.373] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0209.374] GetLastError () returned 0xb7 [0209.374] CloseHandle (hObject=0x3e8) returned 1 [0209.374] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AC\\INetCookies\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c260 [0209.375] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0209.375] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0209.375] FindClose (in: hFindFile=0x665d90c260 | out: hFindFile=0x665d90c260) returned 1 [0209.375] SetLastError (dwErrCode=0x0) [0209.375] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AC\\INetCookies\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\ac\\inetcookies\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0209.376] GetLastError () returned 0x0 [0209.376] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0209.377] CloseHandle (hObject=0x3e8) returned 1 [0209.377] FindNextFileW (in: hFindFile=0x665d90c800, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.377] SetLastError (dwErrCode=0x0) [0209.377] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0209.377] GetLastError () returned 0xb7 [0209.377] CloseHandle (hObject=0x3e8) returned 1 [0209.377] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AC\\INetHistory\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bc60 [0209.377] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0209.377] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0209.377] FindClose (in: hFindFile=0x665d90bc60 | out: hFindFile=0x665d90bc60) returned 1 [0209.377] SetLastError (dwErrCode=0x0) [0209.377] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AC\\INetHistory\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\ac\\inethistory\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0209.378] GetLastError () returned 0x0 [0209.378] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0209.379] CloseHandle (hObject=0x3e8) returned 1 [0209.379] FindNextFileW (in: hFindFile=0x665d90c800, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.379] SetLastError (dwErrCode=0x0) [0209.379] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0209.379] GetLastError () returned 0xb7 [0209.379] CloseHandle (hObject=0x3e8) returned 1 [0209.379] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AC\\Temp\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c4a0 [0209.379] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0209.379] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0209.379] FindClose (in: hFindFile=0x665d90c4a0 | out: hFindFile=0x665d90c4a0) returned 1 [0209.379] SetLastError (dwErrCode=0x0) [0209.379] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AC\\Temp\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\ac\\temp\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0209.381] GetLastError () returned 0x0 [0209.381] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0209.382] CloseHandle (hObject=0x3e8) returned 1 [0209.382] FindNextFileW (in: hFindFile=0x665d90c800, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0209.382] FindClose (in: hFindFile=0x665d90c800 | out: hFindFile=0x665d90c800) returned 1 [0209.382] SetLastError (dwErrCode=0x0) [0209.382] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.382] GetLastError () returned 0xb7 [0209.382] CloseHandle (hObject=0x620) returned 1 [0209.382] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0209.382] SetLastError (dwErrCode=0x0) [0209.382] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.383] GetLastError () returned 0xb7 [0209.383] CloseHandle (hObject=0x620) returned 1 [0209.383] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AppData\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c1a0 [0209.383] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.383] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0209.383] FindClose (in: hFindFile=0x665d90c1a0 | out: hFindFile=0x665d90c1a0) returned 1 [0209.383] SetLastError (dwErrCode=0x0) [0209.383] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AppData\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\appdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.384] GetLastError () returned 0x0 [0209.384] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0209.385] CloseHandle (hObject=0x620) returned 1 [0209.385] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0209.385] SetLastError (dwErrCode=0x0) [0209.385] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.385] GetLastError () returned 0xb7 [0209.385] CloseHandle (hObject=0x620) returned 1 [0209.385] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\LocalCache\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90cc80 [0209.387] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.387] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0209.387] FindClose (in: hFindFile=0x665d90cc80 | out: hFindFile=0x665d90cc80) returned 1 [0209.387] SetLastError (dwErrCode=0x0) [0209.387] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\LocalCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\localcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.387] GetLastError () returned 0x0 [0209.387] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0209.388] CloseHandle (hObject=0x620) returned 1 [0209.389] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0209.389] SetLastError (dwErrCode=0x0) [0209.389] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.389] GetLastError () returned 0xb7 [0209.389] CloseHandle (hObject=0x620) returned 1 [0209.389] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\LocalState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bd80 [0209.389] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.389] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0209.389] FindClose (in: hFindFile=0x665d90bd80 | out: hFindFile=0x665d90bd80) returned 1 [0209.389] SetLastError (dwErrCode=0x0) [0209.389] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\LocalState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\localstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.391] GetLastError () returned 0x0 [0209.391] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0209.391] CloseHandle (hObject=0x620) returned 1 [0209.392] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0209.392] SetLastError (dwErrCode=0x0) [0209.392] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.392] GetLastError () returned 0xb7 [0209.392] CloseHandle (hObject=0x620) returned 1 [0209.392] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c440 [0209.393] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.393] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.393] SetLastError (dwErrCode=0x0) [0209.393] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\microsoft.bingfinance_4.3.193.0_x86__8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0209.395] GetLastError () returned 0x0 [0209.395] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0209.395] CloseHandle (hObject=0x3e8) returned 1 [0209.396] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90cf20 [0209.397] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0209.397] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0209.397] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0209.397] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", dwFileAttributes=0x80) returned 1 [0209.398] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\microsoft.bingfinance_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0209.398] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=32768) returned 1 [0209.398] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=32768) returned 1 [0209.398] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x7ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0209.399] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0209.399] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0209.399] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a340) returned 1 [0209.399] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0209.400] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0209.400] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x8000, lpOverlapped=0x0) returned 1 [0209.401] CryptEncrypt (in: hKey=0x665ab9a340, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0209.401] CryptEncrypt (in: hKey=0x665ab9a340, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x8000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x8010) returned 1 [0209.401] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0209.401] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x8010, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x8010, lpOverlapped=0x0) returned 1 [0209.402] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0209.402] CryptExportKey (in: hKey=0x665ab9a340, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0209.402] CryptExportKey (in: hKey=0x665ab9a340, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0209.402] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0209.402] CloseHandle (hObject=0x654) returned 1 [0209.418] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0209.424] CryptDestroyKey (hKey=0x665ab9a340) returned 1 [0209.424] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0209.424] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0209.424] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0209.424] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", dwFileAttributes=0x80) returned 1 [0209.426] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\microsoft.bingfinance_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0209.426] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=24576) returned 1 [0209.426] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=24576) returned 1 [0209.426] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x5ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0209.426] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0209.428] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0209.428] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9aea0) returned 1 [0209.428] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0209.428] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0209.428] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x6000, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x6000, lpOverlapped=0x0) returned 1 [0209.430] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0209.430] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x6000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x6010) returned 1 [0209.430] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0209.430] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x6010, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x6010, lpOverlapped=0x0) returned 1 [0209.430] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0209.431] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0209.431] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0209.431] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0209.431] CloseHandle (hObject=0x654) returned 1 [0209.447] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0209.452] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0209.452] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0209.452] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0209.452] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0209.452] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", dwFileAttributes=0x80) returned 1 [0209.453] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\microsoft.bingfinance_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0209.453] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=0) returned 1 [0209.453] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=0) returned 1 [0209.453] CloseHandle (hObject=0x654) returned 1 [0209.453] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0209.454] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0209.454] FindClose (in: hFindFile=0x665d90cf20 | out: hFindFile=0x665d90cf20) returned 1 [0209.454] SetLastError (dwErrCode=0x0) [0209.454] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\microsoft.bingfinance_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0209.454] GetLastError () returned 0x0 [0209.454] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0209.455] CloseHandle (hObject=0x3e8) returned 1 [0209.455] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0209.456] FindClose (in: hFindFile=0x665d90c440 | out: hFindFile=0x665d90c440) returned 1 [0209.456] SetLastError (dwErrCode=0x0) [0209.456] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\microsoft.bingfinance_4.3.193.0_x86__8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.456] GetLastError () returned 0xb7 [0209.456] CloseHandle (hObject=0x620) returned 1 [0209.456] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0209.456] SetLastError (dwErrCode=0x0) [0209.456] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.457] GetLastError () returned 0xb7 [0209.457] CloseHandle (hObject=0x620) returned 1 [0209.457] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\RoamingState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90ca40 [0209.457] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.457] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0209.457] FindClose (in: hFindFile=0x665d90ca40 | out: hFindFile=0x665d90ca40) returned 1 [0209.457] SetLastError (dwErrCode=0x0) [0209.457] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\RoamingState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\roamingstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.458] GetLastError () returned 0x0 [0209.458] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0209.459] CloseHandle (hObject=0x620) returned 1 [0209.459] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0209.459] SetLastError (dwErrCode=0x0) [0209.459] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.459] GetLastError () returned 0xb7 [0209.459] CloseHandle (hObject=0x620) returned 1 [0209.459] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Settings\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bc60 [0209.460] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.460] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.460] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0209.460] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Settings\\roaming.lock", dwFileAttributes=0x80) returned 1 [0209.460] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0209.461] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=0) returned 1 [0209.461] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=0) returned 1 [0209.461] CloseHandle (hObject=0x3e8) returned 1 [0209.461] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0209.461] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.461] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0209.462] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Settings\\settings.dat", dwFileAttributes=0x80) returned 1 [0209.462] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0209.463] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=8192) returned 1 [0209.463] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=8192) returned 1 [0209.463] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x1ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0209.463] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0209.466] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0209.466] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9a1f0) returned 1 [0209.466] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0209.467] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0209.467] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0x2000, lpOverlapped=0x0) returned 1 [0209.467] CryptEncrypt (in: hKey=0x665ab9a1f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0209.467] CryptEncrypt (in: hKey=0x665ab9a1f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2010) returned 1 [0209.467] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0209.467] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0x2010, lpOverlapped=0x0) returned 1 [0209.468] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0209.468] CryptExportKey (in: hKey=0x665ab9a1f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0209.468] CryptExportKey (in: hKey=0x665ab9a1f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0209.468] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0209.468] CloseHandle (hObject=0x3e8) returned 1 [0209.490] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0209.495] CryptDestroyKey (hKey=0x665ab9a1f0) returned 1 [0209.495] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0209.495] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0209.495] FindClose (in: hFindFile=0x665d90bc60 | out: hFindFile=0x665d90bc60) returned 1 [0209.495] SetLastError (dwErrCode=0x0) [0209.495] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Settings\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\settings\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.496] GetLastError () returned 0x0 [0209.496] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0209.497] CloseHandle (hObject=0x620) returned 1 [0209.498] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0209.498] SetLastError (dwErrCode=0x0) [0209.498] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.498] GetLastError () returned 0xb7 [0209.498] CloseHandle (hObject=0x620) returned 1 [0209.498] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\SystemAppData\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c6e0 [0209.498] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.498] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0209.498] FindClose (in: hFindFile=0x665d90c6e0 | out: hFindFile=0x665d90c6e0) returned 1 [0209.499] SetLastError (dwErrCode=0x0) [0209.499] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\SystemAppData\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\systemappdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.499] GetLastError () returned 0x0 [0209.499] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0209.503] CloseHandle (hObject=0x620) returned 1 [0209.503] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0209.503] SetLastError (dwErrCode=0x0) [0209.503] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.504] GetLastError () returned 0xb7 [0209.504] CloseHandle (hObject=0x620) returned 1 [0209.504] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\TempState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c1a0 [0209.504] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.504] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0209.504] FindClose (in: hFindFile=0x665d90c1a0 | out: hFindFile=0x665d90c1a0) returned 1 [0209.504] SetLastError (dwErrCode=0x0) [0209.504] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\TempState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\tempstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.506] GetLastError () returned 0x0 [0209.506] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0209.507] CloseHandle (hObject=0x620) returned 1 [0209.507] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0209.507] FindClose (in: hFindFile=0x665d90d040 | out: hFindFile=0x665d90d040) returned 1 [0209.507] SetLastError (dwErrCode=0x0) [0209.507] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0209.508] GetLastError () returned 0xb7 [0209.508] CloseHandle (hObject=0x60c) returned 1 [0209.508] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0209.508] SetLastError (dwErrCode=0x0) [0209.508] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0209.508] GetLastError () returned 0xb7 [0209.508] CloseHandle (hObject=0x60c) returned 1 [0209.508] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c4a0 [0209.523] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0209.523] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0209.523] SetLastError (dwErrCode=0x0) [0209.523] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.524] GetLastError () returned 0x0 [0209.524] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0209.525] CloseHandle (hObject=0x620) returned 1 [0209.525] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AC\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c380 [0209.528] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.529] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.529] SetLastError (dwErrCode=0x0) [0209.529] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0209.530] GetLastError () returned 0x0 [0209.530] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0209.531] CloseHandle (hObject=0x3e8) returned 1 [0209.531] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AC\\INetCache\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90cce0 [0209.532] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0209.532] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0209.532] FindClose (in: hFindFile=0x665d90cce0 | out: hFindFile=0x665d90cce0) returned 1 [0209.532] SetLastError (dwErrCode=0x0) [0209.533] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AC\\INetCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\ac\\inetcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0209.533] GetLastError () returned 0x0 [0209.533] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0209.534] CloseHandle (hObject=0x3e8) returned 1 [0209.535] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.535] SetLastError (dwErrCode=0x0) [0209.535] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0209.535] GetLastError () returned 0xb7 [0209.535] CloseHandle (hObject=0x3e8) returned 1 [0209.535] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AC\\INetCookies\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90d100 [0209.536] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0209.536] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0209.536] FindClose (in: hFindFile=0x665d90d100 | out: hFindFile=0x665d90d100) returned 1 [0209.536] SetLastError (dwErrCode=0x0) [0209.537] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AC\\INetCookies\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\ac\\inetcookies\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0209.538] GetLastError () returned 0x0 [0209.538] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0209.539] CloseHandle (hObject=0x3e8) returned 1 [0209.539] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.539] SetLastError (dwErrCode=0x0) [0209.539] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0209.540] GetLastError () returned 0xb7 [0209.540] CloseHandle (hObject=0x3e8) returned 1 [0209.540] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AC\\INetHistory\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bc60 [0209.540] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0209.540] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0209.540] FindClose (in: hFindFile=0x665d90bc60 | out: hFindFile=0x665d90bc60) returned 1 [0209.540] SetLastError (dwErrCode=0x0) [0209.540] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AC\\INetHistory\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\ac\\inethistory\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0209.541] GetLastError () returned 0x0 [0209.541] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0209.542] CloseHandle (hObject=0x3e8) returned 1 [0209.542] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.542] SetLastError (dwErrCode=0x0) [0209.542] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0209.543] GetLastError () returned 0xb7 [0209.543] CloseHandle (hObject=0x3e8) returned 1 [0209.543] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AC\\Temp\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bf60 [0209.543] FindNextFileW (in: hFindFile=0x665d90bf60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0209.543] FindNextFileW (in: hFindFile=0x665d90bf60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0209.543] FindClose (in: hFindFile=0x665d90bf60 | out: hFindFile=0x665d90bf60) returned 1 [0209.543] SetLastError (dwErrCode=0x0) [0209.543] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AC\\Temp\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\ac\\temp\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0209.548] GetLastError () returned 0x0 [0209.548] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0209.550] CloseHandle (hObject=0x3e8) returned 1 [0209.550] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0209.550] FindClose (in: hFindFile=0x665d90c380 | out: hFindFile=0x665d90c380) returned 1 [0209.550] SetLastError (dwErrCode=0x0) [0209.550] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.550] GetLastError () returned 0xb7 [0209.550] CloseHandle (hObject=0x620) returned 1 [0209.550] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0209.550] SetLastError (dwErrCode=0x0) [0209.550] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.551] GetLastError () returned 0xb7 [0209.551] CloseHandle (hObject=0x620) returned 1 [0209.551] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AppData\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d280 [0209.551] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.551] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0209.551] FindClose (in: hFindFile=0x665d90d280 | out: hFindFile=0x665d90d280) returned 1 [0209.551] SetLastError (dwErrCode=0x0) [0209.551] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AppData\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\appdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.552] GetLastError () returned 0x0 [0209.552] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0209.553] CloseHandle (hObject=0x620) returned 1 [0209.553] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0209.553] SetLastError (dwErrCode=0x0) [0209.553] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.554] GetLastError () returned 0xb7 [0209.554] CloseHandle (hObject=0x620) returned 1 [0209.554] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\LocalCache\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c080 [0209.555] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.555] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0209.555] FindClose (in: hFindFile=0x665d90c080 | out: hFindFile=0x665d90c080) returned 1 [0209.555] SetLastError (dwErrCode=0x0) [0209.555] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\LocalCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\localcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.556] GetLastError () returned 0x0 [0209.556] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0209.557] CloseHandle (hObject=0x620) returned 1 [0209.557] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0209.557] SetLastError (dwErrCode=0x0) [0209.557] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.558] GetLastError () returned 0xb7 [0209.558] CloseHandle (hObject=0x620) returned 1 [0209.558] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\LocalState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c500 [0209.558] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.558] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0209.558] FindClose (in: hFindFile=0x665d90c500 | out: hFindFile=0x665d90c500) returned 1 [0209.558] SetLastError (dwErrCode=0x0) [0209.558] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\LocalState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\localstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.560] GetLastError () returned 0x0 [0209.560] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0209.561] CloseHandle (hObject=0x620) returned 1 [0209.561] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0209.561] SetLastError (dwErrCode=0x0) [0209.562] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.562] GetLastError () returned 0xb7 [0209.562] CloseHandle (hObject=0x620) returned 1 [0209.562] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90ce60 [0209.563] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.563] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.563] SetLastError (dwErrCode=0x0) [0209.563] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\microsoft.bingnews_4.3.193.0_x86__8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0209.564] GetLastError () returned 0x0 [0209.564] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0209.565] CloseHandle (hObject=0x3e8) returned 1 [0209.565] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90d280 [0209.578] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0209.578] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0209.578] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0209.579] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", dwFileAttributes=0x80) returned 1 [0209.579] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\microsoft.bingnews_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0209.580] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=32768) returned 1 [0209.580] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=32768) returned 1 [0209.580] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x7ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0209.580] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0209.581] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0209.581] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a730) returned 1 [0209.581] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0209.582] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0209.582] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x8000, lpOverlapped=0x0) returned 1 [0209.584] CryptEncrypt (in: hKey=0x665ab9a730, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0209.584] CryptEncrypt (in: hKey=0x665ab9a730, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x8000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x8010) returned 1 [0209.584] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0209.584] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x8010, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x8010, lpOverlapped=0x0) returned 1 [0209.585] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0209.585] CryptExportKey (in: hKey=0x665ab9a730, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0209.585] CryptExportKey (in: hKey=0x665ab9a730, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0209.585] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0209.585] CloseHandle (hObject=0x654) returned 1 [0209.601] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0209.606] CryptDestroyKey (hKey=0x665ab9a730) returned 1 [0209.607] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0209.607] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0209.607] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0209.607] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", dwFileAttributes=0x80) returned 1 [0209.608] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\microsoft.bingnews_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0209.609] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=24576) returned 1 [0209.609] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=24576) returned 1 [0209.609] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x5ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0209.609] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0209.620] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0209.620] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a880) returned 1 [0209.620] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0209.621] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0209.621] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x6000, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x6000, lpOverlapped=0x0) returned 1 [0209.623] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0209.623] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x6000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x6010) returned 1 [0209.623] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0209.623] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x6010, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x6010, lpOverlapped=0x0) returned 1 [0209.623] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0209.624] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0209.624] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0209.624] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0209.624] CloseHandle (hObject=0x654) returned 1 [0209.643] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0209.648] CryptDestroyKey (hKey=0x665ab9a880) returned 1 [0209.648] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0209.648] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0209.648] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0209.649] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", dwFileAttributes=0x80) returned 1 [0209.649] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\microsoft.bingnews_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0209.650] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=0) returned 1 [0209.650] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=0) returned 1 [0209.650] CloseHandle (hObject=0x654) returned 1 [0209.650] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0209.650] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0209.651] FindClose (in: hFindFile=0x665d90d280 | out: hFindFile=0x665d90d280) returned 1 [0209.651] SetLastError (dwErrCode=0x0) [0209.651] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\microsoft.bingnews_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0209.651] GetLastError () returned 0x0 [0209.651] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0209.652] CloseHandle (hObject=0x3e8) returned 1 [0209.653] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0209.653] FindClose (in: hFindFile=0x665d90ce60 | out: hFindFile=0x665d90ce60) returned 1 [0209.653] SetLastError (dwErrCode=0x0) [0209.653] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\microsoft.bingnews_4.3.193.0_x86__8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.653] GetLastError () returned 0xb7 [0209.653] CloseHandle (hObject=0x620) returned 1 [0209.653] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0209.653] SetLastError (dwErrCode=0x0) [0209.654] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.654] GetLastError () returned 0xb7 [0209.654] CloseHandle (hObject=0x620) returned 1 [0209.654] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\RoamingState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d1c0 [0209.654] FindNextFileW (in: hFindFile=0x665d90d1c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.654] FindNextFileW (in: hFindFile=0x665d90d1c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0209.654] FindClose (in: hFindFile=0x665d90d1c0 | out: hFindFile=0x665d90d1c0) returned 1 [0209.654] SetLastError (dwErrCode=0x0) [0209.655] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\RoamingState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\roamingstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.656] GetLastError () returned 0x0 [0209.656] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0209.657] CloseHandle (hObject=0x620) returned 1 [0209.657] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0209.657] SetLastError (dwErrCode=0x0) [0209.657] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.658] GetLastError () returned 0xb7 [0209.658] CloseHandle (hObject=0x620) returned 1 [0209.658] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Settings\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90be40 [0209.658] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.658] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.658] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0209.658] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Settings\\roaming.lock", dwFileAttributes=0x80) returned 1 [0209.659] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0209.659] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=0) returned 1 [0209.659] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=0) returned 1 [0209.659] CloseHandle (hObject=0x3e8) returned 1 [0209.660] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0209.660] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.660] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0209.660] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Settings\\settings.dat", dwFileAttributes=0x80) returned 1 [0209.661] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0209.661] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=8192) returned 1 [0209.661] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=8192) returned 1 [0209.661] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x1ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0209.661] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0209.663] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0209.663] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9af10) returned 1 [0209.663] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0209.664] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0209.664] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0x2000, lpOverlapped=0x0) returned 1 [0209.665] CryptEncrypt (in: hKey=0x665ab9af10, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0209.665] CryptEncrypt (in: hKey=0x665ab9af10, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2010) returned 1 [0209.665] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0209.665] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0x2010, lpOverlapped=0x0) returned 1 [0209.665] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0209.665] CryptExportKey (in: hKey=0x665ab9af10, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0209.665] CryptExportKey (in: hKey=0x665ab9af10, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0209.666] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0209.666] CloseHandle (hObject=0x3e8) returned 1 [0209.688] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0209.693] CryptDestroyKey (hKey=0x665ab9af10) returned 1 [0209.693] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0209.693] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0209.694] FindClose (in: hFindFile=0x665d90be40 | out: hFindFile=0x665d90be40) returned 1 [0209.694] SetLastError (dwErrCode=0x0) [0209.694] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Settings\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\settings\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.694] GetLastError () returned 0x0 [0209.695] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0209.698] CloseHandle (hObject=0x620) returned 1 [0209.698] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0209.698] SetLastError (dwErrCode=0x0) [0209.698] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.699] GetLastError () returned 0xb7 [0209.699] CloseHandle (hObject=0x620) returned 1 [0209.699] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\SystemAppData\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bc60 [0209.699] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.699] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0209.699] FindClose (in: hFindFile=0x665d90bc60 | out: hFindFile=0x665d90bc60) returned 1 [0209.699] SetLastError (dwErrCode=0x0) [0209.699] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\SystemAppData\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\systemappdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.701] GetLastError () returned 0x0 [0209.701] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0209.702] CloseHandle (hObject=0x620) returned 1 [0209.702] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0209.702] SetLastError (dwErrCode=0x0) [0209.702] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.703] GetLastError () returned 0xb7 [0209.703] CloseHandle (hObject=0x620) returned 1 [0209.703] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\TempState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c500 [0209.703] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.703] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0209.703] FindClose (in: hFindFile=0x665d90c500 | out: hFindFile=0x665d90c500) returned 1 [0209.703] SetLastError (dwErrCode=0x0) [0209.703] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\TempState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\tempstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.705] GetLastError () returned 0x0 [0209.705] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0209.706] CloseHandle (hObject=0x620) returned 1 [0209.706] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0209.706] FindClose (in: hFindFile=0x665d90c4a0 | out: hFindFile=0x665d90c4a0) returned 1 [0209.706] SetLastError (dwErrCode=0x0) [0209.706] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0209.707] GetLastError () returned 0xb7 [0209.707] CloseHandle (hObject=0x60c) returned 1 [0209.707] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0209.707] SetLastError (dwErrCode=0x0) [0209.707] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0209.707] GetLastError () returned 0xb7 [0209.707] CloseHandle (hObject=0x60c) returned 1 [0209.707] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90cf20 [0209.721] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0209.721] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0209.721] SetLastError (dwErrCode=0x0) [0209.721] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.722] GetLastError () returned 0x0 [0209.722] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0209.723] CloseHandle (hObject=0x620) returned 1 [0209.723] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AC\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d280 [0209.725] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.725] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.725] SetLastError (dwErrCode=0x0) [0209.725] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0209.728] GetLastError () returned 0x0 [0209.728] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0209.729] CloseHandle (hObject=0x3e8) returned 1 [0209.729] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AC\\INetCache\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90cc20 [0209.730] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0209.730] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0209.730] FindClose (in: hFindFile=0x665d90cc20 | out: hFindFile=0x665d90cc20) returned 1 [0209.730] SetLastError (dwErrCode=0x0) [0209.730] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AC\\INetCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\ac\\inetcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0209.731] GetLastError () returned 0x0 [0209.731] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0209.733] CloseHandle (hObject=0x3e8) returned 1 [0209.733] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.733] SetLastError (dwErrCode=0x0) [0209.733] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0209.733] GetLastError () returned 0xb7 [0209.733] CloseHandle (hObject=0x3e8) returned 1 [0209.733] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AC\\INetCookies\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c800 [0209.734] FindNextFileW (in: hFindFile=0x665d90c800, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0209.734] FindNextFileW (in: hFindFile=0x665d90c800, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0209.734] FindClose (in: hFindFile=0x665d90c800 | out: hFindFile=0x665d90c800) returned 1 [0209.734] SetLastError (dwErrCode=0x0) [0209.734] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AC\\INetCookies\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\ac\\inetcookies\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0209.734] GetLastError () returned 0x0 [0209.734] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0209.735] CloseHandle (hObject=0x3e8) returned 1 [0209.735] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.736] SetLastError (dwErrCode=0x0) [0209.736] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0209.736] GetLastError () returned 0xb7 [0209.736] CloseHandle (hObject=0x3e8) returned 1 [0209.736] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AC\\INetHistory\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90caa0 [0209.736] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0209.736] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0209.736] FindClose (in: hFindFile=0x665d90caa0 | out: hFindFile=0x665d90caa0) returned 1 [0209.736] SetLastError (dwErrCode=0x0) [0209.736] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AC\\INetHistory\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\ac\\inethistory\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0209.737] GetLastError () returned 0x0 [0209.737] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0209.738] CloseHandle (hObject=0x3e8) returned 1 [0209.738] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.738] SetLastError (dwErrCode=0x0) [0209.738] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0209.739] GetLastError () returned 0xb7 [0209.739] CloseHandle (hObject=0x3e8) returned 1 [0209.739] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AC\\Temp\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bd80 [0209.739] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0209.739] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0209.739] FindClose (in: hFindFile=0x665d90bd80 | out: hFindFile=0x665d90bd80) returned 1 [0209.739] SetLastError (dwErrCode=0x0) [0209.739] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AC\\Temp\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\ac\\temp\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0209.740] GetLastError () returned 0x0 [0209.740] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0209.741] CloseHandle (hObject=0x3e8) returned 1 [0209.742] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0209.742] FindClose (in: hFindFile=0x665d90d280 | out: hFindFile=0x665d90d280) returned 1 [0209.742] SetLastError (dwErrCode=0x0) [0209.742] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.742] GetLastError () returned 0xb7 [0209.742] CloseHandle (hObject=0x620) returned 1 [0209.742] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0209.742] SetLastError (dwErrCode=0x0) [0209.742] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.743] GetLastError () returned 0xb7 [0209.743] CloseHandle (hObject=0x620) returned 1 [0209.743] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AppData\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bc60 [0209.743] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.743] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0209.743] FindClose (in: hFindFile=0x665d90bc60 | out: hFindFile=0x665d90bc60) returned 1 [0209.743] SetLastError (dwErrCode=0x0) [0209.743] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AppData\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\appdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.744] GetLastError () returned 0x0 [0209.744] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0209.745] CloseHandle (hObject=0x620) returned 1 [0209.745] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0209.745] SetLastError (dwErrCode=0x0) [0209.745] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.745] GetLastError () returned 0xb7 [0209.745] CloseHandle (hObject=0x620) returned 1 [0209.745] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\LocalCache\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d040 [0209.746] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.746] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0209.746] FindClose (in: hFindFile=0x665d90d040 | out: hFindFile=0x665d90d040) returned 1 [0209.746] SetLastError (dwErrCode=0x0) [0209.747] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\LocalCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\localcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.748] GetLastError () returned 0x0 [0209.748] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0209.749] CloseHandle (hObject=0x620) returned 1 [0209.749] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0209.749] SetLastError (dwErrCode=0x0) [0209.749] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.750] GetLastError () returned 0xb7 [0209.750] CloseHandle (hObject=0x620) returned 1 [0209.750] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\LocalState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d040 [0209.750] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.750] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0209.750] FindClose (in: hFindFile=0x665d90d040 | out: hFindFile=0x665d90d040) returned 1 [0209.750] SetLastError (dwErrCode=0x0) [0209.750] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\LocalState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\localstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.751] GetLastError () returned 0x0 [0209.751] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0209.752] CloseHandle (hObject=0x620) returned 1 [0209.752] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0209.752] SetLastError (dwErrCode=0x0) [0209.752] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.752] GetLastError () returned 0xb7 [0209.752] CloseHandle (hObject=0x620) returned 1 [0209.752] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90cce0 [0209.753] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.753] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.753] SetLastError (dwErrCode=0x0) [0209.753] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\microsoft.bingsports_4.3.193.0_x86__8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0209.754] GetLastError () returned 0x0 [0209.754] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0209.755] CloseHandle (hObject=0x3e8) returned 1 [0209.755] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90d040 [0209.757] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0209.757] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0209.757] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0209.758] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", dwFileAttributes=0x80) returned 1 [0209.760] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\microsoft.bingsports_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0209.761] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=32768) returned 1 [0209.761] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=32768) returned 1 [0209.761] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x7ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0209.761] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0209.762] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0209.762] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9aea0) returned 1 [0209.763] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0209.763] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0209.763] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x8000, lpOverlapped=0x0) returned 1 [0209.765] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0209.765] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x8000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x8010) returned 1 [0209.765] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0209.765] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x8010, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x8010, lpOverlapped=0x0) returned 1 [0209.766] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0209.766] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0209.766] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0209.766] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0209.766] CloseHandle (hObject=0x654) returned 1 [0209.783] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0209.788] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0209.788] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0209.788] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0209.789] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0209.789] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", dwFileAttributes=0x80) returned 1 [0209.790] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\microsoft.bingsports_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0209.790] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=24576) returned 1 [0209.790] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=24576) returned 1 [0209.790] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x5ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0209.791] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0209.803] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0209.803] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a0a0) returned 1 [0209.803] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0209.804] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0209.804] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x6000, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x6000, lpOverlapped=0x0) returned 1 [0209.806] CryptEncrypt (in: hKey=0x665ab9a0a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0209.806] CryptEncrypt (in: hKey=0x665ab9a0a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x6000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x6010) returned 1 [0209.807] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0209.807] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x6010, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x6010, lpOverlapped=0x0) returned 1 [0209.807] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0209.807] CryptExportKey (in: hKey=0x665ab9a0a0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0209.807] CryptExportKey (in: hKey=0x665ab9a0a0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0209.808] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0209.808] CloseHandle (hObject=0x654) returned 1 [0209.931] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0209.936] CryptDestroyKey (hKey=0x665ab9a0a0) returned 1 [0209.936] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0209.937] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0209.937] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0209.937] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", dwFileAttributes=0x80) returned 1 [0209.938] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\microsoft.bingsports_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0209.939] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=0) returned 1 [0209.939] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=0) returned 1 [0209.939] CloseHandle (hObject=0x654) returned 1 [0209.939] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0209.939] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0209.939] FindClose (in: hFindFile=0x665d90d040 | out: hFindFile=0x665d90d040) returned 1 [0209.939] SetLastError (dwErrCode=0x0) [0209.939] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\microsoft.bingsports_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0209.940] GetLastError () returned 0x0 [0209.940] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0209.942] CloseHandle (hObject=0x3e8) returned 1 [0209.942] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0209.942] FindClose (in: hFindFile=0x665d90cce0 | out: hFindFile=0x665d90cce0) returned 1 [0209.943] SetLastError (dwErrCode=0x0) [0209.943] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\microsoft.bingsports_4.3.193.0_x86__8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.943] GetLastError () returned 0xb7 [0209.943] CloseHandle (hObject=0x620) returned 1 [0209.943] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0209.943] SetLastError (dwErrCode=0x0) [0209.943] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.943] GetLastError () returned 0xb7 [0209.943] CloseHandle (hObject=0x620) returned 1 [0209.943] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\RoamingState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c260 [0209.944] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.944] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0209.944] FindClose (in: hFindFile=0x665d90c260 | out: hFindFile=0x665d90c260) returned 1 [0209.944] SetLastError (dwErrCode=0x0) [0209.944] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\RoamingState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\roamingstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.944] GetLastError () returned 0x0 [0209.944] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0209.945] CloseHandle (hObject=0x620) returned 1 [0209.945] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0209.945] SetLastError (dwErrCode=0x0) [0209.945] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.946] GetLastError () returned 0xb7 [0209.946] CloseHandle (hObject=0x620) returned 1 [0209.946] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Settings\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d2e0 [0209.946] FindNextFileW (in: hFindFile=0x665d90d2e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.947] FindNextFileW (in: hFindFile=0x665d90d2e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.947] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0209.947] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Settings\\roaming.lock", dwFileAttributes=0x80) returned 1 [0209.950] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0209.950] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=0) returned 1 [0209.950] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=0) returned 1 [0209.950] CloseHandle (hObject=0x3e8) returned 1 [0209.951] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0209.951] FindNextFileW (in: hFindFile=0x665d90d2e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.951] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0209.951] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Settings\\settings.dat", dwFileAttributes=0x80) returned 1 [0209.952] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0209.952] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=8192) returned 1 [0209.953] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=8192) returned 1 [0209.953] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x1ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0209.953] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0209.955] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0209.956] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9a110) returned 1 [0209.956] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0209.956] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0209.956] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0x2000, lpOverlapped=0x0) returned 1 [0209.957] CryptEncrypt (in: hKey=0x665ab9a110, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0209.957] CryptEncrypt (in: hKey=0x665ab9a110, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2010) returned 1 [0209.957] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0209.957] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0x2010, lpOverlapped=0x0) returned 1 [0209.958] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0209.958] CryptExportKey (in: hKey=0x665ab9a110, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0209.958] CryptExportKey (in: hKey=0x665ab9a110, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0209.958] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0209.958] CloseHandle (hObject=0x3e8) returned 1 [0209.978] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0209.984] CryptDestroyKey (hKey=0x665ab9a110) returned 1 [0209.984] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0209.984] FindNextFileW (in: hFindFile=0x665d90d2e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0209.984] FindClose (in: hFindFile=0x665d90d2e0 | out: hFindFile=0x665d90d2e0) returned 1 [0209.985] SetLastError (dwErrCode=0x0) [0209.985] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Settings\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\settings\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.986] GetLastError () returned 0x0 [0209.986] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0209.988] CloseHandle (hObject=0x620) returned 1 [0209.988] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0209.988] SetLastError (dwErrCode=0x0) [0209.988] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.991] GetLastError () returned 0xb7 [0209.991] CloseHandle (hObject=0x620) returned 1 [0209.991] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\SystemAppData\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bfc0 [0209.991] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.991] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0209.992] FindClose (in: hFindFile=0x665d90bfc0 | out: hFindFile=0x665d90bfc0) returned 1 [0209.992] SetLastError (dwErrCode=0x0) [0209.992] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\SystemAppData\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\systemappdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.993] GetLastError () returned 0x0 [0209.993] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0209.994] CloseHandle (hObject=0x620) returned 1 [0209.994] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0209.994] SetLastError (dwErrCode=0x0) [0209.994] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.995] GetLastError () returned 0xb7 [0209.995] CloseHandle (hObject=0x620) returned 1 [0209.995] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\TempState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c860 [0209.995] FindNextFileW (in: hFindFile=0x665d90c860, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0209.995] FindNextFileW (in: hFindFile=0x665d90c860, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0209.995] FindClose (in: hFindFile=0x665d90c860 | out: hFindFile=0x665d90c860) returned 1 [0209.996] SetLastError (dwErrCode=0x0) [0209.996] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\TempState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\tempstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0209.997] GetLastError () returned 0x0 [0209.997] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0209.998] CloseHandle (hObject=0x620) returned 1 [0209.998] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0209.998] FindClose (in: hFindFile=0x665d90cf20 | out: hFindFile=0x665d90cf20) returned 1 [0209.999] SetLastError (dwErrCode=0x0) [0209.999] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0209.999] GetLastError () returned 0xb7 [0209.999] CloseHandle (hObject=0x60c) returned 1 [0209.999] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0209.999] SetLastError (dwErrCode=0x0) [0209.999] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0209.999] GetLastError () returned 0xb7 [0209.999] CloseHandle (hObject=0x60c) returned 1 [0210.000] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90d0a0 [0210.002] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0210.002] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0210.002] SetLastError (dwErrCode=0x0) [0210.002] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.004] GetLastError () returned 0x0 [0210.004] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0210.005] CloseHandle (hObject=0x620) returned 1 [0210.005] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AC\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d040 [0210.017] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0210.017] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0210.017] SetLastError (dwErrCode=0x0) [0210.017] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0210.018] GetLastError () returned 0x0 [0210.018] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0210.019] CloseHandle (hObject=0x3e8) returned 1 [0210.020] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AC\\INetCache\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c740 [0210.021] FindNextFileW (in: hFindFile=0x665d90c740, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0210.021] FindNextFileW (in: hFindFile=0x665d90c740, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0210.021] FindClose (in: hFindFile=0x665d90c740 | out: hFindFile=0x665d90c740) returned 1 [0210.021] SetLastError (dwErrCode=0x0) [0210.021] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AC\\INetCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\ac\\inetcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0210.022] GetLastError () returned 0x0 [0210.022] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0210.023] CloseHandle (hObject=0x3e8) returned 1 [0210.023] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0210.023] SetLastError (dwErrCode=0x0) [0210.023] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0210.024] GetLastError () returned 0xb7 [0210.024] CloseHandle (hObject=0x3e8) returned 1 [0210.024] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AC\\INetCookies\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c560 [0210.027] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0210.027] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0210.027] FindClose (in: hFindFile=0x665d90c560 | out: hFindFile=0x665d90c560) returned 1 [0210.027] SetLastError (dwErrCode=0x0) [0210.027] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AC\\INetCookies\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\ac\\inetcookies\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0210.029] GetLastError () returned 0x0 [0210.029] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0210.031] CloseHandle (hObject=0x3e8) returned 1 [0210.032] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0210.032] SetLastError (dwErrCode=0x0) [0210.032] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0210.032] GetLastError () returned 0xb7 [0210.033] CloseHandle (hObject=0x3e8) returned 1 [0210.033] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AC\\INetHistory\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c980 [0210.033] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0210.033] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0210.033] FindClose (in: hFindFile=0x665d90c980 | out: hFindFile=0x665d90c980) returned 1 [0210.033] SetLastError (dwErrCode=0x0) [0210.033] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AC\\INetHistory\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\ac\\inethistory\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0210.035] GetLastError () returned 0x0 [0210.035] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0210.036] CloseHandle (hObject=0x3e8) returned 1 [0210.036] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0210.036] SetLastError (dwErrCode=0x0) [0210.036] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0210.037] GetLastError () returned 0xb7 [0210.037] CloseHandle (hObject=0x3e8) returned 1 [0210.037] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AC\\Temp\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c620 [0210.037] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0210.037] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0210.037] FindClose (in: hFindFile=0x665d90c620 | out: hFindFile=0x665d90c620) returned 1 [0210.037] SetLastError (dwErrCode=0x0) [0210.037] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AC\\Temp\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\ac\\temp\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0210.038] GetLastError () returned 0x0 [0210.038] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0210.041] CloseHandle (hObject=0x3e8) returned 1 [0210.041] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0210.041] FindClose (in: hFindFile=0x665d90d040 | out: hFindFile=0x665d90d040) returned 1 [0210.041] SetLastError (dwErrCode=0x0) [0210.041] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.042] GetLastError () returned 0xb7 [0210.042] CloseHandle (hObject=0x620) returned 1 [0210.042] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0210.042] SetLastError (dwErrCode=0x0) [0210.043] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.043] GetLastError () returned 0xb7 [0210.043] CloseHandle (hObject=0x620) returned 1 [0210.043] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AppData\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c1a0 [0210.043] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0210.043] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0210.043] FindClose (in: hFindFile=0x665d90c1a0 | out: hFindFile=0x665d90c1a0) returned 1 [0210.043] SetLastError (dwErrCode=0x0) [0210.043] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AppData\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\appdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.046] GetLastError () returned 0x0 [0210.046] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0210.048] CloseHandle (hObject=0x620) returned 1 [0210.048] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0210.048] SetLastError (dwErrCode=0x0) [0210.048] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.049] GetLastError () returned 0xb7 [0210.049] CloseHandle (hObject=0x620) returned 1 [0210.049] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\LocalCache\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c800 [0210.051] FindNextFileW (in: hFindFile=0x665d90c800, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0210.051] FindNextFileW (in: hFindFile=0x665d90c800, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0210.051] FindClose (in: hFindFile=0x665d90c800 | out: hFindFile=0x665d90c800) returned 1 [0210.051] SetLastError (dwErrCode=0x0) [0210.051] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\LocalCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\localcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.053] GetLastError () returned 0x0 [0210.053] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0210.054] CloseHandle (hObject=0x620) returned 1 [0210.054] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0210.054] SetLastError (dwErrCode=0x0) [0210.055] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.055] GetLastError () returned 0xb7 [0210.055] CloseHandle (hObject=0x620) returned 1 [0210.056] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\LocalState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d280 [0210.056] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0210.056] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0210.056] FindClose (in: hFindFile=0x665d90d280 | out: hFindFile=0x665d90d280) returned 1 [0210.056] SetLastError (dwErrCode=0x0) [0210.056] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\LocalState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\localstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.057] GetLastError () returned 0x0 [0210.057] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0210.059] CloseHandle (hObject=0x620) returned 1 [0210.059] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0210.059] SetLastError (dwErrCode=0x0) [0210.059] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.059] GetLastError () returned 0xb7 [0210.060] CloseHandle (hObject=0x620) returned 1 [0210.060] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c980 [0210.060] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0210.060] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0210.060] SetLastError (dwErrCode=0x0) [0210.060] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\microsoft.bingweather_4.3.193.0_x86__8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0210.063] GetLastError () returned 0x0 [0210.063] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0210.064] CloseHandle (hObject=0x3e8) returned 1 [0210.064] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bfc0 [0210.067] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0210.067] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0210.068] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0210.068] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", dwFileAttributes=0x80) returned 1 [0210.069] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\microsoft.bingweather_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0210.070] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=32768) returned 1 [0210.070] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=32768) returned 1 [0210.070] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x7ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.070] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0210.071] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0210.071] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a5e0) returned 1 [0210.071] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0210.072] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0210.072] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x8000, lpOverlapped=0x0) returned 1 [0210.079] CryptEncrypt (in: hKey=0x665ab9a5e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0210.079] CryptEncrypt (in: hKey=0x665ab9a5e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x8000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x8010) returned 1 [0210.079] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0210.079] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x8010, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x8010, lpOverlapped=0x0) returned 1 [0210.080] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0210.080] CryptExportKey (in: hKey=0x665ab9a5e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0210.080] CryptExportKey (in: hKey=0x665ab9a5e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0210.080] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0210.080] CloseHandle (hObject=0x654) returned 1 [0210.100] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0210.106] CryptDestroyKey (hKey=0x665ab9a5e0) returned 1 [0210.106] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0210.106] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0210.106] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0210.107] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", dwFileAttributes=0x80) returned 1 [0210.107] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\microsoft.bingweather_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0210.108] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=24576) returned 1 [0210.108] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=24576) returned 1 [0210.108] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x5ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.108] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0210.115] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0210.115] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a110) returned 1 [0210.115] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0210.115] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0210.115] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x6000, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x6000, lpOverlapped=0x0) returned 1 [0210.116] CryptEncrypt (in: hKey=0x665ab9a110, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0210.116] CryptEncrypt (in: hKey=0x665ab9a110, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x6000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x6010) returned 1 [0210.117] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0210.117] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x6010, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x6010, lpOverlapped=0x0) returned 1 [0210.117] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0210.117] CryptExportKey (in: hKey=0x665ab9a110, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0210.117] CryptExportKey (in: hKey=0x665ab9a110, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0210.118] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0210.118] CloseHandle (hObject=0x654) returned 1 [0210.135] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0210.140] CryptDestroyKey (hKey=0x665ab9a110) returned 1 [0210.140] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0210.141] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0210.141] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0210.141] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", dwFileAttributes=0x80) returned 1 [0210.142] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\microsoft.bingweather_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0210.142] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=0) returned 1 [0210.142] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=0) returned 1 [0210.142] CloseHandle (hObject=0x654) returned 1 [0210.142] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0210.143] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0210.143] FindClose (in: hFindFile=0x665d90bfc0 | out: hFindFile=0x665d90bfc0) returned 1 [0210.143] SetLastError (dwErrCode=0x0) [0210.143] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\microsoft.bingweather_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0210.143] GetLastError () returned 0x0 [0210.143] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0210.144] CloseHandle (hObject=0x3e8) returned 1 [0210.144] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0210.145] FindClose (in: hFindFile=0x665d90c980 | out: hFindFile=0x665d90c980) returned 1 [0210.145] SetLastError (dwErrCode=0x0) [0210.145] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\microsoft.bingweather_4.3.193.0_x86__8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.145] GetLastError () returned 0xb7 [0210.145] CloseHandle (hObject=0x620) returned 1 [0210.145] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0210.145] SetLastError (dwErrCode=0x0) [0210.145] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.145] GetLastError () returned 0xb7 [0210.145] CloseHandle (hObject=0x620) returned 1 [0210.145] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\RoamingState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d100 [0210.146] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0210.146] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0210.146] FindClose (in: hFindFile=0x665d90d100 | out: hFindFile=0x665d90d100) returned 1 [0210.146] SetLastError (dwErrCode=0x0) [0210.146] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\RoamingState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\roamingstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.147] GetLastError () returned 0x0 [0210.147] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0210.148] CloseHandle (hObject=0x620) returned 1 [0210.148] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0210.148] SetLastError (dwErrCode=0x0) [0210.148] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.149] GetLastError () returned 0xb7 [0210.149] CloseHandle (hObject=0x620) returned 1 [0210.149] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Settings\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c320 [0210.149] FindNextFileW (in: hFindFile=0x665d90c320, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0210.149] FindNextFileW (in: hFindFile=0x665d90c320, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0210.149] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0210.149] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Settings\\roaming.lock", dwFileAttributes=0x80) returned 1 [0210.150] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0210.150] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=0) returned 1 [0210.151] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=0) returned 1 [0210.151] CloseHandle (hObject=0x3e8) returned 1 [0210.151] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0210.151] FindNextFileW (in: hFindFile=0x665d90c320, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0210.151] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0210.151] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Settings\\settings.dat", dwFileAttributes=0x80) returned 1 [0210.152] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0210.152] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=8192) returned 1 [0210.152] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=8192) returned 1 [0210.153] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x1ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.153] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0210.154] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0210.154] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9aea0) returned 1 [0210.154] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0210.155] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0210.155] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0x2000, lpOverlapped=0x0) returned 1 [0210.155] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0210.155] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2010) returned 1 [0210.156] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0210.156] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0x2010, lpOverlapped=0x0) returned 1 [0210.156] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0210.156] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0210.156] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0210.157] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0210.157] CloseHandle (hObject=0x3e8) returned 1 [0210.175] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0210.180] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0210.180] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0210.180] FindNextFileW (in: hFindFile=0x665d90c320, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0210.180] FindClose (in: hFindFile=0x665d90c320 | out: hFindFile=0x665d90c320) returned 1 [0210.180] SetLastError (dwErrCode=0x0) [0210.180] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Settings\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\settings\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.182] GetLastError () returned 0x0 [0210.182] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0210.183] CloseHandle (hObject=0x620) returned 1 [0210.183] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0210.183] SetLastError (dwErrCode=0x0) [0210.183] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.183] GetLastError () returned 0xb7 [0210.183] CloseHandle (hObject=0x620) returned 1 [0210.183] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\SystemAppData\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c680 [0210.184] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0210.184] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0210.184] FindClose (in: hFindFile=0x665d90c680 | out: hFindFile=0x665d90c680) returned 1 [0210.184] SetLastError (dwErrCode=0x0) [0210.184] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\SystemAppData\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\systemappdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.184] GetLastError () returned 0x0 [0210.184] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0210.185] CloseHandle (hObject=0x620) returned 1 [0210.185] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0210.186] SetLastError (dwErrCode=0x0) [0210.186] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.186] GetLastError () returned 0xb7 [0210.186] CloseHandle (hObject=0x620) returned 1 [0210.186] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\TempState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90cc20 [0210.186] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0210.186] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0210.186] FindClose (in: hFindFile=0x665d90cc20 | out: hFindFile=0x665d90cc20) returned 1 [0210.186] SetLastError (dwErrCode=0x0) [0210.186] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\TempState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\tempstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.187] GetLastError () returned 0x0 [0210.187] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0210.188] CloseHandle (hObject=0x620) returned 1 [0210.188] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0210.188] FindClose (in: hFindFile=0x665d90d0a0 | out: hFindFile=0x665d90d0a0) returned 1 [0210.188] SetLastError (dwErrCode=0x0) [0210.188] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0210.189] GetLastError () returned 0xb7 [0210.189] CloseHandle (hObject=0x60c) returned 1 [0210.189] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0210.189] SetLastError (dwErrCode=0x0) [0210.189] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0210.189] GetLastError () returned 0xb7 [0210.189] CloseHandle (hObject=0x60c) returned 1 [0210.189] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90ca40 [0210.192] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0210.192] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0210.192] SetLastError (dwErrCode=0x0) [0210.192] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.193] GetLastError () returned 0x0 [0210.193] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0210.194] CloseHandle (hObject=0x620) returned 1 [0210.195] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c800 [0210.231] FindNextFileW (in: hFindFile=0x665d90c800, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0210.231] FindNextFileW (in: hFindFile=0x665d90c800, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0210.231] SetLastError (dwErrCode=0x0) [0210.231] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0210.237] GetLastError () returned 0x0 [0210.238] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0210.239] CloseHandle (hObject=0x3e8) returned 1 [0210.239] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\INetCache\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c860 [0210.241] FindNextFileW (in: hFindFile=0x665d90c860, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0210.241] FindNextFileW (in: hFindFile=0x665d90c860, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0210.241] FindClose (in: hFindFile=0x665d90c860 | out: hFindFile=0x665d90c860) returned 1 [0210.241] SetLastError (dwErrCode=0x0) [0210.241] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\INetCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\ac\\inetcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0210.242] GetLastError () returned 0x0 [0210.242] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0210.243] CloseHandle (hObject=0x3e8) returned 1 [0210.244] FindNextFileW (in: hFindFile=0x665d90c800, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0210.244] SetLastError (dwErrCode=0x0) [0210.244] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0210.244] GetLastError () returned 0xb7 [0210.244] CloseHandle (hObject=0x3e8) returned 1 [0210.244] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\INetCookies\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90d1c0 [0210.245] FindNextFileW (in: hFindFile=0x665d90d1c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0210.245] FindNextFileW (in: hFindFile=0x665d90d1c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0210.245] FindClose (in: hFindFile=0x665d90d1c0 | out: hFindFile=0x665d90d1c0) returned 1 [0210.245] SetLastError (dwErrCode=0x0) [0210.245] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\INetCookies\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\ac\\inetcookies\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0210.246] GetLastError () returned 0x0 [0210.246] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0210.247] CloseHandle (hObject=0x3e8) returned 1 [0210.247] FindNextFileW (in: hFindFile=0x665d90c800, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0210.247] SetLastError (dwErrCode=0x0) [0210.247] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0210.248] GetLastError () returned 0xb7 [0210.248] CloseHandle (hObject=0x3e8) returned 1 [0210.248] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\INetHistory\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90be40 [0210.248] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0210.248] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0210.248] FindClose (in: hFindFile=0x665d90be40 | out: hFindFile=0x665d90be40) returned 1 [0210.248] SetLastError (dwErrCode=0x0) [0210.248] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\INetHistory\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\ac\\inethistory\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0210.249] GetLastError () returned 0x0 [0210.249] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0210.250] CloseHandle (hObject=0x3e8) returned 1 [0210.250] FindNextFileW (in: hFindFile=0x665d90c800, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0210.250] SetLastError (dwErrCode=0x0) [0210.250] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0210.251] GetLastError () returned 0xb7 [0210.251] CloseHandle (hObject=0x3e8) returned 1 [0210.251] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\Temp\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c860 [0210.251] FindNextFileW (in: hFindFile=0x665d90c860, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0210.251] FindNextFileW (in: hFindFile=0x665d90c860, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0210.251] FindClose (in: hFindFile=0x665d90c860 | out: hFindFile=0x665d90c860) returned 1 [0210.251] SetLastError (dwErrCode=0x0) [0210.251] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\Temp\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\ac\\temp\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0210.252] GetLastError () returned 0x0 [0210.252] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0210.253] CloseHandle (hObject=0x3e8) returned 1 [0210.253] FindNextFileW (in: hFindFile=0x665d90c800, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0210.253] FindClose (in: hFindFile=0x665d90c800 | out: hFindFile=0x665d90c800) returned 1 [0210.253] SetLastError (dwErrCode=0x0) [0210.253] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.253] GetLastError () returned 0xb7 [0210.253] CloseHandle (hObject=0x620) returned 1 [0210.253] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0210.253] SetLastError (dwErrCode=0x0) [0210.253] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.254] GetLastError () returned 0xb7 [0210.254] CloseHandle (hObject=0x620) returned 1 [0210.254] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AppData\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c980 [0210.255] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0210.255] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0210.255] FindClose (in: hFindFile=0x665d90c980 | out: hFindFile=0x665d90c980) returned 1 [0210.255] SetLastError (dwErrCode=0x0) [0210.255] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AppData\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\appdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.257] GetLastError () returned 0x0 [0210.257] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0210.258] CloseHandle (hObject=0x620) returned 1 [0210.259] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0210.259] SetLastError (dwErrCode=0x0) [0210.259] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.260] GetLastError () returned 0xb7 [0210.260] CloseHandle (hObject=0x620) returned 1 [0210.260] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\LocalCache\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c980 [0210.260] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0210.260] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0210.260] FindClose (in: hFindFile=0x665d90c980 | out: hFindFile=0x665d90c980) returned 1 [0210.260] SetLastError (dwErrCode=0x0) [0210.260] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\LocalCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\localcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.261] GetLastError () returned 0x0 [0210.261] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0210.262] CloseHandle (hObject=0x620) returned 1 [0210.262] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0210.262] SetLastError (dwErrCode=0x0) [0210.262] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.263] GetLastError () returned 0xb7 [0210.263] CloseHandle (hObject=0x620) returned 1 [0210.263] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\LocalState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c920 [0210.263] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0210.263] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0210.263] FindClose (in: hFindFile=0x665d90c920 | out: hFindFile=0x665d90c920) returned 1 [0210.263] SetLastError (dwErrCode=0x0) [0210.263] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\LocalState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\localstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.264] GetLastError () returned 0x0 [0210.264] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0210.265] CloseHandle (hObject=0x620) returned 1 [0210.265] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0210.265] SetLastError (dwErrCode=0x0) [0210.265] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.266] GetLastError () returned 0xb7 [0210.266] CloseHandle (hObject=0x620) returned 1 [0210.266] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c0e0 [0210.267] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0210.267] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0210.267] SetLastError (dwErrCode=0x0) [0210.267] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\microsoft.bioenrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0210.270] GetLastError () returned 0x0 [0210.270] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0210.271] CloseHandle (hObject=0x3e8) returned 1 [0210.271] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c440 [0210.273] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0210.273] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0210.273] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0210.274] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", dwFileAttributes=0x80) returned 1 [0210.276] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\microsoft.bioenrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0210.276] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=8192) returned 1 [0210.277] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=8192) returned 1 [0210.277] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x1ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.277] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0210.278] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0210.278] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a730) returned 1 [0210.278] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0210.279] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0210.279] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x2000, lpOverlapped=0x0) returned 1 [0210.283] CryptEncrypt (in: hKey=0x665ab9a730, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0210.283] CryptEncrypt (in: hKey=0x665ab9a730, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x2000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x2010) returned 1 [0210.283] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0210.283] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x2010, lpOverlapped=0x0) returned 1 [0210.284] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0210.284] CryptExportKey (in: hKey=0x665ab9a730, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0210.284] CryptExportKey (in: hKey=0x665ab9a730, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0210.284] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0210.284] CloseHandle (hObject=0x654) returned 1 [0210.302] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0210.308] CryptDestroyKey (hKey=0x665ab9a730) returned 1 [0210.308] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0210.308] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0210.308] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0210.309] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", dwFileAttributes=0x80) returned 1 [0210.309] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\microsoft.bioenrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0210.310] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=8192) returned 1 [0210.310] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=8192) returned 1 [0210.310] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x1ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.310] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0210.317] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0210.317] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9af10) returned 1 [0210.317] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0210.317] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0210.317] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x2000, lpOverlapped=0x0) returned 1 [0210.318] CryptEncrypt (in: hKey=0x665ab9af10, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0210.318] CryptEncrypt (in: hKey=0x665ab9af10, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x2000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x2010) returned 1 [0210.319] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0210.319] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x2010, lpOverlapped=0x0) returned 1 [0210.319] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0210.319] CryptExportKey (in: hKey=0x665ab9af10, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0210.319] CryptExportKey (in: hKey=0x665ab9af10, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0210.319] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0210.320] CloseHandle (hObject=0x654) returned 1 [0210.339] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0210.343] CryptDestroyKey (hKey=0x665ab9af10) returned 1 [0210.343] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0210.343] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0210.343] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0210.343] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", dwFileAttributes=0x80) returned 1 [0210.344] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\microsoft.bioenrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0210.344] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=0) returned 1 [0210.344] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=0) returned 1 [0210.345] CloseHandle (hObject=0x654) returned 1 [0210.345] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0210.345] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0210.345] FindClose (in: hFindFile=0x665d90c440 | out: hFindFile=0x665d90c440) returned 1 [0210.345] SetLastError (dwErrCode=0x0) [0210.345] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\microsoft.bioenrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0210.345] GetLastError () returned 0x0 [0210.345] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0210.346] CloseHandle (hObject=0x3e8) returned 1 [0210.346] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0210.346] FindClose (in: hFindFile=0x665d90c0e0 | out: hFindFile=0x665d90c0e0) returned 1 [0210.346] SetLastError (dwErrCode=0x0) [0210.346] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\microsoft.bioenrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.347] GetLastError () returned 0xb7 [0210.347] CloseHandle (hObject=0x620) returned 1 [0210.347] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0210.347] SetLastError (dwErrCode=0x0) [0210.347] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.347] GetLastError () returned 0xb7 [0210.347] CloseHandle (hObject=0x620) returned 1 [0210.347] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\RoamingState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bc60 [0210.347] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0210.347] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0210.347] FindClose (in: hFindFile=0x665d90bc60 | out: hFindFile=0x665d90bc60) returned 1 [0210.347] SetLastError (dwErrCode=0x0) [0210.347] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\RoamingState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\roamingstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.348] GetLastError () returned 0x0 [0210.348] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0210.349] CloseHandle (hObject=0x620) returned 1 [0210.349] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0210.349] SetLastError (dwErrCode=0x0) [0210.349] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.349] GetLastError () returned 0xb7 [0210.349] CloseHandle (hObject=0x620) returned 1 [0210.349] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90caa0 [0210.350] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0210.350] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0210.351] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0210.351] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\roaming.lock", dwFileAttributes=0x80) returned 1 [0210.351] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0210.352] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=0) returned 1 [0210.352] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=0) returned 1 [0210.352] CloseHandle (hObject=0x3e8) returned 1 [0210.352] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0210.352] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0210.352] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0210.353] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat", dwFileAttributes=0x80) returned 1 [0210.353] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0210.354] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=8192) returned 1 [0210.354] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=8192) returned 1 [0210.354] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x1ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.354] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0210.355] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0210.355] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9af10) returned 1 [0210.355] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0210.355] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0210.355] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0x2000, lpOverlapped=0x0) returned 1 [0210.356] CryptEncrypt (in: hKey=0x665ab9af10, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0210.356] CryptEncrypt (in: hKey=0x665ab9af10, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2010) returned 1 [0210.356] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0210.356] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0x2010, lpOverlapped=0x0) returned 1 [0210.356] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0210.357] CryptExportKey (in: hKey=0x665ab9af10, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0210.357] CryptExportKey (in: hKey=0x665ab9af10, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0210.357] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0210.357] CloseHandle (hObject=0x3e8) returned 1 [0210.373] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0210.377] CryptDestroyKey (hKey=0x665ab9af10) returned 1 [0210.377] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0210.378] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0210.378] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0210.378] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", dwFileAttributes=0x80) returned 1 [0210.379] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0210.379] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=8192) returned 1 [0210.379] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=8192) returned 1 [0210.379] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x1ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.379] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0210.381] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0210.381] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9aab0) returned 1 [0210.381] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0210.381] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0210.381] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0x2000, lpOverlapped=0x0) returned 1 [0210.382] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0210.382] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2010) returned 1 [0210.382] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0210.382] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0x2010, lpOverlapped=0x0) returned 1 [0210.383] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0210.383] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0210.383] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0210.383] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0210.383] CloseHandle (hObject=0x3e8) returned 1 [0210.399] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0210.404] CryptDestroyKey (hKey=0x665ab9aab0) returned 1 [0210.404] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0210.404] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0210.404] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0210.404] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", dwFileAttributes=0x80) returned 1 [0210.405] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0210.405] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=0) returned 1 [0210.405] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=0) returned 1 [0210.405] CloseHandle (hObject=0x3e8) returned 1 [0210.405] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0210.406] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0210.406] FindClose (in: hFindFile=0x665d90caa0 | out: hFindFile=0x665d90caa0) returned 1 [0210.406] SetLastError (dwErrCode=0x0) [0210.406] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\settings\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.406] GetLastError () returned 0x0 [0210.406] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0210.407] CloseHandle (hObject=0x620) returned 1 [0210.407] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0210.407] SetLastError (dwErrCode=0x0) [0210.407] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.407] GetLastError () returned 0xb7 [0210.407] CloseHandle (hObject=0x620) returned 1 [0210.407] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\SystemAppData\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bde0 [0210.407] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0210.408] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0210.408] FindClose (in: hFindFile=0x665d90bde0 | out: hFindFile=0x665d90bde0) returned 1 [0210.408] SetLastError (dwErrCode=0x0) [0210.408] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\SystemAppData\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\systemappdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.409] GetLastError () returned 0x0 [0210.409] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0210.410] CloseHandle (hObject=0x620) returned 1 [0210.410] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0210.410] SetLastError (dwErrCode=0x0) [0210.410] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.410] GetLastError () returned 0xb7 [0210.410] CloseHandle (hObject=0x620) returned 1 [0210.410] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\TempState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90cbc0 [0210.410] FindNextFileW (in: hFindFile=0x665d90cbc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0210.410] FindNextFileW (in: hFindFile=0x665d90cbc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0210.410] FindClose (in: hFindFile=0x665d90cbc0 | out: hFindFile=0x665d90cbc0) returned 1 [0210.410] SetLastError (dwErrCode=0x0) [0210.410] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\TempState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\tempstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.411] GetLastError () returned 0x0 [0210.411] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0210.412] CloseHandle (hObject=0x620) returned 1 [0210.412] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0210.412] FindClose (in: hFindFile=0x665d90ca40 | out: hFindFile=0x665d90ca40) returned 1 [0210.412] SetLastError (dwErrCode=0x0) [0210.412] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0210.412] GetLastError () returned 0xb7 [0210.412] CloseHandle (hObject=0x60c) returned 1 [0210.412] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0210.412] SetLastError (dwErrCode=0x0) [0210.412] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0210.413] GetLastError () returned 0xb7 [0210.413] CloseHandle (hObject=0x60c) returned 1 [0210.413] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90cb60 [0210.415] FindNextFileW (in: hFindFile=0x665d90cb60, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0210.415] FindNextFileW (in: hFindFile=0x665d90cb60, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0210.415] SetLastError (dwErrCode=0x0) [0210.415] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.416] GetLastError () returned 0x0 [0210.416] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0210.417] CloseHandle (hObject=0x620) returned 1 [0210.417] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c500 [0210.419] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0210.419] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0210.419] SetLastError (dwErrCode=0x0) [0210.419] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0210.420] GetLastError () returned 0x0 [0210.420] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0210.421] CloseHandle (hObject=0x3e8) returned 1 [0210.421] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\INetCache\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bc60 [0210.422] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0210.422] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0210.422] FindClose (in: hFindFile=0x665d90bc60 | out: hFindFile=0x665d90bc60) returned 1 [0210.422] SetLastError (dwErrCode=0x0) [0210.422] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\INetCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\ac\\inetcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0210.423] GetLastError () returned 0x0 [0210.423] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0210.424] CloseHandle (hObject=0x3e8) returned 1 [0210.424] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0210.424] SetLastError (dwErrCode=0x0) [0210.424] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0210.424] GetLastError () returned 0xb7 [0210.424] CloseHandle (hObject=0x3e8) returned 1 [0210.424] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\INetCookies\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90ca40 [0210.425] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0210.425] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0210.425] FindClose (in: hFindFile=0x665d90ca40 | out: hFindFile=0x665d90ca40) returned 1 [0210.425] SetLastError (dwErrCode=0x0) [0210.425] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\INetCookies\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\ac\\inetcookies\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0210.426] GetLastError () returned 0x0 [0210.426] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0210.426] CloseHandle (hObject=0x3e8) returned 1 [0210.427] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0210.427] SetLastError (dwErrCode=0x0) [0210.427] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0210.427] GetLastError () returned 0xb7 [0210.427] CloseHandle (hObject=0x3e8) returned 1 [0210.427] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\INetHistory\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bd20 [0210.427] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0210.427] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0210.427] FindClose (in: hFindFile=0x665d90bd20 | out: hFindFile=0x665d90bd20) returned 1 [0210.427] SetLastError (dwErrCode=0x0) [0210.427] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\INetHistory\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\ac\\inethistory\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0210.429] GetLastError () returned 0x0 [0210.430] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0210.430] CloseHandle (hObject=0x3e8) returned 1 [0210.430] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0210.431] SetLastError (dwErrCode=0x0) [0210.431] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0210.431] GetLastError () returned 0xb7 [0210.431] CloseHandle (hObject=0x3e8) returned 1 [0210.431] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\Temp\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90d0a0 [0210.431] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0210.431] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0210.431] FindClose (in: hFindFile=0x665d90d0a0 | out: hFindFile=0x665d90d0a0) returned 1 [0210.431] SetLastError (dwErrCode=0x0) [0210.431] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\Temp\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\ac\\temp\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0210.432] GetLastError () returned 0x0 [0210.432] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0210.433] CloseHandle (hObject=0x3e8) returned 1 [0210.433] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0210.433] FindClose (in: hFindFile=0x665d90c500 | out: hFindFile=0x665d90c500) returned 1 [0210.433] SetLastError (dwErrCode=0x0) [0210.433] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.433] GetLastError () returned 0xb7 [0210.433] CloseHandle (hObject=0x620) returned 1 [0210.433] FindNextFileW (in: hFindFile=0x665d90cb60, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0210.433] SetLastError (dwErrCode=0x0) [0210.433] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.434] GetLastError () returned 0xb7 [0210.434] CloseHandle (hObject=0x620) returned 1 [0210.434] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AppData\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c560 [0210.434] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0210.434] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0210.434] FindClose (in: hFindFile=0x665d90c560 | out: hFindFile=0x665d90c560) returned 1 [0210.434] SetLastError (dwErrCode=0x0) [0210.434] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AppData\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\appdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.435] GetLastError () returned 0x0 [0210.435] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0210.436] CloseHandle (hObject=0x620) returned 1 [0210.436] FindNextFileW (in: hFindFile=0x665d90cb60, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0210.436] SetLastError (dwErrCode=0x0) [0210.436] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.436] GetLastError () returned 0xb7 [0210.436] CloseHandle (hObject=0x620) returned 1 [0210.436] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\LocalCache\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d040 [0210.437] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0210.437] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0210.437] FindClose (in: hFindFile=0x665d90d040 | out: hFindFile=0x665d90d040) returned 1 [0210.437] SetLastError (dwErrCode=0x0) [0210.438] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\LocalCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\localcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.438] GetLastError () returned 0x0 [0210.438] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0210.439] CloseHandle (hObject=0x620) returned 1 [0210.439] FindNextFileW (in: hFindFile=0x665d90cb60, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0210.439] SetLastError (dwErrCode=0x0) [0210.439] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.439] GetLastError () returned 0xb7 [0210.439] CloseHandle (hObject=0x620) returned 1 [0210.439] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\LocalState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90ca40 [0210.440] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0210.440] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0210.440] FindClose (in: hFindFile=0x665d90ca40 | out: hFindFile=0x665d90ca40) returned 1 [0210.440] SetLastError (dwErrCode=0x0) [0210.440] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\LocalState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\localstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.441] GetLastError () returned 0x0 [0210.441] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0210.442] CloseHandle (hObject=0x620) returned 1 [0210.442] FindNextFileW (in: hFindFile=0x665d90cb60, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0210.442] SetLastError (dwErrCode=0x0) [0210.442] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.442] GetLastError () returned 0xb7 [0210.442] CloseHandle (hObject=0x620) returned 1 [0210.442] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bc60 [0210.442] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0210.443] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0210.443] SetLastError (dwErrCode=0x0) [0210.443] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\microsoft.getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0210.443] GetLastError () returned 0x0 [0210.443] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0210.444] CloseHandle (hObject=0x3e8) returned 1 [0210.444] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c980 [0210.461] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0210.461] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0210.461] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0210.462] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", dwFileAttributes=0x80) returned 1 [0210.462] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\microsoft.getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0210.463] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=16384) returned 1 [0210.463] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=16384) returned 1 [0210.463] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x3ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.463] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0210.464] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0210.464] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a110) returned 1 [0210.464] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0210.464] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0210.464] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x4000, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x4000, lpOverlapped=0x0) returned 1 [0210.481] CryptEncrypt (in: hKey=0x665ab9a110, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0210.481] CryptEncrypt (in: hKey=0x665ab9a110, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x4000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x4010) returned 1 [0210.481] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0210.481] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x4010, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x4010, lpOverlapped=0x0) returned 1 [0210.482] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0210.482] CryptExportKey (in: hKey=0x665ab9a110, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0210.482] CryptExportKey (in: hKey=0x665ab9a110, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0210.482] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0210.482] CloseHandle (hObject=0x654) returned 1 [0210.496] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0210.500] CryptDestroyKey (hKey=0x665ab9a110) returned 1 [0210.500] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0210.500] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0210.500] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0210.501] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", dwFileAttributes=0x80) returned 1 [0210.501] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\microsoft.getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0210.502] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=12288) returned 1 [0210.502] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=12288) returned 1 [0210.502] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x2ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.502] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0210.503] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0210.503] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a420) returned 1 [0210.503] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0210.503] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0210.503] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x3000, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x3000, lpOverlapped=0x0) returned 1 [0210.504] CryptEncrypt (in: hKey=0x665ab9a420, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0210.504] CryptEncrypt (in: hKey=0x665ab9a420, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x3000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x3010) returned 1 [0210.504] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0210.504] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x3010, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x3010, lpOverlapped=0x0) returned 1 [0210.505] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0210.505] CryptExportKey (in: hKey=0x665ab9a420, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0210.505] CryptExportKey (in: hKey=0x665ab9a420, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0210.505] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0210.505] CloseHandle (hObject=0x654) returned 1 [0210.519] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0210.524] CryptDestroyKey (hKey=0x665ab9a420) returned 1 [0210.524] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0210.524] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0210.524] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0210.524] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", dwFileAttributes=0x80) returned 1 [0210.527] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\microsoft.getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0210.528] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=0) returned 1 [0210.528] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=0) returned 1 [0210.528] CloseHandle (hObject=0x654) returned 1 [0210.528] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0210.528] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0210.528] FindClose (in: hFindFile=0x665d90c980 | out: hFindFile=0x665d90c980) returned 1 [0210.528] SetLastError (dwErrCode=0x0) [0210.528] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\microsoft.getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\activationstore\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0210.530] GetLastError () returned 0x0 [0210.530] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0210.530] CloseHandle (hObject=0x3e8) returned 1 [0210.530] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0210.530] FindClose (in: hFindFile=0x665d90bc60 | out: hFindFile=0x665d90bc60) returned 1 [0210.531] SetLastError (dwErrCode=0x0) [0210.531] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\microsoft.getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.531] GetLastError () returned 0xb7 [0210.531] CloseHandle (hObject=0x620) returned 1 [0210.531] FindNextFileW (in: hFindFile=0x665d90cb60, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0210.531] SetLastError (dwErrCode=0x0) [0210.531] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.531] GetLastError () returned 0xb7 [0210.531] CloseHandle (hObject=0x620) returned 1 [0210.531] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\RoamingState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c4a0 [0210.531] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0210.531] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0210.531] FindClose (in: hFindFile=0x665d90c4a0 | out: hFindFile=0x665d90c4a0) returned 1 [0210.531] SetLastError (dwErrCode=0x0) [0210.532] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\RoamingState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\roamingstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.532] GetLastError () returned 0x0 [0210.532] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0210.533] CloseHandle (hObject=0x620) returned 1 [0210.533] FindNextFileW (in: hFindFile=0x665d90cb60, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0210.533] SetLastError (dwErrCode=0x0) [0210.533] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.533] GetLastError () returned 0xb7 [0210.533] CloseHandle (hObject=0x620) returned 1 [0210.533] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Settings\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d280 [0210.533] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0210.533] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0210.533] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0210.534] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Settings\\roaming.lock", dwFileAttributes=0x80) returned 1 [0210.534] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0210.534] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=0) returned 1 [0210.534] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=0) returned 1 [0210.535] CloseHandle (hObject=0x3e8) returned 1 [0210.535] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0210.535] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0210.535] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0210.535] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Settings\\settings.dat", dwFileAttributes=0x80) returned 1 [0210.535] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0210.536] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=8192) returned 1 [0210.536] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=8192) returned 1 [0210.536] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x1ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.536] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0210.537] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0210.537] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9a180) returned 1 [0210.537] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0210.538] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0210.538] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0x2000, lpOverlapped=0x0) returned 1 [0210.538] CryptEncrypt (in: hKey=0x665ab9a180, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0210.538] CryptEncrypt (in: hKey=0x665ab9a180, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2010) returned 1 [0210.539] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0210.539] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0x2010, lpOverlapped=0x0) returned 1 [0210.539] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0210.539] CryptExportKey (in: hKey=0x665ab9a180, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0210.539] CryptExportKey (in: hKey=0x665ab9a180, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0210.539] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0210.539] CloseHandle (hObject=0x3e8) returned 1 [0210.555] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0210.561] CryptDestroyKey (hKey=0x665ab9a180) returned 1 [0210.561] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0210.562] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0210.562] FindClose (in: hFindFile=0x665d90d280 | out: hFindFile=0x665d90d280) returned 1 [0210.562] SetLastError (dwErrCode=0x0) [0210.562] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Settings\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\settings\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.563] GetLastError () returned 0x0 [0210.563] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0210.564] CloseHandle (hObject=0x620) returned 1 [0210.564] FindNextFileW (in: hFindFile=0x665d90cb60, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0210.564] SetLastError (dwErrCode=0x0) [0210.564] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.564] GetLastError () returned 0xb7 [0210.564] CloseHandle (hObject=0x620) returned 1 [0210.564] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\SystemAppData\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bf60 [0210.564] FindNextFileW (in: hFindFile=0x665d90bf60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0210.564] FindNextFileW (in: hFindFile=0x665d90bf60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0210.564] FindClose (in: hFindFile=0x665d90bf60 | out: hFindFile=0x665d90bf60) returned 1 [0210.564] SetLastError (dwErrCode=0x0) [0210.564] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\SystemAppData\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\systemappdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.565] GetLastError () returned 0x0 [0210.565] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0210.566] CloseHandle (hObject=0x620) returned 1 [0210.566] FindNextFileW (in: hFindFile=0x665d90cb60, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0210.566] SetLastError (dwErrCode=0x0) [0210.566] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.566] GetLastError () returned 0xb7 [0210.566] CloseHandle (hObject=0x620) returned 1 [0210.566] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\TempState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d100 [0210.566] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0210.566] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0210.566] FindClose (in: hFindFile=0x665d90d100 | out: hFindFile=0x665d90d100) returned 1 [0210.566] SetLastError (dwErrCode=0x0) [0210.566] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\TempState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\tempstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.567] GetLastError () returned 0x0 [0210.567] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0210.568] CloseHandle (hObject=0x620) returned 1 [0210.568] FindNextFileW (in: hFindFile=0x665d90cb60, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0210.568] FindClose (in: hFindFile=0x665d90cb60 | out: hFindFile=0x665d90cb60) returned 1 [0210.568] SetLastError (dwErrCode=0x0) [0210.568] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0210.568] GetLastError () returned 0xb7 [0210.568] CloseHandle (hObject=0x60c) returned 1 [0210.568] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0210.568] SetLastError (dwErrCode=0x0) [0210.568] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0210.568] GetLastError () returned 0xb7 [0210.568] CloseHandle (hObject=0x60c) returned 1 [0210.569] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90d280 [0210.588] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0210.588] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0210.588] SetLastError (dwErrCode=0x0) [0210.588] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.590] GetLastError () returned 0x0 [0210.590] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0210.591] CloseHandle (hObject=0x620) returned 1 [0210.591] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c680 [0210.605] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0210.605] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0210.605] SetLastError (dwErrCode=0x0) [0210.605] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0210.605] GetLastError () returned 0x0 [0210.605] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0210.606] CloseHandle (hObject=0x3e8) returned 1 [0210.606] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\INetCache\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90cec0 [0210.607] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0210.607] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0210.607] FindClose (in: hFindFile=0x665d90cec0 | out: hFindFile=0x665d90cec0) returned 1 [0210.607] SetLastError (dwErrCode=0x0) [0210.607] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\INetCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\ac\\inetcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0210.608] GetLastError () returned 0x0 [0210.608] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0210.609] CloseHandle (hObject=0x3e8) returned 1 [0210.609] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0210.609] SetLastError (dwErrCode=0x0) [0210.609] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0210.609] GetLastError () returned 0xb7 [0210.609] CloseHandle (hObject=0x3e8) returned 1 [0210.609] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\INetCookies\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c1a0 [0210.610] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0210.610] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0210.610] FindClose (in: hFindFile=0x665d90c1a0 | out: hFindFile=0x665d90c1a0) returned 1 [0210.610] SetLastError (dwErrCode=0x0) [0210.610] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\INetCookies\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\ac\\inetcookies\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0210.611] GetLastError () returned 0x0 [0210.611] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0210.612] CloseHandle (hObject=0x3e8) returned 1 [0210.612] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0210.612] SetLastError (dwErrCode=0x0) [0210.612] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0210.612] GetLastError () returned 0xb7 [0210.612] CloseHandle (hObject=0x3e8) returned 1 [0210.613] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\INetHistory\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c0e0 [0210.613] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0210.613] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0210.613] FindClose (in: hFindFile=0x665d90c0e0 | out: hFindFile=0x665d90c0e0) returned 1 [0210.613] SetLastError (dwErrCode=0x0) [0210.613] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\INetHistory\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\ac\\inethistory\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0210.614] GetLastError () returned 0x0 [0210.614] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0210.614] CloseHandle (hObject=0x3e8) returned 1 [0210.614] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0210.614] SetLastError (dwErrCode=0x0) [0210.614] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0210.615] GetLastError () returned 0xb7 [0210.615] CloseHandle (hObject=0x3e8) returned 1 [0210.615] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\Temp\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bd20 [0210.615] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0210.615] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0210.615] FindClose (in: hFindFile=0x665d90bd20 | out: hFindFile=0x665d90bd20) returned 1 [0210.615] SetLastError (dwErrCode=0x0) [0210.615] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\Temp\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\ac\\temp\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0210.616] GetLastError () returned 0x0 [0210.616] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0210.617] CloseHandle (hObject=0x3e8) returned 1 [0210.617] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0210.617] FindClose (in: hFindFile=0x665d90c680 | out: hFindFile=0x665d90c680) returned 1 [0210.617] SetLastError (dwErrCode=0x0) [0210.617] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.618] GetLastError () returned 0xb7 [0210.618] CloseHandle (hObject=0x620) returned 1 [0210.618] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0210.618] SetLastError (dwErrCode=0x0) [0210.618] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.618] GetLastError () returned 0xb7 [0210.618] CloseHandle (hObject=0x620) returned 1 [0210.618] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AppData\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c800 [0210.618] FindNextFileW (in: hFindFile=0x665d90c800, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0210.618] FindNextFileW (in: hFindFile=0x665d90c800, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0210.618] FindClose (in: hFindFile=0x665d90c800 | out: hFindFile=0x665d90c800) returned 1 [0210.618] SetLastError (dwErrCode=0x0) [0210.619] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AppData\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\appdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.619] GetLastError () returned 0x0 [0210.619] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0210.620] CloseHandle (hObject=0x620) returned 1 [0210.620] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0210.620] SetLastError (dwErrCode=0x0) [0210.620] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.620] GetLastError () returned 0xb7 [0210.620] CloseHandle (hObject=0x620) returned 1 [0210.620] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\LocalCache\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c800 [0210.621] FindNextFileW (in: hFindFile=0x665d90c800, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0210.621] FindNextFileW (in: hFindFile=0x665d90c800, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0210.621] FindClose (in: hFindFile=0x665d90c800 | out: hFindFile=0x665d90c800) returned 1 [0210.621] SetLastError (dwErrCode=0x0) [0210.621] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\LocalCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\localcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.624] GetLastError () returned 0x0 [0210.624] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0210.625] CloseHandle (hObject=0x620) returned 1 [0210.625] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0210.625] SetLastError (dwErrCode=0x0) [0210.625] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.625] GetLastError () returned 0xb7 [0210.625] CloseHandle (hObject=0x620) returned 1 [0210.626] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\LocalState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c560 [0210.626] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0210.626] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0210.626] FindClose (in: hFindFile=0x665d90c560 | out: hFindFile=0x665d90c560) returned 1 [0210.626] SetLastError (dwErrCode=0x0) [0210.626] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\LocalState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\localstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.626] GetLastError () returned 0x0 [0210.627] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0210.627] CloseHandle (hObject=0x620) returned 1 [0210.627] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0210.627] SetLastError (dwErrCode=0x0) [0210.627] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.628] GetLastError () returned 0xb7 [0210.628] CloseHandle (hObject=0x620) returned 1 [0210.628] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c6e0 [0210.628] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0210.628] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0210.628] SetLastError (dwErrCode=0x0) [0210.628] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\microsoft.lockapp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0210.630] GetLastError () returned 0x0 [0210.630] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0210.630] CloseHandle (hObject=0x3e8) returned 1 [0210.631] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90be40 [0210.632] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0210.632] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0210.633] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0210.633] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", dwFileAttributes=0x80) returned 1 [0210.633] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\microsoft.lockapp_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0210.634] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=16384) returned 1 [0210.634] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=16384) returned 1 [0210.634] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x3ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.634] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0210.635] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0210.635] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a6c0) returned 1 [0210.635] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0210.635] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0210.635] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x4000, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x4000, lpOverlapped=0x0) returned 1 [0210.636] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0210.636] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x4000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x4010) returned 1 [0210.636] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0210.636] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x4010, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x4010, lpOverlapped=0x0) returned 1 [0210.637] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0210.637] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0210.637] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0210.637] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0210.637] CloseHandle (hObject=0x654) returned 1 [0210.650] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0210.656] CryptDestroyKey (hKey=0x665ab9a6c0) returned 1 [0210.656] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0210.656] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0210.656] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0210.656] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", dwFileAttributes=0x80) returned 1 [0210.658] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\microsoft.lockapp_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0210.659] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=12288) returned 1 [0210.659] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=12288) returned 1 [0210.659] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x2ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.659] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0210.661] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0210.661] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a5e0) returned 1 [0210.661] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0210.661] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0210.661] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x3000, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x3000, lpOverlapped=0x0) returned 1 [0210.662] CryptEncrypt (in: hKey=0x665ab9a5e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0210.662] CryptEncrypt (in: hKey=0x665ab9a5e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x3000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x3010) returned 1 [0210.662] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0210.662] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x3010, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x3010, lpOverlapped=0x0) returned 1 [0210.663] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0210.663] CryptExportKey (in: hKey=0x665ab9a5e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0210.663] CryptExportKey (in: hKey=0x665ab9a5e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0210.663] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0210.663] CloseHandle (hObject=0x654) returned 1 [0210.732] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0210.737] CryptDestroyKey (hKey=0x665ab9a5e0) returned 1 [0210.737] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0210.737] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0210.737] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0210.738] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", dwFileAttributes=0x80) returned 1 [0210.739] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\microsoft.lockapp_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0210.740] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=0) returned 1 [0210.740] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=0) returned 1 [0210.740] CloseHandle (hObject=0x654) returned 1 [0210.740] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0210.740] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0210.740] FindClose (in: hFindFile=0x665d90be40 | out: hFindFile=0x665d90be40) returned 1 [0210.741] SetLastError (dwErrCode=0x0) [0210.741] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\microsoft.lockapp_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0210.741] GetLastError () returned 0x0 [0210.741] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0210.742] CloseHandle (hObject=0x3e8) returned 1 [0210.743] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0210.743] FindClose (in: hFindFile=0x665d90c6e0 | out: hFindFile=0x665d90c6e0) returned 1 [0210.743] SetLastError (dwErrCode=0x0) [0210.743] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\microsoft.lockapp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.743] GetLastError () returned 0xb7 [0210.743] CloseHandle (hObject=0x620) returned 1 [0210.743] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0210.743] SetLastError (dwErrCode=0x0) [0210.743] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.744] GetLastError () returned 0xb7 [0210.744] CloseHandle (hObject=0x620) returned 1 [0210.744] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\RoamingState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c500 [0210.744] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0210.744] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0210.744] FindClose (in: hFindFile=0x665d90c500 | out: hFindFile=0x665d90c500) returned 1 [0210.744] SetLastError (dwErrCode=0x0) [0210.744] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\RoamingState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\roamingstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.745] GetLastError () returned 0x0 [0210.745] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0210.746] CloseHandle (hObject=0x620) returned 1 [0210.746] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0210.746] SetLastError (dwErrCode=0x0) [0210.746] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.747] GetLastError () returned 0xb7 [0210.747] CloseHandle (hObject=0x620) returned 1 [0210.747] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c6e0 [0210.773] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0210.773] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0210.773] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0210.774] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\roaming.lock", dwFileAttributes=0x80) returned 1 [0210.774] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0210.775] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=0) returned 1 [0210.775] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=0) returned 1 [0210.775] CloseHandle (hObject=0x3e8) returned 1 [0210.775] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0210.775] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0210.775] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0210.776] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat", dwFileAttributes=0x80) returned 1 [0210.777] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0210.777] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=8192) returned 1 [0210.777] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=8192) returned 1 [0210.778] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x1ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.778] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0210.797] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0210.797] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9aea0) returned 1 [0210.797] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0210.797] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0210.798] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0x2000, lpOverlapped=0x0) returned 1 [0210.798] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0210.798] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2010) returned 1 [0210.798] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0210.798] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0x2010, lpOverlapped=0x0) returned 1 [0210.801] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0210.801] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0210.801] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0210.801] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0210.801] CloseHandle (hObject=0x3e8) returned 1 [0210.830] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0210.835] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0210.835] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0210.836] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0210.836] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0210.836] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", dwFileAttributes=0x80) returned 1 [0210.855] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0210.856] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=8192) returned 1 [0210.856] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=8192) returned 1 [0210.856] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x1ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.856] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0210.858] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0210.858] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9a0a0) returned 1 [0210.858] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0210.858] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0210.858] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0x2000, lpOverlapped=0x0) returned 1 [0210.859] CryptEncrypt (in: hKey=0x665ab9a0a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0210.859] CryptEncrypt (in: hKey=0x665ab9a0a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2010) returned 1 [0210.859] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0210.859] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0x2010, lpOverlapped=0x0) returned 1 [0210.860] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0210.860] CryptExportKey (in: hKey=0x665ab9a0a0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0210.860] CryptExportKey (in: hKey=0x665ab9a0a0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0210.860] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0210.860] CloseHandle (hObject=0x3e8) returned 1 [0210.874] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0210.879] CryptDestroyKey (hKey=0x665ab9a0a0) returned 1 [0210.879] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0210.880] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0210.880] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0210.880] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", dwFileAttributes=0x80) returned 1 [0210.881] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0210.882] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=0) returned 1 [0210.882] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=0) returned 1 [0210.882] CloseHandle (hObject=0x3e8) returned 1 [0210.882] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0210.882] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0210.882] FindClose (in: hFindFile=0x665d90c6e0 | out: hFindFile=0x665d90c6e0) returned 1 [0210.882] SetLastError (dwErrCode=0x0) [0210.882] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\settings\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.883] GetLastError () returned 0x0 [0210.883] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0210.886] CloseHandle (hObject=0x620) returned 1 [0210.886] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0210.886] SetLastError (dwErrCode=0x0) [0210.886] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.887] GetLastError () returned 0xb7 [0210.887] CloseHandle (hObject=0x620) returned 1 [0210.887] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\SystemAppData\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bfc0 [0210.887] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0210.887] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0210.887] FindClose (in: hFindFile=0x665d90bfc0 | out: hFindFile=0x665d90bfc0) returned 1 [0210.887] SetLastError (dwErrCode=0x0) [0210.887] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\SystemAppData\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\systemappdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.888] GetLastError () returned 0x0 [0210.888] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0210.889] CloseHandle (hObject=0x620) returned 1 [0210.889] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0210.889] SetLastError (dwErrCode=0x0) [0210.889] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.889] GetLastError () returned 0xb7 [0210.889] CloseHandle (hObject=0x620) returned 1 [0210.889] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\TempState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d2e0 [0210.890] FindNextFileW (in: hFindFile=0x665d90d2e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0210.890] FindNextFileW (in: hFindFile=0x665d90d2e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0210.890] FindClose (in: hFindFile=0x665d90d2e0 | out: hFindFile=0x665d90d2e0) returned 1 [0210.890] SetLastError (dwErrCode=0x0) [0210.890] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\TempState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\tempstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.891] GetLastError () returned 0x0 [0210.891] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0210.892] CloseHandle (hObject=0x620) returned 1 [0210.892] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0210.892] FindClose (in: hFindFile=0x665d90d280 | out: hFindFile=0x665d90d280) returned 1 [0210.892] SetLastError (dwErrCode=0x0) [0210.892] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0210.892] GetLastError () returned 0xb7 [0210.892] CloseHandle (hObject=0x60c) returned 1 [0210.892] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0210.892] SetLastError (dwErrCode=0x0) [0210.892] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0210.893] GetLastError () returned 0xb7 [0210.893] CloseHandle (hObject=0x60c) returned 1 [0210.893] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90d040 [0210.895] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0210.895] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0210.895] SetLastError (dwErrCode=0x0) [0210.895] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0210.896] GetLastError () returned 0x0 [0210.896] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0210.897] CloseHandle (hObject=0x620) returned 1 [0210.897] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bc60 [0210.900] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0210.900] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0210.900] SetLastError (dwErrCode=0x0) [0210.900] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0210.901] GetLastError () returned 0x0 [0210.901] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0210.902] CloseHandle (hObject=0x3e8) returned 1 [0210.903] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c0e0 [0210.913] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0210.913] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0210.913] SetLastError (dwErrCode=0x0) [0210.913] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0210.915] GetLastError () returned 0x0 [0210.915] WriteFile (in: hFile=0x654, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7ad80*=0x324, lpOverlapped=0x0) returned 1 [0210.916] CloseHandle (hObject=0x654) returned 1 [0210.916] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\INetCache\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665d90c920 [0210.916] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0210.917] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0210.917] FindClose (in: hFindFile=0x665d90c920 | out: hFindFile=0x665d90c920) returned 1 [0210.917] SetLastError (dwErrCode=0x0) [0210.917] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\INetCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\inetcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0210.917] GetLastError () returned 0x0 [0210.917] WriteFile (in: hFile=0x654, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7ad80*=0x324, lpOverlapped=0x0) returned 1 [0210.918] CloseHandle (hObject=0x654) returned 1 [0210.918] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0210.918] SetLastError (dwErrCode=0x0) [0210.918] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0210.919] GetLastError () returned 0xb7 [0210.919] CloseHandle (hObject=0x654) returned 1 [0210.919] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\INetCookies\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665d90bde0 [0210.920] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0210.920] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0210.920] FindClose (in: hFindFile=0x665d90bde0 | out: hFindFile=0x665d90bde0) returned 1 [0210.920] SetLastError (dwErrCode=0x0) [0210.920] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\INetCookies\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\inetcookies\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0210.921] GetLastError () returned 0x0 [0210.921] WriteFile (in: hFile=0x654, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7ad80*=0x324, lpOverlapped=0x0) returned 1 [0210.922] CloseHandle (hObject=0x654) returned 1 [0210.922] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0210.922] SetLastError (dwErrCode=0x0) [0210.922] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0210.922] GetLastError () returned 0xb7 [0210.923] CloseHandle (hObject=0x654) returned 1 [0210.923] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\INetHistory\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665d90c500 [0210.923] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0210.923] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0210.923] FindClose (in: hFindFile=0x665d90c500 | out: hFindFile=0x665d90c500) returned 1 [0210.923] SetLastError (dwErrCode=0x0) [0210.923] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\INetHistory\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\inethistory\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0210.924] GetLastError () returned 0x0 [0210.924] WriteFile (in: hFile=0x654, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7ad80*=0x324, lpOverlapped=0x0) returned 1 [0210.926] CloseHandle (hObject=0x654) returned 1 [0210.926] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0210.926] SetLastError (dwErrCode=0x0) [0210.926] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0210.926] GetLastError () returned 0xb7 [0210.927] CloseHandle (hObject=0x654) returned 1 [0210.927] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\LocalState\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665d90d280 [0210.927] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0210.927] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0210.927] FindClose (in: hFindFile=0x665d90d280 | out: hFindFile=0x665d90d280) returned 1 [0210.927] SetLastError (dwErrCode=0x0) [0210.927] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\LocalState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\localstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0210.928] GetLastError () returned 0x0 [0210.928] WriteFile (in: hFile=0x654, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7ad80*=0x324, lpOverlapped=0x0) returned 1 [0210.929] CloseHandle (hObject=0x654) returned 1 [0210.929] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0210.929] SetLastError (dwErrCode=0x0) [0210.929] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0210.929] GetLastError () returned 0xb7 [0210.929] CloseHandle (hObject=0x654) returned 1 [0210.929] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665d90c1a0 [0210.930] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0210.930] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0210.930] SetLastError (dwErrCode=0x0) [0210.930] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0210.976] GetLastError () returned 0x0 [0210.976] WriteFile (in: hFile=0x440, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7a5d0*=0x324, lpOverlapped=0x0) returned 1 [0210.977] CloseHandle (hObject=0x440) returned 1 [0210.977] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\*.*", lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0x665d90cb60 [0210.979] FindNextFileW (in: hFindFile=0x665d90cb60, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0210.979] FindNextFileW (in: hFindFile=0x665d90cb60, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0210.979] SetLastError (dwErrCode=0x0) [0210.979] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0210.979] GetLastError () returned 0x0 [0210.980] WriteFile (in: hFile=0x5cc, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da79e20*=0x324, lpOverlapped=0x0) returned 1 [0210.981] CloseHandle (hObject=0x5cc) returned 1 [0210.981] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665d90c500 [0210.990] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0210.992] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0210.992] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0210.993] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", dwFileAttributes=0x80) returned 1 [0210.993] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0210.994] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=2920) returned 1 [0210.994] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=2920) returned 1 [0210.994] SetFilePointerEx (in: hFile=0x410, liDistanceToMove=0xa46, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.994] ReadFile (in: hFile=0x410, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0210.996] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0210.996] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665ab9a110) returned 1 [0210.996] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0210.996] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0210.996] ReadFile (in: hFile=0x410, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0xb68, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79460*=0xb68, lpOverlapped=0x0) returned 1 [0210.997] CryptEncrypt (in: hKey=0x665ab9a110, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0210.997] CryptEncrypt (in: hKey=0x665ab9a110, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0xb68, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0xb70) returned 1 [0210.997] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0210.997] WriteFile (in: hFile=0x410, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0xb70, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79460*=0xb70, lpOverlapped=0x0) returned 1 [0210.997] WriteFile (in: hFile=0x410, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0210.997] CryptExportKey (in: hKey=0x665ab9a110, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0210.997] CryptExportKey (in: hKey=0x665ab9a110, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0210.997] WriteFile (in: hFile=0x410, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0210.997] CloseHandle (hObject=0x410) returned 1 [0211.019] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0211.024] CryptDestroyKey (hKey=0x665ab9a110) returned 1 [0211.024] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0211.025] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0211.025] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0211.026] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", dwFileAttributes=0x80) returned 1 [0211.027] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0211.027] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=0) returned 1 [0211.027] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=0) returned 1 [0211.027] CloseHandle (hObject=0x410) returned 1 [0211.028] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0211.028] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0211.028] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0211.028] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6", dwFileAttributes=0x80) returned 1 [0211.030] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\7423f88c7f265f0defc08ea88c3bde45_d975bba8033175c8d112023d8a7a8ad6"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0211.030] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=471) returned 1 [0211.030] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=471) returned 1 [0211.030] SetFilePointerEx (in: hFile=0x410, liDistanceToMove=0xb5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.030] ReadFile (in: hFile=0x410, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0211.031] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.031] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665ab9a880) returned 1 [0211.031] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0211.032] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.032] ReadFile (in: hFile=0x410, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x1d7, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79460*=0x1d7, lpOverlapped=0x0) returned 1 [0211.032] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0211.032] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x1d7, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x1e0) returned 1 [0211.032] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.032] WriteFile (in: hFile=0x410, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79460*=0x1e0, lpOverlapped=0x0) returned 1 [0211.032] WriteFile (in: hFile=0x410, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0211.033] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0211.033] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0211.033] WriteFile (in: hFile=0x410, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0211.055] CloseHandle (hObject=0x410) returned 1 [0211.077] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0211.082] CryptDestroyKey (hKey=0x665ab9a880) returned 1 [0211.082] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0211.082] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0211.082] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0211.083] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", dwFileAttributes=0x80) returned 1 [0211.084] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0211.084] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=0) returned 1 [0211.084] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=0) returned 1 [0211.085] CloseHandle (hObject=0x410) returned 1 [0211.085] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0211.085] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0211.085] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0211.085] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_15B894361B8229C12E6CD4370E03BA11", dwFileAttributes=0x80) returned 1 [0211.088] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_15B894361B8229C12E6CD4370E03BA11" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_15b894361b8229c12e6cd4370e03ba11"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0211.088] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=463) returned 1 [0211.088] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=463) returned 1 [0211.088] SetFilePointerEx (in: hFile=0x410, liDistanceToMove=0xad, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.089] ReadFile (in: hFile=0x410, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0211.090] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.090] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665ab9a490) returned 1 [0211.090] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0211.090] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.090] ReadFile (in: hFile=0x410, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x1cf, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79460*=0x1cf, lpOverlapped=0x0) returned 1 [0211.090] CryptEncrypt (in: hKey=0x665ab9a490, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0211.091] CryptEncrypt (in: hKey=0x665ab9a490, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x1cf, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x1d0) returned 1 [0211.091] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.091] WriteFile (in: hFile=0x410, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79460*=0x1d0, lpOverlapped=0x0) returned 1 [0211.091] WriteFile (in: hFile=0x410, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0211.091] CryptExportKey (in: hKey=0x665ab9a490, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0211.091] CryptExportKey (in: hKey=0x665ab9a490, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0211.091] WriteFile (in: hFile=0x410, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0211.092] CloseHandle (hObject=0x410) returned 1 [0211.114] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0211.120] CryptDestroyKey (hKey=0x665ab9a490) returned 1 [0211.120] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0211.120] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0211.120] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0211.120] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_71FE2912451B2B453DAF1EB6A0D6DE9D", dwFileAttributes=0x80) returned 1 [0211.122] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_71FE2912451B2B453DAF1EB6A0D6DE9D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_71fe2912451b2b453daf1eb6a0d6de9d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0211.122] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=463) returned 1 [0211.122] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=463) returned 1 [0211.122] SetFilePointerEx (in: hFile=0x410, liDistanceToMove=0xad, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.122] ReadFile (in: hFile=0x410, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0211.124] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.124] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665ab9a180) returned 1 [0211.124] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0211.124] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.124] ReadFile (in: hFile=0x410, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x1cf, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79460*=0x1cf, lpOverlapped=0x0) returned 1 [0211.124] CryptEncrypt (in: hKey=0x665ab9a180, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0211.124] CryptEncrypt (in: hKey=0x665ab9a180, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x1cf, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x1d0) returned 1 [0211.124] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.124] WriteFile (in: hFile=0x410, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79460*=0x1d0, lpOverlapped=0x0) returned 1 [0211.125] WriteFile (in: hFile=0x410, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0211.125] CryptExportKey (in: hKey=0x665ab9a180, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0211.125] CryptExportKey (in: hKey=0x665ab9a180, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0211.125] WriteFile (in: hFile=0x410, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0211.126] CloseHandle (hObject=0x410) returned 1 [0211.148] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0211.155] CryptDestroyKey (hKey=0x665ab9a180) returned 1 [0211.155] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0211.156] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0211.156] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0211.156] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_AEB6328053EC598E3A1DBA7D9B00C40B", dwFileAttributes=0x80) returned 1 [0211.157] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_AEB6328053EC598E3A1DBA7D9B00C40B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_aeb6328053ec598e3a1dba7d9b00c40b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0211.158] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=463) returned 1 [0211.158] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=463) returned 1 [0211.158] SetFilePointerEx (in: hFile=0x410, liDistanceToMove=0xad, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.158] ReadFile (in: hFile=0x410, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0211.159] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.159] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665ab9a110) returned 1 [0211.159] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0211.160] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.160] ReadFile (in: hFile=0x410, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x1cf, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79460*=0x1cf, lpOverlapped=0x0) returned 1 [0211.160] CryptEncrypt (in: hKey=0x665ab9a110, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0211.160] CryptEncrypt (in: hKey=0x665ab9a110, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x1cf, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x1d0) returned 1 [0211.160] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.160] WriteFile (in: hFile=0x410, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79460*=0x1d0, lpOverlapped=0x0) returned 1 [0211.160] WriteFile (in: hFile=0x410, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0211.160] CryptExportKey (in: hKey=0x665ab9a110, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0211.160] CryptExportKey (in: hKey=0x665ab9a110, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0211.161] WriteFile (in: hFile=0x410, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0211.162] CloseHandle (hObject=0x410) returned 1 [0211.184] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0211.189] CryptDestroyKey (hKey=0x665ab9a110) returned 1 [0211.189] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0211.190] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0211.190] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0211.190] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\828298824EA5549947C17DDABF6871F5_6B5C8B321CA02275A82E95FA81D6DE62", dwFileAttributes=0x80) returned 1 [0211.191] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\828298824EA5549947C17DDABF6871F5_6B5C8B321CA02275A82E95FA81D6DE62" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\828298824ea5549947c17ddabf6871f5_6b5c8b321ca02275a82e95fa81d6de62"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0211.192] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=1377) returned 1 [0211.192] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=1377) returned 1 [0211.192] SetFilePointerEx (in: hFile=0x410, liDistanceToMove=0x43f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.192] ReadFile (in: hFile=0x410, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0211.194] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.194] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665ab9a340) returned 1 [0211.194] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0211.194] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.194] ReadFile (in: hFile=0x410, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x561, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79460*=0x561, lpOverlapped=0x0) returned 1 [0211.195] CryptEncrypt (in: hKey=0x665ab9a340, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0211.195] CryptEncrypt (in: hKey=0x665ab9a340, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x561, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x570) returned 1 [0211.195] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.195] WriteFile (in: hFile=0x410, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x570, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79460*=0x570, lpOverlapped=0x0) returned 1 [0211.195] WriteFile (in: hFile=0x410, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0211.195] CryptExportKey (in: hKey=0x665ab9a340, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0211.195] CryptExportKey (in: hKey=0x665ab9a340, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0211.195] WriteFile (in: hFile=0x410, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0211.195] CloseHandle (hObject=0x410) returned 1 [0211.239] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0211.245] CryptDestroyKey (hKey=0x665ab9a340) returned 1 [0211.245] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0211.245] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0211.245] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0211.245] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\A9E4F776657345B52012CE8E279D314C_B6480DD2AFAFCC504C59FFB35E8A6232", dwFileAttributes=0x80) returned 1 [0211.247] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\A9E4F776657345B52012CE8E279D314C_B6480DD2AFAFCC504C59FFB35E8A6232" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\a9e4f776657345b52012ce8e279d314c_b6480dd2afafcc504c59ffb35e8a6232"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0211.247] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=471) returned 1 [0211.247] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=471) returned 1 [0211.247] SetFilePointerEx (in: hFile=0x410, liDistanceToMove=0xb5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.247] ReadFile (in: hFile=0x410, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0211.250] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.250] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665ab9a6c0) returned 1 [0211.250] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0211.250] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.251] ReadFile (in: hFile=0x410, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x1d7, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79460*=0x1d7, lpOverlapped=0x0) returned 1 [0211.251] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0211.251] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x1d7, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x1e0) returned 1 [0211.251] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.251] WriteFile (in: hFile=0x410, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79460*=0x1e0, lpOverlapped=0x0) returned 1 [0211.251] WriteFile (in: hFile=0x410, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0211.251] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0211.251] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0211.251] WriteFile (in: hFile=0x410, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0211.253] CloseHandle (hObject=0x410) returned 1 [0211.275] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0211.280] CryptDestroyKey (hKey=0x665ab9a6c0) returned 1 [0211.280] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0211.281] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0211.281] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0211.281] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\A9E4F776657345B52012CE8E279D314C_DCA82AA47C444DFAE483555D3A592A95", dwFileAttributes=0x80) returned 1 [0211.282] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\A9E4F776657345B52012CE8E279D314C_DCA82AA47C444DFAE483555D3A592A95" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\a9e4f776657345b52012ce8e279d314c_dca82aa47c444dfae483555d3a592a95"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0211.282] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=471) returned 1 [0211.282] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=471) returned 1 [0211.282] SetFilePointerEx (in: hFile=0x410, liDistanceToMove=0xb5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.282] ReadFile (in: hFile=0x410, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0211.283] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.283] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665ab9a5e0) returned 1 [0211.283] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0211.283] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.283] ReadFile (in: hFile=0x410, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x1d7, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79460*=0x1d7, lpOverlapped=0x0) returned 1 [0211.284] CryptEncrypt (in: hKey=0x665ab9a5e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0211.284] CryptEncrypt (in: hKey=0x665ab9a5e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x1d7, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x1e0) returned 1 [0211.284] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.284] WriteFile (in: hFile=0x410, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79460*=0x1e0, lpOverlapped=0x0) returned 1 [0211.284] WriteFile (in: hFile=0x410, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0211.284] CryptExportKey (in: hKey=0x665ab9a5e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0211.284] CryptExportKey (in: hKey=0x665ab9a5e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0211.284] WriteFile (in: hFile=0x410, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0211.290] CloseHandle (hObject=0x410) returned 1 [0211.309] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0211.313] CryptDestroyKey (hKey=0x665ab9a5e0) returned 1 [0211.313] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0211.313] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0211.313] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0211.313] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_F85B8279FA54A31CEEC2563F5A8F73E8", dwFileAttributes=0x80) returned 1 [0211.314] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_F85B8279FA54A31CEEC2563F5A8F73E8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\b912b2c6928a18b8cd7d50cf08bea95b_f85b8279fa54a31ceec2563f5a8f73e8"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0211.315] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=1820) returned 1 [0211.315] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=1820) returned 1 [0211.315] SetFilePointerEx (in: hFile=0x410, liDistanceToMove=0x5fa, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.315] ReadFile (in: hFile=0x410, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0211.316] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.316] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665ab9aab0) returned 1 [0211.316] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0211.317] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.317] ReadFile (in: hFile=0x410, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x71c, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79460*=0x71c, lpOverlapped=0x0) returned 1 [0211.317] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0211.317] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x71c, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x720) returned 1 [0211.317] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.317] WriteFile (in: hFile=0x410, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79460*=0x720, lpOverlapped=0x0) returned 1 [0211.317] WriteFile (in: hFile=0x410, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0211.317] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0211.317] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0211.317] WriteFile (in: hFile=0x410, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0211.317] CloseHandle (hObject=0x410) returned 1 [0211.336] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0211.341] CryptDestroyKey (hKey=0x665ab9aab0) returned 1 [0211.341] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0211.341] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0211.341] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0211.342] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_FD02B13068D47EB94BCC5D8B201E9929", dwFileAttributes=0x80) returned 1 [0211.342] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_FD02B13068D47EB94BCC5D8B201E9929" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\b912b2c6928a18b8cd7d50cf08bea95b_fd02b13068d47eb94bcc5d8b201e9929"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0211.343] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=1820) returned 1 [0211.343] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=1820) returned 1 [0211.343] SetFilePointerEx (in: hFile=0x410, liDistanceToMove=0x5fa, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.343] ReadFile (in: hFile=0x410, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0211.344] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.344] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665ab9aea0) returned 1 [0211.344] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0211.345] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.345] ReadFile (in: hFile=0x410, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x71c, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79460*=0x71c, lpOverlapped=0x0) returned 1 [0211.345] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0211.345] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x71c, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x720) returned 1 [0211.345] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.345] WriteFile (in: hFile=0x410, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79460*=0x720, lpOverlapped=0x0) returned 1 [0211.345] WriteFile (in: hFile=0x410, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0211.345] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0211.345] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0211.345] WriteFile (in: hFile=0x410, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0211.345] CloseHandle (hObject=0x410) returned 1 [0211.364] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0211.368] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0211.368] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0211.369] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0211.369] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0211.369] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", dwFileAttributes=0x80) returned 1 [0211.370] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_42820cdfea41dc84aab89a6b63561873"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0211.370] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=1763) returned 1 [0211.370] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=1763) returned 1 [0211.370] SetFilePointerEx (in: hFile=0x410, liDistanceToMove=0x5c1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.370] ReadFile (in: hFile=0x410, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0211.372] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.372] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665ab9a880) returned 1 [0211.372] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0211.372] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.372] ReadFile (in: hFile=0x410, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x6e3, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79460*=0x6e3, lpOverlapped=0x0) returned 1 [0211.372] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0211.372] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x6e3, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x6f0) returned 1 [0211.372] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.372] WriteFile (in: hFile=0x410, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x6f0, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79460*=0x6f0, lpOverlapped=0x0) returned 1 [0211.373] WriteFile (in: hFile=0x410, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0211.373] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0211.373] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0211.373] WriteFile (in: hFile=0x410, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0211.373] CloseHandle (hObject=0x410) returned 1 [0211.390] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0211.395] CryptDestroyKey (hKey=0x665ab9a880) returned 1 [0211.395] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0211.395] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0211.395] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0211.395] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", dwFileAttributes=0x80) returned 1 [0211.396] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0211.397] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=1763) returned 1 [0211.397] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=1763) returned 1 [0211.397] SetFilePointerEx (in: hFile=0x410, liDistanceToMove=0x5c1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.397] ReadFile (in: hFile=0x410, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0211.398] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.398] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665ab9a110) returned 1 [0211.398] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0211.398] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.399] ReadFile (in: hFile=0x410, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x6e3, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79460*=0x6e3, lpOverlapped=0x0) returned 1 [0211.399] CryptEncrypt (in: hKey=0x665ab9a110, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0211.399] CryptEncrypt (in: hKey=0x665ab9a110, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x6e3, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x6f0) returned 1 [0211.399] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.399] WriteFile (in: hFile=0x410, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x6f0, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79460*=0x6f0, lpOverlapped=0x0) returned 1 [0211.399] WriteFile (in: hFile=0x410, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0211.399] CryptExportKey (in: hKey=0x665ab9a110, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0211.399] CryptExportKey (in: hKey=0x665ab9a110, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0211.399] WriteFile (in: hFile=0x410, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0211.399] CloseHandle (hObject=0x410) returned 1 [0211.418] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0211.423] CryptDestroyKey (hKey=0x665ab9a110) returned 1 [0211.423] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0211.423] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0211.423] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0211.423] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_835A2FD7EE5F1F37B7872C78D42A88BF", dwFileAttributes=0x80) returned 1 [0211.425] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_835A2FD7EE5F1F37B7872C78D42A88BF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\d47dbd2f9e3365fbbe008d71fb06716f_835a2fd7ee5f1f37b7872c78d42a88bf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0211.425] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=1454) returned 1 [0211.425] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=1454) returned 1 [0211.425] SetFilePointerEx (in: hFile=0x410, liDistanceToMove=0x48c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.425] ReadFile (in: hFile=0x410, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0211.426] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.426] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665ab9a0a0) returned 1 [0211.426] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0211.427] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.427] ReadFile (in: hFile=0x410, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x5ae, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79460*=0x5ae, lpOverlapped=0x0) returned 1 [0211.427] CryptEncrypt (in: hKey=0x665ab9a0a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0211.427] CryptEncrypt (in: hKey=0x665ab9a0a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x5ae, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x5b0) returned 1 [0211.427] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.427] WriteFile (in: hFile=0x410, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79460*=0x5b0, lpOverlapped=0x0) returned 1 [0211.427] WriteFile (in: hFile=0x410, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0211.428] CryptExportKey (in: hKey=0x665ab9a0a0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0211.428] CryptExportKey (in: hKey=0x665ab9a0a0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0211.428] WriteFile (in: hFile=0x410, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0211.428] CloseHandle (hObject=0x410) returned 1 [0211.447] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0211.453] CryptDestroyKey (hKey=0x665ab9a0a0) returned 1 [0211.453] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0211.453] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0211.453] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0211.454] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE", dwFileAttributes=0x80) returned 1 [0211.458] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\d47dbd2f9e3365fbbe008d71fb06716f_d33192d58aa9ca2b9097e848e9fe86de"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0211.459] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=1454) returned 1 [0211.459] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=1454) returned 1 [0211.459] SetFilePointerEx (in: hFile=0x410, liDistanceToMove=0x48c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.459] ReadFile (in: hFile=0x410, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0211.462] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.462] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665ab9a880) returned 1 [0211.462] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0211.463] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.463] ReadFile (in: hFile=0x410, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x5ae, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79460*=0x5ae, lpOverlapped=0x0) returned 1 [0211.463] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0211.463] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x5ae, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x5b0) returned 1 [0211.463] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.463] WriteFile (in: hFile=0x410, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79460*=0x5b0, lpOverlapped=0x0) returned 1 [0211.463] WriteFile (in: hFile=0x410, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0211.463] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0211.463] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0211.464] WriteFile (in: hFile=0x410, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0211.464] CloseHandle (hObject=0x410) returned 1 [0211.487] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0211.492] CryptDestroyKey (hKey=0x665ab9a880) returned 1 [0211.492] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0211.492] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0211.492] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0211.492] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\DCE3BDBF5BDD86E2AB5B471CB90709B4_D787EFA352C03E71EA5F8B6B11B398B8", dwFileAttributes=0x80) returned 1 [0211.493] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\DCE3BDBF5BDD86E2AB5B471CB90709B4_D787EFA352C03E71EA5F8B6B11B398B8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\dce3bdbf5bdd86e2ab5b471cb90709b4_d787efa352c03e71ea5f8b6b11b398b8"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0211.493] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=471) returned 1 [0211.495] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=471) returned 1 [0211.495] SetFilePointerEx (in: hFile=0x410, liDistanceToMove=0xb5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.495] ReadFile (in: hFile=0x410, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0211.496] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.496] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665ab9a500) returned 1 [0211.496] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0211.496] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.496] ReadFile (in: hFile=0x410, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x1d7, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79460*=0x1d7, lpOverlapped=0x0) returned 1 [0211.497] CryptEncrypt (in: hKey=0x665ab9a500, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0211.497] CryptEncrypt (in: hKey=0x665ab9a500, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x1d7, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x1e0) returned 1 [0211.497] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.497] WriteFile (in: hFile=0x410, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79460*=0x1e0, lpOverlapped=0x0) returned 1 [0211.497] WriteFile (in: hFile=0x410, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0211.497] CryptExportKey (in: hKey=0x665ab9a500, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0211.497] CryptExportKey (in: hKey=0x665ab9a500, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0211.497] WriteFile (in: hFile=0x410, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0211.502] CloseHandle (hObject=0x410) returned 1 [0211.525] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0211.530] CryptDestroyKey (hKey=0x665ab9a500) returned 1 [0211.530] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0211.531] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0211.531] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0211.531] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB", dwFileAttributes=0x80) returned 1 [0211.532] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\edc238bff48a31d55a97e1e93892934b_c20e0da2d0f89fe526e1490f4a2ee5ab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0211.532] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=471) returned 1 [0211.532] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=471) returned 1 [0211.532] SetFilePointerEx (in: hFile=0x410, liDistanceToMove=0xb5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.533] ReadFile (in: hFile=0x410, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0211.534] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.534] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665ab9a180) returned 1 [0211.534] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0211.534] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.534] ReadFile (in: hFile=0x410, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x1d7, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79460*=0x1d7, lpOverlapped=0x0) returned 1 [0211.534] CryptEncrypt (in: hKey=0x665ab9a180, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0211.534] CryptEncrypt (in: hKey=0x665ab9a180, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x1d7, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x1e0) returned 1 [0211.534] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.535] WriteFile (in: hFile=0x410, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79460*=0x1e0, lpOverlapped=0x0) returned 1 [0211.535] WriteFile (in: hFile=0x410, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0211.535] CryptExportKey (in: hKey=0x665ab9a180, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0211.535] CryptExportKey (in: hKey=0x665ab9a180, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0211.535] WriteFile (in: hFile=0x410, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0211.537] CloseHandle (hObject=0x410) returned 1 [0211.560] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0211.565] CryptDestroyKey (hKey=0x665ab9a180) returned 1 [0211.565] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0211.565] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0211.565] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0211.566] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619", dwFileAttributes=0x80) returned 1 [0211.567] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\edc238bff48a31d55a97e1e93892934b_c31b2498754e340573f1336de607d619"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0211.568] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=471) returned 1 [0211.568] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=471) returned 1 [0211.568] SetFilePointerEx (in: hFile=0x410, liDistanceToMove=0xb5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.568] ReadFile (in: hFile=0x410, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0211.569] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.569] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665ab9aea0) returned 1 [0211.569] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0211.570] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.570] ReadFile (in: hFile=0x410, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x1d7, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79460*=0x1d7, lpOverlapped=0x0) returned 1 [0211.570] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0211.570] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x1d7, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x1e0) returned 1 [0211.570] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.570] WriteFile (in: hFile=0x410, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79460*=0x1e0, lpOverlapped=0x0) returned 1 [0211.570] WriteFile (in: hFile=0x410, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0211.570] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0211.570] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0211.571] WriteFile (in: hFile=0x410, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0211.572] CloseHandle (hObject=0x410) returned 1 [0211.595] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0211.600] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0211.601] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0211.601] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0211.601] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0211.601] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", dwFileAttributes=0x80) returned 1 [0211.602] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0211.602] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=0) returned 1 [0211.602] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=0) returned 1 [0211.602] CloseHandle (hObject=0x410) returned 1 [0211.603] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0211.603] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0211.603] FindClose (in: hFindFile=0x665d90c500 | out: hFindFile=0x665d90c500) returned 1 [0211.603] SetLastError (dwErrCode=0x0) [0211.604] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0211.604] GetLastError () returned 0x0 [0211.604] WriteFile (in: hFile=0x5cc, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da79e20*=0x324, lpOverlapped=0x0) returned 1 [0211.605] CloseHandle (hObject=0x5cc) returned 1 [0211.605] FindNextFileW (in: hFindFile=0x665d90cb60, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0211.605] SetLastError (dwErrCode=0x0) [0211.605] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0211.606] GetLastError () returned 0xb7 [0211.606] CloseHandle (hObject=0x5cc) returned 1 [0211.606] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665d90d280 [0211.608] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0211.609] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0211.609] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0211.609] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", dwFileAttributes=0x80) returned 1 [0211.610] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0211.610] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=400) returned 1 [0211.610] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=400) returned 1 [0211.610] SetFilePointerEx (in: hFile=0x410, liDistanceToMove=0x6e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.611] ReadFile (in: hFile=0x410, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0211.612] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.612] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665ab9ab20) returned 1 [0211.612] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0211.612] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.612] ReadFile (in: hFile=0x410, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x190, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79460*=0x190, lpOverlapped=0x0) returned 1 [0211.612] CryptEncrypt (in: hKey=0x665ab9ab20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0211.612] CryptEncrypt (in: hKey=0x665ab9ab20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x190, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x1a0) returned 1 [0211.612] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.613] WriteFile (in: hFile=0x410, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x1a0, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79460*=0x1a0, lpOverlapped=0x0) returned 1 [0211.613] WriteFile (in: hFile=0x410, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0211.613] CryptExportKey (in: hKey=0x665ab9ab20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0211.613] CryptExportKey (in: hKey=0x665ab9ab20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0211.613] WriteFile (in: hFile=0x410, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0211.616] CloseHandle (hObject=0x410) returned 1 [0211.639] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0211.644] CryptDestroyKey (hKey=0x665ab9ab20) returned 1 [0211.644] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0211.644] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0211.644] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0211.645] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", dwFileAttributes=0x80) returned 1 [0211.646] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0211.646] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=302) returned 1 [0211.646] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=302) returned 1 [0211.646] SetFilePointerEx (in: hFile=0x410, liDistanceToMove=0xc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.646] ReadFile (in: hFile=0x410, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0211.647] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.647] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665ab9aab0) returned 1 [0211.647] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0211.648] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.648] ReadFile (in: hFile=0x410, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x12e, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79460*=0x12e, lpOverlapped=0x0) returned 1 [0211.648] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0211.648] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x12e, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x130) returned 1 [0211.648] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.648] WriteFile (in: hFile=0x410, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79460*=0x130, lpOverlapped=0x0) returned 1 [0211.648] WriteFile (in: hFile=0x410, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0211.649] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0211.649] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0211.649] WriteFile (in: hFile=0x410, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0211.651] CloseHandle (hObject=0x410) returned 1 [0211.680] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0211.688] CryptDestroyKey (hKey=0x665ab9aab0) returned 1 [0211.688] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0211.688] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0211.688] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0211.688] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6", dwFileAttributes=0x80) returned 1 [0211.689] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\7423f88c7f265f0defc08ea88c3bde45_d975bba8033175c8d112023d8a7a8ad6"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0211.690] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=434) returned 1 [0211.690] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=434) returned 1 [0211.690] SetFilePointerEx (in: hFile=0x410, liDistanceToMove=0x90, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.690] ReadFile (in: hFile=0x410, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0211.691] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.691] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665ab9a340) returned 1 [0211.691] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0211.692] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.692] ReadFile (in: hFile=0x410, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x1b2, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79460*=0x1b2, lpOverlapped=0x0) returned 1 [0211.692] CryptEncrypt (in: hKey=0x665ab9a340, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0211.692] CryptEncrypt (in: hKey=0x665ab9a340, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x1b2, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x1c0) returned 1 [0211.692] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.692] WriteFile (in: hFile=0x410, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x1c0, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79460*=0x1c0, lpOverlapped=0x0) returned 1 [0211.692] WriteFile (in: hFile=0x410, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0211.692] CryptExportKey (in: hKey=0x665ab9a340, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0211.692] CryptExportKey (in: hKey=0x665ab9a340, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0211.692] WriteFile (in: hFile=0x410, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0211.694] CloseHandle (hObject=0x410) returned 1 [0211.717] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0211.723] CryptDestroyKey (hKey=0x665ab9a340) returned 1 [0211.723] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0211.723] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0211.723] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0211.724] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", dwFileAttributes=0x80) returned 1 [0211.725] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0211.725] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=290) returned 1 [0211.725] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=290) returned 1 [0211.726] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665ab9a500) returned 1 [0211.726] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0211.726] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.726] ReadFile (in: hFile=0x410, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x122, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79460*=0x122, lpOverlapped=0x0) returned 1 [0211.728] CryptEncrypt (in: hKey=0x665ab9a500, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0211.728] CryptEncrypt (in: hKey=0x665ab9a500, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x122, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x130) returned 1 [0211.728] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.728] WriteFile (in: hFile=0x410, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79460*=0x130, lpOverlapped=0x0) returned 1 [0211.729] WriteFile (in: hFile=0x410, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0211.731] CryptExportKey (in: hKey=0x665ab9a500, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0211.731] CryptExportKey (in: hKey=0x665ab9a500, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0211.731] WriteFile (in: hFile=0x410, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0211.733] CloseHandle (hObject=0x410) returned 1 [0211.758] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0211.764] CryptDestroyKey (hKey=0x665ab9a500) returned 1 [0211.764] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0211.764] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0211.764] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0211.765] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_15B894361B8229C12E6CD4370E03BA11", dwFileAttributes=0x80) returned 1 [0211.765] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_15B894361B8229C12E6CD4370E03BA11" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_15b894361b8229c12e6cd4370e03ba11"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0211.766] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=386) returned 1 [0211.766] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=386) returned 1 [0211.766] SetFilePointerEx (in: hFile=0x410, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.766] ReadFile (in: hFile=0x410, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0211.768] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.768] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665ab9aea0) returned 1 [0211.768] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0211.768] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.768] ReadFile (in: hFile=0x410, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x182, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79460*=0x182, lpOverlapped=0x0) returned 1 [0211.769] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0211.769] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x182, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x190) returned 1 [0211.769] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.769] WriteFile (in: hFile=0x410, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x190, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79460*=0x190, lpOverlapped=0x0) returned 1 [0211.769] WriteFile (in: hFile=0x410, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0211.769] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0211.769] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0211.769] WriteFile (in: hFile=0x410, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0211.771] CloseHandle (hObject=0x410) returned 1 [0211.797] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0211.803] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0211.803] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0211.803] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0211.803] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0211.804] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_71FE2912451B2B453DAF1EB6A0D6DE9D", dwFileAttributes=0x80) returned 1 [0211.804] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_71FE2912451B2B453DAF1EB6A0D6DE9D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_71fe2912451b2b453daf1eb6a0d6de9d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0211.805] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=386) returned 1 [0211.805] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=386) returned 1 [0211.805] SetFilePointerEx (in: hFile=0x410, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.805] ReadFile (in: hFile=0x410, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0211.806] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.806] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665ab9aab0) returned 1 [0211.806] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0211.807] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.807] ReadFile (in: hFile=0x410, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x182, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79460*=0x182, lpOverlapped=0x0) returned 1 [0211.807] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0211.807] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x182, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x190) returned 1 [0211.808] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.808] WriteFile (in: hFile=0x410, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x190, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79460*=0x190, lpOverlapped=0x0) returned 1 [0211.808] WriteFile (in: hFile=0x410, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0211.808] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0211.808] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0211.808] WriteFile (in: hFile=0x410, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0211.817] CloseHandle (hObject=0x410) returned 1 [0211.846] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0211.852] CryptDestroyKey (hKey=0x665ab9aab0) returned 1 [0211.852] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0211.852] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0211.852] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0211.852] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_AEB6328053EC598E3A1DBA7D9B00C40B", dwFileAttributes=0x80) returned 1 [0211.853] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_AEB6328053EC598E3A1DBA7D9B00C40B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_aeb6328053ec598e3a1dba7d9b00c40b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0211.854] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=386) returned 1 [0211.854] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=386) returned 1 [0211.854] SetFilePointerEx (in: hFile=0x410, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.854] ReadFile (in: hFile=0x410, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0211.855] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.855] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665ab9aab0) returned 1 [0211.855] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0211.856] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.856] ReadFile (in: hFile=0x410, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x182, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79460*=0x182, lpOverlapped=0x0) returned 1 [0211.856] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0211.856] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x182, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x190) returned 1 [0211.856] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.856] WriteFile (in: hFile=0x410, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x190, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79460*=0x190, lpOverlapped=0x0) returned 1 [0211.856] WriteFile (in: hFile=0x410, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0211.856] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0211.856] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0211.856] WriteFile (in: hFile=0x410, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0211.858] CloseHandle (hObject=0x410) returned 1 [0211.881] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0211.887] CryptDestroyKey (hKey=0x665ab9aab0) returned 1 [0211.887] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0211.887] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0211.887] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0211.887] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\828298824EA5549947C17DDABF6871F5_6B5C8B321CA02275A82E95FA81D6DE62", dwFileAttributes=0x80) returned 1 [0211.888] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\828298824EA5549947C17DDABF6871F5_6B5C8B321CA02275A82E95FA81D6DE62" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\828298824ea5549947c17ddabf6871f5_6b5c8b321ca02275a82e95fa81d6de62"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0211.889] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=356) returned 1 [0211.889] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=356) returned 1 [0211.889] SetFilePointerEx (in: hFile=0x410, liDistanceToMove=0x42, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.889] ReadFile (in: hFile=0x410, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0211.890] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.890] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665ab9a420) returned 1 [0211.890] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0211.891] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.891] ReadFile (in: hFile=0x410, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x164, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79460*=0x164, lpOverlapped=0x0) returned 1 [0211.891] CryptEncrypt (in: hKey=0x665ab9a420, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0211.891] CryptEncrypt (in: hKey=0x665ab9a420, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x164, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x170) returned 1 [0211.891] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.891] WriteFile (in: hFile=0x410, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x170, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79460*=0x170, lpOverlapped=0x0) returned 1 [0211.892] WriteFile (in: hFile=0x410, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0211.892] CryptExportKey (in: hKey=0x665ab9a420, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0211.892] CryptExportKey (in: hKey=0x665ab9a420, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0211.892] WriteFile (in: hFile=0x410, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0211.895] CloseHandle (hObject=0x410) returned 1 [0211.927] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0211.933] CryptDestroyKey (hKey=0x665ab9a420) returned 1 [0211.933] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0211.933] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0211.933] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0211.933] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\A9E4F776657345B52012CE8E279D314C_B6480DD2AFAFCC504C59FFB35E8A6232", dwFileAttributes=0x80) returned 1 [0211.934] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\A9E4F776657345B52012CE8E279D314C_B6480DD2AFAFCC504C59FFB35E8A6232" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\a9e4f776657345b52012ce8e279d314c_b6480dd2afafcc504c59ffb35e8a6232"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0211.935] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=430) returned 1 [0211.935] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=430) returned 1 [0211.935] SetFilePointerEx (in: hFile=0x410, liDistanceToMove=0x8c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.935] ReadFile (in: hFile=0x410, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0211.936] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.936] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665ab9aab0) returned 1 [0211.936] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0211.937] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.937] ReadFile (in: hFile=0x410, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x1ae, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79460*=0x1ae, lpOverlapped=0x0) returned 1 [0211.937] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0211.937] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x1ae, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x1b0) returned 1 [0211.937] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.937] WriteFile (in: hFile=0x410, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x1b0, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79460*=0x1b0, lpOverlapped=0x0) returned 1 [0211.937] WriteFile (in: hFile=0x410, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0211.937] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0211.937] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0211.937] WriteFile (in: hFile=0x410, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0211.939] CloseHandle (hObject=0x410) returned 1 [0211.962] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0211.968] CryptDestroyKey (hKey=0x665ab9aab0) returned 1 [0211.968] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0211.968] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0211.968] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0211.969] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\A9E4F776657345B52012CE8E279D314C_DCA82AA47C444DFAE483555D3A592A95", dwFileAttributes=0x80) returned 1 [0211.970] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\A9E4F776657345B52012CE8E279D314C_DCA82AA47C444DFAE483555D3A592A95" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\a9e4f776657345b52012ce8e279d314c_dca82aa47c444dfae483555d3a592a95"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0211.971] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=426) returned 1 [0211.971] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=426) returned 1 [0211.971] SetFilePointerEx (in: hFile=0x410, liDistanceToMove=0x88, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.971] ReadFile (in: hFile=0x410, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0211.972] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.972] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665ab9aea0) returned 1 [0211.972] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0211.973] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.973] ReadFile (in: hFile=0x410, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x1aa, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79460*=0x1aa, lpOverlapped=0x0) returned 1 [0211.973] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0211.973] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x1aa, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x1b0) returned 1 [0211.973] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0211.973] WriteFile (in: hFile=0x410, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x1b0, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79460*=0x1b0, lpOverlapped=0x0) returned 1 [0211.973] WriteFile (in: hFile=0x410, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0211.974] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0211.974] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0211.974] WriteFile (in: hFile=0x410, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0211.975] CloseHandle (hObject=0x410) returned 1 [0211.998] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0212.004] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0212.004] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0212.004] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0212.004] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0212.005] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_F85B8279FA54A31CEEC2563F5A8F73E8", dwFileAttributes=0x80) returned 1 [0212.005] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_F85B8279FA54A31CEEC2563F5A8F73E8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\b912b2c6928a18b8cd7d50cf08bea95b_f85b8279fa54a31ceec2563f5a8f73e8"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0212.006] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=486) returned 1 [0212.006] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=486) returned 1 [0212.006] SetFilePointerEx (in: hFile=0x410, liDistanceToMove=0xc4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.006] ReadFile (in: hFile=0x410, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0212.008] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0212.008] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665ab9a340) returned 1 [0212.008] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0212.008] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0212.008] ReadFile (in: hFile=0x410, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x1e6, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79460*=0x1e6, lpOverlapped=0x0) returned 1 [0212.009] CryptEncrypt (in: hKey=0x665ab9a340, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0212.009] CryptEncrypt (in: hKey=0x665ab9a340, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x1e6, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x1f0) returned 1 [0212.009] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0212.009] WriteFile (in: hFile=0x410, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x1f0, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79460*=0x1f0, lpOverlapped=0x0) returned 1 [0212.009] WriteFile (in: hFile=0x410, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0212.009] CryptExportKey (in: hKey=0x665ab9a340, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0212.009] CryptExportKey (in: hKey=0x665ab9a340, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0212.009] WriteFile (in: hFile=0x410, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0212.017] CloseHandle (hObject=0x410) returned 1 [0212.040] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0212.046] CryptDestroyKey (hKey=0x665ab9a340) returned 1 [0212.046] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0212.046] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0212.046] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0212.046] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_FD02B13068D47EB94BCC5D8B201E9929", dwFileAttributes=0x80) returned 1 [0212.047] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_FD02B13068D47EB94BCC5D8B201E9929" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\b912b2c6928a18b8cd7d50cf08bea95b_fd02b13068d47eb94bcc5d8b201e9929"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0212.048] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=494) returned 1 [0212.048] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=494) returned 1 [0212.048] SetFilePointerEx (in: hFile=0x410, liDistanceToMove=0xcc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.048] ReadFile (in: hFile=0x410, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0212.050] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0212.050] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665ab9a6c0) returned 1 [0212.050] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0212.050] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0212.050] ReadFile (in: hFile=0x410, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x1ee, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79460*=0x1ee, lpOverlapped=0x0) returned 1 [0212.051] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0212.051] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x1ee, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x1f0) returned 1 [0212.051] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0212.051] WriteFile (in: hFile=0x410, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x1f0, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79460*=0x1f0, lpOverlapped=0x0) returned 1 [0212.051] WriteFile (in: hFile=0x410, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0212.051] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0212.051] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0212.051] WriteFile (in: hFile=0x410, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0212.053] CloseHandle (hObject=0x410) returned 1 [0212.075] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0212.081] CryptDestroyKey (hKey=0x665ab9a6c0) returned 1 [0212.081] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0212.082] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0212.082] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0212.082] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", dwFileAttributes=0x80) returned 1 [0212.083] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_42820cdfea41dc84aab89a6b63561873"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0212.083] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=402) returned 1 [0212.083] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=402) returned 1 [0212.083] SetFilePointerEx (in: hFile=0x410, liDistanceToMove=0x70, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.083] ReadFile (in: hFile=0x410, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0212.085] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0212.085] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665ab9a730) returned 1 [0212.085] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0212.085] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0212.085] ReadFile (in: hFile=0x410, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x192, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79460*=0x192, lpOverlapped=0x0) returned 1 [0212.085] CryptEncrypt (in: hKey=0x665ab9a730, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0212.086] CryptEncrypt (in: hKey=0x665ab9a730, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x192, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x1a0) returned 1 [0212.086] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0212.086] WriteFile (in: hFile=0x410, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x1a0, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79460*=0x1a0, lpOverlapped=0x0) returned 1 [0212.086] WriteFile (in: hFile=0x410, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0212.086] CryptExportKey (in: hKey=0x665ab9a730, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0212.086] CryptExportKey (in: hKey=0x665ab9a730, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0212.086] WriteFile (in: hFile=0x410, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0212.088] CloseHandle (hObject=0x410) returned 1 [0212.111] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0212.116] CryptDestroyKey (hKey=0x665ab9a730) returned 1 [0212.116] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0212.117] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0212.117] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0212.117] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", dwFileAttributes=0x80) returned 1 [0212.118] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0212.118] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=398) returned 1 [0212.118] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=398) returned 1 [0212.119] SetFilePointerEx (in: hFile=0x410, liDistanceToMove=0x6c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.119] ReadFile (in: hFile=0x410, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0212.120] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0212.120] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665ab9aea0) returned 1 [0212.120] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0212.120] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0212.121] ReadFile (in: hFile=0x410, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x18e, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79460*=0x18e, lpOverlapped=0x0) returned 1 [0212.121] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0212.121] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x18e, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x190) returned 1 [0212.121] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0212.121] WriteFile (in: hFile=0x410, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x190, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79460*=0x190, lpOverlapped=0x0) returned 1 [0212.121] WriteFile (in: hFile=0x410, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0212.121] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0212.121] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0212.121] WriteFile (in: hFile=0x410, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0212.123] CloseHandle (hObject=0x410) returned 1 [0212.146] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0212.152] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0212.152] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0212.152] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0212.152] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0212.152] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_835A2FD7EE5F1F37B7872C78D42A88BF", dwFileAttributes=0x80) returned 1 [0212.153] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_835A2FD7EE5F1F37B7872C78D42A88BF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\d47dbd2f9e3365fbbe008d71fb06716f_835a2fd7ee5f1f37b7872c78d42a88bf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0212.154] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=404) returned 1 [0212.154] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=404) returned 1 [0212.154] SetFilePointerEx (in: hFile=0x410, liDistanceToMove=0x72, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.154] ReadFile (in: hFile=0x410, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0212.155] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0212.155] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665ab9a730) returned 1 [0212.155] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0212.156] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0212.156] ReadFile (in: hFile=0x410, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x194, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79460*=0x194, lpOverlapped=0x0) returned 1 [0212.156] CryptEncrypt (in: hKey=0x665ab9a730, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0212.156] CryptEncrypt (in: hKey=0x665ab9a730, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x194, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x1a0) returned 1 [0212.156] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0212.156] WriteFile (in: hFile=0x410, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x1a0, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79460*=0x1a0, lpOverlapped=0x0) returned 1 [0212.156] WriteFile (in: hFile=0x410, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0212.156] CryptExportKey (in: hKey=0x665ab9a730, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0212.156] CryptExportKey (in: hKey=0x665ab9a730, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0212.157] WriteFile (in: hFile=0x410, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0212.158] CloseHandle (hObject=0x410) returned 1 [0212.182] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0212.187] CryptDestroyKey (hKey=0x665ab9a730) returned 1 [0212.187] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0212.187] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0212.187] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0212.188] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE", dwFileAttributes=0x80) returned 1 [0212.189] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\d47dbd2f9e3365fbbe008d71fb06716f_d33192d58aa9ca2b9097e848e9fe86de"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0212.189] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=408) returned 1 [0212.189] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=408) returned 1 [0212.189] SetFilePointerEx (in: hFile=0x410, liDistanceToMove=0x76, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.189] ReadFile (in: hFile=0x410, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0212.191] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0212.191] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665ab9a180) returned 1 [0212.191] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0212.191] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0212.191] ReadFile (in: hFile=0x410, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x198, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79460*=0x198, lpOverlapped=0x0) returned 1 [0212.191] CryptEncrypt (in: hKey=0x665ab9a180, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0212.191] CryptEncrypt (in: hKey=0x665ab9a180, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x198, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x1a0) returned 1 [0212.191] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0212.192] WriteFile (in: hFile=0x410, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x1a0, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79460*=0x1a0, lpOverlapped=0x0) returned 1 [0212.195] WriteFile (in: hFile=0x410, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0212.196] CryptExportKey (in: hKey=0x665ab9a180, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0212.196] CryptExportKey (in: hKey=0x665ab9a180, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0212.196] WriteFile (in: hFile=0x410, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0212.198] CloseHandle (hObject=0x410) returned 1 [0212.293] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0212.299] CryptDestroyKey (hKey=0x665ab9a180) returned 1 [0212.299] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0212.299] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0212.299] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0212.300] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\DCE3BDBF5BDD86E2AB5B471CB90709B4_D787EFA352C03E71EA5F8B6B11B398B8", dwFileAttributes=0x80) returned 1 [0212.300] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\DCE3BDBF5BDD86E2AB5B471CB90709B4_D787EFA352C03E71EA5F8B6B11B398B8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\dce3bdbf5bdd86e2ab5b471cb90709b4_d787efa352c03e71ea5f8b6b11b398b8"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0212.301] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=438) returned 1 [0212.301] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=438) returned 1 [0212.301] SetFilePointerEx (in: hFile=0x410, liDistanceToMove=0x94, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.301] ReadFile (in: hFile=0x410, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0212.302] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0212.302] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665ab9a180) returned 1 [0212.302] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0212.303] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0212.303] ReadFile (in: hFile=0x410, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x1b6, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79460*=0x1b6, lpOverlapped=0x0) returned 1 [0212.303] CryptEncrypt (in: hKey=0x665ab9a180, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0212.303] CryptEncrypt (in: hKey=0x665ab9a180, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x1b6, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x1c0) returned 1 [0212.303] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0212.303] WriteFile (in: hFile=0x410, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x1c0, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79460*=0x1c0, lpOverlapped=0x0) returned 1 [0212.303] WriteFile (in: hFile=0x410, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0212.303] CryptExportKey (in: hKey=0x665ab9a180, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0212.303] CryptExportKey (in: hKey=0x665ab9a180, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0212.304] WriteFile (in: hFile=0x410, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0212.305] CloseHandle (hObject=0x410) returned 1 [0212.325] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0212.331] CryptDestroyKey (hKey=0x665ab9a180) returned 1 [0212.331] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0212.331] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0212.331] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0212.331] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB", dwFileAttributes=0x80) returned 1 [0212.332] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\edc238bff48a31d55a97e1e93892934b_c20e0da2d0f89fe526e1490f4a2ee5ab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0212.332] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=426) returned 1 [0212.332] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=426) returned 1 [0212.332] SetFilePointerEx (in: hFile=0x410, liDistanceToMove=0x88, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.333] ReadFile (in: hFile=0x410, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0212.334] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0212.334] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665ab9aab0) returned 1 [0212.334] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0212.334] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0212.334] ReadFile (in: hFile=0x410, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x1aa, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79460*=0x1aa, lpOverlapped=0x0) returned 1 [0212.334] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0212.334] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x1aa, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x1b0) returned 1 [0212.334] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0212.334] WriteFile (in: hFile=0x410, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x1b0, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79460*=0x1b0, lpOverlapped=0x0) returned 1 [0212.335] WriteFile (in: hFile=0x410, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0212.335] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0212.335] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0212.335] WriteFile (in: hFile=0x410, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0212.336] CloseHandle (hObject=0x410) returned 1 [0212.358] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0212.364] CryptDestroyKey (hKey=0x665ab9aab0) returned 1 [0212.364] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0212.364] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0212.364] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0212.365] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619", dwFileAttributes=0x80) returned 1 [0212.365] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\edc238bff48a31d55a97e1e93892934b_c31b2498754e340573f1336de607d619"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0212.366] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=430) returned 1 [0212.366] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=430) returned 1 [0212.366] SetFilePointerEx (in: hFile=0x410, liDistanceToMove=0x8c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.366] ReadFile (in: hFile=0x410, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0212.367] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0212.367] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665ab9aea0) returned 1 [0212.367] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0212.368] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0212.368] ReadFile (in: hFile=0x410, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x1ae, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79460*=0x1ae, lpOverlapped=0x0) returned 1 [0212.368] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0212.368] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x1ae, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x1b0) returned 1 [0212.368] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0212.368] WriteFile (in: hFile=0x410, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x1b0, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79460*=0x1b0, lpOverlapped=0x0) returned 1 [0212.368] WriteFile (in: hFile=0x410, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0212.369] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0212.369] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0212.369] WriteFile (in: hFile=0x410, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0212.370] CloseHandle (hObject=0x410) returned 1 [0212.392] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0212.398] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0212.398] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0212.398] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0212.398] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0212.398] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", dwFileAttributes=0x80) returned 1 [0212.399] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0212.400] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=290) returned 1 [0212.400] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=290) returned 1 [0212.400] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665ab9a3b0) returned 1 [0212.400] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0212.400] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0212.400] ReadFile (in: hFile=0x410, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x122, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79460*=0x122, lpOverlapped=0x0) returned 1 [0212.401] CryptEncrypt (in: hKey=0x665ab9a3b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0212.401] CryptEncrypt (in: hKey=0x665ab9a3b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x122, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x130) returned 1 [0212.401] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0212.401] WriteFile (in: hFile=0x410, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79460*=0x130, lpOverlapped=0x0) returned 1 [0212.402] WriteFile (in: hFile=0x410, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0212.402] CryptExportKey (in: hKey=0x665ab9a3b0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0212.402] CryptExportKey (in: hKey=0x665ab9a3b0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0212.402] WriteFile (in: hFile=0x410, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0212.403] CloseHandle (hObject=0x410) returned 1 [0212.426] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0212.431] CryptDestroyKey (hKey=0x665ab9a3b0) returned 1 [0212.431] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0212.431] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0212.431] FindClose (in: hFindFile=0x665d90d280 | out: hFindFile=0x665d90d280) returned 1 [0212.431] SetLastError (dwErrCode=0x0) [0212.431] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0212.433] GetLastError () returned 0x0 [0212.433] WriteFile (in: hFile=0x5cc, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da79e20*=0x324, lpOverlapped=0x0) returned 1 [0212.434] CloseHandle (hObject=0x5cc) returned 1 [0212.434] FindNextFileW (in: hFindFile=0x665d90cb60, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0 [0212.434] FindClose (in: hFindFile=0x665d90cb60 | out: hFindFile=0x665d90cb60) returned 1 [0212.434] SetLastError (dwErrCode=0x0) [0212.434] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0212.434] GetLastError () returned 0xb7 [0212.434] CloseHandle (hObject=0x440) returned 1 [0212.434] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0212.434] SetLastError (dwErrCode=0x0) [0212.434] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0212.435] GetLastError () returned 0xb7 [0212.435] CloseHandle (hObject=0x440) returned 1 [0212.435] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\*.*", lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0x665d90ca40 [0212.436] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0212.436] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0212.436] SetLastError (dwErrCode=0x0) [0212.436] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\systemcertificates\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0212.436] GetLastError () returned 0x0 [0212.436] WriteFile (in: hFile=0x5cc, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da79e20*=0x324, lpOverlapped=0x0) returned 1 [0212.437] CloseHandle (hObject=0x5cc) returned 1 [0212.438] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\My\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665d90c800 [0212.438] FindNextFileW (in: hFindFile=0x665d90c800, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0212.438] FindNextFileW (in: hFindFile=0x665d90c800, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0212.438] SetLastError (dwErrCode=0x0) [0212.438] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\My\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\systemcertificates\\my\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0212.440] GetLastError () returned 0x0 [0212.440] WriteFile (in: hFile=0x410, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da79670*=0x324, lpOverlapped=0x0) returned 1 [0212.441] CloseHandle (hObject=0x410) returned 1 [0212.441] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\My\\Certificates\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665d90c860 [0212.441] FindNextFileW (in: hFindFile=0x665d90c860, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0212.441] FindNextFileW (in: hFindFile=0x665d90c860, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0212.441] FindClose (in: hFindFile=0x665d90c860 | out: hFindFile=0x665d90c860) returned 1 [0212.441] SetLastError (dwErrCode=0x0) [0212.441] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\My\\Certificates\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\systemcertificates\\my\\certificates\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0212.442] GetLastError () returned 0x0 [0212.442] WriteFile (in: hFile=0x410, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da79670*=0x324, lpOverlapped=0x0) returned 1 [0212.443] CloseHandle (hObject=0x410) returned 1 [0212.444] FindNextFileW (in: hFindFile=0x665d90c800, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0212.444] SetLastError (dwErrCode=0x0) [0212.444] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\My\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\systemcertificates\\my\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0212.444] GetLastError () returned 0xb7 [0212.444] CloseHandle (hObject=0x410) returned 1 [0212.444] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\My\\CRLs\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665d90d1c0 [0212.444] FindNextFileW (in: hFindFile=0x665d90d1c0, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0212.444] FindNextFileW (in: hFindFile=0x665d90d1c0, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0212.444] FindClose (in: hFindFile=0x665d90d1c0 | out: hFindFile=0x665d90d1c0) returned 1 [0212.444] SetLastError (dwErrCode=0x0) [0212.445] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\My\\CRLs\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\systemcertificates\\my\\crls\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0212.445] GetLastError () returned 0x0 [0212.445] WriteFile (in: hFile=0x410, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da79670*=0x324, lpOverlapped=0x0) returned 1 [0212.446] CloseHandle (hObject=0x410) returned 1 [0212.446] FindNextFileW (in: hFindFile=0x665d90c800, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0212.446] SetLastError (dwErrCode=0x0) [0212.446] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\My\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\systemcertificates\\my\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0212.446] GetLastError () returned 0xb7 [0212.446] CloseHandle (hObject=0x410) returned 1 [0212.447] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\My\\CTLs\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665d90be40 [0212.447] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0212.447] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0212.447] FindClose (in: hFindFile=0x665d90be40 | out: hFindFile=0x665d90be40) returned 1 [0212.447] SetLastError (dwErrCode=0x0) [0212.447] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\My\\CTLs\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\systemcertificates\\my\\ctls\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0212.448] GetLastError () returned 0x0 [0212.448] WriteFile (in: hFile=0x410, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da79670*=0x324, lpOverlapped=0x0) returned 1 [0212.449] CloseHandle (hObject=0x410) returned 1 [0212.449] FindNextFileW (in: hFindFile=0x665d90c800, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0212.449] FindClose (in: hFindFile=0x665d90c800 | out: hFindFile=0x665d90c800) returned 1 [0212.449] SetLastError (dwErrCode=0x0) [0212.449] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\My\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\systemcertificates\\my\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0212.450] GetLastError () returned 0xb7 [0212.450] CloseHandle (hObject=0x5cc) returned 1 [0212.450] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0 [0212.450] FindClose (in: hFindFile=0x665d90ca40 | out: hFindFile=0x665d90ca40) returned 1 [0212.450] SetLastError (dwErrCode=0x0) [0212.450] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\systemcertificates\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0212.450] GetLastError () returned 0xb7 [0212.450] CloseHandle (hObject=0x440) returned 1 [0212.451] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0212.451] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0212.451] FindClose (in: hFindFile=0x665d90c1a0 | out: hFindFile=0x665d90c1a0) returned 1 [0212.451] SetLastError (dwErrCode=0x0) [0212.451] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0212.451] GetLastError () returned 0xb7 [0212.451] CloseHandle (hObject=0x654) returned 1 [0212.451] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0212.451] SetLastError (dwErrCode=0x0) [0212.451] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0212.451] GetLastError () returned 0xb7 [0212.451] CloseHandle (hObject=0x654) returned 1 [0212.452] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665d90bf60 [0212.463] FindNextFileW (in: hFindFile=0x665d90bf60, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0212.463] FindNextFileW (in: hFindFile=0x665d90bf60, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0212.463] SetLastError (dwErrCode=0x0) [0212.463] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0212.464] GetLastError () returned 0x0 [0212.464] WriteFile (in: hFile=0x440, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7a5d0*=0x324, lpOverlapped=0x0) returned 1 [0212.465] CloseHandle (hObject=0x440) returned 1 [0212.465] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cache\\*.*", lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0x665d90bd20 [0212.465] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0212.465] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0212.466] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0212.466] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cache\\container.dat", dwFileAttributes=0x80) returned 1 [0212.475] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cache\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0212.476] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=0) returned 1 [0212.476] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=0) returned 1 [0212.476] CloseHandle (hObject=0x5cc) returned 1 [0212.476] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0212.476] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0 [0212.477] FindClose (in: hFindFile=0x665d90bd20 | out: hFindFile=0x665d90bd20) returned 1 [0212.477] SetLastError (dwErrCode=0x0) [0212.477] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0212.500] GetLastError () returned 0x0 [0212.500] WriteFile (in: hFile=0x5cc, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7a5d0*=0x324, lpOverlapped=0x0) returned 1 [0212.501] CloseHandle (hObject=0x5cc) returned 1 [0212.502] FindNextFileW (in: hFindFile=0x665d90bf60, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0212.502] SetLastError (dwErrCode=0x0) [0212.502] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0212.502] GetLastError () returned 0xb7 [0212.502] CloseHandle (hObject=0x5cc) returned 1 [0212.502] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\*.*", lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0x665d90cce0 [0212.510] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0212.510] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0212.510] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0212.511] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\1ZJA02JO.txt", dwFileAttributes=0x80) returned 1 [0212.512] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\1ZJA02JO.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\1zja02jo.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0212.512] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=111) returned 1 [0212.512] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=111) returned 1 [0212.512] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9aea0) returned 1 [0212.512] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0212.512] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0212.513] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x6f, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x6f, lpOverlapped=0x0) returned 1 [0212.514] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0212.514] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x6f, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x70) returned 1 [0212.514] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0212.514] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x70, lpOverlapped=0x0) returned 1 [0212.514] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0212.514] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0212.514] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0212.514] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0212.514] CloseHandle (hObject=0x5cc) returned 1 [0212.534] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0212.539] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0212.539] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0212.539] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0212.539] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0212.540] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\268TPJIA.txt", dwFileAttributes=0x80) returned 1 [0212.540] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\268TPJIA.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\268tpjia.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0212.541] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=620) returned 1 [0212.541] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=620) returned 1 [0212.541] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x14a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.541] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0212.542] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0212.542] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9aea0) returned 1 [0212.542] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0212.543] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0212.543] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x26c, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x26c, lpOverlapped=0x0) returned 1 [0212.543] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0212.543] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x26c, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x270) returned 1 [0212.543] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0212.543] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x270, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x270, lpOverlapped=0x0) returned 1 [0212.543] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0212.543] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0212.543] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0212.543] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0212.598] CloseHandle (hObject=0x5cc) returned 1 [0212.619] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0212.624] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0212.624] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0212.624] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0212.624] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0212.625] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\6KWA3R8C.txt", dwFileAttributes=0x80) returned 1 [0212.625] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\6KWA3R8C.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\6kwa3r8c.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0212.626] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=77) returned 1 [0212.626] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=77) returned 1 [0212.626] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a0a0) returned 1 [0212.626] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0212.627] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0212.627] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x4d, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x4d, lpOverlapped=0x0) returned 1 [0212.628] CryptEncrypt (in: hKey=0x665ab9a0a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0212.628] CryptEncrypt (in: hKey=0x665ab9a0a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x4d, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x50) returned 1 [0212.628] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0212.628] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x50, lpOverlapped=0x0) returned 1 [0212.628] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0212.628] CryptExportKey (in: hKey=0x665ab9a0a0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0212.628] CryptExportKey (in: hKey=0x665ab9a0a0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0212.629] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0212.629] CloseHandle (hObject=0x5cc) returned 1 [0212.650] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0212.655] CryptDestroyKey (hKey=0x665ab9a0a0) returned 1 [0212.655] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0212.656] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0212.656] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0212.656] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\85DGK2J5.txt", dwFileAttributes=0x80) returned 1 [0212.657] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\85DGK2J5.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\85dgk2j5.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0212.658] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=213) returned 1 [0212.658] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=213) returned 1 [0212.658] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a490) returned 1 [0212.658] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0212.658] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0212.658] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0xd5, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0xd5, lpOverlapped=0x0) returned 1 [0212.660] CryptEncrypt (in: hKey=0x665ab9a490, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0212.660] CryptEncrypt (in: hKey=0x665ab9a490, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0xd5, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0xe0) returned 1 [0212.660] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0212.660] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0xe0, lpOverlapped=0x0) returned 1 [0212.660] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0212.660] CryptExportKey (in: hKey=0x665ab9a490, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0212.660] CryptExportKey (in: hKey=0x665ab9a490, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0212.660] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0212.660] CloseHandle (hObject=0x5cc) returned 1 [0212.682] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0212.687] CryptDestroyKey (hKey=0x665ab9a490) returned 1 [0212.687] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0212.688] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0212.688] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0212.689] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\container.dat", dwFileAttributes=0x80) returned 1 [0212.690] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0212.690] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=0) returned 1 [0212.690] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=0) returned 1 [0212.690] CloseHandle (hObject=0x5cc) returned 1 [0212.691] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0212.691] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0212.691] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0212.691] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\FPNDV7T3.txt", dwFileAttributes=0x80) returned 1 [0212.692] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\FPNDV7T3.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\fpndv7t3.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0212.693] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=416) returned 1 [0212.693] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=416) returned 1 [0212.693] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x7e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.693] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0212.694] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0212.694] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a6c0) returned 1 [0212.694] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0212.695] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0212.695] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x1a0, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x1a0, lpOverlapped=0x0) returned 1 [0212.695] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0212.695] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x1a0, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x1b0) returned 1 [0212.695] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0212.695] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x1b0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x1b0, lpOverlapped=0x0) returned 1 [0212.695] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0212.695] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0212.695] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0212.695] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0212.695] CloseHandle (hObject=0x5cc) returned 1 [0212.718] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0212.724] CryptDestroyKey (hKey=0x665ab9a6c0) returned 1 [0212.724] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0212.724] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0212.724] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0212.725] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\J9KFLZDX.txt", dwFileAttributes=0x80) returned 1 [0212.726] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\J9KFLZDX.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\j9kflzdx.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0212.727] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=385) returned 1 [0212.727] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=385) returned 1 [0212.727] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.727] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0212.728] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0212.728] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a3b0) returned 1 [0212.728] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0212.729] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0212.729] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x181, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x181, lpOverlapped=0x0) returned 1 [0212.729] CryptEncrypt (in: hKey=0x665ab9a3b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0212.729] CryptEncrypt (in: hKey=0x665ab9a3b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x181, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x190) returned 1 [0212.729] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0212.729] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x190, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x190, lpOverlapped=0x0) returned 1 [0212.729] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0212.729] CryptExportKey (in: hKey=0x665ab9a3b0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0212.729] CryptExportKey (in: hKey=0x665ab9a3b0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0212.730] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0212.730] CloseHandle (hObject=0x5cc) returned 1 [0212.752] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0212.757] CryptDestroyKey (hKey=0x665ab9a3b0) returned 1 [0212.757] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0212.757] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0212.757] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0212.757] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\JN00AKV9.txt", dwFileAttributes=0x80) returned 1 [0212.758] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\JN00AKV9.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\jn00akv9.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0212.759] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=88) returned 1 [0212.759] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=88) returned 1 [0212.759] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9aea0) returned 1 [0212.759] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0212.759] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0212.759] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x58, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x58, lpOverlapped=0x0) returned 1 [0212.761] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0212.761] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x58, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x60) returned 1 [0212.761] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0212.761] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x60, lpOverlapped=0x0) returned 1 [0212.761] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0212.761] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0212.761] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0212.761] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0212.761] CloseHandle (hObject=0x5cc) returned 1 [0212.783] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0212.788] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0212.789] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0212.789] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0212.789] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0212.789] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\OR8K8VRM.txt", dwFileAttributes=0x80) returned 1 [0212.790] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\OR8K8VRM.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\or8k8vrm.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0212.790] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=260) returned 1 [0212.790] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=260) returned 1 [0212.791] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a3b0) returned 1 [0212.791] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0212.791] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0212.791] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x104, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x104, lpOverlapped=0x0) returned 1 [0212.792] CryptEncrypt (in: hKey=0x665ab9a3b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0212.792] CryptEncrypt (in: hKey=0x665ab9a3b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x104, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x110) returned 1 [0212.792] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0212.792] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x110, lpOverlapped=0x0) returned 1 [0212.793] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0212.793] CryptExportKey (in: hKey=0x665ab9a3b0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0212.793] CryptExportKey (in: hKey=0x665ab9a3b0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0212.793] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0212.793] CloseHandle (hObject=0x5cc) returned 1 [0212.815] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0212.820] CryptDestroyKey (hKey=0x665ab9a3b0) returned 1 [0212.821] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0212.821] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0212.821] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0212.821] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\TK0LXHBL.txt", dwFileAttributes=0x80) returned 1 [0212.822] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\TK0LXHBL.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\tk0lxhbl.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0212.822] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=211) returned 1 [0212.822] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=211) returned 1 [0212.822] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9af10) returned 1 [0212.823] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0212.823] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0212.823] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0xd3, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0xd3, lpOverlapped=0x0) returned 1 [0212.824] CryptEncrypt (in: hKey=0x665ab9af10, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0212.824] CryptEncrypt (in: hKey=0x665ab9af10, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0xd3, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0xe0) returned 1 [0212.824] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0212.824] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0xe0, lpOverlapped=0x0) returned 1 [0212.825] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0212.825] CryptExportKey (in: hKey=0x665ab9af10, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0212.825] CryptExportKey (in: hKey=0x665ab9af10, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0212.825] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0212.825] CloseHandle (hObject=0x5cc) returned 1 [0212.847] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0212.853] CryptDestroyKey (hKey=0x665ab9af10) returned 1 [0212.853] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0212.853] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0212.853] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0212.853] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\VC62GJSF.txt", dwFileAttributes=0x80) returned 1 [0212.855] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\VC62GJSF.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\vc62gjsf.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0212.855] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=182) returned 1 [0212.855] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=182) returned 1 [0212.855] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a6c0) returned 1 [0212.855] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0212.855] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0212.856] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0xb6, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0xb6, lpOverlapped=0x0) returned 1 [0212.857] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0212.857] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0xb6, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0xc0) returned 1 [0212.857] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0212.857] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0xc0, lpOverlapped=0x0) returned 1 [0212.857] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0212.857] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0212.857] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0212.857] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0212.858] CloseHandle (hObject=0x5cc) returned 1 [0212.880] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0212.885] CryptDestroyKey (hKey=0x665ab9a6c0) returned 1 [0212.885] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0212.885] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0212.885] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0212.886] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\VSMDVD55.txt", dwFileAttributes=0x80) returned 1 [0212.886] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\VSMDVD55.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\vsmdvd55.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0212.887] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=92) returned 1 [0212.887] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=92) returned 1 [0212.887] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a110) returned 1 [0212.887] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0212.887] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0212.887] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x5c, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x5c, lpOverlapped=0x0) returned 1 [0212.889] CryptEncrypt (in: hKey=0x665ab9a110, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0212.889] CryptEncrypt (in: hKey=0x665ab9a110, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x5c, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x60) returned 1 [0212.889] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0212.889] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x60, lpOverlapped=0x0) returned 1 [0212.889] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0212.889] CryptExportKey (in: hKey=0x665ab9a110, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0212.889] CryptExportKey (in: hKey=0x665ab9a110, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0212.889] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0212.889] CloseHandle (hObject=0x5cc) returned 1 [0212.919] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0212.925] CryptDestroyKey (hKey=0x665ab9a110) returned 1 [0212.925] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0212.925] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0 [0212.925] FindClose (in: hFindFile=0x665d90cce0 | out: hFindFile=0x665d90cce0) returned 1 [0212.925] SetLastError (dwErrCode=0x0) [0212.925] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0212.926] GetLastError () returned 0x0 [0212.926] WriteFile (in: hFile=0x440, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7a5d0*=0x324, lpOverlapped=0x0) returned 1 [0212.927] CloseHandle (hObject=0x440) returned 1 [0212.927] FindNextFileW (in: hFindFile=0x665d90bf60, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0212.927] SetLastError (dwErrCode=0x0) [0212.927] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0212.928] GetLastError () returned 0xb7 [0212.928] CloseHandle (hObject=0x440) returned 1 [0212.928] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\History\\*.*", lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0x665d90bea0 [0212.928] FindNextFileW (in: hFindFile=0x665d90bea0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0212.928] FindNextFileW (in: hFindFile=0x665d90bea0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0212.928] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0212.928] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\History\\container.dat", dwFileAttributes=0x80) returned 1 [0212.930] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\History\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\history\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0212.930] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=0) returned 1 [0212.930] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=0) returned 1 [0212.930] CloseHandle (hObject=0x5cc) returned 1 [0212.931] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0212.931] FindNextFileW (in: hFindFile=0x665d90bea0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0 [0212.931] FindClose (in: hFindFile=0x665d90bea0 | out: hFindFile=0x665d90bea0) returned 1 [0212.931] SetLastError (dwErrCode=0x0) [0212.932] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\History\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\history\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0212.933] GetLastError () returned 0x0 [0212.933] WriteFile (in: hFile=0x440, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7a5d0*=0x324, lpOverlapped=0x0) returned 1 [0212.934] CloseHandle (hObject=0x440) returned 1 [0212.934] FindNextFileW (in: hFindFile=0x665d90bf60, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0212.934] SetLastError (dwErrCode=0x0) [0212.934] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0212.935] GetLastError () returned 0xb7 [0212.935] CloseHandle (hObject=0x440) returned 1 [0212.935] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatCache\\*.*", lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0x665d90d0a0 [0212.935] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0212.935] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0212.935] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0212.936] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatCache\\container.dat", dwFileAttributes=0x80) returned 1 [0212.936] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\iecompatcache\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0212.937] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=0) returned 1 [0212.937] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=0) returned 1 [0212.937] CloseHandle (hObject=0x5cc) returned 1 [0212.937] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0212.937] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0 [0212.937] FindClose (in: hFindFile=0x665d90d0a0 | out: hFindFile=0x665d90d0a0) returned 1 [0212.937] SetLastError (dwErrCode=0x0) [0212.937] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\iecompatcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0212.938] GetLastError () returned 0x0 [0212.938] WriteFile (in: hFile=0x440, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7a5d0*=0x324, lpOverlapped=0x0) returned 1 [0212.939] CloseHandle (hObject=0x440) returned 1 [0212.940] FindNextFileW (in: hFindFile=0x665d90bf60, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0212.940] SetLastError (dwErrCode=0x0) [0212.940] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0212.940] GetLastError () returned 0xb7 [0212.940] CloseHandle (hObject=0x440) returned 1 [0212.940] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatUaCache\\*.*", lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0x665d90cce0 [0212.940] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0212.941] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0212.941] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0212.941] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatUaCache\\container.dat", dwFileAttributes=0x80) returned 1 [0212.943] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatUaCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\iecompatuacache\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0212.943] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=0) returned 1 [0212.943] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=0) returned 1 [0212.943] CloseHandle (hObject=0x5cc) returned 1 [0212.944] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0212.944] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0 [0212.944] FindClose (in: hFindFile=0x665d90cce0 | out: hFindFile=0x665d90cce0) returned 1 [0212.944] SetLastError (dwErrCode=0x0) [0212.944] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatUaCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\iecompatuacache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0212.946] GetLastError () returned 0x0 [0212.946] WriteFile (in: hFile=0x440, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7a5d0*=0x324, lpOverlapped=0x0) returned 1 [0212.947] CloseHandle (hObject=0x440) returned 1 [0212.947] FindNextFileW (in: hFindFile=0x665d90bf60, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0212.947] SetLastError (dwErrCode=0x0) [0212.947] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0212.947] GetLastError () returned 0xb7 [0212.947] CloseHandle (hObject=0x440) returned 1 [0212.948] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IEFlipAheadCache\\*.*", lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0x665d90cb60 [0212.948] FindNextFileW (in: hFindFile=0x665d90cb60, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0212.948] FindNextFileW (in: hFindFile=0x665d90cb60, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0212.948] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0212.948] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IEFlipAheadCache\\container.dat", dwFileAttributes=0x80) returned 1 [0212.949] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IEFlipAheadCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\ieflipaheadcache\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0212.949] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=0) returned 1 [0212.949] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=0) returned 1 [0212.949] CloseHandle (hObject=0x5cc) returned 1 [0212.950] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0212.950] FindNextFileW (in: hFindFile=0x665d90cb60, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0 [0212.950] FindClose (in: hFindFile=0x665d90cb60 | out: hFindFile=0x665d90cb60) returned 1 [0212.950] SetLastError (dwErrCode=0x0) [0212.950] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IEFlipAheadCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\ieflipaheadcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0212.951] GetLastError () returned 0x0 [0212.951] WriteFile (in: hFile=0x440, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7a5d0*=0x324, lpOverlapped=0x0) returned 1 [0212.952] CloseHandle (hObject=0x440) returned 1 [0212.952] FindNextFileW (in: hFindFile=0x665d90bf60, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0212.952] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0212.952] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\MSIMGSIZ.DAT", dwFileAttributes=0x80) returned 1 [0212.953] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\MSIMGSIZ.DAT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\msimgsiz.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0212.953] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x665da7a3c8 | out: lpFileSize=0x665da7a3c8*=49120) returned 1 [0212.954] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x665da7a3d8 | out: lpFileSize=0x665da7a3d8*=49120) returned 1 [0212.954] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0xbebe, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.954] ReadFile (in: hFile=0x440, lpBuffer=0x665da7a428, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7a3e8, lpOverlapped=0x0 | out: lpBuffer=0x665da7a428*, lpNumberOfBytesRead=0x665da7a3e8*=0x19, lpOverlapped=0x0) returned 1 [0212.989] SetFilePointer (in: hFile=0x440, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0212.989] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7a3b0 | out: phKey=0x665da7a3b0*=0x665ab9a880) returned 1 [0212.989] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0212.989] SetFilePointer (in: hFile=0x440, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0212.989] ReadFile (in: hFile=0x440, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0xbfe0, lpNumberOfBytesRead=0x665da7a3c0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7a3c0*=0xbfe0, lpOverlapped=0x0) returned 1 [0213.013] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7a3bc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7a3bc*=0xf4250) returned 1 [0213.013] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7a3b8*=0xbfe0, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7a3b8*=0xbff0) returned 1 [0213.013] SetFilePointer (in: hFile=0x440, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0213.013] WriteFile (in: hFile=0x440, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0xbff0, lpNumberOfBytesWritten=0x665da7a3c0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7a3c0*=0xbff0, lpOverlapped=0x0) returned 1 [0213.014] WriteFile (in: hFile=0x440, lpBuffer=0x665da7a400*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7a3c4, lpOverlapped=0x0 | out: lpBuffer=0x665da7a400*, lpNumberOfBytesWritten=0x665da7a3c4*=0x6, lpOverlapped=0x0) returned 1 [0213.014] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7a3d0 | out: pbData=0x0*, pdwDataLen=0x665da7a3d0*=0x10c) returned 1 [0213.014] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7a450, pdwDataLen=0x665da7a3d0 | out: pbData=0x665da7a450*, pdwDataLen=0x665da7a3d0*=0x10c) returned 1 [0213.014] WriteFile (in: hFile=0x440, lpBuffer=0x665da7a450*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7a3c4, lpOverlapped=0x0 | out: lpBuffer=0x665da7a450*, lpNumberOfBytesWritten=0x665da7a3c4*=0x10c, lpOverlapped=0x0) returned 1 [0213.014] CloseHandle (hObject=0x440) returned 1 [0213.033] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0213.039] CryptDestroyKey (hKey=0x665ab9a880) returned 1 [0213.039] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0213.039] FindNextFileW (in: hFindFile=0x665d90bf60, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0213.039] SetLastError (dwErrCode=0x0) [0213.039] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0213.039] GetLastError () returned 0xb7 [0213.039] CloseHandle (hObject=0x440) returned 1 [0213.039] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\*.*", lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0x665d90c2c0 [0213.040] FindNextFileW (in: hFindFile=0x665d90c2c0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0213.040] FindNextFileW (in: hFindFile=0x665d90c2c0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0213.040] SetLastError (dwErrCode=0x0) [0213.040] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\user\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0213.041] GetLastError () returned 0x0 [0213.041] WriteFile (in: hFile=0x5cc, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da79e20*=0x324, lpOverlapped=0x0) returned 1 [0213.042] CloseHandle (hObject=0x5cc) returned 1 [0213.042] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665d90ce60 [0213.042] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0213.042] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0213.042] SetLastError (dwErrCode=0x0) [0213.042] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\user\\default\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0213.044] GetLastError () returned 0x0 [0213.044] WriteFile (in: hFile=0x410, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da79670*=0x324, lpOverlapped=0x0) returned 1 [0213.045] CloseHandle (hObject=0x410) returned 1 [0213.045] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665d90caa0 [0213.064] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0213.064] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0213.064] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0213.064] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\container.dat", dwFileAttributes=0x80) returned 1 [0213.065] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\user\\default\\appcache\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x450 [0213.066] GetFileSizeEx (in: hFile=0x450, lpFileSize=0x665da78cb8 | out: lpFileSize=0x665da78cb8*=0) returned 1 [0213.066] GetFileSizeEx (in: hFile=0x450, lpFileSize=0x665da78cc8 | out: lpFileSize=0x665da78cc8*=0) returned 1 [0213.066] CloseHandle (hObject=0x450) returned 1 [0213.066] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0213.066] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0213.066] SetLastError (dwErrCode=0x0) [0213.066] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\user\\default\\appcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x450 [0213.067] GetLastError () returned 0x0 [0213.067] WriteFile (in: hFile=0x450, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da78ec0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da78ec0*=0x324, lpOverlapped=0x0) returned 1 [0213.068] CloseHandle (hObject=0x450) returned 1 [0213.068] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\Y2EKXLK8\\*.*", lpFindFileData=0x665da78760 | out: lpFindFileData=0x665da78760) returned 0x665d90d100 [0213.068] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da78760 | out: lpFindFileData=0x665da78760) returned 1 [0213.068] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da78760 | out: lpFindFileData=0x665da78760) returned 1 [0213.068] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0213.069] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\Y2EKXLK8\\container.dat", dwFileAttributes=0x80) returned 1 [0213.069] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\Y2EKXLK8\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\user\\default\\appcache\\y2ekxlk8\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5dc [0213.070] GetFileSizeEx (in: hFile=0x5dc, lpFileSize=0x665da78508 | out: lpFileSize=0x665da78508*=0) returned 1 [0213.070] GetFileSizeEx (in: hFile=0x5dc, lpFileSize=0x665da78518 | out: lpFileSize=0x665da78518*=0) returned 1 [0213.070] CloseHandle (hObject=0x5dc) returned 1 [0213.070] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0213.070] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da78760 | out: lpFindFileData=0x665da78760) returned 0 [0213.070] FindClose (in: hFindFile=0x665d90d100 | out: hFindFile=0x665d90d100) returned 1 [0213.070] SetLastError (dwErrCode=0x0) [0213.070] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\Y2EKXLK8\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\user\\default\\appcache\\y2ekxlk8\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x450 [0213.071] GetLastError () returned 0x0 [0213.072] WriteFile (in: hFile=0x450, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da78ec0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da78ec0*=0x324, lpOverlapped=0x0) returned 1 [0213.073] CloseHandle (hObject=0x450) returned 1 [0213.073] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0213.073] FindClose (in: hFindFile=0x665d90caa0 | out: hFindFile=0x665d90caa0) returned 1 [0213.073] SetLastError (dwErrCode=0x0) [0213.073] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\user\\default\\appcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0213.073] GetLastError () returned 0xb7 [0213.073] CloseHandle (hObject=0x410) returned 1 [0213.073] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0213.073] SetLastError (dwErrCode=0x0) [0213.073] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\user\\default\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0213.074] GetLastError () returned 0xb7 [0213.074] CloseHandle (hObject=0x410) returned 1 [0213.074] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\EmieSiteList\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665d90bd80 [0213.074] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0213.074] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0213.074] FindClose (in: hFindFile=0x665d90bd80 | out: hFindFile=0x665d90bd80) returned 1 [0213.074] SetLastError (dwErrCode=0x0) [0213.074] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\EmieSiteList\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\user\\default\\emiesitelist\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0213.075] GetLastError () returned 0x0 [0213.075] WriteFile (in: hFile=0x410, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da79670*=0x324, lpOverlapped=0x0) returned 1 [0213.076] CloseHandle (hObject=0x410) returned 1 [0213.076] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0213.076] FindClose (in: hFindFile=0x665d90ce60 | out: hFindFile=0x665d90ce60) returned 1 [0213.076] SetLastError (dwErrCode=0x0) [0213.076] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\user\\default\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0213.076] GetLastError () returned 0xb7 [0213.076] CloseHandle (hObject=0x5cc) returned 1 [0213.076] FindNextFileW (in: hFindFile=0x665d90c2c0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0 [0213.077] FindClose (in: hFindFile=0x665d90c2c0 | out: hFindFile=0x665d90c2c0) returned 1 [0213.077] SetLastError (dwErrCode=0x0) [0213.077] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\user\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0213.077] GetLastError () returned 0xb7 [0213.077] CloseHandle (hObject=0x440) returned 1 [0213.077] FindNextFileW (in: hFindFile=0x665d90bf60, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0213.077] FindClose (in: hFindFile=0x665d90bf60 | out: hFindFile=0x665d90bf60) returned 1 [0213.077] SetLastError (dwErrCode=0x0) [0213.077] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0213.077] GetLastError () returned 0xb7 [0213.078] CloseHandle (hObject=0x654) returned 1 [0213.078] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0213.078] SetLastError (dwErrCode=0x0) [0213.078] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0213.078] GetLastError () returned 0xb7 [0213.078] CloseHandle (hObject=0x654) returned 1 [0213.078] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Temp\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665d90d280 [0213.078] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0213.078] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0213.078] FindClose (in: hFindFile=0x665d90d280 | out: hFindFile=0x665d90d280) returned 1 [0213.078] SetLastError (dwErrCode=0x0) [0213.078] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Temp\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\temp\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0213.080] GetLastError () returned 0x0 [0213.080] WriteFile (in: hFile=0x654, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7ad80*=0x324, lpOverlapped=0x0) returned 1 [0213.081] CloseHandle (hObject=0x654) returned 1 [0213.081] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0213.081] SetLastError (dwErrCode=0x0) [0213.081] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0213.081] GetLastError () returned 0xb7 [0213.082] CloseHandle (hObject=0x654) returned 1 [0213.082] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\TempState\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665d90c080 [0213.082] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0213.082] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0213.082] FindClose (in: hFindFile=0x665d90c080 | out: hFindFile=0x665d90c080) returned 1 [0213.082] SetLastError (dwErrCode=0x0) [0213.082] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\TempState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\tempstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0213.083] GetLastError () returned 0x0 [0213.083] WriteFile (in: hFile=0x654, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7ad80*=0x324, lpOverlapped=0x0) returned 1 [0213.084] CloseHandle (hObject=0x654) returned 1 [0213.084] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0213.084] FindClose (in: hFindFile=0x665d90c0e0 | out: hFindFile=0x665d90c0e0) returned 1 [0213.084] SetLastError (dwErrCode=0x0) [0213.084] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0213.084] GetLastError () returned 0xb7 [0213.084] CloseHandle (hObject=0x3e8) returned 1 [0213.084] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0213.084] SetLastError (dwErrCode=0x0) [0213.084] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0213.085] GetLastError () returned 0xb7 [0213.085] CloseHandle (hObject=0x3e8) returned 1 [0213.085] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c6e0 [0213.086] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0213.086] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0213.086] SetLastError (dwErrCode=0x0) [0213.086] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0213.088] GetLastError () returned 0x0 [0213.088] WriteFile (in: hFile=0x654, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7ad80*=0x324, lpOverlapped=0x0) returned 1 [0213.089] CloseHandle (hObject=0x654) returned 1 [0213.089] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\INetCache\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665d90ce60 [0213.090] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0213.090] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0213.090] FindClose (in: hFindFile=0x665d90ce60 | out: hFindFile=0x665d90ce60) returned 1 [0213.090] SetLastError (dwErrCode=0x0) [0213.090] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\INetCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\inetcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0213.091] GetLastError () returned 0x0 [0213.091] WriteFile (in: hFile=0x654, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7ad80*=0x324, lpOverlapped=0x0) returned 1 [0213.092] CloseHandle (hObject=0x654) returned 1 [0213.092] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0213.092] SetLastError (dwErrCode=0x0) [0213.092] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0213.092] GetLastError () returned 0xb7 [0213.092] CloseHandle (hObject=0x654) returned 1 [0213.093] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\INetCookies\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665d90d0a0 [0213.093] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0213.093] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0213.093] FindClose (in: hFindFile=0x665d90d0a0 | out: hFindFile=0x665d90d0a0) returned 1 [0213.093] SetLastError (dwErrCode=0x0) [0213.093] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\INetCookies\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\inetcookies\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0213.095] GetLastError () returned 0x0 [0213.095] WriteFile (in: hFile=0x654, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7ad80*=0x324, lpOverlapped=0x0) returned 1 [0213.096] CloseHandle (hObject=0x654) returned 1 [0213.096] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0213.096] SetLastError (dwErrCode=0x0) [0213.096] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0213.096] GetLastError () returned 0xb7 [0213.096] CloseHandle (hObject=0x654) returned 1 [0213.096] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\INetHistory\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665d90d100 [0213.096] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0213.096] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0213.097] FindClose (in: hFindFile=0x665d90d100 | out: hFindFile=0x665d90d100) returned 1 [0213.097] SetLastError (dwErrCode=0x0) [0213.097] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\INetHistory\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\inethistory\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0213.097] GetLastError () returned 0x0 [0213.097] WriteFile (in: hFile=0x654, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7ad80*=0x324, lpOverlapped=0x0) returned 1 [0213.098] CloseHandle (hObject=0x654) returned 1 [0213.098] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0213.098] SetLastError (dwErrCode=0x0) [0213.098] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0213.099] GetLastError () returned 0xb7 [0213.099] CloseHandle (hObject=0x654) returned 1 [0213.099] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\LocalState\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665d90d0a0 [0213.099] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0213.099] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0213.099] FindClose (in: hFindFile=0x665d90d0a0 | out: hFindFile=0x665d90d0a0) returned 1 [0213.099] SetLastError (dwErrCode=0x0) [0213.099] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\LocalState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\localstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0213.101] GetLastError () returned 0x0 [0213.101] WriteFile (in: hFile=0x654, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7ad80*=0x324, lpOverlapped=0x0) returned 1 [0213.102] CloseHandle (hObject=0x654) returned 1 [0213.102] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0213.102] SetLastError (dwErrCode=0x0) [0213.102] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0213.103] GetLastError () returned 0xb7 [0213.103] CloseHandle (hObject=0x654) returned 1 [0213.103] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665d90cda0 [0213.104] FindNextFileW (in: hFindFile=0x665d90cda0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0213.104] FindNextFileW (in: hFindFile=0x665d90cda0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0213.104] SetLastError (dwErrCode=0x0) [0213.104] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0213.267] GetLastError () returned 0x0 [0213.267] WriteFile (in: hFile=0x440, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7a5d0*=0x324, lpOverlapped=0x0) returned 1 [0213.268] CloseHandle (hObject=0x440) returned 1 [0213.268] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\*.*", lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0x665d90c0e0 [0213.268] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0213.268] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0213.268] SetLastError (dwErrCode=0x0) [0213.269] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0213.286] GetLastError () returned 0x0 [0213.286] WriteFile (in: hFile=0x5cc, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da79e20*=0x324, lpOverlapped=0x0) returned 1 [0213.287] CloseHandle (hObject=0x5cc) returned 1 [0213.287] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665d90c560 [0213.317] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0213.317] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0213.317] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0213.318] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\1DAF2884EC4DFA96BA4A58D4DBC9C406", dwFileAttributes=0x80) returned 1 [0213.319] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\1DAF2884EC4DFA96BA4A58D4DBC9C406" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\1daf2884ec4dfa96ba4a58d4dbc9c406"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0213.319] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=3869) returned 1 [0213.319] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=3869) returned 1 [0213.319] SetFilePointerEx (in: hFile=0x410, liDistanceToMove=0xdfb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.319] ReadFile (in: hFile=0x410, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0213.321] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0213.321] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665ab9aea0) returned 1 [0213.321] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0213.321] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0213.321] ReadFile (in: hFile=0x410, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0xf1d, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79460*=0xf1d, lpOverlapped=0x0) returned 1 [0213.321] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0213.321] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0xf1d, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0xf20) returned 1 [0213.321] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0213.321] WriteFile (in: hFile=0x410, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0xf20, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79460*=0xf20, lpOverlapped=0x0) returned 1 [0213.321] WriteFile (in: hFile=0x410, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0213.321] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0213.322] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0213.322] WriteFile (in: hFile=0x410, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0213.322] CloseHandle (hObject=0x410) returned 1 [0213.336] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0213.341] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0213.341] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0213.341] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0213.341] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0213.341] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", dwFileAttributes=0x80) returned 1 [0213.342] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0213.342] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=2920) returned 1 [0213.342] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=2920) returned 1 [0213.342] SetFilePointerEx (in: hFile=0x410, liDistanceToMove=0xa46, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.342] ReadFile (in: hFile=0x410, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0213.343] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0213.343] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665ab9a880) returned 1 [0213.343] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0213.344] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0213.344] ReadFile (in: hFile=0x410, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0xb68, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79460*=0xb68, lpOverlapped=0x0) returned 1 [0213.344] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0213.344] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0xb68, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0xb70) returned 1 [0213.344] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0213.344] WriteFile (in: hFile=0x410, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0xb70, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79460*=0xb70, lpOverlapped=0x0) returned 1 [0213.344] WriteFile (in: hFile=0x410, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0213.344] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0213.345] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0213.345] WriteFile (in: hFile=0x410, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0213.345] CloseHandle (hObject=0x410) returned 1 [0213.359] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0213.364] CryptDestroyKey (hKey=0x665ab9a880) returned 1 [0213.364] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0213.364] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0213.364] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0213.365] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", dwFileAttributes=0x80) returned 1 [0213.365] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0213.366] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=6564) returned 1 [0213.366] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=6564) returned 1 [0213.366] SetFilePointerEx (in: hFile=0x410, liDistanceToMove=0x1882, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.366] ReadFile (in: hFile=0x410, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0213.368] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0213.368] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665ab9aab0) returned 1 [0213.368] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0213.368] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0213.368] ReadFile (in: hFile=0x410, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x19a4, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79460*=0x19a4, lpOverlapped=0x0) returned 1 [0213.385] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0213.385] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x19a4, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x19b0) returned 1 [0213.385] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0213.385] WriteFile (in: hFile=0x410, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x19b0, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79460*=0x19b0, lpOverlapped=0x0) returned 1 [0213.386] WriteFile (in: hFile=0x410, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0213.386] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0213.386] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0213.386] WriteFile (in: hFile=0x410, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0213.386] CloseHandle (hObject=0x410) returned 1 [0213.404] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0213.410] CryptDestroyKey (hKey=0x665ab9aab0) returned 1 [0213.410] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0213.410] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0213.410] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0213.411] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", dwFileAttributes=0x80) returned 1 [0213.412] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0213.412] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=0) returned 1 [0213.412] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=0) returned 1 [0213.412] CloseHandle (hObject=0x410) returned 1 [0213.413] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0213.413] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0213.413] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0213.413] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE", dwFileAttributes=0x80) returned 1 [0213.414] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\8828f39c7c0ce9a14b25c7eb321181ba_8c550960e440b9c3b93a6a0aa915c9be"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0213.414] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=1763) returned 1 [0213.414] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=1763) returned 1 [0213.414] SetFilePointerEx (in: hFile=0x410, liDistanceToMove=0x5c1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.414] ReadFile (in: hFile=0x410, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0213.416] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0213.416] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665ab9a880) returned 1 [0213.416] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0213.417] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0213.417] ReadFile (in: hFile=0x410, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x6e3, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79460*=0x6e3, lpOverlapped=0x0) returned 1 [0213.417] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0213.417] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x6e3, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x6f0) returned 1 [0213.417] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0213.417] WriteFile (in: hFile=0x410, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x6f0, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79460*=0x6f0, lpOverlapped=0x0) returned 1 [0213.417] WriteFile (in: hFile=0x410, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0213.417] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0213.417] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0213.418] WriteFile (in: hFile=0x410, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0213.418] CloseHandle (hObject=0x410) returned 1 [0213.439] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0213.444] CryptDestroyKey (hKey=0x665ab9a880) returned 1 [0213.444] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0213.444] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0213.444] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0213.445] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", dwFileAttributes=0x80) returned 1 [0213.446] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0213.446] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=7796) returned 1 [0213.446] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=7796) returned 1 [0213.446] SetFilePointerEx (in: hFile=0x410, liDistanceToMove=0x1d52, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.446] ReadFile (in: hFile=0x410, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0213.448] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0213.448] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665ab9aea0) returned 1 [0213.448] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0213.448] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0213.448] ReadFile (in: hFile=0x410, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x1e74, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79460*=0x1e74, lpOverlapped=0x0) returned 1 [0213.449] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0213.449] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x1e74, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x1e80) returned 1 [0213.449] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0213.449] WriteFile (in: hFile=0x410, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x1e80, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79460*=0x1e80, lpOverlapped=0x0) returned 1 [0213.449] WriteFile (in: hFile=0x410, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0213.449] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0213.449] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0213.450] WriteFile (in: hFile=0x410, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0213.450] CloseHandle (hObject=0x410) returned 1 [0213.471] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0213.476] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0213.476] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0213.476] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0213.476] FindClose (in: hFindFile=0x665d90c560 | out: hFindFile=0x665d90c560) returned 1 [0213.476] SetLastError (dwErrCode=0x0) [0213.476] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0213.478] GetLastError () returned 0x0 [0213.478] WriteFile (in: hFile=0x5cc, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da79e20*=0x324, lpOverlapped=0x0) returned 1 [0213.479] CloseHandle (hObject=0x5cc) returned 1 [0213.479] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0213.479] SetLastError (dwErrCode=0x0) [0213.479] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0213.479] GetLastError () returned 0xb7 [0213.479] CloseHandle (hObject=0x5cc) returned 1 [0213.479] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665d90d0a0 [0213.492] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0213.492] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0213.492] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0213.493] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\1DAF2884EC4DFA96BA4A58D4DBC9C406", dwFileAttributes=0x80) returned 1 [0213.493] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\1DAF2884EC4DFA96BA4A58D4DBC9C406" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\1daf2884ec4dfa96ba4a58d4dbc9c406"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0213.494] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=268) returned 1 [0213.494] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=268) returned 1 [0213.494] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665ab9a340) returned 1 [0213.494] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0213.494] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0213.494] ReadFile (in: hFile=0x410, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x10c, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79460*=0x10c, lpOverlapped=0x0) returned 1 [0213.496] CryptEncrypt (in: hKey=0x665ab9a340, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0213.496] CryptEncrypt (in: hKey=0x665ab9a340, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x10c, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x110) returned 1 [0213.496] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0213.496] WriteFile (in: hFile=0x410, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79460*=0x110, lpOverlapped=0x0) returned 1 [0213.496] WriteFile (in: hFile=0x410, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0213.496] CryptExportKey (in: hKey=0x665ab9a340, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0213.496] CryptExportKey (in: hKey=0x665ab9a340, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0213.496] WriteFile (in: hFile=0x410, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0213.496] CloseHandle (hObject=0x410) returned 1 [0213.517] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0213.522] CryptDestroyKey (hKey=0x665ab9a340) returned 1 [0213.522] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0213.522] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0213.522] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0213.523] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", dwFileAttributes=0x80) returned 1 [0213.523] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0213.524] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=400) returned 1 [0213.524] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=400) returned 1 [0213.524] SetFilePointerEx (in: hFile=0x410, liDistanceToMove=0x6e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.524] ReadFile (in: hFile=0x410, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0213.525] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0213.525] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665ab9aea0) returned 1 [0213.525] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0213.525] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0213.525] ReadFile (in: hFile=0x410, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x190, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79460*=0x190, lpOverlapped=0x0) returned 1 [0213.525] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0213.525] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x190, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x1a0) returned 1 [0213.525] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0213.526] WriteFile (in: hFile=0x410, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x1a0, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79460*=0x1a0, lpOverlapped=0x0) returned 1 [0213.526] WriteFile (in: hFile=0x410, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0213.526] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0213.526] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0213.526] WriteFile (in: hFile=0x410, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0213.558] CloseHandle (hObject=0x410) returned 1 [0213.580] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0213.586] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0213.586] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0213.586] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0213.586] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0213.586] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", dwFileAttributes=0x80) returned 1 [0213.587] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0213.588] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=340) returned 1 [0213.588] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=340) returned 1 [0213.588] SetFilePointerEx (in: hFile=0x410, liDistanceToMove=0x32, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.588] ReadFile (in: hFile=0x410, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0213.589] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0213.589] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665ab9aea0) returned 1 [0213.589] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0213.589] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0213.590] ReadFile (in: hFile=0x410, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x154, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79460*=0x154, lpOverlapped=0x0) returned 1 [0213.590] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0213.590] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x154, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x160) returned 1 [0213.590] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0213.590] WriteFile (in: hFile=0x410, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79460*=0x160, lpOverlapped=0x0) returned 1 [0213.590] WriteFile (in: hFile=0x410, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0213.590] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0213.590] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0213.590] WriteFile (in: hFile=0x410, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0213.592] CloseHandle (hObject=0x410) returned 1 [0213.613] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0213.619] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0213.619] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0213.619] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0213.619] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0213.620] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", dwFileAttributes=0x80) returned 1 [0213.620] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0213.621] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=290) returned 1 [0213.621] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=290) returned 1 [0213.621] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665ab9a340) returned 1 [0213.621] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0213.621] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0213.621] ReadFile (in: hFile=0x410, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x122, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79460*=0x122, lpOverlapped=0x0) returned 1 [0213.623] CryptEncrypt (in: hKey=0x665ab9a340, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0213.623] CryptEncrypt (in: hKey=0x665ab9a340, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x122, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x130) returned 1 [0213.623] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0213.623] WriteFile (in: hFile=0x410, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79460*=0x130, lpOverlapped=0x0) returned 1 [0213.623] WriteFile (in: hFile=0x410, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0213.623] CryptExportKey (in: hKey=0x665ab9a340, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0213.623] CryptExportKey (in: hKey=0x665ab9a340, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0213.623] WriteFile (in: hFile=0x410, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0213.642] CloseHandle (hObject=0x410) returned 1 [0213.662] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0213.667] CryptDestroyKey (hKey=0x665ab9a340) returned 1 [0213.667] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0213.668] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0213.668] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0213.668] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE", dwFileAttributes=0x80) returned 1 [0213.669] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\8828f39c7c0ce9a14b25c7eb321181ba_8c550960e440b9c3b93a6a0aa915c9be"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0213.670] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=396) returned 1 [0213.670] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=396) returned 1 [0213.670] SetFilePointerEx (in: hFile=0x410, liDistanceToMove=0x6a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.670] ReadFile (in: hFile=0x410, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0213.672] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0213.672] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665ab9a1f0) returned 1 [0213.672] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0213.672] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0213.672] ReadFile (in: hFile=0x410, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x18c, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79460*=0x18c, lpOverlapped=0x0) returned 1 [0213.673] CryptEncrypt (in: hKey=0x665ab9a1f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0213.673] CryptEncrypt (in: hKey=0x665ab9a1f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x18c, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x190) returned 1 [0213.673] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0213.673] WriteFile (in: hFile=0x410, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x190, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79460*=0x190, lpOverlapped=0x0) returned 1 [0213.673] WriteFile (in: hFile=0x410, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0213.673] CryptExportKey (in: hKey=0x665ab9a1f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0213.673] CryptExportKey (in: hKey=0x665ab9a1f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0213.673] WriteFile (in: hFile=0x410, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0213.675] CloseHandle (hObject=0x410) returned 1 [0213.696] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0213.702] CryptDestroyKey (hKey=0x665ab9a1f0) returned 1 [0213.702] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0213.702] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0213.702] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0213.702] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", dwFileAttributes=0x80) returned 1 [0213.703] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0213.704] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=330) returned 1 [0213.704] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=330) returned 1 [0213.704] SetFilePointerEx (in: hFile=0x410, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.704] ReadFile (in: hFile=0x410, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0213.705] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0213.705] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665ab9af10) returned 1 [0213.706] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0213.706] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0213.706] ReadFile (in: hFile=0x410, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x14a, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79460*=0x14a, lpOverlapped=0x0) returned 1 [0213.706] CryptEncrypt (in: hKey=0x665ab9af10, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0213.706] CryptEncrypt (in: hKey=0x665ab9af10, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x14a, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x150) returned 1 [0213.706] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0213.706] WriteFile (in: hFile=0x410, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x150, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79460*=0x150, lpOverlapped=0x0) returned 1 [0213.706] WriteFile (in: hFile=0x410, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0213.707] CryptExportKey (in: hKey=0x665ab9af10, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0213.707] CryptExportKey (in: hKey=0x665ab9af10, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0213.707] WriteFile (in: hFile=0x410, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0213.708] CloseHandle (hObject=0x410) returned 1 [0213.730] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0213.736] CryptDestroyKey (hKey=0x665ab9af10) returned 1 [0213.736] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0213.736] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0213.736] FindClose (in: hFindFile=0x665d90d0a0 | out: hFindFile=0x665d90d0a0) returned 1 [0213.737] SetLastError (dwErrCode=0x0) [0213.737] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0213.737] GetLastError () returned 0x0 [0213.737] WriteFile (in: hFile=0x5cc, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da79e20*=0x324, lpOverlapped=0x0) returned 1 [0213.738] CloseHandle (hObject=0x5cc) returned 1 [0213.739] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0 [0213.739] FindClose (in: hFindFile=0x665d90c0e0 | out: hFindFile=0x665d90c0e0) returned 1 [0213.739] SetLastError (dwErrCode=0x0) [0213.739] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0213.739] GetLastError () returned 0xb7 [0213.739] CloseHandle (hObject=0x440) returned 1 [0213.739] FindNextFileW (in: hFindFile=0x665d90cda0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0213.739] SetLastError (dwErrCode=0x0) [0213.739] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0213.739] GetLastError () returned 0xb7 [0213.739] CloseHandle (hObject=0x440) returned 1 [0213.740] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\*.*", lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0x665d90c440 [0213.740] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0213.740] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0213.740] SetLastError (dwErrCode=0x0) [0213.741] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\systemcertificates\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0213.742] GetLastError () returned 0x0 [0213.742] WriteFile (in: hFile=0x5cc, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da79e20*=0x324, lpOverlapped=0x0) returned 1 [0213.743] CloseHandle (hObject=0x5cc) returned 1 [0213.743] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665d90cf20 [0213.744] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0213.744] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0213.744] SetLastError (dwErrCode=0x0) [0213.744] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\systemcertificates\\my\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0213.745] GetLastError () returned 0x0 [0213.745] WriteFile (in: hFile=0x410, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da79670*=0x324, lpOverlapped=0x0) returned 1 [0213.746] CloseHandle (hObject=0x410) returned 1 [0213.746] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My\\Certificates\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665d90bfc0 [0213.746] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0213.746] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0213.746] FindClose (in: hFindFile=0x665d90bfc0 | out: hFindFile=0x665d90bfc0) returned 1 [0213.746] SetLastError (dwErrCode=0x0) [0213.746] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My\\Certificates\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\systemcertificates\\my\\certificates\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0213.748] GetLastError () returned 0x0 [0213.748] WriteFile (in: hFile=0x410, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da79670*=0x324, lpOverlapped=0x0) returned 1 [0213.749] CloseHandle (hObject=0x410) returned 1 [0213.749] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0213.749] SetLastError (dwErrCode=0x0) [0213.749] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\systemcertificates\\my\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0213.749] GetLastError () returned 0xb7 [0213.749] CloseHandle (hObject=0x410) returned 1 [0213.749] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My\\CRLs\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665d90c860 [0213.749] FindNextFileW (in: hFindFile=0x665d90c860, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0213.750] FindNextFileW (in: hFindFile=0x665d90c860, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0213.750] FindClose (in: hFindFile=0x665d90c860 | out: hFindFile=0x665d90c860) returned 1 [0213.750] SetLastError (dwErrCode=0x0) [0213.750] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My\\CRLs\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\systemcertificates\\my\\crls\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0213.750] GetLastError () returned 0x0 [0213.750] WriteFile (in: hFile=0x410, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da79670*=0x324, lpOverlapped=0x0) returned 1 [0213.752] CloseHandle (hObject=0x410) returned 1 [0213.752] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0213.752] SetLastError (dwErrCode=0x0) [0213.752] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\systemcertificates\\my\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0213.752] GetLastError () returned 0xb7 [0213.752] CloseHandle (hObject=0x410) returned 1 [0213.752] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My\\CTLs\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665d90c560 [0213.753] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0213.753] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0213.753] FindClose (in: hFindFile=0x665d90c560 | out: hFindFile=0x665d90c560) returned 1 [0213.753] SetLastError (dwErrCode=0x0) [0213.753] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My\\CTLs\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\systemcertificates\\my\\ctls\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0213.754] GetLastError () returned 0x0 [0213.754] WriteFile (in: hFile=0x410, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da79670*=0x324, lpOverlapped=0x0) returned 1 [0213.755] CloseHandle (hObject=0x410) returned 1 [0213.755] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0213.755] FindClose (in: hFindFile=0x665d90cf20 | out: hFindFile=0x665d90cf20) returned 1 [0213.755] SetLastError (dwErrCode=0x0) [0213.755] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\systemcertificates\\my\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0213.755] GetLastError () returned 0xb7 [0213.755] CloseHandle (hObject=0x5cc) returned 1 [0213.755] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0 [0213.755] FindClose (in: hFindFile=0x665d90c440 | out: hFindFile=0x665d90c440) returned 1 [0213.756] SetLastError (dwErrCode=0x0) [0213.756] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\systemcertificates\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0213.756] GetLastError () returned 0xb7 [0213.756] CloseHandle (hObject=0x440) returned 1 [0213.756] FindNextFileW (in: hFindFile=0x665d90cda0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0213.756] FindClose (in: hFindFile=0x665d90cda0 | out: hFindFile=0x665d90cda0) returned 1 [0213.756] SetLastError (dwErrCode=0x0) [0213.757] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0213.757] GetLastError () returned 0xb7 [0213.757] CloseHandle (hObject=0x654) returned 1 [0213.757] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0213.757] SetLastError (dwErrCode=0x0) [0213.757] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0213.757] GetLastError () returned 0xb7 [0213.757] CloseHandle (hObject=0x654) returned 1 [0213.757] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665d90bd20 [0213.759] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0213.759] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0213.759] SetLastError (dwErrCode=0x0) [0213.759] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0213.760] GetLastError () returned 0x0 [0213.760] WriteFile (in: hFile=0x440, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7a5d0*=0x324, lpOverlapped=0x0) returned 1 [0213.761] CloseHandle (hObject=0x440) returned 1 [0213.761] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cache\\*.*", lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0x665d90bea0 [0213.761] FindNextFileW (in: hFindFile=0x665d90bea0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0213.761] FindNextFileW (in: hFindFile=0x665d90bea0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0213.761] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0213.762] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cache\\container.dat", dwFileAttributes=0x80) returned 1 [0213.763] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cache\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0213.763] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=0) returned 1 [0213.764] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=0) returned 1 [0213.764] CloseHandle (hObject=0x5cc) returned 1 [0213.764] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0213.764] FindNextFileW (in: hFindFile=0x665d90bea0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0 [0213.764] FindClose (in: hFindFile=0x665d90bea0 | out: hFindFile=0x665d90bea0) returned 1 [0213.764] SetLastError (dwErrCode=0x0) [0213.764] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0213.765] GetLastError () returned 0x0 [0213.765] WriteFile (in: hFile=0x440, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7a5d0*=0x324, lpOverlapped=0x0) returned 1 [0213.767] CloseHandle (hObject=0x440) returned 1 [0213.767] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0213.767] SetLastError (dwErrCode=0x0) [0213.767] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0213.767] GetLastError () returned 0xb7 [0213.767] CloseHandle (hObject=0x440) returned 1 [0213.767] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\*.*", lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0x665d90c980 [0213.769] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0213.769] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0213.769] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0213.769] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\51TU1403.txt", dwFileAttributes=0x80) returned 1 [0213.770] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\51TU1403.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\51tu1403.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0213.771] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=127) returned 1 [0213.771] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=127) returned 1 [0213.771] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a110) returned 1 [0213.771] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0213.771] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0213.771] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x7f, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x7f, lpOverlapped=0x0) returned 1 [0213.772] CryptEncrypt (in: hKey=0x665ab9a110, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0213.772] CryptEncrypt (in: hKey=0x665ab9a110, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x7f, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x80) returned 1 [0213.772] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0213.773] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x80, lpOverlapped=0x0) returned 1 [0213.773] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0213.773] CryptExportKey (in: hKey=0x665ab9a110, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0213.773] CryptExportKey (in: hKey=0x665ab9a110, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0213.773] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0213.773] CloseHandle (hObject=0x5cc) returned 1 [0213.794] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0213.800] CryptDestroyKey (hKey=0x665ab9a110) returned 1 [0213.800] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0213.800] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0213.800] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0213.801] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\5GJKP08H.txt", dwFileAttributes=0x80) returned 1 [0213.802] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\5GJKP08H.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\5gjkp08h.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0213.803] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=447) returned 1 [0213.803] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=447) returned 1 [0213.803] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x9d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.803] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0213.804] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0213.804] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a340) returned 1 [0213.804] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0213.805] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0213.805] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x1bf, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x1bf, lpOverlapped=0x0) returned 1 [0213.805] CryptEncrypt (in: hKey=0x665ab9a340, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0213.805] CryptEncrypt (in: hKey=0x665ab9a340, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x1bf, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x1c0) returned 1 [0213.805] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0213.805] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x1c0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x1c0, lpOverlapped=0x0) returned 1 [0213.805] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0213.806] CryptExportKey (in: hKey=0x665ab9a340, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0213.806] CryptExportKey (in: hKey=0x665ab9a340, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0213.806] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0213.821] CloseHandle (hObject=0x5cc) returned 1 [0213.843] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0213.849] CryptDestroyKey (hKey=0x665ab9a340) returned 1 [0213.849] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0213.850] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0213.850] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0213.850] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\6NQ9V8CD.txt", dwFileAttributes=0x80) returned 1 [0213.851] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\6NQ9V8CD.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\6nq9v8cd.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0213.851] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=395) returned 1 [0213.851] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=395) returned 1 [0213.851] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x69, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.851] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0213.853] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0213.853] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a6c0) returned 1 [0213.853] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0213.853] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0213.853] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x18b, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x18b, lpOverlapped=0x0) returned 1 [0213.853] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0213.853] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x18b, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x190) returned 1 [0213.853] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0213.853] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x190, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x190, lpOverlapped=0x0) returned 1 [0213.854] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0213.854] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0213.854] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0213.854] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0213.854] CloseHandle (hObject=0x5cc) returned 1 [0213.878] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0213.884] CryptDestroyKey (hKey=0x665ab9a6c0) returned 1 [0213.884] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0213.884] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0213.884] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0213.884] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\container.dat", dwFileAttributes=0x80) returned 1 [0213.885] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0213.886] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=0) returned 1 [0213.886] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=0) returned 1 [0213.886] CloseHandle (hObject=0x5cc) returned 1 [0213.886] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0213.886] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0213.886] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0213.887] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\JZ1UUUP9.txt", dwFileAttributes=0x80) returned 1 [0213.887] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\JZ1UUUP9.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\jz1uuup9.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0213.888] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=419) returned 1 [0213.888] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=419) returned 1 [0213.888] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x81, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.888] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0213.889] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0213.889] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a880) returned 1 [0213.889] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0213.890] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0213.890] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x1a3, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x1a3, lpOverlapped=0x0) returned 1 [0213.890] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0213.890] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x1a3, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x1b0) returned 1 [0213.890] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0213.890] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x1b0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x1b0, lpOverlapped=0x0) returned 1 [0213.890] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0213.890] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0213.890] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0213.890] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0213.890] CloseHandle (hObject=0x5cc) returned 1 [0213.923] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0213.927] CryptDestroyKey (hKey=0x665ab9a880) returned 1 [0213.927] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0213.928] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0213.928] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0213.928] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\KW0ULAFV.txt", dwFileAttributes=0x80) returned 1 [0213.928] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\KW0ULAFV.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\kw0ulafv.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0213.929] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=358) returned 1 [0213.929] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=358) returned 1 [0213.929] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x44, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.929] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0213.930] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0213.930] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a340) returned 1 [0213.930] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0213.930] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0213.930] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x166, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x166, lpOverlapped=0x0) returned 1 [0213.931] CryptEncrypt (in: hKey=0x665ab9a340, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0213.931] CryptEncrypt (in: hKey=0x665ab9a340, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x166, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x170) returned 1 [0213.931] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0213.931] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x170, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x170, lpOverlapped=0x0) returned 1 [0213.931] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0213.931] CryptExportKey (in: hKey=0x665ab9a340, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0213.931] CryptExportKey (in: hKey=0x665ab9a340, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0213.931] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0213.931] CloseHandle (hObject=0x5cc) returned 1 [0213.951] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0213.956] CryptDestroyKey (hKey=0x665ab9a340) returned 1 [0213.956] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0213.956] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0213.956] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0213.957] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\SW6Z4AI1.txt", dwFileAttributes=0x80) returned 1 [0213.957] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\SW6Z4AI1.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\sw6z4ai1.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0213.958] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=209) returned 1 [0213.958] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=209) returned 1 [0213.958] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9aea0) returned 1 [0213.958] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0213.958] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0213.958] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0xd1, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0xd1, lpOverlapped=0x0) returned 1 [0213.959] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0213.959] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0xd1, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0xe0) returned 1 [0213.959] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0213.959] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0xe0, lpOverlapped=0x0) returned 1 [0213.960] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0213.960] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0213.960] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0213.960] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0213.960] CloseHandle (hObject=0x5cc) returned 1 [0213.978] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0213.983] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0213.983] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0213.983] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0213.983] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0213.984] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\TU6XBKFE.txt", dwFileAttributes=0x80) returned 1 [0213.984] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\TU6XBKFE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\tu6xbkfe.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0213.985] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=200) returned 1 [0213.985] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=200) returned 1 [0213.985] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a880) returned 1 [0213.985] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0213.986] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0213.986] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0xc8, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0xc8, lpOverlapped=0x0) returned 1 [0213.987] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0213.987] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0xc8, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0xd0) returned 1 [0213.987] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0213.987] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0xd0, lpOverlapped=0x0) returned 1 [0213.987] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0213.987] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0213.987] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0213.987] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0213.988] CloseHandle (hObject=0x5cc) returned 1 [0214.008] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0214.012] CryptDestroyKey (hKey=0x665ab9a880) returned 1 [0214.012] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0214.012] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0214.012] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0214.012] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\U9PT9V3Q.txt", dwFileAttributes=0x80) returned 1 [0214.013] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\U9PT9V3Q.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\u9pt9v3q.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0214.014] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=561) returned 1 [0214.014] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=561) returned 1 [0214.014] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x10f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.014] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0214.015] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0214.015] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a730) returned 1 [0214.015] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0214.016] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0214.016] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x231, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x231, lpOverlapped=0x0) returned 1 [0214.016] CryptEncrypt (in: hKey=0x665ab9a730, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0214.016] CryptEncrypt (in: hKey=0x665ab9a730, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x231, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x240) returned 1 [0214.016] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0214.016] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x240, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x240, lpOverlapped=0x0) returned 1 [0214.016] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0214.017] CryptExportKey (in: hKey=0x665ab9a730, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0214.017] CryptExportKey (in: hKey=0x665ab9a730, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0214.017] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0214.058] CloseHandle (hObject=0x5cc) returned 1 [0214.073] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0214.078] CryptDestroyKey (hKey=0x665ab9a730) returned 1 [0214.078] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0214.078] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0 [0214.079] FindClose (in: hFindFile=0x665d90c980 | out: hFindFile=0x665d90c980) returned 1 [0214.079] SetLastError (dwErrCode=0x0) [0214.079] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0214.080] GetLastError () returned 0x0 [0214.080] WriteFile (in: hFile=0x440, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7a5d0*=0x324, lpOverlapped=0x0) returned 1 [0214.081] CloseHandle (hObject=0x440) returned 1 [0214.081] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0214.081] SetLastError (dwErrCode=0x0) [0214.081] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0214.081] GetLastError () returned 0xb7 [0214.081] CloseHandle (hObject=0x440) returned 1 [0214.081] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\History\\*.*", lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0x665d90ca40 [0214.082] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0214.082] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0214.082] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0214.082] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\History\\container.dat", dwFileAttributes=0x80) returned 1 [0214.083] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\History\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\history\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0214.084] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=0) returned 1 [0214.084] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=0) returned 1 [0214.084] CloseHandle (hObject=0x5cc) returned 1 [0214.084] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0214.084] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0 [0214.084] FindClose (in: hFindFile=0x665d90ca40 | out: hFindFile=0x665d90ca40) returned 1 [0214.084] SetLastError (dwErrCode=0x0) [0214.084] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\History\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\history\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0214.085] GetLastError () returned 0x0 [0214.085] WriteFile (in: hFile=0x440, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7a5d0*=0x324, lpOverlapped=0x0) returned 1 [0214.086] CloseHandle (hObject=0x440) returned 1 [0214.086] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0214.086] SetLastError (dwErrCode=0x0) [0214.086] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0214.086] GetLastError () returned 0xb7 [0214.086] CloseHandle (hObject=0x440) returned 1 [0214.087] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatCache\\*.*", lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0x665d90c740 [0214.087] FindNextFileW (in: hFindFile=0x665d90c740, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0214.087] FindNextFileW (in: hFindFile=0x665d90c740, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0214.087] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0214.088] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatCache\\container.dat", dwFileAttributes=0x80) returned 1 [0214.088] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\iecompatcache\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0214.089] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=0) returned 1 [0214.089] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=0) returned 1 [0214.089] CloseHandle (hObject=0x5cc) returned 1 [0214.089] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0214.089] FindNextFileW (in: hFindFile=0x665d90c740, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0 [0214.089] FindClose (in: hFindFile=0x665d90c740 | out: hFindFile=0x665d90c740) returned 1 [0214.089] SetLastError (dwErrCode=0x0) [0214.089] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\iecompatcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0214.090] GetLastError () returned 0x0 [0214.090] WriteFile (in: hFile=0x440, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7a5d0*=0x324, lpOverlapped=0x0) returned 1 [0214.091] CloseHandle (hObject=0x440) returned 1 [0214.091] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0214.091] SetLastError (dwErrCode=0x0) [0214.091] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0214.092] GetLastError () returned 0xb7 [0214.092] CloseHandle (hObject=0x440) returned 1 [0214.092] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatUaCache\\*.*", lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0x665d90c740 [0214.092] FindNextFileW (in: hFindFile=0x665d90c740, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0214.092] FindNextFileW (in: hFindFile=0x665d90c740, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0214.092] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0214.093] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatUaCache\\container.dat", dwFileAttributes=0x80) returned 1 [0214.093] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatUaCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\iecompatuacache\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0214.094] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=0) returned 1 [0214.094] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=0) returned 1 [0214.094] CloseHandle (hObject=0x5cc) returned 1 [0214.094] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0214.094] FindNextFileW (in: hFindFile=0x665d90c740, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0 [0214.094] FindClose (in: hFindFile=0x665d90c740 | out: hFindFile=0x665d90c740) returned 1 [0214.095] SetLastError (dwErrCode=0x0) [0214.095] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatUaCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\iecompatuacache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0214.096] GetLastError () returned 0x0 [0214.096] WriteFile (in: hFile=0x440, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7a5d0*=0x324, lpOverlapped=0x0) returned 1 [0214.097] CloseHandle (hObject=0x440) returned 1 [0214.097] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0214.097] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0214.098] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\MSIMGSIZ.DAT", dwFileAttributes=0x80) returned 1 [0214.099] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\MSIMGSIZ.DAT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\msimgsiz.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0214.099] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x665da7a3c8 | out: lpFileSize=0x665da7a3c8*=49120) returned 1 [0214.099] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x665da7a3d8 | out: lpFileSize=0x665da7a3d8*=49120) returned 1 [0214.100] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0xbebe, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.100] ReadFile (in: hFile=0x440, lpBuffer=0x665da7a428, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7a3e8, lpOverlapped=0x0 | out: lpBuffer=0x665da7a428*, lpNumberOfBytesRead=0x665da7a3e8*=0x19, lpOverlapped=0x0) returned 1 [0214.114] SetFilePointer (in: hFile=0x440, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0214.114] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7a3b0 | out: phKey=0x665da7a3b0*=0x665ab9aab0) returned 1 [0214.114] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0214.114] SetFilePointer (in: hFile=0x440, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0214.114] ReadFile (in: hFile=0x440, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0xbfe0, lpNumberOfBytesRead=0x665da7a3c0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7a3c0*=0xbfe0, lpOverlapped=0x0) returned 1 [0214.122] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7a3bc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7a3bc*=0xf4250) returned 1 [0214.122] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7a3b8*=0xbfe0, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7a3b8*=0xbff0) returned 1 [0214.122] SetFilePointer (in: hFile=0x440, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0214.122] WriteFile (in: hFile=0x440, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0xbff0, lpNumberOfBytesWritten=0x665da7a3c0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7a3c0*=0xbff0, lpOverlapped=0x0) returned 1 [0214.123] WriteFile (in: hFile=0x440, lpBuffer=0x665da7a400*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7a3c4, lpOverlapped=0x0 | out: lpBuffer=0x665da7a400*, lpNumberOfBytesWritten=0x665da7a3c4*=0x6, lpOverlapped=0x0) returned 1 [0214.123] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7a3d0 | out: pbData=0x0*, pdwDataLen=0x665da7a3d0*=0x10c) returned 1 [0214.123] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7a450, pdwDataLen=0x665da7a3d0 | out: pbData=0x665da7a450*, pdwDataLen=0x665da7a3d0*=0x10c) returned 1 [0214.123] WriteFile (in: hFile=0x440, lpBuffer=0x665da7a450*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7a3c4, lpOverlapped=0x0 | out: lpBuffer=0x665da7a450*, lpNumberOfBytesWritten=0x665da7a3c4*=0x10c, lpOverlapped=0x0) returned 1 [0214.123] CloseHandle (hObject=0x440) returned 1 [0214.142] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0214.147] CryptDestroyKey (hKey=0x665ab9aab0) returned 1 [0214.147] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0214.148] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0214.148] SetLastError (dwErrCode=0x0) [0214.148] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0214.148] GetLastError () returned 0xb7 [0214.148] CloseHandle (hObject=0x440) returned 1 [0214.148] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\*.*", lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0x665d90bf60 [0214.148] FindNextFileW (in: hFindFile=0x665d90bf60, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0214.148] FindNextFileW (in: hFindFile=0x665d90bf60, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0214.149] SetLastError (dwErrCode=0x0) [0214.149] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0214.149] GetLastError () returned 0x0 [0214.149] WriteFile (in: hFile=0x5cc, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da79e20*=0x324, lpOverlapped=0x0) returned 1 [0214.150] CloseHandle (hObject=0x5cc) returned 1 [0214.150] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665d90bd80 [0214.150] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0214.150] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0214.151] SetLastError (dwErrCode=0x0) [0214.151] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0214.151] GetLastError () returned 0x0 [0214.151] WriteFile (in: hFile=0x410, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da79670*=0x324, lpOverlapped=0x0) returned 1 [0214.152] CloseHandle (hObject=0x410) returned 1 [0214.152] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665d90c920 [0214.153] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0214.153] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0214.153] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0214.153] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\container.dat", dwFileAttributes=0x80) returned 1 [0214.154] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x450 [0214.155] GetFileSizeEx (in: hFile=0x450, lpFileSize=0x665da78cb8 | out: lpFileSize=0x665da78cb8*=0) returned 1 [0214.155] GetFileSizeEx (in: hFile=0x450, lpFileSize=0x665da78cc8 | out: lpFileSize=0x665da78cc8*=0) returned 1 [0214.155] CloseHandle (hObject=0x450) returned 1 [0214.155] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0214.156] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0214.156] SetLastError (dwErrCode=0x0) [0214.156] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x450 [0214.156] GetLastError () returned 0x0 [0214.156] WriteFile (in: hFile=0x450, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da78ec0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da78ec0*=0x324, lpOverlapped=0x0) returned 1 [0214.158] CloseHandle (hObject=0x450) returned 1 [0214.158] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\*.*", lpFindFileData=0x665da78760 | out: lpFindFileData=0x665da78760) returned 0x665d90c740 [0214.158] FindNextFileW (in: hFindFile=0x665d90c740, lpFindFileData=0x665da78760 | out: lpFindFileData=0x665da78760) returned 1 [0214.158] FindNextFileW (in: hFindFile=0x665d90c740, lpFindFileData=0x665da78760 | out: lpFindFileData=0x665da78760) returned 1 [0214.158] SetLastError (dwErrCode=0x0) [0214.158] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5dc [0214.160] GetLastError () returned 0x0 [0214.160] WriteFile (in: hFile=0x5dc, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da78710, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da78710*=0x324, lpOverlapped=0x0) returned 1 [0214.161] CloseHandle (hObject=0x5dc) returned 1 [0214.161] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\*.*", lpFindFileData=0x665da77fb0 | out: lpFindFileData=0x665da77fb0) returned 0x665d90c440 [0214.189] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da77fb0 | out: lpFindFileData=0x665da77fb0) returned 1 [0214.189] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da77fb0 | out: lpFindFileData=0x665da77fb0) returned 1 [0214.189] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0214.190] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\1ab36a6a[1].js", dwFileAttributes=0x80) returned 1 [0214.191] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\1ab36a6a[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\1ab36a6a[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x604 [0214.192] GetFileSizeEx (in: hFile=0x604, lpFileSize=0x665da77d58 | out: lpFileSize=0x665da77d58*=14591) returned 1 [0214.192] GetFileSizeEx (in: hFile=0x604, lpFileSize=0x665da77d68 | out: lpFileSize=0x665da77d68*=14591) returned 1 [0214.192] SetFilePointerEx (in: hFile=0x604, liDistanceToMove=0x37dd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.192] ReadFile (in: hFile=0x604, lpBuffer=0x665da77db8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da77d78, lpOverlapped=0x0 | out: lpBuffer=0x665da77db8*, lpNumberOfBytesRead=0x665da77d78*=0x19, lpOverlapped=0x0) returned 1 [0214.274] SetFilePointer (in: hFile=0x604, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0214.274] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da77d40 | out: phKey=0x665da77d40*=0x665ab9a500) returned 1 [0214.274] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0214.274] SetFilePointer (in: hFile=0x604, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0214.274] ReadFile (in: hFile=0x604, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x38ff, lpNumberOfBytesRead=0x665da77d50, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da77d50*=0x38ff, lpOverlapped=0x0) returned 1 [0214.296] CryptEncrypt (in: hKey=0x665ab9a500, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da77d4c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da77d4c*=0xf4250) returned 1 [0214.296] CryptEncrypt (in: hKey=0x665ab9a500, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da77d48*=0x38ff, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da77d48*=0x3900) returned 1 [0214.296] SetFilePointer (in: hFile=0x604, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0214.296] WriteFile (in: hFile=0x604, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x3900, lpNumberOfBytesWritten=0x665da77d50, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da77d50*=0x3900, lpOverlapped=0x0) returned 1 [0214.297] WriteFile (in: hFile=0x604, lpBuffer=0x665da77d90*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da77d54, lpOverlapped=0x0 | out: lpBuffer=0x665da77d90*, lpNumberOfBytesWritten=0x665da77d54*=0x6, lpOverlapped=0x0) returned 1 [0214.297] CryptExportKey (in: hKey=0x665ab9a500, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da77d60 | out: pbData=0x0*, pdwDataLen=0x665da77d60*=0x10c) returned 1 [0214.297] CryptExportKey (in: hKey=0x665ab9a500, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da77de0, pdwDataLen=0x665da77d60 | out: pbData=0x665da77de0*, pdwDataLen=0x665da77d60*=0x10c) returned 1 [0214.297] WriteFile (in: hFile=0x604, lpBuffer=0x665da77de0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da77d54, lpOverlapped=0x0 | out: lpBuffer=0x665da77de0*, lpNumberOfBytesWritten=0x665da77d54*=0x10c, lpOverlapped=0x0) returned 1 [0214.297] CloseHandle (hObject=0x604) returned 1 [0214.310] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0214.315] CryptDestroyKey (hKey=0x665ab9a500) returned 1 [0214.316] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0214.316] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da77fb0 | out: lpFindFileData=0x665da77fb0) returned 1 [0214.316] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0214.316] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\1acd62c3[1].js", dwFileAttributes=0x80) returned 1 [0214.317] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\1acd62c3[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\1acd62c3[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x604 [0214.317] GetFileSizeEx (in: hFile=0x604, lpFileSize=0x665da77d58 | out: lpFileSize=0x665da77d58*=127386) returned 1 [0214.317] GetFileSizeEx (in: hFile=0x604, lpFileSize=0x665da77d68 | out: lpFileSize=0x665da77d68*=127386) returned 1 [0214.317] SetFilePointerEx (in: hFile=0x604, liDistanceToMove=0x1f078, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.318] ReadFile (in: hFile=0x604, lpBuffer=0x665da77db8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da77d78, lpOverlapped=0x0 | out: lpBuffer=0x665da77db8*, lpNumberOfBytesRead=0x665da77d78*=0x19, lpOverlapped=0x0) returned 1 [0214.320] SetFilePointer (in: hFile=0x604, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0214.320] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da77d40 | out: phKey=0x665da77d40*=0x665ab9aab0) returned 1 [0214.320] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0214.320] SetFilePointer (in: hFile=0x604, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0214.320] ReadFile (in: hFile=0x604, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x1f19a, lpNumberOfBytesRead=0x665da77d50, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da77d50*=0x1f19a, lpOverlapped=0x0) returned 1 [0214.352] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da77d4c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da77d4c*=0xf4250) returned 1 [0214.352] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da77d48*=0x1f19a, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da77d48*=0x1f1a0) returned 1 [0214.353] SetFilePointer (in: hFile=0x604, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0214.353] WriteFile (in: hFile=0x604, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x1f1a0, lpNumberOfBytesWritten=0x665da77d50, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da77d50*=0x1f1a0, lpOverlapped=0x0) returned 1 [0214.353] WriteFile (in: hFile=0x604, lpBuffer=0x665da77d90*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da77d54, lpOverlapped=0x0 | out: lpBuffer=0x665da77d90*, lpNumberOfBytesWritten=0x665da77d54*=0x6, lpOverlapped=0x0) returned 1 [0214.353] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da77d60 | out: pbData=0x0*, pdwDataLen=0x665da77d60*=0x10c) returned 1 [0214.353] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da77de0, pdwDataLen=0x665da77d60 | out: pbData=0x665da77de0*, pdwDataLen=0x665da77d60*=0x10c) returned 1 [0214.353] WriteFile (in: hFile=0x604, lpBuffer=0x665da77de0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da77d54, lpOverlapped=0x0 | out: lpBuffer=0x665da77de0*, lpNumberOfBytesWritten=0x665da77d54*=0x10c, lpOverlapped=0x0) returned 1 [0214.353] CloseHandle (hObject=0x604) returned 1 [0214.366] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0214.370] CryptDestroyKey (hKey=0x665ab9aab0) returned 1 [0214.370] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0214.370] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da77fb0 | out: lpFindFileData=0x665da77fb0) returned 1 [0214.370] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0214.371] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\236a1503[1].js", dwFileAttributes=0x80) returned 1 [0214.371] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\236a1503[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\236a1503[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x604 [0214.372] GetFileSizeEx (in: hFile=0x604, lpFileSize=0x665da77d58 | out: lpFileSize=0x665da77d58*=15606) returned 1 [0214.372] GetFileSizeEx (in: hFile=0x604, lpFileSize=0x665da77d68 | out: lpFileSize=0x665da77d68*=15606) returned 1 [0214.372] SetFilePointerEx (in: hFile=0x604, liDistanceToMove=0x3bd4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.372] ReadFile (in: hFile=0x604, lpBuffer=0x665da77db8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da77d78, lpOverlapped=0x0 | out: lpBuffer=0x665da77db8*, lpNumberOfBytesRead=0x665da77d78*=0x19, lpOverlapped=0x0) returned 1 [0214.373] SetFilePointer (in: hFile=0x604, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0214.373] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da77d40 | out: phKey=0x665da77d40*=0x665ab9aab0) returned 1 [0214.373] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0214.374] SetFilePointer (in: hFile=0x604, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0214.374] ReadFile (in: hFile=0x604, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x3cf6, lpNumberOfBytesRead=0x665da77d50, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da77d50*=0x3cf6, lpOverlapped=0x0) returned 1 [0214.383] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da77d4c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da77d4c*=0xf4250) returned 1 [0214.383] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da77d48*=0x3cf6, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da77d48*=0x3d00) returned 1 [0214.383] SetFilePointer (in: hFile=0x604, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0214.383] WriteFile (in: hFile=0x604, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x3d00, lpNumberOfBytesWritten=0x665da77d50, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da77d50*=0x3d00, lpOverlapped=0x0) returned 1 [0214.383] WriteFile (in: hFile=0x604, lpBuffer=0x665da77d90*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da77d54, lpOverlapped=0x0 | out: lpBuffer=0x665da77d90*, lpNumberOfBytesWritten=0x665da77d54*=0x6, lpOverlapped=0x0) returned 1 [0214.383] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da77d60 | out: pbData=0x0*, pdwDataLen=0x665da77d60*=0x10c) returned 1 [0214.383] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da77de0, pdwDataLen=0x665da77d60 | out: pbData=0x665da77de0*, pdwDataLen=0x665da77d60*=0x10c) returned 1 [0214.383] WriteFile (in: hFile=0x604, lpBuffer=0x665da77de0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da77d54, lpOverlapped=0x0 | out: lpBuffer=0x665da77de0*, lpNumberOfBytesWritten=0x665da77d54*=0x10c, lpOverlapped=0x0) returned 1 [0214.383] CloseHandle (hObject=0x604) returned 1 [0214.402] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0214.407] CryptDestroyKey (hKey=0x665ab9aab0) returned 1 [0214.407] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0214.408] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da77fb0 | out: lpFindFileData=0x665da77fb0) returned 1 [0214.408] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0214.408] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\36a8ead3[1].js", dwFileAttributes=0x80) returned 1 [0214.409] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\36a8ead3[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\36a8ead3[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x604 [0214.409] GetFileSizeEx (in: hFile=0x604, lpFileSize=0x665da77d58 | out: lpFileSize=0x665da77d58*=157812) returned 1 [0214.409] GetFileSizeEx (in: hFile=0x604, lpFileSize=0x665da77d68 | out: lpFileSize=0x665da77d68*=157812) returned 1 [0214.409] SetFilePointerEx (in: hFile=0x604, liDistanceToMove=0x26752, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.409] ReadFile (in: hFile=0x604, lpBuffer=0x665da77db8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da77d78, lpOverlapped=0x0 | out: lpBuffer=0x665da77db8*, lpNumberOfBytesRead=0x665da77d78*=0x19, lpOverlapped=0x0) returned 1 [0214.411] SetFilePointer (in: hFile=0x604, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0214.411] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da77d40 | out: phKey=0x665da77d40*=0x665ab9a6c0) returned 1 [0214.411] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0214.411] SetFilePointer (in: hFile=0x604, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0214.411] ReadFile (in: hFile=0x604, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x26874, lpNumberOfBytesRead=0x665da77d50, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da77d50*=0x26874, lpOverlapped=0x0) returned 1 [0214.442] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da77d4c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da77d4c*=0xf4250) returned 1 [0214.442] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da77d48*=0x26874, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da77d48*=0x26880) returned 1 [0214.443] SetFilePointer (in: hFile=0x604, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0214.443] WriteFile (in: hFile=0x604, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x26880, lpNumberOfBytesWritten=0x665da77d50, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da77d50*=0x26880, lpOverlapped=0x0) returned 1 [0214.443] WriteFile (in: hFile=0x604, lpBuffer=0x665da77d90*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da77d54, lpOverlapped=0x0 | out: lpBuffer=0x665da77d90*, lpNumberOfBytesWritten=0x665da77d54*=0x6, lpOverlapped=0x0) returned 1 [0214.443] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da77d60 | out: pbData=0x0*, pdwDataLen=0x665da77d60*=0x10c) returned 1 [0214.443] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da77de0, pdwDataLen=0x665da77d60 | out: pbData=0x665da77de0*, pdwDataLen=0x665da77d60*=0x10c) returned 1 [0214.443] WriteFile (in: hFile=0x604, lpBuffer=0x665da77de0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da77d54, lpOverlapped=0x0 | out: lpBuffer=0x665da77de0*, lpNumberOfBytesWritten=0x665da77d54*=0x10c, lpOverlapped=0x0) returned 1 [0214.443] CloseHandle (hObject=0x604) returned 1 [0214.455] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0214.459] CryptDestroyKey (hKey=0x665ab9a6c0) returned 1 [0214.459] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0214.459] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da77fb0 | out: lpFindFileData=0x665da77fb0) returned 1 [0214.459] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0214.460] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\3727cd16[1].css", dwFileAttributes=0x80) returned 1 [0214.461] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\3727cd16[1].css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\3727cd16[1].css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x604 [0214.461] GetFileSizeEx (in: hFile=0x604, lpFileSize=0x665da77d58 | out: lpFileSize=0x665da77d58*=19880) returned 1 [0214.461] GetFileSizeEx (in: hFile=0x604, lpFileSize=0x665da77d68 | out: lpFileSize=0x665da77d68*=19880) returned 1 [0214.461] SetFilePointerEx (in: hFile=0x604, liDistanceToMove=0x4c86, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.461] ReadFile (in: hFile=0x604, lpBuffer=0x665da77db8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da77d78, lpOverlapped=0x0 | out: lpBuffer=0x665da77db8*, lpNumberOfBytesRead=0x665da77d78*=0x19, lpOverlapped=0x0) returned 1 [0214.462] SetFilePointer (in: hFile=0x604, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0214.462] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da77d40 | out: phKey=0x665da77d40*=0x665ab9a3b0) returned 1 [0214.462] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0214.463] SetFilePointer (in: hFile=0x604, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0214.463] ReadFile (in: hFile=0x604, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x4da8, lpNumberOfBytesRead=0x665da77d50, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da77d50*=0x4da8, lpOverlapped=0x0) returned 1 [0214.563] CryptEncrypt (in: hKey=0x665ab9a3b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da77d4c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da77d4c*=0xf4250) returned 1 [0214.563] CryptEncrypt (in: hKey=0x665ab9a3b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da77d48*=0x4da8, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da77d48*=0x4db0) returned 1 [0214.563] SetFilePointer (in: hFile=0x604, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0214.563] WriteFile (in: hFile=0x604, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x4db0, lpNumberOfBytesWritten=0x665da77d50, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da77d50*=0x4db0, lpOverlapped=0x0) returned 1 [0214.563] WriteFile (in: hFile=0x604, lpBuffer=0x665da77d90*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da77d54, lpOverlapped=0x0 | out: lpBuffer=0x665da77d90*, lpNumberOfBytesWritten=0x665da77d54*=0x6, lpOverlapped=0x0) returned 1 [0214.563] CryptExportKey (in: hKey=0x665ab9a3b0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da77d60 | out: pbData=0x0*, pdwDataLen=0x665da77d60*=0x10c) returned 1 [0214.563] CryptExportKey (in: hKey=0x665ab9a3b0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da77de0, pdwDataLen=0x665da77d60 | out: pbData=0x665da77de0*, pdwDataLen=0x665da77d60*=0x10c) returned 1 [0214.563] WriteFile (in: hFile=0x604, lpBuffer=0x665da77de0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da77d54, lpOverlapped=0x0 | out: lpBuffer=0x665da77de0*, lpNumberOfBytesWritten=0x665da77d54*=0x10c, lpOverlapped=0x0) returned 1 [0214.563] CloseHandle (hObject=0x604) returned 1 [0214.575] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0214.580] CryptDestroyKey (hKey=0x665ab9a3b0) returned 1 [0214.580] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0214.580] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da77fb0 | out: lpFindFileData=0x665da77fb0) returned 1 [0214.580] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0214.580] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\41795194[1].css", dwFileAttributes=0x80) returned 1 [0214.581] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\41795194[1].css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\41795194[1].css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x604 [0214.581] GetFileSizeEx (in: hFile=0x604, lpFileSize=0x665da77d58 | out: lpFileSize=0x665da77d58*=6614) returned 1 [0214.581] GetFileSizeEx (in: hFile=0x604, lpFileSize=0x665da77d68 | out: lpFileSize=0x665da77d68*=6614) returned 1 [0214.581] SetFilePointerEx (in: hFile=0x604, liDistanceToMove=0x18b4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.581] ReadFile (in: hFile=0x604, lpBuffer=0x665da77db8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da77d78, lpOverlapped=0x0 | out: lpBuffer=0x665da77db8*, lpNumberOfBytesRead=0x665da77d78*=0x19, lpOverlapped=0x0) returned 1 [0214.583] SetFilePointer (in: hFile=0x604, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0214.583] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da77d40 | out: phKey=0x665da77d40*=0x665ab9aea0) returned 1 [0214.583] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0214.583] SetFilePointer (in: hFile=0x604, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0214.583] ReadFile (in: hFile=0x604, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x19d6, lpNumberOfBytesRead=0x665da77d50, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da77d50*=0x19d6, lpOverlapped=0x0) returned 1 [0214.584] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da77d4c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da77d4c*=0xf4250) returned 1 [0214.584] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da77d48*=0x19d6, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da77d48*=0x19e0) returned 1 [0214.584] SetFilePointer (in: hFile=0x604, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0214.584] WriteFile (in: hFile=0x604, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x19e0, lpNumberOfBytesWritten=0x665da77d50, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da77d50*=0x19e0, lpOverlapped=0x0) returned 1 [0214.584] WriteFile (in: hFile=0x604, lpBuffer=0x665da77d90*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da77d54, lpOverlapped=0x0 | out: lpBuffer=0x665da77d90*, lpNumberOfBytesWritten=0x665da77d54*=0x6, lpOverlapped=0x0) returned 1 [0214.584] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da77d60 | out: pbData=0x0*, pdwDataLen=0x665da77d60*=0x10c) returned 1 [0214.584] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da77de0, pdwDataLen=0x665da77d60 | out: pbData=0x665da77de0*, pdwDataLen=0x665da77d60*=0x10c) returned 1 [0214.584] WriteFile (in: hFile=0x604, lpBuffer=0x665da77de0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da77d54, lpOverlapped=0x0 | out: lpBuffer=0x665da77de0*, lpNumberOfBytesWritten=0x665da77d54*=0x10c, lpOverlapped=0x0) returned 1 [0214.584] CloseHandle (hObject=0x604) returned 1 [0214.599] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0214.603] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0214.603] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0214.604] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da77fb0 | out: lpFindFileData=0x665da77fb0) returned 1 [0214.604] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0214.604] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\9101d3f2[1].js", dwFileAttributes=0x80) returned 1 [0214.605] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\9101d3f2[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\9101d3f2[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x604 [0214.605] GetFileSizeEx (in: hFile=0x604, lpFileSize=0x665da77d58 | out: lpFileSize=0x665da77d58*=18642) returned 1 [0214.605] GetFileSizeEx (in: hFile=0x604, lpFileSize=0x665da77d68 | out: lpFileSize=0x665da77d68*=18642) returned 1 [0214.605] SetFilePointerEx (in: hFile=0x604, liDistanceToMove=0x47b0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.605] ReadFile (in: hFile=0x604, lpBuffer=0x665da77db8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da77d78, lpOverlapped=0x0 | out: lpBuffer=0x665da77db8*, lpNumberOfBytesRead=0x665da77d78*=0x19, lpOverlapped=0x0) returned 1 [0214.607] SetFilePointer (in: hFile=0x604, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0214.607] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da77d40 | out: phKey=0x665da77d40*=0x665ab9a3b0) returned 1 [0214.607] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0214.607] SetFilePointer (in: hFile=0x604, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0214.607] ReadFile (in: hFile=0x604, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x48d2, lpNumberOfBytesRead=0x665da77d50, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da77d50*=0x48d2, lpOverlapped=0x0) returned 1 [0214.608] CryptEncrypt (in: hKey=0x665ab9a3b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da77d4c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da77d4c*=0xf4250) returned 1 [0214.608] CryptEncrypt (in: hKey=0x665ab9a3b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da77d48*=0x48d2, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da77d48*=0x48e0) returned 1 [0214.608] SetFilePointer (in: hFile=0x604, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0214.608] WriteFile (in: hFile=0x604, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x48e0, lpNumberOfBytesWritten=0x665da77d50, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da77d50*=0x48e0, lpOverlapped=0x0) returned 1 [0214.608] WriteFile (in: hFile=0x604, lpBuffer=0x665da77d90*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da77d54, lpOverlapped=0x0 | out: lpBuffer=0x665da77d90*, lpNumberOfBytesWritten=0x665da77d54*=0x6, lpOverlapped=0x0) returned 1 [0214.608] CryptExportKey (in: hKey=0x665ab9a3b0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da77d60 | out: pbData=0x0*, pdwDataLen=0x665da77d60*=0x10c) returned 1 [0214.608] CryptExportKey (in: hKey=0x665ab9a3b0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da77de0, pdwDataLen=0x665da77d60 | out: pbData=0x665da77de0*, pdwDataLen=0x665da77d60*=0x10c) returned 1 [0214.608] WriteFile (in: hFile=0x604, lpBuffer=0x665da77de0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da77d54, lpOverlapped=0x0 | out: lpBuffer=0x665da77de0*, lpNumberOfBytesWritten=0x665da77d54*=0x10c, lpOverlapped=0x0) returned 1 [0214.608] CloseHandle (hObject=0x604) returned 1 [0214.625] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0214.630] CryptDestroyKey (hKey=0x665ab9a3b0) returned 1 [0214.630] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0214.630] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da77fb0 | out: lpFindFileData=0x665da77fb0) returned 1 [0214.630] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0214.630] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\appcache[1].man", dwFileAttributes=0x80) returned 1 [0214.631] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\appcache[1].man" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\appcache[1].man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x604 [0214.631] GetFileSizeEx (in: hFile=0x604, lpFileSize=0x665da77d58 | out: lpFileSize=0x665da77d58*=3546) returned 1 [0214.631] GetFileSizeEx (in: hFile=0x604, lpFileSize=0x665da77d68 | out: lpFileSize=0x665da77d68*=3546) returned 1 [0214.631] SetFilePointerEx (in: hFile=0x604, liDistanceToMove=0xcb8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.631] ReadFile (in: hFile=0x604, lpBuffer=0x665da77db8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da77d78, lpOverlapped=0x0 | out: lpBuffer=0x665da77db8*, lpNumberOfBytesRead=0x665da77d78*=0x19, lpOverlapped=0x0) returned 1 [0214.632] SetFilePointer (in: hFile=0x604, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0214.632] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da77d40 | out: phKey=0x665da77d40*=0x665ab9af10) returned 1 [0214.632] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0214.633] SetFilePointer (in: hFile=0x604, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0214.633] ReadFile (in: hFile=0x604, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0xdda, lpNumberOfBytesRead=0x665da77d50, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da77d50*=0xdda, lpOverlapped=0x0) returned 1 [0214.633] CryptEncrypt (in: hKey=0x665ab9af10, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da77d4c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da77d4c*=0xf4250) returned 1 [0214.633] CryptEncrypt (in: hKey=0x665ab9af10, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da77d48*=0xdda, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da77d48*=0xde0) returned 1 [0214.633] SetFilePointer (in: hFile=0x604, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0214.633] WriteFile (in: hFile=0x604, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0xde0, lpNumberOfBytesWritten=0x665da77d50, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da77d50*=0xde0, lpOverlapped=0x0) returned 1 [0214.633] WriteFile (in: hFile=0x604, lpBuffer=0x665da77d90*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da77d54, lpOverlapped=0x0 | out: lpBuffer=0x665da77d90*, lpNumberOfBytesWritten=0x665da77d54*=0x6, lpOverlapped=0x0) returned 1 [0214.633] CryptExportKey (in: hKey=0x665ab9af10, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da77d60 | out: pbData=0x0*, pdwDataLen=0x665da77d60*=0x10c) returned 1 [0214.633] CryptExportKey (in: hKey=0x665ab9af10, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da77de0, pdwDataLen=0x665da77d60 | out: pbData=0x665da77de0*, pdwDataLen=0x665da77d60*=0x10c) returned 1 [0214.633] WriteFile (in: hFile=0x604, lpBuffer=0x665da77de0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da77d54, lpOverlapped=0x0 | out: lpBuffer=0x665da77de0*, lpNumberOfBytesWritten=0x665da77d54*=0x10c, lpOverlapped=0x0) returned 1 [0214.633] CloseHandle (hObject=0x604) returned 1 [0214.651] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0214.656] CryptDestroyKey (hKey=0x665ab9af10) returned 1 [0214.656] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0214.656] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da77fb0 | out: lpFindFileData=0x665da77fb0) returned 1 [0214.656] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0214.656] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\container.dat", dwFileAttributes=0x80) returned 1 [0214.657] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x604 [0214.658] GetFileSizeEx (in: hFile=0x604, lpFileSize=0x665da77d58 | out: lpFileSize=0x665da77d58*=0) returned 1 [0214.658] GetFileSizeEx (in: hFile=0x604, lpFileSize=0x665da77d68 | out: lpFileSize=0x665da77d68*=0) returned 1 [0214.658] CloseHandle (hObject=0x604) returned 1 [0214.658] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0214.658] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da77fb0 | out: lpFindFileData=0x665da77fb0) returned 1 [0214.658] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0214.658] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\d11fd6a0[1].js", dwFileAttributes=0x80) returned 1 [0214.659] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\d11fd6a0[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\d11fd6a0[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x604 [0214.659] GetFileSizeEx (in: hFile=0x604, lpFileSize=0x665da77d58 | out: lpFileSize=0x665da77d58*=23010) returned 1 [0214.659] GetFileSizeEx (in: hFile=0x604, lpFileSize=0x665da77d68 | out: lpFileSize=0x665da77d68*=23010) returned 1 [0214.659] SetFilePointerEx (in: hFile=0x604, liDistanceToMove=0x58c0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.659] ReadFile (in: hFile=0x604, lpBuffer=0x665da77db8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da77d78, lpOverlapped=0x0 | out: lpBuffer=0x665da77db8*, lpNumberOfBytesRead=0x665da77d78*=0x19, lpOverlapped=0x0) returned 1 [0214.661] SetFilePointer (in: hFile=0x604, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0214.661] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da77d40 | out: phKey=0x665da77d40*=0x665ab9a180) returned 1 [0214.661] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0214.661] SetFilePointer (in: hFile=0x604, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0214.661] ReadFile (in: hFile=0x604, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x59e2, lpNumberOfBytesRead=0x665da77d50, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da77d50*=0x59e2, lpOverlapped=0x0) returned 1 [0214.662] CryptEncrypt (in: hKey=0x665ab9a180, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da77d4c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da77d4c*=0xf4250) returned 1 [0214.662] CryptEncrypt (in: hKey=0x665ab9a180, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da77d48*=0x59e2, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da77d48*=0x59f0) returned 1 [0214.662] SetFilePointer (in: hFile=0x604, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0214.662] WriteFile (in: hFile=0x604, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x59f0, lpNumberOfBytesWritten=0x665da77d50, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da77d50*=0x59f0, lpOverlapped=0x0) returned 1 [0214.663] WriteFile (in: hFile=0x604, lpBuffer=0x665da77d90*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da77d54, lpOverlapped=0x0 | out: lpBuffer=0x665da77d90*, lpNumberOfBytesWritten=0x665da77d54*=0x6, lpOverlapped=0x0) returned 1 [0214.663] CryptExportKey (in: hKey=0x665ab9a180, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da77d60 | out: pbData=0x0*, pdwDataLen=0x665da77d60*=0x10c) returned 1 [0214.663] CryptExportKey (in: hKey=0x665ab9a180, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da77de0, pdwDataLen=0x665da77d60 | out: pbData=0x665da77de0*, pdwDataLen=0x665da77d60*=0x10c) returned 1 [0214.663] WriteFile (in: hFile=0x604, lpBuffer=0x665da77de0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da77d54, lpOverlapped=0x0 | out: lpBuffer=0x665da77de0*, lpNumberOfBytesWritten=0x665da77d54*=0x10c, lpOverlapped=0x0) returned 1 [0214.663] CloseHandle (hObject=0x604) returned 1 [0214.680] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0214.684] CryptDestroyKey (hKey=0x665ab9a180) returned 1 [0214.684] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0214.684] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da77fb0 | out: lpFindFileData=0x665da77fb0) returned 1 [0214.684] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0214.685] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\f544a93b[1].css", dwFileAttributes=0x80) returned 1 [0214.685] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\f544a93b[1].css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\f544a93b[1].css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x604 [0214.686] GetFileSizeEx (in: hFile=0x604, lpFileSize=0x665da77d58 | out: lpFileSize=0x665da77d58*=1426) returned 1 [0214.686] GetFileSizeEx (in: hFile=0x604, lpFileSize=0x665da77d68 | out: lpFileSize=0x665da77d68*=1426) returned 1 [0214.686] SetFilePointerEx (in: hFile=0x604, liDistanceToMove=0x470, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.686] ReadFile (in: hFile=0x604, lpBuffer=0x665da77db8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da77d78, lpOverlapped=0x0 | out: lpBuffer=0x665da77db8*, lpNumberOfBytesRead=0x665da77d78*=0x19, lpOverlapped=0x0) returned 1 [0214.687] SetFilePointer (in: hFile=0x604, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0214.687] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da77d40 | out: phKey=0x665da77d40*=0x665ab9a880) returned 1 [0214.687] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0214.688] SetFilePointer (in: hFile=0x604, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0214.688] ReadFile (in: hFile=0x604, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x592, lpNumberOfBytesRead=0x665da77d50, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da77d50*=0x592, lpOverlapped=0x0) returned 1 [0214.688] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da77d4c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da77d4c*=0xf4250) returned 1 [0214.688] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da77d48*=0x592, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da77d48*=0x5a0) returned 1 [0214.688] SetFilePointer (in: hFile=0x604, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0214.688] WriteFile (in: hFile=0x604, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x5a0, lpNumberOfBytesWritten=0x665da77d50, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da77d50*=0x5a0, lpOverlapped=0x0) returned 1 [0214.688] WriteFile (in: hFile=0x604, lpBuffer=0x665da77d90*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da77d54, lpOverlapped=0x0 | out: lpBuffer=0x665da77d90*, lpNumberOfBytesWritten=0x665da77d54*=0x6, lpOverlapped=0x0) returned 1 [0214.688] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da77d60 | out: pbData=0x0*, pdwDataLen=0x665da77d60*=0x10c) returned 1 [0214.688] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da77de0, pdwDataLen=0x665da77d60 | out: pbData=0x665da77de0*, pdwDataLen=0x665da77d60*=0x10c) returned 1 [0214.689] WriteFile (in: hFile=0x604, lpBuffer=0x665da77de0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da77d54, lpOverlapped=0x0 | out: lpBuffer=0x665da77de0*, lpNumberOfBytesWritten=0x665da77d54*=0x10c, lpOverlapped=0x0) returned 1 [0214.689] CloseHandle (hObject=0x604) returned 1 [0214.709] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0214.713] CryptDestroyKey (hKey=0x665ab9a880) returned 1 [0214.713] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0214.713] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da77fb0 | out: lpFindFileData=0x665da77fb0) returned 1 [0214.713] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0214.713] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\f682f456[1].js", dwFileAttributes=0x80) returned 1 [0214.714] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\f682f456[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\f682f456[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x604 [0214.714] GetFileSizeEx (in: hFile=0x604, lpFileSize=0x665da77d58 | out: lpFileSize=0x665da77d58*=69447) returned 1 [0214.715] GetFileSizeEx (in: hFile=0x604, lpFileSize=0x665da77d68 | out: lpFileSize=0x665da77d68*=69447) returned 1 [0214.715] SetFilePointerEx (in: hFile=0x604, liDistanceToMove=0x10e25, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.715] ReadFile (in: hFile=0x604, lpBuffer=0x665da77db8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da77d78, lpOverlapped=0x0 | out: lpBuffer=0x665da77db8*, lpNumberOfBytesRead=0x665da77d78*=0x19, lpOverlapped=0x0) returned 1 [0214.716] SetFilePointer (in: hFile=0x604, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0214.716] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da77d40 | out: phKey=0x665da77d40*=0x665ab9aea0) returned 1 [0214.716] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0214.716] SetFilePointer (in: hFile=0x604, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0214.716] ReadFile (in: hFile=0x604, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x10f47, lpNumberOfBytesRead=0x665da77d50, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da77d50*=0x10f47, lpOverlapped=0x0) returned 1 [0214.746] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da77d4c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da77d4c*=0xf4250) returned 1 [0214.746] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da77d48*=0x10f47, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da77d48*=0x10f50) returned 1 [0214.746] SetFilePointer (in: hFile=0x604, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0214.747] WriteFile (in: hFile=0x604, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x10f50, lpNumberOfBytesWritten=0x665da77d50, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da77d50*=0x10f50, lpOverlapped=0x0) returned 1 [0214.763] WriteFile (in: hFile=0x604, lpBuffer=0x665da77d90*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da77d54, lpOverlapped=0x0 | out: lpBuffer=0x665da77d90*, lpNumberOfBytesWritten=0x665da77d54*=0x6, lpOverlapped=0x0) returned 1 [0214.763] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da77d60 | out: pbData=0x0*, pdwDataLen=0x665da77d60*=0x10c) returned 1 [0214.763] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da77de0, pdwDataLen=0x665da77d60 | out: pbData=0x665da77de0*, pdwDataLen=0x665da77d60*=0x10c) returned 1 [0214.763] WriteFile (in: hFile=0x604, lpBuffer=0x665da77de0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da77d54, lpOverlapped=0x0 | out: lpBuffer=0x665da77de0*, lpNumberOfBytesWritten=0x665da77d54*=0x10c, lpOverlapped=0x0) returned 1 [0214.763] CloseHandle (hObject=0x604) returned 1 [0214.781] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0214.787] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0214.787] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0214.787] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da77fb0 | out: lpFindFileData=0x665da77fb0) returned 1 [0214.787] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0214.788] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\fce27fce[1].js", dwFileAttributes=0x80) returned 1 [0214.789] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\fce27fce[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\fce27fce[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x604 [0214.789] GetFileSizeEx (in: hFile=0x604, lpFileSize=0x665da77d58 | out: lpFileSize=0x665da77d58*=38702) returned 1 [0214.789] GetFileSizeEx (in: hFile=0x604, lpFileSize=0x665da77d68 | out: lpFileSize=0x665da77d68*=38702) returned 1 [0214.789] SetFilePointerEx (in: hFile=0x604, liDistanceToMove=0x960c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.789] ReadFile (in: hFile=0x604, lpBuffer=0x665da77db8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da77d78, lpOverlapped=0x0 | out: lpBuffer=0x665da77db8*, lpNumberOfBytesRead=0x665da77d78*=0x19, lpOverlapped=0x0) returned 1 [0214.791] SetFilePointer (in: hFile=0x604, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0214.791] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da77d40 | out: phKey=0x665da77d40*=0x665ab9a0a0) returned 1 [0214.791] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0214.791] SetFilePointer (in: hFile=0x604, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0214.791] ReadFile (in: hFile=0x604, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x972e, lpNumberOfBytesRead=0x665da77d50, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da77d50*=0x972e, lpOverlapped=0x0) returned 1 [0214.793] CryptEncrypt (in: hKey=0x665ab9a0a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da77d4c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da77d4c*=0xf4250) returned 1 [0214.793] CryptEncrypt (in: hKey=0x665ab9a0a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da77d48*=0x972e, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da77d48*=0x9730) returned 1 [0214.793] SetFilePointer (in: hFile=0x604, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0214.793] WriteFile (in: hFile=0x604, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x9730, lpNumberOfBytesWritten=0x665da77d50, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da77d50*=0x9730, lpOverlapped=0x0) returned 1 [0214.793] WriteFile (in: hFile=0x604, lpBuffer=0x665da77d90*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da77d54, lpOverlapped=0x0 | out: lpBuffer=0x665da77d90*, lpNumberOfBytesWritten=0x665da77d54*=0x6, lpOverlapped=0x0) returned 1 [0214.793] CryptExportKey (in: hKey=0x665ab9a0a0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da77d60 | out: pbData=0x0*, pdwDataLen=0x665da77d60*=0x10c) returned 1 [0214.793] CryptExportKey (in: hKey=0x665ab9a0a0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da77de0, pdwDataLen=0x665da77d60 | out: pbData=0x665da77de0*, pdwDataLen=0x665da77d60*=0x10c) returned 1 [0214.793] WriteFile (in: hFile=0x604, lpBuffer=0x665da77de0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da77d54, lpOverlapped=0x0 | out: lpBuffer=0x665da77de0*, lpNumberOfBytesWritten=0x665da77d54*=0x10c, lpOverlapped=0x0) returned 1 [0214.794] CloseHandle (hObject=0x604) returned 1 [0214.813] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0214.818] CryptDestroyKey (hKey=0x665ab9a0a0) returned 1 [0214.819] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0214.819] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da77fb0 | out: lpFindFileData=0x665da77fb0) returned 1 [0214.819] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0214.819] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\Init[1].htm", dwFileAttributes=0x80) returned 1 [0214.820] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\Init[1].htm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\init[1].htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x604 [0214.821] GetFileSizeEx (in: hFile=0x604, lpFileSize=0x665da77d58 | out: lpFileSize=0x665da77d58*=28840) returned 1 [0214.821] GetFileSizeEx (in: hFile=0x604, lpFileSize=0x665da77d68 | out: lpFileSize=0x665da77d68*=28840) returned 1 [0214.821] SetFilePointerEx (in: hFile=0x604, liDistanceToMove=0x6f86, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.821] ReadFile (in: hFile=0x604, lpBuffer=0x665da77db8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da77d78, lpOverlapped=0x0 | out: lpBuffer=0x665da77db8*, lpNumberOfBytesRead=0x665da77d78*=0x19, lpOverlapped=0x0) returned 1 [0214.823] SetFilePointer (in: hFile=0x604, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0214.823] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da77d40 | out: phKey=0x665da77d40*=0x665ab9aab0) returned 1 [0214.823] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0214.823] SetFilePointer (in: hFile=0x604, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0214.823] ReadFile (in: hFile=0x604, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x70a8, lpNumberOfBytesRead=0x665da77d50, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da77d50*=0x70a8, lpOverlapped=0x0) returned 1 [0214.825] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da77d4c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da77d4c*=0xf4250) returned 1 [0214.825] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da77d48*=0x70a8, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da77d48*=0x70b0) returned 1 [0214.825] SetFilePointer (in: hFile=0x604, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0214.825] WriteFile (in: hFile=0x604, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x70b0, lpNumberOfBytesWritten=0x665da77d50, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da77d50*=0x70b0, lpOverlapped=0x0) returned 1 [0214.825] WriteFile (in: hFile=0x604, lpBuffer=0x665da77d90*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da77d54, lpOverlapped=0x0 | out: lpBuffer=0x665da77d90*, lpNumberOfBytesWritten=0x665da77d54*=0x6, lpOverlapped=0x0) returned 1 [0214.825] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da77d60 | out: pbData=0x0*, pdwDataLen=0x665da77d60*=0x10c) returned 1 [0214.825] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da77de0, pdwDataLen=0x665da77d60 | out: pbData=0x665da77de0*, pdwDataLen=0x665da77d60*=0x10c) returned 1 [0214.826] WriteFile (in: hFile=0x604, lpBuffer=0x665da77de0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da77d54, lpOverlapped=0x0 | out: lpBuffer=0x665da77de0*, lpNumberOfBytesWritten=0x665da77d54*=0x10c, lpOverlapped=0x0) returned 1 [0214.826] CloseHandle (hObject=0x604) returned 1 [0214.847] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0214.851] CryptDestroyKey (hKey=0x665ab9aab0) returned 1 [0214.851] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0214.851] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da77fb0 | out: lpFindFileData=0x665da77fb0) returned 0 [0214.851] FindClose (in: hFindFile=0x665d90c440 | out: hFindFile=0x665d90c440) returned 1 [0214.851] SetLastError (dwErrCode=0x0) [0214.851] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5dc [0214.852] GetLastError () returned 0x0 [0214.852] WriteFile (in: hFile=0x5dc, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da78710, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da78710*=0x324, lpOverlapped=0x0) returned 1 [0214.853] CloseHandle (hObject=0x5dc) returned 1 [0214.853] FindNextFileW (in: hFindFile=0x665d90c740, lpFindFileData=0x665da78760 | out: lpFindFileData=0x665da78760) returned 1 [0214.853] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0214.853] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\container.dat", dwFileAttributes=0x80) returned 1 [0214.853] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5dc [0214.854] GetFileSizeEx (in: hFile=0x5dc, lpFileSize=0x665da78508 | out: lpFileSize=0x665da78508*=0) returned 1 [0214.854] GetFileSizeEx (in: hFile=0x5dc, lpFileSize=0x665da78518 | out: lpFileSize=0x665da78518*=0) returned 1 [0214.854] CloseHandle (hObject=0x5dc) returned 1 [0214.854] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0214.854] FindNextFileW (in: hFindFile=0x665d90c740, lpFindFileData=0x665da78760 | out: lpFindFileData=0x665da78760) returned 0 [0214.854] FindClose (in: hFindFile=0x665d90c740 | out: hFindFile=0x665d90c740) returned 1 [0214.854] SetLastError (dwErrCode=0x0) [0214.854] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x450 [0214.854] GetLastError () returned 0xb7 [0214.855] CloseHandle (hObject=0x450) returned 1 [0214.855] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0214.855] FindClose (in: hFindFile=0x665d90c920 | out: hFindFile=0x665d90c920) returned 1 [0214.855] SetLastError (dwErrCode=0x0) [0214.855] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0214.855] GetLastError () returned 0xb7 [0214.855] CloseHandle (hObject=0x410) returned 1 [0214.855] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0214.855] SetLastError (dwErrCode=0x0) [0214.855] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0214.855] GetLastError () returned 0xb7 [0214.855] CloseHandle (hObject=0x410) returned 1 [0214.855] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665d90d280 [0214.856] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0214.856] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0214.856] SetLastError (dwErrCode=0x0) [0214.856] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\domstore\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x450 [0214.898] GetLastError () returned 0x0 [0214.898] WriteFile (in: hFile=0x450, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da78ec0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da78ec0*=0x324, lpOverlapped=0x0) returned 1 [0214.899] CloseHandle (hObject=0x450) returned 1 [0214.899] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\03HJF3R5\\*.*", lpFindFileData=0x665da78760 | out: lpFindFileData=0x665da78760) returned 0x665d90c620 [0214.900] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da78760 | out: lpFindFileData=0x665da78760) returned 1 [0214.900] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da78760 | out: lpFindFileData=0x665da78760) returned 0 [0214.900] FindClose (in: hFindFile=0x665d90c620 | out: hFindFile=0x665d90c620) returned 1 [0214.900] SetLastError (dwErrCode=0x0) [0214.900] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\03HJF3R5\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\domstore\\03hjf3r5\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x450 [0214.900] GetLastError () returned 0x0 [0214.900] WriteFile (in: hFile=0x450, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da78ec0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da78ec0*=0x324, lpOverlapped=0x0) returned 1 [0214.901] CloseHandle (hObject=0x450) returned 1 [0214.901] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0214.901] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0214.901] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\container.dat", dwFileAttributes=0x80) returned 1 [0214.902] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\domstore\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x450 [0214.902] GetFileSizeEx (in: hFile=0x450, lpFileSize=0x665da78cb8 | out: lpFileSize=0x665da78cb8*=0) returned 1 [0214.902] GetFileSizeEx (in: hFile=0x450, lpFileSize=0x665da78cc8 | out: lpFileSize=0x665da78cc8*=0) returned 1 [0214.902] CloseHandle (hObject=0x450) returned 1 [0214.902] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0214.903] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0214.903] SetLastError (dwErrCode=0x0) [0214.903] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\domstore\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x450 [0214.903] GetLastError () returned 0xb7 [0214.903] CloseHandle (hObject=0x450) returned 1 [0214.903] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\ETFMMWBM\\*.*", lpFindFileData=0x665da78760 | out: lpFindFileData=0x665da78760) returned 0x665d90cce0 [0214.903] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da78760 | out: lpFindFileData=0x665da78760) returned 1 [0214.903] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da78760 | out: lpFindFileData=0x665da78760) returned 1 [0214.903] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0214.903] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\ETFMMWBM\\www.bing[1].xml", dwFileAttributes=0x80) returned 1 [0214.904] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\ETFMMWBM\\www.bing[1].xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\domstore\\etfmmwbm\\www.bing[1].xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5dc [0214.905] GetFileSizeEx (in: hFile=0x5dc, lpFileSize=0x665da78508 | out: lpFileSize=0x665da78508*=83902) returned 1 [0214.905] GetFileSizeEx (in: hFile=0x5dc, lpFileSize=0x665da78518 | out: lpFileSize=0x665da78518*=83902) returned 1 [0214.905] SetFilePointerEx (in: hFile=0x5dc, liDistanceToMove=0x1469c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.905] ReadFile (in: hFile=0x5dc, lpBuffer=0x665da78568, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da78528, lpOverlapped=0x0 | out: lpBuffer=0x665da78568*, lpNumberOfBytesRead=0x665da78528*=0x19, lpOverlapped=0x0) returned 1 [0214.906] SetFilePointer (in: hFile=0x5dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0214.906] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da784f0 | out: phKey=0x665da784f0*=0x665ab9a880) returned 1 [0214.906] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0214.906] SetFilePointer (in: hFile=0x5dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0214.906] ReadFile (in: hFile=0x5dc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x147be, lpNumberOfBytesRead=0x665da78500, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da78500*=0x147be, lpOverlapped=0x0) returned 1 [0214.914] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da784fc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da784fc*=0xf4250) returned 1 [0214.914] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da784f8*=0x147be, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da784f8*=0x147c0) returned 1 [0214.914] SetFilePointer (in: hFile=0x5dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0214.914] WriteFile (in: hFile=0x5dc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x147c0, lpNumberOfBytesWritten=0x665da78500, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da78500*=0x147c0, lpOverlapped=0x0) returned 1 [0214.915] WriteFile (in: hFile=0x5dc, lpBuffer=0x665da78540*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da78504, lpOverlapped=0x0 | out: lpBuffer=0x665da78540*, lpNumberOfBytesWritten=0x665da78504*=0x6, lpOverlapped=0x0) returned 1 [0214.915] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da78510 | out: pbData=0x0*, pdwDataLen=0x665da78510*=0x10c) returned 1 [0214.915] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da78590, pdwDataLen=0x665da78510 | out: pbData=0x665da78590*, pdwDataLen=0x665da78510*=0x10c) returned 1 [0214.915] WriteFile (in: hFile=0x5dc, lpBuffer=0x665da78590*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da78504, lpOverlapped=0x0 | out: lpBuffer=0x665da78590*, lpNumberOfBytesWritten=0x665da78504*=0x10c, lpOverlapped=0x0) returned 1 [0214.915] CloseHandle (hObject=0x5dc) returned 1 [0214.930] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0214.935] CryptDestroyKey (hKey=0x665ab9a880) returned 1 [0214.935] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0214.935] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da78760 | out: lpFindFileData=0x665da78760) returned 0 [0214.935] FindClose (in: hFindFile=0x665d90cce0 | out: hFindFile=0x665d90cce0) returned 1 [0214.935] SetLastError (dwErrCode=0x0) [0214.935] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\ETFMMWBM\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\domstore\\etfmmwbm\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x450 [0214.936] GetLastError () returned 0x0 [0214.936] WriteFile (in: hFile=0x450, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da78ec0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da78ec0*=0x324, lpOverlapped=0x0) returned 1 [0214.937] CloseHandle (hObject=0x450) returned 1 [0214.937] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0214.937] SetLastError (dwErrCode=0x0) [0214.937] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\domstore\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x450 [0214.937] GetLastError () returned 0xb7 [0214.937] CloseHandle (hObject=0x450) returned 1 [0214.938] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\N6BZW9Z5\\*.*", lpFindFileData=0x665da78760 | out: lpFindFileData=0x665da78760) returned 0x665d90bfc0 [0214.938] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da78760 | out: lpFindFileData=0x665da78760) returned 1 [0214.938] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da78760 | out: lpFindFileData=0x665da78760) returned 0 [0214.938] FindClose (in: hFindFile=0x665d90bfc0 | out: hFindFile=0x665d90bfc0) returned 1 [0214.938] SetLastError (dwErrCode=0x0) [0214.938] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\N6BZW9Z5\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\domstore\\n6bzw9z5\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x450 [0214.939] GetLastError () returned 0x0 [0214.939] WriteFile (in: hFile=0x450, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da78ec0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da78ec0*=0x324, lpOverlapped=0x0) returned 1 [0214.940] CloseHandle (hObject=0x450) returned 1 [0214.940] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0214.940] SetLastError (dwErrCode=0x0) [0214.940] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\domstore\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x450 [0214.940] GetLastError () returned 0xb7 [0214.940] CloseHandle (hObject=0x450) returned 1 [0214.940] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\P1T4DCFU\\*.*", lpFindFileData=0x665da78760 | out: lpFindFileData=0x665da78760) returned 0x665d90d0a0 [0214.941] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da78760 | out: lpFindFileData=0x665da78760) returned 1 [0214.941] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da78760 | out: lpFindFileData=0x665da78760) returned 1 [0214.941] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0214.941] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\P1T4DCFU\\www.msn[1].xml", dwFileAttributes=0x80) returned 1 [0214.941] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\P1T4DCFU\\www.msn[1].xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\domstore\\p1t4dcfu\\www.msn[1].xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5dc [0214.942] GetFileSizeEx (in: hFile=0x5dc, lpFileSize=0x665da78508 | out: lpFileSize=0x665da78508*=715) returned 1 [0214.942] GetFileSizeEx (in: hFile=0x5dc, lpFileSize=0x665da78518 | out: lpFileSize=0x665da78518*=715) returned 1 [0214.942] SetFilePointerEx (in: hFile=0x5dc, liDistanceToMove=0x1a9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.942] ReadFile (in: hFile=0x5dc, lpBuffer=0x665da78568, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da78528, lpOverlapped=0x0 | out: lpBuffer=0x665da78568*, lpNumberOfBytesRead=0x665da78528*=0x19, lpOverlapped=0x0) returned 1 [0214.943] SetFilePointer (in: hFile=0x5dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0214.943] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da784f0 | out: phKey=0x665da784f0*=0x665ab9aea0) returned 1 [0214.943] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0214.943] SetFilePointer (in: hFile=0x5dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0214.943] ReadFile (in: hFile=0x5dc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x2cb, lpNumberOfBytesRead=0x665da78500, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da78500*=0x2cb, lpOverlapped=0x0) returned 1 [0214.944] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da784fc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da784fc*=0xf4250) returned 1 [0214.944] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da784f8*=0x2cb, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da784f8*=0x2d0) returned 1 [0214.944] SetFilePointer (in: hFile=0x5dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0214.944] WriteFile (in: hFile=0x5dc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x665da78500, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da78500*=0x2d0, lpOverlapped=0x0) returned 1 [0214.944] WriteFile (in: hFile=0x5dc, lpBuffer=0x665da78540*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da78504, lpOverlapped=0x0 | out: lpBuffer=0x665da78540*, lpNumberOfBytesWritten=0x665da78504*=0x6, lpOverlapped=0x0) returned 1 [0214.944] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da78510 | out: pbData=0x0*, pdwDataLen=0x665da78510*=0x10c) returned 1 [0214.944] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da78590, pdwDataLen=0x665da78510 | out: pbData=0x665da78590*, pdwDataLen=0x665da78510*=0x10c) returned 1 [0214.944] WriteFile (in: hFile=0x5dc, lpBuffer=0x665da78590*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da78504, lpOverlapped=0x0 | out: lpBuffer=0x665da78590*, lpNumberOfBytesWritten=0x665da78504*=0x10c, lpOverlapped=0x0) returned 1 [0214.944] CloseHandle (hObject=0x5dc) returned 1 [0214.960] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0214.964] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0214.964] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0214.965] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da78760 | out: lpFindFileData=0x665da78760) returned 0 [0214.965] FindClose (in: hFindFile=0x665d90d0a0 | out: hFindFile=0x665d90d0a0) returned 1 [0214.965] SetLastError (dwErrCode=0x0) [0214.965] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\P1T4DCFU\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\domstore\\p1t4dcfu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x450 [0214.965] GetLastError () returned 0x0 [0214.965] WriteFile (in: hFile=0x450, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da78ec0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da78ec0*=0x324, lpOverlapped=0x0) returned 1 [0214.966] CloseHandle (hObject=0x450) returned 1 [0214.966] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0214.966] FindClose (in: hFindFile=0x665d90d280 | out: hFindFile=0x665d90d280) returned 1 [0214.966] SetLastError (dwErrCode=0x0) [0214.966] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\domstore\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0214.967] GetLastError () returned 0xb7 [0214.967] CloseHandle (hObject=0x410) returned 1 [0214.967] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0214.967] FindClose (in: hFindFile=0x665d90bd80 | out: hFindFile=0x665d90bd80) returned 1 [0214.967] SetLastError (dwErrCode=0x0) [0214.967] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0214.967] GetLastError () returned 0xb7 [0214.967] CloseHandle (hObject=0x5cc) returned 1 [0214.967] FindNextFileW (in: hFindFile=0x665d90bf60, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0 [0214.967] FindClose (in: hFindFile=0x665d90bf60 | out: hFindFile=0x665d90bf60) returned 1 [0214.967] SetLastError (dwErrCode=0x0) [0214.967] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0214.967] GetLastError () returned 0xb7 [0214.967] CloseHandle (hObject=0x440) returned 1 [0214.967] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0214.967] FindClose (in: hFindFile=0x665d90bd20 | out: hFindFile=0x665d90bd20) returned 1 [0214.967] SetLastError (dwErrCode=0x0) [0214.968] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0214.968] GetLastError () returned 0xb7 [0214.968] CloseHandle (hObject=0x654) returned 1 [0214.968] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0214.968] SetLastError (dwErrCode=0x0) [0214.968] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0214.968] GetLastError () returned 0xb7 [0214.968] CloseHandle (hObject=0x654) returned 1 [0214.968] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Temp\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665d90cd40 [0214.968] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0214.968] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0214.968] FindClose (in: hFindFile=0x665d90cd40 | out: hFindFile=0x665d90cd40) returned 1 [0214.968] SetLastError (dwErrCode=0x0) [0214.968] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Temp\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\temp\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0214.970] GetLastError () returned 0x0 [0214.970] WriteFile (in: hFile=0x654, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7ad80*=0x324, lpOverlapped=0x0) returned 1 [0214.970] CloseHandle (hObject=0x654) returned 1 [0214.971] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0214.971] SetLastError (dwErrCode=0x0) [0214.971] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0214.971] GetLastError () returned 0xb7 [0214.971] CloseHandle (hObject=0x654) returned 1 [0214.971] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\TempState\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665d90c680 [0214.971] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0214.971] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0214.971] FindClose (in: hFindFile=0x665d90c680 | out: hFindFile=0x665d90c680) returned 1 [0214.971] SetLastError (dwErrCode=0x0) [0214.971] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\TempState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\tempstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0214.972] GetLastError () returned 0x0 [0214.972] WriteFile (in: hFile=0x654, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7ad80*=0x324, lpOverlapped=0x0) returned 1 [0214.973] CloseHandle (hObject=0x654) returned 1 [0214.973] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0214.973] FindClose (in: hFindFile=0x665d90c6e0 | out: hFindFile=0x665d90c6e0) returned 1 [0214.973] SetLastError (dwErrCode=0x0) [0214.973] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0214.974] GetLastError () returned 0xb7 [0214.974] CloseHandle (hObject=0x3e8) returned 1 [0214.974] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0214.974] SetLastError (dwErrCode=0x0) [0214.974] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0214.974] GetLastError () returned 0xb7 [0214.974] CloseHandle (hObject=0x3e8) returned 1 [0214.974] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\INetCache\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c080 [0214.975] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0214.975] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0214.975] FindClose (in: hFindFile=0x665d90c080 | out: hFindFile=0x665d90c080) returned 1 [0214.975] SetLastError (dwErrCode=0x0) [0214.975] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\INetCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\inetcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0214.975] GetLastError () returned 0x0 [0214.975] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0214.976] CloseHandle (hObject=0x3e8) returned 1 [0214.976] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0214.976] SetLastError (dwErrCode=0x0) [0214.976] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0214.976] GetLastError () returned 0xb7 [0214.976] CloseHandle (hObject=0x3e8) returned 1 [0214.977] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\INetCookies\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90ca40 [0214.977] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0214.977] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0214.977] FindClose (in: hFindFile=0x665d90ca40 | out: hFindFile=0x665d90ca40) returned 1 [0214.977] SetLastError (dwErrCode=0x0) [0214.977] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\INetCookies\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\inetcookies\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0214.978] GetLastError () returned 0x0 [0214.978] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0214.979] CloseHandle (hObject=0x3e8) returned 1 [0214.979] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0214.979] SetLastError (dwErrCode=0x0) [0214.979] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0214.979] GetLastError () returned 0xb7 [0214.979] CloseHandle (hObject=0x3e8) returned 1 [0214.979] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\INetHistory\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c0e0 [0214.979] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0214.979] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0214.979] FindClose (in: hFindFile=0x665d90c0e0 | out: hFindFile=0x665d90c0e0) returned 1 [0214.979] SetLastError (dwErrCode=0x0) [0214.980] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\INetHistory\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\inethistory\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0214.980] GetLastError () returned 0x0 [0214.980] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0214.981] CloseHandle (hObject=0x3e8) returned 1 [0214.981] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0214.981] SetLastError (dwErrCode=0x0) [0214.981] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0214.981] GetLastError () returned 0xb7 [0214.981] CloseHandle (hObject=0x3e8) returned 1 [0214.981] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c1a0 [0214.982] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0214.982] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0214.982] SetLastError (dwErrCode=0x0) [0214.982] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0215.038] GetLastError () returned 0x0 [0215.038] WriteFile (in: hFile=0x654, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7ad80*=0x324, lpOverlapped=0x0) returned 1 [0215.039] CloseHandle (hObject=0x654) returned 1 [0215.039] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665d90c6e0 [0215.040] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0215.040] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0215.040] SetLastError (dwErrCode=0x0) [0215.040] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0215.041] GetLastError () returned 0x0 [0215.041] WriteFile (in: hFile=0x440, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7a5d0*=0x324, lpOverlapped=0x0) returned 1 [0215.042] CloseHandle (hObject=0x440) returned 1 [0215.042] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\*.*", lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0x665d90be40 [0215.043] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0215.044] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0215.044] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0215.044] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", dwFileAttributes=0x80) returned 1 [0215.045] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0215.046] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=2920) returned 1 [0215.046] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=2920) returned 1 [0215.046] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0xa46, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.046] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0215.048] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0215.048] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9aab0) returned 1 [0215.048] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0215.048] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0215.048] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0xb68, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0xb68, lpOverlapped=0x0) returned 1 [0215.048] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0215.048] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0xb68, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0xb70) returned 1 [0215.048] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0215.048] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0xb70, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0xb70, lpOverlapped=0x0) returned 1 [0215.049] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0215.049] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0215.049] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0215.049] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0215.049] CloseHandle (hObject=0x5cc) returned 1 [0215.069] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0215.074] CryptDestroyKey (hKey=0x665ab9aab0) returned 1 [0215.074] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0215.075] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0215.075] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0215.075] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\42B9A473B4DAF01285A36B4D3C7B1662_178C086B699FD6C56B804AF3EF759CB5", dwFileAttributes=0x80) returned 1 [0215.076] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\42B9A473B4DAF01285A36B4D3C7B1662_178C086B699FD6C56B804AF3EF759CB5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\42b9a473b4daf01285a36b4d3c7b1662_178c086b699fd6c56b804af3ef759cb5"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0215.076] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=471) returned 1 [0215.076] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=471) returned 1 [0215.076] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0xb5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.076] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0215.077] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0215.077] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a6c0) returned 1 [0215.078] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0215.078] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0215.078] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x1d7, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x1d7, lpOverlapped=0x0) returned 1 [0215.078] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0215.078] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x1d7, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x1e0) returned 1 [0215.078] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0215.078] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x1e0, lpOverlapped=0x0) returned 1 [0215.078] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0215.079] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0215.079] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0215.079] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0215.112] CloseHandle (hObject=0x5cc) returned 1 [0215.135] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0215.139] CryptDestroyKey (hKey=0x665ab9a6c0) returned 1 [0215.139] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0215.139] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0215.139] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0215.139] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", dwFileAttributes=0x80) returned 1 [0215.140] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0215.141] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=0) returned 1 [0215.141] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=0) returned 1 [0215.141] CloseHandle (hObject=0x5cc) returned 1 [0215.141] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0215.141] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0215.141] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0215.142] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\66AE3BFDF94A732B262342AD2154B86E_108A7991F73F2B507007C35661993162", dwFileAttributes=0x80) returned 1 [0215.142] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\66AE3BFDF94A732B262342AD2154B86E_108A7991F73F2B507007C35661993162" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\66ae3bfdf94a732b262342ad2154b86e_108a7991f73f2b507007c35661993162"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0215.142] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=471) returned 1 [0215.143] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=471) returned 1 [0215.143] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0xb5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.143] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0215.143] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0215.144] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a3b0) returned 1 [0215.144] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0215.144] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0215.144] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x1d7, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x1d7, lpOverlapped=0x0) returned 1 [0215.144] CryptEncrypt (in: hKey=0x665ab9a3b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0215.144] CryptEncrypt (in: hKey=0x665ab9a3b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x1d7, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x1e0) returned 1 [0215.144] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0215.144] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x1e0, lpOverlapped=0x0) returned 1 [0215.144] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0215.144] CryptExportKey (in: hKey=0x665ab9a3b0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0215.144] CryptExportKey (in: hKey=0x665ab9a3b0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0215.144] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0215.145] CloseHandle (hObject=0x5cc) returned 1 [0215.162] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0215.166] CryptDestroyKey (hKey=0x665ab9a3b0) returned 1 [0215.166] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0215.167] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0215.167] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0215.167] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", dwFileAttributes=0x80) returned 1 [0215.167] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0215.168] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=0) returned 1 [0215.168] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=0) returned 1 [0215.168] CloseHandle (hObject=0x5cc) returned 1 [0215.168] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0215.168] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0215.168] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0215.169] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619", dwFileAttributes=0x80) returned 1 [0215.169] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\edc238bff48a31d55a97e1e93892934b_c31b2498754e340573f1336de607d619"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0215.170] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=471) returned 1 [0215.170] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=471) returned 1 [0215.170] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0xb5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.170] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0215.171] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0215.171] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a340) returned 1 [0215.171] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0215.171] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0215.171] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x1d7, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x1d7, lpOverlapped=0x0) returned 1 [0215.171] CryptEncrypt (in: hKey=0x665ab9a340, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0215.171] CryptEncrypt (in: hKey=0x665ab9a340, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x1d7, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x1e0) returned 1 [0215.171] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0215.171] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x1e0, lpOverlapped=0x0) returned 1 [0215.171] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0215.171] CryptExportKey (in: hKey=0x665ab9a340, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0215.171] CryptExportKey (in: hKey=0x665ab9a340, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0215.171] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0215.181] CloseHandle (hObject=0x5cc) returned 1 [0215.199] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0215.249] CryptDestroyKey (hKey=0x665ab9a340) returned 1 [0215.249] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0215.250] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0215.250] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0215.250] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", dwFileAttributes=0x80) returned 1 [0215.251] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0215.251] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=0) returned 1 [0215.251] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=0) returned 1 [0215.251] CloseHandle (hObject=0x5cc) returned 1 [0215.251] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0215.252] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0 [0215.252] FindClose (in: hFindFile=0x665d90be40 | out: hFindFile=0x665d90be40) returned 1 [0215.252] SetLastError (dwErrCode=0x0) [0215.252] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0215.253] GetLastError () returned 0x0 [0215.253] WriteFile (in: hFile=0x440, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7a5d0*=0x324, lpOverlapped=0x0) returned 1 [0215.254] CloseHandle (hObject=0x440) returned 1 [0215.254] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0215.254] SetLastError (dwErrCode=0x0) [0215.254] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0215.254] GetLastError () returned 0xb7 [0215.254] CloseHandle (hObject=0x440) returned 1 [0215.255] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\*.*", lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0x665d90bd80 [0215.256] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0215.256] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0215.256] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0215.256] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", dwFileAttributes=0x80) returned 1 [0215.257] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0215.257] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=400) returned 1 [0215.257] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=400) returned 1 [0215.257] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x6e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.258] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0215.259] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0215.259] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9aab0) returned 1 [0215.259] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0215.259] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0215.259] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x190, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x190, lpOverlapped=0x0) returned 1 [0215.259] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0215.259] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x190, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x1a0) returned 1 [0215.259] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0215.259] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x1a0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x1a0, lpOverlapped=0x0) returned 1 [0215.260] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0215.260] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0215.260] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0215.260] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0215.261] CloseHandle (hObject=0x5cc) returned 1 [0215.283] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0215.288] CryptDestroyKey (hKey=0x665ab9aab0) returned 1 [0215.288] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0215.288] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0215.288] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0215.289] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\42B9A473B4DAF01285A36B4D3C7B1662_178C086B699FD6C56B804AF3EF759CB5", dwFileAttributes=0x80) returned 1 [0215.290] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\42B9A473B4DAF01285A36B4D3C7B1662_178C086B699FD6C56B804AF3EF759CB5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\42b9a473b4daf01285a36b4d3c7b1662_178c086b699fd6c56b804af3ef759cb5"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0215.291] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=434) returned 1 [0215.291] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=434) returned 1 [0215.291] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x90, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.291] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0215.292] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0215.292] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a6c0) returned 1 [0215.292] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0215.292] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0215.292] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x1b2, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x1b2, lpOverlapped=0x0) returned 1 [0215.293] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0215.293] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x1b2, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x1c0) returned 1 [0215.293] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0215.293] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x1c0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x1c0, lpOverlapped=0x0) returned 1 [0215.293] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0215.293] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0215.293] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0215.293] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0215.295] CloseHandle (hObject=0x5cc) returned 1 [0215.316] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0215.320] CryptDestroyKey (hKey=0x665ab9a6c0) returned 1 [0215.320] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0215.320] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0215.320] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0215.321] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", dwFileAttributes=0x80) returned 1 [0215.321] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0215.322] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=302) returned 1 [0215.322] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=302) returned 1 [0215.322] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0xc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.322] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0215.323] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0215.323] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a3b0) returned 1 [0215.323] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0215.324] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0215.324] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x12e, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x12e, lpOverlapped=0x0) returned 1 [0215.324] CryptEncrypt (in: hKey=0x665ab9a3b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0215.324] CryptEncrypt (in: hKey=0x665ab9a3b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x12e, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x130) returned 1 [0215.324] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0215.324] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x130, lpOverlapped=0x0) returned 1 [0215.324] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0215.324] CryptExportKey (in: hKey=0x665ab9a3b0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0215.324] CryptExportKey (in: hKey=0x665ab9a3b0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0215.324] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0215.326] CloseHandle (hObject=0x5cc) returned 1 [0215.344] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0215.349] CryptDestroyKey (hKey=0x665ab9a3b0) returned 1 [0215.349] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0215.350] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0215.350] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0215.350] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\66AE3BFDF94A732B262342AD2154B86E_108A7991F73F2B507007C35661993162", dwFileAttributes=0x80) returned 1 [0215.351] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\66AE3BFDF94A732B262342AD2154B86E_108A7991F73F2B507007C35661993162" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\66ae3bfdf94a732b262342ad2154b86e_108a7991f73f2b507007c35661993162"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0215.351] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=430) returned 1 [0215.351] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=430) returned 1 [0215.351] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x8c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.351] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0215.353] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0215.353] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9aea0) returned 1 [0215.353] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0215.353] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0215.353] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x1ae, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x1ae, lpOverlapped=0x0) returned 1 [0215.353] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0215.353] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x1ae, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x1b0) returned 1 [0215.353] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0215.353] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x1b0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x1b0, lpOverlapped=0x0) returned 1 [0215.354] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0215.354] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0215.354] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0215.354] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0215.366] CloseHandle (hObject=0x5cc) returned 1 [0215.387] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0215.393] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0215.393] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0215.393] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0215.393] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0215.394] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", dwFileAttributes=0x80) returned 1 [0215.394] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0215.395] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=290) returned 1 [0215.395] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=290) returned 1 [0215.395] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a3b0) returned 1 [0215.395] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0215.396] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0215.396] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x122, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x122, lpOverlapped=0x0) returned 1 [0215.397] CryptEncrypt (in: hKey=0x665ab9a3b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0215.397] CryptEncrypt (in: hKey=0x665ab9a3b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x122, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x130) returned 1 [0215.397] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0215.397] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x130, lpOverlapped=0x0) returned 1 [0215.397] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0215.397] CryptExportKey (in: hKey=0x665ab9a3b0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0215.397] CryptExportKey (in: hKey=0x665ab9a3b0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0215.398] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0215.399] CloseHandle (hObject=0x5cc) returned 1 [0215.422] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0215.427] CryptDestroyKey (hKey=0x665ab9a3b0) returned 1 [0215.427] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0215.427] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0215.427] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0215.427] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619", dwFileAttributes=0x80) returned 1 [0215.428] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\edc238bff48a31d55a97e1e93892934b_c31b2498754e340573f1336de607d619"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0215.428] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=430) returned 1 [0215.429] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=430) returned 1 [0215.429] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x8c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.429] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0215.430] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0215.430] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9af10) returned 1 [0215.430] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0215.430] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0215.430] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x1ae, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x1ae, lpOverlapped=0x0) returned 1 [0215.430] CryptEncrypt (in: hKey=0x665ab9af10, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0215.430] CryptEncrypt (in: hKey=0x665ab9af10, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x1ae, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x1b0) returned 1 [0215.431] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0215.431] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x1b0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x1b0, lpOverlapped=0x0) returned 1 [0215.431] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0215.431] CryptExportKey (in: hKey=0x665ab9af10, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0215.431] CryptExportKey (in: hKey=0x665ab9af10, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0215.431] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0215.432] CloseHandle (hObject=0x5cc) returned 1 [0215.454] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0215.458] CryptDestroyKey (hKey=0x665ab9af10) returned 1 [0215.458] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0215.459] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0215.459] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0215.459] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", dwFileAttributes=0x80) returned 1 [0215.459] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0215.460] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=290) returned 1 [0215.460] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=290) returned 1 [0215.460] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a6c0) returned 1 [0215.460] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0215.460] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0215.460] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x122, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x122, lpOverlapped=0x0) returned 1 [0215.461] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0215.461] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x122, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x130) returned 1 [0215.461] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0215.462] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x130, lpOverlapped=0x0) returned 1 [0215.462] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0215.462] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0215.462] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0215.462] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0215.463] CloseHandle (hObject=0x5cc) returned 1 [0215.482] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0215.486] CryptDestroyKey (hKey=0x665ab9a6c0) returned 1 [0215.486] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0215.486] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0 [0215.486] FindClose (in: hFindFile=0x665d90bd80 | out: hFindFile=0x665d90bd80) returned 1 [0215.486] SetLastError (dwErrCode=0x0) [0215.486] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0215.487] GetLastError () returned 0x0 [0215.487] WriteFile (in: hFile=0x440, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7a5d0*=0x324, lpOverlapped=0x0) returned 1 [0215.488] CloseHandle (hObject=0x440) returned 1 [0215.488] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0215.488] FindClose (in: hFindFile=0x665d90c6e0 | out: hFindFile=0x665d90c6e0) returned 1 [0215.488] SetLastError (dwErrCode=0x0) [0215.488] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0215.488] GetLastError () returned 0xb7 [0215.488] CloseHandle (hObject=0x654) returned 1 [0215.488] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0215.488] SetLastError (dwErrCode=0x0) [0215.488] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0215.489] GetLastError () returned 0xb7 [0215.489] CloseHandle (hObject=0x654) returned 1 [0215.489] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665d90c860 [0215.489] FindNextFileW (in: hFindFile=0x665d90c860, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0215.489] FindNextFileW (in: hFindFile=0x665d90c860, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0215.489] SetLastError (dwErrCode=0x0) [0215.490] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\systemcertificates\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0215.490] GetLastError () returned 0x0 [0215.491] WriteFile (in: hFile=0x440, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7a5d0*=0x324, lpOverlapped=0x0) returned 1 [0215.491] CloseHandle (hObject=0x440) returned 1 [0215.491] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates\\My\\*.*", lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0x665d90c2c0 [0215.491] FindNextFileW (in: hFindFile=0x665d90c2c0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0215.492] FindNextFileW (in: hFindFile=0x665d90c2c0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0215.492] SetLastError (dwErrCode=0x0) [0215.492] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates\\My\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\systemcertificates\\my\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0215.492] GetLastError () returned 0x0 [0215.492] WriteFile (in: hFile=0x5cc, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da79e20*=0x324, lpOverlapped=0x0) returned 1 [0215.493] CloseHandle (hObject=0x5cc) returned 1 [0215.493] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates\\My\\Certificates\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665d90c260 [0215.494] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0215.494] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0215.494] FindClose (in: hFindFile=0x665d90c260 | out: hFindFile=0x665d90c260) returned 1 [0215.494] SetLastError (dwErrCode=0x0) [0215.494] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates\\My\\Certificates\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\systemcertificates\\my\\certificates\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0215.495] GetLastError () returned 0x0 [0215.495] WriteFile (in: hFile=0x5cc, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da79e20*=0x324, lpOverlapped=0x0) returned 1 [0215.496] CloseHandle (hObject=0x5cc) returned 1 [0215.496] FindNextFileW (in: hFindFile=0x665d90c2c0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0215.496] SetLastError (dwErrCode=0x0) [0215.496] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates\\My\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\systemcertificates\\my\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0215.496] GetLastError () returned 0xb7 [0215.496] CloseHandle (hObject=0x5cc) returned 1 [0215.496] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates\\My\\CRLs\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665d90bd20 [0215.496] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0215.496] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0215.496] FindClose (in: hFindFile=0x665d90bd20 | out: hFindFile=0x665d90bd20) returned 1 [0215.497] SetLastError (dwErrCode=0x0) [0215.497] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates\\My\\CRLs\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\systemcertificates\\my\\crls\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0215.497] GetLastError () returned 0x0 [0215.497] WriteFile (in: hFile=0x5cc, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da79e20*=0x324, lpOverlapped=0x0) returned 1 [0215.498] CloseHandle (hObject=0x5cc) returned 1 [0215.498] FindNextFileW (in: hFindFile=0x665d90c2c0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0215.498] SetLastError (dwErrCode=0x0) [0215.498] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates\\My\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\systemcertificates\\my\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0215.499] GetLastError () returned 0xb7 [0215.499] CloseHandle (hObject=0x5cc) returned 1 [0215.499] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates\\My\\CTLs\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665d90bd20 [0215.499] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0215.499] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0215.499] FindClose (in: hFindFile=0x665d90bd20 | out: hFindFile=0x665d90bd20) returned 1 [0215.499] SetLastError (dwErrCode=0x0) [0215.499] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates\\My\\CTLs\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\systemcertificates\\my\\ctls\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0215.500] GetLastError () returned 0x0 [0215.500] WriteFile (in: hFile=0x5cc, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da79e20*=0x324, lpOverlapped=0x0) returned 1 [0215.503] CloseHandle (hObject=0x5cc) returned 1 [0215.503] FindNextFileW (in: hFindFile=0x665d90c2c0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0 [0215.503] FindClose (in: hFindFile=0x665d90c2c0 | out: hFindFile=0x665d90c2c0) returned 1 [0215.503] SetLastError (dwErrCode=0x0) [0215.504] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates\\My\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\systemcertificates\\my\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0215.504] GetLastError () returned 0xb7 [0215.504] CloseHandle (hObject=0x440) returned 1 [0215.504] FindNextFileW (in: hFindFile=0x665d90c860, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0215.504] FindClose (in: hFindFile=0x665d90c860 | out: hFindFile=0x665d90c860) returned 1 [0215.504] SetLastError (dwErrCode=0x0) [0215.504] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\systemcertificates\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0215.504] GetLastError () returned 0xb7 [0215.504] CloseHandle (hObject=0x654) returned 1 [0215.504] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0215.504] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0215.504] FindClose (in: hFindFile=0x665d90c1a0 | out: hFindFile=0x665d90c1a0) returned 1 [0215.504] SetLastError (dwErrCode=0x0) [0215.504] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0215.505] GetLastError () returned 0xb7 [0215.505] CloseHandle (hObject=0x3e8) returned 1 [0215.505] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0215.505] SetLastError (dwErrCode=0x0) [0215.505] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0215.505] GetLastError () returned 0xb7 [0215.505] CloseHandle (hObject=0x3e8) returned 1 [0215.505] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bd80 [0215.506] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0215.506] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0215.506] SetLastError (dwErrCode=0x0) [0215.506] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0215.507] GetLastError () returned 0x0 [0215.507] WriteFile (in: hFile=0x654, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7ad80*=0x324, lpOverlapped=0x0) returned 1 [0215.508] CloseHandle (hObject=0x654) returned 1 [0215.508] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\BingPageDataCache\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665d90cb60 [0215.508] FindNextFileW (in: hFindFile=0x665d90cb60, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0215.508] FindNextFileW (in: hFindFile=0x665d90cb60, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0215.508] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0215.509] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\BingPageDataCache\\container.dat", dwFileAttributes=0x80) returned 1 [0215.509] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\BingPageDataCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\bingpagedatacache\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0215.510] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x665da7a3c8 | out: lpFileSize=0x665da7a3c8*=0) returned 1 [0215.510] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x665da7a3d8 | out: lpFileSize=0x665da7a3d8*=0) returned 1 [0215.510] CloseHandle (hObject=0x440) returned 1 [0215.510] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0215.510] FindNextFileW (in: hFindFile=0x665d90cb60, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0215.510] FindClose (in: hFindFile=0x665d90cb60 | out: hFindFile=0x665d90cb60) returned 1 [0215.510] SetLastError (dwErrCode=0x0) [0215.510] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\BingPageDataCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\bingpagedatacache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0215.511] GetLastError () returned 0x0 [0215.511] WriteFile (in: hFile=0x654, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7ad80*=0x324, lpOverlapped=0x0) returned 1 [0215.512] CloseHandle (hObject=0x654) returned 1 [0215.512] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0215.512] SetLastError (dwErrCode=0x0) [0215.512] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0215.512] GetLastError () returned 0xb7 [0215.512] CloseHandle (hObject=0x654) returned 1 [0215.512] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cache\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665d90c6e0 [0215.512] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0215.512] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0215.512] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0215.513] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cache\\container.dat", dwFileAttributes=0x80) returned 1 [0215.514] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cache\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0215.514] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x665da7a3c8 | out: lpFileSize=0x665da7a3c8*=0) returned 1 [0215.514] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x665da7a3d8 | out: lpFileSize=0x665da7a3d8*=0) returned 1 [0215.514] CloseHandle (hObject=0x440) returned 1 [0215.514] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0215.514] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0215.514] FindClose (in: hFindFile=0x665d90c6e0 | out: hFindFile=0x665d90c6e0) returned 1 [0215.514] SetLastError (dwErrCode=0x0) [0215.515] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0215.515] GetLastError () returned 0x0 [0215.515] WriteFile (in: hFile=0x654, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7ad80*=0x324, lpOverlapped=0x0) returned 1 [0215.516] CloseHandle (hObject=0x654) returned 1 [0215.516] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0215.516] SetLastError (dwErrCode=0x0) [0215.516] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0215.516] GetLastError () returned 0xb7 [0215.516] CloseHandle (hObject=0x654) returned 1 [0215.516] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665d90c380 [0215.517] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0215.517] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0215.517] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0215.518] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\1143SFPT.txt", dwFileAttributes=0x80) returned 1 [0215.519] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\1143SFPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cookies\\1143sfpt.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0215.519] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x665da7a3c8 | out: lpFileSize=0x665da7a3c8*=111) returned 1 [0215.519] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x665da7a3d8 | out: lpFileSize=0x665da7a3d8*=111) returned 1 [0215.519] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7a3b0 | out: phKey=0x665da7a3b0*=0x665ab9a6c0) returned 1 [0215.519] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0215.519] SetFilePointer (in: hFile=0x440, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0215.519] ReadFile (in: hFile=0x440, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x6f, lpNumberOfBytesRead=0x665da7a3c0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7a3c0*=0x6f, lpOverlapped=0x0) returned 1 [0215.521] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7a3bc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7a3bc*=0xf4250) returned 1 [0215.521] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7a3b8*=0x6f, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7a3b8*=0x70) returned 1 [0215.521] SetFilePointer (in: hFile=0x440, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0215.521] WriteFile (in: hFile=0x440, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x665da7a3c0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7a3c0*=0x70, lpOverlapped=0x0) returned 1 [0215.521] WriteFile (in: hFile=0x440, lpBuffer=0x665da7a400*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7a3c4, lpOverlapped=0x0 | out: lpBuffer=0x665da7a400*, lpNumberOfBytesWritten=0x665da7a3c4*=0x6, lpOverlapped=0x0) returned 1 [0215.521] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7a3d0 | out: pbData=0x0*, pdwDataLen=0x665da7a3d0*=0x10c) returned 1 [0215.521] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7a450, pdwDataLen=0x665da7a3d0 | out: pbData=0x665da7a450*, pdwDataLen=0x665da7a3d0*=0x10c) returned 1 [0215.521] WriteFile (in: hFile=0x440, lpBuffer=0x665da7a450*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7a3c4, lpOverlapped=0x0 | out: lpBuffer=0x665da7a450*, lpNumberOfBytesWritten=0x665da7a3c4*=0x10c, lpOverlapped=0x0) returned 1 [0215.521] CloseHandle (hObject=0x440) returned 1 [0215.537] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0215.542] CryptDestroyKey (hKey=0x665ab9a6c0) returned 1 [0215.542] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0215.542] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0215.542] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0215.543] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\1HP9XSYA.txt", dwFileAttributes=0x80) returned 1 [0215.543] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\1HP9XSYA.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cookies\\1hp9xsya.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0215.544] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x665da7a3c8 | out: lpFileSize=0x665da7a3c8*=149) returned 1 [0215.544] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x665da7a3d8 | out: lpFileSize=0x665da7a3d8*=149) returned 1 [0215.544] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7a3b0 | out: phKey=0x665da7a3b0*=0x665ab9a5e0) returned 1 [0215.544] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0215.544] SetFilePointer (in: hFile=0x440, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0215.544] ReadFile (in: hFile=0x440, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x95, lpNumberOfBytesRead=0x665da7a3c0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7a3c0*=0x95, lpOverlapped=0x0) returned 1 [0215.545] CryptEncrypt (in: hKey=0x665ab9a5e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7a3bc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7a3bc*=0xf4250) returned 1 [0215.546] CryptEncrypt (in: hKey=0x665ab9a5e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7a3b8*=0x95, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7a3b8*=0xa0) returned 1 [0215.546] SetFilePointer (in: hFile=0x440, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0215.546] WriteFile (in: hFile=0x440, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x665da7a3c0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7a3c0*=0xa0, lpOverlapped=0x0) returned 1 [0215.546] WriteFile (in: hFile=0x440, lpBuffer=0x665da7a400*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7a3c4, lpOverlapped=0x0 | out: lpBuffer=0x665da7a400*, lpNumberOfBytesWritten=0x665da7a3c4*=0x6, lpOverlapped=0x0) returned 1 [0215.546] CryptExportKey (in: hKey=0x665ab9a5e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7a3d0 | out: pbData=0x0*, pdwDataLen=0x665da7a3d0*=0x10c) returned 1 [0215.546] CryptExportKey (in: hKey=0x665ab9a5e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7a450, pdwDataLen=0x665da7a3d0 | out: pbData=0x665da7a450*, pdwDataLen=0x665da7a3d0*=0x10c) returned 1 [0215.546] WriteFile (in: hFile=0x440, lpBuffer=0x665da7a450*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7a3c4, lpOverlapped=0x0 | out: lpBuffer=0x665da7a450*, lpNumberOfBytesWritten=0x665da7a3c4*=0x10c, lpOverlapped=0x0) returned 1 [0215.546] CloseHandle (hObject=0x440) returned 1 [0215.566] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0215.571] CryptDestroyKey (hKey=0x665ab9a5e0) returned 1 [0215.571] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0215.571] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0215.571] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0215.572] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\205ESPV2.txt", dwFileAttributes=0x80) returned 1 [0215.572] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\205ESPV2.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cookies\\205espv2.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0215.573] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x665da7a3c8 | out: lpFileSize=0x665da7a3c8*=159) returned 1 [0215.573] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x665da7a3d8 | out: lpFileSize=0x665da7a3d8*=159) returned 1 [0215.573] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7a3b0 | out: phKey=0x665da7a3b0*=0x665ab9aab0) returned 1 [0215.573] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0215.573] SetFilePointer (in: hFile=0x440, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0215.573] ReadFile (in: hFile=0x440, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x9f, lpNumberOfBytesRead=0x665da7a3c0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7a3c0*=0x9f, lpOverlapped=0x0) returned 1 [0215.574] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7a3bc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7a3bc*=0xf4250) returned 1 [0215.574] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7a3b8*=0x9f, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7a3b8*=0xa0) returned 1 [0215.574] SetFilePointer (in: hFile=0x440, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0215.574] WriteFile (in: hFile=0x440, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x665da7a3c0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7a3c0*=0xa0, lpOverlapped=0x0) returned 1 [0215.574] WriteFile (in: hFile=0x440, lpBuffer=0x665da7a400*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7a3c4, lpOverlapped=0x0 | out: lpBuffer=0x665da7a400*, lpNumberOfBytesWritten=0x665da7a3c4*=0x6, lpOverlapped=0x0) returned 1 [0215.574] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7a3d0 | out: pbData=0x0*, pdwDataLen=0x665da7a3d0*=0x10c) returned 1 [0215.574] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7a450, pdwDataLen=0x665da7a3d0 | out: pbData=0x665da7a450*, pdwDataLen=0x665da7a3d0*=0x10c) returned 1 [0215.574] WriteFile (in: hFile=0x440, lpBuffer=0x665da7a450*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7a3c4, lpOverlapped=0x0 | out: lpBuffer=0x665da7a450*, lpNumberOfBytesWritten=0x665da7a3c4*=0x10c, lpOverlapped=0x0) returned 1 [0215.575] CloseHandle (hObject=0x440) returned 1 [0215.594] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0215.599] CryptDestroyKey (hKey=0x665ab9aab0) returned 1 [0215.599] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0215.599] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0215.599] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0215.600] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\container.dat", dwFileAttributes=0x80) returned 1 [0215.600] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cookies\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0215.601] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x665da7a3c8 | out: lpFileSize=0x665da7a3c8*=0) returned 1 [0215.601] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x665da7a3d8 | out: lpFileSize=0x665da7a3d8*=0) returned 1 [0215.601] CloseHandle (hObject=0x440) returned 1 [0215.601] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0215.602] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0215.602] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0215.602] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\Y51OCFZ0.txt", dwFileAttributes=0x80) returned 1 [0215.602] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\Y51OCFZ0.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cookies\\y51ocfz0.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0215.603] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x665da7a3c8 | out: lpFileSize=0x665da7a3c8*=121) returned 1 [0215.603] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x665da7a3d8 | out: lpFileSize=0x665da7a3d8*=121) returned 1 [0215.603] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7a3b0 | out: phKey=0x665da7a3b0*=0x665ab9aea0) returned 1 [0215.603] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0215.603] SetFilePointer (in: hFile=0x440, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0215.603] ReadFile (in: hFile=0x440, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x79, lpNumberOfBytesRead=0x665da7a3c0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7a3c0*=0x79, lpOverlapped=0x0) returned 1 [0215.605] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7a3bc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7a3bc*=0xf4250) returned 1 [0215.605] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7a3b8*=0x79, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7a3b8*=0x80) returned 1 [0215.605] SetFilePointer (in: hFile=0x440, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0215.605] WriteFile (in: hFile=0x440, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x665da7a3c0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7a3c0*=0x80, lpOverlapped=0x0) returned 1 [0215.605] WriteFile (in: hFile=0x440, lpBuffer=0x665da7a400*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7a3c4, lpOverlapped=0x0 | out: lpBuffer=0x665da7a400*, lpNumberOfBytesWritten=0x665da7a3c4*=0x6, lpOverlapped=0x0) returned 1 [0215.605] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7a3d0 | out: pbData=0x0*, pdwDataLen=0x665da7a3d0*=0x10c) returned 1 [0215.605] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7a450, pdwDataLen=0x665da7a3d0 | out: pbData=0x665da7a450*, pdwDataLen=0x665da7a3d0*=0x10c) returned 1 [0215.605] WriteFile (in: hFile=0x440, lpBuffer=0x665da7a450*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7a3c4, lpOverlapped=0x0 | out: lpBuffer=0x665da7a450*, lpNumberOfBytesWritten=0x665da7a3c4*=0x10c, lpOverlapped=0x0) returned 1 [0215.605] CloseHandle (hObject=0x440) returned 1 [0215.627] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0215.631] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0215.631] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0215.631] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0215.631] FindClose (in: hFindFile=0x665d90c380 | out: hFindFile=0x665d90c380) returned 1 [0215.632] SetLastError (dwErrCode=0x0) [0215.632] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cookies\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0215.633] GetLastError () returned 0x0 [0215.633] WriteFile (in: hFile=0x654, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7ad80*=0x324, lpOverlapped=0x0) returned 1 [0215.634] CloseHandle (hObject=0x654) returned 1 [0215.634] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0215.634] SetLastError (dwErrCode=0x0) [0215.634] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0215.634] GetLastError () returned 0xb7 [0215.634] CloseHandle (hObject=0x654) returned 1 [0215.634] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\CortanaAssist\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665d90bd20 [0215.634] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0215.634] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0215.634] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0215.635] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\CortanaAssist\\AllowList.dat", dwFileAttributes=0x80) returned 1 [0215.635] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\CortanaAssist\\AllowList.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cortanaassist\\allowlist.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0215.635] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x665da7a3c8 | out: lpFileSize=0x665da7a3c8*=300040) returned 1 [0215.635] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x665da7a3d8 | out: lpFileSize=0x665da7a3d8*=300040) returned 1 [0215.635] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x492e6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.636] ReadFile (in: hFile=0x440, lpBuffer=0x665da7a428, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7a3e8, lpOverlapped=0x0 | out: lpBuffer=0x665da7a428*, lpNumberOfBytesRead=0x665da7a3e8*=0x19, lpOverlapped=0x0) returned 1 [0215.637] SetFilePointer (in: hFile=0x440, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0215.637] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7a3b0 | out: phKey=0x665da7a3b0*=0x665ab9aea0) returned 1 [0215.637] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0215.637] SetFilePointer (in: hFile=0x440, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0215.637] ReadFile (in: hFile=0x440, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x49408, lpNumberOfBytesRead=0x665da7a3c0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7a3c0*=0x49408, lpOverlapped=0x0) returned 1 [0215.644] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7a3bc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7a3bc*=0xf4250) returned 1 [0215.644] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7a3b8*=0x49408, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7a3b8*=0x49410) returned 1 [0215.644] SetFilePointer (in: hFile=0x440, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0215.644] WriteFile (in: hFile=0x440, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x49410, lpNumberOfBytesWritten=0x665da7a3c0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7a3c0*=0x49410, lpOverlapped=0x0) returned 1 [0215.645] WriteFile (in: hFile=0x440, lpBuffer=0x665da7a400*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7a3c4, lpOverlapped=0x0 | out: lpBuffer=0x665da7a400*, lpNumberOfBytesWritten=0x665da7a3c4*=0x6, lpOverlapped=0x0) returned 1 [0215.645] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7a3d0 | out: pbData=0x0*, pdwDataLen=0x665da7a3d0*=0x10c) returned 1 [0215.645] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7a450, pdwDataLen=0x665da7a3d0 | out: pbData=0x665da7a450*, pdwDataLen=0x665da7a3d0*=0x10c) returned 1 [0215.645] WriteFile (in: hFile=0x440, lpBuffer=0x665da7a450*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7a3c4, lpOverlapped=0x0 | out: lpBuffer=0x665da7a450*, lpNumberOfBytesWritten=0x665da7a3c4*=0x10c, lpOverlapped=0x0) returned 1 [0215.646] CloseHandle (hObject=0x440) returned 1 [0215.659] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0215.664] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0215.664] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0215.664] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0215.664] FindClose (in: hFindFile=0x665d90bd20 | out: hFindFile=0x665d90bd20) returned 1 [0215.664] SetLastError (dwErrCode=0x0) [0215.664] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\CortanaAssist\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cortanaassist\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0215.665] GetLastError () returned 0x0 [0215.665] WriteFile (in: hFile=0x654, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7ad80*=0x324, lpOverlapped=0x0) returned 1 [0215.666] CloseHandle (hObject=0x654) returned 1 [0215.666] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0215.666] SetLastError (dwErrCode=0x0) [0215.666] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0215.667] GetLastError () returned 0xb7 [0215.667] CloseHandle (hObject=0x654) returned 1 [0215.667] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\History\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665d90c080 [0215.667] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0215.667] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0215.667] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0215.667] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\History\\container.dat", dwFileAttributes=0x80) returned 1 [0215.668] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\History\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\history\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0215.668] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x665da7a3c8 | out: lpFileSize=0x665da7a3c8*=0) returned 1 [0215.669] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x665da7a3d8 | out: lpFileSize=0x665da7a3d8*=0) returned 1 [0215.669] CloseHandle (hObject=0x440) returned 1 [0215.669] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0215.669] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0215.670] FindClose (in: hFindFile=0x665d90c080 | out: hFindFile=0x665d90c080) returned 1 [0215.670] SetLastError (dwErrCode=0x0) [0215.670] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\History\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\history\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0215.671] GetLastError () returned 0x0 [0215.671] WriteFile (in: hFile=0x654, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7ad80*=0x324, lpOverlapped=0x0) returned 1 [0215.672] CloseHandle (hObject=0x654) returned 1 [0215.672] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0215.672] SetLastError (dwErrCode=0x0) [0215.672] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0215.673] GetLastError () returned 0xb7 [0215.673] CloseHandle (hObject=0x654) returned 1 [0215.673] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatCache\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665d90c500 [0215.674] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0215.674] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0215.674] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0215.674] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatCache\\container.dat", dwFileAttributes=0x80) returned 1 [0215.675] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\iecompatcache\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0215.675] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x665da7a3c8 | out: lpFileSize=0x665da7a3c8*=0) returned 1 [0215.675] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x665da7a3d8 | out: lpFileSize=0x665da7a3d8*=0) returned 1 [0215.675] CloseHandle (hObject=0x440) returned 1 [0215.675] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0215.676] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0215.676] FindClose (in: hFindFile=0x665d90c500 | out: hFindFile=0x665d90c500) returned 1 [0215.676] SetLastError (dwErrCode=0x0) [0215.676] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\iecompatcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0215.677] GetLastError () returned 0x0 [0215.677] WriteFile (in: hFile=0x654, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7ad80*=0x324, lpOverlapped=0x0) returned 1 [0215.678] CloseHandle (hObject=0x654) returned 1 [0215.678] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0215.678] SetLastError (dwErrCode=0x0) [0215.678] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0215.678] GetLastError () returned 0xb7 [0215.678] CloseHandle (hObject=0x654) returned 1 [0215.678] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatUaCache\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665d90c560 [0215.678] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0215.678] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0215.679] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0215.679] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatUaCache\\container.dat", dwFileAttributes=0x80) returned 1 [0215.680] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatUaCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\iecompatuacache\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0215.681] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x665da7a3c8 | out: lpFileSize=0x665da7a3c8*=0) returned 1 [0215.681] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x665da7a3d8 | out: lpFileSize=0x665da7a3d8*=0) returned 1 [0215.681] CloseHandle (hObject=0x440) returned 1 [0215.681] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0215.681] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0215.681] FindClose (in: hFindFile=0x665d90c560 | out: hFindFile=0x665d90c560) returned 1 [0215.681] SetLastError (dwErrCode=0x0) [0215.681] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatUaCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\iecompatuacache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0215.683] GetLastError () returned 0x0 [0215.683] WriteFile (in: hFile=0x654, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7ad80*=0x324, lpOverlapped=0x0) returned 1 [0215.684] CloseHandle (hObject=0x654) returned 1 [0215.684] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0215.684] SetLastError (dwErrCode=0x0) [0215.684] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0215.684] GetLastError () returned 0xb7 [0215.684] CloseHandle (hObject=0x654) returned 1 [0215.684] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IEFlipAheadCache\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665d90c500 [0215.684] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0215.684] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0215.684] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0215.685] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IEFlipAheadCache\\container.dat", dwFileAttributes=0x80) returned 1 [0215.686] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IEFlipAheadCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\ieflipaheadcache\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0215.686] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x665da7a3c8 | out: lpFileSize=0x665da7a3c8*=0) returned 1 [0215.686] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x665da7a3d8 | out: lpFileSize=0x665da7a3d8*=0) returned 1 [0215.686] CloseHandle (hObject=0x440) returned 1 [0215.686] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0215.687] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0215.687] FindClose (in: hFindFile=0x665d90c500 | out: hFindFile=0x665d90c500) returned 1 [0215.687] SetLastError (dwErrCode=0x0) [0215.687] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IEFlipAheadCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\ieflipaheadcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0215.687] GetLastError () returned 0x0 [0215.688] WriteFile (in: hFile=0x654, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7ad80*=0x324, lpOverlapped=0x0) returned 1 [0215.689] CloseHandle (hObject=0x654) returned 1 [0215.689] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0215.689] SetLastError (dwErrCode=0x0) [0215.689] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0215.689] GetLastError () returned 0xb7 [0215.689] CloseHandle (hObject=0x654) returned 1 [0215.689] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\PlayReady\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665d90c860 [0215.690] FindNextFileW (in: hFindFile=0x665d90c860, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0215.690] FindNextFileW (in: hFindFile=0x665d90c860, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0215.690] FindClose (in: hFindFile=0x665d90c860 | out: hFindFile=0x665d90c860) returned 1 [0215.690] SetLastError (dwErrCode=0x0) [0215.690] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\PlayReady\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\playready\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0215.693] GetLastError () returned 0x0 [0215.693] WriteFile (in: hFile=0x654, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7ad80*=0x324, lpOverlapped=0x0) returned 1 [0215.694] CloseHandle (hObject=0x654) returned 1 [0215.694] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0215.694] SetLastError (dwErrCode=0x0) [0215.694] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0215.694] GetLastError () returned 0xb7 [0215.694] CloseHandle (hObject=0x654) returned 1 [0215.695] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665d90c440 [0215.695] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0215.695] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0215.695] SetLastError (dwErrCode=0x0) [0215.695] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0215.695] GetLastError () returned 0x0 [0215.695] WriteFile (in: hFile=0x440, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7a5d0*=0x324, lpOverlapped=0x0) returned 1 [0215.696] CloseHandle (hObject=0x440) returned 1 [0215.697] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\*.*", lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0x665d90c560 [0215.698] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0215.698] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0215.698] SetLastError (dwErrCode=0x0) [0215.698] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0215.700] GetLastError () returned 0x0 [0215.700] WriteFile (in: hFile=0x5cc, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da79e20*=0x324, lpOverlapped=0x0) returned 1 [0215.701] CloseHandle (hObject=0x5cc) returned 1 [0215.701] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665d90ce60 [0215.702] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0215.702] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0215.702] SetLastError (dwErrCode=0x0) [0215.702] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0215.703] GetLastError () returned 0x0 [0215.703] WriteFile (in: hFile=0x410, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da79670*=0x324, lpOverlapped=0x0) returned 1 [0215.704] CloseHandle (hObject=0x410) returned 1 [0215.704] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665d90c500 [0215.704] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0215.705] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0215.705] SetLastError (dwErrCode=0x0) [0215.705] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x450 [0215.706] GetLastError () returned 0x0 [0215.706] WriteFile (in: hFile=0x450, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da78ec0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da78ec0*=0x324, lpOverlapped=0x0) returned 1 [0215.707] CloseHandle (hObject=0x450) returned 1 [0215.707] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\*.*", lpFindFileData=0x665da78760 | out: lpFindFileData=0x665da78760) returned 0x665d90c0e0 [0215.708] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da78760 | out: lpFindFileData=0x665da78760) returned 1 [0215.708] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da78760 | out: lpFindFileData=0x665da78760) returned 1 [0215.708] SetLastError (dwErrCode=0x0) [0215.708] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5dc [0215.708] GetLastError () returned 0x0 [0215.708] WriteFile (in: hFile=0x5dc, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da78710, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da78710*=0x324, lpOverlapped=0x0) returned 1 [0215.709] CloseHandle (hObject=0x5dc) returned 1 [0215.709] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\*.*", lpFindFileData=0x665da77fb0 | out: lpFindFileData=0x665da77fb0) returned 0x665d90c4a0 [0215.710] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da77fb0 | out: lpFindFileData=0x665da77fb0) returned 1 [0215.710] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da77fb0 | out: lpFindFileData=0x665da77fb0) returned 1 [0215.710] SetLastError (dwErrCode=0x0) [0215.710] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x604 [0215.711] GetLastError () returned 0x0 [0215.711] WriteFile (in: hFile=0x604, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da77f60, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da77f60*=0x324, lpOverlapped=0x0) returned 1 [0215.712] CloseHandle (hObject=0x604) returned 1 [0215.713] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\*.*", lpFindFileData=0x665da77800 | out: lpFindFileData=0x665da77800) returned 0x665d90c620 [0215.713] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da77800 | out: lpFindFileData=0x665da77800) returned 1 [0215.713] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da77800 | out: lpFindFileData=0x665da77800) returned 1 [0215.713] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0215.714] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\edb.chk", dwFileAttributes=0x80) returned 1 [0215.715] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\edb.chk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\edb.chk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x610 [0215.716] GetFileSizeEx (in: hFile=0x610, lpFileSize=0x665da775a8 | out: lpFileSize=0x665da775a8*=8192) returned 1 [0215.716] GetFileSizeEx (in: hFile=0x610, lpFileSize=0x665da775b8 | out: lpFileSize=0x665da775b8*=8192) returned 1 [0215.716] SetFilePointerEx (in: hFile=0x610, liDistanceToMove=0x1ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.716] ReadFile (in: hFile=0x610, lpBuffer=0x665da77608, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da775c8, lpOverlapped=0x0 | out: lpBuffer=0x665da77608*, lpNumberOfBytesRead=0x665da775c8*=0x19, lpOverlapped=0x0) returned 1 [0215.717] SetFilePointer (in: hFile=0x610, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0215.718] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da77590 | out: phKey=0x665da77590*=0x665ab9a340) returned 1 [0215.718] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0215.718] SetFilePointer (in: hFile=0x610, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0215.718] ReadFile (in: hFile=0x610, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x665da775a0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da775a0*=0x2000, lpOverlapped=0x0) returned 1 [0215.719] CryptEncrypt (in: hKey=0x665ab9a340, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7759c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7759c*=0xf4250) returned 1 [0215.719] CryptEncrypt (in: hKey=0x665ab9a340, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da77598*=0x2000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da77598*=0x2010) returned 1 [0215.719] SetFilePointer (in: hFile=0x610, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0215.719] WriteFile (in: hFile=0x610, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x665da775a0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da775a0*=0x2010, lpOverlapped=0x0) returned 1 [0215.720] WriteFile (in: hFile=0x610, lpBuffer=0x665da775e0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da775a4, lpOverlapped=0x0 | out: lpBuffer=0x665da775e0*, lpNumberOfBytesWritten=0x665da775a4*=0x6, lpOverlapped=0x0) returned 1 [0215.720] CryptExportKey (in: hKey=0x665ab9a340, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da775b0 | out: pbData=0x0*, pdwDataLen=0x665da775b0*=0x10c) returned 1 [0215.720] CryptExportKey (in: hKey=0x665ab9a340, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da77630, pdwDataLen=0x665da775b0 | out: pbData=0x665da77630*, pdwDataLen=0x665da775b0*=0x10c) returned 1 [0215.720] WriteFile (in: hFile=0x610, lpBuffer=0x665da77630*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da775a4, lpOverlapped=0x0 | out: lpBuffer=0x665da77630*, lpNumberOfBytesWritten=0x665da775a4*=0x10c, lpOverlapped=0x0) returned 1 [0215.720] CloseHandle (hObject=0x610) returned 1 [0215.737] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0215.742] CryptDestroyKey (hKey=0x665ab9a340) returned 1 [0215.742] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0215.742] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da77800 | out: lpFindFileData=0x665da77800) returned 1 [0215.743] SetLastError (dwErrCode=0x0) [0215.743] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x610 [0215.743] GetLastError () returned 0x0 [0215.743] WriteFile (in: hFile=0x610, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da777b0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da777b0*=0x324, lpOverlapped=0x0) returned 1 [0215.744] CloseHandle (hObject=0x610) returned 1 [0215.745] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\*.*", lpFindFileData=0x665da77050 | out: lpFindFileData=0x665da77050) returned 0x665d90caa0 [0215.745] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da77050 | out: lpFindFileData=0x665da77050) returned 1 [0215.745] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da77050 | out: lpFindFileData=0x665da77050) returned 1 [0215.745] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0215.745] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edb.log", dwFileAttributes=0x80) returned 1 [0215.746] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edb.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\logfiles\\edb.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x508 [0215.746] GetFileSizeEx (in: hFile=0x508, lpFileSize=0x665da76df8 | out: lpFileSize=0x665da76df8*=524288) returned 1 [0215.747] GetFileSizeEx (in: hFile=0x508, lpFileSize=0x665da76e08 | out: lpFileSize=0x665da76e08*=524288) returned 1 [0215.747] SetFilePointerEx (in: hFile=0x508, liDistanceToMove=0x7fede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.747] ReadFile (in: hFile=0x508, lpBuffer=0x665da76e58, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da76e18, lpOverlapped=0x0 | out: lpBuffer=0x665da76e58*, lpNumberOfBytesRead=0x665da76e18*=0x19, lpOverlapped=0x0) returned 1 [0215.767] SetFilePointer (in: hFile=0x508, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0215.767] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da76de0 | out: phKey=0x665da76de0*=0x665ab9aea0) returned 1 [0215.767] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0215.767] SetFilePointer (in: hFile=0x508, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0215.767] ReadFile (in: hFile=0x508, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x80000, lpNumberOfBytesRead=0x665da76df0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da76df0*=0x80000, lpOverlapped=0x0) returned 1 [0215.891] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da76dec*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da76dec*=0xf4250) returned 1 [0215.891] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da76de8*=0x80000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da76de8*=0x80010) returned 1 [0215.892] SetFilePointer (in: hFile=0x508, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0215.892] WriteFile (in: hFile=0x508, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x80010, lpNumberOfBytesWritten=0x665da76df0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da76df0*=0x80010, lpOverlapped=0x0) returned 1 [0215.895] WriteFile (in: hFile=0x508, lpBuffer=0x665da76e30*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da76df4, lpOverlapped=0x0 | out: lpBuffer=0x665da76e30*, lpNumberOfBytesWritten=0x665da76df4*=0x6, lpOverlapped=0x0) returned 1 [0215.895] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da76e00 | out: pbData=0x0*, pdwDataLen=0x665da76e00*=0x10c) returned 1 [0215.895] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da76e80, pdwDataLen=0x665da76e00 | out: pbData=0x665da76e80*, pdwDataLen=0x665da76e00*=0x10c) returned 1 [0215.895] WriteFile (in: hFile=0x508, lpBuffer=0x665da76e80*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da76df4, lpOverlapped=0x0 | out: lpBuffer=0x665da76e80*, lpNumberOfBytesWritten=0x665da76df4*=0x10c, lpOverlapped=0x0) returned 1 [0215.895] CloseHandle (hObject=0x508) returned 1 [0215.901] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0215.906] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0215.906] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0215.907] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da77050 | out: lpFindFileData=0x665da77050) returned 1 [0215.907] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0215.907] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbres00001.jrs", dwFileAttributes=0x80) returned 1 [0215.914] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbres00001.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\logfiles\\edbres00001.jrs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x508 [0215.915] GetFileSizeEx (in: hFile=0x508, lpFileSize=0x665da76df8 | out: lpFileSize=0x665da76df8*=524288) returned 1 [0215.915] GetFileSizeEx (in: hFile=0x508, lpFileSize=0x665da76e08 | out: lpFileSize=0x665da76e08*=524288) returned 1 [0215.915] SetFilePointerEx (in: hFile=0x508, liDistanceToMove=0x7fede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.915] ReadFile (in: hFile=0x508, lpBuffer=0x665da76e58, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da76e18, lpOverlapped=0x0 | out: lpBuffer=0x665da76e58*, lpNumberOfBytesRead=0x665da76e18*=0x19, lpOverlapped=0x0) returned 1 [0215.916] SetFilePointer (in: hFile=0x508, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0215.916] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da76de0 | out: phKey=0x665da76de0*=0x665ab9a110) returned 1 [0215.916] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0215.916] SetFilePointer (in: hFile=0x508, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0215.916] ReadFile (in: hFile=0x508, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x80000, lpNumberOfBytesRead=0x665da76df0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da76df0*=0x80000, lpOverlapped=0x0) returned 1 [0215.928] CryptEncrypt (in: hKey=0x665ab9a110, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da76dec*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da76dec*=0xf4250) returned 1 [0215.928] CryptEncrypt (in: hKey=0x665ab9a110, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da76de8*=0x80000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da76de8*=0x80010) returned 1 [0215.929] SetFilePointer (in: hFile=0x508, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0215.929] WriteFile (in: hFile=0x508, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x80010, lpNumberOfBytesWritten=0x665da76df0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da76df0*=0x80010, lpOverlapped=0x0) returned 1 [0215.931] WriteFile (in: hFile=0x508, lpBuffer=0x665da76e30*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da76df4, lpOverlapped=0x0 | out: lpBuffer=0x665da76e30*, lpNumberOfBytesWritten=0x665da76df4*=0x6, lpOverlapped=0x0) returned 1 [0215.931] CryptExportKey (in: hKey=0x665ab9a110, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da76e00 | out: pbData=0x0*, pdwDataLen=0x665da76e00*=0x10c) returned 1 [0215.932] CryptExportKey (in: hKey=0x665ab9a110, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da76e80, pdwDataLen=0x665da76e00 | out: pbData=0x665da76e80*, pdwDataLen=0x665da76e00*=0x10c) returned 1 [0215.932] WriteFile (in: hFile=0x508, lpBuffer=0x665da76e80*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da76df4, lpOverlapped=0x0 | out: lpBuffer=0x665da76e80*, lpNumberOfBytesWritten=0x665da76df4*=0x10c, lpOverlapped=0x0) returned 1 [0215.932] CloseHandle (hObject=0x508) returned 1 [0215.941] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0215.946] CryptDestroyKey (hKey=0x665ab9a110) returned 1 [0215.946] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0215.946] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da77050 | out: lpFindFileData=0x665da77050) returned 1 [0215.946] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0215.946] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbres00002.jrs", dwFileAttributes=0x80) returned 1 [0215.947] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbres00002.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\logfiles\\edbres00002.jrs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x508 [0215.948] GetFileSizeEx (in: hFile=0x508, lpFileSize=0x665da76df8 | out: lpFileSize=0x665da76df8*=524288) returned 1 [0215.948] GetFileSizeEx (in: hFile=0x508, lpFileSize=0x665da76e08 | out: lpFileSize=0x665da76e08*=524288) returned 1 [0215.948] SetFilePointerEx (in: hFile=0x508, liDistanceToMove=0x7fede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.948] ReadFile (in: hFile=0x508, lpBuffer=0x665da76e58, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da76e18, lpOverlapped=0x0 | out: lpBuffer=0x665da76e58*, lpNumberOfBytesRead=0x665da76e18*=0x19, lpOverlapped=0x0) returned 1 [0215.949] SetFilePointer (in: hFile=0x508, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0215.949] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da76de0 | out: phKey=0x665da76de0*=0x665ab9aea0) returned 1 [0215.949] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0215.949] SetFilePointer (in: hFile=0x508, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0215.949] ReadFile (in: hFile=0x508, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x80000, lpNumberOfBytesRead=0x665da76df0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da76df0*=0x80000, lpOverlapped=0x0) returned 1 [0215.962] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da76dec*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da76dec*=0xf4250) returned 1 [0215.962] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da76de8*=0x80000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da76de8*=0x80010) returned 1 [0215.962] SetFilePointer (in: hFile=0x508, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0215.963] WriteFile (in: hFile=0x508, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x80010, lpNumberOfBytesWritten=0x665da76df0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da76df0*=0x80010, lpOverlapped=0x0) returned 1 [0215.965] WriteFile (in: hFile=0x508, lpBuffer=0x665da76e30*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da76df4, lpOverlapped=0x0 | out: lpBuffer=0x665da76e30*, lpNumberOfBytesWritten=0x665da76df4*=0x6, lpOverlapped=0x0) returned 1 [0215.965] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da76e00 | out: pbData=0x0*, pdwDataLen=0x665da76e00*=0x10c) returned 1 [0215.965] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da76e80, pdwDataLen=0x665da76e00 | out: pbData=0x665da76e80*, pdwDataLen=0x665da76e00*=0x10c) returned 1 [0215.965] WriteFile (in: hFile=0x508, lpBuffer=0x665da76e80*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da76df4, lpOverlapped=0x0 | out: lpBuffer=0x665da76e80*, lpNumberOfBytesWritten=0x665da76df4*=0x10c, lpOverlapped=0x0) returned 1 [0215.965] CloseHandle (hObject=0x508) returned 1 [0215.972] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0215.977] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0215.977] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0215.977] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da77050 | out: lpFindFileData=0x665da77050) returned 1 [0215.977] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0215.977] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbtmp.log", dwFileAttributes=0x80) returned 1 [0215.978] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbtmp.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\logfiles\\edbtmp.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x508 [0215.978] GetFileSizeEx (in: hFile=0x508, lpFileSize=0x665da76df8 | out: lpFileSize=0x665da76df8*=524288) returned 1 [0215.979] GetFileSizeEx (in: hFile=0x508, lpFileSize=0x665da76e08 | out: lpFileSize=0x665da76e08*=524288) returned 1 [0215.979] SetFilePointerEx (in: hFile=0x508, liDistanceToMove=0x7fede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.979] ReadFile (in: hFile=0x508, lpBuffer=0x665da76e58, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da76e18, lpOverlapped=0x0 | out: lpBuffer=0x665da76e58*, lpNumberOfBytesRead=0x665da76e18*=0x19, lpOverlapped=0x0) returned 1 [0215.980] SetFilePointer (in: hFile=0x508, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0215.980] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da76de0 | out: phKey=0x665da76de0*=0x665ab9a6c0) returned 1 [0215.980] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0215.980] SetFilePointer (in: hFile=0x508, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0215.980] ReadFile (in: hFile=0x508, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x80000, lpNumberOfBytesRead=0x665da76df0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da76df0*=0x80000, lpOverlapped=0x0) returned 1 [0215.987] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da76dec*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da76dec*=0xf4250) returned 1 [0215.987] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da76de8*=0x80000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da76de8*=0x80010) returned 1 [0215.988] SetFilePointer (in: hFile=0x508, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0215.988] WriteFile (in: hFile=0x508, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x80010, lpNumberOfBytesWritten=0x665da76df0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da76df0*=0x80010, lpOverlapped=0x0) returned 1 [0215.990] WriteFile (in: hFile=0x508, lpBuffer=0x665da76e30*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da76df4, lpOverlapped=0x0 | out: lpBuffer=0x665da76e30*, lpNumberOfBytesWritten=0x665da76df4*=0x6, lpOverlapped=0x0) returned 1 [0215.990] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da76e00 | out: pbData=0x0*, pdwDataLen=0x665da76e00*=0x10c) returned 1 [0215.990] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da76e80, pdwDataLen=0x665da76e00 | out: pbData=0x665da76e80*, pdwDataLen=0x665da76e00*=0x10c) returned 1 [0215.990] WriteFile (in: hFile=0x508, lpBuffer=0x665da76e80*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da76df4, lpOverlapped=0x0 | out: lpBuffer=0x665da76e80*, lpNumberOfBytesWritten=0x665da76df4*=0x10c, lpOverlapped=0x0) returned 1 [0215.990] CloseHandle (hObject=0x508) returned 1 [0215.996] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0216.001] CryptDestroyKey (hKey=0x665ab9a6c0) returned 1 [0216.001] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0216.001] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da77050 | out: lpFindFileData=0x665da77050) returned 0 [0216.001] FindClose (in: hFindFile=0x665d90caa0 | out: hFindFile=0x665d90caa0) returned 1 [0216.001] SetLastError (dwErrCode=0x0) [0216.001] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\logfiles\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x610 [0216.087] GetLastError () returned 0x0 [0216.087] WriteFile (in: hFile=0x610, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da777b0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da777b0*=0x324, lpOverlapped=0x0) returned 1 [0216.088] CloseHandle (hObject=0x610) returned 1 [0216.088] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da77800 | out: lpFindFileData=0x665da77800) returned 1 [0216.088] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0216.088] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\spartan.edb", dwFileAttributes=0x80) returned 1 [0216.089] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\spartan.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\spartan.edb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x610 [0216.089] GetFileSizeEx (in: hFile=0x610, lpFileSize=0x665da775a8 | out: lpFileSize=0x665da775a8*=2097152) returned 1 [0216.089] GetFileSizeEx (in: hFile=0x610, lpFileSize=0x665da775b8 | out: lpFileSize=0x665da775b8*=2097152) returned 1 [0216.089] SetFilePointerEx (in: hFile=0x610, liDistanceToMove=0x1ffede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.089] ReadFile (in: hFile=0x610, lpBuffer=0x665da77608, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da775c8, lpOverlapped=0x0 | out: lpBuffer=0x665da77608*, lpNumberOfBytesRead=0x665da775c8*=0x19, lpOverlapped=0x0) returned 1 [0216.090] SetFilePointer (in: hFile=0x610, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0216.090] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da77590 | out: phKey=0x665da77590*=0x665ab9a6c0) returned 1 [0216.090] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0216.090] SetFilePointer (in: hFile=0x610, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0216.090] ReadFile (in: hFile=0x610, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0x665da775a0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da775a0*=0xf4240, lpOverlapped=0x0) returned 1 [0216.113] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7759c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7759c*=0xf4240) returned 1 [0216.113] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da77598*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x665dc00000*, pdwDataLen=0x665da77598*=0xf4240) returned 1 [0216.115] SetFilePointer (in: hFile=0x610, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0216.115] WriteFile (in: hFile=0x610, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0x665da775a0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da775a0*=0xf4240, lpOverlapped=0x0) returned 1 [0216.117] SetFilePointer (in: hFile=0x610, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0216.117] ReadFile (in: hFile=0x610, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0x665da775a0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da775a0*=0xf4240, lpOverlapped=0x0) returned 1 [0216.137] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7759c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7759c*=0xf4240) returned 1 [0216.137] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da77598*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x665dc00000*, pdwDataLen=0x665da77598*=0xf4240) returned 1 [0216.139] SetFilePointer (in: hFile=0x610, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0216.139] WriteFile (in: hFile=0x610, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0x665da775a0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da775a0*=0xf4240, lpOverlapped=0x0) returned 1 [0216.142] SetFilePointer (in: hFile=0x610, lDistanceToMove=2000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1e8480 [0216.142] ReadFile (in: hFile=0x610, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x17b80, lpNumberOfBytesRead=0x665da775a0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da775a0*=0x17b80, lpOverlapped=0x0) returned 1 [0216.143] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7759c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7759c*=0xf4250) returned 1 [0216.143] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da77598*=0x17b80, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da77598*=0x17b90) returned 1 [0216.144] SetFilePointer (in: hFile=0x610, lDistanceToMove=2000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1e8480 [0216.144] WriteFile (in: hFile=0x610, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x17b90, lpNumberOfBytesWritten=0x665da775a0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da775a0*=0x17b90, lpOverlapped=0x0) returned 1 [0216.153] WriteFile (in: hFile=0x610, lpBuffer=0x665da775e0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da775a4, lpOverlapped=0x0 | out: lpBuffer=0x665da775e0*, lpNumberOfBytesWritten=0x665da775a4*=0x6, lpOverlapped=0x0) returned 1 [0216.153] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da775b0 | out: pbData=0x0*, pdwDataLen=0x665da775b0*=0x10c) returned 1 [0216.153] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da77630, pdwDataLen=0x665da775b0 | out: pbData=0x665da77630*, pdwDataLen=0x665da775b0*=0x10c) returned 1 [0216.153] WriteFile (in: hFile=0x610, lpBuffer=0x665da77630*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da775a4, lpOverlapped=0x0 | out: lpBuffer=0x665da77630*, lpNumberOfBytesWritten=0x665da775a4*=0x10c, lpOverlapped=0x0) returned 1 [0216.153] CloseHandle (hObject=0x610) returned 1 [0216.153] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0216.158] CryptDestroyKey (hKey=0x665ab9a6c0) returned 1 [0216.158] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0216.158] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da77800 | out: lpFindFileData=0x665da77800) returned 0 [0216.158] FindClose (in: hFindFile=0x665d90c620 | out: hFindFile=0x665d90c620) returned 1 [0216.158] SetLastError (dwErrCode=0x0) [0216.158] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x604 [0216.159] GetLastError () returned 0xb7 [0216.159] CloseHandle (hObject=0x604) returned 1 [0216.159] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da77fb0 | out: lpFindFileData=0x665da77fb0) returned 0 [0216.159] FindClose (in: hFindFile=0x665d90c4a0 | out: hFindFile=0x665d90c4a0) returned 1 [0216.159] SetLastError (dwErrCode=0x0) [0216.159] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5dc [0216.159] GetLastError () returned 0xb7 [0216.159] CloseHandle (hObject=0x5dc) returned 1 [0216.159] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da78760 | out: lpFindFileData=0x665da78760) returned 0 [0216.159] FindClose (in: hFindFile=0x665d90c0e0 | out: hFindFile=0x665d90c0e0) returned 1 [0216.160] SetLastError (dwErrCode=0x0) [0216.160] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x450 [0216.160] GetLastError () returned 0xb7 [0216.160] CloseHandle (hObject=0x450) returned 1 [0216.160] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0216.160] FindClose (in: hFindFile=0x665d90c500 | out: hFindFile=0x665d90c500) returned 1 [0216.160] SetLastError (dwErrCode=0x0) [0216.160] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0216.161] GetLastError () returned 0xb7 [0216.161] CloseHandle (hObject=0x410) returned 1 [0216.161] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0216.161] SetLastError (dwErrCode=0x0) [0216.161] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0216.161] GetLastError () returned 0xb7 [0216.161] CloseHandle (hObject=0x410) returned 1 [0216.161] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665d90d280 [0216.162] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0216.162] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0216.162] SetLastError (dwErrCode=0x0) [0216.162] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\indexed\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x450 [0216.162] GetLastError () returned 0x0 [0216.162] WriteFile (in: hFile=0x450, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da78ec0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da78ec0*=0x324, lpOverlapped=0x0) returned 1 [0216.163] CloseHandle (hObject=0x450) returned 1 [0216.163] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\Data\\*.*", lpFindFileData=0x665da78760 | out: lpFindFileData=0x665da78760) returned 0x665d90c1a0 [0216.163] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da78760 | out: lpFindFileData=0x665da78760) returned 1 [0216.163] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da78760 | out: lpFindFileData=0x665da78760) returned 1 [0216.163] SetLastError (dwErrCode=0x0) [0216.164] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\Data\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\indexed\\data\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5dc [0216.164] GetLastError () returned 0x0 [0216.164] WriteFile (in: hFile=0x5dc, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da78710, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da78710*=0x324, lpOverlapped=0x0) returned 1 [0216.165] CloseHandle (hObject=0x5dc) returned 1 [0216.165] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\Data\\nouser1\\*.*", lpFindFileData=0x665da77fb0 | out: lpFindFileData=0x665da77fb0) returned 0x665d90c0e0 [0216.165] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da77fb0 | out: lpFindFileData=0x665da77fb0) returned 1 [0216.165] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da77fb0 | out: lpFindFileData=0x665da77fb0) returned 1 [0216.165] SetLastError (dwErrCode=0x0) [0216.165] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\Data\\nouser1\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\indexed\\data\\nouser1\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x604 [0216.166] GetLastError () returned 0x0 [0216.166] WriteFile (in: hFile=0x604, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da77f60, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da77f60*=0x324, lpOverlapped=0x0) returned 1 [0216.167] CloseHandle (hObject=0x604) returned 1 [0216.167] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\Data\\nouser1\\120712-0049\\*.*", lpFindFileData=0x665da77800 | out: lpFindFileData=0x665da77800) returned 0x665d90c4a0 [0216.167] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da77800 | out: lpFindFileData=0x665da77800) returned 1 [0216.167] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da77800 | out: lpFindFileData=0x665da77800) returned 0 [0216.168] FindClose (in: hFindFile=0x665d90c4a0 | out: hFindFile=0x665d90c4a0) returned 1 [0216.168] SetLastError (dwErrCode=0x0) [0216.168] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\Data\\nouser1\\120712-0049\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\indexed\\data\\nouser1\\120712-0049\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x604 [0216.168] GetLastError () returned 0x0 [0216.168] WriteFile (in: hFile=0x604, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da77f60, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da77f60*=0x324, lpOverlapped=0x0) returned 1 [0216.183] CloseHandle (hObject=0x604) returned 1 [0216.183] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da77fb0 | out: lpFindFileData=0x665da77fb0) returned 0 [0216.184] FindClose (in: hFindFile=0x665d90c0e0 | out: hFindFile=0x665d90c0e0) returned 1 [0216.184] SetLastError (dwErrCode=0x0) [0216.184] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\Data\\nouser1\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\indexed\\data\\nouser1\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5dc [0216.184] GetLastError () returned 0xb7 [0216.184] CloseHandle (hObject=0x5dc) returned 1 [0216.186] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da78760 | out: lpFindFileData=0x665da78760) returned 0 [0216.186] FindClose (in: hFindFile=0x665d90c1a0 | out: hFindFile=0x665d90c1a0) returned 1 [0216.186] SetLastError (dwErrCode=0x0) [0216.186] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\Data\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\indexed\\data\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x450 [0216.186] GetLastError () returned 0xb7 [0216.186] CloseHandle (hObject=0x450) returned 1 [0216.186] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0216.186] FindClose (in: hFindFile=0x665d90d280 | out: hFindFile=0x665d90d280) returned 1 [0216.186] SetLastError (dwErrCode=0x0) [0216.186] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\indexed\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0216.187] GetLastError () returned 0xb7 [0216.187] CloseHandle (hObject=0x410) returned 1 [0216.187] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0216.187] FindClose (in: hFindFile=0x665d90ce60 | out: hFindFile=0x665d90ce60) returned 1 [0216.187] SetLastError (dwErrCode=0x0) [0216.187] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0216.187] GetLastError () returned 0xb7 [0216.187] CloseHandle (hObject=0x5cc) returned 1 [0216.187] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0216.187] SetLastError (dwErrCode=0x0) [0216.187] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0216.188] GetLastError () returned 0xb7 [0216.188] CloseHandle (hObject=0x5cc) returned 1 [0216.188] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DNTException\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665d90bfc0 [0216.188] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0216.188] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0216.188] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0216.188] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DNTException\\container.dat", dwFileAttributes=0x80) returned 1 [0216.189] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DNTException\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\dntexception\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0216.190] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=0) returned 1 [0216.190] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=0) returned 1 [0216.190] CloseHandle (hObject=0x410) returned 1 [0216.190] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0216.190] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0216.190] FindClose (in: hFindFile=0x665d90bfc0 | out: hFindFile=0x665d90bfc0) returned 1 [0216.190] SetLastError (dwErrCode=0x0) [0216.190] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DNTException\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\dntexception\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0216.191] GetLastError () returned 0x0 [0216.191] WriteFile (in: hFile=0x5cc, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da79e20*=0x324, lpOverlapped=0x0) returned 1 [0216.192] CloseHandle (hObject=0x5cc) returned 1 [0216.192] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0216.192] SetLastError (dwErrCode=0x0) [0216.192] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0216.192] GetLastError () returned 0xb7 [0216.192] CloseHandle (hObject=0x5cc) returned 1 [0216.192] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DomainSuggestions\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665d90bd20 [0216.193] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0216.193] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0216.193] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0216.193] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DomainSuggestions\\en-US.1", dwFileAttributes=0x80) returned 1 [0216.194] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DomainSuggestions\\en-US.1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\domainsuggestions\\en-us.1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0216.195] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=18176) returned 1 [0216.195] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=18176) returned 1 [0216.195] SetFilePointerEx (in: hFile=0x410, liDistanceToMove=0x45de, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.195] ReadFile (in: hFile=0x410, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0216.196] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0216.196] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665ab9aea0) returned 1 [0216.196] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0216.196] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0216.196] ReadFile (in: hFile=0x410, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x4700, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79460*=0x4700, lpOverlapped=0x0) returned 1 [0216.197] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0216.197] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x4700, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79458*=0x4710) returned 1 [0216.197] SetFilePointer (in: hFile=0x410, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0216.197] WriteFile (in: hFile=0x410, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x4710, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79460*=0x4710, lpOverlapped=0x0) returned 1 [0216.197] WriteFile (in: hFile=0x410, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0216.197] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0216.197] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0216.198] WriteFile (in: hFile=0x410, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0216.198] CloseHandle (hObject=0x410) returned 1 [0216.290] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0216.295] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0216.295] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0216.296] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0216.296] FindClose (in: hFindFile=0x665d90bd20 | out: hFindFile=0x665d90bd20) returned 1 [0216.296] SetLastError (dwErrCode=0x0) [0216.296] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DomainSuggestions\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\domainsuggestions\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0216.298] GetLastError () returned 0x0 [0216.298] WriteFile (in: hFile=0x5cc, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da79e20*=0x324, lpOverlapped=0x0) returned 1 [0216.299] CloseHandle (hObject=0x5cc) returned 1 [0216.299] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0216.299] SetLastError (dwErrCode=0x0) [0216.299] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0216.300] GetLastError () returned 0xb7 [0216.300] CloseHandle (hObject=0x5cc) returned 1 [0216.300] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DownloadHistory\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665d90bea0 [0216.300] FindNextFileW (in: hFindFile=0x665d90bea0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0216.300] FindNextFileW (in: hFindFile=0x665d90bea0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0216.300] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0216.301] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DownloadHistory\\container.dat", dwFileAttributes=0x80) returned 1 [0216.301] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DownloadHistory\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\downloadhistory\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0216.302] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=0) returned 1 [0216.302] GetFileSizeEx (in: hFile=0x410, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=0) returned 1 [0216.302] CloseHandle (hObject=0x410) returned 1 [0216.302] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0216.302] FindNextFileW (in: hFindFile=0x665d90bea0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0216.302] FindClose (in: hFindFile=0x665d90bea0 | out: hFindFile=0x665d90bea0) returned 1 [0216.302] SetLastError (dwErrCode=0x0) [0216.302] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DownloadHistory\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\downloadhistory\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0216.303] GetLastError () returned 0x0 [0216.303] WriteFile (in: hFile=0x5cc, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da79e20*=0x324, lpOverlapped=0x0) returned 1 [0216.304] CloseHandle (hObject=0x5cc) returned 1 [0216.304] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0216.304] SetLastError (dwErrCode=0x0) [0216.304] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0216.304] GetLastError () returned 0xb7 [0216.304] CloseHandle (hObject=0x5cc) returned 1 [0216.305] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Favorites\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665d90c980 [0216.305] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0216.305] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0216.305] FindClose (in: hFindFile=0x665d90c980 | out: hFindFile=0x665d90c980) returned 1 [0216.305] SetLastError (dwErrCode=0x0) [0216.305] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Favorites\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\favorites\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0216.306] GetLastError () returned 0x0 [0216.306] WriteFile (in: hFile=0x5cc, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da79e20*=0x324, lpOverlapped=0x0) returned 1 [0216.307] CloseHandle (hObject=0x5cc) returned 1 [0216.307] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0216.307] SetLastError (dwErrCode=0x0) [0216.307] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0216.307] GetLastError () returned 0xb7 [0216.307] CloseHandle (hObject=0x5cc) returned 1 [0216.307] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\ImageStore\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665d90c620 [0216.307] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0216.307] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0216.308] SetLastError (dwErrCode=0x0) [0216.308] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\ImageStore\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\imagestore\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0216.308] GetLastError () returned 0x0 [0216.308] WriteFile (in: hFile=0x410, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da79670*=0x324, lpOverlapped=0x0) returned 1 [0216.309] CloseHandle (hObject=0x410) returned 1 [0216.309] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\ImageStore\\6zes7lw\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665d90c800 [0216.310] FindNextFileW (in: hFindFile=0x665d90c800, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0216.310] FindNextFileW (in: hFindFile=0x665d90c800, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0216.310] FindClose (in: hFindFile=0x665d90c800 | out: hFindFile=0x665d90c800) returned 1 [0216.310] SetLastError (dwErrCode=0x0) [0216.310] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\ImageStore\\6zes7lw\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\imagestore\\6zes7lw\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0216.311] GetLastError () returned 0x0 [0216.311] WriteFile (in: hFile=0x410, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da79670*=0x324, lpOverlapped=0x0) returned 1 [0216.312] CloseHandle (hObject=0x410) returned 1 [0216.312] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0216.312] FindClose (in: hFindFile=0x665d90c620 | out: hFindFile=0x665d90c620) returned 1 [0216.312] SetLastError (dwErrCode=0x0) [0216.312] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\ImageStore\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\imagestore\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0216.313] GetLastError () returned 0xb7 [0216.313] CloseHandle (hObject=0x5cc) returned 1 [0216.313] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0216.313] SetLastError (dwErrCode=0x0) [0216.313] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0216.313] GetLastError () returned 0xb7 [0216.313] CloseHandle (hObject=0x5cc) returned 1 [0216.313] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665d90cec0 [0216.313] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0216.313] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0216.313] SetLastError (dwErrCode=0x0) [0216.313] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\recovery\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0216.314] GetLastError () returned 0x0 [0216.314] WriteFile (in: hFile=0x410, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da79670*=0x324, lpOverlapped=0x0) returned 1 [0216.315] CloseHandle (hObject=0x410) returned 1 [0216.315] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\*.*", lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0x665d90c260 [0216.317] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0216.317] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0216.317] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0216.317] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\RecoveryStore.{3D88D67F-6818-11E7-9BD3-C40142ECDE47}.dat", dwFileAttributes=0x80) returned 1 [0216.319] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\RecoveryStore.{3D88D67F-6818-11E7-9BD3-C40142ECDE47}.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\recovery\\active\\recoverystore.{3d88d67f-6818-11e7-9bd3-c40142ecde47}.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x450 [0216.319] GetFileSizeEx (in: hFile=0x450, lpFileSize=0x665da78cb8 | out: lpFileSize=0x665da78cb8*=4096) returned 1 [0216.319] GetFileSizeEx (in: hFile=0x450, lpFileSize=0x665da78cc8 | out: lpFileSize=0x665da78cc8*=4096) returned 1 [0216.319] SetFilePointerEx (in: hFile=0x450, liDistanceToMove=0xede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.319] ReadFile (in: hFile=0x450, lpBuffer=0x665da78d18, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da78cd8, lpOverlapped=0x0 | out: lpBuffer=0x665da78d18*, lpNumberOfBytesRead=0x665da78cd8*=0x19, lpOverlapped=0x0) returned 1 [0216.321] SetFilePointer (in: hFile=0x450, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0216.321] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da78ca0 | out: phKey=0x665da78ca0*=0x665ab9a500) returned 1 [0216.321] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0216.321] SetFilePointer (in: hFile=0x450, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0216.321] ReadFile (in: hFile=0x450, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x665da78cb0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da78cb0*=0x1000, lpOverlapped=0x0) returned 1 [0216.321] CryptEncrypt (in: hKey=0x665ab9a500, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da78cac*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da78cac*=0xf4250) returned 1 [0216.321] CryptEncrypt (in: hKey=0x665ab9a500, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da78ca8*=0x1000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da78ca8*=0x1010) returned 1 [0216.322] SetFilePointer (in: hFile=0x450, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0216.322] WriteFile (in: hFile=0x450, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x665da78cb0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da78cb0*=0x1010, lpOverlapped=0x0) returned 1 [0216.322] WriteFile (in: hFile=0x450, lpBuffer=0x665da78cf0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da78cb4, lpOverlapped=0x0 | out: lpBuffer=0x665da78cf0*, lpNumberOfBytesWritten=0x665da78cb4*=0x6, lpOverlapped=0x0) returned 1 [0216.322] CryptExportKey (in: hKey=0x665ab9a500, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da78cc0 | out: pbData=0x0*, pdwDataLen=0x665da78cc0*=0x10c) returned 1 [0216.322] CryptExportKey (in: hKey=0x665ab9a500, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da78d40, pdwDataLen=0x665da78cc0 | out: pbData=0x665da78d40*, pdwDataLen=0x665da78cc0*=0x10c) returned 1 [0216.322] WriteFile (in: hFile=0x450, lpBuffer=0x665da78d40*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da78cb4, lpOverlapped=0x0 | out: lpBuffer=0x665da78d40*, lpNumberOfBytesWritten=0x665da78cb4*=0x10c, lpOverlapped=0x0) returned 1 [0216.322] CloseHandle (hObject=0x450) returned 1 [0216.342] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0216.347] CryptDestroyKey (hKey=0x665ab9a500) returned 1 [0216.347] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0216.347] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 1 [0216.347] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0216.348] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\{3D88D681-6818-11E7-9BD3-C40142ECDE47}.dat", dwFileAttributes=0x80) returned 1 [0216.348] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\{3D88D681-6818-11E7-9BD3-C40142ECDE47}.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\recovery\\active\\{3d88d681-6818-11e7-9bd3-c40142ecde47}.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x450 [0216.349] GetFileSizeEx (in: hFile=0x450, lpFileSize=0x665da78cb8 | out: lpFileSize=0x665da78cb8*=4096) returned 1 [0216.349] GetFileSizeEx (in: hFile=0x450, lpFileSize=0x665da78cc8 | out: lpFileSize=0x665da78cc8*=4096) returned 1 [0216.349] SetFilePointerEx (in: hFile=0x450, liDistanceToMove=0xede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.349] ReadFile (in: hFile=0x450, lpBuffer=0x665da78d18, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da78cd8, lpOverlapped=0x0 | out: lpBuffer=0x665da78d18*, lpNumberOfBytesRead=0x665da78cd8*=0x19, lpOverlapped=0x0) returned 1 [0216.351] SetFilePointer (in: hFile=0x450, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0216.351] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da78ca0 | out: phKey=0x665da78ca0*=0x665ab9aab0) returned 1 [0216.351] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0216.351] SetFilePointer (in: hFile=0x450, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0216.351] ReadFile (in: hFile=0x450, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x665da78cb0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da78cb0*=0x1000, lpOverlapped=0x0) returned 1 [0216.351] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da78cac*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da78cac*=0xf4250) returned 1 [0216.351] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da78ca8*=0x1000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da78ca8*=0x1010) returned 1 [0216.351] SetFilePointer (in: hFile=0x450, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0216.351] WriteFile (in: hFile=0x450, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x665da78cb0, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da78cb0*=0x1010, lpOverlapped=0x0) returned 1 [0216.352] WriteFile (in: hFile=0x450, lpBuffer=0x665da78cf0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da78cb4, lpOverlapped=0x0 | out: lpBuffer=0x665da78cf0*, lpNumberOfBytesWritten=0x665da78cb4*=0x6, lpOverlapped=0x0) returned 1 [0216.352] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da78cc0 | out: pbData=0x0*, pdwDataLen=0x665da78cc0*=0x10c) returned 1 [0216.352] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da78d40, pdwDataLen=0x665da78cc0 | out: pbData=0x665da78d40*, pdwDataLen=0x665da78cc0*=0x10c) returned 1 [0216.352] WriteFile (in: hFile=0x450, lpBuffer=0x665da78d40*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da78cb4, lpOverlapped=0x0 | out: lpBuffer=0x665da78d40*, lpNumberOfBytesWritten=0x665da78cb4*=0x10c, lpOverlapped=0x0) returned 1 [0216.352] CloseHandle (hObject=0x450) returned 1 [0216.373] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0216.378] CryptDestroyKey (hKey=0x665ab9aab0) returned 1 [0216.378] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0216.378] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da78f10 | out: lpFindFileData=0x665da78f10) returned 0 [0216.378] FindClose (in: hFindFile=0x665d90c260 | out: hFindFile=0x665d90c260) returned 1 [0216.378] SetLastError (dwErrCode=0x0) [0216.378] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\recovery\\active\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0216.380] GetLastError () returned 0x0 [0216.380] WriteFile (in: hFile=0x410, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79670, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da79670*=0x324, lpOverlapped=0x0) returned 1 [0216.382] CloseHandle (hObject=0x410) returned 1 [0216.382] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0216.383] FindClose (in: hFindFile=0x665d90cec0 | out: hFindFile=0x665d90cec0) returned 1 [0216.383] SetLastError (dwErrCode=0x0) [0216.383] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\recovery\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0216.383] GetLastError () returned 0xb7 [0216.383] CloseHandle (hObject=0x5cc) returned 1 [0216.383] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0 [0216.383] FindClose (in: hFindFile=0x665d90c560 | out: hFindFile=0x665d90c560) returned 1 [0216.383] SetLastError (dwErrCode=0x0) [0216.383] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0216.383] GetLastError () returned 0xb7 [0216.383] CloseHandle (hObject=0x440) returned 1 [0216.384] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0216.384] FindClose (in: hFindFile=0x665d90c440 | out: hFindFile=0x665d90c440) returned 1 [0216.384] SetLastError (dwErrCode=0x0) [0216.384] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0216.384] GetLastError () returned 0xb7 [0216.384] CloseHandle (hObject=0x654) returned 1 [0216.384] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0216.384] FindClose (in: hFindFile=0x665d90bd80 | out: hFindFile=0x665d90bd80) returned 1 [0216.384] SetLastError (dwErrCode=0x0) [0216.384] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0216.385] GetLastError () returned 0xb7 [0216.385] CloseHandle (hObject=0x3e8) returned 1 [0216.385] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0216.385] SetLastError (dwErrCode=0x0) [0216.385] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0216.385] GetLastError () returned 0xb7 [0216.385] CloseHandle (hObject=0x3e8) returned 1 [0216.385] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Temp\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bf60 [0216.385] FindNextFileW (in: hFindFile=0x665d90bf60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0216.385] FindNextFileW (in: hFindFile=0x665d90bf60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0216.385] FindClose (in: hFindFile=0x665d90bf60 | out: hFindFile=0x665d90bf60) returned 1 [0216.385] SetLastError (dwErrCode=0x0) [0216.385] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Temp\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\temp\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0216.386] GetLastError () returned 0x0 [0216.386] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0216.387] CloseHandle (hObject=0x3e8) returned 1 [0216.387] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0216.387] FindClose (in: hFindFile=0x665d90bc60 | out: hFindFile=0x665d90bc60) returned 1 [0216.387] SetLastError (dwErrCode=0x0) [0216.387] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0216.388] GetLastError () returned 0xb7 [0216.388] CloseHandle (hObject=0x620) returned 1 [0216.388] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0216.394] SetLastError (dwErrCode=0x0) [0216.394] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0216.395] GetLastError () returned 0xb7 [0216.395] CloseHandle (hObject=0x620) returned 1 [0216.395] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d0a0 [0216.396] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0216.396] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0216.396] SetLastError (dwErrCode=0x0) [0216.396] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0216.396] GetLastError () returned 0x0 [0216.397] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0216.398] CloseHandle (hObject=0x3e8) returned 1 [0216.398] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90cda0 [0216.399] FindNextFileW (in: hFindFile=0x665d90cda0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0216.399] FindNextFileW (in: hFindFile=0x665d90cda0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0216.399] SetLastError (dwErrCode=0x0) [0216.399] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0216.400] GetLastError () returned 0x0 [0216.400] WriteFile (in: hFile=0x654, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7ad80*=0x324, lpOverlapped=0x0) returned 1 [0216.401] CloseHandle (hObject=0x654) returned 1 [0216.401] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665d90c6e0 [0216.402] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0216.402] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0216.402] SetLastError (dwErrCode=0x0) [0216.402] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0216.402] GetLastError () returned 0x0 [0216.403] WriteFile (in: hFile=0x440, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7a5d0*=0x324, lpOverlapped=0x0) returned 1 [0216.404] CloseHandle (hObject=0x440) returned 1 [0216.404] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\*.*", lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0x665d90c740 [0216.406] FindNextFileW (in: hFindFile=0x665d90c740, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0216.406] FindNextFileW (in: hFindFile=0x665d90c740, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0216.406] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0216.406] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edb.chk", dwFileAttributes=0x80) returned 1 [0216.407] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edb.chk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\edb.chk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0216.408] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=8192) returned 1 [0216.408] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=8192) returned 1 [0216.408] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x1ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.408] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0216.409] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0216.409] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9aea0) returned 1 [0216.409] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0216.410] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0216.410] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x2000, lpOverlapped=0x0) returned 1 [0216.410] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0216.410] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x2000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x2010) returned 1 [0216.411] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0216.411] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x2010, lpOverlapped=0x0) returned 1 [0216.411] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0216.411] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0216.411] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0216.411] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0216.411] CloseHandle (hObject=0x5cc) returned 1 [0216.431] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0216.436] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0216.436] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0216.437] FindNextFileW (in: hFindFile=0x665d90c740, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0216.437] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0216.437] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edb.log", dwFileAttributes=0x80) returned 1 [0216.438] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edb.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\edb.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0216.438] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=524288) returned 1 [0216.438] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=524288) returned 1 [0216.438] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x7fede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.438] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0216.440] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0216.440] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9aea0) returned 1 [0216.440] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0216.440] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0216.440] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x80000, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x80000, lpOverlapped=0x0) returned 1 [0216.570] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0216.570] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x80000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x80010) returned 1 [0216.571] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0216.571] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x80010, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x80010, lpOverlapped=0x0) returned 1 [0216.575] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0216.575] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0216.575] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0216.575] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0216.575] CloseHandle (hObject=0x5cc) returned 1 [0216.581] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0216.585] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0216.585] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0216.585] FindNextFileW (in: hFindFile=0x665d90c740, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0216.585] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0216.586] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbres00001.jrs", dwFileAttributes=0x80) returned 1 [0216.586] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbres00001.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\edbres00001.jrs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0216.586] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=524288) returned 1 [0216.586] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=524288) returned 1 [0216.586] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x7fede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.586] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0216.588] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0216.588] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9aea0) returned 1 [0216.588] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0216.589] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0216.589] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x80000, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x80000, lpOverlapped=0x0) returned 1 [0216.602] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0216.602] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x80000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x80010) returned 1 [0216.603] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0216.603] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x80010, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x80010, lpOverlapped=0x0) returned 1 [0216.606] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0216.606] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0216.606] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0216.607] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0216.607] CloseHandle (hObject=0x5cc) returned 1 [0216.614] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0216.619] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0216.619] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0216.619] FindNextFileW (in: hFindFile=0x665d90c740, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0216.619] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0216.620] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbres00002.jrs", dwFileAttributes=0x80) returned 1 [0216.620] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbres00002.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\edbres00002.jrs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0216.621] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=524288) returned 1 [0216.621] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=524288) returned 1 [0216.621] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x7fede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.621] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0216.623] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0216.623] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a880) returned 1 [0216.623] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0216.624] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0216.624] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x80000, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x80000, lpOverlapped=0x0) returned 1 [0216.636] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0216.636] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x80000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x80010) returned 1 [0216.637] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0216.637] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x80010, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x80010, lpOverlapped=0x0) returned 1 [0216.639] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0216.640] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0216.640] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0216.640] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0216.640] CloseHandle (hObject=0x5cc) returned 1 [0216.647] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0216.652] CryptDestroyKey (hKey=0x665ab9a880) returned 1 [0216.652] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0216.652] FindNextFileW (in: hFindFile=0x665d90c740, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0216.653] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0216.653] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbtmp.log", dwFileAttributes=0x80) returned 1 [0216.654] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbtmp.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\edbtmp.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0216.655] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=524288) returned 1 [0216.655] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=524288) returned 1 [0216.655] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x7fede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.655] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0216.656] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0216.656] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9aab0) returned 1 [0216.656] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0216.657] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0216.657] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x80000, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x80000, lpOverlapped=0x0) returned 1 [0216.664] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0216.664] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x80000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x80010) returned 1 [0216.665] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0216.665] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x80010, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x80010, lpOverlapped=0x0) returned 1 [0216.668] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0216.668] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0216.668] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0216.668] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0216.668] CloseHandle (hObject=0x5cc) returned 1 [0216.675] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0216.680] CryptDestroyKey (hKey=0x665ab9aab0) returned 1 [0216.680] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0216.681] FindNextFileW (in: hFindFile=0x665d90c740, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0216.681] FindNextFileW (in: hFindFile=0x665d90c740, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0 [0216.681] FindClose (in: hFindFile=0x665d90c740 | out: hFindFile=0x665d90c740) returned 1 [0216.681] SetLastError (dwErrCode=0x0) [0216.681] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0216.682] GetLastError () returned 0x0 [0216.682] WriteFile (in: hFile=0x440, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7a5d0*=0x324, lpOverlapped=0x0) returned 1 [0216.683] CloseHandle (hObject=0x440) returned 1 [0216.683] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0216.683] FindClose (in: hFindFile=0x665d90c6e0 | out: hFindFile=0x665d90c6e0) returned 1 [0216.683] SetLastError (dwErrCode=0x0) [0216.683] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0216.683] GetLastError () returned 0xb7 [0216.683] CloseHandle (hObject=0x654) returned 1 [0216.683] FindNextFileW (in: hFindFile=0x665d90cda0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0216.683] FindClose (in: hFindFile=0x665d90cda0 | out: hFindFile=0x665d90cda0) returned 1 [0216.683] SetLastError (dwErrCode=0x0) [0216.683] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0216.684] GetLastError () returned 0xb7 [0216.684] CloseHandle (hObject=0x3e8) returned 1 [0216.684] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0216.684] FindClose (in: hFindFile=0x665d90d0a0 | out: hFindFile=0x665d90d0a0) returned 1 [0216.684] SetLastError (dwErrCode=0x0) [0216.684] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0216.684] GetLastError () returned 0xb7 [0216.684] CloseHandle (hObject=0x620) returned 1 [0216.684] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0216.684] SetLastError (dwErrCode=0x0) [0216.684] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0216.685] GetLastError () returned 0xb7 [0216.685] CloseHandle (hObject=0x620) returned 1 [0216.685] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\LocalCache\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bc60 [0216.685] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0216.685] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0216.686] FindClose (in: hFindFile=0x665d90bc60 | out: hFindFile=0x665d90bc60) returned 1 [0216.686] SetLastError (dwErrCode=0x0) [0216.686] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\LocalCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\localcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0216.686] GetLastError () returned 0x0 [0216.686] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0216.687] CloseHandle (hObject=0x620) returned 1 [0216.687] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0216.687] SetLastError (dwErrCode=0x0) [0216.687] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0216.688] GetLastError () returned 0xb7 [0216.688] CloseHandle (hObject=0x620) returned 1 [0216.688] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\LocalState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c500 [0216.688] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0216.688] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0216.688] SetLastError (dwErrCode=0x0) [0216.688] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\LocalState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\localstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0216.689] GetLastError () returned 0x0 [0216.689] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0216.691] CloseHandle (hObject=0x3e8) returned 1 [0216.691] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\LocalState\\PinnedTiles\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c0e0 [0216.691] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0216.691] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0216.691] FindClose (in: hFindFile=0x665d90c0e0 | out: hFindFile=0x665d90c0e0) returned 1 [0216.691] SetLastError (dwErrCode=0x0) [0216.691] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\LocalState\\PinnedTiles\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\localstate\\pinnedtiles\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0216.692] GetLastError () returned 0x0 [0216.692] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0216.693] CloseHandle (hObject=0x3e8) returned 1 [0216.693] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0216.693] FindClose (in: hFindFile=0x665d90c500 | out: hFindFile=0x665d90c500) returned 1 [0216.693] SetLastError (dwErrCode=0x0) [0216.693] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\LocalState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\localstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0216.693] GetLastError () returned 0xb7 [0216.693] CloseHandle (hObject=0x620) returned 1 [0216.693] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0216.693] SetLastError (dwErrCode=0x0) [0216.693] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0216.694] GetLastError () returned 0xb7 [0216.694] CloseHandle (hObject=0x620) returned 1 [0216.694] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d280 [0216.695] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0216.695] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0216.695] SetLastError (dwErrCode=0x0) [0216.695] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\microsoft.microsoftedge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0216.698] GetLastError () returned 0x0 [0216.698] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0216.699] CloseHandle (hObject=0x3e8) returned 1 [0216.699] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90cc20 [0216.701] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0216.701] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0216.701] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0216.701] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", dwFileAttributes=0x80) returned 1 [0216.702] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\microsoft.microsoftedge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0216.703] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=65536) returned 1 [0216.703] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=65536) returned 1 [0216.703] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0xfede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.703] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0216.704] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0216.704] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a0a0) returned 1 [0216.704] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0216.704] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0216.704] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x10000, lpOverlapped=0x0) returned 1 [0216.706] CryptEncrypt (in: hKey=0x665ab9a0a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0216.706] CryptEncrypt (in: hKey=0x665ab9a0a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x10000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x10010) returned 1 [0216.707] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0216.707] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x10010, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x10010, lpOverlapped=0x0) returned 1 [0216.707] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0216.707] CryptExportKey (in: hKey=0x665ab9a0a0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0216.707] CryptExportKey (in: hKey=0x665ab9a0a0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0216.707] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0216.708] CloseHandle (hObject=0x654) returned 1 [0216.723] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0216.728] CryptDestroyKey (hKey=0x665ab9a0a0) returned 1 [0216.728] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0216.729] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0216.729] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0216.729] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", dwFileAttributes=0x80) returned 1 [0216.730] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\microsoft.microsoftedge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0216.730] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=53248) returned 1 [0216.730] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=53248) returned 1 [0216.730] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0xcede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.730] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0216.732] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0216.732] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9aea0) returned 1 [0216.732] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0216.733] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0216.733] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0xd000, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0xd000, lpOverlapped=0x0) returned 1 [0216.734] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0216.734] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0xd000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0xd010) returned 1 [0216.735] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0216.735] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0xd010, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0xd010, lpOverlapped=0x0) returned 1 [0216.735] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0216.736] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0216.736] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0216.736] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0216.736] CloseHandle (hObject=0x654) returned 1 [0216.755] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0216.760] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0216.760] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0216.761] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0216.761] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0216.761] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", dwFileAttributes=0x80) returned 1 [0216.762] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\microsoft.microsoftedge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0216.762] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=0) returned 1 [0216.762] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=0) returned 1 [0216.762] CloseHandle (hObject=0x654) returned 1 [0216.762] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0216.763] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0216.763] FindClose (in: hFindFile=0x665d90cc20 | out: hFindFile=0x665d90cc20) returned 1 [0216.763] SetLastError (dwErrCode=0x0) [0216.763] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\microsoft.microsoftedge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\activationstore\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0216.764] GetLastError () returned 0x0 [0216.764] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0216.765] CloseHandle (hObject=0x3e8) returned 1 [0216.765] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0216.765] FindClose (in: hFindFile=0x665d90d280 | out: hFindFile=0x665d90d280) returned 1 [0216.765] SetLastError (dwErrCode=0x0) [0216.765] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\microsoft.microsoftedge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0216.765] GetLastError () returned 0xb7 [0216.765] CloseHandle (hObject=0x620) returned 1 [0216.766] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0216.766] SetLastError (dwErrCode=0x0) [0216.766] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0216.766] GetLastError () returned 0xb7 [0216.766] CloseHandle (hObject=0x620) returned 1 [0216.766] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\RoamingState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90ca40 [0216.766] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0216.766] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0216.766] FindClose (in: hFindFile=0x665d90ca40 | out: hFindFile=0x665d90ca40) returned 1 [0216.766] SetLastError (dwErrCode=0x0) [0216.766] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\RoamingState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\roamingstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0216.767] GetLastError () returned 0x0 [0216.767] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0216.768] CloseHandle (hObject=0x620) returned 1 [0216.768] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0216.768] SetLastError (dwErrCode=0x0) [0216.768] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0216.768] GetLastError () returned 0xb7 [0216.768] CloseHandle (hObject=0x620) returned 1 [0216.768] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d280 [0216.770] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0216.771] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0216.771] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0216.771] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\roaming.lock", dwFileAttributes=0x80) returned 1 [0216.771] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0216.772] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=0) returned 1 [0216.772] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=0) returned 1 [0216.772] CloseHandle (hObject=0x3e8) returned 1 [0216.772] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0216.772] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0216.772] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0216.773] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat", dwFileAttributes=0x80) returned 1 [0216.773] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0216.774] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=8192) returned 1 [0216.774] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=8192) returned 1 [0216.774] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x1ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.774] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0216.775] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0216.775] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9a3b0) returned 1 [0216.775] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0216.775] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0216.775] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0x2000, lpOverlapped=0x0) returned 1 [0216.776] CryptEncrypt (in: hKey=0x665ab9a3b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0216.776] CryptEncrypt (in: hKey=0x665ab9a3b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2010) returned 1 [0216.776] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0216.776] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0x2010, lpOverlapped=0x0) returned 1 [0216.777] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0216.777] CryptExportKey (in: hKey=0x665ab9a3b0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0216.777] CryptExportKey (in: hKey=0x665ab9a3b0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0216.777] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0216.777] CloseHandle (hObject=0x3e8) returned 1 [0216.799] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0216.804] CryptDestroyKey (hKey=0x665ab9a3b0) returned 1 [0216.804] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0216.804] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0216.804] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0216.805] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1", dwFileAttributes=0x80) returned 1 [0216.805] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0216.806] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=8192) returned 1 [0216.806] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=8192) returned 1 [0216.806] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x1ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.806] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0216.807] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0216.807] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9aea0) returned 1 [0216.807] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0216.808] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0216.808] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0x2000, lpOverlapped=0x0) returned 1 [0216.811] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0216.811] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2010) returned 1 [0216.811] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0216.811] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0x2010, lpOverlapped=0x0) returned 1 [0216.812] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0216.812] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0216.812] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0216.812] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0216.812] CloseHandle (hObject=0x3e8) returned 1 [0216.833] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0216.838] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0216.838] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0216.838] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0216.838] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0216.839] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", dwFileAttributes=0x80) returned 1 [0216.840] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\settings\\settings.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0216.841] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=0) returned 1 [0216.841] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=0) returned 1 [0216.841] CloseHandle (hObject=0x3e8) returned 1 [0216.841] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0216.841] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0216.841] FindClose (in: hFindFile=0x665d90d280 | out: hFindFile=0x665d90d280) returned 1 [0216.841] SetLastError (dwErrCode=0x0) [0216.842] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\settings\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0216.842] GetLastError () returned 0x0 [0216.842] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0216.843] CloseHandle (hObject=0x620) returned 1 [0216.843] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0216.843] SetLastError (dwErrCode=0x0) [0216.843] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0216.844] GetLastError () returned 0xb7 [0216.844] CloseHandle (hObject=0x620) returned 1 [0216.844] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\SystemAppData\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c440 [0216.844] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0216.845] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0216.845] FindClose (in: hFindFile=0x665d90c440 | out: hFindFile=0x665d90c440) returned 1 [0216.845] SetLastError (dwErrCode=0x0) [0216.845] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\SystemAppData\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\systemappdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0216.846] GetLastError () returned 0x0 [0216.846] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0216.847] CloseHandle (hObject=0x620) returned 1 [0216.847] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0216.848] SetLastError (dwErrCode=0x0) [0216.848] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0216.848] GetLastError () returned 0xb7 [0216.848] CloseHandle (hObject=0x620) returned 1 [0216.848] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\TempState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90cb60 [0216.848] FindNextFileW (in: hFindFile=0x665d90cb60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0216.848] FindNextFileW (in: hFindFile=0x665d90cb60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0216.848] FindClose (in: hFindFile=0x665d90cb60 | out: hFindFile=0x665d90cb60) returned 1 [0216.848] SetLastError (dwErrCode=0x0) [0216.849] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\TempState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\tempstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0216.849] GetLastError () returned 0x0 [0216.849] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0216.850] CloseHandle (hObject=0x620) returned 1 [0216.850] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0216.850] FindClose (in: hFindFile=0x665d90d040 | out: hFindFile=0x665d90d040) returned 1 [0216.851] SetLastError (dwErrCode=0x0) [0216.851] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0216.851] GetLastError () returned 0xb7 [0216.851] CloseHandle (hObject=0x60c) returned 1 [0216.851] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0216.851] SetLastError (dwErrCode=0x0) [0216.851] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0216.852] GetLastError () returned 0xb7 [0216.852] CloseHandle (hObject=0x60c) returned 1 [0216.852] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90bd80 [0216.853] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0216.853] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0216.853] SetLastError (dwErrCode=0x0) [0216.853] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0216.854] GetLastError () returned 0x0 [0216.854] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0216.855] CloseHandle (hObject=0x620) returned 1 [0216.855] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c380 [0216.859] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0216.859] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0216.859] SetLastError (dwErrCode=0x0) [0216.859] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0216.860] GetLastError () returned 0x0 [0216.860] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0216.861] CloseHandle (hObject=0x3e8) returned 1 [0216.861] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC\\INetCache\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bd20 [0216.862] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0216.863] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0216.863] FindClose (in: hFindFile=0x665d90bd20 | out: hFindFile=0x665d90bd20) returned 1 [0216.863] SetLastError (dwErrCode=0x0) [0216.863] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC\\INetCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\ac\\inetcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0216.864] GetLastError () returned 0x0 [0216.864] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0216.865] CloseHandle (hObject=0x3e8) returned 1 [0216.865] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0216.865] SetLastError (dwErrCode=0x0) [0216.865] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0216.866] GetLastError () returned 0xb7 [0216.866] CloseHandle (hObject=0x3e8) returned 1 [0216.866] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC\\INetCookies\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bfc0 [0216.869] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0216.869] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0216.869] FindClose (in: hFindFile=0x665d90bfc0 | out: hFindFile=0x665d90bfc0) returned 1 [0216.869] SetLastError (dwErrCode=0x0) [0216.869] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC\\INetCookies\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\ac\\inetcookies\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0216.870] GetLastError () returned 0x0 [0216.870] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0216.871] CloseHandle (hObject=0x3e8) returned 1 [0216.871] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0216.871] SetLastError (dwErrCode=0x0) [0216.871] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0216.871] GetLastError () returned 0xb7 [0216.871] CloseHandle (hObject=0x3e8) returned 1 [0216.871] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC\\INetHistory\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c860 [0216.871] FindNextFileW (in: hFindFile=0x665d90c860, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0216.871] FindNextFileW (in: hFindFile=0x665d90c860, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0216.871] FindClose (in: hFindFile=0x665d90c860 | out: hFindFile=0x665d90c860) returned 1 [0216.872] SetLastError (dwErrCode=0x0) [0216.872] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC\\INetHistory\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\ac\\inethistory\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0216.873] GetLastError () returned 0x0 [0216.873] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0216.874] CloseHandle (hObject=0x3e8) returned 1 [0216.874] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0216.874] SetLastError (dwErrCode=0x0) [0216.874] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0216.874] GetLastError () returned 0xb7 [0216.874] CloseHandle (hObject=0x3e8) returned 1 [0216.874] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC\\Temp\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c560 [0216.875] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0216.875] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0216.875] FindClose (in: hFindFile=0x665d90c560 | out: hFindFile=0x665d90c560) returned 1 [0216.875] SetLastError (dwErrCode=0x0) [0216.875] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC\\Temp\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\ac\\temp\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0216.875] GetLastError () returned 0x0 [0216.875] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0216.876] CloseHandle (hObject=0x3e8) returned 1 [0216.876] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0216.877] FindClose (in: hFindFile=0x665d90c380 | out: hFindFile=0x665d90c380) returned 1 [0216.877] SetLastError (dwErrCode=0x0) [0216.877] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0216.877] GetLastError () returned 0xb7 [0216.877] CloseHandle (hObject=0x620) returned 1 [0216.877] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0216.877] SetLastError (dwErrCode=0x0) [0216.877] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0216.877] GetLastError () returned 0xb7 [0216.877] CloseHandle (hObject=0x620) returned 1 [0216.878] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AppData\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90cb00 [0216.878] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0216.878] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0216.878] FindClose (in: hFindFile=0x665d90cb00 | out: hFindFile=0x665d90cb00) returned 1 [0216.878] SetLastError (dwErrCode=0x0) [0216.878] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AppData\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\appdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0216.879] GetLastError () returned 0x0 [0216.879] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0216.880] CloseHandle (hObject=0x620) returned 1 [0216.880] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0216.880] SetLastError (dwErrCode=0x0) [0216.881] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0216.881] GetLastError () returned 0xb7 [0216.881] CloseHandle (hObject=0x620) returned 1 [0216.881] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\LocalCache\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d040 [0216.882] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0216.882] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0216.882] FindClose (in: hFindFile=0x665d90d040 | out: hFindFile=0x665d90d040) returned 1 [0216.882] SetLastError (dwErrCode=0x0) [0216.882] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\LocalCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\localcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0216.883] GetLastError () returned 0x0 [0216.883] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0216.884] CloseHandle (hObject=0x620) returned 1 [0216.884] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0216.884] SetLastError (dwErrCode=0x0) [0216.884] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0216.884] GetLastError () returned 0xb7 [0216.884] CloseHandle (hObject=0x620) returned 1 [0216.884] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\LocalState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d2e0 [0216.884] FindNextFileW (in: hFindFile=0x665d90d2e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0216.885] FindNextFileW (in: hFindFile=0x665d90d2e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0216.885] FindClose (in: hFindFile=0x665d90d2e0 | out: hFindFile=0x665d90d2e0) returned 1 [0216.885] SetLastError (dwErrCode=0x0) [0216.885] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\LocalState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\localstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0216.885] GetLastError () returned 0x0 [0216.885] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0216.887] CloseHandle (hObject=0x620) returned 1 [0216.887] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0216.887] SetLastError (dwErrCode=0x0) [0216.887] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0216.887] GetLastError () returned 0xb7 [0216.887] CloseHandle (hObject=0x620) returned 1 [0216.887] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bde0 [0216.888] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0216.888] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0216.888] SetLastError (dwErrCode=0x0) [0216.888] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\microsoft.microsoftofficehub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0216.889] GetLastError () returned 0x0 [0216.889] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0216.890] CloseHandle (hObject=0x3e8) returned 1 [0216.890] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c620 [0216.892] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0216.892] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0216.892] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0216.893] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", dwFileAttributes=0x80) returned 1 [0216.894] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\microsoft.microsoftofficehub_17.4218.23751.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0216.894] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=131072) returned 1 [0216.895] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=131072) returned 1 [0216.895] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x1fede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.895] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0216.896] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0216.896] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a880) returned 1 [0216.896] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0216.896] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0216.896] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x20000, lpOverlapped=0x0) returned 1 [0216.899] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0216.899] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x20000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x20010) returned 1 [0216.899] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0216.899] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x20010, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x20010, lpOverlapped=0x0) returned 1 [0216.900] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0216.901] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0216.901] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0216.901] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0216.901] CloseHandle (hObject=0x654) returned 1 [0216.914] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0216.918] CryptDestroyKey (hKey=0x665ab9a880) returned 1 [0216.918] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0216.918] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0216.918] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0216.918] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", dwFileAttributes=0x80) returned 1 [0216.925] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\microsoft.microsoftofficehub_17.4218.23751.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0216.926] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=0) returned 1 [0216.926] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=0) returned 1 [0216.926] CloseHandle (hObject=0x654) returned 1 [0216.926] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0216.926] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0216.927] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0216.927] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", dwFileAttributes=0x80) returned 1 [0216.928] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\microsoft.microsoftofficehub_17.4218.23751.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0216.928] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=0) returned 1 [0216.928] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=0) returned 1 [0216.928] CloseHandle (hObject=0x654) returned 1 [0216.928] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0216.929] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0216.929] FindClose (in: hFindFile=0x665d90c620 | out: hFindFile=0x665d90c620) returned 1 [0216.929] SetLastError (dwErrCode=0x0) [0216.929] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\microsoft.microsoftofficehub_17.4218.23751.0_x64__8wekyb3d8bbwe\\activationstore\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0216.930] GetLastError () returned 0x0 [0216.930] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0216.931] CloseHandle (hObject=0x3e8) returned 1 [0216.931] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0216.931] FindClose (in: hFindFile=0x665d90bde0 | out: hFindFile=0x665d90bde0) returned 1 [0216.931] SetLastError (dwErrCode=0x0) [0216.931] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\microsoft.microsoftofficehub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0216.931] GetLastError () returned 0xb7 [0216.932] CloseHandle (hObject=0x620) returned 1 [0216.932] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0216.932] SetLastError (dwErrCode=0x0) [0216.932] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0216.932] GetLastError () returned 0xb7 [0216.932] CloseHandle (hObject=0x620) returned 1 [0216.932] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\RoamingState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c620 [0216.932] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0216.932] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0216.932] FindClose (in: hFindFile=0x665d90c620 | out: hFindFile=0x665d90c620) returned 1 [0216.932] SetLastError (dwErrCode=0x0) [0216.932] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\RoamingState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\roamingstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0216.933] GetLastError () returned 0x0 [0216.933] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0216.933] CloseHandle (hObject=0x620) returned 1 [0216.934] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0216.934] SetLastError (dwErrCode=0x0) [0216.934] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0216.934] GetLastError () returned 0xb7 [0216.934] CloseHandle (hObject=0x620) returned 1 [0216.934] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Settings\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bfc0 [0216.934] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0216.934] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0216.934] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0216.934] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Settings\\roaming.lock", dwFileAttributes=0x80) returned 1 [0216.935] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0216.935] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=0) returned 1 [0216.935] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=0) returned 1 [0216.935] CloseHandle (hObject=0x3e8) returned 1 [0216.935] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0216.936] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0216.936] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0216.936] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Settings\\settings.dat", dwFileAttributes=0x80) returned 1 [0216.936] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0216.937] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=8192) returned 1 [0216.937] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=8192) returned 1 [0216.937] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x1ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.937] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0216.938] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0216.938] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9a880) returned 1 [0216.938] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0216.938] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0216.938] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0x2000, lpOverlapped=0x0) returned 1 [0216.939] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0216.939] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2010) returned 1 [0216.939] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0216.939] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0x2010, lpOverlapped=0x0) returned 1 [0216.939] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0216.939] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0216.939] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0216.940] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0216.940] CloseHandle (hObject=0x3e8) returned 1 [0216.955] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0216.961] CryptDestroyKey (hKey=0x665ab9a880) returned 1 [0216.961] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0216.961] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0216.961] FindClose (in: hFindFile=0x665d90bfc0 | out: hFindFile=0x665d90bfc0) returned 1 [0216.961] SetLastError (dwErrCode=0x0) [0216.961] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Settings\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\settings\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0216.963] GetLastError () returned 0x0 [0216.963] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0216.964] CloseHandle (hObject=0x620) returned 1 [0216.964] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0216.964] SetLastError (dwErrCode=0x0) [0216.964] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0216.964] GetLastError () returned 0xb7 [0216.964] CloseHandle (hObject=0x620) returned 1 [0216.964] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\SystemAppData\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bf60 [0216.964] FindNextFileW (in: hFindFile=0x665d90bf60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0216.965] FindNextFileW (in: hFindFile=0x665d90bf60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0216.965] FindClose (in: hFindFile=0x665d90bf60 | out: hFindFile=0x665d90bf60) returned 1 [0216.965] SetLastError (dwErrCode=0x0) [0216.965] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\SystemAppData\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\systemappdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0216.967] GetLastError () returned 0x0 [0216.967] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0216.968] CloseHandle (hObject=0x620) returned 1 [0216.968] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0216.968] SetLastError (dwErrCode=0x0) [0216.968] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0216.968] GetLastError () returned 0xb7 [0216.969] CloseHandle (hObject=0x620) returned 1 [0216.969] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\TempState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d0a0 [0216.969] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0216.969] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0216.969] FindClose (in: hFindFile=0x665d90d0a0 | out: hFindFile=0x665d90d0a0) returned 1 [0216.969] SetLastError (dwErrCode=0x0) [0216.969] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\TempState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\tempstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0216.970] GetLastError () returned 0x0 [0216.970] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0216.972] CloseHandle (hObject=0x620) returned 1 [0216.972] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0216.972] FindClose (in: hFindFile=0x665d90bd80 | out: hFindFile=0x665d90bd80) returned 1 [0216.972] SetLastError (dwErrCode=0x0) [0216.972] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0216.972] GetLastError () returned 0xb7 [0216.972] CloseHandle (hObject=0x60c) returned 1 [0216.972] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0216.972] SetLastError (dwErrCode=0x0) [0216.972] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0216.973] GetLastError () returned 0xb7 [0216.973] CloseHandle (hObject=0x60c) returned 1 [0216.973] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c080 [0216.975] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0216.975] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0216.975] SetLastError (dwErrCode=0x0) [0216.975] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0216.976] GetLastError () returned 0x0 [0216.976] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0216.977] CloseHandle (hObject=0x620) returned 1 [0216.977] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d1c0 [0216.980] FindNextFileW (in: hFindFile=0x665d90d1c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0216.980] FindNextFileW (in: hFindFile=0x665d90d1c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0216.980] SetLastError (dwErrCode=0x0) [0216.981] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0216.985] GetLastError () returned 0x0 [0216.985] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0216.989] CloseHandle (hObject=0x3e8) returned 1 [0216.989] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC\\INetCache\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c6e0 [0216.990] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0216.990] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0216.990] FindClose (in: hFindFile=0x665d90c6e0 | out: hFindFile=0x665d90c6e0) returned 1 [0216.990] SetLastError (dwErrCode=0x0) [0216.990] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC\\INetCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\ac\\inetcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0216.991] GetLastError () returned 0x0 [0216.991] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0216.992] CloseHandle (hObject=0x3e8) returned 1 [0216.992] FindNextFileW (in: hFindFile=0x665d90d1c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0216.992] SetLastError (dwErrCode=0x0) [0216.992] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0216.992] GetLastError () returned 0xb7 [0216.992] CloseHandle (hObject=0x3e8) returned 1 [0216.992] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC\\INetCookies\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90cd40 [0216.993] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0216.993] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0216.993] FindClose (in: hFindFile=0x665d90cd40 | out: hFindFile=0x665d90cd40) returned 1 [0216.993] SetLastError (dwErrCode=0x0) [0216.993] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC\\INetCookies\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\ac\\inetcookies\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0216.994] GetLastError () returned 0x0 [0216.994] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0216.995] CloseHandle (hObject=0x3e8) returned 1 [0216.995] FindNextFileW (in: hFindFile=0x665d90d1c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0216.995] SetLastError (dwErrCode=0x0) [0216.995] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0216.996] GetLastError () returned 0xb7 [0216.996] CloseHandle (hObject=0x3e8) returned 1 [0216.996] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC\\INetHistory\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c680 [0216.996] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0216.996] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0216.996] FindClose (in: hFindFile=0x665d90c680 | out: hFindFile=0x665d90c680) returned 1 [0216.996] SetLastError (dwErrCode=0x0) [0216.996] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC\\INetHistory\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\ac\\inethistory\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0216.997] GetLastError () returned 0x0 [0216.997] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0216.998] CloseHandle (hObject=0x3e8) returned 1 [0216.998] FindNextFileW (in: hFindFile=0x665d90d1c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0216.999] SetLastError (dwErrCode=0x0) [0216.999] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0216.999] GetLastError () returned 0xb7 [0216.999] CloseHandle (hObject=0x3e8) returned 1 [0216.999] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC\\Temp\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90cc20 [0216.999] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0216.999] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0216.999] FindClose (in: hFindFile=0x665d90cc20 | out: hFindFile=0x665d90cc20) returned 1 [0216.999] SetLastError (dwErrCode=0x0) [0216.999] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC\\Temp\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\ac\\temp\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0217.001] GetLastError () returned 0x0 [0217.001] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0217.002] CloseHandle (hObject=0x3e8) returned 1 [0217.002] FindNextFileW (in: hFindFile=0x665d90d1c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0217.002] FindClose (in: hFindFile=0x665d90d1c0 | out: hFindFile=0x665d90d1c0) returned 1 [0217.003] SetLastError (dwErrCode=0x0) [0217.003] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.003] GetLastError () returned 0xb7 [0217.003] CloseHandle (hObject=0x620) returned 1 [0217.003] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0217.003] SetLastError (dwErrCode=0x0) [0217.003] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.003] GetLastError () returned 0xb7 [0217.003] CloseHandle (hObject=0x620) returned 1 [0217.003] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AppData\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90ca40 [0217.004] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.004] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0217.004] FindClose (in: hFindFile=0x665d90ca40 | out: hFindFile=0x665d90ca40) returned 1 [0217.004] SetLastError (dwErrCode=0x0) [0217.004] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AppData\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\appdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.005] GetLastError () returned 0x0 [0217.005] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0217.006] CloseHandle (hObject=0x620) returned 1 [0217.006] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0217.007] SetLastError (dwErrCode=0x0) [0217.007] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.007] GetLastError () returned 0xb7 [0217.007] CloseHandle (hObject=0x620) returned 1 [0217.007] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\LocalCache\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c0e0 [0217.007] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.007] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0217.007] FindClose (in: hFindFile=0x665d90c0e0 | out: hFindFile=0x665d90c0e0) returned 1 [0217.007] SetLastError (dwErrCode=0x0) [0217.008] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\LocalCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\localcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.008] GetLastError () returned 0x0 [0217.008] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0217.009] CloseHandle (hObject=0x620) returned 1 [0217.009] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0217.009] SetLastError (dwErrCode=0x0) [0217.009] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.010] GetLastError () returned 0xb7 [0217.010] CloseHandle (hObject=0x620) returned 1 [0217.010] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\LocalState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c1a0 [0217.010] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.010] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0217.010] FindClose (in: hFindFile=0x665d90c1a0 | out: hFindFile=0x665d90c1a0) returned 1 [0217.010] SetLastError (dwErrCode=0x0) [0217.010] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\LocalState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\localstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.012] GetLastError () returned 0x0 [0217.012] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0217.013] CloseHandle (hObject=0x620) returned 1 [0217.013] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0217.013] SetLastError (dwErrCode=0x0) [0217.013] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.013] GetLastError () returned 0xb7 [0217.013] CloseHandle (hObject=0x620) returned 1 [0217.014] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c6e0 [0217.014] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.014] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.014] SetLastError (dwErrCode=0x0) [0217.015] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\microsoft.microsoftsolitairecollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0217.105] GetLastError () returned 0x0 [0217.105] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0217.106] CloseHandle (hObject=0x3e8) returned 1 [0217.106] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90be40 [0217.111] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0217.111] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0217.111] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0217.112] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", dwFileAttributes=0x80) returned 1 [0217.112] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\microsoft.microsoftsolitairecollection_3.1.6103.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0217.113] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=32768) returned 1 [0217.113] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=32768) returned 1 [0217.113] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x7ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.113] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0217.114] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0217.114] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a6c0) returned 1 [0217.114] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0217.114] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0217.114] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x8000, lpOverlapped=0x0) returned 1 [0217.116] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0217.116] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x8000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x8010) returned 1 [0217.116] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0217.116] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x8010, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x8010, lpOverlapped=0x0) returned 1 [0217.117] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0217.117] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0217.117] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0217.117] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0217.117] CloseHandle (hObject=0x654) returned 1 [0217.137] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0217.142] CryptDestroyKey (hKey=0x665ab9a6c0) returned 1 [0217.142] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0217.143] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0217.143] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0217.143] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", dwFileAttributes=0x80) returned 1 [0217.144] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\microsoft.microsoftsolitairecollection_3.1.6103.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0217.144] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=20480) returned 1 [0217.144] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=20480) returned 1 [0217.145] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x4ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.145] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0217.146] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0217.146] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a5e0) returned 1 [0217.146] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0217.147] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0217.147] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x5000, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x5000, lpOverlapped=0x0) returned 1 [0217.148] CryptEncrypt (in: hKey=0x665ab9a5e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0217.148] CryptEncrypt (in: hKey=0x665ab9a5e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x5000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x5010) returned 1 [0217.148] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0217.148] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x5010, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x5010, lpOverlapped=0x0) returned 1 [0217.149] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0217.149] CryptExportKey (in: hKey=0x665ab9a5e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0217.149] CryptExportKey (in: hKey=0x665ab9a5e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0217.149] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0217.149] CloseHandle (hObject=0x654) returned 1 [0217.169] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0217.174] CryptDestroyKey (hKey=0x665ab9a5e0) returned 1 [0217.174] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0217.174] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0217.174] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0217.175] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", dwFileAttributes=0x80) returned 1 [0217.176] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\microsoft.microsoftsolitairecollection_3.1.6103.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0217.177] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=0) returned 1 [0217.177] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=0) returned 1 [0217.177] CloseHandle (hObject=0x654) returned 1 [0217.177] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0217.177] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0217.177] FindClose (in: hFindFile=0x665d90be40 | out: hFindFile=0x665d90be40) returned 1 [0217.177] SetLastError (dwErrCode=0x0) [0217.177] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\microsoft.microsoftsolitairecollection_3.1.6103.0_x64__8wekyb3d8bbwe\\activationstore\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0217.178] GetLastError () returned 0x0 [0217.178] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0217.179] CloseHandle (hObject=0x3e8) returned 1 [0217.179] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0217.179] FindClose (in: hFindFile=0x665d90c6e0 | out: hFindFile=0x665d90c6e0) returned 1 [0217.179] SetLastError (dwErrCode=0x0) [0217.180] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\microsoft.microsoftsolitairecollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.180] GetLastError () returned 0xb7 [0217.180] CloseHandle (hObject=0x620) returned 1 [0217.180] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0217.180] SetLastError (dwErrCode=0x0) [0217.180] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.180] GetLastError () returned 0xb7 [0217.180] CloseHandle (hObject=0x620) returned 1 [0217.180] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\RoamingState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c500 [0217.181] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.181] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0217.181] FindClose (in: hFindFile=0x665d90c500 | out: hFindFile=0x665d90c500) returned 1 [0217.181] SetLastError (dwErrCode=0x0) [0217.181] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\RoamingState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\roamingstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.181] GetLastError () returned 0x0 [0217.181] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0217.182] CloseHandle (hObject=0x620) returned 1 [0217.183] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0217.183] SetLastError (dwErrCode=0x0) [0217.183] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.183] GetLastError () returned 0xb7 [0217.183] CloseHandle (hObject=0x620) returned 1 [0217.183] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Settings\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c6e0 [0217.183] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.183] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.183] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0217.184] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Settings\\roaming.lock", dwFileAttributes=0x80) returned 1 [0217.184] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0217.185] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=0) returned 1 [0217.185] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=0) returned 1 [0217.185] CloseHandle (hObject=0x3e8) returned 1 [0217.185] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0217.186] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.186] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0217.186] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Settings\\settings.dat", dwFileAttributes=0x80) returned 1 [0217.187] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0217.187] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=8192) returned 1 [0217.187] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=8192) returned 1 [0217.187] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x1ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.187] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0217.189] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0217.189] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9aea0) returned 1 [0217.189] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0217.190] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0217.190] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0x2000, lpOverlapped=0x0) returned 1 [0217.191] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0217.191] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2010) returned 1 [0217.191] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0217.191] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0x2010, lpOverlapped=0x0) returned 1 [0217.191] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0217.192] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0217.192] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0217.192] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0217.192] CloseHandle (hObject=0x3e8) returned 1 [0217.302] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0217.307] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0217.308] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0217.308] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0217.308] FindClose (in: hFindFile=0x665d90c6e0 | out: hFindFile=0x665d90c6e0) returned 1 [0217.308] SetLastError (dwErrCode=0x0) [0217.308] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Settings\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\settings\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.311] GetLastError () returned 0x0 [0217.311] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0217.312] CloseHandle (hObject=0x620) returned 1 [0217.315] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0217.315] SetLastError (dwErrCode=0x0) [0217.315] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.316] GetLastError () returned 0xb7 [0217.316] CloseHandle (hObject=0x620) returned 1 [0217.316] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\SystemAppData\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d280 [0217.318] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.318] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0217.318] FindClose (in: hFindFile=0x665d90d280 | out: hFindFile=0x665d90d280) returned 1 [0217.318] SetLastError (dwErrCode=0x0) [0217.318] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\SystemAppData\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\systemappdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.319] GetLastError () returned 0x0 [0217.319] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0217.320] CloseHandle (hObject=0x620) returned 1 [0217.320] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0217.320] SetLastError (dwErrCode=0x0) [0217.320] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.321] GetLastError () returned 0xb7 [0217.321] CloseHandle (hObject=0x620) returned 1 [0217.321] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\TempState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bfc0 [0217.321] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.321] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0217.321] FindClose (in: hFindFile=0x665d90bfc0 | out: hFindFile=0x665d90bfc0) returned 1 [0217.321] SetLastError (dwErrCode=0x0) [0217.321] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\TempState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\tempstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.322] GetLastError () returned 0x0 [0217.322] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0217.323] CloseHandle (hObject=0x620) returned 1 [0217.323] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0217.323] FindClose (in: hFindFile=0x665d90c080 | out: hFindFile=0x665d90c080) returned 1 [0217.323] SetLastError (dwErrCode=0x0) [0217.323] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0217.323] GetLastError () returned 0xb7 [0217.323] CloseHandle (hObject=0x60c) returned 1 [0217.324] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0217.324] SetLastError (dwErrCode=0x0) [0217.324] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0217.324] GetLastError () returned 0xb7 [0217.324] CloseHandle (hObject=0x60c) returned 1 [0217.324] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90caa0 [0217.327] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0217.327] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0217.327] SetLastError (dwErrCode=0x0) [0217.327] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.328] GetLastError () returned 0x0 [0217.328] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0217.329] CloseHandle (hObject=0x620) returned 1 [0217.329] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AC\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90cb60 [0217.331] FindNextFileW (in: hFindFile=0x665d90cb60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.331] FindNextFileW (in: hFindFile=0x665d90cb60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.331] SetLastError (dwErrCode=0x0) [0217.331] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0217.333] GetLastError () returned 0x0 [0217.333] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0217.334] CloseHandle (hObject=0x3e8) returned 1 [0217.334] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AC\\INetCache\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90ca40 [0217.335] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0217.335] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0217.335] FindClose (in: hFindFile=0x665d90ca40 | out: hFindFile=0x665d90ca40) returned 1 [0217.335] SetLastError (dwErrCode=0x0) [0217.335] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AC\\INetCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\ac\\inetcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0217.336] GetLastError () returned 0x0 [0217.336] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0217.337] CloseHandle (hObject=0x3e8) returned 1 [0217.337] FindNextFileW (in: hFindFile=0x665d90cb60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.337] SetLastError (dwErrCode=0x0) [0217.337] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0217.338] GetLastError () returned 0xb7 [0217.338] CloseHandle (hObject=0x3e8) returned 1 [0217.338] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AC\\INetCookies\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c020 [0217.338] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0217.338] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0217.338] FindClose (in: hFindFile=0x665d90c020 | out: hFindFile=0x665d90c020) returned 1 [0217.338] SetLastError (dwErrCode=0x0) [0217.338] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AC\\INetCookies\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\ac\\inetcookies\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0217.339] GetLastError () returned 0x0 [0217.339] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0217.340] CloseHandle (hObject=0x3e8) returned 1 [0217.340] FindNextFileW (in: hFindFile=0x665d90cb60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.340] SetLastError (dwErrCode=0x0) [0217.340] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0217.341] GetLastError () returned 0xb7 [0217.341] CloseHandle (hObject=0x3e8) returned 1 [0217.341] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AC\\INetHistory\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c6e0 [0217.341] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0217.341] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0217.341] FindClose (in: hFindFile=0x665d90c6e0 | out: hFindFile=0x665d90c6e0) returned 1 [0217.341] SetLastError (dwErrCode=0x0) [0217.341] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AC\\INetHistory\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\ac\\inethistory\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0217.342] GetLastError () returned 0x0 [0217.342] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0217.343] CloseHandle (hObject=0x3e8) returned 1 [0217.343] FindNextFileW (in: hFindFile=0x665d90cb60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.343] SetLastError (dwErrCode=0x0) [0217.343] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0217.344] GetLastError () returned 0xb7 [0217.344] CloseHandle (hObject=0x3e8) returned 1 [0217.344] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AC\\Temp\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c4a0 [0217.345] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0217.345] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0217.345] FindClose (in: hFindFile=0x665d90c4a0 | out: hFindFile=0x665d90c4a0) returned 1 [0217.345] SetLastError (dwErrCode=0x0) [0217.345] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AC\\Temp\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\ac\\temp\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0217.346] GetLastError () returned 0x0 [0217.346] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0217.347] CloseHandle (hObject=0x3e8) returned 1 [0217.347] FindNextFileW (in: hFindFile=0x665d90cb60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0217.347] FindClose (in: hFindFile=0x665d90cb60 | out: hFindFile=0x665d90cb60) returned 1 [0217.347] SetLastError (dwErrCode=0x0) [0217.347] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.348] GetLastError () returned 0xb7 [0217.348] CloseHandle (hObject=0x620) returned 1 [0217.348] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0217.348] SetLastError (dwErrCode=0x0) [0217.348] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.348] GetLastError () returned 0xb7 [0217.348] CloseHandle (hObject=0x620) returned 1 [0217.348] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AppData\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bde0 [0217.349] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.349] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0217.349] FindClose (in: hFindFile=0x665d90bde0 | out: hFindFile=0x665d90bde0) returned 1 [0217.349] SetLastError (dwErrCode=0x0) [0217.349] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AppData\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\appdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.350] GetLastError () returned 0x0 [0217.350] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0217.351] CloseHandle (hObject=0x620) returned 1 [0217.351] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0217.351] SetLastError (dwErrCode=0x0) [0217.351] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.351] GetLastError () returned 0xb7 [0217.351] CloseHandle (hObject=0x620) returned 1 [0217.351] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\LocalCache\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c500 [0217.352] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.352] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0217.352] FindClose (in: hFindFile=0x665d90c500 | out: hFindFile=0x665d90c500) returned 1 [0217.352] SetLastError (dwErrCode=0x0) [0217.352] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\LocalCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\localcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.353] GetLastError () returned 0x0 [0217.353] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0217.354] CloseHandle (hObject=0x620) returned 1 [0217.354] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0217.354] SetLastError (dwErrCode=0x0) [0217.354] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.355] GetLastError () returned 0xb7 [0217.355] CloseHandle (hObject=0x620) returned 1 [0217.355] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\LocalState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d280 [0217.355] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.355] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0217.355] FindClose (in: hFindFile=0x665d90d280 | out: hFindFile=0x665d90d280) returned 1 [0217.355] SetLastError (dwErrCode=0x0) [0217.355] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\LocalState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\localstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.356] GetLastError () returned 0x0 [0217.356] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0217.357] CloseHandle (hObject=0x620) returned 1 [0217.357] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0217.357] SetLastError (dwErrCode=0x0) [0217.357] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.357] GetLastError () returned 0xb7 [0217.357] CloseHandle (hObject=0x620) returned 1 [0217.357] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\RoamingState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c1a0 [0217.358] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.358] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0217.358] FindClose (in: hFindFile=0x665d90c1a0 | out: hFindFile=0x665d90c1a0) returned 1 [0217.358] SetLastError (dwErrCode=0x0) [0217.358] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\RoamingState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\roamingstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.360] GetLastError () returned 0x0 [0217.360] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0217.361] CloseHandle (hObject=0x620) returned 1 [0217.361] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0217.361] SetLastError (dwErrCode=0x0) [0217.361] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.361] GetLastError () returned 0xb7 [0217.361] CloseHandle (hObject=0x620) returned 1 [0217.361] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90cc80 [0217.363] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.363] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.363] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0217.363] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\roaming.lock", dwFileAttributes=0x80) returned 1 [0217.364] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0217.365] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=0) returned 1 [0217.365] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=0) returned 1 [0217.365] CloseHandle (hObject=0x3e8) returned 1 [0217.365] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0217.365] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.365] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0217.365] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat", dwFileAttributes=0x80) returned 1 [0217.366] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0217.367] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=8192) returned 1 [0217.367] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=8192) returned 1 [0217.367] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x1ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.367] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0217.368] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0217.368] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9a3b0) returned 1 [0217.368] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0217.369] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0217.369] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0x2000, lpOverlapped=0x0) returned 1 [0217.369] CryptEncrypt (in: hKey=0x665ab9a3b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0217.369] CryptEncrypt (in: hKey=0x665ab9a3b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2010) returned 1 [0217.369] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0217.369] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0x2010, lpOverlapped=0x0) returned 1 [0217.370] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0217.370] CryptExportKey (in: hKey=0x665ab9a3b0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0217.370] CryptExportKey (in: hKey=0x665ab9a3b0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0217.370] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0217.370] CloseHandle (hObject=0x3e8) returned 1 [0217.388] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0217.394] CryptDestroyKey (hKey=0x665ab9a3b0) returned 1 [0217.394] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0217.394] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.394] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0217.394] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1", dwFileAttributes=0x80) returned 1 [0217.395] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0217.396] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=8192) returned 1 [0217.396] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=8192) returned 1 [0217.396] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x1ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.396] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0217.397] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0217.397] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9a730) returned 1 [0217.397] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0217.398] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0217.398] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0x2000, lpOverlapped=0x0) returned 1 [0217.399] CryptEncrypt (in: hKey=0x665ab9a730, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0217.399] CryptEncrypt (in: hKey=0x665ab9a730, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2010) returned 1 [0217.399] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0217.399] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0x2010, lpOverlapped=0x0) returned 1 [0217.399] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0217.399] CryptExportKey (in: hKey=0x665ab9a730, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0217.400] CryptExportKey (in: hKey=0x665ab9a730, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0217.400] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0217.400] CloseHandle (hObject=0x3e8) returned 1 [0217.418] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0217.424] CryptDestroyKey (hKey=0x665ab9a730) returned 1 [0217.424] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0217.424] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.424] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0217.424] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", dwFileAttributes=0x80) returned 1 [0217.425] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\settings\\settings.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0217.426] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=0) returned 1 [0217.426] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=0) returned 1 [0217.426] CloseHandle (hObject=0x3e8) returned 1 [0217.426] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0217.426] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0217.426] FindClose (in: hFindFile=0x665d90cc80 | out: hFindFile=0x665d90cc80) returned 1 [0217.426] SetLastError (dwErrCode=0x0) [0217.426] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\settings\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.427] GetLastError () returned 0x0 [0217.427] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0217.428] CloseHandle (hObject=0x620) returned 1 [0217.428] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0217.428] SetLastError (dwErrCode=0x0) [0217.428] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.428] GetLastError () returned 0xb7 [0217.428] CloseHandle (hObject=0x620) returned 1 [0217.428] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\SystemAppData\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d0a0 [0217.429] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.429] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0217.429] FindClose (in: hFindFile=0x665d90d0a0 | out: hFindFile=0x665d90d0a0) returned 1 [0217.429] SetLastError (dwErrCode=0x0) [0217.429] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\SystemAppData\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\systemappdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.429] GetLastError () returned 0x0 [0217.429] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0217.431] CloseHandle (hObject=0x620) returned 1 [0217.431] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0217.431] SetLastError (dwErrCode=0x0) [0217.431] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.431] GetLastError () returned 0xb7 [0217.431] CloseHandle (hObject=0x620) returned 1 [0217.431] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\TempState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90cb00 [0217.431] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.432] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0217.432] FindClose (in: hFindFile=0x665d90cb00 | out: hFindFile=0x665d90cb00) returned 1 [0217.432] SetLastError (dwErrCode=0x0) [0217.432] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\TempState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\tempstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.432] GetLastError () returned 0x0 [0217.432] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0217.433] CloseHandle (hObject=0x620) returned 1 [0217.433] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0217.434] FindClose (in: hFindFile=0x665d90caa0 | out: hFindFile=0x665d90caa0) returned 1 [0217.434] SetLastError (dwErrCode=0x0) [0217.434] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0217.434] GetLastError () returned 0xb7 [0217.434] CloseHandle (hObject=0x60c) returned 1 [0217.434] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0217.434] SetLastError (dwErrCode=0x0) [0217.434] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0217.435] GetLastError () returned 0xb7 [0217.435] CloseHandle (hObject=0x60c) returned 1 [0217.435] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90bea0 [0217.437] FindNextFileW (in: hFindFile=0x665d90bea0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0217.437] FindNextFileW (in: hFindFile=0x665d90bea0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0217.437] SetLastError (dwErrCode=0x0) [0217.437] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.439] GetLastError () returned 0x0 [0217.439] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0217.440] CloseHandle (hObject=0x620) returned 1 [0217.440] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\AC\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d2e0 [0217.442] FindNextFileW (in: hFindFile=0x665d90d2e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.442] FindNextFileW (in: hFindFile=0x665d90d2e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.442] SetLastError (dwErrCode=0x0) [0217.442] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0217.443] GetLastError () returned 0x0 [0217.443] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0217.444] CloseHandle (hObject=0x3e8) returned 1 [0217.444] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\AC\\INetCache\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c500 [0217.445] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0217.445] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0217.445] FindClose (in: hFindFile=0x665d90c500 | out: hFindFile=0x665d90c500) returned 1 [0217.445] SetLastError (dwErrCode=0x0) [0217.445] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\AC\\INetCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\ac\\inetcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0217.448] GetLastError () returned 0x0 [0217.448] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0217.450] CloseHandle (hObject=0x3e8) returned 1 [0217.450] FindNextFileW (in: hFindFile=0x665d90d2e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.450] SetLastError (dwErrCode=0x0) [0217.450] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0217.450] GetLastError () returned 0xb7 [0217.450] CloseHandle (hObject=0x3e8) returned 1 [0217.451] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\AC\\INetCookies\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90cb60 [0217.451] FindNextFileW (in: hFindFile=0x665d90cb60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0217.451] FindNextFileW (in: hFindFile=0x665d90cb60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0217.451] FindClose (in: hFindFile=0x665d90cb60 | out: hFindFile=0x665d90cb60) returned 1 [0217.451] SetLastError (dwErrCode=0x0) [0217.451] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\AC\\INetCookies\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\ac\\inetcookies\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0217.452] GetLastError () returned 0x0 [0217.452] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0217.453] CloseHandle (hObject=0x3e8) returned 1 [0217.453] FindNextFileW (in: hFindFile=0x665d90d2e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.453] SetLastError (dwErrCode=0x0) [0217.453] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0217.453] GetLastError () returned 0xb7 [0217.453] CloseHandle (hObject=0x3e8) returned 1 [0217.453] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\AC\\INetHistory\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c1a0 [0217.454] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0217.454] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0217.454] FindClose (in: hFindFile=0x665d90c1a0 | out: hFindFile=0x665d90c1a0) returned 1 [0217.454] SetLastError (dwErrCode=0x0) [0217.454] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\AC\\INetHistory\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\ac\\inethistory\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0217.455] GetLastError () returned 0x0 [0217.455] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0217.456] CloseHandle (hObject=0x3e8) returned 1 [0217.456] FindNextFileW (in: hFindFile=0x665d90d2e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.457] SetLastError (dwErrCode=0x0) [0217.457] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0217.457] GetLastError () returned 0xb7 [0217.457] CloseHandle (hObject=0x3e8) returned 1 [0217.457] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\AC\\Temp\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c800 [0217.457] FindNextFileW (in: hFindFile=0x665d90c800, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0217.457] FindNextFileW (in: hFindFile=0x665d90c800, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0217.457] FindClose (in: hFindFile=0x665d90c800 | out: hFindFile=0x665d90c800) returned 1 [0217.457] SetLastError (dwErrCode=0x0) [0217.457] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\AC\\Temp\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\ac\\temp\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0217.458] GetLastError () returned 0x0 [0217.458] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0217.459] CloseHandle (hObject=0x3e8) returned 1 [0217.459] FindNextFileW (in: hFindFile=0x665d90d2e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0217.459] FindClose (in: hFindFile=0x665d90d2e0 | out: hFindFile=0x665d90d2e0) returned 1 [0217.460] SetLastError (dwErrCode=0x0) [0217.460] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.460] GetLastError () returned 0xb7 [0217.460] CloseHandle (hObject=0x620) returned 1 [0217.460] FindNextFileW (in: hFindFile=0x665d90bea0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0217.460] SetLastError (dwErrCode=0x0) [0217.460] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.460] GetLastError () returned 0xb7 [0217.460] CloseHandle (hObject=0x620) returned 1 [0217.460] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\AppData\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bc60 [0217.461] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.461] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0217.461] FindClose (in: hFindFile=0x665d90bc60 | out: hFindFile=0x665d90bc60) returned 1 [0217.461] SetLastError (dwErrCode=0x0) [0217.461] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\AppData\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\appdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.462] GetLastError () returned 0x0 [0217.462] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0217.463] CloseHandle (hObject=0x620) returned 1 [0217.463] FindNextFileW (in: hFindFile=0x665d90bea0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0217.463] SetLastError (dwErrCode=0x0) [0217.463] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.464] GetLastError () returned 0xb7 [0217.464] CloseHandle (hObject=0x620) returned 1 [0217.464] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\LocalCache\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90ce60 [0217.464] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.464] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0217.464] FindClose (in: hFindFile=0x665d90ce60 | out: hFindFile=0x665d90ce60) returned 1 [0217.464] SetLastError (dwErrCode=0x0) [0217.464] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\LocalCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\localcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.465] GetLastError () returned 0x0 [0217.465] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0217.466] CloseHandle (hObject=0x620) returned 1 [0217.466] FindNextFileW (in: hFindFile=0x665d90bea0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0217.466] SetLastError (dwErrCode=0x0) [0217.466] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.467] GetLastError () returned 0xb7 [0217.467] CloseHandle (hObject=0x620) returned 1 [0217.467] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\LocalState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90cce0 [0217.467] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.467] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0217.467] FindClose (in: hFindFile=0x665d90cce0 | out: hFindFile=0x665d90cce0) returned 1 [0217.467] SetLastError (dwErrCode=0x0) [0217.467] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\LocalState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\localstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.468] GetLastError () returned 0x0 [0217.468] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0217.469] CloseHandle (hObject=0x620) returned 1 [0217.469] FindNextFileW (in: hFindFile=0x665d90bea0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0217.469] SetLastError (dwErrCode=0x0) [0217.470] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.470] GetLastError () returned 0xb7 [0217.470] CloseHandle (hObject=0x620) returned 1 [0217.470] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\RoamingState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d100 [0217.470] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.470] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0217.470] FindClose (in: hFindFile=0x665d90d100 | out: hFindFile=0x665d90d100) returned 1 [0217.470] SetLastError (dwErrCode=0x0) [0217.470] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\RoamingState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\roamingstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.471] GetLastError () returned 0x0 [0217.471] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0217.472] CloseHandle (hObject=0x620) returned 1 [0217.472] FindNextFileW (in: hFindFile=0x665d90bea0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0217.472] SetLastError (dwErrCode=0x0) [0217.472] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.473] GetLastError () returned 0xb7 [0217.473] CloseHandle (hObject=0x620) returned 1 [0217.473] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\Settings\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bc60 [0217.474] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.474] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.474] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0217.475] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\Settings\\roaming.lock", dwFileAttributes=0x80) returned 1 [0217.475] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0217.476] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=0) returned 1 [0217.476] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=0) returned 1 [0217.476] CloseHandle (hObject=0x3e8) returned 1 [0217.476] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0217.476] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.476] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0217.476] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\Settings\\settings.dat", dwFileAttributes=0x80) returned 1 [0217.477] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0217.477] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=8192) returned 1 [0217.477] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=8192) returned 1 [0217.477] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x1ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.478] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0217.479] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0217.479] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9a3b0) returned 1 [0217.479] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0217.479] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0217.479] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0x2000, lpOverlapped=0x0) returned 1 [0217.480] CryptEncrypt (in: hKey=0x665ab9a3b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0217.480] CryptEncrypt (in: hKey=0x665ab9a3b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2010) returned 1 [0217.480] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0217.480] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0x2010, lpOverlapped=0x0) returned 1 [0217.481] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0217.481] CryptExportKey (in: hKey=0x665ab9a3b0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0217.481] CryptExportKey (in: hKey=0x665ab9a3b0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0217.481] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0217.481] CloseHandle (hObject=0x3e8) returned 1 [0217.500] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0217.505] CryptDestroyKey (hKey=0x665ab9a3b0) returned 1 [0217.505] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0217.506] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.506] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0217.506] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1", dwFileAttributes=0x80) returned 1 [0217.507] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0217.508] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=8192) returned 1 [0217.508] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=8192) returned 1 [0217.508] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x1ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.508] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0217.510] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0217.510] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9a3b0) returned 1 [0217.510] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0217.510] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0217.510] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0x2000, lpOverlapped=0x0) returned 1 [0217.514] CryptEncrypt (in: hKey=0x665ab9a3b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0217.514] CryptEncrypt (in: hKey=0x665ab9a3b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2010) returned 1 [0217.514] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0217.514] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0x2010, lpOverlapped=0x0) returned 1 [0217.515] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0217.515] CryptExportKey (in: hKey=0x665ab9a3b0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0217.515] CryptExportKey (in: hKey=0x665ab9a3b0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0217.515] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0217.515] CloseHandle (hObject=0x3e8) returned 1 [0217.530] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0217.534] CryptDestroyKey (hKey=0x665ab9a3b0) returned 1 [0217.534] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0217.534] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.534] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0217.534] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", dwFileAttributes=0x80) returned 1 [0217.535] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\settings\\settings.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0217.535] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=0) returned 1 [0217.535] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=0) returned 1 [0217.535] CloseHandle (hObject=0x3e8) returned 1 [0217.535] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0217.536] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0217.536] FindClose (in: hFindFile=0x665d90bc60 | out: hFindFile=0x665d90bc60) returned 1 [0217.536] SetLastError (dwErrCode=0x0) [0217.536] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\Settings\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\settings\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.536] GetLastError () returned 0x0 [0217.537] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0217.537] CloseHandle (hObject=0x620) returned 1 [0217.538] FindNextFileW (in: hFindFile=0x665d90bea0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0217.538] SetLastError (dwErrCode=0x0) [0217.538] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.538] GetLastError () returned 0xb7 [0217.538] CloseHandle (hObject=0x620) returned 1 [0217.538] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\SystemAppData\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90cd40 [0217.538] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.538] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0217.538] FindClose (in: hFindFile=0x665d90cd40 | out: hFindFile=0x665d90cd40) returned 1 [0217.538] SetLastError (dwErrCode=0x0) [0217.538] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\SystemAppData\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\systemappdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.539] GetLastError () returned 0x0 [0217.539] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0217.540] CloseHandle (hObject=0x620) returned 1 [0217.540] FindNextFileW (in: hFindFile=0x665d90bea0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0217.540] SetLastError (dwErrCode=0x0) [0217.540] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.540] GetLastError () returned 0xb7 [0217.540] CloseHandle (hObject=0x620) returned 1 [0217.540] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\TempState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c680 [0217.540] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.540] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0217.540] FindClose (in: hFindFile=0x665d90c680 | out: hFindFile=0x665d90c680) returned 1 [0217.540] SetLastError (dwErrCode=0x0) [0217.540] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\TempState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\tempstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.541] GetLastError () returned 0x0 [0217.541] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0217.542] CloseHandle (hObject=0x620) returned 1 [0217.542] FindNextFileW (in: hFindFile=0x665d90bea0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0217.542] FindClose (in: hFindFile=0x665d90bea0 | out: hFindFile=0x665d90bea0) returned 1 [0217.543] SetLastError (dwErrCode=0x0) [0217.543] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0217.543] GetLastError () returned 0xb7 [0217.543] CloseHandle (hObject=0x60c) returned 1 [0217.543] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0217.543] SetLastError (dwErrCode=0x0) [0217.543] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0217.543] GetLastError () returned 0xb7 [0217.543] CloseHandle (hObject=0x60c) returned 1 [0217.543] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c080 [0217.546] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0217.546] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0217.546] SetLastError (dwErrCode=0x0) [0217.546] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.547] GetLastError () returned 0x0 [0217.547] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0217.548] CloseHandle (hObject=0x620) returned 1 [0217.548] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AC\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c800 [0217.550] FindNextFileW (in: hFindFile=0x665d90c800, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.550] FindNextFileW (in: hFindFile=0x665d90c800, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.550] SetLastError (dwErrCode=0x0) [0217.550] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0217.552] GetLastError () returned 0x0 [0217.552] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0217.553] CloseHandle (hObject=0x3e8) returned 1 [0217.553] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AC\\INetCache\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c560 [0217.554] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0217.554] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0217.554] FindClose (in: hFindFile=0x665d90c560 | out: hFindFile=0x665d90c560) returned 1 [0217.554] SetLastError (dwErrCode=0x0) [0217.554] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AC\\INetCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\ac\\inetcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0217.554] GetLastError () returned 0x0 [0217.554] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0217.555] CloseHandle (hObject=0x3e8) returned 1 [0217.555] FindNextFileW (in: hFindFile=0x665d90c800, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.555] SetLastError (dwErrCode=0x0) [0217.556] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0217.556] GetLastError () returned 0xb7 [0217.556] CloseHandle (hObject=0x3e8) returned 1 [0217.556] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AC\\INetCookies\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c860 [0217.556] FindNextFileW (in: hFindFile=0x665d90c860, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0217.556] FindNextFileW (in: hFindFile=0x665d90c860, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0217.556] FindClose (in: hFindFile=0x665d90c860 | out: hFindFile=0x665d90c860) returned 1 [0217.556] SetLastError (dwErrCode=0x0) [0217.556] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AC\\INetCookies\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\ac\\inetcookies\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0217.557] GetLastError () returned 0x0 [0217.557] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0217.558] CloseHandle (hObject=0x3e8) returned 1 [0217.558] FindNextFileW (in: hFindFile=0x665d90c800, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.558] SetLastError (dwErrCode=0x0) [0217.558] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0217.558] GetLastError () returned 0xb7 [0217.558] CloseHandle (hObject=0x3e8) returned 1 [0217.558] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AC\\INetHistory\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90d1c0 [0217.558] FindNextFileW (in: hFindFile=0x665d90d1c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0217.558] FindNextFileW (in: hFindFile=0x665d90d1c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0217.559] FindClose (in: hFindFile=0x665d90d1c0 | out: hFindFile=0x665d90d1c0) returned 1 [0217.559] SetLastError (dwErrCode=0x0) [0217.559] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AC\\INetHistory\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\ac\\inethistory\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0217.559] GetLastError () returned 0x0 [0217.560] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0217.561] CloseHandle (hObject=0x3e8) returned 1 [0217.561] FindNextFileW (in: hFindFile=0x665d90c800, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.561] SetLastError (dwErrCode=0x0) [0217.561] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0217.561] GetLastError () returned 0xb7 [0217.561] CloseHandle (hObject=0x3e8) returned 1 [0217.561] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AC\\Temp\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90be40 [0217.561] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0217.561] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0217.561] FindClose (in: hFindFile=0x665d90be40 | out: hFindFile=0x665d90be40) returned 1 [0217.561] SetLastError (dwErrCode=0x0) [0217.561] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AC\\Temp\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\ac\\temp\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0217.563] GetLastError () returned 0x0 [0217.563] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0217.563] CloseHandle (hObject=0x3e8) returned 1 [0217.564] FindNextFileW (in: hFindFile=0x665d90c800, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0217.564] FindClose (in: hFindFile=0x665d90c800 | out: hFindFile=0x665d90c800) returned 1 [0217.564] SetLastError (dwErrCode=0x0) [0217.564] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.564] GetLastError () returned 0xb7 [0217.564] CloseHandle (hObject=0x620) returned 1 [0217.564] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0217.564] SetLastError (dwErrCode=0x0) [0217.564] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.564] GetLastError () returned 0xb7 [0217.564] CloseHandle (hObject=0x620) returned 1 [0217.564] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AppData\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d280 [0217.565] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.565] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0217.565] FindClose (in: hFindFile=0x665d90d280 | out: hFindFile=0x665d90d280) returned 1 [0217.565] SetLastError (dwErrCode=0x0) [0217.565] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AppData\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\appdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.566] GetLastError () returned 0x0 [0217.566] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0217.567] CloseHandle (hObject=0x620) returned 1 [0217.567] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0217.567] SetLastError (dwErrCode=0x0) [0217.567] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.567] GetLastError () returned 0xb7 [0217.567] CloseHandle (hObject=0x620) returned 1 [0217.567] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\LocalCache\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c980 [0217.568] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.568] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0217.568] FindClose (in: hFindFile=0x665d90c980 | out: hFindFile=0x665d90c980) returned 1 [0217.568] SetLastError (dwErrCode=0x0) [0217.568] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\LocalCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\localcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.568] GetLastError () returned 0x0 [0217.568] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0217.569] CloseHandle (hObject=0x620) returned 1 [0217.569] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0217.569] SetLastError (dwErrCode=0x0) [0217.569] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.569] GetLastError () returned 0xb7 [0217.569] CloseHandle (hObject=0x620) returned 1 [0217.570] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\LocalState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c980 [0217.570] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.570] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0217.570] FindClose (in: hFindFile=0x665d90c980 | out: hFindFile=0x665d90c980) returned 1 [0217.570] SetLastError (dwErrCode=0x0) [0217.570] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\LocalState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\localstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.571] GetLastError () returned 0x0 [0217.571] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0217.571] CloseHandle (hObject=0x620) returned 1 [0217.572] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0217.572] SetLastError (dwErrCode=0x0) [0217.572] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.572] GetLastError () returned 0xb7 [0217.572] CloseHandle (hObject=0x620) returned 1 [0217.572] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c920 [0217.572] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.572] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.573] SetLastError (dwErrCode=0x0) [0217.573] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\microsoft.office.onenote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0217.579] GetLastError () returned 0x0 [0217.579] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0217.580] CloseHandle (hObject=0x3e8) returned 1 [0217.581] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90ce00 [0217.599] FindNextFileW (in: hFindFile=0x665d90ce00, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0217.600] FindNextFileW (in: hFindFile=0x665d90ce00, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0217.600] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0217.600] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", dwFileAttributes=0x80) returned 1 [0217.601] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\microsoft.office.onenote_17.4201.10091.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0217.602] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=262144) returned 1 [0217.602] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=262144) returned 1 [0217.602] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x3fede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.602] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0217.603] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0217.603] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9aea0) returned 1 [0217.603] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0217.604] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0217.604] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x40000, lpOverlapped=0x0) returned 1 [0217.616] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0217.617] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x40000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x40010) returned 1 [0217.617] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0217.617] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x40010, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x40010, lpOverlapped=0x0) returned 1 [0217.619] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0217.619] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0217.619] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0217.619] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0217.619] CloseHandle (hObject=0x654) returned 1 [0217.630] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0217.634] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0217.634] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0217.634] FindNextFileW (in: hFindFile=0x665d90ce00, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0217.634] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0217.635] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", dwFileAttributes=0x80) returned 1 [0217.635] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\microsoft.office.onenote_17.4201.10091.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0217.636] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=0) returned 1 [0217.636] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=0) returned 1 [0217.636] CloseHandle (hObject=0x654) returned 1 [0217.636] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0217.636] FindNextFileW (in: hFindFile=0x665d90ce00, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0217.636] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0217.636] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", dwFileAttributes=0x80) returned 1 [0217.637] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\microsoft.office.onenote_17.4201.10091.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0217.637] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=0) returned 1 [0217.637] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=0) returned 1 [0217.637] CloseHandle (hObject=0x654) returned 1 [0217.637] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0217.638] FindNextFileW (in: hFindFile=0x665d90ce00, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0217.638] FindClose (in: hFindFile=0x665d90ce00 | out: hFindFile=0x665d90ce00) returned 1 [0217.638] SetLastError (dwErrCode=0x0) [0217.638] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\microsoft.office.onenote_17.4201.10091.0_x64__8wekyb3d8bbwe\\activationstore\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0217.639] GetLastError () returned 0x0 [0217.639] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0217.639] CloseHandle (hObject=0x3e8) returned 1 [0217.639] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0217.640] FindClose (in: hFindFile=0x665d90c920 | out: hFindFile=0x665d90c920) returned 1 [0217.640] SetLastError (dwErrCode=0x0) [0217.640] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\microsoft.office.onenote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.640] GetLastError () returned 0xb7 [0217.640] CloseHandle (hObject=0x620) returned 1 [0217.640] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0217.640] SetLastError (dwErrCode=0x0) [0217.640] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.640] GetLastError () returned 0xb7 [0217.641] CloseHandle (hObject=0x620) returned 1 [0217.641] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\RoamingState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d280 [0217.643] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.643] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0217.643] FindClose (in: hFindFile=0x665d90d280 | out: hFindFile=0x665d90d280) returned 1 [0217.643] SetLastError (dwErrCode=0x0) [0217.643] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\RoamingState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\roamingstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.644] GetLastError () returned 0x0 [0217.644] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0217.645] CloseHandle (hObject=0x620) returned 1 [0217.645] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0217.645] SetLastError (dwErrCode=0x0) [0217.645] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.645] GetLastError () returned 0xb7 [0217.645] CloseHandle (hObject=0x620) returned 1 [0217.645] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Settings\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bfc0 [0217.645] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.645] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.645] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0217.645] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Settings\\roaming.lock", dwFileAttributes=0x80) returned 1 [0217.646] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0217.646] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=0) returned 1 [0217.646] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=0) returned 1 [0217.647] CloseHandle (hObject=0x3e8) returned 1 [0217.647] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0217.647] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.647] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0217.647] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Settings\\settings.dat", dwFileAttributes=0x80) returned 1 [0217.647] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0217.648] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=8192) returned 1 [0217.648] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=8192) returned 1 [0217.648] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x1ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.648] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0217.649] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0217.649] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9aab0) returned 1 [0217.649] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0217.650] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0217.650] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0x2000, lpOverlapped=0x0) returned 1 [0217.650] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0217.650] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2010) returned 1 [0217.651] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0217.651] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0x2010, lpOverlapped=0x0) returned 1 [0217.651] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0217.651] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0217.651] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0217.651] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0217.651] CloseHandle (hObject=0x3e8) returned 1 [0217.667] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0217.671] CryptDestroyKey (hKey=0x665ab9aab0) returned 1 [0217.671] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0217.671] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0217.672] FindClose (in: hFindFile=0x665d90bfc0 | out: hFindFile=0x665d90bfc0) returned 1 [0217.672] SetLastError (dwErrCode=0x0) [0217.672] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Settings\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\settings\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.672] GetLastError () returned 0x0 [0217.672] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0217.673] CloseHandle (hObject=0x620) returned 1 [0217.673] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0217.673] SetLastError (dwErrCode=0x0) [0217.673] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.674] GetLastError () returned 0xb7 [0217.674] CloseHandle (hObject=0x620) returned 1 [0217.674] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\SystemAppData\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c320 [0217.674] FindNextFileW (in: hFindFile=0x665d90c320, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.674] FindNextFileW (in: hFindFile=0x665d90c320, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0217.674] FindClose (in: hFindFile=0x665d90c320 | out: hFindFile=0x665d90c320) returned 1 [0217.674] SetLastError (dwErrCode=0x0) [0217.674] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\SystemAppData\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\systemappdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.675] GetLastError () returned 0x0 [0217.675] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0217.676] CloseHandle (hObject=0x620) returned 1 [0217.676] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0217.676] SetLastError (dwErrCode=0x0) [0217.676] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.676] GetLastError () returned 0xb7 [0217.676] CloseHandle (hObject=0x620) returned 1 [0217.676] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\TempState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bc60 [0217.676] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.676] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0217.676] FindClose (in: hFindFile=0x665d90bc60 | out: hFindFile=0x665d90bc60) returned 1 [0217.676] SetLastError (dwErrCode=0x0) [0217.676] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\TempState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\tempstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.677] GetLastError () returned 0x0 [0217.677] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0217.678] CloseHandle (hObject=0x620) returned 1 [0217.678] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0217.678] FindClose (in: hFindFile=0x665d90c080 | out: hFindFile=0x665d90c080) returned 1 [0217.678] SetLastError (dwErrCode=0x0) [0217.678] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0217.678] GetLastError () returned 0xb7 [0217.678] CloseHandle (hObject=0x60c) returned 1 [0217.678] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0217.678] SetLastError (dwErrCode=0x0) [0217.678] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0217.679] GetLastError () returned 0xb7 [0217.679] CloseHandle (hObject=0x60c) returned 1 [0217.679] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c1a0 [0217.680] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0217.680] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0217.681] SetLastError (dwErrCode=0x0) [0217.681] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.681] GetLastError () returned 0x0 [0217.681] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0217.682] CloseHandle (hObject=0x620) returned 1 [0217.682] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AC\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c560 [0217.684] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.684] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.684] SetLastError (dwErrCode=0x0) [0217.684] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0217.686] GetLastError () returned 0x0 [0217.686] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0217.687] CloseHandle (hObject=0x3e8) returned 1 [0217.689] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AC\\INetCache\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90d280 [0217.690] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0217.690] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0217.690] FindClose (in: hFindFile=0x665d90d280 | out: hFindFile=0x665d90d280) returned 1 [0217.690] SetLastError (dwErrCode=0x0) [0217.690] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AC\\INetCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\ac\\inetcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0217.691] GetLastError () returned 0x0 [0217.691] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0217.692] CloseHandle (hObject=0x3e8) returned 1 [0217.692] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.692] SetLastError (dwErrCode=0x0) [0217.692] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0217.693] GetLastError () returned 0xb7 [0217.693] CloseHandle (hObject=0x3e8) returned 1 [0217.693] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AC\\INetCookies\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90cc80 [0217.693] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0217.693] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0217.693] FindClose (in: hFindFile=0x665d90cc80 | out: hFindFile=0x665d90cc80) returned 1 [0217.693] SetLastError (dwErrCode=0x0) [0217.693] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AC\\INetCookies\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\ac\\inetcookies\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0217.693] GetLastError () returned 0x0 [0217.693] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0217.694] CloseHandle (hObject=0x3e8) returned 1 [0217.694] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.694] SetLastError (dwErrCode=0x0) [0217.694] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0217.695] GetLastError () returned 0xb7 [0217.695] CloseHandle (hObject=0x3e8) returned 1 [0217.695] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AC\\INetHistory\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c080 [0217.695] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0217.695] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0217.695] FindClose (in: hFindFile=0x665d90c080 | out: hFindFile=0x665d90c080) returned 1 [0217.695] SetLastError (dwErrCode=0x0) [0217.695] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AC\\INetHistory\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\ac\\inethistory\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0217.696] GetLastError () returned 0x0 [0217.696] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0217.697] CloseHandle (hObject=0x3e8) returned 1 [0217.697] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.697] SetLastError (dwErrCode=0x0) [0217.697] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0217.697] GetLastError () returned 0xb7 [0217.697] CloseHandle (hObject=0x3e8) returned 1 [0217.697] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AC\\Temp\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c260 [0217.698] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0217.698] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0217.698] FindClose (in: hFindFile=0x665d90c260 | out: hFindFile=0x665d90c260) returned 1 [0217.698] SetLastError (dwErrCode=0x0) [0217.698] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AC\\Temp\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\ac\\temp\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0217.699] GetLastError () returned 0x0 [0217.699] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0217.700] CloseHandle (hObject=0x3e8) returned 1 [0217.700] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0217.700] FindClose (in: hFindFile=0x665d90c560 | out: hFindFile=0x665d90c560) returned 1 [0217.700] SetLastError (dwErrCode=0x0) [0217.700] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.701] GetLastError () returned 0xb7 [0217.701] CloseHandle (hObject=0x620) returned 1 [0217.701] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0217.701] SetLastError (dwErrCode=0x0) [0217.701] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.701] GetLastError () returned 0xb7 [0217.701] CloseHandle (hObject=0x620) returned 1 [0217.701] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AppData\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c200 [0217.701] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.701] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0217.701] FindClose (in: hFindFile=0x665d90c200 | out: hFindFile=0x665d90c200) returned 1 [0217.701] SetLastError (dwErrCode=0x0) [0217.701] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AppData\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\appdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.702] GetLastError () returned 0x0 [0217.702] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0217.703] CloseHandle (hObject=0x620) returned 1 [0217.703] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0217.703] SetLastError (dwErrCode=0x0) [0217.703] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.703] GetLastError () returned 0xb7 [0217.703] CloseHandle (hObject=0x620) returned 1 [0217.703] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\LocalCache\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bc60 [0217.703] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.703] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0217.703] FindClose (in: hFindFile=0x665d90bc60 | out: hFindFile=0x665d90bc60) returned 1 [0217.703] SetLastError (dwErrCode=0x0) [0217.703] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\LocalCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\localcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.704] GetLastError () returned 0x0 [0217.704] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0217.705] CloseHandle (hObject=0x620) returned 1 [0217.705] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0217.705] SetLastError (dwErrCode=0x0) [0217.705] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.705] GetLastError () returned 0xb7 [0217.705] CloseHandle (hObject=0x620) returned 1 [0217.705] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\LocalState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90ca40 [0217.705] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.705] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0217.705] FindClose (in: hFindFile=0x665d90ca40 | out: hFindFile=0x665d90ca40) returned 1 [0217.705] SetLastError (dwErrCode=0x0) [0217.705] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\LocalState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\localstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.709] GetLastError () returned 0x0 [0217.709] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0217.709] CloseHandle (hObject=0x620) returned 1 [0217.709] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0217.709] SetLastError (dwErrCode=0x0) [0217.709] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.710] GetLastError () returned 0xb7 [0217.710] CloseHandle (hObject=0x620) returned 1 [0217.710] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bd20 [0217.710] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.710] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.710] SetLastError (dwErrCode=0x0) [0217.710] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\microsoft.people_1.10159.0.0_x64__8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0217.711] GetLastError () returned 0x0 [0217.711] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0217.712] CloseHandle (hObject=0x3e8) returned 1 [0217.712] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bd80 [0217.729] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0217.729] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0217.729] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0217.729] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", dwFileAttributes=0x80) returned 1 [0217.730] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\microsoft.people_1.10159.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0217.731] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=32768) returned 1 [0217.731] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=32768) returned 1 [0217.731] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x7ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.731] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0217.732] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0217.732] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a180) returned 1 [0217.732] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0217.732] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0217.732] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x8000, lpOverlapped=0x0) returned 1 [0217.863] CryptEncrypt (in: hKey=0x665ab9a180, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0217.863] CryptEncrypt (in: hKey=0x665ab9a180, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x8000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x8010) returned 1 [0217.863] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0217.863] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x8010, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x8010, lpOverlapped=0x0) returned 1 [0217.864] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0217.864] CryptExportKey (in: hKey=0x665ab9a180, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0217.864] CryptExportKey (in: hKey=0x665ab9a180, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0217.864] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0217.864] CloseHandle (hObject=0x654) returned 1 [0217.878] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0217.882] CryptDestroyKey (hKey=0x665ab9a180) returned 1 [0217.882] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0217.882] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0217.882] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0217.882] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", dwFileAttributes=0x80) returned 1 [0217.883] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\microsoft.people_1.10159.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0217.883] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=28672) returned 1 [0217.883] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=28672) returned 1 [0217.883] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x6ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.883] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0217.884] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0217.884] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9aea0) returned 1 [0217.884] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0217.885] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0217.885] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x7000, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x7000, lpOverlapped=0x0) returned 1 [0217.945] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0217.945] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x7000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x7010) returned 1 [0217.945] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0217.945] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x7010, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x7010, lpOverlapped=0x0) returned 1 [0217.946] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0217.946] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0217.946] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0217.946] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0217.946] CloseHandle (hObject=0x654) returned 1 [0217.960] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0217.964] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0217.965] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0217.965] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0217.965] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0217.965] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", dwFileAttributes=0x80) returned 1 [0217.966] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\microsoft.people_1.10159.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0217.966] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=0) returned 1 [0217.966] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=0) returned 1 [0217.966] CloseHandle (hObject=0x654) returned 1 [0217.966] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0217.967] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0217.967] FindClose (in: hFindFile=0x665d90bd80 | out: hFindFile=0x665d90bd80) returned 1 [0217.967] SetLastError (dwErrCode=0x0) [0217.967] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\microsoft.people_1.10159.0.0_x64__8wekyb3d8bbwe\\activationstore\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0217.969] GetLastError () returned 0x0 [0217.969] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0217.970] CloseHandle (hObject=0x3e8) returned 1 [0217.970] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0217.970] FindClose (in: hFindFile=0x665d90bd20 | out: hFindFile=0x665d90bd20) returned 1 [0217.970] SetLastError (dwErrCode=0x0) [0217.970] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\microsoft.people_1.10159.0.0_x64__8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.970] GetLastError () returned 0xb7 [0217.970] CloseHandle (hObject=0x620) returned 1 [0217.970] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0217.970] SetLastError (dwErrCode=0x0) [0217.970] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.970] GetLastError () returned 0xb7 [0217.970] CloseHandle (hObject=0x620) returned 1 [0217.970] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\RoamingState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bd80 [0217.971] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.971] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0217.971] FindClose (in: hFindFile=0x665d90bd80 | out: hFindFile=0x665d90bd80) returned 1 [0217.971] SetLastError (dwErrCode=0x0) [0217.971] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\RoamingState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\roamingstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.972] GetLastError () returned 0x0 [0217.972] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0217.972] CloseHandle (hObject=0x620) returned 1 [0217.973] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0217.973] SetLastError (dwErrCode=0x0) [0217.973] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0217.973] GetLastError () returned 0xb7 [0217.973] CloseHandle (hObject=0x620) returned 1 [0217.973] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Settings\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d0a0 [0217.973] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.973] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.973] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0217.973] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Settings\\roaming.lock", dwFileAttributes=0x80) returned 1 [0217.974] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0217.974] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=0) returned 1 [0217.974] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=0) returned 1 [0217.974] CloseHandle (hObject=0x3e8) returned 1 [0217.974] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0217.975] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0217.975] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0217.975] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Settings\\settings.dat", dwFileAttributes=0x80) returned 1 [0217.975] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0217.976] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=8192) returned 1 [0217.976] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=8192) returned 1 [0217.976] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x1ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.976] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0217.977] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0217.977] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9a880) returned 1 [0217.977] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0217.977] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0217.977] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0x2000, lpOverlapped=0x0) returned 1 [0217.978] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0217.978] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2010) returned 1 [0217.978] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0217.978] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0x2010, lpOverlapped=0x0) returned 1 [0217.978] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0217.978] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0217.979] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0217.979] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0217.979] CloseHandle (hObject=0x3e8) returned 1 [0217.995] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0217.999] CryptDestroyKey (hKey=0x665ab9a880) returned 1 [0217.999] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0217.999] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0218.000] FindClose (in: hFindFile=0x665d90d0a0 | out: hFindFile=0x665d90d0a0) returned 1 [0218.000] SetLastError (dwErrCode=0x0) [0218.000] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Settings\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\settings\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.000] GetLastError () returned 0x0 [0218.000] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0218.001] CloseHandle (hObject=0x620) returned 1 [0218.002] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0218.002] SetLastError (dwErrCode=0x0) [0218.002] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.002] GetLastError () returned 0xb7 [0218.002] CloseHandle (hObject=0x620) returned 1 [0218.002] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\SystemAppData\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c4a0 [0218.002] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.002] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0218.002] FindClose (in: hFindFile=0x665d90c4a0 | out: hFindFile=0x665d90c4a0) returned 1 [0218.002] SetLastError (dwErrCode=0x0) [0218.002] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\SystemAppData\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\systemappdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.004] GetLastError () returned 0x0 [0218.004] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0218.005] CloseHandle (hObject=0x620) returned 1 [0218.005] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0218.005] SetLastError (dwErrCode=0x0) [0218.005] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.005] GetLastError () returned 0xb7 [0218.005] CloseHandle (hObject=0x620) returned 1 [0218.005] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\TempState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d280 [0218.006] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.006] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0218.006] FindClose (in: hFindFile=0x665d90d280 | out: hFindFile=0x665d90d280) returned 1 [0218.006] SetLastError (dwErrCode=0x0) [0218.006] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\TempState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\tempstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.007] GetLastError () returned 0x0 [0218.007] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0218.008] CloseHandle (hObject=0x620) returned 1 [0218.008] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0218.008] FindClose (in: hFindFile=0x665d90c1a0 | out: hFindFile=0x665d90c1a0) returned 1 [0218.008] SetLastError (dwErrCode=0x0) [0218.008] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0218.008] GetLastError () returned 0xb7 [0218.008] CloseHandle (hObject=0x60c) returned 1 [0218.008] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0218.008] SetLastError (dwErrCode=0x0) [0218.008] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0218.009] GetLastError () returned 0xb7 [0218.009] CloseHandle (hObject=0x60c) returned 1 [0218.009] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90bd80 [0218.011] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0218.011] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0218.011] SetLastError (dwErrCode=0x0) [0218.011] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.012] GetLastError () returned 0x0 [0218.012] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0218.013] CloseHandle (hObject=0x620) returned 1 [0218.013] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AC\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c800 [0218.016] FindNextFileW (in: hFindFile=0x665d90c800, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.016] FindNextFileW (in: hFindFile=0x665d90c800, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.016] SetLastError (dwErrCode=0x0) [0218.016] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0218.017] GetLastError () returned 0x0 [0218.017] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0218.018] CloseHandle (hObject=0x3e8) returned 1 [0218.018] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AC\\INetCache\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90d100 [0218.019] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0218.019] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0218.019] FindClose (in: hFindFile=0x665d90d100 | out: hFindFile=0x665d90d100) returned 1 [0218.019] SetLastError (dwErrCode=0x0) [0218.019] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AC\\INetCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\ac\\inetcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0218.020] GetLastError () returned 0x0 [0218.020] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0218.021] CloseHandle (hObject=0x3e8) returned 1 [0218.021] FindNextFileW (in: hFindFile=0x665d90c800, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.021] SetLastError (dwErrCode=0x0) [0218.021] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0218.022] GetLastError () returned 0xb7 [0218.022] CloseHandle (hObject=0x3e8) returned 1 [0218.022] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AC\\INetCookies\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c080 [0218.022] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0218.022] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0218.022] FindClose (in: hFindFile=0x665d90c080 | out: hFindFile=0x665d90c080) returned 1 [0218.022] SetLastError (dwErrCode=0x0) [0218.022] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AC\\INetCookies\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\ac\\inetcookies\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0218.023] GetLastError () returned 0x0 [0218.023] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0218.024] CloseHandle (hObject=0x3e8) returned 1 [0218.024] FindNextFileW (in: hFindFile=0x665d90c800, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.024] SetLastError (dwErrCode=0x0) [0218.024] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0218.024] GetLastError () returned 0xb7 [0218.024] CloseHandle (hObject=0x3e8) returned 1 [0218.024] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AC\\INetHistory\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90d280 [0218.024] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0218.024] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0218.024] FindClose (in: hFindFile=0x665d90d280 | out: hFindFile=0x665d90d280) returned 1 [0218.025] SetLastError (dwErrCode=0x0) [0218.025] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AC\\INetHistory\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\ac\\inethistory\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0218.025] GetLastError () returned 0x0 [0218.025] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0218.026] CloseHandle (hObject=0x3e8) returned 1 [0218.026] FindNextFileW (in: hFindFile=0x665d90c800, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.026] SetLastError (dwErrCode=0x0) [0218.026] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0218.027] GetLastError () returned 0xb7 [0218.027] CloseHandle (hObject=0x3e8) returned 1 [0218.027] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AC\\Temp\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c080 [0218.027] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0218.027] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0218.027] FindClose (in: hFindFile=0x665d90c080 | out: hFindFile=0x665d90c080) returned 1 [0218.027] SetLastError (dwErrCode=0x0) [0218.027] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AC\\Temp\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\ac\\temp\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0218.028] GetLastError () returned 0x0 [0218.028] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0218.029] CloseHandle (hObject=0x3e8) returned 1 [0218.029] FindNextFileW (in: hFindFile=0x665d90c800, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0218.029] FindClose (in: hFindFile=0x665d90c800 | out: hFindFile=0x665d90c800) returned 1 [0218.029] SetLastError (dwErrCode=0x0) [0218.029] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.030] GetLastError () returned 0xb7 [0218.030] CloseHandle (hObject=0x620) returned 1 [0218.030] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0218.030] SetLastError (dwErrCode=0x0) [0218.030] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.030] GetLastError () returned 0xb7 [0218.030] CloseHandle (hObject=0x620) returned 1 [0218.030] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AppData\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c6e0 [0218.034] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.034] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0218.034] FindClose (in: hFindFile=0x665d90c6e0 | out: hFindFile=0x665d90c6e0) returned 1 [0218.034] SetLastError (dwErrCode=0x0) [0218.034] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AppData\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\appdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.035] GetLastError () returned 0x0 [0218.035] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0218.036] CloseHandle (hObject=0x620) returned 1 [0218.036] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0218.036] SetLastError (dwErrCode=0x0) [0218.036] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.036] GetLastError () returned 0xb7 [0218.036] CloseHandle (hObject=0x620) returned 1 [0218.036] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\LocalCache\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90ce60 [0218.037] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.037] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0218.037] FindClose (in: hFindFile=0x665d90ce60 | out: hFindFile=0x665d90ce60) returned 1 [0218.037] SetLastError (dwErrCode=0x0) [0218.037] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\LocalCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\localcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.037] GetLastError () returned 0x0 [0218.037] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0218.038] CloseHandle (hObject=0x620) returned 1 [0218.038] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0218.038] SetLastError (dwErrCode=0x0) [0218.038] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.038] GetLastError () returned 0xb7 [0218.038] CloseHandle (hObject=0x620) returned 1 [0218.038] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\LocalState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bc60 [0218.039] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.039] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0218.039] FindClose (in: hFindFile=0x665d90bc60 | out: hFindFile=0x665d90bc60) returned 1 [0218.039] SetLastError (dwErrCode=0x0) [0218.039] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\LocalState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\localstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.039] GetLastError () returned 0x0 [0218.039] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0218.040] CloseHandle (hObject=0x620) returned 1 [0218.040] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0218.040] SetLastError (dwErrCode=0x0) [0218.040] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.040] GetLastError () returned 0xb7 [0218.041] CloseHandle (hObject=0x620) returned 1 [0218.041] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d340 [0218.041] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.041] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.041] SetLastError (dwErrCode=0x0) [0218.041] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\microsoft.skypeapp_3.2.1.0_x86__kzf8qxf38zg5c\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0218.042] GetLastError () returned 0x0 [0218.042] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0218.043] CloseHandle (hObject=0x3e8) returned 1 [0218.043] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90d040 [0218.045] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0218.045] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0218.045] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0218.046] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore\\ActivationStore.dat", dwFileAttributes=0x80) returned 1 [0218.046] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\microsoft.skypeapp_3.2.1.0_x86__kzf8qxf38zg5c\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0218.047] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=8192) returned 1 [0218.047] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=8192) returned 1 [0218.047] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x1ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.047] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0218.048] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0218.048] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9aab0) returned 1 [0218.048] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0218.048] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0218.048] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x2000, lpOverlapped=0x0) returned 1 [0218.049] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0218.049] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x2000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x2010) returned 1 [0218.049] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0218.049] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x2010, lpOverlapped=0x0) returned 1 [0218.050] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0218.050] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0218.050] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0218.050] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0218.050] CloseHandle (hObject=0x654) returned 1 [0218.065] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0218.069] CryptDestroyKey (hKey=0x665ab9aab0) returned 1 [0218.069] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0218.069] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0218.069] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0218.069] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore\\ActivationStore.dat.LOG1", dwFileAttributes=0x80) returned 1 [0218.070] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\microsoft.skypeapp_3.2.1.0_x86__kzf8qxf38zg5c\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0218.070] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=8192) returned 1 [0218.070] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=8192) returned 1 [0218.070] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x1ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.070] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0218.071] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0218.071] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a420) returned 1 [0218.071] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0218.072] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0218.072] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x2000, lpOverlapped=0x0) returned 1 [0218.072] CryptEncrypt (in: hKey=0x665ab9a420, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0218.072] CryptEncrypt (in: hKey=0x665ab9a420, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x2000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x2010) returned 1 [0218.072] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0218.072] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x2010, lpOverlapped=0x0) returned 1 [0218.073] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0218.073] CryptExportKey (in: hKey=0x665ab9a420, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0218.073] CryptExportKey (in: hKey=0x665ab9a420, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0218.073] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0218.073] CloseHandle (hObject=0x654) returned 1 [0218.089] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0218.093] CryptDestroyKey (hKey=0x665ab9a420) returned 1 [0218.093] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0218.094] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0218.094] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0218.094] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore\\ActivationStore.dat.LOG2", dwFileAttributes=0x80) returned 1 [0218.095] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\microsoft.skypeapp_3.2.1.0_x86__kzf8qxf38zg5c\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0218.095] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=0) returned 1 [0218.095] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=0) returned 1 [0218.095] CloseHandle (hObject=0x654) returned 1 [0218.095] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0218.096] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0218.096] FindClose (in: hFindFile=0x665d90d040 | out: hFindFile=0x665d90d040) returned 1 [0218.096] SetLastError (dwErrCode=0x0) [0218.096] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\microsoft.skypeapp_3.2.1.0_x86__kzf8qxf38zg5c\\activationstore\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0218.098] GetLastError () returned 0x0 [0218.098] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0218.099] CloseHandle (hObject=0x3e8) returned 1 [0218.099] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0218.099] FindClose (in: hFindFile=0x665d90d340 | out: hFindFile=0x665d90d340) returned 1 [0218.099] SetLastError (dwErrCode=0x0) [0218.099] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\microsoft.skypeapp_3.2.1.0_x86__kzf8qxf38zg5c\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.100] GetLastError () returned 0xb7 [0218.100] CloseHandle (hObject=0x620) returned 1 [0218.100] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0218.100] SetLastError (dwErrCode=0x0) [0218.100] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.100] GetLastError () returned 0xb7 [0218.100] CloseHandle (hObject=0x620) returned 1 [0218.100] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\RoamingState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d280 [0218.100] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.100] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0218.100] FindClose (in: hFindFile=0x665d90d280 | out: hFindFile=0x665d90d280) returned 1 [0218.100] SetLastError (dwErrCode=0x0) [0218.100] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\RoamingState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\roamingstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.101] GetLastError () returned 0x0 [0218.101] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0218.102] CloseHandle (hObject=0x620) returned 1 [0218.102] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0218.102] SetLastError (dwErrCode=0x0) [0218.102] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.102] GetLastError () returned 0xb7 [0218.102] CloseHandle (hObject=0x620) returned 1 [0218.102] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Settings\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c980 [0218.102] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.102] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.102] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0218.103] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Settings\\roaming.lock", dwFileAttributes=0x80) returned 1 [0218.103] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0218.103] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=0) returned 1 [0218.103] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=0) returned 1 [0218.103] CloseHandle (hObject=0x3e8) returned 1 [0218.103] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0218.104] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.104] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0218.104] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Settings\\settings.dat", dwFileAttributes=0x80) returned 1 [0218.104] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0218.105] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=8192) returned 1 [0218.105] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=8192) returned 1 [0218.105] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x1ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.105] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0218.106] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0218.106] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9a0a0) returned 1 [0218.106] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0218.106] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0218.106] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0x2000, lpOverlapped=0x0) returned 1 [0218.107] CryptEncrypt (in: hKey=0x665ab9a0a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0218.107] CryptEncrypt (in: hKey=0x665ab9a0a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2010) returned 1 [0218.107] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0218.107] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0x2010, lpOverlapped=0x0) returned 1 [0218.108] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0218.108] CryptExportKey (in: hKey=0x665ab9a0a0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0218.108] CryptExportKey (in: hKey=0x665ab9a0a0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0218.108] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0218.108] CloseHandle (hObject=0x3e8) returned 1 [0218.124] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0218.129] CryptDestroyKey (hKey=0x665ab9a0a0) returned 1 [0218.129] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0218.130] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0218.130] FindClose (in: hFindFile=0x665d90c980 | out: hFindFile=0x665d90c980) returned 1 [0218.130] SetLastError (dwErrCode=0x0) [0218.130] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Settings\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\settings\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.131] GetLastError () returned 0x0 [0218.131] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0218.132] CloseHandle (hObject=0x620) returned 1 [0218.132] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0218.132] SetLastError (dwErrCode=0x0) [0218.132] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.132] GetLastError () returned 0xb7 [0218.133] CloseHandle (hObject=0x620) returned 1 [0218.133] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\SystemAppData\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90cf20 [0218.133] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.133] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0218.133] FindClose (in: hFindFile=0x665d90cf20 | out: hFindFile=0x665d90cf20) returned 1 [0218.133] SetLastError (dwErrCode=0x0) [0218.133] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\SystemAppData\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\systemappdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.134] GetLastError () returned 0x0 [0218.134] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0218.135] CloseHandle (hObject=0x620) returned 1 [0218.135] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0218.135] SetLastError (dwErrCode=0x0) [0218.135] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.135] GetLastError () returned 0xb7 [0218.135] CloseHandle (hObject=0x620) returned 1 [0218.135] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\TempState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d040 [0218.136] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.136] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0218.136] FindClose (in: hFindFile=0x665d90d040 | out: hFindFile=0x665d90d040) returned 1 [0218.136] SetLastError (dwErrCode=0x0) [0218.136] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\TempState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\tempstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.136] GetLastError () returned 0x0 [0218.136] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0218.137] CloseHandle (hObject=0x620) returned 1 [0218.137] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0218.137] FindClose (in: hFindFile=0x665d90bd80 | out: hFindFile=0x665d90bd80) returned 1 [0218.137] SetLastError (dwErrCode=0x0) [0218.137] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0218.137] GetLastError () returned 0xb7 [0218.137] CloseHandle (hObject=0x60c) returned 1 [0218.138] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0218.138] SetLastError (dwErrCode=0x0) [0218.138] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0218.138] GetLastError () returned 0xb7 [0218.138] CloseHandle (hObject=0x60c) returned 1 [0218.138] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90cda0 [0218.140] FindNextFileW (in: hFindFile=0x665d90cda0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0218.140] FindNextFileW (in: hFindFile=0x665d90cda0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0218.140] SetLastError (dwErrCode=0x0) [0218.140] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.141] GetLastError () returned 0x0 [0218.141] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0218.141] CloseHandle (hObject=0x620) returned 1 [0218.142] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bc60 [0218.143] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.143] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.143] SetLastError (dwErrCode=0x0) [0218.143] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0218.145] GetLastError () returned 0x0 [0218.145] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0218.146] CloseHandle (hObject=0x3e8) returned 1 [0218.146] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC\\INetCache\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c0e0 [0218.146] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0218.146] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0218.146] FindClose (in: hFindFile=0x665d90c0e0 | out: hFindFile=0x665d90c0e0) returned 1 [0218.147] SetLastError (dwErrCode=0x0) [0218.147] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC\\INetCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\ac\\inetcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0218.148] GetLastError () returned 0x0 [0218.148] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0218.149] CloseHandle (hObject=0x3e8) returned 1 [0218.149] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.149] SetLastError (dwErrCode=0x0) [0218.149] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0218.149] GetLastError () returned 0xb7 [0218.149] CloseHandle (hObject=0x3e8) returned 1 [0218.149] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC\\INetCookies\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90be40 [0218.149] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0218.149] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0218.149] FindClose (in: hFindFile=0x665d90be40 | out: hFindFile=0x665d90be40) returned 1 [0218.149] SetLastError (dwErrCode=0x0) [0218.149] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC\\INetCookies\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\ac\\inetcookies\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0218.150] GetLastError () returned 0x0 [0218.150] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0218.151] CloseHandle (hObject=0x3e8) returned 1 [0218.151] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.151] SetLastError (dwErrCode=0x0) [0218.151] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0218.151] GetLastError () returned 0xb7 [0218.151] CloseHandle (hObject=0x3e8) returned 1 [0218.151] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC\\INetHistory\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bd20 [0218.151] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0218.151] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0218.151] FindClose (in: hFindFile=0x665d90bd20 | out: hFindFile=0x665d90bd20) returned 1 [0218.152] SetLastError (dwErrCode=0x0) [0218.152] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC\\INetHistory\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\ac\\inethistory\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0218.153] GetLastError () returned 0x0 [0218.153] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0218.154] CloseHandle (hObject=0x3e8) returned 1 [0218.154] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.154] SetLastError (dwErrCode=0x0) [0218.154] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0218.154] GetLastError () returned 0xb7 [0218.154] CloseHandle (hObject=0x3e8) returned 1 [0218.155] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC\\Temp\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90d040 [0218.155] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0218.155] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0218.155] FindClose (in: hFindFile=0x665d90d040 | out: hFindFile=0x665d90d040) returned 1 [0218.155] SetLastError (dwErrCode=0x0) [0218.155] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC\\Temp\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\ac\\temp\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0218.156] GetLastError () returned 0x0 [0218.156] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0218.157] CloseHandle (hObject=0x3e8) returned 1 [0218.157] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0218.157] FindClose (in: hFindFile=0x665d90bc60 | out: hFindFile=0x665d90bc60) returned 1 [0218.157] SetLastError (dwErrCode=0x0) [0218.157] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.158] GetLastError () returned 0xb7 [0218.158] CloseHandle (hObject=0x620) returned 1 [0218.158] FindNextFileW (in: hFindFile=0x665d90cda0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0218.158] SetLastError (dwErrCode=0x0) [0218.158] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.158] GetLastError () returned 0xb7 [0218.158] CloseHandle (hObject=0x620) returned 1 [0218.158] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AppData\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c020 [0218.158] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.158] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0218.158] FindClose (in: hFindFile=0x665d90c020 | out: hFindFile=0x665d90c020) returned 1 [0218.158] SetLastError (dwErrCode=0x0) [0218.158] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AppData\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\appdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.159] GetLastError () returned 0x0 [0218.159] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0218.160] CloseHandle (hObject=0x620) returned 1 [0218.160] FindNextFileW (in: hFindFile=0x665d90cda0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0218.160] SetLastError (dwErrCode=0x0) [0218.160] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.160] GetLastError () returned 0xb7 [0218.160] CloseHandle (hObject=0x620) returned 1 [0218.160] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\LocalCache\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c6e0 [0218.160] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.160] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0218.160] FindClose (in: hFindFile=0x665d90c6e0 | out: hFindFile=0x665d90c6e0) returned 1 [0218.161] SetLastError (dwErrCode=0x0) [0218.161] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\LocalCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\localcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.163] GetLastError () returned 0x0 [0218.163] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0218.164] CloseHandle (hObject=0x620) returned 1 [0218.164] FindNextFileW (in: hFindFile=0x665d90cda0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0218.164] SetLastError (dwErrCode=0x0) [0218.164] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.165] GetLastError () returned 0xb7 [0218.165] CloseHandle (hObject=0x620) returned 1 [0218.165] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\LocalState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c4a0 [0218.165] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.165] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0218.165] FindClose (in: hFindFile=0x665d90c4a0 | out: hFindFile=0x665d90c4a0) returned 1 [0218.165] SetLastError (dwErrCode=0x0) [0218.165] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\LocalState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\localstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.165] GetLastError () returned 0x0 [0218.165] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0218.166] CloseHandle (hObject=0x620) returned 1 [0218.166] FindNextFileW (in: hFindFile=0x665d90cda0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0218.166] SetLastError (dwErrCode=0x0) [0218.166] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.167] GetLastError () returned 0xb7 [0218.167] CloseHandle (hObject=0x620) returned 1 [0218.167] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\RoamingState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c260 [0218.167] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.167] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0218.167] FindClose (in: hFindFile=0x665d90c260 | out: hFindFile=0x665d90c260) returned 1 [0218.167] SetLastError (dwErrCode=0x0) [0218.167] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\RoamingState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\roamingstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.168] GetLastError () returned 0x0 [0218.168] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0218.169] CloseHandle (hObject=0x620) returned 1 [0218.169] FindNextFileW (in: hFindFile=0x665d90cda0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0218.169] SetLastError (dwErrCode=0x0) [0218.169] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.169] GetLastError () returned 0xb7 [0218.169] CloseHandle (hObject=0x620) returned 1 [0218.170] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bc60 [0218.171] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.171] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.171] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0218.171] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\roaming.lock", dwFileAttributes=0x80) returned 1 [0218.172] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0218.172] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=0) returned 1 [0218.172] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=0) returned 1 [0218.172] CloseHandle (hObject=0x3e8) returned 1 [0218.172] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0218.172] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.172] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0218.173] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat", dwFileAttributes=0x80) returned 1 [0218.173] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0218.173] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=8192) returned 1 [0218.173] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=8192) returned 1 [0218.173] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x1ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.173] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0218.175] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0218.175] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9af10) returned 1 [0218.175] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0218.175] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0218.175] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0x2000, lpOverlapped=0x0) returned 1 [0218.176] CryptEncrypt (in: hKey=0x665ab9af10, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0218.176] CryptEncrypt (in: hKey=0x665ab9af10, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2010) returned 1 [0218.176] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0218.176] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0x2010, lpOverlapped=0x0) returned 1 [0218.176] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0218.176] CryptExportKey (in: hKey=0x665ab9af10, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0218.176] CryptExportKey (in: hKey=0x665ab9af10, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0218.176] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0218.177] CloseHandle (hObject=0x3e8) returned 1 [0218.192] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0218.196] CryptDestroyKey (hKey=0x665ab9af10) returned 1 [0218.196] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0218.196] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.196] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0218.197] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1", dwFileAttributes=0x80) returned 1 [0218.198] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0218.198] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=8192) returned 1 [0218.198] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=8192) returned 1 [0218.198] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x1ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.198] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0218.199] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0218.199] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9ab20) returned 1 [0218.199] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0218.200] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0218.200] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0x2000, lpOverlapped=0x0) returned 1 [0218.277] CryptEncrypt (in: hKey=0x665ab9ab20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0218.277] CryptEncrypt (in: hKey=0x665ab9ab20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2010) returned 1 [0218.277] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0218.278] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0x2010, lpOverlapped=0x0) returned 1 [0218.278] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0218.278] CryptExportKey (in: hKey=0x665ab9ab20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0218.278] CryptExportKey (in: hKey=0x665ab9ab20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0218.278] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0218.278] CloseHandle (hObject=0x3e8) returned 1 [0218.294] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0218.298] CryptDestroyKey (hKey=0x665ab9ab20) returned 1 [0218.298] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0218.299] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.299] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0218.299] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", dwFileAttributes=0x80) returned 1 [0218.300] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\settings\\settings.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0218.300] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=0) returned 1 [0218.300] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=0) returned 1 [0218.300] CloseHandle (hObject=0x3e8) returned 1 [0218.300] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0218.301] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0218.301] FindClose (in: hFindFile=0x665d90bc60 | out: hFindFile=0x665d90bc60) returned 1 [0218.301] SetLastError (dwErrCode=0x0) [0218.301] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\settings\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.301] GetLastError () returned 0x0 [0218.302] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0218.302] CloseHandle (hObject=0x620) returned 1 [0218.303] FindNextFileW (in: hFindFile=0x665d90cda0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0218.303] SetLastError (dwErrCode=0x0) [0218.303] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.303] GetLastError () returned 0xb7 [0218.303] CloseHandle (hObject=0x620) returned 1 [0218.303] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\SystemAppData\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bd20 [0218.303] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.303] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0218.303] FindClose (in: hFindFile=0x665d90bd20 | out: hFindFile=0x665d90bd20) returned 1 [0218.303] SetLastError (dwErrCode=0x0) [0218.303] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\SystemAppData\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\systemappdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.304] GetLastError () returned 0x0 [0218.304] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0218.305] CloseHandle (hObject=0x620) returned 1 [0218.305] FindNextFileW (in: hFindFile=0x665d90cda0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0218.305] SetLastError (dwErrCode=0x0) [0218.305] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.305] GetLastError () returned 0xb7 [0218.305] CloseHandle (hObject=0x620) returned 1 [0218.305] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\TempState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bfc0 [0218.306] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.306] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0218.306] FindClose (in: hFindFile=0x665d90bfc0 | out: hFindFile=0x665d90bfc0) returned 1 [0218.306] SetLastError (dwErrCode=0x0) [0218.306] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\TempState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\tempstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.307] GetLastError () returned 0x0 [0218.307] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0218.308] CloseHandle (hObject=0x620) returned 1 [0218.308] FindNextFileW (in: hFindFile=0x665d90cda0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0218.308] FindClose (in: hFindFile=0x665d90cda0 | out: hFindFile=0x665d90cda0) returned 1 [0218.308] SetLastError (dwErrCode=0x0) [0218.308] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0218.309] GetLastError () returned 0xb7 [0218.309] CloseHandle (hObject=0x60c) returned 1 [0218.309] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0218.309] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0218.309] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0218.309] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0218.309] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0218.309] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0218.309] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0218.309] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0218.309] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0218.309] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0218.309] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0218.309] SetLastError (dwErrCode=0x0) [0218.309] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0218.310] GetLastError () returned 0xb7 [0218.310] CloseHandle (hObject=0x60c) returned 1 [0218.310] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90d0a0 [0218.312] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0218.312] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0218.312] SetLastError (dwErrCode=0x0) [0218.312] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.312] GetLastError () returned 0x0 [0218.313] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0218.313] CloseHandle (hObject=0x620) returned 1 [0218.313] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AC\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c560 [0218.316] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.316] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.316] SetLastError (dwErrCode=0x0) [0218.316] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0218.320] GetLastError () returned 0x0 [0218.320] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0218.321] CloseHandle (hObject=0x3e8) returned 1 [0218.321] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AC\\INetCache\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bea0 [0218.322] FindNextFileW (in: hFindFile=0x665d90bea0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0218.322] FindNextFileW (in: hFindFile=0x665d90bea0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0218.322] FindClose (in: hFindFile=0x665d90bea0 | out: hFindFile=0x665d90bea0) returned 1 [0218.322] SetLastError (dwErrCode=0x0) [0218.322] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AC\\INetCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\ac\\inetcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0218.322] GetLastError () returned 0x0 [0218.322] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0218.323] CloseHandle (hObject=0x3e8) returned 1 [0218.323] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.323] SetLastError (dwErrCode=0x0) [0218.323] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0218.324] GetLastError () returned 0xb7 [0218.324] CloseHandle (hObject=0x3e8) returned 1 [0218.324] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AC\\INetCookies\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c740 [0218.324] FindNextFileW (in: hFindFile=0x665d90c740, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0218.324] FindNextFileW (in: hFindFile=0x665d90c740, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0218.324] FindClose (in: hFindFile=0x665d90c740 | out: hFindFile=0x665d90c740) returned 1 [0218.324] SetLastError (dwErrCode=0x0) [0218.324] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AC\\INetCookies\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\ac\\inetcookies\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0218.325] GetLastError () returned 0x0 [0218.325] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0218.326] CloseHandle (hObject=0x3e8) returned 1 [0218.326] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.326] SetLastError (dwErrCode=0x0) [0218.326] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0218.327] GetLastError () returned 0xb7 [0218.327] CloseHandle (hObject=0x3e8) returned 1 [0218.327] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AC\\INetHistory\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c5c0 [0218.327] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0218.327] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0218.327] FindClose (in: hFindFile=0x665d90c5c0 | out: hFindFile=0x665d90c5c0) returned 1 [0218.327] SetLastError (dwErrCode=0x0) [0218.327] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AC\\INetHistory\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\ac\\inethistory\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0218.327] GetLastError () returned 0x0 [0218.327] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0218.328] CloseHandle (hObject=0x3e8) returned 1 [0218.328] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.328] SetLastError (dwErrCode=0x0) [0218.328] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0218.329] GetLastError () returned 0xb7 [0218.329] CloseHandle (hObject=0x3e8) returned 1 [0218.329] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AC\\Temp\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c980 [0218.329] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0218.329] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0218.329] FindClose (in: hFindFile=0x665d90c980 | out: hFindFile=0x665d90c980) returned 1 [0218.329] SetLastError (dwErrCode=0x0) [0218.329] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AC\\Temp\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\ac\\temp\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0218.330] GetLastError () returned 0x0 [0218.330] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0218.331] CloseHandle (hObject=0x3e8) returned 1 [0218.331] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0218.331] FindClose (in: hFindFile=0x665d90c560 | out: hFindFile=0x665d90c560) returned 1 [0218.331] SetLastError (dwErrCode=0x0) [0218.331] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.331] GetLastError () returned 0xb7 [0218.331] CloseHandle (hObject=0x620) returned 1 [0218.331] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0218.331] SetLastError (dwErrCode=0x0) [0218.331] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.331] GetLastError () returned 0xb7 [0218.331] CloseHandle (hObject=0x620) returned 1 [0218.332] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AppData\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90cb60 [0218.332] FindNextFileW (in: hFindFile=0x665d90cb60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.332] FindNextFileW (in: hFindFile=0x665d90cb60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0218.332] FindClose (in: hFindFile=0x665d90cb60 | out: hFindFile=0x665d90cb60) returned 1 [0218.332] SetLastError (dwErrCode=0x0) [0218.332] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AppData\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\appdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.333] GetLastError () returned 0x0 [0218.333] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0218.334] CloseHandle (hObject=0x620) returned 1 [0218.334] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0218.334] SetLastError (dwErrCode=0x0) [0218.334] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.334] GetLastError () returned 0xb7 [0218.334] CloseHandle (hObject=0x620) returned 1 [0218.334] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\LocalCache\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c1a0 [0218.334] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.334] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0218.334] FindClose (in: hFindFile=0x665d90c1a0 | out: hFindFile=0x665d90c1a0) returned 1 [0218.334] SetLastError (dwErrCode=0x0) [0218.334] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\LocalCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\localcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.335] GetLastError () returned 0x0 [0218.335] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0218.336] CloseHandle (hObject=0x620) returned 1 [0218.336] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0218.336] SetLastError (dwErrCode=0x0) [0218.336] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.336] GetLastError () returned 0xb7 [0218.336] CloseHandle (hObject=0x620) returned 1 [0218.337] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\LocalState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c800 [0218.337] FindNextFileW (in: hFindFile=0x665d90c800, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.337] FindNextFileW (in: hFindFile=0x665d90c800, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0218.337] FindClose (in: hFindFile=0x665d90c800 | out: hFindFile=0x665d90c800) returned 1 [0218.337] SetLastError (dwErrCode=0x0) [0218.337] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\LocalState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\localstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.337] GetLastError () returned 0x0 [0218.337] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0218.338] CloseHandle (hObject=0x620) returned 1 [0218.338] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0218.338] SetLastError (dwErrCode=0x0) [0218.338] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.339] GetLastError () returned 0xb7 [0218.339] CloseHandle (hObject=0x620) returned 1 [0218.339] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c380 [0218.344] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.344] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.344] SetLastError (dwErrCode=0x0) [0218.344] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0218.358] GetLastError () returned 0x0 [0218.358] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0218.359] CloseHandle (hObject=0x3e8) returned 1 [0218.359] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\ActivationStore\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c4a0 [0218.361] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0218.361] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0218.362] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0218.362] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", dwFileAttributes=0x80) returned 1 [0218.363] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0218.363] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=524288) returned 1 [0218.363] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=524288) returned 1 [0218.363] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x7fede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.363] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0218.364] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0218.364] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9aab0) returned 1 [0218.364] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0218.365] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0218.365] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x80000, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x80000, lpOverlapped=0x0) returned 1 [0218.377] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0218.377] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x80000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x80010) returned 1 [0218.378] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0218.378] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x80010, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x80010, lpOverlapped=0x0) returned 1 [0218.380] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0218.380] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0218.380] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0218.381] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0218.381] CloseHandle (hObject=0x654) returned 1 [0218.392] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0218.397] CryptDestroyKey (hKey=0x665ab9aab0) returned 1 [0218.397] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0218.397] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0218.397] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0218.397] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", dwFileAttributes=0x80) returned 1 [0218.398] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0218.399] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=0) returned 1 [0218.399] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=0) returned 1 [0218.399] CloseHandle (hObject=0x654) returned 1 [0218.399] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0218.399] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0218.399] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0218.399] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", dwFileAttributes=0x80) returned 1 [0218.400] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0218.401] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=0) returned 1 [0218.401] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=0) returned 1 [0218.401] CloseHandle (hObject=0x654) returned 1 [0218.401] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0218.401] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0218.401] FindClose (in: hFindFile=0x665d90c4a0 | out: hFindFile=0x665d90c4a0) returned 1 [0218.401] SetLastError (dwErrCode=0x0) [0218.401] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\ActivationStore\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\activationstore\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0218.403] GetLastError () returned 0x0 [0218.403] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0218.404] CloseHandle (hObject=0x3e8) returned 1 [0218.404] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0218.404] FindClose (in: hFindFile=0x665d90c380 | out: hFindFile=0x665d90c380) returned 1 [0218.404] SetLastError (dwErrCode=0x0) [0218.404] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.404] GetLastError () returned 0xb7 [0218.404] CloseHandle (hObject=0x620) returned 1 [0218.405] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0218.405] SetLastError (dwErrCode=0x0) [0218.405] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.405] GetLastError () returned 0xb7 [0218.405] CloseHandle (hObject=0x620) returned 1 [0218.405] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\RoamingState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c8c0 [0218.407] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.407] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0218.407] FindClose (in: hFindFile=0x665d90c8c0 | out: hFindFile=0x665d90c8c0) returned 1 [0218.407] SetLastError (dwErrCode=0x0) [0218.407] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\RoamingState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\roamingstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.408] GetLastError () returned 0x0 [0218.408] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0218.409] CloseHandle (hObject=0x620) returned 1 [0218.409] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0218.409] SetLastError (dwErrCode=0x0) [0218.409] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.410] GetLastError () returned 0xb7 [0218.410] CloseHandle (hObject=0x620) returned 1 [0218.410] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\Settings\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d100 [0218.410] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.410] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.410] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0218.411] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\Settings\\roaming.lock", dwFileAttributes=0x80) returned 1 [0218.411] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0218.412] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=0) returned 1 [0218.412] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=0) returned 1 [0218.412] CloseHandle (hObject=0x3e8) returned 1 [0218.412] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0218.412] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.412] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0218.412] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\Settings\\settings.dat", dwFileAttributes=0x80) returned 1 [0218.413] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0218.413] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=8192) returned 1 [0218.413] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=8192) returned 1 [0218.413] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x1ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.414] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0218.415] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0218.415] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9aab0) returned 1 [0218.415] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0218.415] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0218.415] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0x2000, lpOverlapped=0x0) returned 1 [0218.416] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0218.416] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2010) returned 1 [0218.416] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0218.416] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0x2010, lpOverlapped=0x0) returned 1 [0218.417] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0218.417] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0218.417] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0218.417] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0218.417] CloseHandle (hObject=0x3e8) returned 1 [0218.435] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0218.442] CryptDestroyKey (hKey=0x665ab9aab0) returned 1 [0218.442] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0218.442] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0218.442] FindClose (in: hFindFile=0x665d90d100 | out: hFindFile=0x665d90d100) returned 1 [0218.442] SetLastError (dwErrCode=0x0) [0218.443] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\Settings\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\settings\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.443] GetLastError () returned 0x0 [0218.443] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0218.444] CloseHandle (hObject=0x620) returned 1 [0218.444] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0218.444] SetLastError (dwErrCode=0x0) [0218.444] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.445] GetLastError () returned 0xb7 [0218.445] CloseHandle (hObject=0x620) returned 1 [0218.445] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\SystemAppData\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c6e0 [0218.445] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.445] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0218.445] FindClose (in: hFindFile=0x665d90c6e0 | out: hFindFile=0x665d90c6e0) returned 1 [0218.445] SetLastError (dwErrCode=0x0) [0218.445] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\SystemAppData\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\systemappdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.446] GetLastError () returned 0x0 [0218.446] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0218.447] CloseHandle (hObject=0x620) returned 1 [0218.447] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0218.447] SetLastError (dwErrCode=0x0) [0218.447] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.447] GetLastError () returned 0xb7 [0218.447] CloseHandle (hObject=0x620) returned 1 [0218.447] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\TempState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90cec0 [0218.447] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.447] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0218.447] FindClose (in: hFindFile=0x665d90cec0 | out: hFindFile=0x665d90cec0) returned 1 [0218.447] SetLastError (dwErrCode=0x0) [0218.447] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\TempState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\tempstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.449] GetLastError () returned 0x0 [0218.449] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0218.450] CloseHandle (hObject=0x620) returned 1 [0218.450] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0218.450] FindClose (in: hFindFile=0x665d90d0a0 | out: hFindFile=0x665d90d0a0) returned 1 [0218.450] SetLastError (dwErrCode=0x0) [0218.450] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0218.451] GetLastError () returned 0xb7 [0218.451] CloseHandle (hObject=0x60c) returned 1 [0218.451] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0218.451] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0218.451] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0218.451] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0218.451] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0218.451] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0218.451] SetLastError (dwErrCode=0x0) [0218.451] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0218.452] GetLastError () returned 0xb7 [0218.452] CloseHandle (hObject=0x60c) returned 1 [0218.452] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90cd40 [0218.452] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0218.452] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0218.452] SetLastError (dwErrCode=0x0) [0218.452] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.453] GetLastError () returned 0x0 [0218.453] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0218.454] CloseHandle (hObject=0x620) returned 1 [0218.454] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AC\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c0e0 [0218.504] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.504] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.504] SetLastError (dwErrCode=0x0) [0218.504] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0218.505] GetLastError () returned 0x0 [0218.505] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0218.506] CloseHandle (hObject=0x3e8) returned 1 [0218.506] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AC\\INetCache\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90d340 [0218.507] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0218.507] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0218.507] FindClose (in: hFindFile=0x665d90d340 | out: hFindFile=0x665d90d340) returned 1 [0218.507] SetLastError (dwErrCode=0x0) [0218.507] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AC\\INetCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\ac\\inetcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0218.508] GetLastError () returned 0x0 [0218.508] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0218.509] CloseHandle (hObject=0x3e8) returned 1 [0218.509] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.509] SetLastError (dwErrCode=0x0) [0218.509] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0218.509] GetLastError () returned 0xb7 [0218.509] CloseHandle (hObject=0x3e8) returned 1 [0218.509] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AC\\INetCookies\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90d340 [0218.510] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0218.510] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0218.510] FindClose (in: hFindFile=0x665d90d340 | out: hFindFile=0x665d90d340) returned 1 [0218.510] SetLastError (dwErrCode=0x0) [0218.510] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AC\\INetCookies\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\ac\\inetcookies\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0218.511] GetLastError () returned 0x0 [0218.511] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0218.512] CloseHandle (hObject=0x3e8) returned 1 [0218.512] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.512] SetLastError (dwErrCode=0x0) [0218.512] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0218.512] GetLastError () returned 0xb7 [0218.512] CloseHandle (hObject=0x3e8) returned 1 [0218.512] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AC\\INetHistory\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c500 [0218.513] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0218.513] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0218.513] FindClose (in: hFindFile=0x665d90c500 | out: hFindFile=0x665d90c500) returned 1 [0218.513] SetLastError (dwErrCode=0x0) [0218.513] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AC\\INetHistory\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\ac\\inethistory\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0218.514] GetLastError () returned 0x0 [0218.514] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0218.515] CloseHandle (hObject=0x3e8) returned 1 [0218.515] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.515] SetLastError (dwErrCode=0x0) [0218.515] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0218.515] GetLastError () returned 0xb7 [0218.515] CloseHandle (hObject=0x3e8) returned 1 [0218.515] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AC\\Temp\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c6e0 [0218.515] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0218.515] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0218.515] FindClose (in: hFindFile=0x665d90c6e0 | out: hFindFile=0x665d90c6e0) returned 1 [0218.516] SetLastError (dwErrCode=0x0) [0218.516] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AC\\Temp\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\ac\\temp\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0218.516] GetLastError () returned 0x0 [0218.516] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0218.517] CloseHandle (hObject=0x3e8) returned 1 [0218.517] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0218.517] FindClose (in: hFindFile=0x665d90c0e0 | out: hFindFile=0x665d90c0e0) returned 1 [0218.517] SetLastError (dwErrCode=0x0) [0218.517] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.517] GetLastError () returned 0xb7 [0218.517] CloseHandle (hObject=0x620) returned 1 [0218.517] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0218.517] SetLastError (dwErrCode=0x0) [0218.517] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.518] GetLastError () returned 0xb7 [0218.518] CloseHandle (hObject=0x620) returned 1 [0218.518] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AppData\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d1c0 [0218.518] FindNextFileW (in: hFindFile=0x665d90d1c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.518] FindNextFileW (in: hFindFile=0x665d90d1c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0218.518] FindClose (in: hFindFile=0x665d90d1c0 | out: hFindFile=0x665d90d1c0) returned 1 [0218.518] SetLastError (dwErrCode=0x0) [0218.518] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AppData\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\appdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.519] GetLastError () returned 0x0 [0218.519] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0218.520] CloseHandle (hObject=0x620) returned 1 [0218.520] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0218.520] SetLastError (dwErrCode=0x0) [0218.520] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.520] GetLastError () returned 0xb7 [0218.520] CloseHandle (hObject=0x620) returned 1 [0218.520] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\LocalCache\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90be40 [0218.521] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.521] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0218.521] FindClose (in: hFindFile=0x665d90be40 | out: hFindFile=0x665d90be40) returned 1 [0218.521] SetLastError (dwErrCode=0x0) [0218.521] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\LocalCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\localcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.521] GetLastError () returned 0x0 [0218.521] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0218.522] CloseHandle (hObject=0x620) returned 1 [0218.522] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0218.522] SetLastError (dwErrCode=0x0) [0218.522] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.523] GetLastError () returned 0xb7 [0218.523] CloseHandle (hObject=0x620) returned 1 [0218.523] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\LocalState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c860 [0218.523] FindNextFileW (in: hFindFile=0x665d90c860, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.523] FindNextFileW (in: hFindFile=0x665d90c860, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0218.523] FindClose (in: hFindFile=0x665d90c860 | out: hFindFile=0x665d90c860) returned 1 [0218.523] SetLastError (dwErrCode=0x0) [0218.523] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\LocalState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\localstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.524] GetLastError () returned 0x0 [0218.524] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0218.525] CloseHandle (hObject=0x620) returned 1 [0218.525] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0218.525] SetLastError (dwErrCode=0x0) [0218.525] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.525] GetLastError () returned 0xb7 [0218.525] CloseHandle (hObject=0x620) returned 1 [0218.525] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c440 [0218.525] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.525] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.525] SetLastError (dwErrCode=0x0) [0218.525] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\microsoft.xboxapp_5.6.17000.0_x64__8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0218.527] GetLastError () returned 0x0 [0218.527] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0218.528] CloseHandle (hObject=0x3e8) returned 1 [0218.528] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c560 [0218.530] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0218.530] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0218.530] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0218.530] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", dwFileAttributes=0x80) returned 1 [0218.531] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\microsoft.xboxapp_5.6.17000.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0218.532] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=65536) returned 1 [0218.532] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=65536) returned 1 [0218.532] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0xfede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.532] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0218.533] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0218.533] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9aea0) returned 1 [0218.533] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0218.533] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0218.533] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x10000, lpOverlapped=0x0) returned 1 [0218.568] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0218.568] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x10000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x10010) returned 1 [0218.569] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0218.569] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x10010, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x10010, lpOverlapped=0x0) returned 1 [0218.569] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0218.569] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0218.569] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0218.570] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0218.570] CloseHandle (hObject=0x654) returned 1 [0218.582] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0218.586] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0218.586] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0218.586] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0218.586] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0218.586] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", dwFileAttributes=0x80) returned 1 [0218.587] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\microsoft.xboxapp_5.6.17000.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0218.587] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=36864) returned 1 [0218.587] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=36864) returned 1 [0218.587] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x8ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.587] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0218.642] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0218.642] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9aea0) returned 1 [0218.642] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0218.642] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0218.642] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x9000, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x9000, lpOverlapped=0x0) returned 1 [0218.675] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0218.675] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x9000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x9010) returned 1 [0218.675] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0218.675] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x9010, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x9010, lpOverlapped=0x0) returned 1 [0218.676] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0218.676] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0218.676] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0218.676] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0218.676] CloseHandle (hObject=0x654) returned 1 [0218.690] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0218.694] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0218.694] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0218.694] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0218.694] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0218.695] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", dwFileAttributes=0x80) returned 1 [0218.696] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\microsoft.xboxapp_5.6.17000.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0218.697] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=0) returned 1 [0218.697] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=0) returned 1 [0218.697] CloseHandle (hObject=0x654) returned 1 [0218.697] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0218.697] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0218.697] FindClose (in: hFindFile=0x665d90c560 | out: hFindFile=0x665d90c560) returned 1 [0218.697] SetLastError (dwErrCode=0x0) [0218.697] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\microsoft.xboxapp_5.6.17000.0_x64__8wekyb3d8bbwe\\activationstore\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0218.698] GetLastError () returned 0x0 [0218.698] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0218.699] CloseHandle (hObject=0x3e8) returned 1 [0218.699] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0218.699] FindClose (in: hFindFile=0x665d90c440 | out: hFindFile=0x665d90c440) returned 1 [0218.699] SetLastError (dwErrCode=0x0) [0218.699] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\microsoft.xboxapp_5.6.17000.0_x64__8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.699] GetLastError () returned 0xb7 [0218.699] CloseHandle (hObject=0x620) returned 1 [0218.699] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0218.699] SetLastError (dwErrCode=0x0) [0218.699] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.699] GetLastError () returned 0xb7 [0218.699] CloseHandle (hObject=0x620) returned 1 [0218.699] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\RoamingState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d040 [0218.700] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.700] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0218.700] FindClose (in: hFindFile=0x665d90d040 | out: hFindFile=0x665d90d040) returned 1 [0218.700] SetLastError (dwErrCode=0x0) [0218.700] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\RoamingState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\roamingstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.701] GetLastError () returned 0x0 [0218.701] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0218.702] CloseHandle (hObject=0x620) returned 1 [0218.702] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0218.702] SetLastError (dwErrCode=0x0) [0218.702] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.702] GetLastError () returned 0xb7 [0218.702] CloseHandle (hObject=0x620) returned 1 [0218.702] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Settings\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c0e0 [0218.702] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.702] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.702] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0218.702] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Settings\\roaming.lock", dwFileAttributes=0x80) returned 1 [0218.703] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0218.703] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=0) returned 1 [0218.703] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=0) returned 1 [0218.703] CloseHandle (hObject=0x3e8) returned 1 [0218.703] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0218.704] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.704] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0218.704] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Settings\\settings.dat", dwFileAttributes=0x80) returned 1 [0218.704] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0218.705] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=8192) returned 1 [0218.705] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=8192) returned 1 [0218.705] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x1ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.705] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0218.706] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0218.706] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9aea0) returned 1 [0218.706] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0218.706] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0218.706] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0x2000, lpOverlapped=0x0) returned 1 [0218.707] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0218.707] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2010) returned 1 [0218.707] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0218.707] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0x2010, lpOverlapped=0x0) returned 1 [0218.708] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0218.708] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0218.708] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0218.708] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0218.708] CloseHandle (hObject=0x3e8) returned 1 [0218.727] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0218.732] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0218.732] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0218.733] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0218.733] FindClose (in: hFindFile=0x665d90c0e0 | out: hFindFile=0x665d90c0e0) returned 1 [0218.733] SetLastError (dwErrCode=0x0) [0218.733] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Settings\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\settings\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.734] GetLastError () returned 0x0 [0218.734] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0218.735] CloseHandle (hObject=0x620) returned 1 [0218.735] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0218.735] SetLastError (dwErrCode=0x0) [0218.735] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.736] GetLastError () returned 0xb7 [0218.736] CloseHandle (hObject=0x620) returned 1 [0218.736] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\SystemAppData\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90ca40 [0218.736] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.736] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0218.736] FindClose (in: hFindFile=0x665d90ca40 | out: hFindFile=0x665d90ca40) returned 1 [0218.736] SetLastError (dwErrCode=0x0) [0218.736] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\SystemAppData\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\systemappdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.737] GetLastError () returned 0x0 [0218.737] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0218.738] CloseHandle (hObject=0x620) returned 1 [0218.738] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0218.738] SetLastError (dwErrCode=0x0) [0218.738] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.738] GetLastError () returned 0xb7 [0218.738] CloseHandle (hObject=0x620) returned 1 [0218.738] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\TempState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d280 [0218.739] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.739] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0218.739] FindClose (in: hFindFile=0x665d90d280 | out: hFindFile=0x665d90d280) returned 1 [0218.739] SetLastError (dwErrCode=0x0) [0218.739] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\TempState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\tempstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.740] GetLastError () returned 0x0 [0218.740] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0218.741] CloseHandle (hObject=0x620) returned 1 [0218.741] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0218.741] FindClose (in: hFindFile=0x665d90cd40 | out: hFindFile=0x665d90cd40) returned 1 [0218.741] SetLastError (dwErrCode=0x0) [0218.741] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0218.742] GetLastError () returned 0xb7 [0218.742] CloseHandle (hObject=0x60c) returned 1 [0218.742] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0218.742] SetLastError (dwErrCode=0x0) [0218.742] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0218.742] GetLastError () returned 0xb7 [0218.742] CloseHandle (hObject=0x60c) returned 1 [0218.743] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c0e0 [0218.757] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0218.757] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0218.757] SetLastError (dwErrCode=0x0) [0218.757] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.759] GetLastError () returned 0x0 [0218.759] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0218.760] CloseHandle (hObject=0x620) returned 1 [0218.760] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c920 [0218.762] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.762] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.762] SetLastError (dwErrCode=0x0) [0218.762] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0218.763] GetLastError () returned 0x0 [0218.763] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0218.764] CloseHandle (hObject=0x3e8) returned 1 [0218.764] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\INetCache\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c260 [0218.765] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0218.765] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0218.765] FindClose (in: hFindFile=0x665d90c260 | out: hFindFile=0x665d90c260) returned 1 [0218.765] SetLastError (dwErrCode=0x0) [0218.765] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\INetCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\ac\\inetcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0218.766] GetLastError () returned 0x0 [0218.766] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0218.767] CloseHandle (hObject=0x3e8) returned 1 [0218.767] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.767] SetLastError (dwErrCode=0x0) [0218.767] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0218.768] GetLastError () returned 0xb7 [0218.768] CloseHandle (hObject=0x3e8) returned 1 [0218.768] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\INetCookies\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bc60 [0218.769] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0218.769] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0218.769] FindClose (in: hFindFile=0x665d90bc60 | out: hFindFile=0x665d90bc60) returned 1 [0218.769] SetLastError (dwErrCode=0x0) [0218.769] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\INetCookies\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\ac\\inetcookies\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0218.769] GetLastError () returned 0x0 [0218.769] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0218.770] CloseHandle (hObject=0x3e8) returned 1 [0218.770] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.770] SetLastError (dwErrCode=0x0) [0218.770] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0218.771] GetLastError () returned 0xb7 [0218.771] CloseHandle (hObject=0x3e8) returned 1 [0218.771] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\INetHistory\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c4a0 [0218.771] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0218.771] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0218.771] FindClose (in: hFindFile=0x665d90c4a0 | out: hFindFile=0x665d90c4a0) returned 1 [0218.771] SetLastError (dwErrCode=0x0) [0218.771] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\INetHistory\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\ac\\inethistory\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0218.772] GetLastError () returned 0x0 [0218.772] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0218.772] CloseHandle (hObject=0x3e8) returned 1 [0218.773] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.773] SetLastError (dwErrCode=0x0) [0218.773] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0218.773] GetLastError () returned 0xb7 [0218.773] CloseHandle (hObject=0x3e8) returned 1 [0218.773] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\Temp\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c440 [0218.773] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0218.773] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0218.773] FindClose (in: hFindFile=0x665d90c440 | out: hFindFile=0x665d90c440) returned 1 [0218.773] SetLastError (dwErrCode=0x0) [0218.773] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\Temp\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\ac\\temp\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0218.775] GetLastError () returned 0x0 [0218.775] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0218.776] CloseHandle (hObject=0x3e8) returned 1 [0218.776] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0218.776] FindClose (in: hFindFile=0x665d90c920 | out: hFindFile=0x665d90c920) returned 1 [0218.776] SetLastError (dwErrCode=0x0) [0218.776] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.777] GetLastError () returned 0xb7 [0218.777] CloseHandle (hObject=0x620) returned 1 [0218.777] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0218.777] SetLastError (dwErrCode=0x0) [0218.777] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.777] GetLastError () returned 0xb7 [0218.777] CloseHandle (hObject=0x620) returned 1 [0218.777] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AppData\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90cc80 [0218.777] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.777] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0218.777] FindClose (in: hFindFile=0x665d90cc80 | out: hFindFile=0x665d90cc80) returned 1 [0218.777] SetLastError (dwErrCode=0x0) [0218.777] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AppData\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\appdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.779] GetLastError () returned 0x0 [0218.779] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0218.780] CloseHandle (hObject=0x620) returned 1 [0218.780] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0218.780] SetLastError (dwErrCode=0x0) [0218.780] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.780] GetLastError () returned 0xb7 [0218.780] CloseHandle (hObject=0x620) returned 1 [0218.780] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\LocalCache\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bd80 [0218.781] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.781] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0218.781] FindClose (in: hFindFile=0x665d90bd80 | out: hFindFile=0x665d90bd80) returned 1 [0218.781] SetLastError (dwErrCode=0x0) [0218.781] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\LocalCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\localcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.782] GetLastError () returned 0x0 [0218.782] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0218.782] CloseHandle (hObject=0x620) returned 1 [0218.783] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0218.783] SetLastError (dwErrCode=0x0) [0218.783] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.784] GetLastError () returned 0xb7 [0218.784] CloseHandle (hObject=0x620) returned 1 [0218.784] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\LocalState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c440 [0218.784] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.784] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0218.784] FindClose (in: hFindFile=0x665d90c440 | out: hFindFile=0x665d90c440) returned 1 [0218.784] SetLastError (dwErrCode=0x0) [0218.784] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\LocalState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\localstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.785] GetLastError () returned 0x0 [0218.785] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0218.786] CloseHandle (hObject=0x620) returned 1 [0218.786] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0218.786] SetLastError (dwErrCode=0x0) [0218.786] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.787] GetLastError () returned 0xb7 [0218.787] CloseHandle (hObject=0x620) returned 1 [0218.787] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90cf20 [0218.788] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.788] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.788] SetLastError (dwErrCode=0x0) [0218.788] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\microsoft.xboxgamecallableui_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0218.805] GetLastError () returned 0x0 [0218.805] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0218.806] CloseHandle (hObject=0x3e8) returned 1 [0218.806] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bfc0 [0218.808] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0218.808] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0218.808] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0218.808] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", dwFileAttributes=0x80) returned 1 [0218.810] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\microsoft.xboxgamecallableui_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0218.811] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=16384) returned 1 [0218.811] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=16384) returned 1 [0218.811] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x3ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.811] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0218.812] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0218.812] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a490) returned 1 [0218.812] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0218.812] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0218.812] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x4000, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x4000, lpOverlapped=0x0) returned 1 [0218.813] CryptEncrypt (in: hKey=0x665ab9a490, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0218.813] CryptEncrypt (in: hKey=0x665ab9a490, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x4000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x4010) returned 1 [0218.813] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0218.813] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x4010, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x4010, lpOverlapped=0x0) returned 1 [0218.814] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0218.814] CryptExportKey (in: hKey=0x665ab9a490, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0218.814] CryptExportKey (in: hKey=0x665ab9a490, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0218.814] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0218.814] CloseHandle (hObject=0x654) returned 1 [0218.828] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0218.832] CryptDestroyKey (hKey=0x665ab9a490) returned 1 [0218.832] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0218.832] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0218.832] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0218.832] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", dwFileAttributes=0x80) returned 1 [0218.833] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\microsoft.xboxgamecallableui_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0218.833] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=16384) returned 1 [0218.833] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=16384) returned 1 [0218.833] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x3ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.833] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0218.834] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0218.834] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a6c0) returned 1 [0218.834] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0218.835] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0218.835] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x4000, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x4000, lpOverlapped=0x0) returned 1 [0218.835] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0218.835] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x4000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x4010) returned 1 [0218.835] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0218.835] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x4010, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x4010, lpOverlapped=0x0) returned 1 [0218.836] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0218.836] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0218.836] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0218.836] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0218.836] CloseHandle (hObject=0x654) returned 1 [0218.851] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0218.855] CryptDestroyKey (hKey=0x665ab9a6c0) returned 1 [0218.855] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0218.855] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0218.856] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0218.856] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", dwFileAttributes=0x80) returned 1 [0218.857] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\microsoft.xboxgamecallableui_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0218.857] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=0) returned 1 [0218.857] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=0) returned 1 [0218.858] CloseHandle (hObject=0x654) returned 1 [0218.858] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0218.858] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0218.858] FindClose (in: hFindFile=0x665d90bfc0 | out: hFindFile=0x665d90bfc0) returned 1 [0218.858] SetLastError (dwErrCode=0x0) [0218.858] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\microsoft.xboxgamecallableui_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0218.858] GetLastError () returned 0x0 [0218.858] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0218.862] CloseHandle (hObject=0x3e8) returned 1 [0218.863] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0218.863] FindClose (in: hFindFile=0x665d90cf20 | out: hFindFile=0x665d90cf20) returned 1 [0218.863] SetLastError (dwErrCode=0x0) [0218.863] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\microsoft.xboxgamecallableui_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.863] GetLastError () returned 0xb7 [0218.863] CloseHandle (hObject=0x620) returned 1 [0218.863] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0218.863] SetLastError (dwErrCode=0x0) [0218.863] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.863] GetLastError () returned 0xb7 [0218.863] CloseHandle (hObject=0x620) returned 1 [0218.863] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\RoamingState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bea0 [0218.864] FindNextFileW (in: hFindFile=0x665d90bea0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.864] FindNextFileW (in: hFindFile=0x665d90bea0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0218.864] FindClose (in: hFindFile=0x665d90bea0 | out: hFindFile=0x665d90bea0) returned 1 [0218.864] SetLastError (dwErrCode=0x0) [0218.864] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\RoamingState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\roamingstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.864] GetLastError () returned 0x0 [0218.864] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0218.865] CloseHandle (hObject=0x620) returned 1 [0218.865] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0218.865] SetLastError (dwErrCode=0x0) [0218.865] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.865] GetLastError () returned 0xb7 [0218.865] CloseHandle (hObject=0x620) returned 1 [0218.865] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c560 [0218.867] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.867] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.867] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0218.867] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\roaming.lock", dwFileAttributes=0x80) returned 1 [0218.868] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0218.868] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=0) returned 1 [0218.868] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=0) returned 1 [0218.868] CloseHandle (hObject=0x3e8) returned 1 [0218.868] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0218.869] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.869] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0218.869] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat", dwFileAttributes=0x80) returned 1 [0218.869] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0218.870] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=8192) returned 1 [0218.870] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=8192) returned 1 [0218.870] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x1ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.870] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0218.871] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0218.871] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9a110) returned 1 [0218.871] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0218.871] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0218.872] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0x2000, lpOverlapped=0x0) returned 1 [0218.873] CryptEncrypt (in: hKey=0x665ab9a110, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0218.873] CryptEncrypt (in: hKey=0x665ab9a110, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2010) returned 1 [0218.873] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0218.873] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0x2010, lpOverlapped=0x0) returned 1 [0218.873] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0218.873] CryptExportKey (in: hKey=0x665ab9a110, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0218.873] CryptExportKey (in: hKey=0x665ab9a110, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0218.873] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0218.873] CloseHandle (hObject=0x3e8) returned 1 [0218.891] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0218.896] CryptDestroyKey (hKey=0x665ab9a110) returned 1 [0218.896] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0218.896] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.896] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0218.896] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", dwFileAttributes=0x80) returned 1 [0218.898] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0218.898] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=8192) returned 1 [0218.898] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=8192) returned 1 [0218.898] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x1ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.898] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0218.900] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0218.900] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9a340) returned 1 [0218.900] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0218.900] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0218.900] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0x2000, lpOverlapped=0x0) returned 1 [0218.902] CryptEncrypt (in: hKey=0x665ab9a340, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0218.902] CryptEncrypt (in: hKey=0x665ab9a340, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2010) returned 1 [0218.902] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0218.902] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0x2010, lpOverlapped=0x0) returned 1 [0218.903] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0218.903] CryptExportKey (in: hKey=0x665ab9a340, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0218.903] CryptExportKey (in: hKey=0x665ab9a340, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0218.903] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0218.904] CloseHandle (hObject=0x3e8) returned 1 [0218.934] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0218.940] CryptDestroyKey (hKey=0x665ab9a340) returned 1 [0218.940] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0218.940] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.940] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0218.940] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", dwFileAttributes=0x80) returned 1 [0218.941] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0218.942] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=0) returned 1 [0218.942] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=0) returned 1 [0218.942] CloseHandle (hObject=0x3e8) returned 1 [0218.942] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0218.942] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0218.942] FindClose (in: hFindFile=0x665d90c560 | out: hFindFile=0x665d90c560) returned 1 [0218.942] SetLastError (dwErrCode=0x0) [0218.942] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\settings\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.947] GetLastError () returned 0x0 [0218.947] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0218.948] CloseHandle (hObject=0x620) returned 1 [0218.949] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0218.949] SetLastError (dwErrCode=0x0) [0218.949] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.949] GetLastError () returned 0xb7 [0218.949] CloseHandle (hObject=0x620) returned 1 [0218.949] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\SystemAppData\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90ce60 [0218.949] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.949] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0218.949] FindClose (in: hFindFile=0x665d90ce60 | out: hFindFile=0x665d90ce60) returned 1 [0218.950] SetLastError (dwErrCode=0x0) [0218.950] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\SystemAppData\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\systemappdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.950] GetLastError () returned 0x0 [0218.950] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0218.951] CloseHandle (hObject=0x620) returned 1 [0218.952] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0218.952] SetLastError (dwErrCode=0x0) [0218.952] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.952] GetLastError () returned 0xb7 [0218.952] CloseHandle (hObject=0x620) returned 1 [0218.952] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\TempState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90cce0 [0218.952] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.952] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0218.952] FindClose (in: hFindFile=0x665d90cce0 | out: hFindFile=0x665d90cce0) returned 1 [0218.952] SetLastError (dwErrCode=0x0) [0218.952] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\TempState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\tempstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.954] GetLastError () returned 0x0 [0218.954] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0218.955] CloseHandle (hObject=0x620) returned 1 [0218.955] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0218.955] FindClose (in: hFindFile=0x665d90c0e0 | out: hFindFile=0x665d90c0e0) returned 1 [0218.956] SetLastError (dwErrCode=0x0) [0218.956] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0218.956] GetLastError () returned 0xb7 [0218.956] CloseHandle (hObject=0x60c) returned 1 [0218.956] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0218.956] SetLastError (dwErrCode=0x0) [0218.956] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0218.956] GetLastError () returned 0xb7 [0218.956] CloseHandle (hObject=0x60c) returned 1 [0218.957] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c8c0 [0218.957] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0218.957] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0218.957] SetLastError (dwErrCode=0x0) [0218.957] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.958] GetLastError () returned 0x0 [0218.958] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0218.959] CloseHandle (hObject=0x620) returned 1 [0218.959] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bc60 [0218.960] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.960] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.960] SetLastError (dwErrCode=0x0) [0218.960] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0218.961] GetLastError () returned 0x0 [0218.961] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0218.962] CloseHandle (hObject=0x3e8) returned 1 [0218.962] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\INetCache\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bf60 [0218.963] FindNextFileW (in: hFindFile=0x665d90bf60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0218.963] FindNextFileW (in: hFindFile=0x665d90bf60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0218.963] FindClose (in: hFindFile=0x665d90bf60 | out: hFindFile=0x665d90bf60) returned 1 [0218.963] SetLastError (dwErrCode=0x0) [0218.963] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\INetCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\ac\\inetcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0218.964] GetLastError () returned 0x0 [0218.964] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0218.965] CloseHandle (hObject=0x3e8) returned 1 [0218.965] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.965] SetLastError (dwErrCode=0x0) [0218.965] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0218.965] GetLastError () returned 0xb7 [0218.965] CloseHandle (hObject=0x3e8) returned 1 [0218.965] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\INetCookies\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90d100 [0218.965] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0218.966] FindNextFileW (in: hFindFile=0x665d90d100, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0218.966] FindClose (in: hFindFile=0x665d90d100 | out: hFindFile=0x665d90d100) returned 1 [0218.966] SetLastError (dwErrCode=0x0) [0218.966] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\INetCookies\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\ac\\inetcookies\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0218.967] GetLastError () returned 0x0 [0218.967] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0218.968] CloseHandle (hObject=0x3e8) returned 1 [0218.968] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.968] SetLastError (dwErrCode=0x0) [0218.968] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0218.968] GetLastError () returned 0xb7 [0218.968] CloseHandle (hObject=0x3e8) returned 1 [0218.968] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\INetHistory\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90cda0 [0218.969] FindNextFileW (in: hFindFile=0x665d90cda0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0218.969] FindNextFileW (in: hFindFile=0x665d90cda0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0218.969] FindClose (in: hFindFile=0x665d90cda0 | out: hFindFile=0x665d90cda0) returned 1 [0218.969] SetLastError (dwErrCode=0x0) [0218.969] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\INetHistory\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\ac\\inethistory\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0218.970] GetLastError () returned 0x0 [0218.970] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0218.971] CloseHandle (hObject=0x3e8) returned 1 [0218.971] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.971] SetLastError (dwErrCode=0x0) [0218.971] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0218.971] GetLastError () returned 0xb7 [0218.972] CloseHandle (hObject=0x3e8) returned 1 [0218.972] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\Temp\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c680 [0218.972] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0218.972] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0218.972] FindClose (in: hFindFile=0x665d90c680 | out: hFindFile=0x665d90c680) returned 1 [0218.972] SetLastError (dwErrCode=0x0) [0218.972] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\Temp\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\ac\\temp\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0218.973] GetLastError () returned 0x0 [0218.973] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0218.974] CloseHandle (hObject=0x3e8) returned 1 [0218.974] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0218.974] FindClose (in: hFindFile=0x665d90bc60 | out: hFindFile=0x665d90bc60) returned 1 [0218.974] SetLastError (dwErrCode=0x0) [0218.974] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.974] GetLastError () returned 0xb7 [0218.974] CloseHandle (hObject=0x620) returned 1 [0218.974] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0218.974] SetLastError (dwErrCode=0x0) [0218.974] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.975] GetLastError () returned 0xb7 [0218.975] CloseHandle (hObject=0x620) returned 1 [0218.975] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AppData\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bd20 [0218.976] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.976] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0218.976] FindClose (in: hFindFile=0x665d90bd20 | out: hFindFile=0x665d90bd20) returned 1 [0218.976] SetLastError (dwErrCode=0x0) [0218.976] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AppData\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\appdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.977] GetLastError () returned 0x0 [0218.977] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0218.978] CloseHandle (hObject=0x620) returned 1 [0218.978] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0218.978] SetLastError (dwErrCode=0x0) [0218.978] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.978] GetLastError () returned 0xb7 [0218.979] CloseHandle (hObject=0x620) returned 1 [0218.979] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\LocalCache\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d280 [0218.979] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.979] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0218.979] FindClose (in: hFindFile=0x665d90d280 | out: hFindFile=0x665d90d280) returned 1 [0218.979] SetLastError (dwErrCode=0x0) [0218.979] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\LocalCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\localcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.980] GetLastError () returned 0x0 [0218.981] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0218.982] CloseHandle (hObject=0x620) returned 1 [0218.982] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0218.982] SetLastError (dwErrCode=0x0) [0218.982] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.982] GetLastError () returned 0xb7 [0218.982] CloseHandle (hObject=0x620) returned 1 [0218.983] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\LocalState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c980 [0218.983] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.983] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0218.983] FindClose (in: hFindFile=0x665d90c980 | out: hFindFile=0x665d90c980) returned 1 [0218.983] SetLastError (dwErrCode=0x0) [0218.983] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\LocalState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\localstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.984] GetLastError () returned 0x0 [0218.984] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0218.985] CloseHandle (hObject=0x620) returned 1 [0218.985] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0218.985] SetLastError (dwErrCode=0x0) [0218.985] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0218.985] GetLastError () returned 0xb7 [0218.985] CloseHandle (hObject=0x620) returned 1 [0218.985] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90cc20 [0218.986] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.986] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0218.986] SetLastError (dwErrCode=0x0) [0218.986] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\microsoft.xboxidentityprovider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0219.005] GetLastError () returned 0x0 [0219.005] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0219.006] CloseHandle (hObject=0x3e8) returned 1 [0219.006] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bd20 [0219.008] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0219.008] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0219.008] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0219.008] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", dwFileAttributes=0x80) returned 1 [0219.010] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\microsoft.xboxidentityprovider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0219.010] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=16384) returned 1 [0219.010] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=16384) returned 1 [0219.010] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x3ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.010] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0219.012] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0219.012] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9aab0) returned 1 [0219.012] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0219.012] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0219.012] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x4000, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x4000, lpOverlapped=0x0) returned 1 [0219.013] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0219.013] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x4000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x4010) returned 1 [0219.013] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0219.013] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x4010, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x4010, lpOverlapped=0x0) returned 1 [0219.014] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0219.014] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0219.014] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0219.014] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0219.014] CloseHandle (hObject=0x654) returned 1 [0219.032] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0219.038] CryptDestroyKey (hKey=0x665ab9aab0) returned 1 [0219.038] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0219.038] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0219.038] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0219.039] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", dwFileAttributes=0x80) returned 1 [0219.039] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\microsoft.xboxidentityprovider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0219.040] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=16384) returned 1 [0219.040] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=16384) returned 1 [0219.040] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x3ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.040] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0219.042] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0219.042] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a880) returned 1 [0219.042] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0219.042] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0219.042] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x4000, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x4000, lpOverlapped=0x0) returned 1 [0219.043] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0219.043] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x4000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x4010) returned 1 [0219.043] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0219.043] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x4010, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x4010, lpOverlapped=0x0) returned 1 [0219.044] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0219.044] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0219.044] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0219.044] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0219.045] CloseHandle (hObject=0x654) returned 1 [0219.062] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0219.069] CryptDestroyKey (hKey=0x665ab9a880) returned 1 [0219.069] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0219.069] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0219.069] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0219.070] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", dwFileAttributes=0x80) returned 1 [0219.070] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\microsoft.xboxidentityprovider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0219.071] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=0) returned 1 [0219.071] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=0) returned 1 [0219.071] CloseHandle (hObject=0x654) returned 1 [0219.071] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0219.071] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0219.071] FindClose (in: hFindFile=0x665d90bd20 | out: hFindFile=0x665d90bd20) returned 1 [0219.071] SetLastError (dwErrCode=0x0) [0219.071] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\microsoft.xboxidentityprovider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0219.072] GetLastError () returned 0x0 [0219.072] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0219.073] CloseHandle (hObject=0x3e8) returned 1 [0219.073] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0219.073] FindClose (in: hFindFile=0x665d90cc20 | out: hFindFile=0x665d90cc20) returned 1 [0219.074] SetLastError (dwErrCode=0x0) [0219.074] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\microsoft.xboxidentityprovider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0219.074] GetLastError () returned 0xb7 [0219.074] CloseHandle (hObject=0x620) returned 1 [0219.074] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0219.074] SetLastError (dwErrCode=0x0) [0219.074] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0219.074] GetLastError () returned 0xb7 [0219.074] CloseHandle (hObject=0x620) returned 1 [0219.074] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\RoamingState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c260 [0219.075] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0219.075] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0219.075] FindClose (in: hFindFile=0x665d90c260 | out: hFindFile=0x665d90c260) returned 1 [0219.075] SetLastError (dwErrCode=0x0) [0219.075] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\RoamingState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\roamingstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0219.076] GetLastError () returned 0x0 [0219.076] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0219.077] CloseHandle (hObject=0x620) returned 1 [0219.077] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0219.077] SetLastError (dwErrCode=0x0) [0219.077] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0219.078] GetLastError () returned 0xb7 [0219.078] CloseHandle (hObject=0x620) returned 1 [0219.078] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d280 [0219.079] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0219.079] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0219.080] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0219.080] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\roaming.lock", dwFileAttributes=0x80) returned 1 [0219.080] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0219.081] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=0) returned 1 [0219.081] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=0) returned 1 [0219.081] CloseHandle (hObject=0x3e8) returned 1 [0219.081] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0219.081] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0219.081] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0219.082] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat", dwFileAttributes=0x80) returned 1 [0219.082] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0219.083] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=8192) returned 1 [0219.083] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=8192) returned 1 [0219.083] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x1ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.083] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0219.084] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0219.084] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9a110) returned 1 [0219.084] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0219.085] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0219.085] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0x2000, lpOverlapped=0x0) returned 1 [0219.085] CryptEncrypt (in: hKey=0x665ab9a110, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0219.085] CryptEncrypt (in: hKey=0x665ab9a110, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2010) returned 1 [0219.086] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0219.086] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0x2010, lpOverlapped=0x0) returned 1 [0219.086] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0219.086] CryptExportKey (in: hKey=0x665ab9a110, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0219.086] CryptExportKey (in: hKey=0x665ab9a110, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0219.086] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0219.086] CloseHandle (hObject=0x3e8) returned 1 [0219.107] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0219.111] CryptDestroyKey (hKey=0x665ab9a110) returned 1 [0219.111] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0219.112] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0219.112] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0219.112] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", dwFileAttributes=0x80) returned 1 [0219.113] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0219.114] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=8192) returned 1 [0219.114] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=8192) returned 1 [0219.114] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x1ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.114] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0219.115] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0219.115] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9a6c0) returned 1 [0219.115] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0219.115] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0219.115] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0x2000, lpOverlapped=0x0) returned 1 [0219.116] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0219.116] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2010) returned 1 [0219.117] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0219.117] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0x2010, lpOverlapped=0x0) returned 1 [0219.117] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0219.117] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0219.117] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0219.117] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0219.117] CloseHandle (hObject=0x3e8) returned 1 [0219.136] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0219.141] CryptDestroyKey (hKey=0x665ab9a6c0) returned 1 [0219.141] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0219.141] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0219.141] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0219.142] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", dwFileAttributes=0x80) returned 1 [0219.142] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0219.143] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=0) returned 1 [0219.143] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=0) returned 1 [0219.143] CloseHandle (hObject=0x3e8) returned 1 [0219.143] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0219.143] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0219.143] FindClose (in: hFindFile=0x665d90d280 | out: hFindFile=0x665d90d280) returned 1 [0219.143] SetLastError (dwErrCode=0x0) [0219.143] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\settings\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0219.144] GetLastError () returned 0x0 [0219.144] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0219.145] CloseHandle (hObject=0x620) returned 1 [0219.145] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0219.145] SetLastError (dwErrCode=0x0) [0219.145] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0219.146] GetLastError () returned 0xb7 [0219.146] CloseHandle (hObject=0x620) returned 1 [0219.146] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\SystemAppData\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c260 [0219.146] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0219.146] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0219.146] FindClose (in: hFindFile=0x665d90c260 | out: hFindFile=0x665d90c260) returned 1 [0219.146] SetLastError (dwErrCode=0x0) [0219.146] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\SystemAppData\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\systemappdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0219.147] GetLastError () returned 0x0 [0219.147] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0219.147] CloseHandle (hObject=0x620) returned 1 [0219.147] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0219.148] SetLastError (dwErrCode=0x0) [0219.148] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0219.148] GetLastError () returned 0xb7 [0219.148] CloseHandle (hObject=0x620) returned 1 [0219.148] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\TempState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d340 [0219.148] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0219.148] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0219.148] FindClose (in: hFindFile=0x665d90d340 | out: hFindFile=0x665d90d340) returned 1 [0219.148] SetLastError (dwErrCode=0x0) [0219.148] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\TempState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\tempstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0219.149] GetLastError () returned 0x0 [0219.149] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0219.150] CloseHandle (hObject=0x620) returned 1 [0219.150] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0219.150] FindClose (in: hFindFile=0x665d90c8c0 | out: hFindFile=0x665d90c8c0) returned 1 [0219.150] SetLastError (dwErrCode=0x0) [0219.150] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0219.150] GetLastError () returned 0xb7 [0219.150] CloseHandle (hObject=0x60c) returned 1 [0219.150] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0219.150] SetLastError (dwErrCode=0x0) [0219.150] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0219.151] GetLastError () returned 0xb7 [0219.151] CloseHandle (hObject=0x60c) returned 1 [0219.151] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c020 [0219.152] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0219.153] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0219.153] SetLastError (dwErrCode=0x0) [0219.153] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0219.153] GetLastError () returned 0x0 [0219.153] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0219.154] CloseHandle (hObject=0x620) returned 1 [0219.154] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AC\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90ce60 [0219.156] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0219.156] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0219.157] SetLastError (dwErrCode=0x0) [0219.157] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0219.158] GetLastError () returned 0x0 [0219.158] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0219.159] CloseHandle (hObject=0x3e8) returned 1 [0219.159] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AC\\INetCache\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90d2e0 [0219.160] FindNextFileW (in: hFindFile=0x665d90d2e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0219.160] FindNextFileW (in: hFindFile=0x665d90d2e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0219.160] FindClose (in: hFindFile=0x665d90d2e0 | out: hFindFile=0x665d90d2e0) returned 1 [0219.160] SetLastError (dwErrCode=0x0) [0219.160] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AC\\INetCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\ac\\inetcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0219.161] GetLastError () returned 0x0 [0219.162] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0219.162] CloseHandle (hObject=0x3e8) returned 1 [0219.163] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0219.163] SetLastError (dwErrCode=0x0) [0219.163] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0219.293] GetLastError () returned 0xb7 [0219.293] CloseHandle (hObject=0x3e8) returned 1 [0219.293] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AC\\INetCookies\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90cb60 [0219.294] FindNextFileW (in: hFindFile=0x665d90cb60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0219.294] FindNextFileW (in: hFindFile=0x665d90cb60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0219.294] FindClose (in: hFindFile=0x665d90cb60 | out: hFindFile=0x665d90cb60) returned 1 [0219.294] SetLastError (dwErrCode=0x0) [0219.294] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AC\\INetCookies\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\ac\\inetcookies\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0219.294] GetLastError () returned 0x0 [0219.294] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0219.445] CloseHandle (hObject=0x3e8) returned 1 [0219.445] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0219.445] SetLastError (dwErrCode=0x0) [0219.445] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0219.445] GetLastError () returned 0xb7 [0219.445] CloseHandle (hObject=0x3e8) returned 1 [0219.445] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AC\\INetHistory\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90ca40 [0219.494] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0219.494] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0219.494] FindClose (in: hFindFile=0x665d90ca40 | out: hFindFile=0x665d90ca40) returned 1 [0219.494] SetLastError (dwErrCode=0x0) [0219.494] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AC\\INetHistory\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\ac\\inethistory\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0219.494] GetLastError () returned 0x0 [0219.495] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0219.495] CloseHandle (hObject=0x3e8) returned 1 [0219.496] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0219.496] SetLastError (dwErrCode=0x0) [0219.496] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0219.496] GetLastError () returned 0xb7 [0219.496] CloseHandle (hObject=0x3e8) returned 1 [0219.496] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AC\\Temp\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90d280 [0219.496] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0219.496] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0219.496] FindClose (in: hFindFile=0x665d90d280 | out: hFindFile=0x665d90d280) returned 1 [0219.496] SetLastError (dwErrCode=0x0) [0219.496] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AC\\Temp\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\ac\\temp\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0219.498] GetLastError () returned 0x0 [0219.498] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0219.499] CloseHandle (hObject=0x3e8) returned 1 [0219.499] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0219.499] FindClose (in: hFindFile=0x665d90ce60 | out: hFindFile=0x665d90ce60) returned 1 [0219.499] SetLastError (dwErrCode=0x0) [0219.499] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0219.499] GetLastError () returned 0xb7 [0219.499] CloseHandle (hObject=0x620) returned 1 [0219.499] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0219.500] SetLastError (dwErrCode=0x0) [0219.500] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0219.500] GetLastError () returned 0xb7 [0219.500] CloseHandle (hObject=0x620) returned 1 [0219.500] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AppData\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c0e0 [0219.500] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0219.500] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0219.500] FindClose (in: hFindFile=0x665d90c0e0 | out: hFindFile=0x665d90c0e0) returned 1 [0219.500] SetLastError (dwErrCode=0x0) [0219.500] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AppData\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\appdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0219.501] GetLastError () returned 0x0 [0219.501] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0219.502] CloseHandle (hObject=0x620) returned 1 [0219.502] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0219.502] SetLastError (dwErrCode=0x0) [0219.502] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0219.502] GetLastError () returned 0xb7 [0219.502] CloseHandle (hObject=0x620) returned 1 [0219.502] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\LocalCache\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d040 [0219.503] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0219.503] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0219.503] FindClose (in: hFindFile=0x665d90d040 | out: hFindFile=0x665d90d040) returned 1 [0219.503] SetLastError (dwErrCode=0x0) [0219.503] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\LocalCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\localcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0219.505] GetLastError () returned 0x0 [0219.505] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0219.506] CloseHandle (hObject=0x620) returned 1 [0219.506] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0219.506] SetLastError (dwErrCode=0x0) [0219.506] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0219.507] GetLastError () returned 0xb7 [0219.507] CloseHandle (hObject=0x620) returned 1 [0219.507] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\LocalState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d280 [0219.507] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0219.507] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0219.507] FindClose (in: hFindFile=0x665d90d280 | out: hFindFile=0x665d90d280) returned 1 [0219.507] SetLastError (dwErrCode=0x0) [0219.507] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\LocalState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\localstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0219.508] GetLastError () returned 0x0 [0219.508] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0219.509] CloseHandle (hObject=0x620) returned 1 [0219.509] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0219.509] SetLastError (dwErrCode=0x0) [0219.509] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0219.509] GetLastError () returned 0xb7 [0219.509] CloseHandle (hObject=0x620) returned 1 [0219.509] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90cc80 [0219.510] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0219.510] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0219.510] SetLastError (dwErrCode=0x0) [0219.510] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\microsoft.zunemusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0219.514] GetLastError () returned 0x0 [0219.514] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0219.515] CloseHandle (hObject=0x3e8) returned 1 [0219.520] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90d280 [0219.523] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0219.523] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0219.523] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0219.523] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", dwFileAttributes=0x80) returned 1 [0219.524] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\microsoft.zunemusic_3.6.10841.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0219.525] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=65536) returned 1 [0219.525] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=65536) returned 1 [0219.525] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0xfede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.525] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0219.530] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0219.531] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a5e0) returned 1 [0219.531] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0219.531] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0219.531] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x10000, lpOverlapped=0x0) returned 1 [0219.538] CryptEncrypt (in: hKey=0x665ab9a5e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0219.538] CryptEncrypt (in: hKey=0x665ab9a5e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x10000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x10010) returned 1 [0219.538] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0219.538] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x10010, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x10010, lpOverlapped=0x0) returned 1 [0219.539] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0219.539] CryptExportKey (in: hKey=0x665ab9a5e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0219.539] CryptExportKey (in: hKey=0x665ab9a5e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0219.539] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0219.539] CloseHandle (hObject=0x654) returned 1 [0219.555] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0219.568] CryptDestroyKey (hKey=0x665ab9a5e0) returned 1 [0219.568] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0219.568] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0219.568] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0219.569] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", dwFileAttributes=0x80) returned 1 [0219.569] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\microsoft.zunemusic_3.6.10841.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0219.581] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=65536) returned 1 [0219.582] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=65536) returned 1 [0219.582] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0xfede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.582] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0219.583] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0219.583] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a420) returned 1 [0219.583] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0219.583] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0219.583] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x10000, lpOverlapped=0x0) returned 1 [0219.584] CryptEncrypt (in: hKey=0x665ab9a420, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0219.585] CryptEncrypt (in: hKey=0x665ab9a420, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x10000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x10010) returned 1 [0219.585] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0219.585] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x10010, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x10010, lpOverlapped=0x0) returned 1 [0219.585] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0219.585] CryptExportKey (in: hKey=0x665ab9a420, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0219.586] CryptExportKey (in: hKey=0x665ab9a420, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0219.586] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0219.586] CloseHandle (hObject=0x654) returned 1 [0219.615] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0219.623] CryptDestroyKey (hKey=0x665ab9a420) returned 1 [0219.623] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0219.623] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0219.623] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0219.630] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", dwFileAttributes=0x80) returned 1 [0219.650] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\microsoft.zunemusic_3.6.10841.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0219.651] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=0) returned 1 [0219.651] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=0) returned 1 [0219.651] CloseHandle (hObject=0x654) returned 1 [0219.651] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0219.651] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0219.651] FindClose (in: hFindFile=0x665d90d280 | out: hFindFile=0x665d90d280) returned 1 [0219.651] SetLastError (dwErrCode=0x0) [0219.651] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\microsoft.zunemusic_3.6.10841.0_x64__8wekyb3d8bbwe\\activationstore\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0219.652] GetLastError () returned 0x0 [0219.652] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0219.652] CloseHandle (hObject=0x3e8) returned 1 [0219.652] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0219.653] FindClose (in: hFindFile=0x665d90cc80 | out: hFindFile=0x665d90cc80) returned 1 [0219.653] SetLastError (dwErrCode=0x0) [0219.653] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\microsoft.zunemusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0219.653] GetLastError () returned 0xb7 [0219.653] CloseHandle (hObject=0x620) returned 1 [0219.653] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0219.653] SetLastError (dwErrCode=0x0) [0219.653] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0219.653] GetLastError () returned 0xb7 [0219.653] CloseHandle (hObject=0x620) returned 1 [0219.654] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\RoamingState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90cf20 [0219.654] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0219.654] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0219.654] FindClose (in: hFindFile=0x665d90cf20 | out: hFindFile=0x665d90cf20) returned 1 [0219.654] SetLastError (dwErrCode=0x0) [0219.654] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\RoamingState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\roamingstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0219.654] GetLastError () returned 0x0 [0219.654] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0219.655] CloseHandle (hObject=0x620) returned 1 [0219.655] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0219.655] SetLastError (dwErrCode=0x0) [0219.655] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0219.655] GetLastError () returned 0xb7 [0219.656] CloseHandle (hObject=0x620) returned 1 [0219.656] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Settings\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c740 [0219.656] FindNextFileW (in: hFindFile=0x665d90c740, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0219.656] FindNextFileW (in: hFindFile=0x665d90c740, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0219.656] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0219.656] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Settings\\roaming.lock", dwFileAttributes=0x80) returned 1 [0219.656] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0219.657] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=0) returned 1 [0219.657] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=0) returned 1 [0219.657] CloseHandle (hObject=0x3e8) returned 1 [0219.657] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0219.657] FindNextFileW (in: hFindFile=0x665d90c740, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0219.657] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0219.658] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Settings\\settings.dat", dwFileAttributes=0x80) returned 1 [0219.658] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0219.658] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=8192) returned 1 [0219.658] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=8192) returned 1 [0219.658] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x1ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.658] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0219.660] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0219.660] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9a180) returned 1 [0219.660] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0219.660] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0219.660] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0x2000, lpOverlapped=0x0) returned 1 [0219.660] CryptEncrypt (in: hKey=0x665ab9a180, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0219.660] CryptEncrypt (in: hKey=0x665ab9a180, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2010) returned 1 [0219.661] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0219.661] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0x2010, lpOverlapped=0x0) returned 1 [0219.661] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0219.661] CryptExportKey (in: hKey=0x665ab9a180, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0219.661] CryptExportKey (in: hKey=0x665ab9a180, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0219.661] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0219.661] CloseHandle (hObject=0x3e8) returned 1 [0219.685] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0219.689] CryptDestroyKey (hKey=0x665ab9a180) returned 1 [0219.689] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0219.690] FindNextFileW (in: hFindFile=0x665d90c740, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0219.690] FindClose (in: hFindFile=0x665d90c740 | out: hFindFile=0x665d90c740) returned 1 [0219.690] SetLastError (dwErrCode=0x0) [0219.690] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Settings\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\settings\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0219.690] GetLastError () returned 0x0 [0219.690] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0219.691] CloseHandle (hObject=0x620) returned 1 [0219.691] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0219.691] SetLastError (dwErrCode=0x0) [0219.691] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0219.691] GetLastError () returned 0xb7 [0219.691] CloseHandle (hObject=0x620) returned 1 [0219.692] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\SystemAppData\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bc60 [0219.692] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0219.692] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0219.692] FindClose (in: hFindFile=0x665d90bc60 | out: hFindFile=0x665d90bc60) returned 1 [0219.692] SetLastError (dwErrCode=0x0) [0219.692] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\SystemAppData\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\systemappdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0219.692] GetLastError () returned 0x0 [0219.692] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0219.693] CloseHandle (hObject=0x620) returned 1 [0219.693] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0219.693] SetLastError (dwErrCode=0x0) [0219.694] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0219.695] GetLastError () returned 0xb7 [0219.695] CloseHandle (hObject=0x620) returned 1 [0219.695] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\TempState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bd20 [0219.695] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0219.695] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0219.695] FindClose (in: hFindFile=0x665d90bd20 | out: hFindFile=0x665d90bd20) returned 1 [0219.695] SetLastError (dwErrCode=0x0) [0219.696] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\TempState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\tempstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0219.696] GetLastError () returned 0x0 [0219.696] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0219.697] CloseHandle (hObject=0x620) returned 1 [0219.697] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0219.697] FindClose (in: hFindFile=0x665d90c020 | out: hFindFile=0x665d90c020) returned 1 [0219.697] SetLastError (dwErrCode=0x0) [0219.697] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0219.697] GetLastError () returned 0xb7 [0219.697] CloseHandle (hObject=0x60c) returned 1 [0219.697] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0219.697] SetLastError (dwErrCode=0x0) [0219.697] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0219.698] GetLastError () returned 0xb7 [0219.698] CloseHandle (hObject=0x60c) returned 1 [0219.698] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c980 [0219.701] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0219.701] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0219.701] SetLastError (dwErrCode=0x0) [0219.701] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0219.702] GetLastError () returned 0x0 [0219.702] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0219.702] CloseHandle (hObject=0x620) returned 1 [0219.705] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AC\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bd20 [0219.725] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0219.725] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0219.725] SetLastError (dwErrCode=0x0) [0219.725] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0219.726] GetLastError () returned 0x0 [0219.726] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0219.727] CloseHandle (hObject=0x3e8) returned 1 [0219.727] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AC\\INetCache\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c200 [0219.729] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0219.729] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0219.729] FindClose (in: hFindFile=0x665d90c200 | out: hFindFile=0x665d90c200) returned 1 [0219.729] SetLastError (dwErrCode=0x0) [0219.729] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AC\\INetCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\ac\\inetcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0219.730] GetLastError () returned 0x0 [0219.730] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0219.731] CloseHandle (hObject=0x3e8) returned 1 [0219.731] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0219.731] SetLastError (dwErrCode=0x0) [0219.731] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0219.731] GetLastError () returned 0xb7 [0219.731] CloseHandle (hObject=0x3e8) returned 1 [0219.731] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AC\\INetCookies\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c6e0 [0219.732] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0219.732] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0219.732] FindClose (in: hFindFile=0x665d90c6e0 | out: hFindFile=0x665d90c6e0) returned 1 [0219.732] SetLastError (dwErrCode=0x0) [0219.732] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AC\\INetCookies\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\ac\\inetcookies\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0219.733] GetLastError () returned 0x0 [0219.733] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0219.734] CloseHandle (hObject=0x3e8) returned 1 [0219.734] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0219.734] SetLastError (dwErrCode=0x0) [0219.734] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0219.735] GetLastError () returned 0xb7 [0219.735] CloseHandle (hObject=0x3e8) returned 1 [0219.735] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AC\\INetHistory\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c1a0 [0219.735] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0219.735] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0219.735] FindClose (in: hFindFile=0x665d90c1a0 | out: hFindFile=0x665d90c1a0) returned 1 [0219.735] SetLastError (dwErrCode=0x0) [0219.735] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AC\\INetHistory\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\ac\\inethistory\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0219.736] GetLastError () returned 0x0 [0219.736] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0219.737] CloseHandle (hObject=0x3e8) returned 1 [0219.737] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0219.737] SetLastError (dwErrCode=0x0) [0219.737] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0219.737] GetLastError () returned 0xb7 [0219.737] CloseHandle (hObject=0x3e8) returned 1 [0219.737] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AC\\Temp\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c2c0 [0219.737] FindNextFileW (in: hFindFile=0x665d90c2c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0219.737] FindNextFileW (in: hFindFile=0x665d90c2c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0219.737] FindClose (in: hFindFile=0x665d90c2c0 | out: hFindFile=0x665d90c2c0) returned 1 [0219.737] SetLastError (dwErrCode=0x0) [0219.737] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AC\\Temp\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\ac\\temp\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0219.739] GetLastError () returned 0x0 [0219.739] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0219.740] CloseHandle (hObject=0x3e8) returned 1 [0219.740] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0219.740] FindClose (in: hFindFile=0x665d90bd20 | out: hFindFile=0x665d90bd20) returned 1 [0219.740] SetLastError (dwErrCode=0x0) [0219.740] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0219.740] GetLastError () returned 0xb7 [0219.740] CloseHandle (hObject=0x620) returned 1 [0219.740] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0219.740] SetLastError (dwErrCode=0x0) [0219.740] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0219.741] GetLastError () returned 0xb7 [0219.741] CloseHandle (hObject=0x620) returned 1 [0219.741] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AppData\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d280 [0219.741] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0219.741] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0219.741] FindClose (in: hFindFile=0x665d90d280 | out: hFindFile=0x665d90d280) returned 1 [0219.741] SetLastError (dwErrCode=0x0) [0219.741] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AppData\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\appdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0219.743] GetLastError () returned 0x0 [0219.743] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0219.744] CloseHandle (hObject=0x620) returned 1 [0219.744] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0219.744] SetLastError (dwErrCode=0x0) [0219.744] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0219.744] GetLastError () returned 0xb7 [0219.744] CloseHandle (hObject=0x620) returned 1 [0219.744] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\LocalCache\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c440 [0219.745] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0219.745] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0219.745] FindClose (in: hFindFile=0x665d90c440 | out: hFindFile=0x665d90c440) returned 1 [0219.745] SetLastError (dwErrCode=0x0) [0219.745] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\LocalCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\localcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0219.746] GetLastError () returned 0x0 [0219.746] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0219.753] CloseHandle (hObject=0x620) returned 1 [0219.753] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0219.753] SetLastError (dwErrCode=0x0) [0219.753] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0219.754] GetLastError () returned 0xb7 [0219.754] CloseHandle (hObject=0x620) returned 1 [0219.754] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\LocalState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c800 [0219.754] FindNextFileW (in: hFindFile=0x665d90c800, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0219.754] FindNextFileW (in: hFindFile=0x665d90c800, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0219.754] FindClose (in: hFindFile=0x665d90c800 | out: hFindFile=0x665d90c800) returned 1 [0219.754] SetLastError (dwErrCode=0x0) [0219.754] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\LocalState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\localstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0219.756] GetLastError () returned 0x0 [0219.756] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0219.756] CloseHandle (hObject=0x620) returned 1 [0219.757] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0219.757] SetLastError (dwErrCode=0x0) [0219.757] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0219.757] GetLastError () returned 0xb7 [0219.757] CloseHandle (hObject=0x620) returned 1 [0219.757] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90ca40 [0219.759] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0219.759] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0219.759] SetLastError (dwErrCode=0x0) [0219.759] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\microsoft.zunevideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0219.760] GetLastError () returned 0x0 [0219.760] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0219.760] CloseHandle (hObject=0x3e8) returned 1 [0219.760] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c080 [0219.762] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0219.762] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0219.762] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0219.762] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", dwFileAttributes=0x80) returned 1 [0219.763] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\microsoft.zunevideo_3.6.10811.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0219.763] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=65536) returned 1 [0219.763] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=65536) returned 1 [0219.763] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0xfede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.763] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0219.764] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0219.764] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9aea0) returned 1 [0219.764] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0219.764] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0219.764] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x10000, lpOverlapped=0x0) returned 1 [0219.766] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0219.766] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x10000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x10010) returned 1 [0219.766] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0219.766] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x10010, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x10010, lpOverlapped=0x0) returned 1 [0219.767] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0219.767] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0219.767] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0219.767] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0219.767] CloseHandle (hObject=0x654) returned 1 [0219.781] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0219.787] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0219.787] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0219.787] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0219.787] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0219.787] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", dwFileAttributes=0x80) returned 1 [0219.788] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\microsoft.zunevideo_3.6.10811.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0219.789] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=36864) returned 1 [0219.789] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=36864) returned 1 [0219.789] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x8ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.789] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0219.790] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0219.790] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665ab9a880) returned 1 [0219.790] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0219.790] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0219.791] ReadFile (in: hFile=0x654, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x9000, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7ab70*=0x9000, lpOverlapped=0x0) returned 1 [0219.791] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0219.791] CryptEncrypt (in: hKey=0x665ab9a880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x9000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7ab68*=0x9010) returned 1 [0219.792] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0219.792] WriteFile (in: hFile=0x654, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x9010, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x9010, lpOverlapped=0x0) returned 1 [0219.792] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0219.792] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0219.792] CryptExportKey (in: hKey=0x665ab9a880, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0219.792] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0219.792] CloseHandle (hObject=0x654) returned 1 [0219.810] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0219.816] CryptDestroyKey (hKey=0x665ab9a880) returned 1 [0219.816] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0219.816] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0219.816] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0219.817] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", dwFileAttributes=0x80) returned 1 [0219.817] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\microsoft.zunevideo_3.6.10811.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0219.818] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=0) returned 1 [0219.818] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=0) returned 1 [0219.818] CloseHandle (hObject=0x654) returned 1 [0219.818] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0219.818] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0219.818] FindClose (in: hFindFile=0x665d90c080 | out: hFindFile=0x665d90c080) returned 1 [0219.818] SetLastError (dwErrCode=0x0) [0219.818] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\microsoft.zunevideo_3.6.10811.0_x64__8wekyb3d8bbwe\\activationstore\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0219.820] GetLastError () returned 0x0 [0219.820] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0219.822] CloseHandle (hObject=0x3e8) returned 1 [0219.822] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0219.822] FindClose (in: hFindFile=0x665d90ca40 | out: hFindFile=0x665d90ca40) returned 1 [0219.822] SetLastError (dwErrCode=0x0) [0219.822] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\microsoft.zunevideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0219.822] GetLastError () returned 0xb7 [0219.822] CloseHandle (hObject=0x620) returned 1 [0219.822] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0219.822] SetLastError (dwErrCode=0x0) [0219.822] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0219.823] GetLastError () returned 0xb7 [0219.823] CloseHandle (hObject=0x620) returned 1 [0219.824] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\RoamingState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d280 [0219.824] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0219.824] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0219.824] FindClose (in: hFindFile=0x665d90d280 | out: hFindFile=0x665d90d280) returned 1 [0219.824] SetLastError (dwErrCode=0x0) [0219.824] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\RoamingState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\roamingstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0219.826] GetLastError () returned 0x0 [0219.826] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0219.827] CloseHandle (hObject=0x620) returned 1 [0219.827] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0219.827] SetLastError (dwErrCode=0x0) [0219.827] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0219.827] GetLastError () returned 0xb7 [0219.827] CloseHandle (hObject=0x620) returned 1 [0219.827] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Settings\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90ca40 [0219.828] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0219.828] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0219.828] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0219.828] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Settings\\roaming.lock", dwFileAttributes=0x80) returned 1 [0219.828] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0219.829] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=0) returned 1 [0219.829] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=0) returned 1 [0219.829] CloseHandle (hObject=0x3e8) returned 1 [0219.829] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0219.829] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0219.829] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0219.835] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Settings\\settings.dat", dwFileAttributes=0x80) returned 1 [0219.881] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0219.881] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=8192) returned 1 [0219.881] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=8192) returned 1 [0219.881] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x1ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.881] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0219.883] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0219.883] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9aea0) returned 1 [0219.883] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0219.883] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0219.884] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0x2000, lpOverlapped=0x0) returned 1 [0219.884] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0219.884] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2010) returned 1 [0219.884] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0219.884] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0x2010, lpOverlapped=0x0) returned 1 [0219.885] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0219.885] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0219.885] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0219.885] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0219.885] CloseHandle (hObject=0x3e8) returned 1 [0219.936] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0219.945] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0219.945] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0219.946] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0219.946] FindClose (in: hFindFile=0x665d90ca40 | out: hFindFile=0x665d90ca40) returned 1 [0219.946] SetLastError (dwErrCode=0x0) [0219.946] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Settings\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\settings\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0219.947] GetLastError () returned 0x0 [0219.947] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0219.948] CloseHandle (hObject=0x620) returned 1 [0219.948] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0219.948] SetLastError (dwErrCode=0x0) [0219.948] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0219.948] GetLastError () returned 0xb7 [0219.949] CloseHandle (hObject=0x620) returned 1 [0219.949] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\SystemAppData\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c6e0 [0219.949] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0219.949] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0219.949] FindClose (in: hFindFile=0x665d90c6e0 | out: hFindFile=0x665d90c6e0) returned 1 [0219.949] SetLastError (dwErrCode=0x0) [0219.949] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\SystemAppData\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\systemappdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0219.950] GetLastError () returned 0x0 [0219.950] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0219.951] CloseHandle (hObject=0x620) returned 1 [0219.951] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0219.951] SetLastError (dwErrCode=0x0) [0219.951] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0219.952] GetLastError () returned 0xb7 [0219.952] CloseHandle (hObject=0x620) returned 1 [0219.952] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\TempState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c020 [0219.952] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0219.952] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0219.952] FindClose (in: hFindFile=0x665d90c020 | out: hFindFile=0x665d90c020) returned 1 [0219.952] SetLastError (dwErrCode=0x0) [0219.952] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\TempState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\tempstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0219.954] GetLastError () returned 0x0 [0219.954] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0219.955] CloseHandle (hObject=0x620) returned 1 [0219.955] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0219.955] FindClose (in: hFindFile=0x665d90c980 | out: hFindFile=0x665d90c980) returned 1 [0219.956] SetLastError (dwErrCode=0x0) [0219.956] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0219.956] GetLastError () returned 0xb7 [0219.956] CloseHandle (hObject=0x60c) returned 1 [0219.956] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0219.956] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0219.956] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0219.956] SetLastError (dwErrCode=0x0) [0219.956] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0219.957] GetLastError () returned 0xb7 [0219.957] CloseHandle (hObject=0x60c) returned 1 [0219.957] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90be40 [0219.959] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0219.959] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0219.959] SetLastError (dwErrCode=0x0) [0219.959] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0219.960] GetLastError () returned 0x0 [0219.960] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0219.961] CloseHandle (hObject=0x620) returned 1 [0219.961] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\AC\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c920 [0219.976] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0219.976] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0219.976] FindClose (in: hFindFile=0x665d90c920 | out: hFindFile=0x665d90c920) returned 1 [0219.976] SetLastError (dwErrCode=0x0) [0219.976] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0219.977] GetLastError () returned 0x0 [0219.977] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0219.978] CloseHandle (hObject=0x620) returned 1 [0219.978] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0219.978] SetLastError (dwErrCode=0x0) [0219.978] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0219.979] GetLastError () returned 0xb7 [0219.979] CloseHandle (hObject=0x620) returned 1 [0219.979] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\AppData\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bd80 [0219.980] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0219.980] FindNextFileW (in: hFindFile=0x665d90bd80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0219.980] FindClose (in: hFindFile=0x665d90bd80 | out: hFindFile=0x665d90bd80) returned 1 [0219.980] SetLastError (dwErrCode=0x0) [0219.980] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\AppData\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\appdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0219.981] GetLastError () returned 0x0 [0219.981] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0219.982] CloseHandle (hObject=0x620) returned 1 [0219.982] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0219.982] SetLastError (dwErrCode=0x0) [0219.982] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0219.983] GetLastError () returned 0xb7 [0219.983] CloseHandle (hObject=0x620) returned 1 [0219.983] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\LocalCache\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c560 [0219.983] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0219.983] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0219.983] FindClose (in: hFindFile=0x665d90c560 | out: hFindFile=0x665d90c560) returned 1 [0219.983] SetLastError (dwErrCode=0x0) [0219.983] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\LocalCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\localcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0219.984] GetLastError () returned 0x0 [0219.984] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0219.988] CloseHandle (hObject=0x620) returned 1 [0219.989] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0219.989] SetLastError (dwErrCode=0x0) [0219.989] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0219.989] GetLastError () returned 0xb7 [0219.989] CloseHandle (hObject=0x620) returned 1 [0219.989] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\LocalState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90cce0 [0219.989] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0219.989] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0219.989] FindClose (in: hFindFile=0x665d90cce0 | out: hFindFile=0x665d90cce0) returned 1 [0219.989] SetLastError (dwErrCode=0x0) [0219.989] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\LocalState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\localstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0219.990] GetLastError () returned 0x0 [0219.991] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0219.992] CloseHandle (hObject=0x620) returned 1 [0219.992] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0219.992] SetLastError (dwErrCode=0x0) [0219.992] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0219.992] GetLastError () returned 0xb7 [0219.992] CloseHandle (hObject=0x620) returned 1 [0219.992] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\RoamingState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bea0 [0219.992] FindNextFileW (in: hFindFile=0x665d90bea0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0219.992] FindNextFileW (in: hFindFile=0x665d90bea0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0219.992] FindClose (in: hFindFile=0x665d90bea0 | out: hFindFile=0x665d90bea0) returned 1 [0219.992] SetLastError (dwErrCode=0x0) [0219.993] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\RoamingState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\roamingstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0219.993] GetLastError () returned 0x0 [0219.993] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0219.994] CloseHandle (hObject=0x620) returned 1 [0219.994] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0219.994] SetLastError (dwErrCode=0x0) [0219.994] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0219.995] GetLastError () returned 0xb7 [0219.995] CloseHandle (hObject=0x620) returned 1 [0219.995] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d040 [0219.995] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0219.995] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0219.995] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0219.996] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings\\roaming.lock", dwFileAttributes=0x80) returned 1 [0219.996] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0220.007] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=0) returned 1 [0220.007] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=0) returned 1 [0220.007] CloseHandle (hObject=0x3e8) returned 1 [0220.008] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0220.008] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0220.008] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0220.008] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings\\settings.dat", dwFileAttributes=0x80) returned 1 [0220.009] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0220.009] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=8192) returned 1 [0220.009] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=8192) returned 1 [0220.009] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x1ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0220.010] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0220.011] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0220.011] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665ab9a500) returned 1 [0220.011] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0220.011] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0220.011] ReadFile (in: hFile=0x3e8, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da7b320*=0x2000, lpOverlapped=0x0) returned 1 [0220.017] CryptEncrypt (in: hKey=0x665ab9a500, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0220.017] CryptEncrypt (in: hKey=0x665ab9a500, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2000, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da7b318*=0x2010) returned 1 [0220.017] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0220.017] WriteFile (in: hFile=0x3e8, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da7b320*=0x2010, lpOverlapped=0x0) returned 1 [0220.017] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0220.018] CryptExportKey (in: hKey=0x665ab9a500, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0220.018] CryptExportKey (in: hKey=0x665ab9a500, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0220.018] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0220.018] CloseHandle (hObject=0x3e8) returned 1 [0220.051] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0220.057] CryptDestroyKey (hKey=0x665ab9a500) returned 1 [0220.057] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0220.057] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0220.057] FindClose (in: hFindFile=0x665d90d040 | out: hFindFile=0x665d90d040) returned 1 [0220.057] SetLastError (dwErrCode=0x0) [0220.057] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\settings\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0220.058] GetLastError () returned 0x0 [0220.058] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0220.059] CloseHandle (hObject=0x620) returned 1 [0220.059] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0220.060] SetLastError (dwErrCode=0x0) [0220.060] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0220.060] GetLastError () returned 0xb7 [0220.060] CloseHandle (hObject=0x620) returned 1 [0220.060] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\SystemAppData\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c020 [0220.061] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0220.092] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0220.092] FindClose (in: hFindFile=0x665d90c020 | out: hFindFile=0x665d90c020) returned 1 [0220.092] SetLastError (dwErrCode=0x0) [0220.092] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\SystemAppData\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\systemappdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0220.094] GetLastError () returned 0x0 [0220.094] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0220.097] CloseHandle (hObject=0x620) returned 1 [0220.097] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0220.097] SetLastError (dwErrCode=0x0) [0220.097] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0220.097] GetLastError () returned 0xb7 [0220.098] CloseHandle (hObject=0x620) returned 1 [0220.098] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\TempState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c560 [0220.099] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0220.099] FindNextFileW (in: hFindFile=0x665d90c560, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0220.099] FindClose (in: hFindFile=0x665d90c560 | out: hFindFile=0x665d90c560) returned 1 [0220.099] SetLastError (dwErrCode=0x0) [0220.099] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\TempState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\tempstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0220.100] GetLastError () returned 0x0 [0220.100] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0220.101] CloseHandle (hObject=0x620) returned 1 [0220.101] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0220.101] FindClose (in: hFindFile=0x665d90be40 | out: hFindFile=0x665d90be40) returned 1 [0220.101] SetLastError (dwErrCode=0x0) [0220.101] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0220.102] GetLastError () returned 0xb7 [0220.102] CloseHandle (hObject=0x60c) returned 1 [0220.102] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0220.102] SetLastError (dwErrCode=0x0) [0220.102] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0220.102] GetLastError () returned 0xb7 [0220.102] CloseHandle (hObject=0x60c) returned 1 [0220.102] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90bc60 [0220.102] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0220.103] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0220.103] SetLastError (dwErrCode=0x0) [0220.103] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0220.103] GetLastError () returned 0x0 [0220.103] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0220.104] CloseHandle (hObject=0x620) returned 1 [0220.104] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\AC\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d280 [0220.105] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0220.105] FindNextFileW (in: hFindFile=0x665d90d280, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0220.105] FindClose (in: hFindFile=0x665d90d280 | out: hFindFile=0x665d90d280) returned 1 [0220.105] SetLastError (dwErrCode=0x0) [0220.105] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0220.106] GetLastError () returned 0x0 [0220.106] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0220.108] CloseHandle (hObject=0x620) returned 1 [0220.108] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0220.108] SetLastError (dwErrCode=0x0) [0220.108] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0220.109] GetLastError () returned 0xb7 [0220.109] CloseHandle (hObject=0x620) returned 1 [0220.109] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\AppData\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c320 [0220.109] FindNextFileW (in: hFindFile=0x665d90c320, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0220.109] FindNextFileW (in: hFindFile=0x665d90c320, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0220.109] FindClose (in: hFindFile=0x665d90c320 | out: hFindFile=0x665d90c320) returned 1 [0220.109] SetLastError (dwErrCode=0x0) [0220.109] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\AppData\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\appdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0220.110] GetLastError () returned 0x0 [0220.110] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0220.111] CloseHandle (hObject=0x620) returned 1 [0220.111] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0220.111] SetLastError (dwErrCode=0x0) [0220.112] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0220.112] GetLastError () returned 0xb7 [0220.112] CloseHandle (hObject=0x620) returned 1 [0220.112] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalCache\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bd20 [0220.113] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0220.113] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0220.113] FindClose (in: hFindFile=0x665d90bd20 | out: hFindFile=0x665d90bd20) returned 1 [0220.113] SetLastError (dwErrCode=0x0) [0220.113] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0220.114] GetLastError () returned 0x0 [0220.114] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0220.115] CloseHandle (hObject=0x620) returned 1 [0220.115] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0220.115] SetLastError (dwErrCode=0x0) [0220.115] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0220.115] GetLastError () returned 0xb7 [0220.115] CloseHandle (hObject=0x620) returned 1 [0220.115] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d040 [0220.116] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0220.116] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0220.116] SetLastError (dwErrCode=0x0) [0220.116] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0220.117] GetLastError () returned 0x0 [0220.117] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0220.117] CloseHandle (hObject=0x3e8) returned 1 [0220.117] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90d0a0 [0220.118] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0220.118] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0220.118] SetLastError (dwErrCode=0x0) [0220.118] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0220.119] GetLastError () returned 0x0 [0220.119] WriteFile (in: hFile=0x654, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7ad80*=0x324, lpOverlapped=0x0) returned 1 [0220.120] CloseHandle (hObject=0x654) returned 1 [0220.120] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665d90bde0 [0220.120] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0220.120] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0220.120] SetLastError (dwErrCode=0x0) [0220.120] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0220.121] GetLastError () returned 0x0 [0220.121] WriteFile (in: hFile=0x440, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7a5d0*=0x324, lpOverlapped=0x0) returned 1 [0220.122] CloseHandle (hObject=0x440) returned 1 [0220.122] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\*.*", lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0x665d90bd20 [0220.124] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0220.139] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0220.139] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0220.139] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\aaa_Classic_{241d7c96-f8bf-4f85-b01f-e2b043341a4b}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0220.140] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\aaa_Classic_{241d7c96-f8bf-4f85-b01f-e2b043341a4b}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_classic_{241d7c96-f8bf-4f85-b01f-e2b043341a4b}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0220.141] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=949) returned 1 [0220.141] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=949) returned 1 [0220.141] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x293, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0220.141] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0220.143] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0220.143] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a1f0) returned 1 [0220.143] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0220.144] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0220.144] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x3b5, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x3b5, lpOverlapped=0x0) returned 1 [0220.144] CryptEncrypt (in: hKey=0x665ab9a1f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0220.144] CryptEncrypt (in: hKey=0x665ab9a1f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x3b5, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x3c0) returned 1 [0220.144] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0220.145] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x3c0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3c0, lpOverlapped=0x0) returned 1 [0220.145] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0220.145] CryptExportKey (in: hKey=0x665ab9a1f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0220.145] CryptExportKey (in: hKey=0x665ab9a1f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0220.145] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0220.145] CloseHandle (hObject=0x5cc) returned 1 [0220.171] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0220.177] CryptDestroyKey (hKey=0x665ab9a1f0) returned 1 [0220.177] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0220.177] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0220.177] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0220.177] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\aaa_Classic_{33C56305-BA7B-48E0-9784-2D05E3F5D27E}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0220.178] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\aaa_Classic_{33C56305-BA7B-48E0-9784-2D05E3F5D27E}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_classic_{33c56305-ba7b-48e0-9784-2d05e3f5d27e}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0220.179] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1041) returned 1 [0220.179] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1041) returned 1 [0220.179] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x2ef, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0220.179] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0220.181] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0220.181] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9af10) returned 1 [0220.181] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0220.181] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0220.181] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x411, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x411, lpOverlapped=0x0) returned 1 [0220.181] CryptEncrypt (in: hKey=0x665ab9af10, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0220.181] CryptEncrypt (in: hKey=0x665ab9af10, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x411, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x420) returned 1 [0220.181] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0220.181] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x420, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x420, lpOverlapped=0x0) returned 1 [0220.182] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0220.182] CryptExportKey (in: hKey=0x665ab9af10, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0220.182] CryptExportKey (in: hKey=0x665ab9af10, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0220.182] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0220.182] CloseHandle (hObject=0x5cc) returned 1 [0220.218] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0220.223] CryptDestroyKey (hKey=0x665ab9af10) returned 1 [0220.223] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0220.224] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0220.224] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0220.224] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\aaa_Classic_{728047C0-00D2-4FDB-A069-06338B92E93B}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0220.225] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\aaa_Classic_{728047C0-00D2-4FDB-A069-06338B92E93B}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_classic_{728047c0-00d2-4fdb-a069-06338b92e93b}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0220.225] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1011) returned 1 [0220.226] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1011) returned 1 [0220.226] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x2d1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0220.226] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0220.227] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0220.227] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a110) returned 1 [0220.227] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0220.228] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0220.228] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x3f3, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x3f3, lpOverlapped=0x0) returned 1 [0220.228] CryptEncrypt (in: hKey=0x665ab9a110, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0220.228] CryptEncrypt (in: hKey=0x665ab9a110, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x3f3, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x400) returned 1 [0220.228] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0220.228] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x400, lpOverlapped=0x0) returned 1 [0220.228] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0220.228] CryptExportKey (in: hKey=0x665ab9a110, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0220.228] CryptExportKey (in: hKey=0x665ab9a110, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0220.229] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0220.229] CloseHandle (hObject=0x5cc) returned 1 [0220.251] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0220.256] CryptDestroyKey (hKey=0x665ab9a110) returned 1 [0220.256] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0220.256] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0220.257] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0220.257] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\aaa_Classic_{7940ACF8-60BA-4213-A7C3-F3B400EE266D}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0220.258] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\aaa_Classic_{7940ACF8-60BA-4213-A7C3-F3B400EE266D}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_classic_{7940acf8-60ba-4213-a7c3-f3b400ee266d}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0220.258] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=991) returned 1 [0220.258] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=991) returned 1 [0220.258] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x2bd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0220.258] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0220.261] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0220.261] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a340) returned 1 [0220.261] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0220.262] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0220.262] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x3df, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x3df, lpOverlapped=0x0) returned 1 [0220.262] CryptEncrypt (in: hKey=0x665ab9a340, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0220.262] CryptEncrypt (in: hKey=0x665ab9a340, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x3df, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x3e0) returned 1 [0220.262] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0220.262] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x3e0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3e0, lpOverlapped=0x0) returned 1 [0220.263] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0220.263] CryptExportKey (in: hKey=0x665ab9a340, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0220.263] CryptExportKey (in: hKey=0x665ab9a340, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0220.263] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0220.263] CloseHandle (hObject=0x5cc) returned 1 [0220.285] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0220.291] CryptDestroyKey (hKey=0x665ab9a340) returned 1 [0220.291] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0220.291] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0220.291] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0220.292] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\aaa_Classic_{A88F43D0-B9C8-42F2-B9F3-90902FC0B22B}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0220.292] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\aaa_Classic_{A88F43D0-B9C8-42F2-B9F3-90902FC0B22B}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_classic_{a88f43d0-b9c8-42f2-b9f3-90902fc0b22b}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0220.293] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1005) returned 1 [0220.293] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1005) returned 1 [0220.293] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x2cb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0220.293] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0220.295] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0220.295] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a6c0) returned 1 [0220.295] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0220.295] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0220.295] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x3ed, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x3ed, lpOverlapped=0x0) returned 1 [0220.296] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0220.296] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x3ed, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x3f0) returned 1 [0220.296] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0220.296] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x3f0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3f0, lpOverlapped=0x0) returned 1 [0220.296] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0220.296] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0220.296] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0220.296] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0220.296] CloseHandle (hObject=0x5cc) returned 1 [0220.319] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0220.326] CryptDestroyKey (hKey=0x665ab9a6c0) returned 1 [0220.326] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0220.326] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0220.326] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0220.327] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\aaa_Classic_{E2E2F6CF-9D1A-4004-8999-8AB81010B5AC}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0220.327] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\aaa_Classic_{E2E2F6CF-9D1A-4004-8999-8AB81010B5AC}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_classic_{e2e2f6cf-9d1a-4004-8999-8ab81010b5ac}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0220.328] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1058) returned 1 [0220.328] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1058) returned 1 [0220.328] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x300, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0220.328] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0220.330] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0220.330] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9aab0) returned 1 [0220.330] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0220.330] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0220.330] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x422, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x422, lpOverlapped=0x0) returned 1 [0220.331] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0220.332] CryptEncrypt (in: hKey=0x665ab9aab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x422, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x430) returned 1 [0220.332] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0220.332] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x430, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x430, lpOverlapped=0x0) returned 1 [0220.332] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0220.332] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0220.332] CryptExportKey (in: hKey=0x665ab9aab0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0220.332] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0220.332] CloseHandle (hObject=0x5cc) returned 1 [0220.354] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0220.376] CryptDestroyKey (hKey=0x665ab9aab0) returned 1 [0220.376] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0220.376] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0220.376] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0220.377] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_Proxy_Automatic_Config_Group.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0220.377] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_Proxy_Automatic_Config_Group.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_proxy_automatic_config_group.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0220.378] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1138) returned 1 [0220.378] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1138) returned 1 [0220.378] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x350, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0220.378] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0220.380] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0220.380] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9aea0) returned 1 [0220.380] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0220.380] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0220.380] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x472, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x472, lpOverlapped=0x0) returned 1 [0220.380] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0220.380] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x472, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x480) returned 1 [0220.381] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0220.381] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x480, lpOverlapped=0x0) returned 1 [0220.381] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0220.381] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0220.381] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0220.381] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0220.381] CloseHandle (hObject=0x5cc) returned 1 [0220.811] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0220.816] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0220.816] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0220.817] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0220.817] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0220.817] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsChangeAccountPicture.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0220.820] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsChangeAccountPicture.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingschangeaccountpicture.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0220.821] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1141) returned 1 [0220.821] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1141) returned 1 [0220.821] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x353, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0220.821] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0220.823] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0220.823] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9aea0) returned 1 [0220.823] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0220.823] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0220.823] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x475, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x475, lpOverlapped=0x0) returned 1 [0220.823] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0220.824] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x475, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x480) returned 1 [0220.824] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0220.824] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x480, lpOverlapped=0x0) returned 1 [0220.824] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0220.824] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0220.824] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0220.824] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0220.824] CloseHandle (hObject=0x5cc) returned 1 [0220.846] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0220.853] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0220.853] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0220.853] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0220.853] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0220.853] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupAppSizesList.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0220.854] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupAppSizesList.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupappsizeslist.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0220.855] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1120) returned 1 [0220.855] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1120) returned 1 [0220.855] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x33e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0220.855] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0220.857] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0220.857] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9aea0) returned 1 [0220.857] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0220.857] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0220.857] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x460, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x460, lpOverlapped=0x0) returned 1 [0220.857] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0220.857] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x460, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x470) returned 1 [0220.857] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0220.857] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x470, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x470, lpOverlapped=0x0) returned 1 [0220.858] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0220.858] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0220.858] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0220.858] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0220.858] CloseHandle (hObject=0x5cc) returned 1 [0220.980] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0220.985] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0220.985] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0220.986] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0220.986] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0220.986] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupAutoplayDefaults.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0220.987] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupAutoplayDefaults.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupautoplaydefaults.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0220.987] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1147) returned 1 [0220.987] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1147) returned 1 [0220.987] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x359, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0220.987] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0220.994] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0220.994] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a500) returned 1 [0220.995] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0220.995] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0220.995] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x47b, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x47b, lpOverlapped=0x0) returned 1 [0220.996] CryptEncrypt (in: hKey=0x665ab9a500, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0220.996] CryptEncrypt (in: hKey=0x665ab9a500, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x47b, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x480) returned 1 [0220.996] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0220.996] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x480, lpOverlapped=0x0) returned 1 [0220.996] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0220.996] CryptExportKey (in: hKey=0x665ab9a500, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0220.996] CryptExportKey (in: hKey=0x665ab9a500, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0220.996] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0220.996] CloseHandle (hObject=0x5cc) returned 1 [0221.018] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0221.023] CryptDestroyKey (hKey=0x665ab9a500) returned 1 [0221.023] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0221.023] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0221.023] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0221.024] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupDataSenseMainPageOverview.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0221.029] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupDataSenseMainPageOverview.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupdatasensemainpageoverview.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0221.030] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1193) returned 1 [0221.030] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1193) returned 1 [0221.030] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x387, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.030] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0221.032] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.032] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9aea0) returned 1 [0221.032] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0221.032] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.032] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x4a9, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x4a9, lpOverlapped=0x0) returned 1 [0221.032] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0221.032] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x4a9, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x4b0) returned 1 [0221.032] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.032] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x4b0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4b0, lpOverlapped=0x0) returned 1 [0221.033] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0221.033] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0221.033] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0221.033] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0221.033] CloseHandle (hObject=0x5cc) returned 1 [0221.065] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0221.072] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0221.072] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0221.072] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0221.072] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0221.075] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupDataSenseMainPageSettings.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0221.076] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupDataSenseMainPageSettings.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupdatasensemainpagesettings.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0221.076] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1193) returned 1 [0221.076] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1193) returned 1 [0221.076] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x387, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.076] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0221.078] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.078] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9aea0) returned 1 [0221.078] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0221.078] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.078] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x4a9, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x4a9, lpOverlapped=0x0) returned 1 [0221.079] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0221.079] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x4a9, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x4b0) returned 1 [0221.079] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.079] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x4b0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4b0, lpOverlapped=0x0) returned 1 [0221.079] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0221.079] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0221.079] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0221.079] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0221.079] CloseHandle (hObject=0x5cc) returned 1 [0221.130] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0221.138] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0221.138] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0221.140] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0221.140] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0221.141] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupEaseOfAccessFilterKeys.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0221.141] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupEaseOfAccessFilterKeys.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupeaseofaccessfilterkeys.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0221.142] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1181) returned 1 [0221.142] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1181) returned 1 [0221.142] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x37b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.142] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0221.144] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.144] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9af10) returned 1 [0221.144] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0221.144] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.144] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x49d, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x49d, lpOverlapped=0x0) returned 1 [0221.145] CryptEncrypt (in: hKey=0x665ab9af10, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0221.145] CryptEncrypt (in: hKey=0x665ab9af10, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x49d, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x4a0) returned 1 [0221.145] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.145] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x4a0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4a0, lpOverlapped=0x0) returned 1 [0221.145] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0221.145] CryptExportKey (in: hKey=0x665ab9af10, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0221.145] CryptExportKey (in: hKey=0x665ab9af10, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0221.145] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0221.145] CloseHandle (hObject=0x5cc) returned 1 [0221.174] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0221.181] CryptDestroyKey (hKey=0x665ab9af10) returned 1 [0221.181] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0221.181] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0221.181] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0221.182] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupEaseOfAccessNarrator.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0221.182] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupEaseOfAccessNarrator.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupeaseofaccessnarrator.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0221.183] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1171) returned 1 [0221.183] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1171) returned 1 [0221.183] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x371, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.183] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0221.185] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.185] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a6c0) returned 1 [0221.185] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0221.185] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.185] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x493, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x493, lpOverlapped=0x0) returned 1 [0221.185] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0221.185] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x493, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x4a0) returned 1 [0221.185] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.185] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x4a0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4a0, lpOverlapped=0x0) returned 1 [0221.186] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0221.186] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0221.186] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0221.186] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0221.186] CloseHandle (hObject=0x5cc) returned 1 [0221.235] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0221.241] CryptDestroyKey (hKey=0x665ab9a6c0) returned 1 [0221.241] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0221.242] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0221.242] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0221.242] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupEaseOfAccessOSK.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0221.243] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupEaseOfAccessOSK.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupeaseofaccessosk.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0221.244] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1146) returned 1 [0221.244] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1146) returned 1 [0221.244] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x358, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.244] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0221.245] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.245] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9aea0) returned 1 [0221.246] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0221.246] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.246] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x47a, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x47a, lpOverlapped=0x0) returned 1 [0221.246] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0221.246] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x47a, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x480) returned 1 [0221.246] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.246] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x480, lpOverlapped=0x0) returned 1 [0221.246] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0221.247] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0221.247] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0221.247] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0221.247] CloseHandle (hObject=0x5cc) returned 1 [0221.268] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0221.274] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0221.274] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0221.274] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0221.274] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0221.275] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupEaseOfAccessOther.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0221.275] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupEaseOfAccessOther.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupeaseofaccessother.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0221.276] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1156) returned 1 [0221.276] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1156) returned 1 [0221.276] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x362, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.276] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0221.278] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.278] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a0a0) returned 1 [0221.278] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0221.278] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.278] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x484, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x484, lpOverlapped=0x0) returned 1 [0221.278] CryptEncrypt (in: hKey=0x665ab9a0a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0221.278] CryptEncrypt (in: hKey=0x665ab9a0a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x484, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x490) returned 1 [0221.278] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.279] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x490, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x490, lpOverlapped=0x0) returned 1 [0221.279] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0221.279] CryptExportKey (in: hKey=0x665ab9a0a0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0221.279] CryptExportKey (in: hKey=0x665ab9a0a0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0221.279] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0221.279] CloseHandle (hObject=0x5cc) returned 1 [0221.301] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0221.306] CryptDestroyKey (hKey=0x665ab9a0a0) returned 1 [0221.306] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0221.307] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0221.307] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0221.307] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupEaseOfAccessStickyKeys.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0221.308] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupEaseOfAccessStickyKeys.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupeaseofaccessstickykeys.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0221.308] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1181) returned 1 [0221.308] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1181) returned 1 [0221.309] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x37b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.309] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0221.310] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.310] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a6c0) returned 1 [0221.310] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0221.311] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.311] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x49d, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x49d, lpOverlapped=0x0) returned 1 [0221.311] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0221.311] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x49d, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x4a0) returned 1 [0221.311] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.311] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x4a0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4a0, lpOverlapped=0x0) returned 1 [0221.311] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0221.311] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0221.311] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0221.311] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0221.311] CloseHandle (hObject=0x5cc) returned 1 [0221.334] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0221.339] CryptDestroyKey (hKey=0x665ab9a6c0) returned 1 [0221.340] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0221.340] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0221.340] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0221.340] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupEaseOfAccessToggleKeys.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0221.341] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupEaseOfAccessToggleKeys.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupeaseofaccesstogglekeys.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0221.342] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1181) returned 1 [0221.342] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1181) returned 1 [0221.342] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x37b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.342] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0221.343] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.343] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a340) returned 1 [0221.344] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0221.344] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.344] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x49d, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x49d, lpOverlapped=0x0) returned 1 [0221.344] CryptEncrypt (in: hKey=0x665ab9a340, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0221.344] CryptEncrypt (in: hKey=0x665ab9a340, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x49d, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x4a0) returned 1 [0221.344] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.344] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x4a0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4a0, lpOverlapped=0x0) returned 1 [0221.345] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0221.345] CryptExportKey (in: hKey=0x665ab9a340, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0221.345] CryptExportKey (in: hKey=0x665ab9a340, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0221.345] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0221.345] CloseHandle (hObject=0x5cc) returned 1 [0221.367] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0221.372] CryptDestroyKey (hKey=0x665ab9a340) returned 1 [0221.372] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0221.372] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0221.374] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0221.374] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupFamilyUsers.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0221.375] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupFamilyUsers.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupfamilyusers.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0221.376] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1119) returned 1 [0221.376] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1119) returned 1 [0221.376] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x33d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.376] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0221.377] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.377] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a6c0) returned 1 [0221.377] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0221.378] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.378] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x45f, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x45f, lpOverlapped=0x0) returned 1 [0221.379] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0221.379] CryptEncrypt (in: hKey=0x665ab9a6c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x45f, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x460) returned 1 [0221.379] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.379] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x460, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x460, lpOverlapped=0x0) returned 1 [0221.379] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0221.379] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0221.379] CryptExportKey (in: hKey=0x665ab9a6c0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0221.379] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0221.379] CloseHandle (hObject=0x5cc) returned 1 [0221.400] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0221.406] CryptDestroyKey (hKey=0x665ab9a6c0) returned 1 [0221.406] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0221.406] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0221.406] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0221.406] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupInputMouse.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0221.407] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupInputMouse.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupinputmouse.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0221.408] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1123) returned 1 [0221.408] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1123) returned 1 [0221.408] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x341, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.408] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0221.409] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.409] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a5e0) returned 1 [0221.409] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0221.410] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.410] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x463, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x463, lpOverlapped=0x0) returned 1 [0221.410] CryptEncrypt (in: hKey=0x665ab9a5e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0221.410] CryptEncrypt (in: hKey=0x665ab9a5e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x463, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x470) returned 1 [0221.410] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.410] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x470, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x470, lpOverlapped=0x0) returned 1 [0221.411] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0221.411] CryptExportKey (in: hKey=0x665ab9a5e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0221.411] CryptExportKey (in: hKey=0x665ab9a5e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0221.411] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0221.411] CloseHandle (hObject=0x5cc) returned 1 [0221.432] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0221.437] CryptDestroyKey (hKey=0x665ab9a5e0) returned 1 [0221.437] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0221.438] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0221.438] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0221.438] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupLockScreenPreview.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0221.440] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupLockScreenPreview.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgrouplockscreenpreview.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0221.441] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1146) returned 1 [0221.441] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1146) returned 1 [0221.441] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x358, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.441] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0221.443] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.443] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9aea0) returned 1 [0221.443] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0221.443] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.443] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x47a, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x47a, lpOverlapped=0x0) returned 1 [0221.444] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0221.444] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x47a, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x480) returned 1 [0221.444] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.444] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x480, lpOverlapped=0x0) returned 1 [0221.444] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0221.444] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0221.444] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0221.444] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0221.444] CloseHandle (hObject=0x5cc) returned 1 [0221.465] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0221.470] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0221.471] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0221.471] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0221.471] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0221.471] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupMapsUpdates.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0221.472] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupMapsUpdates.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupmapsupdates.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0221.473] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1110) returned 1 [0221.473] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1110) returned 1 [0221.473] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x334, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.473] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0221.474] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.474] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a3b0) returned 1 [0221.474] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0221.475] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.475] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x456, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x456, lpOverlapped=0x0) returned 1 [0221.475] CryptEncrypt (in: hKey=0x665ab9a3b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0221.475] CryptEncrypt (in: hKey=0x665ab9a3b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x456, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x460) returned 1 [0221.475] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.475] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x460, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x460, lpOverlapped=0x0) returned 1 [0221.475] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0221.476] CryptExportKey (in: hKey=0x665ab9a3b0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0221.476] CryptExportKey (in: hKey=0x665ab9a3b0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0221.476] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0221.476] CloseHandle (hObject=0x5cc) returned 1 [0221.497] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0221.502] CryptDestroyKey (hKey=0x665ab9a3b0) returned 1 [0221.502] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0221.502] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0221.503] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0221.503] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupNotificationsAppList.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0221.504] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupNotificationsAppList.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupnotificationsapplist.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0221.505] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1168) returned 1 [0221.505] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1168) returned 1 [0221.505] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x36e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.505] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0221.506] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.506] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9ab20) returned 1 [0221.506] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0221.507] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.507] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x490, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x490, lpOverlapped=0x0) returned 1 [0221.507] CryptEncrypt (in: hKey=0x665ab9ab20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0221.507] CryptEncrypt (in: hKey=0x665ab9ab20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x490, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x4a0) returned 1 [0221.507] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.507] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x4a0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4a0, lpOverlapped=0x0) returned 1 [0221.507] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0221.508] CryptExportKey (in: hKey=0x665ab9ab20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0221.508] CryptExportKey (in: hKey=0x665ab9ab20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0221.508] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0221.508] CloseHandle (hObject=0x5cc) returned 1 [0221.529] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0221.534] CryptDestroyKey (hKey=0x665ab9ab20) returned 1 [0221.534] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0221.535] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0221.535] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0221.535] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPCSystemDeviceEncryption.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0221.536] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPCSystemDeviceEncryption.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgrouppcsystemdeviceencryption.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0221.536] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1183) returned 1 [0221.537] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1183) returned 1 [0221.537] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x37d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.537] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0221.538] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.538] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a340) returned 1 [0221.538] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0221.539] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.539] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x49f, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x49f, lpOverlapped=0x0) returned 1 [0221.539] CryptEncrypt (in: hKey=0x665ab9a340, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0221.539] CryptEncrypt (in: hKey=0x665ab9a340, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x49f, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x4a0) returned 1 [0221.539] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.539] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x4a0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4a0, lpOverlapped=0x0) returned 1 [0221.539] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0221.539] CryptExportKey (in: hKey=0x665ab9a340, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0221.539] CryptExportKey (in: hKey=0x665ab9a340, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0221.539] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0221.539] CloseHandle (hObject=0x5cc) returned 1 [0221.562] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0221.567] CryptDestroyKey (hKey=0x665ab9a340) returned 1 [0221.567] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0221.568] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0221.568] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0221.568] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPCSystemSupportInfo.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0221.569] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPCSystemSupportInfo.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgrouppcsystemsupportinfo.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0221.569] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1158) returned 1 [0221.569] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1158) returned 1 [0221.569] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x364, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.570] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0221.572] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.572] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a340) returned 1 [0221.572] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0221.572] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.572] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x486, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x486, lpOverlapped=0x0) returned 1 [0221.573] CryptEncrypt (in: hKey=0x665ab9a340, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0221.573] CryptEncrypt (in: hKey=0x665ab9a340, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x486, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x490) returned 1 [0221.573] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.573] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x490, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x490, lpOverlapped=0x0) returned 1 [0221.573] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0221.573] CryptExportKey (in: hKey=0x665ab9a340, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0221.573] CryptExportKey (in: hKey=0x665ab9a340, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0221.573] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0221.573] CloseHandle (hObject=0x5cc) returned 1 [0221.594] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0221.599] CryptDestroyKey (hKey=0x665ab9a340) returned 1 [0221.599] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0221.600] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0221.600] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0221.600] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0221.600] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPen.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0221.601] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPen.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgrouppen.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0221.601] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1076) returned 1 [0221.601] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1076) returned 1 [0221.601] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x312, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.602] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0221.603] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.603] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a500) returned 1 [0221.603] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0221.604] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.604] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x434, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x434, lpOverlapped=0x0) returned 1 [0221.604] CryptEncrypt (in: hKey=0x665ab9a500, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0221.604] CryptEncrypt (in: hKey=0x665ab9a500, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x434, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x440) returned 1 [0221.604] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.604] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x440, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x440, lpOverlapped=0x0) returned 1 [0221.604] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0221.604] CryptExportKey (in: hKey=0x665ab9a500, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0221.604] CryptExportKey (in: hKey=0x665ab9a500, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0221.604] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0221.604] CloseHandle (hObject=0x5cc) returned 1 [0221.625] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0221.631] CryptDestroyKey (hKey=0x665ab9a500) returned 1 [0221.631] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0221.631] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0221.631] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0221.631] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPersonalizeColorChoose.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0221.632] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPersonalizeColorChoose.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgrouppersonalizecolorchoose.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0221.633] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1167) returned 1 [0221.633] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1167) returned 1 [0221.633] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x36d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.633] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0221.634] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.634] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9aea0) returned 1 [0221.634] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0221.635] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.635] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x48f, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x48f, lpOverlapped=0x0) returned 1 [0221.635] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0221.635] CryptEncrypt (in: hKey=0x665ab9aea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x48f, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x490) returned 1 [0221.635] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.635] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x490, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x490, lpOverlapped=0x0) returned 1 [0221.635] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0221.635] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0221.635] CryptExportKey (in: hKey=0x665ab9aea0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0221.635] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0221.636] CloseHandle (hObject=0x5cc) returned 1 [0221.657] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0221.663] CryptDestroyKey (hKey=0x665ab9aea0) returned 1 [0221.663] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0221.663] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0221.663] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0221.663] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPicturePassword.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0221.664] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPicturePassword.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgrouppicturepassword.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0221.665] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1140) returned 1 [0221.665] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1140) returned 1 [0221.665] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x352, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.665] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0221.666] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.666] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a1f0) returned 1 [0221.666] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0221.667] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.667] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x474, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x474, lpOverlapped=0x0) returned 1 [0221.667] CryptEncrypt (in: hKey=0x665ab9a1f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0221.667] CryptEncrypt (in: hKey=0x665ab9a1f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x474, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x480) returned 1 [0221.667] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.667] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x480, lpOverlapped=0x0) returned 1 [0221.667] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0221.667] CryptExportKey (in: hKey=0x665ab9a1f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0221.667] CryptExportKey (in: hKey=0x665ab9a1f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0221.667] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0221.667] CloseHandle (hObject=0x5cc) returned 1 [0221.689] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0221.695] CryptDestroyKey (hKey=0x665ab9a1f0) returned 1 [0221.695] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0221.695] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0221.695] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0221.695] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPowerAndSleepDisplayOff.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0221.696] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPowerAndSleepDisplayOff.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgrouppowerandsleepdisplayoff.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0221.697] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1185) returned 1 [0221.697] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1185) returned 1 [0221.697] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x37f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.697] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0221.698] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.698] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9af10) returned 1 [0221.698] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0221.699] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.699] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x4a1, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x4a1, lpOverlapped=0x0) returned 1 [0221.699] CryptEncrypt (in: hKey=0x665ab9af10, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0221.699] CryptEncrypt (in: hKey=0x665ab9af10, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x4a1, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x4b0) returned 1 [0221.699] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.699] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x4b0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4b0, lpOverlapped=0x0) returned 1 [0221.699] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0221.699] CryptExportKey (in: hKey=0x665ab9af10, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0221.699] CryptExportKey (in: hKey=0x665ab9af10, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0221.699] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0221.700] CloseHandle (hObject=0x5cc) returned 1 [0221.722] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0221.727] CryptDestroyKey (hKey=0x665ab9af10) returned 1 [0221.727] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0221.727] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0221.728] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0221.728] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPowerAndSleepDisplayOffAoAc.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0221.729] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPowerAndSleepDisplayOffAoAc.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgrouppowerandsleepdisplayoffaoac.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0221.729] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1205) returned 1 [0221.729] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1205) returned 1 [0221.729] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x393, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.729] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0221.731] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.731] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9ab20) returned 1 [0221.731] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0221.731] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.731] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x4b5, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x4b5, lpOverlapped=0x0) returned 1 [0221.731] CryptEncrypt (in: hKey=0x665ab9ab20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0221.731] CryptEncrypt (in: hKey=0x665ab9ab20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x4b5, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x4c0) returned 1 [0221.731] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.732] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x4c0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4c0, lpOverlapped=0x0) returned 1 [0221.732] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0221.732] CryptExportKey (in: hKey=0x665ab9ab20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0221.732] CryptExportKey (in: hKey=0x665ab9ab20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0221.732] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0221.732] CloseHandle (hObject=0x5cc) returned 1 [0221.754] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0221.759] CryptDestroyKey (hKey=0x665ab9ab20) returned 1 [0221.759] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0221.760] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0221.760] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0221.760] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPowerAndSleepSleep.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0221.761] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPowerAndSleepSleep.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgrouppowerandsleepsleep.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0221.761] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1160) returned 1 [0221.761] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1160) returned 1 [0221.761] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x366, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.761] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0221.763] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.763] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a5e0) returned 1 [0221.764] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0221.764] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.764] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x488, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x488, lpOverlapped=0x0) returned 1 [0221.764] CryptEncrypt (in: hKey=0x665ab9a5e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0221.764] CryptEncrypt (in: hKey=0x665ab9a5e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x488, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x490) returned 1 [0221.764] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.764] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x490, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x490, lpOverlapped=0x0) returned 1 [0221.765] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0221.765] CryptExportKey (in: hKey=0x665ab9a5e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0221.765] CryptExportKey (in: hKey=0x665ab9a5e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0221.765] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0221.765] CloseHandle (hObject=0x5cc) returned 1 [0221.787] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0221.792] CryptDestroyKey (hKey=0x665ab9a5e0) returned 1 [0221.792] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0221.792] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0221.792] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0221.793] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPrivacyLocationHistory.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0221.793] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPrivacyLocationHistory.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupprivacylocationhistory.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0221.794] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1176) returned 1 [0221.794] GetFileSizeEx (in: hFile=0x5cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1176) returned 1 [0221.794] SetFilePointerEx (in: hFile=0x5cc, liDistanceToMove=0x376, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.794] ReadFile (in: hFile=0x5cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0221.795] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.795] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665ab9a490) returned 1 [0221.796] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0221.796] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.796] ReadFile (in: hFile=0x5cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x498, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x498, lpOverlapped=0x0) returned 1 [0221.796] CryptEncrypt (in: hKey=0x665ab9a490, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0221.796] CryptEncrypt (in: hKey=0x665ab9a490, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x498, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x4a0) returned 1 [0221.796] SetFilePointer (in: hFile=0x5cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.796] WriteFile (in: hFile=0x5cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x4a0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4a0, lpOverlapped=0x0) returned 1 [0221.796] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0221.797] CryptExportKey (in: hKey=0x665ab9a490, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0221.797] CryptExportKey (in: hKey=0x665ab9a490, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0221.797] WriteFile (in: hFile=0x5cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0221.797] CloseHandle (hObject=0x5cc) returned 1 [0221.823] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0221.828] CryptDestroyKey (hKey=0x665ab9a490) returned 1 [0221.828] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0221.828] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0221.828] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0221.829] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupRegionDateTimeFormats.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0221.830] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupRegionDateTimeFormats.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupregiondatetimeformats.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4cc [0221.830] GetFileSizeEx (in: hFile=0x4cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1174) returned 1 [0221.830] GetFileSizeEx (in: hFile=0x4cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1174) returned 1 [0221.830] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x374, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.830] ReadFile (in: hFile=0x4cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0221.832] SetFilePointer (in: hFile=0x4cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.832] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665abb9f30) returned 1 [0221.832] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0221.832] SetFilePointer (in: hFile=0x4cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.832] ReadFile (in: hFile=0x4cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x496, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x496, lpOverlapped=0x0) returned 1 [0221.833] CryptEncrypt (in: hKey=0x665abb9f30, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0221.833] CryptEncrypt (in: hKey=0x665abb9f30, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x496, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x4a0) returned 1 [0221.833] SetFilePointer (in: hFile=0x4cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.833] WriteFile (in: hFile=0x4cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x4a0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4a0, lpOverlapped=0x0) returned 1 [0221.833] WriteFile (in: hFile=0x4cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0221.833] CryptExportKey (in: hKey=0x665abb9f30, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0221.833] CryptExportKey (in: hKey=0x665abb9f30, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0221.833] WriteFile (in: hFile=0x4cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0221.833] CloseHandle (hObject=0x4cc) returned 1 [0221.856] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0221.861] CryptDestroyKey (hKey=0x665abb9f30) returned 1 [0221.861] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0221.861] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0221.861] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0221.862] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupSpeechMicrophone.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0221.862] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupSpeechMicrophone.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupspeechmicrophone.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4cc [0221.863] GetFileSizeEx (in: hFile=0x4cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1137) returned 1 [0221.863] GetFileSizeEx (in: hFile=0x4cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1137) returned 1 [0221.863] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x34f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.864] ReadFile (in: hFile=0x4cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0221.865] SetFilePointer (in: hFile=0x4cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.865] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665abb9bb0) returned 1 [0221.865] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0221.865] SetFilePointer (in: hFile=0x4cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.865] ReadFile (in: hFile=0x4cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x471, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x471, lpOverlapped=0x0) returned 1 [0221.866] CryptEncrypt (in: hKey=0x665abb9bb0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0221.866] CryptEncrypt (in: hKey=0x665abb9bb0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x471, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x480) returned 1 [0221.866] SetFilePointer (in: hFile=0x4cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.866] WriteFile (in: hFile=0x4cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x480, lpOverlapped=0x0) returned 1 [0221.866] WriteFile (in: hFile=0x4cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0221.866] CryptExportKey (in: hKey=0x665abb9bb0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0221.866] CryptExportKey (in: hKey=0x665abb9bb0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0221.866] WriteFile (in: hFile=0x4cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0221.866] CloseHandle (hObject=0x4cc) returned 1 [0221.886] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0221.890] CryptDestroyKey (hKey=0x665abb9bb0) returned 1 [0221.890] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0221.890] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0221.890] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0221.891] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupVirtualDesktops.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0221.891] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupVirtualDesktops.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupvirtualdesktops.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4cc [0221.892] GetFileSizeEx (in: hFile=0x4cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1138) returned 1 [0221.892] GetFileSizeEx (in: hFile=0x4cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1138) returned 1 [0221.892] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x350, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.892] ReadFile (in: hFile=0x4cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0221.895] SetFilePointer (in: hFile=0x4cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.895] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665abb92f0) returned 1 [0221.895] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0221.895] SetFilePointer (in: hFile=0x4cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.895] ReadFile (in: hFile=0x4cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x472, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x472, lpOverlapped=0x0) returned 1 [0221.896] CryptEncrypt (in: hKey=0x665abb92f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0221.896] CryptEncrypt (in: hKey=0x665abb92f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x472, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x480) returned 1 [0221.896] SetFilePointer (in: hFile=0x4cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.896] WriteFile (in: hFile=0x4cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x480, lpOverlapped=0x0) returned 1 [0221.896] WriteFile (in: hFile=0x4cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0221.896] CryptExportKey (in: hKey=0x665abb92f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0221.896] CryptExportKey (in: hKey=0x665abb92f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0221.896] WriteFile (in: hFile=0x4cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0221.896] CloseHandle (hObject=0x4cc) returned 1 [0221.915] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0221.920] CryptDestroyKey (hKey=0x665abb92f0) returned 1 [0221.920] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0221.921] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0221.921] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0221.921] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupYourAccount.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0221.929] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupYourAccount.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupyouraccount.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4cc [0221.929] GetFileSizeEx (in: hFile=0x4cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1121) returned 1 [0221.929] GetFileSizeEx (in: hFile=0x4cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1121) returned 1 [0221.929] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x33f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.929] ReadFile (in: hFile=0x4cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0221.931] SetFilePointer (in: hFile=0x4cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.931] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665abb92f0) returned 1 [0221.931] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0221.931] SetFilePointer (in: hFile=0x4cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.931] ReadFile (in: hFile=0x4cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x461, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x461, lpOverlapped=0x0) returned 1 [0221.931] CryptEncrypt (in: hKey=0x665abb92f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0221.931] CryptEncrypt (in: hKey=0x665abb92f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x461, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x470) returned 1 [0221.931] SetFilePointer (in: hFile=0x4cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.931] WriteFile (in: hFile=0x4cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x470, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x470, lpOverlapped=0x0) returned 1 [0221.932] WriteFile (in: hFile=0x4cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0221.932] CryptExportKey (in: hKey=0x665abb92f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0221.932] CryptExportKey (in: hKey=0x665abb92f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0221.932] WriteFile (in: hFile=0x4cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0221.932] CloseHandle (hObject=0x4cc) returned 1 [0221.949] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0221.953] CryptDestroyKey (hKey=0x665abb92f0) returned 1 [0221.953] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0221.954] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0221.954] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0221.954] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageAccountsManage.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0221.954] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageAccountsManage.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageaccountsmanage.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4cc [0221.955] GetFileSizeEx (in: hFile=0x4cc, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1077) returned 1 [0221.955] GetFileSizeEx (in: hFile=0x4cc, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1077) returned 1 [0221.955] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x313, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.955] ReadFile (in: hFile=0x4cc, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0221.956] SetFilePointer (in: hFile=0x4cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.957] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665abb92f0) returned 1 [0221.957] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0221.957] SetFilePointer (in: hFile=0x4cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.957] ReadFile (in: hFile=0x4cc, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x435, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x435, lpOverlapped=0x0) returned 1 [0221.957] CryptEncrypt (in: hKey=0x665abb92f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0221.957] CryptEncrypt (in: hKey=0x665abb92f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x435, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x440) returned 1 [0221.957] SetFilePointer (in: hFile=0x4cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0221.957] WriteFile (in: hFile=0x4cc, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x440, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x440, lpOverlapped=0x0) returned 1 [0221.957] WriteFile (in: hFile=0x4cc, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0221.957] CryptExportKey (in: hKey=0x665abb92f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0221.957] CryptExportKey (in: hKey=0x665abb92f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0221.957] WriteFile (in: hFile=0x4cc, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0221.958] CloseHandle (hObject=0x4cc) returned 1 [0221.984] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0221.988] CryptDestroyKey (hKey=0x665abb92f0) returned 1 [0221.988] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0221.988] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0222.041] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0222.041] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageAccountsPicture.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0222.042] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageAccountsPicture.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageaccountspicture.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0222.042] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1082) returned 1 [0222.043] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1082) returned 1 [0222.043] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x318, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.043] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0222.044] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0222.044] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0222.044] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0222.044] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0222.044] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x43a, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x43a, lpOverlapped=0x0) returned 1 [0222.044] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0222.044] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x43a, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x440) returned 1 [0222.044] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0222.044] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x440, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x440, lpOverlapped=0x0) returned 1 [0222.045] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0222.045] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0222.045] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0222.045] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0222.045] CloseHandle (hObject=0x6d0) returned 1 [0222.064] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0222.070] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0222.070] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0222.070] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0222.070] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0222.070] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageAccountsSync.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0222.071] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageAccountsSync.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageaccountssync.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0222.072] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1067) returned 1 [0222.072] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1067) returned 1 [0222.072] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x309, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.072] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0222.073] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0222.073] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0222.073] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0222.074] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0222.074] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x42b, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x42b, lpOverlapped=0x0) returned 1 [0222.074] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0222.074] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x42b, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x430) returned 1 [0222.074] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0222.074] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x430, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x430, lpOverlapped=0x0) returned 1 [0222.074] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0222.074] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0222.075] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0222.075] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0222.075] CloseHandle (hObject=0x6d0) returned 1 [0222.092] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0222.096] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0222.096] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0222.096] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0222.096] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0222.097] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageAccountsUsers.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0222.097] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageAccountsUsers.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageaccountsusers.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0222.098] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1072) returned 1 [0222.098] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1072) returned 1 [0222.098] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x30e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.098] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0222.099] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0222.099] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0222.099] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0222.099] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0222.100] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x430, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x430, lpOverlapped=0x0) returned 1 [0222.100] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0222.100] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x430, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x440) returned 1 [0222.100] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0222.100] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x440, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x440, lpOverlapped=0x0) returned 1 [0222.100] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0222.100] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0222.100] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0222.100] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0222.100] CloseHandle (hObject=0x6d0) returned 1 [0222.118] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0222.122] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0222.122] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0222.122] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0222.122] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0222.123] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageActivate.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0222.123] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageActivate.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageactivate.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0222.124] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1047) returned 1 [0222.124] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1047) returned 1 [0222.124] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x2f5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.124] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0222.125] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0222.125] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6f20) returned 1 [0222.125] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0222.125] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0222.125] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x417, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x417, lpOverlapped=0x0) returned 1 [0222.125] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0222.125] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x417, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x420) returned 1 [0222.126] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0222.126] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x420, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x420, lpOverlapped=0x0) returned 1 [0222.126] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0222.126] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0222.126] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0222.126] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0222.126] CloseHandle (hObject=0x6d0) returned 1 [0222.143] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0222.148] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0222.148] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0222.148] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0222.148] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0222.148] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageAppsDefaults.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0222.149] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageAppsDefaults.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageappsdefaults.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0222.149] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1067) returned 1 [0222.149] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1067) returned 1 [0222.149] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x309, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.149] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0222.151] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0222.151] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0222.151] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0222.151] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0222.151] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x42b, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x42b, lpOverlapped=0x0) returned 1 [0222.151] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0222.151] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x42b, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x430) returned 1 [0222.152] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0222.152] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x430, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x430, lpOverlapped=0x0) returned 1 [0222.152] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0222.152] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0222.152] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0222.152] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0222.152] CloseHandle (hObject=0x6d0) returned 1 [0222.169] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0222.173] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0222.173] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0222.173] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0222.173] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0222.173] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageAppsDefaultsFileExtensionView.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0222.174] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageAppsDefaultsFileExtensionView.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageappsdefaultsfileextensionview.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0222.174] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1258) returned 1 [0222.174] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1258) returned 1 [0222.174] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x3c8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.174] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0222.176] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0222.176] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6f20) returned 1 [0222.176] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0222.176] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0222.176] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x4ea, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x4ea, lpOverlapped=0x0) returned 1 [0222.176] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0222.176] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x4ea, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x4f0) returned 1 [0222.176] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0222.177] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4f0, lpOverlapped=0x0) returned 1 [0222.177] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0222.177] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0222.177] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0222.177] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0222.177] CloseHandle (hObject=0x6d0) returned 1 [0222.286] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0222.291] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0222.291] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0222.292] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0222.292] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0222.292] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageAppsDefaultsProtocolView.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0222.293] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageAppsDefaultsProtocolView.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageappsdefaultsprotocolview.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0222.293] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1233) returned 1 [0222.293] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1233) returned 1 [0222.293] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x3af, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.294] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0222.295] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0222.295] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6f20) returned 1 [0222.295] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0222.296] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0222.296] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x4d1, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x4d1, lpOverlapped=0x0) returned 1 [0222.296] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0222.296] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x4d1, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x4e0) returned 1 [0222.296] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0222.296] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4e0, lpOverlapped=0x0) returned 1 [0222.296] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0222.296] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0222.296] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0222.296] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0222.297] CloseHandle (hObject=0x6d0) returned 1 [0222.319] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0222.324] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0222.324] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0222.325] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0222.325] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0222.325] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageAppsNotifications.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0222.326] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageAppsNotifications.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageappsnotifications.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0222.327] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1092) returned 1 [0222.327] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1092) returned 1 [0222.327] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x322, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.327] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0222.328] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0222.328] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae65f0) returned 1 [0222.328] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0222.329] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0222.329] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x444, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x444, lpOverlapped=0x0) returned 1 [0222.329] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0222.329] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x444, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x450) returned 1 [0222.329] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0222.329] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x450, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x450, lpOverlapped=0x0) returned 1 [0222.329] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0222.329] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0222.329] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0222.329] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0222.330] CloseHandle (hObject=0x6d0) returned 1 [0222.353] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0222.358] CryptDestroyKey (hKey=0x665aae65f0) returned 1 [0222.358] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0222.359] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0222.359] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0222.359] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageBackground.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0222.360] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageBackground.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagebackground.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0222.360] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1057) returned 1 [0222.361] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1057) returned 1 [0222.361] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x2ff, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.361] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0222.362] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0222.362] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0222.362] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0222.363] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0222.363] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x421, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x421, lpOverlapped=0x0) returned 1 [0222.363] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0222.363] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x421, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x430) returned 1 [0222.363] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0222.363] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x430, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x430, lpOverlapped=0x0) returned 1 [0222.364] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0222.364] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0222.364] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0222.364] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0222.364] CloseHandle (hObject=0x6d0) returned 1 [0222.386] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0222.392] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0222.392] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0222.392] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0222.392] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0222.393] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageBatterySaver.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0222.393] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageBatterySaver.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagebatterysaver.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0222.394] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1067) returned 1 [0222.394] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1067) returned 1 [0222.394] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x309, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.395] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0222.396] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0222.396] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0222.396] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0222.397] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0222.397] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x42b, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x42b, lpOverlapped=0x0) returned 1 [0222.397] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0222.397] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x42b, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x430) returned 1 [0222.397] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0222.397] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x430, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x430, lpOverlapped=0x0) returned 1 [0222.397] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0222.397] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0222.397] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0222.397] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0222.398] CloseHandle (hObject=0x6d0) returned 1 [0222.421] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0222.427] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0222.427] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0222.427] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0222.427] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0222.428] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageColors.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0222.429] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageColors.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagecolors.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0222.429] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1037) returned 1 [0222.429] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1037) returned 1 [0222.429] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x2eb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.429] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0222.431] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0222.431] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6740) returned 1 [0222.431] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0222.431] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0222.431] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x40d, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x40d, lpOverlapped=0x0) returned 1 [0222.432] CryptEncrypt (in: hKey=0x665aae6740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0222.432] CryptEncrypt (in: hKey=0x665aae6740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x40d, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x410) returned 1 [0222.432] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0222.432] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x410, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x410, lpOverlapped=0x0) returned 1 [0222.432] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0222.432] CryptExportKey (in: hKey=0x665aae6740, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0222.432] CryptExportKey (in: hKey=0x665aae6740, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0222.432] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0222.432] CloseHandle (hObject=0x6d0) returned 1 [0222.456] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0222.462] CryptDestroyKey (hKey=0x665aae6740) returned 1 [0222.462] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0222.462] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0222.462] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0222.462] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageDataSenseOverview.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0222.463] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageDataSenseOverview.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagedatasenseoverview.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0222.464] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1092) returned 1 [0222.464] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1092) returned 1 [0222.464] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x322, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.464] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0222.466] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0222.466] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6f20) returned 1 [0222.466] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0222.466] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0222.466] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x444, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x444, lpOverlapped=0x0) returned 1 [0222.467] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0222.467] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x444, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x450) returned 1 [0222.467] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0222.467] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x450, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x450, lpOverlapped=0x0) returned 1 [0222.467] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0222.467] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0222.467] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0222.467] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0222.467] CloseHandle (hObject=0x6d0) returned 1 [0222.492] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0222.497] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0222.497] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0222.497] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0222.497] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0222.498] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageDevicesPen.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0222.498] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageDevicesPen.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagedevicespen.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0222.499] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1057) returned 1 [0222.499] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1057) returned 1 [0222.499] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x2ff, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.499] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0222.501] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0222.501] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6820) returned 1 [0222.501] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0222.501] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0222.501] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x421, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x421, lpOverlapped=0x0) returned 1 [0222.502] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0222.502] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x421, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x430) returned 1 [0222.502] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0222.502] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x430, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x430, lpOverlapped=0x0) returned 1 [0222.502] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0222.502] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0222.502] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0222.502] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0222.502] CloseHandle (hObject=0x6d0) returned 1 [0222.526] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0222.532] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0222.532] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0222.532] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0222.532] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0222.533] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageDevicesPrinters.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0222.533] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageDevicesPrinters.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagedevicesprinters.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0222.534] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1082) returned 1 [0222.534] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1082) returned 1 [0222.534] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x318, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.534] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0222.536] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0222.536] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0222.536] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0222.537] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0222.537] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x43a, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x43a, lpOverlapped=0x0) returned 1 [0222.537] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0222.537] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x43a, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x440) returned 1 [0222.537] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0222.537] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x440, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x440, lpOverlapped=0x0) returned 1 [0222.537] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0222.537] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0222.538] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0222.538] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0222.538] CloseHandle (hObject=0x6d0) returned 1 [0222.563] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0222.569] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0222.569] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0222.569] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0222.569] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0222.569] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageEaseOfAccessClosedCaptioning.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0222.570] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageEaseOfAccessClosedCaptioning.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageeaseofaccessclosedcaptioning.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0222.571] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1147) returned 1 [0222.571] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1147) returned 1 [0222.571] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x359, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.571] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0222.573] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0222.573] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0222.573] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0222.573] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0222.573] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x47b, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x47b, lpOverlapped=0x0) returned 1 [0222.573] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0222.573] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x47b, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x480) returned 1 [0222.573] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0222.573] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x480, lpOverlapped=0x0) returned 1 [0222.574] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0222.574] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0222.574] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0222.574] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0222.574] CloseHandle (hObject=0x6d0) returned 1 [0222.599] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0222.605] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0222.605] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0222.605] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0222.605] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0222.605] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageEaseOfAccessHighContrast.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0222.606] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageEaseOfAccessHighContrast.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageeaseofaccesshighcontrast.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0222.607] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1127) returned 1 [0222.607] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1127) returned 1 [0222.607] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x345, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.607] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0222.609] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0222.609] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0222.609] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0222.609] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0222.609] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x467, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x467, lpOverlapped=0x0) returned 1 [0222.610] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0222.610] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x467, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x470) returned 1 [0222.610] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0222.610] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x470, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x470, lpOverlapped=0x0) returned 1 [0222.610] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0222.610] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0222.610] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0222.610] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0222.610] CloseHandle (hObject=0x6d0) returned 1 [0222.634] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0222.640] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0222.640] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0222.640] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0222.640] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0222.641] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageEaseOfAccessKeyboard.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0222.641] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageEaseOfAccessKeyboard.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageeaseofaccesskeyboard.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0222.642] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1107) returned 1 [0222.642] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1107) returned 1 [0222.642] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x331, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.642] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0222.644] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0222.644] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6f20) returned 1 [0222.644] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0222.645] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0222.645] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x453, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x453, lpOverlapped=0x0) returned 1 [0222.645] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0222.645] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x453, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x460) returned 1 [0222.645] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0222.645] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x460, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x460, lpOverlapped=0x0) returned 1 [0222.645] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0222.646] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0222.646] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0222.646] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0222.646] CloseHandle (hObject=0x6d0) returned 1 [0222.669] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0222.675] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0222.675] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0222.676] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0222.676] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0222.676] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageEaseOfAccessMagnifier.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0222.677] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageEaseOfAccessMagnifier.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageeaseofaccessmagnifier.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0222.677] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1112) returned 1 [0222.677] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1112) returned 1 [0222.677] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x336, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.678] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0222.679] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0222.679] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0222.679] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0222.680] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0222.680] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x458, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x458, lpOverlapped=0x0) returned 1 [0222.680] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0222.680] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x458, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x460) returned 1 [0222.680] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0222.680] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x460, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x460, lpOverlapped=0x0) returned 1 [0222.681] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0222.681] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0222.681] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0222.681] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0222.681] CloseHandle (hObject=0x6d0) returned 1 [0222.705] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0222.711] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0222.711] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0222.711] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0222.711] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0222.712] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageEaseOfAccessMoreOptions.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0222.712] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageEaseOfAccessMoreOptions.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageeaseofaccessmoreoptions.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0222.713] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1122) returned 1 [0222.713] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1122) returned 1 [0222.713] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x340, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.713] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0223.205] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0223.205] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae66d0) returned 1 [0223.205] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0223.206] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0223.206] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x462, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x462, lpOverlapped=0x0) returned 1 [0223.206] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0223.206] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x462, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x470) returned 1 [0223.206] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0223.206] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x470, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x470, lpOverlapped=0x0) returned 1 [0223.207] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0223.207] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0223.207] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0223.207] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0223.207] CloseHandle (hObject=0x6d0) returned 1 [0223.394] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0223.400] CryptDestroyKey (hKey=0x665aae66d0) returned 1 [0223.400] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0223.400] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0223.400] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0223.400] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageEaseOfAccessMouse.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0223.401] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageEaseOfAccessMouse.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageeaseofaccessmouse.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0223.402] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1092) returned 1 [0223.402] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1092) returned 1 [0223.402] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x322, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0223.402] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0223.404] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0223.404] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae66d0) returned 1 [0223.404] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0223.404] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0223.404] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x444, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x444, lpOverlapped=0x0) returned 1 [0223.404] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0223.404] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x444, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x450) returned 1 [0223.405] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0223.405] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x450, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x450, lpOverlapped=0x0) returned 1 [0223.405] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0223.405] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0223.405] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0223.405] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0223.405] CloseHandle (hObject=0x6d0) returned 1 [0223.427] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0223.432] CryptDestroyKey (hKey=0x665aae66d0) returned 1 [0223.432] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0223.432] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0223.435] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0223.435] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageEaseOfAccessNarrator.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0223.436] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageEaseOfAccessNarrator.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageeaseofaccessnarrator.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0223.437] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1107) returned 1 [0223.437] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1107) returned 1 [0223.437] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x331, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0223.437] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0223.438] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0223.438] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0223.438] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0223.439] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0223.439] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x453, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x453, lpOverlapped=0x0) returned 1 [0223.439] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0223.439] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x453, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x460) returned 1 [0223.439] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0223.439] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x460, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x460, lpOverlapped=0x0) returned 1 [0223.439] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0223.440] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0223.440] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0223.440] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0223.440] CloseHandle (hObject=0x6d0) returned 1 [0223.461] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0223.466] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0223.466] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0223.467] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0223.467] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0223.467] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageLockScreen-2.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0223.468] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageLockScreen-2.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagelockscreen-2.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0223.468] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1065) returned 1 [0223.468] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1065) returned 1 [0223.469] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x307, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0223.469] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0223.470] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0223.470] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6820) returned 1 [0223.470] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0223.471] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0223.471] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x429, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x429, lpOverlapped=0x0) returned 1 [0223.471] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0223.471] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x429, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x430) returned 1 [0223.471] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0223.471] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x430, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x430, lpOverlapped=0x0) returned 1 [0223.471] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0223.471] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0223.471] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0223.472] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0223.472] CloseHandle (hObject=0x6d0) returned 1 [0223.495] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0223.500] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0223.501] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0223.501] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0223.501] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0223.501] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageLockScreen.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0223.502] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageLockScreen.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagelockscreen.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0223.503] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1057) returned 1 [0223.503] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1057) returned 1 [0223.503] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x2ff, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0223.503] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0223.505] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0223.505] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0223.505] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0223.505] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0223.505] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x421, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x421, lpOverlapped=0x0) returned 1 [0223.506] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0223.506] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x421, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x430) returned 1 [0223.506] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0223.506] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x430, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x430, lpOverlapped=0x0) returned 1 [0223.506] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0223.506] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0223.506] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0223.506] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0223.506] CloseHandle (hObject=0x6d0) returned 1 [0223.527] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0223.532] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0223.533] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0223.533] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0223.533] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0223.533] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageMaps.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0223.534] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageMaps.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagemaps.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0223.541] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1027) returned 1 [0223.541] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1027) returned 1 [0223.541] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x2e1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0223.541] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0223.542] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0223.542] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae7150) returned 1 [0223.542] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0223.543] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0223.543] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x403, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x403, lpOverlapped=0x0) returned 1 [0223.543] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0223.543] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x403, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x410) returned 1 [0223.543] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0223.543] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x410, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x410, lpOverlapped=0x0) returned 1 [0223.543] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0223.543] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0223.543] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0223.543] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0223.544] CloseHandle (hObject=0x6d0) returned 1 [0223.564] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0223.572] CryptDestroyKey (hKey=0x665aae7150) returned 1 [0223.572] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0223.573] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0223.573] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0223.573] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageMultiTasking.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0223.574] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageMultiTasking.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagemultitasking.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0223.574] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1067) returned 1 [0223.574] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1067) returned 1 [0223.574] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x309, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0223.574] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0223.576] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0223.576] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6f20) returned 1 [0223.576] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0223.576] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0223.576] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x42b, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x42b, lpOverlapped=0x0) returned 1 [0223.576] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0223.576] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x42b, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x430) returned 1 [0223.576] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0223.576] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x430, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x430, lpOverlapped=0x0) returned 1 [0223.577] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0223.577] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0223.577] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0223.577] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0223.577] CloseHandle (hObject=0x6d0) returned 1 [0223.598] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0223.606] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0223.606] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0223.606] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0223.606] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0223.607] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkAirplaneMode.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0223.607] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkAirplaneMode.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagenetworkairplanemode.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0223.608] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1102) returned 1 [0223.608] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1102) returned 1 [0223.608] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x32c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0223.608] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0223.609] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0223.609] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae66d0) returned 1 [0223.609] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0223.610] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0223.610] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x44e, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x44e, lpOverlapped=0x0) returned 1 [0223.610] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0223.610] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x44e, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x450) returned 1 [0223.610] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0223.610] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x450, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x450, lpOverlapped=0x0) returned 1 [0223.610] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0223.610] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0223.610] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0223.611] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0223.611] CloseHandle (hObject=0x6d0) returned 1 [0223.631] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0223.635] CryptDestroyKey (hKey=0x665aae66d0) returned 1 [0223.635] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0223.636] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0223.636] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0223.636] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkDialup.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0223.637] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkDialup.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagenetworkdialup.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0223.637] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1072) returned 1 [0223.638] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1072) returned 1 [0223.638] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x30e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0223.638] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0223.639] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0223.639] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0223.639] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0223.639] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0223.639] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x430, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x430, lpOverlapped=0x0) returned 1 [0223.640] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0223.640] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x430, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x440) returned 1 [0223.640] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0223.640] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x440, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x440, lpOverlapped=0x0) returned 1 [0223.640] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0223.640] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0223.640] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0223.640] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0223.640] CloseHandle (hObject=0x6d0) returned 1 [0223.672] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0223.677] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0223.677] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0223.678] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0223.678] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0223.678] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkDirectAccess.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0223.679] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkDirectAccess.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagenetworkdirectaccess.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0223.679] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1102) returned 1 [0223.679] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1102) returned 1 [0223.679] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x32c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0223.679] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0223.681] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0223.681] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae70e0) returned 1 [0223.681] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0223.681] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0223.681] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x44e, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x44e, lpOverlapped=0x0) returned 1 [0223.681] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0223.681] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x44e, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x450) returned 1 [0223.681] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0223.681] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x450, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x450, lpOverlapped=0x0) returned 1 [0223.682] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0223.682] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0223.682] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0223.682] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0223.682] CloseHandle (hObject=0x6d0) returned 1 [0223.704] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0223.710] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0223.710] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0223.710] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0223.710] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0223.711] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkEthernet.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0223.711] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkEthernet.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagenetworkethernet.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0223.712] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1082) returned 1 [0223.712] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1082) returned 1 [0223.712] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x318, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0223.712] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0223.714] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0223.714] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0223.714] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0223.714] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0223.714] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x43a, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x43a, lpOverlapped=0x0) returned 1 [0223.715] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0223.715] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x43a, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x440) returned 1 [0223.715] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0223.715] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x440, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x440, lpOverlapped=0x0) returned 1 [0223.715] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0223.715] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0223.715] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0223.715] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0223.715] CloseHandle (hObject=0x6d0) returned 1 [0223.736] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0223.742] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0223.742] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0223.742] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0223.742] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0223.742] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkMobileBroadband.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0223.743] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkMobileBroadband.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagenetworkmobilebroadband.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0223.744] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1117) returned 1 [0223.744] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1117) returned 1 [0223.744] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x33b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0223.744] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0223.745] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0223.745] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae70e0) returned 1 [0223.745] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0223.745] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0223.745] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x45d, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x45d, lpOverlapped=0x0) returned 1 [0223.746] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0223.746] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x45d, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x460) returned 1 [0223.746] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0223.746] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x460, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x460, lpOverlapped=0x0) returned 1 [0223.746] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0223.746] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0223.746] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0223.746] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0223.746] CloseHandle (hObject=0x6d0) returned 1 [0223.769] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0223.777] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0223.777] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0223.778] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0223.778] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0223.778] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkMobileHotspot.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0223.779] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkMobileHotspot.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagenetworkmobilehotspot.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0223.780] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1107) returned 1 [0223.780] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1107) returned 1 [0223.780] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x331, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0223.780] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0223.781] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0223.781] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0223.781] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0223.782] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0223.782] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x453, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x453, lpOverlapped=0x0) returned 1 [0223.782] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0223.782] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x453, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x460) returned 1 [0223.782] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0223.782] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x460, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x460, lpOverlapped=0x0) returned 1 [0223.782] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0223.783] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0223.783] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0223.783] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0223.783] CloseHandle (hObject=0x6d0) returned 1 [0223.802] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0223.806] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0223.806] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0223.807] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0223.807] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0223.807] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkProxy.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0223.808] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkProxy.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagenetworkproxy.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0223.809] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1067) returned 1 [0223.809] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1067) returned 1 [0223.809] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x309, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0223.809] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0223.810] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0223.810] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0223.811] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0223.811] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0223.811] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x42b, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x42b, lpOverlapped=0x0) returned 1 [0223.811] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0223.811] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x42b, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x430) returned 1 [0223.811] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0223.811] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x430, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x430, lpOverlapped=0x0) returned 1 [0223.811] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0223.811] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0223.811] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0223.812] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0223.812] CloseHandle (hObject=0x6d0) returned 1 [0223.829] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0223.835] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0223.835] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0223.835] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0223.835] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0223.835] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkVPN.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0223.836] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkVPN.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagenetworkvpn.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0223.837] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1057) returned 1 [0223.837] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1057) returned 1 [0223.837] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x2ff, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0223.837] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0223.838] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0223.838] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0223.838] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0223.839] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0223.839] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x421, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x421, lpOverlapped=0x0) returned 1 [0223.839] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0223.839] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x421, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x430) returned 1 [0223.839] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0223.839] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x430, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x430, lpOverlapped=0x0) returned 1 [0223.839] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0223.839] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0223.839] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0223.840] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0223.840] CloseHandle (hObject=0x6d0) returned 1 [0223.863] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0223.868] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0223.869] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0223.869] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0223.869] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0223.869] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkWiFi.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0223.870] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkWiFi.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagenetworkwifi.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0223.871] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1062) returned 1 [0223.871] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1062) returned 1 [0223.871] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x304, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0223.871] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0223.873] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0223.873] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae7150) returned 1 [0223.873] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0223.873] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0223.873] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x426, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x426, lpOverlapped=0x0) returned 1 [0223.874] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0223.874] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x426, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x430) returned 1 [0223.874] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0223.874] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x430, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x430, lpOverlapped=0x0) returned 1 [0223.874] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0223.874] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0223.874] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0223.874] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0223.874] CloseHandle (hObject=0x6d0) returned 1 [0223.908] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0223.914] CryptDestroyKey (hKey=0x665aae7150) returned 1 [0223.914] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0223.915] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0223.915] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0223.915] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkWorkplace.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0223.916] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkWorkplace.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagenetworkworkplace.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0223.917] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1087) returned 1 [0223.917] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1087) returned 1 [0223.918] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x31d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0223.918] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0223.919] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0223.919] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6f20) returned 1 [0223.919] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0223.920] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0223.920] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x43f, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x43f, lpOverlapped=0x0) returned 1 [0223.920] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0223.920] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x43f, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x440) returned 1 [0223.920] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0223.920] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x440, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x440, lpOverlapped=0x0) returned 1 [0223.920] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0223.921] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0223.921] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0223.921] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0223.921] CloseHandle (hObject=0x6d0) returned 1 [0223.964] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0223.970] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0223.970] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0223.971] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0223.971] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0223.971] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePCSystemAutoPlay.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0223.973] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePCSystemAutoPlay.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagepcsystemautoplay.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0223.974] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1087) returned 1 [0223.974] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1087) returned 1 [0223.974] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x31d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0223.974] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0223.976] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0223.976] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae65f0) returned 1 [0223.976] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0223.976] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0223.976] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x43f, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x43f, lpOverlapped=0x0) returned 1 [0223.977] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0223.977] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x43f, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x440) returned 1 [0223.977] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0223.977] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x440, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x440, lpOverlapped=0x0) returned 1 [0223.977] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0223.977] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0223.977] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0223.977] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0223.978] CloseHandle (hObject=0x6d0) returned 1 [0224.008] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0224.017] CryptDestroyKey (hKey=0x665aae65f0) returned 1 [0224.017] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0224.017] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0224.017] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0224.018] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePCSystemBluetooth.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0224.018] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePCSystemBluetooth.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagepcsystembluetooth.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0224.020] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1092) returned 1 [0224.020] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1092) returned 1 [0224.020] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x322, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0224.020] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0224.022] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.022] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae7150) returned 1 [0224.022] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0224.022] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.022] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x444, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x444, lpOverlapped=0x0) returned 1 [0224.023] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0224.023] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x444, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x450) returned 1 [0224.023] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.023] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x450, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x450, lpOverlapped=0x0) returned 1 [0224.023] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0224.023] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0224.023] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0224.023] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0224.023] CloseHandle (hObject=0x6d0) returned 1 [0224.053] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0224.058] CryptDestroyKey (hKey=0x665aae7150) returned 1 [0224.058] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0224.058] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0224.058] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0224.059] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePCSystemDevices.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0224.060] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePCSystemDevices.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagepcsystemdevices.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0224.060] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1082) returned 1 [0224.060] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1082) returned 1 [0224.060] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x318, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0224.061] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0224.062] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.062] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0224.062] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0224.063] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.063] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x43a, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x43a, lpOverlapped=0x0) returned 1 [0224.070] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0224.070] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x43a, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x440) returned 1 [0224.070] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.070] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x440, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x440, lpOverlapped=0x0) returned 1 [0224.070] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0224.070] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0224.070] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0224.071] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0224.071] CloseHandle (hObject=0x6d0) returned 1 [0224.110] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0224.118] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0224.118] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0224.118] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0224.118] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0224.162] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePCSystemDeviceSettings.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0224.163] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePCSystemDeviceSettings.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagepcsystemdevicesettings.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0224.164] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1117) returned 1 [0224.164] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1117) returned 1 [0224.164] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x33b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0224.164] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0224.193] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.193] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0224.193] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0224.194] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.194] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x45d, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x45d, lpOverlapped=0x0) returned 1 [0224.194] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0224.194] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x45d, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x460) returned 1 [0224.194] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.194] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x460, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x460, lpOverlapped=0x0) returned 1 [0224.194] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0224.194] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0224.194] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0224.195] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0224.195] CloseHandle (hObject=0x6d0) returned 1 [0224.218] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0224.235] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0224.235] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0224.235] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0224.235] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0224.236] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePCSystemDisplay.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0224.236] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePCSystemDisplay.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagepcsystemdisplay.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0224.237] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1082) returned 1 [0224.237] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1082) returned 1 [0224.237] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x318, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0224.237] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0224.239] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.239] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0224.239] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0224.239] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.239] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x43a, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x43a, lpOverlapped=0x0) returned 1 [0224.240] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0224.240] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x43a, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x440) returned 1 [0224.240] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.240] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x440, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x440, lpOverlapped=0x0) returned 1 [0224.240] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0224.240] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0224.240] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0224.240] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0224.240] CloseHandle (hObject=0x6d0) returned 1 [0224.382] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0224.413] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0224.413] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0224.414] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0224.414] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0224.414] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePCSystemInfo.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0224.422] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePCSystemInfo.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagepcsysteminfo.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0224.423] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1067) returned 1 [0224.423] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1067) returned 1 [0224.423] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x309, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0224.423] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0224.424] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.425] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0224.425] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0224.425] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.425] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x42b, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x42b, lpOverlapped=0x0) returned 1 [0224.425] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0224.426] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x42b, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x430) returned 1 [0224.426] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.426] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x430, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x430, lpOverlapped=0x0) returned 1 [0224.426] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0224.426] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0224.426] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0224.426] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0224.426] CloseHandle (hObject=0x6d0) returned 1 [0224.449] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0224.454] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0224.454] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0224.454] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0224.457] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0224.457] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePCSystemShellMode.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0224.458] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePCSystemShellMode.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagepcsystemshellmode.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0224.459] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1092) returned 1 [0224.459] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1092) returned 1 [0224.459] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x322, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0224.459] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0224.460] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.460] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0224.460] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0224.461] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.461] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x444, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x444, lpOverlapped=0x0) returned 1 [0224.461] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0224.461] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x444, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x450) returned 1 [0224.461] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.461] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x450, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x450, lpOverlapped=0x0) returned 1 [0224.461] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0224.461] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0224.461] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0224.462] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0224.462] CloseHandle (hObject=0x6d0) returned 1 [0224.484] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0224.490] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0224.490] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0224.490] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0224.490] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0224.491] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyAccountInfo.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0224.491] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyAccountInfo.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacyaccountinfo.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0224.492] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1097) returned 1 [0224.492] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1097) returned 1 [0224.492] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x327, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0224.492] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0224.494] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.494] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae66d0) returned 1 [0224.494] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0224.494] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.494] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x449, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x449, lpOverlapped=0x0) returned 1 [0224.495] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0224.495] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x449, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x450) returned 1 [0224.495] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.495] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x450, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x450, lpOverlapped=0x0) returned 1 [0224.495] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0224.495] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0224.495] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0224.495] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0224.495] CloseHandle (hObject=0x6d0) returned 1 [0224.516] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0224.521] CryptDestroyKey (hKey=0x665aae66d0) returned 1 [0224.521] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0224.521] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0224.521] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0224.522] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyCalendar.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0224.523] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyCalendar.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacycalendar.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0224.523] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1082) returned 1 [0224.523] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1082) returned 1 [0224.523] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x318, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0224.523] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0224.525] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.525] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6820) returned 1 [0224.525] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0224.525] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.525] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x43a, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x43a, lpOverlapped=0x0) returned 1 [0224.525] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0224.526] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x43a, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x440) returned 1 [0224.526] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.526] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x440, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x440, lpOverlapped=0x0) returned 1 [0224.526] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0224.526] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0224.526] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0224.526] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0224.526] CloseHandle (hObject=0x6d0) returned 1 [0224.546] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0224.550] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0224.550] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0224.550] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0224.550] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0224.551] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyContacts.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0224.551] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyContacts.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacycontacts.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0224.552] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1082) returned 1 [0224.552] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1082) returned 1 [0224.552] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x318, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0224.552] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0224.553] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.553] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0224.553] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0224.553] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.553] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x43a, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x43a, lpOverlapped=0x0) returned 1 [0224.554] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0224.554] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x43a, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x440) returned 1 [0224.554] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.554] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x440, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x440, lpOverlapped=0x0) returned 1 [0224.554] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0224.554] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0224.554] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0224.554] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0224.554] CloseHandle (hObject=0x6d0) returned 1 [0224.573] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0224.577] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0224.577] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0224.578] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0224.578] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0224.578] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyCustomPeripherals.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0224.579] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyCustomPeripherals.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacycustomperipherals.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0224.580] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1127) returned 1 [0224.580] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1127) returned 1 [0224.580] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x345, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0224.580] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0224.581] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.581] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6f20) returned 1 [0224.581] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0224.582] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.582] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x467, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x467, lpOverlapped=0x0) returned 1 [0224.582] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0224.582] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x467, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x470) returned 1 [0224.582] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.582] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x470, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x470, lpOverlapped=0x0) returned 1 [0224.583] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0224.583] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0224.583] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0224.583] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0224.583] CloseHandle (hObject=0x6d0) returned 1 [0224.605] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0224.609] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0224.609] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0224.610] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0224.610] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0224.610] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyGeneral.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0224.611] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyGeneral.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacygeneral.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0224.611] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1077) returned 1 [0224.611] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1077) returned 1 [0224.611] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x313, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0224.611] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0224.613] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.613] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae70e0) returned 1 [0224.613] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0224.613] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.613] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x435, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x435, lpOverlapped=0x0) returned 1 [0224.614] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0224.614] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x435, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x440) returned 1 [0224.614] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.614] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x440, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x440, lpOverlapped=0x0) returned 1 [0224.614] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0224.614] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0224.614] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0224.614] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0224.614] CloseHandle (hObject=0x6d0) returned 1 [0224.633] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0224.637] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0224.637] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0224.638] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0224.638] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0224.638] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyLocation.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0224.639] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyLocation.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacylocation.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0224.639] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1082) returned 1 [0224.639] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1082) returned 1 [0224.639] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x318, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0224.639] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0224.641] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.641] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0224.641] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0224.641] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.641] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x43a, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x43a, lpOverlapped=0x0) returned 1 [0224.641] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0224.641] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x43a, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x440) returned 1 [0224.641] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.641] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x440, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x440, lpOverlapped=0x0) returned 1 [0224.642] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0224.642] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0224.642] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0224.642] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0224.642] CloseHandle (hObject=0x6d0) returned 1 [0224.659] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0224.664] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0224.664] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0224.664] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0224.664] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0224.664] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyMessaging.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0224.665] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyMessaging.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacymessaging.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0224.666] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1087) returned 1 [0224.666] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1087) returned 1 [0224.666] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x31d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0224.666] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0224.667] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.667] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0224.667] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0224.667] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.667] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x43f, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x43f, lpOverlapped=0x0) returned 1 [0224.668] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0224.668] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x43f, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x440) returned 1 [0224.668] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.668] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x440, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x440, lpOverlapped=0x0) returned 1 [0224.668] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0224.668] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0224.668] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0224.668] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0224.668] CloseHandle (hObject=0x6d0) returned 1 [0224.687] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0224.692] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0224.692] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0224.693] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0224.693] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0224.693] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyMicrophone.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0224.694] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyMicrophone.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacymicrophone.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0224.694] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1092) returned 1 [0224.694] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1092) returned 1 [0224.694] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x322, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0224.694] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0224.696] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.696] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6f20) returned 1 [0224.696] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0224.696] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.696] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x444, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x444, lpOverlapped=0x0) returned 1 [0224.697] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0224.697] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x444, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x450) returned 1 [0224.697] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.697] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x450, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x450, lpOverlapped=0x0) returned 1 [0224.697] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0224.697] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0224.697] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0224.697] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0224.697] CloseHandle (hObject=0x6d0) returned 1 [0224.718] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0224.724] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0224.724] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0224.724] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0224.724] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0224.725] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyMotionData.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0224.725] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyMotionData.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacymotiondata.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0224.726] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1092) returned 1 [0224.726] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1092) returned 1 [0224.726] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x322, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0224.726] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0224.727] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.727] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae70e0) returned 1 [0224.728] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0224.728] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.728] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x444, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x444, lpOverlapped=0x0) returned 1 [0224.728] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0224.728] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x444, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x450) returned 1 [0224.728] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.728] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x450, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x450, lpOverlapped=0x0) returned 1 [0224.728] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0224.729] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0224.729] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0224.729] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0224.729] CloseHandle (hObject=0x6d0) returned 1 [0224.746] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0224.750] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0224.750] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0224.751] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0224.751] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0224.751] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyPersonalization.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0224.751] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyPersonalization.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacypersonalization.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0224.752] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1117) returned 1 [0224.752] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1117) returned 1 [0224.752] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x33b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0224.752] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0224.754] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.754] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0224.754] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0224.754] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.754] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x45d, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x45d, lpOverlapped=0x0) returned 1 [0224.754] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0224.754] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x45d, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x460) returned 1 [0224.754] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.754] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x460, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x460, lpOverlapped=0x0) returned 1 [0224.755] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0224.755] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0224.755] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0224.755] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0224.755] CloseHandle (hObject=0x6d0) returned 1 [0224.776] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0224.782] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0224.782] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0224.782] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0224.782] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0224.782] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyRadios.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0224.783] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyRadios.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacyradios.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0224.784] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1072) returned 1 [0224.784] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1072) returned 1 [0224.784] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x30e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0224.784] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0224.786] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.786] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae70e0) returned 1 [0224.786] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0224.786] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.786] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x430, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x430, lpOverlapped=0x0) returned 1 [0224.787] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0224.787] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x430, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x440) returned 1 [0224.787] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.787] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x440, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x440, lpOverlapped=0x0) returned 1 [0224.790] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0224.790] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0224.790] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0224.790] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0224.790] CloseHandle (hObject=0x6d0) returned 1 [0224.812] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0224.818] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0224.818] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0224.818] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0224.818] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0224.819] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacySIUFSettings.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0224.819] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacySIUFSettings.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacysiufsettings.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0224.820] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1102) returned 1 [0224.820] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1102) returned 1 [0224.820] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x32c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0224.820] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0224.822] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.822] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0224.822] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0224.822] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.822] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x44e, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x44e, lpOverlapped=0x0) returned 1 [0224.822] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0224.822] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x44e, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x450) returned 1 [0224.822] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.822] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x450, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x450, lpOverlapped=0x0) returned 1 [0224.823] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0224.823] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0224.823] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0224.823] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0224.823] CloseHandle (hObject=0x6d0) returned 1 [0224.845] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0224.851] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0224.851] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0224.851] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0224.851] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0224.851] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyWebcam.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0224.852] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyWebcam.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacywebcam.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0224.853] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1072) returned 1 [0224.853] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1072) returned 1 [0224.853] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x30e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0224.853] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0224.854] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.854] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae65f0) returned 1 [0224.854] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0224.855] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.855] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x430, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x430, lpOverlapped=0x0) returned 1 [0224.855] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0224.855] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x430, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x440) returned 1 [0224.855] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.855] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x440, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x440, lpOverlapped=0x0) returned 1 [0224.855] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0224.855] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0224.855] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0224.855] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0224.856] CloseHandle (hObject=0x6d0) returned 1 [0224.875] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0224.880] CryptDestroyKey (hKey=0x665aae65f0) returned 1 [0224.880] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0224.880] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0224.880] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0224.880] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreDeveloperOptions.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0224.881] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreDeveloperOptions.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagerestoredeveloperoptions.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0224.881] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1122) returned 1 [0224.881] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1122) returned 1 [0224.881] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x340, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0224.881] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0224.883] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.883] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae70e0) returned 1 [0224.883] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0224.883] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.883] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x462, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x462, lpOverlapped=0x0) returned 1 [0224.883] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0224.883] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x462, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x470) returned 1 [0224.883] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.883] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x470, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x470, lpOverlapped=0x0) returned 1 [0224.883] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0224.883] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0224.883] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0224.884] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0224.884] CloseHandle (hObject=0x6d0) returned 1 [0224.902] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0224.906] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0224.906] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0224.906] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0224.906] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0224.907] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreMusUpdate.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0224.907] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreMusUpdate.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagerestoremusupdate.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0224.908] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1087) returned 1 [0224.908] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1087) returned 1 [0224.908] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x31d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0224.908] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0224.909] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.909] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0224.909] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0224.910] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.910] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x43f, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x43f, lpOverlapped=0x0) returned 1 [0224.910] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0224.910] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x43f, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x440) returned 1 [0224.910] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.910] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x440, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x440, lpOverlapped=0x0) returned 1 [0224.910] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0224.910] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0224.910] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0224.910] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0224.910] CloseHandle (hObject=0x6d0) returned 1 [0224.935] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0224.939] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0224.939] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0224.940] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0224.940] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0224.940] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreOneBackup.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0224.940] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreOneBackup.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagerestoreonebackup.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0224.943] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1087) returned 1 [0224.943] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1087) returned 1 [0224.943] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x31d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0224.943] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0224.944] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.944] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae70e0) returned 1 [0224.944] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0224.945] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.945] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x43f, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x43f, lpOverlapped=0x0) returned 1 [0224.945] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0224.945] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x43f, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x440) returned 1 [0224.945] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.945] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x440, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x440, lpOverlapped=0x0) returned 1 [0224.945] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0224.945] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0224.945] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0224.945] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0224.945] CloseHandle (hObject=0x6d0) returned 1 [0224.962] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0224.967] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0224.967] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0224.967] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0224.967] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0224.967] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreRestore.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0224.968] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreRestore.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagerestorerestore.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0224.968] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1077) returned 1 [0224.968] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1077) returned 1 [0224.968] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x313, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0224.968] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0224.970] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.970] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0224.970] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0224.970] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.970] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x435, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x435, lpOverlapped=0x0) returned 1 [0224.970] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0224.970] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x435, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x440) returned 1 [0224.970] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.970] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x440, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x440, lpOverlapped=0x0) returned 1 [0224.970] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0224.970] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0224.970] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0224.971] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0224.971] CloseHandle (hObject=0x6d0) returned 1 [0224.988] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0224.992] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0224.992] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0224.992] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0224.992] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0224.993] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageScreenPowerAndSleep.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0224.993] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageScreenPowerAndSleep.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagescreenpowerandsleep.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0224.994] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1102) returned 1 [0224.994] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1102) returned 1 [0224.994] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x32c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0224.994] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0224.995] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.995] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae70e0) returned 1 [0224.995] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0224.995] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.995] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x44e, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x44e, lpOverlapped=0x0) returned 1 [0224.996] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0224.996] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x44e, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x450) returned 1 [0224.996] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0224.996] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x450, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x450, lpOverlapped=0x0) returned 1 [0224.996] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0224.996] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0224.996] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0224.996] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0224.996] CloseHandle (hObject=0x6d0) returned 1 [0225.013] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0225.017] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0225.017] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0225.017] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0225.017] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0225.018] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageSpeech.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0225.018] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageSpeech.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagespeech.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0225.019] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1037) returned 1 [0225.019] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1037) returned 1 [0225.019] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x2eb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0225.019] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0225.020] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.020] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0225.020] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0225.020] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.020] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x40d, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x40d, lpOverlapped=0x0) returned 1 [0225.021] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0225.021] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x40d, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x410) returned 1 [0225.021] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.021] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x410, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x410, lpOverlapped=0x0) returned 1 [0225.021] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0225.021] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0225.021] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0225.021] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0225.021] CloseHandle (hObject=0x6d0) returned 1 [0225.038] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0225.042] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0225.042] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0225.042] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0225.047] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0225.047] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageStart.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0225.047] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageStart.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagestart.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0225.048] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1032) returned 1 [0225.048] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1032) returned 1 [0225.048] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x2e6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0225.048] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0225.049] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.049] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0225.049] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0225.050] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.050] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x408, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x408, lpOverlapped=0x0) returned 1 [0225.050] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0225.050] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x408, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x410) returned 1 [0225.050] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.050] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x410, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x410, lpOverlapped=0x0) returned 1 [0225.050] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0225.050] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0225.050] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0225.050] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0225.050] CloseHandle (hObject=0x6d0) returned 1 [0225.066] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0225.070] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0225.070] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0225.071] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0225.071] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0225.071] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageStorageSenseSaveLocations.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0225.072] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageStorageSenseSaveLocations.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagestoragesensesavelocations.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0225.072] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1198) returned 1 [0225.072] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1198) returned 1 [0225.072] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x38c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0225.072] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0225.074] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.074] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0225.074] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0225.074] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.074] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x4ae, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x4ae, lpOverlapped=0x0) returned 1 [0225.075] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0225.075] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x4ae, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x4b0) returned 1 [0225.075] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.075] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x4b0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4b0, lpOverlapped=0x0) returned 1 [0225.075] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0225.075] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0225.075] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0225.075] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0225.075] CloseHandle (hObject=0x6d0) returned 1 [0225.095] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0225.100] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0225.100] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0225.101] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0225.101] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0225.101] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageStorageSenseStorageOverview.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0225.102] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageStorageSenseStorageOverview.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagestoragesensestorageoverview.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0225.102] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1142) returned 1 [0225.102] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1142) returned 1 [0225.103] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x354, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0225.103] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0225.104] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.104] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae7150) returned 1 [0225.104] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0225.104] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.104] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x476, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x476, lpOverlapped=0x0) returned 1 [0225.105] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0225.105] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x476, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x480) returned 1 [0225.105] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.105] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x480, lpOverlapped=0x0) returned 1 [0225.105] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0225.105] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0225.105] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0225.105] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0225.105] CloseHandle (hObject=0x6d0) returned 1 [0225.130] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0225.135] CryptDestroyKey (hKey=0x665aae7150) returned 1 [0225.136] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0225.136] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0225.136] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0225.136] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageThemes.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0225.137] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageThemes.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagethemes.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0225.138] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1037) returned 1 [0225.138] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1037) returned 1 [0225.138] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x2eb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0225.138] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0225.139] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.139] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0225.139] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0225.140] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.140] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x40d, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x40d, lpOverlapped=0x0) returned 1 [0225.140] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0225.140] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x40d, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x410) returned 1 [0225.140] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.140] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x410, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x410, lpOverlapped=0x0) returned 1 [0225.140] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0225.141] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0225.141] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0225.141] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0225.141] CloseHandle (hObject=0x6d0) returned 1 [0225.162] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0225.167] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0225.167] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0225.168] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0225.168] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0225.168] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageTimeRegionDateTime.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0225.169] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageTimeRegionDateTime.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagetimeregiondatetime.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0225.169] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1097) returned 1 [0225.169] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1097) returned 1 [0225.170] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x327, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0225.170] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0225.171] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.171] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0225.171] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0225.171] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.171] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x449, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x449, lpOverlapped=0x0) returned 1 [0225.172] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0225.172] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x449, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x450) returned 1 [0225.172] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.172] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x450, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x450, lpOverlapped=0x0) returned 1 [0225.172] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0225.172] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0225.172] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0225.172] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0225.172] CloseHandle (hObject=0x6d0) returned 1 [0225.193] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0225.198] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0225.198] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0225.198] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0225.198] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0225.198] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageTimeRegionLanguage.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0225.199] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageTimeRegionLanguage.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagetimeregionlanguage.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0225.200] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1097) returned 1 [0225.200] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1097) returned 1 [0225.200] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x327, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0225.200] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0225.201] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.201] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6820) returned 1 [0225.201] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0225.202] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.202] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x449, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x449, lpOverlapped=0x0) returned 1 [0225.202] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0225.202] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x449, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x450) returned 1 [0225.202] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.202] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x450, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x450, lpOverlapped=0x0) returned 1 [0225.202] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0225.202] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0225.202] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0225.203] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0225.203] CloseHandle (hObject=0x6d0) returned 1 [0225.285] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0225.289] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0225.289] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0225.289] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0225.289] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0225.290] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageTimeRegionSpelling.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0225.290] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageTimeRegionSpelling.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagetimeregionspelling.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0225.291] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1097) returned 1 [0225.291] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1097) returned 1 [0225.291] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x327, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0225.291] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0225.292] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.292] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0225.292] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0225.292] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.292] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x449, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x449, lpOverlapped=0x0) returned 1 [0225.293] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0225.293] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x449, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x450) returned 1 [0225.293] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.293] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x450, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x450, lpOverlapped=0x0) returned 1 [0225.293] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0225.293] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0225.293] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0225.293] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0225.293] CloseHandle (hObject=0x6d0) returned 1 [0225.311] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0225.315] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0225.315] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0225.315] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0225.315] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0225.315] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0225.315] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0225.316] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_Settings_DeveloperModeGroup.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0225.316] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_Settings_DeveloperModeGroup.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settings_developermodegroup.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0225.317] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1144) returned 1 [0225.317] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1144) returned 1 [0225.317] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x356, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0225.317] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0225.318] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.318] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0225.318] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0225.318] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.318] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x478, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x478, lpOverlapped=0x0) returned 1 [0225.319] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0225.319] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x478, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x480) returned 1 [0225.319] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.319] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x480, lpOverlapped=0x0) returned 1 [0225.319] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0225.319] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0225.319] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0225.319] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0225.319] CloseHandle (hObject=0x6d0) returned 1 [0225.336] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0225.341] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0225.341] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0225.341] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0225.341] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0225.342] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_Settings_DeviceDiscoveryGroup.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0225.342] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_Settings_DeviceDiscoveryGroup.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settings_devicediscoverygroup.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0225.343] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1154) returned 1 [0225.343] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1154) returned 1 [0225.343] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x360, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0225.343] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0225.344] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.345] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae70e0) returned 1 [0225.345] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0225.345] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.345] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x482, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x482, lpOverlapped=0x0) returned 1 [0225.346] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0225.346] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x482, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x490) returned 1 [0225.346] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.346] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x490, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x490, lpOverlapped=0x0) returned 1 [0225.346] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0225.346] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0225.346] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0225.346] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0225.346] CloseHandle (hObject=0x6d0) returned 1 [0225.363] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0225.368] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0225.368] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0225.368] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0225.368] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0225.368] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_CursorThickness.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0225.369] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_CursorThickness.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_cursorthickness.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0225.370] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1296) returned 1 [0225.370] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1296) returned 1 [0225.370] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x3ee, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0225.370] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0225.372] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.372] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae7150) returned 1 [0225.372] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0225.372] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.372] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x510, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x510, lpOverlapped=0x0) returned 1 [0225.372] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0225.372] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x510, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x520) returned 1 [0225.372] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.372] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x520, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x520, lpOverlapped=0x0) returned 1 [0225.373] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0225.373] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0225.373] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0225.373] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0225.373] CloseHandle (hObject=0x6d0) returned 1 [0225.395] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0225.399] CryptDestroyKey (hKey=0x665aae7150) returned 1 [0225.399] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0225.400] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0225.400] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0225.400] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_IsAnimationsEnabled.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0225.401] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_IsAnimationsEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_isanimationsenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0225.401] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1316) returned 1 [0225.401] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1316) returned 1 [0225.401] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x402, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0225.401] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0225.402] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.402] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae66d0) returned 1 [0225.402] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0225.403] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.403] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x524, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x524, lpOverlapped=0x0) returned 1 [0225.403] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0225.403] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x524, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x530) returned 1 [0225.403] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.403] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x530, lpOverlapped=0x0) returned 1 [0225.403] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0225.403] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0225.403] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0225.403] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0225.403] CloseHandle (hObject=0x6d0) returned 1 [0225.422] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0225.426] CryptDestroyKey (hKey=0x665aae66d0) returned 1 [0225.426] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0225.426] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0225.426] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0225.427] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_IsMouseKeysEnabled.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0225.427] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_IsMouseKeysEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_ismousekeysenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0225.428] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1303) returned 1 [0225.428] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1303) returned 1 [0225.428] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x3f5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0225.428] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0225.429] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.429] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0225.429] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0225.429] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.429] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x517, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x517, lpOverlapped=0x0) returned 1 [0225.430] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0225.430] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x517, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x520) returned 1 [0225.430] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.430] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x520, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x520, lpOverlapped=0x0) returned 1 [0225.430] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0225.430] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0225.430] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0225.430] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0225.430] CloseHandle (hObject=0x6d0) returned 1 [0225.449] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0225.455] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0225.455] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0225.455] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0225.455] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0225.455] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_IsOverlappedContentEnabled.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0225.456] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_IsOverlappedContentEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_isoverlappedcontentenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0225.457] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1351) returned 1 [0225.457] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1351) returned 1 [0225.457] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x425, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0225.457] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0225.458] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.458] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6820) returned 1 [0225.458] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0225.459] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.459] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x547, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x547, lpOverlapped=0x0) returned 1 [0225.459] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0225.459] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x547, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x550) returned 1 [0225.459] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.459] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x550, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x550, lpOverlapped=0x0) returned 1 [0225.459] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0225.459] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0225.459] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0225.459] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0225.460] CloseHandle (hObject=0x6d0) returned 1 [0225.481] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0225.487] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0225.487] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0225.487] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0225.487] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0225.487] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsAutoStartEnabled.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0225.488] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsAutoStartEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_magnifier_isautostartenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0225.489] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1357) returned 1 [0225.489] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1357) returned 1 [0225.489] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x42b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0225.489] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0225.490] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.490] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6f20) returned 1 [0225.490] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0225.491] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.491] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x54d, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x54d, lpOverlapped=0x0) returned 1 [0225.491] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0225.491] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x54d, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x550) returned 1 [0225.491] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.491] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x550, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x550, lpOverlapped=0x0) returned 1 [0225.491] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0225.491] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0225.491] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0225.491] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0225.492] CloseHandle (hObject=0x6d0) returned 1 [0225.513] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0225.519] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0225.519] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0225.519] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0225.519] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0225.519] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsEnabled.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0225.520] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_magnifier_isenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0225.521] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1312) returned 1 [0225.521] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1312) returned 1 [0225.521] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x3fe, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0225.521] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0225.522] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.522] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0225.522] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0225.523] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.523] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x520, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x520, lpOverlapped=0x0) returned 1 [0225.523] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0225.523] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x520, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x530) returned 1 [0225.523] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.523] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x530, lpOverlapped=0x0) returned 1 [0225.523] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0225.523] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0225.523] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0225.523] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0225.523] CloseHandle (hObject=0x6d0) returned 1 [0225.545] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0225.550] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0225.550] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0225.551] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0225.551] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0225.551] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsFollowInsertPointEnabled.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0225.552] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsFollowInsertPointEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_magnifier_isfollowinsertpointenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0225.552] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1412) returned 1 [0225.552] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1412) returned 1 [0225.552] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x462, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0225.552] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0225.554] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.554] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6740) returned 1 [0225.554] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0225.554] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.554] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x584, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x584, lpOverlapped=0x0) returned 1 [0225.555] CryptEncrypt (in: hKey=0x665aae6740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0225.555] CryptEncrypt (in: hKey=0x665aae6740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x584, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x590) returned 1 [0225.555] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.555] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x590, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x590, lpOverlapped=0x0) returned 1 [0225.555] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0225.555] CryptExportKey (in: hKey=0x665aae6740, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0225.555] CryptExportKey (in: hKey=0x665aae6740, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0225.555] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0225.555] CloseHandle (hObject=0x6d0) returned 1 [0225.577] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0225.582] CryptDestroyKey (hKey=0x665aae6740) returned 1 [0225.582] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0225.583] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0225.584] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0225.584] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsFollowKeyFocusEnabled.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0225.585] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsFollowKeyFocusEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_magnifier_isfollowkeyfocusenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0225.586] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1397) returned 1 [0225.586] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1397) returned 1 [0225.586] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x453, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0225.586] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0225.587] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.587] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae70e0) returned 1 [0225.587] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0225.588] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.588] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x575, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x575, lpOverlapped=0x0) returned 1 [0225.588] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0225.588] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x575, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x580) returned 1 [0225.588] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.588] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x580, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x580, lpOverlapped=0x0) returned 1 [0225.588] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0225.588] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0225.588] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0225.588] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0225.588] CloseHandle (hObject=0x6d0) returned 1 [0225.610] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0225.616] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0225.616] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0225.616] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0225.616] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0225.616] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsInversionColorEnabled.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0225.617] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsInversionColorEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_magnifier_isinversioncolorenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0225.618] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1382) returned 1 [0225.618] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1382) returned 1 [0225.618] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x444, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0225.618] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0225.619] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.619] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0225.619] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0225.620] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.620] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x566, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x566, lpOverlapped=0x0) returned 1 [0225.620] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0225.620] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x566, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x570) returned 1 [0225.620] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.620] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x570, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x570, lpOverlapped=0x0) returned 1 [0225.620] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0225.620] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0225.620] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0225.621] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0225.621] CloseHandle (hObject=0x6d0) returned 1 [0225.643] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0225.648] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0225.648] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0225.648] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0225.648] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0225.648] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_MouseCursorColor.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0225.649] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_MouseCursorColor.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_mousecursorcolor.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0225.650] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1300) returned 1 [0225.650] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1300) returned 1 [0225.650] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x3f2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0225.650] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0225.651] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.651] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6f20) returned 1 [0225.652] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0225.652] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.652] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x514, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x514, lpOverlapped=0x0) returned 1 [0225.652] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0225.652] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x514, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x520) returned 1 [0225.652] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.652] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x520, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x520, lpOverlapped=0x0) returned 1 [0225.653] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0225.653] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0225.653] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0225.653] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0225.653] CloseHandle (hObject=0x6d0) returned 1 [0225.675] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0225.680] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0225.680] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0225.681] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0225.681] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0225.681] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_MouseCursorSize.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0225.682] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_MouseCursorSize.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_mousecursorsize.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0225.682] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1294) returned 1 [0225.682] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1294) returned 1 [0225.682] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x3ec, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0225.682] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0225.684] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.684] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae65f0) returned 1 [0225.684] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0225.684] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.684] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x50e, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x50e, lpOverlapped=0x0) returned 1 [0225.685] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0225.685] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x50e, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x510) returned 1 [0225.685] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.685] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x510, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x510, lpOverlapped=0x0) returned 1 [0225.685] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0225.685] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0225.685] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0225.685] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0225.685] CloseHandle (hObject=0x6d0) returned 1 [0225.707] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0225.712] CryptDestroyKey (hKey=0x665aae65f0) returned 1 [0225.713] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0225.713] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0225.713] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0225.713] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsAutoStartEnabled.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0225.714] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsAutoStartEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_isautostartenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0225.715] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1350) returned 1 [0225.715] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1350) returned 1 [0225.715] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x424, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0225.715] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0225.716] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.716] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0225.716] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0225.717] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.717] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x546, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x546, lpOverlapped=0x0) returned 1 [0225.717] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0225.717] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x546, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x550) returned 1 [0225.717] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.717] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x550, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x550, lpOverlapped=0x0) returned 1 [0225.717] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0225.717] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0225.717] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0225.717] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0225.718] CloseHandle (hObject=0x6d0) returned 1 [0225.739] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0225.744] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0225.744] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0225.745] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0225.745] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0225.745] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsDuckAudioEnabled.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0225.746] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsDuckAudioEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_isduckaudioenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0225.746] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1355) returned 1 [0225.746] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1355) returned 1 [0225.747] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x429, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0225.747] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0225.748] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.748] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae70e0) returned 1 [0225.748] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0225.748] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.748] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x54b, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x54b, lpOverlapped=0x0) returned 1 [0225.749] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0225.749] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x54b, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x550) returned 1 [0225.749] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.749] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x550, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x550, lpOverlapped=0x0) returned 1 [0225.749] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0225.749] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0225.749] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0225.749] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0225.749] CloseHandle (hObject=0x6d0) returned 1 [0225.771] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0225.776] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0225.776] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0225.777] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0225.777] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0225.777] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsEchoCharacterEnabled.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0225.778] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsEchoCharacterEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_isechocharacterenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0225.778] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1375) returned 1 [0225.778] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1375) returned 1 [0225.779] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x43d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0225.779] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0225.780] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.780] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6740) returned 1 [0225.780] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0225.780] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.780] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x55f, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x55f, lpOverlapped=0x0) returned 1 [0225.781] CryptEncrypt (in: hKey=0x665aae6740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0225.781] CryptEncrypt (in: hKey=0x665aae6740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x55f, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x560) returned 1 [0225.781] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.781] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x560, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x560, lpOverlapped=0x0) returned 1 [0225.781] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0225.781] CryptExportKey (in: hKey=0x665aae6740, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0225.781] CryptExportKey (in: hKey=0x665aae6740, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0225.781] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0225.781] CloseHandle (hObject=0x6d0) returned 1 [0225.803] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0225.808] CryptDestroyKey (hKey=0x665aae6740) returned 1 [0225.808] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0225.808] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0225.808] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0225.809] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsEchoWordEnabled.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0225.809] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsEchoWordEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_isechowordenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0225.810] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1350) returned 1 [0225.810] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1350) returned 1 [0225.810] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x424, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0225.810] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0225.812] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.812] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae70e0) returned 1 [0225.812] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0225.812] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.812] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x546, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x546, lpOverlapped=0x0) returned 1 [0225.812] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0225.812] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x546, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x550) returned 1 [0225.812] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.812] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x550, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x550, lpOverlapped=0x0) returned 1 [0225.813] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0225.813] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0225.813] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0225.813] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0225.813] CloseHandle (hObject=0x6d0) returned 1 [0225.834] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0225.839] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0225.839] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0225.840] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0225.840] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0225.840] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsEnabled.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0225.841] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_isenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0225.841] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1305) returned 1 [0225.841] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1305) returned 1 [0225.841] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x3f7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0225.842] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0225.843] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.843] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0225.843] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0225.843] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.843] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x519, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x519, lpOverlapped=0x0) returned 1 [0225.844] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0225.844] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x519, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x520) returned 1 [0225.844] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.844] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x520, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x520, lpOverlapped=0x0) returned 1 [0225.844] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0225.844] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0225.844] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0225.844] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0225.844] CloseHandle (hObject=0x6d0) returned 1 [0225.865] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0225.870] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0225.871] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0225.871] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0225.871] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0225.871] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsFastKeyEntryEnabled.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0225.872] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsFastKeyEntryEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_isfastkeyentryenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0225.873] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1371) returned 1 [0225.873] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1371) returned 1 [0225.873] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x439, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0225.873] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0225.874] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.874] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6f20) returned 1 [0225.874] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0225.875] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.875] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x55b, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x55b, lpOverlapped=0x0) returned 1 [0225.875] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0225.875] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x55b, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x560) returned 1 [0225.875] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.875] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x560, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x560, lpOverlapped=0x0) returned 1 [0225.875] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0225.875] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0225.875] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0225.875] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0225.876] CloseHandle (hObject=0x6d0) returned 1 [0225.898] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0225.904] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0225.904] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0225.904] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0225.904] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0225.904] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsFollowInsertionEnabled.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0225.905] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsFollowInsertionEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_isfollowinsertionenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0225.906] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1386) returned 1 [0225.906] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1386) returned 1 [0225.906] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x448, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0225.906] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0225.908] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.908] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0225.908] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0225.908] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.908] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x56a, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x56a, lpOverlapped=0x0) returned 1 [0225.909] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0225.909] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x56a, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x570) returned 1 [0225.909] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.909] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x570, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x570, lpOverlapped=0x0) returned 1 [0225.909] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0225.909] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0225.909] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0225.909] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0225.909] CloseHandle (hObject=0x6d0) returned 1 [0225.930] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0225.935] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0225.935] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0225.935] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0225.935] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0225.936] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsHighlightCursorEnabled.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0225.946] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsHighlightCursorEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_ishighlightcursorenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0225.947] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1386) returned 1 [0225.947] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1386) returned 1 [0225.947] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x448, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0225.947] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0225.949] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.949] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae70e0) returned 1 [0225.949] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0225.949] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.949] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x56a, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x56a, lpOverlapped=0x0) returned 1 [0225.949] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0225.949] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x56a, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x570) returned 1 [0225.949] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0225.949] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x570, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x570, lpOverlapped=0x0) returned 1 [0225.950] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0225.950] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0225.950] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0225.950] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0225.950] CloseHandle (hObject=0x6d0) returned 1 [0225.981] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0225.987] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0225.987] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0225.987] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0225.987] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0225.988] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsPlayAudioCuesEnabled.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0226.010] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsPlayAudioCuesEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_isplayaudiocuesenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0226.011] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1375) returned 1 [0226.011] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1375) returned 1 [0226.011] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x43d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.011] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0226.012] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.012] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae7150) returned 1 [0226.012] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0226.013] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.013] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x55f, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x55f, lpOverlapped=0x0) returned 1 [0226.013] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0226.013] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x55f, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x560) returned 1 [0226.013] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.013] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x560, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x560, lpOverlapped=0x0) returned 1 [0226.013] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0226.013] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0226.013] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0226.013] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0226.013] CloseHandle (hObject=0x6d0) returned 1 [0226.036] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0226.041] CryptDestroyKey (hKey=0x665aae7150) returned 1 [0226.041] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0226.041] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0226.041] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0226.042] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsReadHintsEnabled.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0226.042] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsReadHintsEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_isreadhintsenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0226.043] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1355) returned 1 [0226.043] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1355) returned 1 [0226.043] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x429, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.043] ReadFile (in: hFile=0x6d0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0226.045] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.045] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6f20) returned 1 [0226.045] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0226.045] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.045] ReadFile (in: hFile=0x6d0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x54b, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x54b, lpOverlapped=0x0) returned 1 [0226.045] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0226.045] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x54b, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x550) returned 1 [0226.045] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.045] WriteFile (in: hFile=0x6d0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x550, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x550, lpOverlapped=0x0) returned 1 [0226.046] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0226.046] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0226.046] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0226.046] WriteFile (in: hFile=0x6d0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0226.046] CloseHandle (hObject=0x6d0) returned 1 [0226.068] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0226.073] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0226.073] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0226.074] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0226.074] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0226.074] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_SpeechPitch.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0226.074] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_SpeechPitch.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_speechpitch.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x428 [0226.075] GetFileSizeEx (in: hFile=0x428, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1320) returned 1 [0226.075] GetFileSizeEx (in: hFile=0x428, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1320) returned 1 [0226.075] SetFilePointerEx (in: hFile=0x428, liDistanceToMove=0x406, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.075] ReadFile (in: hFile=0x428, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0226.079] SetFilePointer (in: hFile=0x428, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.079] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0226.079] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0226.079] SetFilePointer (in: hFile=0x428, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.079] ReadFile (in: hFile=0x428, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x528, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x528, lpOverlapped=0x0) returned 1 [0226.080] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0226.080] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x528, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x530) returned 1 [0226.080] SetFilePointer (in: hFile=0x428, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.080] WriteFile (in: hFile=0x428, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x530, lpOverlapped=0x0) returned 1 [0226.080] WriteFile (in: hFile=0x428, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0226.080] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0226.080] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0226.080] WriteFile (in: hFile=0x428, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0226.080] CloseHandle (hObject=0x428) returned 1 [0226.102] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0226.107] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0226.107] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0226.108] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0226.108] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0226.108] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_SpeechSpeed.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0226.109] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_SpeechSpeed.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_speechspeed.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x428 [0226.109] GetFileSizeEx (in: hFile=0x428, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1320) returned 1 [0226.110] GetFileSizeEx (in: hFile=0x428, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1320) returned 1 [0226.110] SetFilePointerEx (in: hFile=0x428, liDistanceToMove=0x406, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.110] ReadFile (in: hFile=0x428, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0226.111] SetFilePointer (in: hFile=0x428, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.111] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae7150) returned 1 [0226.112] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0226.112] SetFilePointer (in: hFile=0x428, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.112] ReadFile (in: hFile=0x428, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x528, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x528, lpOverlapped=0x0) returned 1 [0226.112] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0226.112] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x528, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x530) returned 1 [0226.112] SetFilePointer (in: hFile=0x428, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.112] WriteFile (in: hFile=0x428, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x530, lpOverlapped=0x0) returned 1 [0226.112] WriteFile (in: hFile=0x428, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0226.113] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0226.113] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0226.113] WriteFile (in: hFile=0x428, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0226.113] CloseHandle (hObject=0x428) returned 1 [0226.134] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0226.140] CryptDestroyKey (hKey=0x665aae7150) returned 1 [0226.140] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0226.140] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0226.143] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0226.143] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_SpeechVoices.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0226.144] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_SpeechVoices.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_speechvoices.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x428 [0226.144] GetFileSizeEx (in: hFile=0x428, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1325) returned 1 [0226.144] GetFileSizeEx (in: hFile=0x428, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1325) returned 1 [0226.145] SetFilePointerEx (in: hFile=0x428, liDistanceToMove=0x40b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.145] ReadFile (in: hFile=0x428, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0226.146] SetFilePointer (in: hFile=0x428, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.146] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0226.146] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0226.146] SetFilePointer (in: hFile=0x428, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.146] ReadFile (in: hFile=0x428, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x52d, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x52d, lpOverlapped=0x0) returned 1 [0226.147] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0226.147] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x52d, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x530) returned 1 [0226.147] SetFilePointer (in: hFile=0x428, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.147] WriteFile (in: hFile=0x428, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x530, lpOverlapped=0x0) returned 1 [0226.147] WriteFile (in: hFile=0x428, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0226.147] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0226.147] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0226.147] WriteFile (in: hFile=0x428, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0226.147] CloseHandle (hObject=0x428) returned 1 [0226.169] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0226.175] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0226.175] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0226.175] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0226.175] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0226.175] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_NotificationDuration.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0226.176] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_NotificationDuration.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_notificationduration.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x428 [0226.177] GetFileSizeEx (in: hFile=0x428, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1321) returned 1 [0226.177] GetFileSizeEx (in: hFile=0x428, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1321) returned 1 [0226.177] SetFilePointerEx (in: hFile=0x428, liDistanceToMove=0x407, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.177] ReadFile (in: hFile=0x428, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0226.178] SetFilePointer (in: hFile=0x428, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.178] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0226.178] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0226.179] SetFilePointer (in: hFile=0x428, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.179] ReadFile (in: hFile=0x428, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x529, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x529, lpOverlapped=0x0) returned 1 [0226.179] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0226.179] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x529, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x530) returned 1 [0226.179] SetFilePointer (in: hFile=0x428, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.179] WriteFile (in: hFile=0x428, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x530, lpOverlapped=0x0) returned 1 [0226.179] WriteFile (in: hFile=0x428, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0226.179] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0226.179] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0226.179] WriteFile (in: hFile=0x428, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0226.179] CloseHandle (hObject=0x428) returned 1 [0226.201] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0226.207] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0226.207] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0226.207] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0226.207] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d5f0000 [0226.207] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Autoplay_IsEnabled.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0226.208] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Autoplay_IsEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_autoplay_isenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x428 [0226.209] GetFileSizeEx (in: hFile=0x428, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1219) returned 1 [0226.209] GetFileSizeEx (in: hFile=0x428, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1219) returned 1 [0226.209] SetFilePointerEx (in: hFile=0x428, liDistanceToMove=0x3a1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.209] ReadFile (in: hFile=0x428, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0226.211] SetFilePointer (in: hFile=0x428, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.211] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6820) returned 1 [0226.211] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0226.211] SetFilePointer (in: hFile=0x428, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.211] ReadFile (in: hFile=0x428, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x4c3, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x4c3, lpOverlapped=0x0) returned 1 [0226.212] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0226.212] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x4c3, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x4d0) returned 1 [0226.212] SetFilePointer (in: hFile=0x428, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.212] WriteFile (in: hFile=0x428, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x4d0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4d0, lpOverlapped=0x0) returned 1 [0226.212] WriteFile (in: hFile=0x428, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0226.212] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0226.212] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0226.212] WriteFile (in: hFile=0x428, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0226.212] CloseHandle (hObject=0x428) returned 1 [0226.312] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0226.319] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0226.319] VirtualFree (lpAddress=0x665d5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0226.320] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0226.320] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d470000 [0226.320] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_BatterySaver_LandingPage_OverrideControl.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0226.321] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_BatterySaver_LandingPage_OverrideControl.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_batterysaver_landingpage_overridecontrol.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f0 [0226.322] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1350) returned 1 [0226.322] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1350) returned 1 [0226.322] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x424, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.322] ReadFile (in: hFile=0x2f0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0226.323] SetFilePointer (in: hFile=0x2f0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.323] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0226.323] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0226.324] SetFilePointer (in: hFile=0x2f0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.324] ReadFile (in: hFile=0x2f0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x546, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x546, lpOverlapped=0x0) returned 1 [0226.324] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0226.324] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x546, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x550) returned 1 [0226.324] SetFilePointer (in: hFile=0x2f0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.324] WriteFile (in: hFile=0x2f0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x550, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x550, lpOverlapped=0x0) returned 1 [0226.324] WriteFile (in: hFile=0x2f0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0226.324] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0226.324] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0226.324] WriteFile (in: hFile=0x2f0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0226.324] CloseHandle (hObject=0x2f0) returned 1 [0226.347] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0226.352] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0226.352] VirtualFree (lpAddress=0x665d470000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0226.352] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0226.352] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d470000 [0226.353] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_BatterySaver_LandingPage_SettingsLink-2.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0226.354] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_BatterySaver_LandingPage_SettingsLink-2.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_batterysaver_landingpage_settingslink-2.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f0 [0226.354] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1343) returned 1 [0226.354] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1343) returned 1 [0226.354] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x41d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.354] ReadFile (in: hFile=0x2f0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0226.356] SetFilePointer (in: hFile=0x2f0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.356] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae65f0) returned 1 [0226.356] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0226.356] SetFilePointer (in: hFile=0x2f0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.356] ReadFile (in: hFile=0x2f0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x53f, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x53f, lpOverlapped=0x0) returned 1 [0226.357] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0226.357] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x53f, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x540) returned 1 [0226.357] SetFilePointer (in: hFile=0x2f0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.357] WriteFile (in: hFile=0x2f0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x540, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x540, lpOverlapped=0x0) returned 1 [0226.357] WriteFile (in: hFile=0x2f0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0226.357] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0226.357] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0226.357] WriteFile (in: hFile=0x2f0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0226.357] CloseHandle (hObject=0x2f0) returned 1 [0226.375] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0226.380] CryptDestroyKey (hKey=0x665aae65f0) returned 1 [0226.380] VirtualFree (lpAddress=0x665d470000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0226.380] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0226.380] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d470000 [0226.381] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_BatterySaver_LandingPage_SettingsLink.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0226.382] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_BatterySaver_LandingPage_SettingsLink.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_batterysaver_landingpage_settingslink.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f0 [0226.383] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1335) returned 1 [0226.383] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1335) returned 1 [0226.383] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x415, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.383] ReadFile (in: hFile=0x2f0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0226.385] SetFilePointer (in: hFile=0x2f0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.385] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0226.385] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0226.385] SetFilePointer (in: hFile=0x2f0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.385] ReadFile (in: hFile=0x2f0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x537, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x537, lpOverlapped=0x0) returned 1 [0226.385] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0226.385] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x537, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x540) returned 1 [0226.385] SetFilePointer (in: hFile=0x2f0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.385] WriteFile (in: hFile=0x2f0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x540, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x540, lpOverlapped=0x0) returned 1 [0226.385] WriteFile (in: hFile=0x2f0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0226.385] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0226.385] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0226.386] WriteFile (in: hFile=0x2f0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0226.386] CloseHandle (hObject=0x2f0) returned 1 [0226.404] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0226.408] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0226.408] VirtualFree (lpAddress=0x665d470000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0226.408] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0226.408] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d470000 [0226.409] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_BatterySaver_LandingPage_UsageDetailsLink-2.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0226.409] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_BatterySaver_LandingPage_UsageDetailsLink-2.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_batterysaver_landingpage_usagedetailslink-2.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f0 [0226.410] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1358) returned 1 [0226.410] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1358) returned 1 [0226.410] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x42c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.410] ReadFile (in: hFile=0x2f0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0226.411] SetFilePointer (in: hFile=0x2f0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.411] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0226.411] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0226.411] SetFilePointer (in: hFile=0x2f0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.411] ReadFile (in: hFile=0x2f0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x54e, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x54e, lpOverlapped=0x0) returned 1 [0226.412] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0226.412] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x54e, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x550) returned 1 [0226.412] SetFilePointer (in: hFile=0x2f0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.412] WriteFile (in: hFile=0x2f0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x550, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x550, lpOverlapped=0x0) returned 1 [0226.412] WriteFile (in: hFile=0x2f0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0226.412] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0226.412] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0226.412] WriteFile (in: hFile=0x2f0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0226.412] CloseHandle (hObject=0x2f0) returned 1 [0226.431] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0226.435] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0226.435] VirtualFree (lpAddress=0x665d470000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0226.436] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0226.436] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d470000 [0226.436] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_BatterySaver_LandingPage_UsageDetailsLink.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0226.437] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_BatterySaver_LandingPage_UsageDetailsLink.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_batterysaver_landingpage_usagedetailslink.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f0 [0226.437] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1350) returned 1 [0226.437] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1350) returned 1 [0226.437] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x424, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.437] ReadFile (in: hFile=0x2f0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0226.439] SetFilePointer (in: hFile=0x2f0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.439] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae66d0) returned 1 [0226.439] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0226.439] SetFilePointer (in: hFile=0x2f0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.439] ReadFile (in: hFile=0x2f0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x546, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x546, lpOverlapped=0x0) returned 1 [0226.439] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0226.439] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x546, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x550) returned 1 [0226.439] SetFilePointer (in: hFile=0x2f0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.439] WriteFile (in: hFile=0x2f0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x550, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x550, lpOverlapped=0x0) returned 1 [0226.440] WriteFile (in: hFile=0x2f0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0226.440] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0226.440] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0226.440] WriteFile (in: hFile=0x2f0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0226.440] CloseHandle (hObject=0x2f0) returned 1 [0226.458] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0226.462] CryptDestroyKey (hKey=0x665aae66d0) returned 1 [0226.462] VirtualFree (lpAddress=0x665d470000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0226.462] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0226.462] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d470000 [0226.463] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DataSense_ConfigureSetLimitButton.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0226.463] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DataSense_ConfigureSetLimitButton.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_datasense_configuresetlimitbutton.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f0 [0226.464] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1312) returned 1 [0226.464] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1312) returned 1 [0226.464] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x3fe, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.464] ReadFile (in: hFile=0x2f0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0226.465] SetFilePointer (in: hFile=0x2f0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.465] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0226.465] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0226.465] SetFilePointer (in: hFile=0x2f0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.465] ReadFile (in: hFile=0x2f0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x520, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x520, lpOverlapped=0x0) returned 1 [0226.465] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0226.465] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x520, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x530) returned 1 [0226.465] SetFilePointer (in: hFile=0x2f0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.466] WriteFile (in: hFile=0x2f0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x530, lpOverlapped=0x0) returned 1 [0226.466] WriteFile (in: hFile=0x2f0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0226.466] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0226.466] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0226.466] WriteFile (in: hFile=0x2f0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0226.466] CloseHandle (hObject=0x2f0) returned 1 [0226.486] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0226.490] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0226.490] VirtualFree (lpAddress=0x665d470000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0226.490] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0226.490] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d470000 [0226.490] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DateTime_CountryRegion.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0226.491] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DateTime_CountryRegion.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_datetime_countryregion.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f0 [0226.491] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1251) returned 1 [0226.491] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1251) returned 1 [0226.492] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x3c1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.492] ReadFile (in: hFile=0x2f0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0226.495] SetFilePointer (in: hFile=0x2f0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.495] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0226.495] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0226.495] SetFilePointer (in: hFile=0x2f0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.495] ReadFile (in: hFile=0x2f0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x4e3, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x4e3, lpOverlapped=0x0) returned 1 [0226.495] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0226.495] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x4e3, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x4f0) returned 1 [0226.495] SetFilePointer (in: hFile=0x2f0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.495] WriteFile (in: hFile=0x2f0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4f0, lpOverlapped=0x0) returned 1 [0226.496] WriteFile (in: hFile=0x2f0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0226.496] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0226.496] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0226.496] WriteFile (in: hFile=0x2f0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0226.496] CloseHandle (hObject=0x2f0) returned 1 [0226.513] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0226.518] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0226.518] VirtualFree (lpAddress=0x665d470000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0226.518] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0226.518] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d470000 [0226.518] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DateTime_IsAutomaticDSTAdjustEnabled.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0226.519] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DateTime_IsAutomaticDSTAdjustEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_datetime_isautomaticdstadjustenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f0 [0226.519] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1311) returned 1 [0226.519] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1311) returned 1 [0226.520] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x3fd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.520] ReadFile (in: hFile=0x2f0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0226.521] SetFilePointer (in: hFile=0x2f0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.521] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6820) returned 1 [0226.521] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0226.521] SetFilePointer (in: hFile=0x2f0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.521] ReadFile (in: hFile=0x2f0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x51f, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x51f, lpOverlapped=0x0) returned 1 [0226.521] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0226.521] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x51f, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x520) returned 1 [0226.521] SetFilePointer (in: hFile=0x2f0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.522] WriteFile (in: hFile=0x2f0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x520, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x520, lpOverlapped=0x0) returned 1 [0226.522] WriteFile (in: hFile=0x2f0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0226.522] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0226.522] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0226.522] WriteFile (in: hFile=0x2f0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0226.522] CloseHandle (hObject=0x2f0) returned 1 [0226.540] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0226.544] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0226.544] VirtualFree (lpAddress=0x665d470000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0226.544] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0226.544] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d470000 [0226.545] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DateTime_IsTimeSetAutomaticallyEnabled.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0226.546] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DateTime_IsTimeSetAutomaticallyEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_datetime_istimesetautomaticallyenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f0 [0226.547] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1321) returned 1 [0226.547] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1321) returned 1 [0226.547] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x407, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.547] ReadFile (in: hFile=0x2f0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0226.548] SetFilePointer (in: hFile=0x2f0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.548] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0226.548] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0226.549] SetFilePointer (in: hFile=0x2f0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.549] ReadFile (in: hFile=0x2f0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x529, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x529, lpOverlapped=0x0) returned 1 [0226.549] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0226.549] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x529, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x530) returned 1 [0226.549] SetFilePointer (in: hFile=0x2f0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.549] WriteFile (in: hFile=0x2f0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x530, lpOverlapped=0x0) returned 1 [0226.549] WriteFile (in: hFile=0x2f0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0226.549] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0226.549] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0226.549] WriteFile (in: hFile=0x2f0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0226.549] CloseHandle (hObject=0x2f0) returned 1 [0226.567] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0226.571] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0226.571] VirtualFree (lpAddress=0x665d470000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0226.571] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0226.572] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d470000 [0226.572] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DateTime_Set.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0226.572] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DateTime_Set.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_datetime_set.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f0 [0226.573] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1191) returned 1 [0226.573] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1191) returned 1 [0226.573] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x385, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.573] ReadFile (in: hFile=0x2f0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0226.574] SetFilePointer (in: hFile=0x2f0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.574] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6f20) returned 1 [0226.574] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0226.575] SetFilePointer (in: hFile=0x2f0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.575] ReadFile (in: hFile=0x2f0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x4a7, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x4a7, lpOverlapped=0x0) returned 1 [0226.575] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0226.575] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x4a7, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x4b0) returned 1 [0226.575] SetFilePointer (in: hFile=0x2f0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.575] WriteFile (in: hFile=0x2f0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x4b0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4b0, lpOverlapped=0x0) returned 1 [0226.575] WriteFile (in: hFile=0x2f0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0226.575] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0226.575] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0226.575] WriteFile (in: hFile=0x2f0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0226.575] CloseHandle (hObject=0x2f0) returned 1 [0226.593] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0226.597] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0226.597] VirtualFree (lpAddress=0x665d470000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0226.598] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0226.598] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d470000 [0226.598] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DateTime_SetFormats.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0226.600] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DateTime_SetFormats.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_datetime_setformats.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f0 [0226.600] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1239) returned 1 [0226.600] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1239) returned 1 [0226.600] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x3b5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.600] ReadFile (in: hFile=0x2f0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0226.602] SetFilePointer (in: hFile=0x2f0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.602] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6f20) returned 1 [0226.602] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0226.602] SetFilePointer (in: hFile=0x2f0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.602] ReadFile (in: hFile=0x2f0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x4d7, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x4d7, lpOverlapped=0x0) returned 1 [0226.602] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0226.602] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x4d7, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x4e0) returned 1 [0226.602] SetFilePointer (in: hFile=0x2f0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.602] WriteFile (in: hFile=0x2f0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4e0, lpOverlapped=0x0) returned 1 [0226.602] WriteFile (in: hFile=0x2f0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0226.602] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0226.602] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0226.603] WriteFile (in: hFile=0x2f0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0226.603] CloseHandle (hObject=0x2f0) returned 1 [0226.621] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0226.625] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0226.625] VirtualFree (lpAddress=0x665d470000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0226.625] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0226.625] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d470000 [0226.626] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DateTime_TimezoneInfo.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0226.626] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DateTime_TimezoneInfo.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_datetime_timezoneinfo.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f0 [0226.627] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1236) returned 1 [0226.627] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1236) returned 1 [0226.627] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x3b2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.627] ReadFile (in: hFile=0x2f0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0226.628] SetFilePointer (in: hFile=0x2f0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.628] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0226.628] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0226.628] SetFilePointer (in: hFile=0x2f0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.629] ReadFile (in: hFile=0x2f0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x4d4, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x4d4, lpOverlapped=0x0) returned 1 [0226.629] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0226.629] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x4d4, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x4e0) returned 1 [0226.629] SetFilePointer (in: hFile=0x2f0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.629] WriteFile (in: hFile=0x2f0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4e0, lpOverlapped=0x0) returned 1 [0226.629] WriteFile (in: hFile=0x2f0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0226.629] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0226.629] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0226.629] WriteFile (in: hFile=0x2f0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0226.629] CloseHandle (hObject=0x2f0) returned 1 [0226.647] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0226.651] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0226.651] VirtualFree (lpAddress=0x665d470000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0226.651] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0226.651] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d470000 [0226.652] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DefaultApps_Audio.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0226.653] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DefaultApps_Audio.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_defaultapps_audio.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f0 [0226.654] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1213) returned 1 [0226.654] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1213) returned 1 [0226.654] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x39b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.654] ReadFile (in: hFile=0x2f0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0226.655] SetFilePointer (in: hFile=0x2f0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.655] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6f20) returned 1 [0226.655] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0226.655] SetFilePointer (in: hFile=0x2f0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.656] ReadFile (in: hFile=0x2f0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x4bd, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x4bd, lpOverlapped=0x0) returned 1 [0226.656] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0226.656] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x4bd, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x4c0) returned 1 [0226.656] SetFilePointer (in: hFile=0x2f0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.656] WriteFile (in: hFile=0x2f0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x4c0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4c0, lpOverlapped=0x0) returned 1 [0226.656] WriteFile (in: hFile=0x2f0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0226.656] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0226.656] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0226.656] WriteFile (in: hFile=0x2f0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0226.656] CloseHandle (hObject=0x2f0) returned 1 [0226.674] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0226.678] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0226.678] VirtualFree (lpAddress=0x665d470000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0226.678] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0226.679] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d470000 [0226.679] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DefaultApps_Browser.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0226.679] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DefaultApps_Browser.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_defaultapps_browser.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f0 [0226.680] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1223) returned 1 [0226.680] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1223) returned 1 [0226.680] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x3a5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.680] ReadFile (in: hFile=0x2f0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0226.681] SetFilePointer (in: hFile=0x2f0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.681] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0226.681] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0226.682] SetFilePointer (in: hFile=0x2f0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.682] ReadFile (in: hFile=0x2f0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x4c7, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x4c7, lpOverlapped=0x0) returned 1 [0226.682] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0226.682] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x4c7, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x4d0) returned 1 [0226.682] SetFilePointer (in: hFile=0x2f0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.682] WriteFile (in: hFile=0x2f0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x4d0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4d0, lpOverlapped=0x0) returned 1 [0226.682] WriteFile (in: hFile=0x2f0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0226.682] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0226.682] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0226.682] WriteFile (in: hFile=0x2f0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0226.682] CloseHandle (hObject=0x2f0) returned 1 [0226.700] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0226.704] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0226.704] VirtualFree (lpAddress=0x665d470000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0226.704] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0226.711] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d470000 [0226.711] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DefaultApps_Calendar.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0226.712] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DefaultApps_Calendar.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_defaultapps_calendar.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f0 [0226.713] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1228) returned 1 [0226.713] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1228) returned 1 [0226.713] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x3aa, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.713] ReadFile (in: hFile=0x2f0, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0226.714] SetFilePointer (in: hFile=0x2f0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.714] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae66d0) returned 1 [0226.714] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0226.714] SetFilePointer (in: hFile=0x2f0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.714] ReadFile (in: hFile=0x2f0, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x4cc, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x4cc, lpOverlapped=0x0) returned 1 [0226.715] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0226.715] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x4cc, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x4d0) returned 1 [0226.715] SetFilePointer (in: hFile=0x2f0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.715] WriteFile (in: hFile=0x2f0, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x4d0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4d0, lpOverlapped=0x0) returned 1 [0226.715] WriteFile (in: hFile=0x2f0, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0226.715] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0226.715] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0226.715] WriteFile (in: hFile=0x2f0, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0226.715] CloseHandle (hObject=0x2f0) returned 1 [0226.734] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0226.738] CryptDestroyKey (hKey=0x665aae66d0) returned 1 [0226.738] VirtualFree (lpAddress=0x665d470000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0226.739] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0226.739] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665d470000 [0226.739] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DefaultApps_Email.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0226.740] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DefaultApps_Email.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_defaultapps_email.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0226.740] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1213) returned 1 [0226.740] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1213) returned 1 [0226.740] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x39b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.740] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0226.741] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.741] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0226.741] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665dc00000 [0226.742] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.742] ReadFile (in: hFile=0x10c, lpBuffer=0x665dc00000, nNumberOfBytesToRead=0x4bd, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesRead=0x665da79c10*=0x4bd, lpOverlapped=0x0) returned 1 [0226.742] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0226.742] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x4bd, dwBufLen=0xf4250 | out: pbData=0x665dc00000*, pdwDataLen=0x665da79c08*=0x4c0) returned 1 [0226.742] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.742] WriteFile (in: hFile=0x10c, lpBuffer=0x665dc00000*, nNumberOfBytesToWrite=0x4c0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665dc00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4c0, lpOverlapped=0x0) returned 1 [0226.742] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0226.742] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0226.742] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0226.742] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0226.743] CloseHandle (hObject=0x10c) returned 1 [0226.763] VirtualFree (lpAddress=0x665dc00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0226.769] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0226.769] VirtualFree (lpAddress=0x665d470000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0226.769] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0226.769] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0226.770] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DefaultApps_Map.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0226.770] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DefaultApps_Map.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_defaultapps_map.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0226.771] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1203) returned 1 [0226.771] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1203) returned 1 [0226.771] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x391, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.771] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0226.772] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.772] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0226.772] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0226.772] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.772] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4b3, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4b3, lpOverlapped=0x0) returned 1 [0226.772] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0226.772] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4b3, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4c0) returned 1 [0226.772] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.772] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4c0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4c0, lpOverlapped=0x0) returned 1 [0226.772] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0226.772] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0226.773] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0226.773] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0226.773] CloseHandle (hObject=0x10c) returned 1 [0226.789] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0226.793] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0226.793] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0226.793] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0226.793] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0226.793] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DefaultApps_Photos.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0226.794] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DefaultApps_Photos.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_defaultapps_photos.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0226.794] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1218) returned 1 [0226.794] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1218) returned 1 [0226.794] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3a0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.795] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0226.796] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.796] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0226.796] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0226.796] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.796] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4c2, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4c2, lpOverlapped=0x0) returned 1 [0226.796] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0226.796] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4c2, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4d0) returned 1 [0226.796] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.796] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4d0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4d0, lpOverlapped=0x0) returned 1 [0226.796] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0226.796] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0226.797] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0226.797] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0226.797] CloseHandle (hObject=0x10c) returned 1 [0226.813] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0226.818] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0226.818] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0226.818] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0226.818] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0226.818] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DefaultApps_Video.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0226.819] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DefaultApps_Video.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_defaultapps_video.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0226.819] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1213) returned 1 [0226.819] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1213) returned 1 [0226.819] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x39b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.819] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0226.822] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.823] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0226.823] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0226.823] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.823] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4bd, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4bd, lpOverlapped=0x0) returned 1 [0226.823] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0226.823] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4bd, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4c0) returned 1 [0226.823] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.823] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4c0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4c0, lpOverlapped=0x0) returned 1 [0226.823] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0226.824] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0226.824] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0226.824] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0226.824] CloseHandle (hObject=0x10c) returned 1 [0226.846] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0226.852] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0226.852] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0226.852] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0226.852] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0226.853] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Devices_Pen_EnablePixie.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0226.853] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Devices_Pen_EnablePixie.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_devices_pen_enablepixie.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0226.854] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1233) returned 1 [0226.854] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1233) returned 1 [0226.854] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3af, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.854] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0226.856] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.856] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae70e0) returned 1 [0226.857] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0226.857] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.857] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4d1, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4d1, lpOverlapped=0x0) returned 1 [0226.857] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0226.857] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4d1, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4e0) returned 1 [0226.857] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.857] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4e0, lpOverlapped=0x0) returned 1 [0226.857] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0226.858] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0226.858] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0226.858] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0226.858] CloseHandle (hObject=0x10c) returned 1 [0226.880] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0226.885] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0226.885] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0226.886] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0226.886] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0226.886] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Devices_Pen_EnableRipple.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0226.887] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Devices_Pen_EnableRipple.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_devices_pen_enableripple.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0226.887] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1238) returned 1 [0226.887] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1238) returned 1 [0226.888] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3b4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.888] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0226.889] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.889] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0226.889] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0226.890] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.890] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4d6, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4d6, lpOverlapped=0x0) returned 1 [0226.890] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0226.890] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4d6, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4e0) returned 1 [0226.890] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.890] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4e0, lpOverlapped=0x0) returned 1 [0226.890] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0226.890] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0226.890] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0226.890] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0226.891] CloseHandle (hObject=0x10c) returned 1 [0226.914] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0226.919] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0226.919] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0226.920] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0226.920] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0226.920] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Devices_Pen_SetHandedness.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0226.921] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Devices_Pen_SetHandedness.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_devices_pen_sethandedness.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0226.922] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1243) returned 1 [0226.922] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1243) returned 1 [0226.922] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3b9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.922] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0226.924] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.924] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0226.924] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0226.924] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.924] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4db, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4db, lpOverlapped=0x0) returned 1 [0226.924] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0226.924] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4db, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4e0) returned 1 [0226.924] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.924] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4e0, lpOverlapped=0x0) returned 1 [0226.925] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0226.925] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0226.925] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0226.925] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0226.925] CloseHandle (hObject=0x10c) returned 1 [0226.958] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0226.963] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0226.963] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0226.963] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0226.963] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0226.964] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Device_Add.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0226.964] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Device_Add.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_device_add.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0226.965] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1185) returned 1 [0226.965] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1185) returned 1 [0226.965] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x37f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.965] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0226.967] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.967] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0226.967] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0226.968] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.968] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4a1, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4a1, lpOverlapped=0x0) returned 1 [0226.968] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0226.968] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4a1, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4b0) returned 1 [0226.968] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0226.968] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4b0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4b0, lpOverlapped=0x0) returned 1 [0226.968] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0226.968] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0226.968] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0226.968] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0226.969] CloseHandle (hObject=0x10c) returned 1 [0226.992] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0226.998] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0226.998] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0226.998] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0226.998] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0226.998] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_AdvancedSettings.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0226.999] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_AdvancedSettings.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_display_advancedsettings.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0227.000] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1262) returned 1 [0227.000] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1262) returned 1 [0227.000] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3cc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0227.000] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0227.002] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.002] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae70e0) returned 1 [0227.002] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0227.002] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.003] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4ee, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4ee, lpOverlapped=0x0) returned 1 [0227.003] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0227.003] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4ee, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4f0) returned 1 [0227.003] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.003] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4f0, lpOverlapped=0x0) returned 1 [0227.003] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0227.003] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0227.003] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0227.003] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0227.003] CloseHandle (hObject=0x10c) returned 1 [0227.027] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0227.032] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0227.032] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0227.033] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0227.033] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0227.033] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_DPI_Override.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0227.034] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_DPI_Override.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_display_dpi_override.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0227.035] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1242) returned 1 [0227.035] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1242) returned 1 [0227.035] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3b8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0227.035] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0227.036] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.036] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae70e0) returned 1 [0227.036] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0227.037] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.037] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4da, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4da, lpOverlapped=0x0) returned 1 [0227.037] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0227.037] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4da, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4e0) returned 1 [0227.037] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.037] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4e0, lpOverlapped=0x0) returned 1 [0227.037] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0227.037] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0227.037] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0227.038] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0227.038] CloseHandle (hObject=0x10c) returned 1 [0227.062] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0227.067] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0227.067] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0227.068] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0227.068] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0227.068] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_Duplicate.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0227.069] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_Duplicate.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_display_duplicate.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0227.070] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1227) returned 1 [0227.070] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1227) returned 1 [0227.070] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3a9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0227.070] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0227.071] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.071] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0227.071] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0227.072] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.072] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4cb, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4cb, lpOverlapped=0x0) returned 1 [0227.072] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0227.072] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4cb, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4d0) returned 1 [0227.072] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.072] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4d0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4d0, lpOverlapped=0x0) returned 1 [0227.072] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0227.072] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0227.073] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0227.073] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0227.073] CloseHandle (hObject=0x10c) returned 1 [0227.096] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0227.102] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0227.102] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0227.102] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0227.102] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0227.102] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_IdentifyDetectWireless.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0227.103] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_IdentifyDetectWireless.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_display_identifydetectwireless.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0227.104] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1292) returned 1 [0227.104] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1292) returned 1 [0227.104] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3ea, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0227.104] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0227.105] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.106] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0227.106] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0227.106] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.106] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x50c, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x50c, lpOverlapped=0x0) returned 1 [0227.106] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0227.106] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x50c, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x510) returned 1 [0227.106] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.106] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x510, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x510, lpOverlapped=0x0) returned 1 [0227.106] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0227.107] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0227.107] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0227.107] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0227.107] CloseHandle (hObject=0x10c) returned 1 [0227.130] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0227.136] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0227.136] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0227.136] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0227.136] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0227.136] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_IsAutoBrightnessEnabled.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0227.137] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_IsAutoBrightnessEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_display_isautobrightnessenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0227.138] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1297) returned 1 [0227.138] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1297) returned 1 [0227.138] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3ef, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0227.138] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0227.139] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.139] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0227.139] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0227.140] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.140] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x511, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x511, lpOverlapped=0x0) returned 1 [0227.140] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0227.140] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x511, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x520) returned 1 [0227.140] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.140] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x520, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x520, lpOverlapped=0x0) returned 1 [0227.140] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0227.141] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0227.141] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0227.141] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0227.141] CloseHandle (hObject=0x10c) returned 1 [0227.164] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0227.170] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0227.170] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0227.170] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0227.170] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0227.170] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_IsRotationLocked.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0227.171] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_IsRotationLocked.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_display_isrotationlocked.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0227.172] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1262) returned 1 [0227.172] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1262) returned 1 [0227.172] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3cc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0227.172] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0227.174] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.175] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6f20) returned 1 [0227.175] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0227.175] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.175] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4ee, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4ee, lpOverlapped=0x0) returned 1 [0227.175] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0227.175] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4ee, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4f0) returned 1 [0227.175] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.175] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4f0, lpOverlapped=0x0) returned 1 [0227.175] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0227.176] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0227.176] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0227.176] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0227.176] CloseHandle (hObject=0x10c) returned 1 [0227.199] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0227.205] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0227.205] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0227.205] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0227.205] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0227.206] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_MainMonitor.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0227.206] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_MainMonitor.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_display_mainmonitor.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0227.207] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1237) returned 1 [0227.207] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1237) returned 1 [0227.207] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3b3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0227.207] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0227.209] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.209] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6820) returned 1 [0227.209] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0227.209] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.209] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4d5, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4d5, lpOverlapped=0x0) returned 1 [0227.210] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0227.210] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4d5, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4e0) returned 1 [0227.210] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.210] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4e0, lpOverlapped=0x0) returned 1 [0227.210] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0227.210] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0227.210] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0227.210] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0227.210] CloseHandle (hObject=0x10c) returned 1 [0227.315] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0227.321] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0227.321] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0227.322] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0227.322] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0227.322] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_Monitors.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0227.323] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_Monitors.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_display_monitors.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0227.324] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1222) returned 1 [0227.324] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1222) returned 1 [0227.324] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3a4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0227.324] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0227.326] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.326] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae70e0) returned 1 [0227.326] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0227.326] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.327] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4c6, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4c6, lpOverlapped=0x0) returned 1 [0227.327] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0227.327] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4c6, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4d0) returned 1 [0227.327] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.327] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4d0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4d0, lpOverlapped=0x0) returned 1 [0227.327] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0227.327] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0227.327] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0227.327] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0227.328] CloseHandle (hObject=0x10c) returned 1 [0227.354] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0227.360] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0227.360] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0227.361] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0227.361] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0227.361] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_Orientation.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0227.362] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_Orientation.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_display_orientation.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0227.363] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1237) returned 1 [0227.363] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1237) returned 1 [0227.363] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3b3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0227.363] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0227.365] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.365] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6820) returned 1 [0227.365] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0227.365] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.365] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4d5, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4d5, lpOverlapped=0x0) returned 1 [0227.366] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0227.366] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4d5, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4e0) returned 1 [0227.366] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.366] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4e0, lpOverlapped=0x0) returned 1 [0227.366] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0227.366] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0227.366] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0227.366] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0227.366] CloseHandle (hObject=0x10c) returned 1 [0227.391] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0227.399] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0227.399] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0227.399] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0227.399] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0227.400] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Mouse_SetButtonConfiguration.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0227.401] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Mouse_SetButtonConfiguration.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_mouse_setbuttonconfiguration.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0227.401] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1307) returned 1 [0227.401] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1307) returned 1 [0227.402] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3f9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0227.402] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0227.404] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.404] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6820) returned 1 [0227.404] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0227.404] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.404] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x51b, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x51b, lpOverlapped=0x0) returned 1 [0227.404] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0227.404] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x51b, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x520) returned 1 [0227.404] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.405] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x520, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x520, lpOverlapped=0x0) returned 1 [0227.405] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0227.405] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0227.405] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0227.405] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0227.405] CloseHandle (hObject=0x10c) returned 1 [0227.430] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0227.435] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0227.435] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0227.436] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0227.440] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0227.440] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Mouse_SetScrollPage.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0227.441] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Mouse_SetScrollPage.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_mouse_setscrollpage.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0227.442] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1262) returned 1 [0227.442] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1262) returned 1 [0227.442] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3cc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0227.442] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0227.446] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.446] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0227.446] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0227.446] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.446] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4ee, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4ee, lpOverlapped=0x0) returned 1 [0227.447] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0227.447] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4ee, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4f0) returned 1 [0227.447] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.447] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4f0, lpOverlapped=0x0) returned 1 [0227.447] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0227.447] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0227.447] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0227.447] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0227.447] CloseHandle (hObject=0x10c) returned 1 [0227.467] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0227.473] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0227.473] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0227.473] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0227.474] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0227.474] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_CursorSpeed.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0227.474] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_CursorSpeed.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_cursorspeed.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0227.475] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1255) returned 1 [0227.475] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1255) returned 1 [0227.475] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3c5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0227.475] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0227.477] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.477] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae7150) returned 1 [0227.477] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0227.477] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.477] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4e7, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4e7, lpOverlapped=0x0) returned 1 [0227.477] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0227.477] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4e7, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4f0) returned 1 [0227.477] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.477] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4f0, lpOverlapped=0x0) returned 1 [0227.477] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0227.478] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0227.478] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0227.478] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0227.478] CloseHandle (hObject=0x10c) returned 1 [0227.499] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0227.503] CryptDestroyKey (hKey=0x665aae7150) returned 1 [0227.503] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0227.504] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0227.504] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0227.504] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_EnableEdgeGesture.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0227.505] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_EnableEdgeGesture.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_enableedgegesture.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0227.505] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1285) returned 1 [0227.505] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1285) returned 1 [0227.505] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3e3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0227.505] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0227.507] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.507] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6f20) returned 1 [0227.507] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0227.507] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.507] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x505, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x505, lpOverlapped=0x0) returned 1 [0227.510] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0227.510] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x505, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x510) returned 1 [0227.510] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.510] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x510, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x510, lpOverlapped=0x0) returned 1 [0227.510] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0227.510] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0227.511] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0227.511] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0227.511] CloseHandle (hObject=0x10c) returned 1 [0227.528] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0227.532] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0227.532] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0227.533] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0227.533] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0227.533] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_EnableTouchPad.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0227.534] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_EnableTouchPad.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_enabletouchpad.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0227.534] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1270) returned 1 [0227.534] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1270) returned 1 [0227.534] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3d4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0227.534] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0227.535] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.535] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6f20) returned 1 [0227.535] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0227.536] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.536] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4f6, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4f6, lpOverlapped=0x0) returned 1 [0227.536] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0227.536] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4f6, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x500) returned 1 [0227.536] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.536] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x500, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x500, lpOverlapped=0x0) returned 1 [0227.536] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0227.536] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0227.536] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0227.536] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0227.536] CloseHandle (hObject=0x10c) returned 1 [0227.552] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0227.556] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0227.556] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0227.557] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0227.557] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0227.557] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_EnableVisualFeedback.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0227.557] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_EnableVisualFeedback.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_enablevisualfeedback.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0227.558] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1298) returned 1 [0227.558] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1298) returned 1 [0227.558] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3f0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0227.558] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0227.559] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.559] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0227.559] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0227.559] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.559] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x512, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x512, lpOverlapped=0x0) returned 1 [0227.560] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0227.560] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x512, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x520) returned 1 [0227.560] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.560] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x520, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x520, lpOverlapped=0x0) returned 1 [0227.560] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0227.560] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0227.560] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0227.560] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0227.560] CloseHandle (hObject=0x10c) returned 1 [0227.577] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0227.582] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0227.582] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0227.582] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0227.582] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0227.582] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_EnableVisualFeedbackPM.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0227.583] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_EnableVisualFeedbackPM.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_enablevisualfeedbackpm.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0227.583] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1308) returned 1 [0227.584] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1308) returned 1 [0227.584] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3fa, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0227.584] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0227.585] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.585] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6f20) returned 1 [0227.585] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0227.585] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.585] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x51c, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x51c, lpOverlapped=0x0) returned 1 [0227.585] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0227.585] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x51c, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x520) returned 1 [0227.585] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.585] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x520, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x520, lpOverlapped=0x0) returned 1 [0227.585] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0227.585] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0227.586] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0227.586] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0227.586] CloseHandle (hObject=0x10c) returned 1 [0227.602] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0227.606] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0227.606] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0227.607] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0227.607] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0227.607] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_FourFingerTapEnabled.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0227.608] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_FourFingerTapEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_fourfingertapenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0227.608] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1300) returned 1 [0227.608] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1300) returned 1 [0227.608] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3f2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0227.608] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0227.610] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.610] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0227.610] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0227.610] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.610] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x514, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x514, lpOverlapped=0x0) returned 1 [0227.611] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0227.611] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x514, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x520) returned 1 [0227.611] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.611] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x520, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x520, lpOverlapped=0x0) returned 1 [0227.611] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0227.611] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0227.611] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0227.611] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0227.611] CloseHandle (hObject=0x10c) returned 1 [0227.628] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0227.632] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0227.632] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0227.632] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0227.632] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0227.632] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_LeaveOnWithMouse.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0227.633] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_LeaveOnWithMouse.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_leaveonwithmouse.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0227.633] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1280) returned 1 [0227.634] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1280) returned 1 [0227.634] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3de, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0227.634] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0227.635] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.635] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae66d0) returned 1 [0227.635] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0227.635] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.635] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x500, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x500, lpOverlapped=0x0) returned 1 [0227.635] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0227.635] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x500, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x510) returned 1 [0227.635] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.635] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x510, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x510, lpOverlapped=0x0) returned 1 [0227.636] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0227.636] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0227.636] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0227.636] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0227.636] CloseHandle (hObject=0x10c) returned 1 [0227.652] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0227.656] CryptDestroyKey (hKey=0x665aae66d0) returned 1 [0227.656] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0227.657] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0227.657] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0227.657] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_PanEnabled.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0227.658] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_PanEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_panenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0227.658] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1250) returned 1 [0227.658] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1250) returned 1 [0227.658] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3c0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0227.658] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0227.660] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.660] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0227.660] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0227.660] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.660] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4e2, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4e2, lpOverlapped=0x0) returned 1 [0227.660] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0227.660] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4e2, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4f0) returned 1 [0227.660] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.660] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4f0, lpOverlapped=0x0) returned 1 [0227.660] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0227.660] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0227.660] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0227.661] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0227.661] CloseHandle (hObject=0x10c) returned 1 [0227.678] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0227.682] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0227.682] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0227.682] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0227.682] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0227.682] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_RightClickZoneEnabled.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0227.683] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_RightClickZoneEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_rightclickzoneenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0227.683] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1305) returned 1 [0227.684] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1305) returned 1 [0227.684] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3f7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0227.684] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0227.685] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.685] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0227.685] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0227.685] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.685] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x519, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x519, lpOverlapped=0x0) returned 1 [0227.685] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0227.685] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x519, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x520) returned 1 [0227.685] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.685] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x520, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x520, lpOverlapped=0x0) returned 1 [0227.686] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0227.686] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0227.686] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0227.686] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0227.686] CloseHandle (hObject=0x10c) returned 1 [0227.704] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0227.709] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0227.709] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0227.709] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0227.709] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0227.709] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_SetActivationTimeout.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0227.710] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_SetActivationTimeout.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_setactivationtimeout.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0227.710] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1300) returned 1 [0227.710] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1300) returned 1 [0227.710] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3f2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0227.711] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0227.712] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.712] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae70e0) returned 1 [0227.712] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0227.712] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.712] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x514, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x514, lpOverlapped=0x0) returned 1 [0227.712] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0227.712] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x514, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x520) returned 1 [0227.712] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.712] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x520, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x520, lpOverlapped=0x0) returned 1 [0227.712] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0227.712] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0227.712] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0227.713] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0227.713] CloseHandle (hObject=0x10c) returned 1 [0227.730] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0227.734] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0227.734] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0227.734] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0227.734] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0227.735] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_SetScrollDirection.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0227.735] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_SetScrollDirection.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_setscrolldirection.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0227.736] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1290) returned 1 [0227.736] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1290) returned 1 [0227.736] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3e8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0227.736] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0227.737] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.737] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0227.737] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0227.738] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.738] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x50a, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x50a, lpOverlapped=0x0) returned 1 [0227.738] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0227.738] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x50a, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x510) returned 1 [0227.738] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.738] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x510, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x510, lpOverlapped=0x0) returned 1 [0227.738] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0227.738] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0227.738] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0227.738] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0227.738] CloseHandle (hObject=0x10c) returned 1 [0227.756] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0227.760] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0227.760] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0227.760] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0227.760] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0227.760] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_TapAndDrag.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0227.761] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_TapAndDrag.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_tapanddrag.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0227.762] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1250) returned 1 [0227.762] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1250) returned 1 [0227.762] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3c0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0227.762] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0227.763] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.763] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0227.763] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0227.763] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.763] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4e2, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4e2, lpOverlapped=0x0) returned 1 [0227.764] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0227.764] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4e2, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4f0) returned 1 [0227.764] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.764] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4f0, lpOverlapped=0x0) returned 1 [0227.764] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0227.764] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0227.764] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0227.764] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0227.764] CloseHandle (hObject=0x10c) returned 1 [0227.783] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0227.787] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0227.787] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0227.787] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0227.787] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0227.787] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_TapsEnabled.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0227.788] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_TapsEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_tapsenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0227.788] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1255) returned 1 [0227.788] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1255) returned 1 [0227.789] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3c5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0227.789] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0227.790] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.790] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae65f0) returned 1 [0227.790] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0227.790] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.790] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4e7, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4e7, lpOverlapped=0x0) returned 1 [0227.790] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0227.790] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4e7, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4f0) returned 1 [0227.790] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.790] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4f0, lpOverlapped=0x0) returned 1 [0227.790] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0227.791] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0227.791] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0227.791] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0227.791] CloseHandle (hObject=0x10c) returned 1 [0227.808] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0227.812] CryptDestroyKey (hKey=0x665aae65f0) returned 1 [0227.812] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0227.813] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0227.813] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0227.813] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_ThreeFingerSlideEnabled.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0227.814] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_ThreeFingerSlideEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_threefingerslideenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0227.814] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1315) returned 1 [0227.814] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1315) returned 1 [0227.814] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x401, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0227.814] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0227.816] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.816] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6f20) returned 1 [0227.816] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0227.816] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.816] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x523, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x523, lpOverlapped=0x0) returned 1 [0227.816] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0227.816] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x523, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x530) returned 1 [0227.816] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.816] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x530, lpOverlapped=0x0) returned 1 [0227.816] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0227.816] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0227.816] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0227.817] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0227.817] CloseHandle (hObject=0x10c) returned 1 [0227.835] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0227.839] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0227.839] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0227.839] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0227.839] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0227.839] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_ThreeFingerTapEnabled.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0227.840] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_ThreeFingerTapEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_threefingertapenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0227.840] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1305) returned 1 [0227.840] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1305) returned 1 [0227.840] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3f7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0227.840] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0227.842] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.842] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6f20) returned 1 [0227.842] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0227.842] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.842] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x519, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x519, lpOverlapped=0x0) returned 1 [0227.842] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0227.842] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x519, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x520) returned 1 [0227.842] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.842] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x520, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x520, lpOverlapped=0x0) returned 1 [0227.842] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0227.842] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0227.842] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0227.842] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0227.843] CloseHandle (hObject=0x10c) returned 1 [0227.861] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0227.865] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0227.865] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0227.865] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0227.865] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0227.865] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_TwoFingerTapEnabled.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0227.866] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_TwoFingerTapEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_twofingertapenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0227.866] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1295) returned 1 [0227.866] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1295) returned 1 [0227.866] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3ed, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0227.866] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0227.868] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.868] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6820) returned 1 [0227.868] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0227.868] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.868] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x50f, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x50f, lpOverlapped=0x0) returned 1 [0227.868] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0227.868] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x50f, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x510) returned 1 [0227.868] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.868] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x510, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x510, lpOverlapped=0x0) returned 1 [0227.868] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0227.868] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0227.868] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0227.868] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0227.869] CloseHandle (hObject=0x10c) returned 1 [0227.886] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0227.890] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0227.890] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0227.890] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0227.893] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0227.893] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_ZoomEnabled.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0227.894] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_ZoomEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_zoomenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0227.894] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1255) returned 1 [0227.894] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1255) returned 1 [0227.894] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3c5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0227.894] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0227.896] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.896] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae65f0) returned 1 [0227.896] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0227.896] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.896] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4e7, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4e7, lpOverlapped=0x0) returned 1 [0227.896] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0227.896] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4e7, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4f0) returned 1 [0227.896] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.896] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4f0, lpOverlapped=0x0) returned 1 [0227.896] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0227.896] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0227.896] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0227.896] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0227.897] CloseHandle (hObject=0x10c) returned 1 [0227.915] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0227.919] CryptDestroyKey (hKey=0x665aae65f0) returned 1 [0227.919] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0227.919] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0227.919] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0227.919] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsAutoCorrectionEnabled.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0227.920] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsAutoCorrectionEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_keyboard_isautocorrectionenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0227.920] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1301) returned 1 [0227.920] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1301) returned 1 [0227.920] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3f3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0227.920] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0227.922] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.922] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0227.922] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0227.922] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.922] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x515, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x515, lpOverlapped=0x0) returned 1 [0227.922] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0227.922] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x515, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x520) returned 1 [0227.922] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.922] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x520, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x520, lpOverlapped=0x0) returned 1 [0227.922] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0227.922] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0227.922] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0227.922] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0227.923] CloseHandle (hObject=0x10c) returned 1 [0227.948] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0227.952] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0227.952] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0227.952] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0227.952] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0227.953] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsAutoShiftEngageEnabled.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0227.953] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsAutoShiftEngageEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_keyboard_isautoshiftengageenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0227.986] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1309) returned 1 [0227.986] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1309) returned 1 [0227.986] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3fb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0227.986] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0227.987] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.987] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae66d0) returned 1 [0227.987] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0227.987] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.987] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x51d, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x51d, lpOverlapped=0x0) returned 1 [0227.987] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0227.987] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x51d, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x520) returned 1 [0227.987] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0227.988] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x520, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x520, lpOverlapped=0x0) returned 1 [0227.988] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0227.988] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0227.988] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0227.988] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0227.988] CloseHandle (hObject=0x10c) returned 1 [0228.007] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0228.011] CryptDestroyKey (hKey=0x665aae66d0) returned 1 [0228.012] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0228.012] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0228.012] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0228.012] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsCompatibilityKeyboardEnabled.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0228.013] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsCompatibilityKeyboardEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_keyboard_iscompatibilitykeyboardenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0228.013] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1339) returned 1 [0228.013] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1339) returned 1 [0228.013] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x419, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0228.013] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0228.015] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.015] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0228.015] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0228.015] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.015] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x53b, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x53b, lpOverlapped=0x0) returned 1 [0228.015] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0228.015] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x53b, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x540) returned 1 [0228.015] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.015] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x540, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x540, lpOverlapped=0x0) returned 1 [0228.015] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0228.015] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0228.015] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0228.015] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0228.016] CloseHandle (hObject=0x10c) returned 1 [0228.034] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0228.038] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0228.038] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0228.038] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0228.038] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0228.039] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsDoubleTapSpaceEnabled.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0228.039] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsDoubleTapSpaceEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_keyboard_isdoubletapspaceenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0228.040] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1305) returned 1 [0228.040] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1305) returned 1 [0228.040] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3f7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0228.040] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0228.041] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.041] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0228.041] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0228.042] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.042] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x519, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x519, lpOverlapped=0x0) returned 1 [0228.042] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0228.042] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x519, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x520) returned 1 [0228.042] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.042] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x520, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x520, lpOverlapped=0x0) returned 1 [0228.042] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0228.042] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0228.042] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0228.042] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0228.042] CloseHandle (hObject=0x10c) returned 1 [0228.061] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0228.065] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0228.065] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0228.065] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0228.065] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0228.066] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsKeyAudioFeedbackEnabled.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0228.066] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsKeyAudioFeedbackEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_keyboard_iskeyaudiofeedbackenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0228.067] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1314) returned 1 [0228.067] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1314) returned 1 [0228.067] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0228.067] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0228.068] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.068] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0228.068] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0228.068] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.069] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x522, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x522, lpOverlapped=0x0) returned 1 [0228.069] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0228.069] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x522, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x530) returned 1 [0228.069] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.069] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x530, lpOverlapped=0x0) returned 1 [0228.069] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0228.069] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0228.069] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0228.069] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0228.069] CloseHandle (hObject=0x10c) returned 1 [0228.087] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0228.091] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0228.091] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0228.091] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0228.091] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0228.091] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsPredictionSpaceInsertionEnabled.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0228.092] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsPredictionSpaceInsertionEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_keyboard_ispredictionspaceinsertionenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0228.093] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1355) returned 1 [0228.093] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1355) returned 1 [0228.093] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x429, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0228.093] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0228.096] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.096] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae66d0) returned 1 [0228.096] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0228.096] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.096] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x54b, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x54b, lpOverlapped=0x0) returned 1 [0228.097] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0228.097] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x54b, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x550) returned 1 [0228.097] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.097] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x550, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x550, lpOverlapped=0x0) returned 1 [0228.097] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0228.097] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0228.097] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0228.097] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0228.097] CloseHandle (hObject=0x10c) returned 1 [0228.117] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0228.122] CryptDestroyKey (hKey=0x665aae66d0) returned 1 [0228.123] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0228.123] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0228.123] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0228.123] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsShiftLockEnabled.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0228.124] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsShiftLockEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_keyboard_isshiftlockenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0228.124] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1279) returned 1 [0228.124] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1279) returned 1 [0228.125] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3dd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0228.125] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0228.126] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.126] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0228.126] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0228.127] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.127] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4ff, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4ff, lpOverlapped=0x0) returned 1 [0228.127] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0228.127] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4ff, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x500) returned 1 [0228.127] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.127] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x500, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x500, lpOverlapped=0x0) returned 1 [0228.127] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0228.127] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0228.127] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0228.127] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0228.128] CloseHandle (hObject=0x10c) returned 1 [0228.148] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0228.153] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0228.153] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0228.154] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0228.154] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0228.154] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsSpellcheckingEnabled.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0228.155] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsSpellcheckingEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_keyboard_isspellcheckingenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0228.155] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1296) returned 1 [0228.155] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1296) returned 1 [0228.155] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3ee, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0228.155] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0228.157] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.157] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0228.157] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0228.160] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.160] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x510, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x510, lpOverlapped=0x0) returned 1 [0228.160] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0228.160] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x510, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x520) returned 1 [0228.160] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.160] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x520, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x520, lpOverlapped=0x0) returned 1 [0228.160] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0228.160] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0228.160] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0228.161] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0228.161] CloseHandle (hObject=0x10c) returned 1 [0228.182] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0228.187] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0228.187] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0228.187] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0228.187] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0228.187] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsTextPredictionEnabled.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0228.188] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsTextPredictionEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_keyboard_istextpredictionenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0228.189] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1305) returned 1 [0228.189] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1305) returned 1 [0228.189] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3f7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0228.189] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0228.191] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.191] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6820) returned 1 [0228.191] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0228.191] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.191] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x519, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x519, lpOverlapped=0x0) returned 1 [0228.191] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0228.191] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x519, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x520) returned 1 [0228.191] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.191] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x520, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x520, lpOverlapped=0x0) returned 1 [0228.192] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0228.192] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0228.192] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0228.192] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0228.192] CloseHandle (hObject=0x10c) returned 1 [0228.212] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0228.217] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0228.217] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0228.218] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0228.218] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0228.218] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Language_Add_Profile.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0228.219] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Language_Add_Profile.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_language_add_profile.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0228.219] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1241) returned 1 [0228.219] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1241) returned 1 [0228.219] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3b7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0228.219] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0228.302] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.302] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0228.302] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0228.303] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.303] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4d9, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4d9, lpOverlapped=0x0) returned 1 [0228.303] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0228.303] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4d9, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4e0) returned 1 [0228.303] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.303] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4e0, lpOverlapped=0x0) returned 1 [0228.303] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0228.303] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0228.303] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0228.303] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0228.303] CloseHandle (hObject=0x10c) returned 1 [0228.324] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0228.328] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0228.328] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0228.329] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0228.329] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0228.329] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Language_Installed_Profiles_Collection.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0228.330] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Language_Installed_Profiles_Collection.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_language_installed_profiles_collection.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0228.331] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1331) returned 1 [0228.331] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1331) returned 1 [0228.331] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x411, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0228.331] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0228.332] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.332] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0228.332] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0228.333] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.333] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x533, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x533, lpOverlapped=0x0) returned 1 [0228.333] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0228.333] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x533, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x540) returned 1 [0228.333] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.333] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x540, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x540, lpOverlapped=0x0) returned 1 [0228.333] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0228.333] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0228.333] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0228.333] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0228.333] CloseHandle (hObject=0x10c) returned 1 [0228.354] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0228.359] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0228.359] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0228.359] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0228.359] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0228.359] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Language_Personal_Data_Control.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0228.360] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Language_Personal_Data_Control.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_language_personal_data_control.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0228.361] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1276) returned 1 [0228.361] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1276) returned 1 [0228.361] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3da, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0228.361] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0228.363] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.363] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0228.363] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0228.363] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.363] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4fc, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4fc, lpOverlapped=0x0) returned 1 [0228.363] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0228.363] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4fc, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x500) returned 1 [0228.363] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.363] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x500, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x500, lpOverlapped=0x0) returned 1 [0228.363] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0228.364] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0228.364] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0228.364] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0228.364] CloseHandle (hObject=0x10c) returned 1 [0228.385] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0228.390] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0228.390] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0228.390] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0228.391] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0228.391] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Language_Web_Content_Control.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0228.392] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Language_Web_Content_Control.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_language_web_content_control.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0228.393] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1266) returned 1 [0228.393] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1266) returned 1 [0228.393] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3d0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0228.393] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0228.395] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.395] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6f20) returned 1 [0228.395] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0228.395] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.395] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4f2, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4f2, lpOverlapped=0x0) returned 1 [0228.395] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0228.395] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4f2, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x500) returned 1 [0228.395] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.395] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x500, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x500, lpOverlapped=0x0) returned 1 [0228.396] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0228.396] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0228.396] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0228.396] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0228.396] CloseHandle (hObject=0x10c) returned 1 [0228.418] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0228.423] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0228.423] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0228.423] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0228.423] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0228.424] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Maps_DeleteAll.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0228.425] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Maps_DeleteAll.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_maps_deleteall.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0228.425] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1192) returned 1 [0228.425] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1192) returned 1 [0228.425] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x386, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0228.425] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0228.427] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.427] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6f20) returned 1 [0228.427] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0228.427] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.427] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4a8, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4a8, lpOverlapped=0x0) returned 1 [0228.427] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0228.427] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4a8, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4b0) returned 1 [0228.427] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.428] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4b0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4b0, lpOverlapped=0x0) returned 1 [0228.428] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0228.428] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0228.428] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0228.428] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0228.428] CloseHandle (hObject=0x10c) returned 1 [0228.451] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0228.456] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0228.456] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0228.456] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0228.456] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0228.457] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Maps_Download_Add_Package.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0228.458] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Maps_Download_Add_Package.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_maps_download_add_package.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0228.458] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1247) returned 1 [0228.458] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1247) returned 1 [0228.458] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3bd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0228.458] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0228.460] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.460] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0228.460] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0228.460] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.460] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4df, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4df, lpOverlapped=0x0) returned 1 [0228.461] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0228.461] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4df, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4e0) returned 1 [0228.461] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.461] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4e0, lpOverlapped=0x0) returned 1 [0228.461] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0228.461] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0228.461] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0228.461] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0228.461] CloseHandle (hObject=0x10c) returned 1 [0228.483] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0228.489] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0228.489] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0228.489] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0228.489] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0228.489] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Misc_ResetYourPC.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0228.490] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Misc_ResetYourPC.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_misc_resetyourpc.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0228.491] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1220) returned 1 [0228.491] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1220) returned 1 [0228.491] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3a2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0228.491] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0228.492] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.492] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae66d0) returned 1 [0228.492] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0228.493] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.493] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4c4, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4c4, lpOverlapped=0x0) returned 1 [0228.493] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0228.493] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4c4, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4d0) returned 1 [0228.493] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.493] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4d0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4d0, lpOverlapped=0x0) returned 1 [0228.493] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0228.493] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0228.493] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0228.493] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0228.493] CloseHandle (hObject=0x10c) returned 1 [0228.515] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0228.521] CryptDestroyKey (hKey=0x665aae66d0) returned 1 [0228.521] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0228.521] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0228.524] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0228.525] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Misc_RollbackYourPC_PreviewBuild.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0228.525] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Misc_RollbackYourPC_PreviewBuild.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_misc_rollbackyourpc_previewbuild.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0228.526] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1315) returned 1 [0228.526] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1315) returned 1 [0228.526] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x401, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0228.526] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0228.528] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.528] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0228.528] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0228.528] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.528] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x523, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x523, lpOverlapped=0x0) returned 1 [0228.528] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0228.528] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x523, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x530) returned 1 [0228.528] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.528] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x530, lpOverlapped=0x0) returned 1 [0228.528] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0228.529] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0228.529] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0228.529] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0228.529] CloseHandle (hObject=0x10c) returned 1 [0228.551] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0228.556] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0228.556] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0228.556] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0228.556] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0228.556] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0228.556] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0228.556] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0228.556] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_MultiTasking_AeroSnapEnabled.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0228.557] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_MultiTasking_AeroSnapEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_multitasking_aerosnapenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0228.557] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1273) returned 1 [0228.557] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1273) returned 1 [0228.557] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3d7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0228.557] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0228.666] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.666] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0228.666] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0228.666] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.666] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4f9, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4f9, lpOverlapped=0x0) returned 1 [0228.666] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0228.666] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4f9, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x500) returned 1 [0228.666] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.666] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x500, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x500, lpOverlapped=0x0) returned 1 [0228.666] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0228.666] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0228.666] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0228.667] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0228.667] CloseHandle (hObject=0x10c) returned 1 [0228.684] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0228.689] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0228.689] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0228.689] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0228.689] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0228.690] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_MultiTasking_SnapAssistEnabled.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0228.690] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_MultiTasking_SnapAssistEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_multitasking_snapassistenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0228.691] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1283) returned 1 [0228.691] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1283) returned 1 [0228.691] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3e1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0228.691] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0228.693] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.693] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae70e0) returned 1 [0228.693] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0228.693] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.693] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x503, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x503, lpOverlapped=0x0) returned 1 [0228.694] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0228.694] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x503, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x510) returned 1 [0228.694] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.694] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x510, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x510, lpOverlapped=0x0) returned 1 [0228.694] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0228.694] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0228.694] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0228.694] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0228.694] CloseHandle (hObject=0x10c) returned 1 [0228.714] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0228.718] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0228.718] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0228.718] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0228.718] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0228.718] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_MultiTasking_SnapFillEnabled.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0228.719] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_MultiTasking_SnapFillEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_multitasking_snapfillenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0228.719] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1273) returned 1 [0228.719] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1273) returned 1 [0228.719] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3d7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0228.719] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0228.721] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.721] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0228.721] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0228.721] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.721] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4f9, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4f9, lpOverlapped=0x0) returned 1 [0228.721] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0228.721] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4f9, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x500) returned 1 [0228.721] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.721] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x500, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x500, lpOverlapped=0x0) returned 1 [0228.721] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0228.721] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0228.721] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0228.721] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0228.721] CloseHandle (hObject=0x10c) returned 1 [0228.740] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0228.744] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0228.744] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0228.744] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0228.744] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0228.745] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_MusUpdate_AdvancedSettingsLink.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0228.745] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_MusUpdate_AdvancedSettingsLink.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_musupdate_advancedsettingslink.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0228.746] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1280) returned 1 [0228.746] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1280) returned 1 [0228.746] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3de, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0228.746] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0228.747] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.747] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0228.747] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0228.747] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.747] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x500, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x500, lpOverlapped=0x0) returned 1 [0228.747] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0228.747] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x500, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x510) returned 1 [0228.747] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.747] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x510, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x510, lpOverlapped=0x0) returned 1 [0228.748] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0228.748] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0228.748] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0228.748] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0228.748] CloseHandle (hObject=0x10c) returned 1 [0228.769] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0228.774] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0228.774] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0228.774] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0228.774] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0228.774] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_MusUpdate_UpdateActionButton.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0228.775] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_MusUpdate_UpdateActionButton.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_musupdate_updateactionbutton.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0228.775] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1270) returned 1 [0228.775] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1270) returned 1 [0228.776] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3d4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0228.776] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0228.777] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.777] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae65f0) returned 1 [0228.777] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0228.777] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.777] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4f6, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4f6, lpOverlapped=0x0) returned 1 [0228.777] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0228.777] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4f6, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x500) returned 1 [0228.777] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.777] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x500, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x500, lpOverlapped=0x0) returned 1 [0228.777] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0228.777] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0228.778] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0228.778] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0228.778] CloseHandle (hObject=0x10c) returned 1 [0228.795] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0228.799] CryptDestroyKey (hKey=0x665aae65f0) returned 1 [0228.799] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0228.800] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0228.800] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0228.800] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Notifications_PinnedQuickActions.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0228.808] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Notifications_PinnedQuickActions.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_notifications_pinnedquickactions.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0228.808] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1294) returned 1 [0228.808] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1294) returned 1 [0228.808] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3ec, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0228.808] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0228.815] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.815] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6f20) returned 1 [0228.815] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0228.815] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.815] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x50e, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x50e, lpOverlapped=0x0) returned 1 [0228.815] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0228.816] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x50e, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x510) returned 1 [0228.816] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.816] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x510, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x510, lpOverlapped=0x0) returned 1 [0228.851] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0228.851] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0228.851] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0228.851] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0228.851] CloseHandle (hObject=0x10c) returned 1 [0228.874] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0228.878] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0228.878] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0228.878] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0228.878] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0228.879] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Notifications_SelectIconsToAppearOnTaskbar.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0228.879] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Notifications_SelectIconsToAppearOnTaskbar.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_notifications_selecticonstoappearontaskbar.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0228.880] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1344) returned 1 [0228.880] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1344) returned 1 [0228.880] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x41e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0228.880] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0228.881] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.881] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0228.881] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0228.881] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.881] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x540, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x540, lpOverlapped=0x0) returned 1 [0228.882] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0228.882] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x540, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x550) returned 1 [0228.882] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.882] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x550, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x550, lpOverlapped=0x0) returned 1 [0228.882] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0228.882] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0228.882] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0228.882] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0228.882] CloseHandle (hObject=0x10c) returned 1 [0228.900] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0228.904] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0228.904] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0228.904] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0228.904] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0228.904] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Notifications_ShowAppNotifications.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0228.905] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Notifications_ShowAppNotifications.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_notifications_showappnotifications.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0228.905] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1312) returned 1 [0228.905] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1312) returned 1 [0228.905] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3fe, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0228.905] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0228.906] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.906] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae7150) returned 1 [0228.906] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0228.907] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.907] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x520, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x520, lpOverlapped=0x0) returned 1 [0228.907] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0228.907] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x520, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x530) returned 1 [0228.907] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.907] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x530, lpOverlapped=0x0) returned 1 [0228.925] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0228.925] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0228.925] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0228.925] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0228.925] CloseHandle (hObject=0x10c) returned 1 [0228.949] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0228.953] CryptDestroyKey (hKey=0x665aae7150) returned 1 [0228.953] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0228.953] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0228.953] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0228.953] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Notifications_SoftLandingEnabled.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0228.954] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Notifications_SoftLandingEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_notifications_softlandingenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0228.955] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1302) returned 1 [0228.955] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1302) returned 1 [0228.955] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3f4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0228.955] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0228.957] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.958] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0228.958] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0228.958] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.958] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x516, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x516, lpOverlapped=0x0) returned 1 [0228.958] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0228.958] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x516, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x520) returned 1 [0228.958] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.958] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x520, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x520, lpOverlapped=0x0) returned 1 [0228.958] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0228.958] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0228.958] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0228.958] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0228.958] CloseHandle (hObject=0x10c) returned 1 [0228.977] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0228.981] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0228.981] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0228.981] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0228.981] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0228.981] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Notifications_SystemIcons.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0228.982] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Notifications_SystemIcons.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_notifications_systemicons.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0228.982] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1259) returned 1 [0228.982] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1259) returned 1 [0228.982] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3c9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0228.982] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0228.984] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.984] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae7150) returned 1 [0228.984] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0228.984] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.984] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4eb, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4eb, lpOverlapped=0x0) returned 1 [0228.984] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0228.985] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4eb, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4f0) returned 1 [0228.985] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0228.985] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4f0, lpOverlapped=0x0) returned 1 [0228.985] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0228.985] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0228.985] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0228.985] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0228.985] CloseHandle (hObject=0x10c) returned 1 [0229.004] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.008] CryptDestroyKey (hKey=0x665aae7150) returned 1 [0229.008] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.008] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0229.008] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0229.008] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0229.009] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_GetPCName.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0229.009] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_GetPCName.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_getpcname.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0229.010] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1222) returned 1 [0229.010] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1222) returned 1 [0229.010] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3a4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0229.010] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0229.011] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.011] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0229.011] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0229.011] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.011] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4c6, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4c6, lpOverlapped=0x0) returned 1 [0229.012] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0229.012] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4c6, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4d0) returned 1 [0229.012] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.012] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4d0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4d0, lpOverlapped=0x0) returned 1 [0229.012] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0229.012] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0229.012] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0229.012] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0229.012] CloseHandle (hObject=0x10c) returned 1 [0229.029] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.033] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0229.033] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.033] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0229.033] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0229.034] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_InstalledRamStatus.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0229.034] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_InstalledRamStatus.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_installedramstatus.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0229.035] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1267) returned 1 [0229.035] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1267) returned 1 [0229.035] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3d1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0229.035] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0229.036] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.036] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6740) returned 1 [0229.036] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0229.036] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.036] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4f3, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4f3, lpOverlapped=0x0) returned 1 [0229.036] CryptEncrypt (in: hKey=0x665aae6740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0229.037] CryptEncrypt (in: hKey=0x665aae6740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4f3, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x500) returned 1 [0229.037] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.037] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x500, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x500, lpOverlapped=0x0) returned 1 [0229.037] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0229.037] CryptExportKey (in: hKey=0x665aae6740, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0229.037] CryptExportKey (in: hKey=0x665aae6740, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0229.037] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0229.037] CloseHandle (hObject=0x10c) returned 1 [0229.054] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.058] CryptDestroyKey (hKey=0x665aae6740) returned 1 [0229.058] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.058] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0229.062] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0229.063] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_JoinCloudDomain.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0229.063] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_JoinCloudDomain.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_joinclouddomain.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0229.064] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1252) returned 1 [0229.064] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1252) returned 1 [0229.064] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3c2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0229.064] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0229.065] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.065] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae70e0) returned 1 [0229.065] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0229.065] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.065] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4e4, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4e4, lpOverlapped=0x0) returned 1 [0229.066] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0229.066] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4e4, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4f0) returned 1 [0229.066] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.066] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4f0, lpOverlapped=0x0) returned 1 [0229.066] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0229.066] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0229.066] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0229.066] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0229.066] CloseHandle (hObject=0x10c) returned 1 [0229.082] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.086] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0229.086] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.087] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0229.087] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0229.087] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_JoinDomain.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0229.087] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_JoinDomain.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_joindomain.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0229.088] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1227) returned 1 [0229.088] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1227) returned 1 [0229.088] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3a9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0229.088] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0229.090] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.090] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae7150) returned 1 [0229.090] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0229.090] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.090] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4cb, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4cb, lpOverlapped=0x0) returned 1 [0229.090] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0229.090] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4cb, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4d0) returned 1 [0229.090] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.090] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4d0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4d0, lpOverlapped=0x0) returned 1 [0229.090] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0229.091] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0229.091] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0229.091] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0229.091] CloseHandle (hObject=0x10c) returned 1 [0229.107] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.112] CryptDestroyKey (hKey=0x665aae7150) returned 1 [0229.112] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.112] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0229.112] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0229.112] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_LeaveOrganization.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0229.113] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_LeaveOrganization.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_leaveorganization.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0229.113] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1262) returned 1 [0229.114] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1262) returned 1 [0229.114] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3cc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0229.114] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0229.115] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.115] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae66d0) returned 1 [0229.115] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0229.115] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.115] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4ee, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4ee, lpOverlapped=0x0) returned 1 [0229.115] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0229.115] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4ee, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4f0) returned 1 [0229.115] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.115] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4f0, lpOverlapped=0x0) returned 1 [0229.115] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0229.115] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0229.115] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0229.116] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0229.116] CloseHandle (hObject=0x10c) returned 1 [0229.132] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.136] CryptDestroyKey (hKey=0x665aae66d0) returned 1 [0229.136] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.136] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0229.136] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0229.136] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_PenAndTouchStatus.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0229.137] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_PenAndTouchStatus.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_penandtouchstatus.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0229.138] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1262) returned 1 [0229.138] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1262) returned 1 [0229.138] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3cc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0229.138] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0229.139] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.139] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0229.139] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0229.139] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.139] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4ee, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4ee, lpOverlapped=0x0) returned 1 [0229.139] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0229.139] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4ee, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4f0) returned 1 [0229.139] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.139] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4f0, lpOverlapped=0x0) returned 1 [0229.139] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0229.140] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0229.140] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0229.140] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0229.140] CloseHandle (hObject=0x10c) returned 1 [0229.169] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.173] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0229.173] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.173] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0229.173] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0229.173] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_ProcessorStatus.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0229.174] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_ProcessorStatus.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_processorstatus.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0229.175] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1252) returned 1 [0229.175] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1252) returned 1 [0229.175] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3c2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0229.175] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0229.176] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.176] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0229.176] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0229.176] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.176] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4e4, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4e4, lpOverlapped=0x0) returned 1 [0229.176] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0229.176] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4e4, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4f0) returned 1 [0229.176] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.176] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4f0, lpOverlapped=0x0) returned 1 [0229.177] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0229.177] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0229.177] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0229.177] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0229.177] CloseHandle (hObject=0x10c) returned 1 [0229.192] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.196] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0229.196] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.196] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0229.196] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0229.197] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_ProductIdStatus.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0229.197] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_ProductIdStatus.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_productidstatus.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0229.198] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1252) returned 1 [0229.198] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1252) returned 1 [0229.198] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3c2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0229.198] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0229.199] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.199] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6820) returned 1 [0229.199] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0229.199] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.199] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4e4, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4e4, lpOverlapped=0x0) returned 1 [0229.199] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0229.199] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4e4, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4f0) returned 1 [0229.200] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.200] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4f0, lpOverlapped=0x0) returned 1 [0229.200] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0229.200] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0229.200] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0229.200] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0229.200] CloseHandle (hObject=0x10c) returned 1 [0229.216] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.361] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0229.361] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.361] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0229.361] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0229.361] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_RenamePC.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0229.362] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_RenamePC.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_renamepc.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0229.362] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1217) returned 1 [0229.363] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1217) returned 1 [0229.363] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x39f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0229.363] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0229.364] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.364] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0229.364] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0229.364] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.364] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4c1, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4c1, lpOverlapped=0x0) returned 1 [0229.364] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0229.364] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4c1, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4d0) returned 1 [0229.364] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.364] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4d0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4d0, lpOverlapped=0x0) returned 1 [0229.364] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0229.364] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0229.364] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0229.365] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0229.365] CloseHandle (hObject=0x10c) returned 1 [0229.379] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.383] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0229.383] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.384] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0229.384] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0229.384] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_SystemTypeStatus.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0229.384] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_SystemTypeStatus.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_systemtypestatus.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0229.385] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1257) returned 1 [0229.385] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1257) returned 1 [0229.385] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3c7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0229.385] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0229.386] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.386] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0229.386] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0229.387] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.387] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4e9, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4e9, lpOverlapped=0x0) returned 1 [0229.387] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0229.387] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4e9, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4f0) returned 1 [0229.387] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.387] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4f0, lpOverlapped=0x0) returned 1 [0229.387] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0229.387] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0229.387] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0229.387] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0229.387] CloseHandle (hObject=0x10c) returned 1 [0229.402] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.406] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0229.407] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.407] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0229.407] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0229.407] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_Background_ChooseBackground.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0229.408] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_Background_ChooseBackground.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_personalize_background_choosebackground.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0229.408] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1330) returned 1 [0229.408] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1330) returned 1 [0229.408] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x410, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0229.408] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0229.410] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.410] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0229.410] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0229.410] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.410] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x532, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x532, lpOverlapped=0x0) returned 1 [0229.410] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0229.410] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x532, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x540) returned 1 [0229.411] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.411] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x540, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x540, lpOverlapped=0x0) returned 1 [0229.411] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0229.411] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0229.411] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0229.411] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0229.411] CloseHandle (hObject=0x10c) returned 1 [0229.429] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.433] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0229.433] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.433] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0229.433] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0229.433] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_Background_ChooseFit.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0229.434] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_Background_ChooseFit.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_personalize_background_choosefit.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0229.435] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1295) returned 1 [0229.435] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1295) returned 1 [0229.435] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3ed, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0229.435] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0229.436] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.436] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6f20) returned 1 [0229.436] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0229.436] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.436] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x50f, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x50f, lpOverlapped=0x0) returned 1 [0229.436] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0229.436] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x50f, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x510) returned 1 [0229.436] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.436] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x510, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x510, lpOverlapped=0x0) returned 1 [0229.437] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0229.437] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0229.437] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0229.437] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0229.437] CloseHandle (hObject=0x10c) returned 1 [0229.458] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.461] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0229.462] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.462] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0229.462] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0229.462] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_Color_ColorPrevalence.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0229.463] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_Color_ColorPrevalence.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_personalize_color_colorprevalence.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0229.463] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1298) returned 1 [0229.463] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1298) returned 1 [0229.463] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3f0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0229.463] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0229.464] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.464] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae65f0) returned 1 [0229.464] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0229.465] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.465] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x512, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x512, lpOverlapped=0x0) returned 1 [0229.465] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0229.465] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x512, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x520) returned 1 [0229.465] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.465] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x520, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x520, lpOverlapped=0x0) returned 1 [0229.465] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0229.465] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0229.465] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0229.465] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0229.465] CloseHandle (hObject=0x10c) returned 1 [0229.482] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.486] CryptDestroyKey (hKey=0x665aae65f0) returned 1 [0229.487] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.487] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0229.487] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0229.487] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_Color_EnableTransparency.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0229.488] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_Color_EnableTransparency.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_personalize_color_enabletransparency.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0229.488] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1313) returned 1 [0229.488] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1313) returned 1 [0229.488] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3ff, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0229.488] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0229.489] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.489] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0229.489] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0229.490] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.490] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x521, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x521, lpOverlapped=0x0) returned 1 [0229.490] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0229.490] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x521, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x530) returned 1 [0229.490] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.490] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x530, lpOverlapped=0x0) returned 1 [0229.490] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0229.490] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0229.490] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0229.490] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0229.490] CloseHandle (hObject=0x10c) returned 1 [0229.507] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.512] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0229.512] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.512] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0229.512] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0229.512] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_LockScreenAppsBadge.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0229.513] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_LockScreenAppsBadge.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_personalize_lockscreenappsbadge.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0229.514] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1284) returned 1 [0229.514] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1284) returned 1 [0229.514] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3e2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0229.514] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0229.515] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.515] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6f20) returned 1 [0229.515] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0229.515] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.515] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x504, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x504, lpOverlapped=0x0) returned 1 [0229.515] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0229.515] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x504, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x510) returned 1 [0229.515] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.515] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x510, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x510, lpOverlapped=0x0) returned 1 [0229.516] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0229.516] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0229.516] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0229.516] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0229.516] CloseHandle (hObject=0x10c) returned 1 [0229.534] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.538] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0229.538] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.538] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0229.538] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0229.539] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_LockScreenAppsTile.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0229.539] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_LockScreenAppsTile.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_personalize_lockscreenappstile.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0229.540] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1279) returned 1 [0229.540] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1279) returned 1 [0229.540] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3dd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0229.540] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0229.541] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.541] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae66d0) returned 1 [0229.541] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0229.542] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.542] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4ff, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4ff, lpOverlapped=0x0) returned 1 [0229.542] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0229.542] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4ff, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x500) returned 1 [0229.542] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.542] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x500, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x500, lpOverlapped=0x0) returned 1 [0229.542] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0229.542] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0229.542] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0229.542] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0229.542] CloseHandle (hObject=0x10c) returned 1 [0229.560] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.565] CryptDestroyKey (hKey=0x665aae66d0) returned 1 [0229.565] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.565] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0229.565] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0229.565] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_LockScreenBackground.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0229.566] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_LockScreenBackground.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_personalize_lockscreenbackground.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0229.566] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1292) returned 1 [0229.566] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1292) returned 1 [0229.566] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3ea, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0229.566] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0229.568] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.568] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0229.568] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0229.568] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.568] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x50c, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x50c, lpOverlapped=0x0) returned 1 [0229.568] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0229.568] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x50c, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x510) returned 1 [0229.568] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.568] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x510, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x510, lpOverlapped=0x0) returned 1 [0229.568] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0229.568] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0229.569] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0229.569] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0229.569] CloseHandle (hObject=0x10c) returned 1 [0229.587] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.591] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0229.591] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.591] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0229.591] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0229.592] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_LockScreenChooseBackgroundType.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0229.592] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_LockScreenChooseBackgroundType.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_personalize_lockscreenchoosebackgroundtype.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0229.593] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1342) returned 1 [0229.593] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1342) returned 1 [0229.593] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x41c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0229.593] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0229.594] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.594] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae70e0) returned 1 [0229.594] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0229.595] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.595] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x53e, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x53e, lpOverlapped=0x0) returned 1 [0229.595] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0229.595] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x53e, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x540) returned 1 [0229.595] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.595] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x540, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x540, lpOverlapped=0x0) returned 1 [0229.595] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0229.596] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0229.596] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0229.596] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0229.596] CloseHandle (hObject=0x10c) returned 1 [0229.615] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.619] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0229.619] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.619] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0229.619] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0229.619] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_LockScreenSlideshowSource_CloudBrandName.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0229.620] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_LockScreenSlideshowSource_CloudBrandName.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_personalize_lockscreenslideshowsource_cloudbrandname.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0229.620] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1392) returned 1 [0229.621] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1392) returned 1 [0229.621] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x44e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0229.621] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0229.622] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.622] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0229.622] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0229.622] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.622] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x570, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x570, lpOverlapped=0x0) returned 1 [0229.622] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0229.622] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x570, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x580) returned 1 [0229.622] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.623] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x580, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x580, lpOverlapped=0x0) returned 1 [0229.623] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0229.623] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0229.623] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0229.623] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0229.623] CloseHandle (hObject=0x10c) returned 1 [0229.641] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.645] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0229.645] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.646] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0229.649] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0229.649] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PowerAndSleep_DisplayOffTimeoutAC.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0229.650] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PowerAndSleep_DisplayOffTimeoutAC.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_powerandsleep_displayofftimeoutac.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0229.650] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1312) returned 1 [0229.650] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1312) returned 1 [0229.650] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3fe, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0229.650] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0229.652] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.652] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae70e0) returned 1 [0229.652] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0229.652] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.652] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x520, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x520, lpOverlapped=0x0) returned 1 [0229.652] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0229.652] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x520, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x530) returned 1 [0229.652] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.652] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x530, lpOverlapped=0x0) returned 1 [0229.652] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0229.652] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0229.652] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0229.653] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0229.653] CloseHandle (hObject=0x10c) returned 1 [0229.670] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.675] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0229.675] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.675] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0229.675] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0229.676] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PowerAndSleep_DisplayOffTimeoutAC_AoAc.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0229.676] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PowerAndSleep_DisplayOffTimeoutAC_AoAc.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_powerandsleep_displayofftimeoutac_aoac.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0229.677] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1341) returned 1 [0229.677] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1341) returned 1 [0229.677] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x41b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0229.677] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0229.678] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.678] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0229.678] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0229.678] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.679] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x53d, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x53d, lpOverlapped=0x0) returned 1 [0229.679] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0229.679] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x53d, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x540) returned 1 [0229.679] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.679] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x540, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x540, lpOverlapped=0x0) returned 1 [0229.679] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0229.679] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0229.679] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0229.679] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0229.679] CloseHandle (hObject=0x10c) returned 1 [0229.712] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.716] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0229.716] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.716] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0229.716] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0229.717] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PowerAndSleep_DisplayOffTimeoutDC.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0229.717] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PowerAndSleep_DisplayOffTimeoutDC.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_powerandsleep_displayofftimeoutdc.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0229.718] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1312) returned 1 [0229.718] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1312) returned 1 [0229.718] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3fe, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0229.718] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0229.719] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.719] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0229.719] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0229.720] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.720] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x520, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x520, lpOverlapped=0x0) returned 1 [0229.720] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0229.720] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x520, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x530) returned 1 [0229.720] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.720] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x530, lpOverlapped=0x0) returned 1 [0229.720] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0229.720] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0229.720] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0229.720] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0229.721] CloseHandle (hObject=0x10c) returned 1 [0229.741] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.745] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0229.745] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.745] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0229.745] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0229.746] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PowerAndSleep_DisplayOffTimeoutDC_AoAc.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0229.746] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PowerAndSleep_DisplayOffTimeoutDC_AoAc.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_powerandsleep_displayofftimeoutdc_aoac.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0229.747] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1341) returned 1 [0229.747] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1341) returned 1 [0229.747] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x41b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0229.747] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0229.748] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.748] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0229.748] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0229.749] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.749] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x53d, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x53d, lpOverlapped=0x0) returned 1 [0229.749] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0229.749] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x53d, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x540) returned 1 [0229.749] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.749] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x540, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x540, lpOverlapped=0x0) returned 1 [0229.749] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0229.749] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0229.749] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0229.749] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0229.749] CloseHandle (hObject=0x10c) returned 1 [0229.767] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.772] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0229.772] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.772] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0229.772] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0229.772] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PowerAndSleep_SleepTimeoutAC.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0229.773] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PowerAndSleep_SleepTimeoutAC.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_powerandsleep_sleeptimeoutac.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0229.773] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1282) returned 1 [0229.773] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1282) returned 1 [0229.773] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3e0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0229.774] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0229.775] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.775] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae7150) returned 1 [0229.775] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0229.775] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.775] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x502, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x502, lpOverlapped=0x0) returned 1 [0229.775] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0229.775] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x502, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x510) returned 1 [0229.775] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.775] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x510, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x510, lpOverlapped=0x0) returned 1 [0229.775] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0229.776] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0229.776] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0229.776] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0229.776] CloseHandle (hObject=0x10c) returned 1 [0229.793] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.797] CryptDestroyKey (hKey=0x665aae7150) returned 1 [0229.797] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.797] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0229.797] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0229.798] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PowerAndSleep_SleepTimeoutDC.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0229.798] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PowerAndSleep_SleepTimeoutDC.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_powerandsleep_sleeptimeoutdc.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0229.799] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1282) returned 1 [0229.799] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1282) returned 1 [0229.799] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3e0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0229.799] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0229.801] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.801] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0229.801] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0229.801] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.801] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x502, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x502, lpOverlapped=0x0) returned 1 [0229.801] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0229.802] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x502, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x510) returned 1 [0229.802] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.802] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x510, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x510, lpOverlapped=0x0) returned 1 [0229.802] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0229.802] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0229.802] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0229.802] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0229.802] CloseHandle (hObject=0x10c) returned 1 [0229.820] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.824] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0229.824] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.824] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0229.824] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0229.825] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Privacy_AdvertisingIdEnabled.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0229.825] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Privacy_AdvertisingIdEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_privacy_advertisingidenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0229.826] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1266) returned 1 [0229.826] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1266) returned 1 [0229.826] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3d0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0229.826] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0229.827] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.827] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae7150) returned 1 [0229.827] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0229.827] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.827] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4f2, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4f2, lpOverlapped=0x0) returned 1 [0229.827] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0229.827] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4f2, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x500) returned 1 [0229.827] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.827] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x500, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x500, lpOverlapped=0x0) returned 1 [0229.828] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0229.828] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0229.828] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0229.828] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0229.828] CloseHandle (hObject=0x10c) returned 1 [0229.845] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.850] CryptDestroyKey (hKey=0x665aae7150) returned 1 [0229.850] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.850] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0229.850] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0229.850] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Privacy_EnableCollectionOfUrlsAppsUse.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0229.851] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Privacy_EnableCollectionOfUrlsAppsUse.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_privacy_enablecollectionofurlsappsuse.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0229.852] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1311) returned 1 [0229.852] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1311) returned 1 [0229.852] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3fd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0229.852] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0229.854] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.854] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0229.854] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0229.854] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.854] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x51f, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x51f, lpOverlapped=0x0) returned 1 [0229.854] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0229.854] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x51f, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x520) returned 1 [0229.854] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.854] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x520, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x520, lpOverlapped=0x0) returned 1 [0229.855] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0229.855] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0229.855] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0229.855] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0229.855] CloseHandle (hObject=0x10c) returned 1 [0229.873] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.877] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0229.877] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.877] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0229.877] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0229.878] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Privacy_OpenPrivacyStatementLink.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0229.878] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Privacy_OpenPrivacyStatementLink.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_privacy_openprivacystatementlink.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0229.879] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1286) returned 1 [0229.879] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1286) returned 1 [0229.879] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3e4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0229.879] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0229.880] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.880] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6740) returned 1 [0229.880] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0229.880] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.880] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x506, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x506, lpOverlapped=0x0) returned 1 [0229.881] CryptEncrypt (in: hKey=0x665aae6740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0229.881] CryptEncrypt (in: hKey=0x665aae6740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x506, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x510) returned 1 [0229.881] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.881] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x510, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x510, lpOverlapped=0x0) returned 1 [0229.881] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0229.881] CryptExportKey (in: hKey=0x665aae6740, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0229.881] CryptExportKey (in: hKey=0x665aae6740, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0229.881] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0229.881] CloseHandle (hObject=0x10c) returned 1 [0229.898] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.902] CryptDestroyKey (hKey=0x665aae6740) returned 1 [0229.902] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.902] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0229.902] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0229.903] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Proxy_AutomaticConfigScript.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0229.903] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Proxy_AutomaticConfigScript.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_proxy_automaticconfigscript.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0229.904] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1267) returned 1 [0229.904] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1267) returned 1 [0229.904] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3d1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0229.904] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0229.905] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.905] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae70e0) returned 1 [0229.905] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0229.906] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.906] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4f3, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4f3, lpOverlapped=0x0) returned 1 [0229.906] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0229.906] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4f3, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x500) returned 1 [0229.906] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.906] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x500, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x500, lpOverlapped=0x0) returned 1 [0229.906] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0229.906] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0229.906] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0229.906] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0229.906] CloseHandle (hObject=0x10c) returned 1 [0229.923] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.928] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0229.928] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.928] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0229.928] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0229.928] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Proxy_AutomaticDetection.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0229.929] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Proxy_AutomaticDetection.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_proxy_automaticdetection.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0229.930] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1252) returned 1 [0229.930] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1252) returned 1 [0229.930] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3c2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0229.930] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0229.931] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.931] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae7150) returned 1 [0229.931] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0229.932] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.932] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4e4, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4e4, lpOverlapped=0x0) returned 1 [0229.932] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0229.932] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4e4, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4f0) returned 1 [0229.932] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.932] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4f0, lpOverlapped=0x0) returned 1 [0229.932] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0229.932] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0229.932] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0229.932] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0229.932] CloseHandle (hObject=0x10c) returned 1 [0229.956] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.960] CryptDestroyKey (hKey=0x665aae7150) returned 1 [0229.960] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.961] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0229.961] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0229.961] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Proxy_ManualProxyAddress.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0229.961] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Proxy_ManualProxyAddress.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_proxy_manualproxyaddress.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0229.962] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1249) returned 1 [0229.962] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1249) returned 1 [0229.962] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3bf, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0229.962] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0229.963] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.963] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae66d0) returned 1 [0229.963] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0229.964] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.964] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4e1, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4e1, lpOverlapped=0x0) returned 1 [0229.964] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0229.964] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4e1, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4f0) returned 1 [0229.964] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.964] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4f0, lpOverlapped=0x0) returned 1 [0229.964] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0229.964] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0229.964] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0229.964] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0229.964] CloseHandle (hObject=0x10c) returned 1 [0229.981] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.986] CryptDestroyKey (hKey=0x665aae66d0) returned 1 [0229.986] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.986] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0229.986] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0229.986] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Radio_DeviceList.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0229.987] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Radio_DeviceList.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_radio_devicelist.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0229.988] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1216) returned 1 [0229.988] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1216) returned 1 [0229.988] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x39e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0229.988] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0229.990] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.990] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0229.990] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0229.990] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.990] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4c0, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4c0, lpOverlapped=0x0) returned 1 [0229.990] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0229.990] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4c0, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4d0) returned 1 [0229.990] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0229.990] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4d0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4d0, lpOverlapped=0x0) returned 1 [0229.991] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0229.991] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0229.991] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0229.991] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0229.991] CloseHandle (hObject=0x10c) returned 1 [0230.009] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0230.013] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0230.013] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0230.013] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0230.013] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0230.014] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Radio_IsAirplaneModeEnabled.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0230.014] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Radio_IsAirplaneModeEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_radio_isairplanemodeenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0230.015] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1271) returned 1 [0230.015] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1271) returned 1 [0230.015] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3d5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.015] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0230.017] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.017] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0230.017] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0230.017] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.017] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4f7, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4f7, lpOverlapped=0x0) returned 1 [0230.018] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0230.018] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4f7, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x500) returned 1 [0230.018] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.018] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x500, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x500, lpOverlapped=0x0) returned 1 [0230.018] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0230.018] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0230.018] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0230.018] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0230.018] CloseHandle (hObject=0x10c) returned 1 [0230.036] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0230.040] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0230.040] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0230.041] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0230.041] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0230.041] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_ShellMode_ModeChangeConfig.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0230.042] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_ShellMode_ModeChangeConfig.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_shellmode_modechangeconfig.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0230.042] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1261) returned 1 [0230.042] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1261) returned 1 [0230.042] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3cb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.042] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0230.043] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.043] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6820) returned 1 [0230.043] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0230.044] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.044] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4ed, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4ed, lpOverlapped=0x0) returned 1 [0230.044] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0230.044] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4ed, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4f0) returned 1 [0230.044] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.044] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4f0, lpOverlapped=0x0) returned 1 [0230.044] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0230.045] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0230.045] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0230.045] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0230.045] CloseHandle (hObject=0x10c) returned 1 [0230.063] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0230.069] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0230.069] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0230.069] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0230.069] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0230.070] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_ShellMode_Preference.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0230.070] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_ShellMode_Preference.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_shellmode_preference.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0230.071] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1231) returned 1 [0230.071] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1231) returned 1 [0230.071] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3ad, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.071] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0230.072] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.073] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0230.073] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0230.073] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.073] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4cf, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4cf, lpOverlapped=0x0) returned 1 [0230.073] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0230.073] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4cf, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4d0) returned 1 [0230.073] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.073] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4d0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4d0, lpOverlapped=0x0) returned 1 [0230.073] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0230.074] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0230.074] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0230.074] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0230.074] CloseHandle (hObject=0x10c) returned 1 [0230.097] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0230.102] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0230.102] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0230.103] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0230.103] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0230.103] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_ShellMode_TaskbarAppsVisibility.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0230.104] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_ShellMode_TaskbarAppsVisibility.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_shellmode_taskbarappsvisibility.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0230.104] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1286) returned 1 [0230.104] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1286) returned 1 [0230.104] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3e4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.105] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0230.106] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.106] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0230.106] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0230.106] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.106] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x506, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x506, lpOverlapped=0x0) returned 1 [0230.107] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0230.107] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x506, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x510) returned 1 [0230.107] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.107] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x510, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x510, lpOverlapped=0x0) returned 1 [0230.107] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0230.107] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0230.107] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0230.107] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0230.107] CloseHandle (hObject=0x10c) returned 1 [0230.140] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0230.146] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0230.146] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0230.147] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0230.147] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0230.147] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_ShellMode_Toggle.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0230.148] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_ShellMode_Toggle.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_shellmode_toggle.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0230.149] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1211) returned 1 [0230.149] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1211) returned 1 [0230.149] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x399, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.150] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0230.151] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.151] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0230.151] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0230.152] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.152] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4bb, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4bb, lpOverlapped=0x0) returned 1 [0230.152] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0230.152] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4bb, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4c0) returned 1 [0230.152] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.152] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4c0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4c0, lpOverlapped=0x0) returned 1 [0230.152] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0230.152] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0230.152] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0230.152] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0230.152] CloseHandle (hObject=0x10c) returned 1 [0230.175] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0230.180] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0230.181] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0230.181] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0230.186] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0230.186] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Startup_AdvancedStartup.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0230.187] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Startup_AdvancedStartup.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_startup_advancedstartup.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0230.188] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1263) returned 1 [0230.188] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1263) returned 1 [0230.188] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3cd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.188] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0230.189] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.189] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6f20) returned 1 [0230.189] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0230.190] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.190] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4ef, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4ef, lpOverlapped=0x0) returned 1 [0230.190] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0230.190] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4ef, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4f0) returned 1 [0230.190] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.190] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4f0, lpOverlapped=0x0) returned 1 [0230.190] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0230.190] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0230.190] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0230.190] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0230.191] CloseHandle (hObject=0x10c) returned 1 [0230.287] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0230.293] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0230.293] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0230.294] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0230.294] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0230.294] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Start_LinkToPlacesPage.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0230.295] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Start_LinkToPlacesPage.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_start_linktoplacespage.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0230.295] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1235) returned 1 [0230.295] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1235) returned 1 [0230.295] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3b1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.295] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0230.297] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.297] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae65f0) returned 1 [0230.297] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0230.297] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.297] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4d3, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4d3, lpOverlapped=0x0) returned 1 [0230.297] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0230.297] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4d3, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4e0) returned 1 [0230.297] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.298] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4e0, lpOverlapped=0x0) returned 1 [0230.298] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0230.298] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0230.298] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0230.298] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0230.298] CloseHandle (hObject=0x10c) returned 1 [0230.320] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0230.326] CryptDestroyKey (hKey=0x665aae65f0) returned 1 [0230.326] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0230.326] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0230.326] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0230.327] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Start_ShowRecentlyAddedAppsGroup.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0230.328] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Start_ShowRecentlyAddedAppsGroup.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_start_showrecentlyaddedappsgroup.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0230.328] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1285) returned 1 [0230.328] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1285) returned 1 [0230.328] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3e3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.329] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0230.330] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.331] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0230.331] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0230.331] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.331] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x505, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x505, lpOverlapped=0x0) returned 1 [0230.331] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0230.331] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x505, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x510) returned 1 [0230.331] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.331] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x510, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x510, lpOverlapped=0x0) returned 1 [0230.331] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0230.332] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0230.332] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0230.332] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0230.332] CloseHandle (hObject=0x10c) returned 1 [0230.355] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0230.361] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0230.361] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0230.361] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0230.361] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0230.362] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Start_ShowSuggestedAppsGroup.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0230.362] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Start_ShowSuggestedAppsGroup.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_start_showsuggestedappsgroup.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0230.363] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1265) returned 1 [0230.363] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1265) returned 1 [0230.363] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3cf, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.363] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0230.364] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.365] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6f20) returned 1 [0230.365] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0230.365] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.365] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4f1, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4f1, lpOverlapped=0x0) returned 1 [0230.365] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0230.365] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4f1, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x500) returned 1 [0230.365] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.365] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x500, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x500, lpOverlapped=0x0) returned 1 [0230.365] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0230.366] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0230.366] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0230.366] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0230.366] CloseHandle (hObject=0x10c) returned 1 [0230.387] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0230.392] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0230.392] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0230.392] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0230.392] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0230.393] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Start_Size.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0230.394] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Start_Size.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_start_size.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0230.395] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1175) returned 1 [0230.395] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1175) returned 1 [0230.395] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x375, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.395] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0230.397] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.397] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0230.397] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0230.398] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.398] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x497, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x497, lpOverlapped=0x0) returned 1 [0230.398] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0230.398] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x497, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4a0) returned 1 [0230.398] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.398] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4a0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4a0, lpOverlapped=0x0) returned 1 [0230.398] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0230.398] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0230.398] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0230.398] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0230.398] CloseHandle (hObject=0x10c) returned 1 [0230.421] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0230.426] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0230.426] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0230.426] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0230.426] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0230.426] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Start_StoreMFUApps.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0230.427] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Start_StoreMFUApps.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_start_storemfuapps.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0230.427] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1215) returned 1 [0230.427] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1215) returned 1 [0230.428] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x39d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.428] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0230.429] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.429] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0230.429] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0230.429] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.429] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4bf, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4bf, lpOverlapped=0x0) returned 1 [0230.429] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0230.429] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4bf, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4c0) returned 1 [0230.429] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.429] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4c0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4c0, lpOverlapped=0x0) returned 1 [0230.430] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0230.430] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0230.430] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0230.430] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0230.430] CloseHandle (hObject=0x10c) returned 1 [0230.449] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0230.455] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0230.455] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0230.455] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0230.455] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0230.455] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Start_StoreRecentlyOpenedItems.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0230.456] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Start_StoreRecentlyOpenedItems.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_start_storerecentlyopeneditems.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0230.457] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1275) returned 1 [0230.457] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1275) returned 1 [0230.457] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3d9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.457] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0230.458] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.458] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae70e0) returned 1 [0230.458] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0230.458] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.458] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4fb, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4fb, lpOverlapped=0x0) returned 1 [0230.459] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0230.459] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4fb, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x500) returned 1 [0230.459] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.459] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x500, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x500, lpOverlapped=0x0) returned 1 [0230.459] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0230.459] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0230.459] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0230.459] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0230.459] CloseHandle (hObject=0x10c) returned 1 [0230.476] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0230.481] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0230.481] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0230.481] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0230.481] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0230.481] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_StorageSense_AppSizesOptionalComponentsLink-2.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0230.482] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_StorageSense_AppSizesOptionalComponentsLink-2.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_storagesense_appsizesoptionalcomponentslink-2.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0230.483] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1349) returned 1 [0230.483] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1349) returned 1 [0230.483] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x423, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.483] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0230.485] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.485] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0230.485] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0230.485] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.485] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x545, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x545, lpOverlapped=0x0) returned 1 [0230.485] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0230.485] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x545, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x550) returned 1 [0230.485] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.485] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x550, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x550, lpOverlapped=0x0) returned 1 [0230.485] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0230.486] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0230.486] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0230.486] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0230.486] CloseHandle (hObject=0x10c) returned 1 [0230.502] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0230.506] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0230.506] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0230.507] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0230.507] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0230.507] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_StorageSense_AppSizesOptionalComponentsLink-3.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0230.508] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_StorageSense_AppSizesOptionalComponentsLink-3.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_storagesense_appsizesoptionalcomponentslink-3.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0230.508] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1349) returned 1 [0230.508] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1349) returned 1 [0230.508] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x423, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.508] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0230.510] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.510] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0230.510] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0230.511] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.511] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x545, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x545, lpOverlapped=0x0) returned 1 [0230.511] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0230.511] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x545, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x550) returned 1 [0230.511] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.511] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x550, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x550, lpOverlapped=0x0) returned 1 [0230.511] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0230.511] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0230.511] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0230.511] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0230.511] CloseHandle (hObject=0x10c) returned 1 [0230.532] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0230.538] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0230.538] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0230.538] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0230.538] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0230.538] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_StorageSense_AppSizesOptionalComponentsLink.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0230.539] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_StorageSense_AppSizesOptionalComponentsLink.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_storagesense_appsizesoptionalcomponentslink.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0230.540] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1341) returned 1 [0230.540] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1341) returned 1 [0230.540] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x41b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.540] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0230.542] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.542] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0230.542] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0230.542] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.542] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x53d, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x53d, lpOverlapped=0x0) returned 1 [0230.542] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0230.542] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x53d, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x540) returned 1 [0230.542] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.543] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x540, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x540, lpOverlapped=0x0) returned 1 [0230.543] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0230.543] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0230.543] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0230.543] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0230.543] CloseHandle (hObject=0x10c) returned 1 [0230.564] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0230.568] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0230.568] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0230.568] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0230.568] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0230.568] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_SyncSettings_SyncAccessibility_Toggle.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0230.569] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_SyncSettings_SyncAccessibility_Toggle.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_syncsettings_syncaccessibility_toggle.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0230.570] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1323) returned 1 [0230.570] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1323) returned 1 [0230.570] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x409, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.570] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0230.571] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.571] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6f20) returned 1 [0230.571] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0230.571] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.571] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x52b, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x52b, lpOverlapped=0x0) returned 1 [0230.571] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0230.571] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x52b, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x530) returned 1 [0230.571] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.571] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x530, lpOverlapped=0x0) returned 1 [0230.571] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0230.571] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0230.571] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0230.572] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0230.572] CloseHandle (hObject=0x10c) returned 1 [0230.593] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0230.597] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0230.597] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0230.597] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0230.597] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0230.597] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_SyncSettings_SyncBrowserSettings_Toggle.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0230.598] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_SyncSettings_SyncBrowserSettings_Toggle.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_syncsettings_syncbrowsersettings_toggle.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0230.598] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1333) returned 1 [0230.599] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1333) returned 1 [0230.599] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x413, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.599] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0230.600] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.600] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0230.600] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0230.600] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.600] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x535, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x535, lpOverlapped=0x0) returned 1 [0230.600] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0230.600] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x535, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x540) returned 1 [0230.600] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.600] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x540, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x540, lpOverlapped=0x0) returned 1 [0230.600] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0230.600] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0230.601] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0230.601] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0230.601] CloseHandle (hObject=0x10c) returned 1 [0230.620] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0230.626] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0230.626] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0230.626] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0230.626] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0230.626] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_SyncSettings_SyncCredentials_Toggle.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0230.627] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_SyncSettings_SyncCredentials_Toggle.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_syncsettings_synccredentials_toggle.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0230.628] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1313) returned 1 [0230.628] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1313) returned 1 [0230.628] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3ff, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.628] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0230.629] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.629] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae7150) returned 1 [0230.629] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0230.630] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.630] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x521, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x521, lpOverlapped=0x0) returned 1 [0230.630] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0230.630] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x521, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x530) returned 1 [0230.630] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.630] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x530, lpOverlapped=0x0) returned 1 [0230.630] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0230.630] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0230.630] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0230.630] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0230.630] CloseHandle (hObject=0x10c) returned 1 [0230.653] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0230.658] CryptDestroyKey (hKey=0x665aae7150) returned 1 [0230.658] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0230.659] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0230.659] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0230.659] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_SyncSettings_SyncLanguage_Toggle.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0230.663] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_SyncSettings_SyncLanguage_Toggle.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_syncsettings_synclanguage_toggle.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0230.664] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1298) returned 1 [0230.664] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1298) returned 1 [0230.664] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3f0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.664] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0230.666] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.666] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0230.666] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0230.666] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.666] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x512, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x512, lpOverlapped=0x0) returned 1 [0230.666] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0230.666] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x512, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x520) returned 1 [0230.666] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.666] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x520, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x520, lpOverlapped=0x0) returned 1 [0230.667] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0230.667] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0230.667] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0230.667] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0230.667] CloseHandle (hObject=0x10c) returned 1 [0230.688] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0230.694] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0230.694] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0230.694] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0230.694] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0230.695] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_SyncSettings_SyncMaster_Toggle.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0230.695] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_SyncSettings_SyncMaster_Toggle.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_syncsettings_syncmaster_toggle.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0230.696] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1293) returned 1 [0230.696] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1293) returned 1 [0230.696] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3eb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.696] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0230.698] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.698] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0230.698] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0230.698] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.698] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x50d, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x50d, lpOverlapped=0x0) returned 1 [0230.699] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0230.699] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x50d, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x510) returned 1 [0230.699] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.699] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x510, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x510, lpOverlapped=0x0) returned 1 [0230.699] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0230.699] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0230.699] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0230.699] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0230.699] CloseHandle (hObject=0x10c) returned 1 [0230.720] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0230.726] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0230.726] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0230.726] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0230.726] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0230.726] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_SyncSettings_SyncPersonalization_Toggle.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0230.727] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_SyncSettings_SyncPersonalization_Toggle.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_syncsettings_syncpersonalization_toggle.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0230.728] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1333) returned 1 [0230.728] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1333) returned 1 [0230.728] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x413, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.766] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0230.767] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.767] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6820) returned 1 [0230.767] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0230.768] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.768] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x535, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x535, lpOverlapped=0x0) returned 1 [0230.768] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0230.768] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x535, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x540) returned 1 [0230.768] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.768] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x540, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x540, lpOverlapped=0x0) returned 1 [0230.869] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0230.869] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0230.869] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0230.869] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0230.870] CloseHandle (hObject=0x10c) returned 1 [0230.891] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0230.897] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0230.897] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0230.897] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0230.897] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0230.906] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0230.906] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_AssignedAccess.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0230.907] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_AssignedAccess.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_users_assignedaccess.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0230.907] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1228) returned 1 [0230.907] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1228) returned 1 [0230.907] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3aa, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.907] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0230.909] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.909] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6f20) returned 1 [0230.909] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0230.909] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.909] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4cc, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4cc, lpOverlapped=0x0) returned 1 [0230.909] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0230.909] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4cc, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4d0) returned 1 [0230.909] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.909] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4d0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4d0, lpOverlapped=0x0) returned 1 [0230.909] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0230.910] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0230.910] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0230.910] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0230.910] CloseHandle (hObject=0x10c) returned 1 [0230.932] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0230.936] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0230.936] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0230.936] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0230.936] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0230.936] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_ChangePassword.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0230.937] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_ChangePassword.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_users_changepassword.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0230.938] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1227) returned 1 [0230.938] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1227) returned 1 [0230.938] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3a9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.938] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0230.947] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.947] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0230.947] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0230.947] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.947] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4cb, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4cb, lpOverlapped=0x0) returned 1 [0230.947] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0230.947] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4cb, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4d0) returned 1 [0230.948] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.948] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4d0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4d0, lpOverlapped=0x0) returned 1 [0230.948] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0230.948] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0230.948] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0230.948] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0230.948] CloseHandle (hObject=0x10c) returned 1 [0230.965] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0230.970] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0230.970] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0230.970] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0230.970] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0230.970] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_DelayLock.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0230.971] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_DelayLock.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_users_delaylock.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0230.971] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1208) returned 1 [0230.971] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1208) returned 1 [0230.971] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x396, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.972] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0230.973] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.973] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0230.973] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0230.973] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.973] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4b8, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4b8, lpOverlapped=0x0) returned 1 [0230.973] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0230.973] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4b8, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4c0) returned 1 [0230.973] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0230.973] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4c0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4c0, lpOverlapped=0x0) returned 1 [0230.973] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0230.974] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0230.974] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0230.974] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0230.974] CloseHandle (hObject=0x10c) returned 1 [0230.992] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0230.997] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0230.997] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0230.997] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0230.997] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0230.997] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_EnrollmentFace.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0230.998] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_EnrollmentFace.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_users_enrollmentface.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0230.998] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1227) returned 1 [0230.999] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1227) returned 1 [0230.999] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3a9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.999] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0231.000] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.000] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0231.000] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0231.000] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.000] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4cb, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4cb, lpOverlapped=0x0) returned 1 [0231.000] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0231.000] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4cb, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4d0) returned 1 [0231.000] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.000] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4d0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4d0, lpOverlapped=0x0) returned 1 [0231.001] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0231.001] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0231.001] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0231.001] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0231.001] CloseHandle (hObject=0x10c) returned 1 [0231.018] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0231.024] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0231.024] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0231.024] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0231.024] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0231.024] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_EnrollmentFingerprint.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0231.025] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_EnrollmentFingerprint.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_users_enrollmentfingerprint.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0231.026] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1262) returned 1 [0231.026] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1262) returned 1 [0231.026] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3cc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0231.026] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0231.037] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.037] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0231.037] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0231.037] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.038] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4ee, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4ee, lpOverlapped=0x0) returned 1 [0231.038] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0231.038] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4ee, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4f0) returned 1 [0231.038] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.038] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4f0, lpOverlapped=0x0) returned 1 [0231.038] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0231.038] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0231.038] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0231.038] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0231.038] CloseHandle (hObject=0x10c) returned 1 [0231.059] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0231.064] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0231.064] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0231.065] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0231.065] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0231.065] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_EnrollmentIris.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0231.066] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_EnrollmentIris.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_users_enrollmentiris.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0231.067] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1227) returned 1 [0231.067] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1227) returned 1 [0231.067] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3a9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0231.067] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0231.070] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.070] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae66d0) returned 1 [0231.070] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0231.071] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.071] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4cb, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4cb, lpOverlapped=0x0) returned 1 [0231.071] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0231.071] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4cb, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4d0) returned 1 [0231.071] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.071] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4d0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4d0, lpOverlapped=0x0) returned 1 [0231.071] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0231.071] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0231.071] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0231.071] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0231.071] CloseHandle (hObject=0x10c) returned 1 [0231.087] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0231.092] CryptDestroyKey (hKey=0x665aae66d0) returned 1 [0231.092] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0231.092] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0231.092] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0231.093] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_PicturePassword.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0231.093] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_PicturePassword.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_users_picturepassword.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0231.094] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1239) returned 1 [0231.094] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1239) returned 1 [0231.094] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3b5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0231.094] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0231.095] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.096] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0231.096] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0231.096] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.096] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4d7, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4d7, lpOverlapped=0x0) returned 1 [0231.096] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0231.096] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4d7, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4e0) returned 1 [0231.096] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.096] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4e0, lpOverlapped=0x0) returned 1 [0231.096] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0231.097] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0231.097] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0231.097] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0231.097] CloseHandle (hObject=0x10c) returned 1 [0231.118] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0231.125] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0231.125] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0231.125] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0231.125] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0231.125] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_PINPassword.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0231.126] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_PINPassword.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_users_pinpassword.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0231.127] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1207) returned 1 [0231.127] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1207) returned 1 [0231.127] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x395, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0231.127] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0231.128] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.128] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae70e0) returned 1 [0231.128] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0231.129] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.129] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4b7, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4b7, lpOverlapped=0x0) returned 1 [0231.129] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0231.129] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4b7, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4c0) returned 1 [0231.129] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.129] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4c0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4c0, lpOverlapped=0x0) returned 1 [0231.129] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0231.129] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0231.129] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0231.130] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0231.130] CloseHandle (hObject=0x10c) returned 1 [0231.152] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0231.157] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0231.157] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0231.158] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0231.158] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0231.158] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_SingleSignOnAccountList.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0231.159] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_SingleSignOnAccountList.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_users_singlesignonaccountlist.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0231.159] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1277) returned 1 [0231.159] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1277) returned 1 [0231.159] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3db, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0231.160] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0231.162] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.162] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6740) returned 1 [0231.162] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0231.162] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.162] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4fd, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4fd, lpOverlapped=0x0) returned 1 [0231.162] CryptEncrypt (in: hKey=0x665aae6740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0231.162] CryptEncrypt (in: hKey=0x665aae6740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4fd, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x500) returned 1 [0231.162] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.162] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x500, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x500, lpOverlapped=0x0) returned 1 [0231.163] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0231.163] CryptExportKey (in: hKey=0x665aae6740, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0231.163] CryptExportKey (in: hKey=0x665aae6740, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0231.163] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0231.163] CloseHandle (hObject=0x10c) returned 1 [0231.186] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0231.191] CryptDestroyKey (hKey=0x665aae6740) returned 1 [0231.191] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0231.191] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0231.191] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0231.192] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_VirtualDesktops_AltTabFilter.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0231.192] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_VirtualDesktops_AltTabFilter.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_virtualdesktops_alttabfilter.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0231.193] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1272) returned 1 [0231.193] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1272) returned 1 [0231.193] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3d6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0231.193] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0231.195] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.195] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae66d0) returned 1 [0231.195] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0231.195] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.195] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4f8, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4f8, lpOverlapped=0x0) returned 1 [0231.195] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0231.196] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4f8, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x500) returned 1 [0231.196] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.196] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x500, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x500, lpOverlapped=0x0) returned 1 [0231.196] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0231.196] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0231.196] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0231.196] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0231.196] CloseHandle (hObject=0x10c) returned 1 [0231.242] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0231.246] CryptDestroyKey (hKey=0x665aae66d0) returned 1 [0231.246] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0231.246] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0231.246] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0231.246] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_VirtualDesktops_TaskbarFilter.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0231.247] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_VirtualDesktops_TaskbarFilter.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_virtualdesktops_taskbarfilter.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0231.247] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1277) returned 1 [0231.247] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1277) returned 1 [0231.248] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3db, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0231.248] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0231.249] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.249] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0231.249] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0231.249] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.249] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4fd, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4fd, lpOverlapped=0x0) returned 1 [0231.249] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0231.249] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4fd, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x500) returned 1 [0231.249] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.249] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x500, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x500, lpOverlapped=0x0) returned 1 [0231.249] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0231.249] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0231.250] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0231.250] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0231.250] CloseHandle (hObject=0x10c) returned 1 [0231.268] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0231.273] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0231.273] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0231.273] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0231.273] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0231.273] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Workplace_CorpDeviceManagement.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0231.274] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Workplace_CorpDeviceManagement.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_workplace_corpdevicemanagement.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0231.274] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1293) returned 1 [0231.275] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1293) returned 1 [0231.275] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3eb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0231.275] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0231.276] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.276] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae65f0) returned 1 [0231.276] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0231.276] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.276] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x50d, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x50d, lpOverlapped=0x0) returned 1 [0231.277] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0231.277] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x50d, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x510) returned 1 [0231.277] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.277] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x510, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x510, lpOverlapped=0x0) returned 1 [0231.277] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0231.277] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0231.277] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0231.277] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0231.277] CloseHandle (hObject=0x10c) returned 1 [0231.295] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0231.300] CryptDestroyKey (hKey=0x665aae65f0) returned 1 [0231.300] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0231.300] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0231.301] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0231.301] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Workplace_RelatedSettings.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0231.301] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Workplace_RelatedSettings.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_workplace_relatedsettings.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0231.302] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1260) returned 1 [0231.302] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1260) returned 1 [0231.302] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3ca, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0231.302] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0231.304] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.304] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae70e0) returned 1 [0231.304] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0231.304] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.304] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4ec, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4ec, lpOverlapped=0x0) returned 1 [0231.304] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0231.304] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4ec, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4f0) returned 1 [0231.304] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.304] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4f0, lpOverlapped=0x0) returned 1 [0231.304] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0231.304] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0231.304] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0231.304] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0231.305] CloseHandle (hObject=0x10c) returned 1 [0231.322] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0231.326] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0231.326] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0231.327] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0231.327] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0231.327] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AddOrRemovePrograms.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0231.327] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AddOrRemovePrograms.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\addorremoveprograms.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0231.328] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=818) returned 1 [0231.328] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=818) returned 1 [0231.328] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x210, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0231.328] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0231.329] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.329] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0231.329] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0231.330] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.330] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x332, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x332, lpOverlapped=0x0) returned 1 [0231.330] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0231.330] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x332, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x340) returned 1 [0231.330] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.330] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x340, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x340, lpOverlapped=0x0) returned 1 [0231.330] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0231.330] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0231.330] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0231.330] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0231.330] CloseHandle (hObject=0x10c) returned 1 [0231.347] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0231.352] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0231.352] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0231.352] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0231.352] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0231.352] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{0042AE00-17CC-42EC-B5AD-B8F08A025D71}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0231.354] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{0042AE00-17CC-42EC-B5AD-B8F08A025D71}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{0042ae00-17cc-42ec-b5ad-b8f08a025d71}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0231.354] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1006) returned 1 [0231.354] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1006) returned 1 [0231.354] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2cc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0231.354] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0231.356] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.356] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6740) returned 1 [0231.356] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0231.356] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.356] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3ee, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3ee, lpOverlapped=0x0) returned 1 [0231.356] CryptEncrypt (in: hKey=0x665aae6740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0231.356] CryptEncrypt (in: hKey=0x665aae6740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3ee, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3f0) returned 1 [0231.356] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.357] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3f0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3f0, lpOverlapped=0x0) returned 1 [0231.357] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0231.357] CryptExportKey (in: hKey=0x665aae6740, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0231.357] CryptExportKey (in: hKey=0x665aae6740, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0231.357] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0231.357] CloseHandle (hObject=0x10c) returned 1 [0231.380] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0231.386] CryptDestroyKey (hKey=0x665aae6740) returned 1 [0231.386] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0231.386] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0231.386] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0231.386] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{01ACC6BC-9A3D-49c5-AC7D-0FB9E026C424}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0231.387] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{01ACC6BC-9A3D-49c5-AC7D-0FB9E026C424}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{01acc6bc-9a3d-49c5-ac7d-0fb9e026c424}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0231.387] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1202) returned 1 [0231.387] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1202) returned 1 [0231.387] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x390, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0231.388] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0231.389] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.389] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0231.390] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0231.390] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.390] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4b2, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4b2, lpOverlapped=0x0) returned 1 [0231.390] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0231.390] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4b2, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4c0) returned 1 [0231.390] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.390] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4c0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4c0, lpOverlapped=0x0) returned 1 [0231.390] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0231.390] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0231.390] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0231.391] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0231.391] CloseHandle (hObject=0x10c) returned 1 [0231.410] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0231.414] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0231.414] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0231.414] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0231.414] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0231.415] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{028DE9F5-65F3-4A06-A048-421056F3E421}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0231.415] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{028DE9F5-65F3-4A06-A048-421056F3E421}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{028de9f5-65f3-4a06-a048-421056f3e421}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0231.416] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1181) returned 1 [0231.416] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1181) returned 1 [0231.416] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x37b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0231.416] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0231.417] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.417] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0231.417] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0231.417] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.417] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x49d, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x49d, lpOverlapped=0x0) returned 1 [0231.417] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0231.417] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x49d, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4a0) returned 1 [0231.418] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.418] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4a0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4a0, lpOverlapped=0x0) returned 1 [0231.418] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0231.418] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0231.418] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0231.418] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0231.418] CloseHandle (hObject=0x10c) returned 1 [0231.437] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0231.442] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0231.442] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0231.442] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0231.442] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0231.442] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{030C20F0-E20B-417A-B7AD-CEC6EE955CD3}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0231.443] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{030C20F0-E20B-417A-B7AD-CEC6EE955CD3}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{030c20f0-e20b-417a-b7ad-cec6ee955cd3}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0231.443] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1045) returned 1 [0231.443] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1045) returned 1 [0231.443] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2f3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0231.443] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0231.445] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.445] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0231.445] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0231.445] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.445] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x415, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x415, lpOverlapped=0x0) returned 1 [0231.445] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0231.445] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x415, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x420) returned 1 [0231.445] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.445] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x420, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x420, lpOverlapped=0x0) returned 1 [0231.445] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0231.445] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0231.445] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0231.446] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0231.446] CloseHandle (hObject=0x10c) returned 1 [0231.465] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0231.469] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0231.469] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0231.469] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0231.472] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0231.473] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{059ECE57-19D1-4112-B05C-86F8ED5DA6B0}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0231.473] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{059ECE57-19D1-4112-B05C-86F8ED5DA6B0}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{059ece57-19d1-4112-b05c-86f8ed5da6b0}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0231.474] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=948) returned 1 [0231.474] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=948) returned 1 [0231.474] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x292, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0231.474] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0231.475] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.475] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0231.475] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0231.475] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.475] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3b4, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3b4, lpOverlapped=0x0) returned 1 [0231.476] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0231.476] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3b4, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3c0) returned 1 [0231.476] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.476] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3c0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3c0, lpOverlapped=0x0) returned 1 [0231.476] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0231.476] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0231.476] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0231.476] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0231.476] CloseHandle (hObject=0x10c) returned 1 [0231.493] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0231.497] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0231.497] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0231.497] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0231.497] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0231.498] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{06628900-13DD-4fc3-A18B-0E9CE7B663ED}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0231.498] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{06628900-13DD-4fc3-A18B-0E9CE7B663ED}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{06628900-13dd-4fc3-a18b-0e9ce7b663ed}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0231.499] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1135) returned 1 [0231.499] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1135) returned 1 [0231.499] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x34d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0231.499] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0231.500] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.500] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae7150) returned 1 [0231.500] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0231.500] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.500] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x46f, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x46f, lpOverlapped=0x0) returned 1 [0231.501] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0231.501] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x46f, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x470) returned 1 [0231.501] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.501] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x470, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x470, lpOverlapped=0x0) returned 1 [0231.501] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0231.501] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0231.501] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0231.501] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0231.501] CloseHandle (hObject=0x10c) returned 1 [0231.518] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0231.522] CryptDestroyKey (hKey=0x665aae7150) returned 1 [0231.522] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0231.522] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0231.523] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0231.523] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{06D12455-F35D-44D6-8E00-3F6A360CC030}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0231.523] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{06D12455-F35D-44D6-8E00-3F6A360CC030}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{06d12455-f35d-44d6-8e00-3f6a360cc030}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0231.525] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1019) returned 1 [0231.525] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1019) returned 1 [0231.525] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2d9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0231.525] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0231.526] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.527] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0231.527] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0231.527] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.527] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3fb, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3fb, lpOverlapped=0x0) returned 1 [0231.527] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0231.527] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3fb, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x400) returned 1 [0231.527] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.527] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x400, lpOverlapped=0x0) returned 1 [0231.528] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0231.528] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0231.528] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0231.528] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0231.528] CloseHandle (hObject=0x10c) returned 1 [0231.548] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0231.552] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0231.552] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0231.552] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0231.552] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0231.552] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{06FF5AE9-8F7C-41AD-B71B-62137DE26715}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0231.553] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{06FF5AE9-8F7C-41AD-B71B-62137DE26715}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{06ff5ae9-8f7c-41ad-b71b-62137de26715}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0231.554] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=983) returned 1 [0231.554] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=983) returned 1 [0231.554] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2b5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0231.554] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0231.555] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.555] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0231.555] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0231.555] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.555] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3d7, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3d7, lpOverlapped=0x0) returned 1 [0231.555] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0231.556] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3d7, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3e0) returned 1 [0231.556] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.556] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3e0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3e0, lpOverlapped=0x0) returned 1 [0231.556] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0231.556] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0231.556] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0231.556] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0231.556] CloseHandle (hObject=0x10c) returned 1 [0231.573] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0231.577] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0231.577] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0231.578] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0231.578] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0231.578] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{082594D9-8481-43F0-AE8F-62EA920A4220}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0231.578] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{082594D9-8481-43F0-AE8F-62EA920A4220}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{082594d9-8481-43f0-ae8f-62ea920a4220}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0231.579] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=981) returned 1 [0231.579] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=981) returned 1 [0231.579] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2b3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0231.579] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0231.580] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.580] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae70e0) returned 1 [0231.580] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0231.581] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.581] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3d5, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3d5, lpOverlapped=0x0) returned 1 [0231.581] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0231.581] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3d5, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3e0) returned 1 [0231.581] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.581] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3e0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3e0, lpOverlapped=0x0) returned 1 [0231.584] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0231.584] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0231.584] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0231.584] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0231.584] CloseHandle (hObject=0x10c) returned 1 [0231.600] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0231.604] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0231.604] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0231.605] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0231.605] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0231.605] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{083D5202-600A-4f38-981B-2D138FBDC4D1}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0231.605] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{083D5202-600A-4f38-981B-2D138FBDC4D1}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{083d5202-600a-4f38-981b-2d138fbdc4d1}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0231.606] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1153) returned 1 [0231.606] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1153) returned 1 [0231.606] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x35f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0231.606] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0231.607] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.607] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae70e0) returned 1 [0231.607] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0231.608] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.608] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x481, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x481, lpOverlapped=0x0) returned 1 [0231.608] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0231.608] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x481, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x490) returned 1 [0231.608] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.608] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x490, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x490, lpOverlapped=0x0) returned 1 [0231.613] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0231.616] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0231.618] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0231.618] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0231.618] CloseHandle (hObject=0x10c) returned 1 [0231.635] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0231.639] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0231.639] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0231.640] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0231.640] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0231.640] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{08D48377-1C06-416D-B382-61E8D5F6CD18}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0231.641] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{08D48377-1C06-416D-B382-61E8D5F6CD18}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{08d48377-1c06-416d-b382-61e8d5f6cd18}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0231.641] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1019) returned 1 [0231.641] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1019) returned 1 [0231.641] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2d9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0231.641] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0231.642] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.643] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0231.643] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0231.643] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.643] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3fb, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3fb, lpOverlapped=0x0) returned 1 [0231.643] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0231.643] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3fb, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x400) returned 1 [0231.643] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.643] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x400, lpOverlapped=0x0) returned 1 [0231.643] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0231.643] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0231.643] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0231.643] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0231.644] CloseHandle (hObject=0x10c) returned 1 [0231.660] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0231.664] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0231.664] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0231.664] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0231.664] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0231.665] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{08EB53B7-3384-473A-8D2C-6C0E71F3BF34}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0231.665] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{08EB53B7-3384-473A-8D2C-6C0E71F3BF34}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{08eb53b7-3384-473a-8d2c-6c0e71f3bf34}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0231.666] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=966) returned 1 [0231.666] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=966) returned 1 [0231.666] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2a4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0231.666] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0231.667] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.667] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0231.667] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0231.668] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.668] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3c6, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3c6, lpOverlapped=0x0) returned 1 [0231.668] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0231.668] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3c6, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3d0) returned 1 [0231.668] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.668] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3d0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3d0, lpOverlapped=0x0) returned 1 [0231.668] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0231.668] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0231.668] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0231.668] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0231.668] CloseHandle (hObject=0x10c) returned 1 [0231.684] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0231.689] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0231.689] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0231.689] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0231.689] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0231.689] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\classic_{09bf6a57-7bf7-4389-8d6f-2bcf6a26bb4e}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0231.690] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\classic_{09bf6a57-7bf7-4389-8d6f-2bcf6a26bb4e}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{09bf6a57-7bf7-4389-8d6f-2bcf6a26bb4e}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0231.690] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=949) returned 1 [0231.690] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=949) returned 1 [0231.690] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x293, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0231.690] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0231.692] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.692] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0231.692] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0231.692] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.692] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3b5, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3b5, lpOverlapped=0x0) returned 1 [0231.692] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0231.692] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3b5, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3c0) returned 1 [0231.692] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.692] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3c0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3c0, lpOverlapped=0x0) returned 1 [0231.693] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0231.693] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0231.693] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0231.693] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0231.693] CloseHandle (hObject=0x10c) returned 1 [0231.710] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0231.715] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0231.715] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0231.715] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0231.715] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0231.715] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{0CDC534D-A9FF-450D-91D8-96C341ED44AA}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0231.716] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{0CDC534D-A9FF-450D-91D8-96C341ED44AA}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{0cdc534d-a9ff-450d-91d8-96c341ed44aa}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0231.717] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=962) returned 1 [0231.717] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=962) returned 1 [0231.717] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2a0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0231.717] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0231.718] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.718] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6f20) returned 1 [0231.718] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0231.719] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.719] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3c2, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3c2, lpOverlapped=0x0) returned 1 [0231.719] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0231.719] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3c2, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3d0) returned 1 [0231.719] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.719] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3d0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3d0, lpOverlapped=0x0) returned 1 [0231.719] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0231.719] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0231.719] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0231.719] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0231.720] CloseHandle (hObject=0x10c) returned 1 [0231.738] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0231.742] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0231.742] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0231.742] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0231.742] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0231.743] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{0df44eaa-ff21-4412-828e-260a8728e7f1}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0231.743] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{0df44eaa-ff21-4412-828e-260a8728e7f1}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{0df44eaa-ff21-4412-828e-260a8728e7f1}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0231.744] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=892) returned 1 [0231.744] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=892) returned 1 [0231.744] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x25a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0231.744] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0231.746] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.746] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6820) returned 1 [0231.746] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0231.746] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.747] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x37c, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x37c, lpOverlapped=0x0) returned 1 [0231.747] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0231.747] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x37c, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x380) returned 1 [0231.747] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.747] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x380, lpOverlapped=0x0) returned 1 [0231.747] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0231.747] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0231.747] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0231.747] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0231.747] CloseHandle (hObject=0x10c) returned 1 [0231.765] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0231.769] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0231.769] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0231.769] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0231.769] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0231.769] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{0DF721FA-F921-4416-A491-1924F212C705}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0231.770] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{0DF721FA-F921-4416-A491-1924F212C705}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{0df721fa-f921-4416-a491-1924f212c705}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0231.770] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=961) returned 1 [0231.770] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=961) returned 1 [0231.770] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x29f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0231.770] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0231.772] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.772] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae70e0) returned 1 [0231.772] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0231.772] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.772] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3c1, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3c1, lpOverlapped=0x0) returned 1 [0231.772] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0231.772] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3c1, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3d0) returned 1 [0231.772] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.772] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3d0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3d0, lpOverlapped=0x0) returned 1 [0231.772] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0231.772] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0231.772] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0231.772] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0231.773] CloseHandle (hObject=0x10c) returned 1 [0231.790] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0231.795] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0231.795] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0231.795] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0231.795] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0231.795] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{0e1d43a6-f261-491c-84ea-8bfcc6a4b70b}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0231.797] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{0e1d43a6-f261-491c-84ea-8bfcc6a4b70b}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{0e1d43a6-f261-491c-84ea-8bfcc6a4b70b}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0231.797] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=918) returned 1 [0231.797] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=918) returned 1 [0231.797] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x274, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0231.797] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0231.799] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.799] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6820) returned 1 [0231.799] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0231.799] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.799] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x396, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x396, lpOverlapped=0x0) returned 1 [0231.799] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0231.800] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x396, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3a0) returned 1 [0231.800] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.800] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3a0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3a0, lpOverlapped=0x0) returned 1 [0231.800] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0231.800] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0231.800] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0231.800] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0231.800] CloseHandle (hObject=0x10c) returned 1 [0231.819] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0231.823] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0231.823] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0231.824] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0231.824] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0231.824] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{0F1B68F6-B72D-4229-BC9C-A87F0B16B17B}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0231.825] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{0F1B68F6-B72D-4229-BC9C-A87F0B16B17B}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{0f1b68f6-b72d-4229-bc9c-a87f0b16b17b}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0231.825] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1206) returned 1 [0231.825] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1206) returned 1 [0231.825] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x394, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0231.825] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0231.826] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.826] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6820) returned 1 [0231.827] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0231.827] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.827] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4b6, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4b6, lpOverlapped=0x0) returned 1 [0231.827] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0231.827] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4b6, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4c0) returned 1 [0231.827] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.827] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4c0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4c0, lpOverlapped=0x0) returned 1 [0231.827] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0231.827] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0231.827] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0231.828] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0231.828] CloseHandle (hObject=0x10c) returned 1 [0231.845] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0231.849] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0231.849] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0231.849] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0231.849] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0231.849] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1011988D-12F9-446b-85FF-A1579CCD1678}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0231.850] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1011988D-12F9-446b-85FF-A1579CCD1678}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{1011988d-12f9-446b-85ff-a1579ccd1678}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0231.850] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1011) returned 1 [0231.850] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1011) returned 1 [0231.850] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2d1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0231.850] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0231.852] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.852] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0231.852] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0231.852] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.852] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3f3, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3f3, lpOverlapped=0x0) returned 1 [0231.852] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0231.852] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3f3, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x400) returned 1 [0231.852] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.852] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x400, lpOverlapped=0x0) returned 1 [0231.852] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0231.852] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0231.852] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0231.852] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0231.852] CloseHandle (hObject=0x10c) returned 1 [0231.871] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0231.875] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0231.875] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0231.876] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0231.876] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0231.876] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{10cbe5dd-9921-4090-b412-361339a230ad}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0231.877] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{10cbe5dd-9921-4090-b412-361339a230ad}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{10cbe5dd-9921-4090-b412-361339a230ad}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0231.877] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1131) returned 1 [0231.877] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1131) returned 1 [0231.877] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x349, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0231.878] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0231.879] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.879] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae7150) returned 1 [0231.879] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0231.879] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.879] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x46b, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x46b, lpOverlapped=0x0) returned 1 [0231.879] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0231.879] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x46b, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x470) returned 1 [0231.879] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.879] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x470, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x470, lpOverlapped=0x0) returned 1 [0231.880] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0231.880] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0231.880] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0231.880] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0231.880] CloseHandle (hObject=0x10c) returned 1 [0231.901] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0231.906] CryptDestroyKey (hKey=0x665aae7150) returned 1 [0231.907] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0231.907] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0231.907] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0231.907] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{11135AE0-7372-4f85-8D1B-93D6EFBE5A99}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0231.908] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{11135AE0-7372-4f85-8D1B-93D6EFBE5A99}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{11135ae0-7372-4f85-8d1b-93d6efbe5a99}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0231.908] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=913) returned 1 [0231.909] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=913) returned 1 [0231.909] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x26f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0231.909] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0231.910] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.910] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6f20) returned 1 [0231.910] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0231.910] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.910] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x391, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x391, lpOverlapped=0x0) returned 1 [0231.911] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0231.911] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x391, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3a0) returned 1 [0231.911] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.911] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3a0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3a0, lpOverlapped=0x0) returned 1 [0231.911] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0231.911] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0231.911] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0231.911] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0231.911] CloseHandle (hObject=0x10c) returned 1 [0231.933] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0231.938] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0231.938] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0231.938] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0231.938] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0231.938] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{11E71674-7556-4E27-8D59-03B2FA846204}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0231.939] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{11E71674-7556-4E27-8D59-03B2FA846204}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{11e71674-7556-4e27-8d59-03b2fa846204}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0231.940] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1047) returned 1 [0231.940] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1047) returned 1 [0231.940] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2f5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0231.940] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0231.949] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.949] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6f20) returned 1 [0231.949] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0231.949] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.949] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x417, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x417, lpOverlapped=0x0) returned 1 [0231.949] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0231.949] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x417, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x420) returned 1 [0231.949] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.949] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x420, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x420, lpOverlapped=0x0) returned 1 [0231.950] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0231.950] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0231.950] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0231.950] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0231.950] CloseHandle (hObject=0x10c) returned 1 [0231.971] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0231.976] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0231.976] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0231.977] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0231.979] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0231.979] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1206f5f1-0569-412c-8fec-3204630dfb70}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0231.980] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1206f5f1-0569-412c-8fec-3204630dfb70}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{1206f5f1-0569-412c-8fec-3204630dfb70}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0231.980] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=913) returned 1 [0231.980] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=913) returned 1 [0231.980] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x26f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0231.980] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0231.982] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.982] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0231.982] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0231.982] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.982] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x391, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x391, lpOverlapped=0x0) returned 1 [0231.982] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0231.982] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x391, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3a0) returned 1 [0231.982] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0231.982] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3a0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3a0, lpOverlapped=0x0) returned 1 [0231.982] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0231.983] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0231.983] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0231.983] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0231.983] CloseHandle (hObject=0x10c) returned 1 [0232.004] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0232.009] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0232.009] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0232.010] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0232.010] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0232.010] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{12BBBD91-8E16-4C3F-9715-16E5C8299244}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0232.011] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{12BBBD91-8E16-4C3F-9715-16E5C8299244}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{12bbbd91-8e16-4c3f-9715-16e5c8299244}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0232.011] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1164) returned 1 [0232.011] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1164) returned 1 [0232.011] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x36a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0232.011] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0232.013] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0232.013] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6f20) returned 1 [0232.013] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0232.013] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0232.013] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x48c, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x48c, lpOverlapped=0x0) returned 1 [0232.013] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0232.013] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x48c, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x490) returned 1 [0232.013] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0232.013] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x490, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x490, lpOverlapped=0x0) returned 1 [0232.013] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0232.013] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0232.013] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0232.013] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0232.014] CloseHandle (hObject=0x10c) returned 1 [0232.033] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0232.037] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0232.037] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0232.037] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0232.037] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0232.037] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{141D98AD-3E07-4C44-A578-4DCA078286A4}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0232.038] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{141D98AD-3E07-4C44-A578-4DCA078286A4}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{141d98ad-3e07-4c44-a578-4dca078286a4}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0232.039] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1020) returned 1 [0232.039] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1020) returned 1 [0232.039] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2da, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0232.039] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0232.040] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0232.040] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0232.040] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0232.040] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0232.040] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3fc, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3fc, lpOverlapped=0x0) returned 1 [0232.040] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0232.040] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3fc, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x400) returned 1 [0232.040] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0232.040] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x400, lpOverlapped=0x0) returned 1 [0232.040] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0232.041] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0232.041] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0232.041] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0232.041] CloseHandle (hObject=0x10c) returned 1 [0232.058] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0232.063] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0232.063] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0232.063] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0232.063] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0232.064] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{14DEC75C-D6CE-44A9-8349-AD0F46EF96BE}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0232.064] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{14DEC75C-D6CE-44A9-8349-AD0F46EF96BE}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{14dec75c-d6ce-44a9-8349-ad0f46ef96be}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0232.065] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1086) returned 1 [0232.065] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1086) returned 1 [0232.065] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x31c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0232.065] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0232.066] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0232.066] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae66d0) returned 1 [0232.066] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0232.066] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0232.066] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x43e, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x43e, lpOverlapped=0x0) returned 1 [0232.066] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0232.066] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x43e, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x440) returned 1 [0232.066] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0232.066] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x440, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x440, lpOverlapped=0x0) returned 1 [0232.066] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0232.067] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0232.067] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0232.067] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0232.067] CloseHandle (hObject=0x10c) returned 1 [0232.085] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0232.089] CryptDestroyKey (hKey=0x665aae66d0) returned 1 [0232.089] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0232.089] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0232.089] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0232.090] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1515BA81-68EB-4143-A29F-51A40A65DAE6}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0232.090] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1515BA81-68EB-4143-A29F-51A40A65DAE6}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{1515ba81-68eb-4143-a29f-51a40a65dae6}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0232.091] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1197) returned 1 [0232.091] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1197) returned 1 [0232.091] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x38b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0232.091] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0232.092] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0232.092] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0232.092] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0232.092] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0232.092] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4ad, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4ad, lpOverlapped=0x0) returned 1 [0232.093] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0232.093] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4ad, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4b0) returned 1 [0232.093] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0232.093] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4b0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4b0, lpOverlapped=0x0) returned 1 [0232.095] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0232.095] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0232.095] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0232.095] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0232.096] CloseHandle (hObject=0x10c) returned 1 [0232.112] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0232.116] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0232.116] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0232.116] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0232.116] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0232.116] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{16C327FA-D8A8-41C0-B022-64AC67715327}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0232.117] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{16C327FA-D8A8-41C0-B022-64AC67715327}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{16c327fa-d8a8-41c0-b022-64ac67715327}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0232.117] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=926) returned 1 [0232.117] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=926) returned 1 [0232.117] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x27c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0232.117] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0232.119] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0232.119] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0232.119] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0232.119] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0232.119] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x39e, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x39e, lpOverlapped=0x0) returned 1 [0232.119] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0232.119] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x39e, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3a0) returned 1 [0232.119] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0232.119] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3a0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3a0, lpOverlapped=0x0) returned 1 [0232.119] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0232.120] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0232.120] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0232.120] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0232.120] CloseHandle (hObject=0x10c) returned 1 [0232.136] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0232.141] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0232.141] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0232.141] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0232.141] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0232.141] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{17468BC4-3ACB-4D2A-98C2-B0B7B4EF29E6}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0232.142] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{17468BC4-3ACB-4D2A-98C2-B0B7B4EF29E6}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{17468bc4-3acb-4d2a-98c2-b0b7b4ef29e6}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0232.142] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=985) returned 1 [0232.142] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=985) returned 1 [0232.142] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2b7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0232.142] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0232.144] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0232.144] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae70e0) returned 1 [0232.144] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0232.144] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0232.144] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3d9, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3d9, lpOverlapped=0x0) returned 1 [0232.144] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0232.144] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3d9, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3e0) returned 1 [0232.144] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0232.144] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3e0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3e0, lpOverlapped=0x0) returned 1 [0232.144] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0232.144] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0232.144] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0232.144] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0232.144] CloseHandle (hObject=0x10c) returned 1 [0232.161] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0232.165] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0232.165] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0232.165] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0232.165] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0232.165] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{17cd9488-1228-4b2f-88ce-4298e93e0966}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0232.166] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{17cd9488-1228-4b2f-88ce-4298e93e0966}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{17cd9488-1228-4b2f-88ce-4298e93e0966}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0232.167] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=910) returned 1 [0232.167] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=910) returned 1 [0232.167] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x26c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0232.167] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0232.168] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0232.168] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0232.168] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0232.168] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0232.168] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x38e, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x38e, lpOverlapped=0x0) returned 1 [0232.168] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0232.169] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x38e, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x390) returned 1 [0232.169] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0232.169] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x390, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x390, lpOverlapped=0x0) returned 1 [0232.169] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0232.169] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0232.169] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0232.169] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0232.169] CloseHandle (hObject=0x10c) returned 1 [0232.185] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0232.190] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0232.190] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0232.190] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0232.190] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0232.190] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1845AA13-3644-4FBC-B766-EEEF29683256}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0232.191] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1845AA13-3644-4FBC-B766-EEEF29683256}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{1845aa13-3644-4fbc-b766-eeef29683256}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0232.191] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=960) returned 1 [0232.191] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=960) returned 1 [0232.191] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x29e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0232.191] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0232.192] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0232.193] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0232.193] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0232.193] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0232.193] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3c0, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3c0, lpOverlapped=0x0) returned 1 [0232.193] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0232.193] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3c0, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3d0) returned 1 [0232.193] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0232.193] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3d0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3d0, lpOverlapped=0x0) returned 1 [0232.193] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0232.193] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0232.193] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0232.193] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0232.193] CloseHandle (hObject=0x10c) returned 1 [0232.210] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0232.215] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0232.215] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0232.215] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0232.215] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0232.215] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1928DA28-C5A7-4F13-AF81-8238D57A793F}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0232.216] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1928DA28-C5A7-4F13-AF81-8238D57A793F}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{1928da28-c5a7-4f13-af81-8238d57a793f}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0232.216] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1232) returned 1 [0232.216] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1232) returned 1 [0232.216] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3ae, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0232.216] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0232.284] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0232.284] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae65f0) returned 1 [0232.284] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0232.285] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0232.285] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4d0, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4d0, lpOverlapped=0x0) returned 1 [0232.285] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0232.285] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4d0, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4e0) returned 1 [0232.285] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0232.285] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4e0, lpOverlapped=0x0) returned 1 [0232.285] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0232.285] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0232.285] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0232.285] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0232.285] CloseHandle (hObject=0x10c) returned 1 [0232.304] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0232.308] CryptDestroyKey (hKey=0x665aae65f0) returned 1 [0232.308] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0232.308] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0232.308] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0232.309] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1a4635ec-181d-45ae-b691-bc75bec02756}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0232.310] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1a4635ec-181d-45ae-b691-bc75bec02756}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{1a4635ec-181d-45ae-b691-bc75bec02756}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0232.310] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=898) returned 1 [0232.310] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=898) returned 1 [0232.311] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x260, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0232.311] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0232.312] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0232.312] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6f20) returned 1 [0232.312] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0232.312] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0232.312] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x382, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x382, lpOverlapped=0x0) returned 1 [0232.312] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0232.312] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x382, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x390) returned 1 [0232.312] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0232.312] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x390, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x390, lpOverlapped=0x0) returned 1 [0232.313] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0232.313] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0232.313] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0232.313] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0232.313] CloseHandle (hObject=0x10c) returned 1 [0232.331] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0232.336] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0232.336] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0232.337] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0232.337] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0232.337] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1A5712E4-AAD7-4717-B22A-CF0B8438E2E6}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0232.338] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1A5712E4-AAD7-4717-B22A-CF0B8438E2E6}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{1a5712e4-aad7-4717-b22a-cf0b8438e2e6}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0232.338] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=991) returned 1 [0232.338] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=991) returned 1 [0232.338] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2bd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0232.338] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0232.339] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0232.339] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6f20) returned 1 [0232.339] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0232.340] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0232.340] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3df, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3df, lpOverlapped=0x0) returned 1 [0232.340] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0232.340] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3df, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3e0) returned 1 [0232.340] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0232.340] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3e0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3e0, lpOverlapped=0x0) returned 1 [0232.340] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0232.340] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0232.340] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0232.340] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0232.341] CloseHandle (hObject=0x10c) returned 1 [0232.363] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0232.368] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0232.368] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0232.368] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0232.368] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0232.368] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1BDB99DF-3832-49D6-9AE0-52105DB568DA}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0232.369] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1BDB99DF-3832-49D6-9AE0-52105DB568DA}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{1bdb99df-3832-49d6-9ae0-52105db568da}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0232.370] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=970) returned 1 [0232.370] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=970) returned 1 [0232.370] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2a8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0232.370] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0232.371] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0232.372] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6820) returned 1 [0232.372] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0232.372] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0232.372] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3ca, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3ca, lpOverlapped=0x0) returned 1 [0232.372] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0232.372] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3ca, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3d0) returned 1 [0232.372] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0232.372] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3d0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3d0, lpOverlapped=0x0) returned 1 [0232.372] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0232.372] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0232.372] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0232.373] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0232.373] CloseHandle (hObject=0x10c) returned 1 [0232.394] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0232.399] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0232.400] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0232.400] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0232.400] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0232.400] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1DD03EE3-FC46-456A-8632-B0717A9D497D}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0232.402] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1DD03EE3-FC46-456A-8632-B0717A9D497D}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{1dd03ee3-fc46-456a-8632-b0717a9d497d}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0232.402] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1249) returned 1 [0232.402] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1249) returned 1 [0232.403] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3bf, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0232.403] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0232.404] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0232.404] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae65f0) returned 1 [0232.404] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0232.405] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0232.405] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4e1, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4e1, lpOverlapped=0x0) returned 1 [0232.405] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0232.405] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4e1, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4f0) returned 1 [0232.405] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0232.405] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4f0, lpOverlapped=0x0) returned 1 [0232.405] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0232.405] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0232.406] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0232.406] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0232.406] CloseHandle (hObject=0x10c) returned 1 [0232.428] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0232.433] CryptDestroyKey (hKey=0x665aae65f0) returned 1 [0232.433] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0232.433] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0232.433] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0232.434] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{201CEF4B-7444-4B2F-B885-5E8F0AA1D614}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0232.435] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{201CEF4B-7444-4B2F-B885-5E8F0AA1D614}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{201cef4b-7444-4b2f-b885-5e8f0aa1d614}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0232.435] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1206) returned 1 [0232.435] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1206) returned 1 [0232.435] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x394, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0232.435] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0232.438] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0232.438] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0232.438] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0232.438] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0232.438] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4b6, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4b6, lpOverlapped=0x0) returned 1 [0232.439] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0232.439] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4b6, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4c0) returned 1 [0232.439] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0232.439] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4c0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4c0, lpOverlapped=0x0) returned 1 [0232.439] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0232.439] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0232.439] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0232.439] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0232.439] CloseHandle (hObject=0x10c) returned 1 [0232.461] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0232.466] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0232.466] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0232.466] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0232.466] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0232.466] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{207D6BD2-A09B-406f-8A72-BC90C49FC152}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0232.467] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{207D6BD2-A09B-406f-8A72-BC90C49FC152}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{207d6bd2-a09b-406f-8a72-bc90c49fc152}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0232.469] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1512) returned 1 [0232.469] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1512) returned 1 [0232.469] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x4c6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0232.469] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0232.471] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0232.471] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae66d0) returned 1 [0232.471] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0232.471] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0232.471] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x5e8, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x5e8, lpOverlapped=0x0) returned 1 [0232.471] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0232.471] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x5e8, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x5f0) returned 1 [0232.471] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0232.471] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x5f0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x5f0, lpOverlapped=0x0) returned 1 [0232.472] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0232.472] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0232.472] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0232.472] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0232.472] CloseHandle (hObject=0x10c) returned 1 [0232.494] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0232.499] CryptDestroyKey (hKey=0x665aae66d0) returned 1 [0232.499] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0232.500] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0232.500] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0232.500] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{21A5437E-D266-4F56-A146-06744A8BC071}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0232.501] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{21A5437E-D266-4F56-A146-06744A8BC071}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{21a5437e-d266-4f56-a146-06744a8bc071}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0232.501] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1168) returned 1 [0232.501] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1168) returned 1 [0232.502] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x36e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0232.502] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0232.503] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0232.503] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0232.503] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0232.503] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0232.504] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x490, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x490, lpOverlapped=0x0) returned 1 [0232.504] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0232.504] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x490, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4a0) returned 1 [0232.504] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0232.504] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4a0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4a0, lpOverlapped=0x0) returned 1 [0232.504] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0232.504] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0232.504] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0232.504] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0232.504] CloseHandle (hObject=0x10c) returned 1 [0232.536] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0232.547] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0232.547] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0232.547] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0232.547] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0232.548] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{232A1851-808C-4B44-A92A-38E862989CE5}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0232.549] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{232A1851-808C-4B44-A92A-38E862989CE5}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{232a1851-808c-4b44-a92a-38e862989ce5}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0232.550] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1169) returned 1 [0232.550] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1169) returned 1 [0232.550] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x36f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0232.550] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0232.551] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0232.551] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0232.551] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0232.552] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0232.552] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x491, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x491, lpOverlapped=0x0) returned 1 [0232.552] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0232.552] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x491, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4a0) returned 1 [0232.552] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0232.552] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4a0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4a0, lpOverlapped=0x0) returned 1 [0232.552] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0232.552] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0232.552] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0232.552] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0232.553] CloseHandle (hObject=0x10c) returned 1 [0232.577] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0232.582] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0232.582] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0232.583] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0232.588] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0232.589] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{29B87534-19A8-4A39-AA81-2148E7DE5894}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0232.589] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{29B87534-19A8-4A39-AA81-2148E7DE5894}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{29b87534-19a8-4a39-aa81-2148e7de5894}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0232.590] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1214) returned 1 [0232.590] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1214) returned 1 [0232.590] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x39c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0232.590] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0232.592] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0232.592] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0232.592] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0232.592] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0232.593] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4be, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4be, lpOverlapped=0x0) returned 1 [0232.593] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0232.593] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4be, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4c0) returned 1 [0232.593] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0232.593] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4c0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4c0, lpOverlapped=0x0) returned 1 [0232.593] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0232.593] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0232.593] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0232.593] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0232.594] CloseHandle (hObject=0x10c) returned 1 [0232.617] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0232.622] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0232.622] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0232.623] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0232.623] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0232.623] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{2B6FE85A-C7AA-440F-B9A3-3F5EDCA3F6C2}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0232.624] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{2B6FE85A-C7AA-440F-B9A3-3F5EDCA3F6C2}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{2b6fe85a-c7aa-440f-b9a3-3f5edca3f6c2}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0232.625] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=945) returned 1 [0232.625] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=945) returned 1 [0232.625] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x28f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0232.625] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0232.808] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0232.808] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0232.809] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0232.809] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0232.809] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3b1, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3b1, lpOverlapped=0x0) returned 1 [0232.809] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0232.809] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3b1, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3c0) returned 1 [0232.809] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0232.809] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3c0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3c0, lpOverlapped=0x0) returned 1 [0232.809] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0232.809] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0232.809] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0232.809] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0232.810] CloseHandle (hObject=0x10c) returned 1 [0232.827] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0232.831] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0232.831] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0232.831] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0232.831] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0232.832] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{2D06D17B-2A5F-4835-AF30-6D2D58A4A66C}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0232.832] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{2D06D17B-2A5F-4835-AF30-6D2D58A4A66C}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{2d06d17b-2a5f-4835-af30-6d2d58a4a66c}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0232.833] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=982) returned 1 [0232.833] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=982) returned 1 [0232.833] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2b4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0232.833] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0232.905] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0232.905] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae70e0) returned 1 [0232.905] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0232.906] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0232.906] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3d6, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3d6, lpOverlapped=0x0) returned 1 [0232.906] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0232.906] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3d6, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3e0) returned 1 [0232.906] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0232.906] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3e0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3e0, lpOverlapped=0x0) returned 1 [0232.906] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0232.906] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0232.906] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0232.906] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0232.906] CloseHandle (hObject=0x10c) returned 1 [0232.922] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0232.926] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0232.926] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0232.926] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0232.926] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0232.927] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{30137454-0E1F-43bb-9CB8-AEF452964B0B}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0232.928] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{30137454-0E1F-43bb-9CB8-AEF452964B0B}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{30137454-0e1f-43bb-9cb8-aef452964b0b}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0232.928] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=937) returned 1 [0232.928] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=937) returned 1 [0232.928] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x287, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0232.928] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0232.958] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0232.959] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae65f0) returned 1 [0232.959] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0232.959] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0232.959] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3a9, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3a9, lpOverlapped=0x0) returned 1 [0232.959] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0232.959] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3a9, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3b0) returned 1 [0232.959] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0232.959] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3b0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3b0, lpOverlapped=0x0) returned 1 [0232.960] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0232.960] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0232.960] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0232.960] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0232.960] CloseHandle (hObject=0x10c) returned 1 [0232.981] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0232.987] CryptDestroyKey (hKey=0x665aae65f0) returned 1 [0232.987] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0232.987] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0232.987] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0232.987] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{31DD3DA1-ED44-4BA8-A67B-6EA93DEA77E7}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0232.988] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{31DD3DA1-ED44-4BA8-A67B-6EA93DEA77E7}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{31dd3da1-ed44-4ba8-a67b-6ea93dea77e7}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0232.989] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1048) returned 1 [0232.989] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1048) returned 1 [0232.989] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2f6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0232.989] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0233.015] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.015] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae7150) returned 1 [0233.015] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0233.016] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.016] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x418, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x418, lpOverlapped=0x0) returned 1 [0233.016] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0233.016] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x418, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x420) returned 1 [0233.016] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.016] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x420, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x420, lpOverlapped=0x0) returned 1 [0233.016] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0233.016] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0233.016] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0233.016] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0233.017] CloseHandle (hObject=0x10c) returned 1 [0233.039] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0233.044] CryptDestroyKey (hKey=0x665aae7150) returned 1 [0233.044] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0233.044] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0233.044] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0233.045] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{33843DB0-24E7-4682-A019-5393D7F2BFFA}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0233.045] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{33843DB0-24E7-4682-A019-5393D7F2BFFA}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{33843db0-24e7-4682-a019-5393d7f2bffa}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0233.046] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=924) returned 1 [0233.046] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=924) returned 1 [0233.046] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x27a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0233.046] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0233.048] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.048] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0233.048] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0233.048] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.048] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x39c, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x39c, lpOverlapped=0x0) returned 1 [0233.049] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0233.049] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x39c, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3a0) returned 1 [0233.049] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.049] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3a0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3a0, lpOverlapped=0x0) returned 1 [0233.049] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0233.049] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0233.049] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0233.049] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0233.049] CloseHandle (hObject=0x10c) returned 1 [0233.070] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0233.075] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0233.075] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0233.075] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0233.075] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0233.075] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{33F1F9B5-BD94-4D77-96AE-62F10E4A010A}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0233.076] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{33F1F9B5-BD94-4D77-96AE-62F10E4A010A}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{33f1f9b5-bd94-4d77-96ae-62f10e4a010a}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0233.076] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=973) returned 1 [0233.076] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=973) returned 1 [0233.076] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2ab, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0233.076] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0233.078] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.078] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae70e0) returned 1 [0233.078] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0233.078] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.078] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3cd, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3cd, lpOverlapped=0x0) returned 1 [0233.078] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0233.078] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3cd, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3d0) returned 1 [0233.078] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.078] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3d0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3d0, lpOverlapped=0x0) returned 1 [0233.078] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0233.078] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0233.079] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0233.079] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0233.079] CloseHandle (hObject=0x10c) returned 1 [0233.097] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0233.101] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0233.101] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0233.101] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0233.101] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0233.101] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{36C8B34B-83F9-4704-B817-9AB1A723705A}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0233.102] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{36C8B34B-83F9-4704-B817-9AB1A723705A}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{36c8b34b-83f9-4704-b817-9ab1a723705a}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0233.103] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=898) returned 1 [0233.103] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=898) returned 1 [0233.103] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x260, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0233.103] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0233.207] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.207] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0233.207] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0233.207] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.207] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x382, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x382, lpOverlapped=0x0) returned 1 [0233.208] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0233.208] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x382, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x390) returned 1 [0233.208] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.208] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x390, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x390, lpOverlapped=0x0) returned 1 [0233.208] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0233.208] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0233.208] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0233.208] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0233.208] CloseHandle (hObject=0x10c) returned 1 [0233.341] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0233.347] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0233.347] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0233.347] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0233.347] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0233.348] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{36fb1658-3a23-4d62-9bfd-37f4b18a85e9}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0233.348] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{36fb1658-3a23-4d62-9bfd-37f4b18a85e9}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{36fb1658-3a23-4d62-9bfd-37f4b18a85e9}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0233.349] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=937) returned 1 [0233.349] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=937) returned 1 [0233.349] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x287, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0233.349] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0233.350] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.350] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6820) returned 1 [0233.350] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0233.350] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.350] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3a9, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3a9, lpOverlapped=0x0) returned 1 [0233.350] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0233.351] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3a9, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3b0) returned 1 [0233.351] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.351] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3b0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3b0, lpOverlapped=0x0) returned 1 [0233.351] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0233.351] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0233.351] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0233.351] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0233.351] CloseHandle (hObject=0x10c) returned 1 [0233.368] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0233.372] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0233.372] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0233.373] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0233.373] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0233.373] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{37092408-D49C-451D-B56D-78B243DC475C}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0233.373] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{37092408-D49C-451D-B56D-78B243DC475C}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{37092408-d49c-451d-b56d-78b243dc475c}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0233.374] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=956) returned 1 [0233.374] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=956) returned 1 [0233.374] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x29a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0233.374] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0233.376] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.376] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0233.376] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0233.376] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.376] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3bc, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3bc, lpOverlapped=0x0) returned 1 [0233.376] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0233.376] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3bc, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3c0) returned 1 [0233.376] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.376] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3c0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3c0, lpOverlapped=0x0) returned 1 [0233.376] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0233.376] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0233.377] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0233.377] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0233.377] CloseHandle (hObject=0x10c) returned 1 [0233.395] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0233.399] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0233.399] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0233.399] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0233.399] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0233.400] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{37C361D8-51CD-40fa-A797-8FC1EA28F9F4}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0233.401] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{37C361D8-51CD-40fa-A797-8FC1EA28F9F4}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{37c361d8-51cd-40fa-a797-8fc1ea28f9f4}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0233.401] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=946) returned 1 [0233.401] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=946) returned 1 [0233.401] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x290, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0233.401] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0233.403] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.403] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae7150) returned 1 [0233.403] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0233.403] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.403] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3b2, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3b2, lpOverlapped=0x0) returned 1 [0233.403] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0233.403] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3b2, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3c0) returned 1 [0233.403] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.403] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3c0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3c0, lpOverlapped=0x0) returned 1 [0233.403] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0233.403] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0233.403] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0233.404] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0233.404] CloseHandle (hObject=0x10c) returned 1 [0233.421] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0233.425] CryptDestroyKey (hKey=0x665aae7150) returned 1 [0233.425] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0233.425] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0233.425] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0233.425] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{37E2F32E-C821-4094-B429-2B4E8EA810AA}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0233.426] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{37E2F32E-C821-4094-B429-2B4E8EA810AA}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{37e2f32e-c821-4094-b429-2b4e8ea810aa}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0233.426] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1030) returned 1 [0233.426] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1030) returned 1 [0233.426] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2e4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0233.426] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0233.427] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.428] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae65f0) returned 1 [0233.428] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0233.428] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.428] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x406, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x406, lpOverlapped=0x0) returned 1 [0233.428] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0233.428] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x406, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x410) returned 1 [0233.428] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.428] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x410, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x410, lpOverlapped=0x0) returned 1 [0233.428] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0233.428] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0233.428] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0233.428] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0233.428] CloseHandle (hObject=0x10c) returned 1 [0233.446] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0233.450] CryptDestroyKey (hKey=0x665aae65f0) returned 1 [0233.450] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0233.451] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0233.451] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0233.451] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{38bd6d6e-bf78-4c31-b05a-7447ee37669f}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0233.451] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{38bd6d6e-bf78-4c31-b05a-7447ee37669f}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{38bd6d6e-bf78-4c31-b05a-7447ee37669f}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0233.452] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1154) returned 1 [0233.452] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1154) returned 1 [0233.452] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x360, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0233.452] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0233.454] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.454] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae70e0) returned 1 [0233.454] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0233.454] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.454] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x482, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x482, lpOverlapped=0x0) returned 1 [0233.454] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0233.454] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x482, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x490) returned 1 [0233.454] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.454] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x490, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x490, lpOverlapped=0x0) returned 1 [0233.454] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0233.454] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0233.454] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0233.454] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0233.455] CloseHandle (hObject=0x10c) returned 1 [0233.472] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0233.477] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0233.477] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0233.477] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0233.477] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0233.478] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{3911D4F8-AD61-4911-A151-5682C26A7427}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0233.478] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{3911D4F8-AD61-4911-A151-5682C26A7427}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{3911d4f8-ad61-4911-a151-5682c26a7427}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0233.479] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1048) returned 1 [0233.479] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1048) returned 1 [0233.479] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2f6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0233.479] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0233.481] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.481] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0233.481] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0233.481] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.481] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x418, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x418, lpOverlapped=0x0) returned 1 [0233.481] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0233.481] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x418, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x420) returned 1 [0233.481] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.481] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x420, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x420, lpOverlapped=0x0) returned 1 [0233.482] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0233.482] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0233.482] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0233.482] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0233.482] CloseHandle (hObject=0x10c) returned 1 [0233.503] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0233.507] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0233.507] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0233.507] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0233.507] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0233.508] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{3A100872-EC27-46A5-BBCC-92C90635AE3B}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0233.508] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{3A100872-EC27-46A5-BBCC-92C90635AE3B}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{3a100872-ec27-46a5-bbcc-92c90635ae3b}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0233.509] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=978) returned 1 [0233.509] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=978) returned 1 [0233.509] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2b0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0233.509] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0233.510] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.510] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0233.510] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0233.511] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.511] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3d2, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3d2, lpOverlapped=0x0) returned 1 [0233.511] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0233.511] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3d2, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3e0) returned 1 [0233.511] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.511] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3e0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3e0, lpOverlapped=0x0) returned 1 [0233.511] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0233.511] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0233.511] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0233.511] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0233.512] CloseHandle (hObject=0x10c) returned 1 [0233.533] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0233.538] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0233.538] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0233.538] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0233.538] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0233.539] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{3A4140C8-50D3-44E9-BF50-C878204DE0F5}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0233.539] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{3A4140C8-50D3-44E9-BF50-C878204DE0F5}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{3a4140c8-50d3-44e9-bf50-c878204de0f5}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0233.542] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1241) returned 1 [0233.542] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1241) returned 1 [0233.543] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3b7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0233.543] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0233.544] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.544] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0233.544] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0233.544] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.544] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4d9, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4d9, lpOverlapped=0x0) returned 1 [0233.544] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0233.544] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4d9, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4e0) returned 1 [0233.544] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.545] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4e0, lpOverlapped=0x0) returned 1 [0233.545] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0233.545] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0233.545] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0233.545] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0233.545] CloseHandle (hObject=0x10c) returned 1 [0233.561] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0233.565] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0233.565] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0233.566] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0233.566] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0233.566] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{3F0AD6DB-3246-48E4-ACD7-696FF62AE68D}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0233.566] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{3F0AD6DB-3246-48E4-ACD7-696FF62AE68D}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{3f0ad6db-3246-48e4-acd7-696ff62ae68d}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0233.567] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1011) returned 1 [0233.567] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1011) returned 1 [0233.567] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2d1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0233.567] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0233.568] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.568] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0233.568] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0233.569] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.569] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3f3, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3f3, lpOverlapped=0x0) returned 1 [0233.569] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0233.569] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3f3, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x400) returned 1 [0233.569] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.569] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x400, lpOverlapped=0x0) returned 1 [0233.569] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0233.569] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0233.569] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0233.569] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0233.570] CloseHandle (hObject=0x10c) returned 1 [0233.586] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0233.590] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0233.590] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0233.590] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0233.590] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0233.591] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{4026492f-2f69-46b8-b9bf-5654fc07e423}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0233.591] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{4026492f-2f69-46b8-b9bf-5654fc07e423}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{4026492f-2f69-46b8-b9bf-5654fc07e423}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0233.592] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1176) returned 1 [0233.592] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1176) returned 1 [0233.592] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x376, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0233.592] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0233.593] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.593] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6f20) returned 1 [0233.593] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0233.594] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.594] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x498, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x498, lpOverlapped=0x0) returned 1 [0233.594] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0233.594] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x498, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4a0) returned 1 [0233.594] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.594] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4a0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4a0, lpOverlapped=0x0) returned 1 [0233.594] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0233.594] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0233.594] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0233.594] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0233.594] CloseHandle (hObject=0x10c) returned 1 [0233.610] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0233.614] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0233.614] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0233.614] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0233.614] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0233.614] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{40419485-c444-4567-851a-2dd7bfa1684d}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0233.615] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{40419485-c444-4567-851a-2dd7bfa1684d}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{40419485-c444-4567-851a-2dd7bfa1684d}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0233.616] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=923) returned 1 [0233.616] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=923) returned 1 [0233.616] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x279, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0233.616] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0233.617] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.617] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0233.617] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0233.617] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.617] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x39b, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x39b, lpOverlapped=0x0) returned 1 [0233.617] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0233.617] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x39b, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3a0) returned 1 [0233.617] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.617] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3a0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3a0, lpOverlapped=0x0) returned 1 [0233.617] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0233.618] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0233.618] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0233.618] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0233.618] CloseHandle (hObject=0x10c) returned 1 [0233.634] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0233.639] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0233.639] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0233.639] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0233.639] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0233.640] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{420C524A-2A76-43F7-B1B2-C3CF736557C7}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0233.640] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{420C524A-2A76-43F7-B1B2-C3CF736557C7}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{420c524a-2a76-43f7-b1b2-c3cf736557c7}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0233.641] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1116) returned 1 [0233.641] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1116) returned 1 [0233.641] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x33a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0233.641] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0233.643] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.643] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae7150) returned 1 [0233.643] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0233.643] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.643] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x45c, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x45c, lpOverlapped=0x0) returned 1 [0233.643] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0233.643] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x45c, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x460) returned 1 [0233.643] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.643] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x460, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x460, lpOverlapped=0x0) returned 1 [0233.643] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0233.644] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0233.644] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0233.644] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0233.644] CloseHandle (hObject=0x10c) returned 1 [0233.662] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0233.666] CryptDestroyKey (hKey=0x665aae7150) returned 1 [0233.666] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0233.666] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0233.666] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0233.666] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{4228F99D-227F-4058-9EA3-BB2B616D7444}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0233.667] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{4228F99D-227F-4058-9EA3-BB2B616D7444}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{4228f99d-227f-4058-9ea3-bb2b616d7444}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0233.667] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1020) returned 1 [0233.667] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1020) returned 1 [0233.667] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2da, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0233.667] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0233.669] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.669] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0233.669] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0233.669] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.669] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3fc, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3fc, lpOverlapped=0x0) returned 1 [0233.669] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0233.669] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3fc, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x400) returned 1 [0233.669] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.669] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x400, lpOverlapped=0x0) returned 1 [0233.669] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0233.669] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0233.669] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0233.669] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0233.670] CloseHandle (hObject=0x10c) returned 1 [0233.687] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0233.691] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0233.691] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0233.692] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0233.692] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0233.692] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{45FDB5DF-1457-4A41-A824-7AD9C75767BC}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0233.692] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{45FDB5DF-1457-4A41-A824-7AD9C75767BC}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{45fdb5df-1457-4a41-a824-7ad9c75767bc}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0233.693] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1000) returned 1 [0233.693] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1000) returned 1 [0233.693] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2c6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0233.693] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0233.694] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.694] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0233.694] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0233.694] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.695] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3e8, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3e8, lpOverlapped=0x0) returned 1 [0233.695] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0233.695] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3e8, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3f0) returned 1 [0233.695] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.695] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3f0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3f0, lpOverlapped=0x0) returned 1 [0233.695] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0233.695] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0233.695] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0233.695] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0233.695] CloseHandle (hObject=0x10c) returned 1 [0233.712] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0233.717] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0233.717] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0233.717] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0233.717] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0233.717] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{46E84184-51CC-4A7B-A40A-6D3E86D402DE}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0233.718] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{46E84184-51CC-4A7B-A40A-6D3E86D402DE}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{46e84184-51cc-4a7b-a40a-6d3e86d402de}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0233.718] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1007) returned 1 [0233.718] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1007) returned 1 [0233.718] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2cd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0233.719] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0233.720] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.720] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6820) returned 1 [0233.720] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0233.720] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.720] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3ef, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3ef, lpOverlapped=0x0) returned 1 [0233.720] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0233.720] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3ef, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3f0) returned 1 [0233.720] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.720] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3f0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3f0, lpOverlapped=0x0) returned 1 [0233.720] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0233.720] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0233.720] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0233.721] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0233.721] CloseHandle (hObject=0x10c) returned 1 [0233.738] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0233.742] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0233.742] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0233.742] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0233.742] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0233.742] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{4A2F952E-0618-467F-ADC5-FEBB66AEB82F}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0233.743] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{4A2F952E-0618-467F-ADC5-FEBB66AEB82F}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{4a2f952e-0618-467f-adc5-febb66aeb82f}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0233.744] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=969) returned 1 [0233.744] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=969) returned 1 [0233.744] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2a7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0233.744] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0233.745] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.745] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6f20) returned 1 [0233.745] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0233.745] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.745] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3c9, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3c9, lpOverlapped=0x0) returned 1 [0233.745] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0233.745] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3c9, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3d0) returned 1 [0233.745] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.745] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3d0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3d0, lpOverlapped=0x0) returned 1 [0233.746] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0233.746] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0233.746] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0233.746] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0233.746] CloseHandle (hObject=0x10c) returned 1 [0233.763] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0233.768] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0233.768] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0233.768] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0233.768] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0233.769] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{4BCD16D0-BA72-4F0D-88F9-50D912BFA2B2}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0233.769] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{4BCD16D0-BA72-4F0D-88F9-50D912BFA2B2}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{4bcd16d0-ba72-4f0d-88f9-50d912bfa2b2}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0233.770] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1116) returned 1 [0233.770] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1116) returned 1 [0233.770] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x33a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0233.770] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0233.771] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.772] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0233.772] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0233.772] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.772] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x45c, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x45c, lpOverlapped=0x0) returned 1 [0233.772] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0233.772] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x45c, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x460) returned 1 [0233.772] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.772] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x460, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x460, lpOverlapped=0x0) returned 1 [0233.772] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0233.772] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0233.772] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0233.773] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0233.773] CloseHandle (hObject=0x10c) returned 1 [0233.795] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0233.800] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0233.800] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0233.800] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0233.800] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0233.800] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{4F9B0706-0A8F-45B0-BFA6-C66CD45246D7}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0233.801] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{4F9B0706-0A8F-45B0-BFA6-C66CD45246D7}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{4f9b0706-0a8f-45b0-bfa6-c66cd45246d7}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0233.801] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=926) returned 1 [0233.801] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=926) returned 1 [0233.802] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x27c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0233.802] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0233.803] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.803] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae66d0) returned 1 [0233.803] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0233.803] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.803] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x39e, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x39e, lpOverlapped=0x0) returned 1 [0233.803] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0233.803] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x39e, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3a0) returned 1 [0233.803] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.803] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3a0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3a0, lpOverlapped=0x0) returned 1 [0233.804] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0233.804] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0233.804] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0233.804] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0233.804] CloseHandle (hObject=0x10c) returned 1 [0233.823] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0233.829] CryptDestroyKey (hKey=0x665aae66d0) returned 1 [0233.829] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0233.829] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0233.829] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0233.830] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{50DF4F13-4188-49C3-B2FB-A76404DC0ACF}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0233.830] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{50DF4F13-4188-49C3-B2FB-A76404DC0ACF}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{50df4f13-4188-49c3-b2fb-a76404dc0acf}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0233.831] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=991) returned 1 [0233.831] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=991) returned 1 [0233.831] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2bd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0233.831] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0233.832] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.832] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0233.832] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0233.833] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.833] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3df, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3df, lpOverlapped=0x0) returned 1 [0233.833] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0233.833] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3df, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3e0) returned 1 [0233.833] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.833] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3e0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3e0, lpOverlapped=0x0) returned 1 [0233.833] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0233.833] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0233.833] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0233.834] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0233.834] CloseHandle (hObject=0x10c) returned 1 [0233.855] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0233.859] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0233.859] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0233.859] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0233.859] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0233.859] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5163E94E-4C07-420B-B173-320232B8AFB7}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0233.860] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5163E94E-4C07-420B-B173-320232B8AFB7}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5163e94e-4c07-420b-b173-320232b8afb7}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0233.861] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1159) returned 1 [0233.861] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1159) returned 1 [0233.861] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x365, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0233.861] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0233.862] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.862] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0233.862] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0233.862] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.863] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x487, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x487, lpOverlapped=0x0) returned 1 [0233.863] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0233.863] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x487, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x490) returned 1 [0233.863] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.863] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x490, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x490, lpOverlapped=0x0) returned 1 [0233.863] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0233.863] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0233.863] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0233.863] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0233.863] CloseHandle (hObject=0x10c) returned 1 [0233.880] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0233.884] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0233.884] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0233.885] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0233.885] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0233.885] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{53440D79-CD2D-4013-B192-D478AE882E53}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0233.885] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{53440D79-CD2D-4013-B192-D478AE882E53}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{53440d79-cd2d-4013-b192-d478ae882e53}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0233.886] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=942) returned 1 [0233.886] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=942) returned 1 [0233.886] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x28c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0233.886] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0233.887] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.887] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0233.887] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0233.888] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.888] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3ae, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3ae, lpOverlapped=0x0) returned 1 [0233.888] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0233.888] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3ae, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3b0) returned 1 [0233.888] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.888] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3b0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3b0, lpOverlapped=0x0) returned 1 [0233.888] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0233.888] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0233.888] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0233.888] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0233.888] CloseHandle (hObject=0x10c) returned 1 [0233.906] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0233.910] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0233.910] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0233.910] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0233.910] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0233.910] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{54692DB7-FC98-4D5E-AC15-CC5095FA5669}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0233.911] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{54692DB7-FC98-4D5E-AC15-CC5095FA5669}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{54692db7-fc98-4d5e-ac15-cc5095fa5669}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0233.912] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1036) returned 1 [0233.912] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1036) returned 1 [0233.912] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2ea, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0233.912] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0233.913] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.913] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6f20) returned 1 [0233.913] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0233.913] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.913] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x40c, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x40c, lpOverlapped=0x0) returned 1 [0233.913] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0233.913] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x40c, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x410) returned 1 [0233.913] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.913] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x410, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x410, lpOverlapped=0x0) returned 1 [0233.914] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0233.914] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0233.914] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0233.914] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0233.914] CloseHandle (hObject=0x10c) returned 1 [0233.931] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0233.935] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0233.935] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0233.935] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0233.935] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0233.935] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{54D8069E-E75A-4437-B45B-8EB3B8C97434}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0233.936] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{54D8069E-E75A-4437-B45B-8EB3B8C97434}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{54d8069e-e75a-4437-b45b-8eb3b8c97434}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0233.937] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1014) returned 1 [0233.937] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1014) returned 1 [0233.937] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2d4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0233.937] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0233.938] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.938] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0233.938] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0233.938] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.938] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3f6, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3f6, lpOverlapped=0x0) returned 1 [0233.938] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0233.938] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3f6, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x400) returned 1 [0233.938] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.938] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x400, lpOverlapped=0x0) returned 1 [0233.939] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0233.939] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0233.939] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0233.939] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0233.939] CloseHandle (hObject=0x10c) returned 1 [0233.962] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0233.966] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0233.966] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0233.967] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0233.967] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0233.967] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5530E8CC-1B9E-4798-A880-BA719ADFBBBD}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0233.968] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5530E8CC-1B9E-4798-A880-BA719ADFBBBD}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5530e8cc-1b9e-4798-a880-ba719adfbbbd}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0233.969] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=912) returned 1 [0233.969] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=912) returned 1 [0233.969] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x26e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0233.969] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0233.970] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.970] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae66d0) returned 1 [0233.970] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0233.971] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.971] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x390, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x390, lpOverlapped=0x0) returned 1 [0233.971] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0233.971] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x390, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3a0) returned 1 [0233.971] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.971] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3a0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3a0, lpOverlapped=0x0) returned 1 [0233.971] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0233.971] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0233.971] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0233.971] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0233.971] CloseHandle (hObject=0x10c) returned 1 [0233.989] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0233.994] CryptDestroyKey (hKey=0x665aae66d0) returned 1 [0233.994] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0233.994] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0233.995] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0233.995] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{55E51B6E-7D17-4C80-859E-3007A1F2B6AA}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0233.996] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{55E51B6E-7D17-4C80-859E-3007A1F2B6AA}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{55e51b6e-7d17-4c80-859e-3007a1f2b6aa}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0233.996] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=992) returned 1 [0233.996] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=992) returned 1 [0233.996] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2be, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0233.996] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0233.997] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.998] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0233.998] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0233.998] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.998] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3e0, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3e0, lpOverlapped=0x0) returned 1 [0233.998] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0233.998] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3e0, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3f0) returned 1 [0233.998] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0233.998] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3f0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3f0, lpOverlapped=0x0) returned 1 [0233.998] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0233.998] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0233.998] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0233.998] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0233.999] CloseHandle (hObject=0x10c) returned 1 [0234.019] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.023] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0234.023] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.023] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0234.023] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0234.024] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{58e3c745-d971-4081-9034-86e34b30836a}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0234.024] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{58e3c745-d971-4081-9034-86e34b30836a}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{58e3c745-d971-4081-9034-86e34b30836a}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0234.025] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1197) returned 1 [0234.025] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1197) returned 1 [0234.025] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x38b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0234.025] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0234.026] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.027] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae70e0) returned 1 [0234.027] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0234.027] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.027] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4ad, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4ad, lpOverlapped=0x0) returned 1 [0234.027] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0234.027] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4ad, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4b0) returned 1 [0234.027] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.027] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4b0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4b0, lpOverlapped=0x0) returned 1 [0234.027] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0234.027] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.027] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.028] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0234.028] CloseHandle (hObject=0x10c) returned 1 [0234.045] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.049] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0234.049] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.049] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0234.049] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0234.050] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5902614C-D9C7-4902-9F7F-BAF85454D0B2}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0234.050] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5902614C-D9C7-4902-9F7F-BAF85454D0B2}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5902614c-d9c7-4902-9f7f-baf85454d0b2}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0234.051] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=966) returned 1 [0234.051] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=966) returned 1 [0234.051] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2a4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0234.051] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0234.052] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.052] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0234.052] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0234.052] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.053] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3c6, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3c6, lpOverlapped=0x0) returned 1 [0234.053] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0234.053] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3c6, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3d0) returned 1 [0234.053] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.053] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3d0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3d0, lpOverlapped=0x0) returned 1 [0234.053] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0234.053] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.053] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.053] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0234.053] CloseHandle (hObject=0x10c) returned 1 [0234.071] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.076] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0234.076] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.076] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0234.077] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0234.077] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5A2C0E5E-5974-4E44-B4C6-AD4C2B6BAF53}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0234.078] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5A2C0E5E-5974-4E44-B4C6-AD4C2B6BAF53}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5a2c0e5e-5974-4e44-b4c6-ad4c2b6baf53}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0234.078] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1067) returned 1 [0234.079] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1067) returned 1 [0234.079] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x309, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0234.079] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0234.080] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.080] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0234.080] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0234.080] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.080] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x42b, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x42b, lpOverlapped=0x0) returned 1 [0234.081] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0234.081] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x42b, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x430) returned 1 [0234.081] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.081] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x430, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x430, lpOverlapped=0x0) returned 1 [0234.081] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0234.081] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.081] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.081] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0234.081] CloseHandle (hObject=0x10c) returned 1 [0234.099] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.103] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0234.103] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.103] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0234.103] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0234.103] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5BB16858-F647-465E-BCFD-010EE9DD41B7}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0234.104] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5BB16858-F647-465E-BCFD-010EE9DD41B7}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5bb16858-f647-465e-bcfd-010ee9dd41b7}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0234.104] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=988) returned 1 [0234.104] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=988) returned 1 [0234.105] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2ba, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0234.105] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0234.106] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.106] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae70e0) returned 1 [0234.106] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0234.106] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.106] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3dc, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3dc, lpOverlapped=0x0) returned 1 [0234.106] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0234.106] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3dc, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3e0) returned 1 [0234.106] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.106] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3e0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3e0, lpOverlapped=0x0) returned 1 [0234.106] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0234.106] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.106] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.106] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0234.107] CloseHandle (hObject=0x10c) returned 1 [0234.123] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.127] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0234.127] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.128] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0234.128] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0234.128] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5D461B44-2753-4DD7-B2C0-BAB71B1F4C1A}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0234.129] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5D461B44-2753-4DD7-B2C0-BAB71B1F4C1A}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5d461b44-2753-4dd7-b2c0-bab71b1f4c1a}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0234.129] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=998) returned 1 [0234.129] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=998) returned 1 [0234.129] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2c4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0234.129] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0234.130] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.130] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae70e0) returned 1 [0234.130] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0234.131] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.131] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3e6, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3e6, lpOverlapped=0x0) returned 1 [0234.131] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0234.131] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3e6, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3f0) returned 1 [0234.131] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.131] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3f0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3f0, lpOverlapped=0x0) returned 1 [0234.131] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0234.131] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.131] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.131] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0234.131] CloseHandle (hObject=0x10c) returned 1 [0234.148] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.152] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0234.152] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.152] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0234.152] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0234.152] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5D611F64-7985-459B-BDFF-AEC069CB2625}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0234.153] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5D611F64-7985-459B-BDFF-AEC069CB2625}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5d611f64-7985-459b-bdff-aec069cb2625}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0234.153] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1055) returned 1 [0234.154] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1055) returned 1 [0234.154] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2fd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0234.154] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0234.155] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.155] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0234.155] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0234.155] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.155] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x41f, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x41f, lpOverlapped=0x0) returned 1 [0234.156] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0234.156] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x41f, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x420) returned 1 [0234.156] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.156] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x420, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x420, lpOverlapped=0x0) returned 1 [0234.156] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0234.156] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.156] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.156] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0234.156] CloseHandle (hObject=0x10c) returned 1 [0234.173] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.177] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0234.177] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.177] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0234.177] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0234.178] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5DD91132-02E8-43F6-88BD-E50B7BE2EF29}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0234.178] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5DD91132-02E8-43F6-88BD-E50B7BE2EF29}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5dd91132-02e8-43f6-88bd-e50b7be2ef29}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0234.179] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1046) returned 1 [0234.179] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1046) returned 1 [0234.179] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2f4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0234.179] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0234.180] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.180] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0234.180] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0234.180] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.180] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x416, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x416, lpOverlapped=0x0) returned 1 [0234.180] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0234.180] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x416, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x420) returned 1 [0234.180] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.181] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x420, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x420, lpOverlapped=0x0) returned 1 [0234.181] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0234.181] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.181] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.181] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0234.181] CloseHandle (hObject=0x10c) returned 1 [0234.198] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.202] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0234.202] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.202] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0234.202] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0234.203] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5DE5B491-2CEA-4AD9-824A-982A22C0B64E}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0234.203] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5DE5B491-2CEA-4AD9-824A-982A22C0B64E}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5de5b491-2cea-4ad9-824a-982a22c0b64e}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0234.204] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=966) returned 1 [0234.204] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=966) returned 1 [0234.204] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2a4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0234.204] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0234.205] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.205] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0234.205] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0234.205] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.205] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3c6, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3c6, lpOverlapped=0x0) returned 1 [0234.205] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0234.205] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3c6, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3d0) returned 1 [0234.205] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.205] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3d0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3d0, lpOverlapped=0x0) returned 1 [0234.206] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0234.206] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.206] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.206] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0234.206] CloseHandle (hObject=0x10c) returned 1 [0234.284] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.288] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0234.288] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.288] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0234.288] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0234.289] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5ea4f148-308c-46d7-98a9-49041b1dd468}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0234.289] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5ea4f148-308c-46d7-98a9-49041b1dd468}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5ea4f148-308c-46d7-98a9-49041b1dd468}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0234.290] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=957) returned 1 [0234.290] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=957) returned 1 [0234.290] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x29b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0234.290] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0234.291] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.291] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae70e0) returned 1 [0234.291] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0234.291] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.291] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3bd, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3bd, lpOverlapped=0x0) returned 1 [0234.292] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0234.292] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3bd, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3c0) returned 1 [0234.292] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.292] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3c0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3c0, lpOverlapped=0x0) returned 1 [0234.292] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0234.292] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.292] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.292] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0234.292] CloseHandle (hObject=0x10c) returned 1 [0234.309] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.314] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0234.314] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.314] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0234.314] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0234.314] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5FFAA809-0961-40CF-90A4-58037867FA50}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0234.315] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5FFAA809-0961-40CF-90A4-58037867FA50}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5ffaa809-0961-40cf-90a4-58037867fa50}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0234.315] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=991) returned 1 [0234.315] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=991) returned 1 [0234.315] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2bd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0234.315] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0234.316] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.316] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0234.316] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0234.317] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.317] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3df, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3df, lpOverlapped=0x0) returned 1 [0234.317] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0234.317] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3df, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3e0) returned 1 [0234.317] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.317] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3e0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3e0, lpOverlapped=0x0) returned 1 [0234.317] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0234.317] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.317] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.317] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0234.317] CloseHandle (hObject=0x10c) returned 1 [0234.334] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.338] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0234.338] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.338] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0234.339] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0234.339] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{60AC7FA0-A928-4D45-B4DD-AC70A6175E67}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0234.339] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{60AC7FA0-A928-4D45-B4DD-AC70A6175E67}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{60ac7fa0-a928-4d45-b4dd-ac70a6175e67}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0234.340] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1073) returned 1 [0234.340] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1073) returned 1 [0234.340] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x30f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0234.340] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0234.341] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.341] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0234.341] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0234.341] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.341] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x431, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x431, lpOverlapped=0x0) returned 1 [0234.341] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0234.341] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x431, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x440) returned 1 [0234.341] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.341] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x440, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x440, lpOverlapped=0x0) returned 1 [0234.342] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0234.342] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.342] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.342] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0234.342] CloseHandle (hObject=0x10c) returned 1 [0234.361] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.365] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0234.365] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.365] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0234.365] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0234.366] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{60C811E8-C857-404E-98BB-EE5D83C1DF5A}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0234.366] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{60C811E8-C857-404E-98BB-EE5D83C1DF5A}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{60c811e8-c857-404e-98bb-ee5d83c1df5a}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0234.367] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1025) returned 1 [0234.367] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1025) returned 1 [0234.367] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2df, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0234.367] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0234.368] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.368] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0234.368] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0234.368] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.368] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x401, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x401, lpOverlapped=0x0) returned 1 [0234.368] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0234.368] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x401, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x410) returned 1 [0234.368] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.369] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x410, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x410, lpOverlapped=0x0) returned 1 [0234.369] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0234.369] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.369] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.369] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0234.369] CloseHandle (hObject=0x10c) returned 1 [0234.387] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.392] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0234.392] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.392] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0234.392] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0234.392] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{62d8ed13-c9d0-4ce8-a914-47dd628fb1b0}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0234.393] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{62d8ed13-c9d0-4ce8-a914-47dd628fb1b0}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{62d8ed13-c9d0-4ce8-a914-47dd628fb1b0}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0234.393] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=911) returned 1 [0234.393] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=911) returned 1 [0234.393] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x26d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0234.393] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0234.394] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.394] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae7150) returned 1 [0234.394] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0234.395] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.395] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x38f, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x38f, lpOverlapped=0x0) returned 1 [0234.395] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0234.395] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x38f, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x390) returned 1 [0234.395] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.395] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x390, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x390, lpOverlapped=0x0) returned 1 [0234.395] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0234.395] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.395] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.395] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0234.396] CloseHandle (hObject=0x10c) returned 1 [0234.412] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.416] CryptDestroyKey (hKey=0x665aae7150) returned 1 [0234.416] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.416] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0234.416] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0234.416] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{638f8e21-e157-40d7-97e0-a0c8e4c4e2b5}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0234.417] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{638f8e21-e157-40d7-97e0-a0c8e4c4e2b5}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{638f8e21-e157-40d7-97e0-a0c8e4c4e2b5}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0234.418] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1019) returned 1 [0234.418] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1019) returned 1 [0234.418] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2d9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0234.418] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0234.419] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.419] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0234.419] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0234.419] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.419] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3fb, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3fb, lpOverlapped=0x0) returned 1 [0234.420] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0234.420] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3fb, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x400) returned 1 [0234.420] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.420] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x400, lpOverlapped=0x0) returned 1 [0234.420] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0234.420] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.420] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.420] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0234.420] CloseHandle (hObject=0x10c) returned 1 [0234.437] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.441] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0234.441] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.441] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0234.441] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0234.442] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{63929D0B-AAAC-4DCA-AE8A-222EC37F7A88}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0234.442] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{63929D0B-AAAC-4DCA-AE8A-222EC37F7A88}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{63929d0b-aaac-4dca-ae8a-222ec37f7a88}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0234.443] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1057) returned 1 [0234.443] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1057) returned 1 [0234.443] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2ff, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0234.443] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0234.444] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.444] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae7150) returned 1 [0234.444] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0234.444] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.445] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x421, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x421, lpOverlapped=0x0) returned 1 [0234.445] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0234.445] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x421, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x430) returned 1 [0234.445] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.445] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x430, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x430, lpOverlapped=0x0) returned 1 [0234.445] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0234.445] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.445] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.445] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0234.445] CloseHandle (hObject=0x10c) returned 1 [0234.462] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.466] CryptDestroyKey (hKey=0x665aae7150) returned 1 [0234.466] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.466] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0234.466] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0234.466] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{641102EF-6463-46E9-842D-176013D7ACC8}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0234.467] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{641102EF-6463-46E9-842D-176013D7ACC8}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{641102ef-6463-46e9-842d-176013d7acc8}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0234.468] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1089) returned 1 [0234.468] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1089) returned 1 [0234.468] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x31f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0234.468] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0234.470] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.470] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0234.470] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0234.470] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.470] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x441, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x441, lpOverlapped=0x0) returned 1 [0234.470] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0234.470] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x441, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x450) returned 1 [0234.470] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.470] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x450, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x450, lpOverlapped=0x0) returned 1 [0234.470] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0234.470] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.470] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.471] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0234.471] CloseHandle (hObject=0x10c) returned 1 [0234.488] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.492] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0234.492] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.492] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0234.492] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0234.493] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{6775CCA4-CC42-44F7-800C-4E94FF1EA8C0}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0234.493] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{6775CCA4-CC42-44F7-800C-4E94FF1EA8C0}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{6775cca4-cc42-44f7-800c-4e94ff1ea8c0}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0234.494] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=966) returned 1 [0234.494] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=966) returned 1 [0234.494] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2a4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0234.494] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0234.495] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.495] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6740) returned 1 [0234.495] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0234.495] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.495] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3c6, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3c6, lpOverlapped=0x0) returned 1 [0234.495] CryptEncrypt (in: hKey=0x665aae6740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0234.495] CryptEncrypt (in: hKey=0x665aae6740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3c6, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3d0) returned 1 [0234.495] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.495] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3d0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3d0, lpOverlapped=0x0) returned 1 [0234.495] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0234.496] CryptExportKey (in: hKey=0x665aae6740, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.496] CryptExportKey (in: hKey=0x665aae6740, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.496] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0234.496] CloseHandle (hObject=0x10c) returned 1 [0234.512] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.517] CryptDestroyKey (hKey=0x665aae6740) returned 1 [0234.517] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.517] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0234.517] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0234.517] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{67ca7650-96e6-4fdd-bb43-a8e774f73a57}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0234.518] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{67ca7650-96e6-4fdd-bb43-a8e774f73a57}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{67ca7650-96e6-4fdd-bb43-a8e774f73a57}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0234.518] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1107) returned 1 [0234.518] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1107) returned 1 [0234.518] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x331, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0234.518] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0234.520] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.520] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae70e0) returned 1 [0234.520] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0234.520] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.520] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x453, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x453, lpOverlapped=0x0) returned 1 [0234.520] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0234.520] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x453, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x460) returned 1 [0234.520] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.520] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x460, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x460, lpOverlapped=0x0) returned 1 [0234.520] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0234.520] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.520] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.520] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0234.521] CloseHandle (hObject=0x10c) returned 1 [0234.537] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.541] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0234.541] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.541] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0234.541] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0234.541] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\classic_{685e7dc2-db57-4ed0-8b6d-5fe44d78d4f0}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0234.542] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\classic_{685e7dc2-db57-4ed0-8b6d-5fe44d78d4f0}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{685e7dc2-db57-4ed0-8b6d-5fe44d78d4f0}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0234.542] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1118) returned 1 [0234.542] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1118) returned 1 [0234.542] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x33c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0234.543] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0234.544] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.544] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae7150) returned 1 [0234.544] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0234.544] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.544] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x45e, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x45e, lpOverlapped=0x0) returned 1 [0234.544] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0234.544] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x45e, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x460) returned 1 [0234.544] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.544] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x460, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x460, lpOverlapped=0x0) returned 1 [0234.544] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0234.544] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.544] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.544] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0234.545] CloseHandle (hObject=0x10c) returned 1 [0234.561] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.565] CryptDestroyKey (hKey=0x665aae7150) returned 1 [0234.565] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.566] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0234.566] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0234.566] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{68F4F33C-658C-4278-94C1-22B8E653F3E8}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0234.566] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{68F4F33C-658C-4278-94C1-22B8E653F3E8}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{68f4f33c-658c-4278-94c1-22b8e653f3e8}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0234.567] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1114) returned 1 [0234.567] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1114) returned 1 [0234.567] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x338, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0234.567] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0234.568] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.568] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae66d0) returned 1 [0234.568] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0234.568] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.569] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x45a, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x45a, lpOverlapped=0x0) returned 1 [0234.569] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0234.569] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x45a, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x460) returned 1 [0234.569] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.569] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x460, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x460, lpOverlapped=0x0) returned 1 [0234.569] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0234.569] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.569] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.569] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0234.569] CloseHandle (hObject=0x10c) returned 1 [0234.585] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.589] CryptDestroyKey (hKey=0x665aae66d0) returned 1 [0234.589] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.590] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0234.590] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0234.590] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{693E4EF4-9060-469B-AB2E-948B6B68A883}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0234.590] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{693E4EF4-9060-469B-AB2E-948B6B68A883}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{693e4ef4-9060-469b-ab2e-948b6b68a883}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0234.591] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=923) returned 1 [0234.591] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=923) returned 1 [0234.591] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x279, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0234.591] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0234.592] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.592] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0234.592] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0234.593] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.593] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x39b, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x39b, lpOverlapped=0x0) returned 1 [0234.593] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0234.593] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x39b, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3a0) returned 1 [0234.593] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.593] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3a0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3a0, lpOverlapped=0x0) returned 1 [0234.593] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0234.593] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.593] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.593] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0234.593] CloseHandle (hObject=0x10c) returned 1 [0234.610] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.614] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0234.614] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.614] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0234.615] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0234.615] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{693E4EF5-9060-469B-AB2E-948B6B68A883}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0234.616] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{693E4EF5-9060-469B-AB2E-948B6B68A883}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{693e4ef5-9060-469b-ab2e-948b6b68a883}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0234.616] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=925) returned 1 [0234.616] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=925) returned 1 [0234.616] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x27b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0234.616] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0234.617] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.617] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0234.617] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0234.618] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.618] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x39d, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x39d, lpOverlapped=0x0) returned 1 [0234.618] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0234.618] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x39d, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3a0) returned 1 [0234.618] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.618] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3a0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3a0, lpOverlapped=0x0) returned 1 [0234.618] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0234.618] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.618] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.618] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0234.618] CloseHandle (hObject=0x10c) returned 1 [0234.636] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.640] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0234.640] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.640] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0234.640] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0234.640] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{6A10BC7B-2586-4B57-A5AA-C14BDE743DC4}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0234.641] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{6A10BC7B-2586-4B57-A5AA-C14BDE743DC4}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{6a10bc7b-2586-4b57-a5aa-c14bde743dc4}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0234.642] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=959) returned 1 [0234.642] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=959) returned 1 [0234.642] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x29d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0234.642] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0234.643] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.643] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6820) returned 1 [0234.643] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0234.644] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.644] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3bf, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3bf, lpOverlapped=0x0) returned 1 [0234.644] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0234.644] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3bf, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3c0) returned 1 [0234.644] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.644] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3c0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3c0, lpOverlapped=0x0) returned 1 [0234.644] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0234.644] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.644] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.644] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0234.644] CloseHandle (hObject=0x10c) returned 1 [0234.661] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.665] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0234.665] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.665] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0234.665] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0234.666] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{6AE88B06-50B2-46B0-93EA-4B5C73D3A0B5}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0234.666] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{6AE88B06-50B2-46B0-93EA-4B5C73D3A0B5}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{6ae88b06-50b2-46b0-93ea-4b5c73d3a0b5}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0234.667] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=961) returned 1 [0234.667] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=961) returned 1 [0234.667] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x29f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0234.667] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0234.668] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.668] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0234.668] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0234.669] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.669] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3c1, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3c1, lpOverlapped=0x0) returned 1 [0234.669] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0234.669] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3c1, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3d0) returned 1 [0234.669] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.669] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3d0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3d0, lpOverlapped=0x0) returned 1 [0234.669] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0234.669] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.669] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.669] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0234.669] CloseHandle (hObject=0x10c) returned 1 [0234.687] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.691] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0234.691] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.691] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0234.692] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0234.692] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{6CA1F1CE-1FED-4D96-A82E-08CEDB139AA3}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0234.692] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{6CA1F1CE-1FED-4D96-A82E-08CEDB139AA3}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{6ca1f1ce-1fed-4d96-a82e-08cedb139aa3}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0234.693] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1000) returned 1 [0234.693] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1000) returned 1 [0234.693] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2c6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0234.693] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0234.694] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.694] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0234.694] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0234.694] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.694] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3e8, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3e8, lpOverlapped=0x0) returned 1 [0234.694] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0234.695] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3e8, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3f0) returned 1 [0234.695] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.695] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3f0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3f0, lpOverlapped=0x0) returned 1 [0234.695] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0234.695] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.695] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.695] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0234.695] CloseHandle (hObject=0x10c) returned 1 [0234.712] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.717] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0234.717] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.717] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0234.717] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0234.718] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{6CBA2898-2EFE-4604-9933-F1F64DAE2A32}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0234.719] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{6CBA2898-2EFE-4604-9933-F1F64DAE2A32}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{6cba2898-2efe-4604-9933-f1f64dae2a32}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0234.719] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1206) returned 1 [0234.719] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1206) returned 1 [0234.719] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x394, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0234.719] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0234.721] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.721] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0234.721] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0234.721] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.721] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4b6, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4b6, lpOverlapped=0x0) returned 1 [0234.722] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0234.722] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4b6, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4c0) returned 1 [0234.722] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.722] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4c0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4c0, lpOverlapped=0x0) returned 1 [0234.722] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0234.722] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.722] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.722] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0234.722] CloseHandle (hObject=0x10c) returned 1 [0234.743] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.747] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0234.747] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.747] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0234.747] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0234.748] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{6dfd7c5c-2451-11d3-a299-00c04f8ef6af}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0234.748] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{6dfd7c5c-2451-11d3-a299-00c04f8ef6af}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{6dfd7c5c-2451-11d3-a299-00c04f8ef6af}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0234.749] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=899) returned 1 [0234.749] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=899) returned 1 [0234.749] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x261, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0234.749] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0234.750] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.750] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6f20) returned 1 [0234.750] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0234.751] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.751] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x383, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x383, lpOverlapped=0x0) returned 1 [0234.751] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0234.751] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x383, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x390) returned 1 [0234.751] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.751] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x390, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x390, lpOverlapped=0x0) returned 1 [0234.751] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0234.751] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.751] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.751] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0234.751] CloseHandle (hObject=0x10c) returned 1 [0234.769] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.773] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0234.773] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.773] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0234.773] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0234.773] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{71D0780F-10D2-459C-983B-94A642161220}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0234.774] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{71D0780F-10D2-459C-983B-94A642161220}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{71d0780f-10d2-459c-983b-94a642161220}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0234.775] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=991) returned 1 [0234.775] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=991) returned 1 [0234.775] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2bd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0234.775] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0234.776] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.776] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae65f0) returned 1 [0234.776] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0234.776] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.776] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3df, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3df, lpOverlapped=0x0) returned 1 [0234.776] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0234.776] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3df, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3e0) returned 1 [0234.776] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.776] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3e0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3e0, lpOverlapped=0x0) returned 1 [0234.777] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0234.777] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.777] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.777] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0234.777] CloseHandle (hObject=0x10c) returned 1 [0234.794] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.799] CryptDestroyKey (hKey=0x665aae65f0) returned 1 [0234.799] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.799] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0234.799] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0234.799] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{725be8f7-668e-4c7b-8f90-46bdb0936430}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0234.800] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{725be8f7-668e-4c7b-8f90-46bdb0936430}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{725be8f7-668e-4c7b-8f90-46bdb0936430}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0234.800] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=908) returned 1 [0234.800] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=908) returned 1 [0234.800] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x26a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0234.800] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0234.801] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.801] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0234.801] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0234.802] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.802] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x38c, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x38c, lpOverlapped=0x0) returned 1 [0234.802] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0234.802] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x38c, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x390) returned 1 [0234.802] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.802] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x390, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x390, lpOverlapped=0x0) returned 1 [0234.802] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0234.802] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.802] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.802] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0234.802] CloseHandle (hObject=0x10c) returned 1 [0234.820] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.824] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0234.824] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.824] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0234.824] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0234.825] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{73C9C58C-2E01-4F68-B1B9-7A4DD2EF71F7}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0234.825] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{73C9C58C-2E01-4F68-B1B9-7A4DD2EF71F7}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{73c9c58c-2e01-4f68-b1b9-7a4dd2ef71f7}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0234.826] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=929) returned 1 [0234.826] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=929) returned 1 [0234.826] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x27f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0234.826] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0234.827] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.827] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6f20) returned 1 [0234.827] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0234.827] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.827] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3a1, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3a1, lpOverlapped=0x0) returned 1 [0234.827] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0234.827] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3a1, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3b0) returned 1 [0234.828] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.828] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3b0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3b0, lpOverlapped=0x0) returned 1 [0234.828] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0234.828] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.828] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.828] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0234.828] CloseHandle (hObject=0x10c) returned 1 [0234.845] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.849] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0234.849] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.849] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0234.849] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0234.850] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7429F4F9-AE58-401a-82AD-723F3C6BDDD6}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0234.850] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7429F4F9-AE58-401a-82AD-723F3C6BDDD6}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{7429f4f9-ae58-401a-82ad-723f3c6bddd6}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0234.851] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=979) returned 1 [0234.851] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=979) returned 1 [0234.851] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2b1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0234.851] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0234.852] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.852] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae66d0) returned 1 [0234.852] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0234.852] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.852] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3d3, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3d3, lpOverlapped=0x0) returned 1 [0234.852] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0234.852] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3d3, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3e0) returned 1 [0234.852] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.852] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3e0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3e0, lpOverlapped=0x0) returned 1 [0234.852] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0234.853] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.853] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.853] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0234.853] CloseHandle (hObject=0x10c) returned 1 [0234.870] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.875] CryptDestroyKey (hKey=0x665aae66d0) returned 1 [0234.875] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.875] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0234.875] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0234.875] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{75AC9145-7EC9-4883-82A7-AD3429020AA0}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0234.876] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{75AC9145-7EC9-4883-82A7-AD3429020AA0}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{75ac9145-7ec9-4883-82a7-ad3429020aa0}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0234.876] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1061) returned 1 [0234.876] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1061) returned 1 [0234.876] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x303, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0234.876] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0234.878] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.878] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0234.878] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0234.878] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.878] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x425, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x425, lpOverlapped=0x0) returned 1 [0234.878] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0234.878] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x425, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x430) returned 1 [0234.878] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.878] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x430, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x430, lpOverlapped=0x0) returned 1 [0234.879] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0234.879] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.879] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.879] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0234.879] CloseHandle (hObject=0x10c) returned 1 [0234.896] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.901] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0234.901] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.901] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0234.901] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0234.901] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{76F31A78-3FDA-4F80-B015-95CFD81463AD}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0234.902] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{76F31A78-3FDA-4F80-B015-95CFD81463AD}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{76f31a78-3fda-4f80-b015-95cfd81463ad}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0234.903] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1156) returned 1 [0234.903] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1156) returned 1 [0234.903] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x362, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0234.903] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0234.911] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.911] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6f20) returned 1 [0234.911] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0234.911] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.911] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x484, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x484, lpOverlapped=0x0) returned 1 [0234.911] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0234.911] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x484, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x490) returned 1 [0234.911] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.911] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x490, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x490, lpOverlapped=0x0) returned 1 [0234.912] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0234.912] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.912] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.912] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0234.912] CloseHandle (hObject=0x10c) returned 1 [0234.930] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.934] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0234.934] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.934] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0234.934] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0234.934] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7a4d0c5d-51ad-443e-87c7-66b757586c56}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0234.935] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7a4d0c5d-51ad-443e-87c7-66b757586c56}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{7a4d0c5d-51ad-443e-87c7-66b757586c56}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0234.936] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1131) returned 1 [0234.936] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1131) returned 1 [0234.936] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x349, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0234.936] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0234.937] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.937] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae70e0) returned 1 [0234.937] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0234.938] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.938] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x46b, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x46b, lpOverlapped=0x0) returned 1 [0234.938] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0234.938] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x46b, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x470) returned 1 [0234.938] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.938] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x470, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x470, lpOverlapped=0x0) returned 1 [0234.938] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0234.938] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.938] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.938] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0234.938] CloseHandle (hObject=0x10c) returned 1 [0234.962] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.966] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0234.966] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.967] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0234.967] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0234.967] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7ABBE8E6-757F-419A-B2E0-07D5694F8E0F}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0234.968] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7ABBE8E6-757F-419A-B2E0-07D5694F8E0F}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{7abbe8e6-757f-419a-b2e0-07d5694f8e0f}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0234.969] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=944) returned 1 [0234.969] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=944) returned 1 [0234.969] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x28e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0234.969] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0234.970] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.970] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0234.970] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0234.970] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.970] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3b0, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3b0, lpOverlapped=0x0) returned 1 [0234.970] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0234.970] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3b0, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3c0) returned 1 [0234.970] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.971] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3c0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3c0, lpOverlapped=0x0) returned 1 [0234.971] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0234.971] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.971] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.971] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0234.971] CloseHandle (hObject=0x10c) returned 1 [0234.988] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.992] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0234.992] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.993] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0234.993] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0234.993] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7B086E4E-366C-454A-85CC-B8B533482B10}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0234.994] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7B086E4E-366C-454A-85CC-B8B533482B10}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{7b086e4e-366c-454a-85cc-b8b533482b10}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0234.994] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=987) returned 1 [0234.994] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=987) returned 1 [0234.994] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2b9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0234.994] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0234.996] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.996] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6740) returned 1 [0234.996] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0234.996] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.996] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3db, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3db, lpOverlapped=0x0) returned 1 [0234.996] CryptEncrypt (in: hKey=0x665aae6740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0234.996] CryptEncrypt (in: hKey=0x665aae6740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3db, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3e0) returned 1 [0234.996] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0234.996] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3e0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3e0, lpOverlapped=0x0) returned 1 [0234.996] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0234.996] CryptExportKey (in: hKey=0x665aae6740, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.996] CryptExportKey (in: hKey=0x665aae6740, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0234.996] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0234.997] CloseHandle (hObject=0x10c) returned 1 [0235.014] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0235.018] CryptDestroyKey (hKey=0x665aae6740) returned 1 [0235.018] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0235.018] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0235.018] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0235.019] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7C3E0552-96E2-4069-AC1C-208C146683CA}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0235.019] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7C3E0552-96E2-4069-AC1C-208C146683CA}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{7c3e0552-96e2-4069-ac1c-208c146683ca}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0235.020] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1183) returned 1 [0235.020] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1183) returned 1 [0235.020] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x37d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0235.020] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0235.021] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0235.021] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0235.021] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0235.022] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0235.022] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x49f, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x49f, lpOverlapped=0x0) returned 1 [0235.022] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0235.022] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x49f, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4a0) returned 1 [0235.022] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0235.022] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4a0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4a0, lpOverlapped=0x0) returned 1 [0235.022] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0235.022] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0235.022] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0235.022] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0235.022] CloseHandle (hObject=0x10c) returned 1 [0235.040] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0235.044] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0235.044] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0235.044] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0235.044] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0235.044] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7D13A5DB-6081-48BD-8EA3-A9D7FE67A335}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0235.045] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7D13A5DB-6081-48BD-8EA3-A9D7FE67A335}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{7d13a5db-6081-48bd-8ea3-a9d7fe67a335}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0235.046] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=995) returned 1 [0235.046] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=995) returned 1 [0235.046] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2c1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0235.046] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0235.047] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0235.047] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6f20) returned 1 [0235.047] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0235.047] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0235.047] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3e3, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3e3, lpOverlapped=0x0) returned 1 [0235.047] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0235.047] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3e3, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3f0) returned 1 [0235.047] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0235.048] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3f0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3f0, lpOverlapped=0x0) returned 1 [0235.048] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0235.048] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0235.048] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0235.048] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0235.048] CloseHandle (hObject=0x10c) returned 1 [0235.065] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0235.068] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0235.069] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0235.069] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0235.069] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0235.069] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7DE6CF7C-B699-421B-A808-139E798E6C64}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0235.069] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7DE6CF7C-B699-421B-A808-139E798E6C64}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{7de6cf7c-b699-421b-a808-139e798e6c64}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0235.070] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1105) returned 1 [0235.070] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1105) returned 1 [0235.070] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x32f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0235.070] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0235.071] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0235.071] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6f20) returned 1 [0235.071] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0235.071] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0235.071] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x451, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x451, lpOverlapped=0x0) returned 1 [0235.072] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0235.072] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x451, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x460) returned 1 [0235.072] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0235.072] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x460, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x460, lpOverlapped=0x0) returned 1 [0235.072] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0235.072] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0235.072] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0235.072] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0235.072] CloseHandle (hObject=0x10c) returned 1 [0235.094] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0235.098] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0235.098] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0235.099] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0235.102] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0235.102] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7E5BC096-F558-419A-9326-BC6414D592C3}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0235.103] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7E5BC096-F558-419A-9326-BC6414D592C3}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{7e5bc096-f558-419a-9326-bc6414d592c3}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0235.103] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1022) returned 1 [0235.103] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1022) returned 1 [0235.103] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2dc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0235.104] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0235.194] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0235.194] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6f20) returned 1 [0235.194] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0235.194] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0235.194] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3fe, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3fe, lpOverlapped=0x0) returned 1 [0235.195] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0235.195] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3fe, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x400) returned 1 [0235.195] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0235.195] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x400, lpOverlapped=0x0) returned 1 [0235.195] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0235.195] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0235.195] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0235.195] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0235.195] CloseHandle (hObject=0x10c) returned 1 [0235.217] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0235.323] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0235.323] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0235.324] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0235.324] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0235.324] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7F8B6C83-2A89-47A0-B334-AA58D042CDEC}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0235.325] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7F8B6C83-2A89-47A0-B334-AA58D042CDEC}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{7f8b6c83-2a89-47a0-b334-aa58d042cdec}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0235.325] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=983) returned 1 [0235.325] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=983) returned 1 [0235.325] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2b5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0235.325] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0235.327] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0235.327] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0235.327] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0235.327] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0235.327] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3d7, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3d7, lpOverlapped=0x0) returned 1 [0235.327] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0235.328] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3d7, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3e0) returned 1 [0235.328] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0235.328] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3e0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3e0, lpOverlapped=0x0) returned 1 [0235.328] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0235.328] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0235.328] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0235.328] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0235.329] CloseHandle (hObject=0x10c) returned 1 [0235.350] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0235.356] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0235.356] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0235.356] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0235.356] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0235.356] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8050502B-9B94-408C-BF49-D2D8887C1BCF}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0235.357] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8050502B-9B94-408C-BF49-D2D8887C1BCF}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{8050502b-9b94-408c-bf49-d2d8887c1bcf}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0235.358] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1020) returned 1 [0235.358] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1020) returned 1 [0235.358] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2da, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0235.358] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0235.360] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0235.360] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0235.360] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0235.360] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0235.360] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3fc, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3fc, lpOverlapped=0x0) returned 1 [0235.361] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0235.361] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3fc, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x400) returned 1 [0235.361] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0235.361] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x400, lpOverlapped=0x0) returned 1 [0235.361] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0235.361] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0235.361] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0235.361] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0235.361] CloseHandle (hObject=0x10c) returned 1 [0235.382] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0235.388] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0235.388] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0235.388] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0235.388] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0235.389] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{80f3f1d5-feca-45f3-bc32-752c152e456e}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0235.389] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{80f3f1d5-feca-45f3-bc32-752c152e456e}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{80f3f1d5-feca-45f3-bc32-752c152e456e}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0235.390] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=962) returned 1 [0235.390] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=962) returned 1 [0235.390] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2a0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0235.390] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0235.392] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0235.392] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae65f0) returned 1 [0235.392] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0235.392] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0235.392] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3c2, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3c2, lpOverlapped=0x0) returned 1 [0235.393] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0235.393] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3c2, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3d0) returned 1 [0235.393] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0235.393] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3d0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3d0, lpOverlapped=0x0) returned 1 [0235.393] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0235.393] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0235.393] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0235.393] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0235.393] CloseHandle (hObject=0x10c) returned 1 [0235.416] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0235.422] CryptDestroyKey (hKey=0x665aae65f0) returned 1 [0235.422] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0235.423] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0235.423] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0235.423] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{821FB666-D307-4865-86BB-68725A30999C}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0235.424] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{821FB666-D307-4865-86BB-68725A30999C}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{821fb666-d307-4865-86bb-68725a30999c}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0235.424] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1206) returned 1 [0235.424] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1206) returned 1 [0235.425] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x394, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0235.425] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0235.426] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0235.426] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0235.426] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0235.426] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0235.426] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4b6, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4b6, lpOverlapped=0x0) returned 1 [0235.427] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0235.427] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4b6, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4c0) returned 1 [0235.427] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0235.427] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4c0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4c0, lpOverlapped=0x0) returned 1 [0235.427] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0235.427] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0235.427] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0235.427] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0235.427] CloseHandle (hObject=0x10c) returned 1 [0235.450] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0235.457] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0235.457] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0235.457] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0235.457] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0235.457] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{84C9670E-825D-4128-B173-2963886C5A3E}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0235.458] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{84C9670E-825D-4128-B173-2963886C5A3E}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{84c9670e-825d-4128-b173-2963886c5a3e}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0235.459] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1039) returned 1 [0235.459] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1039) returned 1 [0235.459] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2ed, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0235.459] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0235.460] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0235.461] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0235.461] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0235.461] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0235.461] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x40f, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x40f, lpOverlapped=0x0) returned 1 [0235.461] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0235.461] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x40f, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x410) returned 1 [0235.461] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0235.461] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x410, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x410, lpOverlapped=0x0) returned 1 [0235.461] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0235.461] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0235.461] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0235.462] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0235.462] CloseHandle (hObject=0x10c) returned 1 [0235.485] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0235.491] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0235.491] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0235.491] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0235.491] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0235.492] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8562B9B8-812D-420C-9189-DC216D788A49}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0235.492] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8562B9B8-812D-420C-9189-DC216D788A49}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{8562b9b8-812d-420c-9189-dc216d788a49}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0235.493] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=954) returned 1 [0235.493] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=954) returned 1 [0235.493] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x298, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0235.493] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0235.495] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0235.495] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0235.495] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0235.495] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0235.495] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3ba, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3ba, lpOverlapped=0x0) returned 1 [0235.495] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0235.495] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3ba, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3c0) returned 1 [0235.496] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0235.496] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3c0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3c0, lpOverlapped=0x0) returned 1 [0235.496] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0235.496] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0235.496] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0235.496] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0235.496] CloseHandle (hObject=0x10c) returned 1 [0235.520] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0235.525] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0235.525] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0235.526] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0235.526] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0235.526] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{875FE7D6-5BDF-496F-B349-91E5E3625B86}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0235.527] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{875FE7D6-5BDF-496F-B349-91E5E3625B86}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{875fe7d6-5bdf-496f-b349-91e5e3625b86}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0235.527] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1048) returned 1 [0235.528] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1048) returned 1 [0235.528] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2f6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0235.528] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0235.529] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0235.529] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae66d0) returned 1 [0235.529] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0235.530] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0235.530] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x418, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x418, lpOverlapped=0x0) returned 1 [0235.530] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0235.530] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x418, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x420) returned 1 [0235.530] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0235.530] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x420, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x420, lpOverlapped=0x0) returned 1 [0235.530] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0235.530] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0235.530] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0235.531] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0235.531] CloseHandle (hObject=0x10c) returned 1 [0235.554] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0235.560] CryptDestroyKey (hKey=0x665aae66d0) returned 1 [0235.560] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0235.560] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0235.560] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0235.561] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8774b87d-a2b4-49a0-8237-bfefd00646c2}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0235.561] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8774b87d-a2b4-49a0-8237-bfefd00646c2}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{8774b87d-a2b4-49a0-8237-bfefd00646c2}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0235.562] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=996) returned 1 [0235.562] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=996) returned 1 [0235.562] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2c2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0235.562] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0235.567] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0235.567] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0235.567] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0235.568] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0235.568] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3e4, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3e4, lpOverlapped=0x0) returned 1 [0235.568] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0235.568] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3e4, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3f0) returned 1 [0235.568] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0235.568] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3f0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3f0, lpOverlapped=0x0) returned 1 [0235.568] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0235.568] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0235.568] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0235.568] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0235.568] CloseHandle (hObject=0x10c) returned 1 [0235.590] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0235.595] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0235.595] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0235.595] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0235.595] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0235.596] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{87842A7E-D784-458d-BEF4-CFDC632DCF3E}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0235.597] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{87842A7E-D784-458d-BEF4-CFDC632DCF3E}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{87842a7e-d784-458d-bef4-cfdc632dcf3e}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0235.597] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1012) returned 1 [0235.597] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1012) returned 1 [0235.597] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2d2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0235.597] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0235.599] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0235.599] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae70e0) returned 1 [0235.599] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0235.599] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0235.599] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3f4, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3f4, lpOverlapped=0x0) returned 1 [0235.599] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0235.599] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3f4, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x400) returned 1 [0235.599] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0235.599] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x400, lpOverlapped=0x0) returned 1 [0235.599] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0235.600] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0235.600] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0235.600] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0235.600] CloseHandle (hObject=0x10c) returned 1 [0235.622] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0235.627] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0235.627] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0235.627] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0235.627] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0235.628] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{87d66a43-7b11-4a28-9811-c86ee395acf7}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0235.628] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{87d66a43-7b11-4a28-9811-c86ee395acf7}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{87d66a43-7b11-4a28-9811-c86ee395acf7}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0235.629] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1131) returned 1 [0235.629] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1131) returned 1 [0235.629] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x349, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0235.629] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0235.631] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0235.631] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6740) returned 1 [0235.631] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0235.631] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0235.631] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x46b, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x46b, lpOverlapped=0x0) returned 1 [0235.631] CryptEncrypt (in: hKey=0x665aae6740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0235.631] CryptEncrypt (in: hKey=0x665aae6740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x46b, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x470) returned 1 [0235.631] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0235.631] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x470, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x470, lpOverlapped=0x0) returned 1 [0235.632] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0235.632] CryptExportKey (in: hKey=0x665aae6740, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0235.632] CryptExportKey (in: hKey=0x665aae6740, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0235.632] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0235.632] CloseHandle (hObject=0x10c) returned 1 [0235.653] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0235.659] CryptDestroyKey (hKey=0x665aae6740) returned 1 [0235.659] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0235.659] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0235.659] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0235.659] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{886EDAFC-1051-483F-8AE2-904087A7E580}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0235.660] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{886EDAFC-1051-483F-8AE2-904087A7E580}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{886edafc-1051-483f-8ae2-904087a7e580}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0235.661] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1118) returned 1 [0235.661] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1118) returned 1 [0235.661] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x33c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0235.661] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0235.662] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0235.662] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae66d0) returned 1 [0235.662] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0235.663] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0235.663] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x45e, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x45e, lpOverlapped=0x0) returned 1 [0235.663] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0235.663] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x45e, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x460) returned 1 [0235.663] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0235.663] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x460, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x460, lpOverlapped=0x0) returned 1 [0235.663] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0235.663] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0235.663] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0235.663] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0235.663] CloseHandle (hObject=0x10c) returned 1 [0235.697] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0235.702] CryptDestroyKey (hKey=0x665aae66d0) returned 1 [0235.702] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0235.702] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0235.702] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0235.703] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{88C9D04D-39DD-41EE-A63B-23218D69717F}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0235.752] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{88C9D04D-39DD-41EE-A63B-23218D69717F}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{88c9d04d-39dd-41ee-a63b-23218d69717f}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0235.752] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=974) returned 1 [0235.752] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=974) returned 1 [0235.752] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2ac, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0235.752] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0235.754] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0235.754] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0235.754] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0235.754] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0235.754] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3ce, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3ce, lpOverlapped=0x0) returned 1 [0235.755] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0235.755] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3ce, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3d0) returned 1 [0235.755] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0235.755] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3d0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3d0, lpOverlapped=0x0) returned 1 [0235.755] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0235.755] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0235.755] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0235.755] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0235.755] CloseHandle (hObject=0x10c) returned 1 [0235.778] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0235.783] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0235.783] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0235.783] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0235.783] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0235.784] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8902C92D-5AB7-433B-9065-3F55F8334E29}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0235.784] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8902C92D-5AB7-433B-9065-3F55F8334E29}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{8902c92d-5ab7-433b-9065-3f55f8334e29}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0235.785] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1243) returned 1 [0235.785] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1243) returned 1 [0235.785] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3b9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0235.785] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0235.786] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0235.786] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae65f0) returned 1 [0235.786] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0235.787] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0235.787] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4db, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4db, lpOverlapped=0x0) returned 1 [0235.787] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0235.787] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4db, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4e0) returned 1 [0235.787] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0235.787] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4e0, lpOverlapped=0x0) returned 1 [0235.787] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0235.787] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0235.787] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0235.787] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0235.787] CloseHandle (hObject=0x10c) returned 1 [0235.808] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0235.813] CryptDestroyKey (hKey=0x665aae65f0) returned 1 [0235.813] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0235.813] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0235.813] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0235.814] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{895607E0-D0F9-48bd-B19E-96FBE9BBDCF9}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0235.815] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{895607E0-D0F9-48bd-B19E-96FBE9BBDCF9}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{895607e0-d0f9-48bd-b19e-96fbe9bbdcf9}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0235.815] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1016) returned 1 [0235.815] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1016) returned 1 [0235.816] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2d6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0235.816] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0235.817] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0235.817] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae70e0) returned 1 [0235.817] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0235.817] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0235.817] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3f8, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3f8, lpOverlapped=0x0) returned 1 [0235.818] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0235.818] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3f8, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x400) returned 1 [0235.818] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0235.818] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x400, lpOverlapped=0x0) returned 1 [0235.818] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0235.818] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0235.818] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0235.818] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0235.818] CloseHandle (hObject=0x10c) returned 1 [0235.839] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0235.844] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0235.845] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0235.845] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0235.845] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0235.845] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{89A2270D-DF2E-4172-8BA5-159D6AD00C15}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0235.846] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{89A2270D-DF2E-4172-8BA5-159D6AD00C15}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{89a2270d-df2e-4172-8ba5-159d6ad00c15}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0235.846] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1204) returned 1 [0235.846] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1204) returned 1 [0235.846] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x392, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0235.847] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0235.848] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0235.848] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0235.848] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0235.848] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0235.848] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4b4, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4b4, lpOverlapped=0x0) returned 1 [0235.848] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0235.848] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4b4, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4c0) returned 1 [0235.848] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0235.849] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4c0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4c0, lpOverlapped=0x0) returned 1 [0235.849] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0235.849] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0235.849] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0235.849] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0235.849] CloseHandle (hObject=0x10c) returned 1 [0235.871] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0235.876] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0235.876] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0235.876] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0235.876] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0235.877] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8bb27ec5-5cb3-4781-baee-3439df4806e4}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0235.877] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8bb27ec5-5cb3-4781-baee-3439df4806e4}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{8bb27ec5-5cb3-4781-baee-3439df4806e4}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0235.878] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=930) returned 1 [0235.878] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=930) returned 1 [0235.878] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x280, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0235.878] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0235.879] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0235.879] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6740) returned 1 [0235.879] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0235.880] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0235.880] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3a2, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3a2, lpOverlapped=0x0) returned 1 [0235.880] CryptEncrypt (in: hKey=0x665aae6740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0235.880] CryptEncrypt (in: hKey=0x665aae6740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3a2, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3b0) returned 1 [0235.880] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0235.880] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3b0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3b0, lpOverlapped=0x0) returned 1 [0235.880] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0235.880] CryptExportKey (in: hKey=0x665aae6740, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0235.880] CryptExportKey (in: hKey=0x665aae6740, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0235.880] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0235.880] CloseHandle (hObject=0x10c) returned 1 [0235.902] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0235.908] CryptDestroyKey (hKey=0x665aae6740) returned 1 [0235.908] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0235.908] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0235.908] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0235.908] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8D58F804-9520-4208-A527-7C2B6CB77B33}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0235.909] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8D58F804-9520-4208-A527-7C2B6CB77B33}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{8d58f804-9520-4208-a527-7c2b6cb77b33}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0235.910] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1325) returned 1 [0235.910] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1325) returned 1 [0235.910] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x40b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0235.910] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0235.911] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0235.911] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0235.911] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0235.912] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0235.912] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x52d, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x52d, lpOverlapped=0x0) returned 1 [0235.912] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0235.912] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x52d, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x530) returned 1 [0235.912] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0235.912] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x530, lpOverlapped=0x0) returned 1 [0235.912] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0235.912] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0235.912] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0235.912] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0235.912] CloseHandle (hObject=0x10c) returned 1 [0235.934] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0235.940] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0235.940] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0235.940] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0235.943] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0235.943] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8E0C279D-0BD1-43C3-9EBD-31C3DC5B8A77}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0235.943] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8E0C279D-0BD1-43C3-9EBD-31C3DC5B8A77}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{8e0c279d-0bd1-43c3-9ebd-31c3dc5b8a77}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0235.944] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1108) returned 1 [0235.944] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1108) returned 1 [0235.944] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x332, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0235.944] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0235.946] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0235.946] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0235.946] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0235.946] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0235.946] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x454, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x454, lpOverlapped=0x0) returned 1 [0235.946] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0235.946] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x454, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x460) returned 1 [0235.946] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0235.946] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x460, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x460, lpOverlapped=0x0) returned 1 [0235.947] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0235.947] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0235.947] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0235.947] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0235.947] CloseHandle (hObject=0x10c) returned 1 [0235.975] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0235.980] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0235.980] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0235.981] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0235.981] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0235.981] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8E21794E-9303-44C5-A493-C3DC53C0E463}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0235.982] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8E21794E-9303-44C5-A493-C3DC53C0E463}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{8e21794e-9303-44c5-a493-c3dc53c0e463}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0235.982] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1025) returned 1 [0235.982] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1025) returned 1 [0235.983] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2df, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0235.983] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0235.984] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0235.984] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0235.984] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0235.985] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0235.985] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x401, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x401, lpOverlapped=0x0) returned 1 [0235.985] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0235.985] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x401, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x410) returned 1 [0235.985] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0235.985] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x410, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x410, lpOverlapped=0x0) returned 1 [0235.985] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0235.985] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0235.985] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0235.986] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0235.986] CloseHandle (hObject=0x10c) returned 1 [0236.007] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0236.012] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0236.012] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0236.012] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0236.012] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0236.013] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8e908fc9-becc-40f6-915b-f4ca0e70d03d}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0236.013] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8e908fc9-becc-40f6-915b-f4ca0e70d03d}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{8e908fc9-becc-40f6-915b-f4ca0e70d03d}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0236.014] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=935) returned 1 [0236.014] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=935) returned 1 [0236.014] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x285, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0236.014] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0236.015] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.015] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0236.016] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0236.016] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.016] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3a7, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3a7, lpOverlapped=0x0) returned 1 [0236.016] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0236.016] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3a7, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3b0) returned 1 [0236.016] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.016] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3b0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3b0, lpOverlapped=0x0) returned 1 [0236.017] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0236.017] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0236.017] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0236.017] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0236.017] CloseHandle (hObject=0x10c) returned 1 [0236.038] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0236.043] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0236.043] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0236.044] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0236.044] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0236.044] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{906435EC-336D-4B77-BCD6-397DE8318852}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0236.044] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{906435EC-336D-4B77-BCD6-397DE8318852}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{906435ec-336d-4b77-bcd6-397de8318852}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0236.045] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1068) returned 1 [0236.045] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1068) returned 1 [0236.045] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x30a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0236.045] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0236.047] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.047] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae7150) returned 1 [0236.047] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0236.047] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.047] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x42c, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x42c, lpOverlapped=0x0) returned 1 [0236.048] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0236.048] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x42c, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x430) returned 1 [0236.048] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.048] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x430, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x430, lpOverlapped=0x0) returned 1 [0236.048] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0236.048] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0236.048] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0236.048] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0236.048] CloseHandle (hObject=0x10c) returned 1 [0236.070] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0236.075] CryptDestroyKey (hKey=0x665aae7150) returned 1 [0236.075] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0236.075] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0236.075] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0236.075] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{907F262A-012A-4F6A-94C9-F479F3E6EE16}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0236.076] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{907F262A-012A-4F6A-94C9-F479F3E6EE16}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{907f262a-012a-4f6a-94c9-f479f3e6ee16}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0236.077] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1130) returned 1 [0236.077] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1130) returned 1 [0236.077] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x348, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0236.077] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0236.078] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.079] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0236.079] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0236.079] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.079] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x46a, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x46a, lpOverlapped=0x0) returned 1 [0236.079] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0236.079] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x46a, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x470) returned 1 [0236.079] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.079] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x470, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x470, lpOverlapped=0x0) returned 1 [0236.079] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0236.079] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0236.079] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0236.080] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0236.080] CloseHandle (hObject=0x10c) returned 1 [0236.101] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0236.106] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0236.106] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0236.107] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0236.107] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0236.107] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{90ab71ce-bab6-4ca2-84fe-629338405756}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0236.108] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{90ab71ce-bab6-4ca2-84fe-629338405756}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{90ab71ce-bab6-4ca2-84fe-629338405756}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0236.108] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=938) returned 1 [0236.108] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=938) returned 1 [0236.109] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x288, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0236.109] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0236.110] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.110] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0236.110] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0236.111] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.111] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3aa, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3aa, lpOverlapped=0x0) returned 1 [0236.111] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0236.111] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3aa, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3b0) returned 1 [0236.111] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.111] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3b0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3b0, lpOverlapped=0x0) returned 1 [0236.111] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0236.111] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0236.111] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0236.111] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0236.111] CloseHandle (hObject=0x10c) returned 1 [0236.133] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0236.138] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0236.138] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0236.138] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0236.138] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0236.138] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{91BA8E01-F854-4418-A108-E63323DDAE60}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0236.139] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{91BA8E01-F854-4418-A108-E63323DDAE60}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{91ba8e01-f854-4418-a108-e63323ddae60}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0236.140] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=981) returned 1 [0236.140] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=981) returned 1 [0236.140] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2b3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0236.140] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0236.141] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.142] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae70e0) returned 1 [0236.142] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0236.142] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.142] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3d5, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3d5, lpOverlapped=0x0) returned 1 [0236.142] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0236.142] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3d5, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3e0) returned 1 [0236.142] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.142] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3e0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3e0, lpOverlapped=0x0) returned 1 [0236.142] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0236.142] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0236.143] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0236.143] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0236.143] CloseHandle (hObject=0x10c) returned 1 [0236.164] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0236.169] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0236.169] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0236.170] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0236.170] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0236.170] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9389633E-8BCB-4448-93CD-EBFFA0759257}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0236.171] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9389633E-8BCB-4448-93CD-EBFFA0759257}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{9389633e-8bcb-4448-93cd-ebffa0759257}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0236.171] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1149) returned 1 [0236.171] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1149) returned 1 [0236.171] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x35b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0236.171] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0236.173] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.173] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae70e0) returned 1 [0236.173] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0236.174] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.174] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x47d, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x47d, lpOverlapped=0x0) returned 1 [0236.174] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0236.174] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x47d, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x480) returned 1 [0236.174] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.174] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x480, lpOverlapped=0x0) returned 1 [0236.174] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0236.174] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0236.174] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0236.174] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0236.174] CloseHandle (hObject=0x10c) returned 1 [0236.196] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0236.201] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0236.201] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0236.201] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0236.201] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0236.201] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9430DB91-B966-4971-A955-E3DBA1F889E7}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0236.202] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9430DB91-B966-4971-A955-E3DBA1F889E7}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{9430db91-b966-4971-a955-e3dba1f889e7}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0236.203] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1074) returned 1 [0236.203] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1074) returned 1 [0236.203] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x310, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0236.203] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0236.204] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.204] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0236.205] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0236.205] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.205] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x432, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x432, lpOverlapped=0x0) returned 1 [0236.205] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0236.205] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x432, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x440) returned 1 [0236.205] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.205] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x440, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x440, lpOverlapped=0x0) returned 1 [0236.205] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0236.205] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0236.205] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0236.205] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0236.206] CloseHandle (hObject=0x10c) returned 1 [0236.296] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0236.302] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0236.302] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0236.302] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0236.302] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0236.302] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{944A41B9-C0FD-41AE-A6DF-5AC4FE5A59B4}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0236.303] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{944A41B9-C0FD-41AE-A6DF-5AC4FE5A59B4}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{944a41b9-c0fd-41ae-a6df-5ac4fe5a59b4}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0236.303] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=959) returned 1 [0236.304] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=959) returned 1 [0236.304] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x29d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0236.304] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0236.305] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.305] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0236.305] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0236.306] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.306] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3bf, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3bf, lpOverlapped=0x0) returned 1 [0236.306] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0236.306] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3bf, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3c0) returned 1 [0236.306] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.306] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3c0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3c0, lpOverlapped=0x0) returned 1 [0236.306] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0236.306] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0236.306] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0236.306] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0236.306] CloseHandle (hObject=0x10c) returned 1 [0236.328] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0236.333] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0236.333] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0236.333] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0236.333] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0236.334] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{950fd00b-c4a9-4465-852a-b1eb51e2e7f6}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0236.334] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{950fd00b-c4a9-4465-852a-b1eb51e2e7f6}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{950fd00b-c4a9-4465-852a-b1eb51e2e7f6}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0236.335] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=956) returned 1 [0236.335] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=956) returned 1 [0236.335] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x29a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0236.335] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0236.336] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.336] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0236.336] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0236.337] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.337] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3bc, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3bc, lpOverlapped=0x0) returned 1 [0236.337] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0236.337] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3bc, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3c0) returned 1 [0236.337] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.337] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3c0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3c0, lpOverlapped=0x0) returned 1 [0236.337] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0236.337] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0236.337] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0236.337] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0236.337] CloseHandle (hObject=0x10c) returned 1 [0236.358] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0236.364] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0236.364] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0236.364] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0236.364] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0236.364] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{955E7FFD-4DD9-4124-96FC-86C3C653DD33}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0236.365] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{955E7FFD-4DD9-4124-96FC-86C3C653DD33}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{955e7ffd-4dd9-4124-96fc-86c3c653dd33}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0236.366] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1035) returned 1 [0236.366] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1035) returned 1 [0236.366] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2e9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0236.366] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0236.367] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.367] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6f20) returned 1 [0236.367] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0236.367] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.367] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x40b, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x40b, lpOverlapped=0x0) returned 1 [0236.368] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0236.368] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x40b, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x410) returned 1 [0236.368] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.368] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x410, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x410, lpOverlapped=0x0) returned 1 [0236.368] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0236.368] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0236.368] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0236.368] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0236.368] CloseHandle (hObject=0x10c) returned 1 [0236.389] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0236.395] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0236.395] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0236.395] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0236.395] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0236.395] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{96BC4455-FDA3-4DE2-8B71-9D1953F0B32D}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0236.396] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{96BC4455-FDA3-4DE2-8B71-9D1953F0B32D}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{96bc4455-fda3-4de2-8b71-9d1953f0b32d}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0236.397] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=919) returned 1 [0236.397] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=919) returned 1 [0236.397] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x275, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0236.397] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0236.398] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.399] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6820) returned 1 [0236.399] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0236.399] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.399] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x397, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x397, lpOverlapped=0x0) returned 1 [0236.399] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0236.399] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x397, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3a0) returned 1 [0236.399] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.399] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3a0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3a0, lpOverlapped=0x0) returned 1 [0236.413] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0236.413] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0236.413] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0236.413] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0236.413] CloseHandle (hObject=0x10c) returned 1 [0236.431] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0236.436] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0236.436] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0236.436] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0236.436] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0236.437] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{96DF8B78-8299-4BC1-B56B-6C375FBEC228}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0236.441] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{96DF8B78-8299-4BC1-B56B-6C375FBEC228}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{96df8b78-8299-4bc1-b56b-6c375fbec228}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0236.441] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=941) returned 1 [0236.441] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=941) returned 1 [0236.441] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x28b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0236.442] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0236.443] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.443] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae70e0) returned 1 [0236.443] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0236.443] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.443] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3ad, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3ad, lpOverlapped=0x0) returned 1 [0236.444] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0236.444] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3ad, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3b0) returned 1 [0236.444] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.444] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3b0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3b0, lpOverlapped=0x0) returned 1 [0236.444] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0236.444] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0236.444] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0236.444] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0236.444] CloseHandle (hObject=0x10c) returned 1 [0236.463] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0236.468] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0236.468] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0236.468] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0236.468] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0236.469] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9891D47B-7E37-4265-BAD2-1FA991543B90}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0236.469] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9891D47B-7E37-4265-BAD2-1FA991543B90}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{9891d47b-7e37-4265-bad2-1fa991543b90}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0236.470] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=950) returned 1 [0236.470] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=950) returned 1 [0236.470] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x294, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0236.470] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0236.476] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.476] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6820) returned 1 [0236.476] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0236.477] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.477] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3b6, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3b6, lpOverlapped=0x0) returned 1 [0236.477] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0236.477] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3b6, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3c0) returned 1 [0236.477] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.477] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3c0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3c0, lpOverlapped=0x0) returned 1 [0236.477] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0236.477] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0236.477] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0236.478] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0236.478] CloseHandle (hObject=0x10c) returned 1 [0236.495] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0236.501] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0236.501] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0236.501] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0236.501] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0236.502] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{98CCA0B9-CF6C-4FFD-98E1-87BFEDDD4D21}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0236.502] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{98CCA0B9-CF6C-4FFD-98E1-87BFEDDD4D21}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{98cca0b9-cf6c-4ffd-98e1-87bfeddd4d21}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0236.503] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=976) returned 1 [0236.503] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=976) returned 1 [0236.503] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2ae, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0236.503] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0236.505] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.505] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6820) returned 1 [0236.505] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0236.505] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.505] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3d0, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3d0, lpOverlapped=0x0) returned 1 [0236.505] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0236.505] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3d0, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3e0) returned 1 [0236.505] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.505] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3e0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3e0, lpOverlapped=0x0) returned 1 [0236.506] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0236.506] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0236.506] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0236.506] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0236.506] CloseHandle (hObject=0x10c) returned 1 [0236.523] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0236.528] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0236.528] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0236.529] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0236.529] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0236.529] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9B802EF5-59B7-4974-9022-06DC2A9B1677}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0236.530] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9B802EF5-59B7-4974-9022-06DC2A9B1677}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{9b802ef5-59b7-4974-9022-06dc2a9b1677}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0236.530] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1006) returned 1 [0236.530] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1006) returned 1 [0236.530] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2cc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0236.530] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0236.532] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.532] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0236.532] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0236.533] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.533] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3ee, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3ee, lpOverlapped=0x0) returned 1 [0236.533] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0236.533] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3ee, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3f0) returned 1 [0236.533] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.533] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3f0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3f0, lpOverlapped=0x0) returned 1 [0236.533] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0236.533] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0236.533] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0236.533] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0236.533] CloseHandle (hObject=0x10c) returned 1 [0236.555] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0236.560] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0236.560] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0236.560] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0236.560] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0236.560] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9BA8A9A5-F1C1-4F09-AE9A-EFEAA5961BE3}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0236.561] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9BA8A9A5-F1C1-4F09-AE9A-EFEAA5961BE3}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{9ba8a9a5-f1c1-4f09-ae9a-efeaa5961be3}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0236.562] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1020) returned 1 [0236.562] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1020) returned 1 [0236.562] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2da, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0236.562] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0236.564] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.564] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae7150) returned 1 [0236.564] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0236.564] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.564] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3fc, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3fc, lpOverlapped=0x0) returned 1 [0236.564] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0236.564] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3fc, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x400) returned 1 [0236.564] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.564] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x400, lpOverlapped=0x0) returned 1 [0236.565] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0236.565] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0236.565] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0236.565] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0236.565] CloseHandle (hObject=0x10c) returned 1 [0236.587] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0236.592] CryptDestroyKey (hKey=0x665aae7150) returned 1 [0236.592] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0236.592] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0236.594] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0236.595] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9C39057F-5CE5-4BAB-BE61-2957A12EEC52}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0236.595] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9C39057F-5CE5-4BAB-BE61-2957A12EEC52}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{9c39057f-5ce5-4bab-be61-2957a12eec52}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0236.596] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=933) returned 1 [0236.596] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=933) returned 1 [0236.596] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x283, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0236.596] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0236.597] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.597] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6f20) returned 1 [0236.597] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0236.598] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.598] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3a5, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3a5, lpOverlapped=0x0) returned 1 [0236.598] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0236.598] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3a5, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3b0) returned 1 [0236.598] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.598] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3b0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3b0, lpOverlapped=0x0) returned 1 [0236.598] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0236.598] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0236.598] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0236.598] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0236.598] CloseHandle (hObject=0x10c) returned 1 [0236.641] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0236.646] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0236.646] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0236.646] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0236.646] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0236.647] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9c60de1e-e5fc-40f4-a487-460851a8d915}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0236.664] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9c60de1e-e5fc-40f4-a487-460851a8d915}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{9c60de1e-e5fc-40f4-a487-460851a8d915}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0236.665] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=916) returned 1 [0236.665] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=916) returned 1 [0236.665] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x272, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0236.665] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0236.666] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.666] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6f20) returned 1 [0236.666] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0236.667] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.667] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x394, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x394, lpOverlapped=0x0) returned 1 [0236.667] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0236.667] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x394, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3a0) returned 1 [0236.667] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.667] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3a0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3a0, lpOverlapped=0x0) returned 1 [0236.667] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0236.667] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0236.667] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0236.667] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0236.667] CloseHandle (hObject=0x10c) returned 1 [0236.688] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0236.693] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0236.693] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0236.693] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0236.694] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0236.694] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9c73f5e5-7ae7-4e32-a8e8-8d23b85255bf}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0236.695] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9c73f5e5-7ae7-4e32-a8e8-8d23b85255bf}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{9c73f5e5-7ae7-4e32-a8e8-8d23b85255bf}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0236.695] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1004) returned 1 [0236.695] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1004) returned 1 [0236.695] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2ca, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0236.695] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0236.697] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.697] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0236.697] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0236.697] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.697] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3ec, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3ec, lpOverlapped=0x0) returned 1 [0236.697] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0236.697] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3ec, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3f0) returned 1 [0236.697] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.697] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3f0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3f0, lpOverlapped=0x0) returned 1 [0236.697] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0236.698] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0236.698] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0236.698] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0236.698] CloseHandle (hObject=0x10c) returned 1 [0236.719] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0236.724] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0236.724] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0236.725] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0236.725] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0236.725] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9EF86966-2F35-49BE-A9F6-398E0B844411}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0236.725] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9EF86966-2F35-49BE-A9F6-398E0B844411}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{9ef86966-2f35-49be-a9f6-398e0b844411}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0236.726] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1055) returned 1 [0236.726] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1055) returned 1 [0236.726] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2fd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0236.726] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0236.728] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.728] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6f20) returned 1 [0236.728] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0236.728] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.728] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x41f, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x41f, lpOverlapped=0x0) returned 1 [0236.728] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0236.728] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x41f, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x420) returned 1 [0236.728] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.728] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x420, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x420, lpOverlapped=0x0) returned 1 [0236.728] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0236.729] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0236.729] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0236.729] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0236.729] CloseHandle (hObject=0x10c) returned 1 [0236.749] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0236.755] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0236.755] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0236.755] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0236.755] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0236.755] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9fe63afd-59cf-4419-9775-abcc3849f861}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0236.756] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9fe63afd-59cf-4419-9775-abcc3849f861}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{9fe63afd-59cf-4419-9775-abcc3849f861}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0236.757] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1119) returned 1 [0236.757] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1119) returned 1 [0236.757] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x33d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0236.757] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0236.759] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.759] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0236.759] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0236.759] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.759] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x45f, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x45f, lpOverlapped=0x0) returned 1 [0236.759] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0236.759] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x45f, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x460) returned 1 [0236.759] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.759] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x460, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x460, lpOverlapped=0x0) returned 1 [0236.759] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0236.759] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0236.759] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0236.760] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0236.760] CloseHandle (hObject=0x10c) returned 1 [0236.781] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0236.786] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0236.786] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0236.786] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0236.786] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0236.786] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{a0275511-0e86-4eca-97c2-ecd8f1221d08}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0236.787] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{a0275511-0e86-4eca-97c2-ecd8f1221d08}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{a0275511-0e86-4eca-97c2-ecd8f1221d08}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0236.788] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=941) returned 1 [0236.788] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=941) returned 1 [0236.788] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x28b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0236.788] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0236.789] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.789] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae66d0) returned 1 [0236.789] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0236.790] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.790] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3ad, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3ad, lpOverlapped=0x0) returned 1 [0236.790] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0236.790] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3ad, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3b0) returned 1 [0236.790] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.790] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3b0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3b0, lpOverlapped=0x0) returned 1 [0236.790] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0236.790] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0236.790] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0236.790] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0236.790] CloseHandle (hObject=0x10c) returned 1 [0236.811] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0236.817] CryptDestroyKey (hKey=0x665aae66d0) returned 1 [0236.817] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0236.817] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0236.817] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0236.818] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{A10DFF38-B2D2-44AC-952B-A2B5DC5D0C9F}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0236.818] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{A10DFF38-B2D2-44AC-952B-A2B5DC5D0C9F}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{a10dff38-b2d2-44ac-952b-a2b5dc5d0c9f}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0236.819] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1067) returned 1 [0236.819] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1067) returned 1 [0236.819] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x309, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0236.819] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0236.820] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.821] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0236.821] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0236.821] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.821] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x42b, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x42b, lpOverlapped=0x0) returned 1 [0236.821] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0236.821] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x42b, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x430) returned 1 [0236.821] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.821] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x430, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x430, lpOverlapped=0x0) returned 1 [0236.821] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0236.821] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0236.821] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0236.821] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0236.822] CloseHandle (hObject=0x10c) returned 1 [0236.843] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0236.848] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0236.848] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0236.848] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0236.848] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0236.849] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{a3dd4f92-658a-410f-84fd-6fbbbef2fffe}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0236.850] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{a3dd4f92-658a-410f-84fd-6fbbbef2fffe}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{a3dd4f92-658a-410f-84fd-6fbbbef2fffe}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0236.850] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=931) returned 1 [0236.851] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=931) returned 1 [0236.851] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x281, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0236.851] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0236.852] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.852] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0236.852] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0236.853] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.853] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3a3, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3a3, lpOverlapped=0x0) returned 1 [0236.853] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0236.853] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3a3, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3b0) returned 1 [0236.853] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.853] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3b0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3b0, lpOverlapped=0x0) returned 1 [0236.853] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0236.853] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0236.853] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0236.853] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0236.853] CloseHandle (hObject=0x10c) returned 1 [0236.875] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0236.880] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0236.880] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0236.880] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0236.881] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0236.881] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{A42E8D99-83E6-4D12-B403-F46059D02CF0}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0236.881] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{A42E8D99-83E6-4D12-B403-F46059D02CF0}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{a42e8d99-83e6-4d12-b403-f46059d02cf0}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0236.882] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1258) returned 1 [0236.882] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1258) returned 1 [0236.882] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3c8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0236.882] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0236.884] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.884] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae70e0) returned 1 [0236.884] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0236.884] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.884] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4ea, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4ea, lpOverlapped=0x0) returned 1 [0236.884] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0236.884] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4ea, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4f0) returned 1 [0236.884] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.884] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4f0, lpOverlapped=0x0) returned 1 [0236.884] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0236.884] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0236.884] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0236.885] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0236.885] CloseHandle (hObject=0x10c) returned 1 [0236.907] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0236.912] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0236.912] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0236.912] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0236.912] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0236.913] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{A7160DE5-E591-4D98-9BB0-0CAC99D5F2D5}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0236.913] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{A7160DE5-E591-4D98-9BB0-0CAC99D5F2D5}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{a7160de5-e591-4d98-9bb0-0cac99d5f2d5}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0236.914] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=979) returned 1 [0236.914] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=979) returned 1 [0236.914] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2b1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0236.914] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0236.915] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.915] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0236.915] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0236.916] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.916] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3d3, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3d3, lpOverlapped=0x0) returned 1 [0236.916] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0236.916] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3d3, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3e0) returned 1 [0236.916] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.916] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3e0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3e0, lpOverlapped=0x0) returned 1 [0236.916] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0236.916] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0236.916] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0236.916] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0236.916] CloseHandle (hObject=0x10c) returned 1 [0236.939] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0236.944] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0236.944] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0236.944] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0236.944] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0236.944] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{A73DCDB5-E233-4FC2-8083-6E431939002A}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0236.945] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{A73DCDB5-E233-4FC2-8083-6E431939002A}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{a73dcdb5-e233-4fc2-8083-6e431939002a}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0236.946] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1149) returned 1 [0236.946] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1149) returned 1 [0236.946] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x35b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0236.946] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0236.947] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.947] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0236.947] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0236.947] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.947] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x47d, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x47d, lpOverlapped=0x0) returned 1 [0236.948] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0236.948] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x47d, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x480) returned 1 [0236.948] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.948] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x480, lpOverlapped=0x0) returned 1 [0236.948] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0236.948] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0236.948] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0236.948] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0236.948] CloseHandle (hObject=0x10c) returned 1 [0236.979] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0236.984] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0236.984] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0236.984] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0236.985] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0236.985] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{a8a91a66-3a7d-4424-8d24-04e180695c7a}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0236.986] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{a8a91a66-3a7d-4424-8d24-04e180695c7a}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{a8a91a66-3a7d-4424-8d24-04e180695c7a}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0236.987] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=951) returned 1 [0236.987] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=951) returned 1 [0236.987] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x295, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0236.987] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0236.988] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.989] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae65f0) returned 1 [0236.989] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0236.989] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.989] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3b7, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3b7, lpOverlapped=0x0) returned 1 [0236.989] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0236.989] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3b7, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3c0) returned 1 [0236.989] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0236.989] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3c0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3c0, lpOverlapped=0x0) returned 1 [0236.990] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0236.990] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0236.990] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0236.990] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0236.990] CloseHandle (hObject=0x10c) returned 1 [0237.012] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0237.017] CryptDestroyKey (hKey=0x665aae65f0) returned 1 [0237.017] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0237.017] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0237.017] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0237.018] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{AA9D2032-E8FB-4f8c-99C9-09F539AEBD59}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0237.018] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{AA9D2032-E8FB-4f8c-99C9-09F539AEBD59}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{aa9d2032-e8fb-4f8c-99c9-09f539aebd59}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0237.019] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=957) returned 1 [0237.019] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=957) returned 1 [0237.019] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x29b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0237.019] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0237.021] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.021] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6f20) returned 1 [0237.021] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0237.021] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.021] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3bd, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3bd, lpOverlapped=0x0) returned 1 [0237.021] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0237.021] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3bd, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3c0) returned 1 [0237.021] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.021] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3c0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3c0, lpOverlapped=0x0) returned 1 [0237.022] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0237.022] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0237.022] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0237.022] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0237.022] CloseHandle (hObject=0x10c) returned 1 [0237.043] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0237.049] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0237.049] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0237.049] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0237.049] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0237.049] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{AACA901F-E74F-4894-B074-F55059532853}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0237.050] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{AACA901F-E74F-4894-B074-F55059532853}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{aaca901f-e74f-4894-b074-f55059532853}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0237.051] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1068) returned 1 [0237.051] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1068) returned 1 [0237.051] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x30a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0237.051] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0237.052] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.052] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6f20) returned 1 [0237.052] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0237.052] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.053] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x42c, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x42c, lpOverlapped=0x0) returned 1 [0237.053] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0237.053] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x42c, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x430) returned 1 [0237.053] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.053] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x430, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x430, lpOverlapped=0x0) returned 1 [0237.053] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0237.053] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0237.053] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0237.053] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0237.053] CloseHandle (hObject=0x10c) returned 1 [0237.074] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0237.080] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0237.080] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0237.080] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0237.080] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0237.080] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{AAF384A9-978C-41B6-B394-0C40C2EAAA4B}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0237.081] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{AAF384A9-978C-41B6-B394-0C40C2EAAA4B}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{aaf384a9-978c-41b6-b394-0c40c2eaaa4b}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0237.082] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=964) returned 1 [0237.082] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=964) returned 1 [0237.082] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2a2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0237.082] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0237.083] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.083] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6820) returned 1 [0237.083] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0237.083] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.083] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3c4, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3c4, lpOverlapped=0x0) returned 1 [0237.084] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0237.084] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3c4, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3d0) returned 1 [0237.084] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.084] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3d0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3d0, lpOverlapped=0x0) returned 1 [0237.084] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0237.084] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0237.084] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0237.084] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0237.084] CloseHandle (hObject=0x10c) returned 1 [0237.105] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0237.111] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0237.111] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0237.111] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0237.111] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0237.111] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{ABB4509D-9043-4EF2-8796-E4646ECF951D}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0237.112] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{ABB4509D-9043-4EF2-8796-E4646ECF951D}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{abb4509d-9043-4ef2-8796-e4646ecf951d}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0237.113] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=949) returned 1 [0237.113] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=949) returned 1 [0237.113] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x293, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0237.113] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0237.114] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.114] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae65f0) returned 1 [0237.114] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0237.114] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.115] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3b5, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3b5, lpOverlapped=0x0) returned 1 [0237.115] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0237.115] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3b5, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3c0) returned 1 [0237.115] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.115] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3c0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3c0, lpOverlapped=0x0) returned 1 [0237.115] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0237.115] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0237.115] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0237.115] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0237.115] CloseHandle (hObject=0x10c) returned 1 [0237.136] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0237.141] CryptDestroyKey (hKey=0x665aae65f0) returned 1 [0237.141] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0237.141] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0237.141] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0237.142] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{AF3BA0EC-B240-401E-B4EE-3E89F275205B}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0237.142] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{AF3BA0EC-B240-401E-B4EE-3E89F275205B}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{af3ba0ec-b240-401e-b4ee-3e89f275205b}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0237.143] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1066) returned 1 [0237.143] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1066) returned 1 [0237.143] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x308, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0237.143] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0237.145] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.145] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0237.145] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0237.146] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.146] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x42a, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x42a, lpOverlapped=0x0) returned 1 [0237.146] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0237.146] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x42a, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x430) returned 1 [0237.146] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.146] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x430, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x430, lpOverlapped=0x0) returned 1 [0237.146] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0237.146] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0237.146] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0237.146] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0237.146] CloseHandle (hObject=0x10c) returned 1 [0237.167] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0237.172] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0237.172] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0237.172] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0237.172] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0237.173] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B0B4886C-4B31-4824-ADCD-0DAF5C8BAFF6}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0237.173] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B0B4886C-4B31-4824-ADCD-0DAF5C8BAFF6}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b0b4886c-4b31-4824-adcd-0daf5c8baff6}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0237.174] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=941) returned 1 [0237.174] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=941) returned 1 [0237.174] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x28b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0237.174] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0237.175] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.175] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae66d0) returned 1 [0237.176] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0237.176] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.176] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3ad, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3ad, lpOverlapped=0x0) returned 1 [0237.176] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0237.176] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3ad, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3b0) returned 1 [0237.176] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.176] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3b0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3b0, lpOverlapped=0x0) returned 1 [0237.176] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0237.176] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0237.176] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0237.176] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0237.177] CloseHandle (hObject=0x10c) returned 1 [0237.197] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0237.202] CryptDestroyKey (hKey=0x665aae66d0) returned 1 [0237.202] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0237.202] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0237.206] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0237.206] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B1207959-FFBF-4417-A6B1-4BF0EDA51F5A}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0237.206] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B1207959-FFBF-4417-A6B1-4BF0EDA51F5A}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b1207959-ffbf-4417-a6b1-4bf0eda51f5a}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0237.207] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=914) returned 1 [0237.207] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=914) returned 1 [0237.207] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x270, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0237.207] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0237.209] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.209] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0237.209] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0237.209] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.209] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x392, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x392, lpOverlapped=0x0) returned 1 [0237.209] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0237.209] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x392, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3a0) returned 1 [0237.209] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.209] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3a0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3a0, lpOverlapped=0x0) returned 1 [0237.209] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0237.209] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0237.209] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0237.210] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0237.210] CloseHandle (hObject=0x10c) returned 1 [0237.230] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0237.289] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0237.289] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0237.289] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0237.289] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0237.289] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B123B0AB-2E4E-4325-804A-32F99784DA0B}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0237.290] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B123B0AB-2E4E-4325-804A-32F99784DA0B}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b123b0ab-2e4e-4325-804a-32f99784da0b}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0237.290] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=999) returned 1 [0237.291] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=999) returned 1 [0237.291] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2c5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0237.291] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0237.292] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.292] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0237.292] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0237.292] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.292] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3e7, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3e7, lpOverlapped=0x0) returned 1 [0237.292] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0237.293] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3e7, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3f0) returned 1 [0237.293] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.293] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3f0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3f0, lpOverlapped=0x0) returned 1 [0237.293] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0237.293] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0237.293] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0237.293] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0237.293] CloseHandle (hObject=0x10c) returned 1 [0237.314] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0237.319] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0237.319] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0237.319] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0237.319] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0237.319] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B1FE5142-DEDD-409B-BCC8-547EC08DE84E}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0237.320] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B1FE5142-DEDD-409B-BCC8-547EC08DE84E}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b1fe5142-dedd-409b-bcc8-547ec08de84e}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0237.321] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=937) returned 1 [0237.321] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=937) returned 1 [0237.321] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x287, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0237.321] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0237.322] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.322] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0237.322] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0237.323] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.323] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3a9, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3a9, lpOverlapped=0x0) returned 1 [0237.323] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0237.323] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3a9, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3b0) returned 1 [0237.323] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.323] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3b0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3b0, lpOverlapped=0x0) returned 1 [0237.323] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0237.323] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0237.323] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0237.323] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0237.323] CloseHandle (hObject=0x10c) returned 1 [0237.343] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0237.348] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0237.348] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0237.349] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0237.349] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0237.349] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{b2c761c6-29bc-4f19-9251-e6195265baf1}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0237.350] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{b2c761c6-29bc-4f19-9251-e6195265baf1}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b2c761c6-29bc-4f19-9251-e6195265baf1}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0237.350] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=923) returned 1 [0237.350] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=923) returned 1 [0237.350] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x279, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0237.350] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0237.352] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.352] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0237.352] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0237.352] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.352] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x39b, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x39b, lpOverlapped=0x0) returned 1 [0237.352] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0237.352] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x39b, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3a0) returned 1 [0237.352] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.352] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3a0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3a0, lpOverlapped=0x0) returned 1 [0237.353] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0237.353] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0237.353] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0237.353] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0237.353] CloseHandle (hObject=0x10c) returned 1 [0237.372] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0237.378] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0237.378] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0237.378] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0237.378] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0237.378] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B3C577FA-7C51-4259-A1C4-088BD0B0932E}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0237.379] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B3C577FA-7C51-4259-A1C4-088BD0B0932E}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b3c577fa-7c51-4259-a1c4-088bd0b0932e}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0237.380] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=967) returned 1 [0237.380] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=967) returned 1 [0237.380] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2a5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0237.380] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0237.381] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.381] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae70e0) returned 1 [0237.381] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0237.381] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.381] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3c7, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3c7, lpOverlapped=0x0) returned 1 [0237.382] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0237.382] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3c7, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3d0) returned 1 [0237.382] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.382] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3d0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3d0, lpOverlapped=0x0) returned 1 [0237.382] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0237.382] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0237.382] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0237.382] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0237.382] CloseHandle (hObject=0x10c) returned 1 [0237.402] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0237.408] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0237.408] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0237.409] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0237.409] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0237.409] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B6B2793F-F4B9-49FD-B578-212C3C020892}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0237.410] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B6B2793F-F4B9-49FD-B578-212C3C020892}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b6b2793f-f4b9-49fd-b578-212c3c020892}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0237.410] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1089) returned 1 [0237.410] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1089) returned 1 [0237.410] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x31f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0237.410] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0237.412] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.412] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae65f0) returned 1 [0237.412] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0237.412] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.412] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x441, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x441, lpOverlapped=0x0) returned 1 [0237.413] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0237.413] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x441, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x450) returned 1 [0237.413] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.413] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x450, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x450, lpOverlapped=0x0) returned 1 [0237.413] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0237.413] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0237.413] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0237.413] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0237.413] CloseHandle (hObject=0x10c) returned 1 [0237.434] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0237.440] CryptDestroyKey (hKey=0x665aae65f0) returned 1 [0237.440] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0237.440] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0237.440] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0237.440] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B7622F10-9A47-4BF2-B6EF-2C20B4510254}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0237.441] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B7622F10-9A47-4BF2-B6EF-2C20B4510254}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b7622f10-9a47-4bf2-b6ef-2c20b4510254}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0237.441] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=963) returned 1 [0237.442] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=963) returned 1 [0237.442] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2a1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0237.442] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0237.443] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.443] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae7150) returned 1 [0237.443] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0237.443] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.443] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3c3, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3c3, lpOverlapped=0x0) returned 1 [0237.444] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0237.444] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3c3, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3d0) returned 1 [0237.444] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.444] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3d0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3d0, lpOverlapped=0x0) returned 1 [0237.444] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0237.444] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0237.444] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0237.444] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0237.444] CloseHandle (hObject=0x10c) returned 1 [0237.466] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0237.472] CryptDestroyKey (hKey=0x665aae7150) returned 1 [0237.472] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0237.472] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0237.472] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0237.472] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B896819B-CF73-4da0-8F59-6E744A6BCD5F}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0237.473] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B896819B-CF73-4da0-8F59-6E744A6BCD5F}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b896819b-cf73-4da0-8f59-6e744a6bcd5f}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0237.474] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=998) returned 1 [0237.474] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=998) returned 1 [0237.474] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2c4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0237.474] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0237.477] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.477] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0237.477] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0237.477] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.477] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3e6, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3e6, lpOverlapped=0x0) returned 1 [0237.477] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0237.477] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3e6, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3f0) returned 1 [0237.477] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.477] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3f0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3f0, lpOverlapped=0x0) returned 1 [0237.478] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0237.478] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0237.478] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0237.478] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0237.478] CloseHandle (hObject=0x10c) returned 1 [0237.500] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0237.505] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0237.505] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0237.505] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0237.505] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0237.506] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B935C3B6-969C-4FC2-B96C-7F06794471AF}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0237.506] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B935C3B6-969C-4FC2-B96C-7F06794471AF}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b935c3b6-969c-4fc2-b96c-7f06794471af}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0237.507] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1022) returned 1 [0237.507] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1022) returned 1 [0237.507] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2dc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0237.507] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0237.510] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.510] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae70e0) returned 1 [0237.510] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0237.510] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.510] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3fe, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3fe, lpOverlapped=0x0) returned 1 [0237.510] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0237.511] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3fe, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x400) returned 1 [0237.511] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.511] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x400, lpOverlapped=0x0) returned 1 [0237.511] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0237.511] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0237.511] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0237.511] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0237.511] CloseHandle (hObject=0x10c) returned 1 [0237.533] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0237.538] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0237.538] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0237.538] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0237.538] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0237.539] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B98AD935-426A-482B-9383-ED7D8BB99A6F}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0237.539] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B98AD935-426A-482B-9383-ED7D8BB99A6F}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b98ad935-426a-482b-9383-ed7d8bb99a6f}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0237.540] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=990) returned 1 [0237.540] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=990) returned 1 [0237.540] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2bc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0237.540] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0237.542] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.542] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0237.542] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0237.542] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.543] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3de, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3de, lpOverlapped=0x0) returned 1 [0237.543] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0237.543] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3de, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3e0) returned 1 [0237.543] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.543] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3e0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3e0, lpOverlapped=0x0) returned 1 [0237.543] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0237.543] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0237.543] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0237.543] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0237.543] CloseHandle (hObject=0x10c) returned 1 [0237.565] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0237.570] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0237.570] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0237.570] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0237.570] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0237.571] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{BABB24A6-0242-4AE5-BD83-C5816526F63D}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0237.571] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{BABB24A6-0242-4AE5-BD83-C5816526F63D}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{babb24a6-0242-4ae5-bd83-c5816526f63d}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0237.572] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1149) returned 1 [0237.572] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1149) returned 1 [0237.572] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x35b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0237.572] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0237.573] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.573] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6820) returned 1 [0237.574] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0237.574] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.574] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x47d, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x47d, lpOverlapped=0x0) returned 1 [0237.574] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0237.574] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x47d, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x480) returned 1 [0237.574] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.574] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x480, lpOverlapped=0x0) returned 1 [0237.574] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0237.574] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0237.574] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0237.574] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0237.575] CloseHandle (hObject=0x10c) returned 1 [0237.596] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0237.601] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0237.601] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0237.602] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0237.602] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0237.602] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{bb06c0e4-d293-4f75-8a90-cb05b6477eee}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0237.603] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{bb06c0e4-d293-4f75-8a90-cb05b6477eee}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{bb06c0e4-d293-4f75-8a90-cb05b6477eee}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0237.603] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=919) returned 1 [0237.604] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=919) returned 1 [0237.604] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x275, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0237.604] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0237.607] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.607] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0237.607] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0237.608] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.608] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x397, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x397, lpOverlapped=0x0) returned 1 [0237.608] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0237.608] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x397, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3a0) returned 1 [0237.608] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.608] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3a0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3a0, lpOverlapped=0x0) returned 1 [0237.608] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0237.608] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0237.608] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0237.608] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0237.609] CloseHandle (hObject=0x10c) returned 1 [0237.630] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0237.635] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0237.635] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0237.635] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0237.636] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0237.636] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{bb64f8a7-bee7-4e1a-ab8d-7d8273f7fdb6}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0237.637] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{bb64f8a7-bee7-4e1a-ab8d-7d8273f7fdb6}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{bb64f8a7-bee7-4e1a-ab8d-7d8273f7fdb6}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0237.637] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=948) returned 1 [0237.637] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=948) returned 1 [0237.637] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x292, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0237.637] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0237.639] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.639] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae7150) returned 1 [0237.639] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0237.639] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.639] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3b4, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3b4, lpOverlapped=0x0) returned 1 [0237.639] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0237.639] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3b4, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3c0) returned 1 [0237.639] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.639] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3c0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3c0, lpOverlapped=0x0) returned 1 [0237.640] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0237.640] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0237.640] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0237.640] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0237.640] CloseHandle (hObject=0x10c) returned 1 [0237.662] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0237.667] CryptDestroyKey (hKey=0x665aae7150) returned 1 [0237.667] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0237.667] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0237.667] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0237.667] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{BD256B65-94BE-4194-84BF-41D50D0EF26E}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0237.668] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{BD256B65-94BE-4194-84BF-41D50D0EF26E}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{bd256b65-94be-4194-84bf-41d50d0ef26e}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0237.669] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=980) returned 1 [0237.669] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=980) returned 1 [0237.669] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2b2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0237.669] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0237.672] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.672] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae65f0) returned 1 [0237.672] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0237.673] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.673] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3d4, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3d4, lpOverlapped=0x0) returned 1 [0237.673] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0237.673] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3d4, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3e0) returned 1 [0237.673] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.673] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3e0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3e0, lpOverlapped=0x0) returned 1 [0237.673] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0237.673] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0237.673] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0237.673] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0237.673] CloseHandle (hObject=0x10c) returned 1 [0237.695] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0237.700] CryptDestroyKey (hKey=0x665aae65f0) returned 1 [0237.700] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0237.700] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0237.700] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0237.700] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{bd84b380-8ca2-1069-ab1d-08000948f534}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0237.701] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{bd84b380-8ca2-1069-ab1d-08000948f534}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{bd84b380-8ca2-1069-ab1d-08000948f534}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0237.702] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=885) returned 1 [0237.702] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=885) returned 1 [0237.702] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x253, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0237.702] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0237.703] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.703] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae70e0) returned 1 [0237.703] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0237.704] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.704] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x375, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x375, lpOverlapped=0x0) returned 1 [0237.704] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0237.704] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x375, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x380) returned 1 [0237.704] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.704] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x380, lpOverlapped=0x0) returned 1 [0237.704] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0237.704] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0237.704] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0237.704] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0237.705] CloseHandle (hObject=0x10c) returned 1 [0237.726] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0237.731] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0237.731] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0237.731] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0237.731] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0237.731] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{be122a0e-4503-11da-8bde-f66bad1e3f3a}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0237.732] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{be122a0e-4503-11da-8bde-f66bad1e3f3a}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{be122a0e-4503-11da-8bde-f66bad1e3f3a}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0237.733] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1152) returned 1 [0237.733] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1152) returned 1 [0237.733] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x35e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0237.733] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0237.737] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.737] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0237.737] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0237.738] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.738] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x480, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x480, lpOverlapped=0x0) returned 1 [0237.738] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0237.738] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x480, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x490) returned 1 [0237.738] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.738] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x490, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x490, lpOverlapped=0x0) returned 1 [0237.738] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0237.738] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0237.738] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0237.738] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0237.738] CloseHandle (hObject=0x10c) returned 1 [0237.760] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0237.765] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0237.765] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0237.765] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0237.765] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0237.765] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{BEC9E135-14C1-4e00-B5C8-899F26833A5A}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0237.766] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{BEC9E135-14C1-4e00-B5C8-899F26833A5A}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{bec9e135-14c1-4e00-b5c8-899f26833a5a}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0237.767] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=938) returned 1 [0237.767] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=938) returned 1 [0237.767] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x288, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0237.767] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0237.768] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.768] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0237.768] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0237.769] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.769] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3aa, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3aa, lpOverlapped=0x0) returned 1 [0237.769] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0237.769] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3aa, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3b0) returned 1 [0237.769] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.769] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3b0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3b0, lpOverlapped=0x0) returned 1 [0237.769] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0237.769] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0237.769] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0237.769] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0237.770] CloseHandle (hObject=0x10c) returned 1 [0237.790] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0237.795] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0237.795] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0237.796] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0237.796] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0237.796] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{bf782cc9-5a52-4a17-806c-2a894ffeeac5}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0237.796] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{bf782cc9-5a52-4a17-806c-2a894ffeeac5}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{bf782cc9-5a52-4a17-806c-2a894ffeeac5}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0237.797] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=948) returned 1 [0237.798] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=948) returned 1 [0237.798] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x292, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0237.798] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0237.802] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.802] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0237.802] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0237.802] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.802] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3b4, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3b4, lpOverlapped=0x0) returned 1 [0237.802] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0237.802] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3b4, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3c0) returned 1 [0237.802] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.802] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3c0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3c0, lpOverlapped=0x0) returned 1 [0237.803] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0237.803] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0237.803] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0237.803] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0237.803] CloseHandle (hObject=0x10c) returned 1 [0237.824] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0237.829] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0237.829] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0237.830] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0237.832] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0237.832] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{C16A18A2-DC4F-4B7D-92F1-14C430AD17DC}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0237.833] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{C16A18A2-DC4F-4B7D-92F1-14C430AD17DC}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{c16a18a2-dc4f-4b7d-92f1-14c430ad17dc}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0237.833] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=947) returned 1 [0237.834] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=947) returned 1 [0237.834] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x291, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0237.834] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0237.835] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.835] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0237.835] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0237.835] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.835] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3b3, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3b3, lpOverlapped=0x0) returned 1 [0237.836] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0237.836] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3b3, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3c0) returned 1 [0237.836] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.836] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3c0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3c0, lpOverlapped=0x0) returned 1 [0237.836] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0237.836] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0237.836] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0237.836] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0237.836] CloseHandle (hObject=0x10c) returned 1 [0237.857] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0237.862] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0237.862] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0237.862] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0237.862] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0237.863] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{C3915CF9-A3D9-4EFD-B209-62C05793EE0F}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0237.863] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{C3915CF9-A3D9-4EFD-B209-62C05793EE0F}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{c3915cf9-a3d9-4efd-b209-62c05793ee0f}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0237.864] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=979) returned 1 [0237.864] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=979) returned 1 [0237.864] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2b1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0237.864] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0237.867] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.867] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6f20) returned 1 [0237.867] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0237.867] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.867] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3d3, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3d3, lpOverlapped=0x0) returned 1 [0237.867] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0237.867] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3d3, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3e0) returned 1 [0237.868] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.868] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3e0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3e0, lpOverlapped=0x0) returned 1 [0237.868] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0237.868] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0237.868] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0237.868] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0237.868] CloseHandle (hObject=0x10c) returned 1 [0237.888] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0237.894] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0237.894] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0237.894] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0237.894] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0237.894] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{C3F521C1-249F-48FD-9D9D-731EA4568776}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0237.895] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{C3F521C1-249F-48FD-9D9D-731EA4568776}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{c3f521c1-249f-48fd-9d9d-731ea4568776}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0237.895] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1022) returned 1 [0237.895] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1022) returned 1 [0237.895] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2dc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0237.895] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0237.897] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.897] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0237.897] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0237.897] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.897] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3fe, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3fe, lpOverlapped=0x0) returned 1 [0237.897] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0237.897] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3fe, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x400) returned 1 [0237.897] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.897] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x400, lpOverlapped=0x0) returned 1 [0237.898] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0237.898] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0237.898] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0237.898] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0237.898] CloseHandle (hObject=0x10c) returned 1 [0237.918] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0237.923] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0237.923] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0237.924] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0237.924] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0237.924] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{C5361E07-6AA3-4453-81BC-93E8F85EABED}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0237.925] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{C5361E07-6AA3-4453-81BC-93E8F85EABED}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{c5361e07-6aa3-4453-81bc-93e8f85eabed}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0237.925] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=992) returned 1 [0237.925] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=992) returned 1 [0237.925] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2be, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0237.926] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0237.927] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.927] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae7150) returned 1 [0237.927] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0237.927] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.927] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3e0, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3e0, lpOverlapped=0x0) returned 1 [0237.927] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0237.927] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3e0, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3f0) returned 1 [0237.927] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.927] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3f0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3f0, lpOverlapped=0x0) returned 1 [0237.928] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0237.928] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0237.928] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0237.928] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0237.928] CloseHandle (hObject=0x10c) returned 1 [0237.948] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0237.953] CryptDestroyKey (hKey=0x665aae7150) returned 1 [0237.953] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0237.954] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0237.954] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0237.954] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{c555438b-3c23-4769-a71f-b6d3d9b6053a}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0237.955] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{c555438b-3c23-4769-a71f-b6d3d9b6053a}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{c555438b-3c23-4769-a71f-b6d3d9b6053a}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0237.955] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=911) returned 1 [0237.955] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=911) returned 1 [0237.955] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x26d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0237.955] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0237.964] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.964] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0237.964] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0237.965] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.965] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x38f, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x38f, lpOverlapped=0x0) returned 1 [0237.965] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0237.965] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x38f, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x390) returned 1 [0237.965] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.965] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x390, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x390, lpOverlapped=0x0) returned 1 [0237.965] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0237.965] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0237.965] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0237.965] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0237.965] CloseHandle (hObject=0x10c) returned 1 [0237.986] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0237.991] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0237.991] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0237.992] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0237.992] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0237.992] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{c58c4893-3be0-4b45-abb5-a63e4b8c8651}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0237.993] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{c58c4893-3be0-4b45-abb5-a63e4b8c8651}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{c58c4893-3be0-4b45-abb5-a63e4b8c8651}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0237.993] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=920) returned 1 [0237.993] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=920) returned 1 [0237.993] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x276, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0237.993] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0237.998] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.998] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0237.998] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0237.998] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.998] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x398, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x398, lpOverlapped=0x0) returned 1 [0237.998] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0237.998] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x398, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3a0) returned 1 [0237.998] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0237.998] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3a0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3a0, lpOverlapped=0x0) returned 1 [0237.998] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0237.999] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0237.999] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0237.999] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0237.999] CloseHandle (hObject=0x10c) returned 1 [0238.018] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0238.023] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0238.023] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0238.024] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0238.024] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0238.024] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{C5AE651D-D027-4D11-8125-595B9933C78B}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0238.025] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{C5AE651D-D027-4D11-8125-595B9933C78B}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{c5ae651d-d027-4d11-8125-595b9933c78b}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0238.025] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1030) returned 1 [0238.025] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1030) returned 1 [0238.025] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2e4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0238.025] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0238.027] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.027] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6820) returned 1 [0238.027] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0238.027] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.027] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x406, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x406, lpOverlapped=0x0) returned 1 [0238.027] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0238.027] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x406, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x410) returned 1 [0238.027] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.027] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x410, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x410, lpOverlapped=0x0) returned 1 [0238.028] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0238.028] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0238.028] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0238.028] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0238.028] CloseHandle (hObject=0x10c) returned 1 [0238.048] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0238.053] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0238.053] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0238.054] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0238.054] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0238.054] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{C7C81DAD-835C-45B0-9632-60F3EB5D55AC}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0238.054] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{C7C81DAD-835C-45B0-9632-60F3EB5D55AC}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{c7c81dad-835c-45b0-9632-60f3eb5d55ac}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0238.055] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=988) returned 1 [0238.055] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=988) returned 1 [0238.055] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2ba, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0238.055] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0238.057] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.057] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6f20) returned 1 [0238.057] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0238.057] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.057] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3dc, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3dc, lpOverlapped=0x0) returned 1 [0238.057] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0238.057] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3dc, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3e0) returned 1 [0238.057] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.057] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3e0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3e0, lpOverlapped=0x0) returned 1 [0238.057] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0238.057] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0238.057] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0238.058] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0238.058] CloseHandle (hObject=0x10c) returned 1 [0238.079] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0238.084] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0238.084] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0238.085] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0238.085] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0238.085] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{C86B1923-8E1F-414B-83DB-94B09BA73E15}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0238.086] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{C86B1923-8E1F-414B-83DB-94B09BA73E15}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{c86b1923-8e1f-414b-83db-94b09ba73e15}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0238.086] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=998) returned 1 [0238.086] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=998) returned 1 [0238.086] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2c4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0238.086] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0238.088] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.088] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0238.088] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0238.088] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.088] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3e6, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3e6, lpOverlapped=0x0) returned 1 [0238.088] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0238.088] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3e6, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3f0) returned 1 [0238.088] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.088] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3f0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3f0, lpOverlapped=0x0) returned 1 [0238.088] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0238.089] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0238.089] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0238.089] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0238.089] CloseHandle (hObject=0x10c) returned 1 [0238.111] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0238.116] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0238.116] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0238.116] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0238.116] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0238.116] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{CD2A5953-36A2-427D-B762-3610F37A5D89}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0238.117] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{CD2A5953-36A2-427D-B762-3610F37A5D89}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{cd2a5953-36a2-427d-b762-3610f37a5d89}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0238.118] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1014) returned 1 [0238.118] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1014) returned 1 [0238.118] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2d4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0238.118] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0238.119] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.119] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae66d0) returned 1 [0238.120] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0238.120] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.120] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3f6, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3f6, lpOverlapped=0x0) returned 1 [0238.120] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0238.120] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3f6, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x400) returned 1 [0238.120] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.120] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x400, lpOverlapped=0x0) returned 1 [0238.120] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0238.120] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0238.120] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0238.121] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0238.121] CloseHandle (hObject=0x10c) returned 1 [0238.143] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0238.148] CryptDestroyKey (hKey=0x665aae66d0) returned 1 [0238.148] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0238.148] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0238.148] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0238.148] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{CD95D0E3-6B3A-495B-9FDA-57FAD586304D}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0238.149] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{CD95D0E3-6B3A-495B-9FDA-57FAD586304D}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{cd95d0e3-6b3a-495b-9fda-57fad586304d}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0238.150] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=961) returned 1 [0238.150] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=961) returned 1 [0238.150] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x29f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0238.150] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0238.151] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.151] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0238.151] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0238.152] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.152] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3c1, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3c1, lpOverlapped=0x0) returned 1 [0238.152] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0238.152] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3c1, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3d0) returned 1 [0238.152] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.152] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3d0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3d0, lpOverlapped=0x0) returned 1 [0238.152] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0238.152] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0238.152] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0238.152] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0238.152] CloseHandle (hObject=0x10c) returned 1 [0238.174] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0238.179] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0238.179] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0238.180] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0238.180] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0238.180] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{CE4F7091-EEC0-400E-A019-38503D525293}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0238.181] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{CE4F7091-EEC0-400E-A019-38503D525293}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ce4f7091-eec0-400e-a019-38503d525293}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0238.181] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=981) returned 1 [0238.181] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=981) returned 1 [0238.181] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2b3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0238.182] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0238.183] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.183] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0238.183] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0238.183] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.183] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3d5, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3d5, lpOverlapped=0x0) returned 1 [0238.183] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0238.183] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3d5, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3e0) returned 1 [0238.183] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.183] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3e0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3e0, lpOverlapped=0x0) returned 1 [0238.184] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0238.184] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0238.184] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0238.184] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0238.184] CloseHandle (hObject=0x10c) returned 1 [0238.206] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0238.211] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0238.211] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0238.211] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0238.211] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0238.211] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{CF081448-68EC-4969-9F8B-BB23B329B712}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0238.212] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{CF081448-68EC-4969-9F8B-BB23B329B712}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{cf081448-68ec-4969-9f8b-bb23b329b712}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0238.213] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=978) returned 1 [0238.213] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=978) returned 1 [0238.213] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2b0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0238.213] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0238.214] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.214] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0238.214] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0238.215] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.215] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3d2, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3d2, lpOverlapped=0x0) returned 1 [0238.215] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0238.215] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3d2, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3e0) returned 1 [0238.215] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.215] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3e0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3e0, lpOverlapped=0x0) returned 1 [0238.215] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0238.215] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0238.215] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0238.215] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0238.216] CloseHandle (hObject=0x10c) returned 1 [0238.308] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0238.314] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0238.314] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0238.314] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0238.314] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0238.315] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{d17d1d6d-cc3f-4815-8fe3-607e7d5d10b3}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0238.315] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{d17d1d6d-cc3f-4815-8fe3-607e7d5d10b3}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d17d1d6d-cc3f-4815-8fe3-607e7d5d10b3}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0238.316] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=990) returned 1 [0238.316] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=990) returned 1 [0238.316] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2bc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0238.316] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0238.317] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.317] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6f20) returned 1 [0238.317] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0238.318] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.318] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3de, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3de, lpOverlapped=0x0) returned 1 [0238.318] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0238.318] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3de, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3e0) returned 1 [0238.318] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.318] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3e0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3e0, lpOverlapped=0x0) returned 1 [0238.318] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0238.318] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0238.318] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0238.318] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0238.318] CloseHandle (hObject=0x10c) returned 1 [0238.339] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0238.345] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0238.345] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0238.345] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0238.345] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0238.345] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{D1AF7F5F-18C1-4143-81E5-EDAF02255883}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0238.358] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{D1AF7F5F-18C1-4143-81E5-EDAF02255883}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d1af7f5f-18c1-4143-81e5-edaf02255883}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0238.358] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=957) returned 1 [0238.358] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=957) returned 1 [0238.358] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x29b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0238.358] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0238.360] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.360] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0238.360] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0238.360] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.360] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3bd, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3bd, lpOverlapped=0x0) returned 1 [0238.360] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0238.361] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3bd, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3c0) returned 1 [0238.361] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.361] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3c0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3c0, lpOverlapped=0x0) returned 1 [0238.361] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0238.361] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0238.361] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0238.361] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0238.361] CloseHandle (hObject=0x10c) returned 1 [0238.378] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0238.382] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0238.383] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0238.383] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0238.383] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0238.383] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{d20ea4e1-3957-11d2-a40b-0c5020524153}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0238.384] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{d20ea4e1-3957-11d2-a40b-0c5020524153}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d20ea4e1-3957-11d2-a40b-0c5020524153}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0238.384] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=905) returned 1 [0238.384] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=905) returned 1 [0238.384] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x267, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0238.385] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0238.389] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.389] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae66d0) returned 1 [0238.389] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0238.389] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.389] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x389, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x389, lpOverlapped=0x0) returned 1 [0238.389] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0238.389] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x389, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x390) returned 1 [0238.389] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.389] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x390, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x390, lpOverlapped=0x0) returned 1 [0238.389] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0238.390] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0238.390] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0238.390] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0238.390] CloseHandle (hObject=0x10c) returned 1 [0238.413] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0238.418] CryptDestroyKey (hKey=0x665aae66d0) returned 1 [0238.418] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0238.418] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0238.418] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0238.418] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{D4690CFE-6A59-4BAB-BFF7-9ED0D083E798}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0238.419] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{D4690CFE-6A59-4BAB-BFF7-9ED0D083E798}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d4690cfe-6a59-4bab-bff7-9ed0d083e798}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0238.420] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1153) returned 1 [0238.420] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1153) returned 1 [0238.420] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x35f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0238.420] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0238.421] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.421] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0238.421] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0238.421] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.421] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x481, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x481, lpOverlapped=0x0) returned 1 [0238.422] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0238.422] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x481, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x490) returned 1 [0238.422] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.422] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x490, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x490, lpOverlapped=0x0) returned 1 [0238.422] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0238.422] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0238.422] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0238.422] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0238.422] CloseHandle (hObject=0x10c) returned 1 [0238.445] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0238.450] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0238.450] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0238.450] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0238.450] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0238.450] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{d555645e-d4f8-4c29-a827-d93c859c4f2a}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0238.451] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{d555645e-d4f8-4c29-a827-d93c859c4f2a}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d555645e-d4f8-4c29-a827-d93c859c4f2a}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0238.452] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=961) returned 1 [0238.452] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=961) returned 1 [0238.452] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x29f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0238.452] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0238.455] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.455] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae70e0) returned 1 [0238.455] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0238.455] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.455] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3c1, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3c1, lpOverlapped=0x0) returned 1 [0238.456] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0238.456] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3c1, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3d0) returned 1 [0238.456] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.456] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3d0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3d0, lpOverlapped=0x0) returned 1 [0238.456] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0238.456] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0238.456] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0238.456] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0238.456] CloseHandle (hObject=0x10c) returned 1 [0238.476] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0238.481] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0238.481] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0238.481] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0238.483] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0238.484] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{D5BAC999-E706-4311-9DB0-86E117B1FD25}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0238.485] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{D5BAC999-E706-4311-9DB0-86E117B1FD25}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d5bac999-e706-4311-9db0-86e117b1fd25}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0238.485] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1114) returned 1 [0238.485] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1114) returned 1 [0238.485] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x338, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0238.486] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0238.487] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.487] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0238.487] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0238.487] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.487] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x45a, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x45a, lpOverlapped=0x0) returned 1 [0238.487] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0238.487] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x45a, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x460) returned 1 [0238.487] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.488] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x460, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x460, lpOverlapped=0x0) returned 1 [0238.488] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0238.488] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0238.488] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0238.488] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0238.488] CloseHandle (hObject=0x10c) returned 1 [0238.509] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0238.514] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0238.514] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0238.514] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0238.514] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0238.515] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{D5D5B38A-0FD8-43B6-8C7D-372D84BD357D}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0238.515] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{D5D5B38A-0FD8-43B6-8C7D-372D84BD357D}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d5d5b38a-0fd8-43b6-8c7d-372d84bd357d}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0238.519] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1263) returned 1 [0238.519] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1263) returned 1 [0238.519] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3cd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0238.520] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0238.521] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.521] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0238.521] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0238.521] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.521] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4ef, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4ef, lpOverlapped=0x0) returned 1 [0238.522] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0238.522] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4ef, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4f0) returned 1 [0238.522] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.522] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4f0, lpOverlapped=0x0) returned 1 [0238.522] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0238.522] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0238.522] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0238.522] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0238.522] CloseHandle (hObject=0x10c) returned 1 [0238.544] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0238.549] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0238.549] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0238.550] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0238.550] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0238.550] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{D652F9E4-08FD-4A24-8EAC-05715188233E}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0238.551] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{D652F9E4-08FD-4A24-8EAC-05715188233E}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d652f9e4-08fd-4a24-8eac-05715188233e}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0238.551] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=921) returned 1 [0238.551] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=921) returned 1 [0238.551] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x277, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0238.551] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0238.553] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.553] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae70e0) returned 1 [0238.553] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0238.553] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.553] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x399, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x399, lpOverlapped=0x0) returned 1 [0238.553] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0238.553] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x399, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3a0) returned 1 [0238.553] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.553] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3a0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3a0, lpOverlapped=0x0) returned 1 [0238.554] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0238.554] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0238.554] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0238.554] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0238.554] CloseHandle (hObject=0x10c) returned 1 [0238.575] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0238.580] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0238.580] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0238.580] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0238.580] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0238.581] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{D679D992-D843-4D3C-BFEA-5EDF4D37EE9F}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0238.581] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{D679D992-D843-4D3C-BFEA-5EDF4D37EE9F}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d679d992-d843-4d3c-bfea-5edf4d37ee9f}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0238.582] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1012) returned 1 [0238.582] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1012) returned 1 [0238.582] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2d2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0238.582] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0238.585] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.585] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae70e0) returned 1 [0238.585] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0238.585] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.585] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3f4, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3f4, lpOverlapped=0x0) returned 1 [0238.585] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0238.585] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3f4, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x400) returned 1 [0238.585] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.585] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x400, lpOverlapped=0x0) returned 1 [0238.586] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0238.586] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0238.586] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0238.586] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0238.586] CloseHandle (hObject=0x10c) returned 1 [0238.607] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0238.613] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0238.613] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0238.613] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0238.613] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0238.613] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{D825FEC7-DA3D-456A-BEF2-20F07BA0449E}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0238.614] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{D825FEC7-DA3D-456A-BEF2-20F07BA0449E}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d825fec7-da3d-456a-bef2-20f07ba0449e}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0238.615] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1015) returned 1 [0238.615] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1015) returned 1 [0238.615] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2d5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0238.615] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0238.616] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.616] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0238.616] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0238.616] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.616] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3f7, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3f7, lpOverlapped=0x0) returned 1 [0238.616] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0238.616] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3f7, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x400) returned 1 [0238.616] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.616] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x400, lpOverlapped=0x0) returned 1 [0238.617] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0238.617] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0238.617] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0238.617] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0238.617] CloseHandle (hObject=0x10c) returned 1 [0238.638] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0238.643] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0238.643] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0238.644] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0238.644] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0238.644] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{D995F7E9-727D-4AD6-83F3-A4A753965A8F}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0238.645] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{D995F7E9-727D-4AD6-83F3-A4A753965A8F}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d995f7e9-727d-4ad6-83f3-a4a753965a8f}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0238.645] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=988) returned 1 [0238.645] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=988) returned 1 [0238.645] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2ba, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0238.645] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0238.650] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.650] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0238.650] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0238.650] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.650] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3dc, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3dc, lpOverlapped=0x0) returned 1 [0238.650] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0238.650] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3dc, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3e0) returned 1 [0238.650] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.650] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3e0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3e0, lpOverlapped=0x0) returned 1 [0238.650] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0238.650] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0238.650] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0238.651] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0238.651] CloseHandle (hObject=0x10c) returned 1 [0238.672] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0238.677] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0238.677] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0238.677] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0238.677] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0238.678] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{d9ef8727-cac2-4e60-809e-86f80a666c91}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0238.678] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{d9ef8727-cac2-4e60-809e-86f80a666c91}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d9ef8727-cac2-4e60-809e-86f80a666c91}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0238.679] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1029) returned 1 [0238.679] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1029) returned 1 [0238.679] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2e3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0238.679] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0238.681] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.681] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0238.681] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0238.681] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.681] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x405, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x405, lpOverlapped=0x0) returned 1 [0238.681] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0238.681] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x405, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x410) returned 1 [0238.681] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.681] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x410, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x410, lpOverlapped=0x0) returned 1 [0238.682] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0238.682] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0238.682] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0238.682] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0238.682] CloseHandle (hObject=0x10c) returned 1 [0238.701] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0238.705] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0238.705] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0238.706] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0238.706] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0238.706] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{da9f1e02-aa94-40bf-b3cd-030231a10acc}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0238.706] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{da9f1e02-aa94-40bf-b3cd-030231a10acc}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{da9f1e02-aa94-40bf-b3cd-030231a10acc}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0238.707] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=988) returned 1 [0238.707] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=988) returned 1 [0238.707] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2ba, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0238.707] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0238.708] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.708] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae70e0) returned 1 [0238.708] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0238.708] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.708] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3dc, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3dc, lpOverlapped=0x0) returned 1 [0238.708] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0238.708] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3dc, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3e0) returned 1 [0238.708] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.709] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3e0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3e0, lpOverlapped=0x0) returned 1 [0238.709] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0238.709] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0238.709] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0238.709] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0238.709] CloseHandle (hObject=0x10c) returned 1 [0238.726] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0238.731] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0238.731] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0238.731] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0238.731] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0238.731] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{DAF32862-EF3D-4D61-AB92-47AEB51DDC80}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0238.732] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{DAF32862-EF3D-4D61-AB92-47AEB51DDC80}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{daf32862-ef3d-4d61-ab92-47aeb51ddc80}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0238.732] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1206) returned 1 [0238.732] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1206) returned 1 [0238.733] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x394, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0238.733] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0238.734] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.734] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0238.734] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0238.734] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.734] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4b6, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4b6, lpOverlapped=0x0) returned 1 [0238.734] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0238.734] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4b6, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4c0) returned 1 [0238.734] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.734] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4c0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4c0, lpOverlapped=0x0) returned 1 [0238.735] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0238.735] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0238.735] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0238.735] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0238.735] CloseHandle (hObject=0x10c) returned 1 [0238.753] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0238.757] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0238.757] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0238.757] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0238.757] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0238.758] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{DD338333-7000-45CC-A84D-64680D6E683D}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0238.758] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{DD338333-7000-45CC-A84D-64680D6E683D}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{dd338333-7000-45cc-a84d-64680d6e683d}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0238.758] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1151) returned 1 [0238.759] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1151) returned 1 [0238.759] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x35d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0238.759] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0238.760] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.760] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0238.760] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0238.760] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.760] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x47f, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x47f, lpOverlapped=0x0) returned 1 [0238.760] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0238.760] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x47f, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x480) returned 1 [0238.760] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.760] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x480, lpOverlapped=0x0) returned 1 [0238.760] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0238.760] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0238.760] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0238.761] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0238.761] CloseHandle (hObject=0x10c) returned 1 [0238.779] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0238.783] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0238.783] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0238.783] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0238.783] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0238.784] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{DDF23EF5-6677-42C1-92CB-29BDCB7375B8}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0238.784] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{DDF23EF5-6677-42C1-92CB-29BDCB7375B8}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ddf23ef5-6677-42c1-92cb-29bdcb7375b8}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0238.785] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1071) returned 1 [0238.785] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1071) returned 1 [0238.785] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x30d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0238.785] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0238.786] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.786] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0238.786] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0238.786] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.786] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x42f, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x42f, lpOverlapped=0x0) returned 1 [0238.786] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0238.786] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x42f, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x430) returned 1 [0238.786] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.786] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x430, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x430, lpOverlapped=0x0) returned 1 [0238.787] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0238.787] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0238.787] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0238.787] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0238.787] CloseHandle (hObject=0x10c) returned 1 [0238.805] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0238.809] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0238.809] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0238.809] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0238.809] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0238.809] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{DF7B19EF-DEA5-47D7-BBA5-9FCBE400A59D}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0238.810] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{DF7B19EF-DEA5-47D7-BBA5-9FCBE400A59D}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{df7b19ef-dea5-47d7-bba5-9fcbe400a59d}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0238.810] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1249) returned 1 [0238.810] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1249) returned 1 [0238.810] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3bf, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0238.810] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0238.811] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.811] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae7150) returned 1 [0238.812] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0238.812] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.812] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4e1, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4e1, lpOverlapped=0x0) returned 1 [0238.812] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0238.812] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4e1, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4f0) returned 1 [0238.812] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.812] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4f0, lpOverlapped=0x0) returned 1 [0238.812] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0238.812] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0238.812] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0238.812] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0238.812] CloseHandle (hObject=0x10c) returned 1 [0238.829] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0238.833] CryptDestroyKey (hKey=0x665aae7150) returned 1 [0238.833] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0238.833] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0238.833] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0238.834] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{E00117F3-53BA-4E06-B9BF-B8E22A1469E6}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0238.834] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{E00117F3-53BA-4E06-B9BF-B8E22A1469E6}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{e00117f3-53ba-4e06-b9bf-b8e22a1469e6}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0238.835] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=887) returned 1 [0238.835] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=887) returned 1 [0238.835] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x255, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0238.835] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0238.836] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.836] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0238.836] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0238.836] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.836] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x377, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x377, lpOverlapped=0x0) returned 1 [0238.836] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0238.836] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x377, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x380) returned 1 [0238.836] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.837] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x380, lpOverlapped=0x0) returned 1 [0238.837] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0238.837] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0238.837] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0238.837] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0238.837] CloseHandle (hObject=0x10c) returned 1 [0238.854] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0238.858] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0238.858] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0238.858] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0238.858] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0238.858] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{E07F215A-6022-40E0-A109-17078992E5F9}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0238.859] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{E07F215A-6022-40E0-A109-17078992E5F9}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{e07f215a-6022-40e0-a109-17078992e5f9}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0238.860] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1060) returned 1 [0238.860] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1060) returned 1 [0238.860] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x302, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0238.860] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0238.861] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.861] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae7150) returned 1 [0238.862] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0238.862] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.862] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x424, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x424, lpOverlapped=0x0) returned 1 [0238.862] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0238.862] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x424, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x430) returned 1 [0238.862] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.862] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x430, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x430, lpOverlapped=0x0) returned 1 [0238.862] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0238.862] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0238.862] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0238.862] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0238.863] CloseHandle (hObject=0x10c) returned 1 [0238.879] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0238.883] CryptDestroyKey (hKey=0x665aae7150) returned 1 [0238.883] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0238.883] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0238.883] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0238.884] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{E2394C16-F45A-496F-83CC-49E163281662}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0238.884] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{E2394C16-F45A-496F-83CC-49E163281662}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{e2394c16-f45a-496f-83cc-49e163281662}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0238.884] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=937) returned 1 [0238.885] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=937) returned 1 [0238.885] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x287, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0238.885] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0238.886] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.886] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0238.886] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0238.886] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.886] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3a9, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3a9, lpOverlapped=0x0) returned 1 [0238.886] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0238.886] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3a9, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3b0) returned 1 [0238.886] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.886] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3b0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3b0, lpOverlapped=0x0) returned 1 [0238.886] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0238.887] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0238.887] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0238.887] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0238.887] CloseHandle (hObject=0x10c) returned 1 [0238.903] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0238.907] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0238.907] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0238.907] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0238.907] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0238.908] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{e2e7934b-dce5-43c4-9576-7fe4f75e7480}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0238.908] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{e2e7934b-dce5-43c4-9576-7fe4f75e7480}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{e2e7934b-dce5-43c4-9576-7fe4f75e7480}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0238.909] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=923) returned 1 [0238.909] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=923) returned 1 [0238.909] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x279, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0238.909] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0238.910] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.910] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6740) returned 1 [0238.910] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0238.911] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.911] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x39b, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x39b, lpOverlapped=0x0) returned 1 [0238.911] CryptEncrypt (in: hKey=0x665aae6740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0238.911] CryptEncrypt (in: hKey=0x665aae6740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x39b, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3a0) returned 1 [0238.911] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.911] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3a0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3a0, lpOverlapped=0x0) returned 1 [0238.911] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0238.911] CryptExportKey (in: hKey=0x665aae6740, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0238.911] CryptExportKey (in: hKey=0x665aae6740, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0238.911] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0238.911] CloseHandle (hObject=0x10c) returned 1 [0238.928] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0238.932] CryptDestroyKey (hKey=0x665aae6740) returned 1 [0238.932] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0238.932] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0238.932] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0238.932] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{E4B554C8-B067-4540-A478-0565BB1F76B9}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0238.933] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{E4B554C8-B067-4540-A478-0565BB1F76B9}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{e4b554c8-b067-4540-a478-0565bb1f76b9}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0238.933] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=912) returned 1 [0238.933] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=912) returned 1 [0238.933] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x26e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0238.933] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0238.934] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.934] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae70e0) returned 1 [0238.935] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0238.935] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.935] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x390, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x390, lpOverlapped=0x0) returned 1 [0238.935] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0238.935] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x390, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3a0) returned 1 [0238.935] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.935] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3a0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3a0, lpOverlapped=0x0) returned 1 [0238.935] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0238.935] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0238.935] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0238.935] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0238.935] CloseHandle (hObject=0x10c) returned 1 [0238.952] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0238.957] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0238.957] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0238.957] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0238.957] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0238.957] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{E6243488-3449-4D4D-98AA-FFC14E3FF0F8}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0238.958] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{E6243488-3449-4D4D-98AA-FFC14E3FF0F8}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{e6243488-3449-4d4d-98aa-ffc14e3ff0f8}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0238.958] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=945) returned 1 [0238.958] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=945) returned 1 [0238.958] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x28f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0238.958] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0238.965] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.965] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae7150) returned 1 [0238.965] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0238.965] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.965] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3b1, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3b1, lpOverlapped=0x0) returned 1 [0238.965] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0238.965] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3b1, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3c0) returned 1 [0238.965] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.965] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3c0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3c0, lpOverlapped=0x0) returned 1 [0238.965] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0238.966] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0238.966] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0238.966] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0238.966] CloseHandle (hObject=0x10c) returned 1 [0238.982] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0238.986] CryptDestroyKey (hKey=0x665aae7150) returned 1 [0238.986] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0238.986] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0238.988] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0238.988] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{E79BCB1B-EEB7-4180-98FD-BD47F6DCFF79}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0238.989] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{E79BCB1B-EEB7-4180-98FD-BD47F6DCFF79}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{e79bcb1b-eeb7-4180-98fd-bd47f6dcff79}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0238.990] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1011) returned 1 [0238.990] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1011) returned 1 [0238.990] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2d1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0238.990] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0238.991] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.991] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae66d0) returned 1 [0238.991] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0238.991] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.991] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3f3, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3f3, lpOverlapped=0x0) returned 1 [0238.991] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0238.991] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3f3, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x400) returned 1 [0238.991] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0238.991] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x400, lpOverlapped=0x0) returned 1 [0238.991] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0238.991] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0238.991] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0238.992] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0238.992] CloseHandle (hObject=0x10c) returned 1 [0239.007] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0239.011] CryptDestroyKey (hKey=0x665aae66d0) returned 1 [0239.011] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0239.011] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0239.011] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0239.012] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{e9950154-c418-419e-a90a-20c5287ae24b}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0239.012] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{e9950154-c418-419e-a90a-20c5287ae24b}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{e9950154-c418-419e-a90a-20c5287ae24b}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0239.013] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1130) returned 1 [0239.013] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1130) returned 1 [0239.013] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x348, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0239.013] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0239.014] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.014] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0239.014] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0239.014] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.014] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x46a, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x46a, lpOverlapped=0x0) returned 1 [0239.014] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0239.014] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x46a, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x470) returned 1 [0239.014] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.014] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x470, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x470, lpOverlapped=0x0) returned 1 [0239.014] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0239.014] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0239.014] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0239.014] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0239.015] CloseHandle (hObject=0x10c) returned 1 [0239.035] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0239.043] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0239.043] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0239.043] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0239.043] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0239.044] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{E9C71548-B580-43B2-ACDB-1BA924002754}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0239.044] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{E9C71548-B580-43B2-ACDB-1BA924002754}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{e9c71548-b580-43b2-acdb-1ba924002754}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0239.045] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=923) returned 1 [0239.045] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=923) returned 1 [0239.045] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x279, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0239.045] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0239.047] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.047] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0239.047] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0239.047] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.047] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x39b, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x39b, lpOverlapped=0x0) returned 1 [0239.048] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0239.048] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x39b, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3a0) returned 1 [0239.048] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.048] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3a0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3a0, lpOverlapped=0x0) returned 1 [0239.048] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0239.048] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0239.048] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0239.048] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0239.048] CloseHandle (hObject=0x10c) returned 1 [0239.067] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0239.071] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0239.071] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0239.071] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0239.071] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0239.072] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{EBEC2956-F512-474D-8631-9E753CC40653}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0239.072] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{EBEC2956-F512-474D-8631-9E753CC40653}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ebec2956-f512-474d-8631-9e753cc40653}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0239.073] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1260) returned 1 [0239.073] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1260) returned 1 [0239.073] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x3ca, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0239.073] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0239.074] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.074] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6820) returned 1 [0239.074] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0239.074] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.074] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4ec, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4ec, lpOverlapped=0x0) returned 1 [0239.075] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0239.075] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4ec, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4f0) returned 1 [0239.075] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.075] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4f0, lpOverlapped=0x0) returned 1 [0239.075] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0239.075] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0239.075] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0239.075] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0239.075] CloseHandle (hObject=0x10c) returned 1 [0239.092] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0239.096] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0239.096] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0239.096] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0239.096] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0239.097] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{ecdb0924-4208-451e-8ee0-373c0956de16}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0239.097] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{ecdb0924-4208-451e-8ee0-373c0956de16}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ecdb0924-4208-451e-8ee0-373c0956de16}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0239.098] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1122) returned 1 [0239.098] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1122) returned 1 [0239.098] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x340, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0239.098] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0239.099] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.099] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0239.099] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0239.099] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.099] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x462, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x462, lpOverlapped=0x0) returned 1 [0239.099] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0239.099] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x462, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x470) returned 1 [0239.099] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.099] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x470, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x470, lpOverlapped=0x0) returned 1 [0239.100] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0239.100] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0239.100] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0239.100] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0239.100] CloseHandle (hObject=0x10c) returned 1 [0239.119] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0239.123] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0239.123] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0239.123] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0239.123] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0239.124] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{ED0FF627-BFD1-4F68-9A74-974E73F41A3A}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0239.124] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{ED0FF627-BFD1-4F68-9A74-974E73F41A3A}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ed0ff627-bfd1-4f68-9a74-974e73f41a3a}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0239.125] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1071) returned 1 [0239.125] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1071) returned 1 [0239.125] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x30d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0239.125] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0239.126] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.126] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0239.126] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0239.127] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.127] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x42f, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x42f, lpOverlapped=0x0) returned 1 [0239.127] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0239.127] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x42f, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x430) returned 1 [0239.127] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.127] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x430, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x430, lpOverlapped=0x0) returned 1 [0239.127] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0239.127] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0239.127] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0239.127] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0239.127] CloseHandle (hObject=0x10c) returned 1 [0239.144] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0239.148] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0239.148] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0239.148] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0239.148] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0239.148] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{ed834ed6-4b5a-4bfe-8f11-a626dcb6a921}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0239.149] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{ed834ed6-4b5a-4bfe-8f11-a626dcb6a921}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ed834ed6-4b5a-4bfe-8f11-a626dcb6a921}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0239.149] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=923) returned 1 [0239.149] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=923) returned 1 [0239.149] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x279, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0239.150] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0239.151] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.151] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0239.151] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0239.151] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.151] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x39b, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x39b, lpOverlapped=0x0) returned 1 [0239.151] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0239.151] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x39b, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3a0) returned 1 [0239.151] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.151] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3a0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3a0, lpOverlapped=0x0) returned 1 [0239.151] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0239.152] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0239.152] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0239.152] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0239.152] CloseHandle (hObject=0x10c) returned 1 [0239.169] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0239.174] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0239.174] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0239.174] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0239.174] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0239.174] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{EE423D17-7ED8-4B33-9555-C23DEEAFB4B6}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0239.175] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{EE423D17-7ED8-4B33-9555-C23DEEAFB4B6}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ee423d17-7ed8-4b33-9555-c23deeafb4b6}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0239.175] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1192) returned 1 [0239.175] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1192) returned 1 [0239.175] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x386, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0239.175] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0239.177] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.177] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6f20) returned 1 [0239.177] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0239.177] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.177] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4a8, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4a8, lpOverlapped=0x0) returned 1 [0239.177] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0239.177] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4a8, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4b0) returned 1 [0239.177] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.177] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4b0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4b0, lpOverlapped=0x0) returned 1 [0239.183] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0239.183] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0239.183] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0239.183] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0239.183] CloseHandle (hObject=0x10c) returned 1 [0239.201] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0239.205] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0239.205] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0239.205] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0239.205] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0239.206] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{EE439E7E-CE1E-4ABE-9EA8-50F12ED01FE0}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0239.206] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{EE439E7E-CE1E-4ABE-9EA8-50F12ED01FE0}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ee439e7e-ce1e-4abe-9ea8-50f12ed01fe0}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0239.207] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=986) returned 1 [0239.207] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=986) returned 1 [0239.207] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2b8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0239.207] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0239.208] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.208] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae65f0) returned 1 [0239.208] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0239.208] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.208] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3da, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3da, lpOverlapped=0x0) returned 1 [0239.208] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0239.208] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3da, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3e0) returned 1 [0239.208] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.208] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3e0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3e0, lpOverlapped=0x0) returned 1 [0239.209] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0239.209] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0239.209] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0239.209] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0239.209] CloseHandle (hObject=0x10c) returned 1 [0239.226] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0239.229] CryptDestroyKey (hKey=0x665aae65f0) returned 1 [0239.229] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0239.230] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0239.230] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0239.230] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{EF462183-352B-4DCF-811C-07FA7CFCD5AC}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0239.230] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{EF462183-352B-4DCF-811C-07FA7CFCD5AC}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ef462183-352b-4dcf-811c-07fa7cfcd5ac}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0239.231] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=985) returned 1 [0239.231] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=985) returned 1 [0239.231] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2b7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0239.231] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0239.232] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.232] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0239.232] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0239.232] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.232] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3d9, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3d9, lpOverlapped=0x0) returned 1 [0239.233] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0239.233] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3d9, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3e0) returned 1 [0239.233] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.233] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3e0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3e0, lpOverlapped=0x0) returned 1 [0239.233] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0239.233] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0239.233] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0239.233] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0239.233] CloseHandle (hObject=0x10c) returned 1 [0239.316] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0239.320] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0239.320] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0239.320] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0239.320] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0239.321] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{EF8F379B-747B-4C8E-B3D1-4A29E6CF45AE}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0239.321] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{EF8F379B-747B-4C8E-B3D1-4A29E6CF45AE}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ef8f379b-747b-4c8e-b3d1-4a29e6cf45ae}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0239.322] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=968) returned 1 [0239.322] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=968) returned 1 [0239.322] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2a6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0239.322] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0239.323] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.323] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6f20) returned 1 [0239.323] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0239.323] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.323] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3c8, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3c8, lpOverlapped=0x0) returned 1 [0239.323] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0239.323] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3c8, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3d0) returned 1 [0239.323] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.323] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3d0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3d0, lpOverlapped=0x0) returned 1 [0239.324] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0239.324] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0239.324] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0239.324] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0239.324] CloseHandle (hObject=0x10c) returned 1 [0239.342] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0239.346] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0239.346] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0239.346] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0239.346] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0239.346] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{EFACECBA-BCCD-468B-BAB3-7CA40A898982}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0239.347] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{EFACECBA-BCCD-468B-BAB3-7CA40A898982}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{efacecba-bccd-468b-bab3-7ca40a898982}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0239.347] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1173) returned 1 [0239.347] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1173) returned 1 [0239.347] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x373, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0239.348] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0239.349] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.349] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae66d0) returned 1 [0239.349] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0239.349] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.349] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x495, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x495, lpOverlapped=0x0) returned 1 [0239.349] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0239.349] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x495, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4a0) returned 1 [0239.349] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.349] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4a0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4a0, lpOverlapped=0x0) returned 1 [0239.349] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0239.349] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0239.349] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0239.349] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0239.349] CloseHandle (hObject=0x10c) returned 1 [0239.366] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0239.370] CryptDestroyKey (hKey=0x665aae66d0) returned 1 [0239.370] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0239.370] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0239.371] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0239.371] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{F025B6FD-D1CA-4a32-9BEB-DBEF1D2F6926}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0239.371] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{F025B6FD-D1CA-4a32-9BEB-DBEF1D2F6926}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{f025b6fd-d1ca-4a32-9beb-dbef1d2f6926}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0239.372] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=905) returned 1 [0239.372] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=905) returned 1 [0239.372] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x267, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0239.372] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0239.373] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.373] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0239.373] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0239.374] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.374] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x389, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x389, lpOverlapped=0x0) returned 1 [0239.374] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0239.374] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x389, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x390) returned 1 [0239.374] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.374] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x390, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x390, lpOverlapped=0x0) returned 1 [0239.374] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0239.374] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0239.374] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0239.374] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0239.374] CloseHandle (hObject=0x10c) returned 1 [0239.394] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0239.399] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0239.399] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0239.400] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0239.400] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0239.400] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{F0E02D62-6C1D-4eb3-AC47-F8401425C6BC}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0239.401] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{F0E02D62-6C1D-4eb3-AC47-F8401425C6BC}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{f0e02d62-6c1d-4eb3-ac47-f8401425c6bc}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0239.401] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=994) returned 1 [0239.401] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=994) returned 1 [0239.401] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2c0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0239.401] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0239.403] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.403] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6f20) returned 1 [0239.403] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0239.403] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.403] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3e2, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3e2, lpOverlapped=0x0) returned 1 [0239.404] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0239.404] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3e2, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3f0) returned 1 [0239.404] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.404] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3f0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3f0, lpOverlapped=0x0) returned 1 [0239.404] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0239.404] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0239.404] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0239.404] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0239.404] CloseHandle (hObject=0x10c) returned 1 [0239.428] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0239.433] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0239.433] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0239.434] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0239.434] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0239.434] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{F120B10E-C882-4613-955F-B4DF13C6E803}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0239.435] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{F120B10E-C882-4613-955F-B4DF13C6E803}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{f120b10e-c882-4613-955f-b4df13c6e803}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0239.435] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1004) returned 1 [0239.435] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1004) returned 1 [0239.435] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2ca, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0239.435] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0239.437] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.437] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae70e0) returned 1 [0239.437] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0239.437] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.437] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3ec, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3ec, lpOverlapped=0x0) returned 1 [0239.437] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0239.437] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3ec, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3f0) returned 1 [0239.438] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.438] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3f0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3f0, lpOverlapped=0x0) returned 1 [0239.438] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0239.438] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0239.438] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0239.438] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0239.439] CloseHandle (hObject=0x10c) returned 1 [0239.460] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0239.464] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0239.464] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0239.465] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0239.465] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0239.465] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{f2ddfc82-8f12-4cdd-b7dc-d4fe1425aa4d}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0239.465] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{f2ddfc82-8f12-4cdd-b7dc-d4fe1425aa4d}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{f2ddfc82-8f12-4cdd-b7dc-d4fe1425aa4d}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0239.466] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=909) returned 1 [0239.466] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=909) returned 1 [0239.466] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x26b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0239.466] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0239.467] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.467] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0239.467] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0239.468] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.468] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x38d, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x38d, lpOverlapped=0x0) returned 1 [0239.468] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0239.468] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x38d, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x390) returned 1 [0239.468] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.468] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x390, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x390, lpOverlapped=0x0) returned 1 [0239.468] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0239.468] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0239.468] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0239.468] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0239.468] CloseHandle (hObject=0x10c) returned 1 [0239.485] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0239.490] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0239.490] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0239.490] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0239.490] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0239.490] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{F2E71049-6F88-4A3B-9475-5A2B40B36092}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0239.491] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{F2E71049-6F88-4A3B-9475-5A2B40B36092}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{f2e71049-6f88-4a3b-9475-5a2b40b36092}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0239.491] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1176) returned 1 [0239.491] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1176) returned 1 [0239.491] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x376, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0239.491] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0239.493] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.493] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6740) returned 1 [0239.493] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0239.493] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.493] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x498, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x498, lpOverlapped=0x0) returned 1 [0239.493] CryptEncrypt (in: hKey=0x665aae6740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0239.493] CryptEncrypt (in: hKey=0x665aae6740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x498, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4a0) returned 1 [0239.493] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.493] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4a0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4a0, lpOverlapped=0x0) returned 1 [0239.493] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0239.493] CryptExportKey (in: hKey=0x665aae6740, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0239.493] CryptExportKey (in: hKey=0x665aae6740, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0239.493] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0239.493] CloseHandle (hObject=0x10c) returned 1 [0239.510] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0239.515] CryptDestroyKey (hKey=0x665aae6740) returned 1 [0239.515] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0239.515] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0239.515] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0239.515] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{F3FD1F8E-B34A-49AE-95B9-5DBEAB5BFB49}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0239.516] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{F3FD1F8E-B34A-49AE-95B9-5DBEAB5BFB49}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{f3fd1f8e-b34a-49ae-95b9-5dbeab5bfb49}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0239.517] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1040) returned 1 [0239.517] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1040) returned 1 [0239.517] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2ee, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0239.517] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0239.518] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.518] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0239.518] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0239.518] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.518] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x410, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x410, lpOverlapped=0x0) returned 1 [0239.518] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0239.518] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x410, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x420) returned 1 [0239.518] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.518] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x420, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x420, lpOverlapped=0x0) returned 1 [0239.519] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0239.519] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0239.519] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0239.519] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0239.519] CloseHandle (hObject=0x10c) returned 1 [0239.537] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0239.541] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0239.541] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0239.541] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0239.542] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0239.543] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{f56fbb39-e6d9-4b6d-9c29-ae82cff2925f}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0239.543] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{f56fbb39-e6d9-4b6d-9c29-ae82cff2925f}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{f56fbb39-e6d9-4b6d-9c29-ae82cff2925f}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0239.544] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=947) returned 1 [0239.544] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=947) returned 1 [0239.544] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x291, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0239.544] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0239.545] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.545] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6f20) returned 1 [0239.545] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0239.545] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.545] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3b3, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3b3, lpOverlapped=0x0) returned 1 [0239.545] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0239.545] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3b3, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3c0) returned 1 [0239.545] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.546] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3c0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3c0, lpOverlapped=0x0) returned 1 [0239.546] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0239.546] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0239.546] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0239.546] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0239.546] CloseHandle (hObject=0x10c) returned 1 [0239.564] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0239.568] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0239.568] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0239.568] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0239.568] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0239.568] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{f6b6e965-e9b2-444b-9286-10c9152edbc5}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0239.569] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{f6b6e965-e9b2-444b-9286-10c9152edbc5}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{f6b6e965-e9b2-444b-9286-10c9152edbc5}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0239.569] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1108) returned 1 [0239.569] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1108) returned 1 [0239.569] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x332, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0239.569] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0239.570] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.570] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6f20) returned 1 [0239.570] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0239.571] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.571] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x454, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x454, lpOverlapped=0x0) returned 1 [0239.571] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0239.571] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x454, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x460) returned 1 [0239.571] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.571] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x460, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x460, lpOverlapped=0x0) returned 1 [0239.571] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0239.571] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0239.571] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0239.571] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0239.571] CloseHandle (hObject=0x10c) returned 1 [0239.588] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0239.593] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0239.593] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0239.593] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0239.593] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0239.593] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{f82df8f7-8b9f-442e-a48c-818ea735ff9b}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0239.594] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{f82df8f7-8b9f-442e-a48c-818ea735ff9b}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{f82df8f7-8b9f-442e-a48c-818ea735ff9b}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0239.595] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=957) returned 1 [0239.595] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=957) returned 1 [0239.595] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x29b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0239.595] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0239.596] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.596] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6f20) returned 1 [0239.596] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0239.597] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.597] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3bd, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3bd, lpOverlapped=0x0) returned 1 [0239.597] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0239.597] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3bd, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3c0) returned 1 [0239.597] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.597] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3c0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3c0, lpOverlapped=0x0) returned 1 [0239.597] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0239.597] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0239.597] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0239.597] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0239.597] CloseHandle (hObject=0x10c) returned 1 [0239.616] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0239.621] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0239.621] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0239.621] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0239.621] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0239.622] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{F96E2F30-2018-4F0E-BBEE-7CCBEE8CE714}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0239.623] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{F96E2F30-2018-4F0E-BBEE-7CCBEE8CE714}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{f96e2f30-2018-4f0e-bbee-7ccbee8ce714}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0239.623] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1208) returned 1 [0239.623] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1208) returned 1 [0239.623] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x396, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0239.623] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0239.627] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.627] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0239.627] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0239.627] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.627] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4b8, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x4b8, lpOverlapped=0x0) returned 1 [0239.628] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0239.628] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4b8, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x4c0) returned 1 [0239.628] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.628] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4c0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x4c0, lpOverlapped=0x0) returned 1 [0239.628] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0239.628] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0239.628] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0239.628] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0239.628] CloseHandle (hObject=0x10c) returned 1 [0239.650] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0239.655] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0239.655] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0239.656] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0239.656] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0239.656] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{FADA4BFB-4853-4547-B70F-1B565E7D907B}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0239.657] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{FADA4BFB-4853-4547-B70F-1B565E7D907B}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{fada4bfb-4853-4547-b70f-1b565e7d907b}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0239.658] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=938) returned 1 [0239.658] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=938) returned 1 [0239.658] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x288, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0239.658] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0239.659] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.659] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0239.659] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0239.660] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.660] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3aa, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3aa, lpOverlapped=0x0) returned 1 [0239.660] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0239.660] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3aa, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3b0) returned 1 [0239.660] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.660] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3b0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3b0, lpOverlapped=0x0) returned 1 [0239.660] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0239.660] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0239.660] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0239.660] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0239.660] CloseHandle (hObject=0x10c) returned 1 [0239.681] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0239.685] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0239.685] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0239.685] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0239.685] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0239.686] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{FD4FB8FA-F752-4E78-933B-8969E18BC9B5}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0239.686] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{FD4FB8FA-F752-4E78-933B-8969E18BC9B5}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{fd4fb8fa-f752-4e78-933b-8969e18bc9b5}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0239.687] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1148) returned 1 [0239.687] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1148) returned 1 [0239.687] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x35a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0239.687] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0239.688] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.688] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae65f0) returned 1 [0239.688] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0239.688] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.688] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x47c, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x47c, lpOverlapped=0x0) returned 1 [0239.688] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0239.688] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x47c, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x480) returned 1 [0239.688] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.688] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x480, lpOverlapped=0x0) returned 1 [0239.689] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0239.689] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0239.689] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0239.689] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0239.689] CloseHandle (hObject=0x10c) returned 1 [0239.706] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0239.710] CryptDestroyKey (hKey=0x665aae65f0) returned 1 [0239.710] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0239.710] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0239.710] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0239.710] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{FE777427-D33C-485B-A414-3BD5A2943162}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0239.711] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{FE777427-D33C-485B-A414-3BD5A2943162}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{fe777427-d33c-485b-a414-3bd5a2943162}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0239.711] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=983) returned 1 [0239.711] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=983) returned 1 [0239.711] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2b5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0239.711] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0239.713] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.713] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0239.713] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0239.713] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.713] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3d7, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3d7, lpOverlapped=0x0) returned 1 [0239.713] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0239.713] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3d7, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3e0) returned 1 [0239.713] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.713] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3e0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x3e0, lpOverlapped=0x0) returned 1 [0239.713] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0239.713] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0239.713] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0239.713] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0239.713] CloseHandle (hObject=0x10c) returned 1 [0239.730] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0239.734] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0239.734] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0239.734] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0239.734] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0239.734] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{FEBB9292-6110-4B9E-8565-91C4076E0A43}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0239.735] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{FEBB9292-6110-4B9E-8565-91C4076E0A43}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{febb9292-6110-4b9e-8565-91c4076e0a43}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0239.736] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1032) returned 1 [0239.736] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1032) returned 1 [0239.736] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2e6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0239.736] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0239.737] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.737] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0239.737] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0239.737] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.737] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x408, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x408, lpOverlapped=0x0) returned 1 [0239.737] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0239.737] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x408, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x410) returned 1 [0239.737] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.737] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x410, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x410, lpOverlapped=0x0) returned 1 [0239.738] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0239.738] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0239.738] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0239.738] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0239.738] CloseHandle (hObject=0x10c) returned 1 [0239.753] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0239.757] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0239.757] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0239.758] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0239.758] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0239.758] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{FEFF8F5D-EB40-485d-AC2A-EB7942DDF624}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0239.758] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{FEFF8F5D-EB40-485d-AC2A-EB7942DDF624}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{feff8f5d-eb40-485d-ac2a-eb7942ddf624}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0239.759] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=911) returned 1 [0239.759] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=911) returned 1 [0239.759] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x26d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0239.759] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0239.760] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.760] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0239.760] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0239.761] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.761] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x38f, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x38f, lpOverlapped=0x0) returned 1 [0239.761] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0239.761] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x38f, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x390) returned 1 [0239.761] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.761] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x390, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x390, lpOverlapped=0x0) returned 1 [0239.761] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0239.761] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0239.761] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0239.761] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0239.761] CloseHandle (hObject=0x10c) returned 1 [0239.783] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0239.787] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0239.787] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0239.787] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0239.787] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0239.788] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{FFA33B6C-DC4D-438C-893F-EBF44A09BFC0}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0239.788] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{FFA33B6C-DC4D-438C-893F-EBF44A09BFC0}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ffa33b6c-dc4d-438c-893f-ebf44a09bfc0}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0239.789] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=895) returned 1 [0239.789] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=895) returned 1 [0239.789] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x25d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0239.789] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0239.790] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.790] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae66d0) returned 1 [0239.790] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0239.790] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.790] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x37f, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x37f, lpOverlapped=0x0) returned 1 [0239.790] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0239.790] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x37f, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x380) returned 1 [0239.790] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.790] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x380, lpOverlapped=0x0) returned 1 [0239.791] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0239.791] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0239.791] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0239.791] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0239.791] CloseHandle (hObject=0x10c) returned 1 [0239.808] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0239.812] CryptDestroyKey (hKey=0x665aae66d0) returned 1 [0239.812] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0239.812] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0239.812] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0239.812] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\ControlPanel.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0239.813] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\ControlPanel.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\controlpanel.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0239.813] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=743) returned 1 [0239.813] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=743) returned 1 [0239.813] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x1c5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0239.813] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0239.815] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.815] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0239.815] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0239.815] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.815] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x2e7, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x2e7, lpOverlapped=0x0) returned 1 [0239.815] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0239.815] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x2e7, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x2f0) returned 1 [0239.815] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.815] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x2f0, lpOverlapped=0x0) returned 1 [0239.815] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0239.816] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0239.816] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0239.816] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0239.816] CloseHandle (hObject=0x10c) returned 1 [0239.833] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0239.837] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0239.837] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0239.838] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0239.838] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0239.838] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\CortanaSettings.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0239.840] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\CortanaSettings.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\cortanasettings.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0239.840] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=774) returned 1 [0239.840] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=774) returned 1 [0239.840] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x1e4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0239.840] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0239.841] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.842] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae70e0) returned 1 [0239.842] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0239.842] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.842] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x306, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x306, lpOverlapped=0x0) returned 1 [0239.842] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0239.842] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x306, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x310) returned 1 [0239.842] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.842] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x310, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x310, lpOverlapped=0x0) returned 1 [0239.842] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0239.842] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0239.842] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0239.842] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0239.842] CloseHandle (hObject=0x10c) returned 1 [0239.859] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0239.864] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0239.864] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0239.864] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0239.864] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0239.864] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_0_FlashPlayerCPLApp.cpl.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0239.865] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_0_FlashPlayerCPLApp.cpl.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\namespace_classic_0_flashplayercplapp.cpl.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0239.865] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1016) returned 1 [0239.865] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1016) returned 1 [0239.865] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2d6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0239.865] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0239.866] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.866] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6740) returned 1 [0239.866] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0239.867] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.867] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3f8, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x3f8, lpOverlapped=0x0) returned 1 [0239.867] CryptEncrypt (in: hKey=0x665aae6740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0239.867] CryptEncrypt (in: hKey=0x665aae6740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x3f8, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x400) returned 1 [0239.867] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.867] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x400, lpOverlapped=0x0) returned 1 [0239.867] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0239.867] CryptExportKey (in: hKey=0x665aae6740, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0239.867] CryptExportKey (in: hKey=0x665aae6740, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0239.867] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0239.867] CloseHandle (hObject=0x10c) returned 1 [0239.884] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0239.888] CryptDestroyKey (hKey=0x665aae6740) returned 1 [0239.888] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0239.888] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0239.888] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0239.888] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_{025A5937-A6BE-4686-A844-36FE4BEC8B6D}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0239.889] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_{025A5937-A6BE-4686-A844-36FE4BEC8B6D}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\namespace_classic_{025a5937-a6be-4686-a844-36fe4bec8b6d}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0239.889] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1116) returned 1 [0239.889] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1116) returned 1 [0239.889] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x33a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0239.889] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0239.891] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.891] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae66d0) returned 1 [0239.891] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0239.891] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.891] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x45c, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x45c, lpOverlapped=0x0) returned 1 [0239.891] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0239.891] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x45c, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x460) returned 1 [0239.891] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0239.891] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x460, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x460, lpOverlapped=0x0) returned 1 [0239.891] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0239.892] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0239.892] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0239.892] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0239.892] CloseHandle (hObject=0x10c) returned 1 [0239.993] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0239.997] CryptDestroyKey (hKey=0x665aae66d0) returned 1 [0239.997] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0239.997] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0239.997] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0239.997] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_{60632754-c523-4b62-b45c-4172da012619}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0239.998] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_{60632754-c523-4b62-b45c-4172da012619}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\namespace_classic_{60632754-c523-4b62-b45c-4172da012619}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0239.999] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1112) returned 1 [0239.999] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1112) returned 1 [0239.999] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x336, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0239.999] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0240.001] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.001] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0240.001] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0240.002] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.002] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x458, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x458, lpOverlapped=0x0) returned 1 [0240.002] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0240.002] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x458, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x460) returned 1 [0240.002] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.002] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x460, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x460, lpOverlapped=0x0) returned 1 [0240.002] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0240.002] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0240.002] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0240.003] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0240.003] CloseHandle (hObject=0x10c) returned 1 [0240.020] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0240.024] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0240.024] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0240.024] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0240.024] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0240.025] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_{6C8EEC18-8D75-41B2-A177-8831D59D2D50}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0240.025] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_{6C8EEC18-8D75-41B2-A177-8831D59D2D50}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\namespace_classic_{6c8eec18-8d75-41b2-a177-8831d59d2d50}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0240.026] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1101) returned 1 [0240.026] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1101) returned 1 [0240.026] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x32b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0240.026] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0240.030] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.030] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae65f0) returned 1 [0240.030] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0240.030] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.030] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x44d, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x44d, lpOverlapped=0x0) returned 1 [0240.030] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0240.030] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x44d, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x450) returned 1 [0240.030] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.030] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x450, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x450, lpOverlapped=0x0) returned 1 [0240.030] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0240.031] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0240.031] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0240.031] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0240.031] CloseHandle (hObject=0x10c) returned 1 [0240.047] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0240.051] CryptDestroyKey (hKey=0x665aae65f0) returned 1 [0240.051] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0240.052] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0240.052] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0240.052] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_{7b81be6a-ce2b-4676-a29e-eb907a5126c5}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0240.052] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_{7b81be6a-ce2b-4676-a29e-eb907a5126c5}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\namespace_classic_{7b81be6a-ce2b-4676-a29e-eb907a5126c5}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0240.053] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1124) returned 1 [0240.053] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1124) returned 1 [0240.053] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x342, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0240.053] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0240.054] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.054] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae70e0) returned 1 [0240.054] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0240.054] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.054] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x464, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x464, lpOverlapped=0x0) returned 1 [0240.055] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0240.055] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x464, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x470) returned 1 [0240.055] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.055] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x470, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x470, lpOverlapped=0x0) returned 1 [0240.055] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0240.055] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0240.055] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0240.055] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0240.055] CloseHandle (hObject=0x10c) returned 1 [0240.072] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0240.076] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0240.076] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0240.077] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0240.077] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0240.077] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_{96AE8D84-A250-4520-95A5-A47A7E3C548B}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0240.077] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_{96AE8D84-A250-4520-95A5-A47A7E3C548B}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\namespace_classic_{96ae8d84-a250-4520-95a5-a47a7e3c548b}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0240.078] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1085) returned 1 [0240.078] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1085) returned 1 [0240.078] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x31b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0240.078] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0240.079] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.079] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0240.079] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0240.080] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.080] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x43d, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x43d, lpOverlapped=0x0) returned 1 [0240.080] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0240.080] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x43d, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x440) returned 1 [0240.080] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.080] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x440, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x440, lpOverlapped=0x0) returned 1 [0240.080] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0240.080] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0240.080] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0240.080] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0240.080] CloseHandle (hObject=0x10c) returned 1 [0240.098] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0240.102] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0240.102] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0240.102] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0240.102] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0240.102] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_{B98A2BEA-7D42-4558-8BD1-832F41BAC6FD}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0240.103] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_{B98A2BEA-7D42-4558-8BD1-832F41BAC6FD}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\namespace_classic_{b98a2bea-7d42-4558-8bd1-832f41bac6fd}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0240.103] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1114) returned 1 [0240.103] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1114) returned 1 [0240.104] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x338, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0240.104] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0240.105] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.105] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6740) returned 1 [0240.105] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0240.105] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.105] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x45a, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x45a, lpOverlapped=0x0) returned 1 [0240.105] CryptEncrypt (in: hKey=0x665aae6740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0240.105] CryptEncrypt (in: hKey=0x665aae6740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x45a, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x460) returned 1 [0240.105] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.105] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x460, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x460, lpOverlapped=0x0) returned 1 [0240.105] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0240.105] CryptExportKey (in: hKey=0x665aae6740, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0240.105] CryptExportKey (in: hKey=0x665aae6740, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0240.106] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0240.106] CloseHandle (hObject=0x10c) returned 1 [0240.125] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0240.129] CryptDestroyKey (hKey=0x665aae6740) returned 1 [0240.129] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0240.129] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0240.129] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0240.130] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_{D8559EB9-20C0-410E-BEDA-7ED416AECC2A}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0240.130] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_{D8559EB9-20C0-410E-BEDA-7ED416AECC2A}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\namespace_classic_{d8559eb9-20c0-410e-beda-7ed416aecc2a}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0240.131] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1145) returned 1 [0240.131] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1145) returned 1 [0240.131] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x357, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0240.131] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0240.132] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.132] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0240.132] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0240.133] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.133] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x479, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x479, lpOverlapped=0x0) returned 1 [0240.133] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0240.133] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x479, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x480) returned 1 [0240.133] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.133] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x480, lpOverlapped=0x0) returned 1 [0240.133] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0240.133] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0240.133] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0240.133] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0240.133] CloseHandle (hObject=0x10c) returned 1 [0240.155] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0240.160] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0240.160] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0240.161] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0240.161] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0240.161] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_{F942C606-0914-47AB-BE56-1321B8035096}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0240.162] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_{F942C606-0914-47AB-BE56-1321B8035096}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\namespace_classic_{f942c606-0914-47ab-be56-1321b8035096}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0240.163] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=1092) returned 1 [0240.163] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=1092) returned 1 [0240.163] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x322, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0240.163] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0240.165] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.165] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0240.165] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0240.165] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.166] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x444, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x444, lpOverlapped=0x0) returned 1 [0240.166] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0240.166] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x444, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x450) returned 1 [0240.166] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.166] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x450, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x450, lpOverlapped=0x0) returned 1 [0240.166] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0240.166] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0240.166] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0240.166] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0240.166] CloseHandle (hObject=0x10c) returned 1 [0240.194] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0240.200] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0240.200] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0240.200] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0240.200] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0240.201] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\SettingsPane_{4B719A8A-CE18-4033-BE59-1083B40F25B7}.settingcontent-ms", dwFileAttributes=0x80) returned 1 [0240.206] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\SettingsPane_{4B719A8A-CE18-4033-BE59-1083B40F25B7}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\settingspane_{4b719a8a-ce18-4033-be59-1083b40f25b7}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0240.206] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=846) returned 1 [0240.207] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=846) returned 1 [0240.207] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x22c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0240.207] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0240.208] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.208] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6510) returned 1 [0240.208] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0240.209] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.209] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x34e, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x34e, lpOverlapped=0x0) returned 1 [0240.209] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0240.209] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x34e, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x350) returned 1 [0240.209] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.209] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x350, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x350, lpOverlapped=0x0) returned 1 [0240.209] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0240.209] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0240.209] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0240.209] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0240.209] CloseHandle (hObject=0x10c) returned 1 [0240.308] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0240.313] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0240.313] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0240.313] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0 [0240.313] FindClose (in: hFindFile=0x665d90bd20 | out: hFindFile=0x665d90bd20) returned 1 [0240.313] SetLastError (dwErrCode=0x0) [0240.314] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0240.314] GetLastError () returned 0x0 [0240.314] WriteFile (in: hFile=0x440, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7a5d0*=0x324, lpOverlapped=0x0) returned 1 [0240.315] CloseHandle (hObject=0x440) returned 1 [0240.316] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0240.316] FindClose (in: hFindFile=0x665d90bde0 | out: hFindFile=0x665d90bde0) returned 1 [0240.316] SetLastError (dwErrCode=0x0) [0240.316] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0240.316] GetLastError () returned 0xb7 [0240.316] CloseHandle (hObject=0x654) returned 1 [0240.316] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0240.316] FindClose (in: hFindFile=0x665d90d0a0 | out: hFindFile=0x665d90d0a0) returned 1 [0240.316] SetLastError (dwErrCode=0x0) [0240.316] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0240.317] GetLastError () returned 0xb7 [0240.317] CloseHandle (hObject=0x3e8) returned 1 [0240.317] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0240.317] FindClose (in: hFindFile=0x665d90d040 | out: hFindFile=0x665d90d040) returned 1 [0240.317] SetLastError (dwErrCode=0x0) [0240.317] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0240.317] GetLastError () returned 0xb7 [0240.317] CloseHandle (hObject=0x620) returned 1 [0240.317] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0240.317] SetLastError (dwErrCode=0x0) [0240.318] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0240.318] GetLastError () returned 0xb7 [0240.318] CloseHandle (hObject=0x620) returned 1 [0240.318] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\RoamingState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d340 [0240.318] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0240.318] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0240.318] FindClose (in: hFindFile=0x665d90d340 | out: hFindFile=0x665d90d340) returned 1 [0240.318] SetLastError (dwErrCode=0x0) [0240.318] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\RoamingState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\roamingstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0240.319] GetLastError () returned 0x0 [0240.319] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0240.320] CloseHandle (hObject=0x620) returned 1 [0240.320] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0240.320] SetLastError (dwErrCode=0x0) [0240.320] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0240.321] GetLastError () returned 0xb7 [0240.321] CloseHandle (hObject=0x620) returned 1 [0240.321] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\Settings\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90cbc0 [0240.324] FindNextFileW (in: hFindFile=0x665d90cbc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0240.324] FindNextFileW (in: hFindFile=0x665d90cbc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0240.324] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0240.324] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\Settings\\roaming.lock", dwFileAttributes=0x80) returned 1 [0240.325] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0240.325] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=0) returned 1 [0240.325] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=0) returned 1 [0240.325] CloseHandle (hObject=0x3e8) returned 1 [0240.325] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0240.325] FindNextFileW (in: hFindFile=0x665d90cbc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0240.326] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0240.326] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\Settings\\settings.dat", dwFileAttributes=0x80) returned 1 [0240.326] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0240.327] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=8192) returned 1 [0240.327] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=8192) returned 1 [0240.327] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x1ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0240.327] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0240.328] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.328] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665aae6740) returned 1 [0240.328] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0240.329] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.329] ReadFile (in: hFile=0x3e8, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7b320*=0x2000, lpOverlapped=0x0) returned 1 [0240.329] CryptEncrypt (in: hKey=0x665aae6740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0240.329] CryptEncrypt (in: hKey=0x665aae6740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x2000, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x2010) returned 1 [0240.330] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.330] WriteFile (in: hFile=0x3e8, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7b320*=0x2010, lpOverlapped=0x0) returned 1 [0240.330] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0240.330] CryptExportKey (in: hKey=0x665aae6740, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0240.330] CryptExportKey (in: hKey=0x665aae6740, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0240.330] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0240.330] CloseHandle (hObject=0x3e8) returned 1 [0240.350] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0240.364] CryptDestroyKey (hKey=0x665aae6740) returned 1 [0240.364] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0240.364] FindNextFileW (in: hFindFile=0x665d90cbc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0240.364] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0240.364] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", dwFileAttributes=0x80) returned 1 [0240.365] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0240.366] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=8192) returned 1 [0240.366] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=8192) returned 1 [0240.366] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x1ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0240.366] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0240.368] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.368] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665aae70e0) returned 1 [0240.368] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0240.368] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.368] ReadFile (in: hFile=0x3e8, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7b320*=0x2000, lpOverlapped=0x0) returned 1 [0240.369] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0240.369] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x2000, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x2010) returned 1 [0240.369] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.369] WriteFile (in: hFile=0x3e8, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7b320*=0x2010, lpOverlapped=0x0) returned 1 [0240.370] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0240.370] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0240.370] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0240.370] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0240.370] CloseHandle (hObject=0x3e8) returned 1 [0240.392] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0240.398] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0240.398] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0240.398] FindNextFileW (in: hFindFile=0x665d90cbc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0240.398] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0240.398] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", dwFileAttributes=0x80) returned 1 [0240.399] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0240.399] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=0) returned 1 [0240.399] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=0) returned 1 [0240.399] CloseHandle (hObject=0x3e8) returned 1 [0240.400] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0240.400] FindNextFileW (in: hFindFile=0x665d90cbc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0240.400] FindClose (in: hFindFile=0x665d90cbc0 | out: hFindFile=0x665d90cbc0) returned 1 [0240.400] SetLastError (dwErrCode=0x0) [0240.400] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\Settings\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\settings\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0240.401] GetLastError () returned 0x0 [0240.401] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0240.402] CloseHandle (hObject=0x620) returned 1 [0240.402] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0240.402] SetLastError (dwErrCode=0x0) [0240.402] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0240.403] GetLastError () returned 0xb7 [0240.403] CloseHandle (hObject=0x620) returned 1 [0240.403] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\SystemAppData\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90cf20 [0240.403] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0240.403] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0240.403] FindClose (in: hFindFile=0x665d90cf20 | out: hFindFile=0x665d90cf20) returned 1 [0240.403] SetLastError (dwErrCode=0x0) [0240.403] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\SystemAppData\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\systemappdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0240.405] GetLastError () returned 0x0 [0240.405] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0240.406] CloseHandle (hObject=0x620) returned 1 [0240.406] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0240.406] SetLastError (dwErrCode=0x0) [0240.406] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0240.406] GetLastError () returned 0xb7 [0240.406] CloseHandle (hObject=0x620) returned 1 [0240.406] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\TempState\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bd20 [0240.407] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0240.407] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0240.407] FindClose (in: hFindFile=0x665d90bd20 | out: hFindFile=0x665d90bd20) returned 1 [0240.407] SetLastError (dwErrCode=0x0) [0240.407] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\TempState\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\tempstate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0240.408] GetLastError () returned 0x0 [0240.408] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0240.409] CloseHandle (hObject=0x620) returned 1 [0240.409] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0240.409] FindClose (in: hFindFile=0x665d90bc60 | out: hFindFile=0x665d90bc60) returned 1 [0240.410] SetLastError (dwErrCode=0x0) [0240.410] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0240.410] GetLastError () returned 0xb7 [0240.410] CloseHandle (hObject=0x60c) returned 1 [0240.410] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0240.410] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0240.410] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0240.410] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0240.410] SetLastError (dwErrCode=0x0) [0240.410] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0240.411] GetLastError () returned 0xb7 [0240.411] CloseHandle (hObject=0x60c) returned 1 [0240.411] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows_ie_ac_001\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90bd20 [0240.412] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0240.412] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0240.412] SetLastError (dwErrCode=0x0) [0240.412] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows_ie_ac_001\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows_ie_ac_001\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0240.412] GetLastError () returned 0x0 [0240.412] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0240.413] CloseHandle (hObject=0x620) returned 1 [0240.413] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows_ie_ac_001\\AC\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d340 [0240.415] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0240.415] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0240.415] SetLastError (dwErrCode=0x0) [0240.415] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows_ie_ac_001\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows_ie_ac_001\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0240.416] GetLastError () returned 0x0 [0240.416] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0240.417] CloseHandle (hObject=0x3e8) returned 1 [0240.417] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows_ie_ac_001\\AC\\INetCache\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90cda0 [0240.417] FindNextFileW (in: hFindFile=0x665d90cda0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0240.417] FindNextFileW (in: hFindFile=0x665d90cda0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0240.417] FindClose (in: hFindFile=0x665d90cda0 | out: hFindFile=0x665d90cda0) returned 1 [0240.417] SetLastError (dwErrCode=0x0) [0240.417] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows_ie_ac_001\\AC\\INetCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows_ie_ac_001\\ac\\inetcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0240.419] GetLastError () returned 0x0 [0240.419] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0240.420] CloseHandle (hObject=0x3e8) returned 1 [0240.420] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0240.420] SetLastError (dwErrCode=0x0) [0240.420] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows_ie_ac_001\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows_ie_ac_001\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0240.420] GetLastError () returned 0xb7 [0240.420] CloseHandle (hObject=0x3e8) returned 1 [0240.420] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows_ie_ac_001\\AC\\INetCookies\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90cfe0 [0240.420] FindNextFileW (in: hFindFile=0x665d90cfe0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0240.420] FindNextFileW (in: hFindFile=0x665d90cfe0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0240.420] FindClose (in: hFindFile=0x665d90cfe0 | out: hFindFile=0x665d90cfe0) returned 1 [0240.420] SetLastError (dwErrCode=0x0) [0240.421] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows_ie_ac_001\\AC\\INetCookies\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows_ie_ac_001\\ac\\inetcookies\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0240.421] GetLastError () returned 0x0 [0240.421] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0240.422] CloseHandle (hObject=0x3e8) returned 1 [0240.422] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0240.422] SetLastError (dwErrCode=0x0) [0240.422] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows_ie_ac_001\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows_ie_ac_001\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0240.423] GetLastError () returned 0xb7 [0240.423] CloseHandle (hObject=0x3e8) returned 1 [0240.423] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows_ie_ac_001\\AC\\INetHistory\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c6e0 [0240.423] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0240.423] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0240.423] FindClose (in: hFindFile=0x665d90c6e0 | out: hFindFile=0x665d90c6e0) returned 1 [0240.423] SetLastError (dwErrCode=0x0) [0240.423] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows_ie_ac_001\\AC\\INetHistory\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows_ie_ac_001\\ac\\inethistory\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0240.424] GetLastError () returned 0x0 [0240.424] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0240.425] CloseHandle (hObject=0x3e8) returned 1 [0240.425] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0240.425] SetLastError (dwErrCode=0x0) [0240.425] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows_ie_ac_001\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows_ie_ac_001\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0240.425] GetLastError () returned 0xb7 [0240.425] CloseHandle (hObject=0x3e8) returned 1 [0240.425] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows_ie_ac_001\\AC\\Temp\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c500 [0240.425] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0240.425] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0240.425] FindClose (in: hFindFile=0x665d90c500 | out: hFindFile=0x665d90c500) returned 1 [0240.426] SetLastError (dwErrCode=0x0) [0240.426] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows_ie_ac_001\\AC\\Temp\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows_ie_ac_001\\ac\\temp\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0240.426] GetLastError () returned 0x0 [0240.426] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0240.427] CloseHandle (hObject=0x3e8) returned 1 [0240.427] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0240.428] FindClose (in: hFindFile=0x665d90d340 | out: hFindFile=0x665d90d340) returned 1 [0240.428] SetLastError (dwErrCode=0x0) [0240.428] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows_ie_ac_001\\AC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows_ie_ac_001\\ac\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0240.428] GetLastError () returned 0xb7 [0240.428] CloseHandle (hObject=0x620) returned 1 [0240.428] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0240.428] FindClose (in: hFindFile=0x665d90bd20 | out: hFindFile=0x665d90bd20) returned 1 [0240.428] SetLastError (dwErrCode=0x0) [0240.428] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows_ie_ac_001\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows_ie_ac_001\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0240.428] GetLastError () returned 0xb7 [0240.429] CloseHandle (hObject=0x60c) returned 1 [0240.429] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0240.429] FindClose (in: hFindFile=0x665d90bcc0 | out: hFindFile=0x665d90bcc0) returned 1 [0240.429] SetLastError (dwErrCode=0x0) [0240.429] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0240.429] GetLastError () returned 0xb7 [0240.429] CloseHandle (hObject=0x570) returned 1 [0240.429] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0240.429] SetLastError (dwErrCode=0x0) [0240.429] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0240.430] GetLastError () returned 0xb7 [0240.430] CloseHandle (hObject=0x570) returned 1 [0240.430] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\PeerDistRepub\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90d340 [0240.430] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0240.430] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0240.430] FindClose (in: hFindFile=0x665d90d340 | out: hFindFile=0x665d90d340) returned 1 [0240.430] SetLastError (dwErrCode=0x0) [0240.430] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\PeerDistRepub\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\peerdistrepub\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0240.431] GetLastError () returned 0x0 [0240.431] WriteFile (in: hFile=0x570, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7cc40*=0x324, lpOverlapped=0x0) returned 1 [0240.433] CloseHandle (hObject=0x570) returned 1 [0240.433] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0240.433] SetLastError (dwErrCode=0x0) [0240.433] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0240.433] GetLastError () returned 0xb7 [0240.433] CloseHandle (hObject=0x570) returned 1 [0240.433] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Publishers\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90c980 [0240.433] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0240.434] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0240.434] SetLastError (dwErrCode=0x0) [0240.434] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Publishers\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\publishers\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0240.434] GetLastError () returned 0x0 [0240.434] WriteFile (in: hFile=0x60c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7c490*=0x324, lpOverlapped=0x0) returned 1 [0240.435] CloseHandle (hObject=0x60c) returned 1 [0240.435] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Publishers\\8wekyb3d8bbwe\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c920 [0240.435] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0240.435] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0240.436] SetLastError (dwErrCode=0x0) [0240.436] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Publishers\\8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\publishers\\8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0240.436] GetLastError () returned 0x0 [0240.436] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0240.437] CloseHandle (hObject=0x620) returned 1 [0240.437] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Publishers\\8wekyb3d8bbwe\\Fonts\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90cce0 [0240.437] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0240.437] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0240.437] FindClose (in: hFindFile=0x665d90cce0 | out: hFindFile=0x665d90cce0) returned 1 [0240.438] SetLastError (dwErrCode=0x0) [0240.438] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Publishers\\8wekyb3d8bbwe\\Fonts\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\publishers\\8wekyb3d8bbwe\\fonts\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0240.438] GetLastError () returned 0x0 [0240.438] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0240.439] CloseHandle (hObject=0x620) returned 1 [0240.439] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0240.439] SetLastError (dwErrCode=0x0) [0240.439] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Publishers\\8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\publishers\\8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0240.440] GetLastError () returned 0xb7 [0240.440] CloseHandle (hObject=0x620) returned 1 [0240.440] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Publishers\\8wekyb3d8bbwe\\Licenses\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bea0 [0240.440] FindNextFileW (in: hFindFile=0x665d90bea0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0240.440] FindNextFileW (in: hFindFile=0x665d90bea0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0240.440] FindClose (in: hFindFile=0x665d90bea0 | out: hFindFile=0x665d90bea0) returned 1 [0240.440] SetLastError (dwErrCode=0x0) [0240.440] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Publishers\\8wekyb3d8bbwe\\Licenses\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\publishers\\8wekyb3d8bbwe\\licenses\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0240.441] GetLastError () returned 0x0 [0240.441] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0240.441] CloseHandle (hObject=0x620) returned 1 [0240.442] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0240.442] FindClose (in: hFindFile=0x665d90c920 | out: hFindFile=0x665d90c920) returned 1 [0240.442] SetLastError (dwErrCode=0x0) [0240.442] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Publishers\\8wekyb3d8bbwe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\publishers\\8wekyb3d8bbwe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0240.442] GetLastError () returned 0xb7 [0240.442] CloseHandle (hObject=0x60c) returned 1 [0240.442] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0240.442] FindClose (in: hFindFile=0x665d90c980 | out: hFindFile=0x665d90c980) returned 1 [0240.442] SetLastError (dwErrCode=0x0) [0240.442] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Publishers\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\publishers\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0240.443] GetLastError () returned 0xb7 [0240.443] CloseHandle (hObject=0x570) returned 1 [0240.443] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0240.443] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0240.443] SetLastError (dwErrCode=0x0) [0240.443] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0240.443] GetLastError () returned 0xb7 [0240.443] CloseHandle (hObject=0x570) returned 1 [0240.443] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90c440 [0240.445] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0240.446] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0240.446] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0240.446] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\-FVW.mkv", dwFileAttributes=0x80) returned 1 [0240.447] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\-FVW.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\-fvw.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0240.448] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c288 | out: lpFileSize=0x665da7c288*=100285) returned 1 [0240.448] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c298 | out: lpFileSize=0x665da7c298*=100285) returned 1 [0240.448] SetFilePointerEx (in: hFile=0x60c, liDistanceToMove=0x1869b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0240.448] ReadFile (in: hFile=0x60c, lpBuffer=0x665da7c2e8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7c2a8, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2e8*, lpNumberOfBytesRead=0x665da7c2a8*=0x19, lpOverlapped=0x0) returned 1 [0240.450] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.450] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7c270 | out: phKey=0x665da7c270*=0x665aae6cf0) returned 1 [0240.450] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0240.450] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.450] ReadFile (in: hFile=0x60c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x187bd, lpNumberOfBytesRead=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7c280*=0x187bd, lpOverlapped=0x0) returned 1 [0240.452] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4250) returned 1 [0240.452] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x187bd, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x187c0) returned 1 [0240.452] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.452] WriteFile (in: hFile=0x60c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x187c0, lpNumberOfBytesWritten=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7c280*=0x187c0, lpOverlapped=0x0) returned 1 [0240.453] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c2c0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2c0*, lpNumberOfBytesWritten=0x665da7c284*=0x6, lpOverlapped=0x0) returned 1 [0240.453] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7c290 | out: pbData=0x0*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0240.453] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7c310, pdwDataLen=0x665da7c290 | out: pbData=0x665da7c310*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0240.453] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c310*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c310*, lpNumberOfBytesWritten=0x665da7c284*=0x10c, lpOverlapped=0x0) returned 1 [0240.453] CloseHandle (hObject=0x60c) returned 1 [0240.472] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0240.478] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0240.478] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0240.478] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0240.478] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0240.479] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\0 rOJYVEUF-F4 UZ.png", dwFileAttributes=0x80) returned 1 [0240.479] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\0 rOJYVEUF-F4 UZ.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\0 rojyveuf-f4 uz.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0240.480] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c288 | out: lpFileSize=0x665da7c288*=30625) returned 1 [0240.480] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c298 | out: lpFileSize=0x665da7c298*=30625) returned 1 [0240.480] SetFilePointerEx (in: hFile=0x60c, liDistanceToMove=0x767f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0240.480] ReadFile (in: hFile=0x60c, lpBuffer=0x665da7c2e8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7c2a8, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2e8*, lpNumberOfBytesRead=0x665da7c2a8*=0x19, lpOverlapped=0x0) returned 1 [0240.482] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.482] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7c270 | out: phKey=0x665da7c270*=0x665aae6f20) returned 1 [0240.482] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0240.482] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.482] ReadFile (in: hFile=0x60c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x77a1, lpNumberOfBytesRead=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7c280*=0x77a1, lpOverlapped=0x0) returned 1 [0240.483] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4250) returned 1 [0240.483] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x77a1, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x77b0) returned 1 [0240.483] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.483] WriteFile (in: hFile=0x60c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x77b0, lpNumberOfBytesWritten=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7c280*=0x77b0, lpOverlapped=0x0) returned 1 [0240.483] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c2c0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2c0*, lpNumberOfBytesWritten=0x665da7c284*=0x6, lpOverlapped=0x0) returned 1 [0240.484] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7c290 | out: pbData=0x0*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0240.484] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7c310, pdwDataLen=0x665da7c290 | out: pbData=0x665da7c310*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0240.484] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c310*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c310*, lpNumberOfBytesWritten=0x665da7c284*=0x10c, lpOverlapped=0x0) returned 1 [0240.484] CloseHandle (hObject=0x60c) returned 1 [0240.505] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0240.510] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0240.511] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0240.511] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0240.511] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0240.511] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\0r6WpXN.xls", dwFileAttributes=0x80) returned 1 [0240.512] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\0r6WpXN.xls" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\0r6wpxn.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0240.513] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c288 | out: lpFileSize=0x665da7c288*=2729) returned 1 [0240.513] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c298 | out: lpFileSize=0x665da7c298*=2729) returned 1 [0240.513] SetFilePointerEx (in: hFile=0x60c, liDistanceToMove=0x987, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0240.513] ReadFile (in: hFile=0x60c, lpBuffer=0x665da7c2e8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7c2a8, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2e8*, lpNumberOfBytesRead=0x665da7c2a8*=0x19, lpOverlapped=0x0) returned 1 [0240.514] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.514] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7c270 | out: phKey=0x665da7c270*=0x665aae6f20) returned 1 [0240.514] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0240.514] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.514] ReadFile (in: hFile=0x60c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xaa9, lpNumberOfBytesRead=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7c280*=0xaa9, lpOverlapped=0x0) returned 1 [0240.514] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4250) returned 1 [0240.515] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0xaa9, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0xab0) returned 1 [0240.515] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.515] WriteFile (in: hFile=0x60c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xab0, lpNumberOfBytesWritten=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7c280*=0xab0, lpOverlapped=0x0) returned 1 [0240.515] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c2c0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2c0*, lpNumberOfBytesWritten=0x665da7c284*=0x6, lpOverlapped=0x0) returned 1 [0240.515] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7c290 | out: pbData=0x0*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0240.515] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7c310, pdwDataLen=0x665da7c290 | out: pbData=0x665da7c310*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0240.515] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c310*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c310*, lpNumberOfBytesWritten=0x665da7c284*=0x10c, lpOverlapped=0x0) returned 1 [0240.515] CloseHandle (hObject=0x60c) returned 1 [0240.531] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0240.535] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0240.536] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0240.536] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0240.536] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0240.536] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\3vJSZPaKfxlDtcqp.mp4", dwFileAttributes=0x80) returned 1 [0240.537] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\3vJSZPaKfxlDtcqp.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\3vjszpakfxldtcqp.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0240.538] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c288 | out: lpFileSize=0x665da7c288*=65083) returned 1 [0240.538] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c298 | out: lpFileSize=0x665da7c298*=65083) returned 1 [0240.538] SetFilePointerEx (in: hFile=0x60c, liDistanceToMove=0xfd19, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0240.538] ReadFile (in: hFile=0x60c, lpBuffer=0x665da7c2e8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7c2a8, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2e8*, lpNumberOfBytesRead=0x665da7c2a8*=0x19, lpOverlapped=0x0) returned 1 [0240.539] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.539] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7c270 | out: phKey=0x665da7c270*=0x665aae6cf0) returned 1 [0240.539] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0240.540] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.540] ReadFile (in: hFile=0x60c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xfe3b, lpNumberOfBytesRead=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7c280*=0xfe3b, lpOverlapped=0x0) returned 1 [0240.542] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4250) returned 1 [0240.542] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0xfe3b, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0xfe40) returned 1 [0240.542] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.542] WriteFile (in: hFile=0x60c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xfe40, lpNumberOfBytesWritten=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7c280*=0xfe40, lpOverlapped=0x0) returned 1 [0240.542] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c2c0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2c0*, lpNumberOfBytesWritten=0x665da7c284*=0x6, lpOverlapped=0x0) returned 1 [0240.542] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7c290 | out: pbData=0x0*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0240.542] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7c310, pdwDataLen=0x665da7c290 | out: pbData=0x665da7c310*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0240.542] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c310*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c310*, lpNumberOfBytesWritten=0x665da7c284*=0x10c, lpOverlapped=0x0) returned 1 [0240.542] CloseHandle (hObject=0x60c) returned 1 [0240.559] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0240.562] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0240.563] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0240.563] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0240.563] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0240.563] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\5fyGYJcKGql04Mj.m4a", dwFileAttributes=0x80) returned 1 [0240.564] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\5fyGYJcKGql04Mj.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\5fygyjckgql04mj.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0240.564] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c288 | out: lpFileSize=0x665da7c288*=73614) returned 1 [0240.564] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c298 | out: lpFileSize=0x665da7c298*=73614) returned 1 [0240.564] SetFilePointerEx (in: hFile=0x60c, liDistanceToMove=0x11e6c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0240.565] ReadFile (in: hFile=0x60c, lpBuffer=0x665da7c2e8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7c2a8, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2e8*, lpNumberOfBytesRead=0x665da7c2a8*=0x19, lpOverlapped=0x0) returned 1 [0240.566] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.566] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7c270 | out: phKey=0x665da7c270*=0x665aae6820) returned 1 [0240.566] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0240.566] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.566] ReadFile (in: hFile=0x60c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x11f8e, lpNumberOfBytesRead=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7c280*=0x11f8e, lpOverlapped=0x0) returned 1 [0240.568] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4250) returned 1 [0240.568] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x11f8e, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x11f90) returned 1 [0240.568] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.568] WriteFile (in: hFile=0x60c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x11f90, lpNumberOfBytesWritten=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7c280*=0x11f90, lpOverlapped=0x0) returned 1 [0240.568] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c2c0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2c0*, lpNumberOfBytesWritten=0x665da7c284*=0x6, lpOverlapped=0x0) returned 1 [0240.568] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7c290 | out: pbData=0x0*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0240.568] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7c310, pdwDataLen=0x665da7c290 | out: pbData=0x665da7c310*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0240.569] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c310*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c310*, lpNumberOfBytesWritten=0x665da7c284*=0x10c, lpOverlapped=0x0) returned 1 [0240.569] CloseHandle (hObject=0x60c) returned 1 [0240.584] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0240.588] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0240.588] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0240.588] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0240.588] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0240.589] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\5m JyG94yFTBpsKx7ck5.jpg", dwFileAttributes=0x80) returned 1 [0240.589] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\5m JyG94yFTBpsKx7ck5.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\5m jyg94yftbpskx7ck5.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0240.590] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c288 | out: lpFileSize=0x665da7c288*=7353) returned 1 [0240.590] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c298 | out: lpFileSize=0x665da7c298*=7353) returned 1 [0240.590] SetFilePointerEx (in: hFile=0x60c, liDistanceToMove=0x1b97, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0240.590] ReadFile (in: hFile=0x60c, lpBuffer=0x665da7c2e8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7c2a8, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2e8*, lpNumberOfBytesRead=0x665da7c2a8*=0x19, lpOverlapped=0x0) returned 1 [0240.591] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.591] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7c270 | out: phKey=0x665da7c270*=0x665aae6510) returned 1 [0240.591] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0240.591] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.591] ReadFile (in: hFile=0x60c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x1cb9, lpNumberOfBytesRead=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7c280*=0x1cb9, lpOverlapped=0x0) returned 1 [0240.592] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4250) returned 1 [0240.592] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x1cb9, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x1cc0) returned 1 [0240.592] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.592] WriteFile (in: hFile=0x60c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x1cc0, lpNumberOfBytesWritten=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7c280*=0x1cc0, lpOverlapped=0x0) returned 1 [0240.592] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c2c0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2c0*, lpNumberOfBytesWritten=0x665da7c284*=0x6, lpOverlapped=0x0) returned 1 [0240.592] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7c290 | out: pbData=0x0*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0240.592] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7c310, pdwDataLen=0x665da7c290 | out: pbData=0x665da7c310*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0240.592] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c310*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c310*, lpNumberOfBytesWritten=0x665da7c284*=0x10c, lpOverlapped=0x0) returned 1 [0240.592] CloseHandle (hObject=0x60c) returned 1 [0240.610] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0240.614] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0240.614] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0240.614] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0240.614] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0240.615] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\a qUFbXfIfs.mp4", dwFileAttributes=0x80) returned 1 [0240.615] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\a qUFbXfIfs.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\a qufbxfifs.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0240.616] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c288 | out: lpFileSize=0x665da7c288*=81817) returned 1 [0240.616] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c298 | out: lpFileSize=0x665da7c298*=81817) returned 1 [0240.616] SetFilePointerEx (in: hFile=0x60c, liDistanceToMove=0x13e77, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0240.616] ReadFile (in: hFile=0x60c, lpBuffer=0x665da7c2e8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7c2a8, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2e8*, lpNumberOfBytesRead=0x665da7c2a8*=0x19, lpOverlapped=0x0) returned 1 [0240.617] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.617] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7c270 | out: phKey=0x665da7c270*=0x665aae6820) returned 1 [0240.617] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0240.617] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.617] ReadFile (in: hFile=0x60c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x13f99, lpNumberOfBytesRead=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7c280*=0x13f99, lpOverlapped=0x0) returned 1 [0240.619] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4250) returned 1 [0240.619] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x13f99, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x13fa0) returned 1 [0240.619] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.619] WriteFile (in: hFile=0x60c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x13fa0, lpNumberOfBytesWritten=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7c280*=0x13fa0, lpOverlapped=0x0) returned 1 [0240.619] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c2c0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2c0*, lpNumberOfBytesWritten=0x665da7c284*=0x6, lpOverlapped=0x0) returned 1 [0240.620] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7c290 | out: pbData=0x0*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0240.620] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7c310, pdwDataLen=0x665da7c290 | out: pbData=0x665da7c310*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0240.620] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c310*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c310*, lpNumberOfBytesWritten=0x665da7c284*=0x10c, lpOverlapped=0x0) returned 1 [0240.620] CloseHandle (hObject=0x60c) returned 1 [0240.636] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0240.640] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0240.640] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0240.640] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0240.640] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0240.641] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\bRRqWJbq7sj.ppt", dwFileAttributes=0x80) returned 1 [0240.641] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\bRRqWJbq7sj.ppt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\brrqwjbq7sj.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0240.642] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c288 | out: lpFileSize=0x665da7c288*=45908) returned 1 [0240.642] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c298 | out: lpFileSize=0x665da7c298*=45908) returned 1 [0240.642] SetFilePointerEx (in: hFile=0x60c, liDistanceToMove=0xb232, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0240.642] ReadFile (in: hFile=0x60c, lpBuffer=0x665da7c2e8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7c2a8, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2e8*, lpNumberOfBytesRead=0x665da7c2a8*=0x19, lpOverlapped=0x0) returned 1 [0240.643] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.643] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7c270 | out: phKey=0x665da7c270*=0x665aae6510) returned 1 [0240.643] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0240.643] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.643] ReadFile (in: hFile=0x60c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xb354, lpNumberOfBytesRead=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7c280*=0xb354, lpOverlapped=0x0) returned 1 [0240.644] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4250) returned 1 [0240.644] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0xb354, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0xb360) returned 1 [0240.645] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.645] WriteFile (in: hFile=0x60c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xb360, lpNumberOfBytesWritten=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7c280*=0xb360, lpOverlapped=0x0) returned 1 [0240.645] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c2c0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2c0*, lpNumberOfBytesWritten=0x665da7c284*=0x6, lpOverlapped=0x0) returned 1 [0240.645] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7c290 | out: pbData=0x0*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0240.645] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7c310, pdwDataLen=0x665da7c290 | out: pbData=0x665da7c310*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0240.645] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c310*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c310*, lpNumberOfBytesWritten=0x665da7c284*=0x10c, lpOverlapped=0x0) returned 1 [0240.645] CloseHandle (hObject=0x60c) returned 1 [0240.665] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0240.671] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0240.671] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0240.671] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0240.671] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0240.671] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\cuKfUvhpwB1BLT7.csv", dwFileAttributes=0x80) returned 1 [0240.672] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\cuKfUvhpwB1BLT7.csv" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\cukfuvhpwb1blt7.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0240.672] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c288 | out: lpFileSize=0x665da7c288*=67622) returned 1 [0240.672] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c298 | out: lpFileSize=0x665da7c298*=67622) returned 1 [0240.673] SetFilePointerEx (in: hFile=0x60c, liDistanceToMove=0x10704, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0240.673] ReadFile (in: hFile=0x60c, lpBuffer=0x665da7c2e8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7c2a8, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2e8*, lpNumberOfBytesRead=0x665da7c2a8*=0x19, lpOverlapped=0x0) returned 1 [0240.674] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.674] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7c270 | out: phKey=0x665da7c270*=0x665aae6cf0) returned 1 [0240.674] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0240.674] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.674] ReadFile (in: hFile=0x60c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x10826, lpNumberOfBytesRead=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7c280*=0x10826, lpOverlapped=0x0) returned 1 [0240.675] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4250) returned 1 [0240.675] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x10826, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x10830) returned 1 [0240.675] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.675] WriteFile (in: hFile=0x60c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x10830, lpNumberOfBytesWritten=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7c280*=0x10830, lpOverlapped=0x0) returned 1 [0240.676] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c2c0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2c0*, lpNumberOfBytesWritten=0x665da7c284*=0x6, lpOverlapped=0x0) returned 1 [0240.676] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7c290 | out: pbData=0x0*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0240.676] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7c310, pdwDataLen=0x665da7c290 | out: pbData=0x665da7c310*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0240.676] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c310*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c310*, lpNumberOfBytesWritten=0x665da7c284*=0x10c, lpOverlapped=0x0) returned 1 [0240.676] CloseHandle (hObject=0x60c) returned 1 [0240.692] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0240.696] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0240.696] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0240.696] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0240.696] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0240.697] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\FDDP89T.gif", dwFileAttributes=0x80) returned 1 [0240.698] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\FDDP89T.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\fddp89t.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0240.698] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c288 | out: lpFileSize=0x665da7c288*=78497) returned 1 [0240.698] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c298 | out: lpFileSize=0x665da7c298*=78497) returned 1 [0240.698] SetFilePointerEx (in: hFile=0x60c, liDistanceToMove=0x1317f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0240.698] ReadFile (in: hFile=0x60c, lpBuffer=0x665da7c2e8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7c2a8, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2e8*, lpNumberOfBytesRead=0x665da7c2a8*=0x19, lpOverlapped=0x0) returned 1 [0240.700] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.700] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7c270 | out: phKey=0x665da7c270*=0x665aae6510) returned 1 [0240.700] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0240.700] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.700] ReadFile (in: hFile=0x60c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x132a1, lpNumberOfBytesRead=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7c280*=0x132a1, lpOverlapped=0x0) returned 1 [0240.701] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4250) returned 1 [0240.701] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x132a1, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x132b0) returned 1 [0240.701] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.701] WriteFile (in: hFile=0x60c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x132b0, lpNumberOfBytesWritten=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7c280*=0x132b0, lpOverlapped=0x0) returned 1 [0240.702] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c2c0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2c0*, lpNumberOfBytesWritten=0x665da7c284*=0x6, lpOverlapped=0x0) returned 1 [0240.702] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7c290 | out: pbData=0x0*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0240.702] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7c310, pdwDataLen=0x665da7c290 | out: pbData=0x665da7c310*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0240.702] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c310*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c310*, lpNumberOfBytesWritten=0x665da7c284*=0x10c, lpOverlapped=0x0) returned 1 [0240.702] CloseHandle (hObject=0x60c) returned 1 [0240.718] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0240.722] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0240.722] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0240.722] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0240.722] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0240.722] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\FzTebgG.docx", dwFileAttributes=0x80) returned 1 [0240.723] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\FzTebgG.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\fztebgg.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0240.723] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c288 | out: lpFileSize=0x665da7c288*=86882) returned 1 [0240.723] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c298 | out: lpFileSize=0x665da7c298*=86882) returned 1 [0240.723] SetFilePointerEx (in: hFile=0x60c, liDistanceToMove=0x15240, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0240.723] ReadFile (in: hFile=0x60c, lpBuffer=0x665da7c2e8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7c2a8, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2e8*, lpNumberOfBytesRead=0x665da7c2a8*=0x19, lpOverlapped=0x0) returned 1 [0240.724] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.724] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7c270 | out: phKey=0x665da7c270*=0x665aae6cf0) returned 1 [0240.724] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0240.725] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.725] ReadFile (in: hFile=0x60c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x15362, lpNumberOfBytesRead=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7c280*=0x15362, lpOverlapped=0x0) returned 1 [0240.726] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4250) returned 1 [0240.726] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x15362, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x15370) returned 1 [0240.726] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.726] WriteFile (in: hFile=0x60c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x15370, lpNumberOfBytesWritten=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7c280*=0x15370, lpOverlapped=0x0) returned 1 [0240.727] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c2c0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2c0*, lpNumberOfBytesWritten=0x665da7c284*=0x6, lpOverlapped=0x0) returned 1 [0240.727] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7c290 | out: pbData=0x0*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0240.727] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7c310, pdwDataLen=0x665da7c290 | out: pbData=0x665da7c310*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0240.727] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c310*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c310*, lpNumberOfBytesWritten=0x665da7c284*=0x10c, lpOverlapped=0x0) returned 1 [0240.727] CloseHandle (hObject=0x60c) returned 1 [0240.742] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0240.747] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0240.747] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0240.747] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0240.747] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0240.747] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\F_yp5mydMGzqQMxdmBB.mkv", dwFileAttributes=0x80) returned 1 [0240.748] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\F_yp5mydMGzqQMxdmBB.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\f_yp5mydmgzqqmxdmbb.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0240.748] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c288 | out: lpFileSize=0x665da7c288*=42936) returned 1 [0240.748] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c298 | out: lpFileSize=0x665da7c298*=42936) returned 1 [0240.749] SetFilePointerEx (in: hFile=0x60c, liDistanceToMove=0xa696, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0240.749] ReadFile (in: hFile=0x60c, lpBuffer=0x665da7c2e8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7c2a8, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2e8*, lpNumberOfBytesRead=0x665da7c2a8*=0x19, lpOverlapped=0x0) returned 1 [0240.750] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.750] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7c270 | out: phKey=0x665da7c270*=0x665aae6f20) returned 1 [0240.750] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0240.750] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.750] ReadFile (in: hFile=0x60c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xa7b8, lpNumberOfBytesRead=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7c280*=0xa7b8, lpOverlapped=0x0) returned 1 [0240.751] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4250) returned 1 [0240.751] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0xa7b8, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0xa7c0) returned 1 [0240.751] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.751] WriteFile (in: hFile=0x60c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xa7c0, lpNumberOfBytesWritten=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7c280*=0xa7c0, lpOverlapped=0x0) returned 1 [0240.751] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c2c0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2c0*, lpNumberOfBytesWritten=0x665da7c284*=0x6, lpOverlapped=0x0) returned 1 [0240.751] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7c290 | out: pbData=0x0*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0240.751] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7c310, pdwDataLen=0x665da7c290 | out: pbData=0x665da7c310*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0240.752] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c310*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c310*, lpNumberOfBytesWritten=0x665da7c284*=0x10c, lpOverlapped=0x0) returned 1 [0240.752] CloseHandle (hObject=0x60c) returned 1 [0240.768] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0240.773] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0240.773] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0240.773] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0240.773] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0240.773] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\htD3Lq8I7Qcd.jpg", dwFileAttributes=0x80) returned 1 [0240.774] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\htD3Lq8I7Qcd.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\htd3lq8i7qcd.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0240.774] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c288 | out: lpFileSize=0x665da7c288*=86526) returned 1 [0240.774] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c298 | out: lpFileSize=0x665da7c298*=86526) returned 1 [0240.774] SetFilePointerEx (in: hFile=0x60c, liDistanceToMove=0x150dc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0240.774] ReadFile (in: hFile=0x60c, lpBuffer=0x665da7c2e8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7c2a8, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2e8*, lpNumberOfBytesRead=0x665da7c2a8*=0x19, lpOverlapped=0x0) returned 1 [0240.776] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.776] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7c270 | out: phKey=0x665da7c270*=0x665aae65f0) returned 1 [0240.776] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0240.776] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.776] ReadFile (in: hFile=0x60c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x151fe, lpNumberOfBytesRead=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7c280*=0x151fe, lpOverlapped=0x0) returned 1 [0240.778] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4250) returned 1 [0240.778] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x151fe, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x15200) returned 1 [0240.778] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.778] WriteFile (in: hFile=0x60c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x15200, lpNumberOfBytesWritten=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7c280*=0x15200, lpOverlapped=0x0) returned 1 [0240.778] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c2c0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2c0*, lpNumberOfBytesWritten=0x665da7c284*=0x6, lpOverlapped=0x0) returned 1 [0240.778] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7c290 | out: pbData=0x0*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0240.778] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7c310, pdwDataLen=0x665da7c290 | out: pbData=0x665da7c310*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0240.779] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c310*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c310*, lpNumberOfBytesWritten=0x665da7c284*=0x10c, lpOverlapped=0x0) returned 1 [0240.779] CloseHandle (hObject=0x60c) returned 1 [0240.797] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0240.801] CryptDestroyKey (hKey=0x665aae65f0) returned 1 [0240.801] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0240.801] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0240.801] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0240.801] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\HZLm-IfqQV_J8Y.jpg", dwFileAttributes=0x80) returned 1 [0240.802] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\HZLm-IfqQV_J8Y.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\hzlm-ifqqv_j8y.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0240.803] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c288 | out: lpFileSize=0x665da7c288*=78636) returned 1 [0240.803] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c298 | out: lpFileSize=0x665da7c298*=78636) returned 1 [0240.803] SetFilePointerEx (in: hFile=0x60c, liDistanceToMove=0x1320a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0240.803] ReadFile (in: hFile=0x60c, lpBuffer=0x665da7c2e8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7c2a8, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2e8*, lpNumberOfBytesRead=0x665da7c2a8*=0x19, lpOverlapped=0x0) returned 1 [0240.804] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.804] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7c270 | out: phKey=0x665da7c270*=0x665aae66d0) returned 1 [0240.804] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0240.804] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.804] ReadFile (in: hFile=0x60c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x1332c, lpNumberOfBytesRead=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7c280*=0x1332c, lpOverlapped=0x0) returned 1 [0240.805] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4250) returned 1 [0240.805] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x1332c, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x13330) returned 1 [0240.806] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.806] WriteFile (in: hFile=0x60c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x13330, lpNumberOfBytesWritten=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7c280*=0x13330, lpOverlapped=0x0) returned 1 [0240.806] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c2c0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2c0*, lpNumberOfBytesWritten=0x665da7c284*=0x6, lpOverlapped=0x0) returned 1 [0240.806] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7c290 | out: pbData=0x0*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0240.806] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7c310, pdwDataLen=0x665da7c290 | out: pbData=0x665da7c310*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0240.806] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c310*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c310*, lpNumberOfBytesWritten=0x665da7c284*=0x10c, lpOverlapped=0x0) returned 1 [0240.806] CloseHandle (hObject=0x60c) returned 1 [0240.821] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0240.826] CryptDestroyKey (hKey=0x665aae66d0) returned 1 [0240.826] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0240.826] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0240.826] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0240.826] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\IpMds.m4a", dwFileAttributes=0x80) returned 1 [0240.827] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\IpMds.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\ipmds.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0240.828] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c288 | out: lpFileSize=0x665da7c288*=96102) returned 1 [0240.828] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c298 | out: lpFileSize=0x665da7c298*=96102) returned 1 [0240.828] SetFilePointerEx (in: hFile=0x60c, liDistanceToMove=0x17644, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0240.828] ReadFile (in: hFile=0x60c, lpBuffer=0x665da7c2e8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7c2a8, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2e8*, lpNumberOfBytesRead=0x665da7c2a8*=0x19, lpOverlapped=0x0) returned 1 [0240.829] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.829] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7c270 | out: phKey=0x665da7c270*=0x665aae6cf0) returned 1 [0240.829] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0240.829] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.829] ReadFile (in: hFile=0x60c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x17766, lpNumberOfBytesRead=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7c280*=0x17766, lpOverlapped=0x0) returned 1 [0240.831] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4250) returned 1 [0240.831] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x17766, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x17770) returned 1 [0240.831] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.831] WriteFile (in: hFile=0x60c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x17770, lpNumberOfBytesWritten=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7c280*=0x17770, lpOverlapped=0x0) returned 1 [0240.831] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c2c0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2c0*, lpNumberOfBytesWritten=0x665da7c284*=0x6, lpOverlapped=0x0) returned 1 [0240.831] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7c290 | out: pbData=0x0*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0240.831] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7c310, pdwDataLen=0x665da7c290 | out: pbData=0x665da7c310*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0240.831] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c310*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c310*, lpNumberOfBytesWritten=0x665da7c284*=0x10c, lpOverlapped=0x0) returned 1 [0240.831] CloseHandle (hObject=0x60c) returned 1 [0240.847] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0240.850] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0240.850] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0240.851] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0240.851] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0240.851] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\IqBgwzzbV5qsny.docx", dwFileAttributes=0x80) returned 1 [0240.851] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\IqBgwzzbV5qsny.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\iqbgwzzbv5qsny.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0240.852] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c288 | out: lpFileSize=0x665da7c288*=35370) returned 1 [0240.852] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c298 | out: lpFileSize=0x665da7c298*=35370) returned 1 [0240.852] SetFilePointerEx (in: hFile=0x60c, liDistanceToMove=0x8908, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0240.852] ReadFile (in: hFile=0x60c, lpBuffer=0x665da7c2e8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7c2a8, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2e8*, lpNumberOfBytesRead=0x665da7c2a8*=0x19, lpOverlapped=0x0) returned 1 [0240.854] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.854] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7c270 | out: phKey=0x665da7c270*=0x665aae6cf0) returned 1 [0240.854] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0240.854] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.854] ReadFile (in: hFile=0x60c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x8a2a, lpNumberOfBytesRead=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7c280*=0x8a2a, lpOverlapped=0x0) returned 1 [0240.855] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4250) returned 1 [0240.855] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x8a2a, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x8a30) returned 1 [0240.855] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.855] WriteFile (in: hFile=0x60c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x8a30, lpNumberOfBytesWritten=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7c280*=0x8a30, lpOverlapped=0x0) returned 1 [0240.855] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c2c0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2c0*, lpNumberOfBytesWritten=0x665da7c284*=0x6, lpOverlapped=0x0) returned 1 [0240.855] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7c290 | out: pbData=0x0*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0240.855] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7c310, pdwDataLen=0x665da7c290 | out: pbData=0x665da7c310*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0240.855] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c310*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c310*, lpNumberOfBytesWritten=0x665da7c284*=0x10c, lpOverlapped=0x0) returned 1 [0240.856] CloseHandle (hObject=0x60c) returned 1 [0240.870] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0240.874] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0240.874] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0240.875] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0240.875] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0240.875] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\iWSWLcPzZb7m.gif", dwFileAttributes=0x80) returned 1 [0240.875] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\iWSWLcPzZb7m.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\iwswlcpzzb7m.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0240.876] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c288 | out: lpFileSize=0x665da7c288*=90725) returned 1 [0240.876] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c298 | out: lpFileSize=0x665da7c298*=90725) returned 1 [0240.876] SetFilePointerEx (in: hFile=0x60c, liDistanceToMove=0x16143, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0240.876] ReadFile (in: hFile=0x60c, lpBuffer=0x665da7c2e8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7c2a8, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2e8*, lpNumberOfBytesRead=0x665da7c2a8*=0x19, lpOverlapped=0x0) returned 1 [0240.877] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.877] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7c270 | out: phKey=0x665da7c270*=0x665aae6f20) returned 1 [0240.878] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0240.878] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.878] ReadFile (in: hFile=0x60c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x16265, lpNumberOfBytesRead=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7c280*=0x16265, lpOverlapped=0x0) returned 1 [0240.879] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4250) returned 1 [0240.879] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x16265, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x16270) returned 1 [0240.880] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.880] WriteFile (in: hFile=0x60c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x16270, lpNumberOfBytesWritten=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7c280*=0x16270, lpOverlapped=0x0) returned 1 [0240.880] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c2c0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2c0*, lpNumberOfBytesWritten=0x665da7c284*=0x6, lpOverlapped=0x0) returned 1 [0240.880] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7c290 | out: pbData=0x0*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0240.880] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7c310, pdwDataLen=0x665da7c290 | out: pbData=0x665da7c310*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0240.880] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c310*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c310*, lpNumberOfBytesWritten=0x665da7c284*=0x10c, lpOverlapped=0x0) returned 1 [0240.880] CloseHandle (hObject=0x60c) returned 1 [0240.896] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0240.899] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0240.899] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0240.900] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0240.900] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0240.900] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\ixMnMdEMtK.m4a", dwFileAttributes=0x80) returned 1 [0240.901] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\ixMnMdEMtK.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\ixmnmdemtk.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0240.901] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c288 | out: lpFileSize=0x665da7c288*=93755) returned 1 [0240.901] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c298 | out: lpFileSize=0x665da7c298*=93755) returned 1 [0240.901] SetFilePointerEx (in: hFile=0x60c, liDistanceToMove=0x16d19, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0240.901] ReadFile (in: hFile=0x60c, lpBuffer=0x665da7c2e8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7c2a8, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2e8*, lpNumberOfBytesRead=0x665da7c2a8*=0x19, lpOverlapped=0x0) returned 1 [0240.902] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.902] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7c270 | out: phKey=0x665da7c270*=0x665aae6510) returned 1 [0240.902] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0240.902] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.903] ReadFile (in: hFile=0x60c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x16e3b, lpNumberOfBytesRead=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7c280*=0x16e3b, lpOverlapped=0x0) returned 1 [0240.904] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4250) returned 1 [0240.904] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x16e3b, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x16e40) returned 1 [0240.904] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.904] WriteFile (in: hFile=0x60c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x16e40, lpNumberOfBytesWritten=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7c280*=0x16e40, lpOverlapped=0x0) returned 1 [0240.905] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c2c0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2c0*, lpNumberOfBytesWritten=0x665da7c284*=0x6, lpOverlapped=0x0) returned 1 [0240.905] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7c290 | out: pbData=0x0*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0240.905] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7c310, pdwDataLen=0x665da7c290 | out: pbData=0x665da7c310*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0240.905] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c310*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c310*, lpNumberOfBytesWritten=0x665da7c284*=0x10c, lpOverlapped=0x0) returned 1 [0240.905] CloseHandle (hObject=0x60c) returned 1 [0240.919] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0240.923] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0240.923] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0240.923] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0240.923] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0240.923] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\JlZNOqRrBXNXQ- yE6zA.odt", dwFileAttributes=0x80) returned 1 [0240.924] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\JlZNOqRrBXNXQ- yE6zA.odt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\jlznoqrrbxnxq- ye6za.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0240.924] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c288 | out: lpFileSize=0x665da7c288*=28376) returned 1 [0240.924] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c298 | out: lpFileSize=0x665da7c298*=28376) returned 1 [0240.924] SetFilePointerEx (in: hFile=0x60c, liDistanceToMove=0x6db6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0240.924] ReadFile (in: hFile=0x60c, lpBuffer=0x665da7c2e8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7c2a8, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2e8*, lpNumberOfBytesRead=0x665da7c2a8*=0x19, lpOverlapped=0x0) returned 1 [0240.925] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.925] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7c270 | out: phKey=0x665da7c270*=0x665aae6cf0) returned 1 [0240.925] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0240.925] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.925] ReadFile (in: hFile=0x60c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x6ed8, lpNumberOfBytesRead=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7c280*=0x6ed8, lpOverlapped=0x0) returned 1 [0240.926] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4250) returned 1 [0240.926] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x6ed8, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x6ee0) returned 1 [0240.926] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.926] WriteFile (in: hFile=0x60c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x6ee0, lpNumberOfBytesWritten=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7c280*=0x6ee0, lpOverlapped=0x0) returned 1 [0240.926] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c2c0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2c0*, lpNumberOfBytesWritten=0x665da7c284*=0x6, lpOverlapped=0x0) returned 1 [0240.926] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7c290 | out: pbData=0x0*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0240.926] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7c310, pdwDataLen=0x665da7c290 | out: pbData=0x665da7c310*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0240.926] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c310*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c310*, lpNumberOfBytesWritten=0x665da7c284*=0x10c, lpOverlapped=0x0) returned 1 [0240.926] CloseHandle (hObject=0x60c) returned 1 [0240.944] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0240.948] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0240.948] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0240.949] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0240.949] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0240.949] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\kI2lx3HdV kpL.bmp", dwFileAttributes=0x80) returned 1 [0240.949] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\kI2lx3HdV kpL.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\ki2lx3hdv kpl.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0240.950] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c288 | out: lpFileSize=0x665da7c288*=39699) returned 1 [0240.950] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c298 | out: lpFileSize=0x665da7c298*=39699) returned 1 [0240.950] SetFilePointerEx (in: hFile=0x60c, liDistanceToMove=0x99f1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0240.950] ReadFile (in: hFile=0x60c, lpBuffer=0x665da7c2e8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7c2a8, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2e8*, lpNumberOfBytesRead=0x665da7c2a8*=0x19, lpOverlapped=0x0) returned 1 [0240.952] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.952] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7c270 | out: phKey=0x665da7c270*=0x665aae65f0) returned 1 [0240.952] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0240.952] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.952] ReadFile (in: hFile=0x60c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x9b13, lpNumberOfBytesRead=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7c280*=0x9b13, lpOverlapped=0x0) returned 1 [0240.953] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4250) returned 1 [0240.954] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x9b13, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x9b20) returned 1 [0240.954] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.954] WriteFile (in: hFile=0x60c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x9b20, lpNumberOfBytesWritten=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7c280*=0x9b20, lpOverlapped=0x0) returned 1 [0240.954] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c2c0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2c0*, lpNumberOfBytesWritten=0x665da7c284*=0x6, lpOverlapped=0x0) returned 1 [0240.954] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7c290 | out: pbData=0x0*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0240.954] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7c310, pdwDataLen=0x665da7c290 | out: pbData=0x665da7c310*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0240.954] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c310*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c310*, lpNumberOfBytesWritten=0x665da7c284*=0x10c, lpOverlapped=0x0) returned 1 [0240.954] CloseHandle (hObject=0x60c) returned 1 [0240.971] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0240.976] CryptDestroyKey (hKey=0x665aae65f0) returned 1 [0240.976] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0240.976] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0240.976] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0240.977] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\LOyWx.mp3", dwFileAttributes=0x80) returned 1 [0240.977] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\LOyWx.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\loywx.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0240.978] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c288 | out: lpFileSize=0x665da7c288*=57088) returned 1 [0240.978] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c298 | out: lpFileSize=0x665da7c298*=57088) returned 1 [0240.978] SetFilePointerEx (in: hFile=0x60c, liDistanceToMove=0xddde, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0240.978] ReadFile (in: hFile=0x60c, lpBuffer=0x665da7c2e8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7c2a8, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2e8*, lpNumberOfBytesRead=0x665da7c2a8*=0x19, lpOverlapped=0x0) returned 1 [0240.987] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.987] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7c270 | out: phKey=0x665da7c270*=0x665aae6510) returned 1 [0240.987] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0240.987] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.988] ReadFile (in: hFile=0x60c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xdf00, lpNumberOfBytesRead=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7c280*=0xdf00, lpOverlapped=0x0) returned 1 [0240.989] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4250) returned 1 [0240.989] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0xdf00, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0xdf10) returned 1 [0240.989] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0240.989] WriteFile (in: hFile=0x60c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xdf10, lpNumberOfBytesWritten=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7c280*=0xdf10, lpOverlapped=0x0) returned 1 [0240.989] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c2c0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2c0*, lpNumberOfBytesWritten=0x665da7c284*=0x6, lpOverlapped=0x0) returned 1 [0240.989] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7c290 | out: pbData=0x0*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0240.990] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7c310, pdwDataLen=0x665da7c290 | out: pbData=0x665da7c310*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0240.990] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c310*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c310*, lpNumberOfBytesWritten=0x665da7c284*=0x10c, lpOverlapped=0x0) returned 1 [0240.990] CloseHandle (hObject=0x60c) returned 1 [0241.008] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0241.012] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0241.012] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0241.012] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0241.012] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0241.012] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\OUi1qwRoV0S.csv", dwFileAttributes=0x80) returned 1 [0241.013] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\OUi1qwRoV0S.csv" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\oui1qwrov0s.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0241.014] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c288 | out: lpFileSize=0x665da7c288*=74502) returned 1 [0241.014] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c298 | out: lpFileSize=0x665da7c298*=74502) returned 1 [0241.014] SetFilePointerEx (in: hFile=0x60c, liDistanceToMove=0x121e4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0241.014] ReadFile (in: hFile=0x60c, lpBuffer=0x665da7c2e8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7c2a8, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2e8*, lpNumberOfBytesRead=0x665da7c2a8*=0x19, lpOverlapped=0x0) returned 1 [0241.015] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0241.015] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7c270 | out: phKey=0x665da7c270*=0x665aae6cf0) returned 1 [0241.015] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0241.015] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0241.015] ReadFile (in: hFile=0x60c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x12306, lpNumberOfBytesRead=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7c280*=0x12306, lpOverlapped=0x0) returned 1 [0241.016] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4250) returned 1 [0241.016] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x12306, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x12310) returned 1 [0241.016] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0241.017] WriteFile (in: hFile=0x60c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x12310, lpNumberOfBytesWritten=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7c280*=0x12310, lpOverlapped=0x0) returned 1 [0241.017] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c2c0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2c0*, lpNumberOfBytesWritten=0x665da7c284*=0x6, lpOverlapped=0x0) returned 1 [0241.017] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7c290 | out: pbData=0x0*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0241.017] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7c310, pdwDataLen=0x665da7c290 | out: pbData=0x665da7c310*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0241.017] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c310*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c310*, lpNumberOfBytesWritten=0x665da7c284*=0x10c, lpOverlapped=0x0) returned 1 [0241.017] CloseHandle (hObject=0x60c) returned 1 [0241.037] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0241.042] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0241.042] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0241.042] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0241.042] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0241.042] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\oVBOGDbXAV-FWCLv0.mkv", dwFileAttributes=0x80) returned 1 [0241.043] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\oVBOGDbXAV-FWCLv0.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\ovbogdbxav-fwclv0.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0241.044] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c288 | out: lpFileSize=0x665da7c288*=7888) returned 1 [0241.044] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c298 | out: lpFileSize=0x665da7c298*=7888) returned 1 [0241.044] SetFilePointerEx (in: hFile=0x60c, liDistanceToMove=0x1dae, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0241.044] ReadFile (in: hFile=0x60c, lpBuffer=0x665da7c2e8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7c2a8, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2e8*, lpNumberOfBytesRead=0x665da7c2a8*=0x19, lpOverlapped=0x0) returned 1 [0241.045] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0241.045] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7c270 | out: phKey=0x665da7c270*=0x665aae6cf0) returned 1 [0241.045] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0241.046] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0241.046] ReadFile (in: hFile=0x60c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x1ed0, lpNumberOfBytesRead=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7c280*=0x1ed0, lpOverlapped=0x0) returned 1 [0241.046] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4250) returned 1 [0241.046] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x1ed0, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x1ee0) returned 1 [0241.046] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0241.046] WriteFile (in: hFile=0x60c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x1ee0, lpNumberOfBytesWritten=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7c280*=0x1ee0, lpOverlapped=0x0) returned 1 [0241.047] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c2c0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2c0*, lpNumberOfBytesWritten=0x665da7c284*=0x6, lpOverlapped=0x0) returned 1 [0241.047] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7c290 | out: pbData=0x0*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0241.047] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7c310, pdwDataLen=0x665da7c290 | out: pbData=0x665da7c310*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0241.047] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c310*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c310*, lpNumberOfBytesWritten=0x665da7c284*=0x10c, lpOverlapped=0x0) returned 1 [0241.047] CloseHandle (hObject=0x60c) returned 1 [0241.067] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0241.073] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0241.073] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0241.073] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0241.073] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0241.073] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\RE_wNbO.swf", dwFileAttributes=0x80) returned 1 [0241.076] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\RE_wNbO.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\re_wnbo.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0241.076] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c288 | out: lpFileSize=0x665da7c288*=30188) returned 1 [0241.076] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c298 | out: lpFileSize=0x665da7c298*=30188) returned 1 [0241.077] SetFilePointerEx (in: hFile=0x60c, liDistanceToMove=0x74ca, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0241.077] ReadFile (in: hFile=0x60c, lpBuffer=0x665da7c2e8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7c2a8, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2e8*, lpNumberOfBytesRead=0x665da7c2a8*=0x19, lpOverlapped=0x0) returned 1 [0241.078] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0241.078] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7c270 | out: phKey=0x665da7c270*=0x665aae65f0) returned 1 [0241.078] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0241.079] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0241.079] ReadFile (in: hFile=0x60c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x75ec, lpNumberOfBytesRead=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7c280*=0x75ec, lpOverlapped=0x0) returned 1 [0241.080] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4250) returned 1 [0241.080] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x75ec, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x75f0) returned 1 [0241.080] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0241.080] WriteFile (in: hFile=0x60c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x75f0, lpNumberOfBytesWritten=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7c280*=0x75f0, lpOverlapped=0x0) returned 1 [0241.080] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c2c0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2c0*, lpNumberOfBytesWritten=0x665da7c284*=0x6, lpOverlapped=0x0) returned 1 [0241.080] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7c290 | out: pbData=0x0*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0241.080] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7c310, pdwDataLen=0x665da7c290 | out: pbData=0x665da7c310*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0241.080] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c310*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c310*, lpNumberOfBytesWritten=0x665da7c284*=0x10c, lpOverlapped=0x0) returned 1 [0241.080] CloseHandle (hObject=0x60c) returned 1 [0241.101] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0241.106] CryptDestroyKey (hKey=0x665aae65f0) returned 1 [0241.106] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0241.106] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0241.106] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0241.107] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\sbiu0B6T.jpg", dwFileAttributes=0x80) returned 1 [0241.107] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\sbiu0B6T.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\sbiu0b6t.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0241.108] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c288 | out: lpFileSize=0x665da7c288*=37106) returned 1 [0241.108] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c298 | out: lpFileSize=0x665da7c298*=37106) returned 1 [0241.108] SetFilePointerEx (in: hFile=0x60c, liDistanceToMove=0x8fd0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0241.108] ReadFile (in: hFile=0x60c, lpBuffer=0x665da7c2e8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7c2a8, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2e8*, lpNumberOfBytesRead=0x665da7c2a8*=0x19, lpOverlapped=0x0) returned 1 [0241.109] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0241.109] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7c270 | out: phKey=0x665da7c270*=0x665aae70e0) returned 1 [0241.109] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0241.109] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0241.109] ReadFile (in: hFile=0x60c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x90f2, lpNumberOfBytesRead=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7c280*=0x90f2, lpOverlapped=0x0) returned 1 [0241.111] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4250) returned 1 [0241.111] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x90f2, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x9100) returned 1 [0241.111] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0241.111] WriteFile (in: hFile=0x60c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x9100, lpNumberOfBytesWritten=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7c280*=0x9100, lpOverlapped=0x0) returned 1 [0241.111] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c2c0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2c0*, lpNumberOfBytesWritten=0x665da7c284*=0x6, lpOverlapped=0x0) returned 1 [0241.111] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7c290 | out: pbData=0x0*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0241.111] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7c310, pdwDataLen=0x665da7c290 | out: pbData=0x665da7c310*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0241.111] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c310*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c310*, lpNumberOfBytesWritten=0x665da7c284*=0x10c, lpOverlapped=0x0) returned 1 [0241.111] CloseHandle (hObject=0x60c) returned 1 [0241.131] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0241.137] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0241.137] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0241.137] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0241.137] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0241.137] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\tmlbQP8W_.avi", dwFileAttributes=0x80) returned 1 [0241.138] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\tmlbQP8W_.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\tmlbqp8w_.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0241.139] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c288 | out: lpFileSize=0x665da7c288*=37067) returned 1 [0241.139] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c298 | out: lpFileSize=0x665da7c298*=37067) returned 1 [0241.139] SetFilePointerEx (in: hFile=0x60c, liDistanceToMove=0x8fa9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0241.139] ReadFile (in: hFile=0x60c, lpBuffer=0x665da7c2e8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7c2a8, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2e8*, lpNumberOfBytesRead=0x665da7c2a8*=0x19, lpOverlapped=0x0) returned 1 [0241.140] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0241.140] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7c270 | out: phKey=0x665da7c270*=0x665aae6510) returned 1 [0241.140] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0241.140] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0241.140] ReadFile (in: hFile=0x60c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x90cb, lpNumberOfBytesRead=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7c280*=0x90cb, lpOverlapped=0x0) returned 1 [0241.141] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4250) returned 1 [0241.141] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x90cb, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x90d0) returned 1 [0241.141] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0241.141] WriteFile (in: hFile=0x60c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x90d0, lpNumberOfBytesWritten=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7c280*=0x90d0, lpOverlapped=0x0) returned 1 [0241.142] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c2c0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2c0*, lpNumberOfBytesWritten=0x665da7c284*=0x6, lpOverlapped=0x0) returned 1 [0241.142] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7c290 | out: pbData=0x0*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0241.142] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7c310, pdwDataLen=0x665da7c290 | out: pbData=0x665da7c310*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0241.142] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c310*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c310*, lpNumberOfBytesWritten=0x665da7c284*=0x10c, lpOverlapped=0x0) returned 1 [0241.142] CloseHandle (hObject=0x60c) returned 1 [0241.189] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0241.193] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0241.193] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0241.193] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0241.193] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0241.194] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\W-Uoy.mp3", dwFileAttributes=0x80) returned 1 [0241.194] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\W-Uoy.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\w-uoy.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0241.195] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c288 | out: lpFileSize=0x665da7c288*=64074) returned 1 [0241.195] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c298 | out: lpFileSize=0x665da7c298*=64074) returned 1 [0241.195] SetFilePointerEx (in: hFile=0x60c, liDistanceToMove=0xf928, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0241.195] ReadFile (in: hFile=0x60c, lpBuffer=0x665da7c2e8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7c2a8, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2e8*, lpNumberOfBytesRead=0x665da7c2a8*=0x19, lpOverlapped=0x0) returned 1 [0241.196] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0241.196] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7c270 | out: phKey=0x665da7c270*=0x665aae70e0) returned 1 [0241.196] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0241.196] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0241.196] ReadFile (in: hFile=0x60c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xfa4a, lpNumberOfBytesRead=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7c280*=0xfa4a, lpOverlapped=0x0) returned 1 [0241.198] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4250) returned 1 [0241.198] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0xfa4a, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0xfa50) returned 1 [0241.198] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0241.198] WriteFile (in: hFile=0x60c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xfa50, lpNumberOfBytesWritten=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7c280*=0xfa50, lpOverlapped=0x0) returned 1 [0241.198] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c2c0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2c0*, lpNumberOfBytesWritten=0x665da7c284*=0x6, lpOverlapped=0x0) returned 1 [0241.198] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7c290 | out: pbData=0x0*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0241.198] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7c310, pdwDataLen=0x665da7c290 | out: pbData=0x665da7c310*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0241.198] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c310*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c310*, lpNumberOfBytesWritten=0x665da7c284*=0x10c, lpOverlapped=0x0) returned 1 [0241.198] CloseHandle (hObject=0x60c) returned 1 [0241.215] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0241.219] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0241.219] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0241.219] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0241.219] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0241.220] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\w19KwsMqr3F--I.bmp", dwFileAttributes=0x80) returned 1 [0241.220] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\w19KwsMqr3F--I.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\w19kwsmqr3f--i.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0241.221] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c288 | out: lpFileSize=0x665da7c288*=81882) returned 1 [0241.221] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c298 | out: lpFileSize=0x665da7c298*=81882) returned 1 [0241.221] SetFilePointerEx (in: hFile=0x60c, liDistanceToMove=0x13eb8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0241.221] ReadFile (in: hFile=0x60c, lpBuffer=0x665da7c2e8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7c2a8, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2e8*, lpNumberOfBytesRead=0x665da7c2a8*=0x19, lpOverlapped=0x0) returned 1 [0241.222] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0241.222] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7c270 | out: phKey=0x665da7c270*=0x665aae6820) returned 1 [0241.222] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0241.222] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0241.222] ReadFile (in: hFile=0x60c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x13fda, lpNumberOfBytesRead=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7c280*=0x13fda, lpOverlapped=0x0) returned 1 [0241.224] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4250) returned 1 [0241.224] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x13fda, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x13fe0) returned 1 [0241.224] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0241.224] WriteFile (in: hFile=0x60c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x13fe0, lpNumberOfBytesWritten=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7c280*=0x13fe0, lpOverlapped=0x0) returned 1 [0241.224] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c2c0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2c0*, lpNumberOfBytesWritten=0x665da7c284*=0x6, lpOverlapped=0x0) returned 1 [0241.224] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7c290 | out: pbData=0x0*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0241.224] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7c310, pdwDataLen=0x665da7c290 | out: pbData=0x665da7c310*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0241.224] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c310*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c310*, lpNumberOfBytesWritten=0x665da7c284*=0x10c, lpOverlapped=0x0) returned 1 [0241.224] CloseHandle (hObject=0x60c) returned 1 [0241.305] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0241.309] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0241.310] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0241.310] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0241.310] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0241.310] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\xH0Zlul.avi", dwFileAttributes=0x80) returned 1 [0241.311] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\xH0Zlul.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\xh0zlul.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0241.311] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c288 | out: lpFileSize=0x665da7c288*=61677) returned 1 [0241.311] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c298 | out: lpFileSize=0x665da7c298*=61677) returned 1 [0241.311] SetFilePointerEx (in: hFile=0x60c, liDistanceToMove=0xefcb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0241.311] ReadFile (in: hFile=0x60c, lpBuffer=0x665da7c2e8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7c2a8, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2e8*, lpNumberOfBytesRead=0x665da7c2a8*=0x19, lpOverlapped=0x0) returned 1 [0241.312] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0241.312] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7c270 | out: phKey=0x665da7c270*=0x665aae6f20) returned 1 [0241.312] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0241.313] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0241.313] ReadFile (in: hFile=0x60c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xf0ed, lpNumberOfBytesRead=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7c280*=0xf0ed, lpOverlapped=0x0) returned 1 [0241.314] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4250) returned 1 [0241.314] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0xf0ed, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0xf0f0) returned 1 [0241.314] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0241.314] WriteFile (in: hFile=0x60c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xf0f0, lpNumberOfBytesWritten=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7c280*=0xf0f0, lpOverlapped=0x0) returned 1 [0241.314] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c2c0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2c0*, lpNumberOfBytesWritten=0x665da7c284*=0x6, lpOverlapped=0x0) returned 1 [0241.314] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7c290 | out: pbData=0x0*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0241.314] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7c310, pdwDataLen=0x665da7c290 | out: pbData=0x665da7c310*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0241.314] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c310*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c310*, lpNumberOfBytesWritten=0x665da7c284*=0x10c, lpOverlapped=0x0) returned 1 [0241.314] CloseHandle (hObject=0x60c) returned 1 [0241.332] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0241.336] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0241.336] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0241.336] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0241.336] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0241.336] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\YYAbkBT6CmHO9X.wav", dwFileAttributes=0x80) returned 1 [0241.337] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\YYAbkBT6CmHO9X.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\yyabkbt6cmho9x.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0241.337] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c288 | out: lpFileSize=0x665da7c288*=57051) returned 1 [0241.338] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c298 | out: lpFileSize=0x665da7c298*=57051) returned 1 [0241.338] SetFilePointerEx (in: hFile=0x60c, liDistanceToMove=0xddb9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0241.338] ReadFile (in: hFile=0x60c, lpBuffer=0x665da7c2e8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7c2a8, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2e8*, lpNumberOfBytesRead=0x665da7c2a8*=0x19, lpOverlapped=0x0) returned 1 [0241.339] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0241.339] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7c270 | out: phKey=0x665da7c270*=0x665aae6510) returned 1 [0241.339] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0241.339] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0241.339] ReadFile (in: hFile=0x60c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xdedb, lpNumberOfBytesRead=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7c280*=0xdedb, lpOverlapped=0x0) returned 1 [0241.340] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4250) returned 1 [0241.340] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0xdedb, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0xdee0) returned 1 [0241.340] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0241.341] WriteFile (in: hFile=0x60c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xdee0, lpNumberOfBytesWritten=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7c280*=0xdee0, lpOverlapped=0x0) returned 1 [0241.341] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c2c0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2c0*, lpNumberOfBytesWritten=0x665da7c284*=0x6, lpOverlapped=0x0) returned 1 [0241.341] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7c290 | out: pbData=0x0*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0241.341] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7c310, pdwDataLen=0x665da7c290 | out: pbData=0x665da7c310*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0241.341] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c310*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c310*, lpNumberOfBytesWritten=0x665da7c284*=0x10c, lpOverlapped=0x0) returned 1 [0241.341] CloseHandle (hObject=0x60c) returned 1 [0241.357] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0241.361] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0241.361] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0241.361] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0241.361] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0241.362] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\_BEQnfXCjaZNmjzJqEi.bmp", dwFileAttributes=0x80) returned 1 [0241.362] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\_BEQnfXCjaZNmjzJqEi.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\_beqnfxcjaznmjzjqei.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0241.363] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c288 | out: lpFileSize=0x665da7c288*=57587) returned 1 [0241.363] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c298 | out: lpFileSize=0x665da7c298*=57587) returned 1 [0241.363] SetFilePointerEx (in: hFile=0x60c, liDistanceToMove=0xdfd1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0241.363] ReadFile (in: hFile=0x60c, lpBuffer=0x665da7c2e8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7c2a8, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2e8*, lpNumberOfBytesRead=0x665da7c2a8*=0x19, lpOverlapped=0x0) returned 1 [0241.364] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0241.364] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7c270 | out: phKey=0x665da7c270*=0x665aae6f20) returned 1 [0241.364] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0241.364] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0241.364] ReadFile (in: hFile=0x60c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xe0f3, lpNumberOfBytesRead=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7c280*=0xe0f3, lpOverlapped=0x0) returned 1 [0241.366] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4250) returned 1 [0241.366] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0xe0f3, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0xe100) returned 1 [0241.366] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0241.366] WriteFile (in: hFile=0x60c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xe100, lpNumberOfBytesWritten=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7c280*=0xe100, lpOverlapped=0x0) returned 1 [0241.366] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c2c0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2c0*, lpNumberOfBytesWritten=0x665da7c284*=0x6, lpOverlapped=0x0) returned 1 [0241.366] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7c290 | out: pbData=0x0*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0241.366] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7c310, pdwDataLen=0x665da7c290 | out: pbData=0x665da7c310*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0241.366] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c310*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c310*, lpNumberOfBytesWritten=0x665da7c284*=0x10c, lpOverlapped=0x0) returned 1 [0241.366] CloseHandle (hObject=0x60c) returned 1 [0241.382] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0241.386] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0241.386] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0241.387] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0241.387] FindClose (in: hFindFile=0x665d90c440 | out: hFindFile=0x665d90c440) returned 1 [0241.387] SetLastError (dwErrCode=0x0) [0241.387] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0241.387] GetLastError () returned 0x0 [0241.387] WriteFile (in: hFile=0x570, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7cc40*=0x324, lpOverlapped=0x0) returned 1 [0241.388] CloseHandle (hObject=0x570) returned 1 [0241.388] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0241.389] SetLastError (dwErrCode=0x0) [0241.389] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0241.389] GetLastError () returned 0xb7 [0241.389] CloseHandle (hObject=0x570) returned 1 [0241.389] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temporary Internet Files\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0xffffffffffffffff [0241.389] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0241.389] SetLastError (dwErrCode=0x0) [0241.389] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temporary Internet Files\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temporary internet files\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0241.390] GetLastError () returned 0x0 [0241.390] WriteFile (in: hFile=0x570, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7cc40*=0x324, lpOverlapped=0x0) returned 1 [0241.391] CloseHandle (hObject=0x570) returned 1 [0241.391] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0241.391] SetLastError (dwErrCode=0x0) [0241.391] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0241.391] GetLastError () returned 0xb7 [0241.391] CloseHandle (hObject=0x570) returned 1 [0241.391] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90c4a0 [0241.392] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0241.392] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0241.392] SetLastError (dwErrCode=0x0) [0241.392] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0241.392] GetLastError () returned 0x0 [0241.392] WriteFile (in: hFile=0x60c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7c490*=0x324, lpOverlapped=0x0) returned 1 [0241.393] CloseHandle (hObject=0x60c) returned 1 [0241.393] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90cbc0 [0241.393] FindNextFileW (in: hFindFile=0x665d90cbc0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0241.393] FindNextFileW (in: hFindFile=0x665d90cbc0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0241.393] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0241.394] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDB.chk", dwFileAttributes=0x80) returned 1 [0241.394] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDB.chk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\edb.chk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0241.394] GetFileSizeEx (in: hFile=0x620, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=8192) returned 1 [0241.394] GetFileSizeEx (in: hFile=0x620, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=8192) returned 1 [0241.394] SetFilePointerEx (in: hFile=0x620, liDistanceToMove=0x1ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0241.394] ReadFile (in: hFile=0x620, lpBuffer=0x665da7bb38, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7baf8, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb38*, lpNumberOfBytesRead=0x665da7baf8*=0x19, lpOverlapped=0x0) returned 1 [0241.395] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0241.395] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7bac0 | out: phKey=0x665da7bac0*=0x665aae6f20) returned 1 [0241.395] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0241.395] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0241.395] ReadFile (in: hFile=0x620, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7bad0*=0x2000, lpOverlapped=0x0) returned 1 [0241.395] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4250) returned 1 [0241.395] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0x2000, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0x2010) returned 1 [0241.396] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0241.396] WriteFile (in: hFile=0x620, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7bad0*=0x2010, lpOverlapped=0x0) returned 1 [0241.396] WriteFile (in: hFile=0x620, lpBuffer=0x665da7bb10*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb10*, lpNumberOfBytesWritten=0x665da7bad4*=0x6, lpOverlapped=0x0) returned 1 [0241.396] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7bae0 | out: pbData=0x0*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0241.396] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7bb60, pdwDataLen=0x665da7bae0 | out: pbData=0x665da7bb60*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0241.396] WriteFile (in: hFile=0x620, lpBuffer=0x665da7bb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb60*, lpNumberOfBytesWritten=0x665da7bad4*=0x10c, lpOverlapped=0x0) returned 1 [0241.396] CloseHandle (hObject=0x620) returned 1 [0241.413] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0241.418] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0241.418] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0241.418] FindNextFileW (in: hFindFile=0x665d90cbc0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0241.418] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0241.418] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDB.log", dwFileAttributes=0x80) returned 1 [0241.419] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDB.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\edb.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0241.419] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0241.419] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0241.419] FindNextFileW (in: hFindFile=0x665d90cbc0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0241.419] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0241.419] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDB00005.log", dwFileAttributes=0x80) returned 1 [0241.420] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDB00005.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\edb00005.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0241.420] GetFileSizeEx (in: hFile=0x620, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=2097152) returned 1 [0241.420] GetFileSizeEx (in: hFile=0x620, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=2097152) returned 1 [0241.420] SetFilePointerEx (in: hFile=0x620, liDistanceToMove=0x1ffede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0241.420] ReadFile (in: hFile=0x620, lpBuffer=0x665da7bb38, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7baf8, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb38*, lpNumberOfBytesRead=0x665da7baf8*=0x19, lpOverlapped=0x0) returned 1 [0241.421] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0241.421] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7bac0 | out: phKey=0x665da7bac0*=0x665aae6cf0) returned 1 [0241.422] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0241.422] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0241.422] ReadFile (in: hFile=0x620, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7bad0*=0xf4240, lpOverlapped=0x0) returned 1 [0241.440] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240) returned 1 [0241.440] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0xf4240) returned 1 [0241.442] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0241.442] WriteFile (in: hFile=0x620, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7bad0*=0xf4240, lpOverlapped=0x0) returned 1 [0241.445] SetFilePointer (in: hFile=0x620, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0241.445] ReadFile (in: hFile=0x620, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7bad0*=0xf4240, lpOverlapped=0x0) returned 1 [0241.462] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240) returned 1 [0241.462] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0xf4240) returned 1 [0241.465] SetFilePointer (in: hFile=0x620, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0241.465] WriteFile (in: hFile=0x620, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7bad0*=0xf4240, lpOverlapped=0x0) returned 1 [0241.469] SetFilePointer (in: hFile=0x620, lDistanceToMove=2000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1e8480 [0241.469] ReadFile (in: hFile=0x620, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x17b80, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7bad0*=0x17b80, lpOverlapped=0x0) returned 1 [0241.470] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4250) returned 1 [0241.470] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0x17b80, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0x17b90) returned 1 [0241.470] SetFilePointer (in: hFile=0x620, lDistanceToMove=2000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1e8480 [0241.470] WriteFile (in: hFile=0x620, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x17b90, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7bad0*=0x17b90, lpOverlapped=0x0) returned 1 [0241.482] WriteFile (in: hFile=0x620, lpBuffer=0x665da7bb10*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb10*, lpNumberOfBytesWritten=0x665da7bad4*=0x6, lpOverlapped=0x0) returned 1 [0241.482] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7bae0 | out: pbData=0x0*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0241.482] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7bb60, pdwDataLen=0x665da7bae0 | out: pbData=0x665da7bb60*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0241.482] WriteFile (in: hFile=0x620, lpBuffer=0x665da7bb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb60*, lpNumberOfBytesWritten=0x665da7bad4*=0x10c, lpOverlapped=0x0) returned 1 [0241.482] CloseHandle (hObject=0x620) returned 1 [0241.484] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0241.491] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0241.491] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0241.491] FindNextFileW (in: hFindFile=0x665d90cbc0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0241.491] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0241.492] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00001.jrs", dwFileAttributes=0x80) returned 1 [0241.492] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00001.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\edbres00001.jrs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0241.494] GetFileSizeEx (in: hFile=0x620, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=2097152) returned 1 [0241.494] GetFileSizeEx (in: hFile=0x620, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=2097152) returned 1 [0241.494] SetFilePointerEx (in: hFile=0x620, liDistanceToMove=0x1ffede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0241.494] ReadFile (in: hFile=0x620, lpBuffer=0x665da7bb38, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7baf8, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb38*, lpNumberOfBytesRead=0x665da7baf8*=0x19, lpOverlapped=0x0) returned 1 [0241.495] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0241.495] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7bac0 | out: phKey=0x665da7bac0*=0x665aae6510) returned 1 [0241.495] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0241.495] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0241.495] ReadFile (in: hFile=0x620, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7bad0*=0xf4240, lpOverlapped=0x0) returned 1 [0241.533] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240) returned 1 [0241.533] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0xf4240) returned 1 [0241.534] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0241.534] WriteFile (in: hFile=0x620, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7bad0*=0xf4240, lpOverlapped=0x0) returned 1 [0241.537] SetFilePointer (in: hFile=0x620, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0241.537] ReadFile (in: hFile=0x620, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7bad0*=0xf4240, lpOverlapped=0x0) returned 1 [0241.561] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240) returned 1 [0241.561] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0xf4240) returned 1 [0241.563] SetFilePointer (in: hFile=0x620, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0241.563] WriteFile (in: hFile=0x620, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7bad0*=0xf4240, lpOverlapped=0x0) returned 1 [0241.567] SetFilePointer (in: hFile=0x620, lDistanceToMove=2000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1e8480 [0241.567] ReadFile (in: hFile=0x620, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x17b80, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7bad0*=0x17b80, lpOverlapped=0x0) returned 1 [0241.568] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4250) returned 1 [0241.568] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0x17b80, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0x17b90) returned 1 [0241.568] SetFilePointer (in: hFile=0x620, lDistanceToMove=2000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1e8480 [0241.569] WriteFile (in: hFile=0x620, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x17b90, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7bad0*=0x17b90, lpOverlapped=0x0) returned 1 [0241.580] WriteFile (in: hFile=0x620, lpBuffer=0x665da7bb10*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb10*, lpNumberOfBytesWritten=0x665da7bad4*=0x6, lpOverlapped=0x0) returned 1 [0241.580] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7bae0 | out: pbData=0x0*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0241.580] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7bb60, pdwDataLen=0x665da7bae0 | out: pbData=0x665da7bb60*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0241.581] WriteFile (in: hFile=0x620, lpBuffer=0x665da7bb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb60*, lpNumberOfBytesWritten=0x665da7bad4*=0x10c, lpOverlapped=0x0) returned 1 [0241.581] CloseHandle (hObject=0x620) returned 1 [0241.581] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0241.586] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0241.586] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0241.586] FindNextFileW (in: hFindFile=0x665d90cbc0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0241.586] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0241.586] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00002.jrs", dwFileAttributes=0x80) returned 1 [0241.587] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00002.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\edbres00002.jrs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0241.588] GetFileSizeEx (in: hFile=0x620, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=2097152) returned 1 [0241.588] GetFileSizeEx (in: hFile=0x620, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=2097152) returned 1 [0241.588] SetFilePointerEx (in: hFile=0x620, liDistanceToMove=0x1ffede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0241.588] ReadFile (in: hFile=0x620, lpBuffer=0x665da7bb38, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7baf8, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb38*, lpNumberOfBytesRead=0x665da7baf8*=0x19, lpOverlapped=0x0) returned 1 [0241.589] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0241.589] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7bac0 | out: phKey=0x665da7bac0*=0x665aae6510) returned 1 [0241.589] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0241.589] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0241.589] ReadFile (in: hFile=0x620, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7bad0*=0xf4240, lpOverlapped=0x0) returned 1 [0241.622] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240) returned 1 [0241.622] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0xf4240) returned 1 [0241.624] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0241.624] WriteFile (in: hFile=0x620, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7bad0*=0xf4240, lpOverlapped=0x0) returned 1 [0241.627] SetFilePointer (in: hFile=0x620, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0241.627] ReadFile (in: hFile=0x620, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7bad0*=0xf4240, lpOverlapped=0x0) returned 1 [0241.652] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240) returned 1 [0241.652] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0xf4240) returned 1 [0241.654] SetFilePointer (in: hFile=0x620, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0241.654] WriteFile (in: hFile=0x620, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7bad0*=0xf4240, lpOverlapped=0x0) returned 1 [0241.658] SetFilePointer (in: hFile=0x620, lDistanceToMove=2000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1e8480 [0241.658] ReadFile (in: hFile=0x620, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x17b80, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7bad0*=0x17b80, lpOverlapped=0x0) returned 1 [0241.659] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4250) returned 1 [0241.659] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0x17b80, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0x17b90) returned 1 [0241.659] SetFilePointer (in: hFile=0x620, lDistanceToMove=2000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1e8480 [0241.659] WriteFile (in: hFile=0x620, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x17b90, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7bad0*=0x17b90, lpOverlapped=0x0) returned 1 [0241.672] WriteFile (in: hFile=0x620, lpBuffer=0x665da7bb10*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb10*, lpNumberOfBytesWritten=0x665da7bad4*=0x6, lpOverlapped=0x0) returned 1 [0241.672] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7bae0 | out: pbData=0x0*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0241.672] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7bb60, pdwDataLen=0x665da7bae0 | out: pbData=0x665da7bb60*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0241.673] WriteFile (in: hFile=0x620, lpBuffer=0x665da7bb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb60*, lpNumberOfBytesWritten=0x665da7bad4*=0x10c, lpOverlapped=0x0) returned 1 [0241.673] CloseHandle (hObject=0x620) returned 1 [0241.673] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0241.678] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0241.678] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0241.679] FindNextFileW (in: hFindFile=0x665d90cbc0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0241.679] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0241.679] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBtmp.log", dwFileAttributes=0x80) returned 1 [0241.680] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBtmp.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\edbtmp.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0241.680] GetFileSizeEx (in: hFile=0x620, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=2097152) returned 1 [0241.680] GetFileSizeEx (in: hFile=0x620, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=2097152) returned 1 [0241.680] SetFilePointerEx (in: hFile=0x620, liDistanceToMove=0x1ffede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0241.680] ReadFile (in: hFile=0x620, lpBuffer=0x665da7bb38, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7baf8, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb38*, lpNumberOfBytesRead=0x665da7baf8*=0x19, lpOverlapped=0x0) returned 1 [0241.682] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0241.682] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7bac0 | out: phKey=0x665da7bac0*=0x665aae6510) returned 1 [0241.682] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0241.682] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0241.682] ReadFile (in: hFile=0x620, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7bad0*=0xf4240, lpOverlapped=0x0) returned 1 [0241.719] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240) returned 1 [0241.719] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0xf4240) returned 1 [0241.721] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0241.721] WriteFile (in: hFile=0x620, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7bad0*=0xf4240, lpOverlapped=0x0) returned 1 [0241.723] SetFilePointer (in: hFile=0x620, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0241.723] ReadFile (in: hFile=0x620, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7bad0*=0xf4240, lpOverlapped=0x0) returned 1 [0241.737] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240) returned 1 [0241.737] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0xf4240) returned 1 [0241.739] SetFilePointer (in: hFile=0x620, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0241.739] WriteFile (in: hFile=0x620, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7bad0*=0xf4240, lpOverlapped=0x0) returned 1 [0241.742] SetFilePointer (in: hFile=0x620, lDistanceToMove=2000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1e8480 [0241.742] ReadFile (in: hFile=0x620, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x17b80, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7bad0*=0x17b80, lpOverlapped=0x0) returned 1 [0241.743] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4250) returned 1 [0241.743] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0x17b80, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0x17b90) returned 1 [0241.743] SetFilePointer (in: hFile=0x620, lDistanceToMove=2000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1e8480 [0241.743] WriteFile (in: hFile=0x620, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x17b90, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7bad0*=0x17b90, lpOverlapped=0x0) returned 1 [0241.755] WriteFile (in: hFile=0x620, lpBuffer=0x665da7bb10*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb10*, lpNumberOfBytesWritten=0x665da7bad4*=0x6, lpOverlapped=0x0) returned 1 [0241.755] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7bae0 | out: pbData=0x0*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0241.755] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7bb60, pdwDataLen=0x665da7bae0 | out: pbData=0x665da7bb60*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0241.755] WriteFile (in: hFile=0x620, lpBuffer=0x665da7bb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb60*, lpNumberOfBytesWritten=0x665da7bad4*=0x10c, lpOverlapped=0x0) returned 1 [0241.755] CloseHandle (hObject=0x620) returned 1 [0241.755] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0241.759] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0241.759] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0241.759] FindNextFileW (in: hFindFile=0x665d90cbc0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0241.759] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0241.759] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb", dwFileAttributes=0x80) returned 1 [0241.760] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0241.760] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0241.760] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0241.760] FindNextFileW (in: hFindFile=0x665d90cbc0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0241.761] FindClose (in: hFindFile=0x665d90cbc0 | out: hFindFile=0x665d90cbc0) returned 1 [0241.761] SetLastError (dwErrCode=0x0) [0241.761] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0241.764] GetLastError () returned 0x0 [0241.764] WriteFile (in: hFile=0x60c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7c490*=0x324, lpOverlapped=0x0) returned 1 [0241.765] CloseHandle (hObject=0x60c) returned 1 [0241.765] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0241.765] FindClose (in: hFindFile=0x665d90c4a0 | out: hFindFile=0x665d90c4a0) returned 1 [0241.765] SetLastError (dwErrCode=0x0) [0241.765] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0241.765] GetLastError () returned 0xb7 [0241.765] CloseHandle (hObject=0x570) returned 1 [0241.765] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0241.765] SetLastError (dwErrCode=0x0) [0241.765] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0241.766] GetLastError () returned 0xb7 [0241.766] CloseHandle (hObject=0x570) returned 1 [0241.766] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\VirtualStore\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90cbc0 [0241.766] FindNextFileW (in: hFindFile=0x665d90cbc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0241.766] FindNextFileW (in: hFindFile=0x665d90cbc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0241.766] FindClose (in: hFindFile=0x665d90cbc0 | out: hFindFile=0x665d90cbc0) returned 1 [0241.766] SetLastError (dwErrCode=0x0) [0241.766] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\VirtualStore\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\virtualstore\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0241.767] GetLastError () returned 0x0 [0241.767] WriteFile (in: hFile=0x570, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7cc40*=0x324, lpOverlapped=0x0) returned 1 [0241.768] CloseHandle (hObject=0x570) returned 1 [0241.768] FindNextFileW (in: hFindFile=0x665abb5160, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0241.768] FindClose (in: hFindFile=0x665abb5160 | out: hFindFile=0x665abb5160) returned 1 [0241.768] SetLastError (dwErrCode=0x0) [0241.768] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0241.768] GetLastError () returned 0xb7 [0241.768] CloseHandle (hObject=0x47c) returned 1 [0241.768] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0241.768] SetLastError (dwErrCode=0x0) [0241.768] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0241.769] GetLastError () returned 0xb7 [0241.769] CloseHandle (hObject=0x47c) returned 1 [0241.769] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665d90c1a0 [0241.769] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0241.769] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0241.769] SetLastError (dwErrCode=0x0) [0241.769] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0241.806] GetLastError () returned 0x0 [0241.806] WriteFile (in: hFile=0x570, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7cc40*=0x324, lpOverlapped=0x0) returned 1 [0241.808] CloseHandle (hObject=0x570) returned 1 [0241.808] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Adobe\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90c860 [0241.808] FindNextFileW (in: hFindFile=0x665d90c860, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0241.808] FindNextFileW (in: hFindFile=0x665d90c860, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0241.808] SetLastError (dwErrCode=0x0) [0241.808] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Adobe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\adobe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0241.809] GetLastError () returned 0x0 [0241.809] WriteFile (in: hFile=0x60c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7c490*=0x324, lpOverlapped=0x0) returned 1 [0241.810] CloseHandle (hObject=0x60c) returned 1 [0241.810] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Adobe\\Acrobat\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c380 [0241.810] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0241.810] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0241.810] SetLastError (dwErrCode=0x0) [0241.810] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Adobe\\Acrobat\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\adobe\\acrobat\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0241.811] GetLastError () returned 0x0 [0241.811] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0241.812] CloseHandle (hObject=0x620) returned 1 [0241.812] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Adobe\\Acrobat\\DC\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c4a0 [0241.812] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0241.812] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0241.812] SetLastError (dwErrCode=0x0) [0241.812] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Adobe\\Acrobat\\DC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\adobe\\acrobat\\dc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0241.812] GetLastError () returned 0x0 [0241.812] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0241.813] CloseHandle (hObject=0x3e8) returned 1 [0241.813] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Adobe\\Acrobat\\DC\\assets\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c440 [0241.813] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0241.813] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0241.813] FindClose (in: hFindFile=0x665d90c440 | out: hFindFile=0x665d90c440) returned 1 [0241.813] SetLastError (dwErrCode=0x0) [0241.813] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Adobe\\Acrobat\\DC\\assets\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\adobe\\acrobat\\dc\\assets\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0241.814] GetLastError () returned 0x0 [0241.814] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0241.815] CloseHandle (hObject=0x3e8) returned 1 [0241.815] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0241.815] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0241.815] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Adobe\\Acrobat\\DC\\ReaderMessages", dwFileAttributes=0x80) returned 1 [0241.816] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Adobe\\Acrobat\\DC\\ReaderMessages" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\adobe\\acrobat\\dc\\readermessages"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0241.816] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=38912) returned 1 [0241.816] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=38912) returned 1 [0241.816] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x96de, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0241.816] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0241.817] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0241.817] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665aae70e0) returned 1 [0241.817] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0241.818] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0241.818] ReadFile (in: hFile=0x3e8, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x9800, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7b320*=0x9800, lpOverlapped=0x0) returned 1 [0241.819] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0241.819] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x9800, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x9810) returned 1 [0241.819] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0241.819] WriteFile (in: hFile=0x3e8, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x9810, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7b320*=0x9810, lpOverlapped=0x0) returned 1 [0241.819] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0241.819] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0241.819] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0241.819] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0241.819] CloseHandle (hObject=0x3e8) returned 1 [0241.837] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0241.841] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0241.841] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0241.841] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0241.841] SetLastError (dwErrCode=0x0) [0241.841] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Adobe\\Acrobat\\DC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\adobe\\acrobat\\dc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0241.842] GetLastError () returned 0xb7 [0241.842] CloseHandle (hObject=0x3e8) returned 1 [0241.842] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Adobe\\Acrobat\\DC\\Search\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90d340 [0241.842] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0241.843] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0241.843] FindClose (in: hFindFile=0x665d90d340 | out: hFindFile=0x665d90d340) returned 1 [0241.843] SetLastError (dwErrCode=0x0) [0241.843] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Adobe\\Acrobat\\DC\\Search\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\adobe\\acrobat\\dc\\search\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0241.843] GetLastError () returned 0x0 [0241.843] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0241.844] CloseHandle (hObject=0x3e8) returned 1 [0241.844] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0241.844] FindClose (in: hFindFile=0x665d90c4a0 | out: hFindFile=0x665d90c4a0) returned 1 [0241.844] SetLastError (dwErrCode=0x0) [0241.844] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Adobe\\Acrobat\\DC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\adobe\\acrobat\\dc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0241.845] GetLastError () returned 0xb7 [0241.845] CloseHandle (hObject=0x620) returned 1 [0241.845] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0241.845] FindClose (in: hFindFile=0x665d90c380 | out: hFindFile=0x665d90c380) returned 1 [0241.845] SetLastError (dwErrCode=0x0) [0241.845] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Adobe\\Acrobat\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\adobe\\acrobat\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0241.845] GetLastError () returned 0xb7 [0241.845] CloseHandle (hObject=0x60c) returned 1 [0241.845] FindNextFileW (in: hFindFile=0x665d90c860, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0241.845] SetLastError (dwErrCode=0x0) [0241.845] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Adobe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\adobe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0241.845] GetLastError () returned 0xb7 [0241.845] CloseHandle (hObject=0x60c) returned 1 [0241.845] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Adobe\\Linguistics\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90bde0 [0241.845] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0241.845] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0241.845] SetLastError (dwErrCode=0x0) [0241.845] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Adobe\\Linguistics\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\adobe\\linguistics\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0241.846] GetLastError () returned 0x0 [0241.846] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0241.847] CloseHandle (hObject=0x620) returned 1 [0241.847] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d340 [0241.847] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0241.847] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0241.847] SetLastError (dwErrCode=0x0) [0241.847] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\adobe\\linguistics\\userdictionaries\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0241.848] GetLastError () returned 0x0 [0241.848] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0241.849] CloseHandle (hObject=0x3e8) returned 1 [0241.849] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c080 [0241.850] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0241.850] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0241.850] SetLastError (dwErrCode=0x0) [0241.850] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\adobe\\linguistics\\userdictionaries\\adobe custom dictionary\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0241.850] GetLastError () returned 0x0 [0241.850] WriteFile (in: hFile=0x654, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7ad80*=0x324, lpOverlapped=0x0) returned 1 [0241.851] CloseHandle (hObject=0x654) returned 1 [0241.851] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\all\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665d90bc60 [0241.851] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0241.851] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0241.851] FindClose (in: hFindFile=0x665d90bc60 | out: hFindFile=0x665d90bc60) returned 1 [0241.851] SetLastError (dwErrCode=0x0) [0241.852] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\all\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\adobe\\linguistics\\userdictionaries\\adobe custom dictionary\\all\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0241.852] GetLastError () returned 0x0 [0241.852] WriteFile (in: hFile=0x654, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7ad80*=0x324, lpOverlapped=0x0) returned 1 [0241.853] CloseHandle (hObject=0x654) returned 1 [0241.853] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0241.853] SetLastError (dwErrCode=0x0) [0241.853] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\adobe\\linguistics\\userdictionaries\\adobe custom dictionary\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0241.853] GetLastError () returned 0xb7 [0241.853] CloseHandle (hObject=0x654) returned 1 [0241.853] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\de_CH\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665d90c920 [0241.854] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0241.854] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0241.854] FindClose (in: hFindFile=0x665d90c920 | out: hFindFile=0x665d90c920) returned 1 [0241.854] SetLastError (dwErrCode=0x0) [0241.854] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\de_CH\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\adobe\\linguistics\\userdictionaries\\adobe custom dictionary\\de_ch\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0241.855] GetLastError () returned 0x0 [0241.855] WriteFile (in: hFile=0x654, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7ad80*=0x324, lpOverlapped=0x0) returned 1 [0241.856] CloseHandle (hObject=0x654) returned 1 [0241.856] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0241.856] SetLastError (dwErrCode=0x0) [0241.856] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\adobe\\linguistics\\userdictionaries\\adobe custom dictionary\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0241.856] GetLastError () returned 0xb7 [0241.856] CloseHandle (hObject=0x654) returned 1 [0241.856] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\de_DE\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665d90bc60 [0241.857] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0241.857] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0241.857] FindClose (in: hFindFile=0x665d90bc60 | out: hFindFile=0x665d90bc60) returned 1 [0241.857] SetLastError (dwErrCode=0x0) [0241.857] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\de_DE\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\adobe\\linguistics\\userdictionaries\\adobe custom dictionary\\de_de\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0241.858] GetLastError () returned 0x0 [0241.858] WriteFile (in: hFile=0x654, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7ad80*=0x324, lpOverlapped=0x0) returned 1 [0241.859] CloseHandle (hObject=0x654) returned 1 [0241.859] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0241.859] SetLastError (dwErrCode=0x0) [0241.859] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\adobe\\linguistics\\userdictionaries\\adobe custom dictionary\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0241.859] GetLastError () returned 0xb7 [0241.859] CloseHandle (hObject=0x654) returned 1 [0241.859] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\en_CA\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665d90c980 [0241.861] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0241.861] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0241.861] FindClose (in: hFindFile=0x665d90c980 | out: hFindFile=0x665d90c980) returned 1 [0241.861] SetLastError (dwErrCode=0x0) [0241.861] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\en_CA\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\adobe\\linguistics\\userdictionaries\\adobe custom dictionary\\en_ca\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0241.861] GetLastError () returned 0x0 [0241.861] WriteFile (in: hFile=0x654, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7ad80*=0x324, lpOverlapped=0x0) returned 1 [0241.862] CloseHandle (hObject=0x654) returned 1 [0241.862] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0241.862] SetLastError (dwErrCode=0x0) [0241.862] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\adobe\\linguistics\\userdictionaries\\adobe custom dictionary\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0241.862] GetLastError () returned 0xb7 [0241.862] CloseHandle (hObject=0x654) returned 1 [0241.862] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\en_GB\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665d90c0e0 [0241.863] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0241.863] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0241.863] FindClose (in: hFindFile=0x665d90c0e0 | out: hFindFile=0x665d90c0e0) returned 1 [0241.863] SetLastError (dwErrCode=0x0) [0241.863] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\en_GB\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\adobe\\linguistics\\userdictionaries\\adobe custom dictionary\\en_gb\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0241.864] GetLastError () returned 0x0 [0241.864] WriteFile (in: hFile=0x654, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7ad80*=0x324, lpOverlapped=0x0) returned 1 [0241.865] CloseHandle (hObject=0x654) returned 1 [0241.865] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0241.865] SetLastError (dwErrCode=0x0) [0241.865] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\adobe\\linguistics\\userdictionaries\\adobe custom dictionary\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0241.865] GetLastError () returned 0xb7 [0241.865] CloseHandle (hObject=0x654) returned 1 [0241.865] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\en_US\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665d90ca40 [0241.865] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0241.865] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0241.865] FindClose (in: hFindFile=0x665d90ca40 | out: hFindFile=0x665d90ca40) returned 1 [0241.865] SetLastError (dwErrCode=0x0) [0241.865] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\en_US\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\adobe\\linguistics\\userdictionaries\\adobe custom dictionary\\en_us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0241.866] GetLastError () returned 0x0 [0241.866] WriteFile (in: hFile=0x654, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7ad80*=0x324, lpOverlapped=0x0) returned 1 [0241.866] CloseHandle (hObject=0x654) returned 1 [0241.866] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0241.866] SetLastError (dwErrCode=0x0) [0241.866] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\adobe\\linguistics\\userdictionaries\\adobe custom dictionary\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0241.867] GetLastError () returned 0xb7 [0241.867] CloseHandle (hObject=0x654) returned 1 [0241.867] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\nl_NL\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665d90c0e0 [0241.867] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0241.867] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0241.867] FindClose (in: hFindFile=0x665d90c0e0 | out: hFindFile=0x665d90c0e0) returned 1 [0241.867] SetLastError (dwErrCode=0x0) [0241.867] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\nl_NL\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\adobe\\linguistics\\userdictionaries\\adobe custom dictionary\\nl_nl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0241.868] GetLastError () returned 0x0 [0241.868] WriteFile (in: hFile=0x654, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7ad80*=0x324, lpOverlapped=0x0) returned 1 [0241.868] CloseHandle (hObject=0x654) returned 1 [0241.868] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0241.868] FindClose (in: hFindFile=0x665d90c080 | out: hFindFile=0x665d90c080) returned 1 [0241.868] SetLastError (dwErrCode=0x0) [0241.868] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\adobe\\linguistics\\userdictionaries\\adobe custom dictionary\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0241.869] GetLastError () returned 0xb7 [0241.869] CloseHandle (hObject=0x3e8) returned 1 [0241.869] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0241.869] FindClose (in: hFindFile=0x665d90d340 | out: hFindFile=0x665d90d340) returned 1 [0241.869] SetLastError (dwErrCode=0x0) [0241.869] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\adobe\\linguistics\\userdictionaries\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0241.869] GetLastError () returned 0xb7 [0241.869] CloseHandle (hObject=0x620) returned 1 [0241.869] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0241.869] FindClose (in: hFindFile=0x665d90bde0 | out: hFindFile=0x665d90bde0) returned 1 [0241.869] SetLastError (dwErrCode=0x0) [0241.869] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Adobe\\Linguistics\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\adobe\\linguistics\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0241.870] GetLastError () returned 0xb7 [0241.870] CloseHandle (hObject=0x60c) returned 1 [0241.870] FindNextFileW (in: hFindFile=0x665d90c860, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0241.870] FindClose (in: hFindFile=0x665d90c860 | out: hFindFile=0x665d90c860) returned 1 [0241.870] SetLastError (dwErrCode=0x0) [0241.870] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Adobe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\adobe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0241.870] GetLastError () returned 0xb7 [0241.870] CloseHandle (hObject=0x570) returned 1 [0241.870] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0241.870] SetLastError (dwErrCode=0x0) [0241.870] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0241.870] GetLastError () returned 0xb7 [0241.870] CloseHandle (hObject=0x570) returned 1 [0241.870] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90c6e0 [0241.870] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0241.870] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0241.870] SetLastError (dwErrCode=0x0) [0241.871] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0241.887] GetLastError () returned 0x0 [0241.887] WriteFile (in: hFile=0x60c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7c490*=0x324, lpOverlapped=0x0) returned 1 [0241.889] CloseHandle (hObject=0x60c) returned 1 [0241.889] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90be40 [0241.889] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0241.889] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0241.889] SetLastError (dwErrCode=0x0) [0241.889] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\cryptneturlcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0241.890] GetLastError () returned 0x0 [0241.890] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0241.891] CloseHandle (hObject=0x620) returned 1 [0241.891] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c920 [0241.972] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0241.989] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0241.989] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0241.990] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", dwFileAttributes=0x80) returned 1 [0241.991] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0241.992] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=6509) returned 1 [0241.992] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=6509) returned 1 [0241.992] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x184b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0241.992] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0242.009] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0242.009] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665aae6740) returned 1 [0242.009] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0242.009] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0242.009] ReadFile (in: hFile=0x3e8, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x196d, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7b320*=0x196d, lpOverlapped=0x0) returned 1 [0242.010] CryptEncrypt (in: hKey=0x665aae6740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0242.010] CryptEncrypt (in: hKey=0x665aae6740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x196d, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x1970) returned 1 [0242.010] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0242.011] WriteFile (in: hFile=0x3e8, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x1970, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7b320*=0x1970, lpOverlapped=0x0) returned 1 [0242.011] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0242.011] CryptExportKey (in: hKey=0x665aae6740, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0242.011] CryptExportKey (in: hKey=0x665aae6740, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0242.011] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0242.011] CloseHandle (hObject=0x3e8) returned 1 [0242.032] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0242.037] CryptDestroyKey (hKey=0x665aae6740) returned 1 [0242.037] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0242.037] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0242.037] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0242.038] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", dwFileAttributes=0x80) returned 1 [0242.039] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0242.039] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=53978) returned 1 [0242.039] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=53978) returned 1 [0242.039] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xd1b8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0242.039] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0242.081] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0242.081] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665aae70e0) returned 1 [0242.081] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0242.081] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0242.082] ReadFile (in: hFile=0x3e8, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xd2da, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7b320*=0xd2da, lpOverlapped=0x0) returned 1 [0242.098] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0242.098] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0xd2da, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0xd2e0) returned 1 [0242.098] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0242.098] WriteFile (in: hFile=0x3e8, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xd2e0, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7b320*=0xd2e0, lpOverlapped=0x0) returned 1 [0242.098] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0242.098] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0242.098] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0242.098] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0242.099] CloseHandle (hObject=0x3e8) returned 1 [0242.114] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0242.118] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0242.119] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0242.119] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0242.119] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0242.119] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", dwFileAttributes=0x80) returned 1 [0242.120] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0242.121] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=7796) returned 1 [0242.121] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=7796) returned 1 [0242.121] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x1d52, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0242.121] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0242.137] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0242.138] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665aae7150) returned 1 [0242.138] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0242.138] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0242.138] ReadFile (in: hFile=0x3e8, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x1e74, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7b320*=0x1e74, lpOverlapped=0x0) returned 1 [0242.139] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0242.139] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x1e74, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x1e80) returned 1 [0242.139] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0242.139] WriteFile (in: hFile=0x3e8, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x1e80, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7b320*=0x1e80, lpOverlapped=0x0) returned 1 [0242.139] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0242.139] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0242.139] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0242.139] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0242.139] CloseHandle (hObject=0x3e8) returned 1 [0242.157] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0242.162] CryptDestroyKey (hKey=0x665aae7150) returned 1 [0242.162] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0242.162] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0242.162] FindClose (in: hFindFile=0x665d90c920 | out: hFindFile=0x665d90c920) returned 1 [0242.162] SetLastError (dwErrCode=0x0) [0242.162] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0242.164] GetLastError () returned 0x0 [0242.164] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0242.165] CloseHandle (hObject=0x620) returned 1 [0242.165] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0242.165] SetLastError (dwErrCode=0x0) [0242.165] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\cryptneturlcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0242.165] GetLastError () returned 0xb7 [0242.165] CloseHandle (hObject=0x620) returned 1 [0242.165] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90cda0 [0242.168] FindNextFileW (in: hFindFile=0x665d90cda0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0242.169] FindNextFileW (in: hFindFile=0x665d90cda0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0242.169] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0242.169] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", dwFileAttributes=0x80) returned 1 [0242.169] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0242.170] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=342) returned 1 [0242.170] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=342) returned 1 [0242.170] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x34, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0242.170] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0242.171] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0242.171] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665aae6510) returned 1 [0242.171] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0242.172] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0242.172] ReadFile (in: hFile=0x3e8, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x156, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7b320*=0x156, lpOverlapped=0x0) returned 1 [0242.172] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0242.172] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x156, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x160) returned 1 [0242.172] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0242.172] WriteFile (in: hFile=0x3e8, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7b320*=0x160, lpOverlapped=0x0) returned 1 [0242.172] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0242.172] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0242.172] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0242.172] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0242.272] CloseHandle (hObject=0x3e8) returned 1 [0242.292] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0242.297] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0242.297] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0242.298] FindNextFileW (in: hFindFile=0x665d90cda0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0242.298] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0242.298] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", dwFileAttributes=0x80) returned 1 [0242.299] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0242.299] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=328) returned 1 [0242.299] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=328) returned 1 [0242.300] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x26, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0242.300] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0242.301] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0242.301] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665aae7150) returned 1 [0242.301] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0242.301] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0242.301] ReadFile (in: hFile=0x3e8, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x148, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7b320*=0x148, lpOverlapped=0x0) returned 1 [0242.301] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0242.301] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x148, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x150) returned 1 [0242.301] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0242.302] WriteFile (in: hFile=0x3e8, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x150, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7b320*=0x150, lpOverlapped=0x0) returned 1 [0242.302] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0242.302] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0242.302] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0242.302] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0242.303] CloseHandle (hObject=0x3e8) returned 1 [0242.325] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0242.330] CryptDestroyKey (hKey=0x665aae7150) returned 1 [0242.330] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0242.330] FindNextFileW (in: hFindFile=0x665d90cda0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0242.330] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0242.331] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", dwFileAttributes=0x80) returned 1 [0242.331] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0242.332] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=330) returned 1 [0242.332] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=330) returned 1 [0242.332] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0242.332] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0242.333] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0242.333] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665aae6f20) returned 1 [0242.333] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0242.334] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0242.334] ReadFile (in: hFile=0x3e8, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x14a, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7b320*=0x14a, lpOverlapped=0x0) returned 1 [0242.334] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0242.334] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x14a, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x150) returned 1 [0242.334] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0242.334] WriteFile (in: hFile=0x3e8, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x150, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7b320*=0x150, lpOverlapped=0x0) returned 1 [0242.334] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0242.334] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0242.334] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0242.334] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0242.336] CloseHandle (hObject=0x3e8) returned 1 [0242.359] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0242.365] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0242.365] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0242.365] FindNextFileW (in: hFindFile=0x665d90cda0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0242.365] FindClose (in: hFindFile=0x665d90cda0 | out: hFindFile=0x665d90cda0) returned 1 [0242.365] SetLastError (dwErrCode=0x0) [0242.365] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0242.366] GetLastError () returned 0x0 [0242.366] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0242.367] CloseHandle (hObject=0x620) returned 1 [0242.367] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0242.367] FindClose (in: hFindFile=0x665d90be40 | out: hFindFile=0x665d90be40) returned 1 [0242.367] SetLastError (dwErrCode=0x0) [0242.368] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\cryptneturlcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0242.368] GetLastError () returned 0xb7 [0242.368] CloseHandle (hObject=0x60c) returned 1 [0242.368] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0242.368] SetLastError (dwErrCode=0x0) [0242.368] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0242.368] GetLastError () returned 0xb7 [0242.368] CloseHandle (hObject=0x60c) returned 1 [0242.368] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c0e0 [0242.371] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0242.371] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0242.371] SetLastError (dwErrCode=0x0) [0242.371] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0242.371] GetLastError () returned 0x0 [0242.371] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0242.372] CloseHandle (hObject=0x620) returned 1 [0242.372] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c920 [0242.373] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0242.373] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0242.373] SetLastError (dwErrCode=0x0) [0242.373] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0242.412] GetLastError () returned 0x0 [0242.412] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0242.413] CloseHandle (hObject=0x3e8) returned 1 [0242.414] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\8EURADBC\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c260 [0242.415] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0242.415] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0242.415] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0242.415] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\8EURADBC\\c.betrad[1].xml", dwFileAttributes=0x80) returned 1 [0242.416] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\8EURADBC\\c.betrad[1].xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\8euradbc\\c.betrad[1].xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0242.416] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=52046) returned 1 [0242.417] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=52046) returned 1 [0242.417] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0xca2c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0242.417] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0242.419] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0242.419] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665aae6820) returned 1 [0242.419] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0242.419] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0242.419] ReadFile (in: hFile=0x654, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xcb4e, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ab70*=0xcb4e, lpOverlapped=0x0) returned 1 [0242.421] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0242.421] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ab68*=0xcb4e, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ab68*=0xcb50) returned 1 [0242.421] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0242.421] WriteFile (in: hFile=0x654, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xcb50, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ab70*=0xcb50, lpOverlapped=0x0) returned 1 [0242.422] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0242.422] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0242.422] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0242.422] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0242.422] CloseHandle (hObject=0x654) returned 1 [0242.438] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0242.443] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0242.443] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0242.444] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0242.444] FindClose (in: hFindFile=0x665d90c260 | out: hFindFile=0x665d90c260) returned 1 [0242.444] SetLastError (dwErrCode=0x0) [0242.444] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\8EURADBC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\8euradbc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0242.446] GetLastError () returned 0x0 [0242.446] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0242.447] CloseHandle (hObject=0x3e8) returned 1 [0242.447] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0242.447] SetLastError (dwErrCode=0x0) [0242.447] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0242.447] GetLastError () returned 0xb7 [0242.447] CloseHandle (hObject=0x3e8) returned 1 [0242.447] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\AU4UQGEP\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c440 [0242.447] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0242.447] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0242.447] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0242.448] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\AU4UQGEP\\imagesrv.adition[1].xml", dwFileAttributes=0x80) returned 1 [0242.449] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\AU4UQGEP\\imagesrv.adition[1].xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\au4uqgep\\imagesrv.adition[1].xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0242.449] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=99) returned 1 [0242.449] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=99) returned 1 [0242.449] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665aae6510) returned 1 [0242.449] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0242.450] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0242.450] ReadFile (in: hFile=0x654, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x63, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ab70*=0x63, lpOverlapped=0x0) returned 1 [0242.451] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0242.451] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ab68*=0x63, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ab68*=0x70) returned 1 [0242.451] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0242.451] WriteFile (in: hFile=0x654, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x70, lpOverlapped=0x0) returned 1 [0242.451] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0242.451] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0242.451] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0242.452] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0242.452] CloseHandle (hObject=0x654) returned 1 [0242.469] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0242.475] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0242.475] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0242.475] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0242.475] FindClose (in: hFindFile=0x665d90c440 | out: hFindFile=0x665d90c440) returned 1 [0242.475] SetLastError (dwErrCode=0x0) [0242.475] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\AU4UQGEP\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\au4uqgep\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0242.476] GetLastError () returned 0x0 [0242.476] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0242.477] CloseHandle (hObject=0x3e8) returned 1 [0242.477] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0242.477] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0242.478] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\container.dat", dwFileAttributes=0x80) returned 1 [0242.478] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0242.479] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=0) returned 1 [0242.480] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=0) returned 1 [0242.480] CloseHandle (hObject=0x3e8) returned 1 [0242.480] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0242.480] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0242.480] SetLastError (dwErrCode=0x0) [0242.480] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0242.480] GetLastError () returned 0xb7 [0242.480] CloseHandle (hObject=0x3e8) returned 1 [0242.480] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\CT0F6TC1\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c5c0 [0242.481] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0242.481] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0242.481] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0242.481] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\CT0F6TC1\\c9.skadtec[1].xml", dwFileAttributes=0x80) returned 1 [0242.482] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\CT0F6TC1\\c9.skadtec[1].xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\ct0f6tc1\\c9.skadtec[1].xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0242.482] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=339) returned 1 [0242.482] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=339) returned 1 [0242.482] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x31, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0242.482] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0242.483] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0242.483] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665aae6cf0) returned 1 [0242.483] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0242.484] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0242.484] ReadFile (in: hFile=0x654, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x153, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ab70*=0x153, lpOverlapped=0x0) returned 1 [0242.484] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0242.484] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ab68*=0x153, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ab68*=0x160) returned 1 [0242.484] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0242.484] WriteFile (in: hFile=0x654, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x160, lpOverlapped=0x0) returned 1 [0242.503] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0242.503] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0242.503] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0242.504] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0242.533] CloseHandle (hObject=0x654) returned 1 [0242.551] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0242.557] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0242.557] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0242.557] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0242.557] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0242.558] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\CT0F6TC1\\www.msn[1].xml", dwFileAttributes=0x80) returned 1 [0242.558] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\CT0F6TC1\\www.msn[1].xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\ct0f6tc1\\www.msn[1].xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0242.559] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=1499) returned 1 [0242.559] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=1499) returned 1 [0242.559] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x4b9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0242.559] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0242.577] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0242.577] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665aae65f0) returned 1 [0242.578] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0242.578] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0242.578] ReadFile (in: hFile=0x654, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x5db, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ab70*=0x5db, lpOverlapped=0x0) returned 1 [0242.578] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0242.578] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ab68*=0x5db, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ab68*=0x5e0) returned 1 [0242.578] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0242.578] WriteFile (in: hFile=0x654, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x5e0, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x5e0, lpOverlapped=0x0) returned 1 [0242.578] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0242.579] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0242.579] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0242.579] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0242.579] CloseHandle (hObject=0x654) returned 1 [0242.599] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0242.605] CryptDestroyKey (hKey=0x665aae65f0) returned 1 [0242.605] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0242.605] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0242.605] FindClose (in: hFindFile=0x665d90c5c0 | out: hFindFile=0x665d90c5c0) returned 1 [0242.605] SetLastError (dwErrCode=0x0) [0242.605] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\CT0F6TC1\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\ct0f6tc1\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0242.607] GetLastError () returned 0x0 [0242.608] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0242.609] CloseHandle (hObject=0x3e8) returned 1 [0242.609] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0242.609] SetLastError (dwErrCode=0x0) [0242.609] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0242.609] GetLastError () returned 0xb7 [0242.609] CloseHandle (hObject=0x3e8) returned 1 [0242.609] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\JUKMMX7P\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bc60 [0242.609] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0242.609] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0242.609] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0242.610] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\JUKMMX7P\\secure-ds.serving-sys[1].xml", dwFileAttributes=0x80) returned 1 [0242.610] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\JUKMMX7P\\secure-ds.serving-sys[1].xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\jukmmx7p\\secure-ds.serving-sys[1].xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0242.611] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=13) returned 1 [0242.611] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=13) returned 1 [0242.611] CloseHandle (hObject=0x654) returned 1 [0242.611] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0242.612] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0242.612] FindClose (in: hFindFile=0x665d90bc60 | out: hFindFile=0x665d90bc60) returned 1 [0242.612] SetLastError (dwErrCode=0x0) [0242.612] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\JUKMMX7P\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\jukmmx7p\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0242.613] GetLastError () returned 0x0 [0242.613] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0242.614] CloseHandle (hObject=0x3e8) returned 1 [0242.614] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0242.614] FindClose (in: hFindFile=0x665d90c920 | out: hFindFile=0x665d90c920) returned 1 [0242.614] SetLastError (dwErrCode=0x0) [0242.614] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0242.615] GetLastError () returned 0xb7 [0242.615] CloseHandle (hObject=0x620) returned 1 [0242.615] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0242.615] SetLastError (dwErrCode=0x0) [0242.615] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0242.615] GetLastError () returned 0xb7 [0242.615] CloseHandle (hObject=0x620) returned 1 [0242.615] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\EmieBrowserModeList\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bea0 [0242.616] FindNextFileW (in: hFindFile=0x665d90bea0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0242.616] FindNextFileW (in: hFindFile=0x665d90bea0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0242.616] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0242.617] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\EmieBrowserModeList\\container.dat", dwFileAttributes=0x80) returned 1 [0242.617] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\EmieBrowserModeList\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\emiebrowsermodelist\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0242.618] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=0) returned 1 [0242.618] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=0) returned 1 [0242.618] CloseHandle (hObject=0x3e8) returned 1 [0242.618] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0242.618] FindNextFileW (in: hFindFile=0x665d90bea0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0242.618] FindClose (in: hFindFile=0x665d90bea0 | out: hFindFile=0x665d90bea0) returned 1 [0242.619] SetLastError (dwErrCode=0x0) [0242.619] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\EmieBrowserModeList\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\emiebrowsermodelist\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0242.619] GetLastError () returned 0x0 [0242.619] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0242.621] CloseHandle (hObject=0x620) returned 1 [0242.621] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0242.621] SetLastError (dwErrCode=0x0) [0242.621] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0242.621] GetLastError () returned 0xb7 [0242.621] CloseHandle (hObject=0x620) returned 1 [0242.621] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\EmieSiteList\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bcc0 [0242.621] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0242.622] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0242.622] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0242.622] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\EmieSiteList\\container.dat", dwFileAttributes=0x80) returned 1 [0242.622] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\EmieSiteList\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\emiesitelist\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0242.623] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=0) returned 1 [0242.623] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=0) returned 1 [0242.623] CloseHandle (hObject=0x3e8) returned 1 [0242.623] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0242.624] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0242.624] FindClose (in: hFindFile=0x665d90bcc0 | out: hFindFile=0x665d90bcc0) returned 1 [0242.624] SetLastError (dwErrCode=0x0) [0242.624] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\EmieSiteList\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\emiesitelist\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0242.624] GetLastError () returned 0x0 [0242.624] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0242.625] CloseHandle (hObject=0x620) returned 1 [0242.626] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0242.626] SetLastError (dwErrCode=0x0) [0242.626] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0242.626] GetLastError () returned 0xb7 [0242.626] CloseHandle (hObject=0x620) returned 1 [0242.626] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\EmieUserList\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c200 [0242.626] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0242.626] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0242.626] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0242.627] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\EmieUserList\\container.dat", dwFileAttributes=0x80) returned 1 [0242.627] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\EmieUserList\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\emieuserlist\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0242.628] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=0) returned 1 [0242.628] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=0) returned 1 [0242.628] CloseHandle (hObject=0x3e8) returned 1 [0242.628] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0242.628] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0242.628] FindClose (in: hFindFile=0x665d90c200 | out: hFindFile=0x665d90c200) returned 1 [0242.628] SetLastError (dwErrCode=0x0) [0242.628] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\EmieUserList\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\emieuserlist\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0242.630] GetLastError () returned 0x0 [0242.630] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0242.631] CloseHandle (hObject=0x620) returned 1 [0242.631] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0242.631] SetLastError (dwErrCode=0x0) [0242.631] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0242.631] GetLastError () returned 0xb7 [0242.631] CloseHandle (hObject=0x620) returned 1 [0242.631] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c200 [0242.631] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0242.632] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0242.632] FindClose (in: hFindFile=0x665d90c200 | out: hFindFile=0x665d90c200) returned 1 [0242.632] SetLastError (dwErrCode=0x0) [0242.632] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\services\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0242.633] GetLastError () returned 0x0 [0242.633] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0242.634] CloseHandle (hObject=0x620) returned 1 [0242.634] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0242.634] FindClose (in: hFindFile=0x665d90c0e0 | out: hFindFile=0x665d90c0e0) returned 1 [0242.634] SetLastError (dwErrCode=0x0) [0242.634] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0242.634] GetLastError () returned 0xb7 [0242.634] CloseHandle (hObject=0x60c) returned 1 [0242.634] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0242.634] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0242.634] FindClose (in: hFindFile=0x665d90c6e0 | out: hFindFile=0x665d90c6e0) returned 1 [0242.634] SetLastError (dwErrCode=0x0) [0242.634] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0242.635] GetLastError () returned 0xb7 [0242.635] CloseHandle (hObject=0x570) returned 1 [0242.635] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0242.635] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0242.635] SetLastError (dwErrCode=0x0) [0242.635] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0242.635] GetLastError () returned 0xb7 [0242.635] CloseHandle (hObject=0x570) returned 1 [0242.636] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Sun\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90c620 [0242.636] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0242.636] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0242.636] SetLastError (dwErrCode=0x0) [0242.636] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Sun\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\sun\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0242.637] GetLastError () returned 0x0 [0242.637] WriteFile (in: hFile=0x60c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7c490*=0x324, lpOverlapped=0x0) returned 1 [0242.638] CloseHandle (hObject=0x60c) returned 1 [0242.638] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Sun\\Java\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90d340 [0242.638] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0242.638] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0242.638] SetLastError (dwErrCode=0x0) [0242.638] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Sun\\Java\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\sun\\java\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0242.639] GetLastError () returned 0x0 [0242.639] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0242.640] CloseHandle (hObject=0x620) returned 1 [0242.640] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Sun\\Java\\Deployment\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90ce60 [0242.640] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0242.640] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0242.640] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0242.641] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties", dwFileAttributes=0x80) returned 1 [0242.641] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\sun\\java\\deployment\\deployment.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0242.642] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=747) returned 1 [0242.642] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=747) returned 1 [0242.642] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x1c9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0242.642] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0242.643] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0242.643] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665aae6cf0) returned 1 [0242.643] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0242.644] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0242.644] ReadFile (in: hFile=0x3e8, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x2eb, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7b320*=0x2eb, lpOverlapped=0x0) returned 1 [0242.644] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0242.644] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x2eb, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x2f0) returned 1 [0242.644] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0242.644] WriteFile (in: hFile=0x3e8, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7b320*=0x2f0, lpOverlapped=0x0) returned 1 [0242.644] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0242.644] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0242.644] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0242.644] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0242.645] CloseHandle (hObject=0x3e8) returned 1 [0242.663] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0242.669] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0242.669] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0242.669] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0242.670] SetLastError (dwErrCode=0x0) [0242.670] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Sun\\Java\\Deployment\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\sun\\java\\deployment\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0242.704] GetLastError () returned 0x0 [0242.704] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0242.705] CloseHandle (hObject=0x3e8) returned 1 [0242.705] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Sun\\Java\\Deployment\\log\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bfc0 [0242.705] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0242.705] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0242.705] FindClose (in: hFindFile=0x665d90bfc0 | out: hFindFile=0x665d90bfc0) returned 1 [0242.705] SetLastError (dwErrCode=0x0) [0242.705] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Sun\\Java\\Deployment\\log\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\sun\\java\\deployment\\log\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0242.707] GetLastError () returned 0x0 [0242.707] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0242.708] CloseHandle (hObject=0x3e8) returned 1 [0242.708] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0242.708] SetLastError (dwErrCode=0x0) [0242.708] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Sun\\Java\\Deployment\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\sun\\java\\deployment\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0242.708] GetLastError () returned 0xb7 [0242.708] CloseHandle (hObject=0x3e8) returned 1 [0242.708] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90d0a0 [0242.708] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0242.708] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0242.708] FindClose (in: hFindFile=0x665d90d0a0 | out: hFindFile=0x665d90d0a0) returned 1 [0242.708] SetLastError (dwErrCode=0x0) [0242.708] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\sun\\java\\deployment\\security\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0242.709] GetLastError () returned 0x0 [0242.709] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0242.710] CloseHandle (hObject=0x3e8) returned 1 [0242.710] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0242.710] SetLastError (dwErrCode=0x0) [0242.710] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Sun\\Java\\Deployment\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\sun\\java\\deployment\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0242.710] GetLastError () returned 0xb7 [0242.710] CloseHandle (hObject=0x3e8) returned 1 [0242.710] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bc60 [0242.711] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0242.711] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0242.711] SetLastError (dwErrCode=0x0) [0242.711] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\sun\\java\\deployment\\tmp\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0242.711] GetLastError () returned 0x0 [0242.711] WriteFile (in: hFile=0x654, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7ad80*=0x324, lpOverlapped=0x0) returned 1 [0242.712] CloseHandle (hObject=0x654) returned 1 [0242.712] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665d90c680 [0242.712] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0242.712] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0242.712] FindClose (in: hFindFile=0x665d90c680 | out: hFindFile=0x665d90c680) returned 1 [0242.712] SetLastError (dwErrCode=0x0) [0242.712] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\sun\\java\\deployment\\tmp\\si\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0242.713] GetLastError () returned 0x0 [0242.713] WriteFile (in: hFile=0x654, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7ad80*=0x324, lpOverlapped=0x0) returned 1 [0242.714] CloseHandle (hObject=0x654) returned 1 [0242.714] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0242.715] FindClose (in: hFindFile=0x665d90bc60 | out: hFindFile=0x665d90bc60) returned 1 [0242.715] SetLastError (dwErrCode=0x0) [0242.715] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\sun\\java\\deployment\\tmp\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0242.715] GetLastError () returned 0xb7 [0242.715] CloseHandle (hObject=0x3e8) returned 1 [0242.715] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0242.715] FindClose (in: hFindFile=0x665d90ce60 | out: hFindFile=0x665d90ce60) returned 1 [0242.715] SetLastError (dwErrCode=0x0) [0242.715] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Sun\\Java\\Deployment\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\sun\\java\\deployment\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0242.715] GetLastError () returned 0xb7 [0242.715] CloseHandle (hObject=0x620) returned 1 [0242.715] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0242.715] FindClose (in: hFindFile=0x665d90d340 | out: hFindFile=0x665d90d340) returned 1 [0242.716] SetLastError (dwErrCode=0x0) [0242.716] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Sun\\Java\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\sun\\java\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0242.716] GetLastError () returned 0xb7 [0242.716] CloseHandle (hObject=0x60c) returned 1 [0242.716] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0242.716] FindClose (in: hFindFile=0x665d90c620 | out: hFindFile=0x665d90c620) returned 1 [0242.716] SetLastError (dwErrCode=0x0) [0242.716] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Sun\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\sun\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0242.716] GetLastError () returned 0xb7 [0242.716] CloseHandle (hObject=0x570) returned 1 [0242.716] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0242.716] FindClose (in: hFindFile=0x665d90c1a0 | out: hFindFile=0x665d90c1a0) returned 1 [0242.717] SetLastError (dwErrCode=0x0) [0242.717] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0242.717] GetLastError () returned 0xb7 [0242.717] CloseHandle (hObject=0x47c) returned 1 [0242.717] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0242.717] SetLastError (dwErrCode=0x0) [0242.717] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0242.717] GetLastError () returned 0xb7 [0242.717] CloseHandle (hObject=0x47c) returned 1 [0242.717] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665d90cd40 [0242.718] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0242.719] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0242.719] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0242.719] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\-alhgKH H.pdf", dwFileAttributes=0x80) returned 1 [0242.720] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\-alhgKH H.pdf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\-alhgkh h.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0242.720] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=29676) returned 1 [0242.720] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=29676) returned 1 [0242.720] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x72ca, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0242.720] ReadFile (in: hFile=0x570, lpBuffer=0x665da7ca98, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca98*, lpNumberOfBytesRead=0x665da7ca58*=0x19, lpOverlapped=0x0) returned 1 [0242.721] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0242.721] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ca20 | out: phKey=0x665da7ca20*=0x665aae6820) returned 1 [0242.722] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0242.722] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0242.722] ReadFile (in: hFile=0x570, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x73ec, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ca30*=0x73ec, lpOverlapped=0x0) returned 1 [0242.723] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4250) returned 1 [0242.723] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x73ec, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x73f0) returned 1 [0242.723] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0242.723] WriteFile (in: hFile=0x570, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x73f0, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ca30*=0x73f0, lpOverlapped=0x0) returned 1 [0242.723] WriteFile (in: hFile=0x570, lpBuffer=0x665da7ca70*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca70*, lpNumberOfBytesWritten=0x665da7ca34*=0x6, lpOverlapped=0x0) returned 1 [0242.723] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ca40 | out: pbData=0x0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0242.723] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7cac0, pdwDataLen=0x665da7ca40 | out: pbData=0x665da7cac0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0242.723] WriteFile (in: hFile=0x570, lpBuffer=0x665da7cac0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7cac0*, lpNumberOfBytesWritten=0x665da7ca34*=0x10c, lpOverlapped=0x0) returned 1 [0242.724] CloseHandle (hObject=0x570) returned 1 [0242.742] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0242.748] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0242.748] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0242.748] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0242.748] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0242.748] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\07YpCoiFQQj4Fa-Bub.m4a", dwFileAttributes=0x80) returned 1 [0242.750] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\07YpCoiFQQj4Fa-Bub.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\07ypcoifqqj4fa-bub.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0242.751] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=17473) returned 1 [0242.751] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=17473) returned 1 [0242.751] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x431f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0242.751] ReadFile (in: hFile=0x570, lpBuffer=0x665da7ca98, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca98*, lpNumberOfBytesRead=0x665da7ca58*=0x19, lpOverlapped=0x0) returned 1 [0242.752] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0242.752] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ca20 | out: phKey=0x665da7ca20*=0x665aae65f0) returned 1 [0242.752] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0242.753] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0242.753] ReadFile (in: hFile=0x570, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4441, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ca30*=0x4441, lpOverlapped=0x0) returned 1 [0242.753] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4250) returned 1 [0242.753] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x4441, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x4450) returned 1 [0242.754] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0242.754] WriteFile (in: hFile=0x570, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4450, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ca30*=0x4450, lpOverlapped=0x0) returned 1 [0242.754] WriteFile (in: hFile=0x570, lpBuffer=0x665da7ca70*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca70*, lpNumberOfBytesWritten=0x665da7ca34*=0x6, lpOverlapped=0x0) returned 1 [0242.754] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ca40 | out: pbData=0x0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0242.754] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7cac0, pdwDataLen=0x665da7ca40 | out: pbData=0x665da7cac0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0242.754] WriteFile (in: hFile=0x570, lpBuffer=0x665da7cac0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7cac0*, lpNumberOfBytesWritten=0x665da7ca34*=0x10c, lpOverlapped=0x0) returned 1 [0242.754] CloseHandle (hObject=0x570) returned 1 [0242.773] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0242.779] CryptDestroyKey (hKey=0x665aae65f0) returned 1 [0242.779] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0242.779] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0242.779] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0242.779] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\2bLl5IN.odp", dwFileAttributes=0x80) returned 1 [0242.780] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\2bLl5IN.odp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\2bll5in.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0242.781] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=44854) returned 1 [0242.781] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=44854) returned 1 [0242.781] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0xae14, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0242.781] ReadFile (in: hFile=0x570, lpBuffer=0x665da7ca98, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca98*, lpNumberOfBytesRead=0x665da7ca58*=0x19, lpOverlapped=0x0) returned 1 [0242.782] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0242.782] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ca20 | out: phKey=0x665da7ca20*=0x665aae6cf0) returned 1 [0242.782] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0242.783] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0242.783] ReadFile (in: hFile=0x570, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xaf36, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ca30*=0xaf36, lpOverlapped=0x0) returned 1 [0242.784] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4250) returned 1 [0242.784] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0xaf36, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0xaf40) returned 1 [0242.784] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0242.784] WriteFile (in: hFile=0x570, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xaf40, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ca30*=0xaf40, lpOverlapped=0x0) returned 1 [0242.784] WriteFile (in: hFile=0x570, lpBuffer=0x665da7ca70*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca70*, lpNumberOfBytesWritten=0x665da7ca34*=0x6, lpOverlapped=0x0) returned 1 [0242.784] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ca40 | out: pbData=0x0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0242.784] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7cac0, pdwDataLen=0x665da7ca40 | out: pbData=0x665da7cac0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0242.784] WriteFile (in: hFile=0x570, lpBuffer=0x665da7cac0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7cac0*, lpNumberOfBytesWritten=0x665da7ca34*=0x10c, lpOverlapped=0x0) returned 1 [0242.785] CloseHandle (hObject=0x570) returned 1 [0242.804] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0242.810] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0242.810] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0242.810] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0242.810] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0242.810] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\2w9Jk6Q6.swf", dwFileAttributes=0x80) returned 1 [0242.811] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\2w9Jk6Q6.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\2w9jk6q6.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0242.812] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=41381) returned 1 [0242.812] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=41381) returned 1 [0242.812] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0xa083, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0242.812] ReadFile (in: hFile=0x570, lpBuffer=0x665da7ca98, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca98*, lpNumberOfBytesRead=0x665da7ca58*=0x19, lpOverlapped=0x0) returned 1 [0242.813] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0242.813] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ca20 | out: phKey=0x665da7ca20*=0x665aae66d0) returned 1 [0242.813] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0242.813] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0242.813] ReadFile (in: hFile=0x570, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xa1a5, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ca30*=0xa1a5, lpOverlapped=0x0) returned 1 [0242.815] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4250) returned 1 [0242.815] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0xa1a5, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0xa1b0) returned 1 [0242.815] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0242.815] WriteFile (in: hFile=0x570, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xa1b0, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ca30*=0xa1b0, lpOverlapped=0x0) returned 1 [0242.815] WriteFile (in: hFile=0x570, lpBuffer=0x665da7ca70*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca70*, lpNumberOfBytesWritten=0x665da7ca34*=0x6, lpOverlapped=0x0) returned 1 [0242.815] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ca40 | out: pbData=0x0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0242.815] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7cac0, pdwDataLen=0x665da7ca40 | out: pbData=0x665da7cac0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0242.815] WriteFile (in: hFile=0x570, lpBuffer=0x665da7cac0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7cac0*, lpNumberOfBytesWritten=0x665da7ca34*=0x10c, lpOverlapped=0x0) returned 1 [0242.815] CloseHandle (hObject=0x570) returned 1 [0242.837] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0242.843] CryptDestroyKey (hKey=0x665aae66d0) returned 1 [0242.843] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0242.843] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0242.843] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0242.843] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\3bG0U9sgbUY8ZoDBJ.flv", dwFileAttributes=0x80) returned 1 [0242.844] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\3bG0U9sgbUY8ZoDBJ.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\3bg0u9sgbuy8zodbj.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0242.844] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=48945) returned 1 [0242.845] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=48945) returned 1 [0242.845] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0xbe0f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0242.845] ReadFile (in: hFile=0x570, lpBuffer=0x665da7ca98, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca98*, lpNumberOfBytesRead=0x665da7ca58*=0x19, lpOverlapped=0x0) returned 1 [0242.846] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0242.846] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ca20 | out: phKey=0x665da7ca20*=0x665aae6cf0) returned 1 [0242.846] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0242.846] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0242.846] ReadFile (in: hFile=0x570, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xbf31, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ca30*=0xbf31, lpOverlapped=0x0) returned 1 [0242.848] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4250) returned 1 [0242.848] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0xbf31, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0xbf40) returned 1 [0242.848] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0242.848] WriteFile (in: hFile=0x570, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xbf40, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ca30*=0xbf40, lpOverlapped=0x0) returned 1 [0242.848] WriteFile (in: hFile=0x570, lpBuffer=0x665da7ca70*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca70*, lpNumberOfBytesWritten=0x665da7ca34*=0x6, lpOverlapped=0x0) returned 1 [0242.848] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ca40 | out: pbData=0x0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0242.848] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7cac0, pdwDataLen=0x665da7ca40 | out: pbData=0x665da7cac0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0242.848] WriteFile (in: hFile=0x570, lpBuffer=0x665da7cac0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7cac0*, lpNumberOfBytesWritten=0x665da7ca34*=0x10c, lpOverlapped=0x0) returned 1 [0242.849] CloseHandle (hObject=0x570) returned 1 [0242.869] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0242.874] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0242.874] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0242.874] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0242.874] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0242.875] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\3Ls6WdnW7ygfvFI_b.xlsx", dwFileAttributes=0x80) returned 1 [0242.876] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\3Ls6WdnW7ygfvFI_b.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\3ls6wdnw7ygfvfi_b.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0242.876] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=2112) returned 1 [0242.876] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=2112) returned 1 [0242.876] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x71e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0242.876] ReadFile (in: hFile=0x570, lpBuffer=0x665da7ca98, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca98*, lpNumberOfBytesRead=0x665da7ca58*=0x19, lpOverlapped=0x0) returned 1 [0242.877] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0242.877] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ca20 | out: phKey=0x665da7ca20*=0x665aae6510) returned 1 [0242.877] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0242.878] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0242.878] ReadFile (in: hFile=0x570, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x840, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ca30*=0x840, lpOverlapped=0x0) returned 1 [0242.878] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4250) returned 1 [0242.878] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x840, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x850) returned 1 [0242.878] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0242.878] WriteFile (in: hFile=0x570, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x850, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ca30*=0x850, lpOverlapped=0x0) returned 1 [0242.878] WriteFile (in: hFile=0x570, lpBuffer=0x665da7ca70*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca70*, lpNumberOfBytesWritten=0x665da7ca34*=0x6, lpOverlapped=0x0) returned 1 [0242.878] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ca40 | out: pbData=0x0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0242.878] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7cac0, pdwDataLen=0x665da7ca40 | out: pbData=0x665da7cac0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0242.878] WriteFile (in: hFile=0x570, lpBuffer=0x665da7cac0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7cac0*, lpNumberOfBytesWritten=0x665da7ca34*=0x10c, lpOverlapped=0x0) returned 1 [0242.878] CloseHandle (hObject=0x570) returned 1 [0242.900] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0242.905] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0242.905] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0242.905] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0242.906] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0242.906] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\6-MGdIsP86F-hkr9.gif", dwFileAttributes=0x80) returned 1 [0242.906] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\6-MGdIsP86F-hkr9.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\6-mgdisp86f-hkr9.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0242.907] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=22259) returned 1 [0242.907] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=22259) returned 1 [0242.907] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x55d1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0242.907] ReadFile (in: hFile=0x570, lpBuffer=0x665da7ca98, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca98*, lpNumberOfBytesRead=0x665da7ca58*=0x19, lpOverlapped=0x0) returned 1 [0242.908] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0242.909] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ca20 | out: phKey=0x665da7ca20*=0x665aae6cf0) returned 1 [0242.909] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0242.909] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0242.909] ReadFile (in: hFile=0x570, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x56f3, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ca30*=0x56f3, lpOverlapped=0x0) returned 1 [0242.910] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4250) returned 1 [0242.910] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x56f3, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x5700) returned 1 [0242.910] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0242.910] WriteFile (in: hFile=0x570, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x5700, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ca30*=0x5700, lpOverlapped=0x0) returned 1 [0242.910] WriteFile (in: hFile=0x570, lpBuffer=0x665da7ca70*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca70*, lpNumberOfBytesWritten=0x665da7ca34*=0x6, lpOverlapped=0x0) returned 1 [0242.910] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ca40 | out: pbData=0x0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0242.910] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7cac0, pdwDataLen=0x665da7ca40 | out: pbData=0x665da7cac0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0242.910] WriteFile (in: hFile=0x570, lpBuffer=0x665da7cac0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7cac0*, lpNumberOfBytesWritten=0x665da7ca34*=0x10c, lpOverlapped=0x0) returned 1 [0242.911] CloseHandle (hObject=0x570) returned 1 [0242.932] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0242.937] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0242.937] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0242.937] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0242.937] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0242.937] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\8EGEVIh5zpX9m5Kt.mp3", dwFileAttributes=0x80) returned 1 [0242.938] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\8EGEVIh5zpX9m5Kt.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\8egevih5zpx9m5kt.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0242.939] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=96977) returned 1 [0242.939] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=96977) returned 1 [0242.939] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x179af, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0242.939] ReadFile (in: hFile=0x570, lpBuffer=0x665da7ca98, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca98*, lpNumberOfBytesRead=0x665da7ca58*=0x19, lpOverlapped=0x0) returned 1 [0242.940] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0242.940] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ca20 | out: phKey=0x665da7ca20*=0x665aae6510) returned 1 [0242.940] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0242.940] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0242.940] ReadFile (in: hFile=0x570, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x17ad1, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ca30*=0x17ad1, lpOverlapped=0x0) returned 1 [0242.943] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4250) returned 1 [0242.944] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x17ad1, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x17ae0) returned 1 [0242.944] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0242.944] WriteFile (in: hFile=0x570, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x17ae0, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ca30*=0x17ae0, lpOverlapped=0x0) returned 1 [0242.945] WriteFile (in: hFile=0x570, lpBuffer=0x665da7ca70*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca70*, lpNumberOfBytesWritten=0x665da7ca34*=0x6, lpOverlapped=0x0) returned 1 [0242.945] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ca40 | out: pbData=0x0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0242.945] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7cac0, pdwDataLen=0x665da7ca40 | out: pbData=0x665da7cac0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0242.945] WriteFile (in: hFile=0x570, lpBuffer=0x665da7cac0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7cac0*, lpNumberOfBytesWritten=0x665da7ca34*=0x10c, lpOverlapped=0x0) returned 1 [0242.945] CloseHandle (hObject=0x570) returned 1 [0242.966] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0242.971] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0242.971] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0242.971] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0242.971] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0242.971] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\9-TE1X5v99-6-XnM.gif", dwFileAttributes=0x80) returned 1 [0242.972] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\9-TE1X5v99-6-XnM.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\9-te1x5v99-6-xnm.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0242.973] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=31235) returned 1 [0242.973] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=31235) returned 1 [0242.973] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x78e1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0242.973] ReadFile (in: hFile=0x570, lpBuffer=0x665da7ca98, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca98*, lpNumberOfBytesRead=0x665da7ca58*=0x19, lpOverlapped=0x0) returned 1 [0242.974] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0242.975] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ca20 | out: phKey=0x665da7ca20*=0x665aae70e0) returned 1 [0242.975] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0242.975] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0242.975] ReadFile (in: hFile=0x570, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x7a03, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ca30*=0x7a03, lpOverlapped=0x0) returned 1 [0242.976] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4250) returned 1 [0242.976] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x7a03, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x7a10) returned 1 [0242.976] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0242.976] WriteFile (in: hFile=0x570, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x7a10, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ca30*=0x7a10, lpOverlapped=0x0) returned 1 [0242.976] WriteFile (in: hFile=0x570, lpBuffer=0x665da7ca70*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca70*, lpNumberOfBytesWritten=0x665da7ca34*=0x6, lpOverlapped=0x0) returned 1 [0242.976] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ca40 | out: pbData=0x0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0242.976] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7cac0, pdwDataLen=0x665da7ca40 | out: pbData=0x665da7cac0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0242.976] WriteFile (in: hFile=0x570, lpBuffer=0x665da7cac0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7cac0*, lpNumberOfBytesWritten=0x665da7ca34*=0x10c, lpOverlapped=0x0) returned 1 [0242.977] CloseHandle (hObject=0x570) returned 1 [0243.004] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0243.009] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0243.009] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0243.009] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0243.009] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0243.009] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\9zA3jLXNtdmtb8.bmp", dwFileAttributes=0x80) returned 1 [0243.010] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\9zA3jLXNtdmtb8.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\9za3jlxntdmtb8.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0243.011] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=10640) returned 1 [0243.011] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=10640) returned 1 [0243.011] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x286e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0243.011] ReadFile (in: hFile=0x570, lpBuffer=0x665da7ca98, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca98*, lpNumberOfBytesRead=0x665da7ca58*=0x19, lpOverlapped=0x0) returned 1 [0243.012] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0243.012] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ca20 | out: phKey=0x665da7ca20*=0x665aae65f0) returned 1 [0243.012] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0243.013] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0243.013] ReadFile (in: hFile=0x570, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x2990, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ca30*=0x2990, lpOverlapped=0x0) returned 1 [0243.013] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4250) returned 1 [0243.013] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x2990, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x29a0) returned 1 [0243.014] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0243.014] WriteFile (in: hFile=0x570, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x29a0, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ca30*=0x29a0, lpOverlapped=0x0) returned 1 [0243.014] WriteFile (in: hFile=0x570, lpBuffer=0x665da7ca70*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca70*, lpNumberOfBytesWritten=0x665da7ca34*=0x6, lpOverlapped=0x0) returned 1 [0243.014] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ca40 | out: pbData=0x0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0243.014] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7cac0, pdwDataLen=0x665da7ca40 | out: pbData=0x665da7cac0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0243.014] WriteFile (in: hFile=0x570, lpBuffer=0x665da7cac0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7cac0*, lpNumberOfBytesWritten=0x665da7ca34*=0x10c, lpOverlapped=0x0) returned 1 [0243.014] CloseHandle (hObject=0x570) returned 1 [0243.035] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0243.040] CryptDestroyKey (hKey=0x665aae65f0) returned 1 [0243.040] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0243.040] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0243.040] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0243.041] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\a6yW.mp4", dwFileAttributes=0x80) returned 1 [0243.042] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\a6yW.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\a6yw.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0243.043] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=97426) returned 1 [0243.043] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=97426) returned 1 [0243.043] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x17b70, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0243.043] ReadFile (in: hFile=0x570, lpBuffer=0x665da7ca98, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca98*, lpNumberOfBytesRead=0x665da7ca58*=0x19, lpOverlapped=0x0) returned 1 [0243.045] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0243.045] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ca20 | out: phKey=0x665da7ca20*=0x665aae7150) returned 1 [0243.045] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0243.045] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0243.045] ReadFile (in: hFile=0x570, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x17c92, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ca30*=0x17c92, lpOverlapped=0x0) returned 1 [0243.047] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4250) returned 1 [0243.047] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x17c92, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x17ca0) returned 1 [0243.048] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0243.048] WriteFile (in: hFile=0x570, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x17ca0, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ca30*=0x17ca0, lpOverlapped=0x0) returned 1 [0243.048] WriteFile (in: hFile=0x570, lpBuffer=0x665da7ca70*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca70*, lpNumberOfBytesWritten=0x665da7ca34*=0x6, lpOverlapped=0x0) returned 1 [0243.048] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ca40 | out: pbData=0x0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0243.048] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7cac0, pdwDataLen=0x665da7ca40 | out: pbData=0x665da7cac0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0243.048] WriteFile (in: hFile=0x570, lpBuffer=0x665da7cac0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7cac0*, lpNumberOfBytesWritten=0x665da7ca34*=0x10c, lpOverlapped=0x0) returned 1 [0243.048] CloseHandle (hObject=0x570) returned 1 [0243.067] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0243.072] CryptDestroyKey (hKey=0x665aae7150) returned 1 [0243.072] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0243.072] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0243.072] SetLastError (dwErrCode=0x0) [0243.072] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0243.074] GetLastError () returned 0x0 [0243.074] WriteFile (in: hFile=0x570, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7cc40*=0x324, lpOverlapped=0x0) returned 1 [0243.075] CloseHandle (hObject=0x570) returned 1 [0243.075] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90cfe0 [0243.077] FindNextFileW (in: hFindFile=0x665d90cfe0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0243.077] FindNextFileW (in: hFindFile=0x665d90cfe0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0243.077] SetLastError (dwErrCode=0x0) [0243.077] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0243.077] GetLastError () returned 0x0 [0243.078] WriteFile (in: hFile=0x60c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7c490*=0x324, lpOverlapped=0x0) returned 1 [0243.078] CloseHandle (hObject=0x60c) returned 1 [0243.079] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90bde0 [0243.079] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0243.079] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0243.079] SetLastError (dwErrCode=0x0) [0243.079] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0243.080] GetLastError () returned 0x0 [0243.080] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0243.081] CloseHandle (hObject=0x620) returned 1 [0243.081] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bc60 [0243.081] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0243.081] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0243.081] SetLastError (dwErrCode=0x0) [0243.082] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0243.082] GetLastError () returned 0x0 [0243.082] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0243.083] CloseHandle (hObject=0x3e8) returned 1 [0243.083] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Collab\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90be40 [0243.084] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0243.084] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0243.084] FindClose (in: hFindFile=0x665d90be40 | out: hFindFile=0x665d90be40) returned 1 [0243.084] SetLastError (dwErrCode=0x0) [0243.084] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Collab\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\collab\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0243.085] GetLastError () returned 0x0 [0243.085] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0243.086] CloseHandle (hObject=0x3e8) returned 1 [0243.086] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0243.086] SetLastError (dwErrCode=0x0) [0243.086] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0243.086] GetLastError () returned 0xb7 [0243.086] CloseHandle (hObject=0x3e8) returned 1 [0243.086] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Forms\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90cbc0 [0243.087] FindNextFileW (in: hFindFile=0x665d90cbc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0243.087] FindNextFileW (in: hFindFile=0x665d90cbc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0243.087] FindClose (in: hFindFile=0x665d90cbc0 | out: hFindFile=0x665d90cbc0) returned 1 [0243.087] SetLastError (dwErrCode=0x0) [0243.087] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Forms\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\forms\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0243.088] GetLastError () returned 0x0 [0243.088] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0243.089] CloseHandle (hObject=0x3e8) returned 1 [0243.089] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0243.089] SetLastError (dwErrCode=0x0) [0243.089] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0243.089] GetLastError () returned 0xb7 [0243.090] CloseHandle (hObject=0x3e8) returned 1 [0243.090] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90d340 [0243.090] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0243.090] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0243.090] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0243.090] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobData", dwFileAttributes=0x80) returned 1 [0243.091] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobData" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\jscache\\globdata"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0243.092] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=22) returned 1 [0243.092] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=22) returned 1 [0243.092] CloseHandle (hObject=0x654) returned 1 [0243.092] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0243.092] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0243.092] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0243.093] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobSettings", dwFileAttributes=0x80) returned 1 [0243.093] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobSettings" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\jscache\\globsettings"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0243.094] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=24) returned 1 [0243.094] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=24) returned 1 [0243.094] CloseHandle (hObject=0x654) returned 1 [0243.094] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0243.094] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0243.094] FindClose (in: hFindFile=0x665d90d340 | out: hFindFile=0x665d90d340) returned 1 [0243.094] SetLastError (dwErrCode=0x0) [0243.094] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\jscache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0243.095] GetLastError () returned 0x0 [0243.095] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0243.096] CloseHandle (hObject=0x3e8) returned 1 [0243.096] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0243.096] SetLastError (dwErrCode=0x0) [0243.096] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0243.096] GetLastError () returned 0xb7 [0243.096] CloseHandle (hObject=0x3e8) returned 1 [0243.096] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bcc0 [0243.096] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0243.096] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0243.096] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0243.097] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\addressbook.acrodata", dwFileAttributes=0x80) returned 1 [0243.098] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\addressbook.acrodata" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\security\\addressbook.acrodata"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0243.098] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=10895) returned 1 [0243.098] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=10895) returned 1 [0243.098] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x296d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0243.098] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0243.100] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0243.100] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665aae6cf0) returned 1 [0243.100] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0243.100] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0243.100] ReadFile (in: hFile=0x654, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x2a8f, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ab70*=0x2a8f, lpOverlapped=0x0) returned 1 [0243.101] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0243.101] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ab68*=0x2a8f, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ab68*=0x2a90) returned 1 [0243.101] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0243.101] WriteFile (in: hFile=0x654, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x2a90, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x2a90, lpOverlapped=0x0) returned 1 [0243.101] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0243.101] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0243.101] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0243.101] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0243.101] CloseHandle (hObject=0x654) returned 1 [0243.123] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0243.128] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0243.128] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0243.128] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0243.128] SetLastError (dwErrCode=0x0) [0243.128] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\security\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0243.129] GetLastError () returned 0x0 [0243.129] WriteFile (in: hFile=0x654, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7ad80*=0x324, lpOverlapped=0x0) returned 1 [0243.130] CloseHandle (hObject=0x654) returned 1 [0243.130] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665d90d040 [0243.131] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0243.131] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0243.131] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0243.131] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\0FDED5CEB68C302B1CDB2BDDD9D0000E76539CB0.crl", dwFileAttributes=0x80) returned 1 [0243.132] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\0FDED5CEB68C302B1CDB2BDDD9D0000E76539CB0.crl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\security\\crlcache\\0fded5ceb68c302b1cdb2bddd9d0000e76539cb0.crl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0243.133] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x665da7a3c8 | out: lpFileSize=0x665da7a3c8*=637) returned 1 [0243.133] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x665da7a3d8 | out: lpFileSize=0x665da7a3d8*=637) returned 1 [0243.133] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x15b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0243.133] ReadFile (in: hFile=0x440, lpBuffer=0x665da7a428, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7a3e8, lpOverlapped=0x0 | out: lpBuffer=0x665da7a428*, lpNumberOfBytesRead=0x665da7a3e8*=0x19, lpOverlapped=0x0) returned 1 [0243.277] SetFilePointer (in: hFile=0x440, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0243.277] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7a3b0 | out: phKey=0x665da7a3b0*=0x665aae65f0) returned 1 [0243.277] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0243.278] SetFilePointer (in: hFile=0x440, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0243.278] ReadFile (in: hFile=0x440, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x27d, lpNumberOfBytesRead=0x665da7a3c0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7a3c0*=0x27d, lpOverlapped=0x0) returned 1 [0243.278] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7a3bc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7a3bc*=0xf4250) returned 1 [0243.278] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7a3b8*=0x27d, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7a3b8*=0x280) returned 1 [0243.278] SetFilePointer (in: hFile=0x440, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0243.278] WriteFile (in: hFile=0x440, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x280, lpNumberOfBytesWritten=0x665da7a3c0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7a3c0*=0x280, lpOverlapped=0x0) returned 1 [0243.278] WriteFile (in: hFile=0x440, lpBuffer=0x665da7a400*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7a3c4, lpOverlapped=0x0 | out: lpBuffer=0x665da7a400*, lpNumberOfBytesWritten=0x665da7a3c4*=0x6, lpOverlapped=0x0) returned 1 [0243.278] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7a3d0 | out: pbData=0x0*, pdwDataLen=0x665da7a3d0*=0x10c) returned 1 [0243.278] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7a450, pdwDataLen=0x665da7a3d0 | out: pbData=0x665da7a450*, pdwDataLen=0x665da7a3d0*=0x10c) returned 1 [0243.278] WriteFile (in: hFile=0x440, lpBuffer=0x665da7a450*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7a3c4, lpOverlapped=0x0 | out: lpBuffer=0x665da7a450*, lpNumberOfBytesWritten=0x665da7a3c4*=0x10c, lpOverlapped=0x0) returned 1 [0243.278] CloseHandle (hObject=0x440) returned 1 [0243.295] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0243.299] CryptDestroyKey (hKey=0x665aae65f0) returned 1 [0243.299] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0243.299] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0243.299] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0243.300] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\CE338828149963DCEA4CD26BB86F0363B4CA0BA5.crl", dwFileAttributes=0x80) returned 1 [0243.300] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\CE338828149963DCEA4CD26BB86F0363B4CA0BA5.crl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\security\\crlcache\\ce338828149963dcea4cd26bb86f0363b4ca0ba5.crl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0243.301] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x665da7a3c8 | out: lpFileSize=0x665da7a3c8*=425) returned 1 [0243.301] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x665da7a3d8 | out: lpFileSize=0x665da7a3d8*=425) returned 1 [0243.301] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x87, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0243.301] ReadFile (in: hFile=0x440, lpBuffer=0x665da7a428, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7a3e8, lpOverlapped=0x0 | out: lpBuffer=0x665da7a428*, lpNumberOfBytesRead=0x665da7a3e8*=0x19, lpOverlapped=0x0) returned 1 [0243.302] SetFilePointer (in: hFile=0x440, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0243.302] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7a3b0 | out: phKey=0x665da7a3b0*=0x665aae6510) returned 1 [0243.302] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0243.302] SetFilePointer (in: hFile=0x440, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0243.302] ReadFile (in: hFile=0x440, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x1a9, lpNumberOfBytesRead=0x665da7a3c0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7a3c0*=0x1a9, lpOverlapped=0x0) returned 1 [0243.302] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7a3bc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7a3bc*=0xf4250) returned 1 [0243.302] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7a3b8*=0x1a9, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7a3b8*=0x1b0) returned 1 [0243.302] SetFilePointer (in: hFile=0x440, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0243.302] WriteFile (in: hFile=0x440, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x1b0, lpNumberOfBytesWritten=0x665da7a3c0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7a3c0*=0x1b0, lpOverlapped=0x0) returned 1 [0243.302] WriteFile (in: hFile=0x440, lpBuffer=0x665da7a400*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7a3c4, lpOverlapped=0x0 | out: lpBuffer=0x665da7a400*, lpNumberOfBytesWritten=0x665da7a3c4*=0x6, lpOverlapped=0x0) returned 1 [0243.302] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7a3d0 | out: pbData=0x0*, pdwDataLen=0x665da7a3d0*=0x10c) returned 1 [0243.302] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7a450, pdwDataLen=0x665da7a3d0 | out: pbData=0x665da7a450*, pdwDataLen=0x665da7a3d0*=0x10c) returned 1 [0243.302] WriteFile (in: hFile=0x440, lpBuffer=0x665da7a450*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7a3c4, lpOverlapped=0x0 | out: lpBuffer=0x665da7a450*, lpNumberOfBytesWritten=0x665da7a3c4*=0x10c, lpOverlapped=0x0) returned 1 [0243.360] CloseHandle (hObject=0x440) returned 1 [0243.373] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0243.378] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0243.378] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0243.378] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0243.378] FindClose (in: hFindFile=0x665d90d040 | out: hFindFile=0x665d90d040) returned 1 [0243.378] SetLastError (dwErrCode=0x0) [0243.379] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\security\\crlcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0243.382] GetLastError () returned 0x0 [0243.382] WriteFile (in: hFile=0x654, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7ad80*=0x324, lpOverlapped=0x0) returned 1 [0243.383] CloseHandle (hObject=0x654) returned 1 [0243.383] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0243.383] FindClose (in: hFindFile=0x665d90bcc0 | out: hFindFile=0x665d90bcc0) returned 1 [0243.383] SetLastError (dwErrCode=0x0) [0243.383] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\security\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0243.383] GetLastError () returned 0xb7 [0243.383] CloseHandle (hObject=0x3e8) returned 1 [0243.383] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0243.383] FindClose (in: hFindFile=0x665d90bc60 | out: hFindFile=0x665d90bc60) returned 1 [0243.383] SetLastError (dwErrCode=0x0) [0243.383] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0243.383] GetLastError () returned 0xb7 [0243.384] CloseHandle (hObject=0x620) returned 1 [0243.384] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0243.384] FindClose (in: hFindFile=0x665d90bde0 | out: hFindFile=0x665d90bde0) returned 1 [0243.384] SetLastError (dwErrCode=0x0) [0243.384] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0243.384] GetLastError () returned 0xb7 [0243.384] CloseHandle (hObject=0x60c) returned 1 [0243.384] FindNextFileW (in: hFindFile=0x665d90cfe0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0243.384] SetLastError (dwErrCode=0x0) [0243.384] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0243.384] GetLastError () returned 0xb7 [0243.384] CloseHandle (hObject=0x60c) returned 1 [0243.384] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90bde0 [0243.384] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0243.385] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0243.385] SetLastError (dwErrCode=0x0) [0243.385] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\flash player\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0243.387] GetLastError () returned 0x0 [0243.387] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0243.388] CloseHandle (hObject=0x620) returned 1 [0243.388] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90cbc0 [0243.389] FindNextFileW (in: hFindFile=0x665d90cbc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0243.389] FindNextFileW (in: hFindFile=0x665d90cbc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0243.389] SetLastError (dwErrCode=0x0) [0243.389] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\flash player\\assetcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0243.390] GetLastError () returned 0x0 [0243.390] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0243.390] CloseHandle (hObject=0x3e8) returned 1 [0243.390] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\NAHQNPMN\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c1a0 [0243.391] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0243.391] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0243.391] FindClose (in: hFindFile=0x665d90c1a0 | out: hFindFile=0x665d90c1a0) returned 1 [0243.391] SetLastError (dwErrCode=0x0) [0243.391] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\NAHQNPMN\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\flash player\\assetcache\\nahqnpmn\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0243.402] GetLastError () returned 0x0 [0243.402] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0243.402] CloseHandle (hObject=0x3e8) returned 1 [0243.402] FindNextFileW (in: hFindFile=0x665d90cbc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0243.403] FindClose (in: hFindFile=0x665d90cbc0 | out: hFindFile=0x665d90cbc0) returned 1 [0243.403] SetLastError (dwErrCode=0x0) [0243.403] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\flash player\\assetcache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0243.403] GetLastError () returned 0xb7 [0243.403] CloseHandle (hObject=0x620) returned 1 [0243.403] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0243.403] SetLastError (dwErrCode=0x0) [0243.403] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\flash player\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0243.403] GetLastError () returned 0xb7 [0243.403] CloseHandle (hObject=0x620) returned 1 [0243.403] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c860 [0243.403] FindNextFileW (in: hFindFile=0x665d90c860, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0243.403] FindNextFileW (in: hFindFile=0x665d90c860, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0243.403] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0243.404] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\NativeCache.directory", dwFileAttributes=0x80) returned 1 [0243.404] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\NativeCache.directory" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\flash player\\nativecache\\nativecache.directory"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0243.405] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=0) returned 1 [0243.405] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=0) returned 1 [0243.405] CloseHandle (hObject=0x3e8) returned 1 [0243.405] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0243.405] FindNextFileW (in: hFindFile=0x665d90c860, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0243.405] FindClose (in: hFindFile=0x665d90c860 | out: hFindFile=0x665d90c860) returned 1 [0243.405] SetLastError (dwErrCode=0x0) [0243.405] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\flash player\\nativecache\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0243.406] GetLastError () returned 0x0 [0243.406] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0243.407] CloseHandle (hObject=0x620) returned 1 [0243.407] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0243.407] FindClose (in: hFindFile=0x665d90bde0 | out: hFindFile=0x665d90bde0) returned 1 [0243.407] SetLastError (dwErrCode=0x0) [0243.407] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\flash player\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0243.407] GetLastError () returned 0xb7 [0243.407] CloseHandle (hObject=0x60c) returned 1 [0243.407] FindNextFileW (in: hFindFile=0x665d90cfe0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0243.407] SetLastError (dwErrCode=0x0) [0243.407] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0243.407] GetLastError () returned 0xb7 [0243.407] CloseHandle (hObject=0x60c) returned 1 [0243.407] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Headlights\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c4a0 [0243.408] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0243.408] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0243.408] FindClose (in: hFindFile=0x665d90c4a0 | out: hFindFile=0x665d90c4a0) returned 1 [0243.408] SetLastError (dwErrCode=0x0) [0243.408] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Headlights\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\headlights\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0243.408] GetLastError () returned 0x0 [0243.408] WriteFile (in: hFile=0x60c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7c490*=0x324, lpOverlapped=0x0) returned 1 [0243.409] CloseHandle (hObject=0x60c) returned 1 [0243.409] FindNextFileW (in: hFindFile=0x665d90cfe0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0243.409] SetLastError (dwErrCode=0x0) [0243.409] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0243.409] GetLastError () returned 0xb7 [0243.409] CloseHandle (hObject=0x60c) returned 1 [0243.409] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Linguistics\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90d340 [0243.410] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0243.410] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0243.410] FindClose (in: hFindFile=0x665d90d340 | out: hFindFile=0x665d90d340) returned 1 [0243.410] SetLastError (dwErrCode=0x0) [0243.410] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Linguistics\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\linguistics\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0243.410] GetLastError () returned 0x0 [0243.410] WriteFile (in: hFile=0x60c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7c490*=0x324, lpOverlapped=0x0) returned 1 [0243.411] CloseHandle (hObject=0x60c) returned 1 [0243.411] FindNextFileW (in: hFindFile=0x665d90cfe0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0243.411] SetLastError (dwErrCode=0x0) [0243.411] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0243.411] GetLastError () returned 0xb7 [0243.411] CloseHandle (hObject=0x60c) returned 1 [0243.411] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c860 [0243.411] FindNextFileW (in: hFindFile=0x665d90c860, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0243.412] FindNextFileW (in: hFindFile=0x665d90c860, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0243.412] SetLastError (dwErrCode=0x0) [0243.412] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\logtransport2\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0243.412] GetLastError () returned 0x0 [0243.412] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0243.413] CloseHandle (hObject=0x620) returned 1 [0243.413] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\Logs\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c440 [0243.413] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0243.413] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0243.413] FindClose (in: hFindFile=0x665d90c440 | out: hFindFile=0x665d90c440) returned 1 [0243.413] SetLastError (dwErrCode=0x0) [0243.413] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\Logs\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\logtransport2\\logs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0243.413] GetLastError () returned 0x0 [0243.413] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0243.414] CloseHandle (hObject=0x620) returned 1 [0243.414] FindNextFileW (in: hFindFile=0x665d90c860, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0243.414] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0243.415] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\LogTransport2.cfg", dwFileAttributes=0x80) returned 1 [0243.419] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\LogTransport2.cfg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\logtransport2\\logtransport2.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0243.420] GetFileSizeEx (in: hFile=0x620, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=216) returned 1 [0243.420] GetFileSizeEx (in: hFile=0x620, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=216) returned 1 [0243.420] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7bac0 | out: phKey=0x665da7bac0*=0x665aae6510) returned 1 [0243.420] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0243.420] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0243.420] ReadFile (in: hFile=0x620, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xd8, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7bad0*=0xd8, lpOverlapped=0x0) returned 1 [0243.582] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4250) returned 1 [0243.582] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0xd8, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0xe0) returned 1 [0243.582] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0243.582] WriteFile (in: hFile=0x620, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7bad0*=0xe0, lpOverlapped=0x0) returned 1 [0243.582] WriteFile (in: hFile=0x620, lpBuffer=0x665da7bb10*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb10*, lpNumberOfBytesWritten=0x665da7bad4*=0x6, lpOverlapped=0x0) returned 1 [0243.582] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7bae0 | out: pbData=0x0*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0243.582] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7bb60, pdwDataLen=0x665da7bae0 | out: pbData=0x665da7bb60*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0243.582] WriteFile (in: hFile=0x620, lpBuffer=0x665da7bb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb60*, lpNumberOfBytesWritten=0x665da7bad4*=0x10c, lpOverlapped=0x0) returned 1 [0243.582] CloseHandle (hObject=0x620) returned 1 [0243.596] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0243.600] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0243.600] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0243.600] FindNextFileW (in: hFindFile=0x665d90c860, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0243.601] FindClose (in: hFindFile=0x665d90c860 | out: hFindFile=0x665d90c860) returned 1 [0243.601] SetLastError (dwErrCode=0x0) [0243.601] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\logtransport2\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0243.601] GetLastError () returned 0xb7 [0243.601] CloseHandle (hObject=0x60c) returned 1 [0243.601] FindNextFileW (in: hFindFile=0x665d90cfe0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0243.601] SetLastError (dwErrCode=0x0) [0243.601] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0243.601] GetLastError () returned 0xb7 [0243.601] CloseHandle (hObject=0x60c) returned 1 [0243.601] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90d340 [0243.601] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0243.601] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0243.601] SetLastError (dwErrCode=0x0) [0243.601] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\sonar\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0243.603] GetLastError () returned 0x0 [0243.603] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0243.603] CloseHandle (hObject=0x620) returned 1 [0243.603] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c080 [0243.604] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0243.604] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0243.604] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0243.604] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\sonar_policy.xml", dwFileAttributes=0x80) returned 1 [0243.605] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\sonar_policy.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\sonar\\sonar1.0\\sonar_policy.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0243.606] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=18761) returned 1 [0243.606] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=18761) returned 1 [0243.606] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x4827, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0243.606] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0243.607] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0243.607] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665aae6510) returned 1 [0243.607] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0243.607] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0243.607] ReadFile (in: hFile=0x3e8, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4949, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7b320*=0x4949, lpOverlapped=0x0) returned 1 [0243.608] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0243.608] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x4949, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x4950) returned 1 [0243.608] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0243.608] WriteFile (in: hFile=0x3e8, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4950, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7b320*=0x4950, lpOverlapped=0x0) returned 1 [0243.608] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0243.608] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0243.608] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0243.608] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0243.608] CloseHandle (hObject=0x3e8) returned 1 [0243.623] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0243.628] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0243.628] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0243.628] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0243.628] FindClose (in: hFindFile=0x665d90c080 | out: hFindFile=0x665d90c080) returned 1 [0243.628] SetLastError (dwErrCode=0x0) [0243.628] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\sonar\\sonar1.0\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0243.629] GetLastError () returned 0x0 [0243.629] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0243.630] CloseHandle (hObject=0x620) returned 1 [0243.630] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0243.630] FindClose (in: hFindFile=0x665d90d340 | out: hFindFile=0x665d90d340) returned 1 [0243.630] SetLastError (dwErrCode=0x0) [0243.630] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\sonar\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0243.630] GetLastError () returned 0xb7 [0243.630] CloseHandle (hObject=0x60c) returned 1 [0243.630] FindNextFileW (in: hFindFile=0x665d90cfe0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0243.630] FindClose (in: hFindFile=0x665d90cfe0 | out: hFindFile=0x665d90cfe0) returned 1 [0243.630] SetLastError (dwErrCode=0x0) [0243.630] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0243.630] GetLastError () returned 0xb7 [0243.631] CloseHandle (hObject=0x570) returned 1 [0243.631] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0243.631] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0243.631] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Ah3cJKdbAR0g7iIwe.jpg", dwFileAttributes=0x80) returned 1 [0243.632] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Ah3cJKdbAR0g7iIwe.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\ah3cjkdbar0g7iiwe.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0243.632] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=24568) returned 1 [0243.632] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=24568) returned 1 [0243.632] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x5ed6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0243.632] ReadFile (in: hFile=0x570, lpBuffer=0x665da7ca98, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca98*, lpNumberOfBytesRead=0x665da7ca58*=0x19, lpOverlapped=0x0) returned 1 [0243.634] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0243.634] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ca20 | out: phKey=0x665da7ca20*=0x665aae6820) returned 1 [0243.634] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0243.634] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0243.634] ReadFile (in: hFile=0x570, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x5ff8, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ca30*=0x5ff8, lpOverlapped=0x0) returned 1 [0243.635] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4250) returned 1 [0243.635] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x5ff8, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x6000) returned 1 [0243.635] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0243.635] WriteFile (in: hFile=0x570, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x6000, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ca30*=0x6000, lpOverlapped=0x0) returned 1 [0243.635] WriteFile (in: hFile=0x570, lpBuffer=0x665da7ca70*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca70*, lpNumberOfBytesWritten=0x665da7ca34*=0x6, lpOverlapped=0x0) returned 1 [0243.635] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ca40 | out: pbData=0x0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0243.635] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7cac0, pdwDataLen=0x665da7ca40 | out: pbData=0x665da7cac0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0243.635] WriteFile (in: hFile=0x570, lpBuffer=0x665da7cac0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7cac0*, lpNumberOfBytesWritten=0x665da7ca34*=0x10c, lpOverlapped=0x0) returned 1 [0243.636] CloseHandle (hObject=0x570) returned 1 [0243.651] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0243.655] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0243.655] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0243.655] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0243.655] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0243.656] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\auDx.gif", dwFileAttributes=0x80) returned 1 [0243.657] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\auDx.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\audx.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0243.657] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=68183) returned 1 [0243.657] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=68183) returned 1 [0243.657] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x10935, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0243.658] ReadFile (in: hFile=0x570, lpBuffer=0x665da7ca98, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca98*, lpNumberOfBytesRead=0x665da7ca58*=0x19, lpOverlapped=0x0) returned 1 [0243.659] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0243.659] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ca20 | out: phKey=0x665da7ca20*=0x665aae65f0) returned 1 [0243.659] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0243.659] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0243.659] ReadFile (in: hFile=0x570, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x10a57, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ca30*=0x10a57, lpOverlapped=0x0) returned 1 [0243.660] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4250) returned 1 [0243.660] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x10a57, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x10a60) returned 1 [0243.661] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0243.661] WriteFile (in: hFile=0x570, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x10a60, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ca30*=0x10a60, lpOverlapped=0x0) returned 1 [0243.661] WriteFile (in: hFile=0x570, lpBuffer=0x665da7ca70*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca70*, lpNumberOfBytesWritten=0x665da7ca34*=0x6, lpOverlapped=0x0) returned 1 [0243.661] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ca40 | out: pbData=0x0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0243.661] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7cac0, pdwDataLen=0x665da7ca40 | out: pbData=0x665da7cac0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0243.661] WriteFile (in: hFile=0x570, lpBuffer=0x665da7cac0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7cac0*, lpNumberOfBytesWritten=0x665da7ca34*=0x10c, lpOverlapped=0x0) returned 1 [0243.661] CloseHandle (hObject=0x570) returned 1 [0243.677] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0243.681] CryptDestroyKey (hKey=0x665aae65f0) returned 1 [0243.681] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0243.682] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0243.682] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0243.682] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\E8fSBFH1.mp4", dwFileAttributes=0x80) returned 1 [0243.683] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\E8fSBFH1.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\e8fsbfh1.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0243.683] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=8248) returned 1 [0243.683] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=8248) returned 1 [0243.683] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x1f16, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0243.683] ReadFile (in: hFile=0x570, lpBuffer=0x665da7ca98, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca98*, lpNumberOfBytesRead=0x665da7ca58*=0x19, lpOverlapped=0x0) returned 1 [0243.684] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0243.684] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ca20 | out: phKey=0x665da7ca20*=0x665aae6cf0) returned 1 [0243.684] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0243.684] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0243.684] ReadFile (in: hFile=0x570, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x2038, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ca30*=0x2038, lpOverlapped=0x0) returned 1 [0243.685] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4250) returned 1 [0243.685] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x2038, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x2040) returned 1 [0243.685] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0243.685] WriteFile (in: hFile=0x570, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x2040, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ca30*=0x2040, lpOverlapped=0x0) returned 1 [0243.685] WriteFile (in: hFile=0x570, lpBuffer=0x665da7ca70*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca70*, lpNumberOfBytesWritten=0x665da7ca34*=0x6, lpOverlapped=0x0) returned 1 [0243.685] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ca40 | out: pbData=0x0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0243.685] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7cac0, pdwDataLen=0x665da7ca40 | out: pbData=0x665da7cac0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0243.685] WriteFile (in: hFile=0x570, lpBuffer=0x665da7cac0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7cac0*, lpNumberOfBytesWritten=0x665da7ca34*=0x10c, lpOverlapped=0x0) returned 1 [0243.685] CloseHandle (hObject=0x570) returned 1 [0243.702] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0243.706] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0243.706] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0243.706] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0243.706] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0243.706] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\EFO0DY.flv", dwFileAttributes=0x80) returned 1 [0243.707] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\EFO0DY.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\efo0dy.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0243.707] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=66896) returned 1 [0243.707] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=66896) returned 1 [0243.707] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x1042e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0243.707] ReadFile (in: hFile=0x570, lpBuffer=0x665da7ca98, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca98*, lpNumberOfBytesRead=0x665da7ca58*=0x19, lpOverlapped=0x0) returned 1 [0243.708] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0243.708] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ca20 | out: phKey=0x665da7ca20*=0x665aae66d0) returned 1 [0243.708] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0243.708] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0243.708] ReadFile (in: hFile=0x570, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x10550, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ca30*=0x10550, lpOverlapped=0x0) returned 1 [0243.710] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4250) returned 1 [0243.710] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x10550, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x10560) returned 1 [0243.710] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0243.710] WriteFile (in: hFile=0x570, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x10560, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ca30*=0x10560, lpOverlapped=0x0) returned 1 [0243.710] WriteFile (in: hFile=0x570, lpBuffer=0x665da7ca70*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca70*, lpNumberOfBytesWritten=0x665da7ca34*=0x6, lpOverlapped=0x0) returned 1 [0243.710] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ca40 | out: pbData=0x0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0243.710] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7cac0, pdwDataLen=0x665da7ca40 | out: pbData=0x665da7cac0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0243.710] WriteFile (in: hFile=0x570, lpBuffer=0x665da7cac0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7cac0*, lpNumberOfBytesWritten=0x665da7ca34*=0x10c, lpOverlapped=0x0) returned 1 [0243.710] CloseHandle (hObject=0x570) returned 1 [0243.729] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0243.733] CryptDestroyKey (hKey=0x665aae66d0) returned 1 [0243.734] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0243.734] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0243.734] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0243.734] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\f5ugfXVYZJDhhim.mp4", dwFileAttributes=0x80) returned 1 [0243.735] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\f5ugfXVYZJDhhim.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\f5ugfxvyzjdhhim.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0243.736] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=8962) returned 1 [0243.736] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=8962) returned 1 [0243.736] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x21e0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0243.736] ReadFile (in: hFile=0x570, lpBuffer=0x665da7ca98, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca98*, lpNumberOfBytesRead=0x665da7ca58*=0x19, lpOverlapped=0x0) returned 1 [0243.736] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0243.736] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ca20 | out: phKey=0x665da7ca20*=0x665aae6cf0) returned 1 [0243.736] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0243.737] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0243.737] ReadFile (in: hFile=0x570, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x2302, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ca30*=0x2302, lpOverlapped=0x0) returned 1 [0243.737] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4250) returned 1 [0243.737] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x2302, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x2310) returned 1 [0243.737] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0243.737] WriteFile (in: hFile=0x570, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x2310, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ca30*=0x2310, lpOverlapped=0x0) returned 1 [0243.737] WriteFile (in: hFile=0x570, lpBuffer=0x665da7ca70*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca70*, lpNumberOfBytesWritten=0x665da7ca34*=0x6, lpOverlapped=0x0) returned 1 [0243.737] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ca40 | out: pbData=0x0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0243.737] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7cac0, pdwDataLen=0x665da7ca40 | out: pbData=0x665da7cac0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0243.737] WriteFile (in: hFile=0x570, lpBuffer=0x665da7cac0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7cac0*, lpNumberOfBytesWritten=0x665da7ca34*=0x10c, lpOverlapped=0x0) returned 1 [0243.737] CloseHandle (hObject=0x570) returned 1 [0243.754] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0243.758] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0243.758] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0243.759] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0243.759] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0243.759] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\FCvu.wav", dwFileAttributes=0x80) returned 1 [0243.759] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\FCvu.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\fcvu.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0243.760] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=67973) returned 1 [0243.760] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=67973) returned 1 [0243.760] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x10863, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0243.760] ReadFile (in: hFile=0x570, lpBuffer=0x665da7ca98, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca98*, lpNumberOfBytesRead=0x665da7ca58*=0x19, lpOverlapped=0x0) returned 1 [0243.761] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0243.761] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ca20 | out: phKey=0x665da7ca20*=0x665aae6510) returned 1 [0243.761] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0243.762] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0243.762] ReadFile (in: hFile=0x570, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x10985, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ca30*=0x10985, lpOverlapped=0x0) returned 1 [0243.763] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4250) returned 1 [0243.763] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x10985, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x10990) returned 1 [0243.763] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0243.763] WriteFile (in: hFile=0x570, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x10990, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ca30*=0x10990, lpOverlapped=0x0) returned 1 [0243.763] WriteFile (in: hFile=0x570, lpBuffer=0x665da7ca70*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca70*, lpNumberOfBytesWritten=0x665da7ca34*=0x6, lpOverlapped=0x0) returned 1 [0243.763] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ca40 | out: pbData=0x0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0243.763] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7cac0, pdwDataLen=0x665da7ca40 | out: pbData=0x665da7cac0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0243.764] WriteFile (in: hFile=0x570, lpBuffer=0x665da7cac0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7cac0*, lpNumberOfBytesWritten=0x665da7ca34*=0x10c, lpOverlapped=0x0) returned 1 [0243.764] CloseHandle (hObject=0x570) returned 1 [0243.780] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0243.784] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0243.784] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0243.784] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0243.784] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0243.785] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\HGKjjHiDRDvuELd.m4a", dwFileAttributes=0x80) returned 1 [0243.785] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\HGKjjHiDRDvuELd.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\hgkjjhidrdvueld.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0243.786] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=17312) returned 1 [0243.786] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=17312) returned 1 [0243.786] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x427e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0243.786] ReadFile (in: hFile=0x570, lpBuffer=0x665da7ca98, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca98*, lpNumberOfBytesRead=0x665da7ca58*=0x19, lpOverlapped=0x0) returned 1 [0243.787] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0243.787] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ca20 | out: phKey=0x665da7ca20*=0x665aae6cf0) returned 1 [0243.787] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0243.787] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0243.787] ReadFile (in: hFile=0x570, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x43a0, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ca30*=0x43a0, lpOverlapped=0x0) returned 1 [0243.788] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4250) returned 1 [0243.788] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x43a0, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x43b0) returned 1 [0243.788] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0243.788] WriteFile (in: hFile=0x570, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x43b0, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ca30*=0x43b0, lpOverlapped=0x0) returned 1 [0243.788] WriteFile (in: hFile=0x570, lpBuffer=0x665da7ca70*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca70*, lpNumberOfBytesWritten=0x665da7ca34*=0x6, lpOverlapped=0x0) returned 1 [0243.788] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ca40 | out: pbData=0x0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0243.788] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7cac0, pdwDataLen=0x665da7ca40 | out: pbData=0x665da7cac0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0243.788] WriteFile (in: hFile=0x570, lpBuffer=0x665da7cac0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7cac0*, lpNumberOfBytesWritten=0x665da7ca34*=0x10c, lpOverlapped=0x0) returned 1 [0243.789] CloseHandle (hObject=0x570) returned 1 [0243.805] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0243.809] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0243.809] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0243.809] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0243.810] SetLastError (dwErrCode=0x0) [0243.810] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0243.810] GetLastError () returned 0xb7 [0243.810] CloseHandle (hObject=0x570) returned 1 [0243.810] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Identities\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90d340 [0243.810] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0243.810] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0243.810] SetLastError (dwErrCode=0x0) [0243.810] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Identities\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\identities\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0243.811] GetLastError () returned 0x0 [0243.811] WriteFile (in: hFile=0x60c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7c490*=0x324, lpOverlapped=0x0) returned 1 [0243.812] CloseHandle (hObject=0x60c) returned 1 [0243.812] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Identities\\{CA8CA1BB-F2A6-4E9C-B7CC-FB56671763E8}\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90bc60 [0243.812] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0243.812] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0243.812] FindClose (in: hFindFile=0x665d90bc60 | out: hFindFile=0x665d90bc60) returned 1 [0243.812] SetLastError (dwErrCode=0x0) [0243.812] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Identities\\{CA8CA1BB-F2A6-4E9C-B7CC-FB56671763E8}\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\identities\\{ca8ca1bb-f2a6-4e9c-b7cc-fb56671763e8}\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0243.813] GetLastError () returned 0x0 [0243.813] WriteFile (in: hFile=0x60c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7c490*=0x324, lpOverlapped=0x0) returned 1 [0243.813] CloseHandle (hObject=0x60c) returned 1 [0243.814] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0243.814] FindClose (in: hFindFile=0x665d90d340 | out: hFindFile=0x665d90d340) returned 1 [0243.814] SetLastError (dwErrCode=0x0) [0243.814] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Identities\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\identities\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0243.814] GetLastError () returned 0xb7 [0243.814] CloseHandle (hObject=0x570) returned 1 [0243.814] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0243.814] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0243.814] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\iWZsTFA9PGebJ.flv", dwFileAttributes=0x80) returned 1 [0243.815] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\iWZsTFA9PGebJ.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\iwzstfa9pgebj.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0243.815] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=83373) returned 1 [0243.815] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=83373) returned 1 [0243.815] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x1448b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0243.815] ReadFile (in: hFile=0x570, lpBuffer=0x665da7ca98, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca98*, lpNumberOfBytesRead=0x665da7ca58*=0x19, lpOverlapped=0x0) returned 1 [0243.816] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0243.816] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ca20 | out: phKey=0x665da7ca20*=0x665aae70e0) returned 1 [0243.816] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0243.816] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0243.816] ReadFile (in: hFile=0x570, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x145ad, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ca30*=0x145ad, lpOverlapped=0x0) returned 1 [0243.818] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4250) returned 1 [0243.818] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x145ad, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x145b0) returned 1 [0243.818] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0243.818] WriteFile (in: hFile=0x570, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x145b0, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ca30*=0x145b0, lpOverlapped=0x0) returned 1 [0243.818] WriteFile (in: hFile=0x570, lpBuffer=0x665da7ca70*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca70*, lpNumberOfBytesWritten=0x665da7ca34*=0x6, lpOverlapped=0x0) returned 1 [0243.818] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ca40 | out: pbData=0x0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0243.818] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7cac0, pdwDataLen=0x665da7ca40 | out: pbData=0x665da7cac0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0243.818] WriteFile (in: hFile=0x570, lpBuffer=0x665da7cac0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7cac0*, lpNumberOfBytesWritten=0x665da7ca34*=0x10c, lpOverlapped=0x0) returned 1 [0243.818] CloseHandle (hObject=0x570) returned 1 [0243.833] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0243.837] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0243.837] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0243.837] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0243.837] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0243.838] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\jhQibqE.m4a", dwFileAttributes=0x80) returned 1 [0243.838] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\jhQibqE.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\jhqibqe.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0243.839] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=26703) returned 1 [0243.839] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=26703) returned 1 [0243.839] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x672d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0243.839] ReadFile (in: hFile=0x570, lpBuffer=0x665da7ca98, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca98*, lpNumberOfBytesRead=0x665da7ca58*=0x19, lpOverlapped=0x0) returned 1 [0243.840] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0243.840] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ca20 | out: phKey=0x665da7ca20*=0x665aae65f0) returned 1 [0243.840] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0243.840] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0243.841] ReadFile (in: hFile=0x570, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x684f, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ca30*=0x684f, lpOverlapped=0x0) returned 1 [0243.841] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4250) returned 1 [0243.841] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x684f, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x6850) returned 1 [0243.841] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0243.841] WriteFile (in: hFile=0x570, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x6850, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ca30*=0x6850, lpOverlapped=0x0) returned 1 [0243.841] WriteFile (in: hFile=0x570, lpBuffer=0x665da7ca70*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca70*, lpNumberOfBytesWritten=0x665da7ca34*=0x6, lpOverlapped=0x0) returned 1 [0243.842] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ca40 | out: pbData=0x0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0243.842] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7cac0, pdwDataLen=0x665da7ca40 | out: pbData=0x665da7cac0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0243.842] WriteFile (in: hFile=0x570, lpBuffer=0x665da7cac0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7cac0*, lpNumberOfBytesWritten=0x665da7ca34*=0x10c, lpOverlapped=0x0) returned 1 [0243.842] CloseHandle (hObject=0x570) returned 1 [0243.858] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0243.862] CryptDestroyKey (hKey=0x665aae65f0) returned 1 [0243.862] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0243.862] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0243.862] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0243.863] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\k4WMII.mp4", dwFileAttributes=0x80) returned 1 [0243.863] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\k4WMII.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\k4wmii.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0243.864] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=25579) returned 1 [0243.864] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=25579) returned 1 [0243.864] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x62c9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0243.864] ReadFile (in: hFile=0x570, lpBuffer=0x665da7ca98, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca98*, lpNumberOfBytesRead=0x665da7ca58*=0x19, lpOverlapped=0x0) returned 1 [0243.865] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0243.865] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ca20 | out: phKey=0x665da7ca20*=0x665aae7150) returned 1 [0243.865] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0243.865] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0243.865] ReadFile (in: hFile=0x570, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x63eb, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ca30*=0x63eb, lpOverlapped=0x0) returned 1 [0243.866] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4250) returned 1 [0243.866] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x63eb, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x63f0) returned 1 [0243.866] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0243.866] WriteFile (in: hFile=0x570, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x63f0, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ca30*=0x63f0, lpOverlapped=0x0) returned 1 [0243.866] WriteFile (in: hFile=0x570, lpBuffer=0x665da7ca70*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca70*, lpNumberOfBytesWritten=0x665da7ca34*=0x6, lpOverlapped=0x0) returned 1 [0243.866] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ca40 | out: pbData=0x0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0243.866] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7cac0, pdwDataLen=0x665da7ca40 | out: pbData=0x665da7cac0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0243.866] WriteFile (in: hFile=0x570, lpBuffer=0x665da7cac0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7cac0*, lpNumberOfBytesWritten=0x665da7ca34*=0x10c, lpOverlapped=0x0) returned 1 [0243.866] CloseHandle (hObject=0x570) returned 1 [0243.882] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0243.887] CryptDestroyKey (hKey=0x665aae7150) returned 1 [0243.887] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0243.887] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0243.887] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0243.887] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\LCXuhulswMFLn7j289.gif", dwFileAttributes=0x80) returned 1 [0243.888] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\LCXuhulswMFLn7j289.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\lcxuhulswmfln7j289.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0243.888] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=72968) returned 1 [0243.888] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=72968) returned 1 [0243.888] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x11be6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0243.888] ReadFile (in: hFile=0x570, lpBuffer=0x665da7ca98, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca98*, lpNumberOfBytesRead=0x665da7ca58*=0x19, lpOverlapped=0x0) returned 1 [0243.889] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0243.889] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ca20 | out: phKey=0x665da7ca20*=0x665aae6510) returned 1 [0243.889] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0243.890] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0243.890] ReadFile (in: hFile=0x570, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x11d08, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ca30*=0x11d08, lpOverlapped=0x0) returned 1 [0243.891] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4250) returned 1 [0243.891] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x11d08, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x11d10) returned 1 [0243.891] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0243.891] WriteFile (in: hFile=0x570, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x11d10, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ca30*=0x11d10, lpOverlapped=0x0) returned 1 [0243.891] WriteFile (in: hFile=0x570, lpBuffer=0x665da7ca70*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca70*, lpNumberOfBytesWritten=0x665da7ca34*=0x6, lpOverlapped=0x0) returned 1 [0243.891] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ca40 | out: pbData=0x0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0243.891] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7cac0, pdwDataLen=0x665da7ca40 | out: pbData=0x665da7cac0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0243.892] WriteFile (in: hFile=0x570, lpBuffer=0x665da7cac0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7cac0*, lpNumberOfBytesWritten=0x665da7ca34*=0x10c, lpOverlapped=0x0) returned 1 [0243.892] CloseHandle (hObject=0x570) returned 1 [0243.908] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0243.912] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0243.912] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0243.912] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0243.912] SetLastError (dwErrCode=0x0) [0243.912] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0243.912] GetLastError () returned 0xb7 [0243.912] CloseHandle (hObject=0x570) returned 1 [0243.913] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90cc80 [0243.913] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0243.913] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0243.913] SetLastError (dwErrCode=0x0) [0243.913] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\macromedia\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0243.914] GetLastError () returned 0x0 [0243.914] WriteFile (in: hFile=0x60c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7c490*=0x324, lpOverlapped=0x0) returned 1 [0243.915] CloseHandle (hObject=0x60c) returned 1 [0243.915] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90d340 [0243.915] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0243.915] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0243.915] SetLastError (dwErrCode=0x0) [0243.915] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\macromedia\\flash player\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0243.969] GetLastError () returned 0x0 [0243.969] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0243.969] CloseHandle (hObject=0x620) returned 1 [0243.969] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c440 [0243.970] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0243.970] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0243.970] SetLastError (dwErrCode=0x0) [0243.970] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\macromedia\\flash player\\#sharedobjects\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0243.970] GetLastError () returned 0x0 [0243.970] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0243.971] CloseHandle (hObject=0x3e8) returned 1 [0243.971] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\DQQHJZ8C\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bc60 [0243.971] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0243.971] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0243.971] FindClose (in: hFindFile=0x665d90bc60 | out: hFindFile=0x665d90bc60) returned 1 [0243.971] SetLastError (dwErrCode=0x0) [0243.971] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\DQQHJZ8C\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\macromedia\\flash player\\#sharedobjects\\dqqhjz8c\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0243.972] GetLastError () returned 0x0 [0243.972] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0243.973] CloseHandle (hObject=0x3e8) returned 1 [0243.973] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0243.973] FindClose (in: hFindFile=0x665d90c440 | out: hFindFile=0x665d90c440) returned 1 [0243.973] SetLastError (dwErrCode=0x0) [0243.973] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\macromedia\\flash player\\#sharedobjects\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0243.973] GetLastError () returned 0xb7 [0243.973] CloseHandle (hObject=0x620) returned 1 [0243.973] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0243.973] SetLastError (dwErrCode=0x0) [0243.973] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\macromedia\\flash player\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0243.974] GetLastError () returned 0xb7 [0243.974] CloseHandle (hObject=0x620) returned 1 [0243.974] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90cbc0 [0243.974] FindNextFileW (in: hFindFile=0x665d90cbc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0243.974] FindNextFileW (in: hFindFile=0x665d90cbc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0243.974] SetLastError (dwErrCode=0x0) [0243.974] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0243.974] GetLastError () returned 0x0 [0243.974] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0243.975] CloseHandle (hObject=0x3e8) returned 1 [0243.975] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bc60 [0243.975] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0243.975] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0243.975] SetLastError (dwErrCode=0x0) [0243.975] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0243.976] GetLastError () returned 0x0 [0243.976] WriteFile (in: hFile=0x654, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7ad80*=0x324, lpOverlapped=0x0) returned 1 [0243.977] CloseHandle (hObject=0x654) returned 1 [0243.977] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665d90ca40 [0243.977] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0243.977] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0243.977] SetLastError (dwErrCode=0x0) [0243.977] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0243.978] GetLastError () returned 0x0 [0243.978] WriteFile (in: hFile=0x440, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7a5d0*=0x324, lpOverlapped=0x0) returned 1 [0243.979] CloseHandle (hObject=0x440) returned 1 [0243.979] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\*.*", lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0x665d90c1a0 [0243.984] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0243.984] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0243.984] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0243.985] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol", dwFileAttributes=0x80) returned 1 [0243.985] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0243.986] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c18 | out: lpFileSize=0x665da79c18*=506) returned 1 [0243.986] GetFileSizeEx (in: hFile=0x10c, lpFileSize=0x665da79c28 | out: lpFileSize=0x665da79c28*=506) returned 1 [0243.986] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0243.986] ReadFile (in: hFile=0x10c, lpBuffer=0x665da79c78, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79c38, lpOverlapped=0x0 | out: lpBuffer=0x665da79c78*, lpNumberOfBytesRead=0x665da79c38*=0x19, lpOverlapped=0x0) returned 1 [0243.987] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0243.987] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79c00 | out: phKey=0x665da79c00*=0x665aae6cf0) returned 1 [0243.987] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0243.987] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0243.987] ReadFile (in: hFile=0x10c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x1fa, lpNumberOfBytesRead=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79c10*=0x1fa, lpOverlapped=0x0) returned 1 [0243.987] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da79c0c*=0xf4250) returned 1 [0243.987] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x1fa, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79c08*=0x200) returned 1 [0243.987] SetFilePointer (in: hFile=0x10c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0243.987] WriteFile (in: hFile=0x10c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x665da79c10, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79c10*=0x200, lpOverlapped=0x0) returned 1 [0243.988] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79c50*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79c50*, lpNumberOfBytesWritten=0x665da79c14*=0x6, lpOverlapped=0x0) returned 1 [0243.988] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79c20 | out: pbData=0x0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0243.988] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da79ca0, pdwDataLen=0x665da79c20 | out: pbData=0x665da79ca0*, pdwDataLen=0x665da79c20*=0x10c) returned 1 [0243.988] WriteFile (in: hFile=0x10c, lpBuffer=0x665da79ca0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79c14, lpOverlapped=0x0 | out: lpBuffer=0x665da79ca0*, lpNumberOfBytesWritten=0x665da79c14*=0x10c, lpOverlapped=0x0) returned 1 [0244.108] CloseHandle (hObject=0x10c) returned 1 [0244.125] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0244.130] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0244.130] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0244.130] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0 [0244.130] FindClose (in: hFindFile=0x665d90c1a0 | out: hFindFile=0x665d90c1a0) returned 1 [0244.130] SetLastError (dwErrCode=0x0) [0244.130] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\sys\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0244.131] GetLastError () returned 0x0 [0244.131] WriteFile (in: hFile=0x440, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7a5d0*=0x324, lpOverlapped=0x0) returned 1 [0244.132] CloseHandle (hObject=0x440) returned 1 [0244.132] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0244.132] FindClose (in: hFindFile=0x665d90ca40 | out: hFindFile=0x665d90ca40) returned 1 [0244.132] SetLastError (dwErrCode=0x0) [0244.132] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0244.132] GetLastError () returned 0xb7 [0244.132] CloseHandle (hObject=0x654) returned 1 [0244.132] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0244.132] FindClose (in: hFindFile=0x665d90bc60 | out: hFindFile=0x665d90bc60) returned 1 [0244.133] SetLastError (dwErrCode=0x0) [0244.133] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0244.133] GetLastError () returned 0xb7 [0244.133] CloseHandle (hObject=0x3e8) returned 1 [0244.133] FindNextFileW (in: hFindFile=0x665d90cbc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0244.133] FindClose (in: hFindFile=0x665d90cbc0 | out: hFindFile=0x665d90cbc0) returned 1 [0244.133] SetLastError (dwErrCode=0x0) [0244.133] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0244.133] GetLastError () returned 0xb7 [0244.133] CloseHandle (hObject=0x620) returned 1 [0244.133] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0244.133] FindClose (in: hFindFile=0x665d90d340 | out: hFindFile=0x665d90d340) returned 1 [0244.133] SetLastError (dwErrCode=0x0) [0244.134] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\macromedia\\flash player\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0244.134] GetLastError () returned 0xb7 [0244.134] CloseHandle (hObject=0x60c) returned 1 [0244.134] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0244.134] FindClose (in: hFindFile=0x665d90cc80 | out: hFindFile=0x665d90cc80) returned 1 [0244.134] SetLastError (dwErrCode=0x0) [0244.134] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\macromedia\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0244.134] GetLastError () returned 0xb7 [0244.134] CloseHandle (hObject=0x570) returned 1 [0244.134] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0244.134] SetLastError (dwErrCode=0x0) [0244.134] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0244.135] GetLastError () returned 0xb7 [0244.135] CloseHandle (hObject=0x570) returned 1 [0244.135] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90bc60 [0244.135] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0244.135] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0244.135] SetLastError (dwErrCode=0x0) [0244.135] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0244.136] GetLastError () returned 0x0 [0244.136] WriteFile (in: hFile=0x60c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7c490*=0x324, lpOverlapped=0x0) returned 1 [0244.137] CloseHandle (hObject=0x60c) returned 1 [0244.137] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90cec0 [0244.137] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0244.137] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0244.137] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0244.138] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb", dwFileAttributes=0x80) returned 1 [0244.138] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\access\\accesscache.accdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0244.139] GetFileSizeEx (in: hFile=0x620, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=200704) returned 1 [0244.139] GetFileSizeEx (in: hFile=0x620, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=200704) returned 1 [0244.139] SetFilePointerEx (in: hFile=0x620, liDistanceToMove=0x30ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0244.139] ReadFile (in: hFile=0x620, lpBuffer=0x665da7bb38, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7baf8, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb38*, lpNumberOfBytesRead=0x665da7baf8*=0x19, lpOverlapped=0x0) returned 1 [0244.219] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0244.219] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7bac0 | out: phKey=0x665da7bac0*=0x665aae66d0) returned 1 [0244.219] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0244.219] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0244.219] ReadFile (in: hFile=0x620, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x31000, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7bad0*=0x31000, lpOverlapped=0x0) returned 1 [0244.468] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4250) returned 1 [0244.468] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0x31000, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0x31010) returned 1 [0244.469] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0244.469] WriteFile (in: hFile=0x620, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x31010, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7bad0*=0x31010, lpOverlapped=0x0) returned 1 [0244.470] WriteFile (in: hFile=0x620, lpBuffer=0x665da7bb10*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb10*, lpNumberOfBytesWritten=0x665da7bad4*=0x6, lpOverlapped=0x0) returned 1 [0244.470] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7bae0 | out: pbData=0x0*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0244.470] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7bb60, pdwDataLen=0x665da7bae0 | out: pbData=0x665da7bb60*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0244.470] WriteFile (in: hFile=0x620, lpBuffer=0x665da7bb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb60*, lpNumberOfBytesWritten=0x665da7bad4*=0x10c, lpOverlapped=0x0) returned 1 [0244.470] CloseHandle (hObject=0x620) returned 1 [0244.483] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0244.487] CryptDestroyKey (hKey=0x665aae66d0) returned 1 [0244.487] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0244.487] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0244.487] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0244.487] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\System.mdw", dwFileAttributes=0x80) returned 1 [0244.488] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\System.mdw" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\access\\system.mdw"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0244.489] GetFileSizeEx (in: hFile=0x620, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=126976) returned 1 [0244.489] GetFileSizeEx (in: hFile=0x620, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=126976) returned 1 [0244.489] SetFilePointerEx (in: hFile=0x620, liDistanceToMove=0x1eede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0244.489] ReadFile (in: hFile=0x620, lpBuffer=0x665da7bb38, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7baf8, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb38*, lpNumberOfBytesRead=0x665da7baf8*=0x19, lpOverlapped=0x0) returned 1 [0244.530] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0244.531] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7bac0 | out: phKey=0x665da7bac0*=0x665aae6510) returned 1 [0244.531] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0244.531] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0244.531] ReadFile (in: hFile=0x620, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x1f000, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7bad0*=0x1f000, lpOverlapped=0x0) returned 1 [0244.964] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4250) returned 1 [0244.964] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0x1f000, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0x1f010) returned 1 [0244.964] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0244.964] WriteFile (in: hFile=0x620, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x1f010, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7bad0*=0x1f010, lpOverlapped=0x0) returned 1 [0244.965] WriteFile (in: hFile=0x620, lpBuffer=0x665da7bb10*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb10*, lpNumberOfBytesWritten=0x665da7bad4*=0x6, lpOverlapped=0x0) returned 1 [0244.965] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7bae0 | out: pbData=0x0*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0244.965] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7bb60, pdwDataLen=0x665da7bae0 | out: pbData=0x665da7bb60*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0244.965] WriteFile (in: hFile=0x620, lpBuffer=0x665da7bb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb60*, lpNumberOfBytesWritten=0x665da7bad4*=0x10c, lpOverlapped=0x0) returned 1 [0244.965] CloseHandle (hObject=0x620) returned 1 [0244.985] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0244.989] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0244.989] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0244.990] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0244.990] FindClose (in: hFindFile=0x665d90cec0 | out: hFindFile=0x665d90cec0) returned 1 [0244.990] SetLastError (dwErrCode=0x0) [0244.990] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\access\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0244.991] GetLastError () returned 0x0 [0244.991] WriteFile (in: hFile=0x60c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7c490*=0x324, lpOverlapped=0x0) returned 1 [0244.992] CloseHandle (hObject=0x60c) returned 1 [0244.992] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0244.992] SetLastError (dwErrCode=0x0) [0244.992] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0244.992] GetLastError () returned 0xb7 [0244.992] CloseHandle (hObject=0x60c) returned 1 [0244.992] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\AddIns\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c1a0 [0244.992] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0244.992] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0244.992] FindClose (in: hFindFile=0x665d90c1a0 | out: hFindFile=0x665d90c1a0) returned 1 [0244.992] SetLastError (dwErrCode=0x0) [0244.992] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\AddIns\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\addins\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0244.993] GetLastError () returned 0x0 [0244.993] WriteFile (in: hFile=0x60c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7c490*=0x324, lpOverlapped=0x0) returned 1 [0244.994] CloseHandle (hObject=0x60c) returned 1 [0244.994] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0244.994] SetLastError (dwErrCode=0x0) [0244.994] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0244.994] GetLastError () returned 0xb7 [0244.994] CloseHandle (hObject=0x60c) returned 1 [0244.994] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c2c0 [0244.994] FindNextFileW (in: hFindFile=0x665d90c2c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0244.994] FindNextFileW (in: hFindFile=0x665d90c2c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0244.994] SetLastError (dwErrCode=0x0) [0244.994] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0244.995] GetLastError () returned 0x0 [0244.995] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0244.996] CloseHandle (hObject=0x620) returned 1 [0244.996] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90ce60 [0245.192] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0245.192] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0245.192] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0245.193] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl", dwFileAttributes=0x80) returned 1 [0245.194] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\apasixtheditionofficeonline.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0245.194] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=333602) returned 1 [0245.194] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=333602) returned 1 [0245.194] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x51600, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0245.194] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0245.328] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0245.328] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665aae6cf0) returned 1 [0245.328] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0245.329] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0245.329] ReadFile (in: hFile=0x3e8, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x51722, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7b320*=0x51722, lpOverlapped=0x0) returned 1 [0245.729] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0245.729] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x51722, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x51730) returned 1 [0245.730] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0245.730] WriteFile (in: hFile=0x3e8, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x51730, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7b320*=0x51730, lpOverlapped=0x0) returned 1 [0245.730] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0245.731] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0245.731] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0245.731] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0245.731] CloseHandle (hObject=0x3e8) returned 1 [0245.739] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0245.744] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0245.744] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0245.744] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0245.744] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0245.744] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CHICAGO.XSL", dwFileAttributes=0x80) returned 1 [0245.745] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CHICAGO.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\chicago.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0245.745] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=297017) returned 1 [0245.745] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=297017) returned 1 [0245.745] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x48717, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0245.745] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0245.830] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0245.830] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665aae7150) returned 1 [0245.830] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0245.830] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0245.830] ReadFile (in: hFile=0x3e8, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x48839, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7b320*=0x48839, lpOverlapped=0x0) returned 1 [0245.856] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0245.856] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x48839, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x48840) returned 1 [0245.856] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0245.856] WriteFile (in: hFile=0x3e8, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x48840, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7b320*=0x48840, lpOverlapped=0x0) returned 1 [0245.857] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0245.857] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0245.857] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0245.857] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0245.857] CloseHandle (hObject=0x3e8) returned 1 [0245.873] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0245.878] CryptDestroyKey (hKey=0x665aae7150) returned 1 [0245.878] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0245.878] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0245.878] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0245.879] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GB.XSL", dwFileAttributes=0x80) returned 1 [0245.879] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GB.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\gb.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0245.880] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=268670) returned 1 [0245.880] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=268670) returned 1 [0245.880] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x4185c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0245.880] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0245.898] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0245.898] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665aae6510) returned 1 [0245.898] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0245.899] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0245.899] ReadFile (in: hFile=0x3e8, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4197e, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7b320*=0x4197e, lpOverlapped=0x0) returned 1 [0245.941] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0245.941] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x4197e, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x41980) returned 1 [0245.941] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0245.941] WriteFile (in: hFile=0x3e8, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x41980, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7b320*=0x41980, lpOverlapped=0x0) returned 1 [0245.942] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0245.942] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0245.942] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0245.942] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0245.942] CloseHandle (hObject=0x3e8) returned 1 [0245.956] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0245.962] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0245.962] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0245.962] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0245.962] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0245.962] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostName.XSL", dwFileAttributes=0x80) returned 1 [0245.963] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostName.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\gostname.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0245.964] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=256358) returned 1 [0245.964] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=256358) returned 1 [0245.964] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x3e844, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0245.964] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0245.965] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0245.965] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665aae6cf0) returned 1 [0245.965] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0245.966] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0245.966] ReadFile (in: hFile=0x3e8, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3e966, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7b320*=0x3e966, lpOverlapped=0x0) returned 1 [0245.989] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0245.989] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x3e966, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x3e970) returned 1 [0245.989] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0245.989] WriteFile (in: hFile=0x3e8, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3e970, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7b320*=0x3e970, lpOverlapped=0x0) returned 1 [0245.990] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0245.990] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0245.990] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0245.990] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0245.990] CloseHandle (hObject=0x3e8) returned 1 [0246.005] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0246.011] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0246.011] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0246.011] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0246.011] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0246.012] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostTitle.XSL", dwFileAttributes=0x80) returned 1 [0246.012] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostTitle.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\gosttitle.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0246.013] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=251449) returned 1 [0246.013] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=251449) returned 1 [0246.013] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x3d517, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0246.013] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0246.014] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0246.014] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665aae70e0) returned 1 [0246.014] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0246.015] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0246.015] ReadFile (in: hFile=0x3e8, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3d639, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7b320*=0x3d639, lpOverlapped=0x0) returned 1 [0246.018] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0246.018] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x3d639, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x3d640) returned 1 [0246.019] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0246.019] WriteFile (in: hFile=0x3e8, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3d640, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7b320*=0x3d640, lpOverlapped=0x0) returned 1 [0246.019] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0246.019] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0246.020] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0246.020] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0246.020] CloseHandle (hObject=0x3e8) returned 1 [0246.034] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0246.040] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0246.040] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0246.040] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0246.040] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0246.040] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl", dwFileAttributes=0x80) returned 1 [0246.041] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\harvardanglia2008officeonline.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0246.042] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=284802) returned 1 [0246.042] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=284802) returned 1 [0246.042] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x45760, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0246.042] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0246.057] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0246.057] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665aae70e0) returned 1 [0246.057] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0246.058] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0246.058] ReadFile (in: hFile=0x3e8, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x45882, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7b320*=0x45882, lpOverlapped=0x0) returned 1 [0246.075] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0246.075] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x45882, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x45890) returned 1 [0246.075] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0246.075] WriteFile (in: hFile=0x3e8, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x45890, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7b320*=0x45890, lpOverlapped=0x0) returned 1 [0246.076] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0246.076] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0246.076] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0246.076] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0246.076] CloseHandle (hObject=0x3e8) returned 1 [0246.090] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0246.095] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0246.095] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0246.095] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0246.095] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0246.096] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl", dwFileAttributes=0x80) returned 1 [0246.096] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\ieee2006officeonline.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0246.097] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=294525) returned 1 [0246.097] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=294525) returned 1 [0246.097] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x47d5b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0246.097] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0246.129] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0246.129] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665aae6cf0) returned 1 [0246.129] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0246.129] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0246.130] ReadFile (in: hFile=0x3e8, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x47e7d, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7b320*=0x47e7d, lpOverlapped=0x0) returned 1 [0246.147] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0246.148] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x47e7d, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x47e80) returned 1 [0246.148] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0246.148] WriteFile (in: hFile=0x3e8, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x47e80, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7b320*=0x47e80, lpOverlapped=0x0) returned 1 [0246.149] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0246.149] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0246.149] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0246.150] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0246.150] CloseHandle (hObject=0x3e8) returned 1 [0246.163] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0246.168] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0246.168] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0246.169] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0246.169] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0246.169] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690.XSL", dwFileAttributes=0x80) returned 1 [0246.170] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\iso690.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0246.170] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=270642) returned 1 [0246.170] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=270642) returned 1 [0246.170] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x42010, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0246.170] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0246.188] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0246.188] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665aae6cf0) returned 1 [0246.188] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0246.188] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0246.188] ReadFile (in: hFile=0x3e8, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x42132, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7b320*=0x42132, lpOverlapped=0x0) returned 1 [0246.216] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0246.216] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x42132, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x42140) returned 1 [0246.217] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0246.217] WriteFile (in: hFile=0x3e8, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x42140, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7b320*=0x42140, lpOverlapped=0x0) returned 1 [0246.217] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0246.218] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0246.218] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0246.218] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0246.218] CloseHandle (hObject=0x3e8) returned 1 [0246.232] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0246.237] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0246.237] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0246.237] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0246.237] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0246.238] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690Nmerical.XSL", dwFileAttributes=0x80) returned 1 [0246.238] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690Nmerical.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\iso690nmerical.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0246.239] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=217578) returned 1 [0246.239] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=217578) returned 1 [0246.239] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x350c8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0246.239] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0246.248] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0246.248] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665aae6510) returned 1 [0246.248] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0246.249] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0246.249] ReadFile (in: hFile=0x3e8, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x351ea, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7b320*=0x351ea, lpOverlapped=0x0) returned 1 [0246.265] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0246.265] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x351ea, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x351f0) returned 1 [0246.266] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0246.266] WriteFile (in: hFile=0x3e8, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x351f0, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7b320*=0x351f0, lpOverlapped=0x0) returned 1 [0246.266] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0246.266] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0246.267] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0246.267] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0246.267] CloseHandle (hObject=0x3e8) returned 1 [0246.343] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0246.348] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0246.348] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0246.348] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0246.348] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0246.349] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl", dwFileAttributes=0x80) returned 1 [0246.354] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\mlaseventheditionofficeonline.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0246.355] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=255219) returned 1 [0246.355] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=255219) returned 1 [0246.355] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x3e3d1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0246.355] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0246.389] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0246.389] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665aae6f20) returned 1 [0246.390] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0246.390] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0246.390] ReadFile (in: hFile=0x3e8, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3e4f3, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7b320*=0x3e4f3, lpOverlapped=0x0) returned 1 [0246.441] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0246.441] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x3e4f3, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x3e500) returned 1 [0246.441] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0246.441] WriteFile (in: hFile=0x3e8, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3e500, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7b320*=0x3e500, lpOverlapped=0x0) returned 1 [0246.442] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0246.442] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0246.442] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0246.442] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0246.442] CloseHandle (hObject=0x3e8) returned 1 [0246.457] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0246.463] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0246.463] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0246.463] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0246.463] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0246.463] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\SIST02.XSL", dwFileAttributes=0x80) returned 1 [0246.464] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\SIST02.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\sist02.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0246.465] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=251336) returned 1 [0246.465] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=251336) returned 1 [0246.465] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x3d4a6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0246.465] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0246.518] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0246.518] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665aae6820) returned 1 [0246.518] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0246.518] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0246.518] ReadFile (in: hFile=0x3e8, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3d5c8, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7b320*=0x3d5c8, lpOverlapped=0x0) returned 1 [0246.536] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0246.536] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x3d5c8, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x3d5d0) returned 1 [0246.536] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0246.536] WriteFile (in: hFile=0x3e8, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3d5d0, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7b320*=0x3d5d0, lpOverlapped=0x0) returned 1 [0246.599] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0246.599] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0246.599] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0246.599] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0246.599] CloseHandle (hObject=0x3e8) returned 1 [0246.759] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0246.763] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0246.763] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0246.763] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0246.763] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0246.763] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\TURABIAN.XSL", dwFileAttributes=0x80) returned 1 [0246.764] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\TURABIAN.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\turabian.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0246.764] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=344662) returned 1 [0246.764] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=344662) returned 1 [0246.764] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x54134, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0246.764] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0246.887] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0246.887] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665aae70e0) returned 1 [0246.887] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0246.887] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0246.887] ReadFile (in: hFile=0x3e8, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x54256, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7b320*=0x54256, lpOverlapped=0x0) returned 1 [0246.974] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0246.974] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x54256, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x54260) returned 1 [0246.975] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0246.975] WriteFile (in: hFile=0x3e8, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x54260, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7b320*=0x54260, lpOverlapped=0x0) returned 1 [0246.976] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0246.976] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0246.976] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0246.976] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0246.976] CloseHandle (hObject=0x3e8) returned 1 [0246.985] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0246.989] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0246.989] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0246.989] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0246.989] FindClose (in: hFindFile=0x665d90ce60 | out: hFindFile=0x665d90ce60) returned 1 [0246.989] SetLastError (dwErrCode=0x0) [0246.989] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0246.997] GetLastError () returned 0x0 [0246.997] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0246.997] CloseHandle (hObject=0x620) returned 1 [0246.998] FindNextFileW (in: hFindFile=0x665d90c2c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0246.998] FindClose (in: hFindFile=0x665d90c2c0 | out: hFindFile=0x665d90c2c0) returned 1 [0246.998] SetLastError (dwErrCode=0x0) [0246.998] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0246.998] GetLastError () returned 0xb7 [0246.998] CloseHandle (hObject=0x60c) returned 1 [0246.998] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0246.998] SetLastError (dwErrCode=0x0) [0246.998] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0246.998] GetLastError () returned 0xb7 [0246.998] CloseHandle (hObject=0x60c) returned 1 [0246.998] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Credentials\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90cfe0 [0246.999] FindNextFileW (in: hFindFile=0x665d90cfe0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0246.999] FindNextFileW (in: hFindFile=0x665d90cfe0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0246.999] FindClose (in: hFindFile=0x665d90cfe0 | out: hFindFile=0x665d90cfe0) returned 1 [0246.999] SetLastError (dwErrCode=0x0) [0246.999] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Credentials\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\credentials\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0246.999] GetLastError () returned 0x0 [0246.999] WriteFile (in: hFile=0x60c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7c490*=0x324, lpOverlapped=0x0) returned 1 [0247.000] CloseHandle (hObject=0x60c) returned 1 [0247.000] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0247.000] SetLastError (dwErrCode=0x0) [0247.000] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0247.000] GetLastError () returned 0xb7 [0247.000] CloseHandle (hObject=0x60c) returned 1 [0247.000] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90cf20 [0247.001] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0247.001] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0247.001] SetLastError (dwErrCode=0x0) [0247.001] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\crypto\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0247.001] GetLastError () returned 0x0 [0247.001] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0247.002] CloseHandle (hObject=0x620) returned 1 [0247.002] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bcc0 [0247.002] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0247.002] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0247.002] SetLastError (dwErrCode=0x0) [0247.002] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\crypto\\rsa\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0247.002] GetLastError () returned 0x0 [0247.002] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0247.003] CloseHandle (hObject=0x3e8) returned 1 [0247.003] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90d340 [0247.003] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0247.003] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0247.003] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0247.004] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\08e575673cce10c72090304839888e02_427a1946-e0ff-4097-8c9e-ca2c1e22780b", dwFileAttributes=0x80) returned 1 [0247.004] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\08e575673cce10c72090304839888e02_427a1946-e0ff-4097-8c9e-ca2c1e22780b" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-1462094071-1423818996-289466292-1000\\08e575673cce10c72090304839888e02_427a1946-e0ff-4097-8c9e-ca2c1e22780b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0247.004] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=52) returned 1 [0247.004] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=52) returned 1 [0247.004] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665aae6f20) returned 1 [0247.004] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0247.005] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0247.005] ReadFile (in: hFile=0x654, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x34, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ab70*=0x34, lpOverlapped=0x0) returned 1 [0247.005] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0247.005] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ab68*=0x34, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ab68*=0x40) returned 1 [0247.005] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0247.005] WriteFile (in: hFile=0x654, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x40, lpOverlapped=0x0) returned 1 [0247.006] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0247.006] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0247.006] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0247.006] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0247.006] CloseHandle (hObject=0x654) returned 1 [0247.023] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0247.028] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0247.028] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0247.028] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0247.028] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0247.029] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b", dwFileAttributes=0x80) returned 1 [0247.029] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-1462094071-1423818996-289466292-1000\\46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0247.030] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=53) returned 1 [0247.030] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=53) returned 1 [0247.030] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665aae65f0) returned 1 [0247.030] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0247.030] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0247.030] ReadFile (in: hFile=0x654, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x35, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ab70*=0x35, lpOverlapped=0x0) returned 1 [0247.031] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0247.031] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ab68*=0x35, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ab68*=0x40) returned 1 [0247.031] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0247.031] WriteFile (in: hFile=0x654, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x40, lpOverlapped=0x0) returned 1 [0247.033] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0247.033] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0247.033] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0247.033] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0247.034] CloseHandle (hObject=0x654) returned 1 [0247.051] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0247.058] CryptDestroyKey (hKey=0x665aae65f0) returned 1 [0247.058] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0247.058] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0247.058] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0247.058] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b", dwFileAttributes=0x80) returned 1 [0247.059] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-1462094071-1423818996-289466292-1000\\83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0247.060] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=45) returned 1 [0247.060] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=45) returned 1 [0247.060] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665aae6f20) returned 1 [0247.060] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0247.060] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0247.060] ReadFile (in: hFile=0x654, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x2d, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ab70*=0x2d, lpOverlapped=0x0) returned 1 [0247.061] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0247.061] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ab68*=0x2d, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ab68*=0x30) returned 1 [0247.061] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0247.061] WriteFile (in: hFile=0x654, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x30, lpOverlapped=0x0) returned 1 [0247.061] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0247.061] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0247.061] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0247.061] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0247.062] CloseHandle (hObject=0x654) returned 1 [0247.101] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0247.105] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0247.105] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0247.105] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0247.105] FindClose (in: hFindFile=0x665d90d340 | out: hFindFile=0x665d90d340) returned 1 [0247.106] SetLastError (dwErrCode=0x0) [0247.106] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-1462094071-1423818996-289466292-1000\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0247.106] GetLastError () returned 0x0 [0247.106] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0247.107] CloseHandle (hObject=0x3e8) returned 1 [0247.107] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0247.107] FindClose (in: hFindFile=0x665d90bcc0 | out: hFindFile=0x665d90bcc0) returned 1 [0247.107] SetLastError (dwErrCode=0x0) [0247.107] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\crypto\\rsa\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0247.108] GetLastError () returned 0xb7 [0247.108] CloseHandle (hObject=0x620) returned 1 [0247.108] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0247.108] FindClose (in: hFindFile=0x665d90cf20 | out: hFindFile=0x665d90cf20) returned 1 [0247.108] SetLastError (dwErrCode=0x0) [0247.108] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\crypto\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0247.108] GetLastError () returned 0xb7 [0247.108] CloseHandle (hObject=0x60c) returned 1 [0247.108] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0247.108] SetLastError (dwErrCode=0x0) [0247.108] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0247.108] GetLastError () returned 0xb7 [0247.108] CloseHandle (hObject=0x60c) returned 1 [0247.108] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90bde0 [0247.108] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0247.109] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0247.109] SetLastError (dwErrCode=0x0) [0247.109] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\document building blocks\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0247.109] GetLastError () returned 0x0 [0247.109] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0247.110] CloseHandle (hObject=0x620) returned 1 [0247.110] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90ca40 [0247.110] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0247.110] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0247.110] SetLastError (dwErrCode=0x0) [0247.110] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\document building blocks\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0247.112] GetLastError () returned 0x0 [0247.112] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0247.113] CloseHandle (hObject=0x3e8) returned 1 [0247.113] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c260 [0247.113] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0247.113] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0247.113] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0247.113] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\Built-In Building Blocks.dotx", dwFileAttributes=0x80) returned 1 [0247.113] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\Built-In Building Blocks.dotx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\document building blocks\\1033\\16\\built-in building blocks.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0247.114] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=3706055) returned 1 [0247.114] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=3706055) returned 1 [0247.114] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x388ba5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0247.114] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0247.117] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0247.117] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665aae70e0) returned 1 [0247.117] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0247.117] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0247.117] ReadFile (in: hFile=0x654, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ab70*=0xf4240, lpOverlapped=0x0) returned 1 [0247.219] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240) returned 1 [0247.219] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ab68*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ab68*=0xf4240) returned 1 [0247.221] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0247.221] WriteFile (in: hFile=0x654, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ab70*=0xf4240, lpOverlapped=0x0) returned 1 [0247.223] SetFilePointer (in: hFile=0x654, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0247.223] ReadFile (in: hFile=0x654, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ab70*=0xf4240, lpOverlapped=0x0) returned 1 [0247.611] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240) returned 1 [0247.611] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ab68*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ab68*=0xf4240) returned 1 [0247.612] SetFilePointer (in: hFile=0x654, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0247.612] WriteFile (in: hFile=0x654, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ab70*=0xf4240, lpOverlapped=0x0) returned 1 [0247.616] SetFilePointer (in: hFile=0x654, lDistanceToMove=2000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1e8480 [0247.616] ReadFile (in: hFile=0x654, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ab70*=0xf4240, lpOverlapped=0x0) returned 1 [0247.642] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240) returned 1 [0247.642] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ab68*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ab68*=0xf4240) returned 1 [0247.644] SetFilePointer (in: hFile=0x654, lDistanceToMove=2000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1e8480 [0247.644] WriteFile (in: hFile=0x654, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ab70*=0xf4240, lpOverlapped=0x0) returned 1 [0247.647] SetFilePointer (in: hFile=0x654, lDistanceToMove=3000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x2dc6c0 [0247.647] ReadFile (in: hFile=0x654, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xac607, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ab70*=0xac607, lpOverlapped=0x0) returned 1 [0247.659] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0247.659] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ab68*=0xac607, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ab68*=0xac610) returned 1 [0247.660] SetFilePointer (in: hFile=0x654, lDistanceToMove=3000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x2dc6c0 [0247.660] WriteFile (in: hFile=0x654, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xac610, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ab70*=0xac610, lpOverlapped=0x0) returned 1 [0247.666] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0247.666] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0247.666] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0247.666] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0247.666] CloseHandle (hObject=0x654) returned 1 [0247.666] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0247.671] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0247.671] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0247.672] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0247.672] FindClose (in: hFindFile=0x665d90c260 | out: hFindFile=0x665d90c260) returned 1 [0247.672] SetLastError (dwErrCode=0x0) [0247.672] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\document building blocks\\1033\\16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0247.673] GetLastError () returned 0x0 [0247.673] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0247.674] CloseHandle (hObject=0x3e8) returned 1 [0247.674] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0247.674] FindClose (in: hFindFile=0x665d90ca40 | out: hFindFile=0x665d90ca40) returned 1 [0247.674] SetLastError (dwErrCode=0x0) [0247.674] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\document building blocks\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0247.674] GetLastError () returned 0xb7 [0247.674] CloseHandle (hObject=0x620) returned 1 [0247.675] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0247.675] FindClose (in: hFindFile=0x665d90bde0 | out: hFindFile=0x665d90bde0) returned 1 [0247.675] SetLastError (dwErrCode=0x0) [0247.675] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\document building blocks\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0247.675] GetLastError () returned 0xb7 [0247.675] CloseHandle (hObject=0x60c) returned 1 [0247.675] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0247.675] SetLastError (dwErrCode=0x0) [0247.675] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0247.675] GetLastError () returned 0xb7 [0247.675] CloseHandle (hObject=0x60c) returned 1 [0247.675] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Excel\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90bd20 [0247.676] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0247.676] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0247.676] SetLastError (dwErrCode=0x0) [0247.676] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Excel\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\excel\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0247.677] GetLastError () returned 0x0 [0247.677] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0247.678] CloseHandle (hObject=0x620) returned 1 [0247.678] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d340 [0247.678] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0247.678] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0247.678] FindClose (in: hFindFile=0x665d90d340 | out: hFindFile=0x665d90d340) returned 1 [0247.678] SetLastError (dwErrCode=0x0) [0247.678] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\excel\\xlstart\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0247.679] GetLastError () returned 0x0 [0247.679] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0247.680] CloseHandle (hObject=0x620) returned 1 [0247.684] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0247.684] FindClose (in: hFindFile=0x665d90bd20 | out: hFindFile=0x665d90bd20) returned 1 [0247.684] SetLastError (dwErrCode=0x0) [0247.684] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Excel\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\excel\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0247.684] GetLastError () returned 0xb7 [0247.684] CloseHandle (hObject=0x60c) returned 1 [0247.684] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0247.684] SetLastError (dwErrCode=0x0) [0247.684] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0247.685] GetLastError () returned 0xb7 [0247.685] CloseHandle (hObject=0x60c) returned 1 [0247.685] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c860 [0247.685] FindNextFileW (in: hFindFile=0x665d90c860, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0247.685] FindNextFileW (in: hFindFile=0x665d90c860, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0247.685] SetLastError (dwErrCode=0x0) [0247.685] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0247.686] GetLastError () returned 0x0 [0247.686] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0247.687] CloseHandle (hObject=0x620) returned 1 [0247.687] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c2c0 [0247.687] FindNextFileW (in: hFindFile=0x665d90c2c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0247.687] FindNextFileW (in: hFindFile=0x665d90c2c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0247.687] FindNextFileW (in: hFindFile=0x665d90c2c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0247.687] FindNextFileW (in: hFindFile=0x665d90c2c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0247.687] FindNextFileW (in: hFindFile=0x665d90c2c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0247.687] FindNextFileW (in: hFindFile=0x665d90c2c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0247.687] SetLastError (dwErrCode=0x0) [0247.687] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0247.688] GetLastError () returned 0x0 [0247.688] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0247.689] CloseHandle (hObject=0x3e8) returned 1 [0247.689] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c260 [0247.689] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0247.689] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0247.689] SetLastError (dwErrCode=0x0) [0247.689] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0247.691] GetLastError () returned 0x0 [0247.691] WriteFile (in: hFile=0x654, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7ad80*=0x324, lpOverlapped=0x0) returned 1 [0247.692] CloseHandle (hObject=0x654) returned 1 [0247.693] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665d90d340 [0247.693] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0247.694] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0247.694] FindClose (in: hFindFile=0x665d90d340 | out: hFindFile=0x665d90d340) returned 1 [0247.694] SetLastError (dwErrCode=0x0) [0247.694] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\implicitappshortcuts\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0247.700] GetLastError () returned 0x0 [0247.700] WriteFile (in: hFile=0x654, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7ad80*=0x324, lpOverlapped=0x0) returned 1 [0247.701] CloseHandle (hObject=0x654) returned 1 [0247.702] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0247.702] SetLastError (dwErrCode=0x0) [0247.702] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0247.703] GetLastError () returned 0xb7 [0247.703] CloseHandle (hObject=0x654) returned 1 [0247.703] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665d90cec0 [0247.703] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0247.703] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0247.703] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0247.703] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0247.703] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0247.703] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0247.703] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0247.703] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0247.703] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0247.703] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0247.703] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0247.703] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0247.703] FindClose (in: hFindFile=0x665d90cec0 | out: hFindFile=0x665d90cec0) returned 1 [0247.704] SetLastError (dwErrCode=0x0) [0247.704] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0247.708] GetLastError () returned 0x0 [0247.708] WriteFile (in: hFile=0x654, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7ad80*=0x324, lpOverlapped=0x0) returned 1 [0247.709] CloseHandle (hObject=0x654) returned 1 [0247.711] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0247.711] FindClose (in: hFindFile=0x665d90c260 | out: hFindFile=0x665d90c260) returned 1 [0247.711] SetLastError (dwErrCode=0x0) [0247.711] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0247.711] GetLastError () returned 0xb7 [0247.712] CloseHandle (hObject=0x3e8) returned 1 [0247.712] FindNextFileW (in: hFindFile=0x665d90c2c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0247.712] FindNextFileW (in: hFindFile=0x665d90c2c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0247.712] FindClose (in: hFindFile=0x665d90c2c0 | out: hFindFile=0x665d90c2c0) returned 1 [0247.712] SetLastError (dwErrCode=0x0) [0247.712] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0247.712] GetLastError () returned 0xb7 [0247.712] CloseHandle (hObject=0x620) returned 1 [0247.712] FindNextFileW (in: hFindFile=0x665d90c860, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0247.712] SetLastError (dwErrCode=0x0) [0247.712] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0247.713] GetLastError () returned 0xb7 [0247.713] CloseHandle (hObject=0x620) returned 1 [0247.713] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c980 [0247.713] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0247.713] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0247.713] SetLastError (dwErrCode=0x0) [0247.713] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0247.714] GetLastError () returned 0x0 [0247.714] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0247.715] CloseHandle (hObject=0x3e8) returned 1 [0247.715] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bcc0 [0247.715] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0247.715] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0247.715] FindClose (in: hFindFile=0x665d90bcc0 | out: hFindFile=0x665d90bcc0) returned 1 [0247.715] SetLastError (dwErrCode=0x0) [0247.715] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0247.716] GetLastError () returned 0x0 [0247.716] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0247.717] CloseHandle (hObject=0x3e8) returned 1 [0247.717] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0247.717] FindClose (in: hFindFile=0x665d90c980 | out: hFindFile=0x665d90c980) returned 1 [0247.717] SetLastError (dwErrCode=0x0) [0247.717] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0247.717] GetLastError () returned 0xb7 [0247.717] CloseHandle (hObject=0x620) returned 1 [0247.717] FindNextFileW (in: hFindFile=0x665d90c860, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0247.717] FindClose (in: hFindFile=0x665d90c860 | out: hFindFile=0x665d90c860) returned 1 [0247.717] SetLastError (dwErrCode=0x0) [0247.718] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0247.718] GetLastError () returned 0xb7 [0247.718] CloseHandle (hObject=0x60c) returned 1 [0247.718] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0247.718] SetLastError (dwErrCode=0x0) [0247.718] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0247.718] GetLastError () returned 0xb7 [0247.718] CloseHandle (hObject=0x60c) returned 1 [0247.718] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MMC\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c1a0 [0247.718] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0247.719] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0247.719] FindClose (in: hFindFile=0x665d90c1a0 | out: hFindFile=0x665d90c1a0) returned 1 [0247.719] SetLastError (dwErrCode=0x0) [0247.719] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MMC\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\mmc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0247.719] GetLastError () returned 0x0 [0247.719] WriteFile (in: hFile=0x60c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7c490*=0x324, lpOverlapped=0x0) returned 1 [0247.720] CloseHandle (hObject=0x60c) returned 1 [0247.720] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0247.720] SetLastError (dwErrCode=0x0) [0247.720] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0247.721] GetLastError () returned 0xb7 [0247.721] CloseHandle (hObject=0x60c) returned 1 [0247.721] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c860 [0247.721] FindNextFileW (in: hFindFile=0x665d90c860, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0247.721] FindNextFileW (in: hFindFile=0x665d90c860, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0247.721] SetLastError (dwErrCode=0x0) [0247.721] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\ms project\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0247.722] GetLastError () returned 0x0 [0247.722] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0247.723] CloseHandle (hObject=0x620) returned 1 [0247.723] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c380 [0247.723] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0247.723] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0247.723] SetLastError (dwErrCode=0x0) [0247.723] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\ms project\\16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0247.731] GetLastError () returned 0x0 [0247.731] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0247.732] CloseHandle (hObject=0x3e8) returned 1 [0247.732] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c4a0 [0247.732] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0247.732] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0247.732] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0247.733] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\Global.MPT", dwFileAttributes=0x80) returned 1 [0247.733] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\Global.MPT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\ms project\\16\\en-us\\global.mpt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0247.734] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=1273344) returned 1 [0247.734] GetFileSizeEx (in: hFile=0x654, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=1273344) returned 1 [0247.734] SetFilePointerEx (in: hFile=0x654, liDistanceToMove=0x136cde, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0247.734] ReadFile (in: hFile=0x654, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0247.756] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0247.756] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665aae6cf0) returned 1 [0247.756] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0247.757] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0247.757] ReadFile (in: hFile=0x654, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ab70*=0xf4240, lpOverlapped=0x0) returned 1 [0247.854] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240) returned 1 [0247.854] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ab68*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ab68*=0xf4240) returned 1 [0247.856] SetFilePointer (in: hFile=0x654, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0247.856] WriteFile (in: hFile=0x654, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ab70*=0xf4240, lpOverlapped=0x0) returned 1 [0247.859] SetFilePointer (in: hFile=0x654, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0247.859] ReadFile (in: hFile=0x654, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x42bc0, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ab70*=0x42bc0, lpOverlapped=0x0) returned 1 [0247.863] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0247.863] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ab68*=0x42bc0, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ab68*=0x42bd0) returned 1 [0247.864] SetFilePointer (in: hFile=0x654, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0247.864] WriteFile (in: hFile=0x654, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x42bd0, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x42bd0, lpOverlapped=0x0) returned 1 [0247.865] WriteFile (in: hFile=0x654, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0247.865] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0247.865] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0247.865] WriteFile (in: hFile=0x654, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0247.865] CloseHandle (hObject=0x654) returned 1 [0247.865] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0247.916] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0247.916] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0247.916] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0247.916] FindClose (in: hFindFile=0x665d90c4a0 | out: hFindFile=0x665d90c4a0) returned 1 [0247.916] SetLastError (dwErrCode=0x0) [0247.916] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\ms project\\16\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0247.917] GetLastError () returned 0x0 [0247.917] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0247.918] CloseHandle (hObject=0x3e8) returned 1 [0247.918] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0247.918] FindClose (in: hFindFile=0x665d90c380 | out: hFindFile=0x665d90c380) returned 1 [0247.919] SetLastError (dwErrCode=0x0) [0247.919] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\ms project\\16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0247.919] GetLastError () returned 0xb7 [0247.919] CloseHandle (hObject=0x620) returned 1 [0247.919] FindNextFileW (in: hFindFile=0x665d90c860, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0247.919] FindClose (in: hFindFile=0x665d90c860 | out: hFindFile=0x665d90c860) returned 1 [0247.919] SetLastError (dwErrCode=0x0) [0247.919] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\ms project\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0247.919] GetLastError () returned 0xb7 [0247.919] CloseHandle (hObject=0x60c) returned 1 [0247.920] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0247.920] SetLastError (dwErrCode=0x0) [0247.920] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0247.920] GetLastError () returned 0xb7 [0247.920] CloseHandle (hObject=0x60c) returned 1 [0247.920] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90cf20 [0247.921] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0247.921] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0247.921] SetLastError (dwErrCode=0x0) [0247.921] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\network\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0247.922] GetLastError () returned 0x0 [0247.922] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0247.923] CloseHandle (hObject=0x620) returned 1 [0247.923] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bde0 [0247.925] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0247.925] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0247.925] SetLastError (dwErrCode=0x0) [0247.925] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\network\\connections\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0247.927] GetLastError () returned 0x0 [0247.927] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0247.928] CloseHandle (hObject=0x3e8) returned 1 [0247.928] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90ca40 [0247.928] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0247.928] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0247.928] SetLastError (dwErrCode=0x0) [0247.928] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0247.929] GetLastError () returned 0x0 [0247.929] WriteFile (in: hFile=0x654, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7ad80*=0x324, lpOverlapped=0x0) returned 1 [0247.951] CloseHandle (hObject=0x654) returned 1 [0247.951] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665d90d340 [0247.951] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0247.951] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0247.951] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0247.952] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\rasphone.pbk", dwFileAttributes=0x80) returned 1 [0247.965] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\rasphone.pbk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\_hiddenpbk\\rasphone.pbk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0247.966] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x665da7a3c8 | out: lpFileSize=0x665da7a3c8*=0) returned 1 [0247.966] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x665da7a3d8 | out: lpFileSize=0x665da7a3d8*=0) returned 1 [0247.966] CloseHandle (hObject=0x440) returned 1 [0247.966] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0247.966] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0247.966] FindClose (in: hFindFile=0x665d90d340 | out: hFindFile=0x665d90d340) returned 1 [0247.967] SetLastError (dwErrCode=0x0) [0247.967] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\_hiddenpbk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0247.968] GetLastError () returned 0x0 [0247.968] WriteFile (in: hFile=0x654, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7ad80*=0x324, lpOverlapped=0x0) returned 1 [0247.969] CloseHandle (hObject=0x654) returned 1 [0247.969] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0247.969] FindClose (in: hFindFile=0x665d90ca40 | out: hFindFile=0x665d90ca40) returned 1 [0247.969] SetLastError (dwErrCode=0x0) [0247.969] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0247.969] GetLastError () returned 0xb7 [0247.970] CloseHandle (hObject=0x3e8) returned 1 [0247.970] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0247.970] FindClose (in: hFindFile=0x665d90bde0 | out: hFindFile=0x665d90bde0) returned 1 [0247.970] SetLastError (dwErrCode=0x0) [0247.970] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\network\\connections\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0247.970] GetLastError () returned 0xb7 [0247.970] CloseHandle (hObject=0x620) returned 1 [0247.970] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0247.970] FindClose (in: hFindFile=0x665d90cf20 | out: hFindFile=0x665d90cf20) returned 1 [0247.970] SetLastError (dwErrCode=0x0) [0247.971] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\network\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0247.971] GetLastError () returned 0xb7 [0247.971] CloseHandle (hObject=0x60c) returned 1 [0247.971] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0247.971] SetLastError (dwErrCode=0x0) [0247.971] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0247.971] GetLastError () returned 0xb7 [0247.971] CloseHandle (hObject=0x60c) returned 1 [0247.972] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90d340 [0247.972] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0247.972] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0247.972] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0247.972] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\MSO1033.acl", dwFileAttributes=0x80) returned 1 [0247.973] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\MSO1033.acl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\mso1033.acl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0247.973] GetFileSizeEx (in: hFile=0x620, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=37730) returned 1 [0247.973] GetFileSizeEx (in: hFile=0x620, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=37730) returned 1 [0247.973] SetFilePointerEx (in: hFile=0x620, liDistanceToMove=0x9240, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0247.974] ReadFile (in: hFile=0x620, lpBuffer=0x665da7bb38, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7baf8, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb38*, lpNumberOfBytesRead=0x665da7baf8*=0x19, lpOverlapped=0x0) returned 1 [0248.032] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0248.032] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7bac0 | out: phKey=0x665da7bac0*=0x665aae6f20) returned 1 [0248.032] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0248.032] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0248.032] ReadFile (in: hFile=0x620, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x9362, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7bad0*=0x9362, lpOverlapped=0x0) returned 1 [0248.036] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4250) returned 1 [0248.036] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0x9362, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0x9370) returned 1 [0248.036] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0248.036] WriteFile (in: hFile=0x620, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x9370, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7bad0*=0x9370, lpOverlapped=0x0) returned 1 [0248.037] WriteFile (in: hFile=0x620, lpBuffer=0x665da7bb10*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb10*, lpNumberOfBytesWritten=0x665da7bad4*=0x6, lpOverlapped=0x0) returned 1 [0248.037] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7bae0 | out: pbData=0x0*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0248.037] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7bb60, pdwDataLen=0x665da7bae0 | out: pbData=0x665da7bb60*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0248.037] WriteFile (in: hFile=0x620, lpBuffer=0x665da7bb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb60*, lpNumberOfBytesWritten=0x665da7bad4*=0x10c, lpOverlapped=0x0) returned 1 [0248.037] CloseHandle (hObject=0x620) returned 1 [0248.055] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0248.070] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0248.070] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0248.071] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0248.071] SetLastError (dwErrCode=0x0) [0248.071] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0248.089] GetLastError () returned 0x0 [0248.089] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0248.090] CloseHandle (hObject=0x620) returned 1 [0248.090] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c980 [0248.094] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0248.094] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0248.094] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0248.094] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0248.094] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0248.094] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0248.095] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat", dwFileAttributes=0x80) returned 1 [0248.095] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\index.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0248.096] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=95) returned 1 [0248.096] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=95) returned 1 [0248.096] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665aae70e0) returned 1 [0248.096] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0248.097] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0248.097] ReadFile (in: hFile=0x3e8, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x5f, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7b320*=0x5f, lpOverlapped=0x0) returned 1 [0248.098] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0248.098] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x5f, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x60) returned 1 [0248.098] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0248.098] WriteFile (in: hFile=0x3e8, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7b320*=0x60, lpOverlapped=0x0) returned 1 [0248.098] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0248.099] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0248.099] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0248.099] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0248.099] CloseHandle (hObject=0x3e8) returned 1 [0248.141] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0248.146] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0248.146] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0248.146] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0248.146] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0248.147] FindClose (in: hFindFile=0x665d90c980 | out: hFindFile=0x665d90c980) returned 1 [0248.147] SetLastError (dwErrCode=0x0) [0248.147] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0248.148] GetLastError () returned 0x0 [0248.148] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0248.149] CloseHandle (hObject=0x620) returned 1 [0248.158] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0248.158] FindClose (in: hFindFile=0x665d90d340 | out: hFindFile=0x665d90d340) returned 1 [0248.198] SetLastError (dwErrCode=0x0) [0248.198] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0248.199] GetLastError () returned 0xb7 [0248.199] CloseHandle (hObject=0x60c) returned 1 [0248.199] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0248.199] SetLastError (dwErrCode=0x0) [0248.199] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0248.199] GetLastError () returned 0xb7 [0248.199] CloseHandle (hObject=0x60c) returned 1 [0248.199] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90cfe0 [0248.200] FindNextFileW (in: hFindFile=0x665d90cfe0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0248.200] FindNextFileW (in: hFindFile=0x665d90cfe0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0248.200] SetLastError (dwErrCode=0x0) [0248.200] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\onenote\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0248.206] GetLastError () returned 0x0 [0248.206] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0248.207] CloseHandle (hObject=0x620) returned 1 [0248.207] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c1a0 [0248.208] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0248.208] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0248.208] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0248.208] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\Preferences.dat", dwFileAttributes=0x80) returned 1 [0248.215] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\Preferences.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\onenote\\16.0\\preferences.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0248.215] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=5184) returned 1 [0248.215] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=5184) returned 1 [0248.216] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x131e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0248.216] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0248.217] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0248.217] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665aae6cf0) returned 1 [0248.217] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0248.218] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0248.218] ReadFile (in: hFile=0x3e8, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x1440, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7b320*=0x1440, lpOverlapped=0x0) returned 1 [0248.218] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0248.218] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x1440, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x1450) returned 1 [0248.218] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0248.218] WriteFile (in: hFile=0x3e8, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x1450, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7b320*=0x1450, lpOverlapped=0x0) returned 1 [0248.219] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0248.219] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0248.219] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0248.219] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0248.219] CloseHandle (hObject=0x3e8) returned 1 [0248.279] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0248.285] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0248.285] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0248.285] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0248.285] FindClose (in: hFindFile=0x665d90c1a0 | out: hFindFile=0x665d90c1a0) returned 1 [0248.285] SetLastError (dwErrCode=0x0) [0248.285] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\onenote\\16.0\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0248.300] GetLastError () returned 0x0 [0248.300] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0248.301] CloseHandle (hObject=0x620) returned 1 [0248.301] FindNextFileW (in: hFindFile=0x665d90cfe0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0248.301] FindClose (in: hFindFile=0x665d90cfe0 | out: hFindFile=0x665d90cfe0) returned 1 [0248.301] SetLastError (dwErrCode=0x0) [0248.301] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\onenote\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0248.301] GetLastError () returned 0xb7 [0248.301] CloseHandle (hObject=0x60c) returned 1 [0248.301] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0248.301] SetLastError (dwErrCode=0x0) [0248.301] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0248.302] GetLastError () returned 0xb7 [0248.302] CloseHandle (hObject=0x60c) returned 1 [0248.302] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90bfc0 [0248.302] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0248.302] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0248.302] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0248.303] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.srs", dwFileAttributes=0x80) returned 1 [0248.303] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.srs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\outlook\\outlook.srs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0248.304] GetFileSizeEx (in: hFile=0x620, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=2560) returned 1 [0248.304] GetFileSizeEx (in: hFile=0x620, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=2560) returned 1 [0248.304] SetFilePointerEx (in: hFile=0x620, liDistanceToMove=0x8de, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0248.304] ReadFile (in: hFile=0x620, lpBuffer=0x665da7bb38, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7baf8, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb38*, lpNumberOfBytesRead=0x665da7baf8*=0x19, lpOverlapped=0x0) returned 1 [0248.337] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0248.337] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7bac0 | out: phKey=0x665da7bac0*=0x665aae65f0) returned 1 [0248.337] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0248.338] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0248.338] ReadFile (in: hFile=0x620, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xa00, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7bad0*=0xa00, lpOverlapped=0x0) returned 1 [0248.338] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4250) returned 1 [0248.338] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0xa00, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0xa10) returned 1 [0248.338] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0248.338] WriteFile (in: hFile=0x620, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xa10, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7bad0*=0xa10, lpOverlapped=0x0) returned 1 [0248.338] WriteFile (in: hFile=0x620, lpBuffer=0x665da7bb10*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb10*, lpNumberOfBytesWritten=0x665da7bad4*=0x6, lpOverlapped=0x0) returned 1 [0248.338] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7bae0 | out: pbData=0x0*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0248.338] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7bb60, pdwDataLen=0x665da7bae0 | out: pbData=0x665da7bb60*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0248.339] WriteFile (in: hFile=0x620, lpBuffer=0x665da7bb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb60*, lpNumberOfBytesWritten=0x665da7bad4*=0x10c, lpOverlapped=0x0) returned 1 [0248.339] CloseHandle (hObject=0x620) returned 1 [0248.381] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0248.386] CryptDestroyKey (hKey=0x665aae65f0) returned 1 [0248.386] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0248.387] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0248.387] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0248.387] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml", dwFileAttributes=0x80) returned 1 [0248.387] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\outlook\\outlook.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0248.388] GetFileSizeEx (in: hFile=0x620, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=2390) returned 1 [0248.388] GetFileSizeEx (in: hFile=0x620, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=2390) returned 1 [0248.388] SetFilePointerEx (in: hFile=0x620, liDistanceToMove=0x834, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0248.388] ReadFile (in: hFile=0x620, lpBuffer=0x665da7bb38, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7baf8, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb38*, lpNumberOfBytesRead=0x665da7baf8*=0x19, lpOverlapped=0x0) returned 1 [0248.390] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0248.390] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7bac0 | out: phKey=0x665da7bac0*=0x665aae6cf0) returned 1 [0248.390] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0248.390] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0248.390] ReadFile (in: hFile=0x620, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x956, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7bad0*=0x956, lpOverlapped=0x0) returned 1 [0248.391] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4250) returned 1 [0248.391] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0x956, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0x960) returned 1 [0248.391] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0248.391] WriteFile (in: hFile=0x620, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x960, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7bad0*=0x960, lpOverlapped=0x0) returned 1 [0248.391] WriteFile (in: hFile=0x620, lpBuffer=0x665da7bb10*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb10*, lpNumberOfBytesWritten=0x665da7bad4*=0x6, lpOverlapped=0x0) returned 1 [0248.397] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7bae0 | out: pbData=0x0*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0248.397] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7bb60, pdwDataLen=0x665da7bae0 | out: pbData=0x665da7bb60*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0248.397] WriteFile (in: hFile=0x620, lpBuffer=0x665da7bb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb60*, lpNumberOfBytesWritten=0x665da7bad4*=0x10c, lpOverlapped=0x0) returned 1 [0248.397] CloseHandle (hObject=0x620) returned 1 [0248.431] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0248.439] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0248.439] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0248.439] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0248.440] FindClose (in: hFindFile=0x665d90bfc0 | out: hFindFile=0x665d90bfc0) returned 1 [0248.440] SetLastError (dwErrCode=0x0) [0248.440] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\outlook\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0248.441] GetLastError () returned 0x0 [0248.441] WriteFile (in: hFile=0x60c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7c490*=0x324, lpOverlapped=0x0) returned 1 [0248.442] CloseHandle (hObject=0x60c) returned 1 [0248.442] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0248.442] SetLastError (dwErrCode=0x0) [0248.442] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0248.442] GetLastError () returned 0xb7 [0248.442] CloseHandle (hObject=0x60c) returned 1 [0248.442] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\PowerPoint\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90cfe0 [0248.442] FindNextFileW (in: hFindFile=0x665d90cfe0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0248.442] FindNextFileW (in: hFindFile=0x665d90cfe0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0248.442] FindClose (in: hFindFile=0x665d90cfe0 | out: hFindFile=0x665d90cfe0) returned 1 [0248.443] SetLastError (dwErrCode=0x0) [0248.443] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\PowerPoint\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\powerpoint\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0248.447] GetLastError () returned 0x0 [0248.447] WriteFile (in: hFile=0x60c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7c490*=0x324, lpOverlapped=0x0) returned 1 [0248.448] CloseHandle (hObject=0x60c) returned 1 [0248.448] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0248.448] SetLastError (dwErrCode=0x0) [0248.448] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0248.449] GetLastError () returned 0xb7 [0248.449] CloseHandle (hObject=0x60c) returned 1 [0248.449] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Proof\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90bfc0 [0248.450] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0248.450] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0248.450] FindClose (in: hFindFile=0x665d90bfc0 | out: hFindFile=0x665d90bfc0) returned 1 [0248.450] SetLastError (dwErrCode=0x0) [0248.450] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Proof\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\proof\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0248.451] GetLastError () returned 0x0 [0248.451] WriteFile (in: hFile=0x60c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7c490*=0x324, lpOverlapped=0x0) returned 1 [0248.452] CloseHandle (hObject=0x60c) returned 1 [0248.452] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0248.452] SetLastError (dwErrCode=0x0) [0248.452] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0248.452] GetLastError () returned 0xb7 [0248.452] CloseHandle (hObject=0x60c) returned 1 [0248.452] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90bcc0 [0248.452] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0248.453] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0248.453] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0248.453] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST", dwFileAttributes=0x80) returned 1 [0248.454] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\credhist"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0248.454] GetFileSizeEx (in: hFile=0x620, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=456) returned 1 [0248.454] GetFileSizeEx (in: hFile=0x620, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=456) returned 1 [0248.454] SetFilePointerEx (in: hFile=0x620, liDistanceToMove=0xa6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0248.454] ReadFile (in: hFile=0x620, lpBuffer=0x665da7bb38, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7baf8, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb38*, lpNumberOfBytesRead=0x665da7baf8*=0x19, lpOverlapped=0x0) returned 1 [0248.455] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0248.455] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7bac0 | out: phKey=0x665da7bac0*=0x665aae6820) returned 1 [0248.455] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0248.455] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0248.456] ReadFile (in: hFile=0x620, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x1c8, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7bad0*=0x1c8, lpOverlapped=0x0) returned 1 [0248.456] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4250) returned 1 [0248.456] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0x1c8, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0x1d0) returned 1 [0248.456] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0248.456] WriteFile (in: hFile=0x620, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7bad0*=0x1d0, lpOverlapped=0x0) returned 1 [0248.456] WriteFile (in: hFile=0x620, lpBuffer=0x665da7bb10*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb10*, lpNumberOfBytesWritten=0x665da7bad4*=0x6, lpOverlapped=0x0) returned 1 [0248.456] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7bae0 | out: pbData=0x0*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0248.456] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7bb60, pdwDataLen=0x665da7bae0 | out: pbData=0x665da7bb60*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0248.456] WriteFile (in: hFile=0x620, lpBuffer=0x665da7bb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb60*, lpNumberOfBytesWritten=0x665da7bad4*=0x10c, lpOverlapped=0x0) returned 1 [0248.620] CloseHandle (hObject=0x620) returned 1 [0248.641] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0248.646] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0248.646] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0248.646] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0248.646] SetLastError (dwErrCode=0x0) [0248.646] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0248.649] GetLastError () returned 0x0 [0248.649] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0248.650] CloseHandle (hObject=0x620) returned 1 [0248.650] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bd20 [0248.650] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0248.650] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0248.650] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0248.650] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\04cd465a-248d-4abd-853a-5cb67fe43510", dwFileAttributes=0x80) returned 1 [0248.651] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\04cd465a-248d-4abd-853a-5cb67fe43510" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\04cd465a-248d-4abd-853a-5cb67fe43510"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0248.651] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=468) returned 1 [0248.651] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=468) returned 1 [0248.651] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xb2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0248.651] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0248.652] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0248.652] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665aae6510) returned 1 [0248.652] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0248.652] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0248.652] ReadFile (in: hFile=0x3e8, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x1d4, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7b320*=0x1d4, lpOverlapped=0x0) returned 1 [0248.653] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0248.653] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x1d4, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x1e0) returned 1 [0248.653] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0248.653] WriteFile (in: hFile=0x3e8, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7b320*=0x1e0, lpOverlapped=0x0) returned 1 [0248.653] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0248.653] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0248.653] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0248.653] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0248.655] CloseHandle (hObject=0x3e8) returned 1 [0248.672] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0248.676] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0248.676] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0248.676] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0248.676] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0248.677] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\15d22704-736b-416f-a36b-857f2a5d2a7e", dwFileAttributes=0x80) returned 1 [0248.677] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\15d22704-736b-416f-a36b-857f2a5d2a7e" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\15d22704-736b-416f-a36b-857f2a5d2a7e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0248.678] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=468) returned 1 [0248.678] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=468) returned 1 [0248.678] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xb2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0248.678] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0248.678] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0248.678] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665aae65f0) returned 1 [0248.678] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0248.679] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0248.679] ReadFile (in: hFile=0x3e8, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x1d4, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7b320*=0x1d4, lpOverlapped=0x0) returned 1 [0248.679] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0248.679] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x1d4, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x1e0) returned 1 [0248.679] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0248.679] WriteFile (in: hFile=0x3e8, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7b320*=0x1e0, lpOverlapped=0x0) returned 1 [0248.679] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0248.679] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0248.679] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0248.679] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0248.680] CloseHandle (hObject=0x3e8) returned 1 [0248.697] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0248.701] CryptDestroyKey (hKey=0x665aae65f0) returned 1 [0248.701] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0248.701] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0248.701] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0248.701] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\496f2c5b-a90f-4380-b805-3bf6ac63451b", dwFileAttributes=0x80) returned 1 [0248.702] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\496f2c5b-a90f-4380-b805-3bf6ac63451b" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\496f2c5b-a90f-4380-b805-3bf6ac63451b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0248.705] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=468) returned 1 [0248.706] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=468) returned 1 [0248.706] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xb2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0248.706] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0248.706] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0248.706] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665aae6cf0) returned 1 [0248.706] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0248.707] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0248.707] ReadFile (in: hFile=0x3e8, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x1d4, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7b320*=0x1d4, lpOverlapped=0x0) returned 1 [0248.707] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0248.707] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x1d4, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x1e0) returned 1 [0248.707] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0248.707] WriteFile (in: hFile=0x3e8, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7b320*=0x1e0, lpOverlapped=0x0) returned 1 [0248.707] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0248.707] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0248.707] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0248.707] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0248.755] CloseHandle (hObject=0x3e8) returned 1 [0248.772] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0248.776] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0248.777] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0248.777] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0248.777] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0248.777] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\5b8a3202-35dc-4437-b5d7-374f5e872415", dwFileAttributes=0x80) returned 1 [0248.777] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\5b8a3202-35dc-4437-b5d7-374f5e872415" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\5b8a3202-35dc-4437-b5d7-374f5e872415"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0248.783] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=468) returned 1 [0248.783] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=468) returned 1 [0248.783] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xb2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0248.783] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0248.784] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0248.784] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665aae6cf0) returned 1 [0248.784] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0248.784] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0248.784] ReadFile (in: hFile=0x3e8, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x1d4, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7b320*=0x1d4, lpOverlapped=0x0) returned 1 [0248.784] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0248.784] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x1d4, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x1e0) returned 1 [0248.784] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0248.784] WriteFile (in: hFile=0x3e8, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7b320*=0x1e0, lpOverlapped=0x0) returned 1 [0248.784] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0248.784] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0248.784] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0248.784] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0248.785] CloseHandle (hObject=0x3e8) returned 1 [0249.302] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0249.308] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0249.308] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0249.308] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0249.308] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0249.308] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\d7746ecf-458e-4e71-8557-8ac80457022a", dwFileAttributes=0x80) returned 1 [0249.309] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\d7746ecf-458e-4e71-8557-8ac80457022a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\d7746ecf-458e-4e71-8557-8ac80457022a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0249.310] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=468) returned 1 [0249.310] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=468) returned 1 [0249.310] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xb2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0249.310] ReadFile (in: hFile=0x3e8, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0249.311] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0249.311] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665aae6f20) returned 1 [0249.311] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0249.311] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0249.311] ReadFile (in: hFile=0x3e8, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x1d4, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7b320*=0x1d4, lpOverlapped=0x0) returned 1 [0249.312] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0249.312] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x1d4, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x1e0) returned 1 [0249.312] SetFilePointer (in: hFile=0x3e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0249.312] WriteFile (in: hFile=0x3e8, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7b320*=0x1e0, lpOverlapped=0x0) returned 1 [0249.312] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0249.312] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0249.312] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0249.312] WriteFile (in: hFile=0x3e8, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0249.328] CloseHandle (hObject=0x3e8) returned 1 [0249.346] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0249.350] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0249.350] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0249.350] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0249.350] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0249.350] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\Preferred", dwFileAttributes=0x80) returned 1 [0249.351] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\Preferred" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\preferred"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0249.351] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=24) returned 1 [0249.352] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=24) returned 1 [0249.352] CloseHandle (hObject=0x3e8) returned 1 [0249.352] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0249.353] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0249.353] FindClose (in: hFindFile=0x665d90bd20 | out: hFindFile=0x665d90bd20) returned 1 [0249.353] SetLastError (dwErrCode=0x0) [0249.353] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0249.355] GetLastError () returned 0x0 [0249.355] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0249.356] CloseHandle (hObject=0x620) returned 1 [0249.356] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0249.356] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0249.357] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\SYNCHIST", dwFileAttributes=0x80) returned 1 [0249.357] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\SYNCHIST" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\synchist"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0249.357] GetFileSizeEx (in: hFile=0x620, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=76) returned 1 [0249.357] GetFileSizeEx (in: hFile=0x620, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=76) returned 1 [0249.357] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7bac0 | out: phKey=0x665da7bac0*=0x665aae6cf0) returned 1 [0249.357] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0249.358] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0249.358] ReadFile (in: hFile=0x620, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4c, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7bad0*=0x4c, lpOverlapped=0x0) returned 1 [0249.359] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4250) returned 1 [0249.359] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0x4c, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0x50) returned 1 [0249.359] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0249.359] WriteFile (in: hFile=0x620, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7bad0*=0x50, lpOverlapped=0x0) returned 1 [0249.359] WriteFile (in: hFile=0x620, lpBuffer=0x665da7bb10*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb10*, lpNumberOfBytesWritten=0x665da7bad4*=0x6, lpOverlapped=0x0) returned 1 [0249.359] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7bae0 | out: pbData=0x0*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0249.359] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7bb60, pdwDataLen=0x665da7bae0 | out: pbData=0x665da7bb60*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0249.359] WriteFile (in: hFile=0x620, lpBuffer=0x665da7bb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb60*, lpNumberOfBytesWritten=0x665da7bad4*=0x10c, lpOverlapped=0x0) returned 1 [0249.359] CloseHandle (hObject=0x620) returned 1 [0249.378] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0249.381] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0249.381] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0249.382] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0249.382] FindClose (in: hFindFile=0x665d90bcc0 | out: hFindFile=0x665d90bcc0) returned 1 [0249.382] SetLastError (dwErrCode=0x0) [0249.382] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0249.382] GetLastError () returned 0xb7 [0249.382] CloseHandle (hObject=0x60c) returned 1 [0249.382] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0249.382] SetLastError (dwErrCode=0x0) [0249.382] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0249.383] GetLastError () returned 0xb7 [0249.383] CloseHandle (hObject=0x60c) returned 1 [0249.383] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90d040 [0249.383] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0249.383] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0249.383] FindClose (in: hFindFile=0x665d90d040 | out: hFindFile=0x665d90d040) returned 1 [0249.383] SetLastError (dwErrCode=0x0) [0249.383] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\publisher\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0249.384] GetLastError () returned 0x0 [0249.384] WriteFile (in: hFile=0x60c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7c490*=0x324, lpOverlapped=0x0) returned 1 [0249.385] CloseHandle (hObject=0x60c) returned 1 [0249.385] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0249.385] SetLastError (dwErrCode=0x0) [0249.385] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0249.386] GetLastError () returned 0xb7 [0249.386] CloseHandle (hObject=0x60c) returned 1 [0249.386] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90cf20 [0249.386] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0249.386] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0249.386] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0249.386] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml", dwFileAttributes=0x80) returned 1 [0249.386] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\publisher building blocks\\contentstore.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0249.387] GetFileSizeEx (in: hFile=0x620, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=168) returned 1 [0249.387] GetFileSizeEx (in: hFile=0x620, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=168) returned 1 [0249.387] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7bac0 | out: phKey=0x665da7bac0*=0x665aae70e0) returned 1 [0249.387] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0249.387] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0249.387] ReadFile (in: hFile=0x620, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xa8, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7bad0*=0xa8, lpOverlapped=0x0) returned 1 [0249.388] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4250) returned 1 [0249.388] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0xa8, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0xb0) returned 1 [0249.388] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0249.388] WriteFile (in: hFile=0x620, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7bad0*=0xb0, lpOverlapped=0x0) returned 1 [0249.388] WriteFile (in: hFile=0x620, lpBuffer=0x665da7bb10*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb10*, lpNumberOfBytesWritten=0x665da7bad4*=0x6, lpOverlapped=0x0) returned 1 [0249.388] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7bae0 | out: pbData=0x0*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0249.388] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7bb60, pdwDataLen=0x665da7bae0 | out: pbData=0x665da7bb60*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0249.389] WriteFile (in: hFile=0x620, lpBuffer=0x665da7bb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb60*, lpNumberOfBytesWritten=0x665da7bad4*=0x10c, lpOverlapped=0x0) returned 1 [0249.389] CloseHandle (hObject=0x620) returned 1 [0249.409] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0249.414] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0249.414] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0249.414] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0249.414] FindClose (in: hFindFile=0x665d90cf20 | out: hFindFile=0x665d90cf20) returned 1 [0249.414] SetLastError (dwErrCode=0x0) [0249.414] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\publisher building blocks\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0249.443] GetLastError () returned 0x0 [0249.443] WriteFile (in: hFile=0x60c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7c490*=0x324, lpOverlapped=0x0) returned 1 [0249.444] CloseHandle (hObject=0x60c) returned 1 [0249.444] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0249.444] SetLastError (dwErrCode=0x0) [0249.444] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0249.444] GetLastError () returned 0xb7 [0249.444] CloseHandle (hObject=0x60c) returned 1 [0249.445] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Speech\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c8c0 [0249.445] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0249.445] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0249.445] FindClose (in: hFindFile=0x665d90c8c0 | out: hFindFile=0x665d90c8c0) returned 1 [0249.445] SetLastError (dwErrCode=0x0) [0249.445] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Speech\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\speech\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0249.447] GetLastError () returned 0x0 [0249.447] WriteFile (in: hFile=0x60c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7c490*=0x324, lpOverlapped=0x0) returned 1 [0249.448] CloseHandle (hObject=0x60c) returned 1 [0249.448] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0249.448] SetLastError (dwErrCode=0x0) [0249.448] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0249.448] GetLastError () returned 0xb7 [0249.448] CloseHandle (hObject=0x60c) returned 1 [0249.448] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90cce0 [0249.448] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0249.448] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0249.448] SetLastError (dwErrCode=0x0) [0249.448] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\systemcertificates\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0249.449] GetLastError () returned 0x0 [0249.449] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0249.450] CloseHandle (hObject=0x620) returned 1 [0249.450] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c500 [0249.450] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0249.450] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0249.450] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0249.451] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\AppContainerUserCertRead", dwFileAttributes=0x80) returned 1 [0249.451] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\AppContainerUserCertRead" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\systemcertificates\\my\\appcontainerusercertread"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0249.451] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=0) returned 1 [0249.451] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=0) returned 1 [0249.451] CloseHandle (hObject=0x3e8) returned 1 [0249.451] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0249.452] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0249.452] SetLastError (dwErrCode=0x0) [0249.452] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\systemcertificates\\my\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0249.526] GetLastError () returned 0x0 [0249.526] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0249.527] CloseHandle (hObject=0x3e8) returned 1 [0249.527] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c860 [0249.527] FindNextFileW (in: hFindFile=0x665d90c860, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0249.527] FindNextFileW (in: hFindFile=0x665d90c860, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0249.527] FindClose (in: hFindFile=0x665d90c860 | out: hFindFile=0x665d90c860) returned 1 [0249.527] SetLastError (dwErrCode=0x0) [0249.527] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\systemcertificates\\my\\certificates\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0249.528] GetLastError () returned 0x0 [0249.528] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0249.529] CloseHandle (hObject=0x3e8) returned 1 [0249.529] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0249.529] SetLastError (dwErrCode=0x0) [0249.529] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\systemcertificates\\my\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0249.529] GetLastError () returned 0xb7 [0249.529] CloseHandle (hObject=0x3e8) returned 1 [0249.529] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bfc0 [0249.529] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0249.529] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0249.529] FindClose (in: hFindFile=0x665d90bfc0 | out: hFindFile=0x665d90bfc0) returned 1 [0249.530] SetLastError (dwErrCode=0x0) [0249.530] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\systemcertificates\\my\\crls\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0249.530] GetLastError () returned 0x0 [0249.530] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0249.531] CloseHandle (hObject=0x3e8) returned 1 [0249.531] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0249.532] SetLastError (dwErrCode=0x0) [0249.532] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\systemcertificates\\my\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0249.532] GetLastError () returned 0xb7 [0249.532] CloseHandle (hObject=0x3e8) returned 1 [0249.532] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c260 [0249.532] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0249.532] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0249.532] FindClose (in: hFindFile=0x665d90c260 | out: hFindFile=0x665d90c260) returned 1 [0249.532] SetLastError (dwErrCode=0x0) [0249.532] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\systemcertificates\\my\\ctls\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0249.533] GetLastError () returned 0x0 [0249.533] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0249.534] CloseHandle (hObject=0x3e8) returned 1 [0249.534] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0249.534] FindClose (in: hFindFile=0x665d90c500 | out: hFindFile=0x665d90c500) returned 1 [0249.534] SetLastError (dwErrCode=0x0) [0249.534] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\systemcertificates\\my\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0249.534] GetLastError () returned 0xb7 [0249.534] CloseHandle (hObject=0x620) returned 1 [0249.534] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0249.534] FindClose (in: hFindFile=0x665d90cce0 | out: hFindFile=0x665d90cce0) returned 1 [0249.534] SetLastError (dwErrCode=0x0) [0249.534] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\systemcertificates\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0249.535] GetLastError () returned 0xb7 [0249.535] CloseHandle (hObject=0x60c) returned 1 [0249.535] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0249.535] SetLastError (dwErrCode=0x0) [0249.535] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0249.535] GetLastError () returned 0xb7 [0249.535] CloseHandle (hObject=0x60c) returned 1 [0249.535] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c980 [0249.625] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0249.625] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0249.625] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0249.625] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Calendar insights.xltm", dwFileAttributes=0x80) returned 1 [0249.626] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Calendar insights.xltm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\calendar insights.xltm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0249.626] GetFileSizeEx (in: hFile=0x620, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=914274) returned 1 [0249.626] GetFileSizeEx (in: hFile=0x620, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=914274) returned 1 [0249.626] SetFilePointerEx (in: hFile=0x620, liDistanceToMove=0xdf240, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0249.626] ReadFile (in: hFile=0x620, lpBuffer=0x665da7bb38, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7baf8, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb38*, lpNumberOfBytesRead=0x665da7baf8*=0x19, lpOverlapped=0x0) returned 1 [0249.666] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0249.666] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7bac0 | out: phKey=0x665da7bac0*=0x665aae6820) returned 1 [0249.666] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0249.666] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0249.666] ReadFile (in: hFile=0x620, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xdf362, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7bad0*=0xdf362, lpOverlapped=0x0) returned 1 [0249.750] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4250) returned 1 [0249.750] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0xdf362, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0xdf370) returned 1 [0249.751] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0249.751] WriteFile (in: hFile=0x620, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xdf370, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7bad0*=0xdf370, lpOverlapped=0x0) returned 1 [0249.754] WriteFile (in: hFile=0x620, lpBuffer=0x665da7bb10*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb10*, lpNumberOfBytesWritten=0x665da7bad4*=0x6, lpOverlapped=0x0) returned 1 [0249.754] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7bae0 | out: pbData=0x0*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0249.754] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7bb60, pdwDataLen=0x665da7bae0 | out: pbData=0x665da7bb60*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0249.754] WriteFile (in: hFile=0x620, lpBuffer=0x665da7bb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb60*, lpNumberOfBytesWritten=0x665da7bad4*=0x10c, lpOverlapped=0x0) returned 1 [0249.754] CloseHandle (hObject=0x620) returned 1 [0249.756] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0249.762] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0249.762] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0249.762] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0249.762] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0249.763] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Cashflow analysis.xltm", dwFileAttributes=0x80) returned 1 [0249.764] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Cashflow analysis.xltm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\cashflow analysis.xltm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0249.764] GetFileSizeEx (in: hFile=0x620, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=380006) returned 1 [0249.764] GetFileSizeEx (in: hFile=0x620, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=380006) returned 1 [0249.764] SetFilePointerEx (in: hFile=0x620, liDistanceToMove=0x5cb44, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0249.764] ReadFile (in: hFile=0x620, lpBuffer=0x665da7bb38, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7baf8, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb38*, lpNumberOfBytesRead=0x665da7baf8*=0x19, lpOverlapped=0x0) returned 1 [0250.627] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0250.627] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7bac0 | out: phKey=0x665da7bac0*=0x665aae6f20) returned 1 [0250.627] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0250.628] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0250.628] ReadFile (in: hFile=0x620, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x5cc66, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7bad0*=0x5cc66, lpOverlapped=0x0) returned 1 [0251.179] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4250) returned 1 [0251.179] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0x5cc66, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0x5cc70) returned 1 [0251.180] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0251.180] WriteFile (in: hFile=0x620, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x5cc70, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7bad0*=0x5cc70, lpOverlapped=0x0) returned 1 [0251.181] WriteFile (in: hFile=0x620, lpBuffer=0x665da7bb10*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb10*, lpNumberOfBytesWritten=0x665da7bad4*=0x6, lpOverlapped=0x0) returned 1 [0251.181] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7bae0 | out: pbData=0x0*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0251.181] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7bb60, pdwDataLen=0x665da7bae0 | out: pbData=0x665da7bb60*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0251.181] WriteFile (in: hFile=0x620, lpBuffer=0x665da7bb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb60*, lpNumberOfBytesWritten=0x665da7bad4*=0x10c, lpOverlapped=0x0) returned 1 [0251.181] CloseHandle (hObject=0x620) returned 1 [0251.196] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0251.201] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0251.201] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0251.201] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0251.201] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0251.201] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Email Insights.xltm", dwFileAttributes=0x80) returned 1 [0251.202] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Email Insights.xltm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\email insights.xltm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0251.203] GetFileSizeEx (in: hFile=0x620, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=738077) returned 1 [0251.203] GetFileSizeEx (in: hFile=0x620, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=738077) returned 1 [0251.203] SetFilePointerEx (in: hFile=0x620, liDistanceToMove=0xb41fb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0251.203] ReadFile (in: hFile=0x620, lpBuffer=0x665da7bb38, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7baf8, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb38*, lpNumberOfBytesRead=0x665da7baf8*=0x19, lpOverlapped=0x0) returned 1 [0251.205] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0251.205] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7bac0 | out: phKey=0x665da7bac0*=0x665aae65f0) returned 1 [0251.205] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0251.205] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0251.205] ReadFile (in: hFile=0x620, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xb431d, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7bad0*=0xb431d, lpOverlapped=0x0) returned 1 [0251.873] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4250) returned 1 [0251.873] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0xb431d, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0xb4320) returned 1 [0251.874] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0251.875] WriteFile (in: hFile=0x620, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xb4320, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7bad0*=0xb4320, lpOverlapped=0x0) returned 1 [0251.877] WriteFile (in: hFile=0x620, lpBuffer=0x665da7bb10*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb10*, lpNumberOfBytesWritten=0x665da7bad4*=0x6, lpOverlapped=0x0) returned 1 [0251.877] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7bae0 | out: pbData=0x0*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0251.877] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7bb60, pdwDataLen=0x665da7bae0 | out: pbData=0x665da7bb60*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0251.877] WriteFile (in: hFile=0x620, lpBuffer=0x665da7bb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb60*, lpNumberOfBytesWritten=0x665da7bad4*=0x10c, lpOverlapped=0x0) returned 1 [0251.877] CloseHandle (hObject=0x620) returned 1 [0251.883] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0251.888] CryptDestroyKey (hKey=0x665aae65f0) returned 1 [0251.888] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0251.888] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0251.888] SetLastError (dwErrCode=0x0) [0251.888] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0251.902] GetLastError () returned 0x0 [0251.902] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0251.903] CloseHandle (hObject=0x620) returned 1 [0251.903] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c6e0 [0251.903] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0251.903] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0251.903] SetLastError (dwErrCode=0x0) [0251.903] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0251.904] GetLastError () returned 0x0 [0251.904] WriteFile (in: hFile=0x3e8, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0251.906] CloseHandle (hObject=0x3e8) returned 1 [0251.906] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c260 [0251.906] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0251.906] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0251.906] SetLastError (dwErrCode=0x0) [0251.906] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0251.906] GetLastError () returned 0x0 [0251.906] WriteFile (in: hFile=0x654, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7ad80, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7ad80*=0x324, lpOverlapped=0x0) returned 1 [0251.907] CloseHandle (hObject=0x654) returned 1 [0251.907] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665d90bd20 [0251.908] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0251.908] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0251.908] SetLastError (dwErrCode=0x0) [0251.908] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0251.909] GetLastError () returned 0x0 [0251.909] WriteFile (in: hFile=0x440, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7a5d0*=0x324, lpOverlapped=0x0) returned 1 [0251.910] CloseHandle (hObject=0x440) returned 1 [0251.910] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\*.*", lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0x665d90d340 [0251.910] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0251.910] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0251.910] SetLastError (dwErrCode=0x0) [0251.910] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0251.911] GetLastError () returned 0x0 [0251.911] WriteFile (in: hFile=0x10c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da79e20*=0x324, lpOverlapped=0x0) returned 1 [0251.912] CloseHandle (hObject=0x10c) returned 1 [0251.912] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665d90c680 [0251.914] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0251.914] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0251.914] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0251.915] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090430[[fn=Banded]].thmx", dwFileAttributes=0x80) returned 1 [0251.915] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090430[[fn=Banded]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03090430[[fn=banded]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4dc [0251.916] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=562113) returned 1 [0251.916] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=562113) returned 1 [0251.916] SetFilePointerEx (in: hFile=0x4dc, liDistanceToMove=0x8929f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0251.916] ReadFile (in: hFile=0x4dc, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0251.917] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0251.917] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665aae65f0) returned 1 [0251.917] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0251.918] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0251.918] ReadFile (in: hFile=0x4dc, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x893c1, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79460*=0x893c1, lpOverlapped=0x0) returned 1 [0252.170] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0252.170] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79458*=0x893c1, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79458*=0x893d0) returned 1 [0252.171] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0252.171] WriteFile (in: hFile=0x4dc, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x893d0, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79460*=0x893d0, lpOverlapped=0x0) returned 1 [0252.172] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0252.172] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0252.172] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0252.172] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0252.173] CloseHandle (hObject=0x4dc) returned 1 [0252.179] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0252.184] CryptDestroyKey (hKey=0x665aae65f0) returned 1 [0252.184] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0252.184] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0252.184] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0252.184] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090434[[fn=Wood Type]].thmx", dwFileAttributes=0x80) returned 1 [0252.185] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090434[[fn=Wood Type]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03090434[[fn=wood type]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4dc [0252.185] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=1649585) returned 1 [0252.185] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=1649585) returned 1 [0252.185] SetFilePointerEx (in: hFile=0x4dc, liDistanceToMove=0x192a8f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0252.185] ReadFile (in: hFile=0x4dc, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0252.187] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0252.187] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665aae6cf0) returned 1 [0252.187] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0252.187] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0252.187] ReadFile (in: hFile=0x4dc, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79460*=0xf4240, lpOverlapped=0x0) returned 1 [0252.366] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240) returned 1 [0252.366] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79458*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x665db00000*, pdwDataLen=0x665da79458*=0xf4240) returned 1 [0252.367] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0252.367] WriteFile (in: hFile=0x4dc, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79460*=0xf4240, lpOverlapped=0x0) returned 1 [0252.445] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0252.445] ReadFile (in: hFile=0x4dc, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x9e971, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79460*=0x9e971, lpOverlapped=0x0) returned 1 [0252.472] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0252.472] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79458*=0x9e971, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79458*=0x9e980) returned 1 [0252.473] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0252.473] WriteFile (in: hFile=0x4dc, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x9e980, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79460*=0x9e980, lpOverlapped=0x0) returned 1 [0252.478] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0252.478] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0252.478] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0252.478] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0252.478] CloseHandle (hObject=0x4dc) returned 1 [0252.478] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0252.484] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0252.484] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0252.485] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0252.485] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0252.485] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457444[[fn=Basis]].thmx", dwFileAttributes=0x80) returned 1 [0252.487] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457444[[fn=Basis]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457444[[fn=basis]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4dc [0252.487] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=558035) returned 1 [0252.487] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=558035) returned 1 [0252.487] SetFilePointerEx (in: hFile=0x4dc, liDistanceToMove=0x882b1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0252.487] ReadFile (in: hFile=0x4dc, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0252.489] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0252.489] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665aae6510) returned 1 [0252.489] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0252.489] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0252.489] ReadFile (in: hFile=0x4dc, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x883d3, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79460*=0x883d3, lpOverlapped=0x0) returned 1 [0252.666] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0252.666] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79458*=0x883d3, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79458*=0x883e0) returned 1 [0252.667] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0252.667] WriteFile (in: hFile=0x4dc, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x883e0, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79460*=0x883e0, lpOverlapped=0x0) returned 1 [0252.669] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0252.669] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0252.669] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0252.670] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0252.670] CloseHandle (hObject=0x4dc) returned 1 [0252.679] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0252.684] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0252.684] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0252.685] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0252.685] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0252.685] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457464[[fn=Dividend]].thmx", dwFileAttributes=0x80) returned 1 [0252.686] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457464[[fn=Dividend]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457464[[fn=dividend]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4dc [0252.687] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=570901) returned 1 [0252.687] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=570901) returned 1 [0252.687] SetFilePointerEx (in: hFile=0x4dc, liDistanceToMove=0x8b4f3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0252.687] ReadFile (in: hFile=0x4dc, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0252.689] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0252.689] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665aae6cf0) returned 1 [0252.689] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0252.689] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0252.689] ReadFile (in: hFile=0x4dc, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x8b615, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79460*=0x8b615, lpOverlapped=0x0) returned 1 [0252.813] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0252.813] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79458*=0x8b615, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79458*=0x8b620) returned 1 [0252.814] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0252.814] WriteFile (in: hFile=0x4dc, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x8b620, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79460*=0x8b620, lpOverlapped=0x0) returned 1 [0252.815] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0252.816] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0252.816] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0252.816] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0252.816] CloseHandle (hObject=0x4dc) returned 1 [0252.823] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0252.828] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0252.828] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0252.829] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0252.829] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0252.829] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457475[[fn=Frame]].thmx", dwFileAttributes=0x80) returned 1 [0252.830] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457475[[fn=Frame]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457475[[fn=frame]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4dc [0252.831] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=523048) returned 1 [0252.831] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=523048) returned 1 [0252.831] SetFilePointerEx (in: hFile=0x4dc, liDistanceToMove=0x7fa06, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0252.831] ReadFile (in: hFile=0x4dc, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0252.832] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0252.832] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665aae6f20) returned 1 [0252.832] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0252.833] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0252.833] ReadFile (in: hFile=0x4dc, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x7fb28, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79460*=0x7fb28, lpOverlapped=0x0) returned 1 [0252.840] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0252.840] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79458*=0x7fb28, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79458*=0x7fb30) returned 1 [0252.841] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0252.841] WriteFile (in: hFile=0x4dc, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x7fb30, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79460*=0x7fb30, lpOverlapped=0x0) returned 1 [0252.844] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0252.844] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0252.844] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0252.844] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0252.844] CloseHandle (hObject=0x4dc) returned 1 [0252.855] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0252.861] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0252.861] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0252.861] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0252.862] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0252.862] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457485[[fn=Mesh]].thmx", dwFileAttributes=0x80) returned 1 [0252.863] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457485[[fn=Mesh]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457485[[fn=mesh]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4dc [0252.864] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=3078052) returned 1 [0252.864] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=3078052) returned 1 [0252.864] SetFilePointerEx (in: hFile=0x4dc, liDistanceToMove=0x2ef682, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0252.864] ReadFile (in: hFile=0x4dc, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0252.882] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0252.882] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665aae70e0) returned 1 [0252.883] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0252.883] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0252.883] ReadFile (in: hFile=0x4dc, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79460*=0xf4240, lpOverlapped=0x0) returned 1 [0252.907] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240) returned 1 [0252.907] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79458*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x665db00000*, pdwDataLen=0x665da79458*=0xf4240) returned 1 [0252.908] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0252.909] WriteFile (in: hFile=0x4dc, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79460*=0xf4240, lpOverlapped=0x0) returned 1 [0253.058] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0253.058] ReadFile (in: hFile=0x4dc, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79460*=0xf4240, lpOverlapped=0x0) returned 1 [0253.087] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240) returned 1 [0253.087] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79458*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x665db00000*, pdwDataLen=0x665da79458*=0xf4240) returned 1 [0253.088] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0253.088] WriteFile (in: hFile=0x4dc, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79460*=0xf4240, lpOverlapped=0x0) returned 1 [0253.092] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=2000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1e8480 [0253.092] ReadFile (in: hFile=0x4dc, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79460*=0xf4240, lpOverlapped=0x0) returned 1 [0253.269] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240) returned 1 [0253.269] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79458*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x665db00000*, pdwDataLen=0x665da79458*=0xf4240) returned 1 [0253.271] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=2000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1e8480 [0253.271] WriteFile (in: hFile=0x4dc, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79460*=0xf4240, lpOverlapped=0x0) returned 1 [0253.274] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=3000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x2dc6c0 [0253.274] ReadFile (in: hFile=0x4dc, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x130e4, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79460*=0x130e4, lpOverlapped=0x0) returned 1 [0253.274] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0253.274] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79458*=0x130e4, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79458*=0x130f0) returned 1 [0253.274] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=3000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x2dc6c0 [0253.274] WriteFile (in: hFile=0x4dc, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x130f0, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79460*=0x130f0, lpOverlapped=0x0) returned 1 [0253.274] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0253.274] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0253.274] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0253.275] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0253.275] CloseHandle (hObject=0x4dc) returned 1 [0253.275] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0253.279] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0253.279] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0253.279] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0253.279] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0253.279] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457491[[fn=Metropolitan]].thmx", dwFileAttributes=0x80) returned 1 [0253.280] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457491[[fn=Metropolitan]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457491[[fn=metropolitan]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4dc [0253.281] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=777647) returned 1 [0253.281] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=777647) returned 1 [0253.281] SetFilePointerEx (in: hFile=0x4dc, liDistanceToMove=0xbdc8d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0253.281] ReadFile (in: hFile=0x4dc, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0253.282] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0253.282] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665aae6cf0) returned 1 [0253.282] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0253.282] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0253.282] ReadFile (in: hFile=0x4dc, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xbddaf, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79460*=0xbddaf, lpOverlapped=0x0) returned 1 [0253.295] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0253.295] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79458*=0xbddaf, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79458*=0xbddb0) returned 1 [0253.297] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0253.297] WriteFile (in: hFile=0x4dc, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xbddb0, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79460*=0xbddb0, lpOverlapped=0x0) returned 1 [0253.298] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0253.299] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0253.299] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0253.299] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0253.299] CloseHandle (hObject=0x4dc) returned 1 [0253.301] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0253.317] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0253.317] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0253.317] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0253.317] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0253.317] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457496[[fn=Parallax]].thmx", dwFileAttributes=0x80) returned 1 [0253.318] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457496[[fn=Parallax]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457496[[fn=parallax]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4dc [0253.318] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=924687) returned 1 [0253.318] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=924687) returned 1 [0253.318] SetFilePointerEx (in: hFile=0x4dc, liDistanceToMove=0xe1aed, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0253.318] ReadFile (in: hFile=0x4dc, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0253.319] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0253.319] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665aae6f20) returned 1 [0253.319] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0253.320] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0253.320] ReadFile (in: hFile=0x4dc, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xe1c0f, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79460*=0xe1c0f, lpOverlapped=0x0) returned 1 [0253.334] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0253.334] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79458*=0xe1c0f, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79458*=0xe1c10) returned 1 [0253.336] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0253.336] WriteFile (in: hFile=0x4dc, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xe1c10, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79460*=0xe1c10, lpOverlapped=0x0) returned 1 [0253.338] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0253.338] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0253.338] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0253.338] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0253.338] CloseHandle (hObject=0x4dc) returned 1 [0253.350] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0253.354] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0253.354] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0253.354] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0253.354] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0253.355] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457503[[fn=Quotable]].thmx", dwFileAttributes=0x80) returned 1 [0253.357] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457503[[fn=Quotable]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457503[[fn=quotable]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4dc [0253.358] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=966946) returned 1 [0253.358] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=966946) returned 1 [0253.358] SetFilePointerEx (in: hFile=0x4dc, liDistanceToMove=0xec000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0253.358] ReadFile (in: hFile=0x4dc, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0253.359] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0253.359] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665aae6f20) returned 1 [0253.359] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0253.360] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0253.360] ReadFile (in: hFile=0x4dc, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xec122, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79460*=0xec122, lpOverlapped=0x0) returned 1 [0253.384] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0253.384] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79458*=0xec122, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79458*=0xec130) returned 1 [0253.386] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0253.386] WriteFile (in: hFile=0x4dc, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xec130, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79460*=0xec130, lpOverlapped=0x0) returned 1 [0253.388] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0253.388] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0253.388] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0253.388] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0253.388] CloseHandle (hObject=0x4dc) returned 1 [0253.389] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0253.393] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0253.393] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0253.393] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0253.393] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0253.394] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457510[[fn=Savon]].thmx", dwFileAttributes=0x80) returned 1 [0253.394] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457510[[fn=Savon]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457510[[fn=savon]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4dc [0253.395] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=1204049) returned 1 [0253.395] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=1204049) returned 1 [0253.395] SetFilePointerEx (in: hFile=0x4dc, liDistanceToMove=0x125e2f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0253.395] ReadFile (in: hFile=0x4dc, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0253.396] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0253.396] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665aae6cf0) returned 1 [0253.396] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0253.396] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0253.396] ReadFile (in: hFile=0x4dc, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79460*=0xf4240, lpOverlapped=0x0) returned 1 [0253.415] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240) returned 1 [0253.415] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79458*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x665db00000*, pdwDataLen=0x665da79458*=0xf4240) returned 1 [0253.417] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0253.417] WriteFile (in: hFile=0x4dc, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79460*=0xf4240, lpOverlapped=0x0) returned 1 [0253.420] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0253.420] ReadFile (in: hFile=0x4dc, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x31d11, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79460*=0x31d11, lpOverlapped=0x0) returned 1 [0253.422] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0253.422] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79458*=0x31d11, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79458*=0x31d20) returned 1 [0253.422] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0253.422] WriteFile (in: hFile=0x4dc, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x31d20, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79460*=0x31d20, lpOverlapped=0x0) returned 1 [0253.423] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0253.423] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0253.423] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0253.423] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0253.423] CloseHandle (hObject=0x4dc) returned 1 [0253.423] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0253.429] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0253.429] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0253.429] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0253.429] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0253.430] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457515[[fn=View]].thmx", dwFileAttributes=0x80) returned 1 [0253.430] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457515[[fn=View]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457515[[fn=view]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4dc [0253.431] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=486596) returned 1 [0253.431] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=486596) returned 1 [0253.431] SetFilePointerEx (in: hFile=0x4dc, liDistanceToMove=0x76ba2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0253.431] ReadFile (in: hFile=0x4dc, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0253.432] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0253.432] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665aae6820) returned 1 [0253.432] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0253.433] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0253.433] ReadFile (in: hFile=0x4dc, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x76cc4, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79460*=0x76cc4, lpOverlapped=0x0) returned 1 [0253.464] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0253.464] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79458*=0x76cc4, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79458*=0x76cd0) returned 1 [0253.464] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0253.465] WriteFile (in: hFile=0x4dc, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x76cd0, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79460*=0x76cd0, lpOverlapped=0x0) returned 1 [0253.466] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0253.466] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0253.466] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0253.466] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0253.466] CloseHandle (hObject=0x4dc) returned 1 [0253.488] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0253.492] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0253.492] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0253.492] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0253.492] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0253.492] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033917[[fn=Berlin]].thmx", dwFileAttributes=0x80) returned 1 [0253.493] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033917[[fn=Berlin]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033917[[fn=berlin]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4dc [0253.493] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=976001) returned 1 [0253.493] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=976001) returned 1 [0253.493] SetFilePointerEx (in: hFile=0x4dc, liDistanceToMove=0xee35f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0253.494] ReadFile (in: hFile=0x4dc, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0253.495] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0253.495] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665aae6510) returned 1 [0253.495] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0253.495] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0253.495] ReadFile (in: hFile=0x4dc, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xee481, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79460*=0xee481, lpOverlapped=0x0) returned 1 [0253.513] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0253.513] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79458*=0xee481, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79458*=0xee490) returned 1 [0253.515] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0253.515] WriteFile (in: hFile=0x4dc, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xee490, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79460*=0xee490, lpOverlapped=0x0) returned 1 [0253.521] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0253.521] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0253.521] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0253.521] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0253.521] CloseHandle (hObject=0x4dc) returned 1 [0253.524] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0253.529] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0253.529] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0253.530] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0253.530] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0253.531] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033919[[fn=Circuit]].thmx", dwFileAttributes=0x80) returned 1 [0253.531] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033919[[fn=Circuit]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033919[[fn=circuit]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4dc [0253.532] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=1463634) returned 1 [0253.532] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=1463634) returned 1 [0253.532] SetFilePointerEx (in: hFile=0x4dc, liDistanceToMove=0x165430, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0253.532] ReadFile (in: hFile=0x4dc, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0253.541] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0253.541] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665aae6820) returned 1 [0253.541] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0253.542] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0253.542] ReadFile (in: hFile=0x4dc, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79460*=0xf4240, lpOverlapped=0x0) returned 1 [0253.573] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240) returned 1 [0253.573] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79458*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x665db00000*, pdwDataLen=0x665da79458*=0xf4240) returned 1 [0253.574] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0253.574] WriteFile (in: hFile=0x4dc, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79460*=0xf4240, lpOverlapped=0x0) returned 1 [0253.578] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0253.578] ReadFile (in: hFile=0x4dc, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x71312, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79460*=0x71312, lpOverlapped=0x0) returned 1 [0253.591] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0253.591] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79458*=0x71312, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79458*=0x71320) returned 1 [0253.591] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0253.592] WriteFile (in: hFile=0x4dc, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x71320, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79460*=0x71320, lpOverlapped=0x0) returned 1 [0253.594] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0253.594] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0253.594] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0253.594] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0253.595] CloseHandle (hObject=0x4dc) returned 1 [0253.595] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0253.600] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0253.600] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0253.600] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0253.600] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0253.601] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033921[[fn=Damask]].thmx", dwFileAttributes=0x80) returned 1 [0253.601] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033921[[fn=Damask]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033921[[fn=damask]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4dc [0253.602] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=2218943) returned 1 [0253.602] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=2218943) returned 1 [0253.602] SetFilePointerEx (in: hFile=0x4dc, liDistanceToMove=0x21da9d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0253.602] ReadFile (in: hFile=0x4dc, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0253.621] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0253.621] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665aae6510) returned 1 [0253.621] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0253.621] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0253.621] ReadFile (in: hFile=0x4dc, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79460*=0xf4240, lpOverlapped=0x0) returned 1 [0253.706] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240) returned 1 [0253.706] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79458*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x665db00000*, pdwDataLen=0x665da79458*=0xf4240) returned 1 [0253.708] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0253.708] WriteFile (in: hFile=0x4dc, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79460*=0xf4240, lpOverlapped=0x0) returned 1 [0253.711] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0253.711] ReadFile (in: hFile=0x4dc, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79460*=0xf4240, lpOverlapped=0x0) returned 1 [0253.730] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240) returned 1 [0253.730] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79458*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x665db00000*, pdwDataLen=0x665da79458*=0xf4240) returned 1 [0253.732] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0253.732] WriteFile (in: hFile=0x4dc, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79460*=0xf4240, lpOverlapped=0x0) returned 1 [0253.889] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=2000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1e8480 [0254.262] ReadFile (in: hFile=0x4dc, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3573f, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79460*=0x3573f, lpOverlapped=0x0) returned 1 [0254.365] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0254.365] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79458*=0x3573f, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79458*=0x35740) returned 1 [0254.365] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=2000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1e8480 [0254.366] WriteFile (in: hFile=0x4dc, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x35740, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79460*=0x35740, lpOverlapped=0x0) returned 1 [0254.367] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0254.367] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0254.367] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0254.367] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0254.367] CloseHandle (hObject=0x4dc) returned 1 [0254.368] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0254.373] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0254.373] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0254.373] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0254.373] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0254.374] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033925[[fn=Droplet]].thmx", dwFileAttributes=0x80) returned 1 [0254.375] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033925[[fn=Droplet]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033925[[fn=droplet]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4dc [0254.376] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=1750795) returned 1 [0254.376] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=1750795) returned 1 [0254.376] SetFilePointerEx (in: hFile=0x4dc, liDistanceToMove=0x1ab5e9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0254.376] ReadFile (in: hFile=0x4dc, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0254.377] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0254.377] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665aae6cf0) returned 1 [0254.377] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0254.378] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0254.378] ReadFile (in: hFile=0x4dc, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79460*=0xf4240, lpOverlapped=0x0) returned 1 [0254.402] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240) returned 1 [0254.402] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79458*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x665db00000*, pdwDataLen=0x665da79458*=0xf4240) returned 1 [0254.404] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0254.404] WriteFile (in: hFile=0x4dc, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79460*=0xf4240, lpOverlapped=0x0) returned 1 [0254.407] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0254.407] ReadFile (in: hFile=0x4dc, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xb74cb, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79460*=0xb74cb, lpOverlapped=0x0) returned 1 [0254.422] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0254.422] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79458*=0xb74cb, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79458*=0xb74d0) returned 1 [0254.424] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0254.424] WriteFile (in: hFile=0x4dc, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xb74d0, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79460*=0xb74d0, lpOverlapped=0x0) returned 1 [0254.427] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0254.427] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0254.427] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0254.427] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0254.427] CloseHandle (hObject=0x4dc) returned 1 [0254.427] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0254.433] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0254.433] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0254.433] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0254.433] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0254.433] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033927[[fn=Main Event]].thmx", dwFileAttributes=0x80) returned 1 [0254.434] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033927[[fn=Main Event]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033927[[fn=main event]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4dc [0254.435] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=2924237) returned 1 [0254.435] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=2924237) returned 1 [0254.435] SetFilePointerEx (in: hFile=0x4dc, liDistanceToMove=0x2c9dab, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0254.435] ReadFile (in: hFile=0x4dc, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0254.437] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0254.437] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665aae6510) returned 1 [0254.437] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0254.437] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0254.437] ReadFile (in: hFile=0x4dc, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79460*=0xf4240, lpOverlapped=0x0) returned 1 [0254.462] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240) returned 1 [0254.462] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79458*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x665db00000*, pdwDataLen=0x665da79458*=0xf4240) returned 1 [0254.464] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0254.464] WriteFile (in: hFile=0x4dc, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79460*=0xf4240, lpOverlapped=0x0) returned 1 [0254.467] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0254.467] ReadFile (in: hFile=0x4dc, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79460*=0xf4240, lpOverlapped=0x0) returned 1 [0254.487] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240) returned 1 [0254.487] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79458*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x665db00000*, pdwDataLen=0x665da79458*=0xf4240) returned 1 [0254.488] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0254.488] WriteFile (in: hFile=0x4dc, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79460*=0xf4240, lpOverlapped=0x0) returned 1 [0254.492] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=2000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1e8480 [0254.492] ReadFile (in: hFile=0x4dc, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xe1a4d, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79460*=0xe1a4d, lpOverlapped=0x0) returned 1 [0254.511] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0254.511] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79458*=0xe1a4d, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79458*=0xe1a50) returned 1 [0254.512] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=2000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1e8480 [0254.512] WriteFile (in: hFile=0x4dc, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xe1a50, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79460*=0xe1a50, lpOverlapped=0x0) returned 1 [0254.516] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0254.516] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0254.517] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0254.517] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0254.517] CloseHandle (hObject=0x4dc) returned 1 [0254.517] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0254.522] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0254.522] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0254.523] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0254.523] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0254.523] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033929[[fn=Slate]].thmx", dwFileAttributes=0x80) returned 1 [0254.524] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033929[[fn=Slate]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033929[[fn=slate]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4dc [0254.524] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=2357051) returned 1 [0254.524] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=2357051) returned 1 [0254.524] SetFilePointerEx (in: hFile=0x4dc, liDistanceToMove=0x23f619, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0254.524] ReadFile (in: hFile=0x4dc, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0254.526] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0254.526] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665aae6cf0) returned 1 [0254.526] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0254.527] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0254.527] ReadFile (in: hFile=0x4dc, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79460*=0xf4240, lpOverlapped=0x0) returned 1 [0254.552] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240) returned 1 [0254.552] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79458*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x665db00000*, pdwDataLen=0x665da79458*=0xf4240) returned 1 [0254.553] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0254.553] WriteFile (in: hFile=0x4dc, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79460*=0xf4240, lpOverlapped=0x0) returned 1 [0254.556] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0254.556] ReadFile (in: hFile=0x4dc, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79460*=0xf4240, lpOverlapped=0x0) returned 1 [0254.574] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240) returned 1 [0254.575] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79458*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x665db00000*, pdwDataLen=0x665da79458*=0xf4240) returned 1 [0254.576] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0254.576] WriteFile (in: hFile=0x4dc, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79460*=0xf4240, lpOverlapped=0x0) returned 1 [0254.580] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=2000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1e8480 [0254.580] ReadFile (in: hFile=0x4dc, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x572bb, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79460*=0x572bb, lpOverlapped=0x0) returned 1 [0254.594] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0254.594] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79458*=0x572bb, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79458*=0x572c0) returned 1 [0254.595] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=2000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1e8480 [0254.595] WriteFile (in: hFile=0x4dc, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x572c0, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79460*=0x572c0, lpOverlapped=0x0) returned 1 [0254.597] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0254.597] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0254.597] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0254.597] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0254.597] CloseHandle (hObject=0x4dc) returned 1 [0254.598] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0254.603] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0254.603] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0254.603] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0254.603] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0254.604] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033937[[fn=Vapor Trail]].thmx", dwFileAttributes=0x80) returned 1 [0254.604] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033937[[fn=Vapor Trail]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033937[[fn=vapor trail]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4dc [0254.605] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=3611324) returned 1 [0254.605] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=3611324) returned 1 [0254.605] SetFilePointerEx (in: hFile=0x4dc, liDistanceToMove=0x37199a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0254.605] ReadFile (in: hFile=0x4dc, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0254.607] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0254.607] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665aae6f20) returned 1 [0254.607] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0254.607] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0254.607] ReadFile (in: hFile=0x4dc, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79460*=0xf4240, lpOverlapped=0x0) returned 1 [0254.632] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240) returned 1 [0254.632] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79458*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x665db00000*, pdwDataLen=0x665da79458*=0xf4240) returned 1 [0254.633] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0254.633] WriteFile (in: hFile=0x4dc, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79460*=0xf4240, lpOverlapped=0x0) returned 1 [0254.636] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0254.636] ReadFile (in: hFile=0x4dc, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79460*=0xf4240, lpOverlapped=0x0) returned 1 [0254.655] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240) returned 1 [0254.655] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79458*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x665db00000*, pdwDataLen=0x665da79458*=0xf4240) returned 1 [0254.681] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0254.681] WriteFile (in: hFile=0x4dc, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79460*=0xf4240, lpOverlapped=0x0) returned 1 [0254.684] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=2000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1e8480 [0254.684] ReadFile (in: hFile=0x4dc, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79460*=0xf4240, lpOverlapped=0x0) returned 1 [0254.702] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240) returned 1 [0254.702] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79458*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x665db00000*, pdwDataLen=0x665da79458*=0xf4240) returned 1 [0254.704] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=2000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1e8480 [0254.704] WriteFile (in: hFile=0x4dc, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79460*=0xf4240, lpOverlapped=0x0) returned 1 [0254.707] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=3000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x2dc6c0 [0254.707] ReadFile (in: hFile=0x4dc, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x953fc, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79460*=0x953fc, lpOverlapped=0x0) returned 1 [0254.715] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0254.716] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79458*=0x953fc, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79458*=0x95400) returned 1 [0254.716] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=3000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x2dc6c0 [0254.717] WriteFile (in: hFile=0x4dc, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x95400, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79460*=0x95400, lpOverlapped=0x0) returned 1 [0254.719] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0254.719] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0254.719] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0254.719] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0254.719] CloseHandle (hObject=0x4dc) returned 1 [0254.719] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0254.724] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0254.724] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0254.725] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0254.725] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0254.725] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001103[[fn=Headlines]].thmx", dwFileAttributes=0x80) returned 1 [0254.725] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001103[[fn=Headlines]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001103[[fn=headlines]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4dc [0254.726] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=539609) returned 1 [0254.726] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=539609) returned 1 [0254.726] SetFilePointerEx (in: hFile=0x4dc, liDistanceToMove=0x83ab7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0254.726] ReadFile (in: hFile=0x4dc, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0254.727] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0254.727] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665aae65f0) returned 1 [0254.728] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0254.728] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0254.728] ReadFile (in: hFile=0x4dc, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x83bd9, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79460*=0x83bd9, lpOverlapped=0x0) returned 1 [0254.740] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0254.740] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79458*=0x83bd9, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79458*=0x83be0) returned 1 [0254.741] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0254.741] WriteFile (in: hFile=0x4dc, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x83be0, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79460*=0x83be0, lpOverlapped=0x0) returned 1 [0254.743] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0254.743] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0254.743] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0254.743] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0254.743] CloseHandle (hObject=0x4dc) returned 1 [0254.748] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0254.753] CryptDestroyKey (hKey=0x665aae65f0) returned 1 [0254.753] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0254.753] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0254.753] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0254.753] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001104[[fn=Feathered]].thmx", dwFileAttributes=0x80) returned 1 [0254.754] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001104[[fn=Feathered]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001104[[fn=feathered]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4dc [0254.754] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=2053076) returned 1 [0254.754] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=2053076) returned 1 [0254.754] SetFilePointerEx (in: hFile=0x4dc, liDistanceToMove=0x1f52b2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0254.754] ReadFile (in: hFile=0x4dc, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0254.756] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0254.756] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665aae66d0) returned 1 [0254.756] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0254.756] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0254.756] ReadFile (in: hFile=0x4dc, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79460*=0xf4240, lpOverlapped=0x0) returned 1 [0254.771] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240) returned 1 [0254.771] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79458*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x665db00000*, pdwDataLen=0x665da79458*=0xf4240) returned 1 [0254.772] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0254.772] WriteFile (in: hFile=0x4dc, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79460*=0xf4240, lpOverlapped=0x0) returned 1 [0254.775] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0254.775] ReadFile (in: hFile=0x4dc, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79460*=0xf4240, lpOverlapped=0x0) returned 1 [0254.789] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240) returned 1 [0254.789] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79458*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x665db00000*, pdwDataLen=0x665da79458*=0xf4240) returned 1 [0254.790] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0254.790] WriteFile (in: hFile=0x4dc, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79460*=0xf4240, lpOverlapped=0x0) returned 1 [0254.794] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=2000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1e8480 [0254.794] ReadFile (in: hFile=0x4dc, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xcf54, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79460*=0xcf54, lpOverlapped=0x0) returned 1 [0254.794] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0254.794] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79458*=0xcf54, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79458*=0xcf60) returned 1 [0254.795] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=2000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1e8480 [0254.795] WriteFile (in: hFile=0x4dc, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xcf60, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79460*=0xcf60, lpOverlapped=0x0) returned 1 [0254.795] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0254.795] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0254.795] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0254.795] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0254.795] CloseHandle (hObject=0x4dc) returned 1 [0254.795] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0254.799] CryptDestroyKey (hKey=0x665aae66d0) returned 1 [0254.799] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0254.800] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0254.800] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0254.800] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001105[[fn=Crop]].thmx", dwFileAttributes=0x80) returned 1 [0254.800] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001105[[fn=Crop]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001105[[fn=crop]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4dc [0254.801] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=536604) returned 1 [0254.801] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=536604) returned 1 [0254.801] SetFilePointerEx (in: hFile=0x4dc, liDistanceToMove=0x82efa, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0254.801] ReadFile (in: hFile=0x4dc, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0254.802] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0254.802] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665aae6cf0) returned 1 [0254.802] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0254.803] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0254.803] ReadFile (in: hFile=0x4dc, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x8301c, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79460*=0x8301c, lpOverlapped=0x0) returned 1 [0254.812] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0254.812] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79458*=0x8301c, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79458*=0x83020) returned 1 [0254.813] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0254.813] WriteFile (in: hFile=0x4dc, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x83020, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79460*=0x83020, lpOverlapped=0x0) returned 1 [0254.815] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0254.815] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0254.815] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0254.815] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0254.815] CloseHandle (hObject=0x4dc) returned 1 [0254.820] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0254.824] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0254.824] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0254.824] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0254.825] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0254.825] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001106[[fn=Badge]].thmx", dwFileAttributes=0x80) returned 1 [0254.825] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001106[[fn=Badge]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001106[[fn=badge]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4dc [0254.826] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=663937) returned 1 [0254.826] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=663937) returned 1 [0254.826] SetFilePointerEx (in: hFile=0x4dc, liDistanceToMove=0xa205f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0254.826] ReadFile (in: hFile=0x4dc, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0254.827] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0254.827] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665aae6cf0) returned 1 [0254.827] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0254.828] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0254.828] ReadFile (in: hFile=0x4dc, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xa2181, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79460*=0xa2181, lpOverlapped=0x0) returned 1 [0254.836] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0254.836] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79458*=0xa2181, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79458*=0xa2190) returned 1 [0254.837] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0254.837] WriteFile (in: hFile=0x4dc, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xa2190, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79460*=0xa2190, lpOverlapped=0x0) returned 1 [0254.839] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0254.839] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0254.839] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0254.839] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0254.839] CloseHandle (hObject=0x4dc) returned 1 [0254.843] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0254.847] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0254.847] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0254.847] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0254.847] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0254.847] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001114[[fn=Gallery]].thmx", dwFileAttributes=0x80) returned 1 [0254.848] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001114[[fn=Gallery]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001114[[fn=gallery]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4dc [0254.848] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=1091485) returned 1 [0254.849] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=1091485) returned 1 [0254.849] SetFilePointerEx (in: hFile=0x4dc, liDistanceToMove=0x10a67b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0254.849] ReadFile (in: hFile=0x4dc, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0254.850] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0254.850] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665aae6f20) returned 1 [0254.850] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0254.850] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0254.851] ReadFile (in: hFile=0x4dc, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79460*=0xf4240, lpOverlapped=0x0) returned 1 [0254.867] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240) returned 1 [0254.867] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79458*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x665db00000*, pdwDataLen=0x665da79458*=0xf4240) returned 1 [0254.868] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0254.868] WriteFile (in: hFile=0x4dc, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79460*=0xf4240, lpOverlapped=0x0) returned 1 [0254.871] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0254.871] ReadFile (in: hFile=0x4dc, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x1655d, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79460*=0x1655d, lpOverlapped=0x0) returned 1 [0254.871] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0254.871] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79458*=0x1655d, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79458*=0x16560) returned 1 [0254.871] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0254.871] WriteFile (in: hFile=0x4dc, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x16560, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79460*=0x16560, lpOverlapped=0x0) returned 1 [0254.872] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0254.872] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0254.872] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0254.872] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0254.872] CloseHandle (hObject=0x4dc) returned 1 [0254.872] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0254.877] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0254.877] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0254.877] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0254.877] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0254.877] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001115[[fn=Parcel]].thmx", dwFileAttributes=0x80) returned 1 [0254.878] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001115[[fn=Parcel]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001115[[fn=parcel]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4dc [0254.878] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=608122) returned 1 [0254.878] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=608122) returned 1 [0254.878] SetFilePointerEx (in: hFile=0x4dc, liDistanceToMove=0x94658, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0254.878] ReadFile (in: hFile=0x4dc, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0254.879] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0254.879] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665aae6510) returned 1 [0254.879] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0254.880] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0254.880] ReadFile (in: hFile=0x4dc, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x9477a, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79460*=0x9477a, lpOverlapped=0x0) returned 1 [0254.891] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0254.891] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79458*=0x9477a, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79458*=0x94780) returned 1 [0254.892] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0254.892] WriteFile (in: hFile=0x4dc, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x94780, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79460*=0x94780, lpOverlapped=0x0) returned 1 [0254.893] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0254.893] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0254.893] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0254.894] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0254.894] CloseHandle (hObject=0x4dc) returned 1 [0254.898] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0254.902] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0254.902] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0254.902] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0254.902] FindClose (in: hFindFile=0x665d90c680 | out: hFindFile=0x665d90c680) returned 1 [0254.902] SetLastError (dwErrCode=0x0) [0254.902] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0254.903] GetLastError () returned 0x0 [0254.903] WriteFile (in: hFile=0x10c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da79e20*=0x324, lpOverlapped=0x0) returned 1 [0254.904] CloseHandle (hObject=0x10c) returned 1 [0254.904] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0 [0254.904] FindClose (in: hFindFile=0x665d90d340 | out: hFindFile=0x665d90d340) returned 1 [0254.904] SetLastError (dwErrCode=0x0) [0254.904] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0254.904] GetLastError () returned 0xb7 [0254.904] CloseHandle (hObject=0x440) returned 1 [0254.904] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0254.904] SetLastError (dwErrCode=0x0) [0254.904] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0254.905] GetLastError () returned 0xb7 [0254.905] CloseHandle (hObject=0x440) returned 1 [0254.905] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\*.*", lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0x665d90bde0 [0254.906] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0254.906] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0254.906] SetLastError (dwErrCode=0x0) [0254.906] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0254.907] GetLastError () returned 0x0 [0254.907] WriteFile (in: hFile=0x10c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da79e20*=0x324, lpOverlapped=0x0) returned 1 [0254.907] CloseHandle (hObject=0x10c) returned 1 [0254.908] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665d90ce60 [0254.909] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0254.909] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0254.909] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0254.910] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328884[[fn=architecture]].glox", dwFileAttributes=0x80) returned 1 [0254.910] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328884[[fn=architecture]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328884[[fn=architecture]].glox"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4dc [0254.911] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=5783) returned 1 [0254.911] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=5783) returned 1 [0254.911] SetFilePointerEx (in: hFile=0x4dc, liDistanceToMove=0x1575, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0254.911] ReadFile (in: hFile=0x4dc, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0254.912] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0254.912] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665aae65f0) returned 1 [0254.912] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0254.912] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0254.912] ReadFile (in: hFile=0x4dc, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x1697, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79460*=0x1697, lpOverlapped=0x0) returned 1 [0254.913] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0254.913] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79458*=0x1697, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79458*=0x16a0) returned 1 [0254.913] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0254.913] WriteFile (in: hFile=0x4dc, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x16a0, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79460*=0x16a0, lpOverlapped=0x0) returned 1 [0254.913] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0254.913] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0254.913] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0254.913] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0254.913] CloseHandle (hObject=0x4dc) returned 1 [0254.927] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0254.931] CryptDestroyKey (hKey=0x665aae65f0) returned 1 [0254.931] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0254.931] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0254.931] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0254.931] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328893[[fn=BracketList]].glox", dwFileAttributes=0x80) returned 1 [0254.932] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328893[[fn=BracketList]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328893[[fn=bracketlist]].glox"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4dc [0254.932] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=4026) returned 1 [0254.932] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=4026) returned 1 [0254.933] SetFilePointerEx (in: hFile=0x4dc, liDistanceToMove=0xe98, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0254.933] ReadFile (in: hFile=0x4dc, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0254.934] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0254.934] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665aae6510) returned 1 [0254.934] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0254.934] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0254.934] ReadFile (in: hFile=0x4dc, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xfba, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79460*=0xfba, lpOverlapped=0x0) returned 1 [0254.934] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0254.934] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79458*=0xfba, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79458*=0xfc0) returned 1 [0254.934] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0254.934] WriteFile (in: hFile=0x4dc, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xfc0, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79460*=0xfc0, lpOverlapped=0x0) returned 1 [0254.934] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0254.935] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0254.935] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0254.935] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0254.935] CloseHandle (hObject=0x4dc) returned 1 [0254.949] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0254.954] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0254.954] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0254.954] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0254.954] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0254.954] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328905[[fn=Chevron Accent]].glox", dwFileAttributes=0x80) returned 1 [0254.955] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328905[[fn=Chevron Accent]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328905[[fn=chevron accent]].glox"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4dc [0254.955] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=4243) returned 1 [0254.955] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=4243) returned 1 [0254.955] SetFilePointerEx (in: hFile=0x4dc, liDistanceToMove=0xf71, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0254.955] ReadFile (in: hFile=0x4dc, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0254.956] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0254.956] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665aae6cf0) returned 1 [0254.957] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0254.957] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0254.957] ReadFile (in: hFile=0x4dc, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x1093, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79460*=0x1093, lpOverlapped=0x0) returned 1 [0254.957] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0254.957] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79458*=0x1093, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79458*=0x10a0) returned 1 [0254.957] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0254.957] WriteFile (in: hFile=0x4dc, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x10a0, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79460*=0x10a0, lpOverlapped=0x0) returned 1 [0254.958] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0254.958] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0254.958] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0254.958] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0254.958] CloseHandle (hObject=0x4dc) returned 1 [0254.975] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0254.979] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0254.979] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0254.979] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0254.979] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0254.979] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328908[[fn=Circle Process]].glox", dwFileAttributes=0x80) returned 1 [0254.980] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328908[[fn=Circle Process]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328908[[fn=circle process]].glox"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4dc [0254.980] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=16806) returned 1 [0254.980] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=16806) returned 1 [0254.980] SetFilePointerEx (in: hFile=0x4dc, liDistanceToMove=0x4084, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0254.980] ReadFile (in: hFile=0x4dc, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0254.981] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0254.981] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665aae6cf0) returned 1 [0254.981] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0254.982] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0254.982] ReadFile (in: hFile=0x4dc, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x41a6, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79460*=0x41a6, lpOverlapped=0x0) returned 1 [0254.982] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0254.982] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79458*=0x41a6, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79458*=0x41b0) returned 1 [0254.982] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0254.982] WriteFile (in: hFile=0x4dc, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x41b0, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79460*=0x41b0, lpOverlapped=0x0) returned 1 [0254.983] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0254.983] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0254.983] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0254.983] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0254.983] CloseHandle (hObject=0x4dc) returned 1 [0255.006] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0255.009] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0255.009] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0255.010] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0255.010] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0255.010] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328916[[fn=Converging Text]].glox", dwFileAttributes=0x80) returned 1 [0255.010] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328916[[fn=Converging Text]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328916[[fn=converging text]].glox"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4dc [0255.011] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=11380) returned 1 [0255.011] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=11380) returned 1 [0255.011] SetFilePointerEx (in: hFile=0x4dc, liDistanceToMove=0x2b52, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0255.011] ReadFile (in: hFile=0x4dc, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0255.012] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0255.012] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665aae65f0) returned 1 [0255.012] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0255.013] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0255.013] ReadFile (in: hFile=0x4dc, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x2c74, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79460*=0x2c74, lpOverlapped=0x0) returned 1 [0255.013] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0255.013] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79458*=0x2c74, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79458*=0x2c80) returned 1 [0255.013] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0255.013] WriteFile (in: hFile=0x4dc, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x2c80, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79460*=0x2c80, lpOverlapped=0x0) returned 1 [0255.013] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0255.013] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0255.014] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0255.014] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0255.014] CloseHandle (hObject=0x4dc) returned 1 [0255.032] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0255.037] CryptDestroyKey (hKey=0x665aae65f0) returned 1 [0255.038] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0255.038] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0255.038] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0255.038] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328919[[fn=Hexagon Radial]].glox", dwFileAttributes=0x80) returned 1 [0255.039] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328919[[fn=Hexagon Radial]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328919[[fn=hexagon radial]].glox"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4dc [0255.039] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=6024) returned 1 [0255.039] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=6024) returned 1 [0255.039] SetFilePointerEx (in: hFile=0x4dc, liDistanceToMove=0x1666, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0255.040] ReadFile (in: hFile=0x4dc, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0255.041] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0255.041] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665aae70e0) returned 1 [0255.041] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0255.041] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0255.041] ReadFile (in: hFile=0x4dc, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x1788, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79460*=0x1788, lpOverlapped=0x0) returned 1 [0255.042] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0255.042] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79458*=0x1788, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79458*=0x1790) returned 1 [0255.042] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0255.042] WriteFile (in: hFile=0x4dc, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x1790, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79460*=0x1790, lpOverlapped=0x0) returned 1 [0255.042] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0255.042] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0255.042] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0255.042] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0255.043] CloseHandle (hObject=0x4dc) returned 1 [0255.064] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0255.069] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0255.069] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0255.069] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0255.069] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0255.069] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328925[[fn=Interconnected Block Process]].glox", dwFileAttributes=0x80) returned 1 [0255.070] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328925[[fn=Interconnected Block Process]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328925[[fn=interconnected block process]].glox"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4dc [0255.071] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=9191) returned 1 [0255.071] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=9191) returned 1 [0255.071] SetFilePointerEx (in: hFile=0x4dc, liDistanceToMove=0x22c5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0255.071] ReadFile (in: hFile=0x4dc, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0255.072] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0255.072] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665aae6510) returned 1 [0255.072] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0255.073] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0255.073] ReadFile (in: hFile=0x4dc, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x23e7, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79460*=0x23e7, lpOverlapped=0x0) returned 1 [0255.076] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0255.076] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79458*=0x23e7, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79458*=0x23f0) returned 1 [0255.076] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0255.076] WriteFile (in: hFile=0x4dc, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x23f0, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79460*=0x23f0, lpOverlapped=0x0) returned 1 [0255.076] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0255.076] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0255.076] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0255.077] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0255.077] CloseHandle (hObject=0x4dc) returned 1 [0255.097] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0255.102] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0255.102] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0255.103] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0255.103] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0255.103] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328932[[fn=Picture Frame]].glox", dwFileAttributes=0x80) returned 1 [0255.104] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328932[[fn=Picture Frame]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328932[[fn=picture frame]].glox"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4dc [0255.104] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=4326) returned 1 [0255.104] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=4326) returned 1 [0255.104] SetFilePointerEx (in: hFile=0x4dc, liDistanceToMove=0xfc4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0255.104] ReadFile (in: hFile=0x4dc, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0255.106] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0255.106] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665aae70e0) returned 1 [0255.106] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0255.106] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0255.106] ReadFile (in: hFile=0x4dc, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x10e6, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79460*=0x10e6, lpOverlapped=0x0) returned 1 [0255.107] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0255.107] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79458*=0x10e6, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79458*=0x10f0) returned 1 [0255.107] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0255.107] WriteFile (in: hFile=0x4dc, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x10f0, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79460*=0x10f0, lpOverlapped=0x0) returned 1 [0255.107] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0255.107] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0255.107] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0255.107] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0255.107] CloseHandle (hObject=0x4dc) returned 1 [0255.128] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0255.133] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0255.133] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0255.134] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0255.134] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0255.134] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328935[[fn=Picture Organization Chart]].glox", dwFileAttributes=0x80) returned 1 [0255.135] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328935[[fn=Picture Organization Chart]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328935[[fn=picture organization chart]].glox"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4dc [0255.135] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=7370) returned 1 [0255.135] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=7370) returned 1 [0255.135] SetFilePointerEx (in: hFile=0x4dc, liDistanceToMove=0x1ba8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0255.135] ReadFile (in: hFile=0x4dc, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0255.137] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0255.137] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665aae6820) returned 1 [0255.137] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0255.137] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0255.137] ReadFile (in: hFile=0x4dc, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x1cca, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79460*=0x1cca, lpOverlapped=0x0) returned 1 [0255.138] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0255.138] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79458*=0x1cca, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79458*=0x1cd0) returned 1 [0255.138] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0255.138] WriteFile (in: hFile=0x4dc, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x1cd0, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79460*=0x1cd0, lpOverlapped=0x0) returned 1 [0255.138] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0255.138] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0255.138] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0255.138] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0255.138] CloseHandle (hObject=0x4dc) returned 1 [0255.159] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0255.164] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0255.164] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0255.165] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0255.165] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0255.165] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328940[[fn=Radial Picture List]].glox", dwFileAttributes=0x80) returned 1 [0255.166] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328940[[fn=Radial Picture List]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328940[[fn=radial picture list]].glox"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4dc [0255.166] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=5596) returned 1 [0255.166] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=5596) returned 1 [0255.166] SetFilePointerEx (in: hFile=0x4dc, liDistanceToMove=0x14ba, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0255.166] ReadFile (in: hFile=0x4dc, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0255.168] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0255.168] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665aae6f20) returned 1 [0255.168] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0255.168] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0255.168] ReadFile (in: hFile=0x4dc, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x15dc, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79460*=0x15dc, lpOverlapped=0x0) returned 1 [0255.169] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0255.169] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79458*=0x15dc, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79458*=0x15e0) returned 1 [0255.169] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0255.169] WriteFile (in: hFile=0x4dc, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x15e0, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79460*=0x15e0, lpOverlapped=0x0) returned 1 [0255.169] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0255.169] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0255.169] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0255.169] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0255.169] CloseHandle (hObject=0x4dc) returned 1 [0255.190] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0255.195] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0255.195] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0255.195] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0255.196] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0255.196] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328951[[fn=Tabbed Arc]].glox", dwFileAttributes=0x80) returned 1 [0255.196] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328951[[fn=Tabbed Arc]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328951[[fn=tabbed arc]].glox"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4dc [0255.197] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=3683) returned 1 [0255.197] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=3683) returned 1 [0255.197] SetFilePointerEx (in: hFile=0x4dc, liDistanceToMove=0xd41, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0255.197] ReadFile (in: hFile=0x4dc, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0255.199] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0255.199] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665aae6510) returned 1 [0255.199] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0255.199] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0255.199] ReadFile (in: hFile=0x4dc, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xe63, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79460*=0xe63, lpOverlapped=0x0) returned 1 [0255.199] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0255.199] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79458*=0xe63, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79458*=0xe70) returned 1 [0255.199] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0255.199] WriteFile (in: hFile=0x4dc, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xe70, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79460*=0xe70, lpOverlapped=0x0) returned 1 [0255.199] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0255.199] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0255.199] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0255.200] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0255.200] CloseHandle (hObject=0x4dc) returned 1 [0255.221] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0255.226] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0255.226] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0255.227] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0255.227] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0255.227] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328972[[fn=Tab List]].glox", dwFileAttributes=0x80) returned 1 [0255.228] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328972[[fn=Tab List]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328972[[fn=tab list]].glox"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4dc [0255.228] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=4888) returned 1 [0255.228] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=4888) returned 1 [0255.228] SetFilePointerEx (in: hFile=0x4dc, liDistanceToMove=0x11f6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0255.228] ReadFile (in: hFile=0x4dc, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0255.230] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0255.230] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665aae6f20) returned 1 [0255.230] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0255.230] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0255.230] ReadFile (in: hFile=0x4dc, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x1318, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79460*=0x1318, lpOverlapped=0x0) returned 1 [0255.231] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0255.231] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79458*=0x1318, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79458*=0x1320) returned 1 [0255.231] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0255.231] WriteFile (in: hFile=0x4dc, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x1320, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79460*=0x1320, lpOverlapped=0x0) returned 1 [0255.231] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0255.231] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0255.231] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0255.231] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0255.232] CloseHandle (hObject=0x4dc) returned 1 [0255.259] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0255.265] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0255.265] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0255.265] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0255.265] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0255.266] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328975[[fn=Theme Picture Accent]].glox", dwFileAttributes=0x80) returned 1 [0255.266] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328975[[fn=Theme Picture Accent]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328975[[fn=theme picture accent]].glox"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4dc [0255.267] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=6448) returned 1 [0255.267] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=6448) returned 1 [0255.267] SetFilePointerEx (in: hFile=0x4dc, liDistanceToMove=0x180e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0255.267] ReadFile (in: hFile=0x4dc, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0255.269] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0255.269] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665aae6cf0) returned 1 [0255.269] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0255.269] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0255.269] ReadFile (in: hFile=0x4dc, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x1930, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79460*=0x1930, lpOverlapped=0x0) returned 1 [0255.270] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0255.270] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79458*=0x1930, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79458*=0x1940) returned 1 [0255.270] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0255.270] WriteFile (in: hFile=0x4dc, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x1940, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79460*=0x1940, lpOverlapped=0x0) returned 1 [0255.270] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0255.270] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0255.270] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0255.270] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0255.270] CloseHandle (hObject=0x4dc) returned 1 [0255.294] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0255.302] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0255.302] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0255.302] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0255.302] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0255.303] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328983[[fn=Theme Picture Alternating Accent]].glox", dwFileAttributes=0x80) returned 1 [0255.304] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328983[[fn=Theme Picture Alternating Accent]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328983[[fn=theme picture alternating accent]].glox"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4dc [0255.304] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=5630) returned 1 [0255.304] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=5630) returned 1 [0255.304] SetFilePointerEx (in: hFile=0x4dc, liDistanceToMove=0x14dc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0255.305] ReadFile (in: hFile=0x4dc, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0255.306] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0255.306] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665aae6cf0) returned 1 [0255.306] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0255.307] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0255.307] ReadFile (in: hFile=0x4dc, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x15fe, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79460*=0x15fe, lpOverlapped=0x0) returned 1 [0255.307] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0255.308] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79458*=0x15fe, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79458*=0x1600) returned 1 [0255.308] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0255.308] WriteFile (in: hFile=0x4dc, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x1600, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79460*=0x1600, lpOverlapped=0x0) returned 1 [0255.308] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0255.308] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0255.308] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0255.308] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0255.308] CloseHandle (hObject=0x4dc) returned 1 [0255.365] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0255.370] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0255.371] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0255.371] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0255.371] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0255.371] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328986[[fn=Theme Picture Grid]].glox", dwFileAttributes=0x80) returned 1 [0255.372] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328986[[fn=Theme Picture Grid]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328986[[fn=theme picture grid]].glox"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4dc [0255.372] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=6193) returned 1 [0255.373] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=6193) returned 1 [0255.373] SetFilePointerEx (in: hFile=0x4dc, liDistanceToMove=0x170f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0255.373] ReadFile (in: hFile=0x4dc, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0255.374] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0255.374] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665aae66d0) returned 1 [0255.374] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0255.375] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0255.375] ReadFile (in: hFile=0x4dc, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x1831, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79460*=0x1831, lpOverlapped=0x0) returned 1 [0255.376] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0255.376] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79458*=0x1831, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79458*=0x1840) returned 1 [0255.376] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0255.376] WriteFile (in: hFile=0x4dc, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x1840, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79460*=0x1840, lpOverlapped=0x0) returned 1 [0255.376] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0255.376] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0255.377] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0255.377] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0255.377] CloseHandle (hObject=0x4dc) returned 1 [0255.404] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0255.410] CryptDestroyKey (hKey=0x665aae66d0) returned 1 [0255.410] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0255.410] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0255.410] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0255.411] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328990[[fn=Varying Width List]].glox", dwFileAttributes=0x80) returned 1 [0255.411] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328990[[fn=Varying Width List]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328990[[fn=varying width list]].glox"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4dc [0255.412] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=3075) returned 1 [0255.412] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=3075) returned 1 [0255.412] SetFilePointerEx (in: hFile=0x4dc, liDistanceToMove=0xae1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0255.412] ReadFile (in: hFile=0x4dc, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0255.413] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0255.413] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665aae6cf0) returned 1 [0255.414] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0255.414] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0255.414] ReadFile (in: hFile=0x4dc, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xc03, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79460*=0xc03, lpOverlapped=0x0) returned 1 [0255.414] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0255.414] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79458*=0xc03, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79458*=0xc10) returned 1 [0255.414] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0255.414] WriteFile (in: hFile=0x4dc, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xc10, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79460*=0xc10, lpOverlapped=0x0) returned 1 [0255.414] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0255.415] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0255.415] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0255.415] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0255.415] CloseHandle (hObject=0x4dc) returned 1 [0255.440] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0255.445] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0255.445] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0255.446] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0255.446] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0255.446] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328998[[fn=Rings]].glox", dwFileAttributes=0x80) returned 1 [0255.447] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328998[[fn=Rings]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328998[[fn=rings]].glox"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4dc [0255.447] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79468 | out: lpFileSize=0x665da79468*=5151) returned 1 [0255.447] GetFileSizeEx (in: hFile=0x4dc, lpFileSize=0x665da79478 | out: lpFileSize=0x665da79478*=5151) returned 1 [0255.448] SetFilePointerEx (in: hFile=0x4dc, liDistanceToMove=0x12fd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0255.448] ReadFile (in: hFile=0x4dc, lpBuffer=0x665da794c8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da79488, lpOverlapped=0x0 | out: lpBuffer=0x665da794c8*, lpNumberOfBytesRead=0x665da79488*=0x19, lpOverlapped=0x0) returned 1 [0255.449] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0255.449] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da79450 | out: phKey=0x665da79450*=0x665aae65f0) returned 1 [0255.449] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0255.450] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0255.450] ReadFile (in: hFile=0x4dc, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x141f, lpNumberOfBytesRead=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da79460*=0x141f, lpOverlapped=0x0) returned 1 [0255.450] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7945c*=0xf4250) returned 1 [0255.450] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da79458*=0x141f, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da79458*=0x1420) returned 1 [0255.451] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0255.451] WriteFile (in: hFile=0x4dc, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x1420, lpNumberOfBytesWritten=0x665da79460, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da79460*=0x1420, lpOverlapped=0x0) returned 1 [0255.451] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794a0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794a0*, lpNumberOfBytesWritten=0x665da79464*=0x6, lpOverlapped=0x0) returned 1 [0255.451] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da79470 | out: pbData=0x0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0255.451] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da794f0, pdwDataLen=0x665da79470 | out: pbData=0x665da794f0*, pdwDataLen=0x665da79470*=0x10c) returned 1 [0255.451] WriteFile (in: hFile=0x4dc, lpBuffer=0x665da794f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da79464, lpOverlapped=0x0 | out: lpBuffer=0x665da794f0*, lpNumberOfBytesWritten=0x665da79464*=0x10c, lpOverlapped=0x0) returned 1 [0255.451] CloseHandle (hObject=0x4dc) returned 1 [0255.476] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0255.481] CryptDestroyKey (hKey=0x665aae65f0) returned 1 [0255.481] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0255.481] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0255.482] FindClose (in: hFindFile=0x665d90ce60 | out: hFindFile=0x665d90ce60) returned 1 [0255.482] SetLastError (dwErrCode=0x0) [0255.482] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0255.483] GetLastError () returned 0x0 [0255.483] WriteFile (in: hFile=0x10c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da79e20*=0x324, lpOverlapped=0x0) returned 1 [0255.484] CloseHandle (hObject=0x10c) returned 1 [0255.484] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0 [0255.484] FindClose (in: hFindFile=0x665d90bde0 | out: hFindFile=0x665d90bde0) returned 1 [0255.484] SetLastError (dwErrCode=0x0) [0255.484] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0255.484] GetLastError () returned 0xb7 [0255.484] CloseHandle (hObject=0x440) returned 1 [0255.484] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0255.484] FindClose (in: hFindFile=0x665d90bd20 | out: hFindFile=0x665d90bd20) returned 1 [0255.484] SetLastError (dwErrCode=0x0) [0255.484] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0255.485] GetLastError () returned 0xb7 [0255.485] CloseHandle (hObject=0x654) returned 1 [0255.485] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0255.485] SetLastError (dwErrCode=0x0) [0255.485] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0255.486] GetLastError () returned 0xb7 [0255.486] CloseHandle (hObject=0x654) returned 1 [0255.486] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\*.*", lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0x665d90bfc0 [0255.486] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0255.486] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0255.486] SetLastError (dwErrCode=0x0) [0255.486] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\user\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0255.487] GetLastError () returned 0x0 [0255.487] WriteFile (in: hFile=0x440, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7a5d0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7a5d0*=0x324, lpOverlapped=0x0) returned 1 [0255.488] CloseHandle (hObject=0x440) returned 1 [0255.488] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\*.*", lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0x665d90d340 [0255.488] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0255.488] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0255.488] SetLastError (dwErrCode=0x0) [0255.488] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\user\\document themes\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0255.489] GetLastError () returned 0x0 [0255.489] WriteFile (in: hFile=0x10c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da79e20*=0x324, lpOverlapped=0x0) returned 1 [0255.490] CloseHandle (hObject=0x10c) returned 1 [0255.490] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\1033\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665d90cce0 [0255.490] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0255.490] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0255.490] FindClose (in: hFindFile=0x665d90cce0 | out: hFindFile=0x665d90cce0) returned 1 [0255.490] SetLastError (dwErrCode=0x0) [0255.490] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\1033\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\user\\document themes\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0255.492] GetLastError () returned 0x0 [0255.492] WriteFile (in: hFile=0x10c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da79e20*=0x324, lpOverlapped=0x0) returned 1 [0255.493] CloseHandle (hObject=0x10c) returned 1 [0255.493] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0 [0255.493] FindClose (in: hFindFile=0x665d90d340 | out: hFindFile=0x665d90d340) returned 1 [0255.493] SetLastError (dwErrCode=0x0) [0255.493] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\user\\document themes\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0255.493] GetLastError () returned 0xb7 [0255.493] CloseHandle (hObject=0x440) returned 1 [0255.493] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 1 [0255.493] SetLastError (dwErrCode=0x0) [0255.493] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\user\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0255.494] GetLastError () returned 0xb7 [0255.494] CloseHandle (hObject=0x440) returned 1 [0255.494] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\*.*", lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0x665d90c620 [0255.494] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0255.494] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 1 [0255.494] SetLastError (dwErrCode=0x0) [0255.494] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\user\\smartart graphics\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0255.494] GetLastError () returned 0x0 [0255.494] WriteFile (in: hFile=0x10c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da79e20*=0x324, lpOverlapped=0x0) returned 1 [0255.495] CloseHandle (hObject=0x10c) returned 1 [0255.496] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\1033\\*.*", lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0x665d90c860 [0255.496] FindNextFileW (in: hFindFile=0x665d90c860, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 1 [0255.496] FindNextFileW (in: hFindFile=0x665d90c860, lpFindFileData=0x665da796c0 | out: lpFindFileData=0x665da796c0) returned 0 [0255.496] FindClose (in: hFindFile=0x665d90c860 | out: hFindFile=0x665d90c860) returned 1 [0255.496] SetLastError (dwErrCode=0x0) [0255.496] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\1033\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\user\\smartart graphics\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0255.496] GetLastError () returned 0x0 [0255.496] WriteFile (in: hFile=0x10c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da79e20, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da79e20*=0x324, lpOverlapped=0x0) returned 1 [0255.497] CloseHandle (hObject=0x10c) returned 1 [0255.498] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da79e70 | out: lpFindFileData=0x665da79e70) returned 0 [0255.498] FindClose (in: hFindFile=0x665d90c620 | out: hFindFile=0x665d90c620) returned 1 [0255.498] SetLastError (dwErrCode=0x0) [0255.498] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\user\\smartart graphics\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0255.498] GetLastError () returned 0xb7 [0255.498] CloseHandle (hObject=0x440) returned 1 [0255.498] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7a620 | out: lpFindFileData=0x665da7a620) returned 0 [0255.498] FindClose (in: hFindFile=0x665d90bfc0 | out: hFindFile=0x665d90bfc0) returned 1 [0255.498] SetLastError (dwErrCode=0x0) [0255.498] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\user\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0255.498] GetLastError () returned 0xb7 [0255.499] CloseHandle (hObject=0x654) returned 1 [0255.499] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0255.499] FindClose (in: hFindFile=0x665d90c260 | out: hFindFile=0x665d90c260) returned 1 [0255.499] SetLastError (dwErrCode=0x0) [0255.499] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0255.499] GetLastError () returned 0xb7 [0255.499] CloseHandle (hObject=0x3e8) returned 1 [0255.499] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0255.499] FindClose (in: hFindFile=0x665d90c6e0 | out: hFindFile=0x665d90c6e0) returned 1 [0255.499] SetLastError (dwErrCode=0x0) [0255.499] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0255.500] GetLastError () returned 0xb7 [0255.500] CloseHandle (hObject=0x620) returned 1 [0255.500] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0255.500] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0255.500] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm", dwFileAttributes=0x80) returned 1 [0255.501] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\normal.dotm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0255.502] GetFileSizeEx (in: hFile=0x620, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=18853) returned 1 [0255.502] GetFileSizeEx (in: hFile=0x620, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=18853) returned 1 [0255.502] SetFilePointerEx (in: hFile=0x620, liDistanceToMove=0x4883, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0255.502] ReadFile (in: hFile=0x620, lpBuffer=0x665da7bb38, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7baf8, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb38*, lpNumberOfBytesRead=0x665da7baf8*=0x19, lpOverlapped=0x0) returned 1 [0255.503] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0255.503] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7bac0 | out: phKey=0x665da7bac0*=0x665aae6cf0) returned 1 [0255.503] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0255.504] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0255.504] ReadFile (in: hFile=0x620, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x49a5, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7bad0*=0x49a5, lpOverlapped=0x0) returned 1 [0255.505] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4250) returned 1 [0255.505] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0x49a5, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0x49b0) returned 1 [0255.505] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0255.505] WriteFile (in: hFile=0x620, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x49b0, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7bad0*=0x49b0, lpOverlapped=0x0) returned 1 [0255.505] WriteFile (in: hFile=0x620, lpBuffer=0x665da7bb10*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb10*, lpNumberOfBytesWritten=0x665da7bad4*=0x6, lpOverlapped=0x0) returned 1 [0255.505] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7bae0 | out: pbData=0x0*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0255.505] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7bb60, pdwDataLen=0x665da7bae0 | out: pbData=0x665da7bb60*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0255.505] WriteFile (in: hFile=0x620, lpBuffer=0x665da7bb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb60*, lpNumberOfBytesWritten=0x665da7bad4*=0x10c, lpOverlapped=0x0) returned 1 [0255.505] CloseHandle (hObject=0x620) returned 1 [0255.528] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0255.534] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0255.534] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0255.534] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0255.534] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0255.535] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Basic Flowchart.xltx", dwFileAttributes=0x80) returned 1 [0255.539] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Basic Flowchart.xltx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\process map for basic flowchart.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0255.540] GetFileSizeEx (in: hFile=0x620, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=109949) returned 1 [0255.540] GetFileSizeEx (in: hFile=0x620, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=109949) returned 1 [0255.540] SetFilePointerEx (in: hFile=0x620, liDistanceToMove=0x1ac5b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0255.540] ReadFile (in: hFile=0x620, lpBuffer=0x665da7bb38, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7baf8, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb38*, lpNumberOfBytesRead=0x665da7baf8*=0x19, lpOverlapped=0x0) returned 1 [0255.541] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0255.541] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7bac0 | out: phKey=0x665da7bac0*=0x665aae6cf0) returned 1 [0255.542] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0255.542] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0255.542] ReadFile (in: hFile=0x620, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x1ad7d, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7bad0*=0x1ad7d, lpOverlapped=0x0) returned 1 [0255.544] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4250) returned 1 [0255.544] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0x1ad7d, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0x1ad80) returned 1 [0255.544] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0255.544] WriteFile (in: hFile=0x620, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x1ad80, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7bad0*=0x1ad80, lpOverlapped=0x0) returned 1 [0255.545] WriteFile (in: hFile=0x620, lpBuffer=0x665da7bb10*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb10*, lpNumberOfBytesWritten=0x665da7bad4*=0x6, lpOverlapped=0x0) returned 1 [0255.545] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7bae0 | out: pbData=0x0*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0255.545] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7bb60, pdwDataLen=0x665da7bae0 | out: pbData=0x665da7bb60*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0255.545] WriteFile (in: hFile=0x620, lpBuffer=0x665da7bb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb60*, lpNumberOfBytesWritten=0x665da7bad4*=0x10c, lpOverlapped=0x0) returned 1 [0255.545] CloseHandle (hObject=0x620) returned 1 [0255.564] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0255.569] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0255.569] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0255.570] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0255.570] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0255.570] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Cross-Functional Flowchart.xltx", dwFileAttributes=0x80) returned 1 [0255.571] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Cross-Functional Flowchart.xltx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\process map for cross-functional flowchart.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0255.572] GetFileSizeEx (in: hFile=0x620, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=144734) returned 1 [0255.572] GetFileSizeEx (in: hFile=0x620, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=144734) returned 1 [0255.572] SetFilePointerEx (in: hFile=0x620, liDistanceToMove=0x2343c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0255.572] ReadFile (in: hFile=0x620, lpBuffer=0x665da7bb38, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7baf8, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb38*, lpNumberOfBytesRead=0x665da7baf8*=0x19, lpOverlapped=0x0) returned 1 [0255.574] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0255.574] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7bac0 | out: phKey=0x665da7bac0*=0x665aae6cf0) returned 1 [0255.574] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0255.574] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0255.574] ReadFile (in: hFile=0x620, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x2355e, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7bad0*=0x2355e, lpOverlapped=0x0) returned 1 [0255.577] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4250) returned 1 [0255.577] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0x2355e, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0x23560) returned 1 [0255.577] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0255.577] WriteFile (in: hFile=0x620, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x23560, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7bad0*=0x23560, lpOverlapped=0x0) returned 1 [0255.578] WriteFile (in: hFile=0x620, lpBuffer=0x665da7bb10*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb10*, lpNumberOfBytesWritten=0x665da7bad4*=0x6, lpOverlapped=0x0) returned 1 [0255.578] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7bae0 | out: pbData=0x0*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0255.578] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7bb60, pdwDataLen=0x665da7bae0 | out: pbData=0x665da7bb60*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0255.578] WriteFile (in: hFile=0x620, lpBuffer=0x665da7bb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb60*, lpNumberOfBytesWritten=0x665da7bad4*=0x10c, lpOverlapped=0x0) returned 1 [0255.578] CloseHandle (hObject=0x620) returned 1 [0255.596] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0255.601] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0255.602] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0255.602] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0255.602] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0255.602] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Stock symbols comparison.xltm", dwFileAttributes=0x80) returned 1 [0255.603] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Stock symbols comparison.xltm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\stock symbols comparison.xltm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0255.604] GetFileSizeEx (in: hFile=0x620, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=1459082) returned 1 [0255.604] GetFileSizeEx (in: hFile=0x620, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=1459082) returned 1 [0255.604] SetFilePointerEx (in: hFile=0x620, liDistanceToMove=0x164268, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0255.604] ReadFile (in: hFile=0x620, lpBuffer=0x665da7bb38, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7baf8, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb38*, lpNumberOfBytesRead=0x665da7baf8*=0x19, lpOverlapped=0x0) returned 1 [0255.606] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0255.606] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7bac0 | out: phKey=0x665da7bac0*=0x665aae6820) returned 1 [0255.606] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0255.606] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0255.607] ReadFile (in: hFile=0x620, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7bad0*=0xf4240, lpOverlapped=0x0) returned 1 [0255.633] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240) returned 1 [0255.633] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0xf4240) returned 1 [0255.634] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0255.634] WriteFile (in: hFile=0x620, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7bad0*=0xf4240, lpOverlapped=0x0) returned 1 [0255.637] SetFilePointer (in: hFile=0x620, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0255.637] ReadFile (in: hFile=0x620, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x7014a, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7bad0*=0x7014a, lpOverlapped=0x0) returned 1 [0255.651] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4250) returned 1 [0255.651] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0x7014a, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0x70150) returned 1 [0255.652] SetFilePointer (in: hFile=0x620, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0255.652] WriteFile (in: hFile=0x620, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x70150, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7bad0*=0x70150, lpOverlapped=0x0) returned 1 [0255.654] WriteFile (in: hFile=0x620, lpBuffer=0x665da7bb10*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb10*, lpNumberOfBytesWritten=0x665da7bad4*=0x6, lpOverlapped=0x0) returned 1 [0255.654] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7bae0 | out: pbData=0x0*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0255.654] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7bb60, pdwDataLen=0x665da7bae0 | out: pbData=0x665da7bb60*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0255.654] WriteFile (in: hFile=0x620, lpBuffer=0x665da7bb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb60*, lpNumberOfBytesWritten=0x665da7bad4*=0x10c, lpOverlapped=0x0) returned 1 [0255.654] CloseHandle (hObject=0x620) returned 1 [0255.654] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0255.732] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0255.732] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0255.732] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0255.732] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0255.732] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Welcome to Excel.xltx", dwFileAttributes=0x80) returned 1 [0255.733] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Welcome to Excel.xltx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\welcome to excel.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0255.734] GetFileSizeEx (in: hFile=0x620, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=494747) returned 1 [0255.734] GetFileSizeEx (in: hFile=0x620, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=494747) returned 1 [0255.734] SetFilePointerEx (in: hFile=0x620, liDistanceToMove=0x78b79, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0255.734] ReadFile (in: hFile=0x620, lpBuffer=0x665da7bb38, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7baf8, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb38*, lpNumberOfBytesRead=0x665da7baf8*=0x19, lpOverlapped=0x0) returned 1 [0255.736] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0255.736] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7bac0 | out: phKey=0x665da7bac0*=0x665aae6820) returned 1 [0255.736] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0255.737] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0255.737] ReadFile (in: hFile=0x620, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x78c9b, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7bad0*=0x78c9b, lpOverlapped=0x0) returned 1 [0255.750] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4250) returned 1 [0255.750] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0x78c9b, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0x78ca0) returned 1 [0255.751] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0255.751] WriteFile (in: hFile=0x620, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x78ca0, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7bad0*=0x78ca0, lpOverlapped=0x0) returned 1 [0255.752] WriteFile (in: hFile=0x620, lpBuffer=0x665da7bb10*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb10*, lpNumberOfBytesWritten=0x665da7bad4*=0x6, lpOverlapped=0x0) returned 1 [0255.753] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7bae0 | out: pbData=0x0*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0255.753] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7bb60, pdwDataLen=0x665da7bae0 | out: pbData=0x665da7bb60*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0255.753] WriteFile (in: hFile=0x620, lpBuffer=0x665da7bb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb60*, lpNumberOfBytesWritten=0x665da7bad4*=0x10c, lpOverlapped=0x0) returned 1 [0255.753] CloseHandle (hObject=0x620) returned 1 [0255.760] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0255.765] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0255.765] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0255.766] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0255.766] FindClose (in: hFindFile=0x665d90c980 | out: hFindFile=0x665d90c980) returned 1 [0255.766] SetLastError (dwErrCode=0x0) [0255.766] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0255.771] GetLastError () returned 0xb7 [0255.771] CloseHandle (hObject=0x60c) returned 1 [0255.771] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0255.771] SetLastError (dwErrCode=0x0) [0255.771] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0255.771] GetLastError () returned 0xb7 [0255.771] CloseHandle (hObject=0x60c) returned 1 [0255.771] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90cf20 [0255.772] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0255.772] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0255.772] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0255.772] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof\\CUSTOM.DIC", dwFileAttributes=0x80) returned 1 [0255.772] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof\\CUSTOM.DIC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\uproof\\custom.dic"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0255.773] GetFileSizeEx (in: hFile=0x620, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=30) returned 1 [0255.773] GetFileSizeEx (in: hFile=0x620, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=30) returned 1 [0255.773] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7bac0 | out: phKey=0x665da7bac0*=0x665aae7150) returned 1 [0255.773] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0255.774] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0255.774] ReadFile (in: hFile=0x620, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x1e, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7bad0*=0x1e, lpOverlapped=0x0) returned 1 [0255.775] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4250) returned 1 [0255.775] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0x1e, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0x20) returned 1 [0255.775] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0255.775] WriteFile (in: hFile=0x620, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7bad0*=0x20, lpOverlapped=0x0) returned 1 [0255.775] WriteFile (in: hFile=0x620, lpBuffer=0x665da7bb10*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb10*, lpNumberOfBytesWritten=0x665da7bad4*=0x6, lpOverlapped=0x0) returned 1 [0255.775] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7bae0 | out: pbData=0x0*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0255.775] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7bb60, pdwDataLen=0x665da7bae0 | out: pbData=0x665da7bb60*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0255.775] WriteFile (in: hFile=0x620, lpBuffer=0x665da7bb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb60*, lpNumberOfBytesWritten=0x665da7bad4*=0x10c, lpOverlapped=0x0) returned 1 [0255.775] CloseHandle (hObject=0x620) returned 1 [0255.789] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0255.793] CryptDestroyKey (hKey=0x665aae7150) returned 1 [0255.793] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0255.793] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0255.793] FindClose (in: hFindFile=0x665d90cf20 | out: hFindFile=0x665d90cf20) returned 1 [0255.793] SetLastError (dwErrCode=0x0) [0255.793] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\uproof\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0255.794] GetLastError () returned 0x0 [0255.794] WriteFile (in: hFile=0x60c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7c490*=0x324, lpOverlapped=0x0) returned 1 [0255.795] CloseHandle (hObject=0x60c) returned 1 [0255.795] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0255.795] SetLastError (dwErrCode=0x0) [0255.795] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0255.795] GetLastError () returned 0xb7 [0255.795] CloseHandle (hObject=0x60c) returned 1 [0255.796] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Vault\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90d340 [0255.796] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0255.796] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0255.796] FindClose (in: hFindFile=0x665d90d340 | out: hFindFile=0x665d90d340) returned 1 [0255.796] SetLastError (dwErrCode=0x0) [0255.796] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Vault\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\vault\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0255.797] GetLastError () returned 0x0 [0255.798] WriteFile (in: hFile=0x60c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7c490*=0x324, lpOverlapped=0x0) returned 1 [0255.799] CloseHandle (hObject=0x60c) returned 1 [0255.799] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0255.799] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0255.799] SetLastError (dwErrCode=0x0) [0255.799] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0255.799] GetLastError () returned 0xb7 [0255.799] CloseHandle (hObject=0x60c) returned 1 [0255.800] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Word\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c500 [0255.800] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0255.800] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0255.800] SetLastError (dwErrCode=0x0) [0255.800] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Word\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\word\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0255.801] GetLastError () returned 0x0 [0255.801] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0255.801] CloseHandle (hObject=0x620) returned 1 [0255.802] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90cfe0 [0255.802] FindNextFileW (in: hFindFile=0x665d90cfe0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0255.802] FindNextFileW (in: hFindFile=0x665d90cfe0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0255.802] FindClose (in: hFindFile=0x665d90cfe0 | out: hFindFile=0x665d90cfe0) returned 1 [0255.802] SetLastError (dwErrCode=0x0) [0255.802] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\word\\startup\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0255.802] GetLastError () returned 0x0 [0255.802] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0255.803] CloseHandle (hObject=0x620) returned 1 [0255.803] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0255.803] FindClose (in: hFindFile=0x665d90c500 | out: hFindFile=0x665d90c500) returned 1 [0255.803] SetLastError (dwErrCode=0x0) [0255.803] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Word\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\word\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0255.803] GetLastError () returned 0xb7 [0255.804] CloseHandle (hObject=0x60c) returned 1 [0255.804] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0255.804] FindClose (in: hFindFile=0x665d90bc60 | out: hFindFile=0x665d90bc60) returned 1 [0255.804] SetLastError (dwErrCode=0x0) [0255.804] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0255.804] GetLastError () returned 0xb7 [0255.804] CloseHandle (hObject=0x570) returned 1 [0255.804] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0255.804] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0255.804] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0255.804] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\N 5L3NU1ssIlXiN.mp4", dwFileAttributes=0x80) returned 1 [0255.805] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\N 5L3NU1ssIlXiN.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\n 5l3nu1ssilxin.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0255.805] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=86510) returned 1 [0255.805] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=86510) returned 1 [0255.805] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x150cc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0255.805] ReadFile (in: hFile=0x570, lpBuffer=0x665da7ca98, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca98*, lpNumberOfBytesRead=0x665da7ca58*=0x19, lpOverlapped=0x0) returned 1 [0255.812] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0255.812] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ca20 | out: phKey=0x665da7ca20*=0x665aae6510) returned 1 [0255.812] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0255.812] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0255.812] ReadFile (in: hFile=0x570, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x151ee, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ca30*=0x151ee, lpOverlapped=0x0) returned 1 [0255.814] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4250) returned 1 [0255.814] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x151ee, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x151f0) returned 1 [0255.814] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0255.814] WriteFile (in: hFile=0x570, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x151f0, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ca30*=0x151f0, lpOverlapped=0x0) returned 1 [0255.888] WriteFile (in: hFile=0x570, lpBuffer=0x665da7ca70*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca70*, lpNumberOfBytesWritten=0x665da7ca34*=0x6, lpOverlapped=0x0) returned 1 [0255.888] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ca40 | out: pbData=0x0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0255.888] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7cac0, pdwDataLen=0x665da7ca40 | out: pbData=0x665da7cac0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0255.888] WriteFile (in: hFile=0x570, lpBuffer=0x665da7cac0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7cac0*, lpNumberOfBytesWritten=0x665da7ca34*=0x10c, lpOverlapped=0x0) returned 1 [0255.889] CloseHandle (hObject=0x570) returned 1 [0255.906] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0255.910] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0255.910] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0255.910] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0255.910] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0255.911] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\n8hCjot-1R tcD.mp3", dwFileAttributes=0x80) returned 1 [0255.911] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\n8hCjot-1R tcD.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\n8hcjot-1r tcd.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0255.912] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=78858) returned 1 [0255.912] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=78858) returned 1 [0255.912] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x132e8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0255.912] ReadFile (in: hFile=0x570, lpBuffer=0x665da7ca98, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca98*, lpNumberOfBytesRead=0x665da7ca58*=0x19, lpOverlapped=0x0) returned 1 [0255.913] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0255.913] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ca20 | out: phKey=0x665da7ca20*=0x665aae6cf0) returned 1 [0255.913] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0255.913] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0255.913] ReadFile (in: hFile=0x570, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x1340a, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ca30*=0x1340a, lpOverlapped=0x0) returned 1 [0255.914] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4250) returned 1 [0255.914] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x1340a, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x13410) returned 1 [0255.915] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0255.915] WriteFile (in: hFile=0x570, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x13410, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ca30*=0x13410, lpOverlapped=0x0) returned 1 [0255.915] WriteFile (in: hFile=0x570, lpBuffer=0x665da7ca70*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca70*, lpNumberOfBytesWritten=0x665da7ca34*=0x6, lpOverlapped=0x0) returned 1 [0255.915] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ca40 | out: pbData=0x0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0255.915] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7cac0, pdwDataLen=0x665da7ca40 | out: pbData=0x665da7cac0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0255.915] WriteFile (in: hFile=0x570, lpBuffer=0x665da7cac0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7cac0*, lpNumberOfBytesWritten=0x665da7ca34*=0x10c, lpOverlapped=0x0) returned 1 [0255.915] CloseHandle (hObject=0x570) returned 1 [0255.930] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0255.934] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0255.934] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0255.934] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0255.934] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0255.934] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\NTxl5Euz8NX8xH8ZkeV-.wav", dwFileAttributes=0x80) returned 1 [0255.935] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\NTxl5Euz8NX8xH8ZkeV-.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\ntxl5euz8nx8xh8zkev-.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0255.935] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=26685) returned 1 [0255.935] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=26685) returned 1 [0255.935] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x671b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0255.935] ReadFile (in: hFile=0x570, lpBuffer=0x665da7ca98, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca98*, lpNumberOfBytesRead=0x665da7ca58*=0x19, lpOverlapped=0x0) returned 1 [0256.520] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0256.521] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ca20 | out: phKey=0x665da7ca20*=0x665aae6f20) returned 1 [0256.521] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0256.521] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0256.521] ReadFile (in: hFile=0x570, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x683d, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ca30*=0x683d, lpOverlapped=0x0) returned 1 [0256.522] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4250) returned 1 [0256.522] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x683d, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x6840) returned 1 [0256.522] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0256.522] WriteFile (in: hFile=0x570, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x6840, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ca30*=0x6840, lpOverlapped=0x0) returned 1 [0256.522] WriteFile (in: hFile=0x570, lpBuffer=0x665da7ca70*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca70*, lpNumberOfBytesWritten=0x665da7ca34*=0x6, lpOverlapped=0x0) returned 1 [0256.522] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ca40 | out: pbData=0x0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0256.522] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7cac0, pdwDataLen=0x665da7ca40 | out: pbData=0x665da7cac0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0256.522] WriteFile (in: hFile=0x570, lpBuffer=0x665da7cac0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7cac0*, lpNumberOfBytesWritten=0x665da7ca34*=0x10c, lpOverlapped=0x0) returned 1 [0256.522] CloseHandle (hObject=0x570) returned 1 [0256.538] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0256.542] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0256.542] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0256.542] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0256.542] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0256.543] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\nvRkQi.bmp", dwFileAttributes=0x80) returned 1 [0256.543] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\nvRkQi.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\nvrkqi.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0256.544] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=72389) returned 1 [0256.544] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=72389) returned 1 [0256.544] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x119a3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0256.544] ReadFile (in: hFile=0x570, lpBuffer=0x665da7ca98, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca98*, lpNumberOfBytesRead=0x665da7ca58*=0x19, lpOverlapped=0x0) returned 1 [0256.545] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0256.545] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ca20 | out: phKey=0x665da7ca20*=0x665aae70e0) returned 1 [0256.545] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0256.545] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0256.545] ReadFile (in: hFile=0x570, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x11ac5, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ca30*=0x11ac5, lpOverlapped=0x0) returned 1 [0256.547] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4250) returned 1 [0256.547] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x11ac5, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x11ad0) returned 1 [0256.547] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0256.547] WriteFile (in: hFile=0x570, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x11ad0, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ca30*=0x11ad0, lpOverlapped=0x0) returned 1 [0256.547] WriteFile (in: hFile=0x570, lpBuffer=0x665da7ca70*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca70*, lpNumberOfBytesWritten=0x665da7ca34*=0x6, lpOverlapped=0x0) returned 1 [0256.547] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ca40 | out: pbData=0x0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0256.547] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7cac0, pdwDataLen=0x665da7ca40 | out: pbData=0x665da7cac0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0256.547] WriteFile (in: hFile=0x570, lpBuffer=0x665da7cac0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7cac0*, lpNumberOfBytesWritten=0x665da7ca34*=0x10c, lpOverlapped=0x0) returned 1 [0256.547] CloseHandle (hObject=0x570) returned 1 [0256.563] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0256.581] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0256.581] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0256.582] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0256.582] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0256.582] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\oMRUGGkp6CMZQBm.odp", dwFileAttributes=0x80) returned 1 [0256.582] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\oMRUGGkp6CMZQBm.odp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\omruggkp6cmzqbm.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0256.583] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=2754) returned 1 [0256.583] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=2754) returned 1 [0256.583] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x9a0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0256.583] ReadFile (in: hFile=0x570, lpBuffer=0x665da7ca98, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca98*, lpNumberOfBytesRead=0x665da7ca58*=0x19, lpOverlapped=0x0) returned 1 [0256.584] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0256.584] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ca20 | out: phKey=0x665da7ca20*=0x665aae6cf0) returned 1 [0256.584] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0256.584] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0256.584] ReadFile (in: hFile=0x570, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xac2, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ca30*=0xac2, lpOverlapped=0x0) returned 1 [0256.585] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4250) returned 1 [0256.585] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0xac2, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0xad0) returned 1 [0256.585] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0256.585] WriteFile (in: hFile=0x570, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xad0, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ca30*=0xad0, lpOverlapped=0x0) returned 1 [0256.585] WriteFile (in: hFile=0x570, lpBuffer=0x665da7ca70*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca70*, lpNumberOfBytesWritten=0x665da7ca34*=0x6, lpOverlapped=0x0) returned 1 [0256.585] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ca40 | out: pbData=0x0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0256.585] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7cac0, pdwDataLen=0x665da7ca40 | out: pbData=0x665da7cac0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0256.585] WriteFile (in: hFile=0x570, lpBuffer=0x665da7cac0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7cac0*, lpNumberOfBytesWritten=0x665da7ca34*=0x10c, lpOverlapped=0x0) returned 1 [0256.585] CloseHandle (hObject=0x570) returned 1 [0256.603] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0256.608] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0256.608] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0256.608] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0256.608] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0256.609] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\q4kOLVc.xlsx", dwFileAttributes=0x80) returned 1 [0256.609] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\q4kOLVc.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\q4kolvc.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0256.638] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=95877) returned 1 [0256.638] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=95877) returned 1 [0256.638] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x17563, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0256.638] ReadFile (in: hFile=0x570, lpBuffer=0x665da7ca98, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca98*, lpNumberOfBytesRead=0x665da7ca58*=0x19, lpOverlapped=0x0) returned 1 [0256.708] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0256.708] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ca20 | out: phKey=0x665da7ca20*=0x665aae6f20) returned 1 [0256.708] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0256.708] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0256.708] ReadFile (in: hFile=0x570, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x17685, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ca30*=0x17685, lpOverlapped=0x0) returned 1 [0256.710] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4250) returned 1 [0256.710] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x17685, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x17690) returned 1 [0256.711] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0256.711] WriteFile (in: hFile=0x570, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x17690, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ca30*=0x17690, lpOverlapped=0x0) returned 1 [0256.711] WriteFile (in: hFile=0x570, lpBuffer=0x665da7ca70*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca70*, lpNumberOfBytesWritten=0x665da7ca34*=0x6, lpOverlapped=0x0) returned 1 [0256.711] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ca40 | out: pbData=0x0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0256.711] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7cac0, pdwDataLen=0x665da7ca40 | out: pbData=0x665da7cac0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0256.711] WriteFile (in: hFile=0x570, lpBuffer=0x665da7cac0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7cac0*, lpNumberOfBytesWritten=0x665da7ca34*=0x10c, lpOverlapped=0x0) returned 1 [0256.711] CloseHandle (hObject=0x570) returned 1 [0256.727] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0256.731] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0256.731] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0256.731] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0256.731] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0256.731] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\QxeBL60JeNRe.gif", dwFileAttributes=0x80) returned 1 [0256.732] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\QxeBL60JeNRe.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\qxebl60jenre.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0256.733] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=17379) returned 1 [0256.733] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=17379) returned 1 [0256.733] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x42c1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0256.733] ReadFile (in: hFile=0x570, lpBuffer=0x665da7ca98, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca98*, lpNumberOfBytesRead=0x665da7ca58*=0x19, lpOverlapped=0x0) returned 1 [0256.736] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0256.736] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ca20 | out: phKey=0x665da7ca20*=0x665aae6f20) returned 1 [0256.736] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0256.736] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0256.736] ReadFile (in: hFile=0x570, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x43e3, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ca30*=0x43e3, lpOverlapped=0x0) returned 1 [0256.737] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4250) returned 1 [0256.737] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x43e3, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x43f0) returned 1 [0256.737] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0256.737] WriteFile (in: hFile=0x570, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x43f0, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ca30*=0x43f0, lpOverlapped=0x0) returned 1 [0256.737] WriteFile (in: hFile=0x570, lpBuffer=0x665da7ca70*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca70*, lpNumberOfBytesWritten=0x665da7ca34*=0x6, lpOverlapped=0x0) returned 1 [0256.737] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ca40 | out: pbData=0x0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0256.737] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7cac0, pdwDataLen=0x665da7ca40 | out: pbData=0x665da7cac0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0256.737] WriteFile (in: hFile=0x570, lpBuffer=0x665da7cac0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7cac0*, lpNumberOfBytesWritten=0x665da7ca34*=0x10c, lpOverlapped=0x0) returned 1 [0256.737] CloseHandle (hObject=0x570) returned 1 [0256.758] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0256.762] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0256.762] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0256.762] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0256.762] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0256.763] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\r544xGu4wbAfhky.wav", dwFileAttributes=0x80) returned 1 [0256.763] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\r544xGu4wbAfhky.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\r544xgu4wbafhky.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0256.764] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=88873) returned 1 [0256.764] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=88873) returned 1 [0256.764] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x15a07, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0256.764] ReadFile (in: hFile=0x570, lpBuffer=0x665da7ca98, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca98*, lpNumberOfBytesRead=0x665da7ca58*=0x19, lpOverlapped=0x0) returned 1 [0256.765] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0256.765] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ca20 | out: phKey=0x665da7ca20*=0x665aae6cf0) returned 1 [0256.765] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0256.765] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0256.765] ReadFile (in: hFile=0x570, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x15b29, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ca30*=0x15b29, lpOverlapped=0x0) returned 1 [0256.767] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4250) returned 1 [0256.767] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x15b29, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x15b30) returned 1 [0256.767] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0256.767] WriteFile (in: hFile=0x570, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x15b30, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ca30*=0x15b30, lpOverlapped=0x0) returned 1 [0256.768] WriteFile (in: hFile=0x570, lpBuffer=0x665da7ca70*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca70*, lpNumberOfBytesWritten=0x665da7ca34*=0x6, lpOverlapped=0x0) returned 1 [0256.768] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ca40 | out: pbData=0x0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0256.768] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7cac0, pdwDataLen=0x665da7ca40 | out: pbData=0x665da7cac0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0256.768] WriteFile (in: hFile=0x570, lpBuffer=0x665da7cac0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7cac0*, lpNumberOfBytesWritten=0x665da7ca34*=0x10c, lpOverlapped=0x0) returned 1 [0256.768] CloseHandle (hObject=0x570) returned 1 [0256.784] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0256.788] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0256.788] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0256.788] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0256.788] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0256.789] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\rRhoncuUZx.m4a", dwFileAttributes=0x80) returned 1 [0256.789] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\rRhoncuUZx.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\rrhoncuuzx.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0256.790] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=22553) returned 1 [0256.790] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=22553) returned 1 [0256.790] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x56f7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0256.790] ReadFile (in: hFile=0x570, lpBuffer=0x665da7ca98, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca98*, lpNumberOfBytesRead=0x665da7ca58*=0x19, lpOverlapped=0x0) returned 1 [0256.790] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0256.790] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ca20 | out: phKey=0x665da7ca20*=0x665aae6820) returned 1 [0256.791] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0256.791] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0256.791] ReadFile (in: hFile=0x570, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x5819, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ca30*=0x5819, lpOverlapped=0x0) returned 1 [0256.791] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4250) returned 1 [0256.791] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x5819, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x5820) returned 1 [0256.791] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0256.791] WriteFile (in: hFile=0x570, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x5820, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ca30*=0x5820, lpOverlapped=0x0) returned 1 [0256.792] WriteFile (in: hFile=0x570, lpBuffer=0x665da7ca70*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca70*, lpNumberOfBytesWritten=0x665da7ca34*=0x6, lpOverlapped=0x0) returned 1 [0256.792] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ca40 | out: pbData=0x0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0256.792] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7cac0, pdwDataLen=0x665da7ca40 | out: pbData=0x665da7cac0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0256.792] WriteFile (in: hFile=0x570, lpBuffer=0x665da7cac0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7cac0*, lpNumberOfBytesWritten=0x665da7ca34*=0x10c, lpOverlapped=0x0) returned 1 [0256.792] CloseHandle (hObject=0x570) returned 1 [0256.868] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0256.873] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0256.873] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0256.874] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0256.874] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0256.874] SetLastError (dwErrCode=0x0) [0256.874] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0256.874] GetLastError () returned 0xb7 [0256.874] CloseHandle (hObject=0x570) returned 1 [0256.874] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90d340 [0256.878] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0256.878] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0256.878] SetLastError (dwErrCode=0x0) [0256.878] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\skype\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0256.878] GetLastError () returned 0x0 [0256.878] WriteFile (in: hFile=0x60c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7c490*=0x324, lpOverlapped=0x0) returned 1 [0256.879] CloseHandle (hObject=0x60c) returned 1 [0256.879] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c500 [0256.879] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0256.879] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0256.880] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0256.880] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools\\roottools.conf", dwFileAttributes=0x80) returned 1 [0256.880] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools\\roottools.conf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\skype\\roottools\\roottools.conf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0256.881] GetFileSizeEx (in: hFile=0x620, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=76) returned 1 [0256.881] GetFileSizeEx (in: hFile=0x620, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=76) returned 1 [0256.881] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7bac0 | out: phKey=0x665da7bac0*=0x665aae6cf0) returned 1 [0256.881] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0256.881] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0256.881] ReadFile (in: hFile=0x620, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4c, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7bad0*=0x4c, lpOverlapped=0x0) returned 1 [0256.882] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4250) returned 1 [0256.882] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0x4c, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0x50) returned 1 [0256.882] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0256.882] WriteFile (in: hFile=0x620, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7bad0*=0x50, lpOverlapped=0x0) returned 1 [0256.882] WriteFile (in: hFile=0x620, lpBuffer=0x665da7bb10*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb10*, lpNumberOfBytesWritten=0x665da7bad4*=0x6, lpOverlapped=0x0) returned 1 [0256.882] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7bae0 | out: pbData=0x0*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0256.882] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7bb60, pdwDataLen=0x665da7bae0 | out: pbData=0x665da7bb60*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0256.883] WriteFile (in: hFile=0x620, lpBuffer=0x665da7bb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb60*, lpNumberOfBytesWritten=0x665da7bad4*=0x10c, lpOverlapped=0x0) returned 1 [0256.883] CloseHandle (hObject=0x620) returned 1 [0256.897] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0256.901] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0256.901] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0256.902] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0256.902] FindClose (in: hFindFile=0x665d90c500 | out: hFindFile=0x665d90c500) returned 1 [0256.902] SetLastError (dwErrCode=0x0) [0256.902] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\skype\\roottools\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0256.903] GetLastError () returned 0x0 [0256.903] WriteFile (in: hFile=0x60c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7c490*=0x324, lpOverlapped=0x0) returned 1 [0256.904] CloseHandle (hObject=0x60c) returned 1 [0256.904] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0256.904] FindClose (in: hFindFile=0x665d90d340 | out: hFindFile=0x665d90d340) returned 1 [0256.904] SetLastError (dwErrCode=0x0) [0256.904] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\skype\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0256.904] GetLastError () returned 0xb7 [0256.904] CloseHandle (hObject=0x570) returned 1 [0256.904] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0256.904] SetLastError (dwErrCode=0x0) [0256.904] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0256.904] GetLastError () returned 0xb7 [0256.904] CloseHandle (hObject=0x570) returned 1 [0256.904] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90d340 [0256.913] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0256.913] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0256.913] SetLastError (dwErrCode=0x0) [0256.913] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\sun\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0256.914] GetLastError () returned 0x0 [0256.914] WriteFile (in: hFile=0x60c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7c490*=0x324, lpOverlapped=0x0) returned 1 [0256.915] CloseHandle (hObject=0x60c) returned 1 [0256.915] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\Java\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90bde0 [0256.915] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0256.915] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0256.915] SetLastError (dwErrCode=0x0) [0256.915] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\Java\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\sun\\java\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0256.916] GetLastError () returned 0x0 [0256.916] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0256.917] CloseHandle (hObject=0x620) returned 1 [0256.917] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\Java\\Deployment\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c380 [0256.917] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0256.917] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0256.917] FindClose (in: hFindFile=0x665d90c380 | out: hFindFile=0x665d90c380) returned 1 [0256.917] SetLastError (dwErrCode=0x0) [0256.917] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\Java\\Deployment\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\sun\\java\\deployment\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0256.917] GetLastError () returned 0x0 [0256.917] WriteFile (in: hFile=0x620, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0256.918] CloseHandle (hObject=0x620) returned 1 [0256.918] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0256.918] FindClose (in: hFindFile=0x665d90bde0 | out: hFindFile=0x665d90bde0) returned 1 [0256.918] SetLastError (dwErrCode=0x0) [0256.918] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\Java\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\sun\\java\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0256.919] GetLastError () returned 0xb7 [0256.919] CloseHandle (hObject=0x60c) returned 1 [0256.919] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0256.919] FindClose (in: hFindFile=0x665d90d340 | out: hFindFile=0x665d90d340) returned 1 [0256.919] SetLastError (dwErrCode=0x0) [0256.919] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\sun\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0256.919] GetLastError () returned 0xb7 [0256.919] CloseHandle (hObject=0x570) returned 1 [0256.919] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0256.919] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0256.919] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\ToOZVpEVKS_58i.bmp", dwFileAttributes=0x80) returned 1 [0256.920] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\ToOZVpEVKS_58i.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\toozvpevks_58i.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0256.920] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=40544) returned 1 [0256.920] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=40544) returned 1 [0256.920] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x9d3e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0256.920] ReadFile (in: hFile=0x570, lpBuffer=0x665da7ca98, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca98*, lpNumberOfBytesRead=0x665da7ca58*=0x19, lpOverlapped=0x0) returned 1 [0256.921] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0256.921] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ca20 | out: phKey=0x665da7ca20*=0x665aae6cf0) returned 1 [0256.921] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0256.922] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0256.922] ReadFile (in: hFile=0x570, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x9e60, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ca30*=0x9e60, lpOverlapped=0x0) returned 1 [0256.923] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4250) returned 1 [0256.923] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x9e60, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x9e70) returned 1 [0256.923] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0256.923] WriteFile (in: hFile=0x570, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x9e70, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ca30*=0x9e70, lpOverlapped=0x0) returned 1 [0256.923] WriteFile (in: hFile=0x570, lpBuffer=0x665da7ca70*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca70*, lpNumberOfBytesWritten=0x665da7ca34*=0x6, lpOverlapped=0x0) returned 1 [0256.923] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ca40 | out: pbData=0x0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0256.923] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7cac0, pdwDataLen=0x665da7ca40 | out: pbData=0x665da7cac0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0256.923] WriteFile (in: hFile=0x570, lpBuffer=0x665da7cac0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7cac0*, lpNumberOfBytesWritten=0x665da7ca34*=0x10c, lpOverlapped=0x0) returned 1 [0256.924] CloseHandle (hObject=0x570) returned 1 [0256.979] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0256.989] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0256.989] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0256.989] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0256.989] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0256.989] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\U9ntptkSge0ACsO.flv", dwFileAttributes=0x80) returned 1 [0256.991] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\U9ntptkSge0ACsO.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\u9ntptksge0acso.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0256.992] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=44250) returned 1 [0256.992] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=44250) returned 1 [0256.992] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0xabb8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0256.992] ReadFile (in: hFile=0x570, lpBuffer=0x665da7ca98, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca98*, lpNumberOfBytesRead=0x665da7ca58*=0x19, lpOverlapped=0x0) returned 1 [0256.993] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0256.993] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ca20 | out: phKey=0x665da7ca20*=0x665aae7150) returned 1 [0256.993] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0256.993] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0256.994] ReadFile (in: hFile=0x570, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xacda, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ca30*=0xacda, lpOverlapped=0x0) returned 1 [0256.995] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4250) returned 1 [0256.995] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0xacda, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0xace0) returned 1 [0256.995] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0256.995] WriteFile (in: hFile=0x570, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xace0, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ca30*=0xace0, lpOverlapped=0x0) returned 1 [0256.995] WriteFile (in: hFile=0x570, lpBuffer=0x665da7ca70*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca70*, lpNumberOfBytesWritten=0x665da7ca34*=0x6, lpOverlapped=0x0) returned 1 [0256.995] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ca40 | out: pbData=0x0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0256.995] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7cac0, pdwDataLen=0x665da7ca40 | out: pbData=0x665da7cac0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0256.995] WriteFile (in: hFile=0x570, lpBuffer=0x665da7cac0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7cac0*, lpNumberOfBytesWritten=0x665da7ca34*=0x10c, lpOverlapped=0x0) returned 1 [0256.996] CloseHandle (hObject=0x570) returned 1 [0257.019] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0257.030] CryptDestroyKey (hKey=0x665aae7150) returned 1 [0257.030] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0257.030] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0257.030] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0257.034] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\uheWdgqW2Y_pI6DnkqhO.png", dwFileAttributes=0x80) returned 1 [0257.035] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\uheWdgqW2Y_pI6DnkqhO.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\uhewdgqw2y_pi6dnkqho.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0257.035] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=73497) returned 1 [0257.035] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=73497) returned 1 [0257.035] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x11df7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0257.035] ReadFile (in: hFile=0x570, lpBuffer=0x665da7ca98, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca98*, lpNumberOfBytesRead=0x665da7ca58*=0x19, lpOverlapped=0x0) returned 1 [0257.036] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0257.037] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ca20 | out: phKey=0x665da7ca20*=0x665aae65f0) returned 1 [0257.037] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0257.037] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0257.037] ReadFile (in: hFile=0x570, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x11f19, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ca30*=0x11f19, lpOverlapped=0x0) returned 1 [0257.038] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4250) returned 1 [0257.038] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x11f19, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x11f20) returned 1 [0257.038] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0257.038] WriteFile (in: hFile=0x570, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x11f20, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ca30*=0x11f20, lpOverlapped=0x0) returned 1 [0257.039] WriteFile (in: hFile=0x570, lpBuffer=0x665da7ca70*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca70*, lpNumberOfBytesWritten=0x665da7ca34*=0x6, lpOverlapped=0x0) returned 1 [0257.039] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ca40 | out: pbData=0x0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0257.039] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7cac0, pdwDataLen=0x665da7ca40 | out: pbData=0x665da7cac0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0257.039] WriteFile (in: hFile=0x570, lpBuffer=0x665da7cac0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7cac0*, lpNumberOfBytesWritten=0x665da7ca34*=0x10c, lpOverlapped=0x0) returned 1 [0257.039] CloseHandle (hObject=0x570) returned 1 [0257.089] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0257.094] CryptDestroyKey (hKey=0x665aae65f0) returned 1 [0257.095] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0257.095] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0257.095] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0257.095] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\UtuqO.mp3", dwFileAttributes=0x80) returned 1 [0257.096] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\UtuqO.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\utuqo.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0257.097] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=49392) returned 1 [0257.097] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=49392) returned 1 [0257.097] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0xbfce, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0257.097] ReadFile (in: hFile=0x570, lpBuffer=0x665da7ca98, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca98*, lpNumberOfBytesRead=0x665da7ca58*=0x19, lpOverlapped=0x0) returned 1 [0257.098] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0257.098] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ca20 | out: phKey=0x665da7ca20*=0x665aae70e0) returned 1 [0257.098] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0257.098] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0257.099] ReadFile (in: hFile=0x570, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xc0f0, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ca30*=0xc0f0, lpOverlapped=0x0) returned 1 [0257.100] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4250) returned 1 [0257.100] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0xc0f0, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0xc100) returned 1 [0257.100] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0257.100] WriteFile (in: hFile=0x570, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xc100, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ca30*=0xc100, lpOverlapped=0x0) returned 1 [0257.100] WriteFile (in: hFile=0x570, lpBuffer=0x665da7ca70*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca70*, lpNumberOfBytesWritten=0x665da7ca34*=0x6, lpOverlapped=0x0) returned 1 [0257.100] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ca40 | out: pbData=0x0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0257.101] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7cac0, pdwDataLen=0x665da7ca40 | out: pbData=0x665da7cac0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0257.101] WriteFile (in: hFile=0x570, lpBuffer=0x665da7cac0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7cac0*, lpNumberOfBytesWritten=0x665da7ca34*=0x10c, lpOverlapped=0x0) returned 1 [0257.101] CloseHandle (hObject=0x570) returned 1 [0257.119] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0257.124] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0257.124] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0257.124] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0257.124] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0257.124] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\YAqcLBv0807jzDLx-.swf", dwFileAttributes=0x80) returned 1 [0257.125] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\YAqcLBv0807jzDLx-.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\yaqclbv0807jzdlx-.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0257.126] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=14959) returned 1 [0257.126] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=14959) returned 1 [0257.126] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x394d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0257.126] ReadFile (in: hFile=0x570, lpBuffer=0x665da7ca98, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca98*, lpNumberOfBytesRead=0x665da7ca58*=0x19, lpOverlapped=0x0) returned 1 [0257.127] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0257.127] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ca20 | out: phKey=0x665da7ca20*=0x665aae6cf0) returned 1 [0257.128] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0257.128] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0257.128] ReadFile (in: hFile=0x570, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3a6f, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ca30*=0x3a6f, lpOverlapped=0x0) returned 1 [0257.129] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4250) returned 1 [0257.129] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x3a6f, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x3a70) returned 1 [0257.129] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0257.129] WriteFile (in: hFile=0x570, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3a70, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ca30*=0x3a70, lpOverlapped=0x0) returned 1 [0257.129] WriteFile (in: hFile=0x570, lpBuffer=0x665da7ca70*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca70*, lpNumberOfBytesWritten=0x665da7ca34*=0x6, lpOverlapped=0x0) returned 1 [0257.129] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ca40 | out: pbData=0x0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0257.129] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7cac0, pdwDataLen=0x665da7ca40 | out: pbData=0x665da7cac0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0257.129] WriteFile (in: hFile=0x570, lpBuffer=0x665da7cac0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7cac0*, lpNumberOfBytesWritten=0x665da7ca34*=0x10c, lpOverlapped=0x0) returned 1 [0257.129] CloseHandle (hObject=0x570) returned 1 [0257.151] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0257.156] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0257.156] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0257.156] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0257.156] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0257.156] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\ZFU7M2eOQNtlw3rG5MrK.wav", dwFileAttributes=0x80) returned 1 [0257.157] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\ZFU7M2eOQNtlw3rG5MrK.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\zfu7m2eoqntlw3rg5mrk.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0257.158] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=8610) returned 1 [0257.158] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=8610) returned 1 [0257.158] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x2080, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0257.158] ReadFile (in: hFile=0x570, lpBuffer=0x665da7ca98, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca98*, lpNumberOfBytesRead=0x665da7ca58*=0x19, lpOverlapped=0x0) returned 1 [0257.159] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0257.159] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ca20 | out: phKey=0x665da7ca20*=0x665aae6cf0) returned 1 [0257.159] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0257.159] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0257.159] ReadFile (in: hFile=0x570, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x21a2, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ca30*=0x21a2, lpOverlapped=0x0) returned 1 [0257.160] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4250) returned 1 [0257.160] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x21a2, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x21b0) returned 1 [0257.160] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0257.160] WriteFile (in: hFile=0x570, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x21b0, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ca30*=0x21b0, lpOverlapped=0x0) returned 1 [0257.160] WriteFile (in: hFile=0x570, lpBuffer=0x665da7ca70*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca70*, lpNumberOfBytesWritten=0x665da7ca34*=0x6, lpOverlapped=0x0) returned 1 [0257.160] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ca40 | out: pbData=0x0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0257.160] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7cac0, pdwDataLen=0x665da7ca40 | out: pbData=0x665da7cac0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0257.160] WriteFile (in: hFile=0x570, lpBuffer=0x665da7cac0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7cac0*, lpNumberOfBytesWritten=0x665da7ca34*=0x10c, lpOverlapped=0x0) returned 1 [0257.160] CloseHandle (hObject=0x570) returned 1 [0257.178] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0257.183] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0257.183] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0257.184] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0257.184] FindClose (in: hFindFile=0x665d90cd40 | out: hFindFile=0x665d90cd40) returned 1 [0257.184] SetLastError (dwErrCode=0x0) [0257.184] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0257.184] GetLastError () returned 0xb7 [0257.184] CloseHandle (hObject=0x47c) returned 1 [0257.184] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0257.184] FindNextFileW (in: hFindFile=0x665abb4da0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0257.184] FindClose (in: hFindFile=0x665abb4da0 | out: hFindFile=0x665abb4da0) returned 1 [0257.184] SetLastError (dwErrCode=0x0) [0257.184] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0257.185] GetLastError () returned 0xb7 [0257.185] CloseHandle (hObject=0x470) returned 1 [0257.185] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0257.185] SetLastError (dwErrCode=0x0) [0257.185] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0257.186] GetLastError () returned 0xb7 [0257.186] CloseHandle (hObject=0x470) returned 1 [0257.186] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Application Data\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0xffffffffffffffff [0257.186] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0257.186] SetLastError (dwErrCode=0x0) [0257.186] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Application Data\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\application data\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0257.187] GetLastError () returned 0xb7 [0257.187] CloseHandle (hObject=0x470) returned 1 [0257.187] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0257.187] SetLastError (dwErrCode=0x0) [0257.187] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0257.187] GetLastError () returned 0xb7 [0257.187] CloseHandle (hObject=0x470) returned 1 [0257.187] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665d90c860 [0257.187] FindNextFileW (in: hFindFile=0x665d90c860, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0257.187] FindNextFileW (in: hFindFile=0x665d90c860, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0257.187] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0257.188] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\Aclviho ASldjfl.contact", dwFileAttributes=0x80) returned 1 [0257.191] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\Aclviho ASldjfl.contact" (normalized: "c:\\users\\ciihmnxmn6ps\\contacts\\aclviho asldjfl.contact"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0257.192] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=1178) returned 1 [0257.192] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=1178) returned 1 [0257.192] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x378, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0257.192] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0257.205] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0257.205] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae6cf0) returned 1 [0257.205] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0257.205] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0257.206] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x49a, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0x49a, lpOverlapped=0x0) returned 1 [0257.206] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0257.206] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x49a, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x4a0) returned 1 [0257.206] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0257.206] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4a0, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0x4a0, lpOverlapped=0x0) returned 1 [0257.206] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0257.206] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0257.206] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0257.206] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0257.206] CloseHandle (hObject=0x47c) returned 1 [0257.239] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0257.245] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0257.245] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0257.245] FindNextFileW (in: hFindFile=0x665d90c860, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0257.245] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0257.246] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\asdlfk poopvy.contact", dwFileAttributes=0x80) returned 1 [0257.246] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\asdlfk poopvy.contact" (normalized: "c:\\users\\ciihmnxmn6ps\\contacts\\asdlfk poopvy.contact"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0257.247] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=1171) returned 1 [0257.247] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=1171) returned 1 [0257.247] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x371, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0257.247] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0257.249] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0257.249] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae6820) returned 1 [0257.249] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0257.249] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0257.249] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x493, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0x493, lpOverlapped=0x0) returned 1 [0257.249] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0257.249] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x493, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x4a0) returned 1 [0257.250] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0257.250] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4a0, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0x4a0, lpOverlapped=0x0) returned 1 [0257.250] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0257.250] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0257.250] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0257.250] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0257.250] CloseHandle (hObject=0x47c) returned 1 [0257.293] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0257.299] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0257.299] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0257.299] FindNextFileW (in: hFindFile=0x665d90c860, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0257.299] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0257.300] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\chucu jadnvk.contact", dwFileAttributes=0x80) returned 1 [0257.301] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\chucu jadnvk.contact" (normalized: "c:\\users\\ciihmnxmn6ps\\contacts\\chucu jadnvk.contact"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0257.302] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=1177) returned 1 [0257.302] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=1177) returned 1 [0257.302] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x377, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0257.302] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0257.303] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0257.303] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae6820) returned 1 [0257.303] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0257.304] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0257.304] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x499, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0x499, lpOverlapped=0x0) returned 1 [0257.304] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0257.304] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x499, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x4a0) returned 1 [0257.304] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0257.304] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4a0, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0x4a0, lpOverlapped=0x0) returned 1 [0257.304] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0257.304] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0257.304] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0257.305] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0257.305] CloseHandle (hObject=0x47c) returned 1 [0257.323] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0257.329] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0257.329] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0257.329] FindNextFileW (in: hFindFile=0x665d90c860, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0257.329] FindNextFileW (in: hFindFile=0x665d90c860, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0257.329] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0257.329] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\lulcit amkdfe.contact", dwFileAttributes=0x80) returned 1 [0257.330] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\lulcit amkdfe.contact" (normalized: "c:\\users\\ciihmnxmn6ps\\contacts\\lulcit amkdfe.contact"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0257.330] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=1174) returned 1 [0257.330] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=1174) returned 1 [0257.330] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x374, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0257.330] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0257.352] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0257.352] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae65f0) returned 1 [0257.352] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0257.352] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0257.352] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x496, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0x496, lpOverlapped=0x0) returned 1 [0257.352] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0257.352] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x496, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x4a0) returned 1 [0257.352] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0257.352] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4a0, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0x4a0, lpOverlapped=0x0) returned 1 [0257.352] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0257.352] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0257.352] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0257.352] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0257.352] CloseHandle (hObject=0x47c) returned 1 [0257.367] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0257.371] CryptDestroyKey (hKey=0x665aae65f0) returned 1 [0257.371] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0257.371] FindNextFileW (in: hFindFile=0x665d90c860, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0257.371] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0257.372] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\sikvnb huvuib.contact", dwFileAttributes=0x80) returned 1 [0257.372] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\sikvnb huvuib.contact" (normalized: "c:\\users\\ciihmnxmn6ps\\contacts\\sikvnb huvuib.contact"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0257.373] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=1311) returned 1 [0257.373] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=1311) returned 1 [0257.373] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x3fd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0257.373] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0257.385] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0257.385] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae6510) returned 1 [0257.385] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0257.385] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0257.385] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x51f, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0x51f, lpOverlapped=0x0) returned 1 [0257.385] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0257.385] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x51f, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x520) returned 1 [0257.385] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0257.385] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x520, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0x520, lpOverlapped=0x0) returned 1 [0257.385] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0257.386] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0257.386] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0257.386] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0257.386] CloseHandle (hObject=0x47c) returned 1 [0257.401] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0257.408] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0257.408] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0257.408] FindNextFileW (in: hFindFile=0x665d90c860, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0257.408] FindClose (in: hFindFile=0x665d90c860 | out: hFindFile=0x665d90c860) returned 1 [0257.408] SetLastError (dwErrCode=0x0) [0257.408] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\contacts\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0257.409] GetLastError () returned 0x0 [0257.409] WriteFile (in: hFile=0x470, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7dba0*=0x324, lpOverlapped=0x0) returned 1 [0257.410] CloseHandle (hObject=0x470) returned 1 [0257.410] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0257.410] SetLastError (dwErrCode=0x0) [0257.410] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0257.410] GetLastError () returned 0xb7 [0257.410] CloseHandle (hObject=0x470) returned 1 [0257.410] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Cookies\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0xffffffffffffffff [0257.410] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0257.410] SetLastError (dwErrCode=0x0) [0257.410] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Cookies\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\cookies\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0257.414] GetLastError () returned 0x0 [0257.414] WriteFile (in: hFile=0x470, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7dba0*=0x324, lpOverlapped=0x0) returned 1 [0257.414] CloseHandle (hObject=0x470) returned 1 [0257.415] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0257.415] SetLastError (dwErrCode=0x0) [0257.415] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0257.415] GetLastError () returned 0xb7 [0257.415] CloseHandle (hObject=0x470) returned 1 [0257.415] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665d90c0e0 [0257.415] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0257.415] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0257.415] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0257.415] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\-4W8NkXNjlCS8.odt", dwFileAttributes=0x80) returned 1 [0257.416] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\-4W8NkXNjlCS8.odt" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\-4w8nkxnjlcs8.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0257.416] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=85078) returned 1 [0257.416] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=85078) returned 1 [0257.416] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x14b34, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0257.416] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0257.418] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0257.418] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae6cf0) returned 1 [0257.418] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0257.418] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0257.418] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x14c56, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0x14c56, lpOverlapped=0x0) returned 1 [0257.420] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0257.420] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x14c56, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x14c60) returned 1 [0257.420] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0257.420] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x14c60, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0x14c60, lpOverlapped=0x0) returned 1 [0257.420] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0257.420] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0257.420] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0257.420] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0257.420] CloseHandle (hObject=0x47c) returned 1 [0257.435] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0257.439] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0257.439] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0257.439] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0257.439] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0257.440] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\0CLOksNpRAHM-oP4.wav", dwFileAttributes=0x80) returned 1 [0257.440] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\0CLOksNpRAHM-oP4.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\0cloksnprahm-op4.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0257.441] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=63091) returned 1 [0257.441] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=63091) returned 1 [0257.441] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0xf551, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0257.441] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0257.442] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0257.442] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae6cf0) returned 1 [0257.442] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0257.442] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0257.442] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xf673, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0xf673, lpOverlapped=0x0) returned 1 [0257.443] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0257.443] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0xf673, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0xf680) returned 1 [0257.443] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0257.443] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xf680, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0xf680, lpOverlapped=0x0) returned 1 [0257.444] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0257.444] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0257.444] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0257.444] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0257.444] CloseHandle (hObject=0x47c) returned 1 [0257.461] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0257.465] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0257.465] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0257.465] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0257.465] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0257.466] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\5Y-AqHoaE.jpg", dwFileAttributes=0x80) returned 1 [0257.467] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\5Y-AqHoaE.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\5y-aqhoae.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0257.467] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=86807) returned 1 [0257.467] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=86807) returned 1 [0257.467] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x151f5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0257.467] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0257.468] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0257.468] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae6f20) returned 1 [0257.468] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0257.468] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0257.468] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x15317, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0x15317, lpOverlapped=0x0) returned 1 [0257.471] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0257.471] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x15317, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x15320) returned 1 [0257.471] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0257.471] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x15320, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0x15320, lpOverlapped=0x0) returned 1 [0257.471] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0257.471] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0257.471] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0257.471] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0257.471] CloseHandle (hObject=0x47c) returned 1 [0257.487] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0257.491] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0257.491] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0257.491] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0257.491] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0257.491] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\9alO6HOwieI.bmp", dwFileAttributes=0x80) returned 1 [0257.492] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\9alO6HOwieI.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\9alo6howiei.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0257.493] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=91961) returned 1 [0257.493] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=91961) returned 1 [0257.493] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x16617, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0257.493] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0257.494] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0257.494] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae6f20) returned 1 [0257.494] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0257.494] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0257.494] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x16739, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0x16739, lpOverlapped=0x0) returned 1 [0257.495] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0257.495] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x16739, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x16740) returned 1 [0257.496] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0257.496] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x16740, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0x16740, lpOverlapped=0x0) returned 1 [0257.496] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0257.496] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0257.496] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0257.496] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0257.496] CloseHandle (hObject=0x47c) returned 1 [0257.515] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0257.519] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0257.519] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0257.519] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0257.519] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0257.519] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\CHD6Q2ueDHsm.gif", dwFileAttributes=0x80) returned 1 [0257.706] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\CHD6Q2ueDHsm.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\chd6q2uedhsm.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0257.710] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=101669) returned 1 [0257.710] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=101669) returned 1 [0257.710] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x18c03, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0257.710] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0257.710] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0257.710] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae6cf0) returned 1 [0257.710] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0257.711] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0257.711] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x18d25, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0x18d25, lpOverlapped=0x0) returned 1 [0257.712] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0257.712] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x18d25, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x18d30) returned 1 [0257.713] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0257.713] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x18d30, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0x18d30, lpOverlapped=0x0) returned 1 [0257.713] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0257.713] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0257.713] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0257.713] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0257.713] CloseHandle (hObject=0x47c) returned 1 [0257.764] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0257.770] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0257.770] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0257.770] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0257.770] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0257.770] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Dczi.mp3", dwFileAttributes=0x80) returned 1 [0257.813] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Dczi.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\dczi.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0257.814] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=39285) returned 1 [0257.814] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=39285) returned 1 [0257.814] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x9853, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0257.814] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0257.815] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0257.815] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae6cf0) returned 1 [0257.815] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0257.815] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0257.815] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x9975, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0x9975, lpOverlapped=0x0) returned 1 [0257.816] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0257.816] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x9975, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x9980) returned 1 [0257.816] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0257.816] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x9980, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0x9980, lpOverlapped=0x0) returned 1 [0257.816] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0257.816] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0257.816] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0257.816] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0257.816] CloseHandle (hObject=0x47c) returned 1 [0257.872] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0257.908] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0257.908] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0257.908] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0257.908] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0257.908] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0257.908] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Dy-8TQgOHbKXvwa w5E.csv", dwFileAttributes=0x80) returned 1 [0257.912] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Dy-8TQgOHbKXvwa w5E.csv" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\dy-8tqgohbkxvwa w5e.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0257.912] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=13722) returned 1 [0257.912] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=13722) returned 1 [0257.912] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x3478, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0257.912] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0257.913] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0257.913] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae6cf0) returned 1 [0257.913] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0257.914] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0257.914] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x359a, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0x359a, lpOverlapped=0x0) returned 1 [0257.914] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0257.914] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x359a, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x35a0) returned 1 [0257.914] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0257.914] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x35a0, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0x35a0, lpOverlapped=0x0) returned 1 [0257.914] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0257.915] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0257.915] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0257.915] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0257.915] CloseHandle (hObject=0x47c) returned 1 [0257.933] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0257.939] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0257.939] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0257.939] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0257.939] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0257.939] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\e2hQUMEb6w.doc", dwFileAttributes=0x80) returned 1 [0257.943] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\e2hQUMEb6w.doc" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\e2hqumeb6w.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0257.943] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=2771) returned 1 [0257.943] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=2771) returned 1 [0257.943] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x9b1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0257.943] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0257.944] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0257.944] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae6510) returned 1 [0257.944] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0257.944] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0257.944] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xad3, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0xad3, lpOverlapped=0x0) returned 1 [0257.944] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0257.944] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0xad3, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0xae0) returned 1 [0257.944] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0257.944] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xae0, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0xae0, lpOverlapped=0x0) returned 1 [0257.945] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0257.945] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0257.945] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0257.945] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0257.945] CloseHandle (hObject=0x47c) returned 1 [0257.966] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0257.971] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0257.971] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0257.971] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0257.971] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0257.971] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Elj1p3vQhnfYz29_7.flv", dwFileAttributes=0x80) returned 1 [0257.978] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Elj1p3vQhnfYz29_7.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\elj1p3vqhnfyz29_7.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0257.979] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=21704) returned 1 [0257.979] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=21704) returned 1 [0257.979] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x53a6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0257.979] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0258.016] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0258.016] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae65f0) returned 1 [0258.016] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0258.017] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0258.017] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x54c8, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0x54c8, lpOverlapped=0x0) returned 1 [0258.018] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0258.018] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x54c8, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x54d0) returned 1 [0258.018] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0258.018] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x54d0, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0x54d0, lpOverlapped=0x0) returned 1 [0258.018] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0258.018] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0258.018] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0258.018] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0258.018] CloseHandle (hObject=0x47c) returned 1 [0258.044] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0258.060] CryptDestroyKey (hKey=0x665aae65f0) returned 1 [0258.060] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0258.060] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0258.060] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0258.060] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0258.060] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\f4E1OdHK2.pptx", dwFileAttributes=0x80) returned 1 [0258.061] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\f4E1OdHK2.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\f4e1odhk2.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0258.062] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=97983) returned 1 [0258.062] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=97983) returned 1 [0258.062] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x17d9d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0258.062] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0258.062] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0258.062] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae6cf0) returned 1 [0258.062] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0258.063] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0258.063] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x17ebf, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0x17ebf, lpOverlapped=0x0) returned 1 [0258.065] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0258.065] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x17ebf, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x17ec0) returned 1 [0258.065] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0258.065] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x17ec0, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0x17ec0, lpOverlapped=0x0) returned 1 [0258.065] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0258.066] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0258.066] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0258.066] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0258.066] CloseHandle (hObject=0x47c) returned 1 [0258.083] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0258.087] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0258.087] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0258.087] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0258.087] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0258.087] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\fr fYlUMztEl.png", dwFileAttributes=0x80) returned 1 [0258.093] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\fr fYlUMztEl.png" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\fr fylumztel.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0258.094] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=61209) returned 1 [0258.094] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=61209) returned 1 [0258.094] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0xedf7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0258.094] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0258.095] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0258.095] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae6cf0) returned 1 [0258.095] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0258.095] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0258.095] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xef19, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0xef19, lpOverlapped=0x0) returned 1 [0258.096] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0258.096] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0xef19, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0xef20) returned 1 [0258.096] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0258.096] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xef20, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0xef20, lpOverlapped=0x0) returned 1 [0258.096] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0258.097] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0258.097] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0258.097] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0258.097] CloseHandle (hObject=0x47c) returned 1 [0258.116] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0258.120] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0258.120] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0258.120] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0258.120] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0258.120] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Fszt.mp3", dwFileAttributes=0x80) returned 1 [0258.121] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Fszt.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\fszt.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0258.121] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=71119) returned 1 [0258.121] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=71119) returned 1 [0258.121] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x114ad, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0258.121] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0258.122] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0258.122] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae6f20) returned 1 [0258.122] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0258.122] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0258.122] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x115cf, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0x115cf, lpOverlapped=0x0) returned 1 [0258.123] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0258.123] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x115cf, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x115d0) returned 1 [0258.124] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0258.124] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x115d0, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0x115d0, lpOverlapped=0x0) returned 1 [0258.124] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0258.124] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0258.124] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0258.124] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0258.124] CloseHandle (hObject=0x47c) returned 1 [0258.140] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0258.145] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0258.145] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0258.145] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0258.145] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0258.145] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\g NYk0zRo.jpg", dwFileAttributes=0x80) returned 1 [0258.146] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\g NYk0zRo.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\g nyk0zro.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0258.147] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=18262) returned 1 [0258.147] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=18262) returned 1 [0258.147] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x4634, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0258.147] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0258.148] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0258.203] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae65f0) returned 1 [0258.203] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0258.203] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0258.203] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4756, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0x4756, lpOverlapped=0x0) returned 1 [0258.204] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0258.204] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x4756, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x4760) returned 1 [0258.204] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0258.204] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4760, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0x4760, lpOverlapped=0x0) returned 1 [0258.204] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0258.204] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0258.204] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0258.204] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0258.204] CloseHandle (hObject=0x47c) returned 1 [0258.220] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0258.224] CryptDestroyKey (hKey=0x665aae65f0) returned 1 [0258.224] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0258.224] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0258.224] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0258.224] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\GEn4YxWz0.mp3", dwFileAttributes=0x80) returned 1 [0258.225] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\GEn4YxWz0.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\gen4yxwz0.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0258.225] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=79316) returned 1 [0258.225] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=79316) returned 1 [0258.225] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x134b2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0258.226] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0258.226] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0258.226] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae6510) returned 1 [0258.226] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0258.227] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0258.227] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x135d4, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0x135d4, lpOverlapped=0x0) returned 1 [0258.230] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0258.230] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x135d4, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x135e0) returned 1 [0258.230] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0258.230] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x135e0, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0x135e0, lpOverlapped=0x0) returned 1 [0258.230] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0258.230] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0258.230] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0258.230] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0258.230] CloseHandle (hObject=0x47c) returned 1 [0258.245] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0258.249] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0258.249] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0258.250] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0258.250] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0258.250] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\gjmDbASC7gdRBN-ct.pdf", dwFileAttributes=0x80) returned 1 [0258.251] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\gjmDbASC7gdRBN-ct.pdf" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\gjmdbasc7gdrbn-ct.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0258.251] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=13085) returned 1 [0258.252] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=13085) returned 1 [0258.252] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x31fb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0258.252] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0258.253] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0258.253] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae6cf0) returned 1 [0258.253] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0258.253] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0258.253] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x331d, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0x331d, lpOverlapped=0x0) returned 1 [0258.254] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0258.254] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x331d, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x3320) returned 1 [0258.254] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0258.254] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3320, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0x3320, lpOverlapped=0x0) returned 1 [0258.254] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0258.254] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0258.254] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0258.254] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0258.254] CloseHandle (hObject=0x47c) returned 1 [0258.295] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0258.300] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0258.300] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0258.300] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0258.300] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0258.300] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\hadbisLcBrq25jSC_ETu.swf", dwFileAttributes=0x80) returned 1 [0258.301] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\hadbisLcBrq25jSC_ETu.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\hadbislcbrq25jsc_etu.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0258.302] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=22089) returned 1 [0258.302] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=22089) returned 1 [0258.302] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x5527, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0258.302] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0258.303] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0258.303] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae6cf0) returned 1 [0258.303] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0258.303] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0258.303] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x5649, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0x5649, lpOverlapped=0x0) returned 1 [0258.304] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0258.304] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x5649, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x5650) returned 1 [0258.304] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0258.304] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x5650, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0x5650, lpOverlapped=0x0) returned 1 [0258.304] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0258.304] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0258.304] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0258.304] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0258.304] CloseHandle (hObject=0x47c) returned 1 [0258.321] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0258.325] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0258.325] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0258.325] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0258.325] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0258.326] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\ji_8zuE.wav", dwFileAttributes=0x80) returned 1 [0258.326] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\ji_8zuE.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\ji_8zue.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0258.327] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=67464) returned 1 [0258.327] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=67464) returned 1 [0258.327] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x10666, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0258.327] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0258.328] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0258.328] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae6f20) returned 1 [0258.328] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0258.328] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0258.328] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x10788, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0x10788, lpOverlapped=0x0) returned 1 [0258.330] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0258.330] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x10788, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x10790) returned 1 [0258.330] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0258.330] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x10790, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0x10790, lpOverlapped=0x0) returned 1 [0258.330] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0258.330] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0258.330] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0258.330] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0258.331] CloseHandle (hObject=0x47c) returned 1 [0258.347] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0258.351] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0258.351] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0258.351] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0258.351] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0258.351] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\KE4oJV6hkXN3DU.swf", dwFileAttributes=0x80) returned 1 [0258.352] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\KE4oJV6hkXN3DU.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\ke4ojv6hkxn3du.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0258.352] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=88392) returned 1 [0258.352] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=88392) returned 1 [0258.352] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x15826, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0258.352] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0258.353] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0258.353] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae6cf0) returned 1 [0258.353] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0258.354] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0258.354] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x15948, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0x15948, lpOverlapped=0x0) returned 1 [0258.355] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0258.355] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x15948, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x15950) returned 1 [0258.355] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0258.355] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x15950, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0x15950, lpOverlapped=0x0) returned 1 [0258.356] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0258.356] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0258.356] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0258.356] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0258.356] CloseHandle (hObject=0x47c) returned 1 [0258.375] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0258.380] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0258.380] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0258.380] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0258.380] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0258.380] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\KG0ehqrPgdnKO0dcc.flv", dwFileAttributes=0x80) returned 1 [0258.381] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\KG0ehqrPgdnKO0dcc.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\kg0ehqrpgdnko0dcc.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0258.381] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=18582) returned 1 [0258.382] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=18582) returned 1 [0258.382] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x4774, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0258.382] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0258.383] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0258.383] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae6cf0) returned 1 [0258.383] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0258.383] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0258.383] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4896, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0x4896, lpOverlapped=0x0) returned 1 [0258.384] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0258.384] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x4896, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x48a0) returned 1 [0258.384] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0258.384] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x48a0, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0x48a0, lpOverlapped=0x0) returned 1 [0258.384] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0258.384] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0258.384] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0258.384] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0258.384] CloseHandle (hObject=0x47c) returned 1 [0258.401] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0258.405] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0258.405] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0258.405] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0258.405] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0258.406] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\L-U5u6.wav", dwFileAttributes=0x80) returned 1 [0258.406] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\L-U5u6.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l-u5u6.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0258.440] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=29404) returned 1 [0258.440] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=29404) returned 1 [0258.440] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x71ba, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0258.440] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0258.441] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0258.441] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae6820) returned 1 [0258.441] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0258.441] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0258.441] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x72dc, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0x72dc, lpOverlapped=0x0) returned 1 [0258.442] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0258.442] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x72dc, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x72e0) returned 1 [0258.442] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0258.442] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x72e0, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0x72e0, lpOverlapped=0x0) returned 1 [0258.442] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0258.442] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0258.442] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0258.442] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0258.442] CloseHandle (hObject=0x47c) returned 1 [0258.459] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0258.463] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0258.463] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0258.463] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0258.463] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0258.463] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\LBrtMfyD.flv", dwFileAttributes=0x80) returned 1 [0258.464] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\LBrtMfyD.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\lbrtmfyd.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0258.465] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=52396) returned 1 [0258.465] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=52396) returned 1 [0258.465] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0xcb8a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0258.465] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0258.465] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0258.465] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae6f20) returned 1 [0258.465] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0258.466] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0258.466] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xccac, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0xccac, lpOverlapped=0x0) returned 1 [0258.467] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0258.467] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0xccac, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0xccb0) returned 1 [0258.467] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0258.467] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xccb0, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0xccb0, lpOverlapped=0x0) returned 1 [0258.467] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0258.467] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0258.467] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0258.467] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0258.467] CloseHandle (hObject=0x47c) returned 1 [0258.484] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0258.489] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0258.489] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0258.489] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0258.489] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0258.489] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\lgkH2-ofvNmYXokU.jpg", dwFileAttributes=0x80) returned 1 [0258.489] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\lgkH2-ofvNmYXokU.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\lgkh2-ofvnmyxoku.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0258.490] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=10430) returned 1 [0258.490] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=10430) returned 1 [0258.490] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x279c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0258.490] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0258.491] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0258.491] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae65f0) returned 1 [0258.491] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0258.491] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0258.491] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x28be, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0x28be, lpOverlapped=0x0) returned 1 [0258.491] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0258.491] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x28be, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x28c0) returned 1 [0258.491] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0258.491] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x28c0, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0x28c0, lpOverlapped=0x0) returned 1 [0258.492] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0258.492] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0258.492] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0258.492] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0258.492] CloseHandle (hObject=0x47c) returned 1 [0258.509] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0258.513] CryptDestroyKey (hKey=0x665aae65f0) returned 1 [0258.513] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0258.513] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0258.513] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0258.514] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\ly2PQRNO91o6a.flv", dwFileAttributes=0x80) returned 1 [0258.514] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\ly2PQRNO91o6a.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\ly2pqrno91o6a.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0258.514] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=13938) returned 1 [0258.514] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=13938) returned 1 [0258.514] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x3550, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0258.514] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0258.516] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0258.516] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae6cf0) returned 1 [0258.516] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0258.516] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0258.516] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3672, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0x3672, lpOverlapped=0x0) returned 1 [0258.517] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0258.517] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x3672, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x3680) returned 1 [0258.517] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0258.517] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3680, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0x3680, lpOverlapped=0x0) returned 1 [0258.517] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0258.517] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0258.517] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0258.517] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0258.517] CloseHandle (hObject=0x47c) returned 1 [0258.534] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0258.538] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0258.538] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0258.538] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0258.538] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0258.539] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\ndR J.bmp", dwFileAttributes=0x80) returned 1 [0258.539] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\ndR J.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\ndr j.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0258.539] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=63345) returned 1 [0258.539] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=63345) returned 1 [0258.539] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0xf64f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0258.539] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0258.540] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0258.540] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae70e0) returned 1 [0258.540] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0258.540] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0258.540] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xf771, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0xf771, lpOverlapped=0x0) returned 1 [0258.541] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0258.541] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0xf771, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0xf780) returned 1 [0258.541] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0258.541] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xf780, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0xf780, lpOverlapped=0x0) returned 1 [0258.542] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0258.542] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0258.542] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0258.542] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0258.542] CloseHandle (hObject=0x47c) returned 1 [0258.558] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0258.562] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0258.562] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0258.562] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0258.562] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0258.563] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\NvaHxqIuU.jpg", dwFileAttributes=0x80) returned 1 [0258.563] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\NvaHxqIuU.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\nvahxqiuu.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0258.564] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=93746) returned 1 [0258.564] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=93746) returned 1 [0258.564] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x16d10, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0258.564] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0258.564] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0258.565] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae65f0) returned 1 [0258.565] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0258.565] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0258.565] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x16e32, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0x16e32, lpOverlapped=0x0) returned 1 [0258.566] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0258.566] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x16e32, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x16e40) returned 1 [0258.566] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0258.566] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x16e40, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0x16e40, lpOverlapped=0x0) returned 1 [0258.567] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0258.567] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0258.567] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0258.567] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0258.567] CloseHandle (hObject=0x47c) returned 1 [0258.583] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0258.587] CryptDestroyKey (hKey=0x665aae65f0) returned 1 [0258.587] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0258.587] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0258.587] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0258.587] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\n_r7f158oCUdSTuD.mp4", dwFileAttributes=0x80) returned 1 [0258.587] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\n_r7f158oCUdSTuD.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\n_r7f158ocudstud.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0258.588] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=65726) returned 1 [0258.588] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=65726) returned 1 [0258.588] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0xff9c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0258.588] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0258.589] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0258.589] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae6cf0) returned 1 [0258.589] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0258.589] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0258.589] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x100be, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0x100be, lpOverlapped=0x0) returned 1 [0258.591] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0258.591] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x100be, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x100c0) returned 1 [0258.591] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0258.591] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x100c0, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0x100c0, lpOverlapped=0x0) returned 1 [0258.591] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0258.591] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0258.591] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0258.591] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0258.591] CloseHandle (hObject=0x47c) returned 1 [0258.607] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0258.612] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0258.612] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0258.612] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0258.612] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0258.612] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\rarMexOsOy2rP_XVV4M.gif", dwFileAttributes=0x80) returned 1 [0258.612] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\rarMexOsOy2rP_XVV4M.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\rarmexosoy2rp_xvv4m.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0258.613] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=29614) returned 1 [0258.613] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=29614) returned 1 [0258.613] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x728c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0258.613] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0258.614] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0258.614] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae6510) returned 1 [0258.614] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0258.614] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0258.614] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x73ae, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0x73ae, lpOverlapped=0x0) returned 1 [0258.614] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0258.614] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x73ae, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x73b0) returned 1 [0258.614] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0258.614] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x73b0, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0x73b0, lpOverlapped=0x0) returned 1 [0258.615] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0258.615] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0258.615] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0258.615] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0258.615] CloseHandle (hObject=0x47c) returned 1 [0258.635] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0258.639] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0258.639] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0258.640] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0258.640] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0258.640] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\RwU2l1.png", dwFileAttributes=0x80) returned 1 [0258.839] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\RwU2l1.png" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\rwu2l1.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0258.840] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=24806) returned 1 [0258.840] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=24806) returned 1 [0258.840] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x5fc4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0258.840] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0258.841] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0258.841] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae6cf0) returned 1 [0258.841] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0258.841] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0258.841] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x60e6, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0x60e6, lpOverlapped=0x0) returned 1 [0258.842] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0258.842] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x60e6, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x60f0) returned 1 [0258.842] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0258.842] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x60f0, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0x60f0, lpOverlapped=0x0) returned 1 [0258.843] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0258.843] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0258.843] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0258.843] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0258.843] CloseHandle (hObject=0x47c) returned 1 [0258.865] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0258.871] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0258.871] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0258.871] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0258.871] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0258.872] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\T15GxQQ8 W3.jpg", dwFileAttributes=0x80) returned 1 [0258.872] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\T15GxQQ8 W3.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\t15gxqq8 w3.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0258.872] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=41020) returned 1 [0258.872] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=41020) returned 1 [0258.872] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x9f1a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0258.873] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0258.873] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0258.873] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae6f20) returned 1 [0258.873] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0258.873] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0258.873] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xa03c, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0xa03c, lpOverlapped=0x0) returned 1 [0258.874] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0258.874] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0xa03c, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0xa040) returned 1 [0258.874] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0258.874] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xa040, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0xa040, lpOverlapped=0x0) returned 1 [0258.875] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0258.875] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0258.875] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0258.875] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0258.875] CloseHandle (hObject=0x47c) returned 1 [0258.894] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0258.898] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0258.898] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0258.899] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0258.899] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0258.899] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\TzwZpmlpNkjmzLcW.odt", dwFileAttributes=0x80) returned 1 [0258.900] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\TzwZpmlpNkjmzLcW.odt" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\tzwzpmlpnkjmzlcw.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0258.901] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=94104) returned 1 [0258.901] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=94104) returned 1 [0258.901] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x16e76, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0258.901] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0258.902] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0258.902] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae70e0) returned 1 [0258.902] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0258.903] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0258.903] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x16f98, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0x16f98, lpOverlapped=0x0) returned 1 [0258.904] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0258.905] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x16f98, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x16fa0) returned 1 [0258.905] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0258.905] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x16fa0, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0x16fa0, lpOverlapped=0x0) returned 1 [0258.905] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0258.905] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0258.905] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0258.905] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0258.905] CloseHandle (hObject=0x47c) returned 1 [0258.921] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0259.116] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0259.116] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0259.116] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0259.116] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0259.117] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\U6RthmZ7KC29Y8.png", dwFileAttributes=0x80) returned 1 [0259.117] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\U6RthmZ7KC29Y8.png" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\u6rthmz7kc29y8.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0259.118] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=79337) returned 1 [0259.118] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=79337) returned 1 [0259.118] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x134c7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0259.118] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0259.118] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0259.118] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae6cf0) returned 1 [0259.118] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0259.119] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0259.119] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x135e9, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0x135e9, lpOverlapped=0x0) returned 1 [0259.119] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0259.119] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x135e9, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x135f0) returned 1 [0259.119] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0259.120] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x135f0, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0x135f0, lpOverlapped=0x0) returned 1 [0259.120] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0259.120] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0259.120] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0259.120] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0259.120] CloseHandle (hObject=0x47c) returned 1 [0259.134] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0259.138] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0259.138] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0259.138] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0259.138] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0259.139] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\ucj1xI0OzBx.ods", dwFileAttributes=0x80) returned 1 [0259.139] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\ucj1xI0OzBx.ods" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\ucj1xi0ozbx.ods"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0259.140] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=90845) returned 1 [0259.140] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=90845) returned 1 [0259.140] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x161bb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0259.140] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0259.146] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0259.146] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae6f20) returned 1 [0259.146] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0259.146] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0259.146] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x162dd, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0x162dd, lpOverlapped=0x0) returned 1 [0259.148] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0259.148] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x162dd, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x162e0) returned 1 [0259.148] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0259.148] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x162e0, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0x162e0, lpOverlapped=0x0) returned 1 [0259.148] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0259.148] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0259.148] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0259.148] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0259.148] CloseHandle (hObject=0x47c) returned 1 [0259.212] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0259.216] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0259.216] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0259.216] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0259.216] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0259.217] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\udNLFUAQ5p.jpg", dwFileAttributes=0x80) returned 1 [0259.217] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\udNLFUAQ5p.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\udnlfuaq5p.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0259.218] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=15983) returned 1 [0259.218] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=15983) returned 1 [0259.218] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x3d4d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0259.218] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0259.218] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0259.218] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae6f20) returned 1 [0259.218] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0259.219] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0259.219] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3e6f, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0x3e6f, lpOverlapped=0x0) returned 1 [0259.219] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0259.219] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x3e6f, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x3e70) returned 1 [0259.219] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0259.219] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3e70, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0x3e70, lpOverlapped=0x0) returned 1 [0259.219] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0259.220] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0259.220] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0259.220] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0259.220] CloseHandle (hObject=0x47c) returned 1 [0259.237] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0259.241] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0259.241] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0259.242] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0259.242] SetLastError (dwErrCode=0x0) [0259.242] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0259.243] GetLastError () returned 0x0 [0259.243] WriteFile (in: hFile=0x47c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7d3f0*=0x324, lpOverlapped=0x0) returned 1 [0259.243] CloseHandle (hObject=0x47c) returned 1 [0259.243] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\zFvgMAlwtl\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665d90c500 [0259.244] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0259.244] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0259.244] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0259.244] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\zFvgMAlwtl\\a21ZQZAKj.mkv", dwFileAttributes=0x80) returned 1 [0259.244] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\zFvgMAlwtl\\a21ZQZAKj.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\zfvgmalwtl\\a21zqzakj.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0259.245] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=56817) returned 1 [0259.245] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=56817) returned 1 [0259.245] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0xdccf, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0259.245] ReadFile (in: hFile=0x570, lpBuffer=0x665da7ca98, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca98*, lpNumberOfBytesRead=0x665da7ca58*=0x19, lpOverlapped=0x0) returned 1 [0259.246] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0259.246] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ca20 | out: phKey=0x665da7ca20*=0x665aae6510) returned 1 [0259.246] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0259.246] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0259.246] ReadFile (in: hFile=0x570, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xddf1, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ca30*=0xddf1, lpOverlapped=0x0) returned 1 [0259.248] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4250) returned 1 [0259.248] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0xddf1, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0xde00) returned 1 [0259.248] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0259.248] WriteFile (in: hFile=0x570, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xde00, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ca30*=0xde00, lpOverlapped=0x0) returned 1 [0259.249] WriteFile (in: hFile=0x570, lpBuffer=0x665da7ca70*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca70*, lpNumberOfBytesWritten=0x665da7ca34*=0x6, lpOverlapped=0x0) returned 1 [0259.249] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ca40 | out: pbData=0x0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0259.249] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7cac0, pdwDataLen=0x665da7ca40 | out: pbData=0x665da7cac0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0259.249] WriteFile (in: hFile=0x570, lpBuffer=0x665da7cac0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7cac0*, lpNumberOfBytesWritten=0x665da7ca34*=0x10c, lpOverlapped=0x0) returned 1 [0259.249] CloseHandle (hObject=0x570) returned 1 [0259.280] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0259.286] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0259.286] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0259.286] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0259.286] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0259.286] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\zFvgMAlwtl\\aAxsEFx.mkv", dwFileAttributes=0x80) returned 1 [0259.287] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\zFvgMAlwtl\\aAxsEFx.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\zfvgmalwtl\\aaxsefx.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0259.287] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=51882) returned 1 [0259.287] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=51882) returned 1 [0259.287] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0xc988, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0259.287] ReadFile (in: hFile=0x570, lpBuffer=0x665da7ca98, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca98*, lpNumberOfBytesRead=0x665da7ca58*=0x19, lpOverlapped=0x0) returned 1 [0259.288] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0259.288] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ca20 | out: phKey=0x665da7ca20*=0x665aae6f20) returned 1 [0259.288] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0259.288] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0259.288] ReadFile (in: hFile=0x570, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xcaaa, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ca30*=0xcaaa, lpOverlapped=0x0) returned 1 [0259.289] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4250) returned 1 [0259.289] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0xcaaa, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0xcab0) returned 1 [0259.289] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0259.289] WriteFile (in: hFile=0x570, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xcab0, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ca30*=0xcab0, lpOverlapped=0x0) returned 1 [0259.289] WriteFile (in: hFile=0x570, lpBuffer=0x665da7ca70*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca70*, lpNumberOfBytesWritten=0x665da7ca34*=0x6, lpOverlapped=0x0) returned 1 [0259.289] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ca40 | out: pbData=0x0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0259.289] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7cac0, pdwDataLen=0x665da7ca40 | out: pbData=0x665da7cac0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0259.290] WriteFile (in: hFile=0x570, lpBuffer=0x665da7cac0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7cac0*, lpNumberOfBytesWritten=0x665da7ca34*=0x10c, lpOverlapped=0x0) returned 1 [0259.290] CloseHandle (hObject=0x570) returned 1 [0259.306] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0259.310] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0259.310] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0259.311] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0259.311] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0259.311] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0259.311] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\zFvgMAlwtl\\oWny7t6cWe.jpg", dwFileAttributes=0x80) returned 1 [0259.311] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\zFvgMAlwtl\\oWny7t6cWe.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\zfvgmalwtl\\owny7t6cwe.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0259.312] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=90505) returned 1 [0259.312] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=90505) returned 1 [0259.312] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x16067, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0259.312] ReadFile (in: hFile=0x570, lpBuffer=0x665da7ca98, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca98*, lpNumberOfBytesRead=0x665da7ca58*=0x19, lpOverlapped=0x0) returned 1 [0259.313] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0259.313] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ca20 | out: phKey=0x665da7ca20*=0x665aae6cf0) returned 1 [0259.313] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0259.319] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0259.319] ReadFile (in: hFile=0x570, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x16189, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ca30*=0x16189, lpOverlapped=0x0) returned 1 [0259.321] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4250) returned 1 [0259.321] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x16189, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x16190) returned 1 [0259.321] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0259.321] WriteFile (in: hFile=0x570, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x16190, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ca30*=0x16190, lpOverlapped=0x0) returned 1 [0259.322] WriteFile (in: hFile=0x570, lpBuffer=0x665da7ca70*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca70*, lpNumberOfBytesWritten=0x665da7ca34*=0x6, lpOverlapped=0x0) returned 1 [0259.322] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ca40 | out: pbData=0x0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0259.322] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7cac0, pdwDataLen=0x665da7ca40 | out: pbData=0x665da7cac0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0259.322] WriteFile (in: hFile=0x570, lpBuffer=0x665da7cac0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7cac0*, lpNumberOfBytesWritten=0x665da7ca34*=0x10c, lpOverlapped=0x0) returned 1 [0259.322] CloseHandle (hObject=0x570) returned 1 [0259.340] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0259.345] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0259.345] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0259.345] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0259.345] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0259.345] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\zFvgMAlwtl\\XKVFzm.xlsx", dwFileAttributes=0x80) returned 1 [0259.346] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\zFvgMAlwtl\\XKVFzm.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\zfvgmalwtl\\xkvfzm.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0259.346] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=65571) returned 1 [0259.347] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=65571) returned 1 [0259.347] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0xff01, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0259.347] ReadFile (in: hFile=0x570, lpBuffer=0x665da7ca98, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca98*, lpNumberOfBytesRead=0x665da7ca58*=0x19, lpOverlapped=0x0) returned 1 [0259.347] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0259.347] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ca20 | out: phKey=0x665da7ca20*=0x665aae6cf0) returned 1 [0259.347] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0259.348] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0259.348] ReadFile (in: hFile=0x570, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x10023, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ca30*=0x10023, lpOverlapped=0x0) returned 1 [0259.349] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4250) returned 1 [0259.349] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x10023, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x10030) returned 1 [0259.349] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0259.349] WriteFile (in: hFile=0x570, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x10030, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ca30*=0x10030, lpOverlapped=0x0) returned 1 [0259.349] WriteFile (in: hFile=0x570, lpBuffer=0x665da7ca70*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca70*, lpNumberOfBytesWritten=0x665da7ca34*=0x6, lpOverlapped=0x0) returned 1 [0259.349] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ca40 | out: pbData=0x0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0259.349] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7cac0, pdwDataLen=0x665da7ca40 | out: pbData=0x665da7cac0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0259.349] WriteFile (in: hFile=0x570, lpBuffer=0x665da7cac0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7cac0*, lpNumberOfBytesWritten=0x665da7ca34*=0x10c, lpOverlapped=0x0) returned 1 [0259.349] CloseHandle (hObject=0x570) returned 1 [0259.389] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0259.395] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0259.395] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0259.396] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0259.396] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0259.396] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\zFvgMAlwtl\\yuymIr3y.flv", dwFileAttributes=0x80) returned 1 [0259.397] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\zFvgMAlwtl\\yuymIr3y.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\zfvgmalwtl\\yuymir3y.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0259.397] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=2701) returned 1 [0259.397] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=2701) returned 1 [0259.397] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x96b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0259.397] ReadFile (in: hFile=0x570, lpBuffer=0x665da7ca98, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca98*, lpNumberOfBytesRead=0x665da7ca58*=0x19, lpOverlapped=0x0) returned 1 [0259.398] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0259.398] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ca20 | out: phKey=0x665da7ca20*=0x665aae66d0) returned 1 [0259.398] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0259.399] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0259.399] ReadFile (in: hFile=0x570, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xa8d, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ca30*=0xa8d, lpOverlapped=0x0) returned 1 [0259.399] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4250) returned 1 [0259.399] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0xa8d, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0xa90) returned 1 [0259.399] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0259.399] WriteFile (in: hFile=0x570, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xa90, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ca30*=0xa90, lpOverlapped=0x0) returned 1 [0259.399] WriteFile (in: hFile=0x570, lpBuffer=0x665da7ca70*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca70*, lpNumberOfBytesWritten=0x665da7ca34*=0x6, lpOverlapped=0x0) returned 1 [0259.399] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ca40 | out: pbData=0x0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0259.399] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7cac0, pdwDataLen=0x665da7ca40 | out: pbData=0x665da7cac0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0259.399] WriteFile (in: hFile=0x570, lpBuffer=0x665da7cac0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7cac0*, lpNumberOfBytesWritten=0x665da7ca34*=0x10c, lpOverlapped=0x0) returned 1 [0259.399] CloseHandle (hObject=0x570) returned 1 [0259.421] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0259.453] CryptDestroyKey (hKey=0x665aae66d0) returned 1 [0259.453] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0259.455] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0259.455] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0259.455] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\zFvgMAlwtl\\ZYT93kYzxZu-2.doc", dwFileAttributes=0x80) returned 1 [0259.456] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\zFvgMAlwtl\\ZYT93kYzxZu-2.doc" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\zfvgmalwtl\\zyt93kyzxzu-2.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0259.456] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=22033) returned 1 [0259.457] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=22033) returned 1 [0259.457] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x54ef, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0259.457] ReadFile (in: hFile=0x570, lpBuffer=0x665da7ca98, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca98*, lpNumberOfBytesRead=0x665da7ca58*=0x19, lpOverlapped=0x0) returned 1 [0259.457] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0259.457] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ca20 | out: phKey=0x665da7ca20*=0x665aae6cf0) returned 1 [0259.457] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0259.458] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0259.458] ReadFile (in: hFile=0x570, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x5611, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ca30*=0x5611, lpOverlapped=0x0) returned 1 [0259.458] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4250) returned 1 [0259.458] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x5611, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x5620) returned 1 [0259.458] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0259.458] WriteFile (in: hFile=0x570, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x5620, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ca30*=0x5620, lpOverlapped=0x0) returned 1 [0259.458] WriteFile (in: hFile=0x570, lpBuffer=0x665da7ca70*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca70*, lpNumberOfBytesWritten=0x665da7ca34*=0x6, lpOverlapped=0x0) returned 1 [0259.459] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ca40 | out: pbData=0x0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0259.459] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7cac0, pdwDataLen=0x665da7ca40 | out: pbData=0x665da7cac0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0259.459] WriteFile (in: hFile=0x570, lpBuffer=0x665da7cac0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7cac0*, lpNumberOfBytesWritten=0x665da7ca34*=0x10c, lpOverlapped=0x0) returned 1 [0259.459] CloseHandle (hObject=0x570) returned 1 [0259.474] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0259.478] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0259.478] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0259.478] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0259.478] FindClose (in: hFindFile=0x665d90c500 | out: hFindFile=0x665d90c500) returned 1 [0259.478] SetLastError (dwErrCode=0x0) [0259.478] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\zFvgMAlwtl\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\zfvgmalwtl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0259.479] GetLastError () returned 0x0 [0259.479] WriteFile (in: hFile=0x47c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7d3f0*=0x324, lpOverlapped=0x0) returned 1 [0259.480] CloseHandle (hObject=0x47c) returned 1 [0259.480] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0259.480] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0259.480] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\ZMih7kiLiVq_6n_h3.csv", dwFileAttributes=0x80) returned 1 [0259.486] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\ZMih7kiLiVq_6n_h3.csv" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\zmih7kilivq_6n_h3.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0259.486] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=8687) returned 1 [0259.486] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=8687) returned 1 [0259.486] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x20cd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0259.486] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0259.492] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0259.492] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae7150) returned 1 [0259.492] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0259.492] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0259.492] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x21ef, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0x21ef, lpOverlapped=0x0) returned 1 [0259.493] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0259.493] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x21ef, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x21f0) returned 1 [0259.493] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0259.493] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x21f0, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0x21f0, lpOverlapped=0x0) returned 1 [0259.493] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0259.493] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0259.493] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0259.493] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0259.494] CloseHandle (hObject=0x47c) returned 1 [0259.526] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0259.530] CryptDestroyKey (hKey=0x665aae7150) returned 1 [0259.530] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0259.530] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0259.530] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0259.530] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\ZRYmxz.mp3", dwFileAttributes=0x80) returned 1 [0259.531] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\ZRYmxz.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\zrymxz.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0259.531] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=51948) returned 1 [0259.532] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=51948) returned 1 [0259.532] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0xc9ca, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0259.532] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0259.532] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0259.532] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae65f0) returned 1 [0259.532] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0259.533] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0259.533] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xcaec, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0xcaec, lpOverlapped=0x0) returned 1 [0259.534] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0259.535] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0xcaec, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0xcaf0) returned 1 [0259.535] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0259.535] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xcaf0, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0xcaf0, lpOverlapped=0x0) returned 1 [0259.535] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0259.535] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0259.535] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0259.535] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0259.535] CloseHandle (hObject=0x47c) returned 1 [0259.554] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0259.558] CryptDestroyKey (hKey=0x665aae65f0) returned 1 [0259.558] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0259.558] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0259.558] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0259.559] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\_MJzEpfil.mp3", dwFileAttributes=0x80) returned 1 [0259.560] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\_MJzEpfil.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\_mjzepfil.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0259.560] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=41699) returned 1 [0259.560] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=41699) returned 1 [0259.560] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0xa1c1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0259.560] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0259.561] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0259.561] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae70e0) returned 1 [0259.561] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0259.561] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0259.561] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xa2e3, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0xa2e3, lpOverlapped=0x0) returned 1 [0259.585] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0259.585] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0xa2e3, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0xa2f0) returned 1 [0259.585] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0259.585] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xa2f0, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0xa2f0, lpOverlapped=0x0) returned 1 [0259.585] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0259.586] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0259.586] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0259.586] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0259.586] CloseHandle (hObject=0x47c) returned 1 [0259.602] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0259.606] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0259.606] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0259.606] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0259.606] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0259.606] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\_nL6kEI6Gr1WkOCKG 1.wav", dwFileAttributes=0x80) returned 1 [0259.606] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\_nL6kEI6Gr1WkOCKG 1.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\_nl6kei6gr1wkockg 1.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0259.607] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=92993) returned 1 [0259.607] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=92993) returned 1 [0259.607] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x16a1f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0259.607] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0259.608] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0259.608] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae6cf0) returned 1 [0259.608] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0259.608] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0259.608] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x16b41, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0x16b41, lpOverlapped=0x0) returned 1 [0259.610] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0259.610] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x16b41, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x16b50) returned 1 [0259.610] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0259.610] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x16b50, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0x16b50, lpOverlapped=0x0) returned 1 [0259.611] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0259.611] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0259.611] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0259.611] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0259.611] CloseHandle (hObject=0x47c) returned 1 [0259.629] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0259.633] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0259.633] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0259.633] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0259.633] FindClose (in: hFindFile=0x665d90c0e0 | out: hFindFile=0x665d90c0e0) returned 1 [0259.633] SetLastError (dwErrCode=0x0) [0259.633] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0259.634] GetLastError () returned 0xb7 [0259.634] CloseHandle (hObject=0x470) returned 1 [0259.634] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0259.634] SetLastError (dwErrCode=0x0) [0259.634] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0259.634] GetLastError () returned 0xb7 [0259.634] CloseHandle (hObject=0x470) returned 1 [0259.634] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665d90c380 [0259.634] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0259.648] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0259.648] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0259.648] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\-RlDFOSx19WeQ.docx", dwFileAttributes=0x80) returned 1 [0259.648] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\-RlDFOSx19WeQ.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\-rldfosx19weq.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0259.649] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=3060) returned 1 [0259.649] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=3060) returned 1 [0259.649] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0xad2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0259.649] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0259.650] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0259.650] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae6cf0) returned 1 [0259.650] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0259.650] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0259.650] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xbf4, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0xbf4, lpOverlapped=0x0) returned 1 [0259.651] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0259.651] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0xbf4, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0xc00) returned 1 [0259.651] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0259.651] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xc00, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0xc00, lpOverlapped=0x0) returned 1 [0259.651] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0259.651] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0259.651] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0259.651] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0259.651] CloseHandle (hObject=0x47c) returned 1 [0259.696] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0259.700] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0259.700] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0259.700] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0259.700] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0259.700] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\3BSJFsLSJX.pptx", dwFileAttributes=0x80) returned 1 [0259.701] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\3BSJFsLSJX.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\3bsjfslsjx.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0259.701] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=28509) returned 1 [0259.701] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=28509) returned 1 [0259.701] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x6e3b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0259.701] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0259.703] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0259.703] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae6cf0) returned 1 [0259.703] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0259.703] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0259.704] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x6f5d, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0x6f5d, lpOverlapped=0x0) returned 1 [0259.705] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0259.705] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x6f5d, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x6f60) returned 1 [0259.705] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0259.705] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x6f60, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0x6f60, lpOverlapped=0x0) returned 1 [0259.705] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0259.705] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0259.705] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0259.705] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0259.706] CloseHandle (hObject=0x47c) returned 1 [0259.722] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0259.726] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0259.726] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0259.726] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0259.726] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0259.726] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\7a-waaUkK2i6Vx.xlsx", dwFileAttributes=0x80) returned 1 [0259.727] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\7a-waaUkK2i6Vx.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\7a-waaukk2i6vx.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0259.727] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=47919) returned 1 [0259.727] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=47919) returned 1 [0259.727] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0xba0d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0259.727] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0259.728] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0259.728] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae6f20) returned 1 [0259.728] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0259.729] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0259.729] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xbb2f, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0xbb2f, lpOverlapped=0x0) returned 1 [0259.730] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0259.730] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0xbb2f, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0xbb30) returned 1 [0259.730] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0259.730] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xbb30, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0xbb30, lpOverlapped=0x0) returned 1 [0259.730] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0259.730] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0259.730] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0259.730] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0259.730] CloseHandle (hObject=0x47c) returned 1 [0259.747] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0259.760] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0259.760] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0259.760] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0259.760] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0259.761] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\7zbPyc.xlsx", dwFileAttributes=0x80) returned 1 [0259.864] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\7zbPyc.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\7zbpyc.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0259.864] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=45646) returned 1 [0259.864] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=45646) returned 1 [0259.864] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0xb12c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0259.865] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0259.865] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0259.865] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae6510) returned 1 [0259.865] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0259.866] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0259.866] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xb24e, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0xb24e, lpOverlapped=0x0) returned 1 [0259.867] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0259.867] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0xb24e, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0xb250) returned 1 [0259.867] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0259.867] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xb250, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0xb250, lpOverlapped=0x0) returned 1 [0259.867] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0259.867] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0259.867] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0259.867] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0259.867] CloseHandle (hObject=0x47c) returned 1 [0259.883] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0259.887] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0259.887] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0259.888] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0259.888] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0259.888] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\9ze4Fa.docx", dwFileAttributes=0x80) returned 1 [0259.888] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\9ze4Fa.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\9ze4fa.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0259.889] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=20528) returned 1 [0259.889] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=20528) returned 1 [0259.889] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x4f0e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0259.889] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0259.890] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0259.890] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae6cf0) returned 1 [0259.890] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0259.890] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0259.890] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x5030, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0x5030, lpOverlapped=0x0) returned 1 [0259.891] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0259.891] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x5030, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x5040) returned 1 [0259.891] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0259.891] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x5040, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0x5040, lpOverlapped=0x0) returned 1 [0259.892] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0259.892] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0259.892] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0259.892] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0259.892] CloseHandle (hObject=0x47c) returned 1 [0259.918] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0259.925] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0259.925] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0259.925] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0259.925] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0259.926] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\cDdi-51MyOA.pptx", dwFileAttributes=0x80) returned 1 [0259.926] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\cDdi-51MyOA.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\cddi-51myoa.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0259.927] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=66047) returned 1 [0259.927] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=66047) returned 1 [0259.927] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x100dd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0259.927] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0259.928] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0259.928] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae65f0) returned 1 [0259.928] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0259.928] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0259.928] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x101ff, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0x101ff, lpOverlapped=0x0) returned 1 [0259.929] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0259.929] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x101ff, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x10200) returned 1 [0259.929] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0259.929] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x10200, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0x10200, lpOverlapped=0x0) returned 1 [0259.930] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0259.930] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0259.930] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0259.930] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0259.930] CloseHandle (hObject=0x47c) returned 1 [0259.943] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0259.947] CryptDestroyKey (hKey=0x665aae65f0) returned 1 [0259.947] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0259.947] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0259.947] SetLastError (dwErrCode=0x0) [0259.948] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0259.948] GetLastError () returned 0x0 [0259.948] WriteFile (in: hFile=0x47c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7d3f0*=0x324, lpOverlapped=0x0) returned 1 [0259.949] CloseHandle (hObject=0x47c) returned 1 [0259.949] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ChqiP5A3Poj\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665d90d340 [0259.950] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0259.950] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0259.950] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0259.950] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ChqiP5A3Poj\\-yzGy.ots", dwFileAttributes=0x80) returned 1 [0259.950] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ChqiP5A3Poj\\-yzGy.ots" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\chqip5a3poj\\-yzgy.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0259.951] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=47052) returned 1 [0259.951] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=47052) returned 1 [0259.951] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0xb6aa, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0259.951] ReadFile (in: hFile=0x570, lpBuffer=0x665da7ca98, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca98*, lpNumberOfBytesRead=0x665da7ca58*=0x19, lpOverlapped=0x0) returned 1 [0260.302] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0260.302] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ca20 | out: phKey=0x665da7ca20*=0x665aae70e0) returned 1 [0260.302] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0260.302] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0260.302] ReadFile (in: hFile=0x570, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xb7cc, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ca30*=0xb7cc, lpOverlapped=0x0) returned 1 [0260.303] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4250) returned 1 [0260.303] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0xb7cc, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0xb7d0) returned 1 [0260.303] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0260.303] WriteFile (in: hFile=0x570, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xb7d0, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ca30*=0xb7d0, lpOverlapped=0x0) returned 1 [0260.303] WriteFile (in: hFile=0x570, lpBuffer=0x665da7ca70*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca70*, lpNumberOfBytesWritten=0x665da7ca34*=0x6, lpOverlapped=0x0) returned 1 [0260.304] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ca40 | out: pbData=0x0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0260.304] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7cac0, pdwDataLen=0x665da7ca40 | out: pbData=0x665da7cac0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0260.304] WriteFile (in: hFile=0x570, lpBuffer=0x665da7cac0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7cac0*, lpNumberOfBytesWritten=0x665da7ca34*=0x10c, lpOverlapped=0x0) returned 1 [0260.304] CloseHandle (hObject=0x570) returned 1 [0260.321] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0260.326] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0260.326] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0260.326] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0260.326] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0260.326] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ChqiP5A3Poj\\22yilLvxjZrk.xls", dwFileAttributes=0x80) returned 1 [0260.327] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ChqiP5A3Poj\\22yilLvxjZrk.xls" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\chqip5a3poj\\22yillvxjzrk.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0260.328] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=12320) returned 1 [0260.328] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=12320) returned 1 [0260.328] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x2efe, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0260.328] ReadFile (in: hFile=0x570, lpBuffer=0x665da7ca98, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca98*, lpNumberOfBytesRead=0x665da7ca58*=0x19, lpOverlapped=0x0) returned 1 [0260.329] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0260.329] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ca20 | out: phKey=0x665da7ca20*=0x665aae6cf0) returned 1 [0260.329] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0260.330] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0260.330] ReadFile (in: hFile=0x570, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3020, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ca30*=0x3020, lpOverlapped=0x0) returned 1 [0260.331] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4250) returned 1 [0260.331] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x3020, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x3030) returned 1 [0260.331] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0260.331] WriteFile (in: hFile=0x570, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3030, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ca30*=0x3030, lpOverlapped=0x0) returned 1 [0260.331] WriteFile (in: hFile=0x570, lpBuffer=0x665da7ca70*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca70*, lpNumberOfBytesWritten=0x665da7ca34*=0x6, lpOverlapped=0x0) returned 1 [0260.331] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ca40 | out: pbData=0x0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0260.331] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7cac0, pdwDataLen=0x665da7ca40 | out: pbData=0x665da7cac0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0260.331] WriteFile (in: hFile=0x570, lpBuffer=0x665da7cac0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7cac0*, lpNumberOfBytesWritten=0x665da7ca34*=0x10c, lpOverlapped=0x0) returned 1 [0260.331] CloseHandle (hObject=0x570) returned 1 [0260.357] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0260.361] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0260.361] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0260.361] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0260.361] FindClose (in: hFindFile=0x665d90d340 | out: hFindFile=0x665d90d340) returned 1 [0260.361] SetLastError (dwErrCode=0x0) [0260.362] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ChqiP5A3Poj\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\chqip5a3poj\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0260.411] GetLastError () returned 0x0 [0260.411] WriteFile (in: hFile=0x47c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7d3f0*=0x324, lpOverlapped=0x0) returned 1 [0260.412] CloseHandle (hObject=0x47c) returned 1 [0260.412] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0260.412] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0260.412] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Database1.accdb", dwFileAttributes=0x80) returned 1 [0260.413] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Database1.accdb" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\database1.accdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0260.413] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=356352) returned 1 [0260.413] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=356352) returned 1 [0260.413] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x56ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0260.413] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0260.698] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0260.698] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae6f20) returned 1 [0260.698] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0260.698] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0260.699] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x57000, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0x57000, lpOverlapped=0x0) returned 1 [0260.955] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0260.955] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x57000, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x57010) returned 1 [0260.956] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0260.956] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x57010, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0x57010, lpOverlapped=0x0) returned 1 [0260.957] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0260.957] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0260.957] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0260.957] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0260.957] CloseHandle (hObject=0x47c) returned 1 [0260.968] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0260.971] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0260.972] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0260.972] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0260.972] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0260.972] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0260.972] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\EgJKZxpGSoRXw.xlsx", dwFileAttributes=0x80) returned 1 [0260.973] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\EgJKZxpGSoRXw.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\egjkzxpgsorxw.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0260.973] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=34828) returned 1 [0260.973] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=34828) returned 1 [0260.973] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x86ea, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0260.973] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0260.974] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0260.974] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae6cf0) returned 1 [0260.974] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0260.974] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0260.974] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x880c, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0x880c, lpOverlapped=0x0) returned 1 [0260.975] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0260.975] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x880c, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x8810) returned 1 [0260.975] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0260.975] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x8810, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0x8810, lpOverlapped=0x0) returned 1 [0260.975] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0260.975] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0260.975] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0260.975] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0260.975] CloseHandle (hObject=0x47c) returned 1 [0260.989] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0261.024] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0261.024] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0261.024] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0261.024] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0261.024] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\GZMYz-.docx", dwFileAttributes=0x80) returned 1 [0261.033] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\GZMYz-.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\gzmyz-.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0261.033] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=23508) returned 1 [0261.033] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=23508) returned 1 [0261.033] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x5ab2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0261.033] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0261.034] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.034] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae66d0) returned 1 [0261.034] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0261.035] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.035] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x5bd4, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0x5bd4, lpOverlapped=0x0) returned 1 [0261.035] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0261.035] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x5bd4, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x5be0) returned 1 [0261.035] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.036] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x5be0, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0x5be0, lpOverlapped=0x0) returned 1 [0261.036] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0261.036] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0261.036] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0261.036] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0261.036] CloseHandle (hObject=0x47c) returned 1 [0261.051] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0261.055] CryptDestroyKey (hKey=0x665aae66d0) returned 1 [0261.056] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0261.056] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0261.056] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0261.056] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\HBv8O4N13ZVHBHuaTG0.pptx", dwFileAttributes=0x80) returned 1 [0261.056] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\HBv8O4N13ZVHBHuaTG0.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\hbv8o4n13zvhbhuatg0.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0261.057] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=6891) returned 1 [0261.057] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=6891) returned 1 [0261.057] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x19c9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0261.057] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0261.058] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.058] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae6cf0) returned 1 [0261.058] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0261.058] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.058] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x1aeb, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0x1aeb, lpOverlapped=0x0) returned 1 [0261.059] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0261.059] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x1aeb, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x1af0) returned 1 [0261.059] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.059] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x1af0, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0x1af0, lpOverlapped=0x0) returned 1 [0261.059] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0261.059] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0261.059] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0261.059] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0261.059] CloseHandle (hObject=0x47c) returned 1 [0261.076] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0261.080] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0261.080] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0261.080] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0261.080] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0261.080] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\IBhrihPbe UjYwL0Rvu.docx", dwFileAttributes=0x80) returned 1 [0261.082] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\IBhrihPbe UjYwL0Rvu.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ibhrihpbe ujywl0rvu.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0261.082] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=84323) returned 1 [0261.082] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=84323) returned 1 [0261.082] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x14841, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0261.082] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0261.084] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.084] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae6510) returned 1 [0261.084] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0261.084] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.084] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x14963, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0x14963, lpOverlapped=0x0) returned 1 [0261.088] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0261.088] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x14963, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x14970) returned 1 [0261.088] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.088] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x14970, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0x14970, lpOverlapped=0x0) returned 1 [0261.089] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0261.089] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0261.089] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0261.089] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0261.089] CloseHandle (hObject=0x47c) returned 1 [0261.108] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0261.113] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0261.113] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0261.113] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0261.113] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0261.113] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\kBDFHKFGDEZa5WoW.xlsx", dwFileAttributes=0x80) returned 1 [0261.114] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\kBDFHKFGDEZa5WoW.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\kbdfhkfgdeza5wow.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0261.114] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=28595) returned 1 [0261.114] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=28595) returned 1 [0261.114] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x6e91, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0261.115] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0261.115] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.115] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae6510) returned 1 [0261.115] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0261.116] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.116] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x6fb3, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0x6fb3, lpOverlapped=0x0) returned 1 [0261.117] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0261.117] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x6fb3, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x6fc0) returned 1 [0261.118] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.118] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x6fc0, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0x6fc0, lpOverlapped=0x0) returned 1 [0261.118] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0261.118] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0261.118] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0261.118] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0261.118] CloseHandle (hObject=0x47c) returned 1 [0261.134] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0261.138] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0261.138] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0261.138] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0261.138] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0261.139] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\mGj3Y4B.xlsx", dwFileAttributes=0x80) returned 1 [0261.139] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\mGj3Y4B.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\mgj3y4b.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0261.140] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=80692) returned 1 [0261.140] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=80692) returned 1 [0261.140] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x13a12, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0261.140] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0261.141] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.141] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae6f20) returned 1 [0261.141] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0261.141] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.141] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x13b34, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0x13b34, lpOverlapped=0x0) returned 1 [0261.142] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0261.142] CryptEncrypt (in: hKey=0x665aae6f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x13b34, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x13b40) returned 1 [0261.143] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.143] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x13b40, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0x13b40, lpOverlapped=0x0) returned 1 [0261.143] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0261.143] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0261.143] CryptExportKey (in: hKey=0x665aae6f20, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0261.143] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0261.143] CloseHandle (hObject=0x47c) returned 1 [0261.160] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0261.165] CryptDestroyKey (hKey=0x665aae6f20) returned 1 [0261.165] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0261.165] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0261.165] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0261.166] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\mnpm.rtf", dwFileAttributes=0x80) returned 1 [0261.169] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\mnpm.rtf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\mnpm.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0261.169] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=95801) returned 1 [0261.169] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=95801) returned 1 [0261.170] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x17517, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0261.170] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0261.171] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.171] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae6cf0) returned 1 [0261.171] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0261.171] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.171] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x17639, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0x17639, lpOverlapped=0x0) returned 1 [0261.174] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0261.174] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x17639, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x17640) returned 1 [0261.174] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.174] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x17640, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0x17640, lpOverlapped=0x0) returned 1 [0261.174] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0261.174] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0261.174] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0261.174] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0261.174] CloseHandle (hObject=0x47c) returned 1 [0261.189] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0261.193] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0261.193] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0261.193] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0261.193] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0261.193] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\mWyWn.pptx", dwFileAttributes=0x80) returned 1 [0261.194] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\mWyWn.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\mwywn.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0261.194] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=67992) returned 1 [0261.194] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=67992) returned 1 [0261.194] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x10876, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0261.194] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0261.196] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.196] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae66d0) returned 1 [0261.196] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0261.196] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.196] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x10998, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0x10998, lpOverlapped=0x0) returned 1 [0261.198] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0261.198] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x10998, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x109a0) returned 1 [0261.198] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.198] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x109a0, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0x109a0, lpOverlapped=0x0) returned 1 [0261.198] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0261.198] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0261.198] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0261.198] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0261.198] CloseHandle (hObject=0x47c) returned 1 [0261.217] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0261.221] CryptDestroyKey (hKey=0x665aae66d0) returned 1 [0261.221] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0261.221] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0261.221] SetLastError (dwErrCode=0x0) [0261.221] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0261.222] GetLastError () returned 0xb7 [0261.222] CloseHandle (hObject=0x47c) returned 1 [0261.222] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Music\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0xffffffffffffffff [0261.222] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0261.222] SetLastError (dwErrCode=0x0) [0261.222] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Music\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\my music\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0261.228] GetLastError () returned 0x0 [0261.228] WriteFile (in: hFile=0x47c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7d3f0*=0x324, lpOverlapped=0x0) returned 1 [0261.229] CloseHandle (hObject=0x47c) returned 1 [0261.229] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0261.229] SetLastError (dwErrCode=0x0) [0261.229] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0261.229] GetLastError () returned 0xb7 [0261.229] CloseHandle (hObject=0x47c) returned 1 [0261.230] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Pictures\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0xffffffffffffffff [0261.230] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0261.230] SetLastError (dwErrCode=0x0) [0261.230] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Pictures\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\my pictures\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0261.231] GetLastError () returned 0x0 [0261.231] WriteFile (in: hFile=0x47c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7d3f0*=0x324, lpOverlapped=0x0) returned 1 [0261.231] CloseHandle (hObject=0x47c) returned 1 [0261.231] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0261.231] SetLastError (dwErrCode=0x0) [0261.231] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0261.232] GetLastError () returned 0xb7 [0261.232] CloseHandle (hObject=0x47c) returned 1 [0261.232] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665d90c260 [0261.232] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0261.232] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0261.232] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0261.232] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0261.232] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\Favorites.vssx", dwFileAttributes=0x80) returned 1 [0261.245] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\Favorites.vssx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\my shapes\\favorites.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0261.245] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=0) returned 1 [0261.245] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=0) returned 1 [0261.245] CloseHandle (hObject=0x570) returned 1 [0261.245] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0261.245] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0261.245] SetLastError (dwErrCode=0x0) [0261.245] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\my shapes\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0261.338] GetLastError () returned 0x0 [0261.338] WriteFile (in: hFile=0x570, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7cc40*=0x324, lpOverlapped=0x0) returned 1 [0261.339] CloseHandle (hObject=0x570) returned 1 [0261.339] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\_private\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90c1a0 [0261.339] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0261.339] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0261.339] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0261.340] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\_private\\folder.ico", dwFileAttributes=0x80) returned 1 [0261.340] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\_private\\folder.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\my shapes\\_private\\folder.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0261.340] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c288 | out: lpFileSize=0x665da7c288*=29926) returned 1 [0261.340] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c298 | out: lpFileSize=0x665da7c298*=29926) returned 1 [0261.340] SetFilePointerEx (in: hFile=0x60c, liDistanceToMove=0x73c4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0261.341] ReadFile (in: hFile=0x60c, lpBuffer=0x665da7c2e8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7c2a8, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2e8*, lpNumberOfBytesRead=0x665da7c2a8*=0x19, lpOverlapped=0x0) returned 1 [0261.455] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.455] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7c270 | out: phKey=0x665da7c270*=0x665aae6820) returned 1 [0261.455] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0261.456] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.456] ReadFile (in: hFile=0x60c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x74e6, lpNumberOfBytesRead=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7c280*=0x74e6, lpOverlapped=0x0) returned 1 [0261.505] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4250) returned 1 [0261.505] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x74e6, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x74f0) returned 1 [0261.505] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.505] WriteFile (in: hFile=0x60c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x74f0, lpNumberOfBytesWritten=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7c280*=0x74f0, lpOverlapped=0x0) returned 1 [0261.505] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c2c0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2c0*, lpNumberOfBytesWritten=0x665da7c284*=0x6, lpOverlapped=0x0) returned 1 [0261.506] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7c290 | out: pbData=0x0*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0261.506] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7c310, pdwDataLen=0x665da7c290 | out: pbData=0x665da7c310*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0261.506] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c310*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c310*, lpNumberOfBytesWritten=0x665da7c284*=0x10c, lpOverlapped=0x0) returned 1 [0261.506] CloseHandle (hObject=0x60c) returned 1 [0261.520] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0261.524] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0261.524] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0261.524] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0261.524] FindClose (in: hFindFile=0x665d90c1a0 | out: hFindFile=0x665d90c1a0) returned 1 [0261.524] SetLastError (dwErrCode=0x0) [0261.524] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\_private\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\my shapes\\_private\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0261.525] GetLastError () returned 0x0 [0261.525] WriteFile (in: hFile=0x570, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7cc40*=0x324, lpOverlapped=0x0) returned 1 [0261.526] CloseHandle (hObject=0x570) returned 1 [0261.526] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0261.526] FindClose (in: hFindFile=0x665d90c260 | out: hFindFile=0x665d90c260) returned 1 [0261.526] SetLastError (dwErrCode=0x0) [0261.526] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\my shapes\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0261.526] GetLastError () returned 0xb7 [0261.526] CloseHandle (hObject=0x47c) returned 1 [0261.526] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0261.526] SetLastError (dwErrCode=0x0) [0261.526] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0261.526] GetLastError () returned 0xb7 [0261.526] CloseHandle (hObject=0x47c) returned 1 [0261.527] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Videos\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0xffffffffffffffff [0261.527] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0261.527] SetLastError (dwErrCode=0x0) [0261.527] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Videos\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\my videos\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0261.527] GetLastError () returned 0x0 [0261.527] WriteFile (in: hFile=0x47c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7d3f0*=0x324, lpOverlapped=0x0) returned 1 [0261.528] CloseHandle (hObject=0x47c) returned 1 [0261.528] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0261.528] SetLastError (dwErrCode=0x0) [0261.528] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0261.528] GetLastError () returned 0xb7 [0261.528] CloseHandle (hObject=0x47c) returned 1 [0261.528] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\nPSMqpRnVa\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665d90d040 [0261.530] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0261.530] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0261.530] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0261.530] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\nPSMqpRnVa\\6eZbj.odt", dwFileAttributes=0x80) returned 1 [0261.530] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\nPSMqpRnVa\\6eZbj.odt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\npsmqprnva\\6ezbj.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0261.531] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=31725) returned 1 [0261.531] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=31725) returned 1 [0261.531] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x7acb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0261.531] ReadFile (in: hFile=0x570, lpBuffer=0x665da7ca98, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca98*, lpNumberOfBytesRead=0x665da7ca58*=0x19, lpOverlapped=0x0) returned 1 [0261.532] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.532] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ca20 | out: phKey=0x665da7ca20*=0x665aae65f0) returned 1 [0261.532] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0261.532] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.532] ReadFile (in: hFile=0x570, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x7bed, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ca30*=0x7bed, lpOverlapped=0x0) returned 1 [0261.533] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4250) returned 1 [0261.533] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x7bed, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x7bf0) returned 1 [0261.533] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.533] WriteFile (in: hFile=0x570, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x7bf0, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ca30*=0x7bf0, lpOverlapped=0x0) returned 1 [0261.533] WriteFile (in: hFile=0x570, lpBuffer=0x665da7ca70*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca70*, lpNumberOfBytesWritten=0x665da7ca34*=0x6, lpOverlapped=0x0) returned 1 [0261.534] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ca40 | out: pbData=0x0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0261.534] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7cac0, pdwDataLen=0x665da7ca40 | out: pbData=0x665da7cac0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0261.534] WriteFile (in: hFile=0x570, lpBuffer=0x665da7cac0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7cac0*, lpNumberOfBytesWritten=0x665da7ca34*=0x10c, lpOverlapped=0x0) returned 1 [0261.534] CloseHandle (hObject=0x570) returned 1 [0261.554] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0261.559] CryptDestroyKey (hKey=0x665aae65f0) returned 1 [0261.559] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0261.559] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0261.559] SetLastError (dwErrCode=0x0) [0261.559] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\nPSMqpRnVa\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\npsmqprnva\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0261.560] GetLastError () returned 0x0 [0261.560] WriteFile (in: hFile=0x570, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7cc40*=0x324, lpOverlapped=0x0) returned 1 [0261.562] CloseHandle (hObject=0x570) returned 1 [0261.562] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\nPSMqpRnVa\\84iIxfCpruNzW\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90d340 [0261.565] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0261.565] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0261.565] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0261.566] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\nPSMqpRnVa\\84iIxfCpruNzW\\gEEsKnxx6E1yIhz_.ppt", dwFileAttributes=0x80) returned 1 [0261.569] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\nPSMqpRnVa\\84iIxfCpruNzW\\gEEsKnxx6E1yIhz_.ppt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\npsmqprnva\\84iixfcprunzw\\geesknxx6e1yihz_.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0261.569] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c288 | out: lpFileSize=0x665da7c288*=12149) returned 1 [0261.569] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c298 | out: lpFileSize=0x665da7c298*=12149) returned 1 [0261.569] SetFilePointerEx (in: hFile=0x60c, liDistanceToMove=0x2e53, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0261.570] ReadFile (in: hFile=0x60c, lpBuffer=0x665da7c2e8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7c2a8, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2e8*, lpNumberOfBytesRead=0x665da7c2a8*=0x19, lpOverlapped=0x0) returned 1 [0261.571] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.571] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7c270 | out: phKey=0x665da7c270*=0x665aae6510) returned 1 [0261.571] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0261.571] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.571] ReadFile (in: hFile=0x60c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x2f75, lpNumberOfBytesRead=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7c280*=0x2f75, lpOverlapped=0x0) returned 1 [0261.572] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4250) returned 1 [0261.572] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x2f75, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x2f80) returned 1 [0261.572] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.572] WriteFile (in: hFile=0x60c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x2f80, lpNumberOfBytesWritten=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7c280*=0x2f80, lpOverlapped=0x0) returned 1 [0261.572] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c2c0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2c0*, lpNumberOfBytesWritten=0x665da7c284*=0x6, lpOverlapped=0x0) returned 1 [0261.572] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7c290 | out: pbData=0x0*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0261.572] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7c310, pdwDataLen=0x665da7c290 | out: pbData=0x665da7c310*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0261.572] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c310*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c310*, lpNumberOfBytesWritten=0x665da7c284*=0x10c, lpOverlapped=0x0) returned 1 [0261.572] CloseHandle (hObject=0x60c) returned 1 [0261.589] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0261.593] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0261.593] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0261.593] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0261.593] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0261.594] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\nPSMqpRnVa\\84iIxfCpruNzW\\goW6NV99nQHRxDmJXJ.rtf", dwFileAttributes=0x80) returned 1 [0261.595] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\nPSMqpRnVa\\84iIxfCpruNzW\\goW6NV99nQHRxDmJXJ.rtf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\npsmqprnva\\84iixfcprunzw\\gow6nv99nqhrxdmjxj.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0261.595] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c288 | out: lpFileSize=0x665da7c288*=21781) returned 1 [0261.595] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c298 | out: lpFileSize=0x665da7c298*=21781) returned 1 [0261.595] SetFilePointerEx (in: hFile=0x60c, liDistanceToMove=0x53f3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0261.595] ReadFile (in: hFile=0x60c, lpBuffer=0x665da7c2e8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7c2a8, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2e8*, lpNumberOfBytesRead=0x665da7c2a8*=0x19, lpOverlapped=0x0) returned 1 [0261.596] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.596] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7c270 | out: phKey=0x665da7c270*=0x665aae66d0) returned 1 [0261.597] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0261.597] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.597] ReadFile (in: hFile=0x60c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x5515, lpNumberOfBytesRead=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7c280*=0x5515, lpOverlapped=0x0) returned 1 [0261.598] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4250) returned 1 [0261.598] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x5515, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x5520) returned 1 [0261.598] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.598] WriteFile (in: hFile=0x60c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x5520, lpNumberOfBytesWritten=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7c280*=0x5520, lpOverlapped=0x0) returned 1 [0261.598] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c2c0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2c0*, lpNumberOfBytesWritten=0x665da7c284*=0x6, lpOverlapped=0x0) returned 1 [0261.598] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7c290 | out: pbData=0x0*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0261.598] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7c310, pdwDataLen=0x665da7c290 | out: pbData=0x665da7c310*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0261.598] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c310*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c310*, lpNumberOfBytesWritten=0x665da7c284*=0x10c, lpOverlapped=0x0) returned 1 [0261.598] CloseHandle (hObject=0x60c) returned 1 [0261.615] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0261.619] CryptDestroyKey (hKey=0x665aae66d0) returned 1 [0261.619] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0261.619] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0261.619] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0261.619] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\nPSMqpRnVa\\84iIxfCpruNzW\\h_Uh.docx", dwFileAttributes=0x80) returned 1 [0261.620] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\nPSMqpRnVa\\84iIxfCpruNzW\\h_Uh.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\npsmqprnva\\84iixfcprunzw\\h_uh.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0261.620] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c288 | out: lpFileSize=0x665da7c288*=6963) returned 1 [0261.620] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c298 | out: lpFileSize=0x665da7c298*=6963) returned 1 [0261.620] SetFilePointerEx (in: hFile=0x60c, liDistanceToMove=0x1a11, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0261.620] ReadFile (in: hFile=0x60c, lpBuffer=0x665da7c2e8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7c2a8, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2e8*, lpNumberOfBytesRead=0x665da7c2a8*=0x19, lpOverlapped=0x0) returned 1 [0261.621] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.622] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7c270 | out: phKey=0x665da7c270*=0x665aae6cf0) returned 1 [0261.622] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0261.622] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.622] ReadFile (in: hFile=0x60c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x1b33, lpNumberOfBytesRead=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7c280*=0x1b33, lpOverlapped=0x0) returned 1 [0261.622] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4250) returned 1 [0261.622] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x1b33, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x1b40) returned 1 [0261.622] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.622] WriteFile (in: hFile=0x60c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x1b40, lpNumberOfBytesWritten=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7c280*=0x1b40, lpOverlapped=0x0) returned 1 [0261.623] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c2c0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2c0*, lpNumberOfBytesWritten=0x665da7c284*=0x6, lpOverlapped=0x0) returned 1 [0261.623] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7c290 | out: pbData=0x0*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0261.623] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7c310, pdwDataLen=0x665da7c290 | out: pbData=0x665da7c310*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0261.623] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c310*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c310*, lpNumberOfBytesWritten=0x665da7c284*=0x10c, lpOverlapped=0x0) returned 1 [0261.623] CloseHandle (hObject=0x60c) returned 1 [0261.640] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0261.644] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0261.644] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0261.645] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0261.645] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0261.645] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\nPSMqpRnVa\\84iIxfCpruNzW\\il16NOc.xls", dwFileAttributes=0x80) returned 1 [0261.645] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\nPSMqpRnVa\\84iIxfCpruNzW\\il16NOc.xls" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\npsmqprnva\\84iixfcprunzw\\il16noc.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0261.646] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c288 | out: lpFileSize=0x665da7c288*=27291) returned 1 [0261.646] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c298 | out: lpFileSize=0x665da7c298*=27291) returned 1 [0261.646] SetFilePointerEx (in: hFile=0x60c, liDistanceToMove=0x6979, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0261.646] ReadFile (in: hFile=0x60c, lpBuffer=0x665da7c2e8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7c2a8, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2e8*, lpNumberOfBytesRead=0x665da7c2a8*=0x19, lpOverlapped=0x0) returned 1 [0261.647] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.647] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7c270 | out: phKey=0x665da7c270*=0x665aae6510) returned 1 [0261.647] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0261.647] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.647] ReadFile (in: hFile=0x60c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x6a9b, lpNumberOfBytesRead=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7c280*=0x6a9b, lpOverlapped=0x0) returned 1 [0261.648] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4250) returned 1 [0261.648] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x6a9b, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x6aa0) returned 1 [0261.648] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.648] WriteFile (in: hFile=0x60c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x6aa0, lpNumberOfBytesWritten=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7c280*=0x6aa0, lpOverlapped=0x0) returned 1 [0261.648] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c2c0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2c0*, lpNumberOfBytesWritten=0x665da7c284*=0x6, lpOverlapped=0x0) returned 1 [0261.648] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7c290 | out: pbData=0x0*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0261.648] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7c310, pdwDataLen=0x665da7c290 | out: pbData=0x665da7c310*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0261.649] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c310*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c310*, lpNumberOfBytesWritten=0x665da7c284*=0x10c, lpOverlapped=0x0) returned 1 [0261.649] CloseHandle (hObject=0x60c) returned 1 [0261.703] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0261.707] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0261.707] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0261.707] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0261.707] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0261.707] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\nPSMqpRnVa\\84iIxfCpruNzW\\KAZQEVoCJw.ots", dwFileAttributes=0x80) returned 1 [0261.708] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\nPSMqpRnVa\\84iIxfCpruNzW\\KAZQEVoCJw.ots" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\npsmqprnva\\84iixfcprunzw\\kazqevocjw.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0261.708] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c288 | out: lpFileSize=0x665da7c288*=24365) returned 1 [0261.708] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c298 | out: lpFileSize=0x665da7c298*=24365) returned 1 [0261.708] SetFilePointerEx (in: hFile=0x60c, liDistanceToMove=0x5e0b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0261.709] ReadFile (in: hFile=0x60c, lpBuffer=0x665da7c2e8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7c2a8, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2e8*, lpNumberOfBytesRead=0x665da7c2a8*=0x19, lpOverlapped=0x0) returned 1 [0261.710] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.710] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7c270 | out: phKey=0x665da7c270*=0x665aae6cf0) returned 1 [0261.710] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0261.710] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.710] ReadFile (in: hFile=0x60c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x5f2d, lpNumberOfBytesRead=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7c280*=0x5f2d, lpOverlapped=0x0) returned 1 [0261.711] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4250) returned 1 [0261.711] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x5f2d, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x5f30) returned 1 [0261.711] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.711] WriteFile (in: hFile=0x60c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x5f30, lpNumberOfBytesWritten=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7c280*=0x5f30, lpOverlapped=0x0) returned 1 [0261.711] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c2c0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2c0*, lpNumberOfBytesWritten=0x665da7c284*=0x6, lpOverlapped=0x0) returned 1 [0261.711] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7c290 | out: pbData=0x0*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0261.711] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7c310, pdwDataLen=0x665da7c290 | out: pbData=0x665da7c310*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0261.711] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c310*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c310*, lpNumberOfBytesWritten=0x665da7c284*=0x10c, lpOverlapped=0x0) returned 1 [0261.712] CloseHandle (hObject=0x60c) returned 1 [0261.728] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0261.732] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0261.732] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0261.732] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0261.732] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0261.732] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\nPSMqpRnVa\\84iIxfCpruNzW\\MH FBkm5eYpIrFBfH.csv", dwFileAttributes=0x80) returned 1 [0261.733] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\nPSMqpRnVa\\84iIxfCpruNzW\\MH FBkm5eYpIrFBfH.csv" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\npsmqprnva\\84iixfcprunzw\\mh fbkm5eypirfbfh.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0261.733] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c288 | out: lpFileSize=0x665da7c288*=8739) returned 1 [0261.733] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c298 | out: lpFileSize=0x665da7c298*=8739) returned 1 [0261.733] SetFilePointerEx (in: hFile=0x60c, liDistanceToMove=0x2101, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0261.733] ReadFile (in: hFile=0x60c, lpBuffer=0x665da7c2e8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7c2a8, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2e8*, lpNumberOfBytesRead=0x665da7c2a8*=0x19, lpOverlapped=0x0) returned 1 [0261.735] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.735] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7c270 | out: phKey=0x665da7c270*=0x665aae65f0) returned 1 [0261.735] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0261.735] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.735] ReadFile (in: hFile=0x60c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x2223, lpNumberOfBytesRead=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7c280*=0x2223, lpOverlapped=0x0) returned 1 [0261.735] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4250) returned 1 [0261.735] CryptEncrypt (in: hKey=0x665aae65f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x2223, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x2230) returned 1 [0261.735] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.736] WriteFile (in: hFile=0x60c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x2230, lpNumberOfBytesWritten=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7c280*=0x2230, lpOverlapped=0x0) returned 1 [0261.736] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c2c0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2c0*, lpNumberOfBytesWritten=0x665da7c284*=0x6, lpOverlapped=0x0) returned 1 [0261.736] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7c290 | out: pbData=0x0*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0261.736] CryptExportKey (in: hKey=0x665aae65f0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7c310, pdwDataLen=0x665da7c290 | out: pbData=0x665da7c310*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0261.736] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c310*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c310*, lpNumberOfBytesWritten=0x665da7c284*=0x10c, lpOverlapped=0x0) returned 1 [0261.736] CloseHandle (hObject=0x60c) returned 1 [0261.753] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0261.756] CryptDestroyKey (hKey=0x665aae65f0) returned 1 [0261.757] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0261.757] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0261.757] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0261.757] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\nPSMqpRnVa\\84iIxfCpruNzW\\OBElb.xls", dwFileAttributes=0x80) returned 1 [0261.758] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\nPSMqpRnVa\\84iIxfCpruNzW\\OBElb.xls" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\npsmqprnva\\84iixfcprunzw\\obelb.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0261.758] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c288 | out: lpFileSize=0x665da7c288*=74857) returned 1 [0261.758] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c298 | out: lpFileSize=0x665da7c298*=74857) returned 1 [0261.758] SetFilePointerEx (in: hFile=0x60c, liDistanceToMove=0x12347, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0261.758] ReadFile (in: hFile=0x60c, lpBuffer=0x665da7c2e8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7c2a8, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2e8*, lpNumberOfBytesRead=0x665da7c2a8*=0x19, lpOverlapped=0x0) returned 1 [0261.760] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.760] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7c270 | out: phKey=0x665da7c270*=0x665aae6510) returned 1 [0261.760] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0261.760] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.760] ReadFile (in: hFile=0x60c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x12469, lpNumberOfBytesRead=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7c280*=0x12469, lpOverlapped=0x0) returned 1 [0261.762] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4250) returned 1 [0261.762] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x12469, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x12470) returned 1 [0261.762] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.762] WriteFile (in: hFile=0x60c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x12470, lpNumberOfBytesWritten=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7c280*=0x12470, lpOverlapped=0x0) returned 1 [0261.762] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c2c0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2c0*, lpNumberOfBytesWritten=0x665da7c284*=0x6, lpOverlapped=0x0) returned 1 [0261.762] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7c290 | out: pbData=0x0*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0261.762] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7c310, pdwDataLen=0x665da7c290 | out: pbData=0x665da7c310*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0261.762] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c310*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c310*, lpNumberOfBytesWritten=0x665da7c284*=0x10c, lpOverlapped=0x0) returned 1 [0261.762] CloseHandle (hObject=0x60c) returned 1 [0261.777] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0261.782] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0261.782] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0261.782] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0261.782] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0261.782] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\nPSMqpRnVa\\84iIxfCpruNzW\\p8W1Ou403zxTueC3x6Al.odt", dwFileAttributes=0x80) returned 1 [0261.782] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\nPSMqpRnVa\\84iIxfCpruNzW\\p8W1Ou403zxTueC3x6Al.odt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\npsmqprnva\\84iixfcprunzw\\p8w1ou403zxtuec3x6al.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0261.783] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c288 | out: lpFileSize=0x665da7c288*=62352) returned 1 [0261.783] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c298 | out: lpFileSize=0x665da7c298*=62352) returned 1 [0261.783] SetFilePointerEx (in: hFile=0x60c, liDistanceToMove=0xf26e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0261.783] ReadFile (in: hFile=0x60c, lpBuffer=0x665da7c2e8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7c2a8, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2e8*, lpNumberOfBytesRead=0x665da7c2a8*=0x19, lpOverlapped=0x0) returned 1 [0261.785] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.785] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7c270 | out: phKey=0x665da7c270*=0x665aae6510) returned 1 [0261.785] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0261.785] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.785] ReadFile (in: hFile=0x60c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xf390, lpNumberOfBytesRead=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7c280*=0xf390, lpOverlapped=0x0) returned 1 [0261.786] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4250) returned 1 [0261.786] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0xf390, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0xf3a0) returned 1 [0261.786] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.786] WriteFile (in: hFile=0x60c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xf3a0, lpNumberOfBytesWritten=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7c280*=0xf3a0, lpOverlapped=0x0) returned 1 [0261.787] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c2c0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2c0*, lpNumberOfBytesWritten=0x665da7c284*=0x6, lpOverlapped=0x0) returned 1 [0261.787] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7c290 | out: pbData=0x0*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0261.787] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7c310, pdwDataLen=0x665da7c290 | out: pbData=0x665da7c310*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0261.787] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c310*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c310*, lpNumberOfBytesWritten=0x665da7c284*=0x10c, lpOverlapped=0x0) returned 1 [0261.787] CloseHandle (hObject=0x60c) returned 1 [0261.802] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0261.806] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0261.806] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0261.806] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0261.806] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0261.806] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\nPSMqpRnVa\\84iIxfCpruNzW\\UDA051qSpV9uyeI1-.ppt", dwFileAttributes=0x80) returned 1 [0261.806] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\nPSMqpRnVa\\84iIxfCpruNzW\\UDA051qSpV9uyeI1-.ppt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\npsmqprnva\\84iixfcprunzw\\uda051qspv9uyei1-.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0261.807] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c288 | out: lpFileSize=0x665da7c288*=27759) returned 1 [0261.807] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c298 | out: lpFileSize=0x665da7c298*=27759) returned 1 [0261.807] SetFilePointerEx (in: hFile=0x60c, liDistanceToMove=0x6b4d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0261.807] ReadFile (in: hFile=0x60c, lpBuffer=0x665da7c2e8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7c2a8, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2e8*, lpNumberOfBytesRead=0x665da7c2a8*=0x19, lpOverlapped=0x0) returned 1 [0261.808] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.808] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7c270 | out: phKey=0x665da7c270*=0x665aae6510) returned 1 [0261.808] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0261.808] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.808] ReadFile (in: hFile=0x60c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x6c6f, lpNumberOfBytesRead=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7c280*=0x6c6f, lpOverlapped=0x0) returned 1 [0261.809] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4250) returned 1 [0261.809] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x6c6f, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x6c70) returned 1 [0261.809] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.809] WriteFile (in: hFile=0x60c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x6c70, lpNumberOfBytesWritten=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7c280*=0x6c70, lpOverlapped=0x0) returned 1 [0261.809] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c2c0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2c0*, lpNumberOfBytesWritten=0x665da7c284*=0x6, lpOverlapped=0x0) returned 1 [0261.810] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7c290 | out: pbData=0x0*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0261.810] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7c310, pdwDataLen=0x665da7c290 | out: pbData=0x665da7c310*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0261.810] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c310*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c310*, lpNumberOfBytesWritten=0x665da7c284*=0x10c, lpOverlapped=0x0) returned 1 [0261.810] CloseHandle (hObject=0x60c) returned 1 [0261.826] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0261.831] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0261.831] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0261.831] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0261.831] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0261.831] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\nPSMqpRnVa\\84iIxfCpruNzW\\Ununsf1ed6aph.xlsx", dwFileAttributes=0x80) returned 1 [0261.832] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\nPSMqpRnVa\\84iIxfCpruNzW\\Ununsf1ed6aph.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\npsmqprnva\\84iixfcprunzw\\ununsf1ed6aph.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0261.832] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c288 | out: lpFileSize=0x665da7c288*=96295) returned 1 [0261.832] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c298 | out: lpFileSize=0x665da7c298*=96295) returned 1 [0261.832] SetFilePointerEx (in: hFile=0x60c, liDistanceToMove=0x17705, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0261.832] ReadFile (in: hFile=0x60c, lpBuffer=0x665da7c2e8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7c2a8, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2e8*, lpNumberOfBytesRead=0x665da7c2a8*=0x19, lpOverlapped=0x0) returned 1 [0261.833] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.833] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7c270 | out: phKey=0x665da7c270*=0x665aae6820) returned 1 [0261.833] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0261.834] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.834] ReadFile (in: hFile=0x60c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x17827, lpNumberOfBytesRead=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7c280*=0x17827, lpOverlapped=0x0) returned 1 [0261.835] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4250) returned 1 [0261.835] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x17827, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x17830) returned 1 [0261.835] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.836] WriteFile (in: hFile=0x60c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x17830, lpNumberOfBytesWritten=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7c280*=0x17830, lpOverlapped=0x0) returned 1 [0261.836] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c2c0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2c0*, lpNumberOfBytesWritten=0x665da7c284*=0x6, lpOverlapped=0x0) returned 1 [0261.836] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7c290 | out: pbData=0x0*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0261.836] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7c310, pdwDataLen=0x665da7c290 | out: pbData=0x665da7c310*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0261.836] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c310*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c310*, lpNumberOfBytesWritten=0x665da7c284*=0x10c, lpOverlapped=0x0) returned 1 [0261.836] CloseHandle (hObject=0x60c) returned 1 [0261.852] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0261.856] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0261.856] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0261.856] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0261.856] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0261.857] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\nPSMqpRnVa\\84iIxfCpruNzW\\wBEfsutJszF.ots", dwFileAttributes=0x80) returned 1 [0261.857] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\nPSMqpRnVa\\84iIxfCpruNzW\\wBEfsutJszF.ots" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\npsmqprnva\\84iixfcprunzw\\wbefsutjszf.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0261.858] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c288 | out: lpFileSize=0x665da7c288*=71477) returned 1 [0261.858] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c298 | out: lpFileSize=0x665da7c298*=71477) returned 1 [0261.858] SetFilePointerEx (in: hFile=0x60c, liDistanceToMove=0x11613, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0261.858] ReadFile (in: hFile=0x60c, lpBuffer=0x665da7c2e8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7c2a8, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2e8*, lpNumberOfBytesRead=0x665da7c2a8*=0x19, lpOverlapped=0x0) returned 1 [0261.859] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.859] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7c270 | out: phKey=0x665da7c270*=0x665aae6820) returned 1 [0261.859] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0261.859] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.859] ReadFile (in: hFile=0x60c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x11735, lpNumberOfBytesRead=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7c280*=0x11735, lpOverlapped=0x0) returned 1 [0261.861] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4250) returned 1 [0261.861] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x11735, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x11740) returned 1 [0261.861] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.861] WriteFile (in: hFile=0x60c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x11740, lpNumberOfBytesWritten=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7c280*=0x11740, lpOverlapped=0x0) returned 1 [0261.861] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c2c0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2c0*, lpNumberOfBytesWritten=0x665da7c284*=0x6, lpOverlapped=0x0) returned 1 [0261.861] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7c290 | out: pbData=0x0*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0261.861] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7c310, pdwDataLen=0x665da7c290 | out: pbData=0x665da7c310*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0261.861] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c310*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c310*, lpNumberOfBytesWritten=0x665da7c284*=0x10c, lpOverlapped=0x0) returned 1 [0261.861] CloseHandle (hObject=0x60c) returned 1 [0261.876] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0261.880] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0261.880] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0261.880] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0261.880] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0261.881] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\nPSMqpRnVa\\84iIxfCpruNzW\\wpiA4Y.ots", dwFileAttributes=0x80) returned 1 [0261.881] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\nPSMqpRnVa\\84iIxfCpruNzW\\wpiA4Y.ots" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\npsmqprnva\\84iixfcprunzw\\wpia4y.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0261.881] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c288 | out: lpFileSize=0x665da7c288*=74496) returned 1 [0261.881] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c298 | out: lpFileSize=0x665da7c298*=74496) returned 1 [0261.882] SetFilePointerEx (in: hFile=0x60c, liDistanceToMove=0x121de, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0261.882] ReadFile (in: hFile=0x60c, lpBuffer=0x665da7c2e8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7c2a8, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2e8*, lpNumberOfBytesRead=0x665da7c2a8*=0x19, lpOverlapped=0x0) returned 1 [0261.883] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.883] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7c270 | out: phKey=0x665da7c270*=0x665aae6820) returned 1 [0261.883] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0261.883] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.883] ReadFile (in: hFile=0x60c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x12300, lpNumberOfBytesRead=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7c280*=0x12300, lpOverlapped=0x0) returned 1 [0261.884] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4250) returned 1 [0261.884] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x12300, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x12310) returned 1 [0261.885] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.885] WriteFile (in: hFile=0x60c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x12310, lpNumberOfBytesWritten=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7c280*=0x12310, lpOverlapped=0x0) returned 1 [0261.885] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c2c0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2c0*, lpNumberOfBytesWritten=0x665da7c284*=0x6, lpOverlapped=0x0) returned 1 [0261.885] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7c290 | out: pbData=0x0*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0261.885] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7c310, pdwDataLen=0x665da7c290 | out: pbData=0x665da7c310*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0261.885] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c310*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c310*, lpNumberOfBytesWritten=0x665da7c284*=0x10c, lpOverlapped=0x0) returned 1 [0261.885] CloseHandle (hObject=0x60c) returned 1 [0261.899] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0261.903] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0261.903] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0261.903] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0261.903] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0261.904] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\nPSMqpRnVa\\84iIxfCpruNzW\\xgay.pptx", dwFileAttributes=0x80) returned 1 [0261.904] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\nPSMqpRnVa\\84iIxfCpruNzW\\xgay.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\npsmqprnva\\84iixfcprunzw\\xgay.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0261.904] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c288 | out: lpFileSize=0x665da7c288*=14873) returned 1 [0261.904] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c298 | out: lpFileSize=0x665da7c298*=14873) returned 1 [0261.905] SetFilePointerEx (in: hFile=0x60c, liDistanceToMove=0x38f7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0261.905] ReadFile (in: hFile=0x60c, lpBuffer=0x665da7c2e8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7c2a8, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2e8*, lpNumberOfBytesRead=0x665da7c2a8*=0x19, lpOverlapped=0x0) returned 1 [0261.906] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.906] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7c270 | out: phKey=0x665da7c270*=0x665aae6cf0) returned 1 [0261.906] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0261.906] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.906] ReadFile (in: hFile=0x60c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3a19, lpNumberOfBytesRead=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7c280*=0x3a19, lpOverlapped=0x0) returned 1 [0261.907] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4250) returned 1 [0261.907] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x3a19, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x3a20) returned 1 [0261.907] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.907] WriteFile (in: hFile=0x60c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3a20, lpNumberOfBytesWritten=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7c280*=0x3a20, lpOverlapped=0x0) returned 1 [0261.907] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c2c0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2c0*, lpNumberOfBytesWritten=0x665da7c284*=0x6, lpOverlapped=0x0) returned 1 [0261.907] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7c290 | out: pbData=0x0*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0261.907] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7c310, pdwDataLen=0x665da7c290 | out: pbData=0x665da7c310*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0261.907] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c310*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c310*, lpNumberOfBytesWritten=0x665da7c284*=0x10c, lpOverlapped=0x0) returned 1 [0261.908] CloseHandle (hObject=0x60c) returned 1 [0261.924] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0261.928] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0261.928] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0261.928] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0261.928] FindClose (in: hFindFile=0x665d90d340 | out: hFindFile=0x665d90d340) returned 1 [0261.928] SetLastError (dwErrCode=0x0) [0261.928] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\nPSMqpRnVa\\84iIxfCpruNzW\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\npsmqprnva\\84iixfcprunzw\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0261.929] GetLastError () returned 0x0 [0261.929] WriteFile (in: hFile=0x570, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7cc40*=0x324, lpOverlapped=0x0) returned 1 [0261.929] CloseHandle (hObject=0x570) returned 1 [0261.930] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0261.930] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0261.930] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\nPSMqpRnVa\\otvBop-hDOyMdgXUb.pps", dwFileAttributes=0x80) returned 1 [0261.930] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\nPSMqpRnVa\\otvBop-hDOyMdgXUb.pps" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\npsmqprnva\\otvbop-hdoymdgxub.pps"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0261.931] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=24855) returned 1 [0261.931] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=24855) returned 1 [0261.931] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x5ff5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0261.931] ReadFile (in: hFile=0x570, lpBuffer=0x665da7ca98, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca98*, lpNumberOfBytesRead=0x665da7ca58*=0x19, lpOverlapped=0x0) returned 1 [0261.932] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.932] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ca20 | out: phKey=0x665da7ca20*=0x665aae70e0) returned 1 [0261.932] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0261.932] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.932] ReadFile (in: hFile=0x570, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x6117, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ca30*=0x6117, lpOverlapped=0x0) returned 1 [0261.933] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4250) returned 1 [0261.933] CryptEncrypt (in: hKey=0x665aae70e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x6117, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x6120) returned 1 [0261.933] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.933] WriteFile (in: hFile=0x570, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x6120, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ca30*=0x6120, lpOverlapped=0x0) returned 1 [0261.933] WriteFile (in: hFile=0x570, lpBuffer=0x665da7ca70*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca70*, lpNumberOfBytesWritten=0x665da7ca34*=0x6, lpOverlapped=0x0) returned 1 [0261.933] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ca40 | out: pbData=0x0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0261.933] CryptExportKey (in: hKey=0x665aae70e0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7cac0, pdwDataLen=0x665da7ca40 | out: pbData=0x665da7cac0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0261.933] WriteFile (in: hFile=0x570, lpBuffer=0x665da7cac0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7cac0*, lpNumberOfBytesWritten=0x665da7ca34*=0x10c, lpOverlapped=0x0) returned 1 [0261.933] CloseHandle (hObject=0x570) returned 1 [0261.949] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0261.954] CryptDestroyKey (hKey=0x665aae70e0) returned 1 [0261.954] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0261.954] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0261.954] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0261.954] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\nPSMqpRnVa\\RLXer.odp", dwFileAttributes=0x80) returned 1 [0261.955] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\nPSMqpRnVa\\RLXer.odp" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\npsmqprnva\\rlxer.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0261.955] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=24630) returned 1 [0261.955] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=24630) returned 1 [0261.955] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x5f14, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0261.955] ReadFile (in: hFile=0x570, lpBuffer=0x665da7ca98, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca98*, lpNumberOfBytesRead=0x665da7ca58*=0x19, lpOverlapped=0x0) returned 1 [0261.957] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.957] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ca20 | out: phKey=0x665da7ca20*=0x665aae7150) returned 1 [0261.957] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0261.957] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.957] ReadFile (in: hFile=0x570, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x6036, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ca30*=0x6036, lpOverlapped=0x0) returned 1 [0261.958] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4250) returned 1 [0261.958] CryptEncrypt (in: hKey=0x665aae7150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x6036, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x6040) returned 1 [0261.958] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.958] WriteFile (in: hFile=0x570, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x6040, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ca30*=0x6040, lpOverlapped=0x0) returned 1 [0261.959] WriteFile (in: hFile=0x570, lpBuffer=0x665da7ca70*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca70*, lpNumberOfBytesWritten=0x665da7ca34*=0x6, lpOverlapped=0x0) returned 1 [0261.959] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ca40 | out: pbData=0x0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0261.959] CryptExportKey (in: hKey=0x665aae7150, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7cac0, pdwDataLen=0x665da7ca40 | out: pbData=0x665da7cac0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0261.959] WriteFile (in: hFile=0x570, lpBuffer=0x665da7cac0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7cac0*, lpNumberOfBytesWritten=0x665da7ca34*=0x10c, lpOverlapped=0x0) returned 1 [0261.959] CloseHandle (hObject=0x570) returned 1 [0261.977] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0261.982] CryptDestroyKey (hKey=0x665aae7150) returned 1 [0261.982] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0261.982] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0261.982] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0261.982] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\nPSMqpRnVa\\tFFd8H GVY.odt", dwFileAttributes=0x80) returned 1 [0261.983] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\nPSMqpRnVa\\tFFd8H GVY.odt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\npsmqprnva\\tffd8h gvy.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0261.983] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=6339) returned 1 [0261.983] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=6339) returned 1 [0261.983] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x17a1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0261.983] ReadFile (in: hFile=0x570, lpBuffer=0x665da7ca98, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca98*, lpNumberOfBytesRead=0x665da7ca58*=0x19, lpOverlapped=0x0) returned 1 [0261.985] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.985] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ca20 | out: phKey=0x665da7ca20*=0x665aae66d0) returned 1 [0261.985] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0261.985] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.985] ReadFile (in: hFile=0x570, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x18c3, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ca30*=0x18c3, lpOverlapped=0x0) returned 1 [0261.985] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4250) returned 1 [0261.985] CryptEncrypt (in: hKey=0x665aae66d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x18c3, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x18d0) returned 1 [0261.985] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0261.985] WriteFile (in: hFile=0x570, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x18d0, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ca30*=0x18d0, lpOverlapped=0x0) returned 1 [0261.986] WriteFile (in: hFile=0x570, lpBuffer=0x665da7ca70*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca70*, lpNumberOfBytesWritten=0x665da7ca34*=0x6, lpOverlapped=0x0) returned 1 [0261.986] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ca40 | out: pbData=0x0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0261.986] CryptExportKey (in: hKey=0x665aae66d0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7cac0, pdwDataLen=0x665da7ca40 | out: pbData=0x665da7cac0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0261.986] WriteFile (in: hFile=0x570, lpBuffer=0x665da7cac0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7cac0*, lpNumberOfBytesWritten=0x665da7ca34*=0x10c, lpOverlapped=0x0) returned 1 [0261.986] CloseHandle (hObject=0x570) returned 1 [0262.003] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0262.007] CryptDestroyKey (hKey=0x665aae66d0) returned 1 [0262.007] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0262.007] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0262.007] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0262.008] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\nPSMqpRnVa\\wDVVKm5pUTJes.rtf", dwFileAttributes=0x80) returned 1 [0262.008] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\nPSMqpRnVa\\wDVVKm5pUTJes.rtf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\npsmqprnva\\wdvvkm5putjes.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0262.008] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=11890) returned 1 [0262.008] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=11890) returned 1 [0262.008] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x2d50, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0262.008] ReadFile (in: hFile=0x570, lpBuffer=0x665da7ca98, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca98*, lpNumberOfBytesRead=0x665da7ca58*=0x19, lpOverlapped=0x0) returned 1 [0262.015] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0262.015] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ca20 | out: phKey=0x665da7ca20*=0x665aae6510) returned 1 [0262.015] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0262.015] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0262.016] ReadFile (in: hFile=0x570, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x2e72, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ca30*=0x2e72, lpOverlapped=0x0) returned 1 [0262.016] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4250) returned 1 [0262.016] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x2e72, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x2e80) returned 1 [0262.016] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0262.016] WriteFile (in: hFile=0x570, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x2e80, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ca30*=0x2e80, lpOverlapped=0x0) returned 1 [0262.016] WriteFile (in: hFile=0x570, lpBuffer=0x665da7ca70*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca70*, lpNumberOfBytesWritten=0x665da7ca34*=0x6, lpOverlapped=0x0) returned 1 [0262.016] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ca40 | out: pbData=0x0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0262.016] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7cac0, pdwDataLen=0x665da7ca40 | out: pbData=0x665da7cac0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0262.017] WriteFile (in: hFile=0x570, lpBuffer=0x665da7cac0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7cac0*, lpNumberOfBytesWritten=0x665da7ca34*=0x10c, lpOverlapped=0x0) returned 1 [0262.017] CloseHandle (hObject=0x570) returned 1 [0262.033] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0262.037] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0262.037] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0262.037] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0262.037] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0262.038] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\nPSMqpRnVa\\wuT-DSxiNNA7mJ6CoQ.pdf", dwFileAttributes=0x80) returned 1 [0262.038] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\nPSMqpRnVa\\wuT-DSxiNNA7mJ6CoQ.pdf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\npsmqprnva\\wut-dsxinna7mj6coq.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0262.039] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=42175) returned 1 [0262.039] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=42175) returned 1 [0262.039] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0xa39d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0262.039] ReadFile (in: hFile=0x570, lpBuffer=0x665da7ca98, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca98*, lpNumberOfBytesRead=0x665da7ca58*=0x19, lpOverlapped=0x0) returned 1 [0262.041] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0262.041] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ca20 | out: phKey=0x665da7ca20*=0x665aae6510) returned 1 [0262.041] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0262.041] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0262.041] ReadFile (in: hFile=0x570, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xa4bf, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ca30*=0xa4bf, lpOverlapped=0x0) returned 1 [0262.042] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4250) returned 1 [0262.042] CryptEncrypt (in: hKey=0x665aae6510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0xa4bf, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0xa4c0) returned 1 [0262.042] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0262.042] WriteFile (in: hFile=0x570, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xa4c0, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ca30*=0xa4c0, lpOverlapped=0x0) returned 1 [0262.042] WriteFile (in: hFile=0x570, lpBuffer=0x665da7ca70*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca70*, lpNumberOfBytesWritten=0x665da7ca34*=0x6, lpOverlapped=0x0) returned 1 [0262.042] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ca40 | out: pbData=0x0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0262.042] CryptExportKey (in: hKey=0x665aae6510, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7cac0, pdwDataLen=0x665da7ca40 | out: pbData=0x665da7cac0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0262.042] WriteFile (in: hFile=0x570, lpBuffer=0x665da7cac0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7cac0*, lpNumberOfBytesWritten=0x665da7ca34*=0x10c, lpOverlapped=0x0) returned 1 [0262.042] CloseHandle (hObject=0x570) returned 1 [0262.059] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0262.063] CryptDestroyKey (hKey=0x665aae6510) returned 1 [0262.063] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0262.063] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0262.063] FindClose (in: hFindFile=0x665d90d040 | out: hFindFile=0x665d90d040) returned 1 [0262.063] SetLastError (dwErrCode=0x0) [0262.063] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\nPSMqpRnVa\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\npsmqprnva\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0262.063] GetLastError () returned 0xb7 [0262.063] CloseHandle (hObject=0x47c) returned 1 [0262.063] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0262.063] SetLastError (dwErrCode=0x0) [0262.063] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0262.064] GetLastError () returned 0xb7 [0262.064] CloseHandle (hObject=0x47c) returned 1 [0262.064] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665d90d340 [0262.064] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0262.064] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0262.064] SetLastError (dwErrCode=0x0) [0262.064] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\onenote notebooks\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0262.064] GetLastError () returned 0x0 [0262.064] WriteFile (in: hFile=0x570, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7cc40*=0x324, lpOverlapped=0x0) returned 1 [0262.065] CloseHandle (hObject=0x570) returned 1 [0262.065] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90c6e0 [0262.065] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0262.065] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0262.066] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0262.066] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Open Notebook.onetoc2", dwFileAttributes=0x80) returned 1 [0262.067] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Open Notebook.onetoc2" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\onenote notebooks\\my notebook\\open notebook.onetoc2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0262.067] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c288 | out: lpFileSize=0x665da7c288*=6184) returned 1 [0262.067] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c298 | out: lpFileSize=0x665da7c298*=6184) returned 1 [0262.067] SetFilePointerEx (in: hFile=0x60c, liDistanceToMove=0x1706, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0262.067] ReadFile (in: hFile=0x60c, lpBuffer=0x665da7c2e8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7c2a8, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2e8*, lpNumberOfBytesRead=0x665da7c2a8*=0x19, lpOverlapped=0x0) returned 1 [0262.141] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0262.148] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7c270 | out: phKey=0x665da7c270*=0x665aae6cf0) returned 1 [0262.154] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0262.159] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0262.160] ReadFile (in: hFile=0x60c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x1828, lpNumberOfBytesRead=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7c280*=0x1828, lpOverlapped=0x0) returned 1 [0262.171] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4250) returned 1 [0262.171] CryptEncrypt (in: hKey=0x665aae6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x1828, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x1830) returned 1 [0262.173] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0262.176] WriteFile (in: hFile=0x60c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x1830, lpNumberOfBytesWritten=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7c280*=0x1830, lpOverlapped=0x0) returned 1 [0262.184] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c2c0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2c0*, lpNumberOfBytesWritten=0x665da7c284*=0x6, lpOverlapped=0x0) returned 1 [0262.184] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7c290 | out: pbData=0x0*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0262.184] CryptExportKey (in: hKey=0x665aae6cf0, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7c310, pdwDataLen=0x665da7c290 | out: pbData=0x665da7c310*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0262.184] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c310*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c310*, lpNumberOfBytesWritten=0x665da7c284*=0x10c, lpOverlapped=0x0) returned 1 [0262.184] CloseHandle (hObject=0x60c) returned 1 [0262.200] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0262.204] CryptDestroyKey (hKey=0x665aae6cf0) returned 1 [0262.204] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0262.204] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0262.204] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0262.205] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Quick Notes.one", dwFileAttributes=0x80) returned 1 [0262.205] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Quick Notes.one" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\onenote notebooks\\my notebook\\quick notes.one"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0262.206] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c288 | out: lpFileSize=0x665da7c288*=360136) returned 1 [0262.206] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7c298 | out: lpFileSize=0x665da7c298*=360136) returned 1 [0262.206] SetFilePointerEx (in: hFile=0x60c, liDistanceToMove=0x57da6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0262.206] ReadFile (in: hFile=0x60c, lpBuffer=0x665da7c2e8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7c2a8, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2e8*, lpNumberOfBytesRead=0x665da7c2a8*=0x19, lpOverlapped=0x0) returned 1 [0262.207] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0262.207] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7c270 | out: phKey=0x665da7c270*=0x665aae6820) returned 1 [0262.207] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0262.207] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0262.207] ReadFile (in: hFile=0x60c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x57ec8, lpNumberOfBytesRead=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7c280*=0x57ec8, lpOverlapped=0x0) returned 1 [0263.567] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4250) returned 1 [0263.567] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x57ec8, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x57ed0) returned 1 [0263.568] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0263.568] WriteFile (in: hFile=0x60c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x57ed0, lpNumberOfBytesWritten=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7c280*=0x57ed0, lpOverlapped=0x0) returned 1 [0263.569] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c2c0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2c0*, lpNumberOfBytesWritten=0x665da7c284*=0x6, lpOverlapped=0x0) returned 1 [0263.569] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7c290 | out: pbData=0x0*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0263.569] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7c310, pdwDataLen=0x665da7c290 | out: pbData=0x665da7c310*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0263.569] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7c310*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c310*, lpNumberOfBytesWritten=0x665da7c284*=0x10c, lpOverlapped=0x0) returned 1 [0263.569] CloseHandle (hObject=0x60c) returned 1 [0263.579] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0263.583] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0263.583] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0263.584] FindNextFileW (in: hFindFile=0x665d90c6e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0263.584] FindClose (in: hFindFile=0x665d90c6e0 | out: hFindFile=0x665d90c6e0) returned 1 [0263.584] SetLastError (dwErrCode=0x0) [0263.584] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\onenote notebooks\\my notebook\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0263.673] GetLastError () returned 0x0 [0263.673] WriteFile (in: hFile=0x60c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7cc40*=0x324, lpOverlapped=0x0) returned 1 [0263.674] CloseHandle (hObject=0x60c) returned 1 [0263.674] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0263.674] FindClose (in: hFindFile=0x665d90d340 | out: hFindFile=0x665d90d340) returned 1 [0263.674] SetLastError (dwErrCode=0x0) [0263.674] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\onenote notebooks\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0263.674] GetLastError () returned 0xb7 [0263.674] CloseHandle (hObject=0x47c) returned 1 [0263.674] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0263.674] SetLastError (dwErrCode=0x0) [0263.674] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0263.675] GetLastError () returned 0xb7 [0263.675] CloseHandle (hObject=0x47c) returned 1 [0263.675] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665d90c620 [0263.675] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0263.675] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0263.675] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0263.675] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\lcfkj@kiekc.df.pst", dwFileAttributes=0x80) returned 1 [0263.675] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\lcfkj@kiekc.df.pst" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\outlook files\\lcfkj@kiekc.df.pst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0263.676] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=271360) returned 1 [0263.676] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=271360) returned 1 [0263.676] SetFilePointerEx (in: hFile=0x60c, liDistanceToMove=0x422de, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0263.676] ReadFile (in: hFile=0x60c, lpBuffer=0x665da7ca98, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca98*, lpNumberOfBytesRead=0x665da7ca58*=0x19, lpOverlapped=0x0) returned 1 [0263.677] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0263.677] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ca20 | out: phKey=0x665da7ca20*=0x665aae6820) returned 1 [0263.677] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0263.677] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0263.677] ReadFile (in: hFile=0x60c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x42400, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ca30*=0x42400, lpOverlapped=0x0) returned 1 [0263.922] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4250) returned 1 [0263.922] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x42400, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x42410) returned 1 [0263.922] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0263.922] WriteFile (in: hFile=0x60c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x42410, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ca30*=0x42410, lpOverlapped=0x0) returned 1 [0263.923] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7ca70*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca70*, lpNumberOfBytesWritten=0x665da7ca34*=0x6, lpOverlapped=0x0) returned 1 [0263.923] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ca40 | out: pbData=0x0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0263.923] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7cac0, pdwDataLen=0x665da7ca40 | out: pbData=0x665da7cac0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0263.923] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7cac0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7cac0*, lpNumberOfBytesWritten=0x665da7ca34*=0x10c, lpOverlapped=0x0) returned 1 [0263.923] CloseHandle (hObject=0x60c) returned 1 [0263.931] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0263.935] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0263.935] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0263.935] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0263.936] FindClose (in: hFindFile=0x665d90c620 | out: hFindFile=0x665d90c620) returned 1 [0263.936] SetLastError (dwErrCode=0x0) [0263.936] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\outlook files\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0263.936] GetLastError () returned 0x0 [0263.936] WriteFile (in: hFile=0x47c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7d3f0*=0x324, lpOverlapped=0x0) returned 1 [0263.937] CloseHandle (hObject=0x47c) returned 1 [0263.937] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0263.937] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0263.938] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\PBMmtsDb4AUmBE.csv", dwFileAttributes=0x80) returned 1 [0263.938] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\PBMmtsDb4AUmBE.csv" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\pbmmtsdb4aumbe.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0263.939] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=19477) returned 1 [0263.939] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=19477) returned 1 [0263.939] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x4af3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0263.939] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0263.940] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0263.940] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae6820) returned 1 [0263.940] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0263.940] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0263.940] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4c15, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0x4c15, lpOverlapped=0x0) returned 1 [0263.941] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0263.941] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x4c15, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x4c20) returned 1 [0263.941] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0263.941] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4c20, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0x4c20, lpOverlapped=0x0) returned 1 [0263.941] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0263.941] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0263.941] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0263.941] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0263.941] CloseHandle (hObject=0x47c) returned 1 [0263.955] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0263.959] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0263.959] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0263.959] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0263.959] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0263.959] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Q2Fqv7v2B.docx", dwFileAttributes=0x80) returned 1 [0263.959] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Q2Fqv7v2B.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\q2fqv7v2b.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0263.960] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=96798) returned 1 [0263.960] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=96798) returned 1 [0263.960] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x178fc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0263.960] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0263.961] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0263.961] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae6820) returned 1 [0263.961] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0263.961] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0263.961] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x17a1e, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0x17a1e, lpOverlapped=0x0) returned 1 [0263.963] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0263.963] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x17a1e, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x17a20) returned 1 [0263.963] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0263.963] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x17a20, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0x17a20, lpOverlapped=0x0) returned 1 [0263.963] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0263.963] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0263.963] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0263.963] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0263.963] CloseHandle (hObject=0x47c) returned 1 [0263.978] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0263.982] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0263.982] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0263.982] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0263.982] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0263.982] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\SEaC0.xls", dwFileAttributes=0x80) returned 1 [0263.994] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\SEaC0.xls" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\seac0.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0263.994] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=73607) returned 1 [0263.994] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=73607) returned 1 [0263.994] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x11e65, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0263.995] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0264.001] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.001] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae6820) returned 1 [0264.001] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0264.002] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.002] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x11f87, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0x11f87, lpOverlapped=0x0) returned 1 [0264.003] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0264.003] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x11f87, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x11f90) returned 1 [0264.003] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.003] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x11f90, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0x11f90, lpOverlapped=0x0) returned 1 [0264.003] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0264.003] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0264.004] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0264.004] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0264.004] CloseHandle (hObject=0x47c) returned 1 [0264.028] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0264.032] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0264.032] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0264.033] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0264.033] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0264.033] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\V pbWWuJo9yNngm4.pptx", dwFileAttributes=0x80) returned 1 [0264.033] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\V pbWWuJo9yNngm4.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v pbwwujo9ynngm4.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0264.034] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=44628) returned 1 [0264.034] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=44628) returned 1 [0264.034] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0xad32, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.034] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0264.035] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.035] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae6820) returned 1 [0264.035] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0264.035] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.035] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xae54, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0xae54, lpOverlapped=0x0) returned 1 [0264.036] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0264.036] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0xae54, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0xae60) returned 1 [0264.036] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.037] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xae60, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0xae60, lpOverlapped=0x0) returned 1 [0264.037] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0264.037] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0264.037] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0264.037] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0264.037] CloseHandle (hObject=0x47c) returned 1 [0264.062] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0264.075] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0264.075] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0264.075] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0264.075] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0264.076] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\z gzZfF2x.csv", dwFileAttributes=0x80) returned 1 [0264.076] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\z gzZfF2x.csv" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\z gzzff2x.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0264.077] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=68694) returned 1 [0264.077] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=68694) returned 1 [0264.077] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x10b34, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.077] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0264.078] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.078] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae6820) returned 1 [0264.078] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0264.078] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.078] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x10c56, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0x10c56, lpOverlapped=0x0) returned 1 [0264.080] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0264.080] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x10c56, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x10c60) returned 1 [0264.080] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.080] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x10c60, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0x10c60, lpOverlapped=0x0) returned 1 [0264.080] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0264.080] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0264.080] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0264.080] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0264.080] CloseHandle (hObject=0x47c) returned 1 [0264.100] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0264.104] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0264.104] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0264.104] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0264.104] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0264.104] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\_razzyJ07maNkg.xlsx", dwFileAttributes=0x80) returned 1 [0264.104] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\_razzyJ07maNkg.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\_razzyj07mankg.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0264.105] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=60873) returned 1 [0264.105] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=60873) returned 1 [0264.105] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0xeca7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.105] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0264.106] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.106] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae6820) returned 1 [0264.106] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0264.106] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.106] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xedc9, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0xedc9, lpOverlapped=0x0) returned 1 [0264.108] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0264.108] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0xedc9, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0xedd0) returned 1 [0264.108] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.108] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xedd0, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0xedd0, lpOverlapped=0x0) returned 1 [0264.108] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0264.108] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0264.108] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0264.108] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0264.108] CloseHandle (hObject=0x47c) returned 1 [0264.124] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0264.128] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0264.128] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0264.129] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0264.129] FindClose (in: hFindFile=0x665d90c380 | out: hFindFile=0x665d90c380) returned 1 [0264.129] SetLastError (dwErrCode=0x0) [0264.129] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0264.129] GetLastError () returned 0xb7 [0264.129] CloseHandle (hObject=0x470) returned 1 [0264.129] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0264.129] SetLastError (dwErrCode=0x0) [0264.129] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0264.130] GetLastError () returned 0xb7 [0264.130] CloseHandle (hObject=0x470) returned 1 [0264.130] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Downloads\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665d90c5c0 [0264.130] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0264.130] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0264.130] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0264.130] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0264.130] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0264.130] FindClose (in: hFindFile=0x665d90c5c0 | out: hFindFile=0x665d90c5c0) returned 1 [0264.130] SetLastError (dwErrCode=0x0) [0264.130] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Downloads\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\downloads\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0264.131] GetLastError () returned 0x0 [0264.131] WriteFile (in: hFile=0x470, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7dba0*=0x324, lpOverlapped=0x0) returned 1 [0264.132] CloseHandle (hObject=0x470) returned 1 [0264.132] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0264.132] SetLastError (dwErrCode=0x0) [0264.132] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0264.132] GetLastError () returned 0xb7 [0264.132] CloseHandle (hObject=0x470) returned 1 [0264.132] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665d90d340 [0264.132] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0264.132] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0264.132] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0264.132] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Bing.url", dwFileAttributes=0x80) returned 1 [0264.133] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Bing.url" (normalized: "c:\\users\\ciihmnxmn6ps\\favorites\\bing.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0264.134] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=208) returned 1 [0264.134] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=208) returned 1 [0264.134] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae6820) returned 1 [0264.134] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0264.134] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.134] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xd0, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0xd0, lpOverlapped=0x0) returned 1 [0264.135] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0264.135] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0xd0, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0xe0) returned 1 [0264.135] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.135] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0xe0, lpOverlapped=0x0) returned 1 [0264.135] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0264.135] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0264.135] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0264.135] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0264.135] CloseHandle (hObject=0x47c) returned 1 [0264.163] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0264.167] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0264.167] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0264.167] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0264.167] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0264.167] SetLastError (dwErrCode=0x0) [0264.167] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\favorites\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0264.168] GetLastError () returned 0x0 [0264.168] WriteFile (in: hFile=0x47c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7d3f0*=0x324, lpOverlapped=0x0) returned 1 [0264.169] CloseHandle (hObject=0x47c) returned 1 [0264.169] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Links\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665d90cc20 [0264.169] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0264.170] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0264.170] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0264.170] FindClose (in: hFindFile=0x665d90cc20 | out: hFindFile=0x665d90cc20) returned 1 [0264.170] SetLastError (dwErrCode=0x0) [0264.170] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Links\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\favorites\\links\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0264.171] GetLastError () returned 0x0 [0264.171] WriteFile (in: hFile=0x47c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7d3f0*=0x324, lpOverlapped=0x0) returned 1 [0264.172] CloseHandle (hObject=0x47c) returned 1 [0264.172] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0264.172] FindClose (in: hFindFile=0x665d90d340 | out: hFindFile=0x665d90d340) returned 1 [0264.172] SetLastError (dwErrCode=0x0) [0264.172] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\favorites\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0264.172] GetLastError () returned 0xb7 [0264.172] CloseHandle (hObject=0x470) returned 1 [0264.172] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0264.172] SetLastError (dwErrCode=0x0) [0264.172] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0264.173] GetLastError () returned 0xb7 [0264.173] CloseHandle (hObject=0x470) returned 1 [0264.173] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Links\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665d90c080 [0264.173] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0264.173] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0264.173] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0264.173] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0264.173] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0264.173] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0264.173] FindClose (in: hFindFile=0x665d90c080 | out: hFindFile=0x665d90c080) returned 1 [0264.173] SetLastError (dwErrCode=0x0) [0264.173] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Links\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\links\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0264.234] GetLastError () returned 0x0 [0264.234] WriteFile (in: hFile=0x470, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7dba0*=0x324, lpOverlapped=0x0) returned 1 [0264.235] CloseHandle (hObject=0x470) returned 1 [0264.235] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0264.235] SetLastError (dwErrCode=0x0) [0264.235] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0264.236] GetLastError () returned 0xb7 [0264.236] CloseHandle (hObject=0x470) returned 1 [0264.236] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Local Settings\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0xffffffffffffffff [0264.236] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0264.236] SetLastError (dwErrCode=0x0) [0264.236] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Local Settings\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\local settings\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0264.237] GetLastError () returned 0xb7 [0264.237] CloseHandle (hObject=0x470) returned 1 [0264.237] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0264.237] SetLastError (dwErrCode=0x0) [0264.237] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0264.237] GetLastError () returned 0xb7 [0264.237] CloseHandle (hObject=0x470) returned 1 [0264.237] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665d90c1a0 [0264.237] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0264.237] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0264.237] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0264.237] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0264.237] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\lhuLZtFfl7pOx.wav", dwFileAttributes=0x80) returned 1 [0264.238] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\lhuLZtFfl7pOx.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\lhulztffl7pox.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0264.238] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=80517) returned 1 [0264.238] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=80517) returned 1 [0264.238] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x13963, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.238] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0264.239] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.239] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae6820) returned 1 [0264.239] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0264.243] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.243] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x13a85, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0x13a85, lpOverlapped=0x0) returned 1 [0264.248] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0264.248] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x13a85, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x13a90) returned 1 [0264.248] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.248] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x13a90, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0x13a90, lpOverlapped=0x0) returned 1 [0264.248] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0264.248] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0264.248] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0264.248] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0264.249] CloseHandle (hObject=0x47c) returned 1 [0264.300] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0264.333] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0264.333] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0264.333] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0264.334] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0264.334] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0264.334] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\TpZ.m4a", dwFileAttributes=0x80) returned 1 [0264.335] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\TpZ.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\tpz.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0264.335] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=85162) returned 1 [0264.335] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=85162) returned 1 [0264.335] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x14b88, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.335] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0264.337] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.337] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae6820) returned 1 [0264.337] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0264.337] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.337] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x14caa, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0x14caa, lpOverlapped=0x0) returned 1 [0264.338] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0264.338] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x14caa, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x14cb0) returned 1 [0264.339] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.339] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x14cb0, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0x14cb0, lpOverlapped=0x0) returned 1 [0264.339] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0264.339] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0264.339] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0264.339] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0264.339] CloseHandle (hObject=0x47c) returned 1 [0264.357] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0264.363] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0264.363] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0264.363] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0264.363] SetLastError (dwErrCode=0x0) [0264.363] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0264.364] GetLastError () returned 0xb7 [0264.364] CloseHandle (hObject=0x47c) returned 1 [0264.364] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665d90c920 [0264.364] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0264.364] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0264.364] SetLastError (dwErrCode=0x0) [0264.364] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\u1bj\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0264.364] GetLastError () returned 0x0 [0264.364] WriteFile (in: hFile=0x60c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7cc40*=0x324, lpOverlapped=0x0) returned 1 [0264.365] CloseHandle (hObject=0x60c) returned 1 [0264.365] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90c260 [0264.367] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0264.367] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0264.367] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0264.367] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\g4Tv_2aA yf.mp3", dwFileAttributes=0x80) returned 1 [0264.385] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\g4Tv_2aA yf.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\u1bj\\3yan\\g4tv_2aa yf.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0264.399] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7c288 | out: lpFileSize=0x665da7c288*=46586) returned 1 [0264.399] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7c298 | out: lpFileSize=0x665da7c298*=46586) returned 1 [0264.399] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0xb4d8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.399] ReadFile (in: hFile=0x570, lpBuffer=0x665da7c2e8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7c2a8, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2e8*, lpNumberOfBytesRead=0x665da7c2a8*=0x19, lpOverlapped=0x0) returned 1 [0264.400] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.400] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7c270 | out: phKey=0x665da7c270*=0x665aae6820) returned 1 [0264.400] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0264.400] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.400] ReadFile (in: hFile=0x570, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xb5fa, lpNumberOfBytesRead=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7c280*=0xb5fa, lpOverlapped=0x0) returned 1 [0264.404] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4250) returned 1 [0264.404] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0xb5fa, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0xb600) returned 1 [0264.404] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.404] WriteFile (in: hFile=0x570, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xb600, lpNumberOfBytesWritten=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7c280*=0xb600, lpOverlapped=0x0) returned 1 [0264.404] WriteFile (in: hFile=0x570, lpBuffer=0x665da7c2c0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2c0*, lpNumberOfBytesWritten=0x665da7c284*=0x6, lpOverlapped=0x0) returned 1 [0264.404] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7c290 | out: pbData=0x0*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0264.404] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7c310, pdwDataLen=0x665da7c290 | out: pbData=0x665da7c310*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0264.404] WriteFile (in: hFile=0x570, lpBuffer=0x665da7c310*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c310*, lpNumberOfBytesWritten=0x665da7c284*=0x10c, lpOverlapped=0x0) returned 1 [0264.404] CloseHandle (hObject=0x570) returned 1 [0264.442] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0264.447] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0264.447] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0264.447] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0264.447] SetLastError (dwErrCode=0x0) [0264.448] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\u1bj\\3yan\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0264.448] GetLastError () returned 0x0 [0264.448] WriteFile (in: hFile=0x570, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7c490*=0x324, lpOverlapped=0x0) returned 1 [0264.452] CloseHandle (hObject=0x570) returned 1 [0264.452] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\G8jcyH\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90cc20 [0264.454] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0264.454] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0264.454] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0264.454] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\G8jcyH\\25yy.mp3", dwFileAttributes=0x80) returned 1 [0264.455] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\G8jcyH\\25yy.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\u1bj\\3yan\\g8jcyh\\25yy.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x700 [0264.456] GetFileSizeEx (in: hFile=0x700, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=60559) returned 1 [0264.456] GetFileSizeEx (in: hFile=0x700, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=60559) returned 1 [0264.456] SetFilePointerEx (in: hFile=0x700, liDistanceToMove=0xeb6d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.456] ReadFile (in: hFile=0x700, lpBuffer=0x665da7bb38, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7baf8, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb38*, lpNumberOfBytesRead=0x665da7baf8*=0x19, lpOverlapped=0x0) returned 1 [0264.456] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.456] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7bac0 | out: phKey=0x665da7bac0*=0x665aae6820) returned 1 [0264.456] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0264.457] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.457] ReadFile (in: hFile=0x700, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xec8f, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7bad0*=0xec8f, lpOverlapped=0x0) returned 1 [0264.458] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4250) returned 1 [0264.458] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0xec8f, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0xec90) returned 1 [0264.458] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.458] WriteFile (in: hFile=0x700, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xec90, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7bad0*=0xec90, lpOverlapped=0x0) returned 1 [0264.458] WriteFile (in: hFile=0x700, lpBuffer=0x665da7bb10*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb10*, lpNumberOfBytesWritten=0x665da7bad4*=0x6, lpOverlapped=0x0) returned 1 [0264.458] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7bae0 | out: pbData=0x0*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0264.458] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7bb60, pdwDataLen=0x665da7bae0 | out: pbData=0x665da7bb60*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0264.458] WriteFile (in: hFile=0x700, lpBuffer=0x665da7bb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb60*, lpNumberOfBytesWritten=0x665da7bad4*=0x10c, lpOverlapped=0x0) returned 1 [0264.458] CloseHandle (hObject=0x700) returned 1 [0264.473] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0264.477] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0264.477] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0264.477] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0264.477] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0264.478] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\G8jcyH\\84WRRZGKpUgFeFsA0.mp3", dwFileAttributes=0x80) returned 1 [0264.479] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\G8jcyH\\84WRRZGKpUgFeFsA0.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\u1bj\\3yan\\g8jcyh\\84wrrzgkpugfefsa0.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x700 [0264.480] GetFileSizeEx (in: hFile=0x700, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=20120) returned 1 [0264.480] GetFileSizeEx (in: hFile=0x700, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=20120) returned 1 [0264.480] SetFilePointerEx (in: hFile=0x700, liDistanceToMove=0x4d76, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.480] ReadFile (in: hFile=0x700, lpBuffer=0x665da7bb38, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7baf8, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb38*, lpNumberOfBytesRead=0x665da7baf8*=0x19, lpOverlapped=0x0) returned 1 [0264.480] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.480] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7bac0 | out: phKey=0x665da7bac0*=0x665aae6820) returned 1 [0264.480] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0264.481] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.481] ReadFile (in: hFile=0x700, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4e98, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7bad0*=0x4e98, lpOverlapped=0x0) returned 1 [0264.481] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4250) returned 1 [0264.481] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0x4e98, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0x4ea0) returned 1 [0264.481] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.481] WriteFile (in: hFile=0x700, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4ea0, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7bad0*=0x4ea0, lpOverlapped=0x0) returned 1 [0264.481] WriteFile (in: hFile=0x700, lpBuffer=0x665da7bb10*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb10*, lpNumberOfBytesWritten=0x665da7bad4*=0x6, lpOverlapped=0x0) returned 1 [0264.481] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7bae0 | out: pbData=0x0*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0264.482] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7bb60, pdwDataLen=0x665da7bae0 | out: pbData=0x665da7bb60*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0264.482] WriteFile (in: hFile=0x700, lpBuffer=0x665da7bb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb60*, lpNumberOfBytesWritten=0x665da7bad4*=0x10c, lpOverlapped=0x0) returned 1 [0264.482] CloseHandle (hObject=0x700) returned 1 [0264.497] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0264.501] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0264.501] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0264.502] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0264.502] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0264.502] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\G8jcyH\\cqLvZTPJg.mp3", dwFileAttributes=0x80) returned 1 [0264.503] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\G8jcyH\\cqLvZTPJg.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\u1bj\\3yan\\g8jcyh\\cqlvztpjg.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x700 [0264.503] GetFileSizeEx (in: hFile=0x700, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=25478) returned 1 [0264.503] GetFileSizeEx (in: hFile=0x700, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=25478) returned 1 [0264.503] SetFilePointerEx (in: hFile=0x700, liDistanceToMove=0x6264, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.503] ReadFile (in: hFile=0x700, lpBuffer=0x665da7bb38, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7baf8, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb38*, lpNumberOfBytesRead=0x665da7baf8*=0x19, lpOverlapped=0x0) returned 1 [0264.504] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.504] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7bac0 | out: phKey=0x665da7bac0*=0x665aae6820) returned 1 [0264.504] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0264.505] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.505] ReadFile (in: hFile=0x700, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x6386, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7bad0*=0x6386, lpOverlapped=0x0) returned 1 [0264.505] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4250) returned 1 [0264.505] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0x6386, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0x6390) returned 1 [0264.505] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.505] WriteFile (in: hFile=0x700, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x6390, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7bad0*=0x6390, lpOverlapped=0x0) returned 1 [0264.506] WriteFile (in: hFile=0x700, lpBuffer=0x665da7bb10*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb10*, lpNumberOfBytesWritten=0x665da7bad4*=0x6, lpOverlapped=0x0) returned 1 [0264.506] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7bae0 | out: pbData=0x0*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0264.506] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7bb60, pdwDataLen=0x665da7bae0 | out: pbData=0x665da7bb60*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0264.506] WriteFile (in: hFile=0x700, lpBuffer=0x665da7bb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb60*, lpNumberOfBytesWritten=0x665da7bad4*=0x10c, lpOverlapped=0x0) returned 1 [0264.506] CloseHandle (hObject=0x700) returned 1 [0264.525] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0264.529] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0264.529] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0264.529] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0264.529] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0264.529] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\G8jcyH\\DpC2qFsy9d.wav", dwFileAttributes=0x80) returned 1 [0264.530] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\G8jcyH\\DpC2qFsy9d.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\u1bj\\3yan\\g8jcyh\\dpc2qfsy9d.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x700 [0264.530] GetFileSizeEx (in: hFile=0x700, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=11992) returned 1 [0264.530] GetFileSizeEx (in: hFile=0x700, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=11992) returned 1 [0264.530] SetFilePointerEx (in: hFile=0x700, liDistanceToMove=0x2db6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.530] ReadFile (in: hFile=0x700, lpBuffer=0x665da7bb38, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7baf8, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb38*, lpNumberOfBytesRead=0x665da7baf8*=0x19, lpOverlapped=0x0) returned 1 [0264.531] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.531] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7bac0 | out: phKey=0x665da7bac0*=0x665aae6820) returned 1 [0264.531] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0264.532] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.532] ReadFile (in: hFile=0x700, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x2ed8, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7bad0*=0x2ed8, lpOverlapped=0x0) returned 1 [0264.532] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4250) returned 1 [0264.532] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0x2ed8, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0x2ee0) returned 1 [0264.532] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.532] WriteFile (in: hFile=0x700, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x2ee0, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7bad0*=0x2ee0, lpOverlapped=0x0) returned 1 [0264.532] WriteFile (in: hFile=0x700, lpBuffer=0x665da7bb10*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb10*, lpNumberOfBytesWritten=0x665da7bad4*=0x6, lpOverlapped=0x0) returned 1 [0264.532] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7bae0 | out: pbData=0x0*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0264.532] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7bb60, pdwDataLen=0x665da7bae0 | out: pbData=0x665da7bb60*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0264.532] WriteFile (in: hFile=0x700, lpBuffer=0x665da7bb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb60*, lpNumberOfBytesWritten=0x665da7bad4*=0x10c, lpOverlapped=0x0) returned 1 [0264.532] CloseHandle (hObject=0x700) returned 1 [0264.550] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0264.554] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0264.554] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0264.554] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0264.554] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0264.554] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\G8jcyH\\i6XjUVIP.m4a", dwFileAttributes=0x80) returned 1 [0264.555] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\G8jcyH\\i6XjUVIP.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\u1bj\\3yan\\g8jcyh\\i6xjuvip.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x700 [0264.555] GetFileSizeEx (in: hFile=0x700, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=76759) returned 1 [0264.555] GetFileSizeEx (in: hFile=0x700, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=76759) returned 1 [0264.555] SetFilePointerEx (in: hFile=0x700, liDistanceToMove=0x12ab5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.555] ReadFile (in: hFile=0x700, lpBuffer=0x665da7bb38, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7baf8, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb38*, lpNumberOfBytesRead=0x665da7baf8*=0x19, lpOverlapped=0x0) returned 1 [0264.556] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.556] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7bac0 | out: phKey=0x665da7bac0*=0x665aae6820) returned 1 [0264.556] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0264.556] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.556] ReadFile (in: hFile=0x700, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x12bd7, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7bad0*=0x12bd7, lpOverlapped=0x0) returned 1 [0264.558] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4250) returned 1 [0264.558] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0x12bd7, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0x12be0) returned 1 [0264.558] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.558] WriteFile (in: hFile=0x700, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x12be0, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7bad0*=0x12be0, lpOverlapped=0x0) returned 1 [0264.558] WriteFile (in: hFile=0x700, lpBuffer=0x665da7bb10*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb10*, lpNumberOfBytesWritten=0x665da7bad4*=0x6, lpOverlapped=0x0) returned 1 [0264.558] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7bae0 | out: pbData=0x0*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0264.558] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7bb60, pdwDataLen=0x665da7bae0 | out: pbData=0x665da7bb60*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0264.558] WriteFile (in: hFile=0x700, lpBuffer=0x665da7bb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb60*, lpNumberOfBytesWritten=0x665da7bad4*=0x10c, lpOverlapped=0x0) returned 1 [0264.558] CloseHandle (hObject=0x700) returned 1 [0264.587] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0264.590] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0264.590] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0264.591] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0264.591] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0264.591] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\G8jcyH\\ygP-kApGuT.mp3", dwFileAttributes=0x80) returned 1 [0264.591] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\G8jcyH\\ygP-kApGuT.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\u1bj\\3yan\\g8jcyh\\ygp-kapgut.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x700 [0264.592] GetFileSizeEx (in: hFile=0x700, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=47398) returned 1 [0264.592] GetFileSizeEx (in: hFile=0x700, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=47398) returned 1 [0264.592] SetFilePointerEx (in: hFile=0x700, liDistanceToMove=0xb804, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.592] ReadFile (in: hFile=0x700, lpBuffer=0x665da7bb38, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7baf8, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb38*, lpNumberOfBytesRead=0x665da7baf8*=0x19, lpOverlapped=0x0) returned 1 [0264.593] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.593] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7bac0 | out: phKey=0x665da7bac0*=0x665aae6820) returned 1 [0264.593] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0264.593] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.593] ReadFile (in: hFile=0x700, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xb926, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7bad0*=0xb926, lpOverlapped=0x0) returned 1 [0264.594] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4250) returned 1 [0264.595] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0xb926, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0xb930) returned 1 [0264.595] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.595] WriteFile (in: hFile=0x700, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xb930, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7bad0*=0xb930, lpOverlapped=0x0) returned 1 [0264.595] WriteFile (in: hFile=0x700, lpBuffer=0x665da7bb10*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb10*, lpNumberOfBytesWritten=0x665da7bad4*=0x6, lpOverlapped=0x0) returned 1 [0264.595] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7bae0 | out: pbData=0x0*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0264.595] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7bb60, pdwDataLen=0x665da7bae0 | out: pbData=0x665da7bb60*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0264.595] WriteFile (in: hFile=0x700, lpBuffer=0x665da7bb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb60*, lpNumberOfBytesWritten=0x665da7bad4*=0x10c, lpOverlapped=0x0) returned 1 [0264.595] CloseHandle (hObject=0x700) returned 1 [0264.612] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0264.616] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0264.616] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0264.617] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0264.617] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0264.617] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\G8jcyH\\_DOzSBuKWr.mp3", dwFileAttributes=0x80) returned 1 [0264.617] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\G8jcyH\\_DOzSBuKWr.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\u1bj\\3yan\\g8jcyh\\_dozsbukwr.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x700 [0264.618] GetFileSizeEx (in: hFile=0x700, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=81722) returned 1 [0264.618] GetFileSizeEx (in: hFile=0x700, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=81722) returned 1 [0264.618] SetFilePointerEx (in: hFile=0x700, liDistanceToMove=0x13e18, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.618] ReadFile (in: hFile=0x700, lpBuffer=0x665da7bb38, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7baf8, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb38*, lpNumberOfBytesRead=0x665da7baf8*=0x19, lpOverlapped=0x0) returned 1 [0264.618] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.619] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7bac0 | out: phKey=0x665da7bac0*=0x665aae6820) returned 1 [0264.619] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0264.619] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.619] ReadFile (in: hFile=0x700, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x13f3a, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7bad0*=0x13f3a, lpOverlapped=0x0) returned 1 [0264.620] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4250) returned 1 [0264.620] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0x13f3a, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0x13f40) returned 1 [0264.621] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.621] WriteFile (in: hFile=0x700, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x13f40, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7bad0*=0x13f40, lpOverlapped=0x0) returned 1 [0264.621] WriteFile (in: hFile=0x700, lpBuffer=0x665da7bb10*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb10*, lpNumberOfBytesWritten=0x665da7bad4*=0x6, lpOverlapped=0x0) returned 1 [0264.621] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7bae0 | out: pbData=0x0*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0264.621] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7bb60, pdwDataLen=0x665da7bae0 | out: pbData=0x665da7bb60*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0264.621] WriteFile (in: hFile=0x700, lpBuffer=0x665da7bb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb60*, lpNumberOfBytesWritten=0x665da7bad4*=0x10c, lpOverlapped=0x0) returned 1 [0264.621] CloseHandle (hObject=0x700) returned 1 [0264.637] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0264.641] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0264.641] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0264.642] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0264.642] FindClose (in: hFindFile=0x665d90cc20 | out: hFindFile=0x665d90cc20) returned 1 [0264.642] SetLastError (dwErrCode=0x0) [0264.642] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\G8jcyH\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\u1bj\\3yan\\g8jcyh\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0264.642] GetLastError () returned 0x0 [0264.642] WriteFile (in: hFile=0x570, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7c490*=0x324, lpOverlapped=0x0) returned 1 [0264.643] CloseHandle (hObject=0x570) returned 1 [0264.643] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0264.643] SetLastError (dwErrCode=0x0) [0264.643] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\u1bj\\3yan\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0264.644] GetLastError () returned 0xb7 [0264.644] CloseHandle (hObject=0x570) returned 1 [0264.644] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\hT1mQaop1BA_4KMUBXr\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90cb00 [0264.646] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0264.646] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0264.646] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0264.646] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\hT1mQaop1BA_4KMUBXr\\9WhgopGU.wav", dwFileAttributes=0x80) returned 1 [0264.647] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\hT1mQaop1BA_4KMUBXr\\9WhgopGU.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\u1bj\\3yan\\ht1mqaop1ba_4kmubxr\\9whgopgu.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x700 [0264.647] GetFileSizeEx (in: hFile=0x700, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=60967) returned 1 [0264.647] GetFileSizeEx (in: hFile=0x700, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=60967) returned 1 [0264.647] SetFilePointerEx (in: hFile=0x700, liDistanceToMove=0xed05, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.647] ReadFile (in: hFile=0x700, lpBuffer=0x665da7bb38, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7baf8, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb38*, lpNumberOfBytesRead=0x665da7baf8*=0x19, lpOverlapped=0x0) returned 1 [0264.648] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.648] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7bac0 | out: phKey=0x665da7bac0*=0x665aae6820) returned 1 [0264.648] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0264.649] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.649] ReadFile (in: hFile=0x700, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xee27, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7bad0*=0xee27, lpOverlapped=0x0) returned 1 [0264.650] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4250) returned 1 [0264.650] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0xee27, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0xee30) returned 1 [0264.650] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.650] WriteFile (in: hFile=0x700, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xee30, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7bad0*=0xee30, lpOverlapped=0x0) returned 1 [0264.650] WriteFile (in: hFile=0x700, lpBuffer=0x665da7bb10*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb10*, lpNumberOfBytesWritten=0x665da7bad4*=0x6, lpOverlapped=0x0) returned 1 [0264.650] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7bae0 | out: pbData=0x0*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0264.650] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7bb60, pdwDataLen=0x665da7bae0 | out: pbData=0x665da7bb60*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0264.650] WriteFile (in: hFile=0x700, lpBuffer=0x665da7bb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb60*, lpNumberOfBytesWritten=0x665da7bad4*=0x10c, lpOverlapped=0x0) returned 1 [0264.650] CloseHandle (hObject=0x700) returned 1 [0264.752] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0264.759] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0264.759] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0264.759] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0264.759] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0264.760] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\hT1mQaop1BA_4KMUBXr\\OHtAOjQY8Cz_q7la7 7V.wav", dwFileAttributes=0x80) returned 1 [0264.761] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\hT1mQaop1BA_4KMUBXr\\OHtAOjQY8Cz_q7la7 7V.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\u1bj\\3yan\\ht1mqaop1ba_4kmubxr\\ohtaojqy8cz_q7la7 7v.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x700 [0264.761] GetFileSizeEx (in: hFile=0x700, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=23796) returned 1 [0264.762] GetFileSizeEx (in: hFile=0x700, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=23796) returned 1 [0264.762] SetFilePointerEx (in: hFile=0x700, liDistanceToMove=0x5bd2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.762] ReadFile (in: hFile=0x700, lpBuffer=0x665da7bb38, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7baf8, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb38*, lpNumberOfBytesRead=0x665da7baf8*=0x19, lpOverlapped=0x0) returned 1 [0264.763] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.763] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7bac0 | out: phKey=0x665da7bac0*=0x665aae6820) returned 1 [0264.763] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0264.763] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.763] ReadFile (in: hFile=0x700, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x5cf4, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7bad0*=0x5cf4, lpOverlapped=0x0) returned 1 [0264.764] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4250) returned 1 [0264.764] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0x5cf4, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0x5d00) returned 1 [0264.764] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.764] WriteFile (in: hFile=0x700, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x5d00, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7bad0*=0x5d00, lpOverlapped=0x0) returned 1 [0264.764] WriteFile (in: hFile=0x700, lpBuffer=0x665da7bb10*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb10*, lpNumberOfBytesWritten=0x665da7bad4*=0x6, lpOverlapped=0x0) returned 1 [0264.764] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7bae0 | out: pbData=0x0*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0264.764] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7bb60, pdwDataLen=0x665da7bae0 | out: pbData=0x665da7bb60*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0264.765] WriteFile (in: hFile=0x700, lpBuffer=0x665da7bb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb60*, lpNumberOfBytesWritten=0x665da7bad4*=0x10c, lpOverlapped=0x0) returned 1 [0264.765] CloseHandle (hObject=0x700) returned 1 [0264.781] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0264.785] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0264.785] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0264.785] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0264.785] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0264.785] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\hT1mQaop1BA_4KMUBXr\\YGyhUXE9ehXV.mp3", dwFileAttributes=0x80) returned 1 [0264.786] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\hT1mQaop1BA_4KMUBXr\\YGyhUXE9ehXV.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\u1bj\\3yan\\ht1mqaop1ba_4kmubxr\\ygyhuxe9ehxv.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x700 [0264.786] GetFileSizeEx (in: hFile=0x700, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=91588) returned 1 [0264.786] GetFileSizeEx (in: hFile=0x700, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=91588) returned 1 [0264.786] SetFilePointerEx (in: hFile=0x700, liDistanceToMove=0x164a2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.786] ReadFile (in: hFile=0x700, lpBuffer=0x665da7bb38, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7baf8, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb38*, lpNumberOfBytesRead=0x665da7baf8*=0x19, lpOverlapped=0x0) returned 1 [0264.787] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.788] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7bac0 | out: phKey=0x665da7bac0*=0x665aae6820) returned 1 [0264.788] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0264.788] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.788] ReadFile (in: hFile=0x700, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x165c4, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7bad0*=0x165c4, lpOverlapped=0x0) returned 1 [0264.789] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4250) returned 1 [0264.789] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0x165c4, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0x165d0) returned 1 [0264.790] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.790] WriteFile (in: hFile=0x700, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x165d0, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7bad0*=0x165d0, lpOverlapped=0x0) returned 1 [0264.790] WriteFile (in: hFile=0x700, lpBuffer=0x665da7bb10*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb10*, lpNumberOfBytesWritten=0x665da7bad4*=0x6, lpOverlapped=0x0) returned 1 [0264.790] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7bae0 | out: pbData=0x0*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0264.790] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7bb60, pdwDataLen=0x665da7bae0 | out: pbData=0x665da7bb60*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0264.790] WriteFile (in: hFile=0x700, lpBuffer=0x665da7bb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb60*, lpNumberOfBytesWritten=0x665da7bad4*=0x10c, lpOverlapped=0x0) returned 1 [0264.790] CloseHandle (hObject=0x700) returned 1 [0264.805] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0264.809] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0264.809] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0264.809] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0264.809] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0264.809] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\hT1mQaop1BA_4KMUBXr\\_Ego.m4a", dwFileAttributes=0x80) returned 1 [0264.810] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\hT1mQaop1BA_4KMUBXr\\_Ego.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\u1bj\\3yan\\ht1mqaop1ba_4kmubxr\\_ego.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x700 [0264.810] GetFileSizeEx (in: hFile=0x700, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=11358) returned 1 [0264.810] GetFileSizeEx (in: hFile=0x700, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=11358) returned 1 [0264.810] SetFilePointerEx (in: hFile=0x700, liDistanceToMove=0x2b3c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.810] ReadFile (in: hFile=0x700, lpBuffer=0x665da7bb38, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7baf8, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb38*, lpNumberOfBytesRead=0x665da7baf8*=0x19, lpOverlapped=0x0) returned 1 [0264.811] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.811] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7bac0 | out: phKey=0x665da7bac0*=0x665aae6820) returned 1 [0264.811] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0264.812] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.812] ReadFile (in: hFile=0x700, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x2c5e, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7bad0*=0x2c5e, lpOverlapped=0x0) returned 1 [0264.813] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4250) returned 1 [0264.813] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0x2c5e, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0x2c60) returned 1 [0264.813] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.813] WriteFile (in: hFile=0x700, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x2c60, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7bad0*=0x2c60, lpOverlapped=0x0) returned 1 [0264.813] WriteFile (in: hFile=0x700, lpBuffer=0x665da7bb10*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb10*, lpNumberOfBytesWritten=0x665da7bad4*=0x6, lpOverlapped=0x0) returned 1 [0264.813] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7bae0 | out: pbData=0x0*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0264.813] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7bb60, pdwDataLen=0x665da7bae0 | out: pbData=0x665da7bb60*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0264.813] WriteFile (in: hFile=0x700, lpBuffer=0x665da7bb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb60*, lpNumberOfBytesWritten=0x665da7bad4*=0x10c, lpOverlapped=0x0) returned 1 [0264.813] CloseHandle (hObject=0x700) returned 1 [0264.829] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0264.832] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0264.832] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0264.833] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0264.833] FindClose (in: hFindFile=0x665d90cb00 | out: hFindFile=0x665d90cb00) returned 1 [0264.833] SetLastError (dwErrCode=0x0) [0264.833] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\hT1mQaop1BA_4KMUBXr\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\u1bj\\3yan\\ht1mqaop1ba_4kmubxr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0264.833] GetLastError () returned 0x0 [0264.833] WriteFile (in: hFile=0x570, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7c490*=0x324, lpOverlapped=0x0) returned 1 [0264.834] CloseHandle (hObject=0x570) returned 1 [0264.834] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0264.834] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0264.835] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\qdviKCk.mp3", dwFileAttributes=0x80) returned 1 [0264.835] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\qdviKCk.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\u1bj\\3yan\\qdvikck.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0264.835] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7c288 | out: lpFileSize=0x665da7c288*=20938) returned 1 [0264.835] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7c298 | out: lpFileSize=0x665da7c298*=20938) returned 1 [0264.835] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x50a8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.835] ReadFile (in: hFile=0x570, lpBuffer=0x665da7c2e8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7c2a8, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2e8*, lpNumberOfBytesRead=0x665da7c2a8*=0x19, lpOverlapped=0x0) returned 1 [0264.836] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.836] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7c270 | out: phKey=0x665da7c270*=0x665aae6820) returned 1 [0264.836] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0264.836] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.836] ReadFile (in: hFile=0x570, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x51ca, lpNumberOfBytesRead=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7c280*=0x51ca, lpOverlapped=0x0) returned 1 [0264.837] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4250) returned 1 [0264.837] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x51ca, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x51d0) returned 1 [0264.837] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.837] WriteFile (in: hFile=0x570, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x51d0, lpNumberOfBytesWritten=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7c280*=0x51d0, lpOverlapped=0x0) returned 1 [0264.837] WriteFile (in: hFile=0x570, lpBuffer=0x665da7c2c0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2c0*, lpNumberOfBytesWritten=0x665da7c284*=0x6, lpOverlapped=0x0) returned 1 [0264.837] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7c290 | out: pbData=0x0*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0264.837] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7c310, pdwDataLen=0x665da7c290 | out: pbData=0x665da7c310*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0264.837] WriteFile (in: hFile=0x570, lpBuffer=0x665da7c310*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c310*, lpNumberOfBytesWritten=0x665da7c284*=0x10c, lpOverlapped=0x0) returned 1 [0264.837] CloseHandle (hObject=0x570) returned 1 [0264.853] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0264.857] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0264.857] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0264.857] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0264.857] SetLastError (dwErrCode=0x0) [0264.857] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\u1bj\\3yan\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0264.858] GetLastError () returned 0xb7 [0264.858] CloseHandle (hObject=0x570) returned 1 [0264.858] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\TH5J14ky7iI\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c980 [0264.859] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0264.859] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0264.859] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0264.860] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\TH5J14ky7iI\\j9-2EthksO5.wav", dwFileAttributes=0x80) returned 1 [0264.860] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\TH5J14ky7iI\\j9-2EthksO5.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\u1bj\\3yan\\th5j14ky7ii\\j9-2ethkso5.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x700 [0264.860] GetFileSizeEx (in: hFile=0x700, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=57059) returned 1 [0264.861] GetFileSizeEx (in: hFile=0x700, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=57059) returned 1 [0264.861] SetFilePointerEx (in: hFile=0x700, liDistanceToMove=0xddc1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.861] ReadFile (in: hFile=0x700, lpBuffer=0x665da7bb38, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7baf8, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb38*, lpNumberOfBytesRead=0x665da7baf8*=0x19, lpOverlapped=0x0) returned 1 [0264.861] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.861] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7bac0 | out: phKey=0x665da7bac0*=0x665aae6820) returned 1 [0264.861] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0264.862] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.862] ReadFile (in: hFile=0x700, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xdee3, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7bad0*=0xdee3, lpOverlapped=0x0) returned 1 [0264.863] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4250) returned 1 [0264.863] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0xdee3, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0xdef0) returned 1 [0264.863] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.863] WriteFile (in: hFile=0x700, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xdef0, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7bad0*=0xdef0, lpOverlapped=0x0) returned 1 [0264.863] WriteFile (in: hFile=0x700, lpBuffer=0x665da7bb10*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb10*, lpNumberOfBytesWritten=0x665da7bad4*=0x6, lpOverlapped=0x0) returned 1 [0264.863] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7bae0 | out: pbData=0x0*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0264.863] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7bb60, pdwDataLen=0x665da7bae0 | out: pbData=0x665da7bb60*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0264.863] WriteFile (in: hFile=0x700, lpBuffer=0x665da7bb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb60*, lpNumberOfBytesWritten=0x665da7bad4*=0x10c, lpOverlapped=0x0) returned 1 [0264.863] CloseHandle (hObject=0x700) returned 1 [0264.879] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0264.883] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0264.883] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0264.883] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0264.883] SetLastError (dwErrCode=0x0) [0264.883] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\TH5J14ky7iI\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\u1bj\\3yan\\th5j14ky7ii\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x700 [0264.884] GetLastError () returned 0x0 [0264.884] WriteFile (in: hFile=0x700, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0264.885] CloseHandle (hObject=0x700) returned 1 [0264.885] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\TH5J14ky7iI\\jf6tbIa5t\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c5c0 [0264.885] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0264.885] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0264.885] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0264.885] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\TH5J14ky7iI\\jf6tbIa5t\\j6GdLFDmLw51.m4a", dwFileAttributes=0x80) returned 1 [0264.885] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\TH5J14ky7iI\\jf6tbIa5t\\j6GdLFDmLw51.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\u1bj\\3yan\\th5j14ky7ii\\jf6tbia5t\\j6gdlfdmlw51.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x70c [0264.886] GetFileSizeEx (in: hFile=0x70c, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=13343) returned 1 [0264.886] GetFileSizeEx (in: hFile=0x70c, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=13343) returned 1 [0264.886] SetFilePointerEx (in: hFile=0x70c, liDistanceToMove=0x32fd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.886] ReadFile (in: hFile=0x70c, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0264.887] SetFilePointer (in: hFile=0x70c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.887] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665aae6820) returned 1 [0264.887] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0264.887] SetFilePointer (in: hFile=0x70c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.887] ReadFile (in: hFile=0x70c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x341f, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7b320*=0x341f, lpOverlapped=0x0) returned 1 [0264.888] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0264.888] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x341f, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x3420) returned 1 [0264.888] SetFilePointer (in: hFile=0x70c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.888] WriteFile (in: hFile=0x70c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3420, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7b320*=0x3420, lpOverlapped=0x0) returned 1 [0264.888] WriteFile (in: hFile=0x70c, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0264.888] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0264.888] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0264.888] WriteFile (in: hFile=0x70c, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0264.888] CloseHandle (hObject=0x70c) returned 1 [0264.904] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0264.908] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0264.908] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0264.909] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0264.909] FindClose (in: hFindFile=0x665d90c5c0 | out: hFindFile=0x665d90c5c0) returned 1 [0264.909] SetLastError (dwErrCode=0x0) [0264.909] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\TH5J14ky7iI\\jf6tbIa5t\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\u1bj\\3yan\\th5j14ky7ii\\jf6tbia5t\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x700 [0264.909] GetLastError () returned 0x0 [0264.909] WriteFile (in: hFile=0x700, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0264.910] CloseHandle (hObject=0x700) returned 1 [0264.910] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0264.910] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0264.911] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\TH5J14ky7iI\\m3EM5.mp3", dwFileAttributes=0x80) returned 1 [0264.911] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\TH5J14ky7iI\\m3EM5.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\u1bj\\3yan\\th5j14ky7ii\\m3em5.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x700 [0264.911] GetFileSizeEx (in: hFile=0x700, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=5450) returned 1 [0264.911] GetFileSizeEx (in: hFile=0x700, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=5450) returned 1 [0264.911] SetFilePointerEx (in: hFile=0x700, liDistanceToMove=0x1428, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.911] ReadFile (in: hFile=0x700, lpBuffer=0x665da7bb38, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7baf8, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb38*, lpNumberOfBytesRead=0x665da7baf8*=0x19, lpOverlapped=0x0) returned 1 [0264.912] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.912] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7bac0 | out: phKey=0x665da7bac0*=0x665aae6820) returned 1 [0264.912] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0264.912] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.912] ReadFile (in: hFile=0x700, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x154a, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7bad0*=0x154a, lpOverlapped=0x0) returned 1 [0264.913] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4250) returned 1 [0264.913] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0x154a, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0x1550) returned 1 [0264.913] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.913] WriteFile (in: hFile=0x700, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x1550, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7bad0*=0x1550, lpOverlapped=0x0) returned 1 [0264.913] WriteFile (in: hFile=0x700, lpBuffer=0x665da7bb10*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb10*, lpNumberOfBytesWritten=0x665da7bad4*=0x6, lpOverlapped=0x0) returned 1 [0264.913] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7bae0 | out: pbData=0x0*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0264.913] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7bb60, pdwDataLen=0x665da7bae0 | out: pbData=0x665da7bb60*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0264.913] WriteFile (in: hFile=0x700, lpBuffer=0x665da7bb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb60*, lpNumberOfBytesWritten=0x665da7bad4*=0x10c, lpOverlapped=0x0) returned 1 [0264.913] CloseHandle (hObject=0x700) returned 1 [0264.929] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0264.933] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0264.933] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0264.933] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0264.933] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0264.933] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\TH5J14ky7iI\\WagUZ.m4a", dwFileAttributes=0x80) returned 1 [0264.934] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\TH5J14ky7iI\\WagUZ.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\u1bj\\3yan\\th5j14ky7ii\\waguz.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x700 [0264.934] GetFileSizeEx (in: hFile=0x700, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=7740) returned 1 [0264.934] GetFileSizeEx (in: hFile=0x700, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=7740) returned 1 [0264.934] SetFilePointerEx (in: hFile=0x700, liDistanceToMove=0x1d1a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.934] ReadFile (in: hFile=0x700, lpBuffer=0x665da7bb38, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7baf8, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb38*, lpNumberOfBytesRead=0x665da7baf8*=0x19, lpOverlapped=0x0) returned 1 [0264.935] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.935] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7bac0 | out: phKey=0x665da7bac0*=0x665aae6820) returned 1 [0264.935] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0264.935] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.935] ReadFile (in: hFile=0x700, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x1e3c, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7bad0*=0x1e3c, lpOverlapped=0x0) returned 1 [0264.935] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4250) returned 1 [0264.935] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0x1e3c, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0x1e40) returned 1 [0264.935] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.935] WriteFile (in: hFile=0x700, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x1e40, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7bad0*=0x1e40, lpOverlapped=0x0) returned 1 [0264.936] WriteFile (in: hFile=0x700, lpBuffer=0x665da7bb10*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb10*, lpNumberOfBytesWritten=0x665da7bad4*=0x6, lpOverlapped=0x0) returned 1 [0264.936] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7bae0 | out: pbData=0x0*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0264.936] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7bb60, pdwDataLen=0x665da7bae0 | out: pbData=0x665da7bb60*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0264.936] WriteFile (in: hFile=0x700, lpBuffer=0x665da7bb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb60*, lpNumberOfBytesWritten=0x665da7bad4*=0x10c, lpOverlapped=0x0) returned 1 [0264.936] CloseHandle (hObject=0x700) returned 1 [0264.960] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0264.964] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0264.964] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0264.964] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0264.964] FindClose (in: hFindFile=0x665d90c980 | out: hFindFile=0x665d90c980) returned 1 [0264.964] SetLastError (dwErrCode=0x0) [0264.964] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\TH5J14ky7iI\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\u1bj\\3yan\\th5j14ky7ii\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0264.964] GetLastError () returned 0xb7 [0264.964] CloseHandle (hObject=0x570) returned 1 [0264.964] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0264.964] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0264.965] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\WULMlE7UdzSGQlNjFf.wav", dwFileAttributes=0x80) returned 1 [0264.965] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\WULMlE7UdzSGQlNjFf.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\u1bj\\3yan\\wulmle7udzsgqlnjff.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0264.966] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7c288 | out: lpFileSize=0x665da7c288*=79207) returned 1 [0264.966] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7c298 | out: lpFileSize=0x665da7c298*=79207) returned 1 [0264.966] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x13445, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.966] ReadFile (in: hFile=0x570, lpBuffer=0x665da7c2e8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7c2a8, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2e8*, lpNumberOfBytesRead=0x665da7c2a8*=0x19, lpOverlapped=0x0) returned 1 [0264.966] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.966] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7c270 | out: phKey=0x665da7c270*=0x665aae6820) returned 1 [0264.966] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0264.967] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.967] ReadFile (in: hFile=0x570, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x13567, lpNumberOfBytesRead=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7c280*=0x13567, lpOverlapped=0x0) returned 1 [0264.976] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4250) returned 1 [0264.976] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x13567, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x13570) returned 1 [0264.977] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0264.977] WriteFile (in: hFile=0x570, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x13570, lpNumberOfBytesWritten=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7c280*=0x13570, lpOverlapped=0x0) returned 1 [0265.147] WriteFile (in: hFile=0x570, lpBuffer=0x665da7c2c0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2c0*, lpNumberOfBytesWritten=0x665da7c284*=0x6, lpOverlapped=0x0) returned 1 [0265.147] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7c290 | out: pbData=0x0*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0265.147] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7c310, pdwDataLen=0x665da7c290 | out: pbData=0x665da7c310*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0265.147] WriteFile (in: hFile=0x570, lpBuffer=0x665da7c310*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c310*, lpNumberOfBytesWritten=0x665da7c284*=0x10c, lpOverlapped=0x0) returned 1 [0265.147] CloseHandle (hObject=0x570) returned 1 [0265.166] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0265.172] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0265.172] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0265.173] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0265.173] SetLastError (dwErrCode=0x0) [0265.173] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\u1bj\\3yan\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0265.173] GetLastError () returned 0xb7 [0265.173] CloseHandle (hObject=0x570) returned 1 [0265.173] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\WY6yy9Jklkl_Ae48W0nS\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90ca40 [0265.175] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0265.175] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0265.175] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0265.175] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\WY6yy9Jklkl_Ae48W0nS\\kQSgQiLMW.m4a", dwFileAttributes=0x80) returned 1 [0265.176] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\WY6yy9Jklkl_Ae48W0nS\\kQSgQiLMW.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\u1bj\\3yan\\wy6yy9jklkl_ae48w0ns\\kqsgqilmw.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x700 [0265.176] GetFileSizeEx (in: hFile=0x700, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=61171) returned 1 [0265.177] GetFileSizeEx (in: hFile=0x700, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=61171) returned 1 [0265.177] SetFilePointerEx (in: hFile=0x700, liDistanceToMove=0xedd1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.177] ReadFile (in: hFile=0x700, lpBuffer=0x665da7bb38, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7baf8, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb38*, lpNumberOfBytesRead=0x665da7baf8*=0x19, lpOverlapped=0x0) returned 1 [0265.178] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0265.178] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7bac0 | out: phKey=0x665da7bac0*=0x665aae6820) returned 1 [0265.178] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0265.178] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0265.178] ReadFile (in: hFile=0x700, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xeef3, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7bad0*=0xeef3, lpOverlapped=0x0) returned 1 [0265.181] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4250) returned 1 [0265.181] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0xeef3, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0xef00) returned 1 [0265.181] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0265.181] WriteFile (in: hFile=0x700, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xef00, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7bad0*=0xef00, lpOverlapped=0x0) returned 1 [0265.181] WriteFile (in: hFile=0x700, lpBuffer=0x665da7bb10*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb10*, lpNumberOfBytesWritten=0x665da7bad4*=0x6, lpOverlapped=0x0) returned 1 [0265.181] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7bae0 | out: pbData=0x0*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0265.181] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7bb60, pdwDataLen=0x665da7bae0 | out: pbData=0x665da7bb60*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0265.181] WriteFile (in: hFile=0x700, lpBuffer=0x665da7bb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb60*, lpNumberOfBytesWritten=0x665da7bad4*=0x10c, lpOverlapped=0x0) returned 1 [0265.182] CloseHandle (hObject=0x700) returned 1 [0265.197] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0265.201] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0265.201] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0265.201] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0265.201] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0265.202] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\WY6yy9Jklkl_Ae48W0nS\\lljMluaEitI.m4a", dwFileAttributes=0x80) returned 1 [0265.235] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\WY6yy9Jklkl_Ae48W0nS\\lljMluaEitI.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\u1bj\\3yan\\wy6yy9jklkl_ae48w0ns\\lljmluaeiti.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x700 [0265.236] GetFileSizeEx (in: hFile=0x700, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=48083) returned 1 [0265.236] GetFileSizeEx (in: hFile=0x700, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=48083) returned 1 [0265.236] SetFilePointerEx (in: hFile=0x700, liDistanceToMove=0xbab1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.236] ReadFile (in: hFile=0x700, lpBuffer=0x665da7bb38, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7baf8, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb38*, lpNumberOfBytesRead=0x665da7baf8*=0x19, lpOverlapped=0x0) returned 1 [0265.246] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0265.246] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7bac0 | out: phKey=0x665da7bac0*=0x665aae6820) returned 1 [0265.246] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0265.247] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0265.247] ReadFile (in: hFile=0x700, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xbbd3, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7bad0*=0xbbd3, lpOverlapped=0x0) returned 1 [0265.257] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4250) returned 1 [0265.258] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0xbbd3, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0xbbe0) returned 1 [0265.258] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0265.258] WriteFile (in: hFile=0x700, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xbbe0, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7bad0*=0xbbe0, lpOverlapped=0x0) returned 1 [0265.258] WriteFile (in: hFile=0x700, lpBuffer=0x665da7bb10*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb10*, lpNumberOfBytesWritten=0x665da7bad4*=0x6, lpOverlapped=0x0) returned 1 [0265.258] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7bae0 | out: pbData=0x0*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0265.258] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7bb60, pdwDataLen=0x665da7bae0 | out: pbData=0x665da7bb60*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0265.258] WriteFile (in: hFile=0x700, lpBuffer=0x665da7bb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb60*, lpNumberOfBytesWritten=0x665da7bad4*=0x10c, lpOverlapped=0x0) returned 1 [0265.258] CloseHandle (hObject=0x700) returned 1 [0265.295] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0265.301] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0265.301] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0265.301] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0265.301] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0265.302] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\WY6yy9Jklkl_Ae48W0nS\\vX9iuuNEscH.m4a", dwFileAttributes=0x80) returned 1 [0265.302] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\WY6yy9Jklkl_Ae48W0nS\\vX9iuuNEscH.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\u1bj\\3yan\\wy6yy9jklkl_ae48w0ns\\vx9iuunesch.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x700 [0265.303] GetFileSizeEx (in: hFile=0x700, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=98272) returned 1 [0265.303] GetFileSizeEx (in: hFile=0x700, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=98272) returned 1 [0265.303] SetFilePointerEx (in: hFile=0x700, liDistanceToMove=0x17ebe, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.303] ReadFile (in: hFile=0x700, lpBuffer=0x665da7bb38, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7baf8, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb38*, lpNumberOfBytesRead=0x665da7baf8*=0x19, lpOverlapped=0x0) returned 1 [0265.304] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0265.304] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7bac0 | out: phKey=0x665da7bac0*=0x665aae6820) returned 1 [0265.305] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0265.305] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0265.305] ReadFile (in: hFile=0x700, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x17fe0, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7bad0*=0x17fe0, lpOverlapped=0x0) returned 1 [0265.307] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4250) returned 1 [0265.307] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0x17fe0, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0x17ff0) returned 1 [0265.307] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0265.307] WriteFile (in: hFile=0x700, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x17ff0, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7bad0*=0x17ff0, lpOverlapped=0x0) returned 1 [0265.308] WriteFile (in: hFile=0x700, lpBuffer=0x665da7bb10*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb10*, lpNumberOfBytesWritten=0x665da7bad4*=0x6, lpOverlapped=0x0) returned 1 [0265.308] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7bae0 | out: pbData=0x0*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0265.308] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7bb60, pdwDataLen=0x665da7bae0 | out: pbData=0x665da7bb60*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0265.308] WriteFile (in: hFile=0x700, lpBuffer=0x665da7bb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb60*, lpNumberOfBytesWritten=0x665da7bad4*=0x10c, lpOverlapped=0x0) returned 1 [0265.308] CloseHandle (hObject=0x700) returned 1 [0265.325] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0265.329] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0265.329] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0265.329] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0265.329] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0265.330] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\WY6yy9Jklkl_Ae48W0nS\\YceH8O.wav", dwFileAttributes=0x80) returned 1 [0265.330] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\WY6yy9Jklkl_Ae48W0nS\\YceH8O.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\u1bj\\3yan\\wy6yy9jklkl_ae48w0ns\\yceh8o.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x700 [0265.331] GetFileSizeEx (in: hFile=0x700, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=67619) returned 1 [0265.331] GetFileSizeEx (in: hFile=0x700, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=67619) returned 1 [0265.331] SetFilePointerEx (in: hFile=0x700, liDistanceToMove=0x10701, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.331] ReadFile (in: hFile=0x700, lpBuffer=0x665da7bb38, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7baf8, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb38*, lpNumberOfBytesRead=0x665da7baf8*=0x19, lpOverlapped=0x0) returned 1 [0265.332] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0265.332] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7bac0 | out: phKey=0x665da7bac0*=0x665aae6820) returned 1 [0265.332] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0265.332] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0265.332] ReadFile (in: hFile=0x700, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x10823, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7bad0*=0x10823, lpOverlapped=0x0) returned 1 [0265.334] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4250) returned 1 [0265.334] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0x10823, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0x10830) returned 1 [0265.334] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0265.334] WriteFile (in: hFile=0x700, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x10830, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7bad0*=0x10830, lpOverlapped=0x0) returned 1 [0265.334] WriteFile (in: hFile=0x700, lpBuffer=0x665da7bb10*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb10*, lpNumberOfBytesWritten=0x665da7bad4*=0x6, lpOverlapped=0x0) returned 1 [0265.334] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7bae0 | out: pbData=0x0*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0265.334] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7bb60, pdwDataLen=0x665da7bae0 | out: pbData=0x665da7bb60*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0265.334] WriteFile (in: hFile=0x700, lpBuffer=0x665da7bb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb60*, lpNumberOfBytesWritten=0x665da7bad4*=0x10c, lpOverlapped=0x0) returned 1 [0265.334] CloseHandle (hObject=0x700) returned 1 [0265.351] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0265.356] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0265.356] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0265.356] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0265.356] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0265.356] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\WY6yy9Jklkl_Ae48W0nS\\YFwvDKPql1hygV.m4a", dwFileAttributes=0x80) returned 1 [0265.357] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\WY6yy9Jklkl_Ae48W0nS\\YFwvDKPql1hygV.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\u1bj\\3yan\\wy6yy9jklkl_ae48w0ns\\yfwvdkpql1hygv.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x700 [0265.357] GetFileSizeEx (in: hFile=0x700, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=12124) returned 1 [0265.357] GetFileSizeEx (in: hFile=0x700, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=12124) returned 1 [0265.357] SetFilePointerEx (in: hFile=0x700, liDistanceToMove=0x2e3a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.357] ReadFile (in: hFile=0x700, lpBuffer=0x665da7bb38, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7baf8, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb38*, lpNumberOfBytesRead=0x665da7baf8*=0x19, lpOverlapped=0x0) returned 1 [0265.358] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0265.359] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7bac0 | out: phKey=0x665da7bac0*=0x665aae6820) returned 1 [0265.359] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0265.359] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0265.359] ReadFile (in: hFile=0x700, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x2f5c, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7bad0*=0x2f5c, lpOverlapped=0x0) returned 1 [0265.359] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4250) returned 1 [0265.359] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0x2f5c, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0x2f60) returned 1 [0265.360] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0265.360] WriteFile (in: hFile=0x700, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x2f60, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7bad0*=0x2f60, lpOverlapped=0x0) returned 1 [0265.360] WriteFile (in: hFile=0x700, lpBuffer=0x665da7bb10*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb10*, lpNumberOfBytesWritten=0x665da7bad4*=0x6, lpOverlapped=0x0) returned 1 [0265.360] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7bae0 | out: pbData=0x0*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0265.360] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7bb60, pdwDataLen=0x665da7bae0 | out: pbData=0x665da7bb60*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0265.360] WriteFile (in: hFile=0x700, lpBuffer=0x665da7bb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb60*, lpNumberOfBytesWritten=0x665da7bad4*=0x10c, lpOverlapped=0x0) returned 1 [0265.361] CloseHandle (hObject=0x700) returned 1 [0265.381] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0265.385] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0265.385] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0265.385] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0265.385] SetLastError (dwErrCode=0x0) [0265.385] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\WY6yy9Jklkl_Ae48W0nS\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\u1bj\\3yan\\wy6yy9jklkl_ae48w0ns\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x700 [0265.386] GetLastError () returned 0x0 [0265.386] WriteFile (in: hFile=0x700, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0265.386] CloseHandle (hObject=0x700) returned 1 [0265.387] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\WY6yy9Jklkl_Ae48W0nS\\_txV8 husnx-8t7\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c200 [0265.387] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0265.387] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0265.387] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0265.387] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\WY6yy9Jklkl_Ae48W0nS\\_txV8 husnx-8t7\\atgSp9X4.mp3", dwFileAttributes=0x80) returned 1 [0265.388] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\WY6yy9Jklkl_Ae48W0nS\\_txV8 husnx-8t7\\atgSp9X4.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\u1bj\\3yan\\wy6yy9jklkl_ae48w0ns\\_txv8 husnx-8t7\\atgsp9x4.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x70c [0265.388] GetFileSizeEx (in: hFile=0x70c, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=13310) returned 1 [0265.388] GetFileSizeEx (in: hFile=0x70c, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=13310) returned 1 [0265.388] SetFilePointerEx (in: hFile=0x70c, liDistanceToMove=0x32dc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.388] ReadFile (in: hFile=0x70c, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0265.389] SetFilePointer (in: hFile=0x70c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0265.389] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665aae6820) returned 1 [0265.389] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0265.389] SetFilePointer (in: hFile=0x70c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0265.389] ReadFile (in: hFile=0x70c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x33fe, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7b320*=0x33fe, lpOverlapped=0x0) returned 1 [0265.390] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0265.390] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x33fe, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x3400) returned 1 [0265.390] SetFilePointer (in: hFile=0x70c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0265.390] WriteFile (in: hFile=0x70c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3400, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7b320*=0x3400, lpOverlapped=0x0) returned 1 [0265.390] WriteFile (in: hFile=0x70c, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0265.390] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0265.390] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0265.391] WriteFile (in: hFile=0x70c, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0265.391] CloseHandle (hObject=0x70c) returned 1 [0265.407] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0265.411] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0265.411] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0265.411] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0265.411] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0265.412] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\WY6yy9Jklkl_Ae48W0nS\\_txV8 husnx-8t7\\FJFqe kl900wupJHFB.mp3", dwFileAttributes=0x80) returned 1 [0265.412] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\WY6yy9Jklkl_Ae48W0nS\\_txV8 husnx-8t7\\FJFqe kl900wupJHFB.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\u1bj\\3yan\\wy6yy9jklkl_ae48w0ns\\_txv8 husnx-8t7\\fjfqe kl900wupjhfb.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x70c [0265.412] GetFileSizeEx (in: hFile=0x70c, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=11872) returned 1 [0265.412] GetFileSizeEx (in: hFile=0x70c, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=11872) returned 1 [0265.413] SetFilePointerEx (in: hFile=0x70c, liDistanceToMove=0x2d3e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.413] ReadFile (in: hFile=0x70c, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0265.414] SetFilePointer (in: hFile=0x70c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0265.414] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665aae6820) returned 1 [0265.414] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0265.414] SetFilePointer (in: hFile=0x70c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0265.414] ReadFile (in: hFile=0x70c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x2e60, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7b320*=0x2e60, lpOverlapped=0x0) returned 1 [0265.415] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0265.415] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x2e60, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x2e70) returned 1 [0265.415] SetFilePointer (in: hFile=0x70c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0265.415] WriteFile (in: hFile=0x70c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x2e70, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7b320*=0x2e70, lpOverlapped=0x0) returned 1 [0265.415] WriteFile (in: hFile=0x70c, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0265.415] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0265.415] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0265.415] WriteFile (in: hFile=0x70c, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0265.415] CloseHandle (hObject=0x70c) returned 1 [0265.432] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0265.436] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0265.436] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0265.436] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0265.436] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0265.436] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\WY6yy9Jklkl_Ae48W0nS\\_txV8 husnx-8t7\\pCvkiQVv.m4a", dwFileAttributes=0x80) returned 1 [0265.437] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\WY6yy9Jklkl_Ae48W0nS\\_txV8 husnx-8t7\\pCvkiQVv.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\u1bj\\3yan\\wy6yy9jklkl_ae48w0ns\\_txv8 husnx-8t7\\pcvkiqvv.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x70c [0265.437] GetFileSizeEx (in: hFile=0x70c, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=82125) returned 1 [0265.437] GetFileSizeEx (in: hFile=0x70c, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=82125) returned 1 [0265.437] SetFilePointerEx (in: hFile=0x70c, liDistanceToMove=0x13fab, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.437] ReadFile (in: hFile=0x70c, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0265.438] SetFilePointer (in: hFile=0x70c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0265.438] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665aae6820) returned 1 [0265.438] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0265.438] SetFilePointer (in: hFile=0x70c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0265.438] ReadFile (in: hFile=0x70c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x140cd, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7b320*=0x140cd, lpOverlapped=0x0) returned 1 [0265.440] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0265.440] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x140cd, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x140d0) returned 1 [0265.440] SetFilePointer (in: hFile=0x70c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0265.441] WriteFile (in: hFile=0x70c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x140d0, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7b320*=0x140d0, lpOverlapped=0x0) returned 1 [0265.441] WriteFile (in: hFile=0x70c, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0265.441] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0265.441] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0265.441] WriteFile (in: hFile=0x70c, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0265.441] CloseHandle (hObject=0x70c) returned 1 [0265.457] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0265.461] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0265.461] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0265.461] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0265.461] FindClose (in: hFindFile=0x665d90c200 | out: hFindFile=0x665d90c200) returned 1 [0265.461] SetLastError (dwErrCode=0x0) [0265.461] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\WY6yy9Jklkl_Ae48W0nS\\_txV8 husnx-8t7\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\u1bj\\3yan\\wy6yy9jklkl_ae48w0ns\\_txv8 husnx-8t7\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x700 [0265.475] GetLastError () returned 0x0 [0265.475] WriteFile (in: hFile=0x700, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0265.475] CloseHandle (hObject=0x700) returned 1 [0265.476] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0265.476] FindClose (in: hFindFile=0x665d90ca40 | out: hFindFile=0x665d90ca40) returned 1 [0265.476] SetLastError (dwErrCode=0x0) [0265.476] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\WY6yy9Jklkl_Ae48W0nS\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\u1bj\\3yan\\wy6yy9jklkl_ae48w0ns\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0265.476] GetLastError () returned 0xb7 [0265.476] CloseHandle (hObject=0x570) returned 1 [0265.476] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0265.476] FindClose (in: hFindFile=0x665d90c260 | out: hFindFile=0x665d90c260) returned 1 [0265.476] SetLastError (dwErrCode=0x0) [0265.476] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\3Yan\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\u1bj\\3yan\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0265.476] GetLastError () returned 0xb7 [0265.476] CloseHandle (hObject=0x60c) returned 1 [0265.476] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0265.476] FindClose (in: hFindFile=0x665d90c920 | out: hFindFile=0x665d90c920) returned 1 [0265.477] SetLastError (dwErrCode=0x0) [0265.477] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\u1bJ\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\u1bj\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0265.477] GetLastError () returned 0xb7 [0265.477] CloseHandle (hObject=0x47c) returned 1 [0265.477] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0265.477] FindClose (in: hFindFile=0x665d90c1a0 | out: hFindFile=0x665d90c1a0) returned 1 [0265.477] SetLastError (dwErrCode=0x0) [0265.477] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0265.477] GetLastError () returned 0xb7 [0265.477] CloseHandle (hObject=0x470) returned 1 [0265.477] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0265.477] SetLastError (dwErrCode=0x0) [0265.477] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0265.478] GetLastError () returned 0xb7 [0265.478] CloseHandle (hObject=0x470) returned 1 [0265.478] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\My Documents\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0xffffffffffffffff [0265.478] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0265.478] SetLastError (dwErrCode=0x0) [0265.478] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\My Documents\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\my documents\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0265.479] GetLastError () returned 0xb7 [0265.479] CloseHandle (hObject=0x470) returned 1 [0265.479] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0265.479] SetLastError (dwErrCode=0x0) [0265.479] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0265.480] GetLastError () returned 0xb7 [0265.480] CloseHandle (hObject=0x470) returned 1 [0265.480] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\NetHood\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0xffffffffffffffff [0265.480] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0265.480] SetLastError (dwErrCode=0x0) [0265.480] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\NetHood\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\nethood\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0265.481] GetLastError () returned 0x0 [0265.481] WriteFile (in: hFile=0x470, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7dba0*=0x324, lpOverlapped=0x0) returned 1 [0265.482] CloseHandle (hObject=0x470) returned 1 [0265.482] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0265.482] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0265.483] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT", dwFileAttributes=0x80) returned 1 [0265.483] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT" (normalized: "c:\\users\\ciihmnxmn6ps\\ntuser.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0265.483] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0265.483] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0265.483] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0265.483] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0265.484] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\ntuser.dat.LOG1", dwFileAttributes=0x80) returned 1 [0265.487] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\ntuser.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\ntuser.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0265.487] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0265.487] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0265.487] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0265.487] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0265.487] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\ntuser.dat.LOG2", dwFileAttributes=0x80) returned 1 [0265.488] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\ntuser.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\ntuser.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0265.488] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0265.488] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0265.488] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0265.488] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0265.488] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TM.blf", dwFileAttributes=0x80) returned 1 [0265.489] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TM.blf" (normalized: "c:\\users\\ciihmnxmn6ps\\ntuser.dat{77a2c7ed-26f0-11e5-80da-e41d2d741090}.tm.blf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0265.489] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0265.489] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0265.489] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0265.489] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0265.489] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000001.regtrans-ms", dwFileAttributes=0x80) returned 1 [0265.490] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000001.regtrans-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\ntuser.dat{77a2c7ed-26f0-11e5-80da-e41d2d741090}.tmcontainer00000000000000000001.regtrans-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0265.490] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0265.490] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0265.490] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0265.490] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0265.490] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000002.regtrans-ms", dwFileAttributes=0x80) returned 1 [0265.491] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000002.regtrans-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\ntuser.dat{77a2c7ed-26f0-11e5-80da-e41d2d741090}.tmcontainer00000000000000000002.regtrans-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0265.491] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0265.491] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0265.491] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0265.491] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0265.491] SetLastError (dwErrCode=0x0) [0265.491] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0265.491] GetLastError () returned 0xb7 [0265.491] CloseHandle (hObject=0x470) returned 1 [0265.491] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\OneDrive\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665d90d040 [0265.492] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0265.492] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0265.492] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0265.492] FindClose (in: hFindFile=0x665d90d040 | out: hFindFile=0x665d90d040) returned 1 [0265.492] SetLastError (dwErrCode=0x0) [0265.492] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\OneDrive\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\onedrive\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0265.492] GetLastError () returned 0x0 [0265.492] WriteFile (in: hFile=0x470, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7dba0*=0x324, lpOverlapped=0x0) returned 1 [0265.493] CloseHandle (hObject=0x470) returned 1 [0265.493] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0265.493] SetLastError (dwErrCode=0x0) [0265.493] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0265.493] GetLastError () returned 0xb7 [0265.493] CloseHandle (hObject=0x470) returned 1 [0265.493] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665d90d040 [0265.493] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0265.493] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0265.493] SetLastError (dwErrCode=0x0) [0265.494] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0265.494] GetLastError () returned 0xb7 [0265.494] CloseHandle (hObject=0x47c) returned 1 [0265.494] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\aCCDmigS1a5\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665d90c0e0 [0265.495] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0265.496] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0265.496] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0265.496] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\aCCDmigS1a5\\0CqoQLniJ6y.jpg", dwFileAttributes=0x80) returned 1 [0265.497] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\aCCDmigS1a5\\0CqoQLniJ6y.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\accdmigs1a5\\0cqoqlnij6y.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0265.497] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=74163) returned 1 [0265.497] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=74163) returned 1 [0265.497] SetFilePointerEx (in: hFile=0x60c, liDistanceToMove=0x12091, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.497] ReadFile (in: hFile=0x60c, lpBuffer=0x665da7ca98, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca98*, lpNumberOfBytesRead=0x665da7ca58*=0x19, lpOverlapped=0x0) returned 1 [0265.498] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0265.498] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ca20 | out: phKey=0x665da7ca20*=0x665aae6820) returned 1 [0265.498] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0265.498] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0265.499] ReadFile (in: hFile=0x60c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x121b3, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ca30*=0x121b3, lpOverlapped=0x0) returned 1 [0265.500] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4250) returned 1 [0265.500] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x121b3, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x121c0) returned 1 [0265.500] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0265.500] WriteFile (in: hFile=0x60c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x121c0, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ca30*=0x121c0, lpOverlapped=0x0) returned 1 [0265.500] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7ca70*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca70*, lpNumberOfBytesWritten=0x665da7ca34*=0x6, lpOverlapped=0x0) returned 1 [0265.500] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ca40 | out: pbData=0x0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0265.500] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7cac0, pdwDataLen=0x665da7ca40 | out: pbData=0x665da7cac0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0265.500] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7cac0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7cac0*, lpNumberOfBytesWritten=0x665da7ca34*=0x10c, lpOverlapped=0x0) returned 1 [0265.500] CloseHandle (hObject=0x60c) returned 1 [0265.514] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0265.518] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0265.518] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0265.518] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0265.518] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0265.519] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\aCCDmigS1a5\\ar6YaXAl4dKeVOPV4.png", dwFileAttributes=0x80) returned 1 [0265.519] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\aCCDmigS1a5\\ar6YaXAl4dKeVOPV4.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\accdmigs1a5\\ar6yaxal4dkevopv4.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0265.520] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=65833) returned 1 [0265.520] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=65833) returned 1 [0265.520] SetFilePointerEx (in: hFile=0x60c, liDistanceToMove=0x10007, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.520] ReadFile (in: hFile=0x60c, lpBuffer=0x665da7ca98, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca98*, lpNumberOfBytesRead=0x665da7ca58*=0x19, lpOverlapped=0x0) returned 1 [0265.521] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0265.521] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ca20 | out: phKey=0x665da7ca20*=0x665aae6820) returned 1 [0265.521] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0265.521] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0265.521] ReadFile (in: hFile=0x60c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x10129, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ca30*=0x10129, lpOverlapped=0x0) returned 1 [0265.522] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4250) returned 1 [0265.522] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x10129, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x10130) returned 1 [0265.523] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0265.523] WriteFile (in: hFile=0x60c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x10130, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ca30*=0x10130, lpOverlapped=0x0) returned 1 [0265.523] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7ca70*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca70*, lpNumberOfBytesWritten=0x665da7ca34*=0x6, lpOverlapped=0x0) returned 1 [0265.523] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ca40 | out: pbData=0x0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0265.523] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7cac0, pdwDataLen=0x665da7ca40 | out: pbData=0x665da7cac0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0265.523] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7cac0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7cac0*, lpNumberOfBytesWritten=0x665da7ca34*=0x10c, lpOverlapped=0x0) returned 1 [0265.523] CloseHandle (hObject=0x60c) returned 1 [0265.537] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0265.541] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0265.541] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0265.541] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0265.541] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0265.542] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\aCCDmigS1a5\\CwYya-zIgEwS2ejK87C.png", dwFileAttributes=0x80) returned 1 [0265.542] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\aCCDmigS1a5\\CwYya-zIgEwS2ejK87C.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\accdmigs1a5\\cwyya-zigews2ejk87c.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0265.543] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=87462) returned 1 [0265.543] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=87462) returned 1 [0265.543] SetFilePointerEx (in: hFile=0x60c, liDistanceToMove=0x15484, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.543] ReadFile (in: hFile=0x60c, lpBuffer=0x665da7ca98, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca98*, lpNumberOfBytesRead=0x665da7ca58*=0x19, lpOverlapped=0x0) returned 1 [0265.544] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0265.544] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ca20 | out: phKey=0x665da7ca20*=0x665aae6820) returned 1 [0265.544] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0265.544] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0265.544] ReadFile (in: hFile=0x60c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x155a6, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ca30*=0x155a6, lpOverlapped=0x0) returned 1 [0265.545] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4250) returned 1 [0265.545] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x155a6, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x155b0) returned 1 [0265.546] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0265.546] WriteFile (in: hFile=0x60c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x155b0, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ca30*=0x155b0, lpOverlapped=0x0) returned 1 [0265.546] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7ca70*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca70*, lpNumberOfBytesWritten=0x665da7ca34*=0x6, lpOverlapped=0x0) returned 1 [0265.546] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ca40 | out: pbData=0x0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0265.546] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7cac0, pdwDataLen=0x665da7ca40 | out: pbData=0x665da7cac0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0265.546] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7cac0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7cac0*, lpNumberOfBytesWritten=0x665da7ca34*=0x10c, lpOverlapped=0x0) returned 1 [0265.546] CloseHandle (hObject=0x60c) returned 1 [0265.561] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0265.566] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0265.566] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0265.566] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0265.566] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0265.567] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\aCCDmigS1a5\\DsiBi6wmC3iS u5tIc7H.png", dwFileAttributes=0x80) returned 1 [0265.567] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\aCCDmigS1a5\\DsiBi6wmC3iS u5tIc7H.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\accdmigs1a5\\dsibi6wmc3is u5tic7h.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0265.568] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=32993) returned 1 [0265.568] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=32993) returned 1 [0265.568] SetFilePointerEx (in: hFile=0x60c, liDistanceToMove=0x7fbf, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.568] ReadFile (in: hFile=0x60c, lpBuffer=0x665da7ca98, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca98*, lpNumberOfBytesRead=0x665da7ca58*=0x19, lpOverlapped=0x0) returned 1 [0265.569] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0265.569] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ca20 | out: phKey=0x665da7ca20*=0x665aae6820) returned 1 [0265.569] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0265.569] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0265.569] ReadFile (in: hFile=0x60c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x80e1, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ca30*=0x80e1, lpOverlapped=0x0) returned 1 [0265.570] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4250) returned 1 [0265.570] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x80e1, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x80f0) returned 1 [0265.570] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0265.570] WriteFile (in: hFile=0x60c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x80f0, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ca30*=0x80f0, lpOverlapped=0x0) returned 1 [0265.570] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7ca70*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca70*, lpNumberOfBytesWritten=0x665da7ca34*=0x6, lpOverlapped=0x0) returned 1 [0265.570] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ca40 | out: pbData=0x0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0265.570] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7cac0, pdwDataLen=0x665da7ca40 | out: pbData=0x665da7cac0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0265.570] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7cac0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7cac0*, lpNumberOfBytesWritten=0x665da7ca34*=0x10c, lpOverlapped=0x0) returned 1 [0265.571] CloseHandle (hObject=0x60c) returned 1 [0265.587] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0265.590] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0265.590] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0265.591] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0265.591] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0265.591] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\aCCDmigS1a5\\HxO9tyr.gif", dwFileAttributes=0x80) returned 1 [0265.592] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\aCCDmigS1a5\\HxO9tyr.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\accdmigs1a5\\hxo9tyr.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0265.593] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=60220) returned 1 [0265.593] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=60220) returned 1 [0265.593] SetFilePointerEx (in: hFile=0x60c, liDistanceToMove=0xea1a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.593] ReadFile (in: hFile=0x60c, lpBuffer=0x665da7ca98, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca98*, lpNumberOfBytesRead=0x665da7ca58*=0x19, lpOverlapped=0x0) returned 1 [0265.594] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0265.594] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ca20 | out: phKey=0x665da7ca20*=0x665aae6820) returned 1 [0265.594] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0265.594] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0265.594] ReadFile (in: hFile=0x60c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xeb3c, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ca30*=0xeb3c, lpOverlapped=0x0) returned 1 [0265.596] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4250) returned 1 [0265.596] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0xeb3c, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0xeb40) returned 1 [0265.596] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0265.596] WriteFile (in: hFile=0x60c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xeb40, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ca30*=0xeb40, lpOverlapped=0x0) returned 1 [0265.596] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7ca70*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca70*, lpNumberOfBytesWritten=0x665da7ca34*=0x6, lpOverlapped=0x0) returned 1 [0265.596] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ca40 | out: pbData=0x0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0265.596] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7cac0, pdwDataLen=0x665da7ca40 | out: pbData=0x665da7cac0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0265.596] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7cac0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7cac0*, lpNumberOfBytesWritten=0x665da7ca34*=0x10c, lpOverlapped=0x0) returned 1 [0265.596] CloseHandle (hObject=0x60c) returned 1 [0265.612] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0265.616] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0265.616] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0265.616] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0265.616] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0265.616] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\aCCDmigS1a5\\mihcn.gif", dwFileAttributes=0x80) returned 1 [0265.617] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\aCCDmigS1a5\\mihcn.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\accdmigs1a5\\mihcn.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0265.617] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=57326) returned 1 [0265.617] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=57326) returned 1 [0265.617] SetFilePointerEx (in: hFile=0x60c, liDistanceToMove=0xdecc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.617] ReadFile (in: hFile=0x60c, lpBuffer=0x665da7ca98, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca98*, lpNumberOfBytesRead=0x665da7ca58*=0x19, lpOverlapped=0x0) returned 1 [0265.618] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0265.618] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ca20 | out: phKey=0x665da7ca20*=0x665aae6820) returned 1 [0265.618] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0265.618] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0265.619] ReadFile (in: hFile=0x60c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xdfee, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ca30*=0xdfee, lpOverlapped=0x0) returned 1 [0265.620] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4250) returned 1 [0265.620] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0xdfee, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0xdff0) returned 1 [0265.620] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0265.620] WriteFile (in: hFile=0x60c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xdff0, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ca30*=0xdff0, lpOverlapped=0x0) returned 1 [0265.620] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7ca70*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca70*, lpNumberOfBytesWritten=0x665da7ca34*=0x6, lpOverlapped=0x0) returned 1 [0265.620] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ca40 | out: pbData=0x0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0265.620] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7cac0, pdwDataLen=0x665da7ca40 | out: pbData=0x665da7cac0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0265.620] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7cac0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7cac0*, lpNumberOfBytesWritten=0x665da7ca34*=0x10c, lpOverlapped=0x0) returned 1 [0265.620] CloseHandle (hObject=0x60c) returned 1 [0265.636] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0265.639] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0265.640] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0265.640] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0265.640] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0265.640] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\aCCDmigS1a5\\pPfHApILEw_pXh9HW.bmp", dwFileAttributes=0x80) returned 1 [0265.640] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\aCCDmigS1a5\\pPfHApILEw_pXh9HW.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\accdmigs1a5\\ppfhapilew_pxh9hw.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0265.641] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=91806) returned 1 [0265.641] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=91806) returned 1 [0265.641] SetFilePointerEx (in: hFile=0x60c, liDistanceToMove=0x1657c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.641] ReadFile (in: hFile=0x60c, lpBuffer=0x665da7ca98, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca98*, lpNumberOfBytesRead=0x665da7ca58*=0x19, lpOverlapped=0x0) returned 1 [0265.643] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0265.643] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ca20 | out: phKey=0x665da7ca20*=0x665aae6820) returned 1 [0265.643] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0265.643] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0265.643] ReadFile (in: hFile=0x60c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x1669e, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ca30*=0x1669e, lpOverlapped=0x0) returned 1 [0265.644] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4250) returned 1 [0265.644] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x1669e, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x166a0) returned 1 [0265.644] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0265.644] WriteFile (in: hFile=0x60c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x166a0, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ca30*=0x166a0, lpOverlapped=0x0) returned 1 [0265.645] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7ca70*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca70*, lpNumberOfBytesWritten=0x665da7ca34*=0x6, lpOverlapped=0x0) returned 1 [0265.645] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ca40 | out: pbData=0x0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0265.645] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7cac0, pdwDataLen=0x665da7ca40 | out: pbData=0x665da7cac0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0265.645] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7cac0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7cac0*, lpNumberOfBytesWritten=0x665da7ca34*=0x10c, lpOverlapped=0x0) returned 1 [0265.645] CloseHandle (hObject=0x60c) returned 1 [0265.701] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0265.705] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0265.705] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0265.706] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0265.706] FindClose (in: hFindFile=0x665d90c0e0 | out: hFindFile=0x665d90c0e0) returned 1 [0265.706] SetLastError (dwErrCode=0x0) [0265.706] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\aCCDmigS1a5\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\accdmigs1a5\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0265.707] GetLastError () returned 0x0 [0265.707] WriteFile (in: hFile=0x47c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7d3f0*=0x324, lpOverlapped=0x0) returned 1 [0265.708] CloseHandle (hObject=0x47c) returned 1 [0265.708] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0265.708] SetLastError (dwErrCode=0x0) [0265.708] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0265.708] GetLastError () returned 0xb7 [0265.708] CloseHandle (hObject=0x47c) returned 1 [0265.708] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Camera Roll\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665d90c200 [0265.708] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0265.708] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0265.708] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0265.708] FindClose (in: hFindFile=0x665d90c200 | out: hFindFile=0x665d90c200) returned 1 [0265.708] SetLastError (dwErrCode=0x0) [0265.708] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Camera Roll\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\camera roll\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0265.709] GetLastError () returned 0x0 [0265.709] WriteFile (in: hFile=0x47c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7d3f0*=0x324, lpOverlapped=0x0) returned 1 [0265.709] CloseHandle (hObject=0x47c) returned 1 [0265.710] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0265.710] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0265.710] SetLastError (dwErrCode=0x0) [0265.710] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0265.710] GetLastError () returned 0xb7 [0265.710] CloseHandle (hObject=0x47c) returned 1 [0265.710] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\h-ug1CsF\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665d90c080 [0265.710] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0265.710] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0265.711] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0265.711] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\h-ug1CsF\\oQ7jtZBx.gif", dwFileAttributes=0x80) returned 1 [0265.711] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\h-ug1CsF\\oQ7jtZBx.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\h-ug1csf\\oq7jtzbx.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0265.712] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=4867) returned 1 [0265.712] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=4867) returned 1 [0265.712] SetFilePointerEx (in: hFile=0x60c, liDistanceToMove=0x11e1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.712] ReadFile (in: hFile=0x60c, lpBuffer=0x665da7ca98, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca98*, lpNumberOfBytesRead=0x665da7ca58*=0x19, lpOverlapped=0x0) returned 1 [0265.713] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0265.713] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ca20 | out: phKey=0x665da7ca20*=0x665aae6820) returned 1 [0265.713] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0265.714] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0265.714] ReadFile (in: hFile=0x60c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x1303, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ca30*=0x1303, lpOverlapped=0x0) returned 1 [0265.715] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4250) returned 1 [0265.715] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x1303, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x1310) returned 1 [0265.715] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0265.715] WriteFile (in: hFile=0x60c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x1310, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ca30*=0x1310, lpOverlapped=0x0) returned 1 [0265.715] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7ca70*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca70*, lpNumberOfBytesWritten=0x665da7ca34*=0x6, lpOverlapped=0x0) returned 1 [0265.715] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ca40 | out: pbData=0x0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0265.715] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7cac0, pdwDataLen=0x665da7ca40 | out: pbData=0x665da7cac0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0265.715] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7cac0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7cac0*, lpNumberOfBytesWritten=0x665da7ca34*=0x10c, lpOverlapped=0x0) returned 1 [0265.716] CloseHandle (hObject=0x60c) returned 1 [0265.733] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0265.738] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0265.738] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0265.739] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0265.739] SetLastError (dwErrCode=0x0) [0265.739] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\h-ug1CsF\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\h-ug1csf\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0265.740] GetLastError () returned 0x0 [0265.740] WriteFile (in: hFile=0x60c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7cc40*=0x324, lpOverlapped=0x0) returned 1 [0265.740] CloseHandle (hObject=0x60c) returned 1 [0265.741] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\h-ug1CsF\\qxfZHoyx31Lt\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90caa0 [0265.741] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0265.741] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0265.741] SetLastError (dwErrCode=0x0) [0265.741] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\h-ug1CsF\\qxfZHoyx31Lt\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\h-ug1csf\\qxfzhoyx31lt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0265.795] GetLastError () returned 0x0 [0265.795] WriteFile (in: hFile=0x570, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7c490*=0x324, lpOverlapped=0x0) returned 1 [0265.796] CloseHandle (hObject=0x570) returned 1 [0265.796] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\h-ug1CsF\\qxfZHoyx31Lt\\dJNEsBiuX\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90d340 [0265.798] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0265.798] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0265.798] SetLastError (dwErrCode=0x0) [0265.798] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\h-ug1CsF\\qxfZHoyx31Lt\\dJNEsBiuX\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\h-ug1csf\\qxfzhoyx31lt\\djnesbiux\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x700 [0265.799] GetLastError () returned 0x0 [0265.799] WriteFile (in: hFile=0x700, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0265.800] CloseHandle (hObject=0x700) returned 1 [0265.800] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\h-ug1CsF\\qxfZHoyx31Lt\\dJNEsBiuX\\7FrEfAkYM4gO6w0NnD\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bde0 [0265.800] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0265.800] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0265.800] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0265.801] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\h-ug1CsF\\qxfZHoyx31Lt\\dJNEsBiuX\\7FrEfAkYM4gO6w0NnD\\mADM07iCddB9GB9Yhe.bmp", dwFileAttributes=0x80) returned 1 [0265.801] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\h-ug1CsF\\qxfZHoyx31Lt\\dJNEsBiuX\\7FrEfAkYM4gO6w0NnD\\mADM07iCddB9GB9Yhe.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\h-ug1csf\\qxfzhoyx31lt\\djnesbiux\\7frefakym4go6w0nnd\\madm07icddb9gb9yhe.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x70c [0265.802] GetFileSizeEx (in: hFile=0x70c, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=51839) returned 1 [0265.802] GetFileSizeEx (in: hFile=0x70c, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=51839) returned 1 [0265.802] SetFilePointerEx (in: hFile=0x70c, liDistanceToMove=0xc95d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.802] ReadFile (in: hFile=0x70c, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0265.803] SetFilePointer (in: hFile=0x70c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0265.803] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665aae6820) returned 1 [0265.804] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0265.804] SetFilePointer (in: hFile=0x70c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0265.804] ReadFile (in: hFile=0x70c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xca7f, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7b320*=0xca7f, lpOverlapped=0x0) returned 1 [0265.805] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0265.805] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0xca7f, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0xca80) returned 1 [0265.805] SetFilePointer (in: hFile=0x70c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0265.805] WriteFile (in: hFile=0x70c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xca80, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7b320*=0xca80, lpOverlapped=0x0) returned 1 [0265.805] WriteFile (in: hFile=0x70c, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0265.805] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0265.805] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0265.805] WriteFile (in: hFile=0x70c, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0265.805] CloseHandle (hObject=0x70c) returned 1 [0265.820] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0265.824] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0265.824] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0265.824] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0265.824] FindClose (in: hFindFile=0x665d90bde0 | out: hFindFile=0x665d90bde0) returned 1 [0265.824] SetLastError (dwErrCode=0x0) [0265.824] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\h-ug1CsF\\qxfZHoyx31Lt\\dJNEsBiuX\\7FrEfAkYM4gO6w0NnD\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\h-ug1csf\\qxfzhoyx31lt\\djnesbiux\\7frefakym4go6w0nnd\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x700 [0265.825] GetLastError () returned 0x0 [0265.825] WriteFile (in: hFile=0x700, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0265.826] CloseHandle (hObject=0x700) returned 1 [0265.826] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0265.826] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0265.826] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\h-ug1CsF\\qxfZHoyx31Lt\\dJNEsBiuX\\brlnCd0aIGa-nEljWqIp.png", dwFileAttributes=0x80) returned 1 [0265.827] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\h-ug1CsF\\qxfZHoyx31Lt\\dJNEsBiuX\\brlnCd0aIGa-nEljWqIp.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\h-ug1csf\\qxfzhoyx31lt\\djnesbiux\\brlncd0aiga-neljwqip.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x700 [0265.828] GetFileSizeEx (in: hFile=0x700, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=41456) returned 1 [0265.828] GetFileSizeEx (in: hFile=0x700, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=41456) returned 1 [0265.828] SetFilePointerEx (in: hFile=0x700, liDistanceToMove=0xa0ce, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.828] ReadFile (in: hFile=0x700, lpBuffer=0x665da7bb38, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7baf8, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb38*, lpNumberOfBytesRead=0x665da7baf8*=0x19, lpOverlapped=0x0) returned 1 [0265.829] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0265.829] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7bac0 | out: phKey=0x665da7bac0*=0x665aae6820) returned 1 [0265.829] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0265.829] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0265.829] ReadFile (in: hFile=0x700, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xa1f0, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7bad0*=0xa1f0, lpOverlapped=0x0) returned 1 [0265.831] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4250) returned 1 [0265.831] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0xa1f0, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0xa200) returned 1 [0265.831] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0265.831] WriteFile (in: hFile=0x700, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xa200, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7bad0*=0xa200, lpOverlapped=0x0) returned 1 [0265.831] WriteFile (in: hFile=0x700, lpBuffer=0x665da7bb10*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb10*, lpNumberOfBytesWritten=0x665da7bad4*=0x6, lpOverlapped=0x0) returned 1 [0265.831] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7bae0 | out: pbData=0x0*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0265.831] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7bb60, pdwDataLen=0x665da7bae0 | out: pbData=0x665da7bb60*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0265.831] WriteFile (in: hFile=0x700, lpBuffer=0x665da7bb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb60*, lpNumberOfBytesWritten=0x665da7bad4*=0x10c, lpOverlapped=0x0) returned 1 [0265.831] CloseHandle (hObject=0x700) returned 1 [0265.847] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0265.851] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0265.851] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0265.851] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0265.851] SetLastError (dwErrCode=0x0) [0265.851] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\h-ug1CsF\\qxfZHoyx31Lt\\dJNEsBiuX\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\h-ug1csf\\qxfzhoyx31lt\\djnesbiux\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x700 [0265.852] GetLastError () returned 0xb7 [0265.852] CloseHandle (hObject=0x700) returned 1 [0265.852] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\h-ug1CsF\\qxfZHoyx31Lt\\dJNEsBiuX\\btDQFnAWK0mlq3jrli\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c5c0 [0265.852] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0265.852] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0265.852] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0265.853] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\h-ug1CsF\\qxfZHoyx31Lt\\dJNEsBiuX\\btDQFnAWK0mlq3jrli\\9E 4wN83xxScHWlNy X.png", dwFileAttributes=0x80) returned 1 [0265.853] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\h-ug1CsF\\qxfZHoyx31Lt\\dJNEsBiuX\\btDQFnAWK0mlq3jrli\\9E 4wN83xxScHWlNy X.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\h-ug1csf\\qxfzhoyx31lt\\djnesbiux\\btdqfnawk0mlq3jrli\\9e 4wn83xxschwlny x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x70c [0265.853] GetFileSizeEx (in: hFile=0x70c, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=58259) returned 1 [0265.854] GetFileSizeEx (in: hFile=0x70c, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=58259) returned 1 [0265.854] SetFilePointerEx (in: hFile=0x70c, liDistanceToMove=0xe271, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.854] ReadFile (in: hFile=0x70c, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0265.855] SetFilePointer (in: hFile=0x70c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0265.855] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665aae6820) returned 1 [0265.855] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0265.855] SetFilePointer (in: hFile=0x70c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0265.855] ReadFile (in: hFile=0x70c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xe393, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7b320*=0xe393, lpOverlapped=0x0) returned 1 [0265.856] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0265.856] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0xe393, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0xe3a0) returned 1 [0265.856] SetFilePointer (in: hFile=0x70c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0265.856] WriteFile (in: hFile=0x70c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xe3a0, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7b320*=0xe3a0, lpOverlapped=0x0) returned 1 [0265.856] WriteFile (in: hFile=0x70c, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0265.857] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0265.857] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0265.857] WriteFile (in: hFile=0x70c, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0265.857] CloseHandle (hObject=0x70c) returned 1 [0265.873] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0265.877] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0265.877] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0265.878] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0265.878] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0265.878] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\h-ug1CsF\\qxfZHoyx31Lt\\dJNEsBiuX\\btDQFnAWK0mlq3jrli\\j-xEOO.png", dwFileAttributes=0x80) returned 1 [0265.878] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\h-ug1CsF\\qxfZHoyx31Lt\\dJNEsBiuX\\btDQFnAWK0mlq3jrli\\j-xEOO.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\h-ug1csf\\qxfzhoyx31lt\\djnesbiux\\btdqfnawk0mlq3jrli\\j-xeoo.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x70c [0265.879] GetFileSizeEx (in: hFile=0x70c, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=90509) returned 1 [0265.879] GetFileSizeEx (in: hFile=0x70c, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=90509) returned 1 [0265.879] SetFilePointerEx (in: hFile=0x70c, liDistanceToMove=0x1606b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.879] ReadFile (in: hFile=0x70c, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0265.881] SetFilePointer (in: hFile=0x70c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0265.881] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665aae6820) returned 1 [0265.881] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0265.881] SetFilePointer (in: hFile=0x70c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0265.881] ReadFile (in: hFile=0x70c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x1618d, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7b320*=0x1618d, lpOverlapped=0x0) returned 1 [0265.883] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0265.883] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x1618d, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x16190) returned 1 [0265.883] SetFilePointer (in: hFile=0x70c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0265.883] WriteFile (in: hFile=0x70c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x16190, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7b320*=0x16190, lpOverlapped=0x0) returned 1 [0265.883] WriteFile (in: hFile=0x70c, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0265.883] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0265.883] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0265.883] WriteFile (in: hFile=0x70c, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0265.883] CloseHandle (hObject=0x70c) returned 1 [0265.898] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0265.902] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0265.902] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0265.903] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0265.903] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0265.903] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\h-ug1CsF\\qxfZHoyx31Lt\\dJNEsBiuX\\btDQFnAWK0mlq3jrli\\Ml_zV.bmp", dwFileAttributes=0x80) returned 1 [0265.903] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\h-ug1CsF\\qxfZHoyx31Lt\\dJNEsBiuX\\btDQFnAWK0mlq3jrli\\Ml_zV.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\h-ug1csf\\qxfzhoyx31lt\\djnesbiux\\btdqfnawk0mlq3jrli\\ml_zv.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x70c [0265.904] GetFileSizeEx (in: hFile=0x70c, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=97881) returned 1 [0265.904] GetFileSizeEx (in: hFile=0x70c, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=97881) returned 1 [0265.904] SetFilePointerEx (in: hFile=0x70c, liDistanceToMove=0x17d37, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.904] ReadFile (in: hFile=0x70c, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0265.905] SetFilePointer (in: hFile=0x70c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0265.905] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665aae6820) returned 1 [0265.905] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0265.906] SetFilePointer (in: hFile=0x70c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0265.906] ReadFile (in: hFile=0x70c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x17e59, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7b320*=0x17e59, lpOverlapped=0x0) returned 1 [0265.907] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0265.907] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x17e59, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x17e60) returned 1 [0265.907] SetFilePointer (in: hFile=0x70c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0265.907] WriteFile (in: hFile=0x70c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x17e60, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7b320*=0x17e60, lpOverlapped=0x0) returned 1 [0265.907] WriteFile (in: hFile=0x70c, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0265.908] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0265.908] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0265.908] WriteFile (in: hFile=0x70c, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0265.908] CloseHandle (hObject=0x70c) returned 1 [0265.922] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0265.926] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0265.926] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0265.926] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0265.927] FindClose (in: hFindFile=0x665d90c5c0 | out: hFindFile=0x665d90c5c0) returned 1 [0265.927] SetLastError (dwErrCode=0x0) [0265.927] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\h-ug1CsF\\qxfZHoyx31Lt\\dJNEsBiuX\\btDQFnAWK0mlq3jrli\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\h-ug1csf\\qxfzhoyx31lt\\djnesbiux\\btdqfnawk0mlq3jrli\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x700 [0265.938] GetLastError () returned 0x0 [0265.938] WriteFile (in: hFile=0x700, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0265.939] CloseHandle (hObject=0x700) returned 1 [0265.939] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0265.939] SetLastError (dwErrCode=0x0) [0265.939] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\h-ug1CsF\\qxfZHoyx31Lt\\dJNEsBiuX\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\h-ug1csf\\qxfzhoyx31lt\\djnesbiux\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x700 [0265.939] GetLastError () returned 0xb7 [0265.939] CloseHandle (hObject=0x700) returned 1 [0265.939] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\h-ug1CsF\\qxfZHoyx31Lt\\dJNEsBiuX\\L-LN3qSmIrHYbKsUm8\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c740 [0265.940] FindNextFileW (in: hFindFile=0x665d90c740, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0265.940] FindNextFileW (in: hFindFile=0x665d90c740, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0265.940] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0265.941] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\h-ug1CsF\\qxfZHoyx31Lt\\dJNEsBiuX\\L-LN3qSmIrHYbKsUm8\\caEvFtoargP0JY6.jpg", dwFileAttributes=0x80) returned 1 [0265.941] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\h-ug1CsF\\qxfZHoyx31Lt\\dJNEsBiuX\\L-LN3qSmIrHYbKsUm8\\caEvFtoargP0JY6.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\h-ug1csf\\qxfzhoyx31lt\\djnesbiux\\l-ln3qsmirhybksum8\\caevftoargp0jy6.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x70c [0265.942] GetFileSizeEx (in: hFile=0x70c, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=35956) returned 1 [0265.942] GetFileSizeEx (in: hFile=0x70c, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=35956) returned 1 [0265.942] SetFilePointerEx (in: hFile=0x70c, liDistanceToMove=0x8b52, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.942] ReadFile (in: hFile=0x70c, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0265.943] SetFilePointer (in: hFile=0x70c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0265.944] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665aae6820) returned 1 [0265.944] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0265.944] SetFilePointer (in: hFile=0x70c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0265.944] ReadFile (in: hFile=0x70c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x8c74, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7b320*=0x8c74, lpOverlapped=0x0) returned 1 [0265.945] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0265.945] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x8c74, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x8c80) returned 1 [0265.945] SetFilePointer (in: hFile=0x70c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0265.945] WriteFile (in: hFile=0x70c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x8c80, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7b320*=0x8c80, lpOverlapped=0x0) returned 1 [0265.945] WriteFile (in: hFile=0x70c, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0265.945] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0265.945] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0265.945] WriteFile (in: hFile=0x70c, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0265.945] CloseHandle (hObject=0x70c) returned 1 [0265.960] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0265.964] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0265.964] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0265.964] FindNextFileW (in: hFindFile=0x665d90c740, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0265.964] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0265.964] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\h-ug1CsF\\qxfZHoyx31Lt\\dJNEsBiuX\\L-LN3qSmIrHYbKsUm8\\UPuhuZXsrlWPxdFss1Se.png", dwFileAttributes=0x80) returned 1 [0265.965] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\h-ug1CsF\\qxfZHoyx31Lt\\dJNEsBiuX\\L-LN3qSmIrHYbKsUm8\\UPuhuZXsrlWPxdFss1Se.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\h-ug1csf\\qxfzhoyx31lt\\djnesbiux\\l-ln3qsmirhybksum8\\upuhuzxsrlwpxdfss1se.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x70c [0265.965] GetFileSizeEx (in: hFile=0x70c, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=94310) returned 1 [0265.965] GetFileSizeEx (in: hFile=0x70c, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=94310) returned 1 [0265.966] SetFilePointerEx (in: hFile=0x70c, liDistanceToMove=0x16f44, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.966] ReadFile (in: hFile=0x70c, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0265.967] SetFilePointer (in: hFile=0x70c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0265.967] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665aae6820) returned 1 [0265.967] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0265.967] SetFilePointer (in: hFile=0x70c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0265.967] ReadFile (in: hFile=0x70c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x17066, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7b320*=0x17066, lpOverlapped=0x0) returned 1 [0265.969] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0265.969] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x17066, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x17070) returned 1 [0265.969] SetFilePointer (in: hFile=0x70c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0265.969] WriteFile (in: hFile=0x70c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x17070, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7b320*=0x17070, lpOverlapped=0x0) returned 1 [0265.970] WriteFile (in: hFile=0x70c, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0265.970] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0265.970] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0265.970] WriteFile (in: hFile=0x70c, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0265.970] CloseHandle (hObject=0x70c) returned 1 [0265.985] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0265.989] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0265.989] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0265.989] FindNextFileW (in: hFindFile=0x665d90c740, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0265.989] FindClose (in: hFindFile=0x665d90c740 | out: hFindFile=0x665d90c740) returned 1 [0265.989] SetLastError (dwErrCode=0x0) [0265.989] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\h-ug1CsF\\qxfZHoyx31Lt\\dJNEsBiuX\\L-LN3qSmIrHYbKsUm8\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\h-ug1csf\\qxfzhoyx31lt\\djnesbiux\\l-ln3qsmirhybksum8\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x700 [0266.040] GetLastError () returned 0x0 [0266.040] WriteFile (in: hFile=0x700, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0266.041] CloseHandle (hObject=0x700) returned 1 [0266.041] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0266.041] SetLastError (dwErrCode=0x0) [0266.041] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\h-ug1CsF\\qxfZHoyx31Lt\\dJNEsBiuX\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\h-ug1csf\\qxfzhoyx31lt\\djnesbiux\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x700 [0266.041] GetLastError () returned 0xb7 [0266.041] CloseHandle (hObject=0x700) returned 1 [0266.041] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\h-ug1CsF\\qxfZHoyx31Lt\\dJNEsBiuX\\lCi216Q_lDZzEb\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90cda0 [0266.042] FindNextFileW (in: hFindFile=0x665d90cda0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0266.042] FindNextFileW (in: hFindFile=0x665d90cda0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0266.042] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0266.043] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\h-ug1CsF\\qxfZHoyx31Lt\\dJNEsBiuX\\lCi216Q_lDZzEb\\3lVtR54fh_df.bmp", dwFileAttributes=0x80) returned 1 [0266.044] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\h-ug1CsF\\qxfZHoyx31Lt\\dJNEsBiuX\\lCi216Q_lDZzEb\\3lVtR54fh_df.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\h-ug1csf\\qxfzhoyx31lt\\djnesbiux\\lci216q_ldzzeb\\3lvtr54fh_df.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x70c [0266.044] GetFileSizeEx (in: hFile=0x70c, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=84271) returned 1 [0266.044] GetFileSizeEx (in: hFile=0x70c, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=84271) returned 1 [0266.044] SetFilePointerEx (in: hFile=0x70c, liDistanceToMove=0x1480d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.044] ReadFile (in: hFile=0x70c, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0266.045] SetFilePointer (in: hFile=0x70c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0266.046] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665aae6820) returned 1 [0266.046] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0266.046] SetFilePointer (in: hFile=0x70c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0266.046] ReadFile (in: hFile=0x70c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x1492f, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7b320*=0x1492f, lpOverlapped=0x0) returned 1 [0266.047] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0266.047] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x1492f, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x14930) returned 1 [0266.047] SetFilePointer (in: hFile=0x70c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0266.047] WriteFile (in: hFile=0x70c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x14930, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7b320*=0x14930, lpOverlapped=0x0) returned 1 [0266.048] WriteFile (in: hFile=0x70c, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0266.048] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0266.048] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0266.048] WriteFile (in: hFile=0x70c, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0266.048] CloseHandle (hObject=0x70c) returned 1 [0266.062] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0266.066] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0266.067] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0266.067] FindNextFileW (in: hFindFile=0x665d90cda0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0266.067] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0266.067] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\h-ug1CsF\\qxfZHoyx31Lt\\dJNEsBiuX\\lCi216Q_lDZzEb\\D-nni7C8QVK7ooGC5f.gif", dwFileAttributes=0x80) returned 1 [0266.068] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\h-ug1CsF\\qxfZHoyx31Lt\\dJNEsBiuX\\lCi216Q_lDZzEb\\D-nni7C8QVK7ooGC5f.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\h-ug1csf\\qxfzhoyx31lt\\djnesbiux\\lci216q_ldzzeb\\d-nni7c8qvk7oogc5f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x70c [0266.068] GetFileSizeEx (in: hFile=0x70c, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=57362) returned 1 [0266.068] GetFileSizeEx (in: hFile=0x70c, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=57362) returned 1 [0266.068] SetFilePointerEx (in: hFile=0x70c, liDistanceToMove=0xdef0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.068] ReadFile (in: hFile=0x70c, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0266.069] SetFilePointer (in: hFile=0x70c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0266.069] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665aae6820) returned 1 [0266.069] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0266.070] SetFilePointer (in: hFile=0x70c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0266.070] ReadFile (in: hFile=0x70c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xe012, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7b320*=0xe012, lpOverlapped=0x0) returned 1 [0266.071] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0266.071] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0xe012, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0xe020) returned 1 [0266.071] SetFilePointer (in: hFile=0x70c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0266.071] WriteFile (in: hFile=0x70c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xe020, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7b320*=0xe020, lpOverlapped=0x0) returned 1 [0266.072] WriteFile (in: hFile=0x70c, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0266.072] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0266.072] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0266.072] WriteFile (in: hFile=0x70c, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0266.072] CloseHandle (hObject=0x70c) returned 1 [0266.089] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0266.093] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0266.093] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0266.093] FindNextFileW (in: hFindFile=0x665d90cda0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0266.093] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0266.093] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\h-ug1CsF\\qxfZHoyx31Lt\\dJNEsBiuX\\lCi216Q_lDZzEb\\KCwGZevcNgclPp.png", dwFileAttributes=0x80) returned 1 [0266.094] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\h-ug1CsF\\qxfZHoyx31Lt\\dJNEsBiuX\\lCi216Q_lDZzEb\\KCwGZevcNgclPp.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\h-ug1csf\\qxfzhoyx31lt\\djnesbiux\\lci216q_ldzzeb\\kcwgzevcngclpp.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x70c [0266.095] GetFileSizeEx (in: hFile=0x70c, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=19977) returned 1 [0266.095] GetFileSizeEx (in: hFile=0x70c, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=19977) returned 1 [0266.095] SetFilePointerEx (in: hFile=0x70c, liDistanceToMove=0x4ce7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.095] ReadFile (in: hFile=0x70c, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0266.096] SetFilePointer (in: hFile=0x70c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0266.096] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665aae6820) returned 1 [0266.096] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0266.096] SetFilePointer (in: hFile=0x70c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0266.096] ReadFile (in: hFile=0x70c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4e09, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7b320*=0x4e09, lpOverlapped=0x0) returned 1 [0266.097] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0266.097] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x4e09, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x4e10) returned 1 [0266.097] SetFilePointer (in: hFile=0x70c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0266.097] WriteFile (in: hFile=0x70c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4e10, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7b320*=0x4e10, lpOverlapped=0x0) returned 1 [0266.097] WriteFile (in: hFile=0x70c, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0266.097] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0266.097] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0266.098] WriteFile (in: hFile=0x70c, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0266.098] CloseHandle (hObject=0x70c) returned 1 [0266.114] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0266.118] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0266.118] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0266.118] FindNextFileW (in: hFindFile=0x665d90cda0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0266.118] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0266.119] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\h-ug1CsF\\qxfZHoyx31Lt\\dJNEsBiuX\\lCi216Q_lDZzEb\\SidHIq.gif", dwFileAttributes=0x80) returned 1 [0266.119] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\h-ug1CsF\\qxfZHoyx31Lt\\dJNEsBiuX\\lCi216Q_lDZzEb\\SidHIq.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\h-ug1csf\\qxfzhoyx31lt\\djnesbiux\\lci216q_ldzzeb\\sidhiq.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x70c [0266.120] GetFileSizeEx (in: hFile=0x70c, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=78053) returned 1 [0266.120] GetFileSizeEx (in: hFile=0x70c, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=78053) returned 1 [0266.120] SetFilePointerEx (in: hFile=0x70c, liDistanceToMove=0x12fc3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.120] ReadFile (in: hFile=0x70c, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0266.121] SetFilePointer (in: hFile=0x70c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0266.121] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665aae6820) returned 1 [0266.121] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0266.121] SetFilePointer (in: hFile=0x70c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0266.121] ReadFile (in: hFile=0x70c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x130e5, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7b320*=0x130e5, lpOverlapped=0x0) returned 1 [0266.122] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0266.122] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x130e5, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x130f0) returned 1 [0266.123] SetFilePointer (in: hFile=0x70c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0266.123] WriteFile (in: hFile=0x70c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x130f0, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7b320*=0x130f0, lpOverlapped=0x0) returned 1 [0266.123] WriteFile (in: hFile=0x70c, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0266.123] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0266.123] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0266.123] WriteFile (in: hFile=0x70c, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0266.123] CloseHandle (hObject=0x70c) returned 1 [0266.139] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0266.143] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0266.143] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0266.143] FindNextFileW (in: hFindFile=0x665d90cda0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0266.143] FindClose (in: hFindFile=0x665d90cda0 | out: hFindFile=0x665d90cda0) returned 1 [0266.143] SetLastError (dwErrCode=0x0) [0266.143] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\h-ug1CsF\\qxfZHoyx31Lt\\dJNEsBiuX\\lCi216Q_lDZzEb\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\h-ug1csf\\qxfzhoyx31lt\\djnesbiux\\lci216q_ldzzeb\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x700 [0266.144] GetLastError () returned 0x0 [0266.144] WriteFile (in: hFile=0x700, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0266.144] CloseHandle (hObject=0x700) returned 1 [0266.145] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0266.145] SetLastError (dwErrCode=0x0) [0266.145] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\h-ug1CsF\\qxfZHoyx31Lt\\dJNEsBiuX\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\h-ug1csf\\qxfzhoyx31lt\\djnesbiux\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x700 [0266.145] GetLastError () returned 0xb7 [0266.145] CloseHandle (hObject=0x700) returned 1 [0266.145] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\h-ug1CsF\\qxfZHoyx31Lt\\dJNEsBiuX\\s7TfnOifPf\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c0e0 [0266.146] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0266.146] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0266.146] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0266.146] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\h-ug1CsF\\qxfZHoyx31Lt\\dJNEsBiuX\\s7TfnOifPf\\3rh0EoAS0NU49QXlj3J.jpg", dwFileAttributes=0x80) returned 1 [0266.147] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\h-ug1CsF\\qxfZHoyx31Lt\\dJNEsBiuX\\s7TfnOifPf\\3rh0EoAS0NU49QXlj3J.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\h-ug1csf\\qxfzhoyx31lt\\djnesbiux\\s7tfnoifpf\\3rh0eoas0nu49qxlj3j.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x70c [0266.147] GetFileSizeEx (in: hFile=0x70c, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=95491) returned 1 [0266.147] GetFileSizeEx (in: hFile=0x70c, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=95491) returned 1 [0266.147] SetFilePointerEx (in: hFile=0x70c, liDistanceToMove=0x173e1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.147] ReadFile (in: hFile=0x70c, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0266.148] SetFilePointer (in: hFile=0x70c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0266.148] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665aae6820) returned 1 [0266.148] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0266.149] SetFilePointer (in: hFile=0x70c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0266.149] ReadFile (in: hFile=0x70c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x17503, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7b320*=0x17503, lpOverlapped=0x0) returned 1 [0266.150] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0266.150] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x17503, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x17510) returned 1 [0266.150] SetFilePointer (in: hFile=0x70c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0266.150] WriteFile (in: hFile=0x70c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x17510, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7b320*=0x17510, lpOverlapped=0x0) returned 1 [0266.151] WriteFile (in: hFile=0x70c, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0266.151] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0266.151] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0266.151] WriteFile (in: hFile=0x70c, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0266.151] CloseHandle (hObject=0x70c) returned 1 [0266.166] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0266.170] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0266.170] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0266.170] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0266.170] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0266.170] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\h-ug1CsF\\qxfZHoyx31Lt\\dJNEsBiuX\\s7TfnOifPf\\6RLQ83hTUvozpt.jpg", dwFileAttributes=0x80) returned 1 [0266.171] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\h-ug1CsF\\qxfZHoyx31Lt\\dJNEsBiuX\\s7TfnOifPf\\6RLQ83hTUvozpt.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\h-ug1csf\\qxfzhoyx31lt\\djnesbiux\\s7tfnoifpf\\6rlq83htuvozpt.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x70c [0266.171] GetFileSizeEx (in: hFile=0x70c, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=52872) returned 1 [0266.171] GetFileSizeEx (in: hFile=0x70c, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=52872) returned 1 [0266.171] SetFilePointerEx (in: hFile=0x70c, liDistanceToMove=0xcd66, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.171] ReadFile (in: hFile=0x70c, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0266.172] SetFilePointer (in: hFile=0x70c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0266.172] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665aae6820) returned 1 [0266.172] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0266.173] SetFilePointer (in: hFile=0x70c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0266.173] ReadFile (in: hFile=0x70c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xce88, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7b320*=0xce88, lpOverlapped=0x0) returned 1 [0266.174] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0266.174] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0xce88, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0xce90) returned 1 [0266.174] SetFilePointer (in: hFile=0x70c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0266.174] WriteFile (in: hFile=0x70c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xce90, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7b320*=0xce90, lpOverlapped=0x0) returned 1 [0266.174] WriteFile (in: hFile=0x70c, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0266.174] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0266.174] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0266.174] WriteFile (in: hFile=0x70c, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0266.174] CloseHandle (hObject=0x70c) returned 1 [0266.190] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0266.194] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0266.194] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0266.194] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0266.194] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0266.194] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\h-ug1CsF\\qxfZHoyx31Lt\\dJNEsBiuX\\s7TfnOifPf\\huJ4 wdEaAarSdLOeb.png", dwFileAttributes=0x80) returned 1 [0266.195] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\h-ug1CsF\\qxfZHoyx31Lt\\dJNEsBiuX\\s7TfnOifPf\\huJ4 wdEaAarSdLOeb.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\h-ug1csf\\qxfzhoyx31lt\\djnesbiux\\s7tfnoifpf\\huj4 wdeaaarsdloeb.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x70c [0266.195] GetFileSizeEx (in: hFile=0x70c, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=86831) returned 1 [0266.195] GetFileSizeEx (in: hFile=0x70c, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=86831) returned 1 [0266.195] SetFilePointerEx (in: hFile=0x70c, liDistanceToMove=0x1520d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.196] ReadFile (in: hFile=0x70c, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0266.197] SetFilePointer (in: hFile=0x70c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0266.197] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665aae6820) returned 1 [0266.197] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0266.197] SetFilePointer (in: hFile=0x70c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0266.197] ReadFile (in: hFile=0x70c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x1532f, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7b320*=0x1532f, lpOverlapped=0x0) returned 1 [0266.198] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0266.198] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x1532f, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x15330) returned 1 [0266.198] SetFilePointer (in: hFile=0x70c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0266.198] WriteFile (in: hFile=0x70c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x15330, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7b320*=0x15330, lpOverlapped=0x0) returned 1 [0266.199] WriteFile (in: hFile=0x70c, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0266.199] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0266.199] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0266.199] WriteFile (in: hFile=0x70c, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0266.199] CloseHandle (hObject=0x70c) returned 1 [0266.214] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0266.219] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0266.219] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0266.220] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0266.220] FindClose (in: hFindFile=0x665d90c0e0 | out: hFindFile=0x665d90c0e0) returned 1 [0266.220] SetLastError (dwErrCode=0x0) [0266.220] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\h-ug1CsF\\qxfZHoyx31Lt\\dJNEsBiuX\\s7TfnOifPf\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\h-ug1csf\\qxfzhoyx31lt\\djnesbiux\\s7tfnoifpf\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x700 [0266.222] GetLastError () returned 0x0 [0266.222] WriteFile (in: hFile=0x700, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0266.223] CloseHandle (hObject=0x700) returned 1 [0266.223] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0266.223] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0266.223] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\h-ug1CsF\\qxfZHoyx31Lt\\dJNEsBiuX\\sbB7DOFAglIwCKQh9f7Q.gif", dwFileAttributes=0x80) returned 1 [0266.223] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\h-ug1CsF\\qxfZHoyx31Lt\\dJNEsBiuX\\sbB7DOFAglIwCKQh9f7Q.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\h-ug1csf\\qxfzhoyx31lt\\djnesbiux\\sbb7dofagliwckqh9f7q.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x700 [0266.224] GetFileSizeEx (in: hFile=0x700, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=90247) returned 1 [0266.224] GetFileSizeEx (in: hFile=0x700, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=90247) returned 1 [0266.224] SetFilePointerEx (in: hFile=0x700, liDistanceToMove=0x15f65, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.224] ReadFile (in: hFile=0x700, lpBuffer=0x665da7bb38, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7baf8, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb38*, lpNumberOfBytesRead=0x665da7baf8*=0x19, lpOverlapped=0x0) returned 1 [0266.226] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0266.226] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7bac0 | out: phKey=0x665da7bac0*=0x665aae6820) returned 1 [0266.226] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0266.226] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0266.226] ReadFile (in: hFile=0x700, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x16087, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7bad0*=0x16087, lpOverlapped=0x0) returned 1 [0266.243] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4250) returned 1 [0266.243] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0x16087, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0x16090) returned 1 [0266.243] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0266.244] WriteFile (in: hFile=0x700, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x16090, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7bad0*=0x16090, lpOverlapped=0x0) returned 1 [0266.244] WriteFile (in: hFile=0x700, lpBuffer=0x665da7bb10*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb10*, lpNumberOfBytesWritten=0x665da7bad4*=0x6, lpOverlapped=0x0) returned 1 [0266.244] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7bae0 | out: pbData=0x0*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0266.244] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7bb60, pdwDataLen=0x665da7bae0 | out: pbData=0x665da7bb60*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0266.244] WriteFile (in: hFile=0x700, lpBuffer=0x665da7bb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb60*, lpNumberOfBytesWritten=0x665da7bad4*=0x10c, lpOverlapped=0x0) returned 1 [0266.244] CloseHandle (hObject=0x700) returned 1 [0266.263] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0266.269] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0266.269] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0266.269] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0266.270] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0266.270] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\h-ug1CsF\\qxfZHoyx31Lt\\dJNEsBiuX\\SW1_kMmFpNjh.png", dwFileAttributes=0x80) returned 1 [0266.270] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\h-ug1CsF\\qxfZHoyx31Lt\\dJNEsBiuX\\SW1_kMmFpNjh.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\h-ug1csf\\qxfzhoyx31lt\\djnesbiux\\sw1_kmmfpnjh.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x700 [0266.271] GetFileSizeEx (in: hFile=0x700, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=16390) returned 1 [0266.271] GetFileSizeEx (in: hFile=0x700, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=16390) returned 1 [0266.271] SetFilePointerEx (in: hFile=0x700, liDistanceToMove=0x3ee4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.271] ReadFile (in: hFile=0x700, lpBuffer=0x665da7bb38, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7baf8, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb38*, lpNumberOfBytesRead=0x665da7baf8*=0x19, lpOverlapped=0x0) returned 1 [0266.273] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0266.273] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7bac0 | out: phKey=0x665da7bac0*=0x665aae6820) returned 1 [0266.273] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0266.273] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0266.273] ReadFile (in: hFile=0x700, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4006, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7bad0*=0x4006, lpOverlapped=0x0) returned 1 [0266.274] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4250) returned 1 [0266.274] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0x4006, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0x4010) returned 1 [0266.274] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0266.274] WriteFile (in: hFile=0x700, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4010, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7bad0*=0x4010, lpOverlapped=0x0) returned 1 [0266.274] WriteFile (in: hFile=0x700, lpBuffer=0x665da7bb10*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb10*, lpNumberOfBytesWritten=0x665da7bad4*=0x6, lpOverlapped=0x0) returned 1 [0266.274] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7bae0 | out: pbData=0x0*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0266.274] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7bb60, pdwDataLen=0x665da7bae0 | out: pbData=0x665da7bb60*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0266.275] WriteFile (in: hFile=0x700, lpBuffer=0x665da7bb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb60*, lpNumberOfBytesWritten=0x665da7bad4*=0x10c, lpOverlapped=0x0) returned 1 [0266.275] CloseHandle (hObject=0x700) returned 1 [0266.294] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0266.301] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0266.301] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0266.302] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0266.302] FindClose (in: hFindFile=0x665d90d340 | out: hFindFile=0x665d90d340) returned 1 [0266.302] SetLastError (dwErrCode=0x0) [0266.302] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\h-ug1CsF\\qxfZHoyx31Lt\\dJNEsBiuX\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\h-ug1csf\\qxfzhoyx31lt\\djnesbiux\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0266.302] GetLastError () returned 0xb7 [0266.302] CloseHandle (hObject=0x570) returned 1 [0266.302] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0266.302] SetLastError (dwErrCode=0x0) [0266.302] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\h-ug1CsF\\qxfZHoyx31Lt\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\h-ug1csf\\qxfzhoyx31lt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0266.302] GetLastError () returned 0xb7 [0266.302] CloseHandle (hObject=0x570) returned 1 [0266.302] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\h-ug1CsF\\qxfZHoyx31Lt\\MaevVijkBYuyiNh-T8dZ\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90cec0 [0266.303] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0266.303] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0266.303] FindClose (in: hFindFile=0x665d90cec0 | out: hFindFile=0x665d90cec0) returned 1 [0266.303] SetLastError (dwErrCode=0x0) [0266.303] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\h-ug1CsF\\qxfZHoyx31Lt\\MaevVijkBYuyiNh-T8dZ\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\h-ug1csf\\qxfzhoyx31lt\\maevvijkbyuyinh-t8dz\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0266.304] GetLastError () returned 0x0 [0266.304] WriteFile (in: hFile=0x570, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7c490*=0x324, lpOverlapped=0x0) returned 1 [0266.305] CloseHandle (hObject=0x570) returned 1 [0266.305] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0266.305] FindClose (in: hFindFile=0x665d90caa0 | out: hFindFile=0x665d90caa0) returned 1 [0266.305] SetLastError (dwErrCode=0x0) [0266.305] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\h-ug1CsF\\qxfZHoyx31Lt\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\h-ug1csf\\qxfzhoyx31lt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0266.306] GetLastError () returned 0xb7 [0266.306] CloseHandle (hObject=0x60c) returned 1 [0266.306] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0266.306] FindClose (in: hFindFile=0x665d90c080 | out: hFindFile=0x665d90c080) returned 1 [0266.306] SetLastError (dwErrCode=0x0) [0266.306] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\h-ug1CsF\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\h-ug1csf\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0266.306] GetLastError () returned 0xb7 [0266.306] CloseHandle (hObject=0x47c) returned 1 [0266.306] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0266.306] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0266.306] SetLastError (dwErrCode=0x0) [0266.306] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0266.307] GetLastError () returned 0xb7 [0266.307] CloseHandle (hObject=0x47c) returned 1 [0266.307] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Saved Pictures\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665d90c5c0 [0266.307] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0266.307] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0266.307] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0266.307] FindClose (in: hFindFile=0x665d90c5c0 | out: hFindFile=0x665d90c5c0) returned 1 [0266.307] SetLastError (dwErrCode=0x0) [0266.307] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Saved Pictures\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\saved pictures\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0266.308] GetLastError () returned 0x0 [0266.308] WriteFile (in: hFile=0x47c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7d3f0*=0x324, lpOverlapped=0x0) returned 1 [0266.311] CloseHandle (hObject=0x47c) returned 1 [0266.311] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0266.311] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0266.311] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\UgvSN4QJ-PvQFAbk.bmp", dwFileAttributes=0x80) returned 1 [0266.313] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\UgvSN4QJ-PvQFAbk.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\ugvsn4qj-pvqfabk.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0266.314] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=99177) returned 1 [0266.314] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=99177) returned 1 [0266.314] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x18247, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.314] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0266.316] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0266.316] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae6820) returned 1 [0266.316] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0266.316] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0266.316] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x18369, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0x18369, lpOverlapped=0x0) returned 1 [0266.320] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0266.320] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x18369, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x18370) returned 1 [0266.320] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0266.320] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x18370, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0x18370, lpOverlapped=0x0) returned 1 [0266.320] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0266.320] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0266.320] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0266.321] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0266.321] CloseHandle (hObject=0x47c) returned 1 [0266.338] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0266.343] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0266.343] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0266.343] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0266.343] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0266.343] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\YUZxLe44DCeFXUkmO.gif", dwFileAttributes=0x80) returned 1 [0266.344] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\YUZxLe44DCeFXUkmO.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\yuzxle44dcefxukmo.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0266.344] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=20317) returned 1 [0266.344] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=20317) returned 1 [0266.345] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x4e3b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.345] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0266.352] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0266.352] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae6820) returned 1 [0266.352] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0266.353] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0266.353] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4f5d, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0x4f5d, lpOverlapped=0x0) returned 1 [0266.353] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0266.353] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x4f5d, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x4f60) returned 1 [0266.353] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0266.354] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4f60, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0x4f60, lpOverlapped=0x0) returned 1 [0266.354] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0266.354] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0266.354] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0266.354] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0266.354] CloseHandle (hObject=0x47c) returned 1 [0266.374] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0266.380] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0266.380] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0266.380] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0266.380] FindClose (in: hFindFile=0x665d90d040 | out: hFindFile=0x665d90d040) returned 1 [0266.380] SetLastError (dwErrCode=0x0) [0266.380] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0266.380] GetLastError () returned 0xb7 [0266.380] CloseHandle (hObject=0x470) returned 1 [0266.381] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0266.381] SetLastError (dwErrCode=0x0) [0266.381] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0266.381] GetLastError () returned 0xb7 [0266.381] CloseHandle (hObject=0x470) returned 1 [0266.381] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\PrintHood\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0xffffffffffffffff [0266.381] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0266.381] SetLastError (dwErrCode=0x0) [0266.382] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\PrintHood\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\printhood\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0266.385] GetLastError () returned 0x0 [0266.385] WriteFile (in: hFile=0x470, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7dba0*=0x324, lpOverlapped=0x0) returned 1 [0266.386] CloseHandle (hObject=0x470) returned 1 [0266.387] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0266.387] SetLastError (dwErrCode=0x0) [0266.387] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0266.388] GetLastError () returned 0xb7 [0266.388] CloseHandle (hObject=0x470) returned 1 [0266.388] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Recent\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0xffffffffffffffff [0266.388] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0266.388] SetLastError (dwErrCode=0x0) [0266.388] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Recent\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\recent\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0266.389] GetLastError () returned 0x0 [0266.389] WriteFile (in: hFile=0x470, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7dba0*=0x324, lpOverlapped=0x0) returned 1 [0266.390] CloseHandle (hObject=0x470) returned 1 [0266.390] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0266.390] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0266.390] SetLastError (dwErrCode=0x0) [0266.390] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0266.391] GetLastError () returned 0xb7 [0266.391] CloseHandle (hObject=0x470) returned 1 [0266.391] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Saved Games\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665d90cec0 [0266.391] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0266.391] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0266.391] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0266.391] FindClose (in: hFindFile=0x665d90cec0 | out: hFindFile=0x665d90cec0) returned 1 [0266.391] SetLastError (dwErrCode=0x0) [0266.391] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Saved Games\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\saved games\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0266.391] GetLastError () returned 0x0 [0266.391] WriteFile (in: hFile=0x470, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7dba0*=0x324, lpOverlapped=0x0) returned 1 [0266.395] CloseHandle (hObject=0x470) returned 1 [0266.395] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0266.395] SetLastError (dwErrCode=0x0) [0266.395] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0266.396] GetLastError () returned 0xb7 [0266.396] CloseHandle (hObject=0x470) returned 1 [0266.396] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Searches\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665d90c920 [0266.396] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0266.396] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0266.396] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0266.396] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0266.396] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Searches\\Everywhere.search-ms", dwFileAttributes=0x80) returned 1 [0266.397] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Searches\\Everywhere.search-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\searches\\everywhere.search-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0266.397] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=248) returned 1 [0266.397] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=248) returned 1 [0266.397] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae6820) returned 1 [0266.397] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0266.398] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0266.398] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xf8, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0xf8, lpOverlapped=0x0) returned 1 [0266.399] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0266.399] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0xf8, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x100) returned 1 [0266.399] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0266.399] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0x100, lpOverlapped=0x0) returned 1 [0266.399] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0266.399] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0266.399] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0266.399] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0266.399] CloseHandle (hObject=0x47c) returned 1 [0266.420] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0266.426] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0266.426] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0266.427] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0266.427] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0266.427] FindClose (in: hFindFile=0x665d90c920 | out: hFindFile=0x665d90c920) returned 1 [0266.427] SetLastError (dwErrCode=0x0) [0266.427] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Searches\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\searches\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0266.799] GetLastError () returned 0x0 [0266.799] WriteFile (in: hFile=0x470, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7dba0*=0x324, lpOverlapped=0x0) returned 1 [0266.800] CloseHandle (hObject=0x470) returned 1 [0266.800] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0266.800] SetLastError (dwErrCode=0x0) [0266.800] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0266.800] GetLastError () returned 0xb7 [0266.800] CloseHandle (hObject=0x470) returned 1 [0266.800] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\SendTo\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0xffffffffffffffff [0266.800] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0266.800] SetLastError (dwErrCode=0x0) [0266.800] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\SendTo\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\sendto\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0266.805] GetLastError () returned 0x0 [0266.805] WriteFile (in: hFile=0x470, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7dba0*=0x324, lpOverlapped=0x0) returned 1 [0266.806] CloseHandle (hObject=0x470) returned 1 [0266.806] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0266.806] SetLastError (dwErrCode=0x0) [0266.806] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0266.806] GetLastError () returned 0xb7 [0266.806] CloseHandle (hObject=0x470) returned 1 [0266.806] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Start Menu\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0xffffffffffffffff [0266.806] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0266.806] SetLastError (dwErrCode=0x0) [0266.806] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Start Menu\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\start menu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0266.807] GetLastError () returned 0x0 [0266.807] WriteFile (in: hFile=0x470, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7dba0*=0x324, lpOverlapped=0x0) returned 1 [0266.808] CloseHandle (hObject=0x470) returned 1 [0266.808] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0266.808] SetLastError (dwErrCode=0x0) [0266.808] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0266.808] GetLastError () returned 0xb7 [0266.808] CloseHandle (hObject=0x470) returned 1 [0266.808] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Templates\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0xffffffffffffffff [0266.808] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0266.808] SetLastError (dwErrCode=0x0) [0266.808] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Templates\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\templates\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0266.809] GetLastError () returned 0x0 [0266.809] WriteFile (in: hFile=0x470, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7dba0*=0x324, lpOverlapped=0x0) returned 1 [0266.810] CloseHandle (hObject=0x470) returned 1 [0266.810] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0266.810] SetLastError (dwErrCode=0x0) [0266.810] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0266.810] GetLastError () returned 0xb7 [0266.810] CloseHandle (hObject=0x470) returned 1 [0266.810] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665d90d340 [0266.810] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0266.810] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0266.811] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0266.811] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\aW3PI9Gz7gvdfT6Cz0CY.flv", dwFileAttributes=0x80) returned 1 [0266.812] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\aW3PI9Gz7gvdfT6Cz0CY.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\aw3pi9gz7gvdft6cz0cy.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0266.812] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=80206) returned 1 [0266.812] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=80206) returned 1 [0266.812] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x1382c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.812] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0266.813] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0266.813] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae6820) returned 1 [0266.813] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0266.814] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0266.814] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x1394e, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0x1394e, lpOverlapped=0x0) returned 1 [0266.815] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0266.815] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x1394e, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x13950) returned 1 [0266.815] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0266.815] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x13950, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0x13950, lpOverlapped=0x0) returned 1 [0266.816] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0266.816] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0266.816] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0266.816] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0266.816] CloseHandle (hObject=0x47c) returned 1 [0266.834] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0266.838] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0266.839] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0266.839] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0266.839] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0266.839] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\B40hF.mp4", dwFileAttributes=0x80) returned 1 [0266.839] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\B40hF.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\b40hf.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0266.840] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=65659) returned 1 [0266.840] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=65659) returned 1 [0266.840] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0xff59, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.840] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0266.842] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0266.842] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae6820) returned 1 [0266.842] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0266.842] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0266.842] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x1007b, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0x1007b, lpOverlapped=0x0) returned 1 [0266.843] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0266.843] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x1007b, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x10080) returned 1 [0266.844] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0266.844] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x10080, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0x10080, lpOverlapped=0x0) returned 1 [0266.844] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0266.844] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0266.844] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0266.844] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0266.844] CloseHandle (hObject=0x47c) returned 1 [0266.857] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0266.861] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0266.861] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0266.862] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0266.862] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0266.862] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0266.862] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\gKFmm.flv", dwFileAttributes=0x80) returned 1 [0266.863] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\gKFmm.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\gkfmm.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0266.863] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=51933) returned 1 [0266.863] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=51933) returned 1 [0266.863] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0xc9bb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.863] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0266.864] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0266.865] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae6820) returned 1 [0266.865] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0266.865] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0266.865] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xcadd, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0xcadd, lpOverlapped=0x0) returned 1 [0266.866] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0266.866] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0xcadd, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0xcae0) returned 1 [0266.866] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0266.866] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xcae0, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0xcae0, lpOverlapped=0x0) returned 1 [0266.866] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0266.866] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0266.866] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0266.866] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0266.867] CloseHandle (hObject=0x47c) returned 1 [0266.885] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0266.890] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0266.890] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0266.890] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0266.890] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0266.890] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Gnzn Q1Algzf06x.flv", dwFileAttributes=0x80) returned 1 [0266.891] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Gnzn Q1Algzf06x.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\gnzn q1algzf06x.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0266.892] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=81805) returned 1 [0266.892] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=81805) returned 1 [0266.892] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x13e6b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.892] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0266.893] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0266.893] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae6820) returned 1 [0266.893] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0266.894] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0266.894] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x13f8d, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0x13f8d, lpOverlapped=0x0) returned 1 [0266.895] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0266.895] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x13f8d, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x13f90) returned 1 [0266.895] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0266.895] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x13f90, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0x13f90, lpOverlapped=0x0) returned 1 [0266.896] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0266.896] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0266.896] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0266.896] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0266.896] CloseHandle (hObject=0x47c) returned 1 [0266.913] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0266.917] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0266.917] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0266.917] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0266.917] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0266.917] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\NCQaPYm_h8O.mp4", dwFileAttributes=0x80) returned 1 [0266.918] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\NCQaPYm_h8O.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\ncqapym_h8o.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0266.918] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=10857) returned 1 [0266.918] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=10857) returned 1 [0266.918] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x2947, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.918] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0266.920] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0266.920] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae6820) returned 1 [0266.920] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0266.920] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0266.920] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x2a69, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0x2a69, lpOverlapped=0x0) returned 1 [0266.921] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0266.921] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x2a69, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x2a70) returned 1 [0266.921] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0266.921] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x2a70, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0x2a70, lpOverlapped=0x0) returned 1 [0266.921] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0266.921] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0266.921] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0266.921] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0266.921] CloseHandle (hObject=0x47c) returned 1 [0266.938] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0266.942] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0266.942] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0266.942] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0266.942] SetLastError (dwErrCode=0x0) [0266.942] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0266.943] GetLastError () returned 0xb7 [0266.943] CloseHandle (hObject=0x47c) returned 1 [0266.943] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Py4IDOn0A\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665d90bc60 [0266.945] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0266.945] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0266.945] SetLastError (dwErrCode=0x0) [0266.945] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Py4IDOn0A\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\py4idon0a\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0266.945] GetLastError () returned 0x0 [0266.945] WriteFile (in: hFile=0x60c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7cc40*=0x324, lpOverlapped=0x0) returned 1 [0266.946] CloseHandle (hObject=0x60c) returned 1 [0266.946] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Py4IDOn0A\\AYIw\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90d040 [0266.946] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0266.946] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0266.946] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0266.947] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Py4IDOn0A\\AYIw\\leIDVhNr.mkv", dwFileAttributes=0x80) returned 1 [0266.947] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Py4IDOn0A\\AYIw\\leIDVhNr.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\py4idon0a\\ayiw\\leidvhnr.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0266.947] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7c288 | out: lpFileSize=0x665da7c288*=52658) returned 1 [0266.948] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7c298 | out: lpFileSize=0x665da7c298*=52658) returned 1 [0266.948] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0xcc90, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.948] ReadFile (in: hFile=0x570, lpBuffer=0x665da7c2e8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7c2a8, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2e8*, lpNumberOfBytesRead=0x665da7c2a8*=0x19, lpOverlapped=0x0) returned 1 [0266.949] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0266.949] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7c270 | out: phKey=0x665da7c270*=0x665aae6820) returned 1 [0266.949] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0266.949] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0266.949] ReadFile (in: hFile=0x570, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xcdb2, lpNumberOfBytesRead=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7c280*=0xcdb2, lpOverlapped=0x0) returned 1 [0266.950] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4250) returned 1 [0266.950] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0xcdb2, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0xcdc0) returned 1 [0266.950] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0266.950] WriteFile (in: hFile=0x570, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xcdc0, lpNumberOfBytesWritten=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7c280*=0xcdc0, lpOverlapped=0x0) returned 1 [0266.950] WriteFile (in: hFile=0x570, lpBuffer=0x665da7c2c0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2c0*, lpNumberOfBytesWritten=0x665da7c284*=0x6, lpOverlapped=0x0) returned 1 [0266.950] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7c290 | out: pbData=0x0*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0266.950] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7c310, pdwDataLen=0x665da7c290 | out: pbData=0x665da7c310*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0266.951] WriteFile (in: hFile=0x570, lpBuffer=0x665da7c310*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c310*, lpNumberOfBytesWritten=0x665da7c284*=0x10c, lpOverlapped=0x0) returned 1 [0266.951] CloseHandle (hObject=0x570) returned 1 [0266.970] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0266.974] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0266.974] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0266.975] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0266.975] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0266.975] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Py4IDOn0A\\AYIw\\v3iev3cd.avi", dwFileAttributes=0x80) returned 1 [0266.975] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Py4IDOn0A\\AYIw\\v3iev3cd.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\py4idon0a\\ayiw\\v3iev3cd.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0266.976] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7c288 | out: lpFileSize=0x665da7c288*=82564) returned 1 [0266.976] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7c298 | out: lpFileSize=0x665da7c298*=82564) returned 1 [0266.976] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x14162, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.976] ReadFile (in: hFile=0x570, lpBuffer=0x665da7c2e8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7c2a8, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2e8*, lpNumberOfBytesRead=0x665da7c2a8*=0x19, lpOverlapped=0x0) returned 1 [0266.977] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0266.977] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7c270 | out: phKey=0x665da7c270*=0x665aae6820) returned 1 [0266.977] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0266.977] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0266.977] ReadFile (in: hFile=0x570, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x14284, lpNumberOfBytesRead=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7c280*=0x14284, lpOverlapped=0x0) returned 1 [0266.979] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4250) returned 1 [0266.979] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x14284, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x14290) returned 1 [0266.979] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0266.979] WriteFile (in: hFile=0x570, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x14290, lpNumberOfBytesWritten=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7c280*=0x14290, lpOverlapped=0x0) returned 1 [0266.979] WriteFile (in: hFile=0x570, lpBuffer=0x665da7c2c0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2c0*, lpNumberOfBytesWritten=0x665da7c284*=0x6, lpOverlapped=0x0) returned 1 [0266.979] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7c290 | out: pbData=0x0*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0266.979] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7c310, pdwDataLen=0x665da7c290 | out: pbData=0x665da7c310*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0266.979] WriteFile (in: hFile=0x570, lpBuffer=0x665da7c310*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c310*, lpNumberOfBytesWritten=0x665da7c284*=0x10c, lpOverlapped=0x0) returned 1 [0266.979] CloseHandle (hObject=0x570) returned 1 [0266.995] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0266.998] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0266.999] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0266.999] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0266.999] FindClose (in: hFindFile=0x665d90d040 | out: hFindFile=0x665d90d040) returned 1 [0266.999] SetLastError (dwErrCode=0x0) [0266.999] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Py4IDOn0A\\AYIw\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\py4idon0a\\ayiw\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0266.999] GetLastError () returned 0x0 [0267.000] WriteFile (in: hFile=0x60c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7cc40*=0x324, lpOverlapped=0x0) returned 1 [0267.000] CloseHandle (hObject=0x60c) returned 1 [0267.000] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0267.000] SetLastError (dwErrCode=0x0) [0267.000] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Py4IDOn0A\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\py4idon0a\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0267.001] GetLastError () returned 0xb7 [0267.001] CloseHandle (hObject=0x60c) returned 1 [0267.001] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Py4IDOn0A\\eyKjk5X0zO0\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90c260 [0267.005] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0267.005] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0267.005] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0267.005] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Py4IDOn0A\\eyKjk5X0zO0\\nxZPB.mp4", dwFileAttributes=0x80) returned 1 [0267.009] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Py4IDOn0A\\eyKjk5X0zO0\\nxZPB.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\py4idon0a\\eykjk5x0zo0\\nxzpb.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0267.009] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7c288 | out: lpFileSize=0x665da7c288*=27644) returned 1 [0267.009] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7c298 | out: lpFileSize=0x665da7c298*=27644) returned 1 [0267.009] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x6ada, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.010] ReadFile (in: hFile=0x570, lpBuffer=0x665da7c2e8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7c2a8, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2e8*, lpNumberOfBytesRead=0x665da7c2a8*=0x19, lpOverlapped=0x0) returned 1 [0267.011] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0267.011] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7c270 | out: phKey=0x665da7c270*=0x665aae6820) returned 1 [0267.011] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0267.011] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0267.011] ReadFile (in: hFile=0x570, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x6bfc, lpNumberOfBytesRead=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7c280*=0x6bfc, lpOverlapped=0x0) returned 1 [0267.012] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4250) returned 1 [0267.012] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x6bfc, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x6c00) returned 1 [0267.012] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0267.012] WriteFile (in: hFile=0x570, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x6c00, lpNumberOfBytesWritten=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7c280*=0x6c00, lpOverlapped=0x0) returned 1 [0267.012] WriteFile (in: hFile=0x570, lpBuffer=0x665da7c2c0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2c0*, lpNumberOfBytesWritten=0x665da7c284*=0x6, lpOverlapped=0x0) returned 1 [0267.012] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7c290 | out: pbData=0x0*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0267.012] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7c310, pdwDataLen=0x665da7c290 | out: pbData=0x665da7c310*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0267.012] WriteFile (in: hFile=0x570, lpBuffer=0x665da7c310*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c310*, lpNumberOfBytesWritten=0x665da7c284*=0x10c, lpOverlapped=0x0) returned 1 [0267.012] CloseHandle (hObject=0x570) returned 1 [0267.031] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0267.036] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0267.036] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0267.036] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0267.036] SetLastError (dwErrCode=0x0) [0267.036] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Py4IDOn0A\\eyKjk5X0zO0\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\py4idon0a\\eykjk5x0zo0\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0267.037] GetLastError () returned 0x0 [0267.037] WriteFile (in: hFile=0x570, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7c490*=0x324, lpOverlapped=0x0) returned 1 [0267.038] CloseHandle (hObject=0x570) returned 1 [0267.038] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Py4IDOn0A\\eyKjk5X0zO0\\pahN7\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90bde0 [0267.039] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0267.039] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0267.039] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0267.039] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Py4IDOn0A\\eyKjk5X0zO0\\pahN7\\5FcLSk Oyquq-vJQ.avi", dwFileAttributes=0x80) returned 1 [0267.040] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Py4IDOn0A\\eyKjk5X0zO0\\pahN7\\5FcLSk Oyquq-vJQ.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\py4idon0a\\eykjk5x0zo0\\pahn7\\5fclsk oyquq-vjq.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x700 [0267.040] GetFileSizeEx (in: hFile=0x700, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=46544) returned 1 [0267.040] GetFileSizeEx (in: hFile=0x700, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=46544) returned 1 [0267.040] SetFilePointerEx (in: hFile=0x700, liDistanceToMove=0xb4ae, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.040] ReadFile (in: hFile=0x700, lpBuffer=0x665da7bb38, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7baf8, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb38*, lpNumberOfBytesRead=0x665da7baf8*=0x19, lpOverlapped=0x0) returned 1 [0267.041] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0267.041] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7bac0 | out: phKey=0x665da7bac0*=0x665aae6820) returned 1 [0267.041] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0267.042] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0267.042] ReadFile (in: hFile=0x700, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xb5d0, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7bad0*=0xb5d0, lpOverlapped=0x0) returned 1 [0267.043] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4250) returned 1 [0267.043] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0xb5d0, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0xb5e0) returned 1 [0267.043] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0267.043] WriteFile (in: hFile=0x700, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xb5e0, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7bad0*=0xb5e0, lpOverlapped=0x0) returned 1 [0267.043] WriteFile (in: hFile=0x700, lpBuffer=0x665da7bb10*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb10*, lpNumberOfBytesWritten=0x665da7bad4*=0x6, lpOverlapped=0x0) returned 1 [0267.043] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7bae0 | out: pbData=0x0*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0267.043] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7bb60, pdwDataLen=0x665da7bae0 | out: pbData=0x665da7bb60*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0267.043] WriteFile (in: hFile=0x700, lpBuffer=0x665da7bb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb60*, lpNumberOfBytesWritten=0x665da7bad4*=0x10c, lpOverlapped=0x0) returned 1 [0267.043] CloseHandle (hObject=0x700) returned 1 [0267.057] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0267.061] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0267.061] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0267.061] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0267.061] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0267.061] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Py4IDOn0A\\eyKjk5X0zO0\\pahN7\\BnK02jO.swf", dwFileAttributes=0x80) returned 1 [0267.062] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Py4IDOn0A\\eyKjk5X0zO0\\pahN7\\BnK02jO.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\py4idon0a\\eykjk5x0zo0\\pahn7\\bnk02jo.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x700 [0267.062] GetFileSizeEx (in: hFile=0x700, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=63532) returned 1 [0267.062] GetFileSizeEx (in: hFile=0x700, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=63532) returned 1 [0267.062] SetFilePointerEx (in: hFile=0x700, liDistanceToMove=0xf70a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.062] ReadFile (in: hFile=0x700, lpBuffer=0x665da7bb38, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7baf8, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb38*, lpNumberOfBytesRead=0x665da7baf8*=0x19, lpOverlapped=0x0) returned 1 [0267.063] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0267.063] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7bac0 | out: phKey=0x665da7bac0*=0x665aae6820) returned 1 [0267.063] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0267.064] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0267.064] ReadFile (in: hFile=0x700, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xf82c, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7bad0*=0xf82c, lpOverlapped=0x0) returned 1 [0267.065] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4250) returned 1 [0267.065] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0xf82c, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0xf830) returned 1 [0267.065] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0267.065] WriteFile (in: hFile=0x700, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xf830, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7bad0*=0xf830, lpOverlapped=0x0) returned 1 [0267.066] WriteFile (in: hFile=0x700, lpBuffer=0x665da7bb10*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb10*, lpNumberOfBytesWritten=0x665da7bad4*=0x6, lpOverlapped=0x0) returned 1 [0267.066] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7bae0 | out: pbData=0x0*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0267.066] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7bb60, pdwDataLen=0x665da7bae0 | out: pbData=0x665da7bb60*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0267.066] WriteFile (in: hFile=0x700, lpBuffer=0x665da7bb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb60*, lpNumberOfBytesWritten=0x665da7bad4*=0x10c, lpOverlapped=0x0) returned 1 [0267.066] CloseHandle (hObject=0x700) returned 1 [0267.081] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0267.085] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0267.085] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0267.085] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0267.085] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0267.085] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Py4IDOn0A\\eyKjk5X0zO0\\pahN7\\e-AUPV0koL.avi", dwFileAttributes=0x80) returned 1 [0267.086] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Py4IDOn0A\\eyKjk5X0zO0\\pahN7\\e-AUPV0koL.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\py4idon0a\\eykjk5x0zo0\\pahn7\\e-aupv0kol.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x700 [0267.087] GetFileSizeEx (in: hFile=0x700, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=45021) returned 1 [0267.087] GetFileSizeEx (in: hFile=0x700, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=45021) returned 1 [0267.087] SetFilePointerEx (in: hFile=0x700, liDistanceToMove=0xaebb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.087] ReadFile (in: hFile=0x700, lpBuffer=0x665da7bb38, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7baf8, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb38*, lpNumberOfBytesRead=0x665da7baf8*=0x19, lpOverlapped=0x0) returned 1 [0267.088] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0267.088] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7bac0 | out: phKey=0x665da7bac0*=0x665aae6820) returned 1 [0267.088] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0267.088] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0267.088] ReadFile (in: hFile=0x700, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xafdd, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7bad0*=0xafdd, lpOverlapped=0x0) returned 1 [0267.089] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4250) returned 1 [0267.089] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0xafdd, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0xafe0) returned 1 [0267.089] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0267.089] WriteFile (in: hFile=0x700, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xafe0, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7bad0*=0xafe0, lpOverlapped=0x0) returned 1 [0267.090] WriteFile (in: hFile=0x700, lpBuffer=0x665da7bb10*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb10*, lpNumberOfBytesWritten=0x665da7bad4*=0x6, lpOverlapped=0x0) returned 1 [0267.090] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7bae0 | out: pbData=0x0*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0267.090] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7bb60, pdwDataLen=0x665da7bae0 | out: pbData=0x665da7bb60*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0267.090] WriteFile (in: hFile=0x700, lpBuffer=0x665da7bb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb60*, lpNumberOfBytesWritten=0x665da7bad4*=0x10c, lpOverlapped=0x0) returned 1 [0267.090] CloseHandle (hObject=0x700) returned 1 [0267.106] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0267.110] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0267.110] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0267.110] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0267.110] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0267.110] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Py4IDOn0A\\eyKjk5X0zO0\\pahN7\\kxxRO_3EBZ.mkv", dwFileAttributes=0x80) returned 1 [0267.111] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Py4IDOn0A\\eyKjk5X0zO0\\pahN7\\kxxRO_3EBZ.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\py4idon0a\\eykjk5x0zo0\\pahn7\\kxxro_3ebz.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x700 [0267.112] GetFileSizeEx (in: hFile=0x700, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=31479) returned 1 [0267.112] GetFileSizeEx (in: hFile=0x700, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=31479) returned 1 [0267.112] SetFilePointerEx (in: hFile=0x700, liDistanceToMove=0x79d5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.112] ReadFile (in: hFile=0x700, lpBuffer=0x665da7bb38, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7baf8, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb38*, lpNumberOfBytesRead=0x665da7baf8*=0x19, lpOverlapped=0x0) returned 1 [0267.113] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0267.113] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7bac0 | out: phKey=0x665da7bac0*=0x665aae6820) returned 1 [0267.113] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0267.113] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0267.113] ReadFile (in: hFile=0x700, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x7af7, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7bad0*=0x7af7, lpOverlapped=0x0) returned 1 [0267.114] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4250) returned 1 [0267.114] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0x7af7, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0x7b00) returned 1 [0267.114] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0267.114] WriteFile (in: hFile=0x700, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x7b00, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7bad0*=0x7b00, lpOverlapped=0x0) returned 1 [0267.115] WriteFile (in: hFile=0x700, lpBuffer=0x665da7bb10*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb10*, lpNumberOfBytesWritten=0x665da7bad4*=0x6, lpOverlapped=0x0) returned 1 [0267.115] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7bae0 | out: pbData=0x0*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0267.115] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7bb60, pdwDataLen=0x665da7bae0 | out: pbData=0x665da7bb60*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0267.115] WriteFile (in: hFile=0x700, lpBuffer=0x665da7bb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb60*, lpNumberOfBytesWritten=0x665da7bad4*=0x10c, lpOverlapped=0x0) returned 1 [0267.115] CloseHandle (hObject=0x700) returned 1 [0267.134] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0267.139] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0267.139] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0267.139] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0267.139] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0267.139] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Py4IDOn0A\\eyKjk5X0zO0\\pahN7\\QHuj7iWX7BxxrT.flv", dwFileAttributes=0x80) returned 1 [0267.140] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Py4IDOn0A\\eyKjk5X0zO0\\pahN7\\QHuj7iWX7BxxrT.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\py4idon0a\\eykjk5x0zo0\\pahn7\\qhuj7iwx7bxxrt.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x700 [0267.140] GetFileSizeEx (in: hFile=0x700, lpFileSize=0x665da7bad8 | out: lpFileSize=0x665da7bad8*=55290) returned 1 [0267.140] GetFileSizeEx (in: hFile=0x700, lpFileSize=0x665da7bae8 | out: lpFileSize=0x665da7bae8*=55290) returned 1 [0267.140] SetFilePointerEx (in: hFile=0x700, liDistanceToMove=0xd6d8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.140] ReadFile (in: hFile=0x700, lpBuffer=0x665da7bb38, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7baf8, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb38*, lpNumberOfBytesRead=0x665da7baf8*=0x19, lpOverlapped=0x0) returned 1 [0267.141] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0267.141] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7bac0 | out: phKey=0x665da7bac0*=0x665aae6820) returned 1 [0267.142] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0267.142] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0267.142] ReadFile (in: hFile=0x700, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xd7fa, lpNumberOfBytesRead=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7bad0*=0xd7fa, lpOverlapped=0x0) returned 1 [0267.143] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7bacc*=0xf4250) returned 1 [0267.143] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0xd7fa, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7bac8*=0xd800) returned 1 [0267.143] SetFilePointer (in: hFile=0x700, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0267.143] WriteFile (in: hFile=0x700, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xd800, lpNumberOfBytesWritten=0x665da7bad0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7bad0*=0xd800, lpOverlapped=0x0) returned 1 [0267.143] WriteFile (in: hFile=0x700, lpBuffer=0x665da7bb10*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb10*, lpNumberOfBytesWritten=0x665da7bad4*=0x6, lpOverlapped=0x0) returned 1 [0267.144] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7bae0 | out: pbData=0x0*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0267.144] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7bb60, pdwDataLen=0x665da7bae0 | out: pbData=0x665da7bb60*, pdwDataLen=0x665da7bae0*=0x10c) returned 1 [0267.144] WriteFile (in: hFile=0x700, lpBuffer=0x665da7bb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7bad4, lpOverlapped=0x0 | out: lpBuffer=0x665da7bb60*, lpNumberOfBytesWritten=0x665da7bad4*=0x10c, lpOverlapped=0x0) returned 1 [0267.144] CloseHandle (hObject=0x700) returned 1 [0267.162] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0267.169] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0267.169] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0267.169] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0267.169] SetLastError (dwErrCode=0x0) [0267.169] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Py4IDOn0A\\eyKjk5X0zO0\\pahN7\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\py4idon0a\\eykjk5x0zo0\\pahn7\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x700 [0267.170] GetLastError () returned 0x0 [0267.170] WriteFile (in: hFile=0x700, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7bce0*=0x324, lpOverlapped=0x0) returned 1 [0267.171] CloseHandle (hObject=0x700) returned 1 [0267.171] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Py4IDOn0A\\eyKjk5X0zO0\\pahN7\\rD458A\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bcc0 [0267.173] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0267.173] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0267.173] SetLastError (dwErrCode=0x0) [0267.173] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Py4IDOn0A\\eyKjk5X0zO0\\pahN7\\rD458A\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\py4idon0a\\eykjk5x0zo0\\pahn7\\rd458a\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x70c [0267.174] GetLastError () returned 0x0 [0267.174] WriteFile (in: hFile=0x70c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0267.175] CloseHandle (hObject=0x70c) returned 1 [0267.175] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Py4IDOn0A\\eyKjk5X0zO0\\pahN7\\rD458A\\5wNNailCtdl6\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90ca40 [0267.175] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0267.175] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0267.175] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0267.176] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Py4IDOn0A\\eyKjk5X0zO0\\pahN7\\rD458A\\5wNNailCtdl6\\J3eZz.mp4", dwFileAttributes=0x80) returned 1 [0267.176] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Py4IDOn0A\\eyKjk5X0zO0\\pahN7\\rD458A\\5wNNailCtdl6\\J3eZz.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\py4idon0a\\eykjk5x0zo0\\pahn7\\rd458a\\5wnnailctdl6\\j3ezz.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x710 [0267.177] GetFileSizeEx (in: hFile=0x710, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=32117) returned 1 [0267.177] GetFileSizeEx (in: hFile=0x710, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=32117) returned 1 [0267.177] SetFilePointerEx (in: hFile=0x710, liDistanceToMove=0x7c53, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.177] ReadFile (in: hFile=0x710, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0267.178] SetFilePointer (in: hFile=0x710, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0267.178] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665aae6820) returned 1 [0267.178] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0267.178] SetFilePointer (in: hFile=0x710, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0267.178] ReadFile (in: hFile=0x710, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x7d75, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ab70*=0x7d75, lpOverlapped=0x0) returned 1 [0267.179] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0267.179] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ab68*=0x7d75, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ab68*=0x7d80) returned 1 [0267.179] SetFilePointer (in: hFile=0x710, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0267.179] WriteFile (in: hFile=0x710, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x7d80, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x7d80, lpOverlapped=0x0) returned 1 [0267.179] WriteFile (in: hFile=0x710, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0267.179] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0267.179] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0267.179] WriteFile (in: hFile=0x710, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0267.179] CloseHandle (hObject=0x710) returned 1 [0267.197] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0267.200] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0267.201] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0267.201] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0267.201] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0267.201] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Py4IDOn0A\\eyKjk5X0zO0\\pahN7\\rD458A\\5wNNailCtdl6\\Rgp7muuBjYAWa0p.mkv", dwFileAttributes=0x80) returned 1 [0267.202] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Py4IDOn0A\\eyKjk5X0zO0\\pahN7\\rD458A\\5wNNailCtdl6\\Rgp7muuBjYAWa0p.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\py4idon0a\\eykjk5x0zo0\\pahn7\\rd458a\\5wnnailctdl6\\rgp7muubjyawa0p.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x710 [0267.202] GetFileSizeEx (in: hFile=0x710, lpFileSize=0x665da7ab78 | out: lpFileSize=0x665da7ab78*=90969) returned 1 [0267.202] GetFileSizeEx (in: hFile=0x710, lpFileSize=0x665da7ab88 | out: lpFileSize=0x665da7ab88*=90969) returned 1 [0267.202] SetFilePointerEx (in: hFile=0x710, liDistanceToMove=0x16237, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.202] ReadFile (in: hFile=0x710, lpBuffer=0x665da7abd8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ab98, lpOverlapped=0x0 | out: lpBuffer=0x665da7abd8*, lpNumberOfBytesRead=0x665da7ab98*=0x19, lpOverlapped=0x0) returned 1 [0267.207] SetFilePointer (in: hFile=0x710, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0267.207] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ab60 | out: phKey=0x665da7ab60*=0x665aae6820) returned 1 [0267.207] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0267.208] SetFilePointer (in: hFile=0x710, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0267.208] ReadFile (in: hFile=0x710, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x16359, lpNumberOfBytesRead=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ab70*=0x16359, lpOverlapped=0x0) returned 1 [0267.209] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ab6c*=0xf4250) returned 1 [0267.209] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ab68*=0x16359, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ab68*=0x16360) returned 1 [0267.209] SetFilePointer (in: hFile=0x710, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0267.209] WriteFile (in: hFile=0x710, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x16360, lpNumberOfBytesWritten=0x665da7ab70, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ab70*=0x16360, lpOverlapped=0x0) returned 1 [0267.210] WriteFile (in: hFile=0x710, lpBuffer=0x665da7abb0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7abb0*, lpNumberOfBytesWritten=0x665da7ab74*=0x6, lpOverlapped=0x0) returned 1 [0267.210] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ab80 | out: pbData=0x0*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0267.210] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7ac00, pdwDataLen=0x665da7ab80 | out: pbData=0x665da7ac00*, pdwDataLen=0x665da7ab80*=0x10c) returned 1 [0267.210] WriteFile (in: hFile=0x710, lpBuffer=0x665da7ac00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ab74, lpOverlapped=0x0 | out: lpBuffer=0x665da7ac00*, lpNumberOfBytesWritten=0x665da7ab74*=0x10c, lpOverlapped=0x0) returned 1 [0267.210] CloseHandle (hObject=0x710) returned 1 [0267.225] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0267.230] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0267.230] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0267.231] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0267.231] FindClose (in: hFindFile=0x665d90ca40 | out: hFindFile=0x665d90ca40) returned 1 [0267.231] SetLastError (dwErrCode=0x0) [0267.231] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Py4IDOn0A\\eyKjk5X0zO0\\pahN7\\rD458A\\5wNNailCtdl6\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\py4idon0a\\eykjk5x0zo0\\pahn7\\rd458a\\5wnnailctdl6\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x70c [0267.245] GetLastError () returned 0x0 [0267.245] WriteFile (in: hFile=0x70c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7b530*=0x324, lpOverlapped=0x0) returned 1 [0267.246] CloseHandle (hObject=0x70c) returned 1 [0267.246] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0267.246] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0267.246] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Py4IDOn0A\\eyKjk5X0zO0\\pahN7\\rD458A\\Es2Ik4YefMU_46qIS.avi", dwFileAttributes=0x80) returned 1 [0267.247] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Py4IDOn0A\\eyKjk5X0zO0\\pahN7\\rD458A\\Es2Ik4YefMU_46qIS.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\py4idon0a\\eykjk5x0zo0\\pahn7\\rd458a\\es2ik4yefmu_46qis.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x70c [0267.247] GetFileSizeEx (in: hFile=0x70c, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=79460) returned 1 [0267.247] GetFileSizeEx (in: hFile=0x70c, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=79460) returned 1 [0267.247] SetFilePointerEx (in: hFile=0x70c, liDistanceToMove=0x13542, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.247] ReadFile (in: hFile=0x70c, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0267.249] SetFilePointer (in: hFile=0x70c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0267.249] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665aae6820) returned 1 [0267.249] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0267.249] SetFilePointer (in: hFile=0x70c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0267.249] ReadFile (in: hFile=0x70c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x13664, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7b320*=0x13664, lpOverlapped=0x0) returned 1 [0267.250] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0267.250] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x13664, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x13670) returned 1 [0267.250] SetFilePointer (in: hFile=0x70c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0267.250] WriteFile (in: hFile=0x70c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x13670, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7b320*=0x13670, lpOverlapped=0x0) returned 1 [0267.251] WriteFile (in: hFile=0x70c, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0267.251] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0267.251] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0267.251] WriteFile (in: hFile=0x70c, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0267.251] CloseHandle (hObject=0x70c) returned 1 [0267.267] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0267.273] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0267.273] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0267.273] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0267.273] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0267.273] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Py4IDOn0A\\eyKjk5X0zO0\\pahN7\\rD458A\\ITf8mGWrlnL.flv", dwFileAttributes=0x80) returned 1 [0267.274] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Py4IDOn0A\\eyKjk5X0zO0\\pahN7\\rD458A\\ITf8mGWrlnL.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\py4idon0a\\eykjk5x0zo0\\pahn7\\rd458a\\itf8mgwrlnl.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x70c [0267.274] GetFileSizeEx (in: hFile=0x70c, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=41091) returned 1 [0267.274] GetFileSizeEx (in: hFile=0x70c, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=41091) returned 1 [0267.274] SetFilePointerEx (in: hFile=0x70c, liDistanceToMove=0x9f61, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.274] ReadFile (in: hFile=0x70c, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0267.276] SetFilePointer (in: hFile=0x70c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0267.276] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665aae6820) returned 1 [0267.276] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0267.276] SetFilePointer (in: hFile=0x70c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0267.276] ReadFile (in: hFile=0x70c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xa083, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7b320*=0xa083, lpOverlapped=0x0) returned 1 [0267.278] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0267.278] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0xa083, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0xa090) returned 1 [0267.278] SetFilePointer (in: hFile=0x70c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0267.278] WriteFile (in: hFile=0x70c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xa090, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7b320*=0xa090, lpOverlapped=0x0) returned 1 [0267.278] WriteFile (in: hFile=0x70c, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0267.278] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0267.278] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0267.278] WriteFile (in: hFile=0x70c, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0267.278] CloseHandle (hObject=0x70c) returned 1 [0267.299] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0267.303] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0267.303] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0267.303] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0267.303] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0267.304] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Py4IDOn0A\\eyKjk5X0zO0\\pahN7\\rD458A\\Ltx8JYRCwfDyTZTr9.avi", dwFileAttributes=0x80) returned 1 [0267.304] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Py4IDOn0A\\eyKjk5X0zO0\\pahN7\\rD458A\\Ltx8JYRCwfDyTZTr9.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\py4idon0a\\eykjk5x0zo0\\pahn7\\rd458a\\ltx8jyrcwfdytztr9.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x70c [0267.305] GetFileSizeEx (in: hFile=0x70c, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=65170) returned 1 [0267.305] GetFileSizeEx (in: hFile=0x70c, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=65170) returned 1 [0267.305] SetFilePointerEx (in: hFile=0x70c, liDistanceToMove=0xfd70, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.305] ReadFile (in: hFile=0x70c, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0267.306] SetFilePointer (in: hFile=0x70c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0267.306] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665aae6820) returned 1 [0267.306] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0267.306] SetFilePointer (in: hFile=0x70c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0267.306] ReadFile (in: hFile=0x70c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0xfe92, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7b320*=0xfe92, lpOverlapped=0x0) returned 1 [0267.308] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0267.308] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0xfe92, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0xfea0) returned 1 [0267.308] SetFilePointer (in: hFile=0x70c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0267.308] WriteFile (in: hFile=0x70c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0xfea0, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7b320*=0xfea0, lpOverlapped=0x0) returned 1 [0267.308] WriteFile (in: hFile=0x70c, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0267.308] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0267.308] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0267.308] WriteFile (in: hFile=0x70c, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0267.308] CloseHandle (hObject=0x70c) returned 1 [0267.323] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0267.327] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0267.327] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0267.327] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0267.327] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0267.328] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Py4IDOn0A\\eyKjk5X0zO0\\pahN7\\rD458A\\XJP-cWpWMuB4ikS.mp4", dwFileAttributes=0x80) returned 1 [0267.328] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Py4IDOn0A\\eyKjk5X0zO0\\pahN7\\rD458A\\XJP-cWpWMuB4ikS.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\py4idon0a\\eykjk5x0zo0\\pahn7\\rd458a\\xjp-cwpwmub4iks.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x70c [0267.329] GetFileSizeEx (in: hFile=0x70c, lpFileSize=0x665da7b328 | out: lpFileSize=0x665da7b328*=1215) returned 1 [0267.329] GetFileSizeEx (in: hFile=0x70c, lpFileSize=0x665da7b338 | out: lpFileSize=0x665da7b338*=1215) returned 1 [0267.329] SetFilePointerEx (in: hFile=0x70c, liDistanceToMove=0x39d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.329] ReadFile (in: hFile=0x70c, lpBuffer=0x665da7b388, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7b348, lpOverlapped=0x0 | out: lpBuffer=0x665da7b388*, lpNumberOfBytesRead=0x665da7b348*=0x19, lpOverlapped=0x0) returned 1 [0267.330] SetFilePointer (in: hFile=0x70c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0267.330] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7b310 | out: phKey=0x665da7b310*=0x665aae6820) returned 1 [0267.330] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0267.330] SetFilePointer (in: hFile=0x70c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0267.330] ReadFile (in: hFile=0x70c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x4bf, lpNumberOfBytesRead=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7b320*=0x4bf, lpOverlapped=0x0) returned 1 [0267.330] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7b31c*=0xf4250) returned 1 [0267.331] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x4bf, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7b318*=0x4c0) returned 1 [0267.331] SetFilePointer (in: hFile=0x70c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0267.331] WriteFile (in: hFile=0x70c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x4c0, lpNumberOfBytesWritten=0x665da7b320, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7b320*=0x4c0, lpOverlapped=0x0) returned 1 [0267.331] WriteFile (in: hFile=0x70c, lpBuffer=0x665da7b360*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b360*, lpNumberOfBytesWritten=0x665da7b324*=0x6, lpOverlapped=0x0) returned 1 [0267.331] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7b330 | out: pbData=0x0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0267.331] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7b3b0, pdwDataLen=0x665da7b330 | out: pbData=0x665da7b3b0*, pdwDataLen=0x665da7b330*=0x10c) returned 1 [0267.331] WriteFile (in: hFile=0x70c, lpBuffer=0x665da7b3b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7b324, lpOverlapped=0x0 | out: lpBuffer=0x665da7b3b0*, lpNumberOfBytesWritten=0x665da7b324*=0x10c, lpOverlapped=0x0) returned 1 [0267.331] CloseHandle (hObject=0x70c) returned 1 [0267.357] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0267.363] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0267.363] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0267.363] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0267.363] FindClose (in: hFindFile=0x665d90bcc0 | out: hFindFile=0x665d90bcc0) returned 1 [0267.363] SetLastError (dwErrCode=0x0) [0267.363] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Py4IDOn0A\\eyKjk5X0zO0\\pahN7\\rD458A\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\py4idon0a\\eykjk5x0zo0\\pahn7\\rd458a\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x700 [0267.363] GetLastError () returned 0xb7 [0267.363] CloseHandle (hObject=0x700) returned 1 [0267.363] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0267.363] FindClose (in: hFindFile=0x665d90bde0 | out: hFindFile=0x665d90bde0) returned 1 [0267.364] SetLastError (dwErrCode=0x0) [0267.364] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Py4IDOn0A\\eyKjk5X0zO0\\pahN7\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\py4idon0a\\eykjk5x0zo0\\pahn7\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0267.364] GetLastError () returned 0xb7 [0267.364] CloseHandle (hObject=0x570) returned 1 [0267.364] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0267.364] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0267.364] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Py4IDOn0A\\eyKjk5X0zO0\\XOAfPvb.swf", dwFileAttributes=0x80) returned 1 [0267.365] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Py4IDOn0A\\eyKjk5X0zO0\\XOAfPvb.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\py4idon0a\\eykjk5x0zo0\\xoafpvb.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0267.366] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7c288 | out: lpFileSize=0x665da7c288*=75910) returned 1 [0267.366] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7c298 | out: lpFileSize=0x665da7c298*=75910) returned 1 [0267.366] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x12764, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.366] ReadFile (in: hFile=0x570, lpBuffer=0x665da7c2e8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7c2a8, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2e8*, lpNumberOfBytesRead=0x665da7c2a8*=0x19, lpOverlapped=0x0) returned 1 [0267.367] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0267.367] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7c270 | out: phKey=0x665da7c270*=0x665aae6820) returned 1 [0267.367] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0267.367] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0267.367] ReadFile (in: hFile=0x570, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x12886, lpNumberOfBytesRead=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7c280*=0x12886, lpOverlapped=0x0) returned 1 [0267.369] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4250) returned 1 [0267.369] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x12886, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x12890) returned 1 [0267.369] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0267.369] WriteFile (in: hFile=0x570, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x12890, lpNumberOfBytesWritten=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7c280*=0x12890, lpOverlapped=0x0) returned 1 [0267.369] WriteFile (in: hFile=0x570, lpBuffer=0x665da7c2c0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2c0*, lpNumberOfBytesWritten=0x665da7c284*=0x6, lpOverlapped=0x0) returned 1 [0267.369] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7c290 | out: pbData=0x0*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0267.369] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7c310, pdwDataLen=0x665da7c290 | out: pbData=0x665da7c310*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0267.370] WriteFile (in: hFile=0x570, lpBuffer=0x665da7c310*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c310*, lpNumberOfBytesWritten=0x665da7c284*=0x10c, lpOverlapped=0x0) returned 1 [0267.370] CloseHandle (hObject=0x570) returned 1 [0267.389] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0267.393] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0267.393] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0267.393] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0267.393] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0267.393] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Py4IDOn0A\\eyKjk5X0zO0\\Xu5YeIv_MpKfpn6.mkv", dwFileAttributes=0x80) returned 1 [0267.394] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Py4IDOn0A\\eyKjk5X0zO0\\Xu5YeIv_MpKfpn6.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\py4idon0a\\eykjk5x0zo0\\xu5yeiv_mpkfpn6.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0267.394] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7c288 | out: lpFileSize=0x665da7c288*=81327) returned 1 [0267.394] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7c298 | out: lpFileSize=0x665da7c298*=81327) returned 1 [0267.394] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x13c8d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.394] ReadFile (in: hFile=0x570, lpBuffer=0x665da7c2e8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7c2a8, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2e8*, lpNumberOfBytesRead=0x665da7c2a8*=0x19, lpOverlapped=0x0) returned 1 [0267.396] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0267.396] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7c270 | out: phKey=0x665da7c270*=0x665aae6820) returned 1 [0267.396] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0267.396] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0267.396] ReadFile (in: hFile=0x570, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x13daf, lpNumberOfBytesRead=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7c280*=0x13daf, lpOverlapped=0x0) returned 1 [0267.397] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4250) returned 1 [0267.397] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x13daf, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x13db0) returned 1 [0267.397] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0267.397] WriteFile (in: hFile=0x570, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x13db0, lpNumberOfBytesWritten=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7c280*=0x13db0, lpOverlapped=0x0) returned 1 [0267.398] WriteFile (in: hFile=0x570, lpBuffer=0x665da7c2c0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2c0*, lpNumberOfBytesWritten=0x665da7c284*=0x6, lpOverlapped=0x0) returned 1 [0267.398] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7c290 | out: pbData=0x0*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0267.398] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7c310, pdwDataLen=0x665da7c290 | out: pbData=0x665da7c310*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0267.398] WriteFile (in: hFile=0x570, lpBuffer=0x665da7c310*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c310*, lpNumberOfBytesWritten=0x665da7c284*=0x10c, lpOverlapped=0x0) returned 1 [0267.398] CloseHandle (hObject=0x570) returned 1 [0267.418] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0267.423] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0267.423] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0267.424] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0267.424] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0267.424] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Py4IDOn0A\\eyKjk5X0zO0\\xV0beeND0cf.swf", dwFileAttributes=0x80) returned 1 [0267.425] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Py4IDOn0A\\eyKjk5X0zO0\\xV0beeND0cf.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\py4idon0a\\eykjk5x0zo0\\xv0beend0cf.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0267.425] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7c288 | out: lpFileSize=0x665da7c288*=96622) returned 1 [0267.425] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x665da7c298 | out: lpFileSize=0x665da7c298*=96622) returned 1 [0267.425] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x1784c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.425] ReadFile (in: hFile=0x570, lpBuffer=0x665da7c2e8, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7c2a8, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2e8*, lpNumberOfBytesRead=0x665da7c2a8*=0x19, lpOverlapped=0x0) returned 1 [0267.427] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0267.427] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7c270 | out: phKey=0x665da7c270*=0x665aae6820) returned 1 [0267.427] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0267.427] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0267.427] ReadFile (in: hFile=0x570, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x1796e, lpNumberOfBytesRead=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7c280*=0x1796e, lpOverlapped=0x0) returned 1 [0267.429] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7c27c*=0xf4250) returned 1 [0267.429] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x1796e, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7c278*=0x17970) returned 1 [0267.429] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0267.429] WriteFile (in: hFile=0x570, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x17970, lpNumberOfBytesWritten=0x665da7c280, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7c280*=0x17970, lpOverlapped=0x0) returned 1 [0267.443] WriteFile (in: hFile=0x570, lpBuffer=0x665da7c2c0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c2c0*, lpNumberOfBytesWritten=0x665da7c284*=0x6, lpOverlapped=0x0) returned 1 [0267.443] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7c290 | out: pbData=0x0*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0267.443] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7c310, pdwDataLen=0x665da7c290 | out: pbData=0x665da7c310*, pdwDataLen=0x665da7c290*=0x10c) returned 1 [0267.443] WriteFile (in: hFile=0x570, lpBuffer=0x665da7c310*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7c284, lpOverlapped=0x0 | out: lpBuffer=0x665da7c310*, lpNumberOfBytesWritten=0x665da7c284*=0x10c, lpOverlapped=0x0) returned 1 [0267.444] CloseHandle (hObject=0x570) returned 1 [0267.460] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0267.465] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0267.465] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0267.465] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0267.465] FindClose (in: hFindFile=0x665d90c260 | out: hFindFile=0x665d90c260) returned 1 [0267.465] SetLastError (dwErrCode=0x0) [0267.466] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Py4IDOn0A\\eyKjk5X0zO0\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\py4idon0a\\eykjk5x0zo0\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0267.466] GetLastError () returned 0xb7 [0267.466] CloseHandle (hObject=0x60c) returned 1 [0267.466] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0267.466] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0267.466] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Py4IDOn0A\\K_74hfNZnIx8wyAy.avi", dwFileAttributes=0x80) returned 1 [0267.467] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Py4IDOn0A\\K_74hfNZnIx8wyAy.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\py4idon0a\\k_74hfnznix8wyay.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0267.468] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=40857) returned 1 [0267.468] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=40857) returned 1 [0267.468] SetFilePointerEx (in: hFile=0x60c, liDistanceToMove=0x9e77, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.468] ReadFile (in: hFile=0x60c, lpBuffer=0x665da7ca98, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca98*, lpNumberOfBytesRead=0x665da7ca58*=0x19, lpOverlapped=0x0) returned 1 [0267.469] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0267.469] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ca20 | out: phKey=0x665da7ca20*=0x665aae6820) returned 1 [0267.469] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0267.469] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0267.469] ReadFile (in: hFile=0x60c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x9f99, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ca30*=0x9f99, lpOverlapped=0x0) returned 1 [0267.470] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4250) returned 1 [0267.471] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x9f99, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x9fa0) returned 1 [0267.471] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0267.471] WriteFile (in: hFile=0x60c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x9fa0, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ca30*=0x9fa0, lpOverlapped=0x0) returned 1 [0267.471] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7ca70*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca70*, lpNumberOfBytesWritten=0x665da7ca34*=0x6, lpOverlapped=0x0) returned 1 [0267.471] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ca40 | out: pbData=0x0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0267.471] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7cac0, pdwDataLen=0x665da7ca40 | out: pbData=0x665da7cac0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0267.471] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7cac0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7cac0*, lpNumberOfBytesWritten=0x665da7ca34*=0x10c, lpOverlapped=0x0) returned 1 [0267.472] CloseHandle (hObject=0x60c) returned 1 [0267.492] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0267.496] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0267.496] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0267.496] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0267.496] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0267.496] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Py4IDOn0A\\MeDxAQ.flv", dwFileAttributes=0x80) returned 1 [0267.497] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Py4IDOn0A\\MeDxAQ.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\py4idon0a\\medxaq.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0267.498] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=8269) returned 1 [0267.498] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=8269) returned 1 [0267.498] SetFilePointerEx (in: hFile=0x60c, liDistanceToMove=0x1f2b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.498] ReadFile (in: hFile=0x60c, lpBuffer=0x665da7ca98, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca98*, lpNumberOfBytesRead=0x665da7ca58*=0x19, lpOverlapped=0x0) returned 1 [0267.499] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0267.511] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ca20 | out: phKey=0x665da7ca20*=0x665aae6820) returned 1 [0267.511] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0267.512] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0267.512] ReadFile (in: hFile=0x60c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x204d, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ca30*=0x204d, lpOverlapped=0x0) returned 1 [0267.512] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4250) returned 1 [0267.512] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x204d, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x2050) returned 1 [0267.512] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0267.512] WriteFile (in: hFile=0x60c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x2050, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ca30*=0x2050, lpOverlapped=0x0) returned 1 [0267.512] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7ca70*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca70*, lpNumberOfBytesWritten=0x665da7ca34*=0x6, lpOverlapped=0x0) returned 1 [0267.512] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ca40 | out: pbData=0x0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0267.512] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7cac0, pdwDataLen=0x665da7ca40 | out: pbData=0x665da7cac0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0267.513] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7cac0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7cac0*, lpNumberOfBytesWritten=0x665da7ca34*=0x10c, lpOverlapped=0x0) returned 1 [0267.513] CloseHandle (hObject=0x60c) returned 1 [0267.530] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0267.534] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0267.534] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0267.534] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0267.534] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0267.535] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Py4IDOn0A\\t8mLgPY YdXE8_.mkv", dwFileAttributes=0x80) returned 1 [0267.535] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Py4IDOn0A\\t8mLgPY YdXE8_.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\py4idon0a\\t8mlgpy ydxe8_.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0267.536] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=35247) returned 1 [0267.536] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=35247) returned 1 [0267.536] SetFilePointerEx (in: hFile=0x60c, liDistanceToMove=0x888d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.536] ReadFile (in: hFile=0x60c, lpBuffer=0x665da7ca98, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca98*, lpNumberOfBytesRead=0x665da7ca58*=0x19, lpOverlapped=0x0) returned 1 [0267.537] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0267.537] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ca20 | out: phKey=0x665da7ca20*=0x665aae6820) returned 1 [0267.537] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0267.537] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0267.537] ReadFile (in: hFile=0x60c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x89af, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ca30*=0x89af, lpOverlapped=0x0) returned 1 [0267.538] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4250) returned 1 [0267.538] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x89af, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x89b0) returned 1 [0267.538] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0267.538] WriteFile (in: hFile=0x60c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x89b0, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ca30*=0x89b0, lpOverlapped=0x0) returned 1 [0267.538] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7ca70*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca70*, lpNumberOfBytesWritten=0x665da7ca34*=0x6, lpOverlapped=0x0) returned 1 [0267.538] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ca40 | out: pbData=0x0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0267.538] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7cac0, pdwDataLen=0x665da7ca40 | out: pbData=0x665da7cac0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0267.539] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7cac0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7cac0*, lpNumberOfBytesWritten=0x665da7ca34*=0x10c, lpOverlapped=0x0) returned 1 [0267.539] CloseHandle (hObject=0x60c) returned 1 [0267.555] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0267.559] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0267.559] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0267.559] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0267.559] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0267.559] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Py4IDOn0A\\Xyi9k72UMyavVqpRBG.mkv", dwFileAttributes=0x80) returned 1 [0267.560] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Py4IDOn0A\\Xyi9k72UMyavVqpRBG.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\py4idon0a\\xyi9k72umyavvqprbg.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0267.560] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=12362) returned 1 [0267.560] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=12362) returned 1 [0267.560] SetFilePointerEx (in: hFile=0x60c, liDistanceToMove=0x2f28, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.561] ReadFile (in: hFile=0x60c, lpBuffer=0x665da7ca98, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca98*, lpNumberOfBytesRead=0x665da7ca58*=0x19, lpOverlapped=0x0) returned 1 [0267.561] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0267.561] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ca20 | out: phKey=0x665da7ca20*=0x665aae6820) returned 1 [0267.561] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0267.561] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0267.561] ReadFile (in: hFile=0x60c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x304a, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ca30*=0x304a, lpOverlapped=0x0) returned 1 [0267.562] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4250) returned 1 [0267.562] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x304a, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x3050) returned 1 [0267.562] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0267.562] WriteFile (in: hFile=0x60c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3050, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ca30*=0x3050, lpOverlapped=0x0) returned 1 [0267.562] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7ca70*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca70*, lpNumberOfBytesWritten=0x665da7ca34*=0x6, lpOverlapped=0x0) returned 1 [0267.562] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ca40 | out: pbData=0x0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0267.562] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7cac0, pdwDataLen=0x665da7ca40 | out: pbData=0x665da7cac0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0267.563] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7cac0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7cac0*, lpNumberOfBytesWritten=0x665da7ca34*=0x10c, lpOverlapped=0x0) returned 1 [0267.563] CloseHandle (hObject=0x60c) returned 1 [0267.580] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0267.585] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0267.585] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0267.585] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0267.585] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0267.586] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Py4IDOn0A\\z8zBdqdk6XiK.mkv", dwFileAttributes=0x80) returned 1 [0267.586] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Py4IDOn0A\\z8zBdqdk6XiK.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\py4idon0a\\z8zbdqdk6xik.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0267.587] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7ca38 | out: lpFileSize=0x665da7ca38*=71871) returned 1 [0267.587] GetFileSizeEx (in: hFile=0x60c, lpFileSize=0x665da7ca48 | out: lpFileSize=0x665da7ca48*=71871) returned 1 [0267.587] SetFilePointerEx (in: hFile=0x60c, liDistanceToMove=0x1179d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.587] ReadFile (in: hFile=0x60c, lpBuffer=0x665da7ca98, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7ca58, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca98*, lpNumberOfBytesRead=0x665da7ca58*=0x19, lpOverlapped=0x0) returned 1 [0267.588] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0267.588] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7ca20 | out: phKey=0x665da7ca20*=0x665aae6820) returned 1 [0267.588] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0267.589] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0267.589] ReadFile (in: hFile=0x60c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x118bf, lpNumberOfBytesRead=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7ca30*=0x118bf, lpOverlapped=0x0) returned 1 [0267.593] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7ca2c*=0xf4250) returned 1 [0267.593] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x118bf, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7ca28*=0x118c0) returned 1 [0267.594] SetFilePointer (in: hFile=0x60c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0267.594] WriteFile (in: hFile=0x60c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x118c0, lpNumberOfBytesWritten=0x665da7ca30, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7ca30*=0x118c0, lpOverlapped=0x0) returned 1 [0267.594] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7ca70*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7ca70*, lpNumberOfBytesWritten=0x665da7ca34*=0x6, lpOverlapped=0x0) returned 1 [0267.594] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7ca40 | out: pbData=0x0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0267.594] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7cac0, pdwDataLen=0x665da7ca40 | out: pbData=0x665da7cac0*, pdwDataLen=0x665da7ca40*=0x10c) returned 1 [0267.594] WriteFile (in: hFile=0x60c, lpBuffer=0x665da7cac0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7ca34, lpOverlapped=0x0 | out: lpBuffer=0x665da7cac0*, lpNumberOfBytesWritten=0x665da7ca34*=0x10c, lpOverlapped=0x0) returned 1 [0267.594] CloseHandle (hObject=0x60c) returned 1 [0267.832] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0267.837] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0267.837] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0267.837] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0267.837] FindClose (in: hFindFile=0x665d90bc60 | out: hFindFile=0x665d90bc60) returned 1 [0267.837] SetLastError (dwErrCode=0x0) [0267.837] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Py4IDOn0A\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\py4idon0a\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0267.838] GetLastError () returned 0xb7 [0267.838] CloseHandle (hObject=0x47c) returned 1 [0267.838] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0267.838] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0267.838] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0267.838] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\VjYLJ.mp4", dwFileAttributes=0x80) returned 1 [0267.925] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\VjYLJ.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\vjylj.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0267.926] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=94618) returned 1 [0267.926] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=94618) returned 1 [0267.926] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x17078, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.926] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0268.243] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0268.243] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae6820) returned 1 [0268.243] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0268.243] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0268.243] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x1719a, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0x1719a, lpOverlapped=0x0) returned 1 [0268.245] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0268.245] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x1719a, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x171a0) returned 1 [0268.246] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0268.246] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x171a0, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0x171a0, lpOverlapped=0x0) returned 1 [0268.246] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0268.246] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0268.246] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0268.246] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0268.246] CloseHandle (hObject=0x47c) returned 1 [0268.261] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.266] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0268.266] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.266] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0268.266] FindClose (in: hFindFile=0x665d90d340 | out: hFindFile=0x665d90d340) returned 1 [0268.267] SetLastError (dwErrCode=0x0) [0268.267] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0268.267] GetLastError () returned 0xb7 [0268.267] CloseHandle (hObject=0x470) returned 1 [0268.267] FindNextFileW (in: hFindFile=0x665abb5280, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0268.268] FindClose (in: hFindFile=0x665abb5280 | out: hFindFile=0x665abb5280) returned 1 [0268.268] SetLastError (dwErrCode=0x0) [0268.268] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\RyukReadMe.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x430 [0268.268] GetLastError () returned 0xb7 [0268.268] CloseHandle (hObject=0x430) returned 1 [0268.268] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0268.268] SetLastError (dwErrCode=0x0) [0268.269] CreateFileW (lpFileName="C:\\Users\\RyukReadMe.txt" (normalized: "c:\\users\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.269] GetLastError () returned 0x5 [0268.269] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.269] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.269] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665d90c1a0 [0268.269] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.270] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.270] SetLastError (dwErrCode=0x0) [0268.270] CreateFileW (lpFileName="C:\\Users\\Default\\RyukReadMe.txt" (normalized: "c:\\users\\default\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.270] GetLastError () returned 0x5 [0268.270] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0268.270] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.270] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665d90d040 [0268.270] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.270] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.270] SetLastError (dwErrCode=0x0) [0268.270] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\RyukReadMe.txt" (normalized: "c:\\users\\default\\appdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.270] GetLastError () returned 0x5 [0268.271] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0268.271] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.271] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665d90c380 [0268.271] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.271] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.271] SetLastError (dwErrCode=0x0) [0268.271] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\RyukReadMe.txt" (normalized: "c:\\users\\default\\appdata\\local\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.271] GetLastError () returned 0x5 [0268.271] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.271] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.271] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Application Data\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0xffffffffffffffff [0268.271] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0268.271] SetLastError (dwErrCode=0x0) [0268.271] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Application Data\\RyukReadMe.txt" (normalized: "c:\\users\\default\\appdata\\local\\application data\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.272] GetLastError () returned 0x5 [0268.272] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.272] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.272] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.272] SetLastError (dwErrCode=0x0) [0268.272] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\RyukReadMe.txt" (normalized: "c:\\users\\default\\appdata\\local\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.272] GetLastError () returned 0x5 [0268.272] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.272] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.272] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\History\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0xffffffffffffffff [0268.272] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0268.272] SetLastError (dwErrCode=0x0) [0268.272] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\History\\RyukReadMe.txt" (normalized: "c:\\users\\default\\appdata\\local\\history\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.274] GetLastError () returned 0x5 [0268.274] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.274] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.274] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.274] SetLastError (dwErrCode=0x0) [0268.274] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\RyukReadMe.txt" (normalized: "c:\\users\\default\\appdata\\local\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.274] GetLastError () returned 0x5 [0268.275] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.275] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.275] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90c2c0 [0268.275] FindNextFileW (in: hFindFile=0x665d90c2c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.275] FindNextFileW (in: hFindFile=0x665d90c2c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.275] SetLastError (dwErrCode=0x0) [0268.275] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.275] GetLastError () returned 0x5 [0268.275] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0268.275] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.275] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c740 [0268.275] FindNextFileW (in: hFindFile=0x665d90c740, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0268.275] FindNextFileW (in: hFindFile=0x665d90c740, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0268.275] SetLastError (dwErrCode=0x0) [0268.275] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\RyukReadMe.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\inputpersonalization\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.276] GetLastError () returned 0x5 [0268.276] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0268.276] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.276] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c0e0 [0268.276] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0268.276] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0268.276] FindClose (in: hFindFile=0x665d90c0e0 | out: hFindFile=0x665d90c0e0) returned 1 [0268.276] SetLastError (dwErrCode=0x0) [0268.276] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore\\RyukReadMe.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\inputpersonalization\\traineddatastore\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.276] GetLastError () returned 0x5 [0268.276] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0268.276] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.276] FindNextFileW (in: hFindFile=0x665d90c740, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0268.277] FindClose (in: hFindFile=0x665d90c740 | out: hFindFile=0x665d90c740) returned 1 [0268.277] SetLastError (dwErrCode=0x0) [0268.277] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\RyukReadMe.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\inputpersonalization\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.277] GetLastError () returned 0x5 [0268.277] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0268.277] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.277] FindNextFileW (in: hFindFile=0x665d90c2c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.277] FindNextFileW (in: hFindFile=0x665d90c2c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.277] FindNextFileW (in: hFindFile=0x665d90c2c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0268.277] FindClose (in: hFindFile=0x665d90c2c0 | out: hFindFile=0x665d90c2c0) returned 1 [0268.277] SetLastError (dwErrCode=0x0) [0268.277] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.277] GetLastError () returned 0x5 [0268.277] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.277] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.277] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.277] SetLastError (dwErrCode=0x0) [0268.278] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\RyukReadMe.txt" (normalized: "c:\\users\\default\\appdata\\local\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.278] GetLastError () returned 0x5 [0268.278] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.278] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.278] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90c260 [0268.279] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.279] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0268.279] FindClose (in: hFindFile=0x665d90c260 | out: hFindFile=0x665d90c260) returned 1 [0268.279] SetLastError (dwErrCode=0x0) [0268.279] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\RyukReadMe.txt" (normalized: "c:\\users\\default\\appdata\\local\\temp\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.279] GetLastError () returned 0x5 [0268.279] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.279] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.279] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.279] SetLastError (dwErrCode=0x0) [0268.279] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\RyukReadMe.txt" (normalized: "c:\\users\\default\\appdata\\local\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.280] GetLastError () returned 0x5 [0268.280] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.280] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.280] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0xffffffffffffffff [0268.280] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0268.280] SetLastError (dwErrCode=0x0) [0268.280] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files\\RyukReadMe.txt" (normalized: "c:\\users\\default\\appdata\\local\\temporary internet files\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.280] GetLastError () returned 0x5 [0268.280] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.280] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.280] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0268.280] FindClose (in: hFindFile=0x665d90c380 | out: hFindFile=0x665d90c380) returned 1 [0268.280] SetLastError (dwErrCode=0x0) [0268.281] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\RyukReadMe.txt" (normalized: "c:\\users\\default\\appdata\\local\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.281] GetLastError () returned 0x5 [0268.281] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0268.281] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.281] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.281] SetLastError (dwErrCode=0x0) [0268.281] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\RyukReadMe.txt" (normalized: "c:\\users\\default\\appdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.281] GetLastError () returned 0x5 [0268.281] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0268.281] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.281] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665d90cc20 [0268.281] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.281] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.281] SetLastError (dwErrCode=0x0) [0268.282] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\RyukReadMe.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.282] GetLastError () returned 0x5 [0268.282] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.282] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.282] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90cec0 [0268.282] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.283] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.283] SetLastError (dwErrCode=0x0) [0268.283] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.283] GetLastError () returned 0x5 [0268.283] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0268.283] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.283] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90bde0 [0268.283] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0268.283] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0268.283] SetLastError (dwErrCode=0x0) [0268.283] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\RyukReadMe.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.284] GetLastError () returned 0x5 [0268.284] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0268.284] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.284] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bea0 [0268.284] FindNextFileW (in: hFindFile=0x665d90bea0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0268.284] FindNextFileW (in: hFindFile=0x665d90bea0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0268.284] FindNextFileW (in: hFindFile=0x665d90bea0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0268.284] FindNextFileW (in: hFindFile=0x665d90bea0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0268.284] FindNextFileW (in: hFindFile=0x665d90bea0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0268.284] FindClose (in: hFindFile=0x665d90bea0 | out: hFindFile=0x665d90bea0) returned 1 [0268.284] SetLastError (dwErrCode=0x0) [0268.284] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\RyukReadMe.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.284] GetLastError () returned 0x5 [0268.284] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0268.285] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.285] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0268.285] FindClose (in: hFindFile=0x665d90bde0 | out: hFindFile=0x665d90bde0) returned 1 [0268.285] SetLastError (dwErrCode=0x0) [0268.285] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\RyukReadMe.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.285] GetLastError () returned 0x5 [0268.285] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0268.285] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.285] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.285] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0268.285] FindClose (in: hFindFile=0x665d90cec0 | out: hFindFile=0x665d90cec0) returned 1 [0268.285] SetLastError (dwErrCode=0x0) [0268.285] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.285] GetLastError () returned 0x5 [0268.285] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.285] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.286] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0268.286] FindClose (in: hFindFile=0x665d90cc20 | out: hFindFile=0x665d90cc20) returned 1 [0268.286] SetLastError (dwErrCode=0x0) [0268.286] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\RyukReadMe.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.286] GetLastError () returned 0x5 [0268.286] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0268.286] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.286] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0268.286] FindClose (in: hFindFile=0x665d90d040 | out: hFindFile=0x665d90d040) returned 1 [0268.286] SetLastError (dwErrCode=0x0) [0268.286] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\RyukReadMe.txt" (normalized: "c:\\users\\default\\appdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.286] GetLastError () returned 0x5 [0268.286] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0268.286] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.286] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.287] SetLastError (dwErrCode=0x0) [0268.287] CreateFileW (lpFileName="C:\\Users\\Default\\RyukReadMe.txt" (normalized: "c:\\users\\default\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.287] GetLastError () returned 0x5 [0268.287] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0268.287] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.287] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Application Data\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0xffffffffffffffff [0268.287] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0268.287] SetLastError (dwErrCode=0x0) [0268.287] CreateFileW (lpFileName="C:\\Users\\Default\\Application Data\\RyukReadMe.txt" (normalized: "c:\\users\\default\\application data\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.287] GetLastError () returned 0x5 [0268.287] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0268.288] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.288] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.288] SetLastError (dwErrCode=0x0) [0268.288] CreateFileW (lpFileName="C:\\Users\\Default\\RyukReadMe.txt" (normalized: "c:\\users\\default\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.288] GetLastError () returned 0x5 [0268.288] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0268.288] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.288] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Cookies\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0xffffffffffffffff [0268.288] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0268.288] SetLastError (dwErrCode=0x0) [0268.288] CreateFileW (lpFileName="C:\\Users\\Default\\Cookies\\RyukReadMe.txt" (normalized: "c:\\users\\default\\cookies\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.289] GetLastError () returned 0x5 [0268.289] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0268.289] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.289] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.289] SetLastError (dwErrCode=0x0) [0268.289] CreateFileW (lpFileName="C:\\Users\\Default\\RyukReadMe.txt" (normalized: "c:\\users\\default\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.289] GetLastError () returned 0x5 [0268.289] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0268.289] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.289] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Desktop\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665d90c5c0 [0268.289] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.289] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0268.289] FindClose (in: hFindFile=0x665d90c5c0 | out: hFindFile=0x665d90c5c0) returned 1 [0268.289] SetLastError (dwErrCode=0x0) [0268.289] CreateFileW (lpFileName="C:\\Users\\Default\\Desktop\\RyukReadMe.txt" (normalized: "c:\\users\\default\\desktop\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.290] GetLastError () returned 0x5 [0268.290] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0268.290] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.290] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.290] SetLastError (dwErrCode=0x0) [0268.290] CreateFileW (lpFileName="C:\\Users\\Default\\RyukReadMe.txt" (normalized: "c:\\users\\default\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.290] GetLastError () returned 0x5 [0268.290] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0268.290] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.290] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665d90c920 [0268.294] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.294] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.294] SetLastError (dwErrCode=0x0) [0268.294] CreateFileW (lpFileName="C:\\Users\\Default\\Documents\\RyukReadMe.txt" (normalized: "c:\\users\\default\\documents\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.294] GetLastError () returned 0x5 [0268.294] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0268.294] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.294] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\My Music\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0xffffffffffffffff [0268.294] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0268.294] SetLastError (dwErrCode=0x0) [0268.295] CreateFileW (lpFileName="C:\\Users\\Default\\Documents\\My Music\\RyukReadMe.txt" (normalized: "c:\\users\\default\\documents\\my music\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.295] GetLastError () returned 0x5 [0268.295] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0268.296] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.296] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.296] SetLastError (dwErrCode=0x0) [0268.296] CreateFileW (lpFileName="C:\\Users\\Default\\Documents\\RyukReadMe.txt" (normalized: "c:\\users\\default\\documents\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.296] GetLastError () returned 0x5 [0268.296] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0268.296] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.296] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\My Pictures\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0xffffffffffffffff [0268.296] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0268.296] SetLastError (dwErrCode=0x0) [0268.296] CreateFileW (lpFileName="C:\\Users\\Default\\Documents\\My Pictures\\RyukReadMe.txt" (normalized: "c:\\users\\default\\documents\\my pictures\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.297] GetLastError () returned 0x5 [0268.297] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0268.297] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.297] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.297] SetLastError (dwErrCode=0x0) [0268.297] CreateFileW (lpFileName="C:\\Users\\Default\\Documents\\RyukReadMe.txt" (normalized: "c:\\users\\default\\documents\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.297] GetLastError () returned 0x5 [0268.297] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0268.297] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.297] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\My Videos\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0xffffffffffffffff [0268.297] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0268.297] SetLastError (dwErrCode=0x0) [0268.297] CreateFileW (lpFileName="C:\\Users\\Default\\Documents\\My Videos\\RyukReadMe.txt" (normalized: "c:\\users\\default\\documents\\my videos\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.298] GetLastError () returned 0x5 [0268.298] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0268.298] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.298] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0268.298] FindClose (in: hFindFile=0x665d90c920 | out: hFindFile=0x665d90c920) returned 1 [0268.299] SetLastError (dwErrCode=0x0) [0268.299] CreateFileW (lpFileName="C:\\Users\\Default\\Documents\\RyukReadMe.txt" (normalized: "c:\\users\\default\\documents\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.303] GetLastError () returned 0x5 [0268.303] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0268.303] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.303] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.303] SetLastError (dwErrCode=0x0) [0268.303] CreateFileW (lpFileName="C:\\Users\\Default\\RyukReadMe.txt" (normalized: "c:\\users\\default\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.303] GetLastError () returned 0x5 [0268.303] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0268.303] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.303] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Downloads\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665d90ce60 [0268.303] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.303] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0268.303] FindClose (in: hFindFile=0x665d90ce60 | out: hFindFile=0x665d90ce60) returned 1 [0268.303] SetLastError (dwErrCode=0x0) [0268.303] CreateFileW (lpFileName="C:\\Users\\Default\\Downloads\\RyukReadMe.txt" (normalized: "c:\\users\\default\\downloads\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.304] GetLastError () returned 0x5 [0268.304] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0268.304] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.304] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.304] SetLastError (dwErrCode=0x0) [0268.304] CreateFileW (lpFileName="C:\\Users\\Default\\RyukReadMe.txt" (normalized: "c:\\users\\default\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.304] GetLastError () returned 0x5 [0268.304] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0268.304] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.304] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665d90c200 [0268.304] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.304] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0268.304] FindClose (in: hFindFile=0x665d90c200 | out: hFindFile=0x665d90c200) returned 1 [0268.304] SetLastError (dwErrCode=0x0) [0268.304] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\RyukReadMe.txt" (normalized: "c:\\users\\default\\favorites\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.305] GetLastError () returned 0x5 [0268.305] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0268.305] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.305] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.305] SetLastError (dwErrCode=0x0) [0268.305] CreateFileW (lpFileName="C:\\Users\\Default\\RyukReadMe.txt" (normalized: "c:\\users\\default\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.305] GetLastError () returned 0x5 [0268.305] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0268.305] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.305] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Links\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665d90bde0 [0268.305] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.305] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0268.305] FindClose (in: hFindFile=0x665d90bde0 | out: hFindFile=0x665d90bde0) returned 1 [0268.305] SetLastError (dwErrCode=0x0) [0268.306] CreateFileW (lpFileName="C:\\Users\\Default\\Links\\RyukReadMe.txt" (normalized: "c:\\users\\default\\links\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.306] GetLastError () returned 0x5 [0268.306] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0268.306] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.306] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.306] SetLastError (dwErrCode=0x0) [0268.306] CreateFileW (lpFileName="C:\\Users\\Default\\RyukReadMe.txt" (normalized: "c:\\users\\default\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.306] GetLastError () returned 0x5 [0268.306] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0268.306] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.306] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Local Settings\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0xffffffffffffffff [0268.306] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0268.306] SetLastError (dwErrCode=0x0) [0268.306] CreateFileW (lpFileName="C:\\Users\\Default\\Local Settings\\RyukReadMe.txt" (normalized: "c:\\users\\default\\local settings\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.307] GetLastError () returned 0x5 [0268.307] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0268.307] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.307] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.307] SetLastError (dwErrCode=0x0) [0268.307] CreateFileW (lpFileName="C:\\Users\\Default\\RyukReadMe.txt" (normalized: "c:\\users\\default\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.307] GetLastError () returned 0x5 [0268.307] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0268.307] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.307] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Music\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665d90cec0 [0268.307] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.308] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0268.308] FindClose (in: hFindFile=0x665d90cec0 | out: hFindFile=0x665d90cec0) returned 1 [0268.308] SetLastError (dwErrCode=0x0) [0268.308] CreateFileW (lpFileName="C:\\Users\\Default\\Music\\RyukReadMe.txt" (normalized: "c:\\users\\default\\music\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.308] GetLastError () returned 0x5 [0268.308] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0268.308] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.308] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.308] SetLastError (dwErrCode=0x0) [0268.308] CreateFileW (lpFileName="C:\\Users\\Default\\RyukReadMe.txt" (normalized: "c:\\users\\default\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.308] GetLastError () returned 0x5 [0268.308] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0268.308] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.308] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\My Documents\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0xffffffffffffffff [0268.309] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0268.309] SetLastError (dwErrCode=0x0) [0268.309] CreateFileW (lpFileName="C:\\Users\\Default\\My Documents\\RyukReadMe.txt" (normalized: "c:\\users\\default\\my documents\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.313] GetLastError () returned 0x5 [0268.313] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0268.313] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.313] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.313] SetLastError (dwErrCode=0x0) [0268.313] CreateFileW (lpFileName="C:\\Users\\Default\\RyukReadMe.txt" (normalized: "c:\\users\\default\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.314] GetLastError () returned 0x5 [0268.314] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0268.314] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.314] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\NetHood\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0xffffffffffffffff [0268.314] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0268.314] SetLastError (dwErrCode=0x0) [0268.314] CreateFileW (lpFileName="C:\\Users\\Default\\NetHood\\RyukReadMe.txt" (normalized: "c:\\users\\default\\nethood\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.324] GetLastError () returned 0x5 [0268.324] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0268.324] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.324] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.324] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.324] SetFileAttributesW (lpFileName="C:\\Users\\Default\\NTUSER.DAT", dwFileAttributes=0x80) returned 0 [0268.325] CreateFileW (lpFileName="C:\\Users\\Default\\NTUSER.DAT" (normalized: "c:\\users\\default\\ntuser.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.325] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.325] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.326] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.326] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.326] SetFileAttributesW (lpFileName="C:\\Users\\Default\\NTUSER.DAT.LOG1", dwFileAttributes=0x80) returned 0 [0268.326] CreateFileW (lpFileName="C:\\Users\\Default\\NTUSER.DAT.LOG1" (normalized: "c:\\users\\default\\ntuser.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.327] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.327] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.327] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.327] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.327] SetFileAttributesW (lpFileName="C:\\Users\\Default\\NTUSER.DAT.LOG2", dwFileAttributes=0x80) returned 0 [0268.328] CreateFileW (lpFileName="C:\\Users\\Default\\NTUSER.DAT.LOG2" (normalized: "c:\\users\\default\\ntuser.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.328] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.328] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.328] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.329] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.329] SetFileAttributesW (lpFileName="C:\\Users\\Default\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TM.blf", dwFileAttributes=0x80) returned 0 [0268.329] CreateFileW (lpFileName="C:\\Users\\Default\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TM.blf" (normalized: "c:\\users\\default\\ntuser.dat{77a2c7ed-26f0-11e5-80da-e41d2d741090}.tm.blf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.329] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.329] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.330] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.330] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.331] SetFileAttributesW (lpFileName="C:\\Users\\Default\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000001.regtrans-ms", dwFileAttributes=0x80) returned 0 [0268.331] CreateFileW (lpFileName="C:\\Users\\Default\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000001.regtrans-ms" (normalized: "c:\\users\\default\\ntuser.dat{77a2c7ed-26f0-11e5-80da-e41d2d741090}.tmcontainer00000000000000000001.regtrans-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.331] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.331] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.331] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.331] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.332] SetFileAttributesW (lpFileName="C:\\Users\\Default\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000002.regtrans-ms", dwFileAttributes=0x80) returned 0 [0268.332] CreateFileW (lpFileName="C:\\Users\\Default\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000002.regtrans-ms" (normalized: "c:\\users\\default\\ntuser.dat{77a2c7ed-26f0-11e5-80da-e41d2d741090}.tmcontainer00000000000000000002.regtrans-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.332] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.332] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.333] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.333] SetLastError (dwErrCode=0x0) [0268.333] CreateFileW (lpFileName="C:\\Users\\Default\\RyukReadMe.txt" (normalized: "c:\\users\\default\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.333] GetLastError () returned 0x5 [0268.333] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0268.333] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.333] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Pictures\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665d90c200 [0268.333] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.333] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0268.333] FindClose (in: hFindFile=0x665d90c200 | out: hFindFile=0x665d90c200) returned 1 [0268.333] SetLastError (dwErrCode=0x0) [0268.333] CreateFileW (lpFileName="C:\\Users\\Default\\Pictures\\RyukReadMe.txt" (normalized: "c:\\users\\default\\pictures\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.333] GetLastError () returned 0x5 [0268.334] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0268.334] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.334] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.334] SetLastError (dwErrCode=0x0) [0268.334] CreateFileW (lpFileName="C:\\Users\\Default\\RyukReadMe.txt" (normalized: "c:\\users\\default\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.334] GetLastError () returned 0x5 [0268.334] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0268.334] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.334] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\PrintHood\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0xffffffffffffffff [0268.334] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0268.334] SetLastError (dwErrCode=0x0) [0268.334] CreateFileW (lpFileName="C:\\Users\\Default\\PrintHood\\RyukReadMe.txt" (normalized: "c:\\users\\default\\printhood\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.335] GetLastError () returned 0x5 [0268.335] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0268.335] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.335] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.335] SetLastError (dwErrCode=0x0) [0268.335] CreateFileW (lpFileName="C:\\Users\\Default\\RyukReadMe.txt" (normalized: "c:\\users\\default\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.335] GetLastError () returned 0x5 [0268.335] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0268.335] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.335] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Recent\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0xffffffffffffffff [0268.335] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0268.335] SetLastError (dwErrCode=0x0) [0268.335] CreateFileW (lpFileName="C:\\Users\\Default\\Recent\\RyukReadMe.txt" (normalized: "c:\\users\\default\\recent\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.336] GetLastError () returned 0x5 [0268.336] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0268.336] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.336] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.336] SetLastError (dwErrCode=0x0) [0268.336] CreateFileW (lpFileName="C:\\Users\\Default\\RyukReadMe.txt" (normalized: "c:\\users\\default\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.336] GetLastError () returned 0x5 [0268.336] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0268.336] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.336] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Saved Games\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665d90c0e0 [0268.336] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.336] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0268.336] FindClose (in: hFindFile=0x665d90c0e0 | out: hFindFile=0x665d90c0e0) returned 1 [0268.342] SetLastError (dwErrCode=0x0) [0268.342] CreateFileW (lpFileName="C:\\Users\\Default\\Saved Games\\RyukReadMe.txt" (normalized: "c:\\users\\default\\saved games\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.342] GetLastError () returned 0x5 [0268.342] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0268.342] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.342] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.342] SetLastError (dwErrCode=0x0) [0268.342] CreateFileW (lpFileName="C:\\Users\\Default\\RyukReadMe.txt" (normalized: "c:\\users\\default\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.343] GetLastError () returned 0x5 [0268.343] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0268.343] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.343] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\SendTo\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0xffffffffffffffff [0268.343] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0268.343] SetLastError (dwErrCode=0x0) [0268.343] CreateFileW (lpFileName="C:\\Users\\Default\\SendTo\\RyukReadMe.txt" (normalized: "c:\\users\\default\\sendto\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.365] GetLastError () returned 0x5 [0268.366] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0268.366] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.366] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.366] SetLastError (dwErrCode=0x0) [0268.366] CreateFileW (lpFileName="C:\\Users\\Default\\RyukReadMe.txt" (normalized: "c:\\users\\default\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.366] GetLastError () returned 0x5 [0268.366] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0268.366] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.366] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Start Menu\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0xffffffffffffffff [0268.366] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0268.366] SetLastError (dwErrCode=0x0) [0268.366] CreateFileW (lpFileName="C:\\Users\\Default\\Start Menu\\RyukReadMe.txt" (normalized: "c:\\users\\default\\start menu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.367] GetLastError () returned 0x5 [0268.367] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0268.367] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.367] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.367] SetLastError (dwErrCode=0x0) [0268.367] CreateFileW (lpFileName="C:\\Users\\Default\\RyukReadMe.txt" (normalized: "c:\\users\\default\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.367] GetLastError () returned 0x5 [0268.367] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0268.367] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.367] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Templates\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0xffffffffffffffff [0268.367] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0268.367] SetLastError (dwErrCode=0x0) [0268.367] CreateFileW (lpFileName="C:\\Users\\Default\\Templates\\RyukReadMe.txt" (normalized: "c:\\users\\default\\templates\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.368] GetLastError () returned 0x5 [0268.368] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0268.368] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.368] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.368] SetLastError (dwErrCode=0x0) [0268.368] CreateFileW (lpFileName="C:\\Users\\Default\\RyukReadMe.txt" (normalized: "c:\\users\\default\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.368] GetLastError () returned 0x5 [0268.368] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0268.368] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.369] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Videos\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665d90cd40 [0268.369] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.369] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0268.369] FindClose (in: hFindFile=0x665d90cd40 | out: hFindFile=0x665d90cd40) returned 1 [0268.369] SetLastError (dwErrCode=0x0) [0268.369] CreateFileW (lpFileName="C:\\Users\\Default\\Videos\\RyukReadMe.txt" (normalized: "c:\\users\\default\\videos\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.369] GetLastError () returned 0x5 [0268.369] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0268.369] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.369] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0268.369] FindClose (in: hFindFile=0x665d90c1a0 | out: hFindFile=0x665d90c1a0) returned 1 [0268.369] SetLastError (dwErrCode=0x0) [0268.369] CreateFileW (lpFileName="C:\\Users\\Default\\RyukReadMe.txt" (normalized: "c:\\users\\default\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.369] GetLastError () returned 0x5 [0268.369] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.369] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.369] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0268.369] SetLastError (dwErrCode=0x0) [0268.370] CreateFileW (lpFileName="C:\\Users\\RyukReadMe.txt" (normalized: "c:\\users\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.370] GetLastError () returned 0x5 [0268.370] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.370] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.370] FindFirstFileW (in: lpFileName="C:\\Users\\Default User\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0xffffffffffffffff [0268.370] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0268.370] SetLastError (dwErrCode=0x0) [0268.370] CreateFileW (lpFileName="C:\\Users\\Default User\\RyukReadMe.txt" (normalized: "c:\\users\\default user\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.370] GetLastError () returned 0x5 [0268.370] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.370] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.370] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0268.370] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0268.370] SetLastError (dwErrCode=0x0) [0268.370] CreateFileW (lpFileName="C:\\Users\\RyukReadMe.txt" (normalized: "c:\\users\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.371] GetLastError () returned 0x5 [0268.371] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.371] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.371] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665d90c1a0 [0268.371] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.371] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.371] SetLastError (dwErrCode=0x0) [0268.371] CreateFileW (lpFileName="C:\\Users\\Public\\RyukReadMe.txt" (normalized: "c:\\users\\public\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0268.371] GetLastError () returned 0x0 [0268.371] WriteFile (in: hFile=0x470, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7dba0*=0x324, lpOverlapped=0x0) returned 1 [0268.372] CloseHandle (hObject=0x470) returned 1 [0268.372] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\AccountPictures\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665d90cec0 [0268.372] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.372] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.372] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0268.372] FindClose (in: hFindFile=0x665d90cec0 | out: hFindFile=0x665d90cec0) returned 1 [0268.372] SetLastError (dwErrCode=0x0) [0268.372] CreateFileW (lpFileName="C:\\Users\\Public\\AccountPictures\\RyukReadMe.txt" (normalized: "c:\\users\\public\\accountpictures\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0268.373] GetLastError () returned 0x0 [0268.373] WriteFile (in: hFile=0x470, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7dba0*=0x324, lpOverlapped=0x0) returned 1 [0268.374] CloseHandle (hObject=0x470) returned 1 [0268.374] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.374] SetLastError (dwErrCode=0x0) [0268.374] CreateFileW (lpFileName="C:\\Users\\Public\\RyukReadMe.txt" (normalized: "c:\\users\\public\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0268.375] GetLastError () returned 0xb7 [0268.375] CloseHandle (hObject=0x470) returned 1 [0268.375] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Desktop\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665d90c920 [0268.375] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.375] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.375] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.375] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.375] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.375] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0268.375] FindClose (in: hFindFile=0x665d90c920 | out: hFindFile=0x665d90c920) returned 1 [0268.375] SetLastError (dwErrCode=0x0) [0268.375] CreateFileW (lpFileName="C:\\Users\\Public\\Desktop\\RyukReadMe.txt" (normalized: "c:\\users\\public\\desktop\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.375] GetLastError () returned 0x5 [0268.375] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0268.375] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.375] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.375] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.375] SetLastError (dwErrCode=0x0) [0268.375] CreateFileW (lpFileName="C:\\Users\\Public\\RyukReadMe.txt" (normalized: "c:\\users\\public\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0268.376] GetLastError () returned 0xb7 [0268.376] CloseHandle (hObject=0x470) returned 1 [0268.376] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665d90cc20 [0268.377] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.377] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.377] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.378] SetLastError (dwErrCode=0x0) [0268.378] CreateFileW (lpFileName="C:\\Users\\Public\\Documents\\RyukReadMe.txt" (normalized: "c:\\users\\public\\documents\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0268.378] GetLastError () returned 0xb7 [0268.378] CloseHandle (hObject=0x47c) returned 1 [0268.378] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\My Music\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0xffffffffffffffff [0268.378] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0268.378] SetLastError (dwErrCode=0x0) [0268.378] CreateFileW (lpFileName="C:\\Users\\Public\\Documents\\My Music\\RyukReadMe.txt" (normalized: "c:\\users\\public\\documents\\my music\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0268.379] GetLastError () returned 0x0 [0268.379] WriteFile (in: hFile=0x47c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7d3f0*=0x324, lpOverlapped=0x0) returned 1 [0268.379] CloseHandle (hObject=0x47c) returned 1 [0268.379] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.379] SetLastError (dwErrCode=0x0) [0268.379] CreateFileW (lpFileName="C:\\Users\\Public\\Documents\\RyukReadMe.txt" (normalized: "c:\\users\\public\\documents\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0268.380] GetLastError () returned 0xb7 [0268.380] CloseHandle (hObject=0x47c) returned 1 [0268.380] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\My Pictures\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0xffffffffffffffff [0268.380] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0268.380] SetLastError (dwErrCode=0x0) [0268.380] CreateFileW (lpFileName="C:\\Users\\Public\\Documents\\My Pictures\\RyukReadMe.txt" (normalized: "c:\\users\\public\\documents\\my pictures\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0268.380] GetLastError () returned 0x0 [0268.380] WriteFile (in: hFile=0x47c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7d3f0*=0x324, lpOverlapped=0x0) returned 1 [0268.381] CloseHandle (hObject=0x47c) returned 1 [0268.381] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.381] SetLastError (dwErrCode=0x0) [0268.381] CreateFileW (lpFileName="C:\\Users\\Public\\Documents\\RyukReadMe.txt" (normalized: "c:\\users\\public\\documents\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0268.381] GetLastError () returned 0xb7 [0268.381] CloseHandle (hObject=0x47c) returned 1 [0268.381] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\My Videos\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0xffffffffffffffff [0268.381] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0268.381] SetLastError (dwErrCode=0x0) [0268.381] CreateFileW (lpFileName="C:\\Users\\Public\\Documents\\My Videos\\RyukReadMe.txt" (normalized: "c:\\users\\public\\documents\\my videos\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0268.382] GetLastError () returned 0x0 [0268.382] WriteFile (in: hFile=0x47c, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7d3f0*=0x324, lpOverlapped=0x0) returned 1 [0268.383] CloseHandle (hObject=0x47c) returned 1 [0268.383] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.383] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0268.383] FindClose (in: hFindFile=0x665d90cc20 | out: hFindFile=0x665d90cc20) returned 1 [0268.383] SetLastError (dwErrCode=0x0) [0268.383] CreateFileW (lpFileName="C:\\Users\\Public\\Documents\\RyukReadMe.txt" (normalized: "c:\\users\\public\\documents\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0268.383] GetLastError () returned 0xb7 [0268.383] CloseHandle (hObject=0x470) returned 1 [0268.383] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.383] SetLastError (dwErrCode=0x0) [0268.383] CreateFileW (lpFileName="C:\\Users\\Public\\RyukReadMe.txt" (normalized: "c:\\users\\public\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0268.383] GetLastError () returned 0xb7 [0268.383] CloseHandle (hObject=0x470) returned 1 [0268.383] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Downloads\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665d90cf20 [0268.384] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.384] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.384] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0268.384] FindClose (in: hFindFile=0x665d90cf20 | out: hFindFile=0x665d90cf20) returned 1 [0268.384] SetLastError (dwErrCode=0x0) [0268.384] CreateFileW (lpFileName="C:\\Users\\Public\\Downloads\\RyukReadMe.txt" (normalized: "c:\\users\\public\\downloads\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0268.384] GetLastError () returned 0x0 [0268.384] WriteFile (in: hFile=0x470, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7dba0*=0x324, lpOverlapped=0x0) returned 1 [0268.385] CloseHandle (hObject=0x470) returned 1 [0268.385] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.385] SetLastError (dwErrCode=0x0) [0268.385] CreateFileW (lpFileName="C:\\Users\\Public\\RyukReadMe.txt" (normalized: "c:\\users\\public\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0268.385] GetLastError () returned 0xb7 [0268.385] CloseHandle (hObject=0x470) returned 1 [0268.385] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Libraries\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665d90d340 [0268.385] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.385] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.385] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.385] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.386] SetFileAttributesW (lpFileName="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms", dwFileAttributes=0x80) returned 1 [0268.386] CreateFileW (lpFileName="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms" (normalized: "c:\\users\\public\\libraries\\recordedtv.library-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0268.386] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1e8 | out: lpFileSize=0x665da7d1e8*=999) returned 1 [0268.386] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x665da7d1f8 | out: lpFileSize=0x665da7d1f8*=999) returned 1 [0268.386] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x2c5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0268.386] ReadFile (in: hFile=0x47c, lpBuffer=0x665da7d248, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0x665da7d208, lpOverlapped=0x0 | out: lpBuffer=0x665da7d248*, lpNumberOfBytesRead=0x665da7d208*=0x19, lpOverlapped=0x0) returned 1 [0268.387] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0268.387] CryptGenKey (in: hProv=0x665ab76310, Algid=0x6610, dwFlags=0x1, phKey=0x665da7d1d0 | out: phKey=0x665da7d1d0*=0x665aae6820) returned 1 [0268.387] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x665db00000 [0268.388] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0268.388] ReadFile (in: hFile=0x47c, lpBuffer=0x665db00000, nNumberOfBytesToRead=0x3e7, lpNumberOfBytesRead=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesRead=0x665da7d1e0*=0x3e7, lpOverlapped=0x0) returned 1 [0268.388] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0x665da7d1dc*=0xf4250) returned 1 [0268.388] CryptEncrypt (in: hKey=0x665aae6820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x3e7, dwBufLen=0xf4250 | out: pbData=0x665db00000*, pdwDataLen=0x665da7d1d8*=0x3f0) returned 1 [0268.388] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0268.388] WriteFile (in: hFile=0x47c, lpBuffer=0x665db00000*, nNumberOfBytesToWrite=0x3f0, lpNumberOfBytesWritten=0x665da7d1e0, lpOverlapped=0x0 | out: lpBuffer=0x665db00000*, lpNumberOfBytesWritten=0x665da7d1e0*=0x3f0, lpOverlapped=0x0) returned 1 [0268.388] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d220*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d220*, lpNumberOfBytesWritten=0x665da7d1e4*=0x6, lpOverlapped=0x0) returned 1 [0268.388] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x665da7d1f0 | out: pbData=0x0*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0268.388] CryptExportKey (in: hKey=0x665aae6820, hExpKey=0x665ab9a960, dwBlobType=0x1, dwFlags=0x0, pbData=0x665da7d270, pdwDataLen=0x665da7d1f0 | out: pbData=0x665da7d270*, pdwDataLen=0x665da7d1f0*=0x10c) returned 1 [0268.388] WriteFile (in: hFile=0x47c, lpBuffer=0x665da7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x665da7d1e4, lpOverlapped=0x0 | out: lpBuffer=0x665da7d270*, lpNumberOfBytesWritten=0x665da7d1e4*=0x10c, lpOverlapped=0x0) returned 1 [0268.388] CloseHandle (hObject=0x47c) returned 1 [0268.402] VirtualFree (lpAddress=0x665db00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.406] CryptDestroyKey (hKey=0x665aae6820) returned 1 [0268.406] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.406] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0268.406] FindClose (in: hFindFile=0x665d90d340 | out: hFindFile=0x665d90d340) returned 1 [0268.406] SetLastError (dwErrCode=0x0) [0268.406] CreateFileW (lpFileName="C:\\Users\\Public\\Libraries\\RyukReadMe.txt" (normalized: "c:\\users\\public\\libraries\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0268.454] GetLastError () returned 0x0 [0268.454] WriteFile (in: hFile=0x470, lpBuffer=0x7ff74ec49500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpBuffer=0x7ff74ec49500*, lpNumberOfBytesWritten=0x665da7dba0*=0x324, lpOverlapped=0x0) returned 1 [0268.454] CloseHandle (hObject=0x470) returned 1 [0268.454] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.454] SetLastError (dwErrCode=0x0) [0268.455] CreateFileW (lpFileName="C:\\Users\\Public\\RyukReadMe.txt" (normalized: "c:\\users\\public\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0268.455] GetLastError () returned 0xb7 [0268.455] CloseHandle (hObject=0x470) returned 1 [0268.455] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Music\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665d90d0a0 [0268.455] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.455] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.455] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.455] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0268.455] FindClose (in: hFindFile=0x665d90d0a0 | out: hFindFile=0x665d90d0a0) returned 1 [0268.455] SetLastError (dwErrCode=0x0) [0268.456] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\RyukReadMe.txt" (normalized: "c:\\users\\public\\music\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0268.456] GetLastError () returned 0xb7 [0268.456] CloseHandle (hObject=0x470) returned 1 [0268.456] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.456] SetLastError (dwErrCode=0x0) [0268.456] CreateFileW (lpFileName="C:\\Users\\Public\\RyukReadMe.txt" (normalized: "c:\\users\\public\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0268.456] GetLastError () returned 0xb7 [0268.456] CloseHandle (hObject=0x470) returned 1 [0268.456] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Pictures\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665d90cc20 [0268.456] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.456] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.456] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.456] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0268.456] FindClose (in: hFindFile=0x665d90cc20 | out: hFindFile=0x665d90cc20) returned 1 [0268.456] SetLastError (dwErrCode=0x0) [0268.456] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\RyukReadMe.txt" (normalized: "c:\\users\\public\\pictures\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0268.457] GetLastError () returned 0xb7 [0268.457] CloseHandle (hObject=0x470) returned 1 [0268.457] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.457] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.457] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.457] SetFileAttributesW (lpFileName="C:\\Users\\Public\\sys", dwFileAttributes=0x80) returned 1 [0268.457] CreateFileW (lpFileName="C:\\Users\\Public\\sys" (normalized: "c:\\users\\public\\sys"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.458] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.458] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.458] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.458] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.458] SetLastError (dwErrCode=0x0) [0268.458] CreateFileW (lpFileName="C:\\Users\\Public\\RyukReadMe.txt" (normalized: "c:\\users\\public\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0268.458] GetLastError () returned 0xb7 [0268.458] CloseHandle (hObject=0x470) returned 1 [0268.458] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Videos\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665d90c5c0 [0268.458] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.458] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.458] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.458] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0268.458] FindClose (in: hFindFile=0x665d90c5c0 | out: hFindFile=0x665d90c5c0) returned 1 [0268.458] SetLastError (dwErrCode=0x0) [0268.458] CreateFileW (lpFileName="C:\\Users\\Public\\Videos\\RyukReadMe.txt" (normalized: "c:\\users\\public\\videos\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0268.459] GetLastError () returned 0xb7 [0268.459] CloseHandle (hObject=0x470) returned 1 [0268.459] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0268.459] FindClose (in: hFindFile=0x665d90c1a0 | out: hFindFile=0x665d90c1a0) returned 1 [0268.459] SetLastError (dwErrCode=0x0) [0268.459] CreateFileW (lpFileName="C:\\Users\\Public\\RyukReadMe.txt" (normalized: "c:\\users\\public\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x430 [0268.459] GetLastError () returned 0xb7 [0268.459] CloseHandle (hObject=0x430) returned 1 [0268.459] FindNextFileW (in: hFindFile=0x665abb43e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 0 [0268.459] FindClose (in: hFindFile=0x665abb43e0 | out: hFindFile=0x665abb43e0) returned 1 [0268.459] SetLastError (dwErrCode=0x0) [0268.459] CreateFileW (lpFileName="C:\\Users\\RyukReadMe.txt" (normalized: "c:\\users\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.459] GetLastError () returned 0x5 [0268.459] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7eb00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7eb00, lpOverlapped=0x0) returned 0 [0268.459] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.460] FindNextFileW (in: hFindFile=0x665abb47a0, lpFindFileData=0x665da7eb50 | out: lpFindFileData=0x665da7eb50) returned 1 [0268.460] FindNextFileW (in: hFindFile=0x665abb47a0, lpFindFileData=0x665da7eb50 | out: lpFindFileData=0x665da7eb50) returned 0 [0268.460] FindClose (in: hFindFile=0x665abb47a0 | out: hFindFile=0x665abb47a0) returned 1 [0268.460] GetDriveTypeW (lpRootPathName="C:") returned 0x3 [0268.460] GetDriveTypeW (lpRootPathName="C:") returned 0x3 [0268.460] GetDriveTypeW (lpRootPathName="C:") returned 0x3 [0268.460] GetDriveTypeW (lpRootPathName="C:") returned 0x3 [0268.460] GetDriveTypeW (lpRootPathName="C:") returned 0x3 [0268.460] GetDriveTypeW (lpRootPathName="C:") returned 0x3 [0268.460] FindFirstFileW (in: lpFileName="C:\\*.*", lpFindFileData=0x665da7eb50 | out: lpFindFileData=0x665da7eb50) returned 0x665d90d040 [0268.460] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7eb50 | out: lpFindFileData=0x665da7eb50) returned 1 [0268.460] SetLastError (dwErrCode=0x0) [0268.460] CreateFileW (lpFileName="C:\\RyukReadMe.txt" (normalized: "c:\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.460] GetLastError () returned 0x5 [0268.460] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7eb00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7eb00, lpOverlapped=0x0) returned 0 [0268.460] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.460] FindFirstFileW (in: lpFileName="C:\\Boot\\*.*", lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 0x665d90c0e0 [0268.461] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0268.461] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0268.461] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.461] SetFileAttributesW (lpFileName="C:\\Boot\\BCD", dwFileAttributes=0x80) returned 0 [0268.461] CreateFileW (lpFileName="C:\\Boot\\BCD" (normalized: "c:\\boot\\bcd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.461] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.461] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.462] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0268.462] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.462] SetFileAttributesW (lpFileName="C:\\Boot\\BCD.LOG", dwFileAttributes=0x80) returned 0 [0268.462] CreateFileW (lpFileName="C:\\Boot\\BCD.LOG" (normalized: "c:\\boot\\bcd.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.462] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.462] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.463] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0268.463] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.463] SetFileAttributesW (lpFileName="C:\\Boot\\BCD.LOG1", dwFileAttributes=0x80) returned 0 [0268.463] CreateFileW (lpFileName="C:\\Boot\\BCD.LOG1" (normalized: "c:\\boot\\bcd.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.463] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.463] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.463] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0268.463] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.464] SetFileAttributesW (lpFileName="C:\\Boot\\BCD.LOG2", dwFileAttributes=0x80) returned 0 [0268.464] CreateFileW (lpFileName="C:\\Boot\\BCD.LOG2" (normalized: "c:\\boot\\bcd.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.464] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.464] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.464] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0268.464] SetLastError (dwErrCode=0x0) [0268.464] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.465] GetLastError () returned 0x5 [0268.465] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.465] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.465] FindFirstFileW (in: lpFileName="C:\\Boot\\bg-BG\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665d90d0a0 [0268.465] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.465] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.465] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0268.465] FindClose (in: hFindFile=0x665d90d0a0 | out: hFindFile=0x665d90d0a0) returned 1 [0268.465] SetLastError (dwErrCode=0x0) [0268.465] CreateFileW (lpFileName="C:\\Boot\\bg-BG\\RyukReadMe.txt" (normalized: "c:\\boot\\bg-bg\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.465] GetLastError () returned 0x5 [0268.465] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.465] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.465] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0268.465] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.465] SetFileAttributesW (lpFileName="C:\\Boot\\BOOTSTAT.DAT", dwFileAttributes=0x80) returned 0 [0268.466] CreateFileW (lpFileName="C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.466] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.466] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.466] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0268.466] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0268.466] SetLastError (dwErrCode=0x0) [0268.466] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.466] GetLastError () returned 0x5 [0268.466] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.466] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.466] FindFirstFileW (in: lpFileName="C:\\Boot\\cs-CZ\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665d90d0a0 [0268.466] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.467] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.467] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.467] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0268.467] FindClose (in: hFindFile=0x665d90d0a0 | out: hFindFile=0x665d90d0a0) returned 1 [0268.467] SetLastError (dwErrCode=0x0) [0268.467] CreateFileW (lpFileName="C:\\Boot\\cs-CZ\\RyukReadMe.txt" (normalized: "c:\\boot\\cs-cz\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.467] GetLastError () returned 0x5 [0268.467] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.467] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.467] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0268.467] SetLastError (dwErrCode=0x0) [0268.467] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.467] GetLastError () returned 0x5 [0268.467] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.467] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.467] FindFirstFileW (in: lpFileName="C:\\Boot\\da-DK\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665d90c5c0 [0268.467] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.467] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.467] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.467] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0268.467] FindClose (in: hFindFile=0x665d90c5c0 | out: hFindFile=0x665d90c5c0) returned 1 [0268.468] SetLastError (dwErrCode=0x0) [0268.468] CreateFileW (lpFileName="C:\\Boot\\da-DK\\RyukReadMe.txt" (normalized: "c:\\boot\\da-dk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.468] GetLastError () returned 0x5 [0268.468] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.468] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.468] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0268.468] SetLastError (dwErrCode=0x0) [0268.468] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.468] GetLastError () returned 0x5 [0268.468] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.468] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.468] FindFirstFileW (in: lpFileName="C:\\Boot\\de-DE\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665d90c380 [0268.468] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.468] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.468] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.468] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0268.468] FindClose (in: hFindFile=0x665d90c380 | out: hFindFile=0x665d90c380) returned 1 [0268.468] SetLastError (dwErrCode=0x0) [0268.468] CreateFileW (lpFileName="C:\\Boot\\de-DE\\RyukReadMe.txt" (normalized: "c:\\boot\\de-de\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.469] GetLastError () returned 0x5 [0268.469] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.469] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.469] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0268.469] SetLastError (dwErrCode=0x0) [0268.469] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.469] GetLastError () returned 0x5 [0268.469] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.469] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.469] FindFirstFileW (in: lpFileName="C:\\Boot\\el-GR\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665d90ce60 [0268.469] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.469] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.469] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.469] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0268.469] FindClose (in: hFindFile=0x665d90ce60 | out: hFindFile=0x665d90ce60) returned 1 [0268.469] SetLastError (dwErrCode=0x0) [0268.469] CreateFileW (lpFileName="C:\\Boot\\el-GR\\RyukReadMe.txt" (normalized: "c:\\boot\\el-gr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.469] GetLastError () returned 0x5 [0268.469] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.470] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.470] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0268.470] SetLastError (dwErrCode=0x0) [0268.470] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.470] GetLastError () returned 0x5 [0268.470] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.470] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.470] FindFirstFileW (in: lpFileName="C:\\Boot\\en-GB\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665d90c2c0 [0268.470] FindNextFileW (in: hFindFile=0x665d90c2c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.470] FindNextFileW (in: hFindFile=0x665d90c2c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.470] FindNextFileW (in: hFindFile=0x665d90c2c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0268.470] FindClose (in: hFindFile=0x665d90c2c0 | out: hFindFile=0x665d90c2c0) returned 1 [0268.470] SetLastError (dwErrCode=0x0) [0268.470] CreateFileW (lpFileName="C:\\Boot\\en-GB\\RyukReadMe.txt" (normalized: "c:\\boot\\en-gb\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.471] GetLastError () returned 0x5 [0268.471] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.471] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.471] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0268.471] SetLastError (dwErrCode=0x0) [0268.471] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.471] GetLastError () returned 0x5 [0268.471] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.471] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.471] FindFirstFileW (in: lpFileName="C:\\Boot\\en-US\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665d90c260 [0268.471] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.471] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.471] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.471] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0268.471] FindClose (in: hFindFile=0x665d90c260 | out: hFindFile=0x665d90c260) returned 1 [0268.471] SetLastError (dwErrCode=0x0) [0268.471] CreateFileW (lpFileName="C:\\Boot\\en-US\\RyukReadMe.txt" (normalized: "c:\\boot\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.471] GetLastError () returned 0x5 [0268.471] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.472] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.472] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0268.472] SetLastError (dwErrCode=0x0) [0268.472] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.472] GetLastError () returned 0x5 [0268.472] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.472] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.472] FindFirstFileW (in: lpFileName="C:\\Boot\\es-ES\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665d90c260 [0268.472] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.472] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.472] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.472] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0268.472] FindClose (in: hFindFile=0x665d90c260 | out: hFindFile=0x665d90c260) returned 1 [0268.472] SetLastError (dwErrCode=0x0) [0268.472] CreateFileW (lpFileName="C:\\Boot\\es-ES\\RyukReadMe.txt" (normalized: "c:\\boot\\es-es\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.472] GetLastError () returned 0x5 [0268.472] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.472] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.472] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0268.472] SetLastError (dwErrCode=0x0) [0268.473] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.473] GetLastError () returned 0x5 [0268.473] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.473] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.473] FindFirstFileW (in: lpFileName="C:\\Boot\\es-MX\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665d90c260 [0268.473] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.473] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.473] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0268.473] FindClose (in: hFindFile=0x665d90c260 | out: hFindFile=0x665d90c260) returned 1 [0268.473] SetLastError (dwErrCode=0x0) [0268.473] CreateFileW (lpFileName="C:\\Boot\\es-MX\\RyukReadMe.txt" (normalized: "c:\\boot\\es-mx\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.473] GetLastError () returned 0x5 [0268.473] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.473] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.473] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0268.473] SetLastError (dwErrCode=0x0) [0268.473] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.474] GetLastError () returned 0x5 [0268.474] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.474] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.474] FindFirstFileW (in: lpFileName="C:\\Boot\\et-EE\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665d90c1a0 [0268.474] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.474] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.474] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0268.474] FindClose (in: hFindFile=0x665d90c1a0 | out: hFindFile=0x665d90c1a0) returned 1 [0268.474] SetLastError (dwErrCode=0x0) [0268.474] CreateFileW (lpFileName="C:\\Boot\\et-EE\\RyukReadMe.txt" (normalized: "c:\\boot\\et-ee\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.474] GetLastError () returned 0x5 [0268.474] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.474] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.474] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0268.474] SetLastError (dwErrCode=0x0) [0268.474] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.474] GetLastError () returned 0x5 [0268.474] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.474] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.474] FindFirstFileW (in: lpFileName="C:\\Boot\\fi-FI\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665d90c8c0 [0268.475] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.475] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.475] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.475] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0268.475] FindClose (in: hFindFile=0x665d90c8c0 | out: hFindFile=0x665d90c8c0) returned 1 [0268.475] SetLastError (dwErrCode=0x0) [0268.475] CreateFileW (lpFileName="C:\\Boot\\fi-FI\\RyukReadMe.txt" (normalized: "c:\\boot\\fi-fi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.475] GetLastError () returned 0x5 [0268.475] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.475] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.475] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0268.475] SetLastError (dwErrCode=0x0) [0268.475] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.475] GetLastError () returned 0x5 [0268.475] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.475] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.475] FindFirstFileW (in: lpFileName="C:\\Boot\\Fonts\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665d90c8c0 [0268.476] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.476] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.476] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.476] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\chs_boot.ttf", dwFileAttributes=0x80) returned 0 [0268.477] CreateFileW (lpFileName="C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.477] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.477] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.477] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.477] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.477] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\cht_boot.ttf", dwFileAttributes=0x80) returned 0 [0268.477] CreateFileW (lpFileName="C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.478] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.478] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.478] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.478] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.478] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\jpn_boot.ttf", dwFileAttributes=0x80) returned 0 [0268.478] CreateFileW (lpFileName="C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.478] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.479] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.479] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.479] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.479] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\kor_boot.ttf", dwFileAttributes=0x80) returned 0 [0268.479] CreateFileW (lpFileName="C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.479] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.479] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.480] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.480] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.480] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\malgunn_boot.ttf", dwFileAttributes=0x80) returned 0 [0268.480] CreateFileW (lpFileName="C:\\Boot\\Fonts\\malgunn_boot.ttf" (normalized: "c:\\boot\\fonts\\malgunn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.481] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.481] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.481] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.481] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.481] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\malgun_boot.ttf", dwFileAttributes=0x80) returned 0 [0268.481] CreateFileW (lpFileName="C:\\Boot\\Fonts\\malgun_boot.ttf" (normalized: "c:\\boot\\fonts\\malgun_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.482] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.482] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.482] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.482] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.482] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\meiryon_boot.ttf", dwFileAttributes=0x80) returned 0 [0268.482] CreateFileW (lpFileName="C:\\Boot\\Fonts\\meiryon_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryon_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.482] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.482] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.483] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.483] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.483] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\meiryo_boot.ttf", dwFileAttributes=0x80) returned 0 [0268.483] CreateFileW (lpFileName="C:\\Boot\\Fonts\\meiryo_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryo_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.483] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.483] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.483] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.483] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.484] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\msjhn_boot.ttf", dwFileAttributes=0x80) returned 0 [0268.484] CreateFileW (lpFileName="C:\\Boot\\Fonts\\msjhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msjhn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.484] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.484] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.484] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.484] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.485] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\msjh_boot.ttf", dwFileAttributes=0x80) returned 0 [0268.485] CreateFileW (lpFileName="C:\\Boot\\Fonts\\msjh_boot.ttf" (normalized: "c:\\boot\\fonts\\msjh_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.485] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.485] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.485] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.485] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.485] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\msyhn_boot.ttf", dwFileAttributes=0x80) returned 0 [0268.486] CreateFileW (lpFileName="C:\\Boot\\Fonts\\msyhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msyhn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.486] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.486] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.486] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.486] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.487] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\msyh_boot.ttf", dwFileAttributes=0x80) returned 0 [0268.487] CreateFileW (lpFileName="C:\\Boot\\Fonts\\msyh_boot.ttf" (normalized: "c:\\boot\\fonts\\msyh_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.487] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.487] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.487] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.487] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.488] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\segmono_boot.ttf", dwFileAttributes=0x80) returned 0 [0268.488] CreateFileW (lpFileName="C:\\Boot\\Fonts\\segmono_boot.ttf" (normalized: "c:\\boot\\fonts\\segmono_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.488] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.488] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.489] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.489] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.489] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\segoen_slboot.ttf", dwFileAttributes=0x80) returned 0 [0268.489] CreateFileW (lpFileName="C:\\Boot\\Fonts\\segoen_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoen_slboot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.489] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.489] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.490] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.490] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.490] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\segoe_slboot.ttf", dwFileAttributes=0x80) returned 0 [0268.490] CreateFileW (lpFileName="C:\\Boot\\Fonts\\segoe_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoe_slboot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.490] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.490] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.490] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.490] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.491] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\wgl4_boot.ttf", dwFileAttributes=0x80) returned 0 [0268.491] CreateFileW (lpFileName="C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.491] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.491] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.491] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0268.491] FindClose (in: hFindFile=0x665d90c8c0 | out: hFindFile=0x665d90c8c0) returned 1 [0268.492] SetLastError (dwErrCode=0x0) [0268.492] CreateFileW (lpFileName="C:\\Boot\\Fonts\\RyukReadMe.txt" (normalized: "c:\\boot\\fonts\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.494] GetLastError () returned 0x5 [0268.494] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.494] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.494] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0268.495] SetLastError (dwErrCode=0x0) [0268.495] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.495] GetLastError () returned 0x5 [0268.495] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.495] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.495] FindFirstFileW (in: lpFileName="C:\\Boot\\fr-CA\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665d90c5c0 [0268.495] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.495] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.495] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0268.495] FindClose (in: hFindFile=0x665d90c5c0 | out: hFindFile=0x665d90c5c0) returned 1 [0268.495] SetLastError (dwErrCode=0x0) [0268.495] CreateFileW (lpFileName="C:\\Boot\\fr-CA\\RyukReadMe.txt" (normalized: "c:\\boot\\fr-ca\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.495] GetLastError () returned 0x5 [0268.495] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.495] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.495] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0268.495] SetLastError (dwErrCode=0x0) [0268.495] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.496] GetLastError () returned 0x5 [0268.496] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.496] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.496] FindFirstFileW (in: lpFileName="C:\\Boot\\fr-FR\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665d90d340 [0268.496] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.496] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.496] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.496] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0268.496] FindClose (in: hFindFile=0x665d90d340 | out: hFindFile=0x665d90d340) returned 1 [0268.496] SetLastError (dwErrCode=0x0) [0268.496] CreateFileW (lpFileName="C:\\Boot\\fr-FR\\RyukReadMe.txt" (normalized: "c:\\boot\\fr-fr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.496] GetLastError () returned 0x5 [0268.496] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.496] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.496] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0268.496] SetLastError (dwErrCode=0x0) [0268.496] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.496] GetLastError () returned 0x5 [0268.496] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.497] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.497] FindFirstFileW (in: lpFileName="C:\\Boot\\hr-HR\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665d90ca40 [0268.497] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.497] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.497] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0268.497] FindClose (in: hFindFile=0x665d90ca40 | out: hFindFile=0x665d90ca40) returned 1 [0268.497] SetLastError (dwErrCode=0x0) [0268.497] CreateFileW (lpFileName="C:\\Boot\\hr-HR\\RyukReadMe.txt" (normalized: "c:\\boot\\hr-hr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.497] GetLastError () returned 0x5 [0268.497] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.497] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.497] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0268.497] SetLastError (dwErrCode=0x0) [0268.497] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.497] GetLastError () returned 0x5 [0268.497] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.497] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.497] FindFirstFileW (in: lpFileName="C:\\Boot\\hu-HU\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665d90d340 [0268.498] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.498] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.498] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.498] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0268.498] FindClose (in: hFindFile=0x665d90d340 | out: hFindFile=0x665d90d340) returned 1 [0268.498] SetLastError (dwErrCode=0x0) [0268.498] CreateFileW (lpFileName="C:\\Boot\\hu-HU\\RyukReadMe.txt" (normalized: "c:\\boot\\hu-hu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.498] GetLastError () returned 0x5 [0268.498] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.498] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.498] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0268.498] SetLastError (dwErrCode=0x0) [0268.498] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.498] GetLastError () returned 0x5 [0268.498] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.498] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.498] FindFirstFileW (in: lpFileName="C:\\Boot\\it-IT\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665d90c440 [0268.498] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.498] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.498] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.498] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0268.498] FindClose (in: hFindFile=0x665d90c440 | out: hFindFile=0x665d90c440) returned 1 [0268.499] SetLastError (dwErrCode=0x0) [0268.499] CreateFileW (lpFileName="C:\\Boot\\it-IT\\RyukReadMe.txt" (normalized: "c:\\boot\\it-it\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.499] GetLastError () returned 0x5 [0268.499] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.499] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.499] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0268.499] SetLastError (dwErrCode=0x0) [0268.499] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.499] GetLastError () returned 0x5 [0268.499] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.499] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.499] FindFirstFileW (in: lpFileName="C:\\Boot\\ja-JP\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665d90bde0 [0268.499] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.499] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.499] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.499] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0268.499] FindClose (in: hFindFile=0x665d90bde0 | out: hFindFile=0x665d90bde0) returned 1 [0268.499] SetLastError (dwErrCode=0x0) [0268.499] CreateFileW (lpFileName="C:\\Boot\\ja-JP\\RyukReadMe.txt" (normalized: "c:\\boot\\ja-jp\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.500] GetLastError () returned 0x5 [0268.500] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.500] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.500] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0268.500] SetLastError (dwErrCode=0x0) [0268.500] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.500] GetLastError () returned 0x5 [0268.500] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.500] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.500] FindFirstFileW (in: lpFileName="C:\\Boot\\ko-KR\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665d90ce60 [0268.500] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.500] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.500] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.500] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0268.500] FindClose (in: hFindFile=0x665d90ce60 | out: hFindFile=0x665d90ce60) returned 1 [0268.500] SetLastError (dwErrCode=0x0) [0268.500] CreateFileW (lpFileName="C:\\Boot\\ko-KR\\RyukReadMe.txt" (normalized: "c:\\boot\\ko-kr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.500] GetLastError () returned 0x5 [0268.500] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.501] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.501] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0268.501] SetLastError (dwErrCode=0x0) [0268.501] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.501] GetLastError () returned 0x5 [0268.501] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.501] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.501] FindFirstFileW (in: lpFileName="C:\\Boot\\lt-LT\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665d90ca40 [0268.501] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.501] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.501] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0268.501] FindClose (in: hFindFile=0x665d90ca40 | out: hFindFile=0x665d90ca40) returned 1 [0268.501] SetLastError (dwErrCode=0x0) [0268.501] CreateFileW (lpFileName="C:\\Boot\\lt-LT\\RyukReadMe.txt" (normalized: "c:\\boot\\lt-lt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.501] GetLastError () returned 0x5 [0268.501] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.501] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.501] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0268.506] SetLastError (dwErrCode=0x0) [0268.506] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.507] GetLastError () returned 0x5 [0268.507] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.507] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.507] FindFirstFileW (in: lpFileName="C:\\Boot\\lv-LV\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665d90c980 [0268.507] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.507] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.507] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0268.507] FindClose (in: hFindFile=0x665d90c980 | out: hFindFile=0x665d90c980) returned 1 [0268.507] SetLastError (dwErrCode=0x0) [0268.507] CreateFileW (lpFileName="C:\\Boot\\lv-LV\\RyukReadMe.txt" (normalized: "c:\\boot\\lv-lv\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.507] GetLastError () returned 0x5 [0268.507] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.507] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.507] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0268.507] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0268.507] SetLastError (dwErrCode=0x0) [0268.507] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.508] GetLastError () returned 0x5 [0268.508] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.508] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.508] FindFirstFileW (in: lpFileName="C:\\Boot\\nb-NO\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665d90c5c0 [0268.508] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.508] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.508] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.508] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0268.508] FindClose (in: hFindFile=0x665d90c5c0 | out: hFindFile=0x665d90c5c0) returned 1 [0268.508] SetLastError (dwErrCode=0x0) [0268.508] CreateFileW (lpFileName="C:\\Boot\\nb-NO\\RyukReadMe.txt" (normalized: "c:\\boot\\nb-no\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.508] GetLastError () returned 0x5 [0268.508] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.508] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.509] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0268.509] SetLastError (dwErrCode=0x0) [0268.509] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.509] GetLastError () returned 0x5 [0268.509] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.509] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.509] FindFirstFileW (in: lpFileName="C:\\Boot\\nl-NL\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665d90c5c0 [0268.509] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.509] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.509] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.509] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0268.509] FindClose (in: hFindFile=0x665d90c5c0 | out: hFindFile=0x665d90c5c0) returned 1 [0268.509] SetLastError (dwErrCode=0x0) [0268.509] CreateFileW (lpFileName="C:\\Boot\\nl-NL\\RyukReadMe.txt" (normalized: "c:\\boot\\nl-nl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.509] GetLastError () returned 0x5 [0268.509] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.510] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.510] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0268.510] SetLastError (dwErrCode=0x0) [0268.510] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.510] GetLastError () returned 0x5 [0268.510] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.510] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.510] FindFirstFileW (in: lpFileName="C:\\Boot\\pl-PL\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665d90c1a0 [0268.510] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.510] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.510] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.510] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0268.510] FindClose (in: hFindFile=0x665d90c1a0 | out: hFindFile=0x665d90c1a0) returned 1 [0268.510] SetLastError (dwErrCode=0x0) [0268.510] CreateFileW (lpFileName="C:\\Boot\\pl-PL\\RyukReadMe.txt" (normalized: "c:\\boot\\pl-pl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.510] GetLastError () returned 0x5 [0268.510] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.510] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.511] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0268.511] SetLastError (dwErrCode=0x0) [0268.511] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.511] GetLastError () returned 0x5 [0268.511] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.511] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.511] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-BR\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665d90bc60 [0268.511] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.511] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.511] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.511] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0268.511] FindClose (in: hFindFile=0x665d90bc60 | out: hFindFile=0x665d90bc60) returned 1 [0268.511] SetLastError (dwErrCode=0x0) [0268.511] CreateFileW (lpFileName="C:\\Boot\\pt-BR\\RyukReadMe.txt" (normalized: "c:\\boot\\pt-br\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.511] GetLastError () returned 0x5 [0268.511] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.511] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.511] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0268.511] SetLastError (dwErrCode=0x0) [0268.511] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.512] GetLastError () returned 0x5 [0268.512] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.512] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.512] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-PT\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665d90d340 [0268.512] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.512] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.512] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.512] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0268.512] FindClose (in: hFindFile=0x665d90d340 | out: hFindFile=0x665d90d340) returned 1 [0268.512] SetLastError (dwErrCode=0x0) [0268.512] CreateFileW (lpFileName="C:\\Boot\\pt-PT\\RyukReadMe.txt" (normalized: "c:\\boot\\pt-pt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.512] GetLastError () returned 0x5 [0268.512] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.512] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.512] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0268.512] SetLastError (dwErrCode=0x0) [0268.512] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.512] GetLastError () returned 0x5 [0268.512] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.513] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.513] FindFirstFileW (in: lpFileName="C:\\Boot\\qps-ploc\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665d90c380 [0268.513] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.513] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.513] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.513] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0268.513] FindClose (in: hFindFile=0x665d90c380 | out: hFindFile=0x665d90c380) returned 1 [0268.513] SetLastError (dwErrCode=0x0) [0268.513] CreateFileW (lpFileName="C:\\Boot\\qps-ploc\\RyukReadMe.txt" (normalized: "c:\\boot\\qps-ploc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.513] GetLastError () returned 0x5 [0268.513] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.513] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.513] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0268.513] SetLastError (dwErrCode=0x0) [0268.513] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.513] GetLastError () returned 0x5 [0268.513] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.513] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.513] FindFirstFileW (in: lpFileName="C:\\Boot\\Resources\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665d90c440 [0268.514] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.514] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.514] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.514] SetLastError (dwErrCode=0x0) [0268.514] CreateFileW (lpFileName="C:\\Boot\\Resources\\RyukReadMe.txt" (normalized: "c:\\boot\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.514] GetLastError () returned 0x5 [0268.514] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0268.514] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.514] FindFirstFileW (in: lpFileName="C:\\Boot\\Resources\\en-US\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665d90c620 [0268.514] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.514] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.514] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0268.514] FindClose (in: hFindFile=0x665d90c620 | out: hFindFile=0x665d90c620) returned 1 [0268.514] SetLastError (dwErrCode=0x0) [0268.514] CreateFileW (lpFileName="C:\\Boot\\Resources\\en-US\\RyukReadMe.txt" (normalized: "c:\\boot\\resources\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.514] GetLastError () returned 0x5 [0268.514] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0268.514] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.515] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0268.515] FindClose (in: hFindFile=0x665d90c440 | out: hFindFile=0x665d90c440) returned 1 [0268.515] SetLastError (dwErrCode=0x0) [0268.515] CreateFileW (lpFileName="C:\\Boot\\Resources\\RyukReadMe.txt" (normalized: "c:\\boot\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.515] GetLastError () returned 0x5 [0268.515] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.515] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.515] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0268.515] SetLastError (dwErrCode=0x0) [0268.515] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.515] GetLastError () returned 0x5 [0268.515] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.515] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.515] FindFirstFileW (in: lpFileName="C:\\Boot\\ro-RO\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665d90c440 [0268.515] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.515] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.515] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0268.515] FindClose (in: hFindFile=0x665d90c440 | out: hFindFile=0x665d90c440) returned 1 [0268.516] SetLastError (dwErrCode=0x0) [0268.516] CreateFileW (lpFileName="C:\\Boot\\ro-RO\\RyukReadMe.txt" (normalized: "c:\\boot\\ro-ro\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.516] GetLastError () returned 0x5 [0268.516] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.516] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.516] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0268.516] SetLastError (dwErrCode=0x0) [0268.516] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.516] GetLastError () returned 0x5 [0268.516] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.516] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.516] FindFirstFileW (in: lpFileName="C:\\Boot\\ru-RU\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665d90cc20 [0268.516] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.516] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.516] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.516] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0268.516] FindClose (in: hFindFile=0x665d90cc20 | out: hFindFile=0x665d90cc20) returned 1 [0268.516] SetLastError (dwErrCode=0x0) [0268.516] CreateFileW (lpFileName="C:\\Boot\\ru-RU\\RyukReadMe.txt" (normalized: "c:\\boot\\ru-ru\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.517] GetLastError () returned 0x5 [0268.517] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.517] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.517] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0268.517] SetLastError (dwErrCode=0x0) [0268.517] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.517] GetLastError () returned 0x5 [0268.517] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.517] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.517] FindFirstFileW (in: lpFileName="C:\\Boot\\sk-SK\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665d90c980 [0268.517] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.518] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.518] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0268.518] FindClose (in: hFindFile=0x665d90c980 | out: hFindFile=0x665d90c980) returned 1 [0268.518] SetLastError (dwErrCode=0x0) [0268.518] CreateFileW (lpFileName="C:\\Boot\\sk-SK\\RyukReadMe.txt" (normalized: "c:\\boot\\sk-sk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.518] GetLastError () returned 0x5 [0268.518] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.518] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.518] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0268.518] SetLastError (dwErrCode=0x0) [0268.518] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.518] GetLastError () returned 0x5 [0268.518] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.518] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.518] FindFirstFileW (in: lpFileName="C:\\Boot\\sl-SI\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665d90c5c0 [0268.518] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.518] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.518] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0268.518] FindClose (in: hFindFile=0x665d90c5c0 | out: hFindFile=0x665d90c5c0) returned 1 [0268.519] SetLastError (dwErrCode=0x0) [0268.519] CreateFileW (lpFileName="C:\\Boot\\sl-SI\\RyukReadMe.txt" (normalized: "c:\\boot\\sl-si\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.519] GetLastError () returned 0x5 [0268.519] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.519] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.519] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0268.519] SetLastError (dwErrCode=0x0) [0268.519] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.519] GetLastError () returned 0x5 [0268.519] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.519] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.519] FindFirstFileW (in: lpFileName="C:\\Boot\\sr-Latn-CS\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665d90caa0 [0268.519] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.519] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.519] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.519] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0268.519] FindClose (in: hFindFile=0x665d90caa0 | out: hFindFile=0x665d90caa0) returned 1 [0268.519] SetLastError (dwErrCode=0x0) [0268.519] CreateFileW (lpFileName="C:\\Boot\\sr-Latn-CS\\RyukReadMe.txt" (normalized: "c:\\boot\\sr-latn-cs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.520] GetLastError () returned 0x5 [0268.520] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.520] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.520] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0268.520] SetLastError (dwErrCode=0x0) [0268.520] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.520] GetLastError () returned 0x5 [0268.520] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.520] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.520] FindFirstFileW (in: lpFileName="C:\\Boot\\sr-Latn-RS\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665d90cf20 [0268.520] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.520] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.520] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0268.520] FindClose (in: hFindFile=0x665d90cf20 | out: hFindFile=0x665d90cf20) returned 1 [0268.520] SetLastError (dwErrCode=0x0) [0268.520] CreateFileW (lpFileName="C:\\Boot\\sr-Latn-RS\\RyukReadMe.txt" (normalized: "c:\\boot\\sr-latn-rs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.521] GetLastError () returned 0x5 [0268.521] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.521] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.521] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0268.521] SetLastError (dwErrCode=0x0) [0268.521] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.521] GetLastError () returned 0x5 [0268.521] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.521] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.521] FindFirstFileW (in: lpFileName="C:\\Boot\\sv-SE\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665d90c8c0 [0268.521] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.521] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.521] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.521] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0268.521] FindClose (in: hFindFile=0x665d90c8c0 | out: hFindFile=0x665d90c8c0) returned 1 [0268.521] SetLastError (dwErrCode=0x0) [0268.521] CreateFileW (lpFileName="C:\\Boot\\sv-SE\\RyukReadMe.txt" (normalized: "c:\\boot\\sv-se\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.522] GetLastError () returned 0x5 [0268.522] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.522] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.522] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0268.522] SetLastError (dwErrCode=0x0) [0268.522] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.522] GetLastError () returned 0x5 [0268.522] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.522] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.522] FindFirstFileW (in: lpFileName="C:\\Boot\\tr-TR\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665d90cce0 [0268.522] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.522] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.522] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.522] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0268.522] FindClose (in: hFindFile=0x665d90cce0 | out: hFindFile=0x665d90cce0) returned 1 [0268.522] SetLastError (dwErrCode=0x0) [0268.522] CreateFileW (lpFileName="C:\\Boot\\tr-TR\\RyukReadMe.txt" (normalized: "c:\\boot\\tr-tr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.522] GetLastError () returned 0x5 [0268.522] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.523] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.523] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0268.523] SetLastError (dwErrCode=0x0) [0268.523] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.523] GetLastError () returned 0x5 [0268.523] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.523] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.523] FindFirstFileW (in: lpFileName="C:\\Boot\\uk-UA\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665d90be40 [0268.523] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.523] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.523] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0268.523] FindClose (in: hFindFile=0x665d90be40 | out: hFindFile=0x665d90be40) returned 1 [0268.523] SetLastError (dwErrCode=0x0) [0268.523] CreateFileW (lpFileName="C:\\Boot\\uk-UA\\RyukReadMe.txt" (normalized: "c:\\boot\\uk-ua\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.523] GetLastError () returned 0x5 [0268.523] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.523] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.523] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0268.524] SetLastError (dwErrCode=0x0) [0268.524] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.524] GetLastError () returned 0x5 [0268.524] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.524] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.524] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-CN\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665d90c380 [0268.524] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.524] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.524] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.524] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0268.524] FindClose (in: hFindFile=0x665d90c380 | out: hFindFile=0x665d90c380) returned 1 [0268.524] SetLastError (dwErrCode=0x0) [0268.524] CreateFileW (lpFileName="C:\\Boot\\zh-CN\\RyukReadMe.txt" (normalized: "c:\\boot\\zh-cn\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.524] GetLastError () returned 0x5 [0268.524] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.524] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.524] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0268.524] SetLastError (dwErrCode=0x0) [0268.525] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.525] GetLastError () returned 0x5 [0268.525] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.525] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.525] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-HK\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665d90c980 [0268.525] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.525] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.525] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.525] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0268.525] FindClose (in: hFindFile=0x665d90c980 | out: hFindFile=0x665d90c980) returned 1 [0268.525] SetLastError (dwErrCode=0x0) [0268.525] CreateFileW (lpFileName="C:\\Boot\\zh-HK\\RyukReadMe.txt" (normalized: "c:\\boot\\zh-hk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.525] GetLastError () returned 0x5 [0268.525] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.525] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.525] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0268.525] SetLastError (dwErrCode=0x0) [0268.525] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.526] GetLastError () returned 0x5 [0268.526] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.526] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.526] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-TW\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665d90d340 [0268.526] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.526] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.526] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.526] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0268.526] FindClose (in: hFindFile=0x665d90d340 | out: hFindFile=0x665d90d340) returned 1 [0268.526] SetLastError (dwErrCode=0x0) [0268.526] CreateFileW (lpFileName="C:\\Boot\\zh-TW\\RyukReadMe.txt" (normalized: "c:\\boot\\zh-tw\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.526] GetLastError () returned 0x5 [0268.526] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.526] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.526] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 0 [0268.526] FindClose (in: hFindFile=0x665d90c0e0 | out: hFindFile=0x665d90c0e0) returned 1 [0268.526] SetLastError (dwErrCode=0x0) [0268.526] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.527] GetLastError () returned 0x5 [0268.527] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7eb00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7eb00, lpOverlapped=0x0) returned 0 [0268.527] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.527] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7eb50 | out: lpFindFileData=0x665da7eb50) returned 1 [0268.527] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.527] SetFileAttributesW (lpFileName="C:\\bootmgr", dwFileAttributes=0x80) returned 0 [0268.528] CreateFileW (lpFileName="C:\\bootmgr" (normalized: "c:\\bootmgr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.528] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.528] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.528] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7eb50 | out: lpFindFileData=0x665da7eb50) returned 1 [0268.528] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.529] SetFileAttributesW (lpFileName="C:\\BOOTNXT", dwFileAttributes=0x80) returned 0 [0268.529] CreateFileW (lpFileName="C:\\BOOTNXT" (normalized: "c:\\bootnxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.529] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.529] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.529] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7eb50 | out: lpFindFileData=0x665da7eb50) returned 1 [0268.529] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.529] SetFileAttributesW (lpFileName="C:\\BOOTSECT.BAK", dwFileAttributes=0x80) returned 0 [0268.530] CreateFileW (lpFileName="C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.530] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.530] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.530] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7eb50 | out: lpFindFileData=0x665da7eb50) returned 1 [0268.530] SetLastError (dwErrCode=0x0) [0268.530] CreateFileW (lpFileName="C:\\RyukReadMe.txt" (normalized: "c:\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.530] GetLastError () returned 0x5 [0268.530] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7eb00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7eb00, lpOverlapped=0x0) returned 0 [0268.530] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.530] FindFirstFileW (in: lpFileName="C:\\Config.Msi\\*.*", lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 0xffffffffffffffff [0268.531] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0268.531] SetLastError (dwErrCode=0x0) [0268.531] CreateFileW (lpFileName="C:\\Config.Msi\\RyukReadMe.txt" (normalized: "c:\\config.msi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.531] GetLastError () returned 0x5 [0268.531] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7eb00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7eb00, lpOverlapped=0x0) returned 0 [0268.531] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.531] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7eb50 | out: lpFindFileData=0x665da7eb50) returned 1 [0268.531] SetLastError (dwErrCode=0x0) [0268.531] CreateFileW (lpFileName="C:\\RyukReadMe.txt" (normalized: "c:\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.531] GetLastError () returned 0x5 [0268.531] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7eb00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7eb00, lpOverlapped=0x0) returned 0 [0268.531] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.531] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\*.*", lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 0xffffffffffffffff [0268.531] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0268.531] SetLastError (dwErrCode=0x0) [0268.531] CreateFileW (lpFileName="C:\\Documents and Settings\\RyukReadMe.txt" (normalized: "c:\\documents and settings\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.532] GetLastError () returned 0x5 [0268.532] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7eb00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7eb00, lpOverlapped=0x0) returned 0 [0268.532] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.532] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7eb50 | out: lpFindFileData=0x665da7eb50) returned 1 [0268.532] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.532] SetFileAttributesW (lpFileName="C:\\hiberfil.sys", dwFileAttributes=0x80) returned 0 [0268.532] CreateFileW (lpFileName="C:\\hiberfil.sys" (normalized: "c:\\hiberfil.sys"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.533] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.533] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.533] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7eb50 | out: lpFindFileData=0x665da7eb50) returned 1 [0268.533] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.533] SetFileAttributesW (lpFileName="C:\\pagefile.sys", dwFileAttributes=0x80) returned 0 [0268.534] CreateFileW (lpFileName="C:\\pagefile.sys" (normalized: "c:\\pagefile.sys"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.534] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.534] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.534] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7eb50 | out: lpFindFileData=0x665da7eb50) returned 1 [0268.534] SetLastError (dwErrCode=0x0) [0268.534] CreateFileW (lpFileName="C:\\RyukReadMe.txt" (normalized: "c:\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.534] GetLastError () returned 0x5 [0268.534] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7eb00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7eb00, lpOverlapped=0x0) returned 0 [0268.534] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.534] FindFirstFileW (in: lpFileName="C:\\PerfLogs\\*.*", lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 0xffffffffffffffff [0268.534] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0 [0268.535] SetLastError (dwErrCode=0x0) [0268.535] CreateFileW (lpFileName="C:\\PerfLogs\\RyukReadMe.txt" (normalized: "c:\\perflogs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.535] GetLastError () returned 0x5 [0268.535] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7eb00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7eb00, lpOverlapped=0x0) returned 0 [0268.535] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.535] FindNextFileW (in: hFindFile=0x665d90d040, lpFindFileData=0x665da7eb50 | out: lpFindFileData=0x665da7eb50) returned 1 [0268.535] SetLastError (dwErrCode=0x0) [0268.535] CreateFileW (lpFileName="C:\\RyukReadMe.txt" (normalized: "c:\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.535] GetLastError () returned 0x5 [0268.535] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7eb00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7eb00, lpOverlapped=0x0) returned 0 [0268.535] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.535] FindFirstFileW (in: lpFileName="C:\\Program Files\\*.*", lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 0x665d90d340 [0268.535] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0268.535] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0268.535] SetLastError (dwErrCode=0x0) [0268.535] CreateFileW (lpFileName="C:\\Program Files\\RyukReadMe.txt" (normalized: "c:\\program files\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.535] GetLastError () returned 0x5 [0268.535] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.536] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.536] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665d90d0a0 [0268.536] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.536] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.536] SetLastError (dwErrCode=0x0) [0268.536] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.536] GetLastError () returned 0x5 [0268.536] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0268.536] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.536] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665d90c740 [0268.536] FindNextFileW (in: hFindFile=0x665d90c740, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.536] FindNextFileW (in: hFindFile=0x665d90c740, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.536] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.536] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB", dwFileAttributes=0x80) returned 0 [0268.537] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.537] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.537] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.537] FindNextFileW (in: hFindFile=0x665d90c740, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0268.537] FindClose (in: hFindFile=0x665d90c740 | out: hFindFile=0x665d90c740) returned 1 [0268.541] SetLastError (dwErrCode=0x0) [0268.541] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\designer\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.541] GetLastError () returned 0x5 [0268.541] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0268.542] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.542] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.542] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.542] SetLastError (dwErrCode=0x0) [0268.542] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.542] GetLastError () returned 0x5 [0268.542] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0268.542] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.542] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665d90c200 [0268.542] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.542] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.542] SetLastError (dwErrCode=0x0) [0268.542] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.542] GetLastError () returned 0x5 [0268.542] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0268.542] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.542] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665d90ce60 [0268.542] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.543] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.543] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.543] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.543] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.543] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.543] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.543] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.543] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.543] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.543] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.543] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.543] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.543] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.543] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.543] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.543] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.543] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.543] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.543] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.543] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.543] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.543] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.543] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.543] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.543] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.543] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.543] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.543] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.544] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVClient.man", dwFileAttributes=0x80) returned 0 [0268.544] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVClient.man" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvclient.man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.544] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.544] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.544] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.544] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.544] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVClientIsv.man", dwFileAttributes=0x80) returned 0 [0268.545] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVClientIsv.man" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvclientisv.man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.545] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.545] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.545] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.545] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.545] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.545] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.545] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.545] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.545] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.545] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.545] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.545] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.545] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.545] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.545] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.545] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.545] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.545] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.545] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.546] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml", dwFileAttributes=0x80) returned 0 [0268.546] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rheartbeatconfig.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.546] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.546] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.546] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.546] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.546] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.546] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.546] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.546] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.546] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.546] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.546] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.546] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.546] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.546] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.546] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.547] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.547] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.547] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.547] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.547] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.547] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.547] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.547] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.547] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.547] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.547] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.547] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.547] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.547] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.547] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.547] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.547] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.547] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.547] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.547] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.547] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.547] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.547] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.547] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.547] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.547] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.547] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.547] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.547] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.547] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ClientCapabilities.json", dwFileAttributes=0x80) returned 0 [0268.548] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ClientCapabilities.json" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\clientcapabilities.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.548] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.548] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.548] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.548] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ClientEventLogMessages.man", dwFileAttributes=0x80) returned 0 [0268.549] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ClientEventLogMessages.man" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\clienteventlogmessages.man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.549] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.549] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.549] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.549] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.549] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.549] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.549] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\FrequentOfficeUpdateSchedule.xml", dwFileAttributes=0x80) returned 0 [0268.549] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\FrequentOfficeUpdateSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\frequentofficeupdateschedule.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.550] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.550] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.550] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.550] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash", dwFileAttributes=0x80) returned 0 [0268.550] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i640.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.550] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.551] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.551] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.551] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.551] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash", dwFileAttributes=0x80) returned 0 [0268.551] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i641033.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.551] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.551] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.552] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.552] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.552] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.552] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.552] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.552] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.552] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.552] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.552] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.552] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.552] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.552] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml", dwFileAttributes=0x80) returned 0 [0268.552] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeupdateschedule.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.552] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.552] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.553] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.553] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.553] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml", dwFileAttributes=0x80) returned 0 [0268.553] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\servicewatcherschedule.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.553] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.553] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.553] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.554] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\SharedPerformance.man", dwFileAttributes=0x80) returned 0 [0268.554] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\SharedPerformance.man" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\sharedperformance.man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.554] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.554] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.554] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.554] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.554] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\SubsystemController.man", dwFileAttributes=0x80) returned 0 [0268.555] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\SubsystemController.man" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\subsystemcontroller.man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.555] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.555] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.555] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.557] SetLastError (dwErrCode=0x0) [0268.557] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.557] GetLastError () returned 0x5 [0268.557] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0268.557] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.557] SetLastError (dwErrCode=0x0) [0268.557] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.557] GetLastError () returned 0x5 [0268.557] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0268.557] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.557] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665d90cc20 [0268.557] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.557] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.557] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.558] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml", dwFileAttributes=0x80) returned 0 [0268.558] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.558] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.558] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.558] SetLastError (dwErrCode=0x0) [0268.558] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.559] GetLastError () returned 0x5 [0268.559] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.559] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.559] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90c8c0 [0268.559] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.559] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.559] SetLastError (dwErrCode=0x0) [0268.559] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.559] GetLastError () returned 0x5 [0268.559] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.559] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.559] SetLastError (dwErrCode=0x0) [0268.559] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.559] GetLastError () returned 0x5 [0268.559] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.559] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.560] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90ca40 [0268.560] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.560] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.560] SetLastError (dwErrCode=0x0) [0268.560] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.560] GetLastError () returned 0x5 [0268.560] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.560] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.560] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.560] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml", dwFileAttributes=0x80) returned 0 [0268.560] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.561] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.561] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.561] SetLastError (dwErrCode=0x0) [0268.561] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.561] GetLastError () returned 0x5 [0268.561] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.561] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.561] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90c500 [0268.561] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.561] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.561] SetLastError (dwErrCode=0x0) [0268.561] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.562] GetLastError () returned 0x5 [0268.562] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.562] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.562] SetLastError (dwErrCode=0x0) [0268.562] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.562] GetLastError () returned 0x5 [0268.562] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.562] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.562] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90bc60 [0268.562] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.562] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.562] SetLastError (dwErrCode=0x0) [0268.562] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.562] GetLastError () returned 0x5 [0268.562] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.563] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.563] SetLastError (dwErrCode=0x0) [0268.563] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.563] GetLastError () returned 0x5 [0268.563] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.563] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.563] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90c1a0 [0268.563] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.563] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.563] SetLastError (dwErrCode=0x0) [0268.563] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.563] GetLastError () returned 0x5 [0268.563] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.563] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.563] SetLastError (dwErrCode=0x0) [0268.563] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.564] GetLastError () returned 0x5 [0268.564] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.564] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.564] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90bc60 [0268.564] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.564] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.564] SetLastError (dwErrCode=0x0) [0268.564] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.573] GetLastError () returned 0x5 [0268.573] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.573] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.573] SetLastError (dwErrCode=0x0) [0268.573] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.573] GetLastError () returned 0x5 [0268.573] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.573] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.573] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90c5c0 [0268.573] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.573] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.574] SetLastError (dwErrCode=0x0) [0268.574] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-gb\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.574] GetLastError () returned 0x5 [0268.574] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.574] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.574] SetLastError (dwErrCode=0x0) [0268.574] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.574] GetLastError () returned 0x5 [0268.574] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.574] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.574] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90c5c0 [0268.575] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.575] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.575] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi", dwFileAttributes=0x80) returned 0 [0268.575] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.575] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.576] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.576] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.576] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi", dwFileAttributes=0x80) returned 0 [0268.576] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.576] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.576] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.577] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.577] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi", dwFileAttributes=0x80) returned 0 [0268.577] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.577] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.577] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.577] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi", dwFileAttributes=0x80) returned 0 [0268.578] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.578] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.578] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.578] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi", dwFileAttributes=0x80) returned 0 [0268.579] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\correct.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.579] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.579] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.579] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.579] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi", dwFileAttributes=0x80) returned 0 [0268.579] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\delete.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.580] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.581] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.581] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.581] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi", dwFileAttributes=0x80) returned 0 [0268.581] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\join.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.581] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.581] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.582] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.582] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi", dwFileAttributes=0x80) returned 0 [0268.582] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\split.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.582] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.582] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.583] SetLastError (dwErrCode=0x0) [0268.583] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.586] GetLastError () returned 0x5 [0268.586] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.586] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.586] SetLastError (dwErrCode=0x0) [0268.586] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.586] GetLastError () returned 0x5 [0268.586] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.586] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.586] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90cec0 [0268.586] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.586] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.586] SetLastError (dwErrCode=0x0) [0268.586] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.587] GetLastError () returned 0x5 [0268.587] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.587] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.587] SetLastError (dwErrCode=0x0) [0268.587] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.587] GetLastError () returned 0x5 [0268.587] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.587] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.587] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90bc60 [0268.587] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.587] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.587] SetLastError (dwErrCode=0x0) [0268.587] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-mx\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.587] GetLastError () returned 0x5 [0268.587] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.587] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.587] SetLastError (dwErrCode=0x0) [0268.587] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.588] GetLastError () returned 0x5 [0268.588] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.588] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.588] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90cec0 [0268.588] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.588] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.588] SetLastError (dwErrCode=0x0) [0268.588] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.588] GetLastError () returned 0x5 [0268.588] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.588] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.588] SetLastError (dwErrCode=0x0) [0268.588] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.588] GetLastError () returned 0x5 [0268.588] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.588] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.589] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90bfc0 [0268.589] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.589] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.589] SetLastError (dwErrCode=0x0) [0268.589] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fi-fi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.589] GetLastError () returned 0x5 [0268.589] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.589] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.589] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi", dwFileAttributes=0x80) returned 0 [0268.589] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.590] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.590] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.590] SetLastError (dwErrCode=0x0) [0268.590] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.590] GetLastError () returned 0x5 [0268.590] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.590] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.590] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90cec0 [0268.590] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.590] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.590] SetLastError (dwErrCode=0x0) [0268.590] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-ca\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.591] GetLastError () returned 0x5 [0268.591] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.591] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.591] SetLastError (dwErrCode=0x0) [0268.591] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.591] GetLastError () returned 0x5 [0268.591] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.591] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.591] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90c080 [0268.591] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.591] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.591] SetLastError (dwErrCode=0x0) [0268.591] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-fr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.591] GetLastError () returned 0x5 [0268.591] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.591] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.591] SetLastError (dwErrCode=0x0) [0268.591] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.592] GetLastError () returned 0x5 [0268.592] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.592] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.592] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90bc60 [0268.592] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.592] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.592] SetLastError (dwErrCode=0x0) [0268.592] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.592] GetLastError () returned 0x5 [0268.592] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0268.592] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.592] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90cc80 [0268.592] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0268.592] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0268.592] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml", dwFileAttributes=0x80) returned 0 [0268.593] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.593] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.593] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.593] SetLastError (dwErrCode=0x0) [0268.593] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.593] GetLastError () returned 0x5 [0268.593] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0268.593] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.594] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.594] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml", dwFileAttributes=0x80) returned 0 [0268.594] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.594] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.594] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.594] SetLastError (dwErrCode=0x0) [0268.594] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.595] GetLastError () returned 0x5 [0268.595] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0268.595] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.595] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c080 [0268.595] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0268.595] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0268.595] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.595] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml", dwFileAttributes=0x80) returned 0 [0268.596] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.596] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.596] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.596] SetLastError (dwErrCode=0x0) [0268.596] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.596] GetLastError () returned 0x5 [0268.596] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0268.597] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.597] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.597] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert.xml", dwFileAttributes=0x80) returned 0 [0268.597] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.597] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.597] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.597] SetLastError (dwErrCode=0x0) [0268.597] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.598] GetLastError () returned 0x5 [0268.598] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0268.598] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.598] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c440 [0268.598] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0268.598] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0268.598] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.598] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml", dwFileAttributes=0x80) returned 0 [0268.598] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.599] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.599] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.599] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.599] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml", dwFileAttributes=0x80) returned 0 [0268.599] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.599] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.599] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.600] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.600] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml", dwFileAttributes=0x80) returned 0 [0268.600] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.600] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.600] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.600] SetLastError (dwErrCode=0x0) [0268.601] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.601] GetLastError () returned 0x5 [0268.601] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0268.601] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.601] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.601] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml", dwFileAttributes=0x80) returned 0 [0268.601] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.601] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.601] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.602] SetLastError (dwErrCode=0x0) [0268.602] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.602] GetLastError () returned 0x5 [0268.602] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0268.602] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.602] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90cf20 [0268.603] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0268.603] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0268.603] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.603] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml", dwFileAttributes=0x80) returned 0 [0268.603] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.603] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.603] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.603] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.604] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml", dwFileAttributes=0x80) returned 0 [0268.604] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\basealtgr_rtl.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.604] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.604] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.604] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.605] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml", dwFileAttributes=0x80) returned 0 [0268.605] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.605] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.605] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.605] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.606] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml", dwFileAttributes=0x80) returned 0 [0268.606] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.606] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.606] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.607] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml", dwFileAttributes=0x80) returned 0 [0268.607] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.607] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.607] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.607] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.608] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml", dwFileAttributes=0x80) returned 0 [0268.608] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.608] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.608] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.608] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.608] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml", dwFileAttributes=0x80) returned 0 [0268.609] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.609] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.609] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.609] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml", dwFileAttributes=0x80) returned 0 [0268.609] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.610] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.610] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.610] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml", dwFileAttributes=0x80) returned 0 [0268.610] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.610] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.611] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.611] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.611] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml", dwFileAttributes=0x80) returned 0 [0268.611] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.612] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.612] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.612] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml", dwFileAttributes=0x80) returned 0 [0268.612] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.612] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.613] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.613] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.613] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml", dwFileAttributes=0x80) returned 0 [0268.613] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.613] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.613] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.613] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.614] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml", dwFileAttributes=0x80) returned 0 [0268.614] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.614] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.614] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.615] SetLastError (dwErrCode=0x0) [0268.615] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.617] GetLastError () returned 0x5 [0268.617] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0268.618] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.618] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.618] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main.xml", dwFileAttributes=0x80) returned 0 [0268.618] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.618] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.618] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.618] SetLastError (dwErrCode=0x0) [0268.618] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.619] GetLastError () returned 0x5 [0268.619] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0268.619] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.619] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90ca40 [0268.619] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0268.619] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0268.619] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml", dwFileAttributes=0x80) returned 0 [0268.619] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.619] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.619] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.620] SetLastError (dwErrCode=0x0) [0268.620] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.620] GetLastError () returned 0x5 [0268.620] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0268.620] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.620] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml", dwFileAttributes=0x80) returned 0 [0268.620] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.621] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.621] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.621] SetLastError (dwErrCode=0x0) [0268.621] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.621] GetLastError () returned 0x5 [0268.621] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0268.621] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.621] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c380 [0268.621] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0268.621] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0268.621] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml", dwFileAttributes=0x80) returned 0 [0268.622] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.622] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.622] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.622] SetLastError (dwErrCode=0x0) [0268.622] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.622] GetLastError () returned 0x5 [0268.622] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0268.622] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.623] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.623] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml", dwFileAttributes=0x80) returned 0 [0268.623] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.623] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.623] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.623] SetLastError (dwErrCode=0x0) [0268.623] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.624] GetLastError () returned 0x5 [0268.624] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0268.624] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.624] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90be40 [0268.624] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0268.624] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0268.624] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml", dwFileAttributes=0x80) returned 0 [0268.624] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.624] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.624] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.625] SetLastError (dwErrCode=0x0) [0268.625] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.625] GetLastError () returned 0x5 [0268.625] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0268.625] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.625] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml", dwFileAttributes=0x80) returned 0 [0268.625] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.626] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.626] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.626] SetLastError (dwErrCode=0x0) [0268.626] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.626] GetLastError () returned 0x5 [0268.626] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0268.626] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.626] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90cec0 [0268.626] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0268.626] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0268.626] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml", dwFileAttributes=0x80) returned 0 [0268.627] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.627] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.627] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.627] SetLastError (dwErrCode=0x0) [0268.627] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.628] GetLastError () returned 0x5 [0268.628] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0268.628] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.628] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml", dwFileAttributes=0x80) returned 0 [0268.628] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.628] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.628] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.629] SetLastError (dwErrCode=0x0) [0268.629] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.629] GetLastError () returned 0x5 [0268.629] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0268.629] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.629] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90cc80 [0268.629] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0268.629] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0268.629] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml", dwFileAttributes=0x80) returned 0 [0268.629] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.630] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.630] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.630] SetLastError (dwErrCode=0x0) [0268.630] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.630] GetLastError () returned 0x5 [0268.630] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0268.630] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.630] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.630] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml", dwFileAttributes=0x80) returned 0 [0268.631] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.631] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.631] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.631] SetLastError (dwErrCode=0x0) [0268.631] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.631] GetLastError () returned 0x5 [0268.631] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0268.631] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.631] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c8c0 [0268.631] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0268.631] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0268.632] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml", dwFileAttributes=0x80) returned 0 [0268.632] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.632] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.632] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.632] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml", dwFileAttributes=0x80) returned 0 [0268.633] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.633] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.633] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.633] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml", dwFileAttributes=0x80) returned 0 [0268.634] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.634] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.634] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.634] SetLastError (dwErrCode=0x0) [0268.634] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.634] GetLastError () returned 0x5 [0268.634] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0268.634] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.634] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml", dwFileAttributes=0x80) returned 0 [0268.635] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.635] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.635] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.635] SetLastError (dwErrCode=0x0) [0268.635] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.635] GetLastError () returned 0x5 [0268.635] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.635] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.635] SetLastError (dwErrCode=0x0) [0268.636] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.636] GetLastError () returned 0x5 [0268.636] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.636] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.636] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90c260 [0268.636] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.636] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.636] SetLastError (dwErrCode=0x0) [0268.636] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\he-il\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.636] GetLastError () returned 0x5 [0268.636] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.636] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.636] SetLastError (dwErrCode=0x0) [0268.636] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.636] GetLastError () returned 0x5 [0268.636] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.637] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.637] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90bde0 [0268.637] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.637] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.637] SetLastError (dwErrCode=0x0) [0268.637] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hr-hr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.637] GetLastError () returned 0x5 [0268.637] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.637] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.637] SetLastError (dwErrCode=0x0) [0268.637] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.637] GetLastError () returned 0x5 [0268.637] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.637] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.637] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90bfc0 [0268.637] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.638] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.638] SetLastError (dwErrCode=0x0) [0268.638] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hu-hu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.638] GetLastError () returned 0x5 [0268.638] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.638] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.638] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.638] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrcommonlm.dat", dwFileAttributes=0x80) returned 0 [0268.638] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrcommonlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcommonlm.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.638] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.638] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.639] SetLastError (dwErrCode=0x0) [0268.639] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.639] GetLastError () returned 0x5 [0268.639] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.639] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.639] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\HWRCustomization\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90c0e0 [0268.639] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.639] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0268.639] FindClose (in: hFindFile=0x665d90c0e0 | out: hFindFile=0x665d90c0e0) returned 1 [0268.639] SetLastError (dwErrCode=0x0) [0268.639] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\HWRCustomization\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcustomization\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.639] GetLastError () returned 0x5 [0268.639] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.639] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.639] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.640] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrenclm.dat", dwFileAttributes=0x80) returned 0 [0268.640] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrenclm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrenclm.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.640] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.640] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.640] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.641] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrlatinlm.dat", dwFileAttributes=0x80) returned 0 [0268.641] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrlatinlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrlatinlm.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.641] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.641] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.641] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.641] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat", dwFileAttributes=0x80) returned 0 [0268.642] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusalm.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.642] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.642] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.642] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat", dwFileAttributes=0x80) returned 0 [0268.643] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusash.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.643] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.643] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.644] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.644] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsar.xml", dwFileAttributes=0x80) returned 0 [0268.644] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsar.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsar.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.644] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.644] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.644] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.645] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml", dwFileAttributes=0x80) returned 0 [0268.645] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscat.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.645] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.645] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.645] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.645] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml", dwFileAttributes=0x80) returned 0 [0268.646] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipschs.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.646] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.646] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.646] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml", dwFileAttributes=0x80) returned 0 [0268.646] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscht.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.647] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.647] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.647] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml", dwFileAttributes=0x80) returned 0 [0268.647] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscsy.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.647] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.647] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.648] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.648] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml", dwFileAttributes=0x80) returned 0 [0268.648] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdan.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.648] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.648] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.648] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.649] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml", dwFileAttributes=0x80) returned 0 [0268.649] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdeu.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.649] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.649] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.649] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.650] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsel.xml", dwFileAttributes=0x80) returned 0 [0268.650] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsel.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsel.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.650] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.650] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.650] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.650] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsen.xml", dwFileAttributes=0x80) returned 0 [0268.651] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsen.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsen.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.651] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.651] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.651] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsesp.xml", dwFileAttributes=0x80) returned 0 [0268.651] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsesp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsesp.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.652] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.652] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.652] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.652] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfin.xml", dwFileAttributes=0x80) returned 0 [0268.652] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfin.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfin.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.652] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.652] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.653] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.653] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfra.xml", dwFileAttributes=0x80) returned 0 [0268.653] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfra.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfra.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.653] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.653] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.653] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.654] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshe.xml", dwFileAttributes=0x80) returned 0 [0268.654] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshe.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshe.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.654] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.654] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.654] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshi.xml", dwFileAttributes=0x80) returned 0 [0268.655] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshi.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.655] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.655] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.655] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshrv.xml", dwFileAttributes=0x80) returned 0 [0268.656] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshrv.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshrv.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.656] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.656] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.656] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.657] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsid.xml", dwFileAttributes=0x80) returned 0 [0268.657] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsid.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsid.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.657] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.657] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.657] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.657] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsita.xml", dwFileAttributes=0x80) returned 0 [0268.658] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsita.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsita.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.685] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.685] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.686] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.686] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml", dwFileAttributes=0x80) returned 0 [0268.686] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsjpn.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.686] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.686] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.686] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml", dwFileAttributes=0x80) returned 0 [0268.687] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipskor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.687] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.687] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.687] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml", dwFileAttributes=0x80) returned 0 [0268.688] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnld.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.688] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.688] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.688] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.688] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml", dwFileAttributes=0x80) returned 0 [0268.688] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.689] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.689] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.689] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml", dwFileAttributes=0x80) returned 0 [0268.690] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplk.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.690] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.690] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.690] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml", dwFileAttributes=0x80) returned 0 [0268.691] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptb.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.691] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.691] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.691] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptg.xml", dwFileAttributes=0x80) returned 0 [0268.692] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptg.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptg.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.692] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.692] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.692] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrom.xml", dwFileAttributes=0x80) returned 0 [0268.692] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrom.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrom.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.693] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.693] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.693] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.693] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrus.xml", dwFileAttributes=0x80) returned 0 [0268.693] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrus.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrus.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.693] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.693] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.694] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrb.xml", dwFileAttributes=0x80) returned 0 [0268.694] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrb.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.694] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.694] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.694] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrl.xml", dwFileAttributes=0x80) returned 0 [0268.695] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrl.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.695] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.695] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.695] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssve.xml", dwFileAttributes=0x80) returned 0 [0268.696] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssve.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssve.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.696] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.696] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.696] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.696] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipstr.xml", dwFileAttributes=0x80) returned 0 [0268.696] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipstr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipstr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.697] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.697] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.697] SetLastError (dwErrCode=0x0) [0268.697] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.697] GetLastError () returned 0x5 [0268.697] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.697] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.697] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90bfc0 [0268.697] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.697] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.697] SetLastError (dwErrCode=0x0) [0268.697] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\it-it\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.698] GetLastError () returned 0x5 [0268.698] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.698] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.698] SetLastError (dwErrCode=0x0) [0268.698] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.698] GetLastError () returned 0x5 [0268.698] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.698] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.698] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90bea0 [0268.698] FindNextFileW (in: hFindFile=0x665d90bea0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.698] FindNextFileW (in: hFindFile=0x665d90bea0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.698] SetLastError (dwErrCode=0x0) [0268.698] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ja-jp\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.698] GetLastError () returned 0x5 [0268.698] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.698] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.699] SetLastError (dwErrCode=0x0) [0268.699] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.699] GetLastError () returned 0x5 [0268.699] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.699] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.699] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90bfc0 [0268.699] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.699] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.699] SetLastError (dwErrCode=0x0) [0268.699] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ko-kr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.699] GetLastError () returned 0x5 [0268.699] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.699] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.699] SetLastError (dwErrCode=0x0) [0268.699] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.700] GetLastError () returned 0x5 [0268.700] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.700] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.700] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90cec0 [0268.700] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.700] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.700] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\chstic.dgml", dwFileAttributes=0x80) returned 0 [0268.700] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\chstic.dgml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\languagemodel\\chstic.dgml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.700] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.701] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.701] SetLastError (dwErrCode=0x0) [0268.701] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\languagemodel\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.701] GetLastError () returned 0x5 [0268.701] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.701] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.701] SetLastError (dwErrCode=0x0) [0268.701] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.701] GetLastError () returned 0x5 [0268.701] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.701] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.701] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90bfc0 [0268.701] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.702] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.702] SetLastError (dwErrCode=0x0) [0268.702] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lt-lt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.702] GetLastError () returned 0x5 [0268.702] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.702] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.702] SetLastError (dwErrCode=0x0) [0268.702] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.702] GetLastError () returned 0x5 [0268.702] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.702] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.702] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90c8c0 [0268.702] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.702] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.702] SetLastError (dwErrCode=0x0) [0268.702] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lv-lv\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.703] GetLastError () returned 0x5 [0268.703] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.703] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.703] SetLastError (dwErrCode=0x0) [0268.703] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.703] GetLastError () returned 0x5 [0268.703] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.703] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.703] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90c260 [0268.703] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.703] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.703] SetLastError (dwErrCode=0x0) [0268.703] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nb-no\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.703] GetLastError () returned 0x5 [0268.703] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.703] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.704] SetLastError (dwErrCode=0x0) [0268.704] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.704] GetLastError () returned 0x5 [0268.704] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.704] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.704] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90bc60 [0268.704] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.704] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.704] SetLastError (dwErrCode=0x0) [0268.704] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nl-nl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.704] GetLastError () returned 0x5 [0268.704] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.704] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.704] SetLastError (dwErrCode=0x0) [0268.704] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.705] GetLastError () returned 0x5 [0268.705] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.705] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.705] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90bc60 [0268.705] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.705] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.705] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0268.705] FindClose (in: hFindFile=0x665d90bc60 | out: hFindFile=0x665d90bc60) returned 1 [0268.705] SetLastError (dwErrCode=0x0) [0268.705] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pl-pl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.705] GetLastError () returned 0x5 [0268.706] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.706] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.706] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.706] SetLastError (dwErrCode=0x0) [0268.706] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.706] GetLastError () returned 0x5 [0268.706] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.706] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.706] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90c080 [0268.706] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.706] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.706] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0268.706] FindClose (in: hFindFile=0x665d90c080 | out: hFindFile=0x665d90c080) returned 1 [0268.706] SetLastError (dwErrCode=0x0) [0268.706] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-br\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.707] GetLastError () returned 0x5 [0268.707] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.707] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.707] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.707] SetLastError (dwErrCode=0x0) [0268.707] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.707] GetLastError () returned 0x5 [0268.707] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.707] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.707] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90c080 [0268.707] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.707] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.707] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0268.707] FindClose (in: hFindFile=0x665d90c080 | out: hFindFile=0x665d90c080) returned 1 [0268.707] SetLastError (dwErrCode=0x0) [0268.708] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-pt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.708] GetLastError () returned 0x5 [0268.708] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.708] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.708] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.708] SetLastError (dwErrCode=0x0) [0268.708] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.708] GetLastError () returned 0x5 [0268.708] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.708] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.708] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90bc60 [0268.708] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.708] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.708] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0268.708] FindClose (in: hFindFile=0x665d90bc60 | out: hFindFile=0x665d90bc60) returned 1 [0268.708] SetLastError (dwErrCode=0x0) [0268.708] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ro-ro\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.709] GetLastError () returned 0x5 [0268.709] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.709] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.709] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.709] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.709] SetLastError (dwErrCode=0x0) [0268.709] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.709] GetLastError () returned 0x5 [0268.709] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.709] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.709] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90bc60 [0268.709] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.709] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.709] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0268.709] FindClose (in: hFindFile=0x665d90bc60 | out: hFindFile=0x665d90bc60) returned 1 [0268.709] SetLastError (dwErrCode=0x0) [0268.709] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ru-ru\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.709] GetLastError () returned 0x5 [0268.709] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.710] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.710] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.710] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.710] SetLastError (dwErrCode=0x0) [0268.710] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.710] GetLastError () returned 0x5 [0268.710] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.710] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.710] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90c4a0 [0268.710] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.710] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.710] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0268.710] FindClose (in: hFindFile=0x665d90c4a0 | out: hFindFile=0x665d90c4a0) returned 1 [0268.710] SetLastError (dwErrCode=0x0) [0268.710] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sk-sk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.710] GetLastError () returned 0x5 [0268.710] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.710] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.710] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.710] SetLastError (dwErrCode=0x0) [0268.711] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.711] GetLastError () returned 0x5 [0268.711] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.711] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.711] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90c260 [0268.711] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.711] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.711] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0268.711] FindClose (in: hFindFile=0x665d90c260 | out: hFindFile=0x665d90c260) returned 1 [0268.711] SetLastError (dwErrCode=0x0) [0268.711] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sl-si\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.711] GetLastError () returned 0x5 [0268.711] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.711] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.711] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.711] SetLastError (dwErrCode=0x0) [0268.711] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.712] GetLastError () returned 0x5 [0268.712] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.712] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.712] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-CS\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90c080 [0268.712] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.712] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.712] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0268.712] FindClose (in: hFindFile=0x665d90c080 | out: hFindFile=0x665d90c080) returned 1 [0268.712] SetLastError (dwErrCode=0x0) [0268.712] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-CS\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-cs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.712] GetLastError () returned 0x5 [0268.712] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.712] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.712] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.712] SetLastError (dwErrCode=0x0) [0268.712] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.712] GetLastError () returned 0x5 [0268.712] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.712] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.712] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90cc80 [0268.713] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.713] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.713] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0268.713] FindClose (in: hFindFile=0x665d90cc80 | out: hFindFile=0x665d90cc80) returned 1 [0268.713] SetLastError (dwErrCode=0x0) [0268.713] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-rs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.713] GetLastError () returned 0x5 [0268.713] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.713] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.713] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.713] SetLastError (dwErrCode=0x0) [0268.713] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.713] GetLastError () returned 0x5 [0268.713] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.713] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.713] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90c5c0 [0268.713] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.714] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.714] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0268.714] FindClose (in: hFindFile=0x665d90c5c0 | out: hFindFile=0x665d90c5c0) returned 1 [0268.714] SetLastError (dwErrCode=0x0) [0268.714] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sv-se\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.714] GetLastError () returned 0x5 [0268.714] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.714] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.714] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.714] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.714] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.714] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.714] SetLastError (dwErrCode=0x0) [0268.714] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.714] GetLastError () returned 0x5 [0268.714] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.714] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.714] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90cf20 [0268.714] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.714] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.714] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0268.715] FindClose (in: hFindFile=0x665d90cf20 | out: hFindFile=0x665d90cf20) returned 1 [0268.715] SetLastError (dwErrCode=0x0) [0268.715] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\th-th\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.715] GetLastError () returned 0x5 [0268.715] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.715] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.715] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.715] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.715] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.715] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.715] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.715] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.715] SetLastError (dwErrCode=0x0) [0268.715] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.715] GetLastError () returned 0x5 [0268.715] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.715] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.715] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90bc60 [0268.715] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.715] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.715] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0268.715] FindClose (in: hFindFile=0x665d90bc60 | out: hFindFile=0x665d90bc60) returned 1 [0268.716] SetLastError (dwErrCode=0x0) [0268.716] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tr-tr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.716] GetLastError () returned 0x5 [0268.716] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.716] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.716] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.716] SetLastError (dwErrCode=0x0) [0268.716] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.716] GetLastError () returned 0x5 [0268.716] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.716] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.716] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90bea0 [0268.716] FindNextFileW (in: hFindFile=0x665d90bea0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.717] FindNextFileW (in: hFindFile=0x665d90bea0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.717] FindNextFileW (in: hFindFile=0x665d90bea0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0268.717] FindClose (in: hFindFile=0x665d90bea0 | out: hFindFile=0x665d90bea0) returned 1 [0268.717] SetLastError (dwErrCode=0x0) [0268.717] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\uk-ua\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.717] GetLastError () returned 0x5 [0268.717] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.717] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.717] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.717] SetLastError (dwErrCode=0x0) [0268.717] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.717] GetLastError () returned 0x5 [0268.717] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.717] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.717] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90ca40 [0268.718] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.718] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.718] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0268.718] FindClose (in: hFindFile=0x665d90ca40 | out: hFindFile=0x665d90ca40) returned 1 [0268.718] SetLastError (dwErrCode=0x0) [0268.718] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-cn\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.718] GetLastError () returned 0x5 [0268.718] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.718] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.718] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.718] SetLastError (dwErrCode=0x0) [0268.718] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.718] GetLastError () returned 0x5 [0268.718] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.719] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.719] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-HK\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90bc60 [0268.719] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.719] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.719] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0268.719] FindClose (in: hFindFile=0x665d90bc60 | out: hFindFile=0x665d90bc60) returned 1 [0268.719] SetLastError (dwErrCode=0x0) [0268.719] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-HK\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-hk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.719] GetLastError () returned 0x5 [0268.719] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.719] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.719] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.719] SetLastError (dwErrCode=0x0) [0268.719] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.720] GetLastError () returned 0x5 [0268.720] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.720] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.720] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90cc80 [0268.720] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.720] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.720] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0268.720] FindClose (in: hFindFile=0x665d90cc80 | out: hFindFile=0x665d90cc80) returned 1 [0268.720] SetLastError (dwErrCode=0x0) [0268.723] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-tw\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.723] GetLastError () returned 0x5 [0268.723] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.723] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.723] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0268.723] FindClose (in: hFindFile=0x665d90cc20 | out: hFindFile=0x665d90cc20) returned 1 [0268.723] SetLastError (dwErrCode=0x0) [0268.723] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.723] GetLastError () returned 0x5 [0268.723] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0268.723] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.723] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.724] SetLastError (dwErrCode=0x0) [0268.724] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.724] GetLastError () returned 0x5 [0268.724] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0268.724] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.724] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665d90bc60 [0268.724] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.724] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.724] SetLastError (dwErrCode=0x0) [0268.724] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.724] GetLastError () returned 0x5 [0268.724] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.724] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.724] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90cc20 [0268.724] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.724] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.724] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0268.725] FindClose (in: hFindFile=0x665d90cc20 | out: hFindFile=0x665d90cc20) returned 1 [0268.725] SetLastError (dwErrCode=0x0) [0268.725] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.725] GetLastError () returned 0x5 [0268.725] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.725] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.725] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.725] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0268.725] FindClose (in: hFindFile=0x665d90bc60 | out: hFindFile=0x665d90bc60) returned 1 [0268.726] SetLastError (dwErrCode=0x0) [0268.726] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.726] GetLastError () returned 0x5 [0268.726] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0268.726] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.726] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.726] SetLastError (dwErrCode=0x0) [0268.726] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.726] GetLastError () returned 0x5 [0268.726] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0268.726] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.726] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665d90bc60 [0268.726] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.726] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.727] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.727] SetLastError (dwErrCode=0x0) [0268.727] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.727] GetLastError () returned 0x5 [0268.727] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.727] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.727] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90c260 [0268.727] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.727] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.728] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.728] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms", dwFileAttributes=0x80) returned 0 [0268.728] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig-office.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.728] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.728] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.728] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.728] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0268.728] FindClose (in: hFindFile=0x665d90c260 | out: hFindFile=0x665d90c260) returned 1 [0268.729] SetLastError (dwErrCode=0x0) [0268.729] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.732] GetLastError () returned 0x5 [0268.732] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.732] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.732] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0268.732] FindClose (in: hFindFile=0x665d90bc60 | out: hFindFile=0x665d90bc60) returned 1 [0268.732] SetLastError (dwErrCode=0x0) [0268.732] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.732] GetLastError () returned 0x5 [0268.732] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0268.732] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.732] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.732] SetLastError (dwErrCode=0x0) [0268.732] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.732] GetLastError () returned 0x5 [0268.732] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0268.732] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.732] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OfficeSoftwareProtectionPlatform\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665d90c740 [0268.732] FindNextFileW (in: hFindFile=0x665d90c740, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.733] FindNextFileW (in: hFindFile=0x665d90c740, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0268.733] FindClose (in: hFindFile=0x665d90c740 | out: hFindFile=0x665d90c740) returned 1 [0268.733] SetLastError (dwErrCode=0x0) [0268.733] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OfficeSoftwareProtectionPlatform\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.733] GetLastError () returned 0x5 [0268.733] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0268.733] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.733] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.733] SetLastError (dwErrCode=0x0) [0268.733] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.733] GetLastError () returned 0x5 [0268.733] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0268.733] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.733] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665d90cf20 [0268.733] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.733] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.733] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0268.733] FindClose (in: hFindFile=0x665d90cf20 | out: hFindFile=0x665d90cf20) returned 1 [0268.733] SetLastError (dwErrCode=0x0) [0268.733] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.734] GetLastError () returned 0x5 [0268.734] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0268.734] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.734] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.734] SetLastError (dwErrCode=0x0) [0268.734] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.734] GetLastError () returned 0x5 [0268.734] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0268.734] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.734] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665d90bc60 [0268.735] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.735] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.735] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.htm", dwFileAttributes=0x80) returned 0 [0268.735] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.735] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.735] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.736] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.736] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.736] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg", dwFileAttributes=0x80) returned 0 [0268.736] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.737] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.737] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.737] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.737] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Blue_Gradient.jpg", dwFileAttributes=0x80) returned 0 [0268.737] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Blue_Gradient.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\blue_gradient.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.737] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.737] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.738] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.738] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.738] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Cave_Drawings.gif", dwFileAttributes=0x80) returned 0 [0268.738] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Cave_Drawings.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\cave_drawings.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.738] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.738] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.738] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.738] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Connectivity.gif", dwFileAttributes=0x80) returned 0 [0268.739] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Connectivity.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\connectivity.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.739] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.739] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.739] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.739] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.739] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Dotted_Lines.emf", dwFileAttributes=0x80) returned 0 [0268.740] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Dotted_Lines.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\dotted_lines.emf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.740] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.740] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.740] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.740] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm", dwFileAttributes=0x80) returned 0 [0268.741] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.741] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.741] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.741] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.741] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg", dwFileAttributes=0x80) returned 0 [0268.741] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.742] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.742] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.742] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.742] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Genko_1.emf", dwFileAttributes=0x80) returned 0 [0268.742] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Genko_1.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\genko_1.emf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.742] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.743] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.743] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.743] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.743] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Genko_2.emf", dwFileAttributes=0x80) returned 0 [0268.743] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Genko_2.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\genko_2.emf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.743] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.743] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.744] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.744] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Graph.emf", dwFileAttributes=0x80) returned 0 [0268.744] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Graph.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\graph.emf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.744] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.744] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.744] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.744] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm", dwFileAttributes=0x80) returned 0 [0268.745] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\green bubbles.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.745] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.745] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.745] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.745] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg", dwFileAttributes=0x80) returned 0 [0268.746] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\greenbubbles.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.746] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.746] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.746] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.746] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\grid_(cm).wmf", dwFileAttributes=0x80) returned 0 [0268.747] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\grid_(cm).wmf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\grid_(cm).wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.747] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.747] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.747] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.747] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.747] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\grid_(inch).wmf", dwFileAttributes=0x80) returned 0 [0268.747] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\grid_(inch).wmf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\grid_(inch).wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.748] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.748] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.748] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.748] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.748] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm", dwFileAttributes=0x80) returned 0 [0268.748] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\hand prints.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.748] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.748] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.749] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.749] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg", dwFileAttributes=0x80) returned 0 [0268.749] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.749] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.749] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.749] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.749] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.750] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Memo.emf", dwFileAttributes=0x80) returned 0 [0268.750] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Memo.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\memo.emf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.750] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.750] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.750] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.750] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.750] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Monet.jpg", dwFileAttributes=0x80) returned 0 [0268.751] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Monet.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\monet.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.751] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.751] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.751] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.751] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Month_Calendar.emf", dwFileAttributes=0x80) returned 0 [0268.752] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Month_Calendar.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\month_calendar.emf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.752] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.752] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.752] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.752] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.752] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Music.emf", dwFileAttributes=0x80) returned 0 [0268.753] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Music.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\music.emf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.753] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.753] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.753] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.753] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Notebook.jpg", dwFileAttributes=0x80) returned 0 [0268.753] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Notebook.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\notebook.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.754] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.754] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.754] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.754] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.754] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm", dwFileAttributes=0x80) returned 0 [0268.754] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orange circles.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.754] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.754] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.755] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.755] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.755] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg", dwFileAttributes=0x80) returned 0 [0268.755] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orangecircles.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.755] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.755] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.755] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.756] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.756] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.htm", dwFileAttributes=0x80) returned 0 [0268.756] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.756] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.756] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.756] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.756] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg", dwFileAttributes=0x80) returned 0 [0268.757] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.757] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.757] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.757] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.757] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Pine_Lumber.jpg", dwFileAttributes=0x80) returned 0 [0268.758] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Pine_Lumber.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\pine_lumber.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.758] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.758] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.758] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.758] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Pretty_Peacock.jpg", dwFileAttributes=0x80) returned 0 [0268.759] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Pretty_Peacock.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\pretty_peacock.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.759] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.759] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.759] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.759] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.760] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Psychedelic.jpg", dwFileAttributes=0x80) returned 0 [0268.760] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Psychedelic.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\psychedelic.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.760] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.760] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.760] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.760] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.761] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.htm", dwFileAttributes=0x80) returned 0 [0268.761] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.761] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.761] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.761] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.761] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.761] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg", dwFileAttributes=0x80) returned 0 [0268.762] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.762] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.762] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.762] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.762] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Sand_Paper.jpg", dwFileAttributes=0x80) returned 0 [0268.762] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Sand_Paper.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\sand_paper.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.763] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.763] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.763] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.763] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.763] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Seyes.emf", dwFileAttributes=0x80) returned 0 [0268.763] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Seyes.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\seyes.emf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.763] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.763] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.764] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.764] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Shades of Blue.htm", dwFileAttributes=0x80) returned 0 [0268.764] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Shades of Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shades of blue.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.764] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.764] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.764] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.764] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.765] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg", dwFileAttributes=0x80) returned 0 [0268.765] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shadesofblue.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.765] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.765] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.765] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.765] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Shorthand.emf", dwFileAttributes=0x80) returned 0 [0268.766] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Shorthand.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shorthand.emf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.766] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.766] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.766] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.766] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Small_News.jpg", dwFileAttributes=0x80) returned 0 [0268.767] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Small_News.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\small_news.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.767] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.767] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.767] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.767] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Soft Blue.htm", dwFileAttributes=0x80) returned 0 [0268.767] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Soft Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\soft blue.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.768] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.768] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.768] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.768] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.768] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg", dwFileAttributes=0x80) returned 0 [0268.768] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\softblue.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.768] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.768] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.769] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.769] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.769] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm", dwFileAttributes=0x80) returned 0 [0268.769] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.770] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.770] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.770] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.770] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.771] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg", dwFileAttributes=0x80) returned 0 [0268.771] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.771] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.771] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.771] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.771] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.772] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stucco.gif", dwFileAttributes=0x80) returned 0 [0268.772] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stucco.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stucco.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.772] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.772] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.773] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.773] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Tanspecks.jpg", dwFileAttributes=0x80) returned 0 [0268.773] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Tanspecks.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\tanspecks.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.773] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.774] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.774] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.774] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Tiki.gif", dwFileAttributes=0x80) returned 0 [0268.774] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Tiki.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\tiki.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.775] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.775] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.775] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.775] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.775] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\To_Do_List.emf", dwFileAttributes=0x80) returned 0 [0268.776] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\To_Do_List.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\to_do_list.emf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.776] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.776] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.776] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.776] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.777] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\White_Chocolate.jpg", dwFileAttributes=0x80) returned 0 [0268.777] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\White_Chocolate.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\white_chocolate.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.777] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.777] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.777] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.777] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.777] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Wrinkled_Paper.gif", dwFileAttributes=0x80) returned 0 [0268.778] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Wrinkled_Paper.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\wrinkled_paper.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.778] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.778] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.778] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0268.778] FindClose (in: hFindFile=0x665d90bc60 | out: hFindFile=0x665d90bc60) returned 1 [0268.779] SetLastError (dwErrCode=0x0) [0268.779] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.781] GetLastError () returned 0x5 [0268.781] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0268.781] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.781] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.781] SetLastError (dwErrCode=0x0) [0268.781] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.782] GetLastError () returned 0x5 [0268.782] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0268.782] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.782] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665d90bc60 [0268.782] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.782] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.782] SetLastError (dwErrCode=0x0) [0268.782] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.782] GetLastError () returned 0x5 [0268.782] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.782] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.782] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\en-US\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90ca40 [0268.782] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.782] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0268.782] FindClose (in: hFindFile=0x665d90ca40 | out: hFindFile=0x665d90ca40) returned 1 [0268.783] SetLastError (dwErrCode=0x0) [0268.783] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\en-US\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.783] GetLastError () returned 0x5 [0268.783] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.783] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.783] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0268.783] FindClose (in: hFindFile=0x665d90bc60 | out: hFindFile=0x665d90bc60) returned 1 [0268.783] SetLastError (dwErrCode=0x0) [0268.783] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.783] GetLastError () returned 0x5 [0268.783] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0268.784] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.784] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.784] SetLastError (dwErrCode=0x0) [0268.784] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.784] GetLastError () returned 0x5 [0268.784] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0268.784] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.784] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665d90ca40 [0268.784] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.784] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.784] SetLastError (dwErrCode=0x0) [0268.784] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\triedit\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.784] GetLastError () returned 0x5 [0268.784] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.784] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.784] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\en-US\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90bc60 [0268.784] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.785] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0268.785] FindClose (in: hFindFile=0x665d90bc60 | out: hFindFile=0x665d90bc60) returned 1 [0268.785] SetLastError (dwErrCode=0x0) [0268.785] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\en-US\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\triedit\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.785] GetLastError () returned 0x5 [0268.785] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.785] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.785] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0268.785] FindClose (in: hFindFile=0x665d90ca40 | out: hFindFile=0x665d90ca40) returned 1 [0268.785] SetLastError (dwErrCode=0x0) [0268.785] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\triedit\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.785] GetLastError () returned 0x5 [0268.785] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0268.785] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.785] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.785] SetLastError (dwErrCode=0x0) [0268.785] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.785] GetLastError () returned 0x5 [0268.786] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0268.786] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.786] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VC\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665d90cb00 [0268.786] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.786] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.786] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.786] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0268.786] FindClose (in: hFindFile=0x665d90cb00 | out: hFindFile=0x665d90cb00) returned 1 [0268.786] SetLastError (dwErrCode=0x0) [0268.786] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VC\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.786] GetLastError () returned 0x5 [0268.786] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0268.786] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.786] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.786] SetLastError (dwErrCode=0x0) [0268.786] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.786] GetLastError () returned 0x5 [0268.786] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0268.786] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.786] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VGX\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665d90caa0 [0268.787] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.787] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.787] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0268.787] FindClose (in: hFindFile=0x665d90caa0 | out: hFindFile=0x665d90caa0) returned 1 [0268.787] SetLastError (dwErrCode=0x0) [0268.787] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VGX\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\vgx\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.787] GetLastError () returned 0x5 [0268.787] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0268.787] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.787] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.787] SetLastError (dwErrCode=0x0) [0268.787] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.787] GetLastError () returned 0x5 [0268.787] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0268.787] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.787] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665d90bde0 [0268.787] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.787] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.787] SetLastError (dwErrCode=0x0) [0268.787] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.788] GetLastError () returned 0x5 [0268.788] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.788] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.788] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90c260 [0268.788] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.788] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.788] SetLastError (dwErrCode=0x0) [0268.788] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.789] GetLastError () returned 0x5 [0268.789] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0268.789] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.789] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c5c0 [0268.789] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0268.789] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0268.789] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0268.789] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0268.789] FindClose (in: hFindFile=0x665d90c5c0 | out: hFindFile=0x665d90c5c0) returned 1 [0268.789] SetLastError (dwErrCode=0x0) [0268.789] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.789] GetLastError () returned 0x5 [0268.789] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0268.789] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.789] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.789] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.789] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.789] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0268.789] FindClose (in: hFindFile=0x665d90c260 | out: hFindFile=0x665d90c260) returned 1 [0268.789] SetLastError (dwErrCode=0x0) [0268.789] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.790] GetLastError () returned 0x5 [0268.790] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.790] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.790] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.790] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.790] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.790] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb", dwFileAttributes=0x80) returned 0 [0268.790] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee100.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.790] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.790] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.791] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.791] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.791] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb", dwFileAttributes=0x80) returned 0 [0268.791] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee90.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.791] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.791] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.792] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0268.792] FindClose (in: hFindFile=0x665d90bde0 | out: hFindFile=0x665d90bde0) returned 1 [0268.792] SetLastError (dwErrCode=0x0) [0268.792] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.792] GetLastError () returned 0x5 [0268.792] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0268.792] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.792] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0268.792] FindClose (in: hFindFile=0x665d90c200 | out: hFindFile=0x665d90c200) returned 1 [0268.792] SetLastError (dwErrCode=0x0) [0268.792] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.792] GetLastError () returned 0x5 [0268.792] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0268.792] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.792] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.792] SetLastError (dwErrCode=0x0) [0268.792] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.792] GetLastError () returned 0x5 [0268.792] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0268.793] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.793] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Services\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665d90c620 [0268.793] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.793] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.793] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Services\\verisign.bmp", dwFileAttributes=0x80) returned 0 [0268.793] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.793] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.793] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.794] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0268.794] FindClose (in: hFindFile=0x665d90c620 | out: hFindFile=0x665d90c620) returned 1 [0268.794] SetLastError (dwErrCode=0x0) [0268.794] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Services\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\services\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.794] GetLastError () returned 0x5 [0268.794] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0268.794] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.794] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.794] SetLastError (dwErrCode=0x0) [0268.794] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.794] GetLastError () returned 0x5 [0268.794] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0268.794] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.794] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665d90cd40 [0268.794] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.794] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.794] SetLastError (dwErrCode=0x0) [0268.794] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\system\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.795] GetLastError () returned 0x5 [0268.795] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0268.795] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.795] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665d90c8c0 [0268.795] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.795] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.795] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc", dwFileAttributes=0x80) returned 0 [0268.796] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adojavas.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.796] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.796] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.796] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.796] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\adovbs.inc", dwFileAttributes=0x80) returned 0 [0268.797] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\adovbs.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adovbs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.797] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.797] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.797] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.797] SetLastError (dwErrCode=0x0) [0268.797] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\system\\ado\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.797] GetLastError () returned 0x5 [0268.797] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.797] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.797] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\en-US\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90c4a0 [0268.797] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.797] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.797] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0268.797] FindClose (in: hFindFile=0x665d90c4a0 | out: hFindFile=0x665d90c4a0) returned 1 [0268.798] SetLastError (dwErrCode=0x0) [0268.798] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\en-US\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\system\\ado\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.798] GetLastError () returned 0x5 [0268.798] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.798] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.798] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.798] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.798] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.798] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.798] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb", dwFileAttributes=0x80) returned 0 [0268.798] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado20.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.800] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.800] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.800] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.800] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.800] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb", dwFileAttributes=0x80) returned 0 [0268.800] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado21.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.801] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.801] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.801] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.801] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado25.tlb", dwFileAttributes=0x80) returned 0 [0268.801] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado25.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado25.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.801] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.801] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.802] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.802] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.802] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb", dwFileAttributes=0x80) returned 0 [0268.802] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado26.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.802] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.802] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.802] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.802] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb", dwFileAttributes=0x80) returned 0 [0268.803] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado27.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.803] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.803] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.803] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.803] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.804] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb", dwFileAttributes=0x80) returned 0 [0268.804] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado28.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.804] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.804] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.804] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.804] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.804] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado60.tlb", dwFileAttributes=0x80) returned 0 [0268.805] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado60.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado60.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.805] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.805] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.805] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.805] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.805] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadomd28.tlb", dwFileAttributes=0x80) returned 0 [0268.805] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadomd28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd28.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.805] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.806] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.806] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.806] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.806] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msador28.tlb", dwFileAttributes=0x80) returned 0 [0268.806] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msador28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msador28.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.806] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.806] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.807] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.807] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.807] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.807] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadox28.tlb", dwFileAttributes=0x80) returned 0 [0268.807] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadox28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadox28.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.807] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.807] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.807] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.807] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0268.807] FindClose (in: hFindFile=0x665d90c8c0 | out: hFindFile=0x665d90c8c0) returned 1 [0268.807] SetLastError (dwErrCode=0x0) [0268.807] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\system\\ado\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.808] GetLastError () returned 0x5 [0268.808] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0268.808] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.808] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.808] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.808] SetLastError (dwErrCode=0x0) [0268.808] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\system\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.808] GetLastError () returned 0x5 [0268.808] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0268.808] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.808] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\en-US\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665d90c4a0 [0268.808] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.808] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.808] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0268.808] FindClose (in: hFindFile=0x665d90c4a0 | out: hFindFile=0x665d90c4a0) returned 1 [0268.808] SetLastError (dwErrCode=0x0) [0268.808] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\en-US\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\system\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.809] GetLastError () returned 0x5 [0268.809] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0268.809] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.809] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.809] SetLastError (dwErrCode=0x0) [0268.809] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\system\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.809] GetLastError () returned 0x5 [0268.809] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0268.809] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.809] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665d90c620 [0268.810] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.810] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.810] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.810] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc", dwFileAttributes=0x80) returned 0 [0268.810] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcjavas.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.810] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.810] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.810] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.810] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.811] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc", dwFileAttributes=0x80) returned 0 [0268.811] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcvbs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.811] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.811] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.811] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.811] SetLastError (dwErrCode=0x0) [0268.811] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\system\\msadc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.812] GetLastError () returned 0x5 [0268.812] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.812] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.812] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90cce0 [0268.812] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.812] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.812] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.812] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.812] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.812] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.812] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0268.812] FindClose (in: hFindFile=0x665d90cce0 | out: hFindFile=0x665d90cce0) returned 1 [0268.812] SetLastError (dwErrCode=0x0) [0268.812] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.812] GetLastError () returned 0x5 [0268.812] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.812] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.812] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.812] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.813] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.813] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.813] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.813] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.813] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.813] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.813] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.813] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.813] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.813] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0268.813] FindClose (in: hFindFile=0x665d90c620 | out: hFindFile=0x665d90c620) returned 1 [0268.813] SetLastError (dwErrCode=0x0) [0268.813] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\system\\msadc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.813] GetLastError () returned 0x5 [0268.813] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0268.813] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.813] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.813] SetLastError (dwErrCode=0x0) [0268.813] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\system\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.813] GetLastError () returned 0x5 [0268.813] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0268.813] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.813] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665d90bc60 [0268.813] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.814] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.814] SetLastError (dwErrCode=0x0) [0268.814] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\system\\ole db\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.814] GetLastError () returned 0x5 [0268.814] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.814] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.814] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90c380 [0268.814] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.814] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.814] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.814] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.814] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqloledb.rll.mui", dwFileAttributes=0x80) returned 0 [0268.814] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqloledb.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqloledb.rll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.815] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.815] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.815] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.815] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqlxmlx.rll.mui", dwFileAttributes=0x80) returned 0 [0268.815] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqlxmlx.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqlxmlx.rll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.816] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.816] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.816] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0268.816] FindClose (in: hFindFile=0x665d90c380 | out: hFindFile=0x665d90c380) returned 1 [0268.816] SetLastError (dwErrCode=0x0) [0268.816] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.816] GetLastError () returned 0x5 [0268.816] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.816] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.816] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.816] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.816] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.816] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.816] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.816] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.816] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.816] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.816] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.816] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc", dwFileAttributes=0x80) returned 0 [0268.817] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbjvs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.817] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.817] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.817] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.817] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc", dwFileAttributes=0x80) returned 0 [0268.818] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbvbs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.818] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.818] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.819] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.819] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.819] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.rll", dwFileAttributes=0x80) returned 0 [0268.819] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.rll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.819] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.819] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.820] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.820] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.820] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.820] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.rll", dwFileAttributes=0x80) returned 0 [0268.820] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.rll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.820] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.820] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.820] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0268.821] FindClose (in: hFindFile=0x665d90bc60 | out: hFindFile=0x665d90bc60) returned 1 [0268.821] SetLastError (dwErrCode=0x0) [0268.821] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\system\\ole db\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.821] GetLastError () returned 0x5 [0268.821] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0268.821] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.821] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.821] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.821] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0268.821] FindClose (in: hFindFile=0x665d90cd40 | out: hFindFile=0x665d90cd40) returned 1 [0268.821] SetLastError (dwErrCode=0x0) [0268.821] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\system\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.821] GetLastError () returned 0x5 [0268.821] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0268.821] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.821] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0268.821] FindClose (in: hFindFile=0x665d90d0a0 | out: hFindFile=0x665d90d0a0) returned 1 [0268.821] SetLastError (dwErrCode=0x0) [0268.821] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.822] GetLastError () returned 0x5 [0268.822] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.822] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.822] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0268.822] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0268.822] SetLastError (dwErrCode=0x0) [0268.822] CreateFileW (lpFileName="C:\\Program Files\\RyukReadMe.txt" (normalized: "c:\\program files\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.822] GetLastError () returned 0x5 [0268.822] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.822] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.822] FindFirstFileW (in: lpFileName="C:\\Program Files\\Internet Explorer\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665d90c0e0 [0268.823] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.823] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.823] SetLastError (dwErrCode=0x0) [0268.823] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\RyukReadMe.txt" (normalized: "c:\\program files\\internet explorer\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.823] GetLastError () returned 0x5 [0268.823] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0268.823] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.823] FindFirstFileW (in: lpFileName="C:\\Program Files\\Internet Explorer\\en-US\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665d90bde0 [0268.823] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.823] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.823] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.823] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.823] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0268.824] FindClose (in: hFindFile=0x665d90bde0 | out: hFindFile=0x665d90bde0) returned 1 [0268.824] SetLastError (dwErrCode=0x0) [0268.824] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\en-US\\RyukReadMe.txt" (normalized: "c:\\program files\\internet explorer\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.824] GetLastError () returned 0x5 [0268.824] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0268.824] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.824] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.824] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.824] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.824] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.824] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.824] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.824] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.824] SetLastError (dwErrCode=0x0) [0268.824] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\RyukReadMe.txt" (normalized: "c:\\program files\\internet explorer\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.824] GetLastError () returned 0x5 [0268.824] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0268.825] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.825] FindFirstFileW (in: lpFileName="C:\\Program Files\\Internet Explorer\\images\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665d90c740 [0268.825] FindNextFileW (in: hFindFile=0x665d90c740, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.825] FindNextFileW (in: hFindFile=0x665d90c740, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.825] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.825] SetFileAttributesW (lpFileName="C:\\Program Files\\Internet Explorer\\images\\bing.ico", dwFileAttributes=0x80) returned 0 [0268.825] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\images\\bing.ico" (normalized: "c:\\program files\\internet explorer\\images\\bing.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.826] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.826] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.826] FindNextFileW (in: hFindFile=0x665d90c740, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0268.826] FindClose (in: hFindFile=0x665d90c740 | out: hFindFile=0x665d90c740) returned 1 [0268.826] SetLastError (dwErrCode=0x0) [0268.826] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\images\\RyukReadMe.txt" (normalized: "c:\\program files\\internet explorer\\images\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.826] GetLastError () returned 0x5 [0268.826] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0268.826] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.826] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.826] SetLastError (dwErrCode=0x0) [0268.826] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\RyukReadMe.txt" (normalized: "c:\\program files\\internet explorer\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.827] GetLastError () returned 0x5 [0268.827] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0268.827] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.827] FindFirstFileW (in: lpFileName="C:\\Program Files\\Internet Explorer\\SIGNUP\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665d90c8c0 [0268.827] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.827] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.827] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.827] SetFileAttributesW (lpFileName="C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins", dwFileAttributes=0x80) returned 0 [0268.828] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins" (normalized: "c:\\program files\\internet explorer\\signup\\install.ins"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.828] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.828] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.828] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0268.828] FindClose (in: hFindFile=0x665d90c8c0 | out: hFindFile=0x665d90c8c0) returned 1 [0268.828] SetLastError (dwErrCode=0x0) [0268.828] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\SIGNUP\\RyukReadMe.txt" (normalized: "c:\\program files\\internet explorer\\signup\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.828] GetLastError () returned 0x5 [0268.828] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0268.828] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.828] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.828] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.828] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0268.828] FindClose (in: hFindFile=0x665d90c0e0 | out: hFindFile=0x665d90c0e0) returned 1 [0268.829] SetLastError (dwErrCode=0x0) [0268.829] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\RyukReadMe.txt" (normalized: "c:\\program files\\internet explorer\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.829] GetLastError () returned 0x5 [0268.829] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.829] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.829] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0268.829] SetLastError (dwErrCode=0x0) [0268.829] CreateFileW (lpFileName="C:\\Program Files\\RyukReadMe.txt" (normalized: "c:\\program files\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.829] GetLastError () returned 0x5 [0268.829] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.829] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.829] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665d90c5c0 [0268.829] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.829] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.829] SetLastError (dwErrCode=0x0) [0268.829] CreateFileW (lpFileName="C:\\Program Files\\Java\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.829] GetLastError () returned 0x5 [0268.829] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0268.830] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.830] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665d90d0a0 [0268.830] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.830] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.830] SetLastError (dwErrCode=0x0) [0268.830] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.830] GetLastError () returned 0x5 [0268.830] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0268.830] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.830] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665d90c1a0 [0268.831] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.831] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.831] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.831] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.831] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.831] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.831] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.831] SetLastError (dwErrCode=0x0) [0268.831] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.831] GetLastError () returned 0x5 [0268.831] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.831] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.831] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\dtplugin\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90bde0 [0268.832] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.832] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.832] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.832] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0268.832] FindClose (in: hFindFile=0x665d90bde0 | out: hFindFile=0x665d90bde0) returned 1 [0268.832] SetLastError (dwErrCode=0x0) [0268.832] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\dtplugin\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\bin\\dtplugin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.832] GetLastError () returned 0x5 [0268.832] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.832] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.832] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.832] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.832] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.832] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.832] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.832] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.832] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.832] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.832] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.832] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.832] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.832] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.832] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.832] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.832] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.832] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.832] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.832] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.832] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.832] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\javacpl.cpl", dwFileAttributes=0x80) returned 0 [0268.833] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\javacpl.cpl" (normalized: "c:\\program files\\java\\jre1.8.0_131\\bin\\javacpl.cpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.833] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.833] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.833] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.833] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.833] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.833] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.833] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.833] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.833] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.833] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.833] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.833] SetLastError (dwErrCode=0x0) [0268.834] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.834] GetLastError () returned 0x5 [0268.834] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.834] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.834] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\plugin2\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90c740 [0268.834] FindNextFileW (in: hFindFile=0x665d90c740, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.834] FindNextFileW (in: hFindFile=0x665d90c740, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.835] SetLastError (dwErrCode=0x0) [0268.835] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\plugin2\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\bin\\plugin2\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.835] GetLastError () returned 0x5 [0268.835] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.835] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.835] SetLastError (dwErrCode=0x0) [0268.835] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.835] GetLastError () returned 0x5 [0268.836] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.836] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.836] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\server\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90cda0 [0268.836] FindNextFileW (in: hFindFile=0x665d90cda0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.836] FindNextFileW (in: hFindFile=0x665d90cda0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.836] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\server\\classes.jsa", dwFileAttributes=0x80) returned 0 [0268.836] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\server\\classes.jsa" (normalized: "c:\\program files\\java\\jre1.8.0_131\\bin\\server\\classes.jsa"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.836] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.836] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.837] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\server\\Xusage.txt", dwFileAttributes=0x80) returned 0 [0268.837] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\server\\Xusage.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\bin\\server\\xusage.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.837] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.837] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.838] SetLastError (dwErrCode=0x0) [0268.838] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\server\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\bin\\server\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.838] GetLastError () returned 0x5 [0268.838] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.838] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.838] SetLastError (dwErrCode=0x0) [0268.838] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.838] GetLastError () returned 0x5 [0268.838] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0268.838] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.838] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\COPYRIGHT", dwFileAttributes=0x80) returned 0 [0268.839] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\COPYRIGHT" (normalized: "c:\\program files\\java\\jre1.8.0_131\\copyright"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.839] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.839] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.839] SetLastError (dwErrCode=0x0) [0268.839] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.839] GetLastError () returned 0x5 [0268.839] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0268.839] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.839] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665d90bc60 [0268.839] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.839] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.840] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\accessibility.properties", dwFileAttributes=0x80) returned 0 [0268.840] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\accessibility.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\accessibility.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.840] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.840] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.840] SetLastError (dwErrCode=0x0) [0268.840] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.841] GetLastError () returned 0x5 [0268.841] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.841] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.841] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\amd64\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90cc20 [0268.841] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.841] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.841] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\amd64\\jvm.cfg", dwFileAttributes=0x80) returned 0 [0268.841] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\amd64\\jvm.cfg" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\amd64\\jvm.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.841] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.841] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.842] SetLastError (dwErrCode=0x0) [0268.842] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\amd64\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\amd64\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.842] GetLastError () returned 0x5 [0268.842] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.842] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.842] SetLastError (dwErrCode=0x0) [0268.842] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.842] GetLastError () returned 0x5 [0268.842] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.842] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.842] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\applet\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90bcc0 [0268.842] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.842] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0268.842] FindClose (in: hFindFile=0x665d90bcc0 | out: hFindFile=0x665d90bcc0) returned 1 [0268.842] SetLastError (dwErrCode=0x0) [0268.843] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\applet\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\applet\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.843] GetLastError () returned 0x5 [0268.843] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.843] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.843] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.843] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\calendars.properties", dwFileAttributes=0x80) returned 0 [0268.843] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\calendars.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\calendars.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.843] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.843] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.844] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\charsets.jar", dwFileAttributes=0x80) returned 0 [0268.844] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\charsets.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\charsets.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.844] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.844] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.844] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\classlist", dwFileAttributes=0x80) returned 0 [0268.845] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\classlist" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\classlist"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.845] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.845] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.846] SetLastError (dwErrCode=0x0) [0268.846] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.846] GetLastError () returned 0x5 [0268.846] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.846] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.846] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\cmm\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90c980 [0268.846] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.846] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.846] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.846] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\cmm\\CIEXYZ.pf", dwFileAttributes=0x80) returned 0 [0268.846] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\cmm\\CIEXYZ.pf" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\cmm\\ciexyz.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.847] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.847] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.847] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\cmm\\GRAY.pf", dwFileAttributes=0x80) returned 0 [0268.847] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\cmm\\GRAY.pf" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\cmm\\gray.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.847] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.848] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.848] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\cmm\\LINEAR_RGB.pf", dwFileAttributes=0x80) returned 0 [0268.848] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\cmm\\LINEAR_RGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\cmm\\linear_rgb.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.848] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.848] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.849] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.849] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\cmm\\PYCC.pf", dwFileAttributes=0x80) returned 0 [0268.849] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\cmm\\PYCC.pf" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\cmm\\pycc.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.849] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.849] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.849] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.850] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\cmm\\sRGB.pf", dwFileAttributes=0x80) returned 0 [0268.850] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\cmm\\sRGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\cmm\\srgb.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.850] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.850] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.850] SetLastError (dwErrCode=0x0) [0268.850] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\cmm\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\cmm\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.850] GetLastError () returned 0x5 [0268.850] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.850] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.851] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\content-types.properties", dwFileAttributes=0x80) returned 0 [0268.851] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\content-types.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\content-types.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.851] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.851] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.851] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\currency.data", dwFileAttributes=0x80) returned 0 [0268.852] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\currency.data" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\currency.data"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.852] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.852] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.852] SetLastError (dwErrCode=0x0) [0268.852] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.852] GetLastError () returned 0x5 [0268.852] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.852] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.852] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90bcc0 [0268.853] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.853] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.853] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\ffjcext.zip", dwFileAttributes=0x80) returned 0 [0268.854] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\deploy\\ffjcext.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.854] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.854] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.854] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages.properties", dwFileAttributes=0x80) returned 0 [0268.854] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\deploy\\messages.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.855] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.855] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.855] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_de.properties", dwFileAttributes=0x80) returned 0 [0268.855] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_de.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\deploy\\messages_de.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.855] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.856] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.856] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.856] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_es.properties", dwFileAttributes=0x80) returned 0 [0268.856] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_es.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\deploy\\messages_es.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.856] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.856] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.857] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_fr.properties", dwFileAttributes=0x80) returned 0 [0268.857] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_fr.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\deploy\\messages_fr.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.857] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.857] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.857] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_it.properties", dwFileAttributes=0x80) returned 0 [0268.858] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_it.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\deploy\\messages_it.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.858] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.858] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.858] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.859] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_ja.properties", dwFileAttributes=0x80) returned 0 [0268.859] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_ja.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\deploy\\messages_ja.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.859] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.859] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.859] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.859] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_ko.properties", dwFileAttributes=0x80) returned 0 [0268.860] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_ko.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\deploy\\messages_ko.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.860] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.860] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.860] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_pt_BR.properties", dwFileAttributes=0x80) returned 0 [0268.860] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_pt_BR.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\deploy\\messages_pt_br.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.861] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.861] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.861] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_sv.properties", dwFileAttributes=0x80) returned 0 [0268.862] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_sv.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\deploy\\messages_sv.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.862] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.862] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.862] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.863] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_zh_CN.properties", dwFileAttributes=0x80) returned 0 [0268.863] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_zh_CN.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\deploy\\messages_zh_cn.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.863] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.863] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.863] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.863] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_zh_HK.properties", dwFileAttributes=0x80) returned 0 [0268.864] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_zh_HK.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\deploy\\messages_zh_hk.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.864] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.864] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.864] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.864] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_zh_TW.properties", dwFileAttributes=0x80) returned 0 [0268.865] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_zh_TW.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\deploy\\messages_zh_tw.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.865] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.865] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.865] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.865] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\splash.gif", dwFileAttributes=0x80) returned 0 [0268.865] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\splash.gif" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\deploy\\splash.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.866] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.866] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.866] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.866] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\splash@2x.gif", dwFileAttributes=0x80) returned 0 [0268.866] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\splash@2x.gif" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\deploy\\splash@2x.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.866] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.866] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.867] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\splash_11-lic.gif", dwFileAttributes=0x80) returned 0 [0268.867] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\splash_11-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\deploy\\splash_11-lic.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.867] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.867] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.867] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.868] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\splash_11@2x-lic.gif", dwFileAttributes=0x80) returned 0 [0268.868] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\splash_11@2x-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\deploy\\splash_11@2x-lic.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.868] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.868] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.869] SetLastError (dwErrCode=0x0) [0268.869] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\deploy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.872] GetLastError () returned 0x5 [0268.872] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.872] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.872] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy.jar", dwFileAttributes=0x80) returned 0 [0268.872] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\deploy.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.872] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.872] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.873] SetLastError (dwErrCode=0x0) [0268.873] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.873] GetLastError () returned 0x5 [0268.873] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.873] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.873] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90c020 [0268.874] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.874] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.874] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\access-bridge-64.jar", dwFileAttributes=0x80) returned 0 [0268.874] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\access-bridge-64.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ext\\access-bridge-64.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.874] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.874] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.875] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\cldrdata.jar", dwFileAttributes=0x80) returned 0 [0268.875] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\cldrdata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ext\\cldrdata.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.875] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.875] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.875] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.876] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\dnsns.jar", dwFileAttributes=0x80) returned 0 [0268.876] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ext\\dnsns.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.876] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.876] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.876] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\jaccess.jar", dwFileAttributes=0x80) returned 0 [0268.877] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ext\\jaccess.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.877] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.877] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.877] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\jfxrt.jar", dwFileAttributes=0x80) returned 0 [0268.878] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\jfxrt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ext\\jfxrt.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.878] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.878] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.878] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\localedata.jar", dwFileAttributes=0x80) returned 0 [0268.879] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\localedata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ext\\localedata.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.879] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.879] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.879] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\meta-index", dwFileAttributes=0x80) returned 0 [0268.879] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ext\\meta-index"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.879] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.880] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.880] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.880] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\nashorn.jar", dwFileAttributes=0x80) returned 0 [0268.880] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\nashorn.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ext\\nashorn.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.880] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.880] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.881] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.881] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\sunec.jar", dwFileAttributes=0x80) returned 0 [0268.881] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\sunec.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ext\\sunec.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.881] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.881] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.881] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\sunjce_provider.jar", dwFileAttributes=0x80) returned 0 [0268.882] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ext\\sunjce_provider.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.882] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.882] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.882] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\sunmscapi.jar", dwFileAttributes=0x80) returned 0 [0268.883] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ext\\sunmscapi.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.883] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.883] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.883] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\sunpkcs11.jar", dwFileAttributes=0x80) returned 0 [0268.883] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ext\\sunpkcs11.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.884] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.884] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.884] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\zipfs.jar", dwFileAttributes=0x80) returned 0 [0268.884] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ext\\zipfs.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.884] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.884] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.885] SetLastError (dwErrCode=0x0) [0268.885] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ext\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.888] GetLastError () returned 0x5 [0268.888] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.888] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.888] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.888] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\flavormap.properties", dwFileAttributes=0x80) returned 0 [0268.888] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\flavormap.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\flavormap.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.888] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.888] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.889] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fontconfig.bfc", dwFileAttributes=0x80) returned 0 [0268.889] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fontconfig.bfc" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\fontconfig.bfc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.889] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.889] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.889] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fontconfig.properties.src", dwFileAttributes=0x80) returned 0 [0268.890] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fontconfig.properties.src" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\fontconfig.properties.src"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.890] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.890] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.890] SetLastError (dwErrCode=0x0) [0268.890] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.890] GetLastError () returned 0x5 [0268.890] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.890] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.890] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fonts\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90c440 [0268.891] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.891] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.891] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fonts\\LucidaBrightDemiBold.ttf", dwFileAttributes=0x80) returned 0 [0268.892] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fonts\\LucidaBrightDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\fonts\\lucidabrightdemibold.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.892] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.892] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.892] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.892] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fonts\\LucidaBrightDemiItalic.ttf", dwFileAttributes=0x80) returned 0 [0268.893] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fonts\\LucidaBrightDemiItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\fonts\\lucidabrightdemiitalic.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.893] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.893] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.893] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.893] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fonts\\LucidaBrightItalic.ttf", dwFileAttributes=0x80) returned 0 [0268.894] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fonts\\LucidaBrightItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\fonts\\lucidabrightitalic.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.894] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.894] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.895] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.895] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fonts\\LucidaBrightRegular.ttf", dwFileAttributes=0x80) returned 0 [0268.895] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fonts\\LucidaBrightRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\fonts\\lucidabrightregular.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.895] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.895] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.896] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.896] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fonts\\LucidaSansDemiBold.ttf", dwFileAttributes=0x80) returned 0 [0268.896] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fonts\\LucidaSansDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\fonts\\lucidasansdemibold.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.896] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.896] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.897] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.897] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fonts\\LucidaSansRegular.ttf", dwFileAttributes=0x80) returned 0 [0268.897] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fonts\\LucidaSansRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\fonts\\lucidasansregular.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.898] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.898] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.898] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.898] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fonts\\LucidaTypewriterBold.ttf", dwFileAttributes=0x80) returned 0 [0268.898] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fonts\\LucidaTypewriterBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\fonts\\lucidatypewriterbold.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.899] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.899] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.899] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.899] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fonts\\LucidaTypewriterRegular.ttf", dwFileAttributes=0x80) returned 0 [0268.899] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fonts\\LucidaTypewriterRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\fonts\\lucidatypewriterregular.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.899] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.899] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.900] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0268.900] FindClose (in: hFindFile=0x665d90c440 | out: hFindFile=0x665d90c440) returned 1 [0268.900] SetLastError (dwErrCode=0x0) [0268.900] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fonts\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\fonts\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.903] GetLastError () returned 0x5 [0268.903] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.903] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.903] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.903] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.903] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\hijrah-config-umalqura.properties", dwFileAttributes=0x80) returned 0 [0268.904] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\hijrah-config-umalqura.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\hijrah-config-umalqura.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.904] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.904] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.904] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.904] SetLastError (dwErrCode=0x0) [0268.904] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.904] GetLastError () returned 0x5 [0268.904] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.904] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.904] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90ca40 [0268.904] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.904] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.904] SetLastError (dwErrCode=0x0) [0268.904] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\images\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.905] GetLastError () returned 0x5 [0268.905] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0268.905] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.905] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c020 [0268.905] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0268.905] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0268.905] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.906] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\cursors.properties", dwFileAttributes=0x80) returned 0 [0268.906] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\cursors.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\images\\cursors\\cursors.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.906] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.906] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.906] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0268.906] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.906] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\invalid32x32.gif", dwFileAttributes=0x80) returned 0 [0268.907] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\images\\cursors\\invalid32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.907] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.907] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.907] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0268.907] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.907] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\win32_CopyDrop32x32.gif", dwFileAttributes=0x80) returned 0 [0268.908] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\images\\cursors\\win32_copydrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.908] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.908] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.908] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0268.908] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.908] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif", dwFileAttributes=0x80) returned 0 [0268.909] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\images\\cursors\\win32_copynodrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.909] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.909] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.909] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0268.909] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.909] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\win32_LinkDrop32x32.gif", dwFileAttributes=0x80) returned 0 [0268.909] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\images\\cursors\\win32_linkdrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.910] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.910] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.910] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0268.910] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.910] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif", dwFileAttributes=0x80) returned 0 [0268.910] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\images\\cursors\\win32_linknodrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.910] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.910] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.911] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0268.911] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.911] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\win32_MoveDrop32x32.gif", dwFileAttributes=0x80) returned 0 [0268.911] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\images\\cursors\\win32_movedrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.911] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.911] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.911] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0268.911] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.912] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif", dwFileAttributes=0x80) returned 0 [0268.912] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\images\\cursors\\win32_movenodrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.912] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.912] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.912] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0268.912] FindClose (in: hFindFile=0x665d90c020 | out: hFindFile=0x665d90c020) returned 1 [0268.913] SetLastError (dwErrCode=0x0) [0268.913] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\images\\cursors\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.915] GetLastError () returned 0x5 [0268.915] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0268.916] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.916] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0268.916] FindClose (in: hFindFile=0x665d90ca40 | out: hFindFile=0x665d90ca40) returned 1 [0268.916] SetLastError (dwErrCode=0x0) [0268.916] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\images\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.916] GetLastError () returned 0x5 [0268.916] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.916] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.916] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.916] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.916] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\javafx.properties", dwFileAttributes=0x80) returned 0 [0268.916] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\javafx.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\javafx.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.917] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.917] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.917] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.917] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.917] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\javaws.jar", dwFileAttributes=0x80) returned 0 [0268.917] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\javaws.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\javaws.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.917] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.917] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.918] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.918] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.918] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\jce.jar", dwFileAttributes=0x80) returned 0 [0268.918] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\jce.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\jce.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.918] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.918] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.918] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.918] SetLastError (dwErrCode=0x0) [0268.918] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.919] GetLastError () returned 0x5 [0268.919] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.919] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.919] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\jfr\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90c380 [0268.919] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.919] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.919] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.919] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\jfr\\default.jfc", dwFileAttributes=0x80) returned 0 [0268.919] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\jfr\\default.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\jfr\\default.jfc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.920] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.920] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.920] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.920] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.920] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\jfr\\profile.jfc", dwFileAttributes=0x80) returned 0 [0268.921] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\jfr\\profile.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\jfr\\profile.jfc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.921] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.921] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.921] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0268.921] FindClose (in: hFindFile=0x665d90c380 | out: hFindFile=0x665d90c380) returned 1 [0268.921] SetLastError (dwErrCode=0x0) [0268.921] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\jfr\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\jfr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.921] GetLastError () returned 0x5 [0268.921] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.921] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.922] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.922] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.922] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\jfr.jar", dwFileAttributes=0x80) returned 0 [0268.922] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\jfr.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.922] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.922] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.922] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.922] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.923] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\jfxswt.jar", dwFileAttributes=0x80) returned 0 [0268.923] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\jfxswt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\jfxswt.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.923] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.923] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.923] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.923] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.924] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\jsse.jar", dwFileAttributes=0x80) returned 0 [0268.924] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\jsse.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.924] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.924] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.924] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.924] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.925] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\jvm.hprof.txt", dwFileAttributes=0x80) returned 0 [0268.925] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\jvm.hprof.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\jvm.hprof.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.925] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.925] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.925] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.925] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.926] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\logging.properties", dwFileAttributes=0x80) returned 0 [0268.926] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\logging.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\logging.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.926] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.926] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.926] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.926] SetLastError (dwErrCode=0x0) [0268.926] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.926] GetLastError () returned 0x5 [0268.926] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.926] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.926] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\management\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90bcc0 [0268.927] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.927] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.927] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.927] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\management\\jmxremote.access", dwFileAttributes=0x80) returned 0 [0268.928] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\management\\jmxremote.access" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\management\\jmxremote.access"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.928] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.928] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.928] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.928] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.928] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\management\\jmxremote.password.template", dwFileAttributes=0x80) returned 0 [0268.928] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\management\\jmxremote.password.template" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\management\\jmxremote.password.template"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.929] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.929] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.929] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.929] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.929] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\management\\management.properties", dwFileAttributes=0x80) returned 0 [0268.929] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\management\\management.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\management\\management.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.929] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.929] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.930] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.930] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.930] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\management\\snmp.acl.template", dwFileAttributes=0x80) returned 0 [0268.930] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\management\\snmp.acl.template" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\management\\snmp.acl.template"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.930] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.930] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.930] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0268.931] FindClose (in: hFindFile=0x665d90bcc0 | out: hFindFile=0x665d90bcc0) returned 1 [0268.931] SetLastError (dwErrCode=0x0) [0268.931] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\management\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\management\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.934] GetLastError () returned 0x5 [0268.934] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.934] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.934] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.934] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.934] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\management-agent.jar", dwFileAttributes=0x80) returned 0 [0268.934] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\management-agent.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\management-agent.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.934] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.934] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.935] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.935] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.935] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\meta-index", dwFileAttributes=0x80) returned 0 [0268.935] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\meta-index"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.935] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.935] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.936] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.936] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.936] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\net.properties", dwFileAttributes=0x80) returned 0 [0268.936] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\net.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\net.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.936] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.936] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.936] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.936] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.937] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\plugin.jar", dwFileAttributes=0x80) returned 0 [0268.937] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\plugin.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\plugin.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.937] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.937] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.937] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.937] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.938] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\psfont.properties.ja", dwFileAttributes=0x80) returned 0 [0268.938] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\psfont.properties.ja" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\psfont.properties.ja"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.938] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.938] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.938] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.938] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.938] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\psfontj2d.properties", dwFileAttributes=0x80) returned 0 [0268.939] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\psfontj2d.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\psfontj2d.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.939] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.939] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.939] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.939] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\resources.jar", dwFileAttributes=0x80) returned 0 [0268.940] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\resources.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\resources.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.940] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.940] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.940] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.940] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.940] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\rt.jar", dwFileAttributes=0x80) returned 0 [0268.940] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\rt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\rt.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.941] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.941] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.941] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.941] SetLastError (dwErrCode=0x0) [0268.941] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.941] GetLastError () returned 0x5 [0268.941] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.941] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.941] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90bcc0 [0268.942] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.942] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.942] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.942] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\blacklist", dwFileAttributes=0x80) returned 0 [0268.942] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\blacklist" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\security\\blacklist"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.942] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.942] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.943] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.943] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.943] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\blacklisted.certs", dwFileAttributes=0x80) returned 0 [0268.943] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\blacklisted.certs" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\security\\blacklisted.certs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.943] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.943] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.943] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.944] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.944] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\cacerts", dwFileAttributes=0x80) returned 0 [0268.944] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\cacerts" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\security\\cacerts"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.944] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.944] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.944] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.944] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.945] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\java.policy", dwFileAttributes=0x80) returned 0 [0268.945] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\java.policy" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\security\\java.policy"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.945] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.945] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.945] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.945] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.945] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\java.security", dwFileAttributes=0x80) returned 0 [0268.946] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\java.security" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\security\\java.security"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.946] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.946] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.946] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.946] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\javaws.policy", dwFileAttributes=0x80) returned 0 [0268.946] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\javaws.policy" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\security\\javaws.policy"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.947] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.947] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.947] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.947] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.947] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\local_policy.jar", dwFileAttributes=0x80) returned 0 [0268.947] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\local_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\security\\local_policy.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.947] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.947] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.948] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.948] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.948] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\trusted.libraries", dwFileAttributes=0x80) returned 0 [0268.948] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\trusted.libraries" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\security\\trusted.libraries"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.948] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.948] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.948] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0268.948] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\US_export_policy.jar", dwFileAttributes=0x80) returned 0 [0268.949] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\US_export_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\security\\us_export_policy.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.949] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.949] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.949] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0268.949] FindClose (in: hFindFile=0x665d90bcc0 | out: hFindFile=0x665d90bcc0) returned 1 [0268.950] SetLastError (dwErrCode=0x0) [0268.950] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\security\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.952] GetLastError () returned 0x5 [0268.952] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0268.952] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.952] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.952] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.953] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\sound.properties", dwFileAttributes=0x80) returned 0 [0268.953] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\sound.properties" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\sound.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.953] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.953] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.953] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.953] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.953] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\tzdb.dat", dwFileAttributes=0x80) returned 0 [0268.954] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\tzdb.dat" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\tzdb.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.954] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.954] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.954] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0268.954] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.954] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\tzmappings", dwFileAttributes=0x80) returned 0 [0268.954] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\tzmappings" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\tzmappings"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.955] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.955] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.955] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0268.955] FindClose (in: hFindFile=0x665d90bc60 | out: hFindFile=0x665d90bc60) returned 1 [0268.955] SetLastError (dwErrCode=0x0) [0268.955] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.955] GetLastError () returned 0x5 [0268.955] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0268.956] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.956] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.956] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.956] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\LICENSE", dwFileAttributes=0x80) returned 0 [0268.956] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\LICENSE" (normalized: "c:\\program files\\java\\jre1.8.0_131\\license"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.956] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.956] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.956] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.956] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.957] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\README.txt", dwFileAttributes=0x80) returned 0 [0268.957] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\README.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\readme.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.957] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.957] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.957] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.957] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.957] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\release", dwFileAttributes=0x80) returned 0 [0268.958] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\release" (normalized: "c:\\program files\\java\\jre1.8.0_131\\release"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.958] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.958] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.958] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.958] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.958] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\THIRDPARTYLICENSEREADME-JAVAFX.txt", dwFileAttributes=0x80) returned 0 [0268.958] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\thirdpartylicensereadme-javafx.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.959] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.959] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.959] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.959] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.959] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\THIRDPARTYLICENSEREADME.txt", dwFileAttributes=0x80) returned 0 [0268.959] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\thirdpartylicensereadme.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.959] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.959] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.960] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.960] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.960] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\Welcome.html", dwFileAttributes=0x80) returned 0 [0268.960] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\Welcome.html" (normalized: "c:\\program files\\java\\jre1.8.0_131\\welcome.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.960] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.960] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.960] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0268.960] FindClose (in: hFindFile=0x665d90d0a0 | out: hFindFile=0x665d90d0a0) returned 1 [0268.961] SetLastError (dwErrCode=0x0) [0268.961] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.961] GetLastError () returned 0x5 [0268.961] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0268.961] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.961] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0 [0268.961] FindClose (in: hFindFile=0x665d90c5c0 | out: hFindFile=0x665d90c5c0) returned 1 [0268.961] SetLastError (dwErrCode=0x0) [0268.961] CreateFileW (lpFileName="C:\\Program Files\\Java\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.961] GetLastError () returned 0x5 [0268.961] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.961] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.961] FindNextFileW (in: hFindFile=0x665d90d340, lpFindFileData=0x665da7e3a0 | out: lpFindFileData=0x665da7e3a0) returned 1 [0268.961] SetLastError (dwErrCode=0x0) [0268.961] CreateFileW (lpFileName="C:\\Program Files\\RyukReadMe.txt" (normalized: "c:\\program files\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.962] GetLastError () returned 0x5 [0268.962] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7e350, lpOverlapped=0x0) returned 0 [0268.962] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.962] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\*.*", lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 0x665d90cc20 [0268.962] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.962] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.962] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\AppXManifest.xml", dwFileAttributes=0x80) returned 0 [0268.962] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\AppXManifest.xml" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.963] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.963] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.963] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.963] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.963] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml", dwFileAttributes=0x80) returned 0 [0268.964] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.964] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.964] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.964] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.964] SetLastError (dwErrCode=0x0) [0268.964] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.964] GetLastError () returned 0x5 [0268.964] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0268.964] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.964] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665d90c1a0 [0268.964] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.964] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.964] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM", dwFileAttributes=0x80) returned 0 [0268.965] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.965] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.965] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.965] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.965] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS", dwFileAttributes=0x80) returned 0 [0268.966] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.966] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.966] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.966] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.966] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.966] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML", dwFileAttributes=0x80) returned 0 [0268.966] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.967] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.967] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.967] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0268.967] FindClose (in: hFindFile=0x665d90c1a0 | out: hFindFile=0x665d90c1a0) returned 1 [0268.967] SetLastError (dwErrCode=0x0) [0268.967] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.967] GetLastError () returned 0x5 [0268.967] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0268.967] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.967] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0268.967] SetLastError (dwErrCode=0x0) [0268.967] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.967] GetLastError () returned 0x5 [0268.968] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0268.968] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.968] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665d90c1a0 [0268.968] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.968] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.968] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.969] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0268.969] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.969] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.969] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.969] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.969] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0268.970] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.970] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.970] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.970] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.970] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.971] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0268.971] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.971] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.971] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.971] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.971] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.972] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0268.972] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.972] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.972] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.972] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.972] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.972] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0268.973] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.973] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.973] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.973] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.973] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0268.973] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.974] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.974] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.974] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.974] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.974] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0268.974] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.974] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.975] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.975] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.975] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0268.975] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.975] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.975] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.976] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.976] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0268.976] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.976] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.976] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.977] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.977] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0268.977] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.977] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.978] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.978] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.978] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0268.978] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.978] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.978] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.979] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.979] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0268.979] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.979] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.979] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.979] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.979] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.980] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0268.980] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.980] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.980] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.980] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.980] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.981] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0268.981] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.981] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.981] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.981] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.981] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.981] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0268.982] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.982] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.982] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.982] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.982] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.982] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0268.982] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.983] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.983] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.983] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.983] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0268.983] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.983] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.983] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.984] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.984] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.984] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0268.984] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.984] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.984] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.984] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.984] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.985] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0268.985] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.985] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.985] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.985] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.985] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.986] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0268.986] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.986] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.986] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.987] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.987] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0268.987] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.987] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.987] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.987] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.987] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0268.988] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.988] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.988] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.988] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.988] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.989] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0268.989] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.989] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.989] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.989] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.989] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.989] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0268.990] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.990] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.990] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.990] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.990] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0268.990] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.991] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.991] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.991] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.991] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.991] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0268.991] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.992] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.992] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.992] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.992] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0268.992] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.992] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.992] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.993] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.993] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.993] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0268.993] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.993] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.993] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.993] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.993] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.994] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0268.994] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.994] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.994] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.994] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.994] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.995] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0268.995] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.995] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.995] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.995] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.995] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.995] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0268.996] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.996] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.996] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.996] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.996] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.996] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0268.996] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.997] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.997] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.997] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.997] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0268.997] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.997] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.997] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.998] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.998] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.998] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0268.998] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.998] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.998] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.998] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.998] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0268.999] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0268.999] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0268.999] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0268.999] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.999] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0268.999] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.000] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0269.000] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.000] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.000] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.000] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0269.000] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.000] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0269.001] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.001] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.001] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.001] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0269.001] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.001] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0 [0269.001] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.002] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.002] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.002] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0269.002] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.16.xml", dwFileAttributes=0x80) returned 0 [0269.003] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.16.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.16.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.003] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.003] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.003] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0269.003] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.003] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.16.en-us.xml", dwFileAttributes=0x80) returned 0 [0269.003] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.004] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.004] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.004] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0269.004] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.004] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.16.xml", dwFileAttributes=0x80) returned 0 [0269.004] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.16.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.16.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.004] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.004] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.005] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0 [0269.005] FindClose (in: hFindFile=0x665d90c1a0 | out: hFindFile=0x665d90c1a0) returned 1 [0269.005] SetLastError (dwErrCode=0x0) [0269.005] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.008] GetLastError () returned 0x5 [0269.008] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0269.008] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.008] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0269.008] FindNextFileW (in: hFindFile=0x665d90cc20, lpFindFileData=0x665da7dbf0 | out: lpFindFileData=0x665da7dbf0) returned 1 [0269.008] SetLastError (dwErrCode=0x0) [0269.008] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.008] GetLastError () returned 0x5 [0269.008] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7dba0, lpOverlapped=0x0) returned 0 [0269.008] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.008] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\*.*", lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 0x665d90bc60 [0269.009] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0269.009] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0269.009] SetLastError (dwErrCode=0x0) [0269.009] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.009] GetLastError () returned 0x5 [0269.009] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0269.009] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.009] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665d90bcc0 [0269.010] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0269.010] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0269.010] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0269.010] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0269.010] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0269.010] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0269.010] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0269.010] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0269.010] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0269.010] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0269.010] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0269.010] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0269.010] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0269.010] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0269.010] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0269.010] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0269.010] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0269.010] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0269.010] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0269.010] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0269.010] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0269.010] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0269.010] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0269.010] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0269.010] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0269.010] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0269.010] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0269.010] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0269.010] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0269.010] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0269.010] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0269.010] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0269.010] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0269.010] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0269.010] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0269.010] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0269.010] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0269.010] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0269.010] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0269.010] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0269.010] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0269.010] FindClose (in: hFindFile=0x665d90bcc0 | out: hFindFile=0x665d90bcc0) returned 1 [0269.011] SetLastError (dwErrCode=0x0) [0269.011] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\client\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.014] GetLastError () returned 0x5 [0269.014] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0269.014] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.014] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0269.014] SetLastError (dwErrCode=0x0) [0269.014] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.014] GetLastError () returned 0x5 [0269.014] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0269.014] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.014] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665d90c4a0 [0269.014] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0269.014] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0269.014] SetLastError (dwErrCode=0x0) [0269.014] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.014] GetLastError () returned 0x5 [0269.014] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0269.014] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.014] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90c440 [0269.016] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.016] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.016] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.016] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF", dwFileAttributes=0x80) returned 0 [0269.016] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00004_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.016] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.016] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.017] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.017] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF", dwFileAttributes=0x80) returned 0 [0269.017] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00011_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.017] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.017] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.018] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.018] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.018] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF", dwFileAttributes=0x80) returned 0 [0269.018] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00021_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.018] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.018] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.018] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.018] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.019] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF", dwFileAttributes=0x80) returned 0 [0269.019] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00037_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.019] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.019] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.019] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.019] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.020] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF", dwFileAttributes=0x80) returned 0 [0269.020] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00038_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.020] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.020] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.020] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.020] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.020] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF", dwFileAttributes=0x80) returned 0 [0269.021] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.021] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.021] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.021] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.021] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.021] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF", dwFileAttributes=0x80) returned 0 [0269.022] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.022] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.022] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.022] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.022] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.022] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF", dwFileAttributes=0x80) returned 0 [0269.022] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.023] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.023] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.023] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.023] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.023] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF", dwFileAttributes=0x80) returned 0 [0269.023] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00090_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.023] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.024] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.024] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.024] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.024] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF", dwFileAttributes=0x80) returned 0 [0269.024] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00092_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.024] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.024] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.025] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.025] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.025] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF", dwFileAttributes=0x80) returned 0 [0269.025] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.025] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.025] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.026] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.026] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.026] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF", dwFileAttributes=0x80) returned 0 [0269.026] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00120_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.026] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.026] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.027] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.027] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.027] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF", dwFileAttributes=0x80) returned 0 [0269.027] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00126_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.027] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.027] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.028] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.028] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.028] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF", dwFileAttributes=0x80) returned 0 [0269.028] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.029] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.029] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.029] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.029] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.029] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF", dwFileAttributes=0x80) returned 0 [0269.029] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.029] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.029] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.030] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.030] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.030] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF", dwFileAttributes=0x80) returned 0 [0269.030] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00135_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.030] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.030] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.031] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.031] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.031] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF", dwFileAttributes=0x80) returned 0 [0269.031] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.031] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.031] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.031] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.031] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.032] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF", dwFileAttributes=0x80) returned 0 [0269.032] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.032] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.032] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.032] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.032] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.039] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF", dwFileAttributes=0x80) returned 0 [0269.039] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.039] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.039] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.039] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.039] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.040] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF", dwFileAttributes=0x80) returned 0 [0269.040] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.040] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.040] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.040] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.040] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.041] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF", dwFileAttributes=0x80) returned 0 [0269.041] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.041] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.041] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.041] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.041] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.041] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF", dwFileAttributes=0x80) returned 0 [0269.042] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00160_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.042] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.042] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.042] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.042] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.042] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF", dwFileAttributes=0x80) returned 0 [0269.043] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00161_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.043] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.043] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.043] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.043] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.043] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF", dwFileAttributes=0x80) returned 0 [0269.044] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00163_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.044] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.044] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.044] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.044] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.045] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF", dwFileAttributes=0x80) returned 0 [0269.045] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00164_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.045] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.045] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.045] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.045] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.045] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF", dwFileAttributes=0x80) returned 0 [0269.046] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00165_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.046] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.046] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.046] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.046] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.046] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF", dwFileAttributes=0x80) returned 0 [0269.046] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00167_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.047] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.047] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.047] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.047] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.047] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF", dwFileAttributes=0x80) returned 0 [0269.047] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00169_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.048] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.048] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.048] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.048] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.048] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF", dwFileAttributes=0x80) returned 0 [0269.049] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00170_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.049] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.049] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.049] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.049] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.049] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF", dwFileAttributes=0x80) returned 0 [0269.049] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00171_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.050] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.050] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.050] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.050] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.050] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF", dwFileAttributes=0x80) returned 0 [0269.050] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00172_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.051] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.051] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.051] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.051] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.051] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF", dwFileAttributes=0x80) returned 0 [0269.051] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00174_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.052] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.052] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.052] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.052] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.052] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF", dwFileAttributes=0x80) returned 0 [0269.052] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00175_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.052] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.052] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.053] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.053] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.053] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF", dwFileAttributes=0x80) returned 0 [0269.054] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00176_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.054] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.054] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.054] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.054] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.054] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF", dwFileAttributes=0x80) returned 0 [0269.055] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00010_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.055] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.055] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.055] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.055] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.055] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF", dwFileAttributes=0x80) returned 0 [0269.055] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00015_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.056] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.056] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.056] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.056] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.056] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF", dwFileAttributes=0x80) returned 0 [0269.056] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00790_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.056] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.056] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.057] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.057] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.057] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF", dwFileAttributes=0x80) returned 0 [0269.057] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00853_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.057] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.057] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.058] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.058] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.058] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF", dwFileAttributes=0x80) returned 0 [0269.058] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00914_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.058] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.058] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.059] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.059] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.059] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF", dwFileAttributes=0x80) returned 0 [0269.059] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00932_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.059] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.059] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.059] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.059] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.060] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF", dwFileAttributes=0x80) returned 0 [0269.060] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00965_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.060] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.060] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.060] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.060] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.061] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF", dwFileAttributes=0x80) returned 0 [0269.061] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01039_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.061] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.061] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.061] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.061] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.061] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF", dwFileAttributes=0x80) returned 0 [0269.062] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01044_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.062] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.062] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.062] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.062] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.062] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF", dwFileAttributes=0x80) returned 0 [0269.062] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01060_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.063] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.063] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.063] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.063] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.063] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF", dwFileAttributes=0x80) returned 0 [0269.063] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01084_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.063] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.064] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.064] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.064] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.064] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF", dwFileAttributes=0x80) returned 0 [0269.065] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01173_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.065] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.065] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.065] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.065] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.065] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF", dwFileAttributes=0x80) returned 0 [0269.065] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01174_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.066] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.066] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.066] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.066] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.066] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF", dwFileAttributes=0x80) returned 0 [0269.066] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01184_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.066] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.067] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.067] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.067] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.067] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF", dwFileAttributes=0x80) returned 0 [0269.067] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01216_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.067] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.067] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.068] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.068] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.068] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF", dwFileAttributes=0x80) returned 0 [0269.068] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01218_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.068] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.068] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.069] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.069] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.069] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF", dwFileAttributes=0x80) returned 0 [0269.069] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01251_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.069] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.069] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.069] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.069] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.070] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF", dwFileAttributes=0x80) returned 0 [0269.070] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01545_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.070] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.070] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.070] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.070] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.071] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF", dwFileAttributes=0x80) returned 0 [0269.071] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02122_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.071] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.071] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.071] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.071] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.071] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF", dwFileAttributes=0x80) returned 0 [0269.072] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02559_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.072] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.072] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.072] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.072] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.072] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF", dwFileAttributes=0x80) returned 0 [0269.073] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02724_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.073] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.073] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.073] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.073] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.073] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF", dwFileAttributes=0x80) returned 0 [0269.073] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an03500_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.074] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.074] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.074] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.074] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.074] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF", dwFileAttributes=0x80) returned 0 [0269.074] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04108_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.075] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.075] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.075] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.075] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.075] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF", dwFileAttributes=0x80) returned 0 [0269.075] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04117_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.075] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.075] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.076] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.076] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.076] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF", dwFileAttributes=0x80) returned 0 [0269.076] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04134_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.076] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.076] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.077] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.077] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.077] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF", dwFileAttributes=0x80) returned 0 [0269.077] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04174_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.077] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.077] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.077] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.077] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.078] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF", dwFileAttributes=0x80) returned 0 [0269.078] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04191_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.078] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.078] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.078] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.078] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.079] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF", dwFileAttributes=0x80) returned 0 [0269.079] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04195_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.079] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.079] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.079] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.079] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.079] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF", dwFileAttributes=0x80) returned 0 [0269.080] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04196_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.080] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.080] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.080] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.080] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.080] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF", dwFileAttributes=0x80) returned 0 [0269.081] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04206_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.081] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.081] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.081] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.081] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.081] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF", dwFileAttributes=0x80) returned 0 [0269.082] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04225_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.082] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.082] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.082] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.082] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.082] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF", dwFileAttributes=0x80) returned 0 [0269.082] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04235_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.083] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.083] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.083] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.083] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.083] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF", dwFileAttributes=0x80) returned 0 [0269.083] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04267_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.083] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.084] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.084] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.084] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.084] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF", dwFileAttributes=0x80) returned 0 [0269.084] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04269_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.084] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.084] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.085] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.085] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.085] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF", dwFileAttributes=0x80) returned 0 [0269.085] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04323_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.085] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.085] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.086] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.086] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.086] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF", dwFileAttributes=0x80) returned 0 [0269.086] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04326_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.086] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.086] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.086] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.086] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.087] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF", dwFileAttributes=0x80) returned 0 [0269.087] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04332_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.087] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.087] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.087] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.087] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.088] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF", dwFileAttributes=0x80) returned 0 [0269.088] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04355_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.088] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.088] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.088] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.088] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.088] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF", dwFileAttributes=0x80) returned 0 [0269.089] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04369_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.089] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.089] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.089] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.089] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.089] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF", dwFileAttributes=0x80) returned 0 [0269.090] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04384_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.090] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.090] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.090] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.090] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.090] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF", dwFileAttributes=0x80) returned 0 [0269.091] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04385_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.091] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.091] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.091] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.091] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.091] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID", dwFileAttributes=0x80) returned 0 [0269.092] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\baby_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.092] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.092] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.092] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.092] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.093] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF", dwFileAttributes=0x80) returned 0 [0269.093] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00116_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.093] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.093] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.093] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.093] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.094] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF", dwFileAttributes=0x80) returned 0 [0269.094] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00141_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.094] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.094] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.094] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.094] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.094] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF", dwFileAttributes=0x80) returned 0 [0269.095] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00146_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.095] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.095] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.095] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.095] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.096] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF", dwFileAttributes=0x80) returned 0 [0269.096] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00155_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.096] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.096] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.096] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.096] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.097] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF", dwFileAttributes=0x80) returned 0 [0269.097] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00160_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.097] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.097] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.097] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.097] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.097] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF", dwFileAttributes=0x80) returned 0 [0269.098] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00173_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.098] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.098] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.098] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.098] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.098] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF", dwFileAttributes=0x80) returned 0 [0269.098] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd05119_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.099] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.099] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.099] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.099] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.099] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF", dwFileAttributes=0x80) returned 0 [0269.099] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06102_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.099] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.100] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.100] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.100] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.100] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF", dwFileAttributes=0x80) returned 0 [0269.100] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06200_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.100] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.100] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.101] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.101] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.101] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF", dwFileAttributes=0x80) returned 0 [0269.101] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07761_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.101] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.101] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.101] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.102] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF", dwFileAttributes=0x80) returned 0 [0269.102] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07804_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.102] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.102] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.102] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.102] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF", dwFileAttributes=0x80) returned 0 [0269.103] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07831_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.103] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.103] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.103] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.103] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF", dwFileAttributes=0x80) returned 0 [0269.104] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08758_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.104] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.104] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.104] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.104] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF", dwFileAttributes=0x80) returned 0 [0269.105] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08773_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.105] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.105] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.105] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.105] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.105] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF", dwFileAttributes=0x80) returned 0 [0269.105] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08808_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.106] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.106] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.106] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.106] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF", dwFileAttributes=0x80) returned 0 [0269.106] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08868_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.107] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.107] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.107] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.107] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.107] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF", dwFileAttributes=0x80) returned 0 [0269.107] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09031_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.108] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.108] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.108] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.108] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF", dwFileAttributes=0x80) returned 0 [0269.108] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09194_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.108] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.108] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.109] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.109] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF", dwFileAttributes=0x80) returned 0 [0269.109] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09662_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.109] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.109] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.110] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0269.110] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF", dwFileAttributes=0x80) returned 0 [0269.110] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09664_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.110] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.110] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.882] SetLastError (dwErrCode=0x0) [0269.882] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.884] GetLastError () returned 0x5 [0269.885] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0269.885] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.885] SetLastError (dwErrCode=0x0) [0269.885] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.885] GetLastError () returned 0x5 [0269.885] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0269.885] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.885] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90bcc0 [0269.885] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.885] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.885] SetLastError (dwErrCode=0x0) [0269.885] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.885] GetLastError () returned 0x5 [0269.885] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0269.885] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.885] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90bd20 [0269.886] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0269.886] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0269.898] SetLastError (dwErrCode=0x0) [0269.898] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.901] GetLastError () returned 0x5 [0269.901] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0269.901] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.901] SetLastError (dwErrCode=0x0) [0269.901] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.901] GetLastError () returned 0x5 [0269.901] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0269.901] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.901] SetLastError (dwErrCode=0x0) [0269.901] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.901] GetLastError () returned 0x5 [0269.901] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0269.901] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.901] SetLastError (dwErrCode=0x0) [0269.901] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.902] GetLastError () returned 0x5 [0269.902] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0269.902] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.902] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665d90c440 [0269.902] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0269.902] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0269.905] SetLastError (dwErrCode=0x0) [0269.905] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.906] GetLastError () returned 0x5 [0269.906] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0269.906] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.906] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90bcc0 [0269.906] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.906] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.914] SetLastError (dwErrCode=0x0) [0269.914] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.917] GetLastError () returned 0x5 [0269.917] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0269.917] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.917] SetLastError (dwErrCode=0x0) [0269.917] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.917] GetLastError () returned 0x5 [0269.917] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0269.917] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.917] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90bea0 [0269.918] FindNextFileW (in: hFindFile=0x665d90bea0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.918] FindNextFileW (in: hFindFile=0x665d90bea0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.924] SetLastError (dwErrCode=0x0) [0269.924] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.927] GetLastError () returned 0x5 [0269.927] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0269.927] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.927] SetLastError (dwErrCode=0x0) [0269.927] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.927] GetLastError () returned 0x5 [0269.927] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0269.927] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.928] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90ce60 [0269.928] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.928] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0269.938] SetLastError (dwErrCode=0x0) [0269.939] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.942] GetLastError () returned 0x5 [0269.942] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0269.942] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.943] SetLastError (dwErrCode=0x0) [0269.943] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.943] GetLastError () returned 0x5 [0269.943] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0269.943] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.943] SetLastError (dwErrCode=0x0) [0269.943] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.943] GetLastError () returned 0x5 [0269.943] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0269.943] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.943] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665d90bcc0 [0269.944] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0269.944] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0269.946] SetLastError (dwErrCode=0x0) [0269.946] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.949] GetLastError () returned 0x5 [0269.949] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0269.949] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.949] SetLastError (dwErrCode=0x0) [0269.949] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.949] GetLastError () returned 0x5 [0269.949] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0269.949] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.949] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665d90c080 [0269.950] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0269.950] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0269.953] SetLastError (dwErrCode=0x0) [0269.953] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\fre\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.956] GetLastError () returned 0x5 [0269.956] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0269.956] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.956] SetLastError (dwErrCode=0x0) [0269.956] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.957] GetLastError () returned 0x5 [0269.957] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0269.957] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.957] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665d90c1a0 [0269.957] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0269.958] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0269.976] SetLastError (dwErrCode=0x0) [0269.976] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\integration\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.979] GetLastError () returned 0x5 [0269.979] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0269.979] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.979] SetLastError (dwErrCode=0x0) [0269.979] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.980] GetLastError () returned 0x5 [0269.980] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0269.980] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.980] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665d90bcc0 [0269.980] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0269.980] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0269.980] SetLastError (dwErrCode=0x0) [0269.980] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\licenses\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.981] GetLastError () returned 0x5 [0269.981] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0269.981] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.981] SetLastError (dwErrCode=0x0) [0269.981] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0269.981] GetLastError () returned 0x5 [0269.981] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0269.981] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0269.981] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665d90c080 [0269.982] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0269.983] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0270.423] SetLastError (dwErrCode=0x0) [0270.423] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.428] GetLastError () returned 0x5 [0270.428] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0270.428] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.428] SetLastError (dwErrCode=0x0) [0270.428] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.428] GetLastError () returned 0x5 [0270.428] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0270.428] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.428] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\loc\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665d90bcc0 [0270.429] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0270.429] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0270.429] SetLastError (dwErrCode=0x0) [0270.429] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\loc\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\loc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.429] GetLastError () returned 0x5 [0270.429] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0270.429] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.429] SetLastError (dwErrCode=0x0) [0270.429] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.430] GetLastError () returned 0x5 [0270.430] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0270.430] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.430] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665d90bcc0 [0270.430] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0270.430] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0270.430] SetLastError (dwErrCode=0x0) [0270.430] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.430] GetLastError () returned 0x5 [0270.430] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0270.430] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.430] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90bd20 [0270.431] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0270.431] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0270.440] SetLastError (dwErrCode=0x0) [0270.440] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.443] GetLastError () returned 0x5 [0270.443] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0270.443] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.443] SetLastError (dwErrCode=0x0) [0270.443] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.443] GetLastError () returned 0x5 [0270.443] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0270.443] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.443] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\es-es\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90c080 [0270.444] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0270.444] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0270.444] SetLastError (dwErrCode=0x0) [0270.444] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\es-es\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\es-es\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.444] GetLastError () returned 0x5 [0270.444] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0270.444] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.445] SetLastError (dwErrCode=0x0) [0270.445] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.445] GetLastError () returned 0x5 [0270.445] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0270.445] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.445] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\fr-fr\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90bd20 [0270.445] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0270.445] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0270.446] SetLastError (dwErrCode=0x0) [0270.447] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\fr-fr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\fr-fr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.447] GetLastError () returned 0x5 [0270.447] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0270.447] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.447] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0270.447] SetLastError (dwErrCode=0x0) [0270.447] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.447] GetLastError () returned 0x5 [0270.447] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0270.448] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.448] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90c080 [0270.448] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0270.449] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0270.461] SetLastError (dwErrCode=0x0) [0270.461] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.465] GetLastError () returned 0x5 [0270.465] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0270.465] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.465] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0 [0270.465] FindClose (in: hFindFile=0x665d90bcc0 | out: hFindFile=0x665d90bcc0) returned 1 [0270.465] SetLastError (dwErrCode=0x0) [0270.465] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.465] GetLastError () returned 0x5 [0270.465] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0270.465] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.465] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0270.465] SetLastError (dwErrCode=0x0) [0270.465] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.466] GetLastError () returned 0x5 [0270.466] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0270.466] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.466] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office15\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665d90bcc0 [0270.466] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0270.466] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0270.466] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0270.467] SetLastError (dwErrCode=0x0) [0270.467] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office15\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office15\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.467] GetLastError () returned 0x5 [0270.467] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0270.467] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.467] FindNextFileW (in: hFindFile=0x665d90bc60, lpFindFileData=0x665da7d440 | out: lpFindFileData=0x665da7d440) returned 1 [0270.467] SetLastError (dwErrCode=0x0) [0270.467] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.467] GetLastError () returned 0x5 [0270.467] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7d3f0, lpOverlapped=0x0) returned 0 [0270.467] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.467] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\*.*", lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 0x665d90be40 [0270.468] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0270.468] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0270.468] SetLastError (dwErrCode=0x0) [0270.468] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.468] GetLastError () returned 0x5 [0270.468] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0270.468] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.468] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90cec0 [0270.468] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0270.468] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0270.477] SetLastError (dwErrCode=0x0) [0270.477] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.477] GetLastError () returned 0x5 [0270.477] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0270.477] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.477] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Bibliography\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90bcc0 [0270.477] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0270.477] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0270.478] SetLastError (dwErrCode=0x0) [0270.478] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Bibliography\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\bibliography\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.479] GetLastError () returned 0x5 [0270.479] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0270.479] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.479] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0270.489] SetLastError (dwErrCode=0x0) [0270.489] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.489] GetLastError () returned 0x5 [0270.489] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0270.489] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.489] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90d0a0 [0270.490] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0270.490] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0270.491] SetLastError (dwErrCode=0x0) [0270.491] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\dataservices\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.494] GetLastError () returned 0x5 [0270.494] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0270.494] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.494] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0270.546] SetLastError (dwErrCode=0x0) [0270.547] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.547] GetLastError () returned 0x5 [0270.547] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0270.547] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.547] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c5c0 [0270.548] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0270.548] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0270.548] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0270.573] SetLastError (dwErrCode=0x0) [0270.573] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.576] GetLastError () returned 0x5 [0270.576] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0270.576] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.576] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0270.576] SetLastError (dwErrCode=0x0) [0270.576] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.576] GetLastError () returned 0x5 [0270.576] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0270.576] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.576] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90cf20 [0270.577] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0270.577] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0270.577] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0270.631] SetLastError (dwErrCode=0x0) [0270.631] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.633] GetLastError () returned 0x5 [0270.633] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0270.633] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.633] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0270.633] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0270.633] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0270.633] SetLastError (dwErrCode=0x0) [0270.633] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.634] GetLastError () returned 0x5 [0270.634] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0270.634] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.634] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c200 [0270.635] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0270.635] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0270.640] SetLastError (dwErrCode=0x0) [0270.640] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.643] GetLastError () returned 0x5 [0270.643] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0270.643] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.643] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0270.713] SetLastError (dwErrCode=0x0) [0270.713] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.713] GetLastError () returned 0x5 [0270.713] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0270.713] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.713] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0270.713] SetLastError (dwErrCode=0x0) [0270.713] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.713] GetLastError () returned 0x5 [0270.713] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0270.713] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.713] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1036\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90bcc0 [0270.713] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0270.713] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0270.714] SetLastError (dwErrCode=0x0) [0270.714] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1036\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1036\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.714] GetLastError () returned 0x5 [0270.714] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0270.714] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.714] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0270.714] SetLastError (dwErrCode=0x0) [0270.714] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.714] GetLastError () returned 0x5 [0270.714] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0270.714] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.714] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\3082\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90bde0 [0270.714] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0270.715] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0270.715] SetLastError (dwErrCode=0x0) [0270.715] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\3082\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\3082\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.715] GetLastError () returned 0x5 [0270.715] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0270.715] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.715] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0270.715] SetLastError (dwErrCode=0x0) [0270.715] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.715] GetLastError () returned 0x5 [0270.715] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0270.715] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.715] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90c1a0 [0270.716] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0270.716] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0270.717] SetLastError (dwErrCode=0x0) [0270.717] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accessweb\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.717] GetLastError () returned 0x5 [0270.717] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0270.717] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.717] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0270.717] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0270.717] SetLastError (dwErrCode=0x0) [0270.717] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.717] GetLastError () returned 0x5 [0270.717] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0270.717] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.717] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90cc80 [0270.718] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0270.718] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0270.720] SetLastError (dwErrCode=0x0) [0270.720] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.723] GetLastError () returned 0x5 [0270.723] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0270.723] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.723] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0270.723] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0270.723] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0270.723] SetLastError (dwErrCode=0x0) [0270.723] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.723] GetLastError () returned 0x5 [0270.723] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0270.723] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.723] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90c2c0 [0270.724] FindNextFileW (in: hFindFile=0x665d90c2c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0270.724] FindNextFileW (in: hFindFile=0x665d90c2c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0270.724] FindNextFileW (in: hFindFile=0x665d90c2c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0270.724] FindNextFileW (in: hFindFile=0x665d90c2c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0270.724] SetLastError (dwErrCode=0x0) [0270.724] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.724] GetLastError () returned 0x5 [0270.724] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0270.724] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.724] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c920 [0270.724] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0270.724] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0270.724] SetLastError (dwErrCode=0x0) [0270.724] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.725] GetLastError () returned 0x5 [0270.725] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0270.725] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.725] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c260 [0270.725] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0270.725] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0270.725] SetLastError (dwErrCode=0x0) [0270.725] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.725] GetLastError () returned 0x5 [0270.725] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.725] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.725] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\af\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90cce0 [0270.726] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.726] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.726] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.726] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.726] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.726] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.726] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0270.726] FindClose (in: hFindFile=0x665d90cce0 | out: hFindFile=0x665d90cce0) returned 1 [0270.727] SetLastError (dwErrCode=0x0) [0270.727] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\af\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\af\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.731] GetLastError () returned 0x5 [0270.731] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.731] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.731] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0270.731] SetLastError (dwErrCode=0x0) [0270.731] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.731] GetLastError () returned 0x5 [0270.731] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.731] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.731] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\am\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bde0 [0270.732] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.732] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.732] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.732] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.732] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.732] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.732] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0270.732] FindClose (in: hFindFile=0x665d90bde0 | out: hFindFile=0x665d90bde0) returned 1 [0270.732] SetLastError (dwErrCode=0x0) [0270.732] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\am\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\am\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.735] GetLastError () returned 0x5 [0270.735] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.735] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.735] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0270.736] SetLastError (dwErrCode=0x0) [0270.736] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.736] GetLastError () returned 0x5 [0270.736] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.736] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.736] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ar\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90cc80 [0270.737] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.737] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.737] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.737] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.737] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.737] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.737] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.737] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.737] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.737] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.737] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0270.737] FindClose (in: hFindFile=0x665d90cc80 | out: hFindFile=0x665d90cc80) returned 1 [0270.738] SetLastError (dwErrCode=0x0) [0270.738] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ar\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ar\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.741] GetLastError () returned 0x5 [0270.741] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.741] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.741] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0270.741] SetLastError (dwErrCode=0x0) [0270.741] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.741] GetLastError () returned 0x5 [0270.742] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.742] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.742] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\as\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c740 [0270.742] FindNextFileW (in: hFindFile=0x665d90c740, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.742] FindNextFileW (in: hFindFile=0x665d90c740, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.743] FindNextFileW (in: hFindFile=0x665d90c740, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.743] FindNextFileW (in: hFindFile=0x665d90c740, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.743] FindNextFileW (in: hFindFile=0x665d90c740, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.743] FindNextFileW (in: hFindFile=0x665d90c740, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.743] FindNextFileW (in: hFindFile=0x665d90c740, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0270.743] FindClose (in: hFindFile=0x665d90c740 | out: hFindFile=0x665d90c740) returned 1 [0270.744] SetLastError (dwErrCode=0x0) [0270.744] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\as\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\as\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.747] GetLastError () returned 0x5 [0270.747] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.747] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.747] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0270.747] SetLastError (dwErrCode=0x0) [0270.747] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.747] GetLastError () returned 0x5 [0270.747] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.748] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.748] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\az-Latn-AZ\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bcc0 [0270.748] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.748] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.748] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.749] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.749] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.749] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.749] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0270.749] FindClose (in: hFindFile=0x665d90bcc0 | out: hFindFile=0x665d90bcc0) returned 1 [0270.749] SetLastError (dwErrCode=0x0) [0270.749] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\az-Latn-AZ\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\az-latn-az\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.753] GetLastError () returned 0x5 [0270.753] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.753] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.753] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0270.753] SetLastError (dwErrCode=0x0) [0270.753] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.753] GetLastError () returned 0x5 [0270.753] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.753] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.753] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\be\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90ce60 [0270.754] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.754] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.754] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.754] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.754] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.754] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.754] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0270.754] FindClose (in: hFindFile=0x665d90ce60 | out: hFindFile=0x665d90ce60) returned 1 [0270.755] SetLastError (dwErrCode=0x0) [0270.755] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\be\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\be\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.758] GetLastError () returned 0x5 [0270.758] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.758] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.758] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0270.758] SetLastError (dwErrCode=0x0) [0270.758] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.759] GetLastError () returned 0x5 [0270.759] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.759] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.759] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bg\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c380 [0270.760] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.760] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.760] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.760] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.760] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.760] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.760] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.760] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.760] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.760] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.760] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0270.760] FindClose (in: hFindFile=0x665d90c380 | out: hFindFile=0x665d90c380) returned 1 [0270.761] SetLastError (dwErrCode=0x0) [0270.761] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bg\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\bg\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.764] GetLastError () returned 0x5 [0270.764] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.764] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.764] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0270.764] SetLastError (dwErrCode=0x0) [0270.764] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.765] GetLastError () returned 0x5 [0270.765] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.765] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.765] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bn-BD\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c020 [0270.766] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.766] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.766] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.766] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.766] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.766] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.766] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0270.766] FindClose (in: hFindFile=0x665d90c020 | out: hFindFile=0x665d90c020) returned 1 [0270.766] SetLastError (dwErrCode=0x0) [0270.766] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bn-BD\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\bn-bd\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.769] GetLastError () returned 0x5 [0270.769] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.769] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.769] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0270.769] SetLastError (dwErrCode=0x0) [0270.769] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.769] GetLastError () returned 0x5 [0270.769] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.769] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.769] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bn-IN\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c080 [0270.770] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.770] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.770] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.770] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.770] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.770] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.770] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0270.770] FindClose (in: hFindFile=0x665d90c080 | out: hFindFile=0x665d90c080) returned 1 [0270.771] SetLastError (dwErrCode=0x0) [0270.771] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bn-IN\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\bn-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.773] GetLastError () returned 0x5 [0270.773] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.773] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.773] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0270.773] SetLastError (dwErrCode=0x0) [0270.773] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.774] GetLastError () returned 0x5 [0270.774] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.774] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.774] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bs-Latn-BA\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c200 [0270.774] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.774] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.774] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.774] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.774] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.774] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.774] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0270.774] FindClose (in: hFindFile=0x665d90c200 | out: hFindFile=0x665d90c200) returned 1 [0270.775] SetLastError (dwErrCode=0x0) [0270.775] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bs-Latn-BA\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\bs-latn-ba\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.778] GetLastError () returned 0x5 [0270.778] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.778] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.778] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0270.778] SetLastError (dwErrCode=0x0) [0270.778] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.778] GetLastError () returned 0x5 [0270.778] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.778] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.778] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ca\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bcc0 [0270.779] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.779] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.779] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.779] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.779] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.779] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.779] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.779] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.779] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.779] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.779] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0270.779] FindClose (in: hFindFile=0x665d90bcc0 | out: hFindFile=0x665d90bcc0) returned 1 [0270.780] SetLastError (dwErrCode=0x0) [0270.780] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ca\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ca\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.782] GetLastError () returned 0x5 [0270.782] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.782] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.782] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0270.782] SetLastError (dwErrCode=0x0) [0270.782] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.783] GetLastError () returned 0x5 [0270.783] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.783] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.783] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ca-ES-valencia\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90d0a0 [0270.783] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.783] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.783] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.783] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.783] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.783] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.783] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0270.783] FindClose (in: hFindFile=0x665d90d0a0 | out: hFindFile=0x665d90d0a0) returned 1 [0270.784] SetLastError (dwErrCode=0x0) [0270.784] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ca-ES-valencia\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ca-es-valencia\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.787] GetLastError () returned 0x5 [0270.787] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.787] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.787] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0270.787] SetLastError (dwErrCode=0x0) [0270.787] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.787] GetLastError () returned 0x5 [0270.787] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.787] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.787] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\cs\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90d0a0 [0270.788] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.788] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.788] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.788] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.788] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.788] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.788] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.788] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.788] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.788] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.788] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0270.788] FindClose (in: hFindFile=0x665d90d0a0 | out: hFindFile=0x665d90d0a0) returned 1 [0270.788] SetLastError (dwErrCode=0x0) [0270.788] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\cs\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\cs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.791] GetLastError () returned 0x5 [0270.791] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.791] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.791] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0270.791] SetLastError (dwErrCode=0x0) [0270.791] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.791] GetLastError () returned 0x5 [0270.791] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.792] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.792] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\cy\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bcc0 [0270.792] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.792] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.792] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.792] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.792] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.792] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.792] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0270.792] FindClose (in: hFindFile=0x665d90bcc0 | out: hFindFile=0x665d90bcc0) returned 1 [0270.793] SetLastError (dwErrCode=0x0) [0270.793] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\cy\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\cy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.795] GetLastError () returned 0x5 [0270.795] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.796] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.796] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0270.796] SetLastError (dwErrCode=0x0) [0270.796] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.796] GetLastError () returned 0x5 [0270.796] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.796] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.796] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\da\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90cc80 [0270.797] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.797] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.797] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.797] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.797] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.797] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.797] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.797] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.797] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.797] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.797] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0270.797] FindClose (in: hFindFile=0x665d90cc80 | out: hFindFile=0x665d90cc80) returned 1 [0270.798] SetLastError (dwErrCode=0x0) [0270.798] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\da\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\da\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.801] GetLastError () returned 0x5 [0270.801] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.801] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.801] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0270.801] SetLastError (dwErrCode=0x0) [0270.801] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.802] GetLastError () returned 0x5 [0270.802] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.802] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.802] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\de\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90ca40 [0270.803] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.803] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.803] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.803] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.803] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.803] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.803] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.803] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.803] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.803] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.803] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0270.803] FindClose (in: hFindFile=0x665d90ca40 | out: hFindFile=0x665d90ca40) returned 1 [0270.804] SetLastError (dwErrCode=0x0) [0270.804] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\de\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\de\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.807] GetLastError () returned 0x5 [0270.807] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.807] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.807] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0270.807] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0270.807] SetLastError (dwErrCode=0x0) [0270.808] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.808] GetLastError () returned 0x5 [0270.808] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.808] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.808] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\el\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c680 [0270.809] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.809] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.809] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.809] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.809] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.809] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.809] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.809] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.809] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.809] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.809] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0270.809] FindClose (in: hFindFile=0x665d90c680 | out: hFindFile=0x665d90c680) returned 1 [0270.810] SetLastError (dwErrCode=0x0) [0270.810] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\el\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\el\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.813] GetLastError () returned 0x5 [0270.813] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.813] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.813] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0270.813] SetLastError (dwErrCode=0x0) [0270.813] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.813] GetLastError () returned 0x5 [0270.814] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.814] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.814] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\es\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90cb00 [0270.814] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.814] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.814] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.814] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.814] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.814] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.814] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.814] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.814] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.814] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.814] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0270.814] FindClose (in: hFindFile=0x665d90cb00 | out: hFindFile=0x665d90cb00) returned 1 [0270.815] SetLastError (dwErrCode=0x0) [0270.815] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\es\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\es\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.818] GetLastError () returned 0x5 [0270.818] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.818] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.818] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0270.818] SetLastError (dwErrCode=0x0) [0270.818] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.818] GetLastError () returned 0x5 [0270.818] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.818] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.818] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\et\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90caa0 [0270.819] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.819] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.819] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.819] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.819] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.819] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.819] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.819] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.819] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.819] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.819] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0270.819] FindClose (in: hFindFile=0x665d90caa0 | out: hFindFile=0x665d90caa0) returned 1 [0270.820] SetLastError (dwErrCode=0x0) [0270.820] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\et\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\et\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.822] GetLastError () returned 0x5 [0270.822] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.822] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.823] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0270.823] SetLastError (dwErrCode=0x0) [0270.823] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.823] GetLastError () returned 0x5 [0270.823] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.823] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.823] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\eu\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bde0 [0270.823] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.825] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.825] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.825] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.825] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.825] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.825] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.825] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.825] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.825] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.825] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0270.825] FindClose (in: hFindFile=0x665d90bde0 | out: hFindFile=0x665d90bde0) returned 1 [0270.825] SetLastError (dwErrCode=0x0) [0270.825] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\eu\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\eu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.828] GetLastError () returned 0x5 [0270.828] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.828] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.828] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0270.828] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0270.828] SetLastError (dwErrCode=0x0) [0270.828] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.828] GetLastError () returned 0x5 [0270.828] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.828] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.828] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fa\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bcc0 [0270.829] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.829] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.829] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.829] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.829] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.829] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.829] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0270.829] FindClose (in: hFindFile=0x665d90bcc0 | out: hFindFile=0x665d90bcc0) returned 1 [0270.830] SetLastError (dwErrCode=0x0) [0270.830] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fa\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\fa\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.832] GetLastError () returned 0x5 [0270.832] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.832] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.832] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0270.833] SetLastError (dwErrCode=0x0) [0270.833] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.833] GetLastError () returned 0x5 [0270.833] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.833] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.833] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fi\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c080 [0270.833] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.833] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.834] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.834] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.834] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.834] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.834] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.834] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.834] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.834] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.834] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0270.834] FindClose (in: hFindFile=0x665d90c080 | out: hFindFile=0x665d90c080) returned 1 [0270.834] SetLastError (dwErrCode=0x0) [0270.834] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fi\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\fi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.837] GetLastError () returned 0x5 [0270.837] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.837] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.837] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0270.837] SetLastError (dwErrCode=0x0) [0270.837] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.837] GetLastError () returned 0x5 [0270.837] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.837] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.837] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fil\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90cc80 [0270.838] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.838] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.838] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.838] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.838] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.838] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.838] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0270.838] FindClose (in: hFindFile=0x665d90cc80 | out: hFindFile=0x665d90cc80) returned 1 [0270.839] SetLastError (dwErrCode=0x0) [0270.839] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fil\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\fil\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.841] GetLastError () returned 0x5 [0270.841] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.841] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.841] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0270.841] SetLastError (dwErrCode=0x0) [0270.842] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.842] GetLastError () returned 0x5 [0270.842] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.842] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.842] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fr\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c620 [0270.842] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.842] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.843] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.843] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.843] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.843] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.843] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.843] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.843] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.843] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.843] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0270.843] FindClose (in: hFindFile=0x665d90c620 | out: hFindFile=0x665d90c620) returned 1 [0270.844] SetLastError (dwErrCode=0x0) [0270.844] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\fr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.847] GetLastError () returned 0x5 [0270.847] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.847] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.847] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0270.847] SetLastError (dwErrCode=0x0) [0270.847] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.847] GetLastError () returned 0x5 [0270.847] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.847] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.847] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ga\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90cb00 [0270.848] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.848] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.848] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.848] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.848] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.848] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.848] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0270.848] FindClose (in: hFindFile=0x665d90cb00 | out: hFindFile=0x665d90cb00) returned 1 [0270.849] SetLastError (dwErrCode=0x0) [0270.849] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ga\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ga\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.851] GetLastError () returned 0x5 [0270.851] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.851] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.851] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0270.851] SetLastError (dwErrCode=0x0) [0270.851] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.852] GetLastError () returned 0x5 [0270.852] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.852] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.852] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gd\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bcc0 [0270.852] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.852] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.852] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.852] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.852] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.852] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.852] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0270.853] FindClose (in: hFindFile=0x665d90bcc0 | out: hFindFile=0x665d90bcc0) returned 1 [0270.853] SetLastError (dwErrCode=0x0) [0270.853] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gd\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\gd\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.856] GetLastError () returned 0x5 [0270.856] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.856] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.856] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0270.856] SetLastError (dwErrCode=0x0) [0270.856] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.857] GetLastError () returned 0x5 [0270.857] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.857] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.857] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gl\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c4a0 [0270.857] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.857] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.857] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.857] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.857] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.857] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.857] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.857] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.857] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.857] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.857] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0270.858] FindClose (in: hFindFile=0x665d90c4a0 | out: hFindFile=0x665d90c4a0) returned 1 [0270.858] SetLastError (dwErrCode=0x0) [0270.858] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\gl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.861] GetLastError () returned 0x5 [0270.861] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.861] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.861] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0270.861] SetLastError (dwErrCode=0x0) [0270.861] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.861] GetLastError () returned 0x5 [0270.861] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.861] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.861] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gu\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90cec0 [0270.862] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.862] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.862] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.862] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.862] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.862] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.862] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0270.862] FindClose (in: hFindFile=0x665d90cec0 | out: hFindFile=0x665d90cec0) returned 1 [0270.862] SetLastError (dwErrCode=0x0) [0270.862] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gu\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\gu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.865] GetLastError () returned 0x5 [0270.865] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.865] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.865] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0270.865] SetLastError (dwErrCode=0x0) [0270.865] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.865] GetLastError () returned 0x5 [0270.865] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.865] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.865] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\he\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c980 [0270.866] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.866] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.866] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.866] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.866] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.866] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.866] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.866] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.866] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.866] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.866] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0270.866] FindClose (in: hFindFile=0x665d90c980 | out: hFindFile=0x665d90c980) returned 1 [0270.867] SetLastError (dwErrCode=0x0) [0270.867] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\he\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\he\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.870] GetLastError () returned 0x5 [0270.870] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.870] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.870] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0270.870] SetLastError (dwErrCode=0x0) [0270.870] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.870] GetLastError () returned 0x5 [0270.870] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.870] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.870] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hi\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90cc80 [0270.871] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.871] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.871] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.871] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.871] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.871] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.871] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.871] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.871] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.871] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.871] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0270.871] FindClose (in: hFindFile=0x665d90cc80 | out: hFindFile=0x665d90cc80) returned 1 [0270.872] SetLastError (dwErrCode=0x0) [0270.872] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hi\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\hi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.874] GetLastError () returned 0x5 [0270.874] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.874] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.874] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0270.874] SetLastError (dwErrCode=0x0) [0270.874] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.874] GetLastError () returned 0x5 [0270.874] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.874] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.875] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hr\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c440 [0270.875] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.875] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.875] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.875] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.875] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.875] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.875] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.875] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.875] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.875] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.875] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0270.875] FindClose (in: hFindFile=0x665d90c440 | out: hFindFile=0x665d90c440) returned 1 [0270.876] SetLastError (dwErrCode=0x0) [0270.876] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\hr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.879] GetLastError () returned 0x5 [0270.879] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.879] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.879] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0270.879] SetLastError (dwErrCode=0x0) [0270.879] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.879] GetLastError () returned 0x5 [0270.879] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.879] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.879] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hu\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c020 [0270.880] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.880] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.880] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.880] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.880] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.880] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.880] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.881] SetLastError (dwErrCode=0x0) [0270.881] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hu\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\hu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.884] GetLastError () returned 0x5 [0270.884] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.884] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.884] SetLastError (dwErrCode=0x0) [0270.884] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.885] GetLastError () returned 0x5 [0270.885] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.885] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.885] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hy\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c4a0 [0270.885] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.885] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.886] SetLastError (dwErrCode=0x0) [0270.886] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hy\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\hy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.888] GetLastError () returned 0x5 [0270.888] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.889] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.889] SetLastError (dwErrCode=0x0) [0270.889] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.889] GetLastError () returned 0x5 [0270.889] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.889] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.889] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\id\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c620 [0270.890] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.890] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.890] SetLastError (dwErrCode=0x0) [0270.890] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\id\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\id\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.893] GetLastError () returned 0x5 [0270.893] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.893] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.893] SetLastError (dwErrCode=0x0) [0270.893] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.893] GetLastError () returned 0x5 [0270.893] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.893] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.893] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\is\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90d0a0 [0270.894] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.894] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.894] SetLastError (dwErrCode=0x0) [0270.895] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\is\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\is\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.897] GetLastError () returned 0x5 [0270.897] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.897] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.897] SetLastError (dwErrCode=0x0) [0270.897] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.898] GetLastError () returned 0x5 [0270.898] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.898] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.898] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\it\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c5c0 [0270.898] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.898] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.899] SetLastError (dwErrCode=0x0) [0270.899] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\it\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\it\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.902] GetLastError () returned 0x5 [0270.902] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.902] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.902] SetLastError (dwErrCode=0x0) [0270.902] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.902] GetLastError () returned 0x5 [0270.902] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.902] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.902] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ja\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90d0a0 [0270.903] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.903] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.903] SetLastError (dwErrCode=0x0) [0270.903] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ja\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ja\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.906] GetLastError () returned 0x5 [0270.906] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.906] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.906] SetLastError (dwErrCode=0x0) [0270.906] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.906] GetLastError () returned 0x5 [0270.906] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.906] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.906] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ka\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bcc0 [0270.907] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.907] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.908] SetLastError (dwErrCode=0x0) [0270.908] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ka\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ka\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.910] GetLastError () returned 0x5 [0270.910] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.910] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.910] SetLastError (dwErrCode=0x0) [0270.910] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.910] GetLastError () returned 0x5 [0270.910] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.911] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.911] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kk\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bcc0 [0270.911] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.911] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.912] SetLastError (dwErrCode=0x0) [0270.912] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kk\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\kk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.914] GetLastError () returned 0x5 [0270.914] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.914] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.914] SetLastError (dwErrCode=0x0) [0270.915] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.915] GetLastError () returned 0x5 [0270.915] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.915] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.915] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\km\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90cc80 [0270.916] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.916] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.916] SetLastError (dwErrCode=0x0) [0270.916] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\km\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\km\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.919] GetLastError () returned 0x5 [0270.919] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.919] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.919] SetLastError (dwErrCode=0x0) [0270.919] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.919] GetLastError () returned 0x5 [0270.919] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.919] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.919] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kn\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bcc0 [0270.920] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.920] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.921] SetLastError (dwErrCode=0x0) [0270.921] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kn\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\kn\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.923] GetLastError () returned 0x5 [0270.923] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.923] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.923] SetLastError (dwErrCode=0x0) [0270.923] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.924] GetLastError () returned 0x5 [0270.924] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.924] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.924] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ko\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c740 [0270.924] FindNextFileW (in: hFindFile=0x665d90c740, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.925] FindNextFileW (in: hFindFile=0x665d90c740, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.925] SetLastError (dwErrCode=0x0) [0270.925] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ko\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ko\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.929] GetLastError () returned 0x5 [0270.929] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.929] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.929] SetLastError (dwErrCode=0x0) [0270.929] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.929] GetLastError () returned 0x5 [0270.929] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.929] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.929] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kok\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90cc80 [0270.930] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.930] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.931] SetLastError (dwErrCode=0x0) [0270.931] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kok\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\kok\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.934] GetLastError () returned 0x5 [0270.934] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.934] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.934] SetLastError (dwErrCode=0x0) [0270.934] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.934] GetLastError () returned 0x5 [0270.934] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.934] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.934] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ky\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90d0a0 [0270.935] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.935] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.935] SetLastError (dwErrCode=0x0) [0270.935] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ky\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ky\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.938] GetLastError () returned 0x5 [0270.938] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.938] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.938] SetLastError (dwErrCode=0x0) [0270.938] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.938] GetLastError () returned 0x5 [0270.938] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.938] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.938] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lb\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c8c0 [0270.939] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.939] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.940] SetLastError (dwErrCode=0x0) [0270.940] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lb\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\lb\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.942] GetLastError () returned 0x5 [0270.942] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.942] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.942] SetLastError (dwErrCode=0x0) [0270.942] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.942] GetLastError () returned 0x5 [0270.942] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.942] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.942] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lt\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90cc80 [0270.943] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.943] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.944] SetLastError (dwErrCode=0x0) [0270.944] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lt\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\lt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.946] GetLastError () returned 0x5 [0270.946] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.946] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.946] SetLastError (dwErrCode=0x0) [0270.946] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.947] GetLastError () returned 0x5 [0270.947] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.947] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.947] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lv\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bcc0 [0270.948] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.948] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.948] SetLastError (dwErrCode=0x0) [0270.948] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lv\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\lv\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.951] GetLastError () returned 0x5 [0270.951] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.951] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.951] SetLastError (dwErrCode=0x0) [0270.951] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.951] GetLastError () returned 0x5 [0270.951] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.951] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.951] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mi\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c1a0 [0270.952] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.952] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.953] SetLastError (dwErrCode=0x0) [0270.953] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mi\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\mi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.955] GetLastError () returned 0x5 [0270.955] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.955] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.956] SetLastError (dwErrCode=0x0) [0270.956] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.956] GetLastError () returned 0x5 [0270.956] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.956] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.956] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mk\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90cf20 [0270.957] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.957] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.958] SetLastError (dwErrCode=0x0) [0270.958] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mk\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\mk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.960] GetLastError () returned 0x5 [0270.960] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.960] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.960] SetLastError (dwErrCode=0x0) [0270.960] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.960] GetLastError () returned 0x5 [0270.960] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.961] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.961] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ml\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c980 [0270.961] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.961] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.962] SetLastError (dwErrCode=0x0) [0270.962] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ml\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ml\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.965] GetLastError () returned 0x5 [0270.965] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.965] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.965] SetLastError (dwErrCode=0x0) [0270.965] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.965] GetLastError () returned 0x5 [0270.965] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.965] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.965] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mn\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c0e0 [0270.966] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.966] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.966] SetLastError (dwErrCode=0x0) [0270.966] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mn\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\mn\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.969] GetLastError () returned 0x5 [0270.969] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.969] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.969] SetLastError (dwErrCode=0x0) [0270.969] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.969] GetLastError () returned 0x5 [0270.969] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.969] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.969] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mr\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c500 [0270.970] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.970] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.971] SetLastError (dwErrCode=0x0) [0270.971] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\mr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.973] GetLastError () returned 0x5 [0270.973] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.973] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.973] SetLastError (dwErrCode=0x0) [0270.973] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.973] GetLastError () returned 0x5 [0270.974] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.974] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.974] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ms\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c380 [0270.974] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.974] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.975] SetLastError (dwErrCode=0x0) [0270.975] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ms\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ms\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.977] GetLastError () returned 0x5 [0270.977] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.977] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.978] SetLastError (dwErrCode=0x0) [0270.978] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.978] GetLastError () returned 0x5 [0270.978] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.978] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.978] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mt\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90d0a0 [0270.979] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.979] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.979] SetLastError (dwErrCode=0x0) [0270.979] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mt\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\mt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.982] GetLastError () returned 0x5 [0270.982] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.982] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.982] SetLastError (dwErrCode=0x0) [0270.982] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.982] GetLastError () returned 0x5 [0270.982] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.982] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.982] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ne\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90cec0 [0270.983] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.983] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.984] SetLastError (dwErrCode=0x0) [0270.984] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ne\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ne\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.986] GetLastError () returned 0x5 [0270.986] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.987] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.987] SetLastError (dwErrCode=0x0) [0270.987] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.987] GetLastError () returned 0x5 [0270.987] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.987] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.987] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\nl\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90cc80 [0270.988] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.988] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.988] SetLastError (dwErrCode=0x0) [0270.988] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\nl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\nl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.991] GetLastError () returned 0x5 [0270.991] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.991] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.991] SetLastError (dwErrCode=0x0) [0270.991] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.991] GetLastError () returned 0x5 [0270.991] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.991] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.991] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\nn-NO\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90cc80 [0270.992] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.992] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.992] SetLastError (dwErrCode=0x0) [0270.992] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\nn-NO\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\nn-no\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.995] GetLastError () returned 0x5 [0270.995] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.995] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.995] SetLastError (dwErrCode=0x0) [0270.995] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.996] GetLastError () returned 0x5 [0270.996] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0270.996] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0270.996] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\no\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bde0 [0270.996] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.996] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0270.997] SetLastError (dwErrCode=0x0) [0270.997] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\no\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\no\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0270.999] GetLastError () returned 0x5 [0270.999] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0271.000] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.000] SetLastError (dwErrCode=0x0) [0271.000] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.000] GetLastError () returned 0x5 [0271.000] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0271.000] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.000] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\or\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c020 [0271.001] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0271.001] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0271.001] SetLastError (dwErrCode=0x0) [0271.001] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\or\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\or\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.004] GetLastError () returned 0x5 [0271.004] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0271.004] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.004] SetLastError (dwErrCode=0x0) [0271.004] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.004] GetLastError () returned 0x5 [0271.004] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0271.004] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.004] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pa\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c5c0 [0271.005] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0271.005] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0271.005] SetLastError (dwErrCode=0x0) [0271.005] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pa\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\pa\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.008] GetLastError () returned 0x5 [0271.008] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0271.008] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.008] SetLastError (dwErrCode=0x0) [0271.008] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.008] GetLastError () returned 0x5 [0271.008] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0271.008] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.008] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pl\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c5c0 [0271.009] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0271.009] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0271.010] SetLastError (dwErrCode=0x0) [0271.010] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\pl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.013] GetLastError () returned 0x5 [0271.013] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0271.013] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.013] SetLastError (dwErrCode=0x0) [0271.013] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.013] GetLastError () returned 0x5 [0271.013] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0271.013] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.013] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\prs-AF\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c440 [0271.014] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0271.014] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0271.014] SetLastError (dwErrCode=0x0) [0271.014] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\prs-AF\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\prs-af\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.017] GetLastError () returned 0x5 [0271.017] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0271.017] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.017] SetLastError (dwErrCode=0x0) [0271.017] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.017] GetLastError () returned 0x5 [0271.018] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0271.018] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.018] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-BR\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bcc0 [0271.018] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0271.018] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0271.019] SetLastError (dwErrCode=0x0) [0271.019] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-BR\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\pt-br\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.021] GetLastError () returned 0x5 [0271.021] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0271.021] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.022] SetLastError (dwErrCode=0x0) [0271.022] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.022] GetLastError () returned 0x5 [0271.022] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0271.022] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.022] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-pt\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bcc0 [0271.022] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0271.023] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0271.023] SetLastError (dwErrCode=0x0) [0271.023] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-pt\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\pt-pt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.026] GetLastError () returned 0x5 [0271.026] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0271.026] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.026] SetLastError (dwErrCode=0x0) [0271.026] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.026] GetLastError () returned 0x5 [0271.026] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0271.026] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.026] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\quz\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c0e0 [0271.027] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0271.027] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0271.028] SetLastError (dwErrCode=0x0) [0271.028] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\quz\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\quz\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.031] GetLastError () returned 0x5 [0271.031] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0271.031] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.031] SetLastError (dwErrCode=0x0) [0271.031] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.031] GetLastError () returned 0x5 [0271.031] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0271.031] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.031] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ro\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90ca40 [0271.032] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0271.032] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0271.033] SetLastError (dwErrCode=0x0) [0271.033] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ro\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ro\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.035] GetLastError () returned 0x5 [0271.035] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0271.036] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.036] SetLastError (dwErrCode=0x0) [0271.036] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.036] GetLastError () returned 0x5 [0271.036] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0271.036] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.036] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ru\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90cec0 [0271.037] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0271.037] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0271.037] SetLastError (dwErrCode=0x0) [0271.037] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ru\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ru\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.040] GetLastError () returned 0x5 [0271.040] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0271.040] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.040] SetLastError (dwErrCode=0x0) [0271.040] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.040] GetLastError () returned 0x5 [0271.040] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0271.040] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.040] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sd-Arab-PK\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bcc0 [0271.046] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0271.046] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0271.047] SetLastError (dwErrCode=0x0) [0271.047] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sd-Arab-PK\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sd-arab-pk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.049] GetLastError () returned 0x5 [0271.049] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0271.049] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.050] SetLastError (dwErrCode=0x0) [0271.050] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.050] GetLastError () returned 0x5 [0271.050] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0271.050] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.050] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\si\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90cec0 [0271.051] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0271.051] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0271.051] SetLastError (dwErrCode=0x0) [0271.051] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\si\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\si\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.054] GetLastError () returned 0x5 [0271.054] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0271.054] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.054] SetLastError (dwErrCode=0x0) [0271.054] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.054] GetLastError () returned 0x5 [0271.054] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0271.054] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.054] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sk\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bfc0 [0271.055] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0271.055] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0271.055] SetLastError (dwErrCode=0x0) [0271.055] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sk\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.058] GetLastError () returned 0x5 [0271.058] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0271.058] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.058] SetLastError (dwErrCode=0x0) [0271.058] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.058] GetLastError () returned 0x5 [0271.058] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0271.059] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.059] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sl\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c8c0 [0271.059] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0271.059] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0271.060] SetLastError (dwErrCode=0x0) [0271.060] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.062] GetLastError () returned 0x5 [0271.062] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0271.062] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.062] SetLastError (dwErrCode=0x0) [0271.063] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.063] GetLastError () returned 0x5 [0271.063] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0271.063] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.063] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sq\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c200 [0271.063] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0271.064] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0271.064] SetLastError (dwErrCode=0x0) [0271.064] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sq\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sq\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.067] GetLastError () returned 0x5 [0271.067] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0271.067] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.067] SetLastError (dwErrCode=0x0) [0271.067] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.067] GetLastError () returned 0x5 [0271.067] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0271.067] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.067] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Cyrl\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bcc0 [0271.068] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0271.068] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0271.068] SetLastError (dwErrCode=0x0) [0271.068] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Cyrl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sr-cyrl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.071] GetLastError () returned 0x5 [0271.071] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0271.071] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.071] SetLastError (dwErrCode=0x0) [0271.071] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.071] GetLastError () returned 0x5 [0271.071] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0271.071] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.071] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Cyrl-BA\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bcc0 [0271.072] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0271.072] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0271.073] SetLastError (dwErrCode=0x0) [0271.073] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Cyrl-BA\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sr-cyrl-ba\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.075] GetLastError () returned 0x5 [0271.075] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0271.076] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.076] SetLastError (dwErrCode=0x0) [0271.076] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.076] GetLastError () returned 0x5 [0271.076] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0271.076] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.076] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c080 [0271.077] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0271.077] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0271.077] SetLastError (dwErrCode=0x0) [0271.077] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sr-latn\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.080] GetLastError () returned 0x5 [0271.080] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0271.080] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.080] SetLastError (dwErrCode=0x0) [0271.080] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.080] GetLastError () returned 0x5 [0271.080] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0271.080] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.080] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn-CS\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c080 [0271.081] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0271.081] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0271.081] SetLastError (dwErrCode=0x0) [0271.082] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn-CS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sr-latn-cs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.084] GetLastError () returned 0x5 [0271.084] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0271.084] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.084] SetLastError (dwErrCode=0x0) [0271.084] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.084] GetLastError () returned 0x5 [0271.084] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0271.084] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.085] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sv\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bcc0 [0271.085] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0271.085] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0271.086] SetLastError (dwErrCode=0x0) [0271.086] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sv\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sv\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.089] GetLastError () returned 0x5 [0271.089] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0271.089] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.089] SetLastError (dwErrCode=0x0) [0271.089] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.089] GetLastError () returned 0x5 [0271.089] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0271.089] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.089] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sw\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bcc0 [0271.090] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0271.090] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0271.090] SetLastError (dwErrCode=0x0) [0271.090] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sw\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sw\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.093] GetLastError () returned 0x5 [0271.093] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0271.093] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.093] SetLastError (dwErrCode=0x0) [0271.093] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.093] GetLastError () returned 0x5 [0271.093] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0271.093] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.093] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ta\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c4a0 [0271.094] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0271.094] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0271.095] SetLastError (dwErrCode=0x0) [0271.095] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ta\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ta\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.098] GetLastError () returned 0x5 [0271.098] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0271.098] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.099] SetLastError (dwErrCode=0x0) [0271.099] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.099] GetLastError () returned 0x5 [0271.099] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0271.099] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.099] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\te\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c200 [0271.100] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0271.100] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0271.101] SetLastError (dwErrCode=0x0) [0271.101] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\te\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\te\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.104] GetLastError () returned 0x5 [0271.104] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0271.104] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.104] SetLastError (dwErrCode=0x0) [0271.104] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.105] GetLastError () returned 0x5 [0271.105] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0271.105] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.105] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\th\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c080 [0271.106] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0271.106] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0271.107] SetLastError (dwErrCode=0x0) [0271.107] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\th\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\th\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.110] GetLastError () returned 0x5 [0271.110] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0271.110] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.110] SetLastError (dwErrCode=0x0) [0271.110] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.110] GetLastError () returned 0x5 [0271.110] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0271.110] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.110] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tk\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90cc80 [0271.111] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0271.111] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0271.112] SetLastError (dwErrCode=0x0) [0271.112] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tk\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\tk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.115] GetLastError () returned 0x5 [0271.115] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0271.115] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.115] SetLastError (dwErrCode=0x0) [0271.115] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.116] GetLastError () returned 0x5 [0271.116] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0271.116] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.116] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tr\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c5c0 [0271.117] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0271.117] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0271.117] SetLastError (dwErrCode=0x0) [0271.118] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\tr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.121] GetLastError () returned 0x5 [0271.121] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0271.121] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.121] SetLastError (dwErrCode=0x0) [0271.121] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.122] GetLastError () returned 0x5 [0271.122] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0271.122] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.122] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tt\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90cf20 [0271.123] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0271.123] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0271.123] SetLastError (dwErrCode=0x0) [0271.123] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tt\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\tt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.126] GetLastError () returned 0x5 [0271.127] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0271.127] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.127] SetLastError (dwErrCode=0x0) [0271.127] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.127] GetLastError () returned 0x5 [0271.127] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0271.127] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.127] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ug\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bcc0 [0271.128] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0271.128] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0271.129] SetLastError (dwErrCode=0x0) [0271.129] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ug\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ug\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.132] GetLastError () returned 0x5 [0271.132] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0271.132] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.132] SetLastError (dwErrCode=0x0) [0271.132] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.132] GetLastError () returned 0x5 [0271.132] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0271.133] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.133] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\uk\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bea0 [0271.133] FindNextFileW (in: hFindFile=0x665d90bea0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0271.133] FindNextFileW (in: hFindFile=0x665d90bea0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0271.135] SetLastError (dwErrCode=0x0) [0271.135] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\uk\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\uk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.138] GetLastError () returned 0x5 [0271.138] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0271.138] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.138] SetLastError (dwErrCode=0x0) [0271.138] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.139] GetLastError () returned 0x5 [0271.139] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0271.139] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.139] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ur\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90ca40 [0271.140] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0271.140] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0271.141] SetLastError (dwErrCode=0x0) [0271.141] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ur\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ur\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.144] GetLastError () returned 0x5 [0271.144] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0271.144] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.144] SetLastError (dwErrCode=0x0) [0271.144] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.144] GetLastError () returned 0x5 [0271.144] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0271.144] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.144] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\uz-Latn-UZ\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90d0a0 [0271.145] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0271.145] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0271.146] SetLastError (dwErrCode=0x0) [0271.146] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\uz-Latn-UZ\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\uz-latn-uz\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.149] GetLastError () returned 0x5 [0271.149] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0271.149] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.149] SetLastError (dwErrCode=0x0) [0271.149] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.150] GetLastError () returned 0x5 [0271.150] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0271.150] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.150] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\vi\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90cc80 [0271.151] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0271.151] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0271.152] SetLastError (dwErrCode=0x0) [0271.152] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\vi\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\vi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.155] GetLastError () returned 0x5 [0271.155] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0271.155] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.155] SetLastError (dwErrCode=0x0) [0271.155] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.155] GetLastError () returned 0x5 [0271.155] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0271.155] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.155] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANS\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bcc0 [0271.156] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0271.156] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0271.157] SetLastError (dwErrCode=0x0) [0271.157] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\zh-hans\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.160] GetLastError () returned 0x5 [0271.160] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0271.160] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.160] SetLastError (dwErrCode=0x0) [0271.160] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.161] GetLastError () returned 0x5 [0271.161] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0271.161] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.161] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANT\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90cc80 [0271.162] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0271.162] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0271.162] SetLastError (dwErrCode=0x0) [0271.162] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANT\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\zh-hant\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.166] GetLastError () returned 0x5 [0271.166] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0271.166] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.166] SetLastError (dwErrCode=0x0) [0271.166] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.166] GetLastError () returned 0x5 [0271.166] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.166] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.166] SetLastError (dwErrCode=0x0) [0271.166] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.167] GetLastError () returned 0x5 [0271.167] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0271.167] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.167] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\MSOSEC.XML", dwFileAttributes=0x80) returned 0 [0271.167] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\MSOSEC.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\msosec.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.168] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.168] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.168] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\MSSPC.ECF", dwFileAttributes=0x80) returned 0 [0271.169] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\MSSPC.ECF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\msspc.ecf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.169] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.169] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.169] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.169] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\OUTEX.ECF", dwFileAttributes=0x80) returned 0 [0271.170] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\OUTEX.ECF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\outex.ecf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.170] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.170] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.170] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\OUTEX2.ECF", dwFileAttributes=0x80) returned 0 [0271.171] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\OUTEX2.ECF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\outex2.ecf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.171] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.171] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.171] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.171] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PMAILEXT.ECF", dwFileAttributes=0x80) returned 0 [0271.172] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PMAILEXT.ECF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\pmailext.ecf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.172] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.172] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.172] SetLastError (dwErrCode=0x0) [0271.172] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.172] GetLastError () returned 0x5 [0271.172] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0271.172] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.173] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power Map Excel Add-in\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c1a0 [0271.173] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.173] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.174] SetLastError (dwErrCode=0x0) [0271.174] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power Map Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power map excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.177] GetLastError () returned 0x5 [0271.177] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0271.178] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.178] SetLastError (dwErrCode=0x0) [0271.178] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.178] GetLastError () returned 0x5 [0271.178] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0271.178] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.178] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c080 [0271.178] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.178] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.178] SetLastError (dwErrCode=0x0) [0271.178] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.179] GetLastError () returned 0x5 [0271.179] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.179] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.179] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ar\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c8c0 [0271.180] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.180] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.180] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.180] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ar\\PowerViewRes.ar.xap", dwFileAttributes=0x80) returned 0 [0271.180] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ar\\PowerViewRes.ar.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ar\\powerviewres.ar.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.181] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.181] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.182] SetLastError (dwErrCode=0x0) [0271.182] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ar\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ar\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.185] GetLastError () returned 0x5 [0271.185] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.185] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.185] SetLastError (dwErrCode=0x0) [0271.185] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.185] GetLastError () returned 0x5 [0271.185] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.185] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.186] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\bg\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c5c0 [0271.186] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.186] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.186] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\bg\\PowerViewRes.bg.xap", dwFileAttributes=0x80) returned 0 [0271.187] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\bg\\PowerViewRes.bg.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\bg\\powerviewres.bg.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.187] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.187] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.188] SetLastError (dwErrCode=0x0) [0271.188] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\bg\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\bg\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.192] GetLastError () returned 0x5 [0271.192] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.192] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.192] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.192] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\BI-Report.png", dwFileAttributes=0x80) returned 0 [0271.192] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\BI-Report.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\bi-report.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.193] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.193] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.193] SetLastError (dwErrCode=0x0) [0271.193] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.193] GetLastError () returned 0x5 [0271.193] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.193] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.193] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ca\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c0e0 [0271.194] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.194] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.194] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.195] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ca\\PowerViewRes.ca.xap", dwFileAttributes=0x80) returned 0 [0271.195] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ca\\PowerViewRes.ca.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ca\\powerviewres.ca.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.195] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.195] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.196] SetLastError (dwErrCode=0x0) [0271.196] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ca\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ca\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.200] GetLastError () returned 0x5 [0271.200] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.200] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.200] SetLastError (dwErrCode=0x0) [0271.200] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.200] GetLastError () returned 0x5 [0271.200] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.200] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.200] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\cs\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bfc0 [0271.201] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.201] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.201] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.202] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\cs\\PowerViewRes.cs.xap", dwFileAttributes=0x80) returned 0 [0271.202] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\cs\\PowerViewRes.cs.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\cs\\powerviewres.cs.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.202] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.202] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.203] SetLastError (dwErrCode=0x0) [0271.203] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\cs\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\cs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.206] GetLastError () returned 0x5 [0271.206] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.207] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.207] SetLastError (dwErrCode=0x0) [0271.207] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.207] GetLastError () returned 0x5 [0271.207] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.207] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.207] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\da\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c0e0 [0271.208] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.208] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.208] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.208] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\da\\PowerViewRes.da.xap", dwFileAttributes=0x80) returned 0 [0271.208] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\da\\PowerViewRes.da.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\da\\powerviewres.da.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.209] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.209] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.210] SetLastError (dwErrCode=0x0) [0271.210] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\da\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\da\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.213] GetLastError () returned 0x5 [0271.213] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.213] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.214] SetLastError (dwErrCode=0x0) [0271.214] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.214] GetLastError () returned 0x5 [0271.214] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.214] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.214] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\de\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c260 [0271.215] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.215] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.215] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.215] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\de\\PowerViewRes.de.xap", dwFileAttributes=0x80) returned 0 [0271.215] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\de\\PowerViewRes.de.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\de\\powerviewres.de.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.216] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.216] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.217] SetLastError (dwErrCode=0x0) [0271.217] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\de\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\de\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.220] GetLastError () returned 0x5 [0271.220] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.220] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.220] SetLastError (dwErrCode=0x0) [0271.220] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.220] GetLastError () returned 0x5 [0271.220] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.221] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.221] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\el\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bcc0 [0271.221] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.221] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.222] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.222] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\el\\PowerViewRes.el.xap", dwFileAttributes=0x80) returned 0 [0271.222] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\el\\PowerViewRes.el.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\el\\powerviewres.el.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.222] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.222] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.223] SetLastError (dwErrCode=0x0) [0271.223] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\el\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\el\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.227] GetLastError () returned 0x5 [0271.227] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.227] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.227] SetLastError (dwErrCode=0x0) [0271.227] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.227] GetLastError () returned 0x5 [0271.227] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.227] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.227] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\es\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c740 [0271.228] FindNextFileW (in: hFindFile=0x665d90c740, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.228] FindNextFileW (in: hFindFile=0x665d90c740, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.228] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.229] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\es\\PowerViewRes.es.xap", dwFileAttributes=0x80) returned 0 [0271.229] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\es\\PowerViewRes.es.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\es\\powerviewres.es.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.229] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.229] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.230] SetLastError (dwErrCode=0x0) [0271.230] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\es\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\es\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.234] GetLastError () returned 0x5 [0271.234] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.234] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.234] SetLastError (dwErrCode=0x0) [0271.234] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.234] GetLastError () returned 0x5 [0271.234] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.234] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.234] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\et\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bea0 [0271.235] FindNextFileW (in: hFindFile=0x665d90bea0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.235] FindNextFileW (in: hFindFile=0x665d90bea0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.235] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.235] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\et\\PowerViewRes.et.xap", dwFileAttributes=0x80) returned 0 [0271.236] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\et\\PowerViewRes.et.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\et\\powerviewres.et.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.236] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.236] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.237] SetLastError (dwErrCode=0x0) [0271.237] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\et\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\et\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.240] GetLastError () returned 0x5 [0271.240] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.240] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.240] SetLastError (dwErrCode=0x0) [0271.241] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.241] GetLastError () returned 0x5 [0271.241] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.241] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.241] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\eu\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bde0 [0271.242] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.242] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.242] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.242] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\eu\\PowerViewRes.eu.xap", dwFileAttributes=0x80) returned 0 [0271.242] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\eu\\PowerViewRes.eu.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\eu\\powerviewres.eu.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.243] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.243] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.244] SetLastError (dwErrCode=0x0) [0271.244] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\eu\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\eu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.247] GetLastError () returned 0x5 [0271.247] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.248] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.248] SetLastError (dwErrCode=0x0) [0271.248] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.248] GetLastError () returned 0x5 [0271.248] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.248] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.248] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fi\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d0a0 [0271.249] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.249] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.249] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.249] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fi\\PowerViewRes.fi.xap", dwFileAttributes=0x80) returned 0 [0271.250] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fi\\PowerViewRes.fi.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\fi\\powerviewres.fi.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.250] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.250] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.251] SetLastError (dwErrCode=0x0) [0271.251] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fi\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\fi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.254] GetLastError () returned 0x5 [0271.254] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.254] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.254] SetLastError (dwErrCode=0x0) [0271.254] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.255] GetLastError () returned 0x5 [0271.255] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.255] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.255] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fr\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bcc0 [0271.256] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.256] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.256] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.256] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fr\\PowerViewRes.fr.xap", dwFileAttributes=0x80) returned 0 [0271.256] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fr\\PowerViewRes.fr.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\fr\\powerviewres.fr.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.256] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.257] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.258] SetLastError (dwErrCode=0x0) [0271.258] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\fr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.261] GetLastError () returned 0x5 [0271.261] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.261] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.261] SetLastError (dwErrCode=0x0) [0271.261] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.261] GetLastError () returned 0x5 [0271.262] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.262] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.262] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\gl\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bcc0 [0271.262] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.263] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.263] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.263] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\gl\\PowerViewRes.gl.xap", dwFileAttributes=0x80) returned 0 [0271.263] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\gl\\PowerViewRes.gl.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\gl\\powerviewres.gl.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.263] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.263] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.264] SetLastError (dwErrCode=0x0) [0271.264] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\gl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\gl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.268] GetLastError () returned 0x5 [0271.268] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.268] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.268] SetLastError (dwErrCode=0x0) [0271.268] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.268] GetLastError () returned 0x5 [0271.268] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.268] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.268] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\he\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90cce0 [0271.269] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.269] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.269] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.270] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\he\\PowerViewRes.he.xap", dwFileAttributes=0x80) returned 0 [0271.270] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\he\\PowerViewRes.he.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\he\\powerviewres.he.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.270] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.270] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.271] SetLastError (dwErrCode=0x0) [0271.271] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\he\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\he\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.274] GetLastError () returned 0x5 [0271.275] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.275] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.275] SetLastError (dwErrCode=0x0) [0271.275] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.275] GetLastError () returned 0x5 [0271.275] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.275] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.275] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hi\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c0e0 [0271.276] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.276] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.276] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.277] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hi\\PowerViewRes.hi.xap", dwFileAttributes=0x80) returned 0 [0271.277] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hi\\PowerViewRes.hi.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\hi\\powerviewres.hi.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.277] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.277] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.278] SetLastError (dwErrCode=0x0) [0271.278] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hi\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\hi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.282] GetLastError () returned 0x5 [0271.282] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.282] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.282] SetLastError (dwErrCode=0x0) [0271.282] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.282] GetLastError () returned 0x5 [0271.282] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.282] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.282] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hr\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c260 [0271.283] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.283] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.283] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.283] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hr\\PowerViewRes.hr.xap", dwFileAttributes=0x80) returned 0 [0271.284] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hr\\PowerViewRes.hr.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\hr\\powerviewres.hr.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.284] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.284] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.285] SetLastError (dwErrCode=0x0) [0271.285] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\hr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.288] GetLastError () returned 0x5 [0271.288] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.288] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.288] SetLastError (dwErrCode=0x0) [0271.288] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.288] GetLastError () returned 0x5 [0271.289] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.289] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.289] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hu\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bde0 [0271.289] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.289] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.290] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.290] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hu\\PowerViewRes.hu.xap", dwFileAttributes=0x80) returned 0 [0271.290] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hu\\PowerViewRes.hu.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\hu\\powerviewres.hu.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.291] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.291] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.292] SetLastError (dwErrCode=0x0) [0271.292] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hu\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\hu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.295] GetLastError () returned 0x5 [0271.295] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.295] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.295] SetLastError (dwErrCode=0x0) [0271.295] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.295] GetLastError () returned 0x5 [0271.295] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.295] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.295] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\id\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90cb00 [0271.296] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.296] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.296] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.297] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\id\\PowerViewRes.id.xap", dwFileAttributes=0x80) returned 0 [0271.297] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\id\\PowerViewRes.id.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\id\\powerviewres.id.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.297] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.297] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.298] SetLastError (dwErrCode=0x0) [0271.298] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\id\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\id\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.302] GetLastError () returned 0x5 [0271.302] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.302] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.302] SetLastError (dwErrCode=0x0) [0271.302] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.302] GetLastError () returned 0x5 [0271.302] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.302] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.302] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\it\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c1a0 [0271.303] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.303] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.303] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\it\\PowerViewRes.it.xap", dwFileAttributes=0x80) returned 0 [0271.304] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\it\\PowerViewRes.it.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\it\\powerviewres.it.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.304] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.304] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.305] SetLastError (dwErrCode=0x0) [0271.305] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\it\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\it\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.309] GetLastError () returned 0x5 [0271.309] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.309] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.309] SetLastError (dwErrCode=0x0) [0271.309] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.309] GetLastError () returned 0x5 [0271.309] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.309] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.309] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ja\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c200 [0271.310] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.310] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.310] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.310] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ja\\PowerViewRes.ja.xap", dwFileAttributes=0x80) returned 0 [0271.311] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ja\\PowerViewRes.ja.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ja\\powerviewres.ja.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.311] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.311] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.312] SetLastError (dwErrCode=0x0) [0271.312] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ja\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ja\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.315] GetLastError () returned 0x5 [0271.315] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.315] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.315] SetLastError (dwErrCode=0x0) [0271.316] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.316] GetLastError () returned 0x5 [0271.316] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.316] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.316] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\kk\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d0a0 [0271.317] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.317] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.317] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.317] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\kk\\PowerViewRes.kk.xap", dwFileAttributes=0x80) returned 0 [0271.317] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\kk\\PowerViewRes.kk.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\kk\\powerviewres.kk.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.318] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.318] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.319] SetLastError (dwErrCode=0x0) [0271.319] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\kk\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\kk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.322] GetLastError () returned 0x5 [0271.322] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.322] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.322] SetLastError (dwErrCode=0x0) [0271.322] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.323] GetLastError () returned 0x5 [0271.323] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.323] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.323] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ko\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bcc0 [0271.324] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.324] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.324] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.324] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ko\\PowerViewRes.ko.xap", dwFileAttributes=0x80) returned 0 [0271.324] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ko\\PowerViewRes.ko.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ko\\powerviewres.ko.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.325] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.325] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.326] SetLastError (dwErrCode=0x0) [0271.326] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ko\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ko\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.328] GetLastError () returned 0x5 [0271.328] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.328] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.328] SetLastError (dwErrCode=0x0) [0271.328] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.329] GetLastError () returned 0x5 [0271.329] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.329] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.329] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lt\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90cb00 [0271.329] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.329] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.329] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.330] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lt\\PowerViewRes.lt.xap", dwFileAttributes=0x80) returned 0 [0271.330] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lt\\PowerViewRes.lt.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\lt\\powerviewres.lt.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.330] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.330] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.331] SetLastError (dwErrCode=0x0) [0271.331] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lt\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\lt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.333] GetLastError () returned 0x5 [0271.333] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.333] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.333] SetLastError (dwErrCode=0x0) [0271.334] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.334] GetLastError () returned 0x5 [0271.334] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.334] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.334] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lv\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d0a0 [0271.334] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.334] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.335] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lv\\PowerViewRes.lv.xap", dwFileAttributes=0x80) returned 0 [0271.335] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lv\\PowerViewRes.lv.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\lv\\powerviewres.lv.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.335] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.335] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.336] SetLastError (dwErrCode=0x0) [0271.336] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lv\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\lv\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.339] GetLastError () returned 0x5 [0271.339] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.339] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.339] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.339] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\Microsoft.Reporting.AdHoc.Shell.Bootstrapper.xap", dwFileAttributes=0x80) returned 0 [0271.339] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\Microsoft.Reporting.AdHoc.Shell.Bootstrapper.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\microsoft.reporting.adhoc.shell.bootstrapper.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.339] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.339] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.340] SetLastError (dwErrCode=0x0) [0271.340] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.340] GetLastError () returned 0x5 [0271.340] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.340] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.340] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ms\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c1a0 [0271.341] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.341] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.341] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.341] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ms\\PowerViewRes.ms.xap", dwFileAttributes=0x80) returned 0 [0271.341] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ms\\PowerViewRes.ms.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ms\\powerviewres.ms.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.341] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.341] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.342] SetLastError (dwErrCode=0x0) [0271.342] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ms\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ms\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.345] GetLastError () returned 0x5 [0271.345] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.345] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.345] SetLastError (dwErrCode=0x0) [0271.345] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.345] GetLastError () returned 0x5 [0271.345] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.345] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.345] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\nl\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90cc80 [0271.346] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.346] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.346] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.346] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\nl\\PowerViewRes.nl.xap", dwFileAttributes=0x80) returned 0 [0271.347] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\nl\\PowerViewRes.nl.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\nl\\powerviewres.nl.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.347] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.347] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.348] SetLastError (dwErrCode=0x0) [0271.348] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\nl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\nl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.350] GetLastError () returned 0x5 [0271.350] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.350] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.350] SetLastError (dwErrCode=0x0) [0271.350] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.351] GetLastError () returned 0x5 [0271.351] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.351] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.351] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\no\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c440 [0271.351] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.351] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.351] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.352] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\no\\PowerViewRes.no.xap", dwFileAttributes=0x80) returned 0 [0271.352] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\no\\PowerViewRes.no.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\no\\powerviewres.no.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.352] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.352] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.353] SetLastError (dwErrCode=0x0) [0271.353] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\no\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\no\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.356] GetLastError () returned 0x5 [0271.356] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.356] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.356] SetLastError (dwErrCode=0x0) [0271.356] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.356] GetLastError () returned 0x5 [0271.356] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.356] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.356] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pl\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90ca40 [0271.357] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.357] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.357] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.357] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pl\\PowerViewRes.pl.xap", dwFileAttributes=0x80) returned 0 [0271.357] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pl\\PowerViewRes.pl.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\pl\\powerviewres.pl.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.357] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.358] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.358] SetLastError (dwErrCode=0x0) [0271.358] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\pl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.361] GetLastError () returned 0x5 [0271.361] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.361] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.361] SetLastError (dwErrCode=0x0) [0271.361] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.361] GetLastError () returned 0x5 [0271.361] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.361] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.361] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bcc0 [0271.362] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.362] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.362] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.362] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt\\PowerViewRes.pt.xap", dwFileAttributes=0x80) returned 0 [0271.362] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt\\PowerViewRes.pt.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\pt\\powerviewres.pt.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.363] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.363] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.363] SetLastError (dwErrCode=0x0) [0271.363] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\pt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.366] GetLastError () returned 0x5 [0271.366] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.366] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.366] SetLastError (dwErrCode=0x0) [0271.366] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.366] GetLastError () returned 0x5 [0271.366] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.366] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.366] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt-PT\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c440 [0271.367] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.367] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.367] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.367] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt-PT\\PowerViewRes.pt-PT.xap", dwFileAttributes=0x80) returned 0 [0271.368] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt-PT\\PowerViewRes.pt-PT.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\pt-pt\\powerviewres.pt-pt.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.368] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.368] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.369] SetLastError (dwErrCode=0x0) [0271.369] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt-PT\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\pt-pt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.372] GetLastError () returned 0x5 [0271.372] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.372] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.372] SetLastError (dwErrCode=0x0) [0271.372] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.372] GetLastError () returned 0x5 [0271.372] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.372] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.372] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ro\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bea0 [0271.373] FindNextFileW (in: hFindFile=0x665d90bea0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.373] FindNextFileW (in: hFindFile=0x665d90bea0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.373] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.373] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ro\\PowerViewRes.ro.xap", dwFileAttributes=0x80) returned 0 [0271.373] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ro\\PowerViewRes.ro.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ro\\powerviewres.ro.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.373] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.374] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.374] SetLastError (dwErrCode=0x0) [0271.374] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ro\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ro\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.377] GetLastError () returned 0x5 [0271.377] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.377] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.377] SetLastError (dwErrCode=0x0) [0271.377] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.377] GetLastError () returned 0x5 [0271.377] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.377] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.377] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ru\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bcc0 [0271.378] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.378] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.378] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ru\\PowerViewRes.ru.xap", dwFileAttributes=0x80) returned 0 [0271.378] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ru\\PowerViewRes.ru.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ru\\powerviewres.ru.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.379] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.379] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.379] SetLastError (dwErrCode=0x0) [0271.379] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ru\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ru\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.382] GetLastError () returned 0x5 [0271.382] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.382] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.382] SetLastError (dwErrCode=0x0) [0271.382] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.383] GetLastError () returned 0x5 [0271.383] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.383] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.383] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sk\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bea0 [0271.383] FindNextFileW (in: hFindFile=0x665d90bea0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.383] FindNextFileW (in: hFindFile=0x665d90bea0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.383] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.384] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sk\\PowerViewRes.sk.xap", dwFileAttributes=0x80) returned 0 [0271.384] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sk\\PowerViewRes.sk.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\sk\\powerviewres.sk.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.384] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.384] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.385] SetLastError (dwErrCode=0x0) [0271.385] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sk\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\sk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.387] GetLastError () returned 0x5 [0271.388] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.388] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.388] SetLastError (dwErrCode=0x0) [0271.388] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.388] GetLastError () returned 0x5 [0271.388] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.388] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.388] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sl\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c680 [0271.389] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.389] FindNextFileW (in: hFindFile=0x665d90c680, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.389] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.389] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sl\\PowerViewRes.sl.xap", dwFileAttributes=0x80) returned 0 [0271.389] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sl\\PowerViewRes.sl.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\sl\\powerviewres.sl.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.389] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.389] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.390] SetLastError (dwErrCode=0x0) [0271.390] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\sl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.393] GetLastError () returned 0x5 [0271.393] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.393] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.393] SetLastError (dwErrCode=0x0) [0271.393] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.393] GetLastError () returned 0x5 [0271.393] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.393] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.393] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-cyrl\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bde0 [0271.394] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.394] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.394] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-cyrl\\PowerViewRes.sr-cyrl.xap", dwFileAttributes=0x80) returned 0 [0271.394] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-cyrl\\PowerViewRes.sr-cyrl.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\sr-cyrl\\powerviewres.sr-cyrl.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.394] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.394] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.395] SetLastError (dwErrCode=0x0) [0271.395] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-cyrl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\sr-cyrl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.398] GetLastError () returned 0x5 [0271.398] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.398] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.398] SetLastError (dwErrCode=0x0) [0271.398] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.398] GetLastError () returned 0x5 [0271.398] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.398] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.398] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-latn\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c440 [0271.399] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.399] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.399] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.399] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-latn\\PowerViewRes.sr-latn.xap", dwFileAttributes=0x80) returned 0 [0271.399] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-latn\\PowerViewRes.sr-latn.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\sr-latn\\powerviewres.sr-latn.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.399] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.399] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.400] SetLastError (dwErrCode=0x0) [0271.400] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-latn\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\sr-latn\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.403] GetLastError () returned 0x5 [0271.403] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.403] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.403] SetLastError (dwErrCode=0x0) [0271.403] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.403] GetLastError () returned 0x5 [0271.403] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.403] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.403] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-Latn-CS\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c8c0 [0271.403] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.403] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0271.404] FindClose (in: hFindFile=0x665d90c8c0 | out: hFindFile=0x665d90c8c0) returned 1 [0271.404] SetLastError (dwErrCode=0x0) [0271.404] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-Latn-CS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\sr-latn-cs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.404] GetLastError () returned 0x5 [0271.404] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.404] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.404] SetLastError (dwErrCode=0x0) [0271.404] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.404] GetLastError () returned 0x5 [0271.404] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.404] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.404] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sv\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90cc80 [0271.405] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.405] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.405] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.405] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sv\\PowerViewRes.sv.xap", dwFileAttributes=0x80) returned 0 [0271.405] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sv\\PowerViewRes.sv.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\sv\\powerviewres.sv.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.406] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.406] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.406] SetLastError (dwErrCode=0x0) [0271.406] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sv\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\sv\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.409] GetLastError () returned 0x5 [0271.409] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.409] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.409] SetLastError (dwErrCode=0x0) [0271.409] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.409] GetLastError () returned 0x5 [0271.409] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.409] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.409] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\th\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c380 [0271.410] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.410] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.410] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.410] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\th\\PowerViewRes.th.xap", dwFileAttributes=0x80) returned 0 [0271.410] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\th\\PowerViewRes.th.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\th\\powerviewres.th.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.411] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.411] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.411] SetLastError (dwErrCode=0x0) [0271.411] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\th\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\th\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.414] GetLastError () returned 0x5 [0271.414] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.414] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.414] SetLastError (dwErrCode=0x0) [0271.414] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.414] GetLastError () returned 0x5 [0271.414] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.414] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.414] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\tr\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bde0 [0271.415] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.415] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.415] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.416] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\tr\\PowerViewRes.tr.xap", dwFileAttributes=0x80) returned 0 [0271.416] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\tr\\PowerViewRes.tr.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\tr\\powerviewres.tr.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.416] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.416] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.417] SetLastError (dwErrCode=0x0) [0271.417] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\tr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\tr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.419] GetLastError () returned 0x5 [0271.419] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.419] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.419] SetLastError (dwErrCode=0x0) [0271.419] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.420] GetLastError () returned 0x5 [0271.420] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.420] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.420] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\uk\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c740 [0271.420] FindNextFileW (in: hFindFile=0x665d90c740, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.420] FindNextFileW (in: hFindFile=0x665d90c740, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.420] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.421] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\uk\\PowerViewRes.uk.xap", dwFileAttributes=0x80) returned 0 [0271.421] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\uk\\PowerViewRes.uk.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\uk\\powerviewres.uk.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.421] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.421] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.422] SetLastError (dwErrCode=0x0) [0271.422] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\uk\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\uk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.425] GetLastError () returned 0x5 [0271.425] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.425] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.425] SetLastError (dwErrCode=0x0) [0271.425] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.425] GetLastError () returned 0x5 [0271.425] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.425] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.425] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\vi\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c920 [0271.426] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.426] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.426] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.426] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\vi\\PowerViewRes.vi.xap", dwFileAttributes=0x80) returned 0 [0271.426] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\vi\\PowerViewRes.vi.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\vi\\powerviewres.vi.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.427] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.427] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.427] SetLastError (dwErrCode=0x0) [0271.427] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\vi\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\vi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.430] GetLastError () returned 0x5 [0271.430] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.430] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.430] SetLastError (dwErrCode=0x0) [0271.430] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.430] GetLastError () returned 0x5 [0271.430] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.430] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.430] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHS\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c380 [0271.431] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.431] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.431] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.432] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHS\\PowerViewRes.zh-CHS.xap", dwFileAttributes=0x80) returned 0 [0271.432] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHS\\PowerViewRes.zh-CHS.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\zh-chs\\powerviewres.zh-chs.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.432] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.432] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.433] SetLastError (dwErrCode=0x0) [0271.433] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\zh-chs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.435] GetLastError () returned 0x5 [0271.435] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.435] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.435] SetLastError (dwErrCode=0x0) [0271.435] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.436] GetLastError () returned 0x5 [0271.436] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.436] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.436] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHT\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c8c0 [0271.436] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.436] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.436] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.437] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHT\\PowerViewRes.zh-CHT.xap", dwFileAttributes=0x80) returned 0 [0271.437] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHT\\PowerViewRes.zh-CHT.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\zh-cht\\powerviewres.zh-cht.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.437] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.437] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.438] SetLastError (dwErrCode=0x0) [0271.438] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHT\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\zh-cht\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.440] GetLastError () returned 0x5 [0271.440] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.440] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.441] SetLastError (dwErrCode=0x0) [0271.441] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.441] GetLastError () returned 0x5 [0271.441] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0271.441] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.441] SetLastError (dwErrCode=0x0) [0271.441] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.441] GetLastError () returned 0x5 [0271.441] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0271.441] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.441] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90cc80 [0271.441] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.442] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.442] SetLastError (dwErrCode=0x0) [0271.442] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.442] GetLastError () returned 0x5 [0271.442] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.442] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.442] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bea0 [0271.443] FindNextFileW (in: hFindFile=0x665d90bea0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.443] FindNextFileW (in: hFindFile=0x665d90bea0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.443] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.443] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0271.444] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ar\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.444] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.444] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.445] SetLastError (dwErrCode=0x0) [0271.445] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ar\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.453] GetLastError () returned 0x5 [0271.453] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.454] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.454] SetLastError (dwErrCode=0x0) [0271.454] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.454] GetLastError () returned 0x5 [0271.454] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.454] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.454] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c260 [0271.455] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.455] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.455] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.455] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0271.456] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\bg\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.456] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.456] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.457] SetLastError (dwErrCode=0x0) [0271.457] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\bg\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.460] GetLastError () returned 0x5 [0271.460] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.460] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.460] SetLastError (dwErrCode=0x0) [0271.460] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.461] GetLastError () returned 0x5 [0271.461] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.461] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.461] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c5c0 [0271.462] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.462] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.462] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.462] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0271.465] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ca\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.466] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.466] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.467] SetLastError (dwErrCode=0x0) [0271.467] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ca\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.470] GetLastError () returned 0x5 [0271.470] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.470] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.470] SetLastError (dwErrCode=0x0) [0271.470] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.470] GetLastError () returned 0x5 [0271.470] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.471] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.471] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c5c0 [0271.472] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.472] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.472] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.472] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\as80.xsl", dwFileAttributes=0x80) returned 0 [0271.473] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\as80.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\as80.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.473] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.473] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.473] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.474] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\as90.xsl", dwFileAttributes=0x80) returned 0 [0271.474] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\as90.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\as90.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.474] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.474] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.474] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.474] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\db2v0801.xsl", dwFileAttributes=0x80) returned 0 [0271.475] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\db2v0801.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\db2v0801.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.475] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.475] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.475] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.475] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\hive.xsl", dwFileAttributes=0x80) returned 0 [0271.475] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\hive.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\hive.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.476] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.476] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.476] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.476] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\Informix.xsl", dwFileAttributes=0x80) returned 0 [0271.476] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\Informix.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\informix.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.476] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.476] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.477] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.477] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\msjet.xsl", dwFileAttributes=0x80) returned 0 [0271.477] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\msjet.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\msjet.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.477] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.477] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.477] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.478] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\orcl7.xsl", dwFileAttributes=0x80) returned 0 [0271.479] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\orcl7.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\orcl7.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.479] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.479] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.479] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.480] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql120.xsl", dwFileAttributes=0x80) returned 0 [0271.480] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql120.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\sql120.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.480] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.480] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.480] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql2000.xsl", dwFileAttributes=0x80) returned 0 [0271.481] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql2000.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\sql2000.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.481] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.481] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.481] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql70.xsl", dwFileAttributes=0x80) returned 0 [0271.482] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql70.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\sql70.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.482] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.482] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.482] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql90.xsl", dwFileAttributes=0x80) returned 0 [0271.482] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql90.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\sql90.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.483] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.483] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.483] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.483] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sqlpdw.xsl", dwFileAttributes=0x80) returned 0 [0271.483] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sqlpdw.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\sqlpdw.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.483] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.483] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.484] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.484] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\Sybase.xsl", dwFileAttributes=0x80) returned 0 [0271.484] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\Sybase.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\sybase.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.484] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.484] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.484] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.485] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\trdtv2r41.xsl", dwFileAttributes=0x80) returned 0 [0271.485] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\trdtv2r41.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\trdtv2r41.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.485] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.485] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.486] SetLastError (dwErrCode=0x0) [0271.486] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.489] GetLastError () returned 0x5 [0271.489] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.489] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.489] SetLastError (dwErrCode=0x0) [0271.489] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.489] GetLastError () returned 0x5 [0271.489] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.489] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.489] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bfc0 [0271.490] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.490] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.490] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0271.491] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cs\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.491] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.491] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.492] SetLastError (dwErrCode=0x0) [0271.492] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.495] GetLastError () returned 0x5 [0271.495] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.495] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.495] SetLastError (dwErrCode=0x0) [0271.495] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.495] GetLastError () returned 0x5 [0271.495] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.495] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.495] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90cec0 [0271.496] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.496] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.496] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0271.497] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\da\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.497] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.497] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.498] SetLastError (dwErrCode=0x0) [0271.498] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\da\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.502] GetLastError () returned 0x5 [0271.502] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.502] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.502] SetLastError (dwErrCode=0x0) [0271.502] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.502] GetLastError () returned 0x5 [0271.502] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.502] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.502] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c020 [0271.503] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.503] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.503] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.503] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0271.504] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\de\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.504] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.504] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.505] SetLastError (dwErrCode=0x0) [0271.505] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\de\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.508] GetLastError () returned 0x5 [0271.508] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.508] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.508] SetLastError (dwErrCode=0x0) [0271.509] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.509] GetLastError () returned 0x5 [0271.509] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.509] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.509] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c5c0 [0271.510] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.510] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.510] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0271.511] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\el\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.511] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.511] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.512] SetLastError (dwErrCode=0x0) [0271.512] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\el\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.514] GetLastError () returned 0x5 [0271.514] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.514] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.514] SetLastError (dwErrCode=0x0) [0271.514] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.515] GetLastError () returned 0x5 [0271.515] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.515] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.515] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\en\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c080 [0271.515] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.515] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.515] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.515] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\en\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0271.515] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\en\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\en\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.515] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.515] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.516] SetLastError (dwErrCode=0x0) [0271.516] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\en\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\en\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.516] GetLastError () returned 0x5 [0271.516] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.516] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.516] SetLastError (dwErrCode=0x0) [0271.516] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.516] GetLastError () returned 0x5 [0271.516] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.516] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.516] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bcc0 [0271.517] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.517] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.517] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.517] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0271.518] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\es\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.518] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.518] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.519] SetLastError (dwErrCode=0x0) [0271.519] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\es\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.521] GetLastError () returned 0x5 [0271.521] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.521] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.521] SetLastError (dwErrCode=0x0) [0271.521] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.521] GetLastError () returned 0x5 [0271.521] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.521] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.521] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c080 [0271.522] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.522] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.522] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0271.523] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\et\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.523] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.523] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.524] SetLastError (dwErrCode=0x0) [0271.524] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\et\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.527] GetLastError () returned 0x5 [0271.527] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.527] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.527] SetLastError (dwErrCode=0x0) [0271.527] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.527] GetLastError () returned 0x5 [0271.527] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.527] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.527] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c8c0 [0271.528] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.528] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.528] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0271.528] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\eu\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.528] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.529] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.529] SetLastError (dwErrCode=0x0) [0271.529] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\eu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.532] GetLastError () returned 0x5 [0271.532] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.532] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.532] SetLastError (dwErrCode=0x0) [0271.532] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.532] GetLastError () returned 0x5 [0271.532] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.532] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.532] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bcc0 [0271.533] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.533] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.533] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0271.534] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\fi\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.534] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.534] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.535] SetLastError (dwErrCode=0x0) [0271.535] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\fi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.537] GetLastError () returned 0x5 [0271.537] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.537] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.537] SetLastError (dwErrCode=0x0) [0271.537] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.538] GetLastError () returned 0x5 [0271.538] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.538] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.538] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c920 [0271.538] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.538] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.539] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.539] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0271.539] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\fr\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.539] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.539] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.540] SetLastError (dwErrCode=0x0) [0271.540] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\fr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.543] GetLastError () returned 0x5 [0271.543] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.543] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.543] SetLastError (dwErrCode=0x0) [0271.543] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.543] GetLastError () returned 0x5 [0271.543] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.543] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.543] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bcc0 [0271.544] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.544] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.544] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.544] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0271.545] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\gl\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.545] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.545] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.546] SetLastError (dwErrCode=0x0) [0271.546] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\gl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.548] GetLastError () returned 0x5 [0271.548] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.548] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.548] SetLastError (dwErrCode=0x0) [0271.548] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.548] GetLastError () returned 0x5 [0271.548] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.548] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.549] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c5c0 [0271.549] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.549] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.549] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0271.550] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\he\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.550] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.550] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.551] SetLastError (dwErrCode=0x0) [0271.551] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\he\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.553] GetLastError () returned 0x5 [0271.553] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.553] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.553] SetLastError (dwErrCode=0x0) [0271.554] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.554] GetLastError () returned 0x5 [0271.554] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.554] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.554] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bcc0 [0271.554] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.555] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.555] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0271.555] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\hi\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.555] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.555] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.556] SetLastError (dwErrCode=0x0) [0271.556] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\hi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.559] GetLastError () returned 0x5 [0271.559] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.559] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.559] SetLastError (dwErrCode=0x0) [0271.559] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.559] GetLastError () returned 0x5 [0271.559] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.559] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.559] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c8c0 [0271.560] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.560] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.560] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0271.561] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\hr\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.561] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.561] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.562] SetLastError (dwErrCode=0x0) [0271.562] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\hr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.564] GetLastError () returned 0x5 [0271.564] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.565] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.565] SetLastError (dwErrCode=0x0) [0271.565] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.565] GetLastError () returned 0x5 [0271.565] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.565] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.565] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c5c0 [0271.566] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.566] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.566] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.566] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0271.566] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\hu\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.566] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.566] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.567] SetLastError (dwErrCode=0x0) [0271.567] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\hu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.570] GetLastError () returned 0x5 [0271.570] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.570] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.570] SetLastError (dwErrCode=0x0) [0271.570] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.570] GetLastError () returned 0x5 [0271.570] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.570] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.570] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90ce60 [0271.571] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.571] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.571] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0271.571] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\id\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.572] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.572] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.573] SetLastError (dwErrCode=0x0) [0271.573] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\id\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.575] GetLastError () returned 0x5 [0271.575] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.575] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.575] SetLastError (dwErrCode=0x0) [0271.575] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.576] GetLastError () returned 0x5 [0271.576] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.576] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.576] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\it\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bcc0 [0271.576] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.576] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.577] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.577] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\it\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0271.577] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\it\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\it\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.577] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.577] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.578] SetLastError (dwErrCode=0x0) [0271.578] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\it\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\it\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.580] GetLastError () returned 0x5 [0271.581] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.581] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.581] SetLastError (dwErrCode=0x0) [0271.581] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.581] GetLastError () returned 0x5 [0271.581] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.581] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.581] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ja\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90cec0 [0271.582] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.582] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.582] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.582] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ja\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0271.582] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ja\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ja\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.582] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.582] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.583] SetLastError (dwErrCode=0x0) [0271.583] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ja\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ja\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.586] GetLastError () returned 0x5 [0271.586] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.586] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.587] GetLastError () returned 0x5 [0271.587] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.587] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.587] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\kk\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c0e0 [0271.588] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.588] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.588] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.588] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\kk\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0271.588] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\kk\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\kk\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.588] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.588] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.593] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ko\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0271.594] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ko\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ko\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.594] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.594] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.598] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.598] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lt\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0271.598] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lt\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\lt\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.598] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.598] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.603] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.603] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lv\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0271.604] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lv\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\lv\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.604] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.604] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.608] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.608] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.AnalysisServices.Modeler.UI.rll", dwFileAttributes=0x80) returned 0 [0271.609] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.AnalysisServices.Modeler.UI.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\microsoft.analysisservices.modeler.ui.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.609] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.609] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.609] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.Office.PowerPivot.ExcelAddIn.tlb", dwFileAttributes=0x80) returned 0 [0271.610] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.Office.PowerPivot.ExcelAddIn.tlb" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\microsoft.office.powerpivot.exceladdin.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.610] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.610] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.611] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.611] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ms\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0271.611] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ms\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ms\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.612] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.612] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.616] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\nl\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0271.616] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\nl\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\nl\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.617] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.617] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.621] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.621] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\no\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0271.621] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\no\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\no\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.622] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.622] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.626] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.626] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pl\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0271.626] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pl\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\pl\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.626] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.626] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.630] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.630] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\PowerPivotExcelClientAddIn.tlb", dwFileAttributes=0x80) returned 0 [0271.630] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\PowerPivotExcelClientAddIn.tlb" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\powerpivotexcelclientaddin.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.630] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.630] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.631] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0271.632] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\pt\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.632] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.632] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.637] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.637] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt-PT\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0271.637] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt-PT\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\pt-pt\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.638] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.638] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.642] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1025\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0271.643] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1025\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1025\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.643] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.643] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.644] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.644] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1026\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0271.646] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1026\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1026\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.647] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.647] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.647] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\10266\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0271.648] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\10266\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\10266\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.648] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.648] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.648] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.649] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1027\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0271.649] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1027\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1027\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.649] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.649] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.650] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.669] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1028\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0271.669] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1028\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1028\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.669] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.669] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.670] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.670] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1029\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0271.670] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1029\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1029\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.671] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.671] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.671] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.671] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1030\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0271.673] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1030\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1030\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.673] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.673] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.673] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1031\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0271.674] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1031\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1031\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.674] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.674] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.674] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1032\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0271.675] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1032\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1032\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.675] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.675] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.675] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.676] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1033\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0271.676] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1033\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1033\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.676] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.676] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.679] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.680] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1035\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0271.680] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1035\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1035\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.680] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.680] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.681] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1036\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0271.681] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1036\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1036\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.681] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.681] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.682] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.682] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1037\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0271.682] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1037\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1037\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.682] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.682] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.683] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.683] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1038\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0271.683] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1038\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1038\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.684] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.684] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.684] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.684] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1040\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0271.685] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1040\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1040\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.685] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.685] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.685] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.686] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1041\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0271.686] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1041\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1041\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.686] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.686] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.687] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1042\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0271.687] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1042\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1042\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.687] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.688] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.688] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.688] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1043\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0271.688] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1043\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1043\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.689] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.689] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.689] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1044\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0271.690] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1044\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1044\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.690] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.690] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.690] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1045\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0271.691] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1045\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1045\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.691] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.691] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.691] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1046\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0271.692] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1046\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1046\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.692] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.692] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.693] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.693] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1048\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0271.693] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1048\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1048\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.693] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.693] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.694] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1049\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0271.695] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1049\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1049\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.695] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.695] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.696] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.696] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1050\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0271.696] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1050\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1050\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.696] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.696] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.697] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1051\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0271.697] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1051\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1051\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.698] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.698] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.698] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.698] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1053\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0271.699] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1053\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1053\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.699] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.699] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.699] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1054\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0271.700] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1054\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1054\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.700] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.700] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.700] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1055\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0271.701] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1055\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1055\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.701] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.701] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.702] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1057\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0271.702] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1057\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1057\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.702] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.702] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.703] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.703] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1058\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0271.703] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1058\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1058\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.703] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.703] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.704] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1060\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0271.704] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1060\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1060\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.705] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.705] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.705] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.705] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1061\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0271.706] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1061\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1061\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.706] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.706] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.707] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.707] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1062\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0271.707] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1062\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1062\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.708] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.708] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.708] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.708] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1063\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0271.709] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1063\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1063\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.709] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.709] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.709] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.710] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1066\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0271.710] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1066\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1066\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.710] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.710] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.710] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1069\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0271.711] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1069\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1069\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.711] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.711] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.712] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.712] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1081\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0271.716] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1081\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1081\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.717] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.717] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.717] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1086\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0271.718] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1086\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1086\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.718] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.718] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.719] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0271.719] FindClose (in: hFindFile=0x665d90c260 | out: hFindFile=0x665d90c260) returned 1 [0271.719] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1086\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1086\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.723] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1087\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0271.724] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1087\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1087\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.724] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.724] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.724] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0271.724] FindClose (in: hFindFile=0x665d90c5c0 | out: hFindFile=0x665d90c5c0) returned 1 [0271.724] SetLastError (dwErrCode=0x0) [0271.724] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1087\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1087\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.725] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1110\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0271.726] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1110\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1110\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.726] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.726] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.727] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0271.727] FindClose (in: hFindFile=0x665d90c5c0 | out: hFindFile=0x665d90c5c0) returned 1 [0271.727] SetLastError (dwErrCode=0x0) [0271.727] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1110\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1110\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.727] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2052\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0271.728] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2052\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\2052\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.728] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.728] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.728] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0271.728] FindClose (in: hFindFile=0x665d90bfc0 | out: hFindFile=0x665d90bfc0) returned 1 [0271.728] SetLastError (dwErrCode=0x0) [0271.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2052\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\2052\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.729] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2070\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0271.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2070\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\2070\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.730] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.730] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.730] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0271.730] FindClose (in: hFindFile=0x665d90bcc0 | out: hFindFile=0x665d90bcc0) returned 1 [0271.730] SetLastError (dwErrCode=0x0) [0271.730] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2070\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\2070\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.732] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\3082\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0271.732] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\3082\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\3082\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.732] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.732] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.733] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0271.733] FindClose (in: hFindFile=0x665d90cce0 | out: hFindFile=0x665d90cce0) returned 1 [0271.733] SetLastError (dwErrCode=0x0) [0271.733] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\3082\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\3082\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.734] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\9242\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0 [0271.734] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\9242\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\9242\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.734] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.734] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.735] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0271.735] FindClose (in: hFindFile=0x665d90bfc0 | out: hFindFile=0x665d90bfc0) returned 1 [0271.735] SetLastError (dwErrCode=0x0) [0271.735] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\9242\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\9242\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.737] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ro\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0271.737] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ro\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ro\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.737] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.737] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.738] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.738] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.738] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.738] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.738] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.738] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.738] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.738] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.738] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.738] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.738] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.738] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.738] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.738] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.738] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.738] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.738] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.738] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.738] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.738] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.738] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.738] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0271.738] FindClose (in: hFindFile=0x665d90cb00 | out: hFindFile=0x665d90cb00) returned 1 [0271.739] SetLastError (dwErrCode=0x0) [0271.739] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ro\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ro\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.744] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ru\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0271.744] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ru\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ru\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.745] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.745] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.745] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.745] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.745] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.745] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.745] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.745] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.745] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.745] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.745] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.745] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.745] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.745] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.745] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.745] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.745] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.745] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.745] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.745] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.745] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.745] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.745] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.745] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0271.745] FindClose (in: hFindFile=0x665d90c1a0 | out: hFindFile=0x665d90c1a0) returned 1 [0271.747] SetLastError (dwErrCode=0x0) [0271.747] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ru\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ru\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.750] GetLastError () returned 0x5 [0271.750] SetLastError (dwErrCode=0x0) [0271.750] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.751] GetLastError () returned 0x5 [0271.751] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.752] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sk\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0271.752] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sk\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\sk\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.752] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.752] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.752] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.752] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.752] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.752] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.752] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.752] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.752] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.752] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.753] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.753] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.753] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.753] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.753] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.753] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.753] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.753] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.753] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.753] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.753] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.753] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.753] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.753] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0271.753] FindClose (in: hFindFile=0x665d90c200 | out: hFindFile=0x665d90c200) returned 1 [0271.754] SetLastError (dwErrCode=0x0) [0271.754] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sk\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\sk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.757] GetLastError () returned 0x5 [0271.757] SetLastError (dwErrCode=0x0) [0271.757] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.757] GetLastError () returned 0x5 [0271.758] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sl\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0271.759] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sl\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\sl\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.759] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.759] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.759] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.759] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.759] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.759] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.759] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.760] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.760] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.760] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.760] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.760] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.760] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.760] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.760] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.760] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.760] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.760] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.760] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.760] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.760] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.760] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.760] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.760] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0271.760] FindClose (in: hFindFile=0x665d90d0a0 | out: hFindFile=0x665d90d0a0) returned 1 [0271.761] SetLastError (dwErrCode=0x0) [0271.761] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\sl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.763] GetLastError () returned 0x5 [0271.763] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.763] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.763] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.763] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.763] SetLastError (dwErrCode=0x0) [0271.764] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.764] GetLastError () returned 0x5 [0271.764] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.764] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.764] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-cyrl\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bcc0 [0271.764] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.765] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.765] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.765] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-cyrl\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0271.765] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-cyrl\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\sr-cyrl\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.765] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.765] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.766] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.766] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.766] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.766] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.766] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.766] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.766] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.766] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.766] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.766] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.766] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.766] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.766] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.766] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.766] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.766] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.766] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.766] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.766] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.766] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.766] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.766] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0271.766] FindClose (in: hFindFile=0x665d90bcc0 | out: hFindFile=0x665d90bcc0) returned 1 [0271.767] SetLastError (dwErrCode=0x0) [0271.767] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-cyrl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\sr-cyrl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.769] GetLastError () returned 0x5 [0271.769] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.769] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.769] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.769] SetLastError (dwErrCode=0x0) [0271.769] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.770] GetLastError () returned 0x5 [0271.770] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.770] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.770] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-latn\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90cb00 [0271.770] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.771] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.771] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.771] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-latn\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0271.771] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-latn\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\sr-latn\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.771] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.771] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.771] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.772] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.772] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.772] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.772] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.772] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.772] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.772] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.772] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.772] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.772] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.772] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.772] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.772] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.772] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.772] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.772] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.772] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.772] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.772] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.772] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.772] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0271.772] FindClose (in: hFindFile=0x665d90cb00 | out: hFindFile=0x665d90cb00) returned 1 [0271.773] SetLastError (dwErrCode=0x0) [0271.773] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-latn\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\sr-latn\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.775] GetLastError () returned 0x5 [0271.775] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.775] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.775] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.775] SetLastError (dwErrCode=0x0) [0271.775] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.776] GetLastError () returned 0x5 [0271.776] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.776] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.776] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-Latn-CS\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d0a0 [0271.776] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.776] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0271.776] FindClose (in: hFindFile=0x665d90d0a0 | out: hFindFile=0x665d90d0a0) returned 1 [0271.776] SetLastError (dwErrCode=0x0) [0271.776] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-Latn-CS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\sr-latn-cs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.776] GetLastError () returned 0x5 [0271.776] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.776] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.776] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.776] SetLastError (dwErrCode=0x0) [0271.776] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.777] GetLastError () returned 0x5 [0271.777] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.777] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.777] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sv\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c620 [0271.777] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.778] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.778] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.778] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sv\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0271.778] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sv\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\sv\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.778] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.778] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.778] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.778] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.778] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.778] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.778] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.779] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.779] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.779] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.779] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.779] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.779] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.779] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.779] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.779] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.779] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.779] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.779] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.779] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.779] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.779] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.779] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.779] FindNextFileW (in: hFindFile=0x665d90c620, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0271.779] FindClose (in: hFindFile=0x665d90c620 | out: hFindFile=0x665d90c620) returned 1 [0271.780] SetLastError (dwErrCode=0x0) [0271.780] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sv\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\sv\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.782] GetLastError () returned 0x5 [0271.782] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.782] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.782] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.782] SetLastError (dwErrCode=0x0) [0271.782] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.782] GetLastError () returned 0x5 [0271.782] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.782] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.783] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\th\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c200 [0271.783] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.783] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.783] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\th\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0271.784] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\th\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\th\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.784] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.784] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.784] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.784] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.784] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.784] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.784] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.784] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.784] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.784] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.784] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.784] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.784] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.784] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.784] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.784] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.784] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.784] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.785] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.785] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.785] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.785] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.785] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.785] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0271.785] FindClose (in: hFindFile=0x665d90c200 | out: hFindFile=0x665d90c200) returned 1 [0271.785] SetLastError (dwErrCode=0x0) [0271.785] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\th\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\th\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.788] GetLastError () returned 0x5 [0271.788] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.788] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.788] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.788] SetLastError (dwErrCode=0x0) [0271.788] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.788] GetLastError () returned 0x5 [0271.788] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.788] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.788] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tr\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90cd40 [0271.789] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.789] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.789] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.789] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tr\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0271.789] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tr\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\tr\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.790] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.790] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.790] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.790] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.790] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.790] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.790] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.790] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.790] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.790] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.790] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.790] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.790] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.790] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.790] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.790] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.790] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.790] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.790] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.790] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.790] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.790] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.790] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.790] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0271.790] FindClose (in: hFindFile=0x665d90cd40 | out: hFindFile=0x665d90cd40) returned 1 [0271.791] SetLastError (dwErrCode=0x0) [0271.791] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\tr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.794] GetLastError () returned 0x5 [0271.794] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.794] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.794] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.794] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.794] SetLastError (dwErrCode=0x0) [0271.794] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.794] GetLastError () returned 0x5 [0271.794] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.794] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.794] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\uk\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c5c0 [0271.795] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.795] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.795] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\uk\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0271.795] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\uk\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\uk\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.796] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.796] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.796] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.796] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.796] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.796] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.796] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.796] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.796] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.796] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.796] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.796] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.796] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.796] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.796] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.796] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.796] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.796] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.796] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.796] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.796] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.796] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.796] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.796] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0271.796] FindClose (in: hFindFile=0x665d90c5c0 | out: hFindFile=0x665d90c5c0) returned 1 [0271.797] SetLastError (dwErrCode=0x0) [0271.797] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\uk\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\uk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.799] GetLastError () returned 0x5 [0271.799] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.800] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.800] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.800] SetLastError (dwErrCode=0x0) [0271.800] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.800] GetLastError () returned 0x5 [0271.800] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.800] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.800] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\vi\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c4a0 [0271.801] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.801] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.801] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\vi\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0271.801] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\vi\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\vi\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.801] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.801] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.802] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.802] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.802] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.802] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.802] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.802] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.802] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.802] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.802] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.802] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.802] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.802] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.804] SetLastError (dwErrCode=0x0) [0271.804] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\vi\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\vi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.806] GetLastError () returned 0x5 [0271.806] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.806] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.806] SetLastError (dwErrCode=0x0) [0271.806] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.806] GetLastError () returned 0x5 [0271.806] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.807] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.807] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHS\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bcc0 [0271.807] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.808] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.808] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHS\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0271.808] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHS\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\zh-chs\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.808] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.808] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.809] SetLastError (dwErrCode=0x0) [0271.809] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\zh-chs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.812] GetLastError () returned 0x5 [0271.812] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.812] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.812] SetLastError (dwErrCode=0x0) [0271.812] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.812] GetLastError () returned 0x5 [0271.812] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.812] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.812] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHT\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90ca40 [0271.813] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.813] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.813] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.813] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHT\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0 [0271.813] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHT\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\zh-cht\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.814] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.814] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.815] SetLastError (dwErrCode=0x0) [0271.815] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHT\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\zh-cht\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.817] GetLastError () returned 0x5 [0271.817] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.817] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.818] SetLastError (dwErrCode=0x0) [0271.818] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.818] GetLastError () returned 0x5 [0271.818] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0271.818] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.818] SetLastError (dwErrCode=0x0) [0271.818] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.818] GetLastError () returned 0x5 [0271.818] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0271.818] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.818] SetLastError (dwErrCode=0x0) [0271.819] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.819] GetLastError () returned 0x5 [0271.819] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0271.819] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.819] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AugLoop\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90c380 [0271.819] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0271.819] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0271.819] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AugLoop\\bundle.js", dwFileAttributes=0x80) returned 0 [0271.820] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AugLoop\\bundle.js" (normalized: "c:\\program files\\microsoft office\\root\\office16\\augloop\\bundle.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.820] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.820] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.820] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.820] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AugLoop\\third-party-notices.txt", dwFileAttributes=0x80) returned 0 [0271.820] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AugLoop\\third-party-notices.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\augloop\\third-party-notices.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.821] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.821] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.821] SetLastError (dwErrCode=0x0) [0271.821] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AugLoop\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\augloop\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.821] GetLastError () returned 0x5 [0271.821] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0271.821] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.821] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\bdcmetadata.xsd", dwFileAttributes=0x80) returned 0 [0271.822] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\bdcmetadata.xsd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bdcmetadata.xsd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.822] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.822] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.822] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.822] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\bdcmetadataresource.xsd", dwFileAttributes=0x80) returned 0 [0271.823] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\bdcmetadataresource.xsd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bdcmetadataresource.xsd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.823] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.823] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.823] SetLastError (dwErrCode=0x0) [0271.823] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.824] GetLastError () returned 0x5 [0271.824] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0271.824] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.824] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90cec0 [0271.824] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0271.824] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0271.824] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.824] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Author2String.XSL", dwFileAttributes=0x80) returned 0 [0271.824] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Author2String.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\author2string.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.824] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.825] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.825] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.825] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Author2XML.XSL", dwFileAttributes=0x80) returned 0 [0271.825] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Author2XML.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\author2xml.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.825] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.825] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.826] SetLastError (dwErrCode=0x0) [0271.826] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.826] GetLastError () returned 0x5 [0271.826] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0271.826] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.826] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Sort\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c200 [0271.826] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.826] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.826] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Sort\\AUTHOR.XSL", dwFileAttributes=0x80) returned 0 [0271.827] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Sort\\AUTHOR.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\sort\\author.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.827] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.827] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.827] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.827] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Sort\\TAG.XSL", dwFileAttributes=0x80) returned 0 [0271.827] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Sort\\TAG.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\sort\\tag.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.828] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.828] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.828] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.828] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Sort\\TITLE.XSL", dwFileAttributes=0x80) returned 0 [0271.828] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Sort\\TITLE.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\sort\\title.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.828] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.828] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.829] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Sort\\YEAR.XSL", dwFileAttributes=0x80) returned 0 [0271.829] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Sort\\YEAR.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\sort\\year.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.829] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.829] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.830] SetLastError (dwErrCode=0x0) [0271.830] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Sort\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\sort\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.830] GetLastError () returned 0x5 [0271.830] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0271.830] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.830] SetLastError (dwErrCode=0x0) [0271.830] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.830] GetLastError () returned 0x5 [0271.830] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0271.830] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.830] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90cf20 [0271.831] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.831] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.831] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl", dwFileAttributes=0x80) returned 0 [0271.831] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\style\\apasixtheditionofficeonline.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.832] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.832] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.832] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\CHICAGO.XSL", dwFileAttributes=0x80) returned 0 [0271.832] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\CHICAGO.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\style\\chicago.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.833] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.833] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.833] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\GB.XSL", dwFileAttributes=0x80) returned 0 [0271.834] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\GB.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\style\\gb.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.834] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.834] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.834] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\GostName.XSL", dwFileAttributes=0x80) returned 0 [0271.835] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\GostName.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\style\\gostname.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.835] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.835] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.835] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\GostTitle.XSL", dwFileAttributes=0x80) returned 0 [0271.836] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\GostTitle.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\style\\gosttitle.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.836] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.836] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.836] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl", dwFileAttributes=0x80) returned 0 [0271.836] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\style\\harvardanglia2008officeonline.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.837] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.837] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.837] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl", dwFileAttributes=0x80) returned 0 [0271.837] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\style\\ieee2006officeonline.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.837] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.837] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.838] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\ISO690.XSL", dwFileAttributes=0x80) returned 0 [0271.838] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\ISO690.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\style\\iso690.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.839] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.839] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.839] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\ISO690Nmerical.XSL", dwFileAttributes=0x80) returned 0 [0271.839] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\ISO690Nmerical.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\style\\iso690nmerical.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.839] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.839] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.840] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl", dwFileAttributes=0x80) returned 0 [0271.840] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\style\\mlaseventheditionofficeonline.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.840] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.840] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.841] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\SIST02.XSL", dwFileAttributes=0x80) returned 0 [0271.841] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\SIST02.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\style\\sist02.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.841] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.841] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.841] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\TURABIAN.XSL", dwFileAttributes=0x80) returned 0 [0271.842] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\TURABIAN.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\style\\turabian.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.842] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.842] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.843] SetLastError (dwErrCode=0x0) [0271.843] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\style\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.846] GetLastError () returned 0x5 [0271.846] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0271.846] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.846] SetLastError (dwErrCode=0x0) [0271.846] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.846] GetLastError () returned 0x5 [0271.846] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0271.846] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.846] SetLastError (dwErrCode=0x0) [0271.846] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.846] GetLastError () returned 0x5 [0271.846] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0271.846] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.846] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90c260 [0271.847] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0271.847] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0271.847] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART1.BDR", dwFileAttributes=0x80) returned 0 [0271.848] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART1.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\borders\\msart1.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.848] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.848] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.848] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART10.BDR", dwFileAttributes=0x80) returned 0 [0271.848] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART10.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\borders\\msart10.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.849] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.849] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.849] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.849] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART11.BDR", dwFileAttributes=0x80) returned 0 [0271.849] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART11.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\borders\\msart11.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.849] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.849] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.850] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.850] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART12.BDR", dwFileAttributes=0x80) returned 0 [0271.850] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART12.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\borders\\msart12.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.850] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.850] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.850] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART13.BDR", dwFileAttributes=0x80) returned 0 [0271.851] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART13.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\borders\\msart13.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.851] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.851] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.851] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART14.BDR", dwFileAttributes=0x80) returned 0 [0271.852] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART14.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\borders\\msart14.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.852] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.852] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.852] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART15.BDR", dwFileAttributes=0x80) returned 0 [0271.853] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART15.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\borders\\msart15.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.853] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.853] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.853] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART2.BDR", dwFileAttributes=0x80) returned 0 [0271.853] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART2.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\borders\\msart2.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.854] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.854] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.854] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART3.BDR", dwFileAttributes=0x80) returned 0 [0271.855] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART3.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\borders\\msart3.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.855] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.855] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.855] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART4.BDR", dwFileAttributes=0x80) returned 0 [0271.855] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART4.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\borders\\msart4.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.856] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.856] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.856] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.856] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART5.BDR", dwFileAttributes=0x80) returned 0 [0271.856] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART5.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\borders\\msart5.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.857] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.857] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.857] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART6.BDR", dwFileAttributes=0x80) returned 0 [0271.857] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART6.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\borders\\msart6.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.858] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.858] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.858] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART7.BDR", dwFileAttributes=0x80) returned 0 [0271.858] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART7.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\borders\\msart7.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.859] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.859] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.859] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.859] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART8.BDR", dwFileAttributes=0x80) returned 0 [0271.859] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART8.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\borders\\msart8.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.859] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.859] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.860] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART9.BDR", dwFileAttributes=0x80) returned 0 [0271.860] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART9.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\borders\\msart9.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.860] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.860] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.861] SetLastError (dwErrCode=0x0) [0271.861] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\borders\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.864] GetLastError () returned 0x5 [0271.864] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0271.864] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.864] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.864] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CommunicatorContentBinApp.xap", dwFileAttributes=0x80) returned 0 [0271.864] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CommunicatorContentBinApp.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\communicatorcontentbinapp.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.864] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.864] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.865] SetLastError (dwErrCode=0x0) [0271.865] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.865] GetLastError () returned 0x5 [0271.865] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0271.865] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.865] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Configuration\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90c500 [0271.866] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0271.866] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0271.866] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.866] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Configuration\\card_expiration_terms_dict.txt", dwFileAttributes=0x80) returned 0 [0271.866] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Configuration\\card_expiration_terms_dict.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\configuration\\card_expiration_terms_dict.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.866] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.866] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.866] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Configuration\\card_security_terms_dict.txt", dwFileAttributes=0x80) returned 0 [0271.867] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Configuration\\card_security_terms_dict.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\configuration\\card_security_terms_dict.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.867] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.867] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.867] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Configuration\\card_terms_dict.txt", dwFileAttributes=0x80) returned 0 [0271.868] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Configuration\\card_terms_dict.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\configuration\\card_terms_dict.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.868] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.868] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.868] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.868] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Configuration\\config.xml", dwFileAttributes=0x80) returned 0 [0271.868] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Configuration\\config.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\configuration\\config.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.869] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.869] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.869] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Configuration\\ssn_high_group_info.txt", dwFileAttributes=0x80) returned 0 [0271.870] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Configuration\\ssn_high_group_info.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\configuration\\ssn_high_group_info.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.870] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.870] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.870] SetLastError (dwErrCode=0x0) [0271.871] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Configuration\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\configuration\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.873] GetLastError () returned 0x5 [0271.873] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0271.873] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.873] SetLastError (dwErrCode=0x0) [0271.873] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.873] GetLastError () returned 0x5 [0271.873] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0271.873] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.873] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90bcc0 [0271.874] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0271.874] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0271.874] SetLastError (dwErrCode=0x0) [0271.874] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.874] GetLastError () returned 0x5 [0271.874] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0271.874] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.874] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c500 [0271.875] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.875] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.875] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\DELIMR.FAE", dwFileAttributes=0x80) returned 0 [0271.875] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\DELIMR.FAE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\1033\\delimr.fae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.875] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.875] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.875] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.876] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\OLADDR.FAE", dwFileAttributes=0x80) returned 0 [0271.876] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\OLADDR.FAE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\1033\\oladdr.fae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.876] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.876] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.876] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\OLAPPTR.FAE", dwFileAttributes=0x80) returned 0 [0271.877] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\OLAPPTR.FAE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\1033\\olapptr.fae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.877] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.877] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.877] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\OLJRNLR.FAE", dwFileAttributes=0x80) returned 0 [0271.878] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\OLJRNLR.FAE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\1033\\oljrnlr.fae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.878] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.878] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.878] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\OLMAILR.FAE", dwFileAttributes=0x80) returned 0 [0271.878] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\OLMAILR.FAE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\1033\\olmailr.fae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.879] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.879] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.879] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\OLNOTER.FAE", dwFileAttributes=0x80) returned 0 [0271.879] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\OLNOTER.FAE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\1033\\olnoter.fae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.879] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.879] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.880] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.880] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\OLR.SAM", dwFileAttributes=0x80) returned 0 [0271.881] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\OLR.SAM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\1033\\olr.sam"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.881] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.881] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.881] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.881] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\OLTASKR.FAE", dwFileAttributes=0x80) returned 0 [0271.881] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\OLTASKR.FAE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\1033\\oltaskr.fae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.882] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.882] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.882] SetLastError (dwErrCode=0x0) [0271.882] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.886] GetLastError () returned 0x5 [0271.886] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0271.886] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.886] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\DELIMWIN.FAE", dwFileAttributes=0x80) returned 0 [0271.887] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\DELIMWIN.FAE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\delimwin.fae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.887] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.887] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.888] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.888] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\DESKSAM.SAM", dwFileAttributes=0x80) returned 0 [0271.888] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\DESKSAM.SAM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\desksam.sam"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.889] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.889] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.889] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\OL.SAM", dwFileAttributes=0x80) returned 0 [0271.889] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\OL.SAM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\ol.sam"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.889] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.890] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.890] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\OLADD.FAE", dwFileAttributes=0x80) returned 0 [0271.890] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\OLADD.FAE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\oladd.fae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.891] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.891] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.891] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\OLAPPT.FAE", dwFileAttributes=0x80) returned 0 [0271.891] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\OLAPPT.FAE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\olappt.fae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.892] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.892] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.892] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\OLJRNL.FAE", dwFileAttributes=0x80) returned 0 [0271.892] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\OLJRNL.FAE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\oljrnl.fae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.893] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.893] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.893] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0271.893] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\OLMAIL.FAE", dwFileAttributes=0x80) returned 0 [0271.894] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\OLMAIL.FAE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\olmail.fae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.894] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.894] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.894] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0271.894] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\OLNOTE.FAE", dwFileAttributes=0x80) returned 0 [0271.895] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\OLNOTE.FAE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\olnote.fae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.895] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.895] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.895] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0271.895] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\OLTASK.FAE", dwFileAttributes=0x80) returned 0 [0271.896] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\OLTASK.FAE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\oltask.fae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.896] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.896] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.896] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0271.896] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0271.896] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0271.896] FindClose (in: hFindFile=0x665d90bcc0 | out: hFindFile=0x665d90bcc0) returned 1 [0271.896] SetLastError (dwErrCode=0x0) [0271.896] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.897] GetLastError () returned 0x5 [0271.897] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0271.897] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.897] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0271.897] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0271.897] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0271.897] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0271.897] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0271.897] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0271.897] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0271.897] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0271.897] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Custom.propdesc", dwFileAttributes=0x80) returned 0 [0271.897] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Custom.propdesc" (normalized: "c:\\program files\\microsoft office\\root\\office16\\custom.propdesc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.898] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.898] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.898] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0271.898] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0271.898] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0271.898] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0271.898] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0271.898] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0271.898] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0271.898] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0271.898] SetLastError (dwErrCode=0x0) [0271.898] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.898] GetLastError () returned 0x5 [0271.898] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0271.898] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.898] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90bfc0 [0271.898] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0271.898] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0271.898] SetLastError (dwErrCode=0x0) [0271.899] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\document parts\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.899] GetLastError () returned 0x5 [0271.899] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0271.899] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.899] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\1033\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c980 [0271.899] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.899] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.899] SetLastError (dwErrCode=0x0) [0271.899] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\document parts\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.899] GetLastError () returned 0x5 [0271.899] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.899] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.899] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\1033\\16\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c1a0 [0271.899] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.899] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0271.900] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\1033\\16\\Built-In Building Blocks.dotx", dwFileAttributes=0x80) returned 0 [0271.900] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\1033\\16\\Built-In Building Blocks.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\document parts\\1033\\16\\built-in building blocks.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.900] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.900] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.901] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0271.901] FindClose (in: hFindFile=0x665d90c1a0 | out: hFindFile=0x665d90c1a0) returned 1 [0271.901] SetLastError (dwErrCode=0x0) [0271.901] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\1033\\16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\document parts\\1033\\16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.901] GetLastError () returned 0x5 [0271.901] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0271.901] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.901] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0271.901] FindClose (in: hFindFile=0x665d90c980 | out: hFindFile=0x665d90c980) returned 1 [0271.901] SetLastError (dwErrCode=0x0) [0271.901] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\document parts\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.901] GetLastError () returned 0x5 [0271.901] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0271.901] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.901] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0271.901] FindClose (in: hFindFile=0x665d90bfc0 | out: hFindFile=0x665d90bfc0) returned 1 [0271.902] SetLastError (dwErrCode=0x0) [0271.902] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\document parts\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.902] GetLastError () returned 0x5 [0271.902] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0271.902] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.902] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0271.902] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0271.902] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0271.902] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0271.902] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0271.902] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0271.902] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0271.902] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ELECTRICAL.VSL", dwFileAttributes=0x80) returned 0 [0271.904] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ELECTRICAL.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\electrical.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.905] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.905] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.905] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0271.905] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0271.905] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0271.905] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0271.905] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0271.905] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0271.905] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0271.905] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0271.905] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.905] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ERXIMP.ADD", dwFileAttributes=0x80) returned 0 [0271.906] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ERXIMP.ADD" (normalized: "c:\\program files\\microsoft office\\root\\office16\\erximp.add"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.906] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.907] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.907] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0271.907] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0271.907] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0271.907] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.907] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\EXCEL.VisualElementsManifest.xml", dwFileAttributes=0x80) returned 0 [0271.907] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\EXCEL.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\excel.visualelementsmanifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.908] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.908] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.908] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0271.908] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0271.908] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0271.908] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0271.908] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.908] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ExcelCtxUICellModel.bin", dwFileAttributes=0x80) returned 0 [0271.908] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ExcelCtxUICellModel.bin" (normalized: "c:\\program files\\microsoft office\\root\\office16\\excelctxuicellmodel.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.908] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.908] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.909] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0271.909] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0271.909] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.909] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ExtensibleApp.xap", dwFileAttributes=0x80) returned 0 [0271.909] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ExtensibleApp.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\extensibleapp.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.909] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.909] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.910] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0271.910] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0271.910] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0271.910] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0271.910] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.910] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\flat_officeFontsPreview.ttf", dwFileAttributes=0x80) returned 0 [0271.910] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\flat_officeFontsPreview.ttf" (normalized: "c:\\program files\\microsoft office\\root\\office16\\flat_officefontspreview.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.911] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.911] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.911] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0271.911] SetLastError (dwErrCode=0x0) [0271.911] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.911] GetLastError () returned 0x5 [0271.911] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0271.911] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.911] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90bcc0 [0271.911] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0271.911] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0271.911] SetLastError (dwErrCode=0x0) [0271.912] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.912] GetLastError () returned 0x5 [0271.912] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0271.912] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.912] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90cd40 [0271.912] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.912] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.912] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.913] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\ACTIVITL.ICO", dwFileAttributes=0x80) returned 0 [0271.913] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\ACTIVITL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\activitl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.913] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.913] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.913] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.913] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.914] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\ACTIVITS.ICO", dwFileAttributes=0x80) returned 0 [0271.914] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\ACTIVITS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\activits.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.914] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.914] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.914] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.914] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.914] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\ACTIVITY.CFG", dwFileAttributes=0x80) returned 0 [0271.915] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\ACTIVITY.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\activity.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.915] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.915] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.915] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.915] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.915] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\APPT.CFG", dwFileAttributes=0x80) returned 0 [0271.915] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\APPT.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\appt.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.916] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.916] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.916] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.916] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.916] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\APPTL.ICO", dwFileAttributes=0x80) returned 0 [0271.916] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\APPTL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\apptl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.916] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.917] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.917] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.917] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.917] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\APPTS.ICO", dwFileAttributes=0x80) returned 0 [0271.917] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\APPTS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\appts.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.917] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.917] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.918] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.918] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.918] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\CNFNOT.CFG", dwFileAttributes=0x80) returned 0 [0271.918] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\CNFNOT.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\cnfnot.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.918] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.918] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.918] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.918] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.919] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\CNFNOT.ICO", dwFileAttributes=0x80) returned 0 [0271.919] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\CNFNOT.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\cnfnot.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.920] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.920] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.920] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.920] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.920] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\CNFRES.CFG", dwFileAttributes=0x80) returned 0 [0271.921] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\CNFRES.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\cnfres.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.921] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.921] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.921] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.921] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.921] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\CONFLICT.ICO", dwFileAttributes=0x80) returned 0 [0271.922] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\CONFLICT.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\conflict.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.922] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.922] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.923] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.923] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.923] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\CONTACT.CFG", dwFileAttributes=0x80) returned 0 [0271.923] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\CONTACT.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\contact.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.923] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.923] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.924] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.924] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.924] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\CONTACTL.ICO", dwFileAttributes=0x80) returned 0 [0271.924] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\CONTACTL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\contactl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.924] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.924] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.925] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.925] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.925] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\CONTACTS.ICO", dwFileAttributes=0x80) returned 0 [0271.925] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\CONTACTS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\contacts.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.925] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.925] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.925] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.925] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.926] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\DISTLIST.CFG", dwFileAttributes=0x80) returned 0 [0271.926] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\DISTLIST.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\distlist.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.926] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.926] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.926] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.926] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.927] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\DISTLSTL.ICO", dwFileAttributes=0x80) returned 0 [0271.927] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\DISTLSTL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\distlstl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.927] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.927] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.927] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.927] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.928] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\DISTLSTS.ICO", dwFileAttributes=0x80) returned 0 [0271.928] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\DISTLSTS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\distlsts.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.928] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.928] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.928] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.928] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.928] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\DOC.CFG", dwFileAttributes=0x80) returned 0 [0271.929] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\DOC.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\doc.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.929] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.929] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.929] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.929] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.929] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\DOCL.ICO", dwFileAttributes=0x80) returned 0 [0271.929] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\DOCL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\docl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.930] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.930] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.930] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.930] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.930] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\DOCS.ICO", dwFileAttributes=0x80) returned 0 [0271.930] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\DOCS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\docs.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.931] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.931] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.931] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.931] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.931] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\EXITEM.CFG", dwFileAttributes=0x80) returned 0 [0271.931] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\EXITEM.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\exitem.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.931] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.931] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.932] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.932] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.932] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\EXITEML.ICO", dwFileAttributes=0x80) returned 0 [0271.932] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\EXITEML.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\exiteml.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.932] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.932] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.932] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.932] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.933] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\EXITEMS.ICO", dwFileAttributes=0x80) returned 0 [0271.933] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\EXITEMS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\exitems.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.933] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.933] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.933] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.933] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.934] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\INFOMAIL.CFG", dwFileAttributes=0x80) returned 0 [0271.934] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\INFOMAIL.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\infomail.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.934] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.934] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.934] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.934] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.934] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\INFOML.ICO", dwFileAttributes=0x80) returned 0 [0271.935] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\INFOML.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\infoml.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.935] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.935] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.935] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.935] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.935] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\INFOMS.ICO", dwFileAttributes=0x80) returned 0 [0271.935] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\INFOMS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\infoms.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.936] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.936] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.936] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.936] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.936] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\IPM.CFG", dwFileAttributes=0x80) returned 0 [0271.936] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\IPM.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\ipm.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.937] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.937] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.937] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.937] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.937] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\IPML.ICO", dwFileAttributes=0x80) returned 0 [0271.937] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\IPML.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\ipml.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.937] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.937] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.938] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.938] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.938] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\IPMS.ICO", dwFileAttributes=0x80) returned 0 [0271.938] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\IPMS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\ipms.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.938] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.939] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.939] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.939] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\MMSL.ICO", dwFileAttributes=0x80) returned 0 [0271.939] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\MMSL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\mmsl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.939] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.939] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.940] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.940] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.940] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\MMSS.ICO", dwFileAttributes=0x80) returned 0 [0271.940] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\MMSS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\mmss.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.940] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.940] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.940] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.941] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.941] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\NOTE.CFG", dwFileAttributes=0x80) returned 0 [0271.941] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\NOTE.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\note.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.941] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.941] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.941] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.941] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.942] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\NOTEL.ICO", dwFileAttributes=0x80) returned 0 [0271.942] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\NOTEL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\notel.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.942] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.942] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.942] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.942] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.942] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\NOTES.ICO", dwFileAttributes=0x80) returned 0 [0271.943] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\NOTES.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\notes.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.943] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.943] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.943] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.943] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.943] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\OMSMMS.CFG", dwFileAttributes=0x80) returned 0 [0271.943] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\OMSMMS.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\omsmms.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.944] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.944] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.944] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.944] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.944] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\OMSSMS.CFG", dwFileAttributes=0x80) returned 0 [0271.944] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\OMSSMS.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\omssms.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.944] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.944] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.945] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.945] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.945] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\OOFL.ICO", dwFileAttributes=0x80) returned 0 [0271.945] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\OOFL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\oofl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.945] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.945] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.945] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.945] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\OOFS.ICO", dwFileAttributes=0x80) returned 0 [0271.946] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\OOFS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\oofs.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.946] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.946] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.946] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.946] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\OOFTMPL.CFG", dwFileAttributes=0x80) returned 0 [0271.947] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\OOFTMPL.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\ooftmpl.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.947] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.947] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.947] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.947] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.947] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\POST.CFG", dwFileAttributes=0x80) returned 0 [0271.947] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\POST.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\post.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.948] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.948] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.948] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.948] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.948] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\POSTIT.CFG", dwFileAttributes=0x80) returned 0 [0271.948] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\POSTIT.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\postit.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.948] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.949] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.949] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.949] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\POSTITL.ICO", dwFileAttributes=0x80) returned 0 [0271.949] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\POSTITL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\postitl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.949] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.949] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.949] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.950] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.950] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\POSTITS.ICO", dwFileAttributes=0x80) returned 0 [0271.950] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\POSTITS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\postits.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.950] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.950] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.950] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.950] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.951] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\POSTL.ICO", dwFileAttributes=0x80) returned 0 [0271.951] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\POSTL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\postl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.951] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.951] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.951] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.951] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.951] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\POSTS.ICO", dwFileAttributes=0x80) returned 0 [0271.952] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\POSTS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\posts.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.952] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.952] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.952] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.952] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.952] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RCLRPT.CFG", dwFileAttributes=0x80) returned 0 [0271.952] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RCLRPT.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\rclrpt.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.953] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.953] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.953] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.953] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.953] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REC.CFG", dwFileAttributes=0x80) returned 0 [0271.954] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REC.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\rec.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.954] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.954] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.954] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.954] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.954] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RECL.ICO", dwFileAttributes=0x80) returned 0 [0271.954] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RECL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\recl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.955] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.955] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.955] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.955] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.955] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RECS.ICO", dwFileAttributes=0x80) returned 0 [0271.955] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RECS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\recs.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.956] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.956] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.956] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.956] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.956] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REMOTE.CFG", dwFileAttributes=0x80) returned 0 [0271.956] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REMOTE.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\remote.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.956] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.957] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.957] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.957] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.957] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REMOTEL.ICO", dwFileAttributes=0x80) returned 0 [0271.957] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REMOTEL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\remotel.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.957] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.957] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.958] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.958] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.958] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REMOTES.ICO", dwFileAttributes=0x80) returned 0 [0271.958] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REMOTES.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\remotes.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.958] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.958] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.958] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.958] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.959] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REPLTMPL.CFG", dwFileAttributes=0x80) returned 0 [0271.959] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REPLTMPL.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\repltmpl.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.959] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.959] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.959] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.959] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.959] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REPORT.CFG", dwFileAttributes=0x80) returned 0 [0271.960] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REPORT.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\report.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.960] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.960] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.960] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.960] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.960] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REPORTL.ICO", dwFileAttributes=0x80) returned 0 [0271.960] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REPORTL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\reportl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.961] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.961] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.961] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.961] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.961] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REPORTS.ICO", dwFileAttributes=0x80) returned 0 [0271.961] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REPORTS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\reports.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.962] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.962] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.962] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.962] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RESEND.CFG", dwFileAttributes=0x80) returned 0 [0271.962] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RESEND.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\resend.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.962] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.962] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.963] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.963] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.963] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RESENDL.ICO", dwFileAttributes=0x80) returned 0 [0271.963] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RESENDL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\resendl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.963] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.963] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.963] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.963] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.964] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RESENDS.ICO", dwFileAttributes=0x80) returned 0 [0271.964] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RESENDS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\resends.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.964] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.964] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.964] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.964] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RSSITEM.CFG", dwFileAttributes=0x80) returned 0 [0271.965] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RSSITEM.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\rssitem.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.965] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.965] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.965] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.965] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RSSITEML.ICO", dwFileAttributes=0x80) returned 0 [0271.966] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RSSITEML.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\rssiteml.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.966] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.966] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.966] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.966] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RSSITEMS.ICO", dwFileAttributes=0x80) returned 0 [0271.967] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RSSITEMS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\rssitems.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.967] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.967] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.967] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.967] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.967] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDCNCLL.ICO", dwFileAttributes=0x80) returned 0 [0271.967] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDCNCLL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\scdcncll.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.968] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.968] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.968] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.968] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.968] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDCNCLS.ICO", dwFileAttributes=0x80) returned 0 [0271.968] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDCNCLS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\scdcncls.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.969] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.969] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.969] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.969] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDREQL.ICO", dwFileAttributes=0x80) returned 0 [0271.970] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDREQL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\scdreql.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.970] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.970] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.970] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.970] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.971] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDREQS.ICO", dwFileAttributes=0x80) returned 0 [0271.971] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDREQS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\scdreqs.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.971] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.971] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.971] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.971] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.972] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDRESNL.ICO", dwFileAttributes=0x80) returned 0 [0271.972] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDRESNL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\scdresnl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.972] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.972] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.972] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.972] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDRESNS.ICO", dwFileAttributes=0x80) returned 0 [0271.973] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDRESNS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\scdresns.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.973] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.973] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.973] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.973] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.974] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDRESPL.ICO", dwFileAttributes=0x80) returned 0 [0271.974] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDRESPL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\scdrespl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.974] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.974] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.974] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.974] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDRESPS.ICO", dwFileAttributes=0x80) returned 0 [0271.975] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDRESPS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\scdresps.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.975] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.975] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.975] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.975] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDRESTL.ICO", dwFileAttributes=0x80) returned 0 [0271.976] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDRESTL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\scdrestl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.976] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.976] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.976] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.976] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDRESTS.ICO", dwFileAttributes=0x80) returned 0 [0271.976] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDRESTS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\scdrests.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.977] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.977] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.977] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.977] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCHDCNCL.CFG", dwFileAttributes=0x80) returned 0 [0271.978] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCHDCNCL.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\schdcncl.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.978] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.978] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.978] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.978] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCHDREQ.CFG", dwFileAttributes=0x80) returned 0 [0271.979] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCHDREQ.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\schdreq.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.979] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.979] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.980] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.980] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.980] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCHDRESN.CFG", dwFileAttributes=0x80) returned 0 [0271.980] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCHDRESN.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\schdresn.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.980] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.980] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.981] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.981] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.981] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCHDRESP.CFG", dwFileAttributes=0x80) returned 0 [0271.981] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCHDRESP.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\schdresp.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.981] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.982] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.982] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.982] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.982] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCHDREST.CFG", dwFileAttributes=0x80) returned 0 [0271.982] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCHDREST.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\schdrest.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.983] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.983] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.983] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.983] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SECREC.CFG", dwFileAttributes=0x80) returned 0 [0271.983] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SECREC.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\secrec.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.984] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.984] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.984] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.984] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.984] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SECRECL.ICO", dwFileAttributes=0x80) returned 0 [0271.985] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SECRECL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\secrecl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.985] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.985] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.985] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.986] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.986] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SECRECS.ICO", dwFileAttributes=0x80) returned 0 [0271.986] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SECRECS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\secrecs.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.986] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.986] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.986] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.986] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SECURE.CFG", dwFileAttributes=0x80) returned 0 [0271.987] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SECURE.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\secure.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.987] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.987] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.987] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.987] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SECURL.ICO", dwFileAttributes=0x80) returned 0 [0271.988] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SECURL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\securl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.988] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.988] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.988] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.988] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SECURS.ICO", dwFileAttributes=0x80) returned 0 [0271.989] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SECURS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\securs.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.989] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.989] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.989] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.989] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.989] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SHARING.CFG", dwFileAttributes=0x80) returned 0 [0271.989] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SHARING.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\sharing.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.990] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.990] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.990] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.990] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SIGN.CFG", dwFileAttributes=0x80) returned 0 [0271.990] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SIGN.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\sign.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.990] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.990] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.991] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.991] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.991] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SIGNL.ICO", dwFileAttributes=0x80) returned 0 [0271.991] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SIGNL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\signl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.991] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.991] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.991] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.991] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SIGNS.ICO", dwFileAttributes=0x80) returned 0 [0271.992] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SIGNS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\signs.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.992] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.992] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.992] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.992] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SMIMEE.CFG", dwFileAttributes=0x80) returned 0 [0271.993] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SMIMEE.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\smimee.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.993] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.993] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.993] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.993] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.993] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SMIMES.CFG", dwFileAttributes=0x80) returned 0 [0271.993] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SMIMES.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\smimes.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.994] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.994] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.994] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.994] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.994] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SMSL.ICO", dwFileAttributes=0x80) returned 0 [0271.994] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SMSL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\smsl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.994] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.995] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.995] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.995] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.995] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SMSS.ICO", dwFileAttributes=0x80) returned 0 [0271.995] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SMSS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\smss.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.995] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.995] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.995] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.996] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.996] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASK.CFG", dwFileAttributes=0x80) returned 0 [0271.996] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASK.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\task.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.996] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.996] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.996] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.996] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKACC.CFG", dwFileAttributes=0x80) returned 0 [0271.997] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKACC.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\taskacc.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.997] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.997] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.997] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.997] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKACCL.ICO", dwFileAttributes=0x80) returned 0 [0271.998] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKACCL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\taskaccl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.998] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.998] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.998] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.998] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.998] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKACCS.ICO", dwFileAttributes=0x80) returned 0 [0271.998] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKACCS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\taskaccs.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.999] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.999] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.999] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0271.999] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0271.999] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKDEC.CFG", dwFileAttributes=0x80) returned 0 [0271.999] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKDEC.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\taskdec.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0271.999] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0271.999] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.000] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.000] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.000] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKDECL.ICO", dwFileAttributes=0x80) returned 0 [0272.000] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKDECL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\taskdecl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.001] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.001] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.001] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.001] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.001] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKDECS.ICO", dwFileAttributes=0x80) returned 0 [0272.002] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKDECS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\taskdecs.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.002] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.002] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.002] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.002] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKL.ICO", dwFileAttributes=0x80) returned 0 [0272.003] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\taskl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.003] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.003] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.003] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.003] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.003] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKREQ.CFG", dwFileAttributes=0x80) returned 0 [0272.003] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKREQ.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\taskreq.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.004] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.004] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.004] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.004] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.004] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKREQL.ICO", dwFileAttributes=0x80) returned 0 [0272.004] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKREQL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\taskreql.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.005] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.005] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.005] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.005] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.005] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKREQS.ICO", dwFileAttributes=0x80) returned 0 [0272.005] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKREQS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\taskreqs.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.005] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.005] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.006] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.006] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.006] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKS.ICO", dwFileAttributes=0x80) returned 0 [0272.006] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\tasks.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.006] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.006] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.006] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.006] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.007] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKUPD.CFG", dwFileAttributes=0x80) returned 0 [0272.007] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKUPD.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\taskupd.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.007] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.007] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.007] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0272.007] FindClose (in: hFindFile=0x665d90cd40 | out: hFindFile=0x665d90cd40) returned 1 [0272.008] SetLastError (dwErrCode=0x0) [0272.008] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.010] GetLastError () returned 0x5 [0272.010] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.010] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.011] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0272.011] FindClose (in: hFindFile=0x665d90bcc0 | out: hFindFile=0x665d90bcc0) returned 1 [0272.011] SetLastError (dwErrCode=0x0) [0272.011] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.011] GetLastError () returned 0x5 [0272.011] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0272.011] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.011] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0272.011] SetLastError (dwErrCode=0x0) [0272.011] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.011] GetLastError () returned 0x5 [0272.011] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0272.011] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.011] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f14\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90bde0 [0272.011] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.011] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.011] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f14\\FA000000014", dwFileAttributes=0x80) returned 0 [0272.012] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f14\\FA000000014" (normalized: "c:\\program files\\microsoft office\\root\\office16\\fpa_f14\\fa000000014"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.012] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.012] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.012] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0272.012] FindClose (in: hFindFile=0x665d90bde0 | out: hFindFile=0x665d90bde0) returned 1 [0272.012] SetLastError (dwErrCode=0x0) [0272.012] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f14\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\fpa_f14\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.012] GetLastError () returned 0x5 [0272.013] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0272.013] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.013] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0272.013] SetLastError (dwErrCode=0x0) [0272.013] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.013] GetLastError () returned 0x5 [0272.013] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0272.013] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.013] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f2\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90cb00 [0272.013] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.013] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.013] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.013] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f2\\FA000000002", dwFileAttributes=0x80) returned 0 [0272.014] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f2\\FA000000002" (normalized: "c:\\program files\\microsoft office\\root\\office16\\fpa_f2\\fa000000002"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.014] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.014] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.014] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0272.014] FindClose (in: hFindFile=0x665d90cb00 | out: hFindFile=0x665d90cb00) returned 1 [0272.014] SetLastError (dwErrCode=0x0) [0272.014] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f2\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\fpa_f2\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.014] GetLastError () returned 0x5 [0272.014] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0272.014] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.014] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0272.014] SetLastError (dwErrCode=0x0) [0272.014] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.014] GetLastError () returned 0x5 [0272.015] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0272.015] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.015] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f3\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90c1a0 [0272.015] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.015] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.015] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.015] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f3\\FA000000003", dwFileAttributes=0x80) returned 0 [0272.015] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f3\\FA000000003" (normalized: "c:\\program files\\microsoft office\\root\\office16\\fpa_f3\\fa000000003"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.015] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.015] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.016] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0272.016] FindClose (in: hFindFile=0x665d90c1a0 | out: hFindFile=0x665d90c1a0) returned 1 [0272.016] SetLastError (dwErrCode=0x0) [0272.016] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f3\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\fpa_f3\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.016] GetLastError () returned 0x5 [0272.016] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0272.016] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.016] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0272.016] SetLastError (dwErrCode=0x0) [0272.016] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.017] GetLastError () returned 0x5 [0272.017] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0272.017] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.017] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f4\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90c200 [0272.017] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.017] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.017] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f4\\FA000000005", dwFileAttributes=0x80) returned 0 [0272.017] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f4\\FA000000005" (normalized: "c:\\program files\\microsoft office\\root\\office16\\fpa_f4\\fa000000005"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.017] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.018] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.018] FindNextFileW (in: hFindFile=0x665d90c200, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0272.018] FindClose (in: hFindFile=0x665d90c200 | out: hFindFile=0x665d90c200) returned 1 [0272.018] SetLastError (dwErrCode=0x0) [0272.018] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f4\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\fpa_f4\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.018] GetLastError () returned 0x5 [0272.018] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0272.018] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.018] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0272.018] SetLastError (dwErrCode=0x0) [0272.018] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.018] GetLastError () returned 0x5 [0272.018] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0272.018] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.019] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f7\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90d0a0 [0272.019] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.019] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.019] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.019] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f7\\FA000000007", dwFileAttributes=0x80) returned 0 [0272.019] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f7\\FA000000007" (normalized: "c:\\program files\\microsoft office\\root\\office16\\fpa_f7\\fa000000007"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.019] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.019] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.019] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0272.020] FindClose (in: hFindFile=0x665d90d0a0 | out: hFindFile=0x665d90d0a0) returned 1 [0272.020] SetLastError (dwErrCode=0x0) [0272.020] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f7\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\fpa_f7\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.020] GetLastError () returned 0x5 [0272.020] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0272.020] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.020] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0272.020] SetLastError (dwErrCode=0x0) [0272.020] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.020] GetLastError () returned 0x5 [0272.020] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0272.020] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.020] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_FA000000006\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90bcc0 [0272.020] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.020] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.020] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.021] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_FA000000006\\FA000000006", dwFileAttributes=0x80) returned 0 [0272.021] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_FA000000006\\FA000000006" (normalized: "c:\\program files\\microsoft office\\root\\office16\\fpa_fa000000006\\fa000000006"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.021] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.021] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.021] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0272.021] FindClose (in: hFindFile=0x665d90bcc0 | out: hFindFile=0x665d90bcc0) returned 1 [0272.021] SetLastError (dwErrCode=0x0) [0272.021] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_FA000000006\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\fpa_fa000000006\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.021] GetLastError () returned 0x5 [0272.021] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0272.022] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.022] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0272.022] SetLastError (dwErrCode=0x0) [0272.022] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.022] GetLastError () returned 0x5 [0272.022] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0272.022] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.022] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_FA000000008\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90cb00 [0272.022] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.022] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.022] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.022] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_FA000000008\\FA000000008", dwFileAttributes=0x80) returned 0 [0272.022] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_FA000000008\\FA000000008" (normalized: "c:\\program files\\microsoft office\\root\\office16\\fpa_fa000000008\\fa000000008"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.023] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.023] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.023] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0272.023] FindClose (in: hFindFile=0x665d90cb00 | out: hFindFile=0x665d90cb00) returned 1 [0272.023] SetLastError (dwErrCode=0x0) [0272.023] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_FA000000008\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\fpa_fa000000008\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.023] GetLastError () returned 0x5 [0272.023] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0272.023] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.023] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0272.023] SetLastError (dwErrCode=0x0) [0272.023] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.023] GetLastError () returned 0x5 [0272.024] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0272.024] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.024] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_FA000000011\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90d0a0 [0272.024] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.024] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.024] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.024] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_FA000000011\\FA000000011", dwFileAttributes=0x80) returned 0 [0272.024] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_FA000000011\\FA000000011" (normalized: "c:\\program files\\microsoft office\\root\\office16\\fpa_fa000000011\\fa000000011"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.024] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.024] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.025] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0272.025] FindClose (in: hFindFile=0x665d90d0a0 | out: hFindFile=0x665d90d0a0) returned 1 [0272.025] SetLastError (dwErrCode=0x0) [0272.025] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_FA000000011\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\fpa_fa000000011\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.025] GetLastError () returned 0x5 [0272.025] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0272.025] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.025] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0272.025] SetLastError (dwErrCode=0x0) [0272.025] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.025] GetLastError () returned 0x5 [0272.025] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0272.025] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.025] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_w1\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90c4a0 [0272.025] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.025] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.025] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.026] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_w1\\WA104381125", dwFileAttributes=0x80) returned 0 [0272.026] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_w1\\WA104381125" (normalized: "c:\\program files\\microsoft office\\root\\office16\\fpa_w1\\wa104381125"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.026] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.026] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.026] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0272.026] FindClose (in: hFindFile=0x665d90c4a0 | out: hFindFile=0x665d90c4a0) returned 1 [0272.026] SetLastError (dwErrCode=0x0) [0272.026] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_w1\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\fpa_w1\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.027] GetLastError () returned 0x5 [0272.027] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0272.027] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.027] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0272.027] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0272.027] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0272.027] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0272.027] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0272.027] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0272.027] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0272.027] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0272.027] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.027] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GRAPH.ICO", dwFileAttributes=0x80) returned 0 [0272.027] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GRAPH.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\graph.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.027] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.027] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.028] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0272.028] SetLastError (dwErrCode=0x0) [0272.028] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.028] GetLastError () returned 0x5 [0272.028] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0272.028] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.028] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90cc80 [0272.028] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.028] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.028] SetLastError (dwErrCode=0x0) [0272.028] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.028] GetLastError () returned 0x5 [0272.028] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.028] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.028] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90bcc0 [0272.029] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.029] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.029] SetLastError (dwErrCode=0x0) [0272.029] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.029] GetLastError () returned 0x5 [0272.029] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0272.029] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.029] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90ca40 [0272.029] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0272.029] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0272.029] SetLastError (dwErrCode=0x0) [0272.029] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\groove.net\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.029] GetLastError () returned 0x5 [0272.029] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0272.029] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.029] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Components\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c020 [0272.030] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0272.030] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0272.030] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.030] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Components\\SignedComponents.cer", dwFileAttributes=0x80) returned 0 [0272.030] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Components\\SignedComponents.cer" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\groove.net\\components\\signedcomponents.cer"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.030] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.030] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.030] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0272.031] FindClose (in: hFindFile=0x665d90c020 | out: hFindFile=0x665d90c020) returned 1 [0272.031] SetLastError (dwErrCode=0x0) [0272.031] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Components\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\groove.net\\components\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.031] GetLastError () returned 0x5 [0272.031] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0272.031] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.031] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0272.031] SetLastError (dwErrCode=0x0) [0272.031] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\groove.net\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.031] GetLastError () returned 0x5 [0272.031] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0272.031] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.031] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\ManagedObjects\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bd20 [0272.034] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0272.034] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0272.034] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.034] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\ManagedObjects\\SignedManagedObjects.cer", dwFileAttributes=0x80) returned 0 [0272.034] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\ManagedObjects\\SignedManagedObjects.cer" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\groove.net\\managedobjects\\signedmanagedobjects.cer"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.034] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.034] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.035] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0272.035] FindClose (in: hFindFile=0x665d90bd20 | out: hFindFile=0x665d90bd20) returned 1 [0272.036] SetLastError (dwErrCode=0x0) [0272.036] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\ManagedObjects\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\groove.net\\managedobjects\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.037] GetLastError () returned 0x5 [0272.037] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0272.037] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.037] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0272.037] SetLastError (dwErrCode=0x0) [0272.037] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\groove.net\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.037] GetLastError () returned 0x5 [0272.037] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0272.037] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.037] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Servers\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bea0 [0272.037] FindNextFileW (in: hFindFile=0x665d90bea0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0272.037] FindNextFileW (in: hFindFile=0x665d90bea0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0272.037] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.038] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Servers\\Management.cer", dwFileAttributes=0x80) returned 0 [0272.038] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Servers\\Management.cer" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\groove.net\\servers\\management.cer"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.038] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.038] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.039] FindNextFileW (in: hFindFile=0x665d90bea0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0272.039] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.039] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Servers\\RELAY.CER", dwFileAttributes=0x80) returned 0 [0272.039] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Servers\\RELAY.CER" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\groove.net\\servers\\relay.cer"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.039] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.039] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.040] FindNextFileW (in: hFindFile=0x665d90bea0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0272.040] FindClose (in: hFindFile=0x665d90bea0 | out: hFindFile=0x665d90bea0) returned 1 [0272.040] SetLastError (dwErrCode=0x0) [0272.040] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Servers\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\groove.net\\servers\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.040] GetLastError () returned 0x5 [0272.040] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0272.040] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.040] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0272.040] FindClose (in: hFindFile=0x665d90ca40 | out: hFindFile=0x665d90ca40) returned 1 [0272.040] SetLastError (dwErrCode=0x0) [0272.040] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\groove.net\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.041] GetLastError () returned 0x5 [0272.041] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0272.041] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.041] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.041] SetLastError (dwErrCode=0x0) [0272.041] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.041] GetLastError () returned 0x5 [0272.041] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0272.041] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.041] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90d0a0 [0272.041] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0272.041] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0272.041] SetLastError (dwErrCode=0x0) [0272.041] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\verisign\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.042] GetLastError () returned 0x5 [0272.042] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0272.042] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.042] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\Components\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c380 [0272.043] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0272.043] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0272.043] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.043] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Code_Signing_2001-4_CA.cer", dwFileAttributes=0x80) returned 0 [0272.043] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Code_Signing_2001-4_CA.cer" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\verisign\\components\\verisign_class_3_code_signing_2001-4_ca.cer"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.044] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.044] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.044] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0272.044] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.044] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Public_Primary_CA.cer", dwFileAttributes=0x80) returned 0 [0272.045] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Public_Primary_CA.cer" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\verisign\\components\\verisign_class_3_public_primary_ca.cer"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.045] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.045] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.045] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0272.045] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.045] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\Components\\VS_ComponentSigningIntermediate.cer", dwFileAttributes=0x80) returned 0 [0272.045] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\Components\\VS_ComponentSigningIntermediate.cer" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\verisign\\components\\vs_componentsigningintermediate.cer"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.046] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.046] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.046] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0272.046] FindClose (in: hFindFile=0x665d90c380 | out: hFindFile=0x665d90c380) returned 1 [0272.046] SetLastError (dwErrCode=0x0) [0272.046] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\Components\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\verisign\\components\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.054] GetLastError () returned 0x5 [0272.054] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0272.055] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.055] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0272.055] FindClose (in: hFindFile=0x665d90d0a0 | out: hFindFile=0x665d90d0a0) returned 1 [0272.055] SetLastError (dwErrCode=0x0) [0272.055] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\verisign\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.055] GetLastError () returned 0x5 [0272.055] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0272.055] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.055] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0272.055] FindClose (in: hFindFile=0x665d90bcc0 | out: hFindFile=0x665d90bcc0) returned 1 [0272.055] SetLastError (dwErrCode=0x0) [0272.055] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.055] GetLastError () returned 0x5 [0272.055] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.055] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.055] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.055] SetLastError (dwErrCode=0x0) [0272.055] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.056] GetLastError () returned 0x5 [0272.056] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.056] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.056] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90cec0 [0272.056] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.056] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.056] SetLastError (dwErrCode=0x0) [0272.056] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.056] GetLastError () returned 0x5 [0272.056] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0272.056] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.056] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bcc0 [0272.057] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0272.057] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0272.057] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.057] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\COUGH.WAV", dwFileAttributes=0x80) returned 0 [0272.057] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\COUGH.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\people\\cough.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.058] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.058] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.058] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0272.058] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.058] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\GIGGLE.WAV", dwFileAttributes=0x80) returned 0 [0272.058] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\GIGGLE.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\people\\giggle.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.058] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.058] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.059] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0272.059] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.059] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\HICCUP.WAV", dwFileAttributes=0x80) returned 0 [0272.059] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\HICCUP.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\people\\hiccup.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.059] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.059] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.059] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0272.059] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.060] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\MMHMM.WAV", dwFileAttributes=0x80) returned 0 [0272.060] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\MMHMM.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\people\\mmhmm.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.060] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.060] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.060] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0272.060] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.061] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\SNEEZE.WAV", dwFileAttributes=0x80) returned 0 [0272.061] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\SNEEZE.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\people\\sneeze.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.061] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.061] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.061] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0272.061] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.061] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\THROAT.WAV", dwFileAttributes=0x80) returned 0 [0272.062] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\THROAT.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\people\\throat.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.062] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.062] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.062] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0272.062] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.062] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\Whistling.wav", dwFileAttributes=0x80) returned 0 [0272.062] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\Whistling.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\people\\whistling.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.063] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.063] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.063] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0272.063] FindClose (in: hFindFile=0x665d90bcc0 | out: hFindFile=0x665d90bcc0) returned 1 [0272.064] SetLastError (dwErrCode=0x0) [0272.064] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\people\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.066] GetLastError () returned 0x5 [0272.066] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0272.066] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.066] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.066] SetLastError (dwErrCode=0x0) [0272.066] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.066] GetLastError () returned 0x5 [0272.067] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0272.067] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.067] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c8c0 [0272.067] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0272.067] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0272.067] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.068] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\ALARM.WAV", dwFileAttributes=0x80) returned 0 [0272.068] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\ALARM.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\places\\alarm.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.068] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.068] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.068] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0272.068] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.068] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\BUZZ.WAV", dwFileAttributes=0x80) returned 0 [0272.069] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\BUZZ.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\places\\buzz.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.069] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.069] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.069] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0272.069] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.069] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\LASER.WAV", dwFileAttributes=0x80) returned 0 [0272.069] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\LASER.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\places\\laser.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.070] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.070] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.070] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0272.070] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.070] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\RADAR.WAV", dwFileAttributes=0x80) returned 0 [0272.070] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\RADAR.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\places\\radar.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.070] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.070] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.071] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0272.071] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.071] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\TOOT.WAV", dwFileAttributes=0x80) returned 0 [0272.071] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\TOOT.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\places\\toot.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.071] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.071] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.071] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0272.071] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.072] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\VIBE.WAV", dwFileAttributes=0x80) returned 0 [0272.072] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\VIBE.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\places\\vibe.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.072] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.072] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.072] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0272.072] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.072] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\WARN.WAV", dwFileAttributes=0x80) returned 0 [0272.073] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\WARN.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\places\\warn.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.073] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.073] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.073] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0272.073] FindClose (in: hFindFile=0x665d90c8c0 | out: hFindFile=0x665d90c8c0) returned 1 [0272.074] SetLastError (dwErrCode=0x0) [0272.074] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\places\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.076] GetLastError () returned 0x5 [0272.076] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0272.076] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.076] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.076] SetLastError (dwErrCode=0x0) [0272.076] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.076] GetLastError () returned 0x5 [0272.077] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0272.077] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.077] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bde0 [0272.077] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0272.077] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0272.077] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.078] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\CAN.WAV", dwFileAttributes=0x80) returned 0 [0272.078] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\CAN.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\things\\can.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.078] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.078] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.078] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0272.078] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.079] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\COUPLER.WAV", dwFileAttributes=0x80) returned 0 [0272.079] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\COUPLER.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\things\\coupler.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.079] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.079] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.079] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0272.079] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.079] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\HORN.WAV", dwFileAttributes=0x80) returned 0 [0272.080] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\HORN.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\things\\horn.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.080] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.080] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.080] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0272.080] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.080] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\SHOT.WAV", dwFileAttributes=0x80) returned 0 [0272.081] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\SHOT.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\things\\shot.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.081] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.081] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.081] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0272.081] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.081] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\SHOVEL.WAV", dwFileAttributes=0x80) returned 0 [0272.081] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\SHOVEL.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\things\\shovel.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.082] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.082] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.082] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0272.082] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.082] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\SPLASH.WAV", dwFileAttributes=0x80) returned 0 [0272.082] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\SPLASH.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\things\\splash.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.082] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.082] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.083] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0272.083] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.083] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\WHOOSH.WAV", dwFileAttributes=0x80) returned 0 [0272.083] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\WHOOSH.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\things\\whoosh.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.083] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.083] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.083] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0272.083] FindClose (in: hFindFile=0x665d90bde0 | out: hFindFile=0x665d90bde0) returned 1 [0272.084] SetLastError (dwErrCode=0x0) [0272.084] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\things\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.087] GetLastError () returned 0x5 [0272.087] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0272.087] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.087] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0272.087] FindClose (in: hFindFile=0x665d90cec0 | out: hFindFile=0x665d90cec0) returned 1 [0272.087] SetLastError (dwErrCode=0x0) [0272.087] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.088] GetLastError () returned 0x5 [0272.088] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.088] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.088] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.088] SetLastError (dwErrCode=0x0) [0272.088] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.088] GetLastError () returned 0x5 [0272.088] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.088] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.088] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c080 [0272.089] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.089] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.089] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.089] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\DataListIconImages.jpg", dwFileAttributes=0x80) returned 0 [0272.089] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\DataListIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\datalisticonimages.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.089] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.089] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.090] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.090] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.090] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\DataListIconImagesMask.bmp", dwFileAttributes=0x80) returned 0 [0272.090] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\DataListIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\datalisticonimagesmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.090] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.090] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.090] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.091] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.091] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\GRIP.JPG", dwFileAttributes=0x80) returned 0 [0272.091] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\GRIP.JPG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\grip.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.091] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.091] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.091] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.091] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.092] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\GRIPMASK.BMP", dwFileAttributes=0x80) returned 0 [0272.092] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\GRIPMASK.BMP" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\gripmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.092] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.092] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.092] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.092] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.093] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\InformationIcon.jpg", dwFileAttributes=0x80) returned 0 [0272.093] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\InformationIcon.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\informationicon.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.093] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.093] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.093] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.093] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.093] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\InformationIconMask.bmp", dwFileAttributes=0x80) returned 0 [0272.094] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\InformationIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\informationiconmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.094] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.094] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.094] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.094] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.095] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\LoginDialogBackground.jpg", dwFileAttributes=0x80) returned 0 [0272.095] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\LoginDialogBackground.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\logindialogbackground.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.095] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.095] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.095] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.095] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.096] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\LoginTool24x24Images.jpg", dwFileAttributes=0x80) returned 0 [0272.096] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\LoginTool24x24Images.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\logintool24x24images.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.096] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.096] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.096] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.096] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.097] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\LoginTool24x24ImagesMask.bmp", dwFileAttributes=0x80) returned 0 [0272.097] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\LoginTool24x24ImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\logintool24x24imagesmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.097] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.097] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.097] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.097] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.097] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\MessageAttachmentIconImages.jpg", dwFileAttributes=0x80) returned 0 [0272.098] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\MessageAttachmentIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\messageattachmenticonimages.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.098] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.098] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.098] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.098] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.098] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\MessageAttachmentIconImagesMask.bmp", dwFileAttributes=0x80) returned 0 [0272.098] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\MessageAttachmentIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\messageattachmenticonimagesmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.099] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.099] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.099] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.099] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.099] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\MessageHistoryIconImages.jpg", dwFileAttributes=0x80) returned 0 [0272.099] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\MessageHistoryIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\messagehistoryiconimages.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.099] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.099] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.100] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.100] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.100] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\MessageHistoryIconImagesMask.bmp", dwFileAttributes=0x80) returned 0 [0272.100] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\MessageHistoryIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\messagehistoryiconimagesmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.100] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.100] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.101] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.101] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.101] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierBackground.jpg", dwFileAttributes=0x80) returned 0 [0272.101] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierBackground.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\notifierbackground.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.101] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.101] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.102] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.102] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierBackgroundRTL.jpg", dwFileAttributes=0x80) returned 0 [0272.102] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierBackgroundRTL.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\notifierbackgroundrtl.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.102] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.102] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.103] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.103] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierCloseButton.jpg", dwFileAttributes=0x80) returned 0 [0272.103] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierCloseButton.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\notifierclosebutton.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.103] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.103] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.103] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.103] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierDisableDownArrow.jpg", dwFileAttributes=0x80) returned 0 [0272.104] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierDisableDownArrow.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\notifierdisabledownarrow.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.104] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.104] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.104] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.104] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.105] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierDisableUpArrow.jpg", dwFileAttributes=0x80) returned 0 [0272.105] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierDisableUpArrow.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\notifierdisableuparrow.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.105] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.105] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.105] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.105] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.105] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierDownArrow.jpg", dwFileAttributes=0x80) returned 0 [0272.106] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierDownArrow.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\notifierdownarrow.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.106] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.106] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.106] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.106] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierUpArrow.jpg", dwFileAttributes=0x80) returned 0 [0272.106] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierUpArrow.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\notifieruparrow.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.107] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.107] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.107] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.107] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.107] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierWindowMask.bmp", dwFileAttributes=0x80) returned 0 [0272.107] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierWindowMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\notifierwindowmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.107] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.107] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.108] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.108] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierWindowMaskRTL.bmp", dwFileAttributes=0x80) returned 0 [0272.108] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierWindowMaskRTL.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\notifierwindowmaskrtl.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.108] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.108] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.109] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.109] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.109] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\OutofSyncIconImages.jpg", dwFileAttributes=0x80) returned 0 [0272.109] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\OutofSyncIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\outofsynciconimages.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.109] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.109] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.109] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.109] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.110] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\OutofSyncIconImagesMask.bmp", dwFileAttributes=0x80) returned 0 [0272.110] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\OutofSyncIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\outofsynciconimagesmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.110] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.110] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.110] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.110] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.111] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\QuestionIcon.jpg", dwFileAttributes=0x80) returned 0 [0272.111] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\QuestionIcon.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\questionicon.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.111] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.111] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.112] FindNextFileW (in: hFindFile=0x665d90c080, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.112] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.112] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\QuestionIconMask.bmp", dwFileAttributes=0x80) returned 0 [0272.112] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\QuestionIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\questioniconmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.112] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.112] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.112] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.113] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\Shared16x16Images.jpg", dwFileAttributes=0x80) returned 0 [0272.113] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\Shared16x16Images.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\shared16x16images.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.113] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.113] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.114] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.114] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\Shared16x16ImagesMask.bmp", dwFileAttributes=0x80) returned 0 [0272.114] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\Shared16x16ImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\shared16x16imagesmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.115] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.115] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.115] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.115] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\Shared24x24Images.jpg", dwFileAttributes=0x80) returned 0 [0272.115] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\Shared24x24Images.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\shared24x24images.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.116] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.116] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.116] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.116] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\Shared24x24ImagesMask.bmp", dwFileAttributes=0x80) returned 0 [0272.117] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\Shared24x24ImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\shared24x24imagesmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.117] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.117] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.117] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0272.117] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\STOPICON.JPG", dwFileAttributes=0x80) returned 0 [0272.118] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\STOPICON.JPG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\stopicon.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.118] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.118] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0272.124] SetLastError (dwErrCode=0x0) [0272.124] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.128] GetLastError () returned 0x5 [0272.128] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.128] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.128] SetLastError (dwErrCode=0x0) [0272.128] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.128] GetLastError () returned 0x5 [0272.128] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.128] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.128] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90cf20 [0272.128] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.128] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.128] SetLastError (dwErrCode=0x0) [0272.128] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.128] GetLastError () returned 0x5 [0272.128] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0272.129] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.129] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90cb00 [0272.129] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0272.129] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0272.129] SetLastError (dwErrCode=0x0) [0272.129] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.129] GetLastError () returned 0x5 [0272.129] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0272.129] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.129] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bfc0 [0272.130] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0272.130] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0272.145] SetLastError (dwErrCode=0x0) [0272.145] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.148] GetLastError () returned 0x5 [0272.148] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0272.148] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.148] SetLastError (dwErrCode=0x0) [0272.148] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.148] GetLastError () returned 0x5 [0272.148] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0272.149] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.149] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\Computers\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c380 [0272.149] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0272.149] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0272.150] SetLastError (dwErrCode=0x0) [0272.150] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\Computers\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\computers\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.150] GetLastError () returned 0x5 [0272.150] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0272.150] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.150] SetLastError (dwErrCode=0x0) [0272.150] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.150] GetLastError () returned 0x5 [0272.150] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0272.150] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.151] SetLastError (dwErrCode=0x0) [0272.151] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.151] GetLastError () returned 0x5 [0272.151] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.151] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.151] SetLastError (dwErrCode=0x0) [0272.151] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.151] GetLastError () returned 0x5 [0272.151] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.151] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.151] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90cf20 [0272.152] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.152] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.165] SetLastError (dwErrCode=0x0) [0272.165] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.167] GetLastError () returned 0x5 [0272.167] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.167] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.167] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0272.167] FindClose (in: hFindFile=0x665d90cc80 | out: hFindFile=0x665d90cc80) returned 1 [0272.167] SetLastError (dwErrCode=0x0) [0272.167] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.168] GetLastError () returned 0x5 [0272.168] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0272.168] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.168] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0272.168] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0272.171] SetLastError (dwErrCode=0x0) [0272.171] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.171] GetLastError () returned 0x5 [0272.171] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0272.171] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.171] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90c260 [0272.171] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.171] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.171] SetLastError (dwErrCode=0x0) [0272.172] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\library\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.172] GetLastError () returned 0x5 [0272.172] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.172] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.172] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\Analysis\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90cda0 [0272.173] FindNextFileW (in: hFindFile=0x665d90cda0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.173] FindNextFileW (in: hFindFile=0x665d90cda0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.175] SetLastError (dwErrCode=0x0) [0272.175] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\Analysis\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\library\\analysis\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.178] GetLastError () returned 0x5 [0272.178] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.178] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.178] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.178] SetLastError (dwErrCode=0x0) [0272.178] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\library\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.179] GetLastError () returned 0x5 [0272.179] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.179] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.179] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\SOLVER\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90cc80 [0272.179] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.179] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.179] SetLastError (dwErrCode=0x0) [0272.179] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\SOLVER\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\library\\solver\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.180] GetLastError () returned 0x5 [0272.180] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.180] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.180] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0272.180] FindClose (in: hFindFile=0x665d90c260 | out: hFindFile=0x665d90c260) returned 1 [0272.180] SetLastError (dwErrCode=0x0) [0272.180] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\library\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.180] GetLastError () returned 0x5 [0272.180] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0272.180] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.180] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0272.180] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0272.181] SetLastError (dwErrCode=0x0) [0272.181] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.181] GetLastError () returned 0x5 [0272.181] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0272.181] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.181] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90bcc0 [0272.181] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.182] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.297] SetLastError (dwErrCode=0x0) [0272.297] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.300] GetLastError () returned 0x5 [0272.300] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0272.300] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.300] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0272.300] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0272.300] SetLastError (dwErrCode=0x0) [0272.300] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.300] GetLastError () returned 0x5 [0272.300] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0272.300] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.300] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90cd40 [0272.300] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.300] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.301] SetLastError (dwErrCode=0x0) [0272.301] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.301] GetLastError () returned 0x5 [0272.301] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.301] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.301] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c500 [0272.301] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.301] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.301] SetLastError (dwErrCode=0x0) [0272.301] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.302] GetLastError () returned 0x5 [0272.302] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0272.302] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.302] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90bea0 [0272.302] FindNextFileW (in: hFindFile=0x665d90bea0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0272.302] FindNextFileW (in: hFindFile=0x665d90bea0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0272.322] SetLastError (dwErrCode=0x0) [0272.322] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.325] GetLastError () returned 0x5 [0272.325] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0272.325] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.325] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0272.325] FindClose (in: hFindFile=0x665d90c500 | out: hFindFile=0x665d90c500) returned 1 [0272.325] SetLastError (dwErrCode=0x0) [0272.325] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.325] GetLastError () returned 0x5 [0272.325] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.325] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.325] FindNextFileW (in: hFindFile=0x665d90cd40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0272.325] FindClose (in: hFindFile=0x665d90cd40 | out: hFindFile=0x665d90cd40) returned 1 [0272.325] SetLastError (dwErrCode=0x0) [0272.325] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.325] GetLastError () returned 0x5 [0272.325] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0272.325] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.326] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0272.328] SetLastError (dwErrCode=0x0) [0272.328] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.328] GetLastError () returned 0x5 [0272.328] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0272.328] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.328] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90c5c0 [0272.329] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.329] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.359] SetLastError (dwErrCode=0x0) [0272.359] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.363] GetLastError () returned 0x5 [0272.363] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0272.363] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.363] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0272.363] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0272.363] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0272.372] SetLastError (dwErrCode=0x0) [0272.372] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.373] GetLastError () returned 0x5 [0272.373] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0272.373] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.373] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90ca40 [0272.373] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.373] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.373] SetLastError (dwErrCode=0x0) [0272.374] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.374] GetLastError () returned 0x5 [0272.374] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.374] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.374] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ar\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c440 [0272.374] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.374] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.374] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0272.374] FindClose (in: hFindFile=0x665d90c440 | out: hFindFile=0x665d90c440) returned 1 [0272.374] SetLastError (dwErrCode=0x0) [0272.374] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ar\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ar\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.374] GetLastError () returned 0x5 [0272.374] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.374] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.374] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.374] SetLastError (dwErrCode=0x0) [0272.374] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.375] GetLastError () returned 0x5 [0272.375] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.375] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.375] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\bg\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90bde0 [0272.375] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.375] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.375] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0272.375] FindClose (in: hFindFile=0x665d90bde0 | out: hFindFile=0x665d90bde0) returned 1 [0272.375] SetLastError (dwErrCode=0x0) [0272.375] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\bg\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\bg\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.376] GetLastError () returned 0x5 [0272.376] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.376] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.376] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.376] SetLastError (dwErrCode=0x0) [0272.376] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.376] GetLastError () returned 0x5 [0272.376] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.376] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.376] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ca\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90ce60 [0272.376] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.376] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.376] FindNextFileW (in: hFindFile=0x665d90ce60, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0272.376] FindClose (in: hFindFile=0x665d90ce60 | out: hFindFile=0x665d90ce60) returned 1 [0272.376] SetLastError (dwErrCode=0x0) [0272.376] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ca\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ca\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.377] GetLastError () returned 0x5 [0272.377] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.377] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.377] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.377] SetLastError (dwErrCode=0x0) [0272.377] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.377] GetLastError () returned 0x5 [0272.377] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.377] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.377] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\cs\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90caa0 [0272.377] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.377] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.377] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0272.377] FindClose (in: hFindFile=0x665d90caa0 | out: hFindFile=0x665d90caa0) returned 1 [0272.377] SetLastError (dwErrCode=0x0) [0272.377] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\cs\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\cs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.377] GetLastError () returned 0x5 [0272.378] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.378] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.378] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.378] SetLastError (dwErrCode=0x0) [0272.378] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.378] GetLastError () returned 0x5 [0272.378] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.378] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.378] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\da\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c980 [0272.378] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.378] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.378] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0272.378] FindClose (in: hFindFile=0x665d90c980 | out: hFindFile=0x665d90c980) returned 1 [0272.378] SetLastError (dwErrCode=0x0) [0272.378] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\da\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\da\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.379] GetLastError () returned 0x5 [0272.379] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.379] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.379] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.379] SetLastError (dwErrCode=0x0) [0272.379] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.379] GetLastError () returned 0x5 [0272.379] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.379] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.379] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\de\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c5c0 [0272.379] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.379] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.379] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0272.379] FindClose (in: hFindFile=0x665d90c5c0 | out: hFindFile=0x665d90c5c0) returned 1 [0272.380] SetLastError (dwErrCode=0x0) [0272.380] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\de\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\de\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.380] GetLastError () returned 0x5 [0272.380] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.380] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.380] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.380] SetLastError (dwErrCode=0x0) [0272.380] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.380] GetLastError () returned 0x5 [0272.380] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.380] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.380] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\el\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c5c0 [0272.380] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.380] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.380] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0272.380] FindClose (in: hFindFile=0x665d90c5c0 | out: hFindFile=0x665d90c5c0) returned 1 [0272.381] SetLastError (dwErrCode=0x0) [0272.381] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\el\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\el\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.381] GetLastError () returned 0x5 [0272.381] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.381] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.381] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.381] SetLastError (dwErrCode=0x0) [0272.381] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.381] GetLastError () returned 0x5 [0272.381] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.381] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.381] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\en-us\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c0e0 [0272.381] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.381] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.381] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0272.381] FindClose (in: hFindFile=0x665d90c0e0 | out: hFindFile=0x665d90c0e0) returned 1 [0272.382] SetLastError (dwErrCode=0x0) [0272.382] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\en-us\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.382] GetLastError () returned 0x5 [0272.382] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.382] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.382] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.382] SetLastError (dwErrCode=0x0) [0272.382] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.382] GetLastError () returned 0x5 [0272.382] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.382] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.382] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\es\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90bcc0 [0272.382] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.382] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.382] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0272.382] FindClose (in: hFindFile=0x665d90bcc0 | out: hFindFile=0x665d90bcc0) returned 1 [0272.382] SetLastError (dwErrCode=0x0) [0272.383] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\es\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\es\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.383] GetLastError () returned 0x5 [0272.383] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.383] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.383] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.383] SetLastError (dwErrCode=0x0) [0272.383] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.383] GetLastError () returned 0x5 [0272.383] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.383] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.383] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\et\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90bcc0 [0272.383] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.383] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.383] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0272.383] FindClose (in: hFindFile=0x665d90bcc0 | out: hFindFile=0x665d90bcc0) returned 1 [0272.383] SetLastError (dwErrCode=0x0) [0272.383] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\et\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\et\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.384] GetLastError () returned 0x5 [0272.384] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.384] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.384] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.384] SetLastError (dwErrCode=0x0) [0272.384] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.384] GetLastError () returned 0x5 [0272.384] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.384] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.384] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\eu\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c380 [0272.384] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.384] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.384] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0272.384] FindClose (in: hFindFile=0x665d90c380 | out: hFindFile=0x665d90c380) returned 1 [0272.384] SetLastError (dwErrCode=0x0) [0272.384] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\eu\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\eu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.385] GetLastError () returned 0x5 [0272.385] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.385] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.385] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.385] SetLastError (dwErrCode=0x0) [0272.385] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.385] GetLastError () returned 0x5 [0272.385] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.385] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.385] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\fi\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c440 [0272.385] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.385] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.385] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0272.385] FindClose (in: hFindFile=0x665d90c440 | out: hFindFile=0x665d90c440) returned 1 [0272.385] SetLastError (dwErrCode=0x0) [0272.385] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\fi\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\fi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.386] GetLastError () returned 0x5 [0272.386] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.386] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.386] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.386] SetLastError (dwErrCode=0x0) [0272.386] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.386] GetLastError () returned 0x5 [0272.386] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.386] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.386] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\fr\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90bcc0 [0272.386] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.386] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.386] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0272.386] FindClose (in: hFindFile=0x665d90bcc0 | out: hFindFile=0x665d90bcc0) returned 1 [0272.386] SetLastError (dwErrCode=0x0) [0272.386] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\fr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\fr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.386] GetLastError () returned 0x5 [0272.386] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.387] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.387] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.387] SetLastError (dwErrCode=0x0) [0272.387] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.387] GetLastError () returned 0x5 [0272.387] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.387] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.387] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\gl\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c440 [0272.387] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.387] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.387] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0272.387] FindClose (in: hFindFile=0x665d90c440 | out: hFindFile=0x665d90c440) returned 1 [0272.387] SetLastError (dwErrCode=0x0) [0272.387] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\gl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\gl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.387] GetLastError () returned 0x5 [0272.387] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.387] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.388] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.388] SetLastError (dwErrCode=0x0) [0272.388] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.388] GetLastError () returned 0x5 [0272.388] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.388] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.388] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\he\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90cc80 [0272.388] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.388] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.388] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0272.388] FindClose (in: hFindFile=0x665d90cc80 | out: hFindFile=0x665d90cc80) returned 1 [0272.388] SetLastError (dwErrCode=0x0) [0272.388] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\he\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\he\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.388] GetLastError () returned 0x5 [0272.388] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.388] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.388] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.388] SetLastError (dwErrCode=0x0) [0272.388] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.389] GetLastError () returned 0x5 [0272.389] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.389] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.389] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hi\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c980 [0272.389] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.389] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.389] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0272.389] FindClose (in: hFindFile=0x665d90c980 | out: hFindFile=0x665d90c980) returned 1 [0272.389] SetLastError (dwErrCode=0x0) [0272.389] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hi\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\hi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.389] GetLastError () returned 0x5 [0272.389] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.389] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.389] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.389] SetLastError (dwErrCode=0x0) [0272.389] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.390] GetLastError () returned 0x5 [0272.390] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.390] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.390] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hr\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c5c0 [0272.390] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.390] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.390] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0272.390] FindClose (in: hFindFile=0x665d90c5c0 | out: hFindFile=0x665d90c5c0) returned 1 [0272.390] SetLastError (dwErrCode=0x0) [0272.390] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\hr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.390] GetLastError () returned 0x5 [0272.390] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.390] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.390] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.390] SetLastError (dwErrCode=0x0) [0272.390] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.391] GetLastError () returned 0x5 [0272.391] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.391] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.391] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hu\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90caa0 [0272.391] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.391] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.391] FindNextFileW (in: hFindFile=0x665d90caa0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0272.391] FindClose (in: hFindFile=0x665d90caa0 | out: hFindFile=0x665d90caa0) returned 1 [0272.391] SetLastError (dwErrCode=0x0) [0272.391] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hu\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\hu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.391] GetLastError () returned 0x5 [0272.391] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.391] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.391] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.391] SetLastError (dwErrCode=0x0) [0272.392] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.392] GetLastError () returned 0x5 [0272.392] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.392] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.392] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\id\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90cf20 [0272.392] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.392] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.392] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0272.392] FindClose (in: hFindFile=0x665d90cf20 | out: hFindFile=0x665d90cf20) returned 1 [0272.392] SetLastError (dwErrCode=0x0) [0272.392] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\id\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\id\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.392] GetLastError () returned 0x5 [0272.392] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.392] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.392] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.392] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.392] SetLastError (dwErrCode=0x0) [0272.393] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.393] GetLastError () returned 0x5 [0272.393] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.393] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.393] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\it\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c8c0 [0272.393] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.393] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.393] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0272.393] FindClose (in: hFindFile=0x665d90c8c0 | out: hFindFile=0x665d90c8c0) returned 1 [0272.393] SetLastError (dwErrCode=0x0) [0272.393] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\it\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\it\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.393] GetLastError () returned 0x5 [0272.393] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.393] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.393] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.393] SetLastError (dwErrCode=0x0) [0272.394] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.394] GetLastError () returned 0x5 [0272.394] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.394] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.394] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ja\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90cce0 [0272.394] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.394] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.394] FindNextFileW (in: hFindFile=0x665d90cce0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0272.394] FindClose (in: hFindFile=0x665d90cce0 | out: hFindFile=0x665d90cce0) returned 1 [0272.394] SetLastError (dwErrCode=0x0) [0272.394] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ja\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ja\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.394] GetLastError () returned 0x5 [0272.394] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.394] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.394] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.394] SetLastError (dwErrCode=0x0) [0272.394] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.395] GetLastError () returned 0x5 [0272.395] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.395] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.395] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\kk\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90bea0 [0272.395] FindNextFileW (in: hFindFile=0x665d90bea0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.395] FindNextFileW (in: hFindFile=0x665d90bea0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.395] FindNextFileW (in: hFindFile=0x665d90bea0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0272.395] FindClose (in: hFindFile=0x665d90bea0 | out: hFindFile=0x665d90bea0) returned 1 [0272.395] SetLastError (dwErrCode=0x0) [0272.395] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\kk\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\kk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.395] GetLastError () returned 0x5 [0272.395] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.395] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.395] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.395] SetLastError (dwErrCode=0x0) [0272.395] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.396] GetLastError () returned 0x5 [0272.396] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.396] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.396] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ko\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c380 [0272.396] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.396] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.396] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0272.396] FindClose (in: hFindFile=0x665d90c380 | out: hFindFile=0x665d90c380) returned 1 [0272.396] SetLastError (dwErrCode=0x0) [0272.396] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ko\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ko\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.396] GetLastError () returned 0x5 [0272.396] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.396] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.396] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.396] SetLastError (dwErrCode=0x0) [0272.396] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.397] GetLastError () returned 0x5 [0272.397] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.397] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.397] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\lt\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c980 [0272.397] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.397] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.397] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0272.397] FindClose (in: hFindFile=0x665d90c980 | out: hFindFile=0x665d90c980) returned 1 [0272.397] SetLastError (dwErrCode=0x0) [0272.397] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\lt\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\lt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.397] GetLastError () returned 0x5 [0272.397] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.397] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.397] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.397] SetLastError (dwErrCode=0x0) [0272.397] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.397] GetLastError () returned 0x5 [0272.397] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.398] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.398] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\lv\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90bcc0 [0272.398] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.398] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.398] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0272.398] FindClose (in: hFindFile=0x665d90bcc0 | out: hFindFile=0x665d90bcc0) returned 1 [0272.398] SetLastError (dwErrCode=0x0) [0272.398] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\lv\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\lv\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.398] GetLastError () returned 0x5 [0272.398] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.398] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.398] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.398] SetLastError (dwErrCode=0x0) [0272.398] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.398] GetLastError () returned 0x5 [0272.398] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.398] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.398] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ms\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c260 [0272.399] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.399] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.399] FindNextFileW (in: hFindFile=0x665d90c260, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0272.399] FindClose (in: hFindFile=0x665d90c260 | out: hFindFile=0x665d90c260) returned 1 [0272.399] SetLastError (dwErrCode=0x0) [0272.399] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ms\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ms\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.399] GetLastError () returned 0x5 [0272.399] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.399] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.399] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.399] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.400] SetLastError (dwErrCode=0x0) [0272.400] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.400] GetLastError () returned 0x5 [0272.400] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.400] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.400] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\nl\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c740 [0272.400] FindNextFileW (in: hFindFile=0x665d90c740, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.400] FindNextFileW (in: hFindFile=0x665d90c740, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.400] FindNextFileW (in: hFindFile=0x665d90c740, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0272.400] FindClose (in: hFindFile=0x665d90c740 | out: hFindFile=0x665d90c740) returned 1 [0272.400] SetLastError (dwErrCode=0x0) [0272.400] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\nl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\nl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.401] GetLastError () returned 0x5 [0272.401] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.401] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.401] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.401] SetLastError (dwErrCode=0x0) [0272.401] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.401] GetLastError () returned 0x5 [0272.401] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.401] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.401] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\no\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90cc80 [0272.401] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.401] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.401] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0272.401] FindClose (in: hFindFile=0x665d90cc80 | out: hFindFile=0x665d90cc80) returned 1 [0272.401] SetLastError (dwErrCode=0x0) [0272.401] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\no\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\no\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.401] GetLastError () returned 0x5 [0272.401] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.401] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.402] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.402] SetLastError (dwErrCode=0x0) [0272.402] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.402] GetLastError () returned 0x5 [0272.402] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.402] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.402] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pl\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90d0a0 [0272.402] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.402] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.402] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0272.402] FindClose (in: hFindFile=0x665d90d0a0 | out: hFindFile=0x665d90d0a0) returned 1 [0272.402] SetLastError (dwErrCode=0x0) [0272.402] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\pl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.402] GetLastError () returned 0x5 [0272.402] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.402] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.402] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.402] SetLastError (dwErrCode=0x0) [0272.402] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.403] GetLastError () returned 0x5 [0272.403] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.403] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.403] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pt\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c8c0 [0272.404] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.404] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.405] FindNextFileW (in: hFindFile=0x665d90c8c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0272.405] FindClose (in: hFindFile=0x665d90c8c0 | out: hFindFile=0x665d90c8c0) returned 1 [0272.405] SetLastError (dwErrCode=0x0) [0272.405] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pt\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\pt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.405] GetLastError () returned 0x5 [0272.405] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.405] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.405] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.405] SetLastError (dwErrCode=0x0) [0272.405] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.405] GetLastError () returned 0x5 [0272.405] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.405] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.405] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pt-BR\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90cc80 [0272.405] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.405] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.405] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0272.405] FindClose (in: hFindFile=0x665d90cc80 | out: hFindFile=0x665d90cc80) returned 1 [0272.405] SetLastError (dwErrCode=0x0) [0272.406] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pt-BR\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\pt-br\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.406] GetLastError () returned 0x5 [0272.406] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.406] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.406] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.406] SetLastError (dwErrCode=0x0) [0272.406] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.406] GetLastError () returned 0x5 [0272.406] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.406] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.406] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ro\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90bcc0 [0272.406] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.406] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.406] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0272.406] FindClose (in: hFindFile=0x665d90bcc0 | out: hFindFile=0x665d90bcc0) returned 1 [0272.407] SetLastError (dwErrCode=0x0) [0272.407] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ro\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ro\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.407] GetLastError () returned 0x5 [0272.407] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.407] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.407] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.407] SetLastError (dwErrCode=0x0) [0272.407] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.407] GetLastError () returned 0x5 [0272.407] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.407] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.407] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ru\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c1a0 [0272.407] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.407] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.407] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0272.407] FindClose (in: hFindFile=0x665d90c1a0 | out: hFindFile=0x665d90c1a0) returned 1 [0272.408] SetLastError (dwErrCode=0x0) [0272.408] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ru\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ru\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.408] GetLastError () returned 0x5 [0272.408] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.408] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.408] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.408] SetLastError (dwErrCode=0x0) [0272.408] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.408] GetLastError () returned 0x5 [0272.408] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.408] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.408] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sk\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90cf20 [0272.408] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.408] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.408] FindNextFileW (in: hFindFile=0x665d90cf20, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0272.408] FindClose (in: hFindFile=0x665d90cf20 | out: hFindFile=0x665d90cf20) returned 1 [0272.408] SetLastError (dwErrCode=0x0) [0272.408] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sk\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\sk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.409] GetLastError () returned 0x5 [0272.409] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.409] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.409] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.409] SetLastError (dwErrCode=0x0) [0272.409] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.409] GetLastError () returned 0x5 [0272.409] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.409] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.409] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sl\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c920 [0272.409] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.409] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.409] FindNextFileW (in: hFindFile=0x665d90c920, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0272.409] FindClose (in: hFindFile=0x665d90c920 | out: hFindFile=0x665d90c920) returned 1 [0272.409] SetLastError (dwErrCode=0x0) [0272.409] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\sl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.409] GetLastError () returned 0x5 [0272.410] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.410] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.410] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.410] SetLastError (dwErrCode=0x0) [0272.410] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.410] GetLastError () returned 0x5 [0272.410] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.410] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.410] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Cyrl-BA\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c0e0 [0272.410] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.410] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.410] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0272.410] FindClose (in: hFindFile=0x665d90c0e0 | out: hFindFile=0x665d90c0e0) returned 1 [0272.410] SetLastError (dwErrCode=0x0) [0272.410] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Cyrl-BA\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\sr-cyrl-ba\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.410] GetLastError () returned 0x5 [0272.410] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.410] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.410] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.410] SetLastError (dwErrCode=0x0) [0272.410] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.411] GetLastError () returned 0x5 [0272.411] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.411] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.411] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Cyrl-CS\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c500 [0272.411] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.411] FindNextFileW (in: hFindFile=0x665d90c500, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0272.411] FindClose (in: hFindFile=0x665d90c500 | out: hFindFile=0x665d90c500) returned 1 [0272.411] SetLastError (dwErrCode=0x0) [0272.411] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Cyrl-CS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\sr-cyrl-cs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.411] GetLastError () returned 0x5 [0272.411] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.411] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.411] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.411] SetLastError (dwErrCode=0x0) [0272.411] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.411] GetLastError () returned 0x5 [0272.411] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.412] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.412] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Cyrl-RS\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c380 [0272.412] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.412] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.412] FindNextFileW (in: hFindFile=0x665d90c380, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0272.412] FindClose (in: hFindFile=0x665d90c380 | out: hFindFile=0x665d90c380) returned 1 [0272.412] SetLastError (dwErrCode=0x0) [0272.412] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Cyrl-RS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\sr-cyrl-rs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.412] GetLastError () returned 0x5 [0272.412] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.412] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.412] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.412] SetLastError (dwErrCode=0x0) [0272.412] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.412] GetLastError () returned 0x5 [0272.412] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.412] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.412] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Latn-CS\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90d0a0 [0272.413] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.413] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0272.413] FindClose (in: hFindFile=0x665d90d0a0 | out: hFindFile=0x665d90d0a0) returned 1 [0272.413] SetLastError (dwErrCode=0x0) [0272.413] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Latn-CS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\sr-latn-cs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.413] GetLastError () returned 0x5 [0272.413] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.413] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.413] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.413] SetLastError (dwErrCode=0x0) [0272.413] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.413] GetLastError () returned 0x5 [0272.413] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.413] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.413] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Latn-RS\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90cec0 [0272.413] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.413] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.413] FindNextFileW (in: hFindFile=0x665d90cec0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0272.414] FindClose (in: hFindFile=0x665d90cec0 | out: hFindFile=0x665d90cec0) returned 1 [0272.414] SetLastError (dwErrCode=0x0) [0272.414] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Latn-RS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\sr-latn-rs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.414] GetLastError () returned 0x5 [0272.414] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.414] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.414] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.414] SetLastError (dwErrCode=0x0) [0272.414] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.414] GetLastError () returned 0x5 [0272.414] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.414] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.414] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sv\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90cc80 [0272.414] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.414] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.415] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0272.415] FindClose (in: hFindFile=0x665d90cc80 | out: hFindFile=0x665d90cc80) returned 1 [0272.415] SetLastError (dwErrCode=0x0) [0272.415] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sv\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\sv\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.415] GetLastError () returned 0x5 [0272.415] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.415] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.415] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.416] SetLastError (dwErrCode=0x0) [0272.416] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.416] GetLastError () returned 0x5 [0272.416] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.416] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.416] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\th\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90cc80 [0272.416] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.416] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.416] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0272.416] FindClose (in: hFindFile=0x665d90cc80 | out: hFindFile=0x665d90cc80) returned 1 [0272.416] SetLastError (dwErrCode=0x0) [0272.416] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\th\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\th\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.417] GetLastError () returned 0x5 [0272.417] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.417] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.417] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.417] SetLastError (dwErrCode=0x0) [0272.417] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.417] GetLastError () returned 0x5 [0272.417] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.417] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.417] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\tr\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90bde0 [0272.417] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.417] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.417] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0272.417] FindClose (in: hFindFile=0x665d90bde0 | out: hFindFile=0x665d90bde0) returned 1 [0272.417] SetLastError (dwErrCode=0x0) [0272.417] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\tr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\tr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.417] GetLastError () returned 0x5 [0272.417] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.418] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.418] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.418] SetLastError (dwErrCode=0x0) [0272.418] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.418] GetLastError () returned 0x5 [0272.418] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.418] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.418] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\uk\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c020 [0272.418] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.418] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.418] FindNextFileW (in: hFindFile=0x665d90c020, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0272.418] FindClose (in: hFindFile=0x665d90c020 | out: hFindFile=0x665d90c020) returned 1 [0272.418] SetLastError (dwErrCode=0x0) [0272.418] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\uk\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\uk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.419] GetLastError () returned 0x5 [0272.419] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.419] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.419] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.419] SetLastError (dwErrCode=0x0) [0272.419] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.419] GetLastError () returned 0x5 [0272.419] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.419] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.419] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\vi\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c5c0 [0272.419] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.419] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.419] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0272.419] FindClose (in: hFindFile=0x665d90c5c0 | out: hFindFile=0x665d90c5c0) returned 1 [0272.419] SetLastError (dwErrCode=0x0) [0272.419] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\vi\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\vi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.420] GetLastError () returned 0x5 [0272.420] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.420] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.420] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.420] SetLastError (dwErrCode=0x0) [0272.420] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.420] GetLastError () returned 0x5 [0272.420] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.420] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.420] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\zh-CN\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c5c0 [0272.420] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.420] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.420] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0272.420] FindClose (in: hFindFile=0x665d90c5c0 | out: hFindFile=0x665d90c5c0) returned 1 [0272.421] SetLastError (dwErrCode=0x0) [0272.421] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\zh-CN\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\zh-cn\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.421] GetLastError () returned 0x5 [0272.421] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.421] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.421] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.421] SetLastError (dwErrCode=0x0) [0272.421] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.421] GetLastError () returned 0x5 [0272.421] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.421] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.421] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\zh-TW\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90c440 [0272.421] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.421] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.421] FindNextFileW (in: hFindFile=0x665d90c440, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0272.421] FindClose (in: hFindFile=0x665d90c440 | out: hFindFile=0x665d90c440) returned 1 [0272.421] SetLastError (dwErrCode=0x0) [0272.421] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\zh-TW\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\zh-tw\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.422] GetLastError () returned 0x5 [0272.422] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.422] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.422] FindNextFileW (in: hFindFile=0x665d90ca40, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0272.422] FindClose (in: hFindFile=0x665d90ca40 | out: hFindFile=0x665d90ca40) returned 1 [0272.422] SetLastError (dwErrCode=0x0) [0272.422] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.422] GetLastError () returned 0x5 [0272.422] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0272.422] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.422] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0272.422] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0272.428] SetLastError (dwErrCode=0x0) [0272.429] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.429] GetLastError () returned 0x5 [0272.429] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0272.429] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.429] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90cb00 [0272.429] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.429] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.429] SetLastError (dwErrCode=0x0) [0272.429] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.429] GetLastError () returned 0x5 [0272.429] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.429] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.429] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Redshift\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90bfc0 [0272.429] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.429] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.429] SetLastError (dwErrCode=0x0) [0272.429] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Redshift\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\redshift\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.430] GetLastError () returned 0x5 [0272.430] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0272.430] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.430] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Redshift\\lib\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c980 [0272.430] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0272.430] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0272.430] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0272.430] SetLastError (dwErrCode=0x0) [0272.430] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Redshift\\lib\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\redshift\\lib\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.431] GetLastError () returned 0x5 [0272.431] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0272.431] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.431] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Redshift\\lib\\OpenSSL64.DllA\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c1a0 [0272.431] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0272.431] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0272.431] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0272.431] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0272.431] FindNextFileW (in: hFindFile=0x665d90c1a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0272.431] FindClose (in: hFindFile=0x665d90c1a0 | out: hFindFile=0x665d90c1a0) returned 1 [0272.431] SetLastError (dwErrCode=0x0) [0272.431] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Redshift\\lib\\OpenSSL64.DllA\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\redshift\\lib\\openssl64.dlla\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.431] GetLastError () returned 0x5 [0272.431] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0272.431] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.431] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0272.431] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0272.431] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0272.431] FindNextFileW (in: hFindFile=0x665d90c980, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0272.431] FindClose (in: hFindFile=0x665d90c980 | out: hFindFile=0x665d90c980) returned 1 [0272.431] SetLastError (dwErrCode=0x0) [0272.431] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Redshift\\lib\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\redshift\\lib\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.432] GetLastError () returned 0x5 [0272.432] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0272.432] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.432] FindNextFileW (in: hFindFile=0x665d90bfc0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0272.432] FindClose (in: hFindFile=0x665d90bfc0 | out: hFindFile=0x665d90bfc0) returned 1 [0272.432] SetLastError (dwErrCode=0x0) [0272.432] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Redshift\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\redshift\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.432] GetLastError () returned 0x5 [0272.432] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.432] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.432] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.432] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.432] SetLastError (dwErrCode=0x0) [0272.432] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.432] GetLastError () returned 0x5 [0272.432] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.432] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.433] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90bcc0 [0272.433] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.433] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.433] SetLastError (dwErrCode=0x0) [0272.433] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\salesforce\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.433] GetLastError () returned 0x5 [0272.433] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0272.433] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.433] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\*.*", lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0x665d90c0e0 [0272.433] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0272.433] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0272.433] SetLastError (dwErrCode=0x0) [0272.433] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\salesforce\\lib\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.433] GetLastError () returned 0x5 [0272.433] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0272.433] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.433] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\1033\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bd20 [0272.434] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0272.434] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0272.437] SetLastError (dwErrCode=0x0) [0272.437] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\salesforce\\lib\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.440] GetLastError () returned 0x5 [0272.440] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0272.440] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.440] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0272.440] SetLastError (dwErrCode=0x0) [0272.440] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\salesforce\\lib\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.441] GetLastError () returned 0x5 [0272.441] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0272.441] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.441] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\LibCurl64.DllA\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90bd20 [0272.441] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0272.441] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0272.441] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0272.441] FindNextFileW (in: hFindFile=0x665d90bd20, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0272.441] FindClose (in: hFindFile=0x665d90bd20 | out: hFindFile=0x665d90bd20) returned 1 [0272.441] SetLastError (dwErrCode=0x0) [0272.441] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\LibCurl64.DllA\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\salesforce\\lib\\libcurl64.dlla\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.441] GetLastError () returned 0x5 [0272.441] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0272.441] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.441] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0272.441] SetLastError (dwErrCode=0x0) [0272.441] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\salesforce\\lib\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.442] GetLastError () returned 0x5 [0272.442] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0272.442] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.442] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\OpenSSL64.DllA\\*.*", lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0x665d90c4a0 [0272.442] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0272.442] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0272.442] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0272.442] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 1 [0272.442] FindNextFileW (in: hFindFile=0x665d90c4a0, lpFindFileData=0x665da7add0 | out: lpFindFileData=0x665da7add0) returned 0 [0272.442] FindClose (in: hFindFile=0x665d90c4a0 | out: hFindFile=0x665d90c4a0) returned 1 [0272.442] SetLastError (dwErrCode=0x0) [0272.442] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\OpenSSL64.DllA\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\salesforce\\lib\\openssl64.dlla\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.442] GetLastError () returned 0x5 [0272.442] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7b530, lpOverlapped=0x0) returned 0 [0272.442] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.442] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0272.442] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0272.442] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0272.442] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0272.442] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 1 [0272.442] FindNextFileW (in: hFindFile=0x665d90c0e0, lpFindFileData=0x665da7b580 | out: lpFindFileData=0x665da7b580) returned 0 [0272.442] FindClose (in: hFindFile=0x665d90c0e0 | out: hFindFile=0x665d90c0e0) returned 1 [0272.442] SetLastError (dwErrCode=0x0) [0272.442] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\salesforce\\lib\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.443] GetLastError () returned 0x5 [0272.443] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7bce0, lpOverlapped=0x0) returned 0 [0272.443] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.443] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0272.443] FindClose (in: hFindFile=0x665d90bcc0 | out: hFindFile=0x665d90bcc0) returned 1 [0272.443] SetLastError (dwErrCode=0x0) [0272.443] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\salesforce\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.443] GetLastError () returned 0x5 [0272.443] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.443] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.443] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.443] FindNextFileW (in: hFindFile=0x665d90cb00, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0 [0272.443] FindClose (in: hFindFile=0x665d90cb00 | out: hFindFile=0x665d90cb00) returned 1 [0272.443] SetLastError (dwErrCode=0x0) [0272.443] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.444] GetLastError () returned 0x5 [0272.444] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0272.444] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.444] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0272.444] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0272.444] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0272.444] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0272.444] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0272.444] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0272.448] SetLastError (dwErrCode=0x0) [0272.448] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.448] GetLastError () returned 0x5 [0272.448] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0272.448] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.448] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90c5c0 [0272.449] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.449] FindNextFileW (in: hFindFile=0x665d90c5c0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.453] SetLastError (dwErrCode=0x0) [0272.453] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\onenote\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.456] GetLastError () returned 0x5 [0272.456] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0272.456] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.456] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0272.456] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0272.458] SetLastError (dwErrCode=0x0) [0272.458] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.458] GetLastError () returned 0x5 [0272.458] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0272.458] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.458] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\osfFPA\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90d0a0 [0272.458] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.458] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.459] SetLastError (dwErrCode=0x0) [0272.459] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\osfFPA\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\osffpa\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0272.459] GetLastError () returned 0x5 [0272.459] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0272.459] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.459] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0272.459] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0272.459] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0272.459] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0272.459] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0272.459] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0272.462] SetLastError (dwErrCode=0x0) [0272.463] GetLastError () returned 0x5 [0272.463] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0272.463] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.463] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90bcc0 [0272.464] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.464] FindNextFileW (in: hFindFile=0x665d90bcc0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.494] GetLastError () returned 0x5 [0272.494] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0272.494] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.494] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0272.494] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0272.494] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0272.494] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0272.494] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0272.494] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0272.494] GetLastError () returned 0x5 [0272.494] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0272.494] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.494] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90bde0 [0272.495] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.495] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.541] GetLastError () returned 0x5 [0272.541] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0272.541] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.541] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0272.541] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0272.542] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0272.542] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0272.542] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0272.542] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0272.542] FindNextFileW (in: hFindFile=0x665d90be40, lpFindFileData=0x665da7cc90 | out: lpFindFileData=0x665da7cc90) returned 1 [0272.543] GetLastError () returned 0x5 [0272.543] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7cc40, lpOverlapped=0x0) returned 0 [0272.543] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.543] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\*.*", lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 0x665d90bde0 [0272.544] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.544] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.544] GetLastError () returned 0x5 [0272.544] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.544] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.544] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\1033\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90cc80 [0272.545] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.545] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.545] FindNextFileW (in: hFindFile=0x665d90cc80, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0272.545] FindClose (in: hFindFile=0x665d90cc80 | out: hFindFile=0x665d90cc80) returned 1 [0272.545] GetLastError () returned 0x5 [0272.545] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.545] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.545] FindNextFileW (in: hFindFile=0x665d90bde0, lpFindFileData=0x665da7c4e0 | out: lpFindFileData=0x665da7c4e0) returned 1 [0272.545] GetLastError () returned 0x5 [0272.545] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff74ec49500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x665da7c490, lpOverlapped=0x0) returned 0 [0272.545] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0272.545] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\1036\\*.*", lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0x665d90d0a0 [0272.545] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.545] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 1 [0272.545] FindNextFileW (in: hFindFile=0x665d90d0a0, lpFindFileData=0x665da7bd30 | out: lpFindFileData=0x665da7bd30) returned 0 [0272.545] FindClose (in: hFindFile=0x665d90d0a0 | out: hFindFile=0x665d90d0a0) returned 1 [0279.110] GetIpNetTable (in: IpNetTable=0x0, SizePointer=0x665da7f2e0, Order=1 | out: IpNetTable=0x0, SizePointer=0x665da7f2e0) returned 0x7a [0279.110] VirtualAlloc (lpAddress=0x0, dwSize=0x1bc, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa50000 [0279.110] GetIpNetTable (in: IpNetTable=0x665aa50000, SizePointer=0x665da7f2e0, Order=1 | out: IpNetTable=0x665aa50000, SizePointer=0x665da7f2e0) returned 0x0 [0279.111] VirtualAlloc (lpAddress=0x0, dwSize=0xc0, flAllocationType=0x1000, flProtect=0x4) returned 0x665aa60000 [0279.112] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x665d950b00, lphEnum=0x665da7f290 | out: lphEnum=0x665da7f290*=0x0) returned 0x4b3 [0280.350] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x665d950b00, lphEnum=0x665da7f290 | out: lphEnum=0x665da7f290*=0x0) returned 0x4b3 [0280.351] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x665d950b00, lphEnum=0x665da7f290 | out: lphEnum=0x665da7f290*=0x0) returned 0x4b3 [0292.301] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x665d950b00, lphEnum=0x665da7f290 | out: lphEnum=0x665da7f290*=0x0) returned 0x4b3 [0292.303] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x665d950b00, lphEnum=0x665da7f290 | out: lphEnum=0x665da7f290*=0x0) returned 0x4b3 [0292.304] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x665d950b00, lphEnum=0x665da7f290 | out: lphEnum=0x665da7f290*=0x0) returned 0x4b3 [0292.305] VirtualFree (lpAddress=0x665aa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0292.306] VirtualFree (lpAddress=0x665aa60000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0292.306] CryptDestroyKey (hKey=0x665ab9a960) returned 1 [0292.306] CryptAcquireContextW (in: phProv=0x7ff74ec4ce20, szContainer="AES_unique_", szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0x10 | out: phProv=0x7ff74ec4ce20*=0x0) returned 1 [0292.315] GetWindowsDirectoryW (in: lpBuffer=0x665da7e300, uSize=0x1f4 | out: lpBuffer="C:\\Windows") returned 0xa [0292.315] CreateFileW (lpFileName="C:\\users\\Public\\window.bat" (normalized: "c:\\users\\public\\window.bat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7ac [0292.316] WriteFile (in: hFile=0x7ac, lpBuffer=0x665da7ec70*, nNumberOfBytesToWrite=0x5f0, lpNumberOfBytesWritten=0x665da7e2a0, lpOverlapped=0x0 | out: lpBuffer=0x665da7ec70*, lpNumberOfBytesWritten=0x665da7e2a0*=0x5f0, lpOverlapped=0x0) returned 1 [0292.317] CloseHandle (hObject=0x7ac) returned 1 [0292.317] GetWindowsDirectoryW (in: lpBuffer=0x665da7eae0, uSize=0xc8 | out: lpBuffer="C:\\Windows") returned 0xa [0292.317] ShellExecuteW (hwnd=0x0, lpOperation="runas", lpFile="C:\\users\\Public\\window.bat", lpParameters=0x0, lpDirectory=0x0, nShowCmd=0) Thread: id = 267 os_tid = 0x984 Thread: id = 268 os_tid = 0x8fc Thread: id = 272 os_tid = 0xb10 Thread: id = 273 os_tid = 0xb90 Process: id = "16" image_name = "taskhostw.exe" filename = "c:\\windows\\system32\\taskhostw.exe" page_root = "0x5f8cb000" os_pid = "0x7ec" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "injection" parent_id = "12" os_parent_pid = "0x5dc" cmd_line = "taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}" cur_dir = "C:\\Windows\\system32\\" os_username = "LHNIWSJ\\CIiHmnxMn6Ps" os_groups = "LHNIWSJ\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0001b4e9" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 7241 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 7242 start_va = 0x84e6a50000 end_va = 0x84e6a5ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000084e6a50000" filename = "" Region: id = 7243 start_va = 0x84e6a60000 end_va = 0x84e6a66fff entry_point = 0x0 region_type = private name = "private_0x00000084e6a60000" filename = "" Region: id = 7244 start_va = 0x84e6a70000 end_va = 0x84e6a83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000084e6a70000" filename = "" Region: id = 7245 start_va = 0x84e6a90000 end_va = 0x84e6b0ffff entry_point = 0x0 region_type = private name = "private_0x00000084e6a90000" filename = "" Region: id = 7246 start_va = 0x84e6b10000 end_va = 0x84e6b13fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000084e6b10000" filename = "" Region: id = 7247 start_va = 0x84e6b20000 end_va = 0x84e6b20fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000084e6b20000" filename = "" Region: id = 7248 start_va = 0x84e6b30000 end_va = 0x84e6b31fff entry_point = 0x0 region_type = private name = "private_0x00000084e6b30000" filename = "" Region: id = 7249 start_va = 0x84e6b40000 end_va = 0x84e6bbffff entry_point = 0x0 region_type = private name = "private_0x00000084e6b40000" filename = "" Region: id = 7250 start_va = 0x84e6bc0000 end_va = 0x84e6bc6fff entry_point = 0x0 region_type = private name = "private_0x00000084e6bc0000" filename = "" Region: id = 7251 start_va = 0x84e6bd0000 end_va = 0x84e6bd0fff entry_point = 0x84e6bd0000 region_type = mapped_file name = "taskhostw.exe.mui" filename = "\\Windows\\System32\\en-US\\taskhostw.exe.mui" (normalized: "c:\\windows\\system32\\en-us\\taskhostw.exe.mui") Region: id = 7252 start_va = 0x84e6be0000 end_va = 0x84e6cdffff entry_point = 0x0 region_type = private name = "private_0x00000084e6be0000" filename = "" Region: id = 7253 start_va = 0x84e6ce0000 end_va = 0x84e6d9dfff entry_point = 0x84e6ce0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 7254 start_va = 0x84e6da0000 end_va = 0x84e6e1ffff entry_point = 0x0 region_type = private name = "private_0x00000084e6da0000" filename = "" Region: id = 7255 start_va = 0x84e6e20000 end_va = 0x84e6e20fff entry_point = 0x0 region_type = private name = "private_0x00000084e6e20000" filename = "" Region: id = 7256 start_va = 0x84e6e30000 end_va = 0x84e6e30fff entry_point = 0x0 region_type = private name = "private_0x00000084e6e30000" filename = "" Region: id = 7257 start_va = 0x84e6e40000 end_va = 0x84e6e4ffff entry_point = 0x0 region_type = private name = "private_0x00000084e6e40000" filename = "" Region: id = 7258 start_va = 0x84e6e50000 end_va = 0x84e6fd7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000084e6e50000" filename = "" Region: id = 7259 start_va = 0x84e6fe0000 end_va = 0x84e7160fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000084e6fe0000" filename = "" Region: id = 7260 start_va = 0x84e7170000 end_va = 0x84e856ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000084e7170000" filename = "" Region: id = 7261 start_va = 0x84e8570000 end_va = 0x84e8627fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000084e8570000" filename = "" Region: id = 7262 start_va = 0x84e8630000 end_va = 0x84e8633fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000084e8630000" filename = "" Region: id = 7263 start_va = 0x84e8640000 end_va = 0x84e8640fff entry_point = 0x0 region_type = private name = "private_0x00000084e8640000" filename = "" Region: id = 7264 start_va = 0x84e8650000 end_va = 0x84e8655fff entry_point = 0x84e8650000 region_type = mapped_file name = "winmm.dll.mui" filename = "\\Windows\\System32\\en-US\\winmm.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\winmm.dll.mui") Region: id = 7265 start_va = 0x84e8660000 end_va = 0x84e86dffff entry_point = 0x0 region_type = private name = "private_0x00000084e8660000" filename = "" Region: id = 7266 start_va = 0x84e86e0000 end_va = 0x84e86e0fff entry_point = 0x0 region_type = private name = "private_0x00000084e86e0000" filename = "" Region: id = 7267 start_va = 0x84e86f0000 end_va = 0x84e86f7fff entry_point = 0x0 region_type = private name = "private_0x00000084e86f0000" filename = "" Region: id = 7268 start_va = 0x84e8700000 end_va = 0x84e8700fff entry_point = 0x0 region_type = private name = "private_0x00000084e8700000" filename = "" Region: id = 7269 start_va = 0x84e8710000 end_va = 0x84e8710fff entry_point = 0x0 region_type = private name = "private_0x00000084e8710000" filename = "" Region: id = 7270 start_va = 0x84e8720000 end_va = 0x84e8723fff entry_point = 0x0 region_type = private name = "private_0x00000084e8720000" filename = "" Region: id = 7271 start_va = 0x84e8730000 end_va = 0x84e8731fff entry_point = 0x0 region_type = private name = "private_0x00000084e8730000" filename = "" Region: id = 7272 start_va = 0x84e8740000 end_va = 0x84e8740fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000084e8740000" filename = "" Region: id = 7273 start_va = 0x84e8750000 end_va = 0x84e875ffff entry_point = 0x0 region_type = private name = "private_0x00000084e8750000" filename = "" Region: id = 7274 start_va = 0x84e8760000 end_va = 0x84e87dffff entry_point = 0x0 region_type = private name = "private_0x00000084e8760000" filename = "" Region: id = 7275 start_va = 0x84e87e0000 end_va = 0x84e87e0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000084e87e0000" filename = "" Region: id = 7276 start_va = 0x84e87f0000 end_va = 0x84e8b26fff entry_point = 0x84e87f0000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 7277 start_va = 0x84e8b30000 end_va = 0x84e8baffff entry_point = 0x0 region_type = private name = "private_0x00000084e8b30000" filename = "" Region: id = 7278 start_va = 0x84e8bb0000 end_va = 0x84e8c2ffff entry_point = 0x0 region_type = private name = "private_0x00000084e8bb0000" filename = "" Region: id = 7279 start_va = 0x84e8c30000 end_va = 0x84e8caffff entry_point = 0x0 region_type = private name = "private_0x00000084e8c30000" filename = "" Region: id = 7280 start_va = 0x84e8cb0000 end_va = 0x84e8cb0fff entry_point = 0x84e8cb0000 region_type = mapped_file name = "msctfmonitor.dll.mui" filename = "\\Windows\\System32\\en-US\\MsCtfMonitor.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\msctfmonitor.dll.mui") Region: id = 7281 start_va = 0x84e8cc0000 end_va = 0x84e8d3ffff entry_point = 0x0 region_type = private name = "private_0x00000084e8cc0000" filename = "" Region: id = 7282 start_va = 0x84e8d40000 end_va = 0x84e8e3ffff entry_point = 0x0 region_type = private name = "private_0x00000084e8d40000" filename = "" Region: id = 7283 start_va = 0x84e8e40000 end_va = 0x84e8e40fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000084e8e40000" filename = "" Region: id = 7284 start_va = 0x84e8e50000 end_va = 0x84e8e50fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000084e8e50000" filename = "" Region: id = 7285 start_va = 0x84e8e60000 end_va = 0x84e8e66fff entry_point = 0x0 region_type = private name = "private_0x00000084e8e60000" filename = "" Region: id = 7286 start_va = 0x84e8e70000 end_va = 0x84e8e7ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000084e8e70000" filename = "" Region: id = 7287 start_va = 0x84e8e80000 end_va = 0x84e8e8ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000084e8e80000" filename = "" Region: id = 7288 start_va = 0x84e8e90000 end_va = 0x84e8e9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000084e8e90000" filename = "" Region: id = 7289 start_va = 0x84e8ea0000 end_va = 0x84e8eaffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000084e8ea0000" filename = "" Region: id = 7290 start_va = 0x84e8eb0000 end_va = 0x84e8ebffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000084e8eb0000" filename = "" Region: id = 7291 start_va = 0x84e8ec0000 end_va = 0x84e8ecffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000084e8ec0000" filename = "" Region: id = 7292 start_va = 0x84e8ed0000 end_va = 0x84e8edffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000084e8ed0000" filename = "" Region: id = 7293 start_va = 0x84e8ee0000 end_va = 0x84e8eeffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000084e8ee0000" filename = "" Region: id = 7294 start_va = 0x84e8ef0000 end_va = 0x84e8efffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000084e8ef0000" filename = "" Region: id = 7295 start_va = 0x84e8f00000 end_va = 0x84e8f0ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000084e8f00000" filename = "" Region: id = 7296 start_va = 0x84e8f10000 end_va = 0x84e8f1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000084e8f10000" filename = "" Region: id = 7297 start_va = 0x84e8f20000 end_va = 0x84e8f2ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000084e8f20000" filename = "" Region: id = 7298 start_va = 0x84e8f30000 end_va = 0x84e9f2ffff entry_point = 0x0 region_type = private name = "private_0x00000084e8f30000" filename = "" Region: id = 7299 start_va = 0x84e9f30000 end_va = 0x84e9f30fff entry_point = 0x0 region_type = private name = "private_0x00000084e9f30000" filename = "" Region: id = 7300 start_va = 0x84e9f40000 end_va = 0x84e9fcffff entry_point = 0x0 region_type = private name = "private_0x00000084e9f40000" filename = "" Region: id = 7301 start_va = 0x84e9fd0000 end_va = 0x84edfcffff entry_point = 0x0 region_type = private name = "private_0x00000084e9fd0000" filename = "" Region: id = 7302 start_va = 0x84edfd0000 end_va = 0x84f1fcffff entry_point = 0x0 region_type = private name = "private_0x00000084edfd0000" filename = "" Region: id = 7303 start_va = 0x84f1fd0000 end_va = 0x84f1fd7fff entry_point = 0x0 region_type = private name = "private_0x00000084f1fd0000" filename = "" Region: id = 7304 start_va = 0x84f1fe0000 end_va = 0x84f1feffff entry_point = 0x84f1fe0000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 7305 start_va = 0x84f1ff0000 end_va = 0x84f1ffffff entry_point = 0x84f1ff0000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 7306 start_va = 0x84f2000000 end_va = 0x84f200ffff entry_point = 0x84f2000000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 7307 start_va = 0x84f2010000 end_va = 0x84f201ffff entry_point = 0x84f2010000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 7308 start_va = 0x84f2020000 end_va = 0x84f202ffff entry_point = 0x84f2020000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 7309 start_va = 0x84f2030000 end_va = 0x84f203ffff entry_point = 0x84f2030000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 7310 start_va = 0x84f2040000 end_va = 0x84f204ffff entry_point = 0x84f2040000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 7311 start_va = 0x84f2050000 end_va = 0x84f205ffff entry_point = 0x84f2050000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 7312 start_va = 0x84f2060000 end_va = 0x84f206ffff entry_point = 0x84f2060000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 7313 start_va = 0x84f2070000 end_va = 0x84f207ffff entry_point = 0x84f2070000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 7314 start_va = 0x84f2080000 end_va = 0x84f208ffff entry_point = 0x84f2080000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 7315 start_va = 0x84f2090000 end_va = 0x84f209ffff entry_point = 0x84f2090000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 7316 start_va = 0x84f20a0000 end_va = 0x84f20affff entry_point = 0x84f20a0000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 7317 start_va = 0x84f20b0000 end_va = 0x84f20bffff entry_point = 0x84f20b0000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 7318 start_va = 0x84f20c0000 end_va = 0x84f20cffff entry_point = 0x84f20c0000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 7319 start_va = 0x84f20d0000 end_va = 0x84f20dffff entry_point = 0x84f20d0000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 7320 start_va = 0x84f20e0000 end_va = 0x84f215ffff entry_point = 0x0 region_type = private name = "private_0x00000084f20e0000" filename = "" Region: id = 7321 start_va = 0x84f2160000 end_va = 0x84f2167fff entry_point = 0x0 region_type = private name = "private_0x00000084f2160000" filename = "" Region: id = 7322 start_va = 0x84f2170000 end_va = 0x84f217ffff entry_point = 0x84f2170000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 7323 start_va = 0x84f2180000 end_va = 0x84f218ffff entry_point = 0x84f2180000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 7324 start_va = 0x84f2190000 end_va = 0x84f219ffff entry_point = 0x84f2190000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 7325 start_va = 0x84f21a0000 end_va = 0x84f21affff entry_point = 0x84f21a0000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 7326 start_va = 0x84f21b0000 end_va = 0x84f21bffff entry_point = 0x84f21b0000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 7327 start_va = 0x84f21c0000 end_va = 0x84f21cffff entry_point = 0x84f21c0000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 7328 start_va = 0x84f21d0000 end_va = 0x84f21d7fff entry_point = 0x0 region_type = private name = "private_0x00000084f21d0000" filename = "" Region: id = 7329 start_va = 0x84f21e0000 end_va = 0x84f21effff entry_point = 0x84f21e0000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 7330 start_va = 0x84f21f0000 end_va = 0x84f21fffff entry_point = 0x84f21f0000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 7331 start_va = 0x84f2200000 end_va = 0x84f220ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000084f2200000" filename = "" Region: id = 7332 start_va = 0x84f2210000 end_va = 0x84f221ffff entry_point = 0x84f2210000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 7333 start_va = 0x84f2220000 end_va = 0x84f222ffff entry_point = 0x84f2220000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 7334 start_va = 0x84f2230000 end_va = 0x84f223ffff entry_point = 0x84f2230000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 7335 start_va = 0x84f2240000 end_va = 0x84f224ffff entry_point = 0x84f2240000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 7336 start_va = 0x84f2250000 end_va = 0x84f225ffff entry_point = 0x84f2250000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 7337 start_va = 0x84f2260000 end_va = 0x84f226ffff entry_point = 0x84f2260000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 7338 start_va = 0x84f2270000 end_va = 0x84f227ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000084f2270000" filename = "" Region: id = 7339 start_va = 0x84f2280000 end_va = 0x84f228ffff entry_point = 0x84f2280000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 7340 start_va = 0x84f2290000 end_va = 0x84f229ffff entry_point = 0x84f2290000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 7341 start_va = 0x84f22a0000 end_va = 0x84f22affff entry_point = 0x84f22a0000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 7342 start_va = 0x84f22b0000 end_va = 0x84f232ffff entry_point = 0x0 region_type = private name = "private_0x00000084f22b0000" filename = "" Region: id = 7343 start_va = 0x84f2340000 end_va = 0x84f234ffff entry_point = 0x84f2340000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 7344 start_va = 0x84f2350000 end_va = 0x84f235ffff entry_point = 0x84f2350000 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 7345 start_va = 0x7df5ff990000 end_va = 0x7ff5ff98ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ff990000" filename = "" Region: id = 7346 start_va = 0x7ff74ec20000 end_va = 0x7ff74ec54fff entry_point = 0x0 region_type = private name = "private_0x00007ff74ec20000" filename = "" Region: id = 7347 start_va = 0x7ff7cbcb6000 end_va = 0x7ff7cbcb7fff entry_point = 0x0 region_type = private name = "private_0x00007ff7cbcb6000" filename = "" Region: id = 7348 start_va = 0x7ff7cbcb8000 end_va = 0x7ff7cbcb9fff entry_point = 0x0 region_type = private name = "private_0x00007ff7cbcb8000" filename = "" Region: id = 7349 start_va = 0x7ff7cbcba000 end_va = 0x7ff7cbcbbfff entry_point = 0x0 region_type = private name = "private_0x00007ff7cbcba000" filename = "" Region: id = 7350 start_va = 0x7ff7cbcbc000 end_va = 0x7ff7cbcbdfff entry_point = 0x0 region_type = private name = "private_0x00007ff7cbcbc000" filename = "" Region: id = 7351 start_va = 0x7ff7cbcbe000 end_va = 0x7ff7cbcbffff entry_point = 0x0 region_type = private name = "private_0x00007ff7cbcbe000" filename = "" Region: id = 7352 start_va = 0x7ff7cbcc0000 end_va = 0x7ff7cbdbffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff7cbcc0000" filename = "" Region: id = 7353 start_va = 0x7ff7cbdc0000 end_va = 0x7ff7cbde2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff7cbdc0000" filename = "" Region: id = 7354 start_va = 0x7ff7cbde3000 end_va = 0x7ff7cbde4fff entry_point = 0x0 region_type = private name = "private_0x00007ff7cbde3000" filename = "" Region: id = 7355 start_va = 0x7ff7cbde5000 end_va = 0x7ff7cbde6fff entry_point = 0x0 region_type = private name = "private_0x00007ff7cbde5000" filename = "" Region: id = 7356 start_va = 0x7ff7cbde7000 end_va = 0x7ff7cbde8fff entry_point = 0x0 region_type = private name = "private_0x00007ff7cbde7000" filename = "" Region: id = 7357 start_va = 0x7ff7cbde9000 end_va = 0x7ff7cbdeafff entry_point = 0x0 region_type = private name = "private_0x00007ff7cbde9000" filename = "" Region: id = 7358 start_va = 0x7ff7cbdeb000 end_va = 0x7ff7cbdecfff entry_point = 0x0 region_type = private name = "private_0x00007ff7cbdeb000" filename = "" Region: id = 7359 start_va = 0x7ff7cbded000 end_va = 0x7ff7cbdedfff entry_point = 0x0 region_type = private name = "private_0x00007ff7cbded000" filename = "" Region: id = 7360 start_va = 0x7ff7cbdee000 end_va = 0x7ff7cbdeffff entry_point = 0x0 region_type = private name = "private_0x00007ff7cbdee000" filename = "" Region: id = 7361 start_va = 0x7ff7cc850000 end_va = 0x7ff7cc868fff entry_point = 0x7ff7cc850000 region_type = mapped_file name = "taskhostw.exe" filename = "\\Windows\\System32\\taskhostw.exe" (normalized: "c:\\windows\\system32\\taskhostw.exe") Region: id = 7362 start_va = 0x7ffb7dfb0000 end_va = 0x7ffb7dfdbfff entry_point = 0x7ffb7dfb0000 region_type = mapped_file name = "winmmbase.dll" filename = "\\Windows\\System32\\winmmbase.dll" (normalized: "c:\\windows\\system32\\winmmbase.dll") Region: id = 7363 start_va = 0x7ffb7dfe0000 end_va = 0x7ffb7e002fff entry_point = 0x7ffb7dfe0000 region_type = mapped_file name = "winmm.dll" filename = "\\Windows\\System32\\winmm.dll" (normalized: "c:\\windows\\system32\\winmm.dll") Region: id = 7364 start_va = 0x7ffb7fb20000 end_va = 0x7ffb7fb34fff entry_point = 0x7ffb7fb20000 region_type = mapped_file name = "profext.dll" filename = "\\Windows\\System32\\profext.dll" (normalized: "c:\\windows\\system32\\profext.dll") Region: id = 7365 start_va = 0x7ffb82ac0000 end_va = 0x7ffb82b38fff entry_point = 0x7ffb82ac0000 region_type = mapped_file name = "msutb.dll" filename = "\\Windows\\System32\\msutb.dll" (normalized: "c:\\windows\\system32\\msutb.dll") Region: id = 7366 start_va = 0x7ffb82b40000 end_va = 0x7ffb82b4bfff entry_point = 0x7ffb82b40000 region_type = mapped_file name = "msctfmonitor.dll" filename = "\\Windows\\System32\\MsCtfMonitor.dll" (normalized: "c:\\windows\\system32\\msctfmonitor.dll") Region: id = 7367 start_va = 0x7ffb82b50000 end_va = 0x7ffb82b6afff entry_point = 0x7ffb82b50000 region_type = mapped_file name = "playsndsrv.dll" filename = "\\Windows\\System32\\PlaySndSrv.dll" (normalized: "c:\\windows\\system32\\playsndsrv.dll") Region: id = 7368 start_va = 0x7ffb856f0000 end_va = 0x7ffb85996fff entry_point = 0x7ffb856f0000 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\System32\\wininet.dll" (normalized: "c:\\windows\\system32\\wininet.dll") Region: id = 7369 start_va = 0x7ffb85df0000 end_va = 0x7ffb860d1fff entry_point = 0x7ffb85df0000 region_type = mapped_file name = "esent.dll" filename = "\\Windows\\System32\\esent.dll" (normalized: "c:\\windows\\system32\\esent.dll") Region: id = 7370 start_va = 0x7ffb88720000 end_va = 0x7ffb88a95fff entry_point = 0x7ffb88720000 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" (normalized: "c:\\windows\\system32\\iertutil.dll") Region: id = 7371 start_va = 0x7ffb8bf20000 end_va = 0x7ffb8bf41fff entry_point = 0x7ffb8bf20000 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\System32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll") Region: id = 7372 start_va = 0x7ffb8bf70000 end_va = 0x7ffb8bf82fff entry_point = 0x7ffb8bf70000 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll") Region: id = 7373 start_va = 0x7ffb8c780000 end_va = 0x7ffb8c815fff entry_point = 0x7ffb8c780000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 7374 start_va = 0x7ffb8c820000 end_va = 0x7ffb8c846fff entry_point = 0x7ffb8c820000 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 7375 start_va = 0x7ffb8d050000 end_va = 0x7ffb8d0a7fff entry_point = 0x7ffb8d050000 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll") Region: id = 7376 start_va = 0x7ffb8d250000 end_va = 0x7ffb8d281fff entry_point = 0x7ffb8d250000 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll") Region: id = 7377 start_va = 0x7ffb8d4c0000 end_va = 0x7ffb8d4defff entry_point = 0x7ffb8d4c0000 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 7378 start_va = 0x7ffb8dd00000 end_va = 0x7ffb8dd6afff entry_point = 0x7ffb8dd00000 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 7379 start_va = 0x7ffb8deb0000 end_va = 0x7ffb8dec2fff entry_point = 0x7ffb8deb0000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 7380 start_va = 0x7ffb8def0000 end_va = 0x7ffb8df39fff entry_point = 0x7ffb8def0000 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 7381 start_va = 0x7ffb8df40000 end_va = 0x7ffb8df4efff entry_point = 0x7ffb8df40000 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 7382 start_va = 0x7ffb8e000000 end_va = 0x7ffb8e0b2fff entry_point = 0x7ffb8e000000 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\System32\\SHCore.dll" (normalized: "c:\\windows\\system32\\shcore.dll") Region: id = 7383 start_va = 0x7ffb8e120000 end_va = 0x7ffb8e747fff entry_point = 0x7ffb8e120000 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\System32\\windows.storage.dll" (normalized: "c:\\windows\\system32\\windows.storage.dll") Region: id = 7384 start_va = 0x7ffb8e920000 end_va = 0x7ffb8eafcfff entry_point = 0x7ffb8e920000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 7385 start_va = 0x7ffb8eb00000 end_va = 0x7ffb8eb43fff entry_point = 0x7ffb8eb00000 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 7386 start_va = 0x7ffb8eb50000 end_va = 0x7ffb8ebecfff entry_point = 0x7ffb8eb50000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 7387 start_va = 0x7ffb8ebf0000 end_va = 0x7ffb8ee6bfff entry_point = 0x7ffb8ebf0000 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 7388 start_va = 0x7ffb8ee70000 end_va = 0x7ffb8efbdfff entry_point = 0x7ffb8ee70000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 7389 start_va = 0x7ffb8efc0000 end_va = 0x7ffb8f0e5fff entry_point = 0x7ffb8efc0000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 7390 start_va = 0x7ffb8f100000 end_va = 0x7ffb8f284fff entry_point = 0x7ffb8f100000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 7391 start_va = 0x7ffb8f290000 end_va = 0x7ffb8f2e0fff entry_point = 0x7ffb8f290000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 7392 start_va = 0x7ffb8f2f0000 end_va = 0x7ffb8f395fff entry_point = 0x7ffb8f2f0000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 7393 start_va = 0x7ffb8f3a0000 end_va = 0x7ffb8f4fbfff entry_point = 0x7ffb8f3a0000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 7394 start_va = 0x7ffb8f500000 end_va = 0x7ffb90a24fff entry_point = 0x7ffb8f500000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 7395 start_va = 0x7ffb90a40000 end_va = 0x7ffb90aecfff entry_point = 0x7ffb90a40000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 7396 start_va = 0x7ffb90af0000 end_va = 0x7ffb90b4afff entry_point = 0x7ffb90af0000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 7397 start_va = 0x7ffb90bc0000 end_va = 0x7ffb90c7dfff entry_point = 0x7ffb90bc0000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 7398 start_va = 0x7ffb90e60000 end_va = 0x7ffb90f04fff entry_point = 0x7ffb90e60000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 7399 start_va = 0x7ffb90f70000 end_va = 0x7ffb90fa5fff entry_point = 0x7ffb90f70000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 7400 start_va = 0x7ffb90fb0000 end_va = 0x7ffb910f0fff entry_point = 0x7ffb90fb0000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 7401 start_va = 0x7ffb91480000 end_va = 0x7ffb91641fff entry_point = 0x7ffb91480000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 7420 start_va = 0x84f2360000 end_va = 0x84f23dffff entry_point = 0x0 region_type = private name = "private_0x00000084f2360000" filename = "" Region: id = 7421 start_va = 0x7ff7cbcb4000 end_va = 0x7ff7cbcb5fff entry_point = 0x0 region_type = private name = "private_0x00007ff7cbcb4000" filename = "" Region: id = 7422 start_va = 0x7ffb8d140000 end_va = 0x7ffb8d15bfff entry_point = 0x7ffb8d140000 region_type = mapped_file name = "mpr.dll" filename = "\\Windows\\System32\\mpr.dll" (normalized: "c:\\windows\\system32\\mpr.dll") Region: id = 7423 start_va = 0x7ffb8b580000 end_va = 0x7ffb8b5b7fff entry_point = 0x7ffb8b580000 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 7424 start_va = 0x7ffb90a30000 end_va = 0x7ffb90a37fff entry_point = 0x7ffb90a30000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 7425 start_va = 0x7ffb8b560000 end_va = 0x7ffb8b56afff entry_point = 0x7ffb8b560000 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll") Thread: id = 160 os_tid = 0xbc8 Thread: id = 161 os_tid = 0xb4c Thread: id = 162 os_tid = 0xac4 Thread: id = 163 os_tid = 0x9d4 Thread: id = 164 os_tid = 0x9bc Thread: id = 165 os_tid = 0x9b8 Thread: id = 166 os_tid = 0x9b4 Thread: id = 167 os_tid = 0x9b0 Thread: id = 168 os_tid = 0x420 Thread: id = 169 os_tid = 0x410 Thread: id = 170 os_tid = 0x7f0 Thread: id = 171 os_tid = 0x2ec [0170.490] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x7ffb90a40000 [0170.490] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="LoadLibraryA") returned 0x7ffb90a62080 [0170.490] LoadLibraryA (lpLibFileName="mpr.dll") returned 0x7ffb8d140000 [0170.492] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x7ffb8f2f0000 [0170.493] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x7ffb90fb0000 [0170.493] LoadLibraryA (lpLibFileName="Shell32.dll") returned 0x7ffb8f500000 [0170.493] LoadLibraryA (lpLibFileName="Iphlpapi.dll") returned 0x7ffb8b580000 [0170.498] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GetLastError") returned 0x7ffb90a56060 [0170.498] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="VirtualFree") returned 0x7ffb90a5bc10 [0170.498] GetProcAddress (hModule=0x7ffb8f2f0000, lpProcName="CryptExportKey") returned 0x7ffb8f307b50 [0170.498] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="DeleteFileW") returned 0x7ffb90a657a0 [0170.499] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GetDriveTypeW") returned 0x7ffb90a658f0 [0170.499] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GetCommandLineW") returned 0x7ffb90a60150 [0170.499] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GetStartupInfoW") returned 0x7ffb90a5ed80 [0170.499] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="FindNextFileW") returned 0x7ffb90a65880 [0170.499] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="VirtualAlloc") returned 0x7ffb90a5baf0 [0170.499] GetProcAddress (hModule=0x7ffb8f2f0000, lpProcName="GetUserNameA") returned 0x7ffb8f31ec40 [0170.500] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="ExitProcess") returned 0x7ffb90a5ef50 [0170.500] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="Wow64RevertWow64FsRedirection") returned 0x7ffb90a836a0 [0170.500] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="CreateProcessA") returned 0x7ffb90a5d5b0 [0170.500] GetProcAddress (hModule=0x7ffb8b580000, lpProcName="GetIpNetTable") returned 0x7ffb8b59f0b0 [0170.500] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GetVersionExW") returned 0x7ffb90a5aa30 [0170.500] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x7ffb90a83690 [0170.501] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GetSystemDefaultLangID") returned 0x7ffb90a62ba0 [0170.501] GetProcAddress (hModule=0x7ffb8f2f0000, lpProcName="GetUserNameW") returned 0x7ffb8f30da40 [0170.501] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="ReadFile") returned 0x7ffb90a65a90 [0170.501] GetProcAddress (hModule=0x7ffb8f2f0000, lpProcName="RegQueryValueExA") returned 0x7ffb8f307dd0 [0170.501] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="CloseHandle") returned 0x7ffb90a65510 [0170.501] GetProcAddress (hModule=0x7ffb8f2f0000, lpProcName="RegSetValueExW") returned 0x7ffb8f307850 [0170.502] GetProcAddress (hModule=0x7ffb8f2f0000, lpProcName="RegCloseKey") returned 0x7ffb8f3072e0 [0170.502] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="CopyFileA") returned 0x7ffb90a7e430 [0170.502] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="SetFileAttributesW") returned 0x7ffb90a65b00 [0170.502] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="WinExec") returned 0x7ffb90a81e60 [0170.502] GetProcAddress (hModule=0x7ffb8f2f0000, lpProcName="CryptDeriveKey") returned 0x7ffb8f3207a0 [0170.502] GetProcAddress (hModule=0x7ffb8f2f0000, lpProcName="CryptGenKey") returned 0x7ffb8f30cab0 [0170.503] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="Sleep") returned 0x7ffb90a58f00 [0170.503] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GetCurrentProcess") returned 0x7ffb90a56580 [0170.503] GetProcAddress (hModule=0x7ffb8f500000, lpProcName="ShellExecuteW") returned 0x7ffb8f64abc0 [0170.503] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GetFileSize") returned 0x7ffb90a65950 [0170.503] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GlobalAlloc") returned 0x7ffb90a5b810 [0170.503] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="FindClose") returned 0x7ffb90a657c0 [0170.504] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="WaitForMultipleObjects") returned 0x7ffb90a656e0 [0170.504] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GetModuleFileNameA") returned 0x7ffb90a60c70 [0170.504] GetProcAddress (hModule=0x7ffb8f500000, lpProcName="ShellExecuteA") returned 0x7ffb8f707de0 [0170.504] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GetModuleHandleA") returned 0x7ffb90a5e6d0 [0170.504] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GetModuleFileNameW") returned 0x7ffb90a5eca0 [0170.504] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="CreateFileA") returned 0x7ffb90a65760 [0170.505] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GetFileSizeEx") returned 0x7ffb90a65960 [0170.505] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="WriteFile") returned 0x7ffb90a65b80 [0170.505] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GetLogicalDrives") returned 0x7ffb90a566d0 [0170.505] GetProcAddress (hModule=0x7ffb8d140000, lpProcName="WNetEnumResourceW") returned 0x7ffb8d1427d0 [0170.505] GetProcAddress (hModule=0x7ffb8f2f0000, lpProcName="RegOpenKeyExW") returned 0x7ffb8f306cb0 [0170.505] GetProcAddress (hModule=0x7ffb8d140000, lpProcName="WNetCloseEnum") returned 0x7ffb8d142e20 [0170.506] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GetWindowsDirectoryW") returned 0x7ffb90a62940 [0170.506] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="SetFileAttributesA") returned 0x7ffb90a65af0 [0170.506] GetProcAddress (hModule=0x7ffb8f2f0000, lpProcName="RegOpenKeyExA") returned 0x7ffb8f307d70 [0170.506] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="SetFilePointer") returned 0x7ffb90a65b20 [0170.506] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GetTickCount") returned 0x7ffb90a560a0 [0170.506] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GetFileAttributesW") returned 0x7ffb90a65930 [0170.507] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="FindFirstFileW") returned 0x7ffb90a65840 [0170.507] GetProcAddress (hModule=0x7ffb8f2f0000, lpProcName="CryptAcquireContextW") returned 0x7ffb8f3089e0 [0170.507] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="MoveFileExW") returned 0x7ffb90a63010 [0170.507] GetProcAddress (hModule=0x7ffb8d140000, lpProcName="WNetOpenEnumW") returned 0x7ffb8d142f20 [0170.507] GetProcAddress (hModule=0x7ffb90fb0000, lpProcName="CoInitialize") returned 0x7ffb90fc3870 [0170.507] GetProcAddress (hModule=0x7ffb8f2f0000, lpProcName="CryptDecrypt") returned 0x7ffb8f309140 [0170.508] GetProcAddress (hModule=0x7ffb8f2f0000, lpProcName="CryptImportKey") returned 0x7ffb8f307b40 [0170.508] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="SetFilePointerEx") returned 0x7ffb90a65b30 [0170.508] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="CopyFileW") returned 0x7ffb90a65d70 [0170.508] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="FreeLibrary") returned 0x7ffb90a5eb90 [0170.508] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="CreateProcessW") returned 0x7ffb90a5dee0 [0170.508] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="CreateDirectoryW") returned 0x7ffb90a65740 [0170.509] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="CreateThread") returned 0x7ffb90a5bc20 [0170.509] GetProcAddress (hModule=0x7ffb8f2f0000, lpProcName="CryptDestroyKey") returned 0x7ffb8f3086b0 [0170.509] GetProcAddress (hModule=0x7ffb90fb0000, lpProcName="CoCreateInstance") returned 0x7ffb8ec77000 [0170.509] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="CreateFileW") returned 0x7ffb90a65770 [0170.509] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GetFileAttributesA") returned 0x7ffb90a65900 [0170.509] GetProcAddress (hModule=0x7ffb8f2f0000, lpProcName="CryptEncrypt") returned 0x7ffb8f30d7e0 [0170.510] GetProcAddress (hModule=0x7ffb8f2f0000, lpProcName="RegDeleteValueW") returned 0x7ffb8f3090b0 [0170.510] GetVersionExW (in: lpVersionInformation=0x84f23df7e0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x84f23df7e0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x2800, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0170.510] GetWindowsDirectoryW (in: lpBuffer=0x84f23df890, uSize=0x32 | out: lpBuffer="C:\\Windows") returned 0xa [0170.510] SetLastError (dwErrCode=0x0) [0170.510] CreateFileW (lpFileName="C:\\users\\Public\\sys" (normalized: "c:\\users\\public\\sys"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0xffffffffffffffff [0170.511] GetLastError () returned 0x20 [0170.511] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0170.511] Sleep (dwMilliseconds=0x1388) [0175.511] Sleep (dwMilliseconds=0x2328) [0184.519] GetWindowsDirectoryW (in: lpBuffer=0x84f23df890, uSize=0x32 | out: lpBuffer="C:\\Windows") returned 0xa [0184.519] SetLastError (dwErrCode=0x0) [0184.519] CreateFileW (lpFileName="C:\\users\\Public\\sys" (normalized: "c:\\users\\public\\sys"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.519] GetLastError () returned 0x20 [0184.519] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.519] Sleep (dwMilliseconds=0x2328) [0193.553] GetWindowsDirectoryW (in: lpBuffer=0x84f23df890, uSize=0x32 | out: lpBuffer="C:\\Windows") returned 0xa [0193.553] SetLastError (dwErrCode=0x0) [0193.553] CreateFileW (lpFileName="C:\\users\\Public\\sys" (normalized: "c:\\users\\public\\sys"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0xffffffffffffffff [0193.554] GetLastError () returned 0x20 [0193.554] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0193.554] Sleep (dwMilliseconds=0x2328) [0202.578] GetWindowsDirectoryW (in: lpBuffer=0x84f23df890, uSize=0x32 | out: lpBuffer="C:\\Windows") returned 0xa [0202.578] SetLastError (dwErrCode=0x0) [0202.578] CreateFileW (lpFileName="C:\\users\\Public\\sys" (normalized: "c:\\users\\public\\sys"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0xffffffffffffffff [0202.579] GetLastError () returned 0x20 [0202.579] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0202.579] Sleep (dwMilliseconds=0x2328) [0211.607] GetWindowsDirectoryW (in: lpBuffer=0x84f23df890, uSize=0x32 | out: lpBuffer="C:\\Windows") returned 0xa [0211.607] SetLastError (dwErrCode=0x0) [0211.607] CreateFileW (lpFileName="C:\\users\\Public\\sys" (normalized: "c:\\users\\public\\sys"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0xffffffffffffffff [0211.608] GetLastError () returned 0x20 [0211.608] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0211.608] Sleep (dwMilliseconds=0x2328) [0220.713] GetWindowsDirectoryW (in: lpBuffer=0x84f23df890, uSize=0x32 | out: lpBuffer="C:\\Windows") returned 0xa [0220.713] SetLastError (dwErrCode=0x0) [0220.713] CreateFileW (lpFileName="C:\\users\\Public\\sys" (normalized: "c:\\users\\public\\sys"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0xffffffffffffffff [0220.714] GetLastError () returned 0x20 [0220.714] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0220.714] Sleep (dwMilliseconds=0x2328) [0229.736] GetWindowsDirectoryW (in: lpBuffer=0x84f23df890, uSize=0x32 | out: lpBuffer="C:\\Windows") returned 0xa [0229.736] SetLastError (dwErrCode=0x0) [0229.736] CreateFileW (lpFileName="C:\\users\\Public\\sys" (normalized: "c:\\users\\public\\sys"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0xffffffffffffffff [0229.736] GetLastError () returned 0x20 [0229.736] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0229.736] Sleep (dwMilliseconds=0x2328) [0238.751] GetWindowsDirectoryW (in: lpBuffer=0x84f23df890, uSize=0x32 | out: lpBuffer="C:\\Windows") returned 0xa [0238.751] SetLastError (dwErrCode=0x0) [0238.751] CreateFileW (lpFileName="C:\\users\\Public\\sys" (normalized: "c:\\users\\public\\sys"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0xffffffffffffffff [0238.751] GetLastError () returned 0x20 [0238.751] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0238.751] Sleep (dwMilliseconds=0x2328) [0247.762] GetWindowsDirectoryW (in: lpBuffer=0x84f23df890, uSize=0x32 | out: lpBuffer="C:\\Windows") returned 0xa [0247.762] SetLastError (dwErrCode=0x0) [0247.762] CreateFileW (lpFileName="C:\\users\\Public\\sys" (normalized: "c:\\users\\public\\sys"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0xffffffffffffffff [0247.762] GetLastError () returned 0x20 [0247.762] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0247.762] Sleep (dwMilliseconds=0x2328) [0256.858] GetWindowsDirectoryW (in: lpBuffer=0x84f23df890, uSize=0x32 | out: lpBuffer="C:\\Windows") returned 0xa [0256.858] SetLastError (dwErrCode=0x0) [0256.859] CreateFileW (lpFileName="C:\\users\\Public\\sys" (normalized: "c:\\users\\public\\sys"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0xffffffffffffffff [0256.859] GetLastError () returned 0x20 [0256.859] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0256.859] Sleep (dwMilliseconds=0x2328) [0265.861] GetWindowsDirectoryW (in: lpBuffer=0x84f23df890, uSize=0x32 | out: lpBuffer="C:\\Windows") returned 0xa [0265.861] SetLastError (dwErrCode=0x0) [0265.861] CreateFileW (lpFileName="C:\\users\\Public\\sys" (normalized: "c:\\users\\public\\sys"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0xffffffffffffffff [0265.861] GetLastError () returned 0x20 [0265.861] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0265.861] Sleep (dwMilliseconds=0x2328) [0274.877] GetWindowsDirectoryW (in: lpBuffer=0x84f23df890, uSize=0x32 | out: lpBuffer="C:\\Windows") returned 0xa [0274.877] SetLastError (dwErrCode=0x0) [0274.877] CreateFileW (lpFileName="C:\\users\\Public\\sys" (normalized: "c:\\users\\public\\sys"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0xffffffffffffffff [0274.878] GetLastError () returned 0x20 [0274.878] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0274.878] Sleep (dwMilliseconds=0x2328) [0283.883] GetWindowsDirectoryW (in: lpBuffer=0x84f23df890, uSize=0x32 | out: lpBuffer="C:\\Windows") returned 0xa [0283.883] SetLastError (dwErrCode=0x0) [0283.883] CreateFileW (lpFileName="C:\\users\\Public\\sys" (normalized: "c:\\users\\public\\sys"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0xffffffffffffffff [0283.884] GetLastError () returned 0x20 [0283.884] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0283.884] Sleep (dwMilliseconds=0x2328) [0293.242] GetWindowsDirectoryW (in: lpBuffer=0x84f23df890, uSize=0x32 | out: lpBuffer="C:\\Windows") returned 0xa [0293.242] SetLastError (dwErrCode=0x0) [0293.242] CreateFileW (lpFileName="C:\\users\\Public\\sys" (normalized: "c:\\users\\public\\sys"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0xffffffffffffffff [0293.243] GetLastError () returned 0x20 [0293.243] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0293.243] Sleep (dwMilliseconds=0x2328) Thread: id = 270 os_tid = 0xb2c Process: id = "17" image_name = "reg.exe" filename = "c:\\windows\\system32\\reg.exe" page_root = "0x8a94000" os_pid = "0x560" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "13" os_parent_pid = "0x478" cmd_line = "REG ADD \"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run\" /v \"svchos\" /t REG_SZ /d \"C:\\Users\\CIiHmnxMn6Ps\\Desktop\\eqBNr.exe\" /f" cur_dir = "C:\\Windows\\system32\\" os_username = "LHNIWSJ\\CIiHmnxMn6Ps" os_groups = "LHNIWSJ\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0001b4e9" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 7436 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 7437 start_va = 0x549e5e0000 end_va = 0x549e5fffff entry_point = 0x0 region_type = private name = "private_0x000000549e5e0000" filename = "" Region: id = 7438 start_va = 0x549e600000 end_va = 0x549e613fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000549e600000" filename = "" Region: id = 7439 start_va = 0x549e620000 end_va = 0x549e69ffff entry_point = 0x0 region_type = private name = "private_0x000000549e620000" filename = "" Region: id = 7440 start_va = 0x549e6a0000 end_va = 0x549e6a3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000549e6a0000" filename = "" Region: id = 7441 start_va = 0x549e6b0000 end_va = 0x549e6b0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000549e6b0000" filename = "" Region: id = 7442 start_va = 0x549e6c0000 end_va = 0x549e6c1fff entry_point = 0x0 region_type = private name = "private_0x000000549e6c0000" filename = "" Region: id = 7443 start_va = 0x7df5ff0f0000 end_va = 0x7ff5ff0effff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ff0f0000" filename = "" Region: id = 7444 start_va = 0x7ff6d23d0000 end_va = 0x7ff6d23f2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff6d23d0000" filename = "" Region: id = 7445 start_va = 0x7ff6d23fa000 end_va = 0x7ff6d23fafff entry_point = 0x0 region_type = private name = "private_0x00007ff6d23fa000" filename = "" Region: id = 7446 start_va = 0x7ff6d23fe000 end_va = 0x7ff6d23fffff entry_point = 0x0 region_type = private name = "private_0x00007ff6d23fe000" filename = "" Region: id = 7447 start_va = 0x7ff6d3310000 end_va = 0x7ff6d3365fff entry_point = 0x7ff6d3310000 region_type = mapped_file name = "reg.exe" filename = "\\Windows\\System32\\reg.exe" (normalized: "c:\\windows\\system32\\reg.exe") Region: id = 7448 start_va = 0x7ffb91480000 end_va = 0x7ffb91641fff entry_point = 0x7ffb91480000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 7449 start_va = 0x549e780000 end_va = 0x549e87ffff entry_point = 0x0 region_type = private name = "private_0x000000549e780000" filename = "" Region: id = 7450 start_va = 0x7ffb8e920000 end_va = 0x7ffb8eafcfff entry_point = 0x7ffb8e920000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 7451 start_va = 0x7ffb90a40000 end_va = 0x7ffb90aecfff entry_point = 0x7ffb90a40000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 7452 start_va = 0x549e5e0000 end_va = 0x549e5effff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000549e5e0000" filename = "" Region: id = 7453 start_va = 0x549e5f0000 end_va = 0x549e5f6fff entry_point = 0x0 region_type = private name = "private_0x000000549e5f0000" filename = "" Region: id = 7454 start_va = 0x549e6d0000 end_va = 0x549e74ffff entry_point = 0x0 region_type = private name = "private_0x000000549e6d0000" filename = "" Region: id = 7455 start_va = 0x549e880000 end_va = 0x549e93dfff entry_point = 0x549e880000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 7456 start_va = 0x549ea10000 end_va = 0x549ea1ffff entry_point = 0x0 region_type = private name = "private_0x000000549ea10000" filename = "" Region: id = 7457 start_va = 0x7ff6d22d0000 end_va = 0x7ff6d23cffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff6d22d0000" filename = "" Region: id = 7458 start_va = 0x7ff6d23fc000 end_va = 0x7ff6d23fdfff entry_point = 0x0 region_type = private name = "private_0x00007ff6d23fc000" filename = "" Region: id = 7459 start_va = 0x7ffb8eb50000 end_va = 0x7ffb8ebecfff entry_point = 0x7ffb8eb50000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 7460 start_va = 0x7ffb8efc0000 end_va = 0x7ffb8f0e5fff entry_point = 0x7ffb8efc0000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 7461 start_va = 0x7ffb8f2f0000 end_va = 0x7ffb8f395fff entry_point = 0x7ffb8f2f0000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 7462 start_va = 0x7ffb90a30000 end_va = 0x7ffb90a37fff entry_point = 0x7ffb90a30000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 7463 start_va = 0x7ffb90af0000 end_va = 0x7ffb90b4afff entry_point = 0x7ffb90af0000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 7464 start_va = 0x7ffb90b50000 end_va = 0x7ffb90bb8fff entry_point = 0x7ffb90b50000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 7465 start_va = 0x549ea20000 end_va = 0x549ed56fff entry_point = 0x549ea20000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 7580 start_va = 0x549e750000 end_va = 0x549e756fff entry_point = 0x0 region_type = private name = "private_0x000000549e750000" filename = "" Region: id = 7581 start_va = 0x549e760000 end_va = 0x549e769fff entry_point = 0x549e760000 region_type = mapped_file name = "reg.exe.mui" filename = "\\Windows\\System32\\en-US\\reg.exe.mui" (normalized: "c:\\windows\\system32\\en-us\\reg.exe.mui") Region: id = 7582 start_va = 0x549ed60000 end_va = 0x549ee3efff entry_point = 0x549ed60000 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui") Thread: id = 174 os_tid = 0x588 [0170.600] GetModuleHandleW (lpModuleName=0x0) returned 0x7ff6d3310000 [0170.600] __set_app_type (_Type=0x1) [0170.600] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x7ff6d331e510) returned 0x0 [0170.600] __wgetmainargs (in: _Argc=0x7ff6d3322048, _Argv=0x7ff6d3322050, _Env=0x7ff6d3322058, _DoWildCard=0, _StartInfo=0x7ff6d3322064 | out: _Argc=0x7ff6d3322048, _Argv=0x7ff6d3322050, _Env=0x7ff6d3322058) returned 0 [0170.600] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="ADD", cchCount1=-1, lpString2="QUERY", cchCount2=-1) returned 1 [0170.617] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="ADD", cchCount1=-1, lpString2="ADD", cchCount2=-1) returned 2 [0170.617] RegOpenKeyW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", phkResult=0x549e69fa98 | out: phkResult=0x549e69fa98*=0x0) returned 0x2 [0170.617] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="ADD", cchCount1=-1, lpString2="ADD", cchCount2=-1) returned 2 [0170.617] lstrlenW (lpString="-?|/?|-h|/h") returned 11 [0170.617] lstrlenW (lpString="") returned 0 [0170.618] SetThreadUILanguage (LangId=0x0) returned 0x409 [0170.761] _memicmp (_Buf1=0x549e782260, _Buf2=0x7ff6d33200d8, _Size=0x7) returned 0 [0170.761] lstrlenW (lpString="HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run") returned 63 [0170.761] _memicmp (_Buf1=0x549e782280, _Buf2=0x7ff6d33200d8, _Size=0x7) returned 0 [0170.761] _vsnwprintf (in: _Buffer=0x549e788e50, _BufferCount=0xe, _Format="|%s|", _ArgList=0x549e69f8d8 | out: _Buffer="|-?|/?|-h|/h|") returned 13 [0170.761] _vsnwprintf (in: _Buffer=0x549e784030, _BufferCount=0x42, _Format="|%s|", _ArgList=0x549e69f8d8 | out: _Buffer="|HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run|") returned 65 [0170.761] lstrlenW (lpString="|-?|/?|-h|/h|") returned 13 [0170.762] lstrlenW (lpString="|HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run|") returned 65 [0170.762] RtlRestoreLastWin32Error () returned 0x7ff6d23fe000 [0170.762] lstrlenW (lpString="HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run") returned 63 [0170.762] lstrlenW (lpString="HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run") returned 63 [0170.762] StrChrW (lpStart=" \x09", wMatch=0x48) returned 0x0 [0170.762] StrChrW (lpStart=" \x09", wMatch=0x48) returned 0x0 [0170.762] StrChrW (lpStart=" \x09", wMatch=0x4b) returned 0x0 [0170.762] StrChrW (lpStart=" \x09", wMatch=0x45) returned 0x0 [0170.762] StrChrW (lpStart=" \x09", wMatch=0x59) returned 0x0 [0170.762] StrChrW (lpStart=" \x09", wMatch=0x5f) returned 0x0 [0170.762] StrChrW (lpStart=" \x09", wMatch=0x43) returned 0x0 [0170.762] StrChrW (lpStart=" \x09", wMatch=0x55) returned 0x0 [0170.762] StrChrW (lpStart=" \x09", wMatch=0x52) returned 0x0 [0170.762] StrChrW (lpStart=" \x09", wMatch=0x52) returned 0x0 [0170.762] StrChrW (lpStart=" \x09", wMatch=0x45) returned 0x0 [0170.762] StrChrW (lpStart=" \x09", wMatch=0x4e) returned 0x0 [0170.762] StrChrW (lpStart=" \x09", wMatch=0x54) returned 0x0 [0170.762] StrChrW (lpStart=" \x09", wMatch=0x5f) returned 0x0 [0170.762] StrChrW (lpStart=" \x09", wMatch=0x55) returned 0x0 [0170.762] StrChrW (lpStart=" \x09", wMatch=0x53) returned 0x0 [0170.762] StrChrW (lpStart=" \x09", wMatch=0x45) returned 0x0 [0170.762] StrChrW (lpStart=" \x09", wMatch=0x52) returned 0x0 [0170.762] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0 [0170.762] StrChrW (lpStart=" \x09", wMatch=0x53) returned 0x0 [0170.762] StrChrW (lpStart=" \x09", wMatch=0x4f) returned 0x0 [0170.762] StrChrW (lpStart=" \x09", wMatch=0x46) returned 0x0 [0170.762] StrChrW (lpStart=" \x09", wMatch=0x54) returned 0x0 [0170.762] StrChrW (lpStart=" \x09", wMatch=0x57) returned 0x0 [0170.762] StrChrW (lpStart=" \x09", wMatch=0x41) returned 0x0 [0170.762] StrChrW (lpStart=" \x09", wMatch=0x52) returned 0x0 [0170.762] StrChrW (lpStart=" \x09", wMatch=0x45) returned 0x0 [0170.762] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0 [0170.762] StrChrW (lpStart=" \x09", wMatch=0x4d) returned 0x0 [0170.763] StrChrW (lpStart=" \x09", wMatch=0x69) returned 0x0 [0170.763] StrChrW (lpStart=" \x09", wMatch=0x63) returned 0x0 [0170.763] StrChrW (lpStart=" \x09", wMatch=0x72) returned 0x0 [0170.763] StrChrW (lpStart=" \x09", wMatch=0x6f) returned 0x0 [0170.763] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0 [0170.763] StrChrW (lpStart=" \x09", wMatch=0x6f) returned 0x0 [0170.763] StrChrW (lpStart=" \x09", wMatch=0x66) returned 0x0 [0170.763] StrChrW (lpStart=" \x09", wMatch=0x74) returned 0x0 [0170.763] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0 [0170.763] StrChrW (lpStart=" \x09", wMatch=0x57) returned 0x0 [0170.763] StrChrW (lpStart=" \x09", wMatch=0x69) returned 0x0 [0170.763] StrChrW (lpStart=" \x09", wMatch=0x6e) returned 0x0 [0170.763] StrChrW (lpStart=" \x09", wMatch=0x64) returned 0x0 [0170.763] StrChrW (lpStart=" \x09", wMatch=0x6f) returned 0x0 [0170.763] StrChrW (lpStart=" \x09", wMatch=0x77) returned 0x0 [0170.763] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0 [0170.763] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0 [0170.763] StrChrW (lpStart=" \x09", wMatch=0x43) returned 0x0 [0170.763] StrChrW (lpStart=" \x09", wMatch=0x75) returned 0x0 [0170.763] StrChrW (lpStart=" \x09", wMatch=0x72) returned 0x0 [0170.763] StrChrW (lpStart=" \x09", wMatch=0x72) returned 0x0 [0170.763] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0 [0170.763] StrChrW (lpStart=" \x09", wMatch=0x6e) returned 0x0 [0170.763] StrChrW (lpStart=" \x09", wMatch=0x74) returned 0x0 [0170.763] StrChrW (lpStart=" \x09", wMatch=0x56) returned 0x0 [0170.763] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0 [0170.763] StrChrW (lpStart=" \x09", wMatch=0x72) returned 0x0 [0170.763] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0 [0170.763] StrChrW (lpStart=" \x09", wMatch=0x69) returned 0x0 [0170.763] StrChrW (lpStart=" \x09", wMatch=0x6f) returned 0x0 [0170.763] StrChrW (lpStart=" \x09", wMatch=0x6e) returned 0x0 [0170.763] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0 [0170.763] StrChrW (lpStart=" \x09", wMatch=0x52) returned 0x0 [0170.763] StrChrW (lpStart=" \x09", wMatch=0x75) returned 0x0 [0170.763] StrChrW (lpStart=" \x09", wMatch=0x6e) returned 0x0 [0170.763] lstrlenW (lpString="HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run") returned 63 [0170.763] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run", cchCount1=2, lpString2="\\\\", cchCount2=2) returned 3 [0170.764] lstrlenW (lpString="HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run") returned 63 [0170.764] lstrlenW (lpString="HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run") returned 63 [0170.764] StrChrIW (lpStart="HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run", wMatch=0x5c) returned="\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" [0170.764] lstrlenW (lpString="HKEY_CURRENT_CONFIG") returned 19 [0170.764] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="HKEY_CURRENT_USER", cchCount1=-1, lpString2="HKCU", cchCount2=-1) returned 3 [0170.764] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="HKEY_CURRENT_USER", cchCount1=-1, lpString2="HKEY_CURRENT_USER", cchCount2=-1) returned 2 [0170.764] lstrlenW (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run") returned 45 [0170.764] lstrlenW (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run") returned 45 [0170.764] lstrlenW (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run") returned 45 [0170.764] StrChrIW (lpStart="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run", wMatch=0x5c) returned="\\Microsoft\\Windows\\CurrentVersion\\Run" [0170.764] lstrlenW (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run") returned 45 [0170.764] StrChrIW (lpStart="Microsoft\\Windows\\CurrentVersion\\Run", wMatch=0x5c) returned="\\Windows\\CurrentVersion\\Run" [0170.765] lstrlenW (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run") returned 45 [0170.765] StrChrIW (lpStart="Windows\\CurrentVersion\\Run", wMatch=0x5c) returned="\\CurrentVersion\\Run" [0170.765] lstrlenW (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run") returned 45 [0170.765] StrChrIW (lpStart="CurrentVersion\\Run", wMatch=0x5c) returned="\\Run" [0170.765] lstrlenW (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run") returned 45 [0170.765] StrChrIW (lpStart="Run", wMatch=0x5c) returned 0x0 [0170.765] RtlRestoreLastWin32Error () returned 0x7ff6d23fe000 [0170.765] lstrlenW (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run") returned 45 [0170.765] RtlRestoreLastWin32Error () returned 0x7ff6d23fe000 [0170.765] lstrlenW (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run") returned 45 [0170.765] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/v", cchCount1=-1, lpString2="/v", cchCount2=-1) returned 2 [0170.765] lstrlenW (lpString="svchos") returned 6 [0170.765] lstrlenW (lpString="svchos") returned 6 [0170.765] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0 [0170.765] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0 [0170.765] StrChrW (lpStart=" \x09", wMatch=0x76) returned 0x0 [0170.765] StrChrW (lpStart=" \x09", wMatch=0x63) returned 0x0 [0170.765] StrChrW (lpStart=" \x09", wMatch=0x68) returned 0x0 [0170.765] StrChrW (lpStart=" \x09", wMatch=0x6f) returned 0x0 [0170.765] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0 [0170.766] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/t", cchCount1=-1, lpString2="/v", cchCount2=-1) returned 1 [0170.766] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/t", cchCount1=-1, lpString2="-v", cchCount2=-1) returned 1 [0170.766] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/t", cchCount1=-1, lpString2="/ve", cchCount2=-1) returned 1 [0170.766] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/t", cchCount1=-1, lpString2="-ve", cchCount2=-1) returned 1 [0170.766] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/t", cchCount1=-1, lpString2="/t", cchCount2=-1) returned 2 [0170.766] StrDupW (lpSrch="REG_SZ") returned="REG_SZ" [0170.766] lstrlenW (lpString="REG_SZ") returned 6 [0170.766] StrChrW (lpStart=" \x09", wMatch=0x52) returned 0x0 [0170.766] StrChrW (lpStart=" \x09", wMatch=0x52) returned 0x0 [0170.766] StrChrW (lpStart=" \x09", wMatch=0x45) returned 0x0 [0170.766] StrChrW (lpStart=" \x09", wMatch=0x47) returned 0x0 [0170.766] StrChrW (lpStart=" \x09", wMatch=0x5f) returned 0x0 [0170.766] StrChrW (lpStart=" \x09", wMatch=0x53) returned 0x0 [0170.766] StrChrW (lpStart=" \x09", wMatch=0x5a) returned 0x0 [0170.766] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="REG_SZ", cchCount1=-1, lpString2="REG_SZ", cchCount2=-1) returned 2 [0170.766] LocalFree (hMem=0x549e7840c0) returned 0x0 [0170.766] RtlRestoreLastWin32Error () returned 0x7ff6d23fe000 [0170.766] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/d", cchCount1=-1, lpString2="/v", cchCount2=-1) returned 1 [0170.766] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/d", cchCount1=-1, lpString2="-v", cchCount2=-1) returned 1 [0170.766] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/d", cchCount1=-1, lpString2="/ve", cchCount2=-1) returned 1 [0170.766] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/d", cchCount1=-1, lpString2="-ve", cchCount2=-1) returned 1 [0170.766] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/d", cchCount1=-1, lpString2="/t", cchCount2=-1) returned 1 [0170.766] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/d", cchCount1=-1, lpString2="-t", cchCount2=-1) returned 1 [0170.766] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/d", cchCount1=-1, lpString2="/s", cchCount2=-1) returned 1 [0170.766] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/d", cchCount1=-1, lpString2="-s", cchCount2=-1) returned 1 [0170.766] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/d", cchCount1=-1, lpString2="/d", cchCount2=-1) returned 2 [0170.766] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\eqBNr.exe") returned 39 [0170.766] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="/v", cchCount2=-1) returned 1 [0170.766] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="-v", cchCount2=-1) returned 1 [0170.766] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="/ve", cchCount2=-1) returned 1 [0170.767] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="-ve", cchCount2=-1) returned 1 [0170.767] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="/t", cchCount2=-1) returned 1 [0170.767] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="-t", cchCount2=-1) returned 1 [0170.767] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="/s", cchCount2=-1) returned 1 [0170.767] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="-s", cchCount2=-1) returned 1 [0170.767] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="/d", cchCount2=-1) returned 3 [0170.767] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="-d", cchCount2=-1) returned 1 [0170.767] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="/f", cchCount2=-1) returned 2 [0170.767] RtlRestoreLastWin32Error () returned 0x7ff6d23fe000 [0170.767] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2001f, lpSecurityAttributes=0x0, phkResult=0x549e69f9b0, lpdwDisposition=0x549e69f9c8 | out: phkResult=0x549e69f9b0*=0x7c, lpdwDisposition=0x549e69f9c8*=0x2) returned 0x0 [0170.767] RegQueryValueExW (in: hKey=0x7c, lpValueName="svchos", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0170.767] _memicmp (_Buf1=0x549e7840c0, _Buf2=0x7ff6d33200d8, _Size=0x7) returned 0 [0170.767] LoadStringW (in: hInstance=0x0, uID=0xca, lpBuffer=0x549e7899c0, cchBufferMax=256 | out: lpBuffer="Value %s exists, overwrite(Yes/No)? ") returned 0x24 [0170.780] lstrlenW (lpString="Value %s exists, overwrite(Yes/No)? ") returned 36 [0170.780] _memicmp (_Buf1=0x549e7840c0, _Buf2=0x7ff6d33200d8, _Size=0x7) returned 0 [0170.780] LoadStringW (in: hInstance=0x0, uID=0xce, lpBuffer=0x549e7899c0, cchBufferMax=256 | out: lpBuffer="YNA") returned 0x3 [0170.780] lstrlenW (lpString="YNA") returned 3 [0170.780] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\eqBNr.exe") returned 39 [0170.780] RegSetValueExW (in: hKey=0x7c, lpValueName="svchos", Reserved=0x0, dwType=0x1, lpData="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\eqBNr.exe", cbData=0x50 | out: lpData="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\eqBNr.exe") returned 0x0 [0170.780] RegCloseKey (hKey=0x7c) returned 0x0 [0170.781] RtlRestoreLastWin32Error () returned 0x7ff6d23fe000 [0170.781] GetLastError () returned 0x0 [0170.781] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x0, dwLanguageId=0x0, lpBuffer=0x549e69f930, nSize=0x0, Arguments=0x0 | out: lpBuffer="\x41e0\x9e78\x54") returned 0x27 [0170.782] GetLastError () returned 0x0 [0170.782] lstrlenW (lpString="The operation completed successfully.\r\n") returned 39 [0170.782] RtlRestoreLastWin32Error () returned 0x7ff6d23fe000 [0170.782] LocalFree (hMem=0x549e7841e0) returned 0x0 [0170.782] __iob_func () returned 0x7ffb8ebde210 [0170.782] _fileno (_File=0x7ffb8ebde240) returned 1 [0170.782] _errno () returned 0x549ea10840 [0170.782] _get_osfhandle (_FileHandle=1) returned 0x24 [0170.782] _errno () returned 0x549ea10840 [0170.782] GetFileType (hFile=0x24) returned 0x2 [0170.782] GetStdHandle (nStdHandle=0xfffffff5) returned 0x24 [0170.782] GetFileType (hFile=0x24) returned 0x2 [0170.783] GetConsoleMode (in: hConsoleHandle=0x24, lpMode=0x549e69f8b0 | out: lpMode=0x549e69f8b0) returned 1 [0170.822] __iob_func () returned 0x7ffb8ebde210 [0170.823] GetStdHandle (nStdHandle=0xfffffff5) returned 0x24 [0170.823] lstrlenW (lpString="The operation completed successfully.\r\n") returned 39 [0170.823] WriteConsoleW (in: hConsoleOutput=0x24, lpBuffer=0x549e783a80*, nNumberOfCharsToWrite=0x27, lpNumberOfCharsWritten=0x549e69f920, lpReserved=0x0 | out: lpBuffer=0x549e783a80*, lpNumberOfCharsWritten=0x549e69f920*=0x27) returned 1 [0170.837] exit (_Code=0) Thread: id = 175 os_tid = 0x2e0 Process: id = "18" image_name = "runtimebroker.exe" filename = "c:\\windows\\system32\\runtimebroker.exe" page_root = "0x6a952000" os_pid = "0x818" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "injection" parent_id = "12" os_parent_pid = "0x5dc" cmd_line = "C:\\Windows\\System32\\RuntimeBroker.exe -Embedding" cur_dir = "C:\\Windows\\system32\\" os_username = "LHNIWSJ\\CIiHmnxMn6Ps" os_groups = "LHNIWSJ\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0001b4e9" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 7466 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 7467 start_va = 0x7f3a550000 end_va = 0x7f3a55ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000007f3a550000" filename = "" Region: id = 7468 start_va = 0x7f3a560000 end_va = 0x7f3a560fff entry_point = 0x0 region_type = private name = "private_0x0000007f3a560000" filename = "" Region: id = 7469 start_va = 0x7f3a570000 end_va = 0x7f3a583fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000007f3a570000" filename = "" Region: id = 7470 start_va = 0x7f3a590000 end_va = 0x7f3a60ffff entry_point = 0x0 region_type = private name = "private_0x0000007f3a590000" filename = "" Region: id = 7471 start_va = 0x7f3a610000 end_va = 0x7f3a613fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000007f3a610000" filename = "" Region: id = 7472 start_va = 0x7f3a620000 end_va = 0x7f3a621fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000007f3a620000" filename = "" Region: id = 7473 start_va = 0x7f3a630000 end_va = 0x7f3a631fff entry_point = 0x0 region_type = private name = "private_0x0000007f3a630000" filename = "" Region: id = 7474 start_va = 0x7f3a640000 end_va = 0x7f3a6fdfff entry_point = 0x7f3a640000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 7475 start_va = 0x7f3a700000 end_va = 0x7f3a700fff entry_point = 0x0 region_type = private name = "private_0x0000007f3a700000" filename = "" Region: id = 7476 start_va = 0x7f3a710000 end_va = 0x7f3a710fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000007f3a710000" filename = "" Region: id = 7477 start_va = 0x7f3a720000 end_va = 0x7f3a720fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000007f3a720000" filename = "" Region: id = 7478 start_va = 0x7f3a730000 end_va = 0x7f3a732fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000007f3a730000" filename = "" Region: id = 7479 start_va = 0x7f3a740000 end_va = 0x7f3a740fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000007f3a740000" filename = "" Region: id = 7480 start_va = 0x7f3a750000 end_va = 0x7f3a756fff entry_point = 0x0 region_type = private name = "private_0x0000007f3a750000" filename = "" Region: id = 7481 start_va = 0x7f3a760000 end_va = 0x7f3a7dffff entry_point = 0x0 region_type = private name = "private_0x0000007f3a760000" filename = "" Region: id = 7482 start_va = 0x7f3a7e0000 end_va = 0x7f3a7e0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000007f3a7e0000" filename = "" Region: id = 7483 start_va = 0x7f3a800000 end_va = 0x7f3a8fffff entry_point = 0x0 region_type = private name = "private_0x0000007f3a800000" filename = "" Region: id = 7484 start_va = 0x7f3a900000 end_va = 0x7f3a97ffff entry_point = 0x0 region_type = private name = "private_0x0000007f3a900000" filename = "" Region: id = 7485 start_va = 0x7f3a980000 end_va = 0x7f3a9fffff entry_point = 0x0 region_type = private name = "private_0x0000007f3a980000" filename = "" Region: id = 7486 start_va = 0x7f3aa00000 end_va = 0x7f3aa7ffff entry_point = 0x0 region_type = private name = "private_0x0000007f3aa00000" filename = "" Region: id = 7487 start_va = 0x7f3aa80000 end_va = 0x7f3aaa9fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000007f3aa80000" filename = "" Region: id = 7488 start_va = 0x7f3aaf0000 end_va = 0x7f3aaf6fff entry_point = 0x0 region_type = private name = "private_0x0000007f3aaf0000" filename = "" Region: id = 7489 start_va = 0x7f3ab00000 end_va = 0x7f3abfffff entry_point = 0x0 region_type = private name = "private_0x0000007f3ab00000" filename = "" Region: id = 7490 start_va = 0x7f3ac00000 end_va = 0x7f3ad87fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000007f3ac00000" filename = "" Region: id = 7491 start_va = 0x7f3ad90000 end_va = 0x7f3af10fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000007f3ad90000" filename = "" Region: id = 7492 start_va = 0x7f3af20000 end_va = 0x7f3c31ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000007f3af20000" filename = "" Region: id = 7493 start_va = 0x7f3c320000 end_va = 0x7f3c656fff entry_point = 0x7f3c320000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 7494 start_va = 0x7f3c660000 end_va = 0x7f3c6dffff entry_point = 0x0 region_type = private name = "private_0x0000007f3c660000" filename = "" Region: id = 7495 start_va = 0x7f3c740000 end_va = 0x7f3c746fff entry_point = 0x0 region_type = private name = "private_0x0000007f3c740000" filename = "" Region: id = 7496 start_va = 0x7f3c750000 end_va = 0x7f3c7cffff entry_point = 0x0 region_type = private name = "private_0x0000007f3c750000" filename = "" Region: id = 7497 start_va = 0x7f3c800000 end_va = 0x7f3c8fffff entry_point = 0x0 region_type = private name = "private_0x0000007f3c800000" filename = "" Region: id = 7498 start_va = 0x7f3c900000 end_va = 0x7f3c9fffff entry_point = 0x0 region_type = private name = "private_0x0000007f3c900000" filename = "" Region: id = 7499 start_va = 0x7f3ca00000 end_va = 0x7f3ca7ffff entry_point = 0x0 region_type = private name = "private_0x0000007f3ca00000" filename = "" Region: id = 7500 start_va = 0x7df5ffb90000 end_va = 0x7ff5ffb8ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ffb90000" filename = "" Region: id = 7501 start_va = 0x7ff67d58a000 end_va = 0x7ff67d58bfff entry_point = 0x0 region_type = private name = "private_0x00007ff67d58a000" filename = "" Region: id = 7502 start_va = 0x7ff67d58c000 end_va = 0x7ff67d58dfff entry_point = 0x0 region_type = private name = "private_0x00007ff67d58c000" filename = "" Region: id = 7503 start_va = 0x7ff67d58e000 end_va = 0x7ff67d58ffff entry_point = 0x0 region_type = private name = "private_0x00007ff67d58e000" filename = "" Region: id = 7504 start_va = 0x7ff67d590000 end_va = 0x7ff67d68ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff67d590000" filename = "" Region: id = 7505 start_va = 0x7ff67d690000 end_va = 0x7ff67d6b2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff67d690000" filename = "" Region: id = 7506 start_va = 0x7ff67d6b4000 end_va = 0x7ff67d6b4fff entry_point = 0x0 region_type = private name = "private_0x00007ff67d6b4000" filename = "" Region: id = 7507 start_va = 0x7ff67d6b6000 end_va = 0x7ff67d6b7fff entry_point = 0x0 region_type = private name = "private_0x00007ff67d6b6000" filename = "" Region: id = 7508 start_va = 0x7ff67d6b8000 end_va = 0x7ff67d6b9fff entry_point = 0x0 region_type = private name = "private_0x00007ff67d6b8000" filename = "" Region: id = 7509 start_va = 0x7ff67d6ba000 end_va = 0x7ff67d6bbfff entry_point = 0x0 region_type = private name = "private_0x00007ff67d6ba000" filename = "" Region: id = 7510 start_va = 0x7ff67d6bc000 end_va = 0x7ff67d6bdfff entry_point = 0x0 region_type = private name = "private_0x00007ff67d6bc000" filename = "" Region: id = 7511 start_va = 0x7ff67d6be000 end_va = 0x7ff67d6bffff entry_point = 0x0 region_type = private name = "private_0x00007ff67d6be000" filename = "" Region: id = 7512 start_va = 0x7ff67d8d0000 end_va = 0x7ff67d8e5fff entry_point = 0x7ff67d8d0000 region_type = mapped_file name = "runtimebroker.exe" filename = "\\Windows\\System32\\RuntimeBroker.exe" (normalized: "c:\\windows\\system32\\runtimebroker.exe") Region: id = 7513 start_va = 0x7ff69dc40000 end_va = 0x7ff69e491fff entry_point = 0x7ff69dc40000 region_type = mapped_file name = "ntoskrnl.exe" filename = "\\Windows\\System32\\ntoskrnl.exe" (normalized: "c:\\windows\\system32\\ntoskrnl.exe") Region: id = 7514 start_va = 0x7ff74ec20000 end_va = 0x7ff74ec54fff entry_point = 0x0 region_type = private name = "private_0x00007ff74ec20000" filename = "" Region: id = 7515 start_va = 0x7ffb7d370000 end_va = 0x7ffb7d422fff entry_point = 0x7ffb7d370000 region_type = mapped_file name = "windows.security.authentication.onlineid.dll" filename = "\\Windows\\System32\\Windows.Security.Authentication.OnlineId.dll" (normalized: "c:\\windows\\system32\\windows.security.authentication.onlineid.dll") Region: id = 7516 start_va = 0x7ffb7e100000 end_va = 0x7ffb7e125fff entry_point = 0x7ffb7e100000 region_type = mapped_file name = "authbroker.dll" filename = "\\Windows\\System32\\AuthBroker.dll" (normalized: "c:\\windows\\system32\\authbroker.dll") Region: id = 7517 start_va = 0x7ffb7e190000 end_va = 0x7ffb7e221fff entry_point = 0x7ffb7e190000 region_type = mapped_file name = "windows.internal.shell.broker.dll" filename = "\\Windows\\System32\\Windows.Internal.Shell.Broker.dll" (normalized: "c:\\windows\\system32\\windows.internal.shell.broker.dll") Region: id = 7518 start_va = 0x7ffb7e380000 end_va = 0x7ffb7e399fff entry_point = 0x7ffb7e380000 region_type = mapped_file name = "msauserext.dll" filename = "\\Windows\\System32\\msauserext.dll" (normalized: "c:\\windows\\system32\\msauserext.dll") Region: id = 7519 start_va = 0x7ffb7fbb0000 end_va = 0x7ffb7fbc5fff entry_point = 0x7ffb7fbb0000 region_type = mapped_file name = "wwapi.dll" filename = "\\Windows\\System32\\wwapi.dll" (normalized: "c:\\windows\\system32\\wwapi.dll") Region: id = 7520 start_va = 0x7ffb7fbd0000 end_va = 0x7ffb7fc7bfff entry_point = 0x7ffb7fbd0000 region_type = mapped_file name = "windows.networking.connectivity.dll" filename = "\\Windows\\System32\\Windows.Networking.Connectivity.dll" (normalized: "c:\\windows\\system32\\windows.networking.connectivity.dll") Region: id = 7521 start_va = 0x7ffb81f00000 end_va = 0x7ffb81fc5fff entry_point = 0x7ffb81f00000 region_type = mapped_file name = "tokenbroker.dll" filename = "\\Windows\\System32\\TokenBroker.dll" (normalized: "c:\\windows\\system32\\tokenbroker.dll") Region: id = 7522 start_va = 0x7ffb821b0000 end_va = 0x7ffb821c4fff entry_point = 0x7ffb821b0000 region_type = mapped_file name = "execmodelproxy.dll" filename = "\\Windows\\System32\\execmodelproxy.dll" (normalized: "c:\\windows\\system32\\execmodelproxy.dll") Region: id = 7523 start_va = 0x7ffb82360000 end_va = 0x7ffb823a2fff entry_point = 0x7ffb82360000 region_type = mapped_file name = "execmodelclient.dll" filename = "\\Windows\\System32\\ExecModelClient.dll" (normalized: "c:\\windows\\system32\\execmodelclient.dll") Region: id = 7524 start_va = 0x7ffb82650000 end_va = 0x7ffb82ab9fff entry_point = 0x7ffb82650000 region_type = mapped_file name = "actxprxy.dll" filename = "\\Windows\\System32\\actxprxy.dll" (normalized: "c:\\windows\\system32\\actxprxy.dll") Region: id = 7525 start_va = 0x7ffb83230000 end_va = 0x7ffb83256fff entry_point = 0x7ffb83230000 region_type = mapped_file name = "idstore.dll" filename = "\\Windows\\System32\\IDStore.dll" (normalized: "c:\\windows\\system32\\idstore.dll") Region: id = 7526 start_va = 0x7ffb84470000 end_va = 0x7ffb8447dfff entry_point = 0x7ffb84470000 region_type = mapped_file name = "npmproxy.dll" filename = "\\Windows\\System32\\npmproxy.dll" (normalized: "c:\\windows\\system32\\npmproxy.dll") Region: id = 7527 start_va = 0x7ffb856f0000 end_va = 0x7ffb85996fff entry_point = 0x7ffb856f0000 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\System32\\wininet.dll" (normalized: "c:\\windows\\system32\\wininet.dll") Region: id = 7528 start_va = 0x7ffb85b60000 end_va = 0x7ffb85bbefff entry_point = 0x7ffb85b60000 region_type = mapped_file name = "wlanapi.dll" filename = "\\Windows\\System32\\wlanapi.dll" (normalized: "c:\\windows\\system32\\wlanapi.dll") Region: id = 7529 start_va = 0x7ffb88560000 end_va = 0x7ffb88716fff entry_point = 0x7ffb88560000 region_type = mapped_file name = "windows.ui.immersive.dll" filename = "\\Windows\\System32\\Windows.UI.Immersive.dll" (normalized: "c:\\windows\\system32\\windows.ui.immersive.dll") Region: id = 7530 start_va = 0x7ffb89b40000 end_va = 0x7ffb89c4efff entry_point = 0x7ffb89b40000 region_type = mapped_file name = "mrmcorer.dll" filename = "\\Windows\\System32\\MrmCoreR.dll" (normalized: "c:\\windows\\system32\\mrmcorer.dll") Region: id = 7531 start_va = 0x7ffb8a510000 end_va = 0x7ffb8a52bfff entry_point = 0x7ffb8a510000 region_type = mapped_file name = "samlib.dll" filename = "\\Windows\\System32\\samlib.dll" (normalized: "c:\\windows\\system32\\samlib.dll") Region: id = 7532 start_va = 0x7ffb8a850000 end_va = 0x7ffb8a9d2fff entry_point = 0x7ffb8a850000 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 7533 start_va = 0x7ffb8a9e0000 end_va = 0x7ffb8aa51fff entry_point = 0x7ffb8a9e0000 region_type = mapped_file name = "mmdevapi.dll" filename = "\\Windows\\System32\\MMDevAPI.dll" (normalized: "c:\\windows\\system32\\mmdevapi.dll") Region: id = 7534 start_va = 0x7ffb8ab60000 end_va = 0x7ffb8ac90fff entry_point = 0x7ffb8ab60000 region_type = mapped_file name = "wintypes.dll" filename = "\\Windows\\System32\\WinTypes.dll" (normalized: "c:\\windows\\system32\\wintypes.dll") Region: id = 7535 start_va = 0x7ffb8add0000 end_va = 0x7ffb8ade7fff entry_point = 0x7ffb8add0000 region_type = mapped_file name = "samcli.dll" filename = "\\Windows\\System32\\samcli.dll" (normalized: "c:\\windows\\system32\\samcli.dll") Region: id = 7536 start_va = 0x7ffb8af20000 end_va = 0x7ffb8af35fff entry_point = 0x7ffb8af20000 region_type = mapped_file name = "wkscli.dll" filename = "\\Windows\\System32\\wkscli.dll" (normalized: "c:\\windows\\system32\\wkscli.dll") Region: id = 7537 start_va = 0x7ffb8b560000 end_va = 0x7ffb8b56afff entry_point = 0x7ffb8b560000 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll") Region: id = 7538 start_va = 0x7ffb8b580000 end_va = 0x7ffb8b5b7fff entry_point = 0x7ffb8b580000 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 7539 start_va = 0x7ffb8bf70000 end_va = 0x7ffb8bf82fff entry_point = 0x7ffb8bf70000 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll") Region: id = 7540 start_va = 0x7ffb8c060000 end_va = 0x7ffb8c127fff entry_point = 0x7ffb8c060000 region_type = mapped_file name = "coremessaging.dll" filename = "\\Windows\\System32\\CoreMessaging.dll" (normalized: "c:\\windows\\system32\\coremessaging.dll") Region: id = 7541 start_va = 0x7ffb8c500000 end_va = 0x7ffb8c524fff entry_point = 0x7ffb8c500000 region_type = mapped_file name = "sppc.dll" filename = "\\Windows\\System32\\sppc.dll" (normalized: "c:\\windows\\system32\\sppc.dll") Region: id = 7542 start_va = 0x7ffb8c530000 end_va = 0x7ffb8c555fff entry_point = 0x7ffb8c530000 region_type = mapped_file name = "slc.dll" filename = "\\Windows\\System32\\slc.dll" (normalized: "c:\\windows\\system32\\slc.dll") Region: id = 7543 start_va = 0x7ffb8c780000 end_va = 0x7ffb8c815fff entry_point = 0x7ffb8c780000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 7544 start_va = 0x7ffb8c820000 end_va = 0x7ffb8c846fff entry_point = 0x7ffb8c820000 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 7545 start_va = 0x7ffb8c870000 end_va = 0x7ffb8c95dfff entry_point = 0x7ffb8c870000 region_type = mapped_file name = "twinapi.appcore.dll" filename = "\\Windows\\System32\\twinapi.appcore.dll" (normalized: "c:\\windows\\system32\\twinapi.appcore.dll") Region: id = 7546 start_va = 0x7ffb8d160000 end_va = 0x7ffb8d16bfff entry_point = 0x7ffb8d160000 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\System32\\netutils.dll" (normalized: "c:\\windows\\system32\\netutils.dll") Region: id = 7547 start_va = 0x7ffb8d3d0000 end_va = 0x7ffb8d402fff entry_point = 0x7ffb8d3d0000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 7548 start_va = 0x7ffb8d4c0000 end_va = 0x7ffb8d4defff entry_point = 0x7ffb8d4c0000 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 7549 start_va = 0x7ffb8d780000 end_va = 0x7ffb8d796fff entry_point = 0x7ffb8d780000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 7550 start_va = 0x7ffb8d8f0000 end_va = 0x7ffb8d8fafff entry_point = 0x7ffb8d8f0000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 7551 start_va = 0x7ffb8dad0000 end_va = 0x7ffb8dafbfff entry_point = 0x7ffb8dad0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 7552 start_va = 0x7ffb8dcd0000 end_va = 0x7ffb8dcf7fff entry_point = 0x7ffb8dcd0000 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 7553 start_va = 0x7ffb8dd00000 end_va = 0x7ffb8dd6afff entry_point = 0x7ffb8dd00000 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 7554 start_va = 0x7ffb8deb0000 end_va = 0x7ffb8dec2fff entry_point = 0x7ffb8deb0000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 7555 start_va = 0x7ffb8ded0000 end_va = 0x7ffb8dee0fff entry_point = 0x7ffb8ded0000 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 7556 start_va = 0x7ffb8def0000 end_va = 0x7ffb8df39fff entry_point = 0x7ffb8def0000 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 7557 start_va = 0x7ffb8df40000 end_va = 0x7ffb8df4efff entry_point = 0x7ffb8df40000 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 7558 start_va = 0x7ffb8e000000 end_va = 0x7ffb8e0b2fff entry_point = 0x7ffb8e000000 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\System32\\SHCore.dll" (normalized: "c:\\windows\\system32\\shcore.dll") Region: id = 7559 start_va = 0x7ffb8e120000 end_va = 0x7ffb8e747fff entry_point = 0x7ffb8e120000 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\System32\\windows.storage.dll" (normalized: "c:\\windows\\system32\\windows.storage.dll") Region: id = 7560 start_va = 0x7ffb8e750000 end_va = 0x7ffb8e910fff entry_point = 0x7ffb8e750000 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 7561 start_va = 0x7ffb8e920000 end_va = 0x7ffb8eafcfff entry_point = 0x7ffb8e920000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 7562 start_va = 0x7ffb8eb00000 end_va = 0x7ffb8eb43fff entry_point = 0x7ffb8eb00000 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 7563 start_va = 0x7ffb8eb50000 end_va = 0x7ffb8ebecfff entry_point = 0x7ffb8eb50000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 7564 start_va = 0x7ffb8ebf0000 end_va = 0x7ffb8ee6bfff entry_point = 0x7ffb8ebf0000 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 7565 start_va = 0x7ffb8ee70000 end_va = 0x7ffb8efbdfff entry_point = 0x7ffb8ee70000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 7566 start_va = 0x7ffb8efc0000 end_va = 0x7ffb8f0e5fff entry_point = 0x7ffb8efc0000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 7567 start_va = 0x7ffb8f100000 end_va = 0x7ffb8f284fff entry_point = 0x7ffb8f100000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 7568 start_va = 0x7ffb8f290000 end_va = 0x7ffb8f2e0fff entry_point = 0x7ffb8f290000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 7569 start_va = 0x7ffb8f2f0000 end_va = 0x7ffb8f395fff entry_point = 0x7ffb8f2f0000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 7570 start_va = 0x7ffb8f3a0000 end_va = 0x7ffb8f4fbfff entry_point = 0x7ffb8f3a0000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 7571 start_va = 0x7ffb8f500000 end_va = 0x7ffb90a24fff entry_point = 0x7ffb8f500000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 7572 start_va = 0x7ffb90a30000 end_va = 0x7ffb90a37fff entry_point = 0x7ffb90a30000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 7573 start_va = 0x7ffb90a40000 end_va = 0x7ffb90aecfff entry_point = 0x7ffb90a40000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 7574 start_va = 0x7ffb90af0000 end_va = 0x7ffb90b4afff entry_point = 0x7ffb90af0000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 7575 start_va = 0x7ffb90bc0000 end_va = 0x7ffb90c7dfff entry_point = 0x7ffb90bc0000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 7576 start_va = 0x7ffb90e60000 end_va = 0x7ffb90f04fff entry_point = 0x7ffb90e60000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 7577 start_va = 0x7ffb90f70000 end_va = 0x7ffb90fa5fff entry_point = 0x7ffb90f70000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 7578 start_va = 0x7ffb90fb0000 end_va = 0x7ffb910f0fff entry_point = 0x7ffb90fb0000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 7579 start_va = 0x7ffb91480000 end_va = 0x7ffb91641fff entry_point = 0x7ffb91480000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 7583 start_va = 0x7f3ca80000 end_va = 0x7f3cafffff entry_point = 0x0 region_type = private name = "private_0x0000007f3ca80000" filename = "" Region: id = 7584 start_va = 0x7ff67d588000 end_va = 0x7ff67d589fff entry_point = 0x0 region_type = private name = "private_0x00007ff67d588000" filename = "" Region: id = 7585 start_va = 0x7ffb8d140000 end_va = 0x7ffb8d15bfff entry_point = 0x7ffb8d140000 region_type = mapped_file name = "mpr.dll" filename = "\\Windows\\System32\\mpr.dll" (normalized: "c:\\windows\\system32\\mpr.dll") Thread: id = 176 os_tid = 0xb58 Thread: id = 177 os_tid = 0x9f8 Thread: id = 178 os_tid = 0x870 Thread: id = 179 os_tid = 0x858 Thread: id = 180 os_tid = 0x854 Thread: id = 181 os_tid = 0x824 Thread: id = 182 os_tid = 0x820 Thread: id = 183 os_tid = 0x81c Thread: id = 184 os_tid = 0x764 [0170.814] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x7ffb90a40000 [0170.815] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="LoadLibraryA") returned 0x7ffb90a62080 [0170.815] LoadLibraryA (lpLibFileName="mpr.dll") returned 0x7ffb8d140000 [0170.817] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x7ffb8f2f0000 [0170.817] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x7ffb90fb0000 [0170.817] LoadLibraryA (lpLibFileName="Shell32.dll") returned 0x7ffb8f500000 [0170.817] LoadLibraryA (lpLibFileName="Iphlpapi.dll") returned 0x7ffb8b580000 [0170.817] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GetLastError") returned 0x7ffb90a56060 [0170.818] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="VirtualFree") returned 0x7ffb90a5bc10 [0170.818] GetProcAddress (hModule=0x7ffb8f2f0000, lpProcName="CryptExportKey") returned 0x7ffb8f307b50 [0170.818] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="DeleteFileW") returned 0x7ffb90a657a0 [0170.818] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GetDriveTypeW") returned 0x7ffb90a658f0 [0170.818] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GetCommandLineW") returned 0x7ffb90a60150 [0170.818] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GetStartupInfoW") returned 0x7ffb90a5ed80 [0170.818] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="FindNextFileW") returned 0x7ffb90a65880 [0170.819] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="VirtualAlloc") returned 0x7ffb90a5baf0 [0170.819] GetProcAddress (hModule=0x7ffb8f2f0000, lpProcName="GetUserNameA") returned 0x7ffb8f31ec40 [0170.819] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="ExitProcess") returned 0x7ffb90a5ef50 [0170.819] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="Wow64RevertWow64FsRedirection") returned 0x7ffb90a836a0 [0170.819] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="CreateProcessA") returned 0x7ffb90a5d5b0 [0170.819] GetProcAddress (hModule=0x7ffb8b580000, lpProcName="GetIpNetTable") returned 0x7ffb8b59f0b0 [0170.819] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GetVersionExW") returned 0x7ffb90a5aa30 [0170.819] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x7ffb90a83690 [0170.820] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GetSystemDefaultLangID") returned 0x7ffb90a62ba0 [0170.820] GetProcAddress (hModule=0x7ffb8f2f0000, lpProcName="GetUserNameW") returned 0x7ffb8f30da40 [0170.820] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="ReadFile") returned 0x7ffb90a65a90 [0170.820] GetProcAddress (hModule=0x7ffb8f2f0000, lpProcName="RegQueryValueExA") returned 0x7ffb8f307dd0 [0170.820] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="CloseHandle") returned 0x7ffb90a65510 [0170.820] GetProcAddress (hModule=0x7ffb8f2f0000, lpProcName="RegSetValueExW") returned 0x7ffb8f307850 [0170.820] GetProcAddress (hModule=0x7ffb8f2f0000, lpProcName="RegCloseKey") returned 0x7ffb8f3072e0 [0170.821] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="CopyFileA") returned 0x7ffb90a7e430 [0170.821] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="SetFileAttributesW") returned 0x7ffb90a65b00 [0170.821] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="WinExec") returned 0x7ffb90a81e60 [0170.821] GetProcAddress (hModule=0x7ffb8f2f0000, lpProcName="CryptDeriveKey") returned 0x7ffb8f3207a0 [0170.821] GetProcAddress (hModule=0x7ffb8f2f0000, lpProcName="CryptGenKey") returned 0x7ffb8f30cab0 [0170.821] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="Sleep") returned 0x7ffb90a58f00 [0170.821] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GetCurrentProcess") returned 0x7ffb90a56580 [0170.821] GetProcAddress (hModule=0x7ffb8f500000, lpProcName="ShellExecuteW") returned 0x7ffb8f64abc0 [0170.822] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GetFileSize") returned 0x7ffb90a65950 [0170.822] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GlobalAlloc") returned 0x7ffb90a5b810 [0170.822] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="FindClose") returned 0x7ffb90a657c0 [0170.822] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="WaitForMultipleObjects") returned 0x7ffb90a656e0 [0170.822] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GetModuleFileNameA") returned 0x7ffb90a60c70 [0170.839] GetProcAddress (hModule=0x7ffb8f500000, lpProcName="ShellExecuteA") returned 0x7ffb8f707de0 [0170.839] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GetModuleHandleA") returned 0x7ffb90a5e6d0 [0170.839] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GetModuleFileNameW") returned 0x7ffb90a5eca0 [0170.839] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="CreateFileA") returned 0x7ffb90a65760 [0170.839] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GetFileSizeEx") returned 0x7ffb90a65960 [0170.840] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="WriteFile") returned 0x7ffb90a65b80 [0170.840] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GetLogicalDrives") returned 0x7ffb90a566d0 [0170.840] GetProcAddress (hModule=0x7ffb8d140000, lpProcName="WNetEnumResourceW") returned 0x7ffb8d1427d0 [0170.840] GetProcAddress (hModule=0x7ffb8f2f0000, lpProcName="RegOpenKeyExW") returned 0x7ffb8f306cb0 [0170.840] GetProcAddress (hModule=0x7ffb8d140000, lpProcName="WNetCloseEnum") returned 0x7ffb8d142e20 [0170.840] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GetWindowsDirectoryW") returned 0x7ffb90a62940 [0170.840] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="SetFileAttributesA") returned 0x7ffb90a65af0 [0170.840] GetProcAddress (hModule=0x7ffb8f2f0000, lpProcName="RegOpenKeyExA") returned 0x7ffb8f307d70 [0170.841] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="SetFilePointer") returned 0x7ffb90a65b20 [0170.841] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GetTickCount") returned 0x7ffb90a560a0 [0170.841] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GetFileAttributesW") returned 0x7ffb90a65930 [0170.841] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="FindFirstFileW") returned 0x7ffb90a65840 [0170.841] GetProcAddress (hModule=0x7ffb8f2f0000, lpProcName="CryptAcquireContextW") returned 0x7ffb8f3089e0 [0170.841] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="MoveFileExW") returned 0x7ffb90a63010 [0170.841] GetProcAddress (hModule=0x7ffb8d140000, lpProcName="WNetOpenEnumW") returned 0x7ffb8d142f20 [0170.842] GetProcAddress (hModule=0x7ffb90fb0000, lpProcName="CoInitialize") returned 0x7ffb90fc3870 [0170.842] GetProcAddress (hModule=0x7ffb8f2f0000, lpProcName="CryptDecrypt") returned 0x7ffb8f309140 [0170.842] GetProcAddress (hModule=0x7ffb8f2f0000, lpProcName="CryptImportKey") returned 0x7ffb8f307b40 [0170.842] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="SetFilePointerEx") returned 0x7ffb90a65b30 [0170.842] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="CopyFileW") returned 0x7ffb90a65d70 [0170.842] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="FreeLibrary") returned 0x7ffb90a5eb90 [0170.842] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="CreateProcessW") returned 0x7ffb90a5dee0 [0170.842] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="CreateDirectoryW") returned 0x7ffb90a65740 [0170.843] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="CreateThread") returned 0x7ffb90a5bc20 [0170.843] GetProcAddress (hModule=0x7ffb8f2f0000, lpProcName="CryptDestroyKey") returned 0x7ffb8f3086b0 [0170.843] GetProcAddress (hModule=0x7ffb90fb0000, lpProcName="CoCreateInstance") returned 0x7ffb8ec77000 [0170.843] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="CreateFileW") returned 0x7ffb90a65770 [0170.843] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GetFileAttributesA") returned 0x7ffb90a65900 [0170.843] GetProcAddress (hModule=0x7ffb8f2f0000, lpProcName="CryptEncrypt") returned 0x7ffb8f30d7e0 [0170.843] GetProcAddress (hModule=0x7ffb8f2f0000, lpProcName="RegDeleteValueW") returned 0x7ffb8f3090b0 [0170.843] GetVersionExW (in: lpVersionInformation=0x7f3caff6c0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x7f3caff6c0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x2800, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0170.843] GetWindowsDirectoryW (in: lpBuffer=0x7f3caff770, uSize=0x32 | out: lpBuffer="C:\\Windows") returned 0xa [0170.843] SetLastError (dwErrCode=0x0) [0170.844] CreateFileW (lpFileName="C:\\users\\Public\\sys" (normalized: "c:\\users\\public\\sys"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0xffffffffffffffff [0170.844] GetLastError () returned 0x20 [0170.844] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0170.844] Sleep (dwMilliseconds=0x1388) [0175.855] Sleep (dwMilliseconds=0x2328) [0184.860] GetWindowsDirectoryW (in: lpBuffer=0x7f3caff770, uSize=0x32 | out: lpBuffer="C:\\Windows") returned 0xa [0184.860] SetLastError (dwErrCode=0x0) [0184.860] CreateFileW (lpFileName="C:\\users\\Public\\sys" (normalized: "c:\\users\\public\\sys"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0xffffffffffffffff [0184.861] GetLastError () returned 0x20 [0184.861] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0184.861] Sleep (dwMilliseconds=0x2328) [0194.878] GetWindowsDirectoryW (in: lpBuffer=0x7f3caff770, uSize=0x32 | out: lpBuffer="C:\\Windows") returned 0xa [0194.878] SetLastError (dwErrCode=0x0) [0194.878] CreateFileW (lpFileName="C:\\users\\Public\\sys" (normalized: "c:\\users\\public\\sys"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0xffffffffffffffff [0194.879] GetLastError () returned 0x20 [0194.879] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0194.879] Sleep (dwMilliseconds=0x2328) [0204.087] GetWindowsDirectoryW (in: lpBuffer=0x7f3caff770, uSize=0x32 | out: lpBuffer="C:\\Windows") returned 0xa [0204.087] SetLastError (dwErrCode=0x0) [0204.087] CreateFileW (lpFileName="C:\\users\\Public\\sys" (normalized: "c:\\users\\public\\sys"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0xffffffffffffffff [0204.088] GetLastError () returned 0x20 [0204.088] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0204.088] Sleep (dwMilliseconds=0x2328) [0213.100] GetWindowsDirectoryW (in: lpBuffer=0x7f3caff770, uSize=0x32 | out: lpBuffer="C:\\Windows") returned 0xa [0213.100] SetLastError (dwErrCode=0x0) [0213.100] CreateFileW (lpFileName="C:\\users\\Public\\sys" (normalized: "c:\\users\\public\\sys"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0xffffffffffffffff [0213.101] GetLastError () returned 0x20 [0213.101] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0213.101] Sleep (dwMilliseconds=0x2328) [0222.114] GetWindowsDirectoryW (in: lpBuffer=0x7f3caff770, uSize=0x32 | out: lpBuffer="C:\\Windows") returned 0xa [0222.114] SetLastError (dwErrCode=0x0) [0222.114] CreateFileW (lpFileName="C:\\users\\Public\\sys" (normalized: "c:\\users\\public\\sys"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0xffffffffffffffff [0222.114] GetLastError () returned 0x20 [0222.114] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0222.114] Sleep (dwMilliseconds=0x2328) [0231.119] GetWindowsDirectoryW (in: lpBuffer=0x7f3caff770, uSize=0x32 | out: lpBuffer="C:\\Windows") returned 0xa [0231.119] SetLastError (dwErrCode=0x0) [0231.119] CreateFileW (lpFileName="C:\\users\\Public\\sys" (normalized: "c:\\users\\public\\sys"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0xffffffffffffffff [0231.120] GetLastError () returned 0x20 [0231.120] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0231.120] Sleep (dwMilliseconds=0x2328) [0240.141] GetWindowsDirectoryW (in: lpBuffer=0x7f3caff770, uSize=0x32 | out: lpBuffer="C:\\Windows") returned 0xa [0240.141] SetLastError (dwErrCode=0x0) [0240.141] CreateFileW (lpFileName="C:\\users\\Public\\sys" (normalized: "c:\\users\\public\\sys"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0xffffffffffffffff [0240.142] GetLastError () returned 0x20 [0240.142] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0240.142] Sleep (dwMilliseconds=0x2328) [0249.327] GetWindowsDirectoryW (in: lpBuffer=0x7f3caff770, uSize=0x32 | out: lpBuffer="C:\\Windows") returned 0xa [0249.327] SetLastError (dwErrCode=0x0) [0249.327] CreateFileW (lpFileName="C:\\users\\Public\\sys" (normalized: "c:\\users\\public\\sys"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0xffffffffffffffff [0249.328] GetLastError () returned 0x20 [0249.328] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0249.328] Sleep (dwMilliseconds=0x2328) [0258.331] GetWindowsDirectoryW (in: lpBuffer=0x7f3caff770, uSize=0x32 | out: lpBuffer="C:\\Windows") returned 0xa [0258.331] SetLastError (dwErrCode=0x0) [0258.331] CreateFileW (lpFileName="C:\\users\\Public\\sys" (normalized: "c:\\users\\public\\sys"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0xffffffffffffffff [0258.331] GetLastError () returned 0x20 [0258.331] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0258.331] Sleep (dwMilliseconds=0x2328) [0267.362] GetWindowsDirectoryW (in: lpBuffer=0x7f3caff770, uSize=0x32 | out: lpBuffer="C:\\Windows") returned 0xa [0267.362] SetLastError (dwErrCode=0x0) [0267.362] CreateFileW (lpFileName="C:\\users\\Public\\sys" (normalized: "c:\\users\\public\\sys"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0xffffffffffffffff [0267.362] GetLastError () returned 0x20 [0267.362] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0267.362] Sleep (dwMilliseconds=0x2328) [0276.377] GetWindowsDirectoryW (in: lpBuffer=0x7f3caff770, uSize=0x32 | out: lpBuffer="C:\\Windows") returned 0xa [0276.377] SetLastError (dwErrCode=0x0) [0276.377] CreateFileW (lpFileName="C:\\users\\Public\\sys" (normalized: "c:\\users\\public\\sys"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0xffffffffffffffff [0276.377] GetLastError () returned 0x20 [0276.377] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0276.378] Sleep (dwMilliseconds=0x2328) [0285.381] GetWindowsDirectoryW (in: lpBuffer=0x7f3caff770, uSize=0x32 | out: lpBuffer="C:\\Windows") returned 0xa [0285.381] SetLastError (dwErrCode=0x0) [0285.381] CreateFileW (lpFileName="C:\\users\\Public\\sys" (normalized: "c:\\users\\public\\sys"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0xffffffffffffffff [0285.382] GetLastError () returned 0x20 [0285.382] CloseHandle (hObject=0xffffffffffffffff) returned 1 [0285.382] Sleep (dwMilliseconds=0x2328) Thread: id = 269 os_tid = 0x938 Thread: id = 271 os_tid = 0x8b0 Process: id = "19" image_name = "shellexperiencehost.exe" filename = "c:\\windows\\systemapps\\shellexperiencehost_cw5n1h2txyewy\\shellexperiencehost.exe" page_root = "0x6d323000" os_pid = "0x97c" os_integrity_level = "0x1000" os_privileges = "0x800000" monitor_reason = "injection" parent_id = "12" os_parent_pid = "0x5dc" cmd_line = "\"C:\\Windows\\SystemApps\\ShellExperienceHost_cw5n1h2txyewy\\ShellExperienceHost.exe\" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca" cur_dir = "C:\\Windows\\SystemApps\\ShellExperienceHost_cw5n1h2txyewy\\" os_username = "LHNIWSJ\\CIiHmnxMn6Ps" os_groups = "LHNIWSJ\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0001b4e9" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 7586 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 7587 start_va = 0xd138de0000 end_va = 0xd138deffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d138de0000" filename = "" Region: id = 7588 start_va = 0xd138df0000 end_va = 0xd138df0fff entry_point = 0x0 region_type = private name = "private_0x000000d138df0000" filename = "" Region: id = 7589 start_va = 0xd138e00000 end_va = 0xd138e13fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d138e00000" filename = "" Region: id = 7590 start_va = 0xd138e20000 end_va = 0xd138f1ffff entry_point = 0x0 region_type = private name = "private_0x000000d138e20000" filename = "" Region: id = 7591 start_va = 0xd138f20000 end_va = 0xd138f23fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d138f20000" filename = "" Region: id = 7592 start_va = 0xd138f30000 end_va = 0xd138f31fff entry_point = 0x0 region_type = private name = "private_0x000000d138f30000" filename = "" Region: id = 7593 start_va = 0xd138f40000 end_va = 0xd138f40fff entry_point = 0x0 region_type = private name = "private_0x000000d138f40000" filename = "" Region: id = 7594 start_va = 0xd138f50000 end_va = 0xd13900dfff entry_point = 0xd138f50000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 7595 start_va = 0xd139010000 end_va = 0xd139039fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d139010000" filename = "" Region: id = 7596 start_va = 0xd139040000 end_va = 0xd139040fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d139040000" filename = "" Region: id = 7597 start_va = 0xd139050000 end_va = 0xd139050fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d139050000" filename = "" Region: id = 7598 start_va = 0xd139060000 end_va = 0xd139060fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d139060000" filename = "" Region: id = 7599 start_va = 0xd139070000 end_va = 0xd139070fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d139070000" filename = "" Region: id = 7600 start_va = 0xd139080000 end_va = 0xd139080fff entry_point = 0x0 region_type = private name = "private_0x000000d139080000" filename = "" Region: id = 7601 start_va = 0xd139090000 end_va = 0xd139090fff entry_point = 0x0 region_type = private name = "private_0x000000d139090000" filename = "" Region: id = 7602 start_va = 0xd1390a0000 end_va = 0xd1390a0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d1390a0000" filename = "" Region: id = 7603 start_va = 0xd1390b0000 end_va = 0xd1390bbfff entry_point = 0xd1390b0000 region_type = mapped_file name = "2504515037.pri" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3295484897\\2504515037.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\windows\\3295484897\\2504515037.pri") Region: id = 7604 start_va = 0xd1390c0000 end_va = 0xd1390c0fff entry_point = 0xd1390c0000 region_type = mapped_file name = "msxml6r.dll" filename = "\\Windows\\System32\\msxml6r.dll" (normalized: "c:\\windows\\system32\\msxml6r.dll") Region: id = 7605 start_va = 0xd1390d0000 end_va = 0xd1390d6fff entry_point = 0x0 region_type = private name = "private_0x000000d1390d0000" filename = "" Region: id = 7606 start_va = 0xd1390e0000 end_va = 0xd1390ecfff entry_point = 0xd1390e0000 region_type = mapped_file name = "resources.en-us.pri" filename = "\\Windows\\SystemApps\\ShellExperienceHost_cw5n1h2txyewy\\pris\\resources.en-US.pri" (normalized: "c:\\windows\\systemapps\\shellexperiencehost_cw5n1h2txyewy\\pris\\resources.en-us.pri") Region: id = 7607 start_va = 0xd1390f0000 end_va = 0xd1390f1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d1390f0000" filename = "" Region: id = 7608 start_va = 0xd139100000 end_va = 0xd1391fffff entry_point = 0x0 region_type = private name = "private_0x000000d139100000" filename = "" Region: id = 7609 start_va = 0xd139200000 end_va = 0xd1392fffff entry_point = 0x0 region_type = private name = "private_0x000000d139200000" filename = "" Region: id = 7610 start_va = 0xd139300000 end_va = 0xd1393fffff entry_point = 0x0 region_type = private name = "private_0x000000d139300000" filename = "" Region: id = 7611 start_va = 0xd139400000 end_va = 0xd13940ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d139400000" filename = "" Region: id = 7612 start_va = 0xd139410000 end_va = 0xd13941ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d139410000" filename = "" Region: id = 7613 start_va = 0xd139420000 end_va = 0xd13942ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d139420000" filename = "" Region: id = 7614 start_va = 0xd139430000 end_va = 0xd139439fff entry_point = 0xd139430000 region_type = mapped_file name = "windows.ui.xaml.dll.mui" filename = "\\Windows\\System32\\en-US\\windows.ui.xaml.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\windows.ui.xaml.dll.mui") Region: id = 7615 start_va = 0xd139440000 end_va = 0xd139442fff entry_point = 0xd139440000 region_type = mapped_file name = "tilecache_100_0_header.bin" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState\\TileCache_100_0_Header.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\tempstate\\tilecache_100_0_header.bin") Region: id = 7616 start_va = 0xd139450000 end_va = 0xd139456fff entry_point = 0x0 region_type = private name = "private_0x000000d139450000" filename = "" Region: id = 7617 start_va = 0xd139460000 end_va = 0xd1394d5fff entry_point = 0xd139460000 region_type = mapped_file name = "~fontcache-system.dat" filename = "\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\FontCache\\~FontCache-System.dat" (normalized: "c:\\windows\\serviceprofiles\\localservice\\appdata\\local\\fontcache\\~fontcache-system.dat") Region: id = 7618 start_va = 0xd1394e0000 end_va = 0xd1394e0fff entry_point = 0x0 region_type = private name = "private_0x000000d1394e0000" filename = "" Region: id = 7619 start_va = 0xd1394f0000 end_va = 0xd1394f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d1394f0000" filename = "" Region: id = 7620 start_va = 0xd139500000 end_va = 0xd1395fffff entry_point = 0x0 region_type = private name = "private_0x000000d139500000" filename = "" Region: id = 7621 start_va = 0xd139600000 end_va = 0xd139787fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d139600000" filename = "" Region: id = 7622 start_va = 0xd139790000 end_va = 0xd139910fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d139790000" filename = "" Region: id = 7623 start_va = 0xd139920000 end_va = 0xd13ad1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d139920000" filename = "" Region: id = 7624 start_va = 0xd13ad20000 end_va = 0xd13ae56fff entry_point = 0xd13ad20000 region_type = mapped_file name = "windows.ui.xaml.resources.dll" filename = "\\Windows\\System32\\Windows.UI.Xaml.Resources.dll" (normalized: "c:\\windows\\system32\\windows.ui.xaml.resources.dll") Region: id = 7625 start_va = 0xd13ae60000 end_va = 0xd13af3efff entry_point = 0xd13ae60000 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui") Region: id = 7626 start_va = 0xd13af40000 end_va = 0xd13b276fff entry_point = 0xd13af40000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 7627 start_va = 0xd13b280000 end_va = 0xd13b37ffff entry_point = 0x0 region_type = private name = "private_0x000000d13b280000" filename = "" Region: id = 7628 start_va = 0xd13b380000 end_va = 0xd13b47ffff entry_point = 0x0 region_type = private name = "private_0x000000d13b380000" filename = "" Region: id = 7629 start_va = 0xd13b480000 end_va = 0xd13b57ffff entry_point = 0x0 region_type = private name = "private_0x000000d13b480000" filename = "" Region: id = 7630 start_va = 0xd13b580000 end_va = 0xd13b67ffff entry_point = 0x0 region_type = private name = "private_0x000000d13b580000" filename = "" Region: id = 7631 start_va = 0xd13b680000 end_va = 0xd13b680fff entry_point = 0x0 region_type = private name = "private_0x000000d13b680000" filename = "" Region: id = 7632 start_va = 0xd13b690000 end_va = 0xd13b693fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d13b690000" filename = "" Region: id = 7633 start_va = 0xd13b6a0000 end_va = 0xd13b6a6fff entry_point = 0x0 region_type = private name = "private_0x000000d13b6a0000" filename = "" Region: id = 7634 start_va = 0xd13b6b0000 end_va = 0xd13b6d3fff entry_point = 0xd13b6b0000 region_type = mapped_file name = "segmdl2.ttf" filename = "\\Windows\\Fonts\\segmdl2.ttf" (normalized: "c:\\windows\\fonts\\segmdl2.ttf") Region: id = 7635 start_va = 0xd13b6e0000 end_va = 0xd13b6e0fff entry_point = 0x0 region_type = private name = "private_0x000000d13b6e0000" filename = "" Region: id = 7636 start_va = 0xd13b6f0000 end_va = 0xd13b6f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d13b6f0000" filename = "" Region: id = 7637 start_va = 0xd13b700000 end_va = 0xd13b7fffff entry_point = 0x0 region_type = private name = "private_0x000000d13b700000" filename = "" Region: id = 7638 start_va = 0xd13b800000 end_va = 0xd13bffffff entry_point = 0x0 region_type = private name = "private_0x000000d13b800000" filename = "" Region: id = 7639 start_va = 0xd13c000000 end_va = 0xd13c0fffff entry_point = 0x0 region_type = private name = "private_0x000000d13c000000" filename = "" Region: id = 7640 start_va = 0xd13c100000 end_va = 0xd13c1d3fff entry_point = 0xd13c100000 region_type = mapped_file name = "resources.pri" filename = "\\Windows\\SystemApps\\ShellExperienceHost_cw5n1h2txyewy\\resources.pri" (normalized: "c:\\windows\\systemapps\\shellexperiencehost_cw5n1h2txyewy\\resources.pri") Region: id = 7641 start_va = 0xd13c1e0000 end_va = 0xd13c2dffff entry_point = 0x0 region_type = private name = "private_0x000000d13c1e0000" filename = "" Region: id = 7642 start_va = 0xd13c2e0000 end_va = 0xd13c3dffff entry_point = 0x0 region_type = private name = "private_0x000000d13c2e0000" filename = "" Region: id = 7643 start_va = 0xd13c3e0000 end_va = 0xd13c3e0fff entry_point = 0x0 region_type = private name = "private_0x000000d13c3e0000" filename = "" Region: id = 7644 start_va = 0xd13c3f0000 end_va = 0xd13c3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d13c3f0000" filename = "" Region: id = 7645 start_va = 0xd13c400000 end_va = 0xd13c4fffff entry_point = 0x0 region_type = private name = "private_0x000000d13c400000" filename = "" Region: id = 7646 start_va = 0xd13c500000 end_va = 0xd13c5fffff entry_point = 0x0 region_type = private name = "private_0x000000d13c500000" filename = "" Region: id = 7647 start_va = 0xd13c600000 end_va = 0xd13c6fffff entry_point = 0x0 region_type = private name = "private_0x000000d13c600000" filename = "" Region: id = 7648 start_va = 0xd13c700000 end_va = 0xd13c7fffff entry_point = 0x0 region_type = private name = "private_0x000000d13c700000" filename = "" Region: id = 7649 start_va = 0xd13c800000 end_va = 0xd13c8fffff entry_point = 0x0 region_type = private name = "private_0x000000d13c800000" filename = "" Region: id = 7650 start_va = 0xd13c900000 end_va = 0xd13c9fffff entry_point = 0x0 region_type = private name = "private_0x000000d13c900000" filename = "" Region: id = 7651 start_va = 0xd13ca00000 end_va = 0xd13cafffff entry_point = 0x0 region_type = private name = "private_0x000000d13ca00000" filename = "" Region: id = 7652 start_va = 0xd13cb00000 end_va = 0xd13cbfffff entry_point = 0x0 region_type = private name = "private_0x000000d13cb00000" filename = "" Region: id = 7653 start_va = 0xd13cd00000 end_va = 0xd13cdfffff entry_point = 0x0 region_type = private name = "private_0x000000d13cd00000" filename = "" Region: id = 7654 start_va = 0xd13cf00000 end_va = 0xd13cffffff entry_point = 0x0 region_type = private name = "private_0x000000d13cf00000" filename = "" Region: id = 7655 start_va = 0xd13d000000 end_va = 0xd13d0fffff entry_point = 0x0 region_type = private name = "private_0x000000d13d000000" filename = "" Region: id = 7656 start_va = 0xd13d300000 end_va = 0xd13d3fffff entry_point = 0x0 region_type = private name = "private_0x000000d13d300000" filename = "" Region: id = 7657 start_va = 0xd13d400000 end_va = 0xd13d406fff entry_point = 0x0 region_type = private name = "private_0x000000d13d400000" filename = "" Region: id = 7658 start_va = 0xd13d410000 end_va = 0xd13d4eefff entry_point = 0xd13d410000 region_type = mapped_file name = "segoeui.ttf" filename = "\\Windows\\Fonts\\segoeui.ttf" (normalized: "c:\\windows\\fonts\\segoeui.ttf") Region: id = 7659 start_va = 0xd13d4f0000 end_va = 0xd13d4f6fff entry_point = 0x0 region_type = private name = "private_0x000000d13d4f0000" filename = "" Region: id = 7660 start_va = 0xd13d500000 end_va = 0xd13d5fffff entry_point = 0x0 region_type = private name = "private_0x000000d13d500000" filename = "" Region: id = 7661 start_va = 0xd13d600000 end_va = 0xd13d6fffff entry_point = 0x0 region_type = private name = "private_0x000000d13d600000" filename = "" Region: id = 7662 start_va = 0xd13d700000 end_va = 0xd13e6fffff entry_point = 0xd13d700000 region_type = mapped_file name = "~fontcache-fontface.dat" filename = "\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\FontCache\\~FontCache-FontFace.dat" (normalized: "c:\\windows\\serviceprofiles\\localservice\\appdata\\local\\fontcache\\~fontcache-fontface.dat") Region: id = 7663 start_va = 0xd13e700000 end_va = 0xd13eefffff entry_point = 0xd13e700000 region_type = mapped_file name = "~fontcache-s-1-5-21-1462094071-1423818996-289466292-1000.dat" filename = "\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\FontCache\\~FontCache-S-1-5-21-1462094071-1423818996-289466292-1000.dat" (normalized: "c:\\windows\\serviceprofiles\\localservice\\appdata\\local\\fontcache\\~fontcache-s-1-5-21-1462094071-1423818996-289466292-1000.dat") Region: id = 7664 start_va = 0xd13ef00000 end_va = 0xd13f2fffff entry_point = 0x0 region_type = private name = "private_0x000000d13ef00000" filename = "" Region: id = 7665 start_va = 0xd13f300000 end_va = 0xd13f3fffff entry_point = 0x0 region_type = private name = "private_0x000000d13f300000" filename = "" Region: id = 7666 start_va = 0xd13f400000 end_va = 0xd13f4fffff entry_point = 0x0 region_type = private name = "private_0x000000d13f400000" filename = "" Region: id = 7667 start_va = 0xd13f500000 end_va = 0xd13f5fffff entry_point = 0x0 region_type = private name = "private_0x000000d13f500000" filename = "" Region: id = 7668 start_va = 0xd13f600000 end_va = 0xd13f6fffff entry_point = 0xd13f600000 region_type = mapped_file name = "tilecache_100_0_data.bin" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState\\TileCache_100_0_Data.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\tempstate\\tilecache_100_0_data.bin") Region: id = 7669 start_va = 0xd13f700000 end_va = 0xd13f9bffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d13f700000" filename = "" Region: id = 7670 start_va = 0xd13f9c0000 end_va = 0xd13fabffff entry_point = 0x0 region_type = private name = "private_0x000000d13f9c0000" filename = "" Region: id = 7671 start_va = 0xd13fac0000 end_va = 0xd13fbbffff entry_point = 0x0 region_type = private name = "private_0x000000d13fac0000" filename = "" Region: id = 7672 start_va = 0xd13fbc0000 end_va = 0xd13fbf1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d13fbc0000" filename = "" Region: id = 7673 start_va = 0xd13fc00000 end_va = 0xd13fcfffff entry_point = 0x0 region_type = private name = "private_0x000000d13fc00000" filename = "" Region: id = 7674 start_va = 0xd13ff00000 end_va = 0xd13fffffff entry_point = 0x0 region_type = private name = "private_0x000000d13ff00000" filename = "" Region: id = 7675 start_va = 0xd140000000 end_va = 0xd14007ffff entry_point = 0x0 region_type = private name = "private_0x000000d140000000" filename = "" Region: id = 7676 start_va = 0xd140300000 end_va = 0xd1403fffff entry_point = 0x0 region_type = private name = "private_0x000000d140300000" filename = "" Region: id = 7677 start_va = 0xd140e00000 end_va = 0xd140efffff entry_point = 0x0 region_type = private name = "private_0x000000d140e00000" filename = "" Region: id = 7678 start_va = 0xd141000000 end_va = 0xd1410fffff entry_point = 0x0 region_type = private name = "private_0x000000d141000000" filename = "" Region: id = 7679 start_va = 0xd141170000 end_va = 0xd141176fff entry_point = 0x0 region_type = private name = "private_0x000000d141170000" filename = "" Region: id = 7680 start_va = 0xd141200000 end_va = 0xd1412fffff entry_point = 0x0 region_type = private name = "private_0x000000d141200000" filename = "" Region: id = 7681 start_va = 0xd141300000 end_va = 0xd1413fffff entry_point = 0x0 region_type = private name = "private_0x000000d141300000" filename = "" Region: id = 7682 start_va = 0xd141400000 end_va = 0xd1414fffff entry_point = 0x0 region_type = private name = "private_0x000000d141400000" filename = "" Region: id = 7683 start_va = 0xd141500000 end_va = 0xd1415fffff entry_point = 0x0 region_type = private name = "private_0x000000d141500000" filename = "" Region: id = 7684 start_va = 0x7ff735544000 end_va = 0x7ff735545fff entry_point = 0x0 region_type = private name = "private_0x00007ff735544000" filename = "" Region: id = 7685 start_va = 0x7ff735546000 end_va = 0x7ff735547fff entry_point = 0x0 region_type = private name = "private_0x00007ff735546000" filename = "" Region: id = 7686 start_va = 0x7ff73554a000 end_va = 0x7ff73554bfff entry_point = 0x0 region_type = private name = "private_0x00007ff73554a000" filename = "" Region: id = 7687 start_va = 0x7ff735568000 end_va = 0x7ff735569fff entry_point = 0x0 region_type = private name = "private_0x00007ff735568000" filename = "" Region: id = 7688 start_va = 0x7ff73556a000 end_va = 0x7ff73556bfff entry_point = 0x0 region_type = private name = "private_0x00007ff73556a000" filename = "" Region: id = 7689 start_va = 0x7ff73556c000 end_va = 0x7ff73556dfff entry_point = 0x0 region_type = private name = "private_0x00007ff73556c000" filename = "" Region: id = 7690 start_va = 0x7ff73556e000 end_va = 0x7ff73556ffff entry_point = 0x0 region_type = private name = "private_0x00007ff73556e000" filename = "" Region: id = 7691 start_va = 0x7ff735574000 end_va = 0x7ff735575fff entry_point = 0x0 region_type = private name = "private_0x00007ff735574000" filename = "" Region: id = 7692 start_va = 0x7ff735576000 end_va = 0x7ff735577fff entry_point = 0x0 region_type = private name = "private_0x00007ff735576000" filename = "" Region: id = 7693 start_va = 0x7ff73557c000 end_va = 0x7ff73557dfff entry_point = 0x0 region_type = private name = "private_0x00007ff73557c000" filename = "" Region: id = 7694 start_va = 0x7ff73557e000 end_va = 0x7ff73557ffff entry_point = 0x0 region_type = private name = "private_0x00007ff73557e000" filename = "" Region: id = 7695 start_va = 0x7ff735580000 end_va = 0x7ff735581fff entry_point = 0x0 region_type = private name = "private_0x00007ff735580000" filename = "" Region: id = 7696 start_va = 0x7ff735582000 end_va = 0x7ff735583fff entry_point = 0x0 region_type = private name = "private_0x00007ff735582000" filename = "" Region: id = 7697 start_va = 0x7ff735584000 end_va = 0x7ff735585fff entry_point = 0x0 region_type = private name = "private_0x00007ff735584000" filename = "" Region: id = 7698 start_va = 0x7ff735586000 end_va = 0x7ff735587fff entry_point = 0x0 region_type = private name = "private_0x00007ff735586000" filename = "" Region: id = 7699 start_va = 0x7ff735588000 end_va = 0x7ff735589fff entry_point = 0x0 region_type = private name = "private_0x00007ff735588000" filename = "" Region: id = 7700 start_va = 0x7ff73558a000 end_va = 0x7ff73558bfff entry_point = 0x0 region_type = private name = "private_0x00007ff73558a000" filename = "" Region: id = 7701 start_va = 0x7ff73558c000 end_va = 0x7ff73558dfff entry_point = 0x0 region_type = private name = "private_0x00007ff73558c000" filename = "" Region: id = 7702 start_va = 0x7ff73558e000 end_va = 0x7ff73558ffff entry_point = 0x0 region_type = private name = "private_0x00007ff73558e000" filename = "" Region: id = 7703 start_va = 0x7ff735590000 end_va = 0x7ff73568ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff735590000" filename = "" Region: id = 7704 start_va = 0x7ff735690000 end_va = 0x7ff7356b2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff735690000" filename = "" Region: id = 7705 start_va = 0x7ff7356b3000 end_va = 0x7ff7356b4fff entry_point = 0x0 region_type = private name = "private_0x00007ff7356b3000" filename = "" Region: id = 7706 start_va = 0x7ff7356b5000 end_va = 0x7ff7356b5fff entry_point = 0x0 region_type = private name = "private_0x00007ff7356b5000" filename = "" Region: id = 7707 start_va = 0x7ff7356b6000 end_va = 0x7ff7356b7fff entry_point = 0x0 region_type = private name = "private_0x00007ff7356b6000" filename = "" Region: id = 7708 start_va = 0x7ff7356b8000 end_va = 0x7ff7356b9fff entry_point = 0x0 region_type = private name = "private_0x00007ff7356b8000" filename = "" Region: id = 7709 start_va = 0x7ff7356ba000 end_va = 0x7ff7356bbfff entry_point = 0x0 region_type = private name = "private_0x00007ff7356ba000" filename = "" Region: id = 7710 start_va = 0x7ff7356bc000 end_va = 0x7ff7356bdfff entry_point = 0x0 region_type = private name = "private_0x00007ff7356bc000" filename = "" Region: id = 7711 start_va = 0x7ff7356be000 end_va = 0x7ff7356bffff entry_point = 0x0 region_type = private name = "private_0x00007ff7356be000" filename = "" Region: id = 7712 start_va = 0x7ff735ff0000 end_va = 0x7ff7361ddfff entry_point = 0x7ff735ff0000 region_type = mapped_file name = "shellexperiencehost.exe" filename = "\\Windows\\SystemApps\\ShellExperienceHost_cw5n1h2txyewy\\ShellExperienceHost.exe" (normalized: "c:\\windows\\systemapps\\shellexperiencehost_cw5n1h2txyewy\\shellexperiencehost.exe") Region: id = 7713 start_va = 0x7ff74ec20000 end_va = 0x7ff74ec54fff entry_point = 0x0 region_type = private name = "private_0x00007ff74ec20000" filename = "" Region: id = 7714 start_va = 0x7ffb7e010000 end_va = 0x7ffb7e085fff entry_point = 0x7ffb7e010000 region_type = mapped_file name = "rtmediaframe.dll" filename = "\\Windows\\System32\\RTMediaFrame.dll" (normalized: "c:\\windows\\system32\\rtmediaframe.dll") Region: id = 7715 start_va = 0x7ffb7e230000 end_va = 0x7ffb7e289fff entry_point = 0x7ffb7e230000 region_type = mapped_file name = "windows.graphics.dll" filename = "\\Windows\\System32\\Windows.Graphics.dll" (normalized: "c:\\windows\\system32\\windows.graphics.dll") Region: id = 7716 start_va = 0x7ffb7e290000 end_va = 0x7ffb7e2e2fff entry_point = 0x7ffb7e290000 region_type = mapped_file name = "windows.storage.applicationdata.dll" filename = "\\Windows\\System32\\Windows.Storage.ApplicationData.dll" (normalized: "c:\\windows\\system32\\windows.storage.applicationdata.dll") Region: id = 7717 start_va = 0x7ffb7e2f0000 end_va = 0x7ffb7e2f9fff entry_point = 0x7ffb7e2f0000 region_type = mapped_file name = "fontgroupsoverride.dll" filename = "\\Windows\\System32\\fontgroupsoverride.dll" (normalized: "c:\\windows\\system32\\fontgroupsoverride.dll") Region: id = 7718 start_va = 0x7ffb7e300000 end_va = 0x7ffb7e317fff entry_point = 0x7ffb7e300000 region_type = mapped_file name = "windows.globalization.fontgroups.dll" filename = "\\Windows\\System32\\Windows.Globalization.Fontgroups.dll" (normalized: "c:\\windows\\system32\\windows.globalization.fontgroups.dll") Region: id = 7719 start_va = 0x7ffb7e320000 end_va = 0x7ffb7e36dfff entry_point = 0x7ffb7e320000 region_type = mapped_file name = "notificationobjfactory.dll" filename = "\\Windows\\System32\\NotificationObjFactory.dll" (normalized: "c:\\windows\\system32\\notificationobjfactory.dll") Region: id = 7720 start_va = 0x7ffb7e820000 end_va = 0x7ffb7e84dfff entry_point = 0x7ffb7e820000 region_type = mapped_file name = "quickactionsdatamodel.dll" filename = "\\Windows\\System32\\QuickActionsDataModel.dll" (normalized: "c:\\windows\\system32\\quickactionsdatamodel.dll") Region: id = 7721 start_va = 0x7ffb7e850000 end_va = 0x7ffb7ea8cfff entry_point = 0x7ffb7e850000 region_type = mapped_file name = "windows.ui.actioncenter.dll" filename = "\\Windows\\SystemApps\\ShellExperienceHost_cw5n1h2txyewy\\Windows.UI.ActionCenter.dll" (normalized: "c:\\windows\\systemapps\\shellexperiencehost_cw5n1h2txyewy\\windows.ui.actioncenter.dll") Region: id = 7722 start_va = 0x7ffb7ea90000 end_va = 0x7ffb7eafcfff entry_point = 0x7ffb7ea90000 region_type = mapped_file name = "quickactions.dll" filename = "\\Windows\\SystemApps\\ShellExperienceHost_cw5n1h2txyewy\\QuickActions.dll" (normalized: "c:\\windows\\systemapps\\shellexperiencehost_cw5n1h2txyewy\\quickactions.dll") Region: id = 7723 start_va = 0x7ffb7eb00000 end_va = 0x7ffb7f2a6fff entry_point = 0x7ffb7eb00000 region_type = mapped_file name = "startui.dll" filename = "\\Windows\\SystemApps\\ShellExperienceHost_cw5n1h2txyewy\\StartUI.dll" (normalized: "c:\\windows\\systemapps\\shellexperiencehost_cw5n1h2txyewy\\startui.dll") Region: id = 7724 start_va = 0x7ffb7f450000 end_va = 0x7ffb7f4e8fff entry_point = 0x7ffb7f450000 region_type = mapped_file name = "staterepository.core.dll" filename = "\\Windows\\System32\\StateRepository.Core.dll" (normalized: "c:\\windows\\system32\\staterepository.core.dll") Region: id = 7725 start_va = 0x7ffb7f4f0000 end_va = 0x7ffb7f781fff entry_point = 0x7ffb7f4f0000 region_type = mapped_file name = "windows.staterepository.dll" filename = "\\Windows\\System32\\Windows.StateRepository.dll" (normalized: "c:\\windows\\system32\\windows.staterepository.dll") Region: id = 7726 start_va = 0x7ffb7fac0000 end_va = 0x7ffb7faeafff entry_point = 0x7ffb7fac0000 region_type = mapped_file name = "personax.dll" filename = "\\Windows\\System32\\PersonaX.dll" (normalized: "c:\\windows\\system32\\personax.dll") Region: id = 7727 start_va = 0x7ffb7fe70000 end_va = 0x7ffb7feb8fff entry_point = 0x7ffb7fe70000 region_type = mapped_file name = "veeventdispatcher.dll" filename = "\\Windows\\System32\\VEEventDispatcher.dll" (normalized: "c:\\windows\\system32\\veeventdispatcher.dll") Region: id = 7728 start_va = 0x7ffb81dd0000 end_va = 0x7ffb81e15fff entry_point = 0x7ffb81dd0000 region_type = mapped_file name = "dataexchange.dll" filename = "\\Windows\\System32\\DataExchange.dll" (normalized: "c:\\windows\\system32\\dataexchange.dll") Region: id = 7729 start_va = 0x7ffb82650000 end_va = 0x7ffb82ab9fff entry_point = 0x7ffb82650000 region_type = mapped_file name = "actxprxy.dll" filename = "\\Windows\\System32\\actxprxy.dll" (normalized: "c:\\windows\\system32\\actxprxy.dll") Region: id = 7730 start_va = 0x7ffb82b70000 end_va = 0x7ffb82b81fff entry_point = 0x7ffb82b70000 region_type = mapped_file name = "windows.shell.servicehostbuilder.dll" filename = "\\Windows\\System32\\Windows.Shell.ServiceHostBuilder.dll" (normalized: "c:\\windows\\system32\\windows.shell.servicehostbuilder.dll") Region: id = 7731 start_va = 0x7ffb82bb0000 end_va = 0x7ffb82e10fff entry_point = 0x7ffb82bb0000 region_type = mapped_file name = "coreuicomponents.dll" filename = "\\Windows\\System32\\CoreUIComponents.dll" (normalized: "c:\\windows\\system32\\coreuicomponents.dll") Region: id = 7732 start_va = 0x7ffb83850000 end_va = 0x7ffb83864fff entry_point = 0x7ffb83850000 region_type = mapped_file name = "threadpoolwinrt.dll" filename = "\\Windows\\System32\\threadpoolwinrt.dll" (normalized: "c:\\windows\\system32\\threadpoolwinrt.dll") Region: id = 7733 start_va = 0x7ffb84be0000 end_va = 0x7ffb84e56fff entry_point = 0x7ffb84be0000 region_type = mapped_file name = "msxml6.dll" filename = "\\Windows\\System32\\msxml6.dll" (normalized: "c:\\windows\\system32\\msxml6.dll") Region: id = 7734 start_va = 0x7ffb85bc0000 end_va = 0x7ffb85d56fff entry_point = 0x7ffb85bc0000 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\System32\\urlmon.dll" (normalized: "c:\\windows\\system32\\urlmon.dll") Region: id = 7735 start_va = 0x7ffb86cd0000 end_va = 0x7ffb86d58fff entry_point = 0x7ffb86cd0000 region_type = mapped_file name = "directmanipulation.dll" filename = "\\Windows\\System32\\directmanipulation.dll" (normalized: "c:\\windows\\system32\\directmanipulation.dll") Region: id = 7736 start_va = 0x7ffb86d60000 end_va = 0x7ffb86ee5fff entry_point = 0x7ffb86d60000 region_type = mapped_file name = "windows.globalization.dll" filename = "\\Windows\\System32\\Windows.Globalization.dll" (normalized: "c:\\windows\\system32\\windows.globalization.dll") Region: id = 7737 start_va = 0x7ffb86ef0000 end_va = 0x7ffb87148fff entry_point = 0x7ffb86ef0000 region_type = mapped_file name = "dwrite.dll" filename = "\\Windows\\System32\\DWrite.dll" (normalized: "c:\\windows\\system32\\dwrite.dll") Region: id = 7738 start_va = 0x7ffb87810000 end_va = 0x7ffb878a1fff entry_point = 0x7ffb87810000 region_type = mapped_file name = "msvcp110_win.dll" filename = "\\Windows\\System32\\msvcp110_win.dll" (normalized: "c:\\windows\\system32\\msvcp110_win.dll") Region: id = 7739 start_va = 0x7ffb878b0000 end_va = 0x7ffb878e8fff entry_point = 0x7ffb878b0000 region_type = mapped_file name = "policymanager.dll" filename = "\\Windows\\System32\\policymanager.dll" (normalized: "c:\\windows\\system32\\policymanager.dll") Region: id = 7740 start_va = 0x7ffb87a20000 end_va = 0x7ffb87a55fff entry_point = 0x7ffb87a20000 region_type = mapped_file name = "xmllite.dll" filename = "\\Windows\\System32\\xmllite.dll" (normalized: "c:\\windows\\system32\\xmllite.dll") Region: id = 7741 start_va = 0x7ffb87d30000 end_va = 0x7ffb88274fff entry_point = 0x7ffb87d30000 region_type = mapped_file name = "d2d1.dll" filename = "\\Windows\\System32\\d2d1.dll" (normalized: "c:\\windows\\system32\\d2d1.dll") Region: id = 7742 start_va = 0x7ffb88720000 end_va = 0x7ffb88a95fff entry_point = 0x7ffb88720000 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" (normalized: "c:\\windows\\system32\\iertutil.dll") Region: id = 7743 start_va = 0x7ffb88aa0000 end_va = 0x7ffb89a96fff entry_point = 0x7ffb88aa0000 region_type = mapped_file name = "windows.ui.xaml.dll" filename = "\\Windows\\System32\\Windows.UI.Xaml.dll" (normalized: "c:\\windows\\system32\\windows.ui.xaml.dll") Region: id = 7744 start_va = 0x7ffb89aa0000 end_va = 0x7ffb89b3dfff entry_point = 0x7ffb89aa0000 region_type = mapped_file name = "windows.ui.dll" filename = "\\Windows\\System32\\Windows.UI.dll" (normalized: "c:\\windows\\system32\\windows.ui.dll") Region: id = 7745 start_va = 0x7ffb89b40000 end_va = 0x7ffb89c4efff entry_point = 0x7ffb89b40000 region_type = mapped_file name = "mrmcorer.dll" filename = "\\Windows\\System32\\MrmCoreR.dll" (normalized: "c:\\windows\\system32\\mrmcorer.dll") Region: id = 7746 start_va = 0x7ffb89c50000 end_va = 0x7ffb89cb9fff entry_point = 0x7ffb89c50000 region_type = mapped_file name = "wincorlib.dll" filename = "\\Windows\\System32\\wincorlib.dll" (normalized: "c:\\windows\\system32\\wincorlib.dll") Region: id = 7747 start_va = 0x7ffb8a850000 end_va = 0x7ffb8a9d2fff entry_point = 0x7ffb8a850000 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 7748 start_va = 0x7ffb8ab60000 end_va = 0x7ffb8ac90fff entry_point = 0x7ffb8ab60000 region_type = mapped_file name = "wintypes.dll" filename = "\\Windows\\System32\\WinTypes.dll" (normalized: "c:\\windows\\system32\\wintypes.dll") Region: id = 7749 start_va = 0x7ffb8b7a0000 end_va = 0x7ffb8b951fff entry_point = 0x7ffb8b7a0000 region_type = mapped_file name = "windowscodecs.dll" filename = "\\Windows\\System32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll") Region: id = 7750 start_va = 0x7ffb8b960000 end_va = 0x7ffb8bbcdfff entry_point = 0x7ffb8b960000 region_type = mapped_file name = "d3d10warp.dll" filename = "\\Windows\\System32\\d3d10warp.dll" (normalized: "c:\\windows\\system32\\d3d10warp.dll") Region: id = 7751 start_va = 0x7ffb8bbd0000 end_va = 0x7ffb8bc6bfff entry_point = 0x7ffb8bbd0000 region_type = mapped_file name = "dxgi.dll" filename = "\\Windows\\System32\\dxgi.dll" (normalized: "c:\\windows\\system32\\dxgi.dll") Region: id = 7752 start_va = 0x7ffb8bc70000 end_va = 0x7ffb8bf12fff entry_point = 0x7ffb8bc70000 region_type = mapped_file name = "d3d11.dll" filename = "\\Windows\\System32\\d3d11.dll" (normalized: "c:\\windows\\system32\\d3d11.dll") Region: id = 7753 start_va = 0x7ffb8bf20000 end_va = 0x7ffb8bf41fff entry_point = 0x7ffb8bf20000 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\System32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll") Region: id = 7754 start_va = 0x7ffb8bf90000 end_va = 0x7ffb8bff5fff entry_point = 0x7ffb8bf90000 region_type = mapped_file name = "bcp47langs.dll" filename = "\\Windows\\System32\\BCP47Langs.dll" (normalized: "c:\\windows\\system32\\bcp47langs.dll") Region: id = 7755 start_va = 0x7ffb8c000000 end_va = 0x7ffb8c05bfff entry_point = 0x7ffb8c000000 region_type = mapped_file name = "ninput.dll" filename = "\\Windows\\System32\\ninput.dll" (normalized: "c:\\windows\\system32\\ninput.dll") Region: id = 7756 start_va = 0x7ffb8c060000 end_va = 0x7ffb8c127fff entry_point = 0x7ffb8c060000 region_type = mapped_file name = "coremessaging.dll" filename = "\\Windows\\System32\\CoreMessaging.dll" (normalized: "c:\\windows\\system32\\coremessaging.dll") Region: id = 7757 start_va = 0x7ffb8c130000 end_va = 0x7ffb8c200fff entry_point = 0x7ffb8c130000 region_type = mapped_file name = "dcomp.dll" filename = "\\Windows\\System32\\dcomp.dll" (normalized: "c:\\windows\\system32\\dcomp.dll") Region: id = 7758 start_va = 0x7ffb8c780000 end_va = 0x7ffb8c815fff entry_point = 0x7ffb8c780000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 7759 start_va = 0x7ffb8c870000 end_va = 0x7ffb8c95dfff entry_point = 0x7ffb8c870000 region_type = mapped_file name = "twinapi.appcore.dll" filename = "\\Windows\\System32\\twinapi.appcore.dll" (normalized: "c:\\windows\\system32\\twinapi.appcore.dll") Region: id = 7760 start_va = 0x7ffb8d050000 end_va = 0x7ffb8d0a7fff entry_point = 0x7ffb8d050000 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll") Region: id = 7761 start_va = 0x7ffb8d3d0000 end_va = 0x7ffb8d402fff entry_point = 0x7ffb8d3d0000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 7762 start_va = 0x7ffb8d4c0000 end_va = 0x7ffb8d4defff entry_point = 0x7ffb8d4c0000 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 7763 start_va = 0x7ffb8d780000 end_va = 0x7ffb8d796fff entry_point = 0x7ffb8d780000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 7764 start_va = 0x7ffb8d8f0000 end_va = 0x7ffb8d8fafff entry_point = 0x7ffb8d8f0000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 7765 start_va = 0x7ffb8dcd0000 end_va = 0x7ffb8dcf7fff entry_point = 0x7ffb8dcd0000 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 7766 start_va = 0x7ffb8dd00000 end_va = 0x7ffb8dd6afff entry_point = 0x7ffb8dd00000 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 7767 start_va = 0x7ffb8deb0000 end_va = 0x7ffb8dec2fff entry_point = 0x7ffb8deb0000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 7768 start_va = 0x7ffb8def0000 end_va = 0x7ffb8df39fff entry_point = 0x7ffb8def0000 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 7769 start_va = 0x7ffb8df40000 end_va = 0x7ffb8df4efff entry_point = 0x7ffb8df40000 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 7770 start_va = 0x7ffb8e000000 end_va = 0x7ffb8e0b2fff entry_point = 0x7ffb8e000000 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\System32\\SHCore.dll" (normalized: "c:\\windows\\system32\\shcore.dll") Region: id = 7771 start_va = 0x7ffb8e120000 end_va = 0x7ffb8e747fff entry_point = 0x7ffb8e120000 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\System32\\windows.storage.dll" (normalized: "c:\\windows\\system32\\windows.storage.dll") Region: id = 7772 start_va = 0x7ffb8e920000 end_va = 0x7ffb8eafcfff entry_point = 0x7ffb8e920000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 7773 start_va = 0x7ffb8eb50000 end_va = 0x7ffb8ebecfff entry_point = 0x7ffb8eb50000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 7774 start_va = 0x7ffb8ebf0000 end_va = 0x7ffb8ee6bfff entry_point = 0x7ffb8ebf0000 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 7775 start_va = 0x7ffb8ee70000 end_va = 0x7ffb8efbdfff entry_point = 0x7ffb8ee70000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 7776 start_va = 0x7ffb8efc0000 end_va = 0x7ffb8f0e5fff entry_point = 0x7ffb8efc0000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 7777 start_va = 0x7ffb8f100000 end_va = 0x7ffb8f284fff entry_point = 0x7ffb8f100000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 7778 start_va = 0x7ffb8f290000 end_va = 0x7ffb8f2e0fff entry_point = 0x7ffb8f290000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 7779 start_va = 0x7ffb8f2f0000 end_va = 0x7ffb8f395fff entry_point = 0x7ffb8f2f0000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 7780 start_va = 0x7ffb8f3a0000 end_va = 0x7ffb8f4fbfff entry_point = 0x7ffb8f3a0000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 7781 start_va = 0x7ffb8f500000 end_va = 0x7ffb90a24fff entry_point = 0x7ffb8f500000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 7782 start_va = 0x7ffb90a40000 end_va = 0x7ffb90aecfff entry_point = 0x7ffb90a40000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 7783 start_va = 0x7ffb90af0000 end_va = 0x7ffb90b4afff entry_point = 0x7ffb90af0000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 7784 start_va = 0x7ffb90bc0000 end_va = 0x7ffb90c7dfff entry_point = 0x7ffb90bc0000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 7785 start_va = 0x7ffb90f70000 end_va = 0x7ffb90fa5fff entry_point = 0x7ffb90f70000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 7786 start_va = 0x7ffb90fb0000 end_va = 0x7ffb910f0fff entry_point = 0x7ffb90fb0000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 7787 start_va = 0x7ffb91480000 end_va = 0x7ffb91641fff entry_point = 0x7ffb91480000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Thread: id = 185 os_tid = 0x744 Thread: id = 186 os_tid = 0xad0 Thread: id = 187 os_tid = 0xab8 Thread: id = 188 os_tid = 0xaac Thread: id = 189 os_tid = 0xaa8 Thread: id = 190 os_tid = 0xaa4 Thread: id = 191 os_tid = 0xaa0 Thread: id = 192 os_tid = 0xa90 Thread: id = 193 os_tid = 0xa88 Thread: id = 194 os_tid = 0xa84 Thread: id = 195 os_tid = 0xa78 Thread: id = 196 os_tid = 0xa74 Thread: id = 197 os_tid = 0xa64 Thread: id = 198 os_tid = 0xa54 Thread: id = 199 os_tid = 0xa50 Thread: id = 200 os_tid = 0xa4c Thread: id = 201 os_tid = 0xa48 Thread: id = 202 os_tid = 0xa44 Thread: id = 203 os_tid = 0xa40 Thread: id = 204 os_tid = 0xa28 Thread: id = 205 os_tid = 0xa20 Thread: id = 206 os_tid = 0xa1c Thread: id = 207 os_tid = 0xa14 Thread: id = 208 os_tid = 0xa10 Thread: id = 209 os_tid = 0xa0c Thread: id = 210 os_tid = 0xa08 Thread: id = 211 os_tid = 0xa04 Thread: id = 212 os_tid = 0x9fc Thread: id = 213 os_tid = 0x9f4 Thread: id = 214 os_tid = 0x9f0 Thread: id = 215 os_tid = 0x9ec Thread: id = 216 os_tid = 0x9e4 Thread: id = 217 os_tid = 0x9e0 Thread: id = 218 os_tid = 0x9dc Thread: id = 219 os_tid = 0x9d8 Thread: id = 220 os_tid = 0x9a8 Thread: id = 221 os_tid = 0x9a4 Thread: id = 222 os_tid = 0x9a0 Thread: id = 223 os_tid = 0x99c Thread: id = 224 os_tid = 0x998 Thread: id = 225 os_tid = 0x994 Thread: id = 226 os_tid = 0x990 Thread: id = 227 os_tid = 0x988 Thread: id = 228 os_tid = 0x984 Thread: id = 229 os_tid = 0x980 Thread: id = 230 os_tid = 0x2cc Process: id = "20" image_name = "searchui.exe" filename = "c:\\windows\\systemapps\\microsoft.windows.cortana_cw5n1h2txyewy\\searchui.exe" page_root = "0x3f8ee000" os_pid = "0xb0c" os_integrity_level = "0x1000" os_privileges = "0x800000" monitor_reason = "injection" parent_id = "12" os_parent_pid = "0x5dc" cmd_line = "\"C:\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\SearchUI.exe\" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca" cur_dir = "C:\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\" os_username = "LHNIWSJ\\CIiHmnxMn6Ps" os_groups = "LHNIWSJ\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0001b4e9" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 7788 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 7789 start_va = 0xcf61400000 end_va = 0xcf6140ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000cf61400000" filename = "" Region: id = 7790 start_va = 0xcf61410000 end_va = 0xcf61410fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000cf61410000" filename = "" Region: id = 7791 start_va = 0xcf61420000 end_va = 0xcf61433fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000cf61420000" filename = "" Region: id = 7792 start_va = 0xcf61440000 end_va = 0xcf6153ffff entry_point = 0x0 region_type = private name = "private_0x000000cf61440000" filename = "" Region: id = 7793 start_va = 0xcf61540000 end_va = 0xcf61543fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000cf61540000" filename = "" Region: id = 7794 start_va = 0xcf61550000 end_va = 0xcf61551fff entry_point = 0x0 region_type = private name = "private_0x000000cf61550000" filename = "" Region: id = 7795 start_va = 0xcf61560000 end_va = 0xcf61560fff entry_point = 0x0 region_type = private name = "private_0x000000cf61560000" filename = "" Region: id = 7796 start_va = 0xcf61570000 end_va = 0xcf6162dfff entry_point = 0xcf61570000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 7797 start_va = 0xcf61630000 end_va = 0xcf61630fff entry_point = 0x0 region_type = private name = "private_0x000000cf61630000" filename = "" Region: id = 7798 start_va = 0xcf61640000 end_va = 0xcf61640fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000cf61640000" filename = "" Region: id = 7799 start_va = 0xcf61650000 end_va = 0xcf61656fff entry_point = 0x0 region_type = private name = "private_0x000000cf61650000" filename = "" Region: id = 7800 start_va = 0xcf61660000 end_va = 0xcf61689fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000cf61660000" filename = "" Region: id = 7801 start_va = 0xcf61690000 end_va = 0xcf61690fff entry_point = 0xcf61690000 region_type = mapped_file name = "counters.dat" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\counters.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\counters.dat") Region: id = 7802 start_va = 0xcf616a0000 end_va = 0xcf616a0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000cf616a0000" filename = "" Region: id = 7803 start_va = 0xcf616b0000 end_va = 0xcf616b0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000cf616b0000" filename = "" Region: id = 7804 start_va = 0xcf616c0000 end_va = 0xcf616e0fff entry_point = 0xcf616c0000 region_type = mapped_file name = "resources.pri" filename = "\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\resources.pri" (normalized: "c:\\windows\\systemapps\\microsoft.windows.cortana_cw5n1h2txyewy\\resources.pri") Region: id = 7805 start_va = 0xcf616f0000 end_va = 0xcf616f0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000cf616f0000" filename = "" Region: id = 7806 start_va = 0xcf61700000 end_va = 0xcf617fffff entry_point = 0x0 region_type = private name = "private_0x000000cf61700000" filename = "" Region: id = 7807 start_va = 0xcf61800000 end_va = 0xcf618fffff entry_point = 0x0 region_type = private name = "private_0x000000cf61800000" filename = "" Region: id = 7808 start_va = 0xcf61900000 end_va = 0xcf619fffff entry_point = 0x0 region_type = private name = "private_0x000000cf61900000" filename = "" Region: id = 7809 start_va = 0xcf61a00000 end_va = 0xcf61a60fff entry_point = 0xcf61a00000 region_type = mapped_file name = "shell32.dll.mui" filename = "\\Windows\\System32\\en-US\\shell32.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\shell32.dll.mui") Region: id = 7810 start_va = 0xcf61a70000 end_va = 0xcf61a83fff entry_point = 0xcf61a70000 region_type = mapped_file name = "2495906576.pri" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\2495906576.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\windows\\3530508098\\2495906576.pri") Region: id = 7811 start_va = 0xcf61a90000 end_va = 0xcf61a90fff entry_point = 0xcf61a90000 region_type = mapped_file name = "app.xbf" filename = "\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\App.xbf" (normalized: "c:\\windows\\systemapps\\microsoft.windows.cortana_cw5n1h2txyewy\\app.xbf") Region: id = 7812 start_va = 0xcf61aa0000 end_va = 0xcf61aa0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000cf61aa0000" filename = "" Region: id = 7813 start_va = 0xcf61ab0000 end_va = 0xcf61ab0fff entry_point = 0x0 region_type = private name = "private_0x000000cf61ab0000" filename = "" Region: id = 7814 start_va = 0xcf61ac0000 end_va = 0xcf61ac0fff entry_point = 0x0 region_type = private name = "private_0x000000cf61ac0000" filename = "" Region: id = 7815 start_va = 0xcf61ad0000 end_va = 0xcf61ad6fff entry_point = 0x0 region_type = private name = "private_0x000000cf61ad0000" filename = "" Region: id = 7816 start_va = 0xcf61ae0000 end_va = 0xcf61ae0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000cf61ae0000" filename = "" Region: id = 7817 start_va = 0xcf61af0000 end_va = 0xcf61af2fff entry_point = 0xcf61af0000 region_type = mapped_file name = "mswsock.dll.mui" filename = "\\Windows\\System32\\en-US\\mswsock.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\mswsock.dll.mui") Region: id = 7818 start_va = 0xcf61b00000 end_va = 0xcf61bfffff entry_point = 0x0 region_type = private name = "private_0x000000cf61b00000" filename = "" Region: id = 7819 start_va = 0xcf61c00000 end_va = 0xcf61d87fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000cf61c00000" filename = "" Region: id = 7820 start_va = 0xcf61d90000 end_va = 0xcf61f10fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000cf61d90000" filename = "" Region: id = 7821 start_va = 0xcf61f20000 end_va = 0xcf6331ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000cf61f20000" filename = "" Region: id = 7822 start_va = 0xcf63320000 end_va = 0xcf63456fff entry_point = 0xcf63320000 region_type = mapped_file name = "windows.ui.xaml.resources.dll" filename = "\\Windows\\System32\\Windows.UI.Xaml.Resources.dll" (normalized: "c:\\windows\\system32\\windows.ui.xaml.resources.dll") Region: id = 7823 start_va = 0xcf63460000 end_va = 0xcf6353efff entry_point = 0xcf63460000 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui") Region: id = 7824 start_va = 0xcf63540000 end_va = 0xcf6363ffff entry_point = 0x0 region_type = private name = "private_0x000000cf63540000" filename = "" Region: id = 7825 start_va = 0xcf63640000 end_va = 0xcf6373ffff entry_point = 0x0 region_type = private name = "private_0x000000cf63640000" filename = "" Region: id = 7826 start_va = 0xcf63740000 end_va = 0xcf63a76fff entry_point = 0xcf63740000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 7827 start_va = 0xcf63a80000 end_va = 0xcf63b7ffff entry_point = 0x0 region_type = private name = "private_0x000000cf63a80000" filename = "" Region: id = 7828 start_va = 0xcf63b80000 end_va = 0xcf63c7ffff entry_point = 0x0 region_type = private name = "private_0x000000cf63b80000" filename = "" Region: id = 7829 start_va = 0xcf63c80000 end_va = 0xcf63d7ffff entry_point = 0x0 region_type = private name = "private_0x000000cf63c80000" filename = "" Region: id = 7830 start_va = 0xcf63d80000 end_va = 0xcf63e7ffff entry_point = 0x0 region_type = private name = "private_0x000000cf63d80000" filename = "" Region: id = 7831 start_va = 0xcf63e80000 end_va = 0xcf63e86fff entry_point = 0x0 region_type = private name = "private_0x000000cf63e80000" filename = "" Region: id = 7832 start_va = 0xcf63e90000 end_va = 0xcf63ea5fff entry_point = 0xcf63e90000 region_type = mapped_file name = "resources.en-us.pri" filename = "\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\pris\\resources.en-US.pri" (normalized: "c:\\windows\\systemapps\\microsoft.windows.cortana_cw5n1h2txyewy\\pris\\resources.en-us.pri") Region: id = 7833 start_va = 0xcf63eb0000 end_va = 0xcf63eb1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000cf63eb0000" filename = "" Region: id = 7834 start_va = 0xcf63ec0000 end_va = 0xcf63ec9fff entry_point = 0xcf63ec0000 region_type = mapped_file name = "crypt32.dll.mui" filename = "\\Windows\\System32\\en-US\\crypt32.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\crypt32.dll.mui") Region: id = 7835 start_va = 0xcf63ed0000 end_va = 0xcf63ed3fff entry_point = 0xcf63ed0000 region_type = mapped_file name = "dictionary.xbf" filename = "\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Dictionary.xbf" (normalized: "c:\\windows\\systemapps\\microsoft.windows.cortana_cw5n1h2txyewy\\dictionary.xbf") Region: id = 7836 start_va = 0xcf63ee0000 end_va = 0xcf63ee4fff entry_point = 0xcf63ee0000 region_type = mapped_file name = "reactivecat1themeresources.xbf" filename = "\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Views\\ReactiveCat1ThemeResources.xbf" (normalized: "c:\\windows\\systemapps\\microsoft.windows.cortana_cw5n1h2txyewy\\views\\reactivecat1themeresources.xbf") Region: id = 7837 start_va = 0xcf63ef0000 end_va = 0xcf63ef1fff entry_point = 0xcf63ef0000 region_type = mapped_file name = "speechtextinputthemeresources.xbf" filename = "\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Views\\SpeechTextInputThemeResources.xbf" (normalized: "c:\\windows\\systemapps\\microsoft.windows.cortana_cw5n1h2txyewy\\views\\speechtextinputthemeresources.xbf") Region: id = 7838 start_va = 0xcf63f00000 end_va = 0xcf63ffffff entry_point = 0x0 region_type = private name = "private_0x000000cf63f00000" filename = "" Region: id = 7839 start_va = 0xcf64000000 end_va = 0xcf640fffff entry_point = 0x0 region_type = private name = "private_0x000000cf64000000" filename = "" Region: id = 7840 start_va = 0xcf64100000 end_va = 0xcf641fffff entry_point = 0x0 region_type = private name = "private_0x000000cf64100000" filename = "" Region: id = 7841 start_va = 0xcf64200000 end_va = 0xcf642fffff entry_point = 0x0 region_type = private name = "private_0x000000cf64200000" filename = "" Region: id = 7842 start_va = 0xcf64300000 end_va = 0xcf643fffff entry_point = 0x0 region_type = private name = "private_0x000000cf64300000" filename = "" Region: id = 7843 start_va = 0xcf64400000 end_va = 0xcf644fffff entry_point = 0x0 region_type = private name = "private_0x000000cf64400000" filename = "" Region: id = 7844 start_va = 0xcf64500000 end_va = 0xcf645fffff entry_point = 0x0 region_type = private name = "private_0x000000cf64500000" filename = "" Region: id = 7845 start_va = 0xcf64600000 end_va = 0xcf64dfffff entry_point = 0x0 region_type = private name = "private_0x000000cf64600000" filename = "" Region: id = 7846 start_va = 0xcf64e00000 end_va = 0xcf64efffff entry_point = 0x0 region_type = private name = "private_0x000000cf64e00000" filename = "" Region: id = 7847 start_va = 0xcf64f00000 end_va = 0xcf64ffffff entry_point = 0x0 region_type = private name = "private_0x000000cf64f00000" filename = "" Region: id = 7848 start_va = 0xcf65000000 end_va = 0xcf650fffff entry_point = 0x0 region_type = private name = "private_0x000000cf65000000" filename = "" Region: id = 7849 start_va = 0xcf65100000 end_va = 0xcf651fffff entry_point = 0x0 region_type = private name = "private_0x000000cf65100000" filename = "" Region: id = 7850 start_va = 0xcf65200000 end_va = 0xcf652fffff entry_point = 0x0 region_type = private name = "private_0x000000cf65200000" filename = "" Region: id = 7851 start_va = 0xcf65300000 end_va = 0xcf653fffff entry_point = 0x0 region_type = private name = "private_0x000000cf65300000" filename = "" Region: id = 7852 start_va = 0xcf65400000 end_va = 0xcf65400fff entry_point = 0xcf65400000 region_type = mapped_file name = "cortanawindow.xbf" filename = "\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Views\\CortanaWindow.xbf" (normalized: "c:\\windows\\systemapps\\microsoft.windows.cortana_cw5n1h2txyewy\\views\\cortanawindow.xbf") Region: id = 7853 start_va = 0xcf65410000 end_va = 0xcf65417fff entry_point = 0xcf65410000 region_type = mapped_file name = "chrome.xbf" filename = "\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Views\\Chrome.xbf" (normalized: "c:\\windows\\systemapps\\microsoft.windows.cortana_cw5n1h2txyewy\\views\\chrome.xbf") Region: id = 7854 start_va = 0xcf65420000 end_va = 0xcf65421fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000cf65420000" filename = "" Region: id = 7855 start_va = 0xcf65430000 end_va = 0xcf65431fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000cf65430000" filename = "" Region: id = 7856 start_va = 0xcf65440000 end_va = 0xcf65440fff entry_point = 0xcf65440000 region_type = mapped_file name = "msxml6r.dll" filename = "\\Windows\\System32\\msxml6r.dll" (normalized: "c:\\windows\\system32\\msxml6r.dll") Region: id = 7857 start_va = 0xcf65450000 end_va = 0xcf65507fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000cf65450000" filename = "" Region: id = 7858 start_va = 0xcf65510000 end_va = 0xcf65513fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000cf65510000" filename = "" Region: id = 7859 start_va = 0xcf65520000 end_va = 0xcf65520fff entry_point = 0xcf65520000 region_type = mapped_file name = "homeburgermenucontrol.xbf" filename = "\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Views\\HomeburgerMenuControl.xbf" (normalized: "c:\\windows\\systemapps\\microsoft.windows.cortana_cw5n1h2txyewy\\views\\homeburgermenucontrol.xbf") Region: id = 7860 start_va = 0xcf65530000 end_va = 0xcf65531fff entry_point = 0xcf65530000 region_type = mapped_file name = "greetingscontrol.xbf" filename = "\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Views\\GreetingsControl.xbf" (normalized: "c:\\windows\\systemapps\\microsoft.windows.cortana_cw5n1h2txyewy\\views\\greetingscontrol.xbf") Region: id = 7861 start_va = 0xcf65540000 end_va = 0xcf65540fff entry_point = 0xcf65540000 region_type = mapped_file name = "hostedwebviewcontrol.xbf" filename = "\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Views\\HostedWebViewControl.xbf" (normalized: "c:\\windows\\systemapps\\microsoft.windows.cortana_cw5n1h2txyewy\\views\\hostedwebviewcontrol.xbf") Region: id = 7862 start_va = 0xcf65550000 end_va = 0xcf65551fff entry_point = 0xcf65550000 region_type = mapped_file name = "speechtextinputcontrol.xbf" filename = "\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Views\\SpeechTextInputControl.xbf" (normalized: "c:\\windows\\systemapps\\microsoft.windows.cortana_cw5n1h2txyewy\\views\\speechtextinputcontrol.xbf") Region: id = 7863 start_va = 0xcf65560000 end_va = 0xcf65560fff entry_point = 0xcf65560000 region_type = mapped_file name = "searchboxcontrol.xbf" filename = "\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Views\\SearchBoxControl.xbf" (normalized: "c:\\windows\\systemapps\\microsoft.windows.cortana_cw5n1h2txyewy\\views\\searchboxcontrol.xbf") Region: id = 7864 start_va = 0xcf65570000 end_va = 0xcf655e5fff entry_point = 0xcf65570000 region_type = mapped_file name = "~fontcache-system.dat" filename = "\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\FontCache\\~FontCache-System.dat" (normalized: "c:\\windows\\serviceprofiles\\localservice\\appdata\\local\\fontcache\\~fontcache-system.dat") Region: id = 7865 start_va = 0xcf655f0000 end_va = 0xcf655f6fff entry_point = 0x0 region_type = private name = "private_0x000000cf655f0000" filename = "" Region: id = 7866 start_va = 0xcf65600000 end_va = 0xcf65606fff entry_point = 0x0 region_type = private name = "private_0x000000cf65600000" filename = "" Region: id = 7867 start_va = 0xcf65610000 end_va = 0xcf656eefff entry_point = 0xcf65610000 region_type = mapped_file name = "segoeui.ttf" filename = "\\Windows\\Fonts\\segoeui.ttf" (normalized: "c:\\windows\\fonts\\segoeui.ttf") Region: id = 7868 start_va = 0xcf656f0000 end_va = 0xcf656f9fff entry_point = 0xcf656f0000 region_type = mapped_file name = "windows.ui.xaml.dll.mui" filename = "\\Windows\\System32\\en-US\\windows.ui.xaml.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\windows.ui.xaml.dll.mui") Region: id = 7869 start_va = 0xcf65700000 end_va = 0xcf657fffff entry_point = 0x0 region_type = private name = "private_0x000000cf65700000" filename = "" Region: id = 7870 start_va = 0xcf65800000 end_va = 0xcf658fffff entry_point = 0x0 region_type = private name = "private_0x000000cf65800000" filename = "" Region: id = 7871 start_va = 0xcf65900000 end_va = 0xcf659fffff entry_point = 0x0 region_type = private name = "private_0x000000cf65900000" filename = "" Region: id = 7872 start_va = 0xcf65a00000 end_va = 0xcf65afffff entry_point = 0x0 region_type = private name = "private_0x000000cf65a00000" filename = "" Region: id = 7873 start_va = 0xcf65b00000 end_va = 0xcf66afffff entry_point = 0xcf65b00000 region_type = mapped_file name = "~fontcache-fontface.dat" filename = "\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\FontCache\\~FontCache-FontFace.dat" (normalized: "c:\\windows\\serviceprofiles\\localservice\\appdata\\local\\fontcache\\~fontcache-fontface.dat") Region: id = 7874 start_va = 0xcf66b00000 end_va = 0xcf66bfffff entry_point = 0x0 region_type = private name = "private_0x000000cf66b00000" filename = "" Region: id = 7875 start_va = 0xcf66c00000 end_va = 0xcf673fffff entry_point = 0xcf66c00000 region_type = mapped_file name = "~fontcache-s-1-5-21-1462094071-1423818996-289466292-1000.dat" filename = "\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\FontCache\\~FontCache-S-1-5-21-1462094071-1423818996-289466292-1000.dat" (normalized: "c:\\windows\\serviceprofiles\\localservice\\appdata\\local\\fontcache\\~fontcache-s-1-5-21-1462094071-1423818996-289466292-1000.dat") Region: id = 7876 start_va = 0xcf67400000 end_va = 0xcf674fffff entry_point = 0x0 region_type = private name = "private_0x000000cf67400000" filename = "" Region: id = 7877 start_va = 0xcf67500000 end_va = 0xcf675fffff entry_point = 0x0 region_type = private name = "private_0x000000cf67500000" filename = "" Region: id = 7878 start_va = 0xcf67600000 end_va = 0xcf67600fff entry_point = 0x0 region_type = private name = "private_0x000000cf67600000" filename = "" Region: id = 7879 start_va = 0xcf67610000 end_va = 0xcf67610fff entry_point = 0x0 region_type = private name = "private_0x000000cf67610000" filename = "" Region: id = 7880 start_va = 0xcf67620000 end_va = 0xcf67623fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000cf67620000" filename = "" Region: id = 7881 start_va = 0xcf67630000 end_va = 0xcf6772ffff entry_point = 0x0 region_type = private name = "private_0x000000cf67630000" filename = "" Region: id = 7882 start_va = 0xcf67730000 end_va = 0xd76772ffff entry_point = 0x0 region_type = private name = "private_0x000000cf67730000" filename = "" Region: id = 7883 start_va = 0xd767730000 end_va = 0xd76774ffff entry_point = 0x0 region_type = private name = "private_0x000000d767730000" filename = "" Region: id = 7884 start_va = 0xd767750000 end_va = 0xd76779ffff entry_point = 0x0 region_type = private name = "private_0x000000d767750000" filename = "" Region: id = 7885 start_va = 0xd7677a0000 end_va = 0xd7677a0fff entry_point = 0x0 region_type = private name = "private_0x000000d7677a0000" filename = "" Region: id = 7886 start_va = 0xd7677b0000 end_va = 0xd7677b0fff entry_point = 0x0 region_type = private name = "private_0x000000d7677b0000" filename = "" Region: id = 7887 start_va = 0xd7677c0000 end_va = 0xd7677c0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d7677c0000" filename = "" Region: id = 7888 start_va = 0xd7677d0000 end_va = 0xd7677d0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d7677d0000" filename = "" Region: id = 7889 start_va = 0xd7677e0000 end_va = 0xd7677e0fff entry_point = 0x0 region_type = private name = "private_0x000000d7677e0000" filename = "" Region: id = 7890 start_va = 0xd7677f0000 end_va = 0xd7677fffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d7677f0000" filename = "" Region: id = 7891 start_va = 0xd767800000 end_va = 0xd7678fffff entry_point = 0x0 region_type = private name = "private_0x000000d767800000" filename = "" Region: id = 7892 start_va = 0xd767900000 end_va = 0xd7679fffff entry_point = 0x0 region_type = private name = "private_0x000000d767900000" filename = "" Region: id = 7893 start_va = 0xd767a00000 end_va = 0xd767a5ffff entry_point = 0xd767a00000 region_type = mapped_file name = "edgehtml.dll.mui" filename = "\\Windows\\System32\\en-US\\edgehtml.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\edgehtml.dll.mui") Region: id = 7894 start_va = 0xd767a60000 end_va = 0xd767a6ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d767a60000" filename = "" Region: id = 7895 start_va = 0xd767a70000 end_va = 0xd767a76fff entry_point = 0x0 region_type = private name = "private_0x000000d767a70000" filename = "" Region: id = 7896 start_va = 0xd767a80000 end_va = 0xd767b7ffff entry_point = 0x0 region_type = private name = "private_0x000000d767a80000" filename = "" Region: id = 7897 start_va = 0xd767b80000 end_va = 0xd767c7ffff entry_point = 0x0 region_type = private name = "private_0x000000d767b80000" filename = "" Region: id = 7898 start_va = 0xd767c80000 end_va = 0xd767d7ffff entry_point = 0x0 region_type = private name = "private_0x000000d767c80000" filename = "" Region: id = 7899 start_va = 0xd767d80000 end_va = 0xd767e7ffff entry_point = 0x0 region_type = private name = "private_0x000000d767d80000" filename = "" Region: id = 7900 start_va = 0xd767e80000 end_va = 0xd767f7ffff entry_point = 0x0 region_type = private name = "private_0x000000d767e80000" filename = "" Region: id = 7901 start_va = 0xd767f80000 end_va = 0xd76807ffff entry_point = 0x0 region_type = private name = "private_0x000000d767f80000" filename = "" Region: id = 7902 start_va = 0xd768080000 end_va = 0xd76809ffff entry_point = 0x0 region_type = private name = "private_0x000000d768080000" filename = "" Region: id = 7903 start_va = 0xd7680a0000 end_va = 0xd7680bffff entry_point = 0x0 region_type = private name = "private_0x000000d7680a0000" filename = "" Region: id = 7904 start_va = 0xd7680c0000 end_va = 0xd7680dffff entry_point = 0x0 region_type = private name = "private_0x000000d7680c0000" filename = "" Region: id = 7905 start_va = 0xd7680e0000 end_va = 0xd7680fffff entry_point = 0x0 region_type = private name = "private_0x000000d7680e0000" filename = "" Region: id = 7906 start_va = 0xd768100000 end_va = 0xd7681fffff entry_point = 0x0 region_type = private name = "private_0x000000d768100000" filename = "" Region: id = 7907 start_va = 0xd768200000 end_va = 0xd76824ffff entry_point = 0x0 region_type = private name = "private_0x000000d768200000" filename = "" Region: id = 7908 start_va = 0xd768250000 end_va = 0xd76834ffff entry_point = 0x0 region_type = private name = "private_0x000000d768250000" filename = "" Region: id = 7909 start_va = 0xd768350000 end_va = 0xd76844ffff entry_point = 0x0 region_type = private name = "private_0x000000d768350000" filename = "" Region: id = 7910 start_va = 0xd768450000 end_va = 0xd76846ffff entry_point = 0x0 region_type = private name = "private_0x000000d768450000" filename = "" Region: id = 7911 start_va = 0xd768470000 end_va = 0xd76848ffff entry_point = 0x0 region_type = private name = "private_0x000000d768470000" filename = "" Region: id = 7912 start_va = 0xd768490000 end_va = 0xd7684a0fff entry_point = 0xd768490000 region_type = mapped_file name = "cortana.internal.search.winmd" filename = "\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Cortana.Internal.Search.winmd" (normalized: "c:\\windows\\systemapps\\microsoft.windows.cortana_cw5n1h2txyewy\\cortana.internal.search.winmd") Region: id = 7913 start_va = 0xd7684b0000 end_va = 0xd7684b7fff entry_point = 0xd7684b0000 region_type = mapped_file name = "cortana.search.winmd" filename = "\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Cortana.Search.winmd" (normalized: "c:\\windows\\systemapps\\microsoft.windows.cortana_cw5n1h2txyewy\\cortana.search.winmd") Region: id = 7914 start_va = 0xd7684c0000 end_va = 0xd7684dffff entry_point = 0x0 region_type = private name = "private_0x000000d7684c0000" filename = "" Region: id = 7915 start_va = 0xd7684e0000 end_va = 0xd7684eefff entry_point = 0xd7684e0000 region_type = mapped_file name = "windows.foundation.winmd" filename = "\\Windows\\System32\\WinMetadata\\Windows.Foundation.winmd" (normalized: "c:\\windows\\system32\\winmetadata\\windows.foundation.winmd") Region: id = 7916 start_va = 0xd7684f0000 end_va = 0xd76850dfff entry_point = 0xd7684f0000 region_type = mapped_file name = "windows.security.winmd" filename = "\\Windows\\System32\\WinMetadata\\Windows.Security.winmd" (normalized: "c:\\windows\\system32\\winmetadata\\windows.security.winmd") Region: id = 7917 start_va = 0xd768510000 end_va = 0xd76860ffff entry_point = 0x0 region_type = private name = "private_0x000000d768510000" filename = "" Region: id = 7918 start_va = 0xd768610000 end_va = 0xd76862ffff entry_point = 0x0 region_type = private name = "private_0x000000d768610000" filename = "" Region: id = 7919 start_va = 0xd768630000 end_va = 0xd76864afff entry_point = 0xd768630000 region_type = mapped_file name = "windows.storage.winmd" filename = "\\Windows\\System32\\WinMetadata\\Windows.Storage.winmd" (normalized: "c:\\windows\\system32\\winmetadata\\windows.storage.winmd") Region: id = 7920 start_va = 0xd768650000 end_va = 0xd76866ffff entry_point = 0x0 region_type = private name = "private_0x000000d768650000" filename = "" Region: id = 7921 start_va = 0xd768670000 end_va = 0xd768679fff entry_point = 0xd768670000 region_type = mapped_file name = "chakra.dll.mui" filename = "\\Windows\\System32\\en-US\\Chakra.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\chakra.dll.mui") Region: id = 7922 start_va = 0xd768680000 end_va = 0xd76869ffff entry_point = 0x0 region_type = private name = "private_0x000000d768680000" filename = "" Region: id = 7923 start_va = 0xd7686c0000 end_va = 0xd7686dffff entry_point = 0x0 region_type = private name = "private_0x000000d7686c0000" filename = "" Region: id = 7924 start_va = 0xd768720000 end_va = 0xd76873ffff entry_point = 0x0 region_type = private name = "private_0x000000d768720000" filename = "" Region: id = 7925 start_va = 0xd768740000 end_va = 0xd76875ffff entry_point = 0x0 region_type = private name = "private_0x000000d768740000" filename = "" Region: id = 7926 start_va = 0xd768760000 end_va = 0xd76885ffff entry_point = 0x0 region_type = private name = "private_0x000000d768760000" filename = "" Region: id = 7927 start_va = 0xd768880000 end_va = 0xd76889ffff entry_point = 0x0 region_type = private name = "private_0x000000d768880000" filename = "" Region: id = 7928 start_va = 0xd7688a0000 end_va = 0xd7688bffff entry_point = 0x0 region_type = private name = "private_0x000000d7688a0000" filename = "" Region: id = 7929 start_va = 0xd7688c0000 end_va = 0xd7688dffff entry_point = 0x0 region_type = private name = "private_0x000000d7688c0000" filename = "" Region: id = 7930 start_va = 0xd7688e0000 end_va = 0xd7688fffff entry_point = 0x0 region_type = private name = "private_0x000000d7688e0000" filename = "" Region: id = 7931 start_va = 0xd768900000 end_va = 0xd7689fffff entry_point = 0x0 region_type = private name = "private_0x000000d768900000" filename = "" Region: id = 7932 start_va = 0xd768a00000 end_va = 0xd768afffff entry_point = 0x0 region_type = private name = "private_0x000000d768a00000" filename = "" Region: id = 7933 start_va = 0xd768b00000 end_va = 0xd768bfffff entry_point = 0x0 region_type = private name = "private_0x000000d768b00000" filename = "" Region: id = 7934 start_va = 0xd768c00000 end_va = 0xd768cfffff entry_point = 0x0 region_type = private name = "private_0x000000d768c00000" filename = "" Region: id = 7935 start_va = 0xd768d00000 end_va = 0xd768d1ffff entry_point = 0x0 region_type = private name = "private_0x000000d768d00000" filename = "" Region: id = 7936 start_va = 0xd768d20000 end_va = 0xd768d3ffff entry_point = 0x0 region_type = private name = "private_0x000000d768d20000" filename = "" Region: id = 7937 start_va = 0xd768d40000 end_va = 0xd768d5ffff entry_point = 0x0 region_type = private name = "private_0x000000d768d40000" filename = "" Region: id = 7938 start_va = 0xd768d60000 end_va = 0xd768d7ffff entry_point = 0x0 region_type = private name = "private_0x000000d768d60000" filename = "" Region: id = 7939 start_va = 0xd768d80000 end_va = 0xd768d9ffff entry_point = 0x0 region_type = private name = "private_0x000000d768d80000" filename = "" Region: id = 7940 start_va = 0xd768e20000 end_va = 0xd768e3ffff entry_point = 0x0 region_type = private name = "private_0x000000d768e20000" filename = "" Region: id = 7941 start_va = 0xd768e40000 end_va = 0xd768e5ffff entry_point = 0x0 region_type = private name = "private_0x000000d768e40000" filename = "" Region: id = 7942 start_va = 0xd768e80000 end_va = 0xd768e9ffff entry_point = 0x0 region_type = private name = "private_0x000000d768e80000" filename = "" Region: id = 7943 start_va = 0xd768ec0000 end_va = 0xd768edffff entry_point = 0x0 region_type = private name = "private_0x000000d768ec0000" filename = "" Region: id = 7944 start_va = 0xd768ee0000 end_va = 0xd768efffff entry_point = 0x0 region_type = private name = "private_0x000000d768ee0000" filename = "" Region: id = 7945 start_va = 0xd768f00000 end_va = 0xd768f1ffff entry_point = 0x0 region_type = private name = "private_0x000000d768f00000" filename = "" Region: id = 7946 start_va = 0xd768f20000 end_va = 0xd768f3ffff entry_point = 0x0 region_type = private name = "private_0x000000d768f20000" filename = "" Region: id = 7947 start_va = 0xd768f40000 end_va = 0xd768f5ffff entry_point = 0x0 region_type = private name = "private_0x000000d768f40000" filename = "" Region: id = 7948 start_va = 0xd768f60000 end_va = 0xd768f7ffff entry_point = 0x0 region_type = private name = "private_0x000000d768f60000" filename = "" Region: id = 7949 start_va = 0xd768f80000 end_va = 0xd768f9ffff entry_point = 0x0 region_type = private name = "private_0x000000d768f80000" filename = "" Region: id = 7950 start_va = 0xd768fa0000 end_va = 0xd768fbffff entry_point = 0x0 region_type = private name = "private_0x000000d768fa0000" filename = "" Region: id = 7951 start_va = 0xd768fc0000 end_va = 0xd768fdffff entry_point = 0x0 region_type = private name = "private_0x000000d768fc0000" filename = "" Region: id = 7952 start_va = 0xd768fe0000 end_va = 0xd7690dffff entry_point = 0x0 region_type = private name = "private_0x000000d768fe0000" filename = "" Region: id = 7953 start_va = 0xd7690e0000 end_va = 0xd7690fffff entry_point = 0x0 region_type = private name = "private_0x000000d7690e0000" filename = "" Region: id = 7954 start_va = 0xd769100000 end_va = 0xd7691fffff entry_point = 0x0 region_type = private name = "private_0x000000d769100000" filename = "" Region: id = 7955 start_va = 0xd769200000 end_va = 0xd7692fffff entry_point = 0x0 region_type = private name = "private_0x000000d769200000" filename = "" Region: id = 7956 start_va = 0xd769300000 end_va = 0xd76931ffff entry_point = 0x0 region_type = private name = "private_0x000000d769300000" filename = "" Region: id = 7957 start_va = 0xd769320000 end_va = 0xd76933ffff entry_point = 0x0 region_type = private name = "private_0x000000d769320000" filename = "" Region: id = 7958 start_va = 0xd769340000 end_va = 0xd76935ffff entry_point = 0x0 region_type = private name = "private_0x000000d769340000" filename = "" Region: id = 7959 start_va = 0xd769360000 end_va = 0xd76937ffff entry_point = 0x0 region_type = private name = "private_0x000000d769360000" filename = "" Region: id = 7960 start_va = 0xd7693e0000 end_va = 0xd7693fffff entry_point = 0x0 region_type = private name = "private_0x000000d7693e0000" filename = "" Region: id = 7961 start_va = 0xd769440000 end_va = 0xd76953ffff entry_point = 0x0 region_type = private name = "private_0x000000d769440000" filename = "" Region: id = 7962 start_va = 0xd769540000 end_va = 0xd76955ffff entry_point = 0x0 region_type = private name = "private_0x000000d769540000" filename = "" Region: id = 7963 start_va = 0xd7695a0000 end_va = 0xd7695bffff entry_point = 0x0 region_type = private name = "private_0x000000d7695a0000" filename = "" Region: id = 7964 start_va = 0xd7695c0000 end_va = 0xd7695dffff entry_point = 0x0 region_type = private name = "private_0x000000d7695c0000" filename = "" Region: id = 7965 start_va = 0xd7695e0000 end_va = 0xd7695fffff entry_point = 0x0 region_type = private name = "private_0x000000d7695e0000" filename = "" Region: id = 7966 start_va = 0xd769600000 end_va = 0xd76961ffff entry_point = 0x0 region_type = private name = "private_0x000000d769600000" filename = "" Region: id = 7967 start_va = 0xd769620000 end_va = 0xd76963ffff entry_point = 0x0 region_type = private name = "private_0x000000d769620000" filename = "" Region: id = 7968 start_va = 0xd769640000 end_va = 0xd76965ffff entry_point = 0x0 region_type = private name = "private_0x000000d769640000" filename = "" Region: id = 7969 start_va = 0xd769660000 end_va = 0xd76967ffff entry_point = 0x0 region_type = private name = "private_0x000000d769660000" filename = "" Region: id = 7970 start_va = 0xd769680000 end_va = 0xd76969ffff entry_point = 0x0 region_type = private name = "private_0x000000d769680000" filename = "" Region: id = 7971 start_va = 0xd7696a0000 end_va = 0xd7696bffff entry_point = 0x0 region_type = private name = "private_0x000000d7696a0000" filename = "" Region: id = 7972 start_va = 0xd7696c0000 end_va = 0xd7696dffff entry_point = 0x0 region_type = private name = "private_0x000000d7696c0000" filename = "" Region: id = 7973 start_va = 0xd7696e0000 end_va = 0xd7696fffff entry_point = 0x0 region_type = private name = "private_0x000000d7696e0000" filename = "" Region: id = 7974 start_va = 0xd769720000 end_va = 0xd76973ffff entry_point = 0x0 region_type = private name = "private_0x000000d769720000" filename = "" Region: id = 7975 start_va = 0xd769740000 end_va = 0xd76975ffff entry_point = 0x0 region_type = private name = "private_0x000000d769740000" filename = "" Region: id = 7976 start_va = 0xd769760000 end_va = 0xd76977ffff entry_point = 0x0 region_type = private name = "private_0x000000d769760000" filename = "" Region: id = 7977 start_va = 0xd769780000 end_va = 0xd76979ffff entry_point = 0x0 region_type = private name = "private_0x000000d769780000" filename = "" Region: id = 7978 start_va = 0xd7697a0000 end_va = 0xd7697bffff entry_point = 0x0 region_type = private name = "private_0x000000d7697a0000" filename = "" Region: id = 7979 start_va = 0xd7697c0000 end_va = 0xd7697dffff entry_point = 0x0 region_type = private name = "private_0x000000d7697c0000" filename = "" Region: id = 7980 start_va = 0xd7697e0000 end_va = 0xd7697fffff entry_point = 0x0 region_type = private name = "private_0x000000d7697e0000" filename = "" Region: id = 7981 start_va = 0xd769800000 end_va = 0xd7698fffff entry_point = 0x0 region_type = private name = "private_0x000000d769800000" filename = "" Region: id = 7982 start_va = 0xd769900000 end_va = 0xd76991ffff entry_point = 0x0 region_type = private name = "private_0x000000d769900000" filename = "" Region: id = 7983 start_va = 0xd769920000 end_va = 0xd76993ffff entry_point = 0x0 region_type = private name = "private_0x000000d769920000" filename = "" Region: id = 7984 start_va = 0xd769960000 end_va = 0xd76997ffff entry_point = 0x0 region_type = private name = "private_0x000000d769960000" filename = "" Region: id = 7985 start_va = 0xd769980000 end_va = 0xd76999ffff entry_point = 0x0 region_type = private name = "private_0x000000d769980000" filename = "" Region: id = 7986 start_va = 0xd7699a0000 end_va = 0xd7699bffff entry_point = 0x0 region_type = private name = "private_0x000000d7699a0000" filename = "" Region: id = 7987 start_va = 0xd7699c0000 end_va = 0xd7699dffff entry_point = 0x0 region_type = private name = "private_0x000000d7699c0000" filename = "" Region: id = 7988 start_va = 0xd769a80000 end_va = 0xd769a9ffff entry_point = 0x0 region_type = private name = "private_0x000000d769a80000" filename = "" Region: id = 7989 start_va = 0xd769aa0000 end_va = 0xd769aa1fff entry_point = 0x0 region_type = private name = "private_0x000000d769aa0000" filename = "" Region: id = 7990 start_va = 0xd769ab0000 end_va = 0xd769ab6fff entry_point = 0x0 region_type = private name = "private_0x000000d769ab0000" filename = "" Region: id = 7991 start_va = 0xd769ac0000 end_va = 0xd769adffff entry_point = 0x0 region_type = private name = "private_0x000000d769ac0000" filename = "" Region: id = 7992 start_va = 0xd769ae0000 end_va = 0xd769afffff entry_point = 0x0 region_type = private name = "private_0x000000d769ae0000" filename = "" Region: id = 7993 start_va = 0xd769b00000 end_va = 0xd769bfffff entry_point = 0x0 region_type = private name = "private_0x000000d769b00000" filename = "" Region: id = 7994 start_va = 0xd769c00000 end_va = 0xd769cfffff entry_point = 0x0 region_type = private name = "private_0x000000d769c00000" filename = "" Region: id = 7995 start_va = 0xd769d00000 end_va = 0xd769dfffff entry_point = 0x0 region_type = private name = "private_0x000000d769d00000" filename = "" Region: id = 7996 start_va = 0xd769e00000 end_va = 0xd769efffff entry_point = 0x0 region_type = private name = "private_0x000000d769e00000" filename = "" Region: id = 7997 start_va = 0xd769f00000 end_va = 0xd769ffffff entry_point = 0x0 region_type = private name = "private_0x000000d769f00000" filename = "" Region: id = 7998 start_va = 0xd76a000000 end_va = 0xd76a0fffff entry_point = 0x0 region_type = private name = "private_0x000000d76a000000" filename = "" Region: id = 7999 start_va = 0xd76a100000 end_va = 0xd76a2fffff entry_point = 0x0 region_type = private name = "private_0x000000d76a100000" filename = "" Region: id = 8000 start_va = 0xd76a300000 end_va = 0xd76a3fffff entry_point = 0x0 region_type = private name = "private_0x000000d76a300000" filename = "" Region: id = 8001 start_va = 0xd76a400000 end_va = 0xd76a400fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d76a400000" filename = "" Region: id = 8002 start_va = 0xd76a410000 end_va = 0xd76a410fff entry_point = 0x0 region_type = private name = "private_0x000000d76a410000" filename = "" Region: id = 8003 start_va = 0xd76a420000 end_va = 0xd76a42ffff entry_point = 0x0 region_type = private name = "private_0x000000d76a420000" filename = "" Region: id = 8004 start_va = 0xd76a430000 end_va = 0xd76a43ffff entry_point = 0x0 region_type = private name = "private_0x000000d76a430000" filename = "" Region: id = 8005 start_va = 0xd76a440000 end_va = 0xd76a44ffff entry_point = 0x0 region_type = private name = "private_0x000000d76a440000" filename = "" Region: id = 8006 start_va = 0xd76a450000 end_va = 0xd76a453fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d76a450000" filename = "" Region: id = 8007 start_va = 0xd76a460000 end_va = 0xd76a47ffff entry_point = 0x0 region_type = private name = "private_0x000000d76a460000" filename = "" Region: id = 8008 start_va = 0xd76a480000 end_va = 0xd76a49ffff entry_point = 0x0 region_type = private name = "private_0x000000d76a480000" filename = "" Region: id = 8009 start_va = 0xd76a4e0000 end_va = 0xd76a4eefff entry_point = 0xd76a4e0000 region_type = mapped_file name = "windows.system.winmd" filename = "\\Windows\\System32\\WinMetadata\\Windows.System.winmd" (normalized: "c:\\windows\\system32\\winmetadata\\windows.system.winmd") Region: id = 8010 start_va = 0xd76a500000 end_va = 0xd76a5fffff entry_point = 0x0 region_type = private name = "private_0x000000d76a500000" filename = "" Region: id = 8011 start_va = 0xd76a600000 end_va = 0xd76a6fffff entry_point = 0x0 region_type = private name = "private_0x000000d76a600000" filename = "" Region: id = 8012 start_va = 0xd76a700000 end_va = 0xd76a73ffff entry_point = 0xd76a700000 region_type = mapped_file name = "windows.ui.winmd" filename = "\\Windows\\System32\\WinMetadata\\Windows.UI.winmd" (normalized: "c:\\windows\\system32\\winmetadata\\windows.ui.winmd") Region: id = 8013 start_va = 0xd76a740000 end_va = 0xd76a7d9fff entry_point = 0x0 region_type = private name = "private_0x000000d76a740000" filename = "" Region: id = 8014 start_va = 0xd76a7e0000 end_va = 0xd76a7fafff entry_point = 0xd76a7e0000 region_type = mapped_file name = "windows.web.winmd" filename = "\\Windows\\System32\\WinMetadata\\Windows.Web.winmd" (normalized: "c:\\windows\\system32\\winmetadata\\windows.web.winmd") Region: id = 8015 start_va = 0xd76a800000 end_va = 0xd76a810fff entry_point = 0xd76a800000 region_type = mapped_file name = "c_20127.nls" filename = "\\Windows\\System32\\C_20127.NLS" (normalized: "c:\\windows\\system32\\c_20127.nls") Region: id = 8016 start_va = 0xd76a8e0000 end_va = 0xd76a8fffff entry_point = 0x0 region_type = private name = "private_0x000000d76a8e0000" filename = "" Region: id = 8017 start_va = 0xd76a900000 end_va = 0xd76a9fffff entry_point = 0x0 region_type = private name = "private_0x000000d76a900000" filename = "" Region: id = 8018 start_va = 0xd76aa00000 end_va = 0xd76aafffff entry_point = 0x0 region_type = private name = "private_0x000000d76aa00000" filename = "" Region: id = 8019 start_va = 0xd76ab00000 end_va = 0xd76abfffff entry_point = 0x0 region_type = private name = "private_0x000000d76ab00000" filename = "" Region: id = 8020 start_va = 0xd76ac00000 end_va = 0xd76ac1ffff entry_point = 0x0 region_type = private name = "private_0x000000d76ac00000" filename = "" Region: id = 8021 start_va = 0xd76ac20000 end_va = 0xd76ac3ffff entry_point = 0x0 region_type = private name = "private_0x000000d76ac20000" filename = "" Region: id = 8022 start_va = 0xd76ac40000 end_va = 0xd76ac5ffff entry_point = 0x0 region_type = private name = "private_0x000000d76ac40000" filename = "" Region: id = 8023 start_va = 0xd76ac60000 end_va = 0xd76ac9ffff entry_point = 0x0 region_type = private name = "private_0x000000d76ac60000" filename = "" Region: id = 8024 start_va = 0xd76aca0000 end_va = 0xd76acbffff entry_point = 0x0 region_type = private name = "private_0x000000d76aca0000" filename = "" Region: id = 8025 start_va = 0xd76acd0000 end_va = 0xd76aceffff entry_point = 0x0 region_type = private name = "private_0x000000d76acd0000" filename = "" Region: id = 8026 start_va = 0xd76ad10000 end_va = 0xd76ae0ffff entry_point = 0x0 region_type = private name = "private_0x000000d76ad10000" filename = "" Region: id = 8027 start_va = 0xd76ae10000 end_va = 0xd76ae2ffff entry_point = 0x0 region_type = private name = "private_0x000000d76ae10000" filename = "" Region: id = 8028 start_va = 0xd76ae30000 end_va = 0xd76ae4ffff entry_point = 0x0 region_type = private name = "private_0x000000d76ae30000" filename = "" Region: id = 8029 start_va = 0xd76ae50000 end_va = 0xd76af4ffff entry_point = 0x0 region_type = private name = "private_0x000000d76ae50000" filename = "" Region: id = 8030 start_va = 0x7ff74ec20000 end_va = 0x7ff74ec54fff entry_point = 0x0 region_type = private name = "private_0x00007ff74ec20000" filename = "" Region: id = 8031 start_va = 0x7ff7d7210000 end_va = 0x7ff7d721ffff entry_point = 0x0 region_type = private name = "private_0x00007ff7d7210000" filename = "" Region: id = 8032 start_va = 0x7ff7d7226000 end_va = 0x7ff7d7227fff entry_point = 0x0 region_type = private name = "private_0x00007ff7d7226000" filename = "" Region: id = 8033 start_va = 0x7ff7d7228000 end_va = 0x7ff7d7229fff entry_point = 0x0 region_type = private name = "private_0x00007ff7d7228000" filename = "" Region: id = 8034 start_va = 0x7ff7d722a000 end_va = 0x7ff7d722bfff entry_point = 0x0 region_type = private name = "private_0x00007ff7d722a000" filename = "" Region: id = 8035 start_va = 0x7ff7d722c000 end_va = 0x7ff7d722dfff entry_point = 0x0 region_type = private name = "private_0x00007ff7d722c000" filename = "" Region: id = 8036 start_va = 0x7ff7d722e000 end_va = 0x7ff7d722ffff entry_point = 0x0 region_type = private name = "private_0x00007ff7d722e000" filename = "" Region: id = 8037 start_va = 0x7ff7d7230000 end_va = 0x7ff7d7231fff entry_point = 0x0 region_type = private name = "private_0x00007ff7d7230000" filename = "" Region: id = 8038 start_va = 0x7ff7d7232000 end_va = 0x7ff7d7233fff entry_point = 0x0 region_type = private name = "private_0x00007ff7d7232000" filename = "" Region: id = 8039 start_va = 0x7ff7d7234000 end_va = 0x7ff7d7235fff entry_point = 0x0 region_type = private name = "private_0x00007ff7d7234000" filename = "" Region: id = 8040 start_va = 0x7ff7d7236000 end_va = 0x7ff7d7237fff entry_point = 0x0 region_type = private name = "private_0x00007ff7d7236000" filename = "" Region: id = 8041 start_va = 0x7ff7d7238000 end_va = 0x7ff7d7239fff entry_point = 0x0 region_type = private name = "private_0x00007ff7d7238000" filename = "" Region: id = 8042 start_va = 0x7ff7d723a000 end_va = 0x7ff7d723bfff entry_point = 0x0 region_type = private name = "private_0x00007ff7d723a000" filename = "" Region: id = 8043 start_va = 0x7ff7d723c000 end_va = 0x7ff7d723dfff entry_point = 0x0 region_type = private name = "private_0x00007ff7d723c000" filename = "" Region: id = 8044 start_va = 0x7ff7d723e000 end_va = 0x7ff7d723ffff entry_point = 0x0 region_type = private name = "private_0x00007ff7d723e000" filename = "" Region: id = 8045 start_va = 0x7ff7d7240000 end_va = 0x7ff7d7241fff entry_point = 0x0 region_type = private name = "private_0x00007ff7d7240000" filename = "" Region: id = 8046 start_va = 0x7ff7d7242000 end_va = 0x7ff7d7243fff entry_point = 0x0 region_type = private name = "private_0x00007ff7d7242000" filename = "" Region: id = 8047 start_va = 0x7ff7d7244000 end_va = 0x7ff7d7245fff entry_point = 0x0 region_type = private name = "private_0x00007ff7d7244000" filename = "" Region: id = 8048 start_va = 0x7ff7d7246000 end_va = 0x7ff7d7247fff entry_point = 0x0 region_type = private name = "private_0x00007ff7d7246000" filename = "" Region: id = 8049 start_va = 0x7ff7d7248000 end_va = 0x7ff7d7249fff entry_point = 0x0 region_type = private name = "private_0x00007ff7d7248000" filename = "" Region: id = 8050 start_va = 0x7ff7d724a000 end_va = 0x7ff7d724bfff entry_point = 0x0 region_type = private name = "private_0x00007ff7d724a000" filename = "" Region: id = 8051 start_va = 0x7ff7d724c000 end_va = 0x7ff7d724dfff entry_point = 0x0 region_type = private name = "private_0x00007ff7d724c000" filename = "" Region: id = 8052 start_va = 0x7ff7d724e000 end_va = 0x7ff7d724ffff entry_point = 0x0 region_type = private name = "private_0x00007ff7d724e000" filename = "" Region: id = 8053 start_va = 0x7ff7d7250000 end_va = 0x7ff7d7251fff entry_point = 0x0 region_type = private name = "private_0x00007ff7d7250000" filename = "" Region: id = 8054 start_va = 0x7ff7d7252000 end_va = 0x7ff7d7253fff entry_point = 0x0 region_type = private name = "private_0x00007ff7d7252000" filename = "" Region: id = 8055 start_va = 0x7ff7d7254000 end_va = 0x7ff7d7255fff entry_point = 0x0 region_type = private name = "private_0x00007ff7d7254000" filename = "" Region: id = 8056 start_va = 0x7ff7d7256000 end_va = 0x7ff7d7257fff entry_point = 0x0 region_type = private name = "private_0x00007ff7d7256000" filename = "" Region: id = 8057 start_va = 0x7ff7d7258000 end_va = 0x7ff7d7259fff entry_point = 0x0 region_type = private name = "private_0x00007ff7d7258000" filename = "" Region: id = 8058 start_va = 0x7ff7d725a000 end_va = 0x7ff7d725bfff entry_point = 0x0 region_type = private name = "private_0x00007ff7d725a000" filename = "" Region: id = 8059 start_va = 0x7ff7d725c000 end_va = 0x7ff7d725dfff entry_point = 0x0 region_type = private name = "private_0x00007ff7d725c000" filename = "" Region: id = 8060 start_va = 0x7ff7d725e000 end_va = 0x7ff7d725ffff entry_point = 0x0 region_type = private name = "private_0x00007ff7d725e000" filename = "" Region: id = 8061 start_va = 0x7ff7d7260000 end_va = 0x7ff7d735ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff7d7260000" filename = "" Region: id = 8062 start_va = 0x7ff7d7360000 end_va = 0x7ff7d7382fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff7d7360000" filename = "" Region: id = 8063 start_va = 0x7ff7d7383000 end_va = 0x7ff7d7384fff entry_point = 0x0 region_type = private name = "private_0x00007ff7d7383000" filename = "" Region: id = 8064 start_va = 0x7ff7d7385000 end_va = 0x7ff7d7386fff entry_point = 0x0 region_type = private name = "private_0x00007ff7d7385000" filename = "" Region: id = 8065 start_va = 0x7ff7d7387000 end_va = 0x7ff7d7388fff entry_point = 0x0 region_type = private name = "private_0x00007ff7d7387000" filename = "" Region: id = 8066 start_va = 0x7ff7d7389000 end_va = 0x7ff7d738afff entry_point = 0x0 region_type = private name = "private_0x00007ff7d7389000" filename = "" Region: id = 8067 start_va = 0x7ff7d738b000 end_va = 0x7ff7d738cfff entry_point = 0x0 region_type = private name = "private_0x00007ff7d738b000" filename = "" Region: id = 8068 start_va = 0x7ff7d738d000 end_va = 0x7ff7d738efff entry_point = 0x0 region_type = private name = "private_0x00007ff7d738d000" filename = "" Region: id = 8069 start_va = 0x7ff7d738f000 end_va = 0x7ff7d738ffff entry_point = 0x0 region_type = private name = "private_0x00007ff7d738f000" filename = "" Region: id = 8070 start_va = 0x7ff7d7fd0000 end_va = 0x7ff7d86f7fff entry_point = 0x7ff7d7fd0000 region_type = mapped_file name = "searchui.exe" filename = "\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\SearchUI.exe" (normalized: "c:\\windows\\systemapps\\microsoft.windows.cortana_cw5n1h2txyewy\\searchui.exe") Region: id = 8071 start_va = 0x7ffb7a590000 end_va = 0x7ffb7a59bfff entry_point = 0x7ffb7a590000 region_type = mapped_file name = "windows.applicationmodel.background.timebroker.dll" filename = "\\Windows\\System32\\Windows.ApplicationModel.Background.TimeBroker.dll" (normalized: "c:\\windows\\system32\\windows.applicationmodel.background.timebroker.dll") Region: id = 8072 start_va = 0x7ffb7a9d0000 end_va = 0x7ffb7aa07fff entry_point = 0x7ffb7a9d0000 region_type = mapped_file name = "rometadata.dll" filename = "\\Windows\\System32\\rometadata.dll" (normalized: "c:\\windows\\system32\\rometadata.dll") Region: id = 8073 start_va = 0x7ffb7aa10000 end_va = 0x7ffb7aa1ffff entry_point = 0x7ffb7aa10000 region_type = mapped_file name = "msimtf.dll" filename = "\\Windows\\System32\\msimtf.dll" (normalized: "c:\\windows\\system32\\msimtf.dll") Region: id = 8074 start_va = 0x7ffb7aa20000 end_va = 0x7ffb7aa5cfff entry_point = 0x7ffb7aa20000 region_type = mapped_file name = "mlang.dll" filename = "\\Windows\\System32\\mlang.dll" (normalized: "c:\\windows\\system32\\mlang.dll") Region: id = 8075 start_va = 0x7ffb7aa60000 end_va = 0x7ffb7b196fff entry_point = 0x7ffb7aa60000 region_type = mapped_file name = "chakra.dll" filename = "\\Windows\\System32\\Chakra.dll" (normalized: "c:\\windows\\system32\\chakra.dll") Region: id = 8076 start_va = 0x7ffb7b1a0000 end_va = 0x7ffb7c691fff entry_point = 0x7ffb7b1a0000 region_type = mapped_file name = "edgehtml.dll" filename = "\\Windows\\System32\\edgehtml.dll" (normalized: "c:\\windows\\system32\\edgehtml.dll") Region: id = 8077 start_va = 0x7ffb7c940000 end_va = 0x7ffb7cb6ffff entry_point = 0x7ffb7c940000 region_type = mapped_file name = "remindersui.dll" filename = "\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\RemindersUI.dll" (normalized: "c:\\windows\\systemapps\\microsoft.windows.cortana_cw5n1h2txyewy\\remindersui.dll") Region: id = 8078 start_va = 0x7ffb7cdd0000 end_va = 0x7ffb7d0a7fff entry_point = 0x7ffb7cdd0000 region_type = mapped_file name = "sapi_onecore.dll" filename = "\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore.dll" (normalized: "c:\\windows\\system32\\speech_onecore\\common\\sapi_onecore.dll") Region: id = 8079 start_va = 0x7ffb7d0b0000 end_va = 0x7ffb7d1defff entry_point = 0x7ffb7d0b0000 region_type = mapped_file name = "remotenaturallanguage.dll" filename = "\\Windows\\System32\\RemoteNaturalLanguage.dll" (normalized: "c:\\windows\\system32\\remotenaturallanguage.dll") Region: id = 8080 start_va = 0x7ffb7d1e0000 end_va = 0x7ffb7d36cfff entry_point = 0x7ffb7d1e0000 region_type = mapped_file name = "windows.media.speech.dll" filename = "\\Windows\\System32\\Windows.Media.Speech.dll" (normalized: "c:\\windows\\system32\\windows.media.speech.dll") Region: id = 8081 start_va = 0x7ffb7d370000 end_va = 0x7ffb7d422fff entry_point = 0x7ffb7d370000 region_type = mapped_file name = "windows.security.authentication.onlineid.dll" filename = "\\Windows\\System32\\Windows.Security.Authentication.OnlineId.dll" (normalized: "c:\\windows\\system32\\windows.security.authentication.onlineid.dll") Region: id = 8082 start_va = 0x7ffb7d430000 end_va = 0x7ffb7da7afff entry_point = 0x7ffb7d430000 region_type = mapped_file name = "cortanaapi.dll" filename = "\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\CortanaApi.dll" (normalized: "c:\\windows\\systemapps\\microsoft.windows.cortana_cw5n1h2txyewy\\cortanaapi.dll") Region: id = 8083 start_va = 0x7ffb7dfb0000 end_va = 0x7ffb7dfdbfff entry_point = 0x7ffb7dfb0000 region_type = mapped_file name = "winmmbase.dll" filename = "\\Windows\\System32\\winmmbase.dll" (normalized: "c:\\windows\\system32\\winmmbase.dll") Region: id = 8084 start_va = 0x7ffb7e090000 end_va = 0x7ffb7e0c2fff entry_point = 0x7ffb7e090000 region_type = mapped_file name = "biwinrt.dll" filename = "\\Windows\\System32\\biwinrt.dll" (normalized: "c:\\windows\\system32\\biwinrt.dll") Region: id = 8085 start_va = 0x7ffb7e0e0000 end_va = 0x7ffb7e0f0fff entry_point = 0x7ffb7e0e0000 region_type = mapped_file name = "geolocatorhelper.dll" filename = "\\Windows\\System32\\GeoLocatorHelper.dll" (normalized: "c:\\windows\\system32\\geolocatorhelper.dll") Region: id = 8086 start_va = 0x7ffb7e130000 end_va = 0x7ffb7e18ffff entry_point = 0x7ffb7e130000 region_type = mapped_file name = "cryptowinrt.dll" filename = "\\Windows\\System32\\CryptoWinRT.dll" (normalized: "c:\\windows\\system32\\cryptowinrt.dll") Region: id = 8087 start_va = 0x7ffb7e230000 end_va = 0x7ffb7e289fff entry_point = 0x7ffb7e230000 region_type = mapped_file name = "windows.graphics.dll" filename = "\\Windows\\System32\\Windows.Graphics.dll" (normalized: "c:\\windows\\system32\\windows.graphics.dll") Region: id = 8088 start_va = 0x7ffb7e290000 end_va = 0x7ffb7e2e2fff entry_point = 0x7ffb7e290000 region_type = mapped_file name = "windows.storage.applicationdata.dll" filename = "\\Windows\\System32\\Windows.Storage.ApplicationData.dll" (normalized: "c:\\windows\\system32\\windows.storage.applicationdata.dll") Region: id = 8089 start_va = 0x7ffb7e2f0000 end_va = 0x7ffb7e2f9fff entry_point = 0x7ffb7e2f0000 region_type = mapped_file name = "fontgroupsoverride.dll" filename = "\\Windows\\System32\\fontgroupsoverride.dll" (normalized: "c:\\windows\\system32\\fontgroupsoverride.dll") Region: id = 8090 start_va = 0x7ffb7e300000 end_va = 0x7ffb7e317fff entry_point = 0x7ffb7e300000 region_type = mapped_file name = "windows.globalization.fontgroups.dll" filename = "\\Windows\\System32\\Windows.Globalization.Fontgroups.dll" (normalized: "c:\\windows\\system32\\windows.globalization.fontgroups.dll") Region: id = 8091 start_va = 0x7ffb7e370000 end_va = 0x7ffb7e378fff entry_point = 0x7ffb7e370000 region_type = mapped_file name = "commstypehelperutil_ca.dll" filename = "\\Windows\\System32\\CommsTypeHelperUtil_ca.dll" (normalized: "c:\\windows\\system32\\commstypehelperutil_ca.dll") Region: id = 8092 start_va = 0x7ffb7e3a0000 end_va = 0x7ffb7e3d3fff entry_point = 0x7ffb7e3a0000 region_type = mapped_file name = "windows.applicationmodel.dll" filename = "\\Windows\\System32\\Windows.ApplicationModel.dll" (normalized: "c:\\windows\\system32\\windows.applicationmodel.dll") Region: id = 8093 start_va = 0x7ffb7e3e0000 end_va = 0x7ffb7e52dfff entry_point = 0x7ffb7e3e0000 region_type = mapped_file name = "windows.web.http.dll" filename = "\\Windows\\System32\\Windows.Web.Http.dll" (normalized: "c:\\windows\\system32\\windows.web.http.dll") Region: id = 8094 start_va = 0x7ffb7f340000 end_va = 0x7ffb7f35dfff entry_point = 0x7ffb7f340000 region_type = mapped_file name = "bingidentitymanagerinternal.dll" filename = "\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\BingIdentityManagerInternal.dll" (normalized: "c:\\windows\\systemapps\\microsoft.windows.cortana_cw5n1h2txyewy\\bingidentitymanagerinternal.dll") Region: id = 8095 start_va = 0x7ffb7f360000 end_va = 0x7ffb7f390fff entry_point = 0x7ffb7f360000 region_type = mapped_file name = "onlineservices.dll" filename = "\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\OnlineServices.dll" (normalized: "c:\\windows\\systemapps\\microsoft.windows.cortana_cw5n1h2txyewy\\onlineservices.dll") Region: id = 8096 start_va = 0x7ffb7f3a0000 end_va = 0x7ffb7f3bbfff entry_point = 0x7ffb7f3a0000 region_type = mapped_file name = "aistokenmanager.dll" filename = "\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AISTokenManager.dll" (normalized: "c:\\windows\\systemapps\\microsoft.windows.cortana_cw5n1h2txyewy\\aistokenmanager.dll") Region: id = 8097 start_va = 0x7ffb7f3c0000 end_va = 0x7ffb7f437fff entry_point = 0x7ffb7f3c0000 region_type = mapped_file name = "cortana.core.dll" filename = "\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Cortana.Core.dll" (normalized: "c:\\windows\\systemapps\\microsoft.windows.cortana_cw5n1h2txyewy\\cortana.core.dll") Region: id = 8098 start_va = 0x7ffb7fa70000 end_va = 0x7ffb7fa81fff entry_point = 0x7ffb7fa70000 region_type = mapped_file name = "windows.cortana.pal.desktop.dll" filename = "\\Windows\\System32\\Windows.Cortana.PAL.Desktop.dll" (normalized: "c:\\windows\\system32\\windows.cortana.pal.desktop.dll") Region: id = 8099 start_va = 0x7ffb7fa90000 end_va = 0x7ffb7fab2fff entry_point = 0x7ffb7fa90000 region_type = mapped_file name = "bingconfigurationclient.dll" filename = "\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\BingConfigurationClient.dll" (normalized: "c:\\windows\\systemapps\\microsoft.windows.cortana_cw5n1h2txyewy\\bingconfigurationclient.dll") Region: id = 8100 start_va = 0x7ffb7fac0000 end_va = 0x7ffb7faeafff entry_point = 0x7ffb7fac0000 region_type = mapped_file name = "personax.dll" filename = "\\Windows\\System32\\PersonaX.dll" (normalized: "c:\\windows\\system32\\personax.dll") Region: id = 8101 start_va = 0x7ffb7fb20000 end_va = 0x7ffb7fb34fff entry_point = 0x7ffb7fb20000 region_type = mapped_file name = "profext.dll" filename = "\\Windows\\System32\\profext.dll" (normalized: "c:\\windows\\system32\\profext.dll") Region: id = 8102 start_va = 0x7ffb7fbd0000 end_va = 0x7ffb7fc7bfff entry_point = 0x7ffb7fbd0000 region_type = mapped_file name = "windows.networking.connectivity.dll" filename = "\\Windows\\System32\\Windows.Networking.Connectivity.dll" (normalized: "c:\\windows\\system32\\windows.networking.connectivity.dll") Region: id = 8103 start_va = 0x7ffb81dd0000 end_va = 0x7ffb81e15fff entry_point = 0x7ffb81dd0000 region_type = mapped_file name = "dataexchange.dll" filename = "\\Windows\\System32\\DataExchange.dll" (normalized: "c:\\windows\\system32\\dataexchange.dll") Region: id = 8104 start_va = 0x7ffb820e0000 end_va = 0x7ffb82199fff entry_point = 0x7ffb820e0000 region_type = mapped_file name = "twinapi.dll" filename = "\\Windows\\System32\\twinapi.dll" (normalized: "c:\\windows\\system32\\twinapi.dll") Region: id = 8105 start_va = 0x7ffb82650000 end_va = 0x7ffb82ab9fff entry_point = 0x7ffb82650000 region_type = mapped_file name = "actxprxy.dll" filename = "\\Windows\\System32\\actxprxy.dll" (normalized: "c:\\windows\\system32\\actxprxy.dll") Region: id = 8106 start_va = 0x7ffb82bb0000 end_va = 0x7ffb82e10fff entry_point = 0x7ffb82bb0000 region_type = mapped_file name = "coreuicomponents.dll" filename = "\\Windows\\System32\\CoreUIComponents.dll" (normalized: "c:\\windows\\system32\\coreuicomponents.dll") Region: id = 8107 start_va = 0x7ffb82ee0000 end_va = 0x7ffb831fffff entry_point = 0x7ffb82ee0000 region_type = mapped_file name = "msftedit.dll" filename = "\\Windows\\System32\\msftedit.dll" (normalized: "c:\\windows\\system32\\msftedit.dll") Region: id = 8108 start_va = 0x7ffb837b0000 end_va = 0x7ffb837ddfff entry_point = 0x7ffb837b0000 region_type = mapped_file name = "globinputhost.dll" filename = "\\Windows\\System32\\globinputhost.dll" (normalized: "c:\\windows\\system32\\globinputhost.dll") Region: id = 8109 start_va = 0x7ffb83850000 end_va = 0x7ffb83864fff entry_point = 0x7ffb83850000 region_type = mapped_file name = "threadpoolwinrt.dll" filename = "\\Windows\\System32\\threadpoolwinrt.dll" (normalized: "c:\\windows\\system32\\threadpoolwinrt.dll") Region: id = 8110 start_va = 0x7ffb83dc0000 end_va = 0x7ffb83dd3fff entry_point = 0x7ffb83dc0000 region_type = mapped_file name = "mskeyprotect.dll" filename = "\\Windows\\System32\\mskeyprotect.dll" (normalized: "c:\\windows\\system32\\mskeyprotect.dll") Region: id = 8111 start_va = 0x7ffb83e70000 end_va = 0x7ffb83e8efff entry_point = 0x7ffb83e70000 region_type = mapped_file name = "ncryptsslp.dll" filename = "\\Windows\\System32\\ncryptsslp.dll" (normalized: "c:\\windows\\system32\\ncryptsslp.dll") Region: id = 8112 start_va = 0x7ffb84be0000 end_va = 0x7ffb84e56fff entry_point = 0x7ffb84be0000 region_type = mapped_file name = "msxml6.dll" filename = "\\Windows\\System32\\msxml6.dll" (normalized: "c:\\windows\\system32\\msxml6.dll") Region: id = 8113 start_va = 0x7ffb856d0000 end_va = 0x7ffb856e4fff entry_point = 0x7ffb856d0000 region_type = mapped_file name = "ondemandconnroutehelper.dll" filename = "\\Windows\\System32\\OnDemandConnRouteHelper.dll" (normalized: "c:\\windows\\system32\\ondemandconnroutehelper.dll") Region: id = 8114 start_va = 0x7ffb856f0000 end_va = 0x7ffb85996fff entry_point = 0x7ffb856f0000 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\System32\\wininet.dll" (normalized: "c:\\windows\\system32\\wininet.dll") Region: id = 8115 start_va = 0x7ffb85bc0000 end_va = 0x7ffb85d56fff entry_point = 0x7ffb85bc0000 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\System32\\urlmon.dll" (normalized: "c:\\windows\\system32\\urlmon.dll") Region: id = 8116 start_va = 0x7ffb868c0000 end_va = 0x7ffb868c9fff entry_point = 0x7ffb868c0000 region_type = mapped_file name = "rasadhlp.dll" filename = "\\Windows\\System32\\rasadhlp.dll" (normalized: "c:\\windows\\system32\\rasadhlp.dll") Region: id = 8117 start_va = 0x7ffb86cd0000 end_va = 0x7ffb86d58fff entry_point = 0x7ffb86cd0000 region_type = mapped_file name = "directmanipulation.dll" filename = "\\Windows\\System32\\directmanipulation.dll" (normalized: "c:\\windows\\system32\\directmanipulation.dll") Region: id = 8118 start_va = 0x7ffb86d60000 end_va = 0x7ffb86ee5fff entry_point = 0x7ffb86d60000 region_type = mapped_file name = "windows.globalization.dll" filename = "\\Windows\\System32\\Windows.Globalization.dll" (normalized: "c:\\windows\\system32\\windows.globalization.dll") Region: id = 8119 start_va = 0x7ffb86ef0000 end_va = 0x7ffb87148fff entry_point = 0x7ffb86ef0000 region_type = mapped_file name = "dwrite.dll" filename = "\\Windows\\System32\\DWrite.dll" (normalized: "c:\\windows\\system32\\dwrite.dll") Region: id = 8120 start_va = 0x7ffb874a0000 end_va = 0x7ffb87575fff entry_point = 0x7ffb874a0000 region_type = mapped_file name = "winhttp.dll" filename = "\\Windows\\System32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll") Region: id = 8121 start_va = 0x7ffb87810000 end_va = 0x7ffb878a1fff entry_point = 0x7ffb87810000 region_type = mapped_file name = "msvcp110_win.dll" filename = "\\Windows\\System32\\msvcp110_win.dll" (normalized: "c:\\windows\\system32\\msvcp110_win.dll") Region: id = 8122 start_va = 0x7ffb878b0000 end_va = 0x7ffb878e8fff entry_point = 0x7ffb878b0000 region_type = mapped_file name = "policymanager.dll" filename = "\\Windows\\System32\\policymanager.dll" (normalized: "c:\\windows\\system32\\policymanager.dll") Region: id = 8123 start_va = 0x7ffb87a20000 end_va = 0x7ffb87a55fff entry_point = 0x7ffb87a20000 region_type = mapped_file name = "xmllite.dll" filename = "\\Windows\\System32\\xmllite.dll" (normalized: "c:\\windows\\system32\\xmllite.dll") Region: id = 8124 start_va = 0x7ffb87d30000 end_va = 0x7ffb88274fff entry_point = 0x7ffb87d30000 region_type = mapped_file name = "d2d1.dll" filename = "\\Windows\\System32\\d2d1.dll" (normalized: "c:\\windows\\system32\\d2d1.dll") Region: id = 8125 start_va = 0x7ffb88720000 end_va = 0x7ffb88a95fff entry_point = 0x7ffb88720000 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" (normalized: "c:\\windows\\system32\\iertutil.dll") Region: id = 8126 start_va = 0x7ffb88aa0000 end_va = 0x7ffb89a96fff entry_point = 0x7ffb88aa0000 region_type = mapped_file name = "windows.ui.xaml.dll" filename = "\\Windows\\System32\\Windows.UI.Xaml.dll" (normalized: "c:\\windows\\system32\\windows.ui.xaml.dll") Region: id = 8127 start_va = 0x7ffb89aa0000 end_va = 0x7ffb89b3dfff entry_point = 0x7ffb89aa0000 region_type = mapped_file name = "windows.ui.dll" filename = "\\Windows\\System32\\Windows.UI.dll" (normalized: "c:\\windows\\system32\\windows.ui.dll") Region: id = 8128 start_va = 0x7ffb89b40000 end_va = 0x7ffb89c4efff entry_point = 0x7ffb89b40000 region_type = mapped_file name = "mrmcorer.dll" filename = "\\Windows\\System32\\MrmCoreR.dll" (normalized: "c:\\windows\\system32\\mrmcorer.dll") Region: id = 8129 start_va = 0x7ffb89c50000 end_va = 0x7ffb89cb9fff entry_point = 0x7ffb89c50000 region_type = mapped_file name = "wincorlib.dll" filename = "\\Windows\\System32\\wincorlib.dll" (normalized: "c:\\windows\\system32\\wincorlib.dll") Region: id = 8130 start_va = 0x7ffb8a390000 end_va = 0x7ffb8a3f7fff entry_point = 0x7ffb8a390000 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 8131 start_va = 0x7ffb8a850000 end_va = 0x7ffb8a9d2fff entry_point = 0x7ffb8a850000 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 8132 start_va = 0x7ffb8a9e0000 end_va = 0x7ffb8aa51fff entry_point = 0x7ffb8a9e0000 region_type = mapped_file name = "mmdevapi.dll" filename = "\\Windows\\System32\\MMDevAPI.dll" (normalized: "c:\\windows\\system32\\mmdevapi.dll") Region: id = 8133 start_va = 0x7ffb8ab60000 end_va = 0x7ffb8ac90fff entry_point = 0x7ffb8ab60000 region_type = mapped_file name = "wintypes.dll" filename = "\\Windows\\System32\\WinTypes.dll" (normalized: "c:\\windows\\system32\\wintypes.dll") Region: id = 8134 start_va = 0x7ffb8b560000 end_va = 0x7ffb8b56afff entry_point = 0x7ffb8b560000 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll") Region: id = 8135 start_va = 0x7ffb8b580000 end_va = 0x7ffb8b5b7fff entry_point = 0x7ffb8b580000 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 8136 start_va = 0x7ffb8b960000 end_va = 0x7ffb8bbcdfff entry_point = 0x7ffb8b960000 region_type = mapped_file name = "d3d10warp.dll" filename = "\\Windows\\System32\\d3d10warp.dll" (normalized: "c:\\windows\\system32\\d3d10warp.dll") Region: id = 8137 start_va = 0x7ffb8bbd0000 end_va = 0x7ffb8bc6bfff entry_point = 0x7ffb8bbd0000 region_type = mapped_file name = "dxgi.dll" filename = "\\Windows\\System32\\dxgi.dll" (normalized: "c:\\windows\\system32\\dxgi.dll") Region: id = 8138 start_va = 0x7ffb8bc70000 end_va = 0x7ffb8bf12fff entry_point = 0x7ffb8bc70000 region_type = mapped_file name = "d3d11.dll" filename = "\\Windows\\System32\\d3d11.dll" (normalized: "c:\\windows\\system32\\d3d11.dll") Region: id = 8139 start_va = 0x7ffb8bf20000 end_va = 0x7ffb8bf41fff entry_point = 0x7ffb8bf20000 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\System32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll") Region: id = 8140 start_va = 0x7ffb8bf90000 end_va = 0x7ffb8bff5fff entry_point = 0x7ffb8bf90000 region_type = mapped_file name = "bcp47langs.dll" filename = "\\Windows\\System32\\BCP47Langs.dll" (normalized: "c:\\windows\\system32\\bcp47langs.dll") Region: id = 8141 start_va = 0x7ffb8c000000 end_va = 0x7ffb8c05bfff entry_point = 0x7ffb8c000000 region_type = mapped_file name = "ninput.dll" filename = "\\Windows\\System32\\ninput.dll" (normalized: "c:\\windows\\system32\\ninput.dll") Region: id = 8142 start_va = 0x7ffb8c060000 end_va = 0x7ffb8c127fff entry_point = 0x7ffb8c060000 region_type = mapped_file name = "coremessaging.dll" filename = "\\Windows\\System32\\CoreMessaging.dll" (normalized: "c:\\windows\\system32\\coremessaging.dll") Region: id = 8143 start_va = 0x7ffb8c130000 end_va = 0x7ffb8c200fff entry_point = 0x7ffb8c130000 region_type = mapped_file name = "dcomp.dll" filename = "\\Windows\\System32\\dcomp.dll" (normalized: "c:\\windows\\system32\\dcomp.dll") Region: id = 8144 start_va = 0x7ffb8c780000 end_va = 0x7ffb8c815fff entry_point = 0x7ffb8c780000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 8145 start_va = 0x7ffb8c820000 end_va = 0x7ffb8c846fff entry_point = 0x7ffb8c820000 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 8146 start_va = 0x7ffb8c870000 end_va = 0x7ffb8c95dfff entry_point = 0x7ffb8c870000 region_type = mapped_file name = "twinapi.appcore.dll" filename = "\\Windows\\System32\\twinapi.appcore.dll" (normalized: "c:\\windows\\system32\\twinapi.appcore.dll") Region: id = 8147 start_va = 0x7ffb8cdd0000 end_va = 0x7ffb8cdf2fff entry_point = 0x7ffb8cdd0000 region_type = mapped_file name = "gpapi.dll" filename = "\\Windows\\System32\\gpapi.dll" (normalized: "c:\\windows\\system32\\gpapi.dll") Region: id = 8148 start_va = 0x7ffb8d250000 end_va = 0x7ffb8d281fff entry_point = 0x7ffb8d250000 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll") Region: id = 8149 start_va = 0x7ffb8d2b0000 end_va = 0x7ffb8d323fff entry_point = 0x7ffb8d2b0000 region_type = mapped_file name = "schannel.dll" filename = "\\Windows\\System32\\schannel.dll" (normalized: "c:\\windows\\system32\\schannel.dll") Region: id = 8150 start_va = 0x7ffb8d330000 end_va = 0x7ffb8d339fff entry_point = 0x7ffb8d330000 region_type = mapped_file name = "dpapi.dll" filename = "\\Windows\\System32\\dpapi.dll" (normalized: "c:\\windows\\system32\\dpapi.dll") Region: id = 8151 start_va = 0x7ffb8d3d0000 end_va = 0x7ffb8d402fff entry_point = 0x7ffb8d3d0000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 8152 start_va = 0x7ffb8d4c0000 end_va = 0x7ffb8d4defff entry_point = 0x7ffb8d4c0000 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 8153 start_va = 0x7ffb8d4e0000 end_va = 0x7ffb8d51dfff entry_point = 0x7ffb8d4e0000 region_type = mapped_file name = "logoncli.dll" filename = "\\Windows\\System32\\logoncli.dll" (normalized: "c:\\windows\\system32\\logoncli.dll") Region: id = 8154 start_va = 0x7ffb8d520000 end_va = 0x7ffb8d5c7fff entry_point = 0x7ffb8d520000 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll") Region: id = 8155 start_va = 0x7ffb8d720000 end_va = 0x7ffb8d77cfff entry_point = 0x7ffb8d720000 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll") Region: id = 8156 start_va = 0x7ffb8d780000 end_va = 0x7ffb8d796fff entry_point = 0x7ffb8d780000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 8157 start_va = 0x7ffb8d8f0000 end_va = 0x7ffb8d8fafff entry_point = 0x7ffb8d8f0000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 8158 start_va = 0x7ffb8d980000 end_va = 0x7ffb8d9b5fff entry_point = 0x7ffb8d980000 region_type = mapped_file name = "ntasn1.dll" filename = "\\Windows\\System32\\ntasn1.dll" (normalized: "c:\\windows\\system32\\ntasn1.dll") Region: id = 8159 start_va = 0x7ffb8d9c0000 end_va = 0x7ffb8d9e5fff entry_point = 0x7ffb8d9c0000 region_type = mapped_file name = "ncrypt.dll" filename = "\\Windows\\System32\\ncrypt.dll" (normalized: "c:\\windows\\system32\\ncrypt.dll") Region: id = 8160 start_va = 0x7ffb8dad0000 end_va = 0x7ffb8dafbfff entry_point = 0x7ffb8dad0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 8161 start_va = 0x7ffb8dcd0000 end_va = 0x7ffb8dcf7fff entry_point = 0x7ffb8dcd0000 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 8162 start_va = 0x7ffb8dd00000 end_va = 0x7ffb8dd6afff entry_point = 0x7ffb8dd00000 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 8163 start_va = 0x7ffb8deb0000 end_va = 0x7ffb8dec2fff entry_point = 0x7ffb8deb0000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 8164 start_va = 0x7ffb8ded0000 end_va = 0x7ffb8dee0fff entry_point = 0x7ffb8ded0000 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 8165 start_va = 0x7ffb8def0000 end_va = 0x7ffb8df39fff entry_point = 0x7ffb8def0000 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 8166 start_va = 0x7ffb8df40000 end_va = 0x7ffb8df4efff entry_point = 0x7ffb8df40000 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 8167 start_va = 0x7ffb8e000000 end_va = 0x7ffb8e0b2fff entry_point = 0x7ffb8e000000 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\System32\\SHCore.dll" (normalized: "c:\\windows\\system32\\shcore.dll") Region: id = 8168 start_va = 0x7ffb8e0c0000 end_va = 0x7ffb8e113fff entry_point = 0x7ffb8e0c0000 region_type = mapped_file name = "wintrust.dll" filename = "\\Windows\\System32\\wintrust.dll" (normalized: "c:\\windows\\system32\\wintrust.dll") Region: id = 8169 start_va = 0x7ffb8e120000 end_va = 0x7ffb8e747fff entry_point = 0x7ffb8e120000 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\System32\\windows.storage.dll" (normalized: "c:\\windows\\system32\\windows.storage.dll") Region: id = 8170 start_va = 0x7ffb8e750000 end_va = 0x7ffb8e910fff entry_point = 0x7ffb8e750000 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 8171 start_va = 0x7ffb8e920000 end_va = 0x7ffb8eafcfff entry_point = 0x7ffb8e920000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 8172 start_va = 0x7ffb8eb00000 end_va = 0x7ffb8eb43fff entry_point = 0x7ffb8eb00000 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 8173 start_va = 0x7ffb8eb50000 end_va = 0x7ffb8ebecfff entry_point = 0x7ffb8eb50000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 8174 start_va = 0x7ffb8ebf0000 end_va = 0x7ffb8ee6bfff entry_point = 0x7ffb8ebf0000 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 8175 start_va = 0x7ffb8ee70000 end_va = 0x7ffb8efbdfff entry_point = 0x7ffb8ee70000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 8176 start_va = 0x7ffb8efc0000 end_va = 0x7ffb8f0e5fff entry_point = 0x7ffb8efc0000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 8177 start_va = 0x7ffb8f100000 end_va = 0x7ffb8f284fff entry_point = 0x7ffb8f100000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 8178 start_va = 0x7ffb8f290000 end_va = 0x7ffb8f2e0fff entry_point = 0x7ffb8f290000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 8179 start_va = 0x7ffb8f2f0000 end_va = 0x7ffb8f395fff entry_point = 0x7ffb8f2f0000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 8180 start_va = 0x7ffb8f3a0000 end_va = 0x7ffb8f4fbfff entry_point = 0x7ffb8f3a0000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 8181 start_va = 0x7ffb8f500000 end_va = 0x7ffb90a24fff entry_point = 0x7ffb8f500000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 8182 start_va = 0x7ffb90a30000 end_va = 0x7ffb90a37fff entry_point = 0x7ffb90a30000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 8183 start_va = 0x7ffb90a40000 end_va = 0x7ffb90aecfff entry_point = 0x7ffb90a40000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 8184 start_va = 0x7ffb90af0000 end_va = 0x7ffb90b4afff entry_point = 0x7ffb90af0000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 8185 start_va = 0x7ffb90b50000 end_va = 0x7ffb90bb8fff entry_point = 0x7ffb90b50000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 8186 start_va = 0x7ffb90bc0000 end_va = 0x7ffb90c7dfff entry_point = 0x7ffb90bc0000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 8187 start_va = 0x7ffb90f70000 end_va = 0x7ffb90fa5fff entry_point = 0x7ffb90f70000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 8188 start_va = 0x7ffb90fb0000 end_va = 0x7ffb910f0fff entry_point = 0x7ffb90fb0000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 8189 start_va = 0x7ffb91480000 end_va = 0x7ffb91641fff entry_point = 0x7ffb91480000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 8190 start_va = 0xd76af50000 end_va = 0xd76b04ffff entry_point = 0x0 region_type = private name = "private_0x000000d76af50000" filename = "" Region: id = 8191 start_va = 0x7ff7d7224000 end_va = 0x7ff7d7225fff entry_point = 0x0 region_type = private name = "private_0x00007ff7d7224000" filename = "" Region: id = 8192 start_va = 0x7ffb8d140000 end_va = 0x7ffb8d15bfff entry_point = 0x7ffb8d140000 region_type = mapped_file name = "mpr.dll" filename = "\\Windows\\System32\\mpr.dll" (normalized: "c:\\windows\\system32\\mpr.dll") Thread: id = 231 os_tid = 0x880 Thread: id = 232 os_tid = 0xbc4 Thread: id = 233 os_tid = 0xbc0 Thread: id = 234 os_tid = 0xbbc Thread: id = 235 os_tid = 0xbb8 Thread: id = 236 os_tid = 0xba0 Thread: id = 237 os_tid = 0xb9c Thread: id = 238 os_tid = 0xb98 Thread: id = 239 os_tid = 0xb94 Thread: id = 240 os_tid = 0xb90 Thread: id = 241 os_tid = 0xb8c Thread: id = 242 os_tid = 0xb88 Thread: id = 243 os_tid = 0xb84 Thread: id = 244 os_tid = 0xb80 Thread: id = 245 os_tid = 0xb7c Thread: id = 246 os_tid = 0xb70 Thread: id = 247 os_tid = 0xb6c Thread: id = 248 os_tid = 0xb68 Thread: id = 249 os_tid = 0xb5c Thread: id = 250 os_tid = 0xb54 Thread: id = 251 os_tid = 0xb50 Thread: id = 252 os_tid = 0xb48 Thread: id = 253 os_tid = 0xb44 Thread: id = 254 os_tid = 0xb40 Thread: id = 255 os_tid = 0xb3c Thread: id = 256 os_tid = 0xb38 Thread: id = 257 os_tid = 0xb34 Thread: id = 258 os_tid = 0xb30 Thread: id = 259 os_tid = 0xb2c Thread: id = 260 os_tid = 0xb28 Thread: id = 261 os_tid = 0xb24 Thread: id = 262 os_tid = 0xb20 Thread: id = 263 os_tid = 0xb18 Thread: id = 264 os_tid = 0xb14 Thread: id = 265 os_tid = 0xb10 Thread: id = 266 os_tid = 0xbf8 [0171.422] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x7ffb90a40000 [0171.423] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="LoadLibraryA") returned 0x7ffb90a62080 [0171.423] LoadLibraryA (lpLibFileName="mpr.dll") returned 0x7ffb8d140000 [0171.426] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x7ffb8f2f0000 [0171.426] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x7ffb90fb0000 [0171.427] LoadLibraryA (lpLibFileName="Shell32.dll") returned 0x7ffb8f500000 [0171.427] LoadLibraryA (lpLibFileName="Iphlpapi.dll") returned 0x7ffb8b580000 [0171.428] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GetLastError") returned 0x7ffb90a56060 [0171.429] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="VirtualFree") returned 0x7ffb90a5bc10 [0171.429] GetProcAddress (hModule=0x7ffb8f2f0000, lpProcName="CryptExportKey") returned 0x7ffb8f307b50 [0171.429] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="DeleteFileW") returned 0x7ffb90a657a0 [0171.430] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GetDriveTypeW") returned 0x7ffb90a658f0 [0171.430] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GetCommandLineW") returned 0x7ffb90a60150 [0171.431] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GetStartupInfoW") returned 0x7ffb90a5ed80 [0171.431] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="FindNextFileW") returned 0x7ffb90a65880 [0171.431] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="VirtualAlloc") returned 0x7ffb90a5baf0 [0171.432] GetProcAddress (hModule=0x7ffb8f2f0000, lpProcName="GetUserNameA") returned 0x7ffb8f31ec40 [0171.433] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="ExitProcess") returned 0x7ffb90a5ef50 [0171.433] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="Wow64RevertWow64FsRedirection") returned 0x7ffb90a836a0 [0171.433] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="CreateProcessA") returned 0x7ffb90a5d5b0 [0171.434] GetProcAddress (hModule=0x7ffb8b580000, lpProcName="GetIpNetTable") returned 0x7ffb8b59f0b0 [0171.434] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GetVersionExW") returned 0x7ffb90a5aa30 [0171.435] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x7ffb90a83690 [0171.435] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GetSystemDefaultLangID") returned 0x7ffb90a62ba0 [0171.436] GetProcAddress (hModule=0x7ffb8f2f0000, lpProcName="GetUserNameW") returned 0x7ffb8f30da40 [0171.436] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="ReadFile") returned 0x7ffb90a65a90 [0171.436] GetProcAddress (hModule=0x7ffb8f2f0000, lpProcName="RegQueryValueExA") returned 0x7ffb8f307dd0 [0171.437] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="CloseHandle") returned 0x7ffb90a65510 [0171.437] GetProcAddress (hModule=0x7ffb8f2f0000, lpProcName="RegSetValueExW") returned 0x7ffb8f307850 [0171.438] GetProcAddress (hModule=0x7ffb8f2f0000, lpProcName="RegCloseKey") returned 0x7ffb8f3072e0 [0171.438] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="CopyFileA") returned 0x7ffb90a7e430 [0171.438] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="SetFileAttributesW") returned 0x7ffb90a65b00 [0171.439] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="WinExec") returned 0x7ffb90a81e60 [0171.439] GetProcAddress (hModule=0x7ffb8f2f0000, lpProcName="CryptDeriveKey") returned 0x7ffb8f3207a0 [0171.440] GetProcAddress (hModule=0x7ffb8f2f0000, lpProcName="CryptGenKey") returned 0x7ffb8f30cab0 [0171.440] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="Sleep") returned 0x7ffb90a58f00 [0171.440] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GetCurrentProcess") returned 0x7ffb90a56580 [0171.441] GetProcAddress (hModule=0x7ffb8f500000, lpProcName="ShellExecuteW") returned 0x7ffb8f64abc0 [0171.441] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GetFileSize") returned 0x7ffb90a65950 [0171.442] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GlobalAlloc") returned 0x7ffb90a5b810 [0171.442] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="FindClose") returned 0x7ffb90a657c0 [0171.443] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="WaitForMultipleObjects") returned 0x7ffb90a656e0 [0171.443] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GetModuleFileNameA") returned 0x7ffb90a60c70 [0171.444] GetProcAddress (hModule=0x7ffb8f500000, lpProcName="ShellExecuteA") returned 0x7ffb8f707de0 [0171.444] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GetModuleHandleA") returned 0x7ffb90a5e6d0 [0171.445] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GetModuleFileNameW") returned 0x7ffb90a5eca0 [0171.445] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="CreateFileA") returned 0x7ffb90a65760 [0171.445] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GetFileSizeEx") returned 0x7ffb90a65960 [0171.446] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="WriteFile") returned 0x7ffb90a65b80 [0171.446] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GetLogicalDrives") returned 0x7ffb90a566d0 [0171.447] GetProcAddress (hModule=0x7ffb8d140000, lpProcName="WNetEnumResourceW") returned 0x7ffb8d1427d0 [0171.447] GetProcAddress (hModule=0x7ffb8f2f0000, lpProcName="RegOpenKeyExW") returned 0x7ffb8f306cb0 [0171.448] GetProcAddress (hModule=0x7ffb8d140000, lpProcName="WNetCloseEnum") returned 0x7ffb8d142e20 [0171.448] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GetWindowsDirectoryW") returned 0x7ffb90a62940 [0171.448] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="SetFileAttributesA") returned 0x7ffb90a65af0 [0171.449] GetProcAddress (hModule=0x7ffb8f2f0000, lpProcName="RegOpenKeyExA") returned 0x7ffb8f307d70 [0171.449] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="SetFilePointer") returned 0x7ffb90a65b20 [0171.450] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GetTickCount") returned 0x7ffb90a560a0 [0171.450] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GetFileAttributesW") returned 0x7ffb90a65930 [0171.451] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="FindFirstFileW") returned 0x7ffb90a65840 [0171.451] GetProcAddress (hModule=0x7ffb8f2f0000, lpProcName="CryptAcquireContextW") returned 0x7ffb8f3089e0 [0171.451] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="MoveFileExW") returned 0x7ffb90a63010 [0171.452] GetProcAddress (hModule=0x7ffb8d140000, lpProcName="WNetOpenEnumW") returned 0x7ffb8d142f20 [0171.452] GetProcAddress (hModule=0x7ffb90fb0000, lpProcName="CoInitialize") returned 0x7ffb90fc3870 [0171.453] GetProcAddress (hModule=0x7ffb8f2f0000, lpProcName="CryptDecrypt") returned 0x7ffb8f309140 [0171.453] GetProcAddress (hModule=0x7ffb8f2f0000, lpProcName="CryptImportKey") returned 0x7ffb8f307b40 [0171.453] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="SetFilePointerEx") returned 0x7ffb90a65b30 [0171.454] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="CopyFileW") returned 0x7ffb90a65d70 [0171.454] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="FreeLibrary") returned 0x7ffb90a5eb90 [0171.455] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="CreateProcessW") returned 0x7ffb90a5dee0 [0171.455] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="CreateDirectoryW") returned 0x7ffb90a65740 [0171.455] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="CreateThread") returned 0x7ffb90a5bc20 [0171.456] GetProcAddress (hModule=0x7ffb8f2f0000, lpProcName="CryptDestroyKey") returned 0x7ffb8f3086b0 [0171.456] GetProcAddress (hModule=0x7ffb90fb0000, lpProcName="CoCreateInstance") returned 0x7ffb8ec77000 [0171.457] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="CreateFileW") returned 0x7ffb90a65770 [0171.457] GetProcAddress (hModule=0x7ffb90a40000, lpProcName="GetFileAttributesA") returned 0x7ffb90a65900 [0171.457] GetProcAddress (hModule=0x7ffb8f2f0000, lpProcName="CryptEncrypt") returned 0x7ffb8f30d7e0 [0171.458] GetProcAddress (hModule=0x7ffb8f2f0000, lpProcName="RegDeleteValueW") returned 0x7ffb8f3090b0 [0171.458] GetVersionExW (in: lpVersionInformation=0xd76b04f430*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0xd76b04f430*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x2800, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0171.458] GetWindowsDirectoryW (in: lpBuffer=0xd76b04f4e0, uSize=0x32 | out: lpBuffer="C:\\Windows") returned 0xa [0171.458] SetLastError (dwErrCode=0x0) [0171.458] CreateFileW (lpFileName="C:\\users\\Public\\sys" (normalized: "c:\\users\\public\\sys"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0xffffffffffffffff [0171.458] GetLastError () returned 0x5 [0171.458] CreateFileW (lpFileName="C:\\users\\Public\\sys" (normalized: "c:\\users\\public\\sys"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0xffffffffffffffff [0171.459] Sleep (dwMilliseconds=0x1388) [0180.917] GetVersionExW (in: lpVersionInformation=0xd76b04eb40*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0xd76b04eb40*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x2800, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0180.917] GetWindowsDirectoryW (in: lpBuffer=0x7ff74ec4bdc0, uSize=0x64 | out: lpBuffer="C:\\Windows") returned 0xa [0180.917] GetWindowsDirectoryW (in: lpBuffer=0x7ff74ec4ce50, uSize=0x140 | out: lpBuffer="C:\\Windows") returned 0xa [0180.917] CreateFileW (lpFileName="C:\\users\\Public\\PUBLIC" (normalized: "c:\\users\\public\\public"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0180.918] ExitProcess (uExitCode=0x1)